diff options
| author | Ophestra <cat@gensokyo.uk> | 2026-08-27 00:05:29 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2026-08-27 00:05:29 +0900 |
| commit | 02dea6d29cf7cf4595861082a464e94c76247bd7 (patch) | |
| tree | 9cb9cafd26d0c5dcb4d0e23517c98211094e79e0 | |
| parent | 717e81056de3c71980d45f5328741fc3664ef508 (diff) | |
internal/rosa/package/nss: use certdata.txt directly
Nothing actually uses NSS itself, so compiling it is pointless.
Signed-off-by: Ophestra <cat@gensokyo.uk>
| -rw-r--r-- | internal/rosa/package/nss.az | 66 |
1 files changed, 3 insertions, 63 deletions
diff --git a/internal/rosa/package/nss.az b/internal/rosa/package/nss.az index 890df398..45de2ae4 100644 --- a/internal/rosa/package/nss.az +++ b/internal/rosa/package/nss.az @@ -1,19 +1,5 @@ -package nspr { - description = "nspr source tree"; - anitya = 7953; - exclude = true; - - version# = "4.40"; - output = remoteTar { - url = "https://ftp.mozilla.org/pub/nspr/releases/v"+version+ - "/src/nspr-"+version+".tar.gz"; - checksum = "ku6h1DpeUalAUz4suFlLNRgk3N7VEHh7noIECbYEz7C_3bwU13CiLHf35OutbYqN"; - compress = gzip; - }; -} - -package nss { - description = "Network Security Services"; +package nss-cacert { + description = "bundle of X.509 certificates of public Certificate Authorities"; website = "https://firefox-source-docs.mozilla.org/security/nss/index.html"; anitya = 2503; @@ -30,52 +16,6 @@ package nss { }+"_RTM"; checksum = "lzeKROXahSWqIgxYtm29lTxIfo-nmNYaS-cE-FFKp1C58wIBhmGhwVsRh-4xiQi7"; }; - extra = [ nspr ]; - - enterSource = true; - writable = true; - chmod = true; - early = "\nln -s extra/nspr/nspr /usr/src/nspr\nchmod +w ../nspr/\n"; - - exec = make { - defaults = false; - chdir = false; - configure = nil; - make = [ - "CCC=clang++", - "NSDISTMODE=copy", - "BUILD_OPT=1", - "USE_64=1", - "nss_build_all", - ]; - check = nil; - install = ` -cp -r \ - /usr/src/dist/. \ - lib/ckfw/builtins/certdata.txt \ - /work/ -`; - }; - - inputs = [ - perl, - python, - awk, - coreutils, - - zlib, - kernel-headers, - ]; - - runtime = [ zlib ]; -} - -package nss-cacert { - description = "bundle of X.509 certificates of public Certificate Authorities"; - website = "https://curl.se/docs/caextract.html"; - version = unversioned; - - source = nss; enterSource = true; exec = generic { @@ -83,7 +23,7 @@ package nss-cacert { build = ` mkdir -p /work/system/etc/ssl/{certs/unbundled,certs/hashed,trust-source} buildcatrust \ - --certdata_input certdata.txt \ + --certdata_input lib/ckfw/builtins/certdata.txt \ --ca_bundle_output /work/system/etc/ssl/certs/ca-bundle.crt \ --ca_standard_bundle_output /work/system/etc/ssl/certs/ca-no-trust-rules-bundle.crt \ --ca_unpacked_output /work/system/etc/ssl/certs/unbundled \ |
