New package: certiliamiddleware-3.9.8#60060
New package: certiliamiddleware-3.9.8#60060mabasic wants to merge 1 commit intovoid-linux:masterfrom
Conversation
| # Template file for 'certiliamiddleware' | ||
| pkgname=certiliamiddleware | ||
| version=3.9.8 | ||
| revision=2 |
There was a problem hiding this comment.
Revision is a void-specific sequence index. You cannot use this number as a meaningful component of the upstream version. You'll need to remote the reference to $revision in distfiles, fully encode the upstream version (e.g., as 3.9.8.2) and split that as appropriate.
There was a problem hiding this comment.
Fixed I think, 3.9.8-2 as version?
| } | ||
|
|
||
| post_install() { |
There was a problem hiding this comment.
There is no value in splitting off a post_install; everything should just happen in do_install.
There was a problem hiding this comment.
I was confused on what goes where and when.
do_install() {
mkdir -p ${DESTDIR}/usr/share/ca-certificates/trust-source/anchors
mv ${DESTDIR}/usr/share/ca-certificates/akd/* ${DESTDIR}/usr/share/ca-certificates/trust-source/anchors
vlicense ${DESTDIR}/opt/certiliamiddleware/licenses/MiddlewareLicense LICENSE
vcopy opt /
vcopy usr /
}
Would this work?
There was a problem hiding this comment.
It won't work because you're trying to move things around in DESTDIR before you've populated it. Also, you're not moving the certificates the same way that they do in the Arch pkgbuild:
mv -v ${pkgdir}/usr/share/ca-certificates/akd ${pkgdir}/usr/share/ca-certificates/trust-source/anchors
Note the lack of trailing /* in the source; they want to move the directory, not its contents.
To make a directory in the DESTDIR, use vmkdir.
There was a problem hiding this comment.
I have added /* because on my arch machine after installing the package certificates are in /anchors/* not in /anchors/akd/*. Either way I could not see them in chromium in void regardless of the location, but it worked on arch...
Fixed mv -> vmkdir
There was a problem hiding this comment.
This in on arch:
mkdir -pv ${pkgdir}/usr/share/ca-certificates/trust-source
mv -v ${pkgdir}/usr/share/ca-certificates/akd ${pkgdir}/usr/share/ca-certificates/trust-source/anchors
They do not create /usr/share/ca-certificates/trust-source/anchors but /usr/share/ca-certificates/trust-source. Maybe then mv moves files from akd/* to anchors/*?
| } | ||
|
|
||
| post_install() { | ||
| mkdir -p usr/share/ca-certificates/trust-source/anchors |
There was a problem hiding this comment.
This is not creating the directory where you expect.
There was a problem hiding this comment.
I have no idea where is that creating the directory :)
Should I place that line like so mkdir -p ${DESTDIR}/usr/share/ca-certificates/trust-source/anchors but above the vcopy usr / line ?
722766b to
ae09029
Compare
ae09029 to
f0d5e3d
Compare
Testing the changes
New package
Local build testing
Notes
I am sad to contribute with a proprietary program :( but the whole country needs it sadly...
There is a package on Arch AUR: https://aur.archlinux.org/packages/certiliamiddleware which is maintained by the company that makes the software. I have managed to get it running on my system by following instructions from PKGBUILD and applying void specific depends.
To get this package running correctly the user has to:
sudo ln -s /etc/sv/pcscd /var/service/for the smart card readerQT_QPA_PLATFORMset, or set toxcbotherwise the signer will throw error Internal Server Error 500 on port 55555 during signingThen depending on the browser do the following:
Privacy -> Security devices-> Click Load -> Add name "Certilia" with location/opt/certiliamiddleware/pkcs11/libCertiliaPkcs11.so~/.pki/nssdb(only native, not snap/flatpak), users should add module with:But in all my testing I haven't managed to login with a chromium browser because it crashes after I enter the PIN code twice and select the certificate.
Also, for some reason on void Chromium browser does not see any certificates in Local certificates even though "import local certificates from your operating system" is turned on. On arch it shows the certificates from
usr/share/ca-certificates/trust-source/anchors. Regardless if there are certificates loaded it crashes in both cases. But on Void it would not load those certificates at all.I have tried running
update-ca-certificateson void but it detects none. I assume that this should do the same asupdate-ca-truston arch?Only firefox based browser work login and signing.
Question
I plan to write a detailed blog post regarding on how to setup this program to work. What do you think is the best way to let the user (the person who installs this software) to know what more he needs to do after installing this package?