diff options
Diffstat (limited to 'security')
-rw-r--r-- | security/linux-rl9-ca-certificates/Makefile | 69 | ||||
-rw-r--r-- | security/linux-rl9-ca-certificates/pkg-plist | 446 |
2 files changed, 508 insertions, 7 deletions
diff --git a/security/linux-rl9-ca-certificates/Makefile b/security/linux-rl9-ca-certificates/Makefile index 5adac7526364..b98e1abfce81 100644 --- a/security/linux-rl9-ca-certificates/Makefile +++ b/security/linux-rl9-ca-certificates/Makefile @@ -1,7 +1,7 @@ PORTNAME= ca-certificates PORTVERSION= 2024.2.69 DISTVERSIONSUFFIX= _v8.0.303-91.4.el9_4 -PORTREVISION= 3 +PORTREVISION= 4 CATEGORIES= security linux MAINTAINER= emulation@FreeBSD.org @@ -15,14 +15,69 @@ USE_LINUX_RPM= noarch OPTIONS_DEFINE= DOCS +.include <bsd.port.pre.mk> + +# Here we perform a dance to properly regenerate the trust store + +# 1. We need to run these tools as a non-root user, otherwise they don't pick +# up our config: https://github.com/p11-glue/p11-kit/blob/1bbd6db36b68cae074b35845c212c7d9a8ba19fe/p11-kit/conf.c#L249-L251 +.if ${UID} == 0 +SU_NOBODY= /usr/bin/su -m nobody -c +.else +SU_NOBODY= ${SH} -c +.endif + post-stage: - cd ${STAGEDIR} && ${LINUXBASE}/bin/sh \ - ./${PREFIX}/usr/bin/update-ca-trust extract \ - -o ./${PREFIX}/etc/pki/ca-trust/extracted +# 2. Create a hacked copy of update-ca-trust that is permitted to look into +# user-supplied config. + ${SED} '/export P11_KIT_NO_USER_CONFIG=1/d' \ + ${STAGEDIR}/${PREFIX}/usr/bin/update-ca-trust > \ + ${WRKDIR}/update-ca-trust-staging + ${CHMOD} +x ${WRKDIR}/update-ca-trust-staging +# 3. Prevent update-ca-trust-staging from operating on ${LINUXBASE}. We want +# it take inputs from ${STAGEDIR} and output into ${STAGEDIR}. +# To achieve that, an undocumented feature is employed that can be tracked +# through the following place in the code: +# a. https://github.com/p11-glue/p11-kit/blob/1bbd6db36b68cae074b35845c212c7d9a8ba19fe/p11-kit/modules.c#L641-L658 +# b. https://github.com/p11-glue/p11-kit/blob/1bbd6db36b68cae074b35845c212c7d9a8ba19fe/trust/module.c#L409 +# c. https://github.com/p11-glue/p11-kit/blob/1bbd6db36b68cae074b35845c212c7d9a8ba19fe/trust/module.c#L293-L296 +# Without this hack the /bin/trust program always use hardcoded paths that +# point to ${LINUXBASE} as evidenced by +# d. https://github.com/p11-glue/p11-kit/blob/1bbd6db36b68cae074b35845c212c7d9a8ba19fe/trust/module.c#L416C77-L416C88 + ${MKDIR} ${WRKDIR}/.config/pkcs11/modules + ${SED} "s|x-init-reserved:|x-init-reserved: paths=${STAGEDIR}/${LINUXBASE}/etc/pki/ca-trust/source:${STAGEDIR}/${LINUXBASE}/usr/share/pki/ca-trust-source|" \ + ${LINUXBASE}/usr/share/p11-kit/modules/p11-kit-trust.module > \ + ${WRKDIR}/.config/pkcs11/modules/p11-kit-trust.module +# 4. If we're building as root, the nobody user wouldn't be able to write into +# ${STAGEDIR}. Change the owner to allow that. +.if ${UID} == 0 + ${CHOWN} -R nobody ${STAGEDIR} +.endif +# 5. Run the actual generation step. + ${SU_NOBODY} 'cd ${STAGEDIR} && ${LINUXBASE}/bin/env XDG_CONFIG_HOME="${WRKDIR}/.config" \ + ../update-ca-trust-staging extract \ + -o ./${PREFIX}/etc/pki/ca-trust/extracted' +# 6. Reforge symlinks into relative ones to prevent Linuxulator from resolving +# them into /etc. We want symlink targets to point into /compat/linux/etc. ${FIND} ${STAGEDIR}${PREFIX} -type l -exec \ ${SH} -c "tgt=\$$(readlink {}) ; [ \$$tgt != \$${tgt#/} ] && ${RLN} ${STAGEDIR}${PREFIX}\$$tgt {}" \; || ${TRUE} - cd ${STAGEDIR}${PREFIX} && \ - ${FIND} etc/pki/ca-trust/extracted/pem/directory-hash -type f -or -type l >> ${TMPPLIST} +# Verify that we actually generated something. To make sure that ${LINUXBASE} +# does not affect the generation the testing should be performed this way: +# 1. Get into jail: +# poudriere testport -i +# 2. Test with package installed: +# make test +# 3. Rebuild with package installed: +# make clean stage +# 4. Check that the result is the same: +# make check-plist test +# 5. Deinstall the package: +# make deinstall +# 6. Check that the result is the same: +# make test +do-test: + ${SU_NOBODY} '${LINUXBASE}/bin/env XDG_CONFIG_HOME="${WRKDIR}/.config" \ + /bin/trust list' | wc -l | ((read count ; [ $$count != 0 ]) && ${ECHO_CMD} ok) -.include <bsd.port.mk> +.include <bsd.port.post.mk> diff --git a/security/linux-rl9-ca-certificates/pkg-plist b/security/linux-rl9-ca-certificates/pkg-plist index 12ad61e71023..b2dfac4665a9 100644 --- a/security/linux-rl9-ca-certificates/pkg-plist +++ b/security/linux-rl9-ca-certificates/pkg-plist @@ -8,6 +8,452 @@ etc/pki/ca-trust/extracted/java/cacerts etc/pki/ca-trust/extracted/openssl/README etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt etc/pki/ca-trust/extracted/pem/README +etc/pki/ca-trust/extracted/pem/directory-hash/002c0b4f.0 +etc/pki/ca-trust/extracted/pem/directory-hash/01419da9.0 +etc/pki/ca-trust/extracted/pem/directory-hash/0179095f.0 +etc/pki/ca-trust/extracted/pem/directory-hash/02265526.0 +etc/pki/ca-trust/extracted/pem/directory-hash/04f60c28.0 +etc/pki/ca-trust/extracted/pem/directory-hash/062cdee6.0 +etc/pki/ca-trust/extracted/pem/directory-hash/064e0aa9.0 +etc/pki/ca-trust/extracted/pem/directory-hash/068570d1.0 +etc/pki/ca-trust/extracted/pem/directory-hash/06dc52d5.0 +etc/pki/ca-trust/extracted/pem/directory-hash/073bfcc5.0 +etc/pki/ca-trust/extracted/pem/directory-hash/08063a00.0 +etc/pki/ca-trust/extracted/pem/directory-hash/09789157.0 +etc/pki/ca-trust/extracted/pem/directory-hash/0a775a30.0 +etc/pki/ca-trust/extracted/pem/directory-hash/0b1b94ef.0 +etc/pki/ca-trust/extracted/pem/directory-hash/0b9bc432.0 +etc/pki/ca-trust/extracted/pem/directory-hash/0bf05006.0 +etc/pki/ca-trust/extracted/pem/directory-hash/0d69c7e1.0 +etc/pki/ca-trust/extracted/pem/directory-hash/0f5dc4f3.0 +etc/pki/ca-trust/extracted/pem/directory-hash/0f6fa695.0 +etc/pki/ca-trust/extracted/pem/directory-hash/1001acf7.0 +etc/pki/ca-trust/extracted/pem/directory-hash/10531352.0 +etc/pki/ca-trust/extracted/pem/directory-hash/106f3e4d.0 +etc/pki/ca-trust/extracted/pem/directory-hash/128f4b91.0 +etc/pki/ca-trust/extracted/pem/directory-hash/14bc7599.0 +etc/pki/ca-trust/extracted/pem/directory-hash/18856ac4.0 +etc/pki/ca-trust/extracted/pem/directory-hash/1ae85e5e.0 +etc/pki/ca-trust/extracted/pem/directory-hash/1b0f7e5c.0 +etc/pki/ca-trust/extracted/pem/directory-hash/1cef98f5.0 +etc/pki/ca-trust/extracted/pem/directory-hash/1d3472b9.0 +etc/pki/ca-trust/extracted/pem/directory-hash/1df5a75f.0 +etc/pki/ca-trust/extracted/pem/directory-hash/1e08bfd1.0 +etc/pki/ca-trust/extracted/pem/directory-hash/1e09d511.0 +etc/pki/ca-trust/extracted/pem/directory-hash/1e1eab7c.0 +etc/pki/ca-trust/extracted/pem/directory-hash/1e8e7201.0 +etc/pki/ca-trust/extracted/pem/directory-hash/1ec40989.0 +etc/pki/ca-trust/extracted/pem/directory-hash/1f58a078.0 +etc/pki/ca-trust/extracted/pem/directory-hash/219d9499.0 +etc/pki/ca-trust/extracted/pem/directory-hash/228f89db.0 +etc/pki/ca-trust/extracted/pem/directory-hash/23f4c490.0 +etc/pki/ca-trust/extracted/pem/directory-hash/244b5494.0 +etc/pki/ca-trust/extracted/pem/directory-hash/252252d2.0 +etc/pki/ca-trust/extracted/pem/directory-hash/2923b3f9.0 +etc/pki/ca-trust/extracted/pem/directory-hash/2add47b6.0 +etc/pki/ca-trust/extracted/pem/directory-hash/2ae6433e.0 +etc/pki/ca-trust/extracted/pem/directory-hash/2b349938.0 +etc/pki/ca-trust/extracted/pem/directory-hash/2c63f966.0 +etc/pki/ca-trust/extracted/pem/directory-hash/2d21b73c.0 +etc/pki/ca-trust/extracted/pem/directory-hash/2d9dafe4.0 +etc/pki/ca-trust/extracted/pem/directory-hash/302904dd.0 +etc/pki/ca-trust/extracted/pem/directory-hash/304d27c3.0 +etc/pki/ca-trust/extracted/pem/directory-hash/31188b5e.0 +etc/pki/ca-trust/extracted/pem/directory-hash/32888f65.0 +etc/pki/ca-trust/extracted/pem/directory-hash/33ee480d.0 +etc/pki/ca-trust/extracted/pem/directory-hash/34d996fb.0 +etc/pki/ca-trust/extracted/pem/directory-hash/35105088.0 +etc/pki/ca-trust/extracted/pem/directory-hash/3513523f.0 +etc/pki/ca-trust/extracted/pem/directory-hash/399e7759.0 +etc/pki/ca-trust/extracted/pem/directory-hash/3ad48a91.0 +etc/pki/ca-trust/extracted/pem/directory-hash/3afde786.0 +etc/pki/ca-trust/extracted/pem/directory-hash/3bde41ac.0 +etc/pki/ca-trust/extracted/pem/directory-hash/3c860d51.0 +etc/pki/ca-trust/extracted/pem/directory-hash/3c899c73.0 +etc/pki/ca-trust/extracted/pem/directory-hash/3c9a4d3b.0 +etc/pki/ca-trust/extracted/pem/directory-hash/3e359ba6.0 +etc/pki/ca-trust/extracted/pem/directory-hash/3e7271e8.0 +etc/pki/ca-trust/extracted/pem/directory-hash/3fb36b73.0 +etc/pki/ca-trust/extracted/pem/directory-hash/40193066.0 +etc/pki/ca-trust/extracted/pem/directory-hash/4042bcee.0 +etc/pki/ca-trust/extracted/pem/directory-hash/40547a79.0 +etc/pki/ca-trust/extracted/pem/directory-hash/406c9bb1.0 +etc/pki/ca-trust/extracted/pem/directory-hash/41a3f684.0 +etc/pki/ca-trust/extracted/pem/directory-hash/455f1b52.0 +etc/pki/ca-trust/extracted/pem/directory-hash/48a195d8.0 +etc/pki/ca-trust/extracted/pem/directory-hash/48bec511.0 +etc/pki/ca-trust/extracted/pem/directory-hash/4b718d9b.0 +etc/pki/ca-trust/extracted/pem/directory-hash/4be590e0.0 +etc/pki/ca-trust/extracted/pem/directory-hash/4bfab552.0 +etc/pki/ca-trust/extracted/pem/directory-hash/4c3982f2.0 +etc/pki/ca-trust/extracted/pem/directory-hash/4f316efb.0 +etc/pki/ca-trust/extracted/pem/directory-hash/4fd49c6c.0 +etc/pki/ca-trust/extracted/pem/directory-hash/5046c355.0 +etc/pki/ca-trust/extracted/pem/directory-hash/52b525c7.0 +etc/pki/ca-trust/extracted/pem/directory-hash/53a1b57a.0 +etc/pki/ca-trust/extracted/pem/directory-hash/5443e9e3.0 +etc/pki/ca-trust/extracted/pem/directory-hash/54657681.0 +etc/pki/ca-trust/extracted/pem/directory-hash/57bcb2da.0 +etc/pki/ca-trust/extracted/pem/directory-hash/583d0756.0 +etc/pki/ca-trust/extracted/pem/directory-hash/5860aaa6.0 +etc/pki/ca-trust/extracted/pem/directory-hash/5931b5bc.0 +etc/pki/ca-trust/extracted/pem/directory-hash/595e996b.0 +etc/pki/ca-trust/extracted/pem/directory-hash/5a3f0ff8.0 +etc/pki/ca-trust/extracted/pem/directory-hash/5acf816d.0 +etc/pki/ca-trust/extracted/pem/directory-hash/5ad8a5d6.0 +etc/pki/ca-trust/extracted/pem/directory-hash/5cd81ad7.0 +etc/pki/ca-trust/extracted/pem/directory-hash/5e98733a.0 +etc/pki/ca-trust/extracted/pem/directory-hash/5f15c80c.0 +etc/pki/ca-trust/extracted/pem/directory-hash/5f47b495.0 +etc/pki/ca-trust/extracted/pem/directory-hash/5f618aec.0 +etc/pki/ca-trust/extracted/pem/directory-hash/5f9a69fa.0 +etc/pki/ca-trust/extracted/pem/directory-hash/5fdd185d.0 +etc/pki/ca-trust/extracted/pem/directory-hash/607986c7.0 +etc/pki/ca-trust/extracted/pem/directory-hash/60afe812.0 +etc/pki/ca-trust/extracted/pem/directory-hash/6187b673.0 +etc/pki/ca-trust/extracted/pem/directory-hash/626dceaf.0 +etc/pki/ca-trust/extracted/pem/directory-hash/63a2c897.0 +etc/pki/ca-trust/extracted/pem/directory-hash/653b494a.0 +etc/pki/ca-trust/extracted/pem/directory-hash/68dd7389.0 +etc/pki/ca-trust/extracted/pem/directory-hash/69105f4f.0 +etc/pki/ca-trust/extracted/pem/directory-hash/6b03dec0.0 +etc/pki/ca-trust/extracted/pem/directory-hash/6b483515.0 +etc/pki/ca-trust/extracted/pem/directory-hash/6b99d060.0 +etc/pki/ca-trust/extracted/pem/directory-hash/6d41d539.0 +etc/pki/ca-trust/extracted/pem/directory-hash/6f7454b3.0 +etc/pki/ca-trust/extracted/pem/directory-hash/6fa5da56.0 +etc/pki/ca-trust/extracted/pem/directory-hash/706f604c.0 +etc/pki/ca-trust/extracted/pem/directory-hash/749e9e03.0 +etc/pki/ca-trust/extracted/pem/directory-hash/75680d2e.0 +etc/pki/ca-trust/extracted/pem/directory-hash/75d1b2ed.0 +etc/pki/ca-trust/extracted/pem/directory-hash/76579174.0 +etc/pki/ca-trust/extracted/pem/directory-hash/76faf6c0.0 +etc/pki/ca-trust/extracted/pem/directory-hash/7719f463.0 +etc/pki/ca-trust/extracted/pem/directory-hash/773e07ad.0 +etc/pki/ca-trust/extracted/pem/directory-hash/7892ad52.0 +etc/pki/ca-trust/extracted/pem/directory-hash/7a3adc42.0 +etc/pki/ca-trust/extracted/pem/directory-hash/7a780d93.0 +etc/pki/ca-trust/extracted/pem/directory-hash/7a7c655d.0 +etc/pki/ca-trust/extracted/pem/directory-hash/7a819ef2.0 +etc/pki/ca-trust/extracted/pem/directory-hash/7e067d03.0 +etc/pki/ca-trust/extracted/pem/directory-hash/7f3d5d1d.0 +etc/pki/ca-trust/extracted/pem/directory-hash/7fa05551.0 +etc/pki/ca-trust/extracted/pem/directory-hash/8160b96c.0 +etc/pki/ca-trust/extracted/pem/directory-hash/81b9768f.0 +etc/pki/ca-trust/extracted/pem/directory-hash/81f2d2b1.0 +etc/pki/ca-trust/extracted/pem/directory-hash/82223c44.0 +etc/pki/ca-trust/extracted/pem/directory-hash/8312c4c1.0 +etc/pki/ca-trust/extracted/pem/directory-hash/83e9984f.0 +etc/pki/ca-trust/extracted/pem/directory-hash/8508e720.0 +etc/pki/ca-trust/extracted/pem/directory-hash/85cde254.0 +etc/pki/ca-trust/extracted/pem/directory-hash/86212b19.0 +etc/pki/ca-trust/extracted/pem/directory-hash/865fbdf9.0 +etc/pki/ca-trust/extracted/pem/directory-hash/869fbf79.0 +etc/pki/ca-trust/extracted/pem/directory-hash/8794b4e3.0 +etc/pki/ca-trust/extracted/pem/directory-hash/882de061.0 +etc/pki/ca-trust/extracted/pem/directory-hash/88950faa.0 +etc/pki/ca-trust/extracted/pem/directory-hash/89c02a45.0 +etc/pki/ca-trust/extracted/pem/directory-hash/8cb5ee0f.0 +etc/pki/ca-trust/extracted/pem/directory-hash/8d10a21f.0 +etc/pki/ca-trust/extracted/pem/directory-hash/8d6437c3.0 +etc/pki/ca-trust/extracted/pem/directory-hash/8d86cdd1.0 +etc/pki/ca-trust/extracted/pem/directory-hash/8d89cda1.0 +etc/pki/ca-trust/extracted/pem/directory-hash/8f103249.0 +etc/pki/ca-trust/extracted/pem/directory-hash/9046744a.0 +etc/pki/ca-trust/extracted/pem/directory-hash/90c5a3c8.0 +etc/pki/ca-trust/extracted/pem/directory-hash/9282e51c.0 +etc/pki/ca-trust/extracted/pem/directory-hash/930ac5d2.0 +etc/pki/ca-trust/extracted/pem/directory-hash/9339512a.0 +etc/pki/ca-trust/extracted/pem/directory-hash/93851c9e.0 +etc/pki/ca-trust/extracted/pem/directory-hash/93bc0acc.0 +etc/pki/ca-trust/extracted/pem/directory-hash/9479c8c3.0 +etc/pki/ca-trust/extracted/pem/directory-hash/9482e63a.0 +etc/pki/ca-trust/extracted/pem/directory-hash/9576d26b.0 +etc/pki/ca-trust/extracted/pem/directory-hash/9591a472.0 +etc/pki/ca-trust/extracted/pem/directory-hash/95aff9e3.0 +etc/pki/ca-trust/extracted/pem/directory-hash/9846683b.0 +etc/pki/ca-trust/extracted/pem/directory-hash/985c1f52.0 +etc/pki/ca-trust/extracted/pem/directory-hash/988a38cb.0 +etc/pki/ca-trust/extracted/pem/directory-hash/98aaf404.0 +etc/pki/ca-trust/extracted/pem/directory-hash/99e1b953.0 +etc/pki/ca-trust/extracted/pem/directory-hash/9aef356c.0 +etc/pki/ca-trust/extracted/pem/directory-hash/9b46e03d.0 +etc/pki/ca-trust/extracted/pem/directory-hash/9b5697b0.0 +etc/pki/ca-trust/extracted/pem/directory-hash/9bf03295.0 +etc/pki/ca-trust/extracted/pem/directory-hash/9c8dfbd4.0 +etc/pki/ca-trust/extracted/pem/directory-hash/9d04f354.0 +etc/pki/ca-trust/extracted/pem/directory-hash/9d6523ce.0 +etc/pki/ca-trust/extracted/pem/directory-hash/9ef4a08a.0 +etc/pki/ca-trust/extracted/pem/directory-hash/9f727ac7.0 +etc/pki/ca-trust/extracted/pem/directory-hash/ACCVRAIZ1.pem +etc/pki/ca-trust/extracted/pem/directory-hash/AC_RAIZ_FNMT-RCM.pem +etc/pki/ca-trust/extracted/pem/directory-hash/AC_RAIZ_FNMT-RCM_SERVIDORES_SEGUROS.pem +etc/pki/ca-trust/extracted/pem/directory-hash/ANF_Secure_Server_Root_CA.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Actalis_Authentication_Root_CA.pem +etc/pki/ca-trust/extracted/pem/directory-hash/AffirmTrust_Commercial.pem +etc/pki/ca-trust/extracted/pem/directory-hash/AffirmTrust_Networking.pem +etc/pki/ca-trust/extracted/pem/directory-hash/AffirmTrust_Premium.pem +etc/pki/ca-trust/extracted/pem/directory-hash/AffirmTrust_Premium_ECC.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Amazon_Root_CA_1.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Amazon_Root_CA_2.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Amazon_Root_CA_3.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Amazon_Root_CA_4.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Atos_TrustedRoot_2011.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Atos_TrustedRoot_Root_CA_ECC_TLS_2021.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Atos_TrustedRoot_Root_CA_RSA_TLS_2021.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem +etc/pki/ca-trust/extracted/pem/directory-hash/BJCA_Global_Root_CA1.pem +etc/pki/ca-trust/extracted/pem/directory-hash/BJCA_Global_Root_CA2.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Baltimore_CyberTrust_Root.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Buypass_Class_2_Root_CA.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Buypass_Class_3_Root_CA.pem +etc/pki/ca-trust/extracted/pem/directory-hash/CA_Disig_Root_R2.pem +etc/pki/ca-trust/extracted/pem/directory-hash/CFCA_EV_ROOT.pem +etc/pki/ca-trust/extracted/pem/directory-hash/COMODO_Certification_Authority.pem +etc/pki/ca-trust/extracted/pem/directory-hash/COMODO_ECC_Certification_Authority.pem +etc/pki/ca-trust/extracted/pem/directory-hash/COMODO_RSA_Certification_Authority.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Certainly_Root_E1.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Certainly_Root_R1.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Certigna.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Certigna_Root_CA.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Certum_EC-384_CA.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Certum_Trusted_Network_CA.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Certum_Trusted_Network_CA_2.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Certum_Trusted_Root_CA.pem +etc/pki/ca-trust/extracted/pem/directory-hash/CommScope_Public_Trust_ECC_Root-01.pem +etc/pki/ca-trust/extracted/pem/directory-hash/CommScope_Public_Trust_ECC_Root-02.pem +etc/pki/ca-trust/extracted/pem/directory-hash/CommScope_Public_Trust_RSA_Root-01.pem +etc/pki/ca-trust/extracted/pem/directory-hash/CommScope_Public_Trust_RSA_Root-02.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Comodo_AAA_Services_root.pem +etc/pki/ca-trust/extracted/pem/directory-hash/D-TRUST_BR_Root_CA_1_2020.pem +etc/pki/ca-trust/extracted/pem/directory-hash/D-TRUST_EV_Root_CA_1_2020.pem +etc/pki/ca-trust/extracted/pem/directory-hash/D-TRUST_Root_Class_3_CA_2_2009.pem +etc/pki/ca-trust/extracted/pem/directory-hash/D-TRUST_Root_Class_3_CA_2_EV_2009.pem +etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_Assured_ID_Root_CA.pem +etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_Assured_ID_Root_G2.pem +etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_Assured_ID_Root_G3.pem +etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_Global_Root_CA.pem +etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_Global_Root_G2.pem +etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_Global_Root_G3.pem +etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_High_Assurance_EV_Root_CA.pem +etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_TLS_ECC_P384_Root_G5.pem +etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_TLS_RSA4096_Root_G5.pem +etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_Trusted_Root_G4.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Entrust.net_Premium_2048_Secure_Server_CA.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Entrust_Root_Certification_Authority.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Entrust_Root_Certification_Authority_-_EC1.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Entrust_Root_Certification_Authority_-_G2.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Entrust_Root_Certification_Authority_-_G4.pem +etc/pki/ca-trust/extracted/pem/directory-hash/FIRMAPROFESIONAL_CA_ROOT-A_WEB.pem +etc/pki/ca-trust/extracted/pem/directory-hash/GDCA_TrustAUTH_R5_ROOT.pem +etc/pki/ca-trust/extracted/pem/directory-hash/GLOBALTRUST_2020.pem +etc/pki/ca-trust/extracted/pem/directory-hash/GTS_Root_R1.pem +etc/pki/ca-trust/extracted/pem/directory-hash/GTS_Root_R2.pem +etc/pki/ca-trust/extracted/pem/directory-hash/GTS_Root_R3.pem +etc/pki/ca-trust/extracted/pem/directory-hash/GTS_Root_R4.pem +etc/pki/ca-trust/extracted/pem/directory-hash/GlobalSign_ECC_Root_CA_-_R4.pem +etc/pki/ca-trust/extracted/pem/directory-hash/GlobalSign_ECC_Root_CA_-_R5.pem +etc/pki/ca-trust/extracted/pem/directory-hash/GlobalSign_Root_CA.pem +etc/pki/ca-trust/extracted/pem/directory-hash/GlobalSign_Root_CA_-_R3.pem +etc/pki/ca-trust/extracted/pem/directory-hash/GlobalSign_Root_CA_-_R6.pem +etc/pki/ca-trust/extracted/pem/directory-hash/GlobalSign_Root_E46.pem +etc/pki/ca-trust/extracted/pem/directory-hash/GlobalSign_Root_R46.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Go_Daddy_Class_2_CA.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Go_Daddy_Root_Certificate_Authority_-_G2.pem +etc/pki/ca-trust/extracted/pem/directory-hash/HARICA_TLS_ECC_Root_CA_2021.pem +etc/pki/ca-trust/extracted/pem/directory-hash/HARICA_TLS_RSA_Root_CA_2021.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Hellenic_Academic_and_Research_Institutions_RootCA_2015.pem +etc/pki/ca-trust/extracted/pem/directory-hash/HiPKI_Root_CA_-_G1.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Hongkong_Post_Root_CA_3.pem +etc/pki/ca-trust/extracted/pem/directory-hash/ISRG_Root_X1.pem +etc/pki/ca-trust/extracted/pem/directory-hash/ISRG_Root_X2.pem +etc/pki/ca-trust/extracted/pem/directory-hash/IdenTrust_Commercial_Root_CA_1.pem +etc/pki/ca-trust/extracted/pem/directory-hash/IdenTrust_Public_Sector_Root_CA_1.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Izenpe.com.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Microsec_e-Szigno_Root_CA_2009.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Microsoft_ECC_Root_Certificate_Authority_2017.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Microsoft_RSA_Root_Certificate_Authority_2017.pem +etc/pki/ca-trust/extracted/pem/directory-hash/NAVER_Global_Root_Certification_Authority.pem +etc/pki/ca-trust/extracted/pem/directory-hash/NetLock_Arany__Class_Gold__F__tan__s__tv__ny.pem +etc/pki/ca-trust/extracted/pem/directory-hash/OISTE_WISeKey_Global_Root_GB_CA.pem +etc/pki/ca-trust/extracted/pem/directory-hash/OISTE_WISeKey_Global_Root_GC_CA.pem +etc/pki/ca-trust/extracted/pem/directory-hash/QuoVadis_Root_CA_1_G3.pem +etc/pki/ca-trust/extracted/pem/directory-hash/QuoVadis_Root_CA_2.pem +etc/pki/ca-trust/extracted/pem/directory-hash/QuoVadis_Root_CA_2_G3.pem +etc/pki/ca-trust/extracted/pem/directory-hash/QuoVadis_Root_CA_3.pem +etc/pki/ca-trust/extracted/pem/directory-hash/QuoVadis_Root_CA_3_G3.pem +etc/pki/ca-trust/extracted/pem/directory-hash/SSL.com_EV_Root_Certification_Authority_ECC.pem +etc/pki/ca-trust/extracted/pem/directory-hash/SSL.com_EV_Root_Certification_Authority_RSA_R2.pem +etc/pki/ca-trust/extracted/pem/directory-hash/SSL.com_Root_Certification_Authority_ECC.pem +etc/pki/ca-trust/extracted/pem/directory-hash/SSL.com_Root_Certification_Authority_RSA.pem +etc/pki/ca-trust/extracted/pem/directory-hash/SSL.com_TLS_ECC_Root_CA_2022.pem +etc/pki/ca-trust/extracted/pem/directory-hash/SSL.com_TLS_RSA_Root_CA_2022.pem +etc/pki/ca-trust/extracted/pem/directory-hash/SZAFIR_ROOT_CA2.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Sectigo_Public_Server_Authentication_Root_E46.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Sectigo_Public_Server_Authentication_Root_R46.pem +etc/pki/ca-trust/extracted/pem/directory-hash/SecureSign_RootCA11.pem +etc/pki/ca-trust/extracted/pem/directory-hash/SecureTrust_CA.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Secure_Global_CA.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Security_Communication_ECC_RootCA1.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Security_Communication_RootCA2.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Security_Communication_RootCA3.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Starfield_Class_2_CA.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Starfield_Root_Certificate_Authority_-_G2.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Starfield_Services_Root_Certificate_Authority_-_G2.pem +etc/pki/ca-trust/extracted/pem/directory-hash/SwissSign_Gold_CA_-_G2.pem +etc/pki/ca-trust/extracted/pem/directory-hash/SwissSign_Silver_CA_-_G2.pem +etc/pki/ca-trust/extracted/pem/directory-hash/T-TeleSec_GlobalRoot_Class_2.pem +etc/pki/ca-trust/extracted/pem/directory-hash/T-TeleSec_GlobalRoot_Class_3.pem +etc/pki/ca-trust/extracted/pem/directory-hash/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.pem +etc/pki/ca-trust/extracted/pem/directory-hash/TWCA_Global_Root_CA.pem +etc/pki/ca-trust/extracted/pem/directory-hash/TWCA_Root_Certification_Authority.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Telekom_Security_TLS_ECC_Root_2020.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Telekom_Security_TLS_RSA_Root_2023.pem +etc/pki/ca-trust/extracted/pem/directory-hash/TeliaSonera_Root_CA_v1.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Telia_Root_CA_v2.pem +etc/pki/ca-trust/extracted/pem/directory-hash/TrustAsia_Global_Root_CA_G3.pem +etc/pki/ca-trust/extracted/pem/directory-hash/TrustAsia_Global_Root_CA_G4.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Trustwave_Global_Certification_Authority.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Trustwave_Global_ECC_P256_Certification_Authority.pem +etc/pki/ca-trust/extracted/pem/directory-hash/Trustwave_Global_ECC_P384_Certification_Authority.pem +etc/pki/ca-trust/extracted/pem/directory-hash/TunTrust_Root_CA.pem +etc/pki/ca-trust/extracted/pem/directory-hash/UCA_Extended_Validation_Root.pem +etc/pki/ca-trust/extracted/pem/directory-hash/UCA_Global_G2_Root.pem +etc/pki/ca-trust/extracted/pem/directory-hash/USERTrust_ECC_Certification_Authority.pem +etc/pki/ca-trust/extracted/pem/directory-hash/USERTrust_RSA_Certification_Authority.pem +etc/pki/ca-trust/extracted/pem/directory-hash/XRamp_Global_CA_Root.pem +etc/pki/ca-trust/extracted/pem/directory-hash/a2c66da8.0 +etc/pki/ca-trust/extracted/pem/directory-hash/a3418fda.0 +etc/pki/ca-trust/extracted/pem/directory-hash/a716d4ed.0 +etc/pki/ca-trust/extracted/pem/directory-hash/a81e292b.0 +etc/pki/ca-trust/extracted/pem/directory-hash/a89d74c2.0 +etc/pki/ca-trust/extracted/pem/directory-hash/a94d09e5.0 +etc/pki/ca-trust/extracted/pem/directory-hash/a9d40e02.0 +etc/pki/ca-trust/extracted/pem/directory-hash/ab5346f4.0 +etc/pki/ca-trust/extracted/pem/directory-hash/ab59055e.0 +etc/pki/ca-trust/extracted/pem/directory-hash/aee5f10d.0 +etc/pki/ca-trust/extracted/pem/directory-hash/b0e59380.0 +etc/pki/ca-trust/extracted/pem/directory-hash/b0ed035a.0 +etc/pki/ca-trust/extracted/pem/directory-hash/b0f3e76e.0 +etc/pki/ca-trust/extracted/pem/directory-hash/b1159c4c.0 +etc/pki/ca-trust/extracted/pem/directory-hash/b30d5fda.0 +etc/pki/ca-trust/extracted/pem/directory-hash/b3fb433b.0 +etc/pki/ca-trust/extracted/pem/directory-hash/b433981b.0 +etc/pki/ca-trust/extracted/pem/directory-hash/b66938e9.0 +etc/pki/ca-trust/extracted/pem/directory-hash/b727005e.0 +etc/pki/ca-trust/extracted/pem/directory-hash/b74d2bd5.0 +etc/pki/ca-trust/extracted/pem/directory-hash/b7a5b843.0 +etc/pki/ca-trust/extracted/pem/directory-hash/b7db1890.0 +etc/pki/ca-trust/extracted/pem/directory-hash/b81b93f0.0 +etc/pki/ca-trust/extracted/pem/directory-hash/b872f2b4.0 +etc/pki/ca-trust/extracted/pem/directory-hash/b92fd57f.0 +etc/pki/ca-trust/extracted/pem/directory-hash/b936d1c6.0 +etc/pki/ca-trust/extracted/pem/directory-hash/ba8887ce.0 +etc/pki/ca-trust/extracted/pem/directory-hash/bc3f2570.0 +etc/pki/ca-trust/extracted/pem/directory-hash/bd43e1dd.0 +etc/pki/ca-trust/extracted/pem/directory-hash/bdacca6f.0 +etc/pki/ca-trust/extracted/pem/directory-hash/bf53fb88.0 +etc/pki/ca-trust/extracted/pem/directory-hash/bf64f35b.0 +etc/pki/ca-trust/extracted/pem/directory-hash/c01eb047.0 +etc/pki/ca-trust/extracted/pem/directory-hash/c28a8a30.0 +etc/pki/ca-trust/extracted/pem/directory-hash/c44cc0c0.0 +etc/pki/ca-trust/extracted/pem/directory-hash/c491639e.0 +etc/pki/ca-trust/extracted/pem/directory-hash/c559d742.0 +etc/pki/ca-trust/extracted/pem/directory-hash/c7f1359b.0 +etc/pki/ca-trust/extracted/pem/directory-hash/c90bc37d.0 +etc/pki/ca-trust/extracted/pem/directory-hash/ca-bundle.crt +etc/pki/ca-trust/extracted/pem/directory-hash/ca-certificates.crt +etc/pki/ca-trust/extracted/pem/directory-hash/ca6e4ad9.0 +etc/pki/ca-trust/extracted/pem/directory-hash/cb1c3204.0 +etc/pki/ca-trust/extracted/pem/directory-hash/cbb3f32b.0 +etc/pki/ca-trust/extracted/pem/directory-hash/cbf06781.0 +etc/pki/ca-trust/extracted/pem/directory-hash/cc450945.0 +etc/pki/ca-trust/extracted/pem/directory-hash/ccc52f49.0 +etc/pki/ca-trust/extracted/pem/directory-hash/cd58d51e.0 +etc/pki/ca-trust/extracted/pem/directory-hash/cd8c0d63.0 +etc/pki/ca-trust/extracted/pem/directory-hash/ce5e74ef.0 +etc/pki/ca-trust/extracted/pem/directory-hash/certSIGN_ROOT_CA.pem +etc/pki/ca-trust/extracted/pem/directory-hash/certSIGN_Root_CA_G2.pem +etc/pki/ca-trust/extracted/pem/directory-hash/cf701eeb.0 +etc/pki/ca-trust/extracted/pem/directory-hash/d06393bb.0 +etc/pki/ca-trust/extracted/pem/directory-hash/d16a5865.0 +etc/pki/ca-trust/extracted/pem/directory-hash/d18e9066.0 +etc/pki/ca-trust/extracted/pem/directory-hash/d39b0a2c.0 +etc/pki/ca-trust/extracted/pem/directory-hash/d41b5e2a.0 +etc/pki/ca-trust/extracted/pem/directory-hash/d4c339cb.0 +etc/pki/ca-trust/extracted/pem/directory-hash/d4dae3dd.0 +etc/pki/ca-trust/extracted/pem/directory-hash/d52c538d.0 +etc/pki/ca-trust/extracted/pem/directory-hash/d59297b8.0 +etc/pki/ca-trust/extracted/pem/directory-hash/d6325660.0 +etc/pki/ca-trust/extracted/pem/directory-hash/d7746a63.0 +etc/pki/ca-trust/extracted/pem/directory-hash/d7e8dc79.0 +etc/pki/ca-trust/extracted/pem/directory-hash/d887a5bb.0 +etc/pki/ca-trust/extracted/pem/directory-hash/d96b65e2.0 +etc/pki/ca-trust/extracted/pem/directory-hash/da0cfd1d.0 +etc/pki/ca-trust/extracted/pem/directory-hash/da7377f6.0 +etc/pki/ca-trust/extracted/pem/directory-hash/dbc54cab.0 +etc/pki/ca-trust/extracted/pem/directory-hash/dbff3a01.0 +etc/pki/ca-trust/extracted/pem/directory-hash/dc4d6a89.0 +etc/pki/ca-trust/extracted/pem/directory-hash/dc99f41e.0 +etc/pki/ca-trust/extracted/pem/directory-hash/dd8e9d41.0 +etc/pki/ca-trust/extracted/pem/directory-hash/ddcda989.0 +etc/pki/ca-trust/extracted/pem/directory-hash/de6d66f3.0 +etc/pki/ca-trust/extracted/pem/directory-hash/dfc0fe80.0 +etc/pki/ca-trust/extracted/pem/directory-hash/e-Szigno_Root_CA_2017.pem +etc/pki/ca-trust/extracted/pem/directory-hash/e071171e.0 +etc/pki/ca-trust/extracted/pem/directory-hash/e113c810.0 +etc/pki/ca-trust/extracted/pem/directory-hash/e13665f9.0 +etc/pki/ca-trust/extracted/pem/directory-hash/e18bfb83.0 +etc/pki/ca-trust/extracted/pem/directory-hash/e35234b1.0 +etc/pki/ca-trust/extracted/pem/directory-hash/e36a6752.0 +etc/pki/ca-trust/extracted/pem/directory-hash/e442e424.0 +etc/pki/ca-trust/extracted/pem/directory-hash/e48193cf.0 +etc/pki/ca-trust/extracted/pem/directory-hash/e73d606e.0 +etc/pki/ca-trust/extracted/pem/directory-hash/e7c037b4.0 +etc/pki/ca-trust/extracted/pem/directory-hash/e7dd1bc4.0 +etc/pki/ca-trust/extracted/pem/directory-hash/e8651083.0 +etc/pki/ca-trust/extracted/pem/directory-hash/e868b802.0 +etc/pki/ca-trust/extracted/pem/directory-hash/e8de2f56.0 +etc/pki/ca-trust/extracted/pem/directory-hash/ePKI_Root_Certification_Authority.pem +etc/pki/ca-trust/extracted/pem/directory-hash/ecccd8db.0 +etc/pki/ca-trust/extracted/pem/directory-hash/ed39abd0.0 +etc/pki/ca-trust/extracted/pem/directory-hash/ed858448.0 +etc/pki/ca-trust/extracted/pem/directory-hash/edcbddb5.0 +etc/pki/ca-trust/extracted/pem/directory-hash/ee37c333.0 +etc/pki/ca-trust/extracted/pem/directory-hash/ee532fd5.0 +etc/pki/ca-trust/extracted/pem/directory-hash/ee64a828.0 +etc/pki/ca-trust/extracted/pem/directory-hash/eed8c118.0 +etc/pki/ca-trust/extracted/pem/directory-hash/ef954a4e.0 +etc/pki/ca-trust/extracted/pem/directory-hash/emSign_ECC_Root_CA_-_C3.pem +etc/pki/ca-trust/extracted/pem/directory-hash/emSign_ECC_Root_CA_-_G3.pem +etc/pki/ca-trust/extracted/pem/directory-hash/emSign_Root_CA_-_C1.pem +etc/pki/ca-trust/extracted/pem/directory-hash/emSign_Root_CA_-_G1.pem +etc/pki/ca-trust/extracted/pem/directory-hash/f013ecaf.0 +etc/pki/ca-trust/extracted/pem/directory-hash/f058632f.0 +etc/pki/ca-trust/extracted/pem/directory-hash/f081611a.0 +etc/pki/ca-trust/extracted/pem/directory-hash/f0c70a8d.0 +etc/pki/ca-trust/extracted/pem/directory-hash/f0cd152c.0 +etc/pki/ca-trust/extracted/pem/directory-hash/f249de83.0 +etc/pki/ca-trust/extracted/pem/directory-hash/f30dd6ad.0 +etc/pki/ca-trust/extracted/pem/directory-hash/f387163d.0 +etc/pki/ca-trust/extracted/pem/directory-hash/f39fc864.0 +etc/pki/ca-trust/extracted/pem/directory-hash/f459871d.0 +etc/pki/ca-trust/extracted/pem/directory-hash/f51bb24c.0 +etc/pki/ca-trust/extracted/pem/directory-hash/f8fc53da.0 +etc/pki/ca-trust/extracted/pem/directory-hash/fa5da96b.0 +etc/pki/ca-trust/extracted/pem/directory-hash/fb5fa911.0 +etc/pki/ca-trust/extracted/pem/directory-hash/fb717492.0 +etc/pki/ca-trust/extracted/pem/directory-hash/fc5a8f99.0 +etc/pki/ca-trust/extracted/pem/directory-hash/fd08c599.0 +etc/pki/ca-trust/extracted/pem/directory-hash/fd64f3fc.0 +etc/pki/ca-trust/extracted/pem/directory-hash/fde84897.0 +etc/pki/ca-trust/extracted/pem/directory-hash/fe8a2cd8.0 +etc/pki/ca-trust/extracted/pem/directory-hash/feffd413.0 +etc/pki/ca-trust/extracted/pem/directory-hash/ff34af3f.0 +etc/pki/ca-trust/extracted/pem/directory-hash/ffa7f1eb.0 +etc/pki/ca-trust/extracted/pem/directory-hash/vTrus_ECC_Root_CA.pem +etc/pki/ca-trust/extracted/pem/directory-hash/vTrus_Root_CA.pem etc/pki/ca-trust/extracted/pem/email-ca-bundle.pem etc/pki/ca-trust/extracted/pem/objsign-ca-bundle.pem etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem |