xref: /freebsd/secure/caroot/Makefile (revision 07b52233e8b74c5ac884b9c9a894f57fad8dbd00)
1CLEANFILES+=	certdata.txt
2
3SUBDIR+=	trusted
4SUBDIR+=	untrusted
5
6.include <bsd.obj.mk>
7
8# Set this to an upstream hash or tag
9# https://hg-edge.mozilla.org/projects/nss/tags
10HGVER = NSS_3_123_1_RTM
11
12# To be used by secteam@ to update the trusted certificates
13fetchcerts: .PHONY
14	fetch --mirror -o certdata.txt 'https://hg-edge.mozilla.org/projects/nss/raw-file/${HGVER}/lib/ckfw/builtins/certdata.txt'
15
16cleancerts: .PHONY
17	@${MAKE} -C ${.CURDIR}/trusted ${.TARGET}
18	@${MAKE} -C ${.CURDIR}/untrusted ${.TARGET}
19
20updatecerts: .PHONY cleancerts fetchcerts
21	perl ${.CURDIR}/ca-extract.pl -i certdata.txt \
22	    -t ${.CURDIR}/trusted -u ${.CURDIR}/untrusted
23