nss/trunk/bundle.sh

   1 #!/bin/sh
   2 # From Fedora's ca-certificates.spec
   3
   4 (
   5   cat <<EOF
   6 # This is a bundle of X.509 certificates of public Certificate
   7 # Authorities.  It was generated from the Mozilla root CA list.
   8 # These certificates and trust/distrust attributes use the file format accepted
   9 # by the p11-kit-trust module.
  10 #
  11 # Source: nss/lib/ckfw/builtins/certdata.txt
  12 # Source: nss/lib/ckfw/builtins/nssckbi.h
  13 #
  14 # Generated from:
  15 EOF
  16   cat certs/nssckbi.h | grep -w NSS_BUILTINS_LIBRARY_VERSION | awk '{print "# " $2 " " $3}'
  17   echo '#'
  18 ) > ca-bundle.trust.p11-kit
  19
  20 for p in certs/*.tmp-p11-kit; do
  21   cat "$p" >> ca-bundle.trust.p11-kit
  22 done