new blfs: app-crypt/p11-kit-0.25.5

app-crypt/p11-kit-0.25.5.PKGBUILD

@@ -0,0 +1,43 @@
+pkgname=p11-kit
+pkgver=0.25.5
+pkgdesc="Loads and enumerates PKCS#11 modules"
+url="https://p11-glue.freedesktop.org"
+arch=(x86_64)
+license=(BSD-3-Clause)
+sources=("${pkgname}-${pkgver}.tar.xz")
+urls=("https://github.com/p11-glue/p11-kit/releases/download/${pkgver}/${sources[0]}")
+md5sums=("e9c5675508fcd8be54aa4c8cb8e794fc")
+
+src_prepare() {
+  tar -xf ${distdir}/${sources[0]} --strip-components=1
+  sed '20,$ d' -i trust/trust-extract-compat &&
+
+  cat >> trust/trust-extract-compat << "EOF"
+# Copy existing anchor modifications to /etc/ssl/local
+/usr/libexec/make-ca/copy-trust-modifications
+
+# Update trust stores
+/usr/sbin/make-ca -r
+EOF
+}
+
+src_build() {
+  meson setup               \
+        --prefix=/usr       \
+        --buildtype=release \
+        -D trust_paths=/etc/pki/anchors \
+        build &&
+  meson compile -C build
+}
+
+src_check() {
+  meson test -C build --print-errorlogs
+}
+
+src_install() {
+  meson install -C build --destdir "$pkgdir"
+  ln -sfv ../libexec/p11-kit/trust-extract-compat \
+        ${pkgdir}/usr/bin/update-ca-certificates
+  install -d -m755 ${pkgdir}/usr/lib/
+  ln -sfv ./pkcs11/p11-kit-trust.so ${pkgdir}/usr/lib/libnssckbi.so
+}

app-misc/make-ca-1.16.1.PKGBUILD

@@ -0,0 +1,39 @@
+pkgname="make-ca"
+pkgver=1.16.1
+pkgdesc="Mozilla's set of trusted CA certificates"
+homepage="https://firefox-source-docs.mozilla.org/security/nss/index.html"
+arch=(x86_64)
+license=(MPL-2.0)
+sources=("${pkgname}-${pkgver}.tar.gz"
+  "pythoncerts.sh"
+)
+urls=("https://github.com/lfs-book/make-ca/archive/v${pkgver}/${sources[0]}"
+  "pythoncerts.sh"
+)
+md5sums=("bf9cea2d24fc5344d4951b49f275c595"
+  "e04ade84d0092e803bcba2b70ae349d3"
+)
+
+src_prepare() {
+  tar -xf ${distdir}/${sources[0]} --strip-components=1
+}
+
+src_build() {
+  :
+}
+
+src_check() {
+  :
+}
+
+src_install() {
+  make DESTDIR="${pkgdir}" install &&
+  install -vdm755 "${pkgdir}"/etc/ssl/local
+  install -vDm644 ${distdir}/${sources[1]} ${pkgdir}/etc/profile.d/${sources[1]}
+}
+
+src_postinstall() {
+  /usr/sbin/make-ca -g &&
+  systemctl enable update-pki.timer
+}
+

app-misc/make-ca-1.16.1/pythoncerts.sh

@@ -0,0 +1,3 @@
+# /etc/profile.d/pythoncerts.sh
+
+export _PIP_STANDALONE_CERT=/etc/pki/tls/certs/ca-bundle.crt

dev-libs/libtasn1-4.20.0.PKGBUILD

@@ -0,0 +1,29 @@
+pkgname=libtasn1
+pkgver=4.20.0
+pkgdesc="The ASN.1 library used in GNUTLS"
+arch=('x86_64')
+license=('GPL-3.0-or-later' 'LGPL-2.1-or-later' 'GFDL-1.3-or-later')
+homepage="https://www.gnu.org/software/libtasn1/"
+sources=("${pkgname}-${pkgver}.tar.gz")
+urls=("https://ftp.gnu.org/gnu/${pkgname}/${sources[0]}")
+md5sums=("930f71d788cf37505a0327c1b84741be")
+
+src_prepare() {
+  tar -xf ${distdir}/${sources[0]} --strip-components=1
+}
+
+src_build() {
+  ./configure --prefix=/usr --disable-static &&
+  make
+}
+
+src_check() {
+  make check
+}
+
+src_install() {
+  make DESTDIR="${pkgdir}" install
+  make DESTDIR="${pkgdir}" -C doc/reference install-data-local
+  install -m755 -d "${pkgdir}/usr/share/licenses/${pkgname}"
+  install -m644 COPYING "${pkgdir}/usr/share/licenses/${pkgname}/"
+}