package/ca-certificates: don't hash certificates.crt
authorMartin Bark <martin@barkynet.com>
Sat, 16 Jun 2018 22:05:59 +0000 (23:05 +0100)
committerArnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Sun, 21 Oct 2018 13:33:31 +0000 (14:33 +0100)
commitd07ddd8e4ed576dbce4c33ab006f342e24d3bd6b
tree48668d47ce9171e3b59f943fdad540b384cafa0d
parent26034b8663f8c084ec9100f429d8ff6c046a9fa3
package/ca-certificates: don't hash certificates.crt

c_rehash looks at all files in /etc/ssl/certs, generates the hash for
the certificates in them, and makes a symlink from the hash to the
certificate file.

However, ca-certificates.crt is also installed in /etc/ssl/certs and
it contains all the certificates. c_rehash will take one of them (the
first?) and create a symlink from that hash to ca-certificates.crt.
Usually, this results in an error like:

WARNING: Skipping duplicate certificate ca-certificates.crt

and all is well. However, depending on filesystem order,
ca-certificates.crt may come first, and the actual certificate is
not symlinked.

To fix this install certificates.crt to /etc/ssl/certs *after* we run
c_rehash to prevent it getting hashed by mistake.

Note: $(TARGET_DIR)/etc/ssl/certs/ is already removed during install so
this fix also works for rebuilds.

Signed-off-by: Martin Bark <martin@barkynet.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
package/ca-certificates/ca-certificates.mk