123456789101112131415161718192021222324252627282930313233343536373839404142434445 |
- #!/bin/bash
- install -d /{etc,usr/share}/ca-certificates/trust-source/{anchors,blacklist}
- install -d /etc/{ssl/certs/java,ca-certificates/extracted}
- ln -sr "/etc/ca-certificates/extracted/tls-ca-bundle.pem" "/etc/ssl/cert.pem"
- ln -sr "/etc/ca-certificates/extracted/tls-ca-bundle.pem" "/etc/ssl/certs/ca-certificates.crt"
- DEST=/etc/ca-certificates/extracted
- extract() {
- trust extract --overwrite "$@"
- }
- extract --format=pem-directory-hash --filter=ca-anchors --purpose=server-auth $DEST/cadir
- extract --comment --format=pem-bundle --filter=ca-anchors --purpose=server-auth $DEST/tls-ca-bundle.pem
- extract --comment --format=pem-bundle --filter=ca-anchors --purpose=email $DEST/email-ca-bundle.pem
- extract --comment --format=pem-bundle --filter=ca-anchors --purpose=code-signing $DEST/objsign-ca-bundle.pem
- extract --comment --format=openssl-bundle --filter=certificates $DEST/ca-bundle.trust.crt
- for f in $DEST/cadir/*; do
- ln -fsr -t /etc/ssl/certs "$f"
- done
- find -L /etc/ssl/certs -maxdepth 1 -type l -delete
- extract --format=java-cacerts --filter=ca-anchors --purpose=server-auth /etc/ssl/certs/java/cacerts
|