Changeset fe54f243 for postlfs/security/cacerts.xml

Timestamp:

02/12/2012 03:58:59 AM (12 years ago)

Author:

Bruce Dubbs <bdubbs@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

f42ffb8a

Parents:

b17ac78

Message:

Update ca-cert scripts.

Account for changed upstream format.
Ensure date command works for all systems.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@9380 af4574ff-66df-0310-9fd7-8a98e5e911e0

File:

• postlfs/security/cacerts.xml (modified) (5 diffs)

postlfs/security/cacerts.xml

@@ -89 +89 @@
 # Authors: DJ Lucas
 #          Bruce Dubbs
+#
+# Version 20120211
 
 my $certdata = './tempfile.cer';
@@ -143 +145 @@
 # Authors: DJ Lucas
 #          Bruce Dubbs
+#
+# Version 20120211
 
 certdata="certdata.txt"
@@ -194 +198 @@
   # Make sure that the cert is trusted...
   grep "CKA_TRUST_SERVER_AUTH" "${tempfile}" | \
-    grep "CKT_NETSCAPE_TRUST_UNKNOWN" > /dev/null
+    egrep "TRUST_UNKNOWN|NOT_TRUSTED" > /dev/null
 
   if test "${?}" = "0"; then
@@ -238 +242 @@
 #!/bin/bash
 # Begin /bin/remove-expired-certs.sh
+#
+# Version 20120211
+
+# Make sure the date is parsed correctly on all systems
+function mydate()
+{
+  local y=$( echo $1 | cut -d" " -f4 )
+  local M=$( echo $1 | cut -d" " -f1 )
+  local d=$( echo $1 | cut -d" " -f2 )
+  local m
+
+  case $M in
+    Jan) m="01";;
+    Feb) m="02";;
+    Mar) m="03";;
+    Apr) m="04";;
+    May) m="05";;
+    Jun) m="06";;
+    Jul) m="07";;
+    Aug) m="08";;
+    Sep) m="09";;
+    Oct) m="10";;
+    Nov) m="11";;
+    Dec) m="12";;
+  esac
+
+  certdate="${y}${m}${d}"
+}
 
 OPENSSL=/usr/bin/openssl
@@ -252 +284 @@
   notafter=$( $OPENSSL x509 -enddate -in "${cert}" -noout )
   date=$( echo ${notafter} |  sed 's/^notAfter=//' )
-
-  if [ $( date -d "${date}" +%Y%m%d ) -lt ${today} ]; then
+  mydate "date"
+
+  if [ ${certdate} -lt ${today} ]; then
      echo "${cert} is expired! Removing..."
      rm -f "${cert}"