Commit Graph

14 Commits

Author SHA1 Message Date
Xi Ruoyao
d3562bc2f0
verify hg.mozilla.org with bundled CA root
Before this, make-ca does not verify the certificate of hg.mozilla.org
at all.  It makes sense as make-ca often runs on systems without trust
anchor.  But, a MIM can easily fake hg.mozilla.org and completely hijack
the trust anchor of a BLFS system.

To improve the situation, we ship the certificate of the CA root for
hg.mozilla.org (DigiCert Global Root CA) in the make-ca package, and use
it to verify hg.mozilla.org.
2022-01-31 19:07:08 +08:00
DJ Lucas
76fa47f5d0
Don't install systemd timers on non-systemd
Fixes #18
2022-01-10 00:16:47 -06:00
DJ Lucas
4ee256bfb9 README,Makefile: move distfiles to /etc/make-ca.
Closes #16.
2021-09-13 22:01:58 -05:00
DJ Lucas
c41b7f3d4b Makefile,make-ca: Use Microsoft's trust for code signing with -i | --mscodesign. 2021-08-08 11:03:12 -05:00
Xℹ Ruoyao
84d5ba706c Makefile: add dependency so "make install" won't need -j1
Now due to a missing dependency, "make install" will fail if
MAKEFLAGS="-j N" is set to $N > 1$.  Add an additional dependency to
fix it.
2020-02-05 14:47:02 +08:00
DJ Lucas
30fc33d7fe Changed default name of anchors list to use md5sums extension
Added copy-trust-modifcations script for use by p11-kit
2019-01-01 20:00:04 -06:00
DJ Lucas
a3a5711466 Allow definition of configuratino file and install default configuration file. 2018-12-01 17:21:37 -06:00
DJ Lucas
b8603c3856 Perform system installation of update service files
Separate installation step for other consumers
- Partial merge of PR from Graham Weldon
2018-12-01 17:07:13 -06:00
DJ Lucas
ad038d1a46 Add uninstall and clean target, install systemd units 2017-09-30 02:40:10 -05:00
DJ Lucas
61576faff8 Fix target 2017-09-24 21:19:25 -05:00
DJ Lucas
497dd83b6c Update documentation and program output 2017-09-22 19:57:31 -05:00
DJ Lucas
3f2d76de5b Fix makefile for new name 2017-09-19 00:35:08 -05:00
DJ Lucas
9f41705824 MANDIR and SBINDIR 2017-09-14 21:33:59 -05:00
DJ Lucas
adfabec5d9 Add Makefile and help2man script. 2017-09-14 21:29:03 -05:00