2019-05-14 20:05:50 +00:00
|
|
|
#!/bin/sh -e
|
2019-08-25 01:44:48 +00:00
|
|
|
#
|
|
|
|
# ca-certificates version is based on commit?
|
|
|
|
# There's no upstream version at all?!?!?
|
|
|
|
# Not sure what to do here.
|
2019-08-27 09:25:37 +00:00
|
|
|
#
|
|
|
|
# Source: https://hg.mozilla.org/mozilla-central/file/tip/security/nss/lib/ckfw/builtins/certdata.txt
|
2019-05-13 14:32:56 +00:00
|
|
|
|
2019-08-25 01:44:48 +00:00
|
|
|
cat > blacklist.txt <<EOF
|
|
|
|
"Distrust: O=Egypt Trust, OU=VeriSign Trust Network (cert 1/3)"
|
|
|
|
"Distrust: O=Egypt Trust, OU=VeriSign Trust Network (cert 2/3)"
|
|
|
|
"Distrust: O=Egypt Trust, OU=VeriSign Trust Network (cert 3/3)"
|
|
|
|
"Explicitly Distrust DigiNotar Root CA"
|
|
|
|
"Explicitly Distrusted DigiNotar PKIoverheid G2"
|
|
|
|
"MITM subCA 1 issued by Trustwave"
|
|
|
|
"MITM subCA 2 issued by Trustwave"
|
|
|
|
"TURKTRUST Mis-issued Intermediate CA 1"
|
|
|
|
"TURKTRUST Mis-issued Intermediate CA 2"
|
|
|
|
EOF
|
2019-05-12 13:15:19 +00:00
|
|
|
|
2019-08-25 01:44:48 +00:00
|
|
|
gcc certdata2pem.c -o certdata2pem
|
|
|
|
./certdata2pem certdata.txt
|
2019-05-12 13:15:19 +00:00
|
|
|
|
2019-08-25 01:44:48 +00:00
|
|
|
install -m0755 -d "$1/usr/share/ca-certificates/mozilla"
|
2019-08-13 23:39:34 +00:00
|
|
|
install -m0755 -d "$1/usr/bin"
|
|
|
|
install -m0755 -d "$1/etc/ssl/certs"
|
2019-05-12 13:15:19 +00:00
|
|
|
|
2019-08-25 01:44:48 +00:00
|
|
|
cp ./*.crt "$1/usr/share/ca-certificates/mozilla"
|
|
|
|
cp update-ca-certificates "$1/usr/bin"
|
2019-08-13 23:39:34 +00:00
|
|
|
|
2019-08-25 01:44:48 +00:00
|
|
|
cd "$1/usr/share/ca-certificates"
|
|
|
|
find . -name '*.crt' | sort | cut -b3- > "$1/etc/ca-certificates.conf"
|