# This is an example PKGBUILD file. Use this as a start to creating your own,
# and remove these comments. For more information, see 'man PKGBUILD'.
# NOTE: Please fill out the license field for your package! If it is unknown,
# then please put 'unknown'.

# Maintainer: Future Linux Team <future_linux@163.com>
pkgname=ca-certificates
pkgver=$(date -u --iso | sed 's@-@@g')
pkgrel=1
pkgdesc="Mozilla's set of trusted CA certificates"
arch=('x86_64')
url="https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS"
license=('GPL' 'MPL')
depends=('openssl' 'make-ca' 'p11-kit')
source=(http://www.cacert.org/certs/root.crt
	http://www.cacert.org/certs/class3.crt)
sha256sums=(c0e0773a79dceb622ef6410577c19c1e177fb2eb9c623a49340de3c9f1de2560
	f5badaa5da1cc05b110a9492455a2c2790d00c7175dcf3a7bcb5441af71bf84f)


package() {

	install -vdm755 ${pkgdir}/etc/ssl/local

	/usr/sbin/make-ca -g -D  ${pkgdir}

	openssl x509 -in ${srcdir}/root.crt -text -fingerprint -setalias "CAcert Class 1 root" \
		-addtrust serverAuth -addtrust emailProtection -addtrust codeSigning \
		> ${pkgdir}/etc/ssl/local/CAcert_Class_1_root.pem
	openssl x509 -in ${srcdir}/class3.crt -text -fingerprint -setalias "CAcert Class 3 root" \
		-addtrust serverAuth -addtrust emailProtection -addtrust codeSigning \
		> ${pkgdir}/etc/ssl/local/CAcert_Class_3_root.pem

	/usr/sbin/make-ca -r -D  ${pkgdir}

	chmod 755 ${pkgdir}/etc/ssl/certs

}