buildroot/package/ca-certificates, branch 2019.02-op-build

package/ca-certificates: create ca-certificates.crt reproducibly

2018-10-21T13:36:32+00:00

Sort the certificates into alphabetical order so the contents of ca-certificates.crt can be built reproducibly. Note: The certificates are sorted uppercase then lowercase filenames so the contents of ca-certificates.crt matches the source debian package. Signed-off-by: Martin Bark Signed-off-by: Arnout Vandecappelle (Essensium/Mind)

package/ca-certificates: fix rebuilds

2018-10-21T13:34:46+00:00

Rebuilding ca-certificates using make ca-certificates-rebuild caused duplicate certificates to be installed in the target. Its build system is broken: it doesn't detect that the output file already exists, and instead of overwriting it, a duplicate is generated under a different name. The net effect is that all certificates are installed twice after rebuild. Fix this by cleaning the build directory before building the package. Signed-off-by: Martin Bark Signed-off-by: Arnout Vandecappelle (Essensium/Mind)

package/ca-certificates: don't hash certificates.crt

2018-10-21T13:33:31+00:00

c_rehash looks at all files in /etc/ssl/certs, generates the hash for the certificates in them, and makes a symlink from the hash to the certificate file. However, ca-certificates.crt is also installed in /etc/ssl/certs and it contains all the certificates. c_rehash will take one of them (the first?) and create a symlink from that hash to ca-certificates.crt. Usually, this results in an error like: WARNING: Skipping duplicate certificate ca-certificates.crt and all is well. However, depending on filesystem order, ca-certificates.crt may come first, and the actual certificate is not symlinked. To fix this install certificates.crt to /etc/ssl/certs *after* we run c_rehash to prevent it getting hashed by mistake. Note: $(TARGET_DIR)/etc/ssl/certs/ is already removed during install so this fix also works for rebuilds. Signed-off-by: Martin Bark Signed-off-by: Arnout Vandecappelle (Essensium/Mind)

package/ca-certificates: bump version to 20180409

2018-05-29T06:52:39+00:00

Update Mozilla certificate authority bundle to version 2.22. The following certificate authorities were added (+): + "GDCA TrustAUTH R5 ROOT" + "SSL.com EV Root Certification Authority ECC" + "SSL.com EV Root Certification Authority RSA R2" + "SSL.com Root Certification Authority ECC" + "SSL.com Root Certification Authority RSA" + "TrustCor ECA-1" + "TrustCor RootCert CA-1" + "TrustCor RootCert CA-2" The following certificate authorities were removed (-): - "ACEDICOM Root" - "AddTrust Low-Value Services Root" - "AddTrust Public Services Root" - "AddTrust Qualified Certificates Root" - "CA Disig Root R1" - "CNNIC ROOT" - "Camerfirma Chambers of Commerce Root" - "Camerfirma Global Chambersign Root" - "Certinomis - Autorité Racine" - "Certum Root CA" - "China Internet Network Information Center EV Certificates Root" - "Comodo Secure Services root" - "Comodo Trusted Services root" - "DST ACES CA X6" - "GeoTrust Global CA 2" - "PSCProcert" - "Security Communication EV RootCA1" - "Swisscom Root CA 1" - "Swisscom Root CA 2" - "Swisscom Root EV CA 2" - "TURKTRUST Certificate Services Provider Root 2007" - "TUBITAK UEKAE Kok Sertifika Hizmet Saglayicisi - Surum 3" - "UTN USERFirst Hardware Root CA" Signed-off-by: Martin Bark Signed-off-by: Peter Korsgaard

ca-certificates: bump to version 20170717

2018-01-30T21:50:03+00:00

Signed-off-by: Martin Bark Signed-off-by: Peter Korsgaard

Globally replace $(HOST_DIR)/usr/bin with $(HOST_DIR)/bin

2017-07-05T13:19:29+00:00

Since things are no longer installed in $(HOST_DIR)/usr, the callers should also not refer to it. This is a mechanical change with git grep -l '$(HOST_DIR)/usr/bin' | xargs sed -i 's%$(HOST_DIR)/usr/bin%$(HOST_DIR)/bin%g' Signed-off-by: Arnout Vandecappelle (Essensium/Mind) Signed-off-by: Thomas Petazzoni

package/c*/Config.in: fix help text wrapping

2017-05-11T21:28:01+00:00

The check-package script when ran gives warnings on text wrapping on all of these Config files. This patch cleans up all warnings related to the text wrapping for the Config files starting with the letter c in the package directory. The appropriate indentation is: <2 spaces><62 chars> See http://nightly.buildroot.org/#writing-rules-config-in for more information. Signed-off-by: Adam Duskett Signed-off-by: Thomas Petazzoni

package: use SPDX short identifier for MPL family licenses

2017-04-01T13:27:47+00:00

We want to use SPDX identifier for license string as much as possible. SPDX short identifier for MPLv1.0/MPLv1.1/MPLv2.0 is MPL-1.0/MPL-1.1/ MPL-2.0. This change is done using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/MPLv([1-2]\.[0-1])/MPL-\1/g' Signed-off-by: Rahul Bedarkar Signed-off-by: Thomas Petazzoni

boot, linux, package: use SPDX short identifier for GPLv2/GPLv2+

2017-04-01T13:16:38+00:00

We want to use SPDX identifier for license strings as much as possible. SPDX short identifier for GPLv2/GPLv2+ is GPL-2.0/GPL-2.0+. This change is done by using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/\/GPL-2.0/g' Signed-off-by: Rahul Bedarkar Signed-off-by: Thomas Petazzoni

ca-certificates: bump to version 20161130

2017-01-04T16:02:12+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard