aboutsummaryrefslogtreecommitdiffstats
path: root/main/ca-certificates
Commit message (Collapse)AuthorAgeFilesLines
* main/ca-certificates: ditch python dep, symlink ca-certificates.crtNatanael Copa2020-03-053-13/+921
| | | | | | | | | | | replace the python script with a perl+shell script to extract the certs. This helps us to avoid pull in python when bootstrapping. rename ca-certificates-cacert to ca-certificates-bundle, which is a better name for the precompiled bundle. We also ship a pregenerated ca-certificates.crt file and a /etc/ssl/cert.pem symlink. (fixes #10678)
* main/ca-certificates: fix bundle with certs without newlineNatanael Copa2020-02-062-4/+44
| | | | | | | | backport fix that adds newline to each cert in the bundle. The reason is that trailing newline is no requirement so self generated certs may not have it. ref #8379
* main/ca-certificates: upgrade to 20191127Natanael Copa2019-12-181-2/+2
|
* orphan all of my packagesWilliam Pitcock2019-03-261-1/+1
|
* main/ca-certificates: fix cross-compilingalpine-mips-patches2019-02-051-1/+2
|
* main/ca-certificates: upgrade to 20190108Natanael Copa2019-01-292-35/+4
| | | | fixes #9935
* main/ca-certificates: allow cacert to replace libressl2.7-libcryptoCarlo Landmeter2019-01-061-1/+2
|
* main/ca-certificates: add bundled certificatesCarlo Landmeter2019-01-061-2/+9
| | | | | | Provide a concatenated file of certificates from mozilla suitable for places where ca-certificates is overkill. This was previously provided by libressl libtls package.
* main/ca-certificates: rebuild against openssl 1.1Natanael Copa2018-11-071-2/+2
|
* main/ca-certificates: upgrade to 20180924Natanael Copa2018-09-252-4/+35
|
* main/openssl: rename to openssl1.0 and update dependent aportsJakub Jirutka2018-07-081-2/+2
|
* main/ca-certificates: rebuild against libressl-2.7Natanael Copa2018-04-061-1/+1
|
* [various]: unify names of licenses according to SPDXJakub Jirutka2017-12-301-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit updates $license variable in all APKBUILDs to comply with short names specified by SPDX version 3.0 [1] where possible. It was done using find-and-replace method on substrings inside $license variables. Only license names were updated, not "expressions" specifying relation between the licenses (e.g. "X and Y", "X or Y", "X and (Y or Z)") or exceptions (e.g. "X with exceptions"). Many licenses have a version or multiple variants, e.g. MPL-2.0, BSD-2-Clause, BSD-3-Clause. However, $license in many aports do not contain license version or variant. Since there's no way how to infer this information just from abuild, it were left without the variant suffix or version, i.e. non SPDX compliant. GNU licenses (AGPL, GFDL, GPL, LGPL) are especially complicated. They exist in two variants: -only (formerly e.g. GPL-2.0) and -or-later (formerly e.g. GPL-2.0+). We did not systematically noted distinguish between these variants, so GPL-2.0, GPL2, GPLv2 etc. may mean GPL-2.0-only or GPL-2.0-or-later. Thus GNU licenses without "+" (e.g. GPL2+) were left without the variant suffix, i.e. non SPDX compliant. Note: This commit just fixes format of the license names, no verification has been done if the specified license information is actually correct! [1]: https://spdx.org/licenses/
* main/ca-certificates: upgrade to 20171114William Pitcock2017-11-141-3/+3
|
* main/ca-certificates: rebuild against libressl-2.6Natanael Copa2017-11-091-1/+1
|
* main/ca-certificates: upgrade to 20170801William Pitcock2017-08-027-28904/+8
|
* main/ca-certificates: refactor basing directly upon mozilla's certdata.txtWilliam Pitcock2017-07-266-46/+28153
|
* main/ca-certificates: rebuild against libressl 2.5Natanael Copa2017-04-181-1/+1
|
* main/ca-certificates: alpine 3.4 has c_rehash in openssl binary, replaces ↵William Pitcock2017-03-231-2/+3
| | | | needs adjusting
* main/ca-certificates: build fix for ppc64leNatanael Copa2017-03-172-3/+4
|
* main/ca-certificates: upgrade to 20161130Natanael Copa2016-12-111-5/+5
|
* main/ca-certificates: replaces libcrypto1.0 (c_rehash)Timo Teräs2016-11-231-1/+2
|
* main/ca-certificates: add really the c_rehash sourcesTimo Teräs2016-11-231-0/+375
|
* main/ca-certificates: add copy of c_rehash toolTimo Teräs2016-11-231-7/+17
| | | | | | | | | | | | We want to avoid ca-certificates dependency for openssl tool for two reasons: - it is very large to be mandatory dependency - it disallows user choosing if openssl or libressl package should be installed Neither the openssl c_rehash nor libressl certhash can be any longer compiled standalone. So include the original c_rehash.c code that was submitted for openssl inclusion that can be built standalone.
* main/ca-certificates: improve abuild, replace python with python2Jakub Jirutka2016-10-241-27/+19
|
* main/ca-certificates: use libressl certhashNatanael Copa2016-10-101-5/+5
|
* main/ca-certificates: fix fallback for sendfile(2)Natanael Copa2016-08-052-5/+5
| | | | fix return value and errno check
* main/ca-certificates: clean up /etc/ssl/certs in deinstallNatanael Copa2016-04-082-1/+9
| | | | fixes #5382
* main/ca-certificates: sendfile fix update-ca-certificatesNatanael Copa2016-04-082-5/+39
| | | | | fallback to read(2)/write(2) in case sendfile is not supported by kernel or blockdevice/filesystem
* main/ca-certificates: update openssl c_rehash dependencyTimo Teräs2016-03-111-1/+1
| | | | it was moved to libcrypto1.0
* main/ca-certificates: improve run-parts executionNatanael Copa2016-01-142-7/+9
| | | | | Do not depend on PATH for run-parts, instead we try /usr/bin/run-parts and /bin/run-parts directly. Exit with error if it fails.
* main/ca-certificates: run c_rehash as a hook from update.dNatanael Copa2016-01-144-98/+41
| | | | | | | | instead of running c_rehash directly we run it as a hook from update.d. We also: - update the man-page to be more correct. - remove obsolete lua script
* main/ca-certificates: upgrade to 20160104Sören Tempel2016-01-111-13/+9
|
* main/ca-certificates: fix and optimize update-ca-certificatesTimo Teräs2015-11-112-157/+150
| | | | fixes #4772
* main/ca-certificates: fix update-ca.cTimo Teräs2015-10-162-6/+6
| | | | | - fix permissions for the .crt bundle - fix exec of c_rehash
* main/ca-certificates: replace update-ca-certificates implementationNatanael Copa2015-10-152-8/+346
| | | | | Use C implementation to avoid Lua dependency. https://github.com/xynopsis/update_ca_cert
* main/ca-certificates: upgrade to 20150426Carlo Landmeter2015-06-251-5/+5
|
* main/ca-certificates: fix bug in processing of local CA certificatesAndy Shinn2015-05-062-6/+5
| | | | | | | | | We were only grabbing the index of the certlist table, which was making the filename appear as a number. It would seem like the seem like the second variables from the pairs() function is the actual name we want. [Timo: changed to use lua scratch '_' for the first return value, and use ipairs as it is numbered table.]
* main/ca-certificates: fix update-ca-certificatesNatanael Copa2015-04-102-5/+5
| | | | lua posix has changed api. update accordingly
* main/ca-certificates: upgrade to 20141019Natanael Copa2014-10-301-7/+7
|
* main/ca-certificates: fix buildTimo Teräs2014-04-231-0/+1
| | | | override to allow having /usr/local
* main/ca-certificates: add local certs directory to packagingTimo Teräs2014-04-221-2/+3
|
* main/update-ca-certificates: fix few minor issues in lua versionTimo Teräs2014-04-212-32/+35
| | | | also optimize and cleanup the lua code a bit too. ref #2846
* main/ca-certificates: rewrite update-ca-certificates in luaTimo Teräs2014-04-213-10/+103
| | | | | fix also overlay protected paths to exclude generated links. ref #2846
* main/ca-certificates: upgrade to 20140325Natanael Copa2014-04-011-6/+6
|
* main/ca-certificates: exclude autogenerated ca-certificates.crt from overlayNatanael Copa2014-03-041-1/+6
| | | | ref #2715
* main/ca-certificates: split manpage into -doc subpackageEivind Uggedal2013-12-021-1/+2
|
* main/ca-certificates: specify licenseFabian Affolter2013-10-301-1/+3
|
* main/ca-certificates: upgrade to 20130906Natanael Copa2013-10-021-5/+5
|
* main/ca-certificates: upgrade to 20130610Natanael Copa2013-07-241-2/+4
|