openjdk11: use p11-kit directly instead of make-ca

This commit is contained in:
oreo639 2025-04-08 18:18:19 -07:00
parent cdb97532e3
commit 442bebb347

View file

@ -28,7 +28,7 @@ configure_args="
make_build_args="images static-libs-image $(vopt_if docs docs)"
make_check_target="test-hotspot-gtest"
hostmakedepends="pkg-config automake autoconf cpio tar unzip zip ca-certificates
openssl zlib-devel which make-ca"
openssl zlib-devel which p11-kit"
makedepends="libXrender-devel libXtst-devel libXt-devel libXrandr-devel
giflib-devel libjpeg-turbo-devel cups-devel freetype-devel alsa-lib-devel
fontconfig-devel zlib-devel lcms2-devel"
@ -113,11 +113,10 @@ do_configure() {
do_install() {
vmkdir $_jdk_home
vcopy build/*-normal-*-release/images/jdk/* $_jdk_home
vmkdir $_jdk_home/lib/security
make-ca -g -f --destdir "${PWD}/ca" -k $DESTDIR/$_jdk_home/bin/keytool
mv ./ca/etc/pki/tls/java/cacerts $DESTDIR/$_jdk_home/lib/security/
chmod -R ugo+rw ./ca
rm -Rf ./ca
trust extract --overwrite --filter=ca-anchors --format=java-cacerts --purpose server-auth "${DESTDIR}/${_jdk_home}/lib/security/cacerts"
vlicense ASSEMBLY_EXCEPTION
vlicense LICENSE
}