mirror of
https://github.com/SerenityOS/serenity.git
synced 2026-11-07 04:29:30 -10:00
Linus Groh
94beea58f1
We went from "compromised CA keys" to "the key is 4, chosen by fair dice roll" in a matter of hours: - https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/0R3XLJL6FuE - https://chaos.social/@fluepke/117474156947559280
27 lines
1.1 KiB
CMake
27 lines
1.1 KiB
CMake
include(${CMAKE_CURRENT_LIST_DIR}/utils.cmake)
|
|
|
|
set(CACERT_VERSION "2026-10-20")
|
|
set(CACERT_SHA256 "796f1389bfea13c0ed78f663b765baaff54a508e5483786bd6ece73c5e3e3cbe")
|
|
|
|
set(CACERT_PATH "${SERENITY_CACHE_DIR}/CACERT" CACHE PATH "Download location for cacert.pem")
|
|
set(CACERT_VERSION_FILE "${CACERT_PATH}/version.txt")
|
|
|
|
set(CACERT_FILE cacert-${CACERT_VERSION}.pem)
|
|
set(CACERT_URL https://curl.se/ca/${CACERT_FILE})
|
|
set(CACERT_INSTALL_FILE cacert.pem)
|
|
|
|
if (ENABLE_CACERT_DOWNLOAD)
|
|
if (ENABLE_NETWORK_DOWNLOADS)
|
|
download_file("${CACERT_URL}" "${CACERT_PATH}/${CACERT_FILE}" SHA256 "${CACERT_SHA256}" VERSION "${CACERT_VERSION}" VERSION_FILE "${CACERT_VERSION_FILE}" CACHE_PATH "${CACERT_PATH}")
|
|
else()
|
|
message(STATUS "Skipping download of ${CACERT_URL}, expecting it to have been downloaded to ${CACERT_PATH}")
|
|
endif()
|
|
|
|
if (NOT "${CMAKE_STAGING_PREFIX}" STREQUAL "")
|
|
set(CACERT_INSTALL_PATH ${CMAKE_STAGING_PREFIX}/etc/${CACERT_INSTALL_FILE})
|
|
else()
|
|
set(CACERT_INSTALL_PATH ${CMAKE_CURRENT_BINARY_DIR}/${CACERT_INSTALL_FILE})
|
|
endif()
|
|
configure_file(${CACERT_PATH}/${CACERT_FILE} ${CACERT_INSTALL_PATH} COPYONLY)
|
|
endif()
|