feat(24.04) add default-certs and bins to ca-certs

canonical · Jul 3, 2024 · 0417cb0 · 0417cb0
1 parent f915a15
commit 0417cb0
Showing 1 changed file with 15 additions and 1 deletion.
diff --git a/slices/ca-certificates.yaml b/slices/ca-certificates.yaml
@@ -6,7 +6,6 @@ essential:
 slices:
   data:
     contents:
-      /etc/ca-certificates.conf: {text: FIXME, mutable: true}
       /etc/ssl/certs/ca-certificates.crt: {text: FIXME, mutable: true}
       /usr/share/ca-certificates/mozilla/: {until: mutate}
       /usr/share/ca-certificates/mozilla/*: {until: mutate}
@@ -16,11 +15,26 @@ slices:
         content.read(certs_dir + path) for path in content.list(certs_dir)
       ]
       content.write("/etc/ssl/certs/ca-certificates.crt", "".join(certs))
+
+  default-certs:
+    essential:
+      - ca-certificates_data
+    contents:
+      /etc/ca-certificates.conf: {text: FIXME, mutable: true}
+      /usr/share/ca-certificates/mozilla/**:
+    mutate: |
+      certs_dir = "/usr/share/ca-certificates/mozilla/"
       names = [
         "mozilla/{}".format(name) for name in content.list(certs_dir)
       ]
       content.write("/etc/ca-certificates.conf", "\n".join(names))
 
+  bins:
+    essential:
+      - openssl_bins
+    contents:
+      /usr/sbin/update-ca-certificates:
+
   copyright:
     contents:
       /usr/share/doc/ca-certificates/copyright: