aboutsummaryrefslogtreecommitdiff
path: root/secure/caroot/Makefile
blob: e0ef4623b498366cb47a178e52f59836ea43c113 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
CLEANFILES+=	certdata.txt

SUBDIR+=	trusted
SUBDIR+=	untrusted

.include <bsd.obj.mk>

# To be used by secteam@ to update the trusted certificates
fetchcerts: .PHONY
	fetch --no-sslv3 --no-tlsv1 -o certdata.txt 'https://raw.githubusercontent.com/mozilla-firefox/firefox/refs/heads/release/security/nss/lib/ckfw/builtins/certdata.txt'

cleancerts: .PHONY
	@${MAKE} -C ${.CURDIR}/trusted ${.TARGET}

updatecerts: .PHONY cleancerts fetchcerts
	perl ${.CURDIR}/ca-extract.pl -i certdata.txt \
	    -t ${.CURDIR}/trusted -u ${.CURDIR}/untrusted