summaryrefslogtreecommitdiff
path: root/security
diff options
context:
space:
mode:
Diffstat (limited to 'security')
-rw-r--r--security/linux-rl9-ca-certificates/Makefile69
-rw-r--r--security/linux-rl9-ca-certificates/pkg-plist446
2 files changed, 508 insertions, 7 deletions
diff --git a/security/linux-rl9-ca-certificates/Makefile b/security/linux-rl9-ca-certificates/Makefile
index 5adac7526364..b98e1abfce81 100644
--- a/security/linux-rl9-ca-certificates/Makefile
+++ b/security/linux-rl9-ca-certificates/Makefile
@@ -1,7 +1,7 @@
PORTNAME= ca-certificates
PORTVERSION= 2024.2.69
DISTVERSIONSUFFIX= _v8.0.303-91.4.el9_4
-PORTREVISION= 3
+PORTREVISION= 4
CATEGORIES= security linux
MAINTAINER= emulation@FreeBSD.org
@@ -15,14 +15,69 @@ USE_LINUX_RPM= noarch
OPTIONS_DEFINE= DOCS
+.include <bsd.port.pre.mk>
+
+# Here we perform a dance to properly regenerate the trust store
+
+# 1. We need to run these tools as a non-root user, otherwise they don't pick
+# up our config: https://github.com/p11-glue/p11-kit/blob/1bbd6db36b68cae074b35845c212c7d9a8ba19fe/p11-kit/conf.c#L249-L251
+.if ${UID} == 0
+SU_NOBODY= /usr/bin/su -m nobody -c
+.else
+SU_NOBODY= ${SH} -c
+.endif
+
post-stage:
- cd ${STAGEDIR} && ${LINUXBASE}/bin/sh \
- ./${PREFIX}/usr/bin/update-ca-trust extract \
- -o ./${PREFIX}/etc/pki/ca-trust/extracted
+# 2. Create a hacked copy of update-ca-trust that is permitted to look into
+# user-supplied config.
+ ${SED} '/export P11_KIT_NO_USER_CONFIG=1/d' \
+ ${STAGEDIR}/${PREFIX}/usr/bin/update-ca-trust > \
+ ${WRKDIR}/update-ca-trust-staging
+ ${CHMOD} +x ${WRKDIR}/update-ca-trust-staging
+# 3. Prevent update-ca-trust-staging from operating on ${LINUXBASE}. We want
+# it take inputs from ${STAGEDIR} and output into ${STAGEDIR}.
+# To achieve that, an undocumented feature is employed that can be tracked
+# through the following place in the code:
+# a. https://github.com/p11-glue/p11-kit/blob/1bbd6db36b68cae074b35845c212c7d9a8ba19fe/p11-kit/modules.c#L641-L658
+# b. https://github.com/p11-glue/p11-kit/blob/1bbd6db36b68cae074b35845c212c7d9a8ba19fe/trust/module.c#L409
+# c. https://github.com/p11-glue/p11-kit/blob/1bbd6db36b68cae074b35845c212c7d9a8ba19fe/trust/module.c#L293-L296
+# Without this hack the /bin/trust program always use hardcoded paths that
+# point to ${LINUXBASE} as evidenced by
+# d. https://github.com/p11-glue/p11-kit/blob/1bbd6db36b68cae074b35845c212c7d9a8ba19fe/trust/module.c#L416C77-L416C88
+ ${MKDIR} ${WRKDIR}/.config/pkcs11/modules
+ ${SED} "s|x-init-reserved:|x-init-reserved: paths=${STAGEDIR}/${LINUXBASE}/etc/pki/ca-trust/source:${STAGEDIR}/${LINUXBASE}/usr/share/pki/ca-trust-source|" \
+ ${LINUXBASE}/usr/share/p11-kit/modules/p11-kit-trust.module > \
+ ${WRKDIR}/.config/pkcs11/modules/p11-kit-trust.module
+# 4. If we're building as root, the nobody user wouldn't be able to write into
+# ${STAGEDIR}. Change the owner to allow that.
+.if ${UID} == 0
+ ${CHOWN} -R nobody ${STAGEDIR}
+.endif
+# 5. Run the actual generation step.
+ ${SU_NOBODY} 'cd ${STAGEDIR} && ${LINUXBASE}/bin/env XDG_CONFIG_HOME="${WRKDIR}/.config" \
+ ../update-ca-trust-staging extract \
+ -o ./${PREFIX}/etc/pki/ca-trust/extracted'
+# 6. Reforge symlinks into relative ones to prevent Linuxulator from resolving
+# them into /etc. We want symlink targets to point into /compat/linux/etc.
${FIND} ${STAGEDIR}${PREFIX} -type l -exec \
${SH} -c "tgt=\$$(readlink {}) ; [ \$$tgt != \$${tgt#/} ] && ${RLN} ${STAGEDIR}${PREFIX}\$$tgt {}" \; || ${TRUE}
- cd ${STAGEDIR}${PREFIX} && \
- ${FIND} etc/pki/ca-trust/extracted/pem/directory-hash -type f -or -type l >> ${TMPPLIST}
+# Verify that we actually generated something. To make sure that ${LINUXBASE}
+# does not affect the generation the testing should be performed this way:
+# 1. Get into jail:
+# poudriere testport -i
+# 2. Test with package installed:
+# make test
+# 3. Rebuild with package installed:
+# make clean stage
+# 4. Check that the result is the same:
+# make check-plist test
+# 5. Deinstall the package:
+# make deinstall
+# 6. Check that the result is the same:
+# make test
+do-test:
+ ${SU_NOBODY} '${LINUXBASE}/bin/env XDG_CONFIG_HOME="${WRKDIR}/.config" \
+ /bin/trust list' | wc -l | ((read count ; [ $$count != 0 ]) && ${ECHO_CMD} ok)
-.include <bsd.port.mk>
+.include <bsd.port.post.mk>
diff --git a/security/linux-rl9-ca-certificates/pkg-plist b/security/linux-rl9-ca-certificates/pkg-plist
index 12ad61e71023..b2dfac4665a9 100644
--- a/security/linux-rl9-ca-certificates/pkg-plist
+++ b/security/linux-rl9-ca-certificates/pkg-plist
@@ -8,6 +8,452 @@ etc/pki/ca-trust/extracted/java/cacerts
etc/pki/ca-trust/extracted/openssl/README
etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt
etc/pki/ca-trust/extracted/pem/README
+etc/pki/ca-trust/extracted/pem/directory-hash/002c0b4f.0
+etc/pki/ca-trust/extracted/pem/directory-hash/01419da9.0
+etc/pki/ca-trust/extracted/pem/directory-hash/0179095f.0
+etc/pki/ca-trust/extracted/pem/directory-hash/02265526.0
+etc/pki/ca-trust/extracted/pem/directory-hash/04f60c28.0
+etc/pki/ca-trust/extracted/pem/directory-hash/062cdee6.0
+etc/pki/ca-trust/extracted/pem/directory-hash/064e0aa9.0
+etc/pki/ca-trust/extracted/pem/directory-hash/068570d1.0
+etc/pki/ca-trust/extracted/pem/directory-hash/06dc52d5.0
+etc/pki/ca-trust/extracted/pem/directory-hash/073bfcc5.0
+etc/pki/ca-trust/extracted/pem/directory-hash/08063a00.0
+etc/pki/ca-trust/extracted/pem/directory-hash/09789157.0
+etc/pki/ca-trust/extracted/pem/directory-hash/0a775a30.0
+etc/pki/ca-trust/extracted/pem/directory-hash/0b1b94ef.0
+etc/pki/ca-trust/extracted/pem/directory-hash/0b9bc432.0
+etc/pki/ca-trust/extracted/pem/directory-hash/0bf05006.0
+etc/pki/ca-trust/extracted/pem/directory-hash/0d69c7e1.0
+etc/pki/ca-trust/extracted/pem/directory-hash/0f5dc4f3.0
+etc/pki/ca-trust/extracted/pem/directory-hash/0f6fa695.0
+etc/pki/ca-trust/extracted/pem/directory-hash/1001acf7.0
+etc/pki/ca-trust/extracted/pem/directory-hash/10531352.0
+etc/pki/ca-trust/extracted/pem/directory-hash/106f3e4d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/128f4b91.0
+etc/pki/ca-trust/extracted/pem/directory-hash/14bc7599.0
+etc/pki/ca-trust/extracted/pem/directory-hash/18856ac4.0
+etc/pki/ca-trust/extracted/pem/directory-hash/1ae85e5e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/1b0f7e5c.0
+etc/pki/ca-trust/extracted/pem/directory-hash/1cef98f5.0
+etc/pki/ca-trust/extracted/pem/directory-hash/1d3472b9.0
+etc/pki/ca-trust/extracted/pem/directory-hash/1df5a75f.0
+etc/pki/ca-trust/extracted/pem/directory-hash/1e08bfd1.0
+etc/pki/ca-trust/extracted/pem/directory-hash/1e09d511.0
+etc/pki/ca-trust/extracted/pem/directory-hash/1e1eab7c.0
+etc/pki/ca-trust/extracted/pem/directory-hash/1e8e7201.0
+etc/pki/ca-trust/extracted/pem/directory-hash/1ec40989.0
+etc/pki/ca-trust/extracted/pem/directory-hash/1f58a078.0
+etc/pki/ca-trust/extracted/pem/directory-hash/219d9499.0
+etc/pki/ca-trust/extracted/pem/directory-hash/228f89db.0
+etc/pki/ca-trust/extracted/pem/directory-hash/23f4c490.0
+etc/pki/ca-trust/extracted/pem/directory-hash/244b5494.0
+etc/pki/ca-trust/extracted/pem/directory-hash/252252d2.0
+etc/pki/ca-trust/extracted/pem/directory-hash/2923b3f9.0
+etc/pki/ca-trust/extracted/pem/directory-hash/2add47b6.0
+etc/pki/ca-trust/extracted/pem/directory-hash/2ae6433e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/2b349938.0
+etc/pki/ca-trust/extracted/pem/directory-hash/2c63f966.0
+etc/pki/ca-trust/extracted/pem/directory-hash/2d21b73c.0
+etc/pki/ca-trust/extracted/pem/directory-hash/2d9dafe4.0
+etc/pki/ca-trust/extracted/pem/directory-hash/302904dd.0
+etc/pki/ca-trust/extracted/pem/directory-hash/304d27c3.0
+etc/pki/ca-trust/extracted/pem/directory-hash/31188b5e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/32888f65.0
+etc/pki/ca-trust/extracted/pem/directory-hash/33ee480d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/34d996fb.0
+etc/pki/ca-trust/extracted/pem/directory-hash/35105088.0
+etc/pki/ca-trust/extracted/pem/directory-hash/3513523f.0
+etc/pki/ca-trust/extracted/pem/directory-hash/399e7759.0
+etc/pki/ca-trust/extracted/pem/directory-hash/3ad48a91.0
+etc/pki/ca-trust/extracted/pem/directory-hash/3afde786.0
+etc/pki/ca-trust/extracted/pem/directory-hash/3bde41ac.0
+etc/pki/ca-trust/extracted/pem/directory-hash/3c860d51.0
+etc/pki/ca-trust/extracted/pem/directory-hash/3c899c73.0
+etc/pki/ca-trust/extracted/pem/directory-hash/3c9a4d3b.0
+etc/pki/ca-trust/extracted/pem/directory-hash/3e359ba6.0
+etc/pki/ca-trust/extracted/pem/directory-hash/3e7271e8.0
+etc/pki/ca-trust/extracted/pem/directory-hash/3fb36b73.0
+etc/pki/ca-trust/extracted/pem/directory-hash/40193066.0
+etc/pki/ca-trust/extracted/pem/directory-hash/4042bcee.0
+etc/pki/ca-trust/extracted/pem/directory-hash/40547a79.0
+etc/pki/ca-trust/extracted/pem/directory-hash/406c9bb1.0
+etc/pki/ca-trust/extracted/pem/directory-hash/41a3f684.0
+etc/pki/ca-trust/extracted/pem/directory-hash/455f1b52.0
+etc/pki/ca-trust/extracted/pem/directory-hash/48a195d8.0
+etc/pki/ca-trust/extracted/pem/directory-hash/48bec511.0
+etc/pki/ca-trust/extracted/pem/directory-hash/4b718d9b.0
+etc/pki/ca-trust/extracted/pem/directory-hash/4be590e0.0
+etc/pki/ca-trust/extracted/pem/directory-hash/4bfab552.0
+etc/pki/ca-trust/extracted/pem/directory-hash/4c3982f2.0
+etc/pki/ca-trust/extracted/pem/directory-hash/4f316efb.0
+etc/pki/ca-trust/extracted/pem/directory-hash/4fd49c6c.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5046c355.0
+etc/pki/ca-trust/extracted/pem/directory-hash/52b525c7.0
+etc/pki/ca-trust/extracted/pem/directory-hash/53a1b57a.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5443e9e3.0
+etc/pki/ca-trust/extracted/pem/directory-hash/54657681.0
+etc/pki/ca-trust/extracted/pem/directory-hash/57bcb2da.0
+etc/pki/ca-trust/extracted/pem/directory-hash/583d0756.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5860aaa6.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5931b5bc.0
+etc/pki/ca-trust/extracted/pem/directory-hash/595e996b.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5a3f0ff8.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5acf816d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5ad8a5d6.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5cd81ad7.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5e98733a.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5f15c80c.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5f47b495.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5f618aec.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5f9a69fa.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5fdd185d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/607986c7.0
+etc/pki/ca-trust/extracted/pem/directory-hash/60afe812.0
+etc/pki/ca-trust/extracted/pem/directory-hash/6187b673.0
+etc/pki/ca-trust/extracted/pem/directory-hash/626dceaf.0
+etc/pki/ca-trust/extracted/pem/directory-hash/63a2c897.0
+etc/pki/ca-trust/extracted/pem/directory-hash/653b494a.0
+etc/pki/ca-trust/extracted/pem/directory-hash/68dd7389.0
+etc/pki/ca-trust/extracted/pem/directory-hash/69105f4f.0
+etc/pki/ca-trust/extracted/pem/directory-hash/6b03dec0.0
+etc/pki/ca-trust/extracted/pem/directory-hash/6b483515.0
+etc/pki/ca-trust/extracted/pem/directory-hash/6b99d060.0
+etc/pki/ca-trust/extracted/pem/directory-hash/6d41d539.0
+etc/pki/ca-trust/extracted/pem/directory-hash/6f7454b3.0
+etc/pki/ca-trust/extracted/pem/directory-hash/6fa5da56.0
+etc/pki/ca-trust/extracted/pem/directory-hash/706f604c.0
+etc/pki/ca-trust/extracted/pem/directory-hash/749e9e03.0
+etc/pki/ca-trust/extracted/pem/directory-hash/75680d2e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/75d1b2ed.0
+etc/pki/ca-trust/extracted/pem/directory-hash/76579174.0
+etc/pki/ca-trust/extracted/pem/directory-hash/76faf6c0.0
+etc/pki/ca-trust/extracted/pem/directory-hash/7719f463.0
+etc/pki/ca-trust/extracted/pem/directory-hash/773e07ad.0
+etc/pki/ca-trust/extracted/pem/directory-hash/7892ad52.0
+etc/pki/ca-trust/extracted/pem/directory-hash/7a3adc42.0
+etc/pki/ca-trust/extracted/pem/directory-hash/7a780d93.0
+etc/pki/ca-trust/extracted/pem/directory-hash/7a7c655d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/7a819ef2.0
+etc/pki/ca-trust/extracted/pem/directory-hash/7e067d03.0
+etc/pki/ca-trust/extracted/pem/directory-hash/7f3d5d1d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/7fa05551.0
+etc/pki/ca-trust/extracted/pem/directory-hash/8160b96c.0
+etc/pki/ca-trust/extracted/pem/directory-hash/81b9768f.0
+etc/pki/ca-trust/extracted/pem/directory-hash/81f2d2b1.0
+etc/pki/ca-trust/extracted/pem/directory-hash/82223c44.0
+etc/pki/ca-trust/extracted/pem/directory-hash/8312c4c1.0
+etc/pki/ca-trust/extracted/pem/directory-hash/83e9984f.0
+etc/pki/ca-trust/extracted/pem/directory-hash/8508e720.0
+etc/pki/ca-trust/extracted/pem/directory-hash/85cde254.0
+etc/pki/ca-trust/extracted/pem/directory-hash/86212b19.0
+etc/pki/ca-trust/extracted/pem/directory-hash/865fbdf9.0
+etc/pki/ca-trust/extracted/pem/directory-hash/869fbf79.0
+etc/pki/ca-trust/extracted/pem/directory-hash/8794b4e3.0
+etc/pki/ca-trust/extracted/pem/directory-hash/882de061.0
+etc/pki/ca-trust/extracted/pem/directory-hash/88950faa.0
+etc/pki/ca-trust/extracted/pem/directory-hash/89c02a45.0
+etc/pki/ca-trust/extracted/pem/directory-hash/8cb5ee0f.0
+etc/pki/ca-trust/extracted/pem/directory-hash/8d10a21f.0
+etc/pki/ca-trust/extracted/pem/directory-hash/8d6437c3.0
+etc/pki/ca-trust/extracted/pem/directory-hash/8d86cdd1.0
+etc/pki/ca-trust/extracted/pem/directory-hash/8d89cda1.0
+etc/pki/ca-trust/extracted/pem/directory-hash/8f103249.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9046744a.0
+etc/pki/ca-trust/extracted/pem/directory-hash/90c5a3c8.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9282e51c.0
+etc/pki/ca-trust/extracted/pem/directory-hash/930ac5d2.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9339512a.0
+etc/pki/ca-trust/extracted/pem/directory-hash/93851c9e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/93bc0acc.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9479c8c3.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9482e63a.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9576d26b.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9591a472.0
+etc/pki/ca-trust/extracted/pem/directory-hash/95aff9e3.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9846683b.0
+etc/pki/ca-trust/extracted/pem/directory-hash/985c1f52.0
+etc/pki/ca-trust/extracted/pem/directory-hash/988a38cb.0
+etc/pki/ca-trust/extracted/pem/directory-hash/98aaf404.0
+etc/pki/ca-trust/extracted/pem/directory-hash/99e1b953.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9aef356c.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9b46e03d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9b5697b0.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9bf03295.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9c8dfbd4.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9d04f354.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9d6523ce.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9ef4a08a.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9f727ac7.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ACCVRAIZ1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/AC_RAIZ_FNMT-RCM.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/AC_RAIZ_FNMT-RCM_SERVIDORES_SEGUROS.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/ANF_Secure_Server_Root_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Actalis_Authentication_Root_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/AffirmTrust_Commercial.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/AffirmTrust_Networking.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/AffirmTrust_Premium.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/AffirmTrust_Premium_ECC.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Amazon_Root_CA_1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Amazon_Root_CA_2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Amazon_Root_CA_3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Amazon_Root_CA_4.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Atos_TrustedRoot_2011.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Atos_TrustedRoot_Root_CA_ECC_TLS_2021.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Atos_TrustedRoot_Root_CA_RSA_TLS_2021.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/BJCA_Global_Root_CA1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/BJCA_Global_Root_CA2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Baltimore_CyberTrust_Root.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Buypass_Class_2_Root_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Buypass_Class_3_Root_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/CA_Disig_Root_R2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/CFCA_EV_ROOT.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/COMODO_Certification_Authority.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/COMODO_ECC_Certification_Authority.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/COMODO_RSA_Certification_Authority.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Certainly_Root_E1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Certainly_Root_R1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Certigna.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Certigna_Root_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Certum_EC-384_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Certum_Trusted_Network_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Certum_Trusted_Network_CA_2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Certum_Trusted_Root_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/CommScope_Public_Trust_ECC_Root-01.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/CommScope_Public_Trust_ECC_Root-02.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/CommScope_Public_Trust_RSA_Root-01.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/CommScope_Public_Trust_RSA_Root-02.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Comodo_AAA_Services_root.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/D-TRUST_BR_Root_CA_1_2020.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/D-TRUST_EV_Root_CA_1_2020.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/D-TRUST_Root_Class_3_CA_2_2009.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/D-TRUST_Root_Class_3_CA_2_EV_2009.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_Assured_ID_Root_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_Assured_ID_Root_G2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_Assured_ID_Root_G3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_Global_Root_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_Global_Root_G2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_Global_Root_G3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_High_Assurance_EV_Root_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_TLS_ECC_P384_Root_G5.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_TLS_RSA4096_Root_G5.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_Trusted_Root_G4.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Entrust.net_Premium_2048_Secure_Server_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Entrust_Root_Certification_Authority.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Entrust_Root_Certification_Authority_-_EC1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Entrust_Root_Certification_Authority_-_G2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Entrust_Root_Certification_Authority_-_G4.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/FIRMAPROFESIONAL_CA_ROOT-A_WEB.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/GDCA_TrustAUTH_R5_ROOT.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/GLOBALTRUST_2020.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/GTS_Root_R1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/GTS_Root_R2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/GTS_Root_R3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/GTS_Root_R4.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/GlobalSign_ECC_Root_CA_-_R4.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/GlobalSign_ECC_Root_CA_-_R5.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/GlobalSign_Root_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/GlobalSign_Root_CA_-_R3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/GlobalSign_Root_CA_-_R6.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/GlobalSign_Root_E46.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/GlobalSign_Root_R46.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Go_Daddy_Class_2_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Go_Daddy_Root_Certificate_Authority_-_G2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/HARICA_TLS_ECC_Root_CA_2021.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/HARICA_TLS_RSA_Root_CA_2021.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Hellenic_Academic_and_Research_Institutions_RootCA_2015.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/HiPKI_Root_CA_-_G1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Hongkong_Post_Root_CA_3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/ISRG_Root_X1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/ISRG_Root_X2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/IdenTrust_Commercial_Root_CA_1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/IdenTrust_Public_Sector_Root_CA_1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Izenpe.com.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Microsec_e-Szigno_Root_CA_2009.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Microsoft_ECC_Root_Certificate_Authority_2017.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Microsoft_RSA_Root_Certificate_Authority_2017.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/NAVER_Global_Root_Certification_Authority.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/NetLock_Arany__Class_Gold__F__tan__s__tv__ny.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/OISTE_WISeKey_Global_Root_GB_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/OISTE_WISeKey_Global_Root_GC_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/QuoVadis_Root_CA_1_G3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/QuoVadis_Root_CA_2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/QuoVadis_Root_CA_2_G3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/QuoVadis_Root_CA_3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/QuoVadis_Root_CA_3_G3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/SSL.com_EV_Root_Certification_Authority_ECC.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/SSL.com_EV_Root_Certification_Authority_RSA_R2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/SSL.com_Root_Certification_Authority_ECC.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/SSL.com_Root_Certification_Authority_RSA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/SSL.com_TLS_ECC_Root_CA_2022.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/SSL.com_TLS_RSA_Root_CA_2022.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/SZAFIR_ROOT_CA2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Sectigo_Public_Server_Authentication_Root_E46.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Sectigo_Public_Server_Authentication_Root_R46.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/SecureSign_RootCA11.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/SecureTrust_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Secure_Global_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Security_Communication_ECC_RootCA1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Security_Communication_RootCA2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Security_Communication_RootCA3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Starfield_Class_2_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Starfield_Root_Certificate_Authority_-_G2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Starfield_Services_Root_Certificate_Authority_-_G2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/SwissSign_Gold_CA_-_G2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/SwissSign_Silver_CA_-_G2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/T-TeleSec_GlobalRoot_Class_2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/T-TeleSec_GlobalRoot_Class_3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/TWCA_Global_Root_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/TWCA_Root_Certification_Authority.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Telekom_Security_TLS_ECC_Root_2020.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Telekom_Security_TLS_RSA_Root_2023.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/TeliaSonera_Root_CA_v1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Telia_Root_CA_v2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/TrustAsia_Global_Root_CA_G3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/TrustAsia_Global_Root_CA_G4.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Trustwave_Global_Certification_Authority.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Trustwave_Global_ECC_P256_Certification_Authority.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Trustwave_Global_ECC_P384_Certification_Authority.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/TunTrust_Root_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/UCA_Extended_Validation_Root.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/UCA_Global_G2_Root.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/USERTrust_ECC_Certification_Authority.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/USERTrust_RSA_Certification_Authority.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/XRamp_Global_CA_Root.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/a2c66da8.0
+etc/pki/ca-trust/extracted/pem/directory-hash/a3418fda.0
+etc/pki/ca-trust/extracted/pem/directory-hash/a716d4ed.0
+etc/pki/ca-trust/extracted/pem/directory-hash/a81e292b.0
+etc/pki/ca-trust/extracted/pem/directory-hash/a89d74c2.0
+etc/pki/ca-trust/extracted/pem/directory-hash/a94d09e5.0
+etc/pki/ca-trust/extracted/pem/directory-hash/a9d40e02.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ab5346f4.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ab59055e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/aee5f10d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b0e59380.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b0ed035a.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b0f3e76e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b1159c4c.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b30d5fda.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b3fb433b.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b433981b.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b66938e9.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b727005e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b74d2bd5.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b7a5b843.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b7db1890.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b81b93f0.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b872f2b4.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b92fd57f.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b936d1c6.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ba8887ce.0
+etc/pki/ca-trust/extracted/pem/directory-hash/bc3f2570.0
+etc/pki/ca-trust/extracted/pem/directory-hash/bd43e1dd.0
+etc/pki/ca-trust/extracted/pem/directory-hash/bdacca6f.0
+etc/pki/ca-trust/extracted/pem/directory-hash/bf53fb88.0
+etc/pki/ca-trust/extracted/pem/directory-hash/bf64f35b.0
+etc/pki/ca-trust/extracted/pem/directory-hash/c01eb047.0
+etc/pki/ca-trust/extracted/pem/directory-hash/c28a8a30.0
+etc/pki/ca-trust/extracted/pem/directory-hash/c44cc0c0.0
+etc/pki/ca-trust/extracted/pem/directory-hash/c491639e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/c559d742.0
+etc/pki/ca-trust/extracted/pem/directory-hash/c7f1359b.0
+etc/pki/ca-trust/extracted/pem/directory-hash/c90bc37d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ca-bundle.crt
+etc/pki/ca-trust/extracted/pem/directory-hash/ca-certificates.crt
+etc/pki/ca-trust/extracted/pem/directory-hash/ca6e4ad9.0
+etc/pki/ca-trust/extracted/pem/directory-hash/cb1c3204.0
+etc/pki/ca-trust/extracted/pem/directory-hash/cbb3f32b.0
+etc/pki/ca-trust/extracted/pem/directory-hash/cbf06781.0
+etc/pki/ca-trust/extracted/pem/directory-hash/cc450945.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ccc52f49.0
+etc/pki/ca-trust/extracted/pem/directory-hash/cd58d51e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/cd8c0d63.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ce5e74ef.0
+etc/pki/ca-trust/extracted/pem/directory-hash/certSIGN_ROOT_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/certSIGN_Root_CA_G2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/cf701eeb.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d06393bb.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d16a5865.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d18e9066.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d39b0a2c.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d41b5e2a.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d4c339cb.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d4dae3dd.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d52c538d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d59297b8.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d6325660.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d7746a63.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d7e8dc79.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d887a5bb.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d96b65e2.0
+etc/pki/ca-trust/extracted/pem/directory-hash/da0cfd1d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/da7377f6.0
+etc/pki/ca-trust/extracted/pem/directory-hash/dbc54cab.0
+etc/pki/ca-trust/extracted/pem/directory-hash/dbff3a01.0
+etc/pki/ca-trust/extracted/pem/directory-hash/dc4d6a89.0
+etc/pki/ca-trust/extracted/pem/directory-hash/dc99f41e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/dd8e9d41.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ddcda989.0
+etc/pki/ca-trust/extracted/pem/directory-hash/de6d66f3.0
+etc/pki/ca-trust/extracted/pem/directory-hash/dfc0fe80.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e-Szigno_Root_CA_2017.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/e071171e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e113c810.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e13665f9.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e18bfb83.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e35234b1.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e36a6752.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e442e424.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e48193cf.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e73d606e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e7c037b4.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e7dd1bc4.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e8651083.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e868b802.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e8de2f56.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ePKI_Root_Certification_Authority.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/ecccd8db.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ed39abd0.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ed858448.0
+etc/pki/ca-trust/extracted/pem/directory-hash/edcbddb5.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ee37c333.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ee532fd5.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ee64a828.0
+etc/pki/ca-trust/extracted/pem/directory-hash/eed8c118.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ef954a4e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/emSign_ECC_Root_CA_-_C3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/emSign_ECC_Root_CA_-_G3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/emSign_Root_CA_-_C1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/emSign_Root_CA_-_G1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/f013ecaf.0
+etc/pki/ca-trust/extracted/pem/directory-hash/f058632f.0
+etc/pki/ca-trust/extracted/pem/directory-hash/f081611a.0
+etc/pki/ca-trust/extracted/pem/directory-hash/f0c70a8d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/f0cd152c.0
+etc/pki/ca-trust/extracted/pem/directory-hash/f249de83.0
+etc/pki/ca-trust/extracted/pem/directory-hash/f30dd6ad.0
+etc/pki/ca-trust/extracted/pem/directory-hash/f387163d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/f39fc864.0
+etc/pki/ca-trust/extracted/pem/directory-hash/f459871d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/f51bb24c.0
+etc/pki/ca-trust/extracted/pem/directory-hash/f8fc53da.0
+etc/pki/ca-trust/extracted/pem/directory-hash/fa5da96b.0
+etc/pki/ca-trust/extracted/pem/directory-hash/fb5fa911.0
+etc/pki/ca-trust/extracted/pem/directory-hash/fb717492.0
+etc/pki/ca-trust/extracted/pem/directory-hash/fc5a8f99.0
+etc/pki/ca-trust/extracted/pem/directory-hash/fd08c599.0
+etc/pki/ca-trust/extracted/pem/directory-hash/fd64f3fc.0
+etc/pki/ca-trust/extracted/pem/directory-hash/fde84897.0
+etc/pki/ca-trust/extracted/pem/directory-hash/fe8a2cd8.0
+etc/pki/ca-trust/extracted/pem/directory-hash/feffd413.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ff34af3f.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ffa7f1eb.0
+etc/pki/ca-trust/extracted/pem/directory-hash/vTrus_ECC_Root_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/vTrus_Root_CA.pem
etc/pki/ca-trust/extracted/pem/email-ca-bundle.pem
etc/pki/ca-trust/extracted/pem/objsign-ca-bundle.pem
etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem