security/linux-c7-ca-certificates: + Mozilla certificates for Linuxulator.

Sponsored by:	Serenity Cybersecurity, LLC

6 files changed, 51 insertions, 0 deletions

diff --git a/Mk/Uses/linux.mk b/Mk/Uses/linux.mk
index b0f84749c287..a8db1eaa7831 100644
--- a/Mk/Uses/linux.mk
+++ b/Mk/Uses/linux.mk
@@ -51,6 +51,7 @@ _linux_c7_at-spi2-core=			linux-c7-at-spi2-core>0:accessibility/linux-c7-at-spi2
 _linux_${linux_ARGS}_atk=		linux-${linux_ARGS}-atk>0:accessibility/linux-${linux_ARGS}-atk
 _linux_${linux_ARGS}_avahi-libs=	linux-${linux_ARGS}-avahi-libs>0:net/linux-${linux_ARGS}-avahi-libs
 _linux_c7_base=				linux_base-c7>=7.6.1810_7:emulators/linux_base-c7
+_linux_c7_ca-certificates=		linux-c7-ca-certificates>0:security/linux-c7-ca-certificates
 _linux_${linux_ARGS}_cairo=		linux-${linux_ARGS}-cairo>0:graphics/linux-${linux_ARGS}-cairo
 _linux_c7_cairo-gobject=		linux-c7-cairo-gobject>0:graphics/linux-c7-cairo-gobject
 _linux_${linux_ARGS}_cups-libs=		linux-${linux_ARGS}-cups-libs>0:print/linux-${linux_ARGS}-cups-libs
diff --git a/security/Makefile b/security/Makefile
index 008983a629cd..14ae5cc7a0a2 100644
--- a/security/Makefile
+++ b/security/Makefile
@@ -321,6 +321,7 @@
     SUBDIR += libzrtpcppcore
     SUBDIR += lime
     SUBDIR += linux-bitwarden-cli
+    SUBDIR += linux-c7-ca-certificates
     SUBDIR += linux-c7-cyrus-sasl2
     SUBDIR += linux-c7-gnutls
     SUBDIR += linux-c7-libgcrypt
diff --git a/security/linux-c7-ca-certificates/Makefile b/security/linux-c7-ca-certificates/Makefile
new file mode 100644
index 000000000000..1cfef19f0902
--- /dev/null
+++ b/security/linux-c7-ca-certificates/Makefile
@@ -0,0 +1,17 @@
+PORTNAME=	ca-certificates
+PORTVERSION=	2022.2.54
+DISTVERSIONSUFFIX=	-74.el7_9
+CATEGORIES=	security linux
+
+MAINTAINER=	emulation@FreeBSD.org
+COMMENT=	Mozilla CA root certificate bundle (Linux CentOS ${LINUX_DIST_VER})
+
+LICENSE=	PD
+
+USES=		linux:c7
+USE_LINUX=	p11-kit
+USE_LINUX_RPM=	noarch
+
+OPTIONS_DEFINE=	DOCS
+
+.include <bsd.port.mk>
diff --git a/security/linux-c7-ca-certificates/distinfo b/security/linux-c7-ca-certificates/distinfo
new file mode 100644
index 000000000000..49fb3dc1f01a
--- /dev/null
+++ b/security/linux-c7-ca-certificates/distinfo
@@ -0,0 +1,5 @@
+TIMESTAMP = 1678287644
+SHA256 (centos/ca-certificates-2022.2.54-74.el7_9.noarch.rpm) = d56f208cb0a3f9404c7aa65a34d04ff637f76d4517d2f68c4c63ec940a0806a5
+SIZE (centos/ca-certificates-2022.2.54-74.el7_9.noarch.rpm) = 933048
+SHA256 (centos/ca-certificates-2022.2.54-74.el7_9.src.rpm) = 982420995b7554b83ff0434a6697faafc620e71d6b48307b08674e9e97d907c8
+SIZE (centos/ca-certificates-2022.2.54-74.el7_9.src.rpm) = 668658
diff --git a/security/linux-c7-ca-certificates/pkg-descr b/security/linux-c7-ca-certificates/pkg-descr
new file mode 100644
index 000000000000..b835104f5911
--- /dev/null
+++ b/security/linux-c7-ca-certificates/pkg-descr
@@ -0,0 +1,2 @@
+Root certificates from certificate authorities included in the Mozilla
+NSS library and thus in Firefox and Thunderbird.
diff --git a/security/linux-c7-ca-certificates/pkg-plist b/security/linux-c7-ca-certificates/pkg-plist
new file mode 100644
index 000000000000..50d7088b971c
--- /dev/null
+++ b/security/linux-c7-ca-certificates/pkg-plist
@@ -0,0 +1,25 @@
+etc/pki/ca-trust/README
+etc/pki/ca-trust/ca-legacy.conf
+etc/pki/ca-trust/extracted/README
+etc/pki/ca-trust/extracted/java/README
+etc/pki/ca-trust/extracted/openssl/README
+etc/pki/ca-trust/extracted/pem/README
+etc/pki/ca-trust/source/README
+etc/pki/java/cacerts
+etc/pki/tls/cert.pem
+etc/pki/tls/certs/ca-bundle.crt
+etc/pki/tls/certs/ca-bundle.trust.crt
+etc/ssl/certs
+usr/bin/ca-legacy
+usr/bin/update-ca-trust
+%%PORTDOCS%%%%DOCSDIR%%/README
+usr/share/man/man8/ca-legacy.8.gz
+usr/share/man/man8/update-ca-trust.8.gz
+usr/share/pki/ca-trust-legacy/ca-bundle.legacy.default.crt
+usr/share/pki/ca-trust-legacy/ca-bundle.legacy.disable.crt
+usr/share/pki/ca-trust-source/README
+usr/share/pki/ca-trust-source/ca-bundle.trust.p11-kit
+@dir etc/pki/ca-trust/source/anchors
+@dir etc/pki/ca-trust/source/blacklist
+@dir usr/share/pki/ca-trust-source/anchors
+@dir usr/share/pki/ca-trust-source/blacklist