aboutsummaryrefslogtreecommitdiffhomepage
path: root/internal
diff options
context:
space:
mode:
authorOphestra <cat@gensokyo.uk>2026-08-27 00:05:29 +0900
committerOphestra <cat@gensokyo.uk>2026-08-27 00:05:29 +0900
commit02dea6d29cf7cf4595861082a464e94c76247bd7 (patch)
tree9cb9cafd26d0c5dcb4d0e23517c98211094e79e0 /internal
parent717e81056de3c71980d45f5328741fc3664ef508 (diff)
internal/rosa/package/nss: use certdata.txt directly
Nothing actually uses NSS itself, so compiling it is pointless. Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'internal')
-rw-r--r--internal/rosa/package/nss.az66
1 files changed, 3 insertions, 63 deletions
diff --git a/internal/rosa/package/nss.az b/internal/rosa/package/nss.az
index 890df398..45de2ae4 100644
--- a/internal/rosa/package/nss.az
+++ b/internal/rosa/package/nss.az
@@ -1,19 +1,5 @@
-package nspr {
- description = "nspr source tree";
- anitya = 7953;
- exclude = true;
-
- version# = "4.40";
- output = remoteTar {
- url = "https://ftp.mozilla.org/pub/nspr/releases/v"+version+
- "/src/nspr-"+version+".tar.gz";
- checksum = "ku6h1DpeUalAUz4suFlLNRgk3N7VEHh7noIECbYEz7C_3bwU13CiLHf35OutbYqN";
- compress = gzip;
- };
-}
-
-package nss {
- description = "Network Security Services";
+package nss-cacert {
+ description = "bundle of X.509 certificates of public Certificate Authorities";
website = "https://firefox-source-docs.mozilla.org/security/nss/index.html";
anitya = 2503;
@@ -30,52 +16,6 @@ package nss {
}+"_RTM";
checksum = "lzeKROXahSWqIgxYtm29lTxIfo-nmNYaS-cE-FFKp1C58wIBhmGhwVsRh-4xiQi7";
};
- extra = [ nspr ];
-
- enterSource = true;
- writable = true;
- chmod = true;
- early = "\nln -s extra/nspr/nspr /usr/src/nspr\nchmod +w ../nspr/\n";
-
- exec = make {
- defaults = false;
- chdir = false;
- configure = nil;
- make = [
- "CCC=clang++",
- "NSDISTMODE=copy",
- "BUILD_OPT=1",
- "USE_64=1",
- "nss_build_all",
- ];
- check = nil;
- install = `
-cp -r \
- /usr/src/dist/. \
- lib/ckfw/builtins/certdata.txt \
- /work/
-`;
- };
-
- inputs = [
- perl,
- python,
- awk,
- coreutils,
-
- zlib,
- kernel-headers,
- ];
-
- runtime = [ zlib ];
-}
-
-package nss-cacert {
- description = "bundle of X.509 certificates of public Certificate Authorities";
- website = "https://curl.se/docs/caextract.html";
- version = unversioned;
-
- source = nss;
enterSource = true;
exec = generic {
@@ -83,7 +23,7 @@ package nss-cacert {
build = `
mkdir -p /work/system/etc/ssl/{certs/unbundled,certs/hashed,trust-source}
buildcatrust \
- --certdata_input certdata.txt \
+ --certdata_input lib/ckfw/builtins/certdata.txt \
--ca_bundle_output /work/system/etc/ssl/certs/ca-bundle.crt \
--ca_standard_bundle_output /work/system/etc/ssl/certs/ca-no-trust-rules-bundle.crt \
--ca_unpacked_output /work/system/etc/ssl/certs/unbundled \