1PORTNAME=	ca_root_nss
2PORTVERSION=	${VERSION_NSS}
3PORTREVISION=	2
4CATEGORIES=	security
5MASTER_SITES=	MOZILLA/security/nss/releases/${DISTNAME:tu:C/[-.]/_/g}_RTM/src
6DISTNAME=	nss-${VERSION_NSS}${NSS_SUFFIX}
7
8MAINTAINER=	ports@MidnightBSD.org
9COMMENT=	The root certificate bundle from the Mozilla Project
10
11LICENSE=	MPL20
12LICENSE_FILE=	${WRKSRC}/COPYING
13
14SKIP_FAKE_CHECK=	openssl/cert.pem \
15			etc/ssl/cert.pem
16
17USES=		perl5 ssl:build
18USE_PERL5=	build
19
20NO_ARCH=	yes
21WRKSRC_SUBDIR=	nss
22
23OPTIONS_DEFINE=		ETCSYMLINK
24OPTIONS_DEFAULT=	ETCSYMLINK
25
26OPTIONS_SUB=		yes
27
28ETCSYMLINK_DESC=	Add symlinks to default bundle locations
29ETCSYMLINK_CONFLICTS_INSTALL=	ca-roots-[0-9]*
30
31CERTDIR?=	share/certs
32PLIST_SUB+=	CERTDIR=${CERTDIR}
33
34VERSION_NSS=	3.117
35CERTDATA_TXT_PATH=	lib/ckfw/builtins/certdata.txt
36BUNDLE_PROCESSOR=	MAca-bundle.pl
37
38CERTCTL_CMD?=	/usr/sbin/certctl
39
40SUB_FILES=	MAca-bundle.pl pkg-deinstall pkg-install pkg-message
41SUB_LIST=	CERTCTL_CMD=${CERTCTL_CMD} VERSION_NSS=${VERSION_NSS}
42
43do-build:
44	@${SETENV} PATH=${LOCALBASE}/bin:$${PATH} \
45		${PERL} ${WRKDIR}/${BUNDLE_PROCESSOR} \
46	    < ${WRKSRC}/${CERTDATA_TXT_PATH} > \
47	    ${WRKDIR}/ca-root-nss.crt
48
49do-install:
50	${MKDIR} ${PREFIX}/${CERTDIR}
51	${INSTALL_DATA} ${WRKDIR}/ca-root-nss.crt ${PREFIX}/${CERTDIR}
52	${MKDIR} ${PREFIX}/etc/ssl
53	${LN} -sf ../../${CERTDIR}/ca-root-nss.crt ${PREFIX}/etc/ssl/cert.pem.sample
54
55do-install-ETCSYMLINK-on:
56	${MKDIR} ${FAKE_DESTDIR}${PREFIX}/openssl
57	${LN} -sf ../etc/ssl/cert.pem ${FAKE_DESTDIR}${PREFIX}/openssl/cert.pem
58	${MKDIR} ${FAKE_DESTDIR}/etc/ssl
59	${LN} -sf ../..${PREFIX}/etc/ssl/cert.pem ${FAKE_DESTDIR}/etc/ssl/cert.pem
60
61.include <bsd.port.mk>
62