1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
|
#!/usr/bin/make -f
# -*- makefile -*-
# Uncomment this to turn on verbose mode.
#export DH_VERBOSE=1
d = debian/ca-certificates-java
build: build-stamp
build-stamp:
dh_testdir
rm -rf build
mkdir -p build
set -e; \
yes | \
for crt in $$(find /usr/share/ca-certificates -name '*.crt' -printf '%P '); do \
alias=$$(basename $$crt .crt | tr A-Z a-z | tr -cs a-z0-9 _); \
alias=$${alias%*_}; \
echo "IMPORT: $$crt, alias=$$alias"; \
if keytool -importcert -trustcacerts -keystore build/cacerts \
-storepass 'changeit' \
-alias "$$alias" -file "/usr/share/ca-certificates/$$crt" > keytool.log 2>&1; \
then \
cat keytool.log; \
elif keytool -importcert -trustcacerts -keystore build/cacerts \
-providerClass sun.security.pkcs11.SunPKCS11 \
-providerArg '$${java.home}/lib/security/nss.cfg' \
-storepass 'changeit' \
-alias "$$alias" -file "/usr/share/ca-certificates/$$crt" > keytool.log 2>&1; \
then \
cat keytool.log; \
elif grep -q 'Signature not available' keytool.log; then \
echo "IGNORED IMPORT: $$crt, alias=$$alias"; \
cat keytool.log; \
else \
cat keytool.log; \
false; \
fi; \
done
touch $@
clean:
dh_testdir
dh_testroot
rm -f build-stamp
rm -rf build
rm -f keytool.log
dh_clean
install: build
dh_testdir
dh_testroot
dh_clean -k
dh_installdirs \
usr/share/ca-certificates-java \
etc/default \
etc/ssl/certs/java \
etc/ca-certificates/update.d \
install -m755 debian/jks-keystore.hook \
$(d)/etc/ca-certificates/update.d/jks-keystore
install -m644 build/cacerts \
$(d)/usr/share/ca-certificates-java/
install -m600 debian/default \
$(d)/etc/default/cacerts
# Build architecture-independent files here.
binary-indep: build install
dh_testdir
dh_testroot
dh_installchangelogs
dh_installdocs
dh_compress
dh_fixperms
dh_installdeb
dh_gencontrol
dh_md5sums
dh_builddeb
# Build architecture-dependent files here.
binary-arch: build install
# We have nothing to do by default.
binary: binary-indep binary-arch
.PHONY: build clean binary-indep binary-arch binary install
|
