pkgname=ca-certificates
pkgver=$(date -u --iso | sed 's@-@@g')
make_ca_ver=1.14
pkgrel=1
pkgdesc="The Grep package contains programs for searching through files"
arch=('x86_64')
url="https://github.com/lfs-book/make-ca"
license=('MIT' 'GPL3')
depends=('openssl' 'p11-kit' 'nss')
makedepends=('systemd')
install=${pkgname}.install
source=(https://github.com/lfs-book/make-ca/archive/v${make_ca_ver}/make-ca-${make_ca_ver}.tar.gz
    http://www.cacert.org/certs/root.crt
    http://www.cacert.org/certs/class3.crt
    https://hg.mozilla.org/projects/nss/raw-file/tip/lib/ckfw/builtins/certdata.txt)
sha256sums=(6391698fe6db16eb190da1aba802bc90c09c8baa4c116d9c65647bea87f190db
    c0e0773a79dceb622ef6410577c19c1e177fb2eb9c623a49340de3c9f1de2560
    f5badaa5da1cc05b110a9492455a2c2790d00c7175dcf3a7bcb5441af71bf84f
    c99d6d3f8d3d4e47719ba2b648992f5b58b150128d3aca3c05c566d8dc98e116)

package() {
    cd make-ca-${make_ca_ver}

    make DESTDIR=${pkgdir} install

    install -vdm755 ${pkgdir}/etc/ssl/local

    ${pkgdir}/usr/sbin/make-ca -C ${srcdir}/certdata.txt -D ${pkgdir}

    openssl x509 -in ${srcdir}/root.crt -text -fingerprint -setalias "CAcert Class 1 root" \
        -addtrust serverAuth -addtrust emailProtection -addtrust codeSigning \
        > ${pkgdir}/etc/ssl/local/CAcert_Class_1_root.pem
    openssl x509 -in ${srcdir}/class3.crt -text -fingerprint -setalias "CAcert Class 3 root" \
        -addtrust serverAuth -addtrust emailProtection -addtrust codeSigning \
        > ${pkgdir}/etc/ssl/local/CAcert_Class_3_root.pem

    ${pkgdir}/usr/sbin/make-ca -C ${srcdir}/certdata.txt -D  ${pkgdir}

    install -vdm755 ${pkgdir}/etc/profile.d
    cat > ${pkgdir}/etc/profile.d/pythoncerts.sh << "EOF"
# Begin /etc/profile.d/pythoncerts.sh

export _PIP_STANDALONE_CERT=/etc/pki/tls/certs/ca-bundle.crt

# End /etc/profile.d/pythoncerts.sh
EOF
}