description="Certificate Authority certificates, the Public Key Infrastructure."
url="http://mxr.mozilla.org/mozilla/source/security/nss/lib/ckfw/builtins/certdata.txt?raw=1"
packager="tnut <tnut@nutyx.org>"

name=ca-certificates
version=20170514
release=1

source=(http://anduin.linuxfromscratch.org/BLFS/other/make-ca.sh-$version
	http://anduin.linuxfromscratch.org/BLFS/other/certdata.txt
	http://www.cacert.org/certs/root.crt)

build() {

install -vdm755 $PKG/{usr/sbin,etc/ssl/local}

OPENSSL="`which openssl`"

$OPENSSL x509 -in root.crt -text -fingerprint -setalias "CAcert Class 1 root" \
   -addtrust serverAuth -addtrust emailProtection -addtrust codeSigning \
   > $PKG/etc/ssl/local/CAcert_Class_1_root.pem

cp certdata.txt $PKG/etc/ssl
install -vm755 make-ca.sh-$version $PKG/usr/sbin/make-ca.sh

$PKG/usr/sbin/make-ca.sh -D $PKG
}