Die Configure-Zeilen sind von LFS oder BLFS unter MIT lizenziert extrahiert.





#
# libunistring
#


cd $BAU

pwd


if [ -d libunistring-1.4.1 ]
then
	rm --force --recursive libunistring-1.4.1
fi


tar --extract -f libunistring-1.4.1.tar.xz

cd libunistring-1.4.1

pwd



sed -r '/_GL_EXTERN_C/s/w?memchr|bsearch/(&)/' \
    -i $(find -name \*.in.h)


./configure --prefix=/usr    \
            --disable-static \
            --docdir=/usr/share/doc/libunistring-1.4.1 &&
make


make install



cd ..

pwd








#
# libidn2
#


cd $BAU

pwd


if [ -d libidn2-2.3.8 ]
then
	rm --force --recursive libidn2-2.3.8
fi


tar --extract -f libidn2-2.3.8.tar.gz

cd libidn2-2.3.8

pwd



./configure --prefix=/usr --disable-static &&
make


make install



cd ..

pwd











#
# libpsl
#


cd $BAU

pwd


if [ -d libpsl-0.21.5 ]
then
	rm --force --recursive libpsl-0.21.5
fi


tar --extract -f libpsl-0.21.5.tar.gz

cd libpsl-0.21.5

pwd



mkdir build &&
cd    build &&

meson setup --prefix=/usr --buildtype=release &&

ninja


ninja install



cd ..

cd ..

pwd






#
# libtasn1
#


cd $BAU

pwd


if [ -d libtasn1-4.21.0 ]
then
	rm --force --recursive libtasn1-4.21.0
fi


tar --extract -f libtasn1-4.21.0.tar.gz

cd libtasn1-4.21.0

pwd



./configure --prefix=/usr --disable-static &&
make


make install


make -C doc/reference install-data-local



cd ..

pwd








#
# p11-kit
#


cd $BAU

pwd


if [ -d p11-kit-0.26.2 ]
then
	rm --force --recursive p11-kit-0.26.2
fi


tar --extract -f p11-kit-0.26.2.tar.xz

cd p11-kit-0.26.2

pwd



sed '20,$ d' -i trust/trust-extract-compat &&

cat >> trust/trust-extract-compat << "EOF"
# Copy existing anchor modifications to /etc/ssl/local
/usr/libexec/make-ca/copy-trust-modifications

# Update trust stores
/usr/sbin/make-ca -r
EOF


mkdir p11-build &&
cd    p11-build &&

meson setup ..            \
      --prefix=/usr       \
      --buildtype=release \
      -D trust_paths=/etc/pki/anchors &&
ninja


ninja install &&
ln -sfv /usr/libexec/p11-kit/trust-extract-compat \
        /usr/bin/update-ca-certificates


ln -sfv ./pkcs11/p11-kit-trust.so /usr/lib/libnssckbi.so



cd ..

cd ..

pwd











#
# make-ca
#


cd $BAU

pwd


if [ -d make-ca-1.16.1 ]
then
	rm --force --recursive make-ca-1.16.1
fi


tar --extract -f make-ca-1.16.1.tar.gz

cd make-ca-1.16.1

pwd



sed '/mktemp/s/-t //' -i make-ca


make install &&
install -vdm755 /etc/ssl/local


/usr/sbin/make-ca -g


systemctl enable update-pki.timer


export _PIP_STANDALONE_CERT=/etc/pki/tls/certs/ca-bundle.crt


mkdir -pv /etc/profile.d &&
cat > /etc/profile.d/pythoncerts.sh << "EOF"
# Begin /etc/profile.d/pythoncerts.sh

export _PIP_STANDALONE_CERT=/etc/pki/tls/certs/ca-bundle.crt

# End /etc/profile.d/pythoncerts.sh
EOF



cd ..

pwd











#
# wget
#


cd $BAU

pwd


if [ -d wget-1.25.0 ]
then
	rm --force --recursive wget-1.25.0
fi


tar --extract -f wget-1.25.0.tar.gz

cd wget-1.25.0

pwd



./configure --prefix=/usr      \
            --sysconfdir=/etc  \
            --with-ssl=openssl &&
make


make install



cd ..

pwd