%define pkidir %{_sysconfdir}/pki
%define class1hash %(openssl x509 -hash -noout -in %{SOURCE0})
%define class3hash %(openssl x509 -hash -noout -in %{SOURCE1})
Summary: CAcert.org CA root certificates
Name: ca-cacert.org
Version: 2008
Release: 3
License: FIXME
Group: System Environment/Base
URL: http://www.cacert.org/
# Class 1 PKI Key
Source0: http://www.cacert.org/certs/root.crt
# Class 3 PKI Key
Source1: http://www.cacert.org/certs/class3.crt
# From http://www.cacert.org/policy/NRPDisclaimerAndLicence.php
# Alse see http://wiki.cacert.org/wiki/NrpLicense
Source2: NRP-DaL.txt
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root
# For the parent directories
Requires: openssl
# Include both keys
Requires: %{name}-class1
Requires: %{name}-class3
# For the hash generation
BuildRequires: openssl
BuildArch: noarch
%description
Class 1 and Class 3 PKI keys from CAcert.org, to trust SSL certificates signed
by either key of the CAcert Certificate Authority (CA).
%package class1
Summary: CAcert.org CA Class 1 root certificate
Group: System Environment/Base
%description class1
Class 1 PKI key from CAcert.org, to trust SSL certificates signed by the Class
1 key of the CAcert Certificate Authority (CA).
%package class3
Summary: CAcert.org CA Class 3 root certificate
Group: System Environment/Base
%description class3
Class 3 PKI key from CAcert.org, to trust SSL certificates signed by the Class
3 key of the CAcert Certificate Authority (CA).
%prep
%build
%install
%{__rm} -rf %{buildroot}
# Class 1
%{__install} -D -p -m 0644 %{SOURCE0} \
%{buildroot}%{pkidir}/tls/certs/%{name}-class1.crt
%{__ln_s} %{name}-class1.crt %{buildroot}%{pkidir}/tls/certs/%{class1hash}.0
# Class 3
%{__install} -D -p -m 0644 %{SOURCE1} \
%{buildroot}%{pkidir}/tls/certs/%{name}-class3.crt
%{__ln_s} %{name}-class3.crt %{buildroot}%{pkidir}/tls/certs/%{class3hash}.0
%{__install} -p -m 0644 %{SOURCE2} NRP-DaL.txt
%clean
%{__rm} -rf %{buildroot}
%files
%defattr(-,root,root,-)
# No files, just require both sub-packages
%files class1
%defattr(-,root,root,-)
%doc NRP-DaL.txt
%{pkidir}/tls/certs/%{name}-class1.crt
%{pkidir}/tls/certs/%{class1hash}.0
%files class3
%defattr(-,root,root,-)
%doc NRP-DaL.txt
%{pkidir}/tls/certs/%{name}-class3.crt
%{pkidir}/tls/certs/%{class3hash}.0
%changelog
* Tue Dec 9 2008 Matthias Saou 2008-3
- Include NRP-DaL.txt (Non Related Persons Disclaimer and Licence) file.
* Thu Dec 4 2008 Matthias Saou 2008-2
- Rename crt files s/cacert/%%{name}/.
* Wed Dec 3 2008 Matthias Saou 2008-1
- Initial RPM release.