From 6ee1625e703c1339186f8d6a7775d5270ae4a06e Mon Sep 17 00:00:00 2001 From: bart Date: Tue, 20 Oct 2026 23:36:47 +0200 Subject: [PATCH] feat(ca): configure browser trust policies for Chrome, Chromium, Brave and Firefox (v1.0.1) --- binaries/dists/stable/InRelease | 71 ++++------- binaries/dists/stable/Release | 52 +++----- binaries/dists/stable/Release.gpg | 17 +-- .../dists/stable/main/binary-amd64/Packages | 118 +++++++++++++----- .../stable/main/binary-amd64/Packages.bz2 | Bin 1357 -> 1893 bytes .../stable/main/binary-amd64/Packages.gz | Bin 1268 -> 1747 bytes .../bnhmeijer-ca-certificates-1.0.1_all.deb | Bin 0 -> 3548 bytes .../bnhmeijer_ca_certificates/bin/build.sh | 1 + .../bnhmeijer-ca-certificates.control | 6 +- .../bnhmeijer-ca-certificates/DEBIAN/postinst | 30 ++++- .../bnhmeijer-ca-certificates/DEBIAN/postrm | 21 +++- .../brave/policies/managed/bnhmeijer-ca.json | 5 + .../policies/managed/bnhmeijer-ca.json | 5 + .../etc/firefox/policies/policies.json | 10 ++ .../chrome/policies/managed/bnhmeijer-ca.json | 5 + .../bnhmeijer-ca-certificates-1.0.1_all.deb | Bin 0 -> 3548 bytes 16 files changed, 215 insertions(+), 126 deletions(-) create mode 100644 binaries/pool/main/b/bnhmeijer-ca-certificates/bnhmeijer-ca-certificates-1.0.1_all.deb create mode 100644 sources/bnhmeijer_ca_certificates/packaging/bnhmeijer-ca-certificates/etc/brave/policies/managed/bnhmeijer-ca.json create mode 100644 sources/bnhmeijer_ca_certificates/packaging/bnhmeijer-ca-certificates/etc/chromium/policies/managed/bnhmeijer-ca.json create mode 100644 sources/bnhmeijer_ca_certificates/packaging/bnhmeijer-ca-certificates/etc/firefox/policies/policies.json create mode 100644 sources/bnhmeijer_ca_certificates/packaging/bnhmeijer-ca-certificates/etc/opt/chrome/policies/managed/bnhmeijer-ca.json create mode 100644 staging/bnhmeijer-ca-certificates-1.0.1_all.deb diff --git a/binaries/dists/stable/InRelease b/binaries/dists/stable/InRelease index ed8a64b..ee9ff1b 100644 --- a/binaries/dists/stable/InRelease +++ b/binaries/dists/stable/InRelease @@ -1,57 +1,34 @@ -----BEGIN PGP SIGNED MESSAGE----- -Hash: SHA256 +Hash: SHA512 -Origin: . stable -Label: . stable +Origin: Eendoe +Label: Eendoe Repository Suite: stable Codename: stable -Date: Wed, 27 Dec 2023 15:09:09 UTC -Architectures: amd64 +Date: Tue, 20 Oct 2026 21:36:18 +0000 +Architectures: amd64 all Components: main -Description: Generated by aptly +Description: Eendoe Private APT Package Repository MD5Sum: - cf5f351b126aaab2bf6ca97c13b378c5 3405449 Contents-amd64 - 9f23a2449f3abc4c6fccecfd01fd86e3 152525 Contents-amd64.gz - cf5f351b126aaab2bf6ca97c13b378c5 3405449 main/Contents-amd64 - 9f23a2449f3abc4c6fccecfd01fd86e3 152525 main/Contents-amd64.gz - f8778b24beb2988de929e2d59d1f4c58 2761 main/binary-amd64/Packages - a9ae692d17b8e39db0555ab28ca1207d 1357 main/binary-amd64/Packages.bz2 - 9a64097df252b063fd82b0127ffc57ae 1268 main/binary-amd64/Packages.gz - 1a863a05e2aa38a0db0bf785722d7fae 99 main/binary-amd64/Release + 8fc1ad8fefc657a8da319cc9b55c6eaf 4709 main/binary-amd64/Packages + a6c07fa32055f89a45b322fc1804dd8e 1747 main/binary-amd64/Packages.gz + cddb357d915f3e3cc9c59e221003730d 1893 main/binary-amd64/Packages.bz2 SHA1: - 5fe9dd2d9aa59f1f24de2ca35728e05db5f74655 3405449 Contents-amd64 - 3913d6a2268e0599ee051d4a267b70a4740c03fa 152525 Contents-amd64.gz - 5fe9dd2d9aa59f1f24de2ca35728e05db5f74655 3405449 main/Contents-amd64 - 3913d6a2268e0599ee051d4a267b70a4740c03fa 152525 main/Contents-amd64.gz - 7236da7bf2d82d5b66a9305d78f7ec7876792c71 2761 main/binary-amd64/Packages - a2ed1b4117915d2349051ada9ddc089113aa7803 1357 main/binary-amd64/Packages.bz2 - a628182db07c468ccf6236597693c3624a0eb9f8 1268 main/binary-amd64/Packages.gz - 279ffa18634b8d6c311595f6e6db2c1b2324b3ef 99 main/binary-amd64/Release + e349ded34482fa7054812a7ff8ec1675a0d3987b 4709 main/binary-amd64/Packages + c8c126f431f6813812de54c586da7d3c998008cb 1747 main/binary-amd64/Packages.gz + f875d955166a78973c768b08bc595a2dcb7c41c7 1893 main/binary-amd64/Packages.bz2 SHA256: - 0ec939a6371353e8ba850811ecba0bd6749ecf5ad4e6ffe4d3f4d48ed68dc8ee 3405449 Contents-amd64 - 915bdf7b19675b1eb09b22f0aada96d0d1557fa9ed70a3e71db197c71376db02 152525 Contents-amd64.gz - 0ec939a6371353e8ba850811ecba0bd6749ecf5ad4e6ffe4d3f4d48ed68dc8ee 3405449 main/Contents-amd64 - 915bdf7b19675b1eb09b22f0aada96d0d1557fa9ed70a3e71db197c71376db02 152525 main/Contents-amd64.gz - f2197b98eadd153d364ff7948bca222763f70e18b76a963b504c1ebbbeb0f2b7 2761 main/binary-amd64/Packages - 7dc41b5f359d26cb8c1bcc4b512c94c5db1b402efb15e76d5d0d23625cdca933 1357 main/binary-amd64/Packages.bz2 - 64f1a3fd43c28053b3c2301a123b4cf6dc5a1370a94463d861fab3856554366e 1268 main/binary-amd64/Packages.gz - 101f8d561bb536f600918ab98ffb742828149f0d90ed0b007b7b761e9ad4f8a2 99 main/binary-amd64/Release -SHA512: - ec29ceab750bab737fbbcc9f00b74c334d0e1ea2f62c0081ed9b695d76bac1296f7560b2ee80361c9f8ed2b538a6adad21d8d3b55200fa71096ac09cd6c7eebd 3405449 Contents-amd64 - 69bbc10540b2bb90941dd2b6804544c91fd335e91f7674f50b2d32312257b997f34ec5d0147d69a16164e41e2bdbdc008a74c863b6de0c42c15eba062c540efa 152525 Contents-amd64.gz - ec29ceab750bab737fbbcc9f00b74c334d0e1ea2f62c0081ed9b695d76bac1296f7560b2ee80361c9f8ed2b538a6adad21d8d3b55200fa71096ac09cd6c7eebd 3405449 main/Contents-amd64 - 69bbc10540b2bb90941dd2b6804544c91fd335e91f7674f50b2d32312257b997f34ec5d0147d69a16164e41e2bdbdc008a74c863b6de0c42c15eba062c540efa 152525 main/Contents-amd64.gz - 19efa178a219564af52c8eff763c820d973a9f00f43a6fd5d1599179661b025a043da630874ba56814ca43608d68aa2e555bb5f303a3d84deb1412c4c8923ff6 2761 main/binary-amd64/Packages - 87099e5b28836adde21419be72bc16bbb6b02bd901f8372df2de3543d03f8de9ff58fd058ef7bc90a7bafc9b8d4c38fdd25c507b788b8054d79d448c97ef32d7 1357 main/binary-amd64/Packages.bz2 - dc706a07d45f70d0bf645c4d65e1b6b235a66dfa294f8a77825b1395cf40aa3a2ed097f7092e4635c99ff231fc9f44852d0b91ed09fbbd1cc8a78bb758afc2e7 1268 main/binary-amd64/Packages.gz - fd75f52e3d8ab190e919a646d1ccc84e447b32e45691f0f9f65c3ac5ac806f024f7edef6e0c3c9e2d19a5f2621dcd3744f684d9b87a7cdc493b0eb55e7a0b393 99 main/binary-amd64/Release + 8bd948850a78b9f51ef065ce194760947b7bfb60e0124bdf8ff115e4eaa51d62 4709 main/binary-amd64/Packages + 4cff378eeaf24824f9e9027c8e4b2e42023c7fb8b83bb9e3517caffc82ee7c66 1747 main/binary-amd64/Packages.gz + a38a8258163e341ddaf3708b7dab8d4437d9b65ef1267539d3c184cc2c367ade 1893 main/binary-amd64/Packages.bz2 -----BEGIN PGP SIGNATURE----- -wsBcBAEBCAAQBQJljD4VCRBWSZ+SBjn1cQAANDUIAKjuNqznCTWjUgwAdRkmCLyb -HzmxTbtSfc4Eguri0QsUCQg7FA5nlupNketz2NNJ3TIkPJ7KVHAvcYdifnDlL0k2 -WQMRC4L94jxYSvRnMj4f+/pWt1UxHs5wCHGaojvf8s9ZzSTme52g3MLtikQCEpgv -zqIgSH4bzAJu0fc5Je1qRpxiwATyf7B7vC276XSWkDIxDZBUSupLoZNua0NdZ7mh -cTXyFIexrWOJk3xJjKfcTQZEB+RxVZk/vSADAnaVKo/YuzBoSx2A1HEwVDOPc4TD -vwPIfM9LDoS6YrN4mKDvkjlUtgds/5rXcOVxEQAAaG/md5RvRTOAFbpBKs/pbZc= -=2HIC ------END PGP SIGNATURE----- \ No newline at end of file +iQEzBAEBCgAdFiEEUQdwLhqNQP44F6OuVkmfkgY59XEFAmrX3tIACgkQVkmfkgY5 +9XFjHwf/Qqa5PCPX919pWz/ML5entwd2vEZpr3HSqfum0R9hp7YE9p9100Z+p7pk +BFG2vLSKzw9XsExUH5WqtDyDLyxZNqqrlwlhZWbaVfHhpFoUf2ToOAF6lA2vB40U +EmG2dFgnrvC43oZIh46W1EGs0yKmeinJuZWh/OIQI1oNP6TCzEAkmzaLZOtlBQSy +0wYVGYp/DwkzGOink7Izz3GP6CHeDUwzp3tazeOQAqgz5cjUmc4O6GNl78MdSeu8 +rD0DQNELvDK2TXsE8b17MdK/ZdHZNGuq27xZeVcedF5CQ+7fkv2I9vHsGulj8dF/ +KwmW68r0bBmvZsM0xsBbvpKPfAfHeg== +=9xzR +-----END PGP SIGNATURE----- diff --git a/binaries/dists/stable/Release b/binaries/dists/stable/Release index 931b534..7a5734b 100644 --- a/binaries/dists/stable/Release +++ b/binaries/dists/stable/Release @@ -1,44 +1,20 @@ -Origin: . stable -Label: . stable +Origin: Eendoe +Label: Eendoe Repository Suite: stable Codename: stable -Date: Wed, 27 Dec 2023 15:09:09 UTC -Architectures: amd64 +Date: Tue, 20 Oct 2026 21:36:18 +0000 +Architectures: amd64 all Components: main -Description: Generated by aptly +Description: Eendoe Private APT Package Repository MD5Sum: - cf5f351b126aaab2bf6ca97c13b378c5 3405449 Contents-amd64 - 9f23a2449f3abc4c6fccecfd01fd86e3 152525 Contents-amd64.gz - cf5f351b126aaab2bf6ca97c13b378c5 3405449 main/Contents-amd64 - 9f23a2449f3abc4c6fccecfd01fd86e3 152525 main/Contents-amd64.gz - f8778b24beb2988de929e2d59d1f4c58 2761 main/binary-amd64/Packages - a9ae692d17b8e39db0555ab28ca1207d 1357 main/binary-amd64/Packages.bz2 - 9a64097df252b063fd82b0127ffc57ae 1268 main/binary-amd64/Packages.gz - 1a863a05e2aa38a0db0bf785722d7fae 99 main/binary-amd64/Release + 8fc1ad8fefc657a8da319cc9b55c6eaf 4709 main/binary-amd64/Packages + a6c07fa32055f89a45b322fc1804dd8e 1747 main/binary-amd64/Packages.gz + cddb357d915f3e3cc9c59e221003730d 1893 main/binary-amd64/Packages.bz2 SHA1: - 5fe9dd2d9aa59f1f24de2ca35728e05db5f74655 3405449 Contents-amd64 - 3913d6a2268e0599ee051d4a267b70a4740c03fa 152525 Contents-amd64.gz - 5fe9dd2d9aa59f1f24de2ca35728e05db5f74655 3405449 main/Contents-amd64 - 3913d6a2268e0599ee051d4a267b70a4740c03fa 152525 main/Contents-amd64.gz - 7236da7bf2d82d5b66a9305d78f7ec7876792c71 2761 main/binary-amd64/Packages - a2ed1b4117915d2349051ada9ddc089113aa7803 1357 main/binary-amd64/Packages.bz2 - a628182db07c468ccf6236597693c3624a0eb9f8 1268 main/binary-amd64/Packages.gz - 279ffa18634b8d6c311595f6e6db2c1b2324b3ef 99 main/binary-amd64/Release + e349ded34482fa7054812a7ff8ec1675a0d3987b 4709 main/binary-amd64/Packages + c8c126f431f6813812de54c586da7d3c998008cb 1747 main/binary-amd64/Packages.gz + f875d955166a78973c768b08bc595a2dcb7c41c7 1893 main/binary-amd64/Packages.bz2 SHA256: - 0ec939a6371353e8ba850811ecba0bd6749ecf5ad4e6ffe4d3f4d48ed68dc8ee 3405449 Contents-amd64 - 915bdf7b19675b1eb09b22f0aada96d0d1557fa9ed70a3e71db197c71376db02 152525 Contents-amd64.gz - 0ec939a6371353e8ba850811ecba0bd6749ecf5ad4e6ffe4d3f4d48ed68dc8ee 3405449 main/Contents-amd64 - 915bdf7b19675b1eb09b22f0aada96d0d1557fa9ed70a3e71db197c71376db02 152525 main/Contents-amd64.gz - f2197b98eadd153d364ff7948bca222763f70e18b76a963b504c1ebbbeb0f2b7 2761 main/binary-amd64/Packages - 7dc41b5f359d26cb8c1bcc4b512c94c5db1b402efb15e76d5d0d23625cdca933 1357 main/binary-amd64/Packages.bz2 - 64f1a3fd43c28053b3c2301a123b4cf6dc5a1370a94463d861fab3856554366e 1268 main/binary-amd64/Packages.gz - 101f8d561bb536f600918ab98ffb742828149f0d90ed0b007b7b761e9ad4f8a2 99 main/binary-amd64/Release -SHA512: - ec29ceab750bab737fbbcc9f00b74c334d0e1ea2f62c0081ed9b695d76bac1296f7560b2ee80361c9f8ed2b538a6adad21d8d3b55200fa71096ac09cd6c7eebd 3405449 Contents-amd64 - 69bbc10540b2bb90941dd2b6804544c91fd335e91f7674f50b2d32312257b997f34ec5d0147d69a16164e41e2bdbdc008a74c863b6de0c42c15eba062c540efa 152525 Contents-amd64.gz - ec29ceab750bab737fbbcc9f00b74c334d0e1ea2f62c0081ed9b695d76bac1296f7560b2ee80361c9f8ed2b538a6adad21d8d3b55200fa71096ac09cd6c7eebd 3405449 main/Contents-amd64 - 69bbc10540b2bb90941dd2b6804544c91fd335e91f7674f50b2d32312257b997f34ec5d0147d69a16164e41e2bdbdc008a74c863b6de0c42c15eba062c540efa 152525 main/Contents-amd64.gz - 19efa178a219564af52c8eff763c820d973a9f00f43a6fd5d1599179661b025a043da630874ba56814ca43608d68aa2e555bb5f303a3d84deb1412c4c8923ff6 2761 main/binary-amd64/Packages - 87099e5b28836adde21419be72bc16bbb6b02bd901f8372df2de3543d03f8de9ff58fd058ef7bc90a7bafc9b8d4c38fdd25c507b788b8054d79d448c97ef32d7 1357 main/binary-amd64/Packages.bz2 - dc706a07d45f70d0bf645c4d65e1b6b235a66dfa294f8a77825b1395cf40aa3a2ed097f7092e4635c99ff231fc9f44852d0b91ed09fbbd1cc8a78bb758afc2e7 1268 main/binary-amd64/Packages.gz - fd75f52e3d8ab190e919a646d1ccc84e447b32e45691f0f9f65c3ac5ac806f024f7edef6e0c3c9e2d19a5f2621dcd3744f684d9b87a7cdc493b0eb55e7a0b393 99 main/binary-amd64/Release + 8bd948850a78b9f51ef065ce194760947b7bfb60e0124bdf8ff115e4eaa51d62 4709 main/binary-amd64/Packages + 4cff378eeaf24824f9e9027c8e4b2e42023c7fb8b83bb9e3517caffc82ee7c66 1747 main/binary-amd64/Packages.gz + a38a8258163e341ddaf3708b7dab8d4437d9b65ef1267539d3c184cc2c367ade 1893 main/binary-amd64/Packages.bz2 diff --git a/binaries/dists/stable/Release.gpg b/binaries/dists/stable/Release.gpg index e497467..2f05474 100644 --- a/binaries/dists/stable/Release.gpg +++ b/binaries/dists/stable/Release.gpg @@ -1,10 +1,11 @@ -----BEGIN PGP SIGNATURE----- -wsBcBAABCAAQBQJljD4VCRBWSZ+SBjn1cQAA8egIADfaxAQ/X/sjUAVIXODYu2cu -CWzVmXJ9PcNAQhTo+3rCgLKfs2o8Vw4lKGbNlAUAUZuLTooAUAmIqqnkgaiJsXLO -wGWqbHRi/opVVvYRATpuQJfpZ6Du9z8bhmnm7klVlZhluxuFia1analsT3lOopI1 -GrXrN4TMXwUp3tOk/7hWaP/ME3v0MsMIqtrkDwseA8lQ7pMhA8TnmabDZTSmf94R -KxYzw8TaI/Ddrs9HBsP9d0hUqOvyhicwqC5XF4Rtn9GgjN2H0+/vUPkNta7I8zOV -UlnOj0r8owjVKg4opRqrGfk14MmyliQZ2KlFHhsgdxUoTB0QPuFKnQLflwx7Ztw= -=tgYK ------END PGP SIGNATURE----- \ No newline at end of file +iQEyBAABCgAdFiEEUQdwLhqNQP44F6OuVkmfkgY59XEFAmrX3tIACgkQVkmfkgY5 +9XGlSQf4useyfLCS4hNEM1x4soVjDwrs5LB8nQJTs14zHZ00YFinE66kaV6OdDJv +MH+vv9JdMFK+tyaemkw2xKkDib0RyLx8rQYqGERI/TX6RBTIlZRa7TBwVw4YuleC +jPeXtyFJGvho4rAN6gS1jG5POHhnZk9cZPeCsC9ydoAXBevQV6j1WR3n98qvx/vp +ObAqVIGX7uP7Ffmgo5yXZUWOeLU7lmaiwjv8yMEjirqHpqhxq9qkYe41tXS2NJ18 +ZCrm0uutbDdOS4DiU2ndSNKDd9bQtNwU9X0+xviFzOteMtOMEhtzycytDBFCur3z +Np6uCQaoxKOLfgomTeKhBG6PRbOo +=UcVa +-----END PGP SIGNATURE----- diff --git a/binaries/dists/stable/main/binary-amd64/Packages b/binaries/dists/stable/main/binary-amd64/Packages index 5283135..23d71c4 100644 --- a/binaries/dists/stable/main/binary-amd64/Packages +++ b/binaries/dists/stable/main/binary-amd64/Packages @@ -1,29 +1,91 @@ -Package: eendoe-repository -Section: utils -Maintainer: Bart Meijer +Package: bnhmeijer-ca-certificates +Version: 1.0.0 Architecture: all +Maintainer: Bart Meijer +Depends: ca-certificates +Filename: pool/main/b/bnhmeijer-ca-certificates/bnhmeijer-ca-certificates-1.0.0_all.deb +Size: 2408 +MD5sum: 042a9554c51f2add03a5cd82cacb616f +SHA1: 439678abe947246bfc25d8ad4bd336acada4bec1 +SHA256: 2a87b6bb51d751c47ebc83d5dfc81f1874c509e70859cf25a0003f0e2c5fb382 +Section: utils +Priority: optional +Description: Bnhmeijer Homelab Root CA certificate + Installs the Bnhmeijer Homelab Root CA certificate into the system trust store + (/usr/local/share/ca-certificates/bnhmeijer/) and updates the CA trust list. + Ensures all homelab internal services (*.lan and *.bnhmeijer.nl) signed by + cert-service are automatically trusted by the OS and browsers. + +Package: bnhmeijer-ca-certificates +Version: 1.0.1 +Architecture: all +Maintainer: Bart Meijer +Depends: ca-certificates +Recommends: libnss3-tools +Filename: pool/main/b/bnhmeijer-ca-certificates/bnhmeijer-ca-certificates-1.0.1_all.deb +Size: 3548 +MD5sum: e3933131eb461153e3b52ebb1605815b +SHA1: 31bb175b972276bca977646af656a9f3b7a9083e +SHA256: cfe6653252f5b55a26e645efb6718a72049c5e4185d77d915fc50fcf635acfc3 +Section: utils +Priority: optional +Description: Bnhmeijer Homelab Root CA certificate + Installs the Bnhmeijer Homelab Root CA certificate into the system trust store + (/usr/local/share/ca-certificates/bnhmeijer/) and configures system policies + for Firefox, Google Chrome, Chromium and Brave browsers. + Ensures all homelab internal services (*.lan and *.bnhmeijer.nl) signed by + cert-service are automatically trusted by the OS and browsers. + +Package: eendoe-hyperdeck +Version: 0.15.2 +Architecture: all +Maintainer: nl.eendoe.bart +Depends: python3, python3-pip, ffmpeg, eendoe-srs +Filename: pool/main/e/eendoe-hyperdeck/eendoe-hyperdeck-0.15.2_all.deb +Size: 11316 +MD5sum: 17a094c21bc92198231c1438cd834633 +SHA1: 45e06ad000760f88ee025d888b246bacc59da1a8 +SHA256: 7a5de2fa5289da9fe3227b5e39ff9b837d3c99c397008376d6b29714fcd3dd1e +Section: utils +Description: Eendoe hyperdeck client module + +Package: eendoe-repository Version: 1.0 +Architecture: all +Maintainer: Bart Meijer Filename: pool/main/e/eendoe-repository/eendoe-repository-1.0_all.deb Size: 7224 MD5sum: 1dec21c569795d9a7c408b49bc462351 SHA1: f81b15730a43fc3e8bb002046a09755c83b00794 SHA256: 87fe58023583065366484a08af3789e276a0ab87516eae549e550dd6e74ca78f -SHA512: 6c5ccca79318822ea39cfe04bbf8c11e9be06e8f53aafdef9a47b8bbcf3b2370b1ad1d15e23fb36378aa8cf3304fce8563f5e963299eda348636f0e1eead4809 +Section: utils Description: Eendoe package repository +Package: eendoe-srs +Version: 0.0.1 +Architecture: all +Maintainer: nl.eendoe.bart +Depends: python3, python3-pip, ffmpeg +Filename: pool/main/e/eendoe-srs/eendoe-srs-0.0.1_all.deb +Size: 12412098 +MD5sum: 1c91d1fdfff4a8c2b1512c28d49e5ea9 +SHA1: a8ad5125183f618f0f652275670f4369f4fca07b +SHA256: 38f8b0288471024e2cb4465210bb28fa6bf3442a4d7c938a598686595d67eebc +Section: utils +Description: Eendoe Hyperdeck SRS module + Package: oracle-database-preinstall-21c -Priority: extra -Section: alien -Installed-Size: 101 -Maintainer: Bart Meijer -Architecture: amd64 Version: 1.0-2 +Architecture: amd64 +Maintainer: Bart Meijer +Installed-Size: 101 Filename: pool/main/o/oracle-database-preinstall-21c/oracle-database-preinstall-21c_1.0-2_amd64.deb Size: 19796 MD5sum: 9a95793469fb85f535a26266b60738bf SHA1: 6869aad4114275c479e40865bba021c6ca02e6cb SHA256: a6ad8c2b5b204f631f88199ed799784ad6fd73bd65d899277b8e786ecf5bb578 -SHA512: 617ce833e5771b2d55f8d1c39c77adf1f775590565ff056610625f8c24450150d4a563a7a4cac25966b41c6becd90e73c38c379bc198096acd0b673eaa0b48e2 +Section: alien +Priority: extra Description: Oracle Database Preinstallation RPM The Oracle Database Preinstallation RPM automatically installs any additional packages needed for installing Oracle Grid Infrastructure and Oracle Database @@ -33,33 +95,31 @@ Description: Oracle Database Preinstallation RPM (Converted from a rpm package by alien version 8.95.) Package: oracle-database-xe-21c -Section: utils -Maintainer: Bart Meijer -Architecture: all -Version: 1.0.3 -Filename: pool/main/o/oracle-database-xe-21c/oracle-database-xe-21c-1.0.3_all.deb -Size: 2188370848 -MD5sum: b89910db6b9ba0ab149db6ee78a711f8 -SHA1: 39e2f816b81ccc4dbbc4bc89d20361272dd59161 -SHA256: ec96ebd544d9492e3696fc609d18a539357c653b3fb4264d144fbd0a27b23eec -SHA512: 1922b4fec8b7e6b03a298a2f8d4f400ec9aa9b2d7ad6fe4ceaa83d136c6d5910316f46c6025b352b05ce18ad8fc9e3b7286bf3948e000a1857b6fce2d2c19c03 -Description: Eendoe package repository - -Package: oracle-database-xe-21c -Priority: extra -Section: alien -Installed-Size: 6067591 -Maintainer: Bart Meijer -Architecture: amd64 Version: 1.0-2 +Architecture: amd64 +Maintainer: Bart Meijer +Installed-Size: 6067591 Filename: pool/main/o/oracle-database-xe-21c/oracle-database-xe-21c_1.0-2_amd64.deb Size: 2188841976 MD5sum: 0b39df8f78e8c909557d1f028c9e7e5f SHA1: 882d1f5f63d842c6051a9aa0ec57a2d34cdb1a3f SHA256: 5b1401ac3e34ac5c0c636b8b41a6b3762f9b8297fb6f42c3bc2d1d05677ae01d -SHA512: 9ff82c1b2d09582f1c456ba99ecb3f3be5079bd00a5101c7f927fb3752bc869fe4e982b51d170feca64e9ab6ab58c41566a30e57b1ff9fe066041bc0465e3d2a +Section: alien +Priority: extra Description: Oracle 21c Express Edition Database Oracle 21c Express Edition Database . (Converted from a rpm package by alien version 8.95.) +Package: oracle-database-xe-21c +Version: 1.0.3 +Architecture: all +Maintainer: Bart Meijer +Filename: pool/main/o/oracle-database-xe-21c/oracle-database-xe-21c-1.0.3_all.deb +Size: 2188370848 +MD5sum: b89910db6b9ba0ab149db6ee78a711f8 +SHA1: 39e2f816b81ccc4dbbc4bc89d20361272dd59161 +SHA256: ec96ebd544d9492e3696fc609d18a539357c653b3fb4264d144fbd0a27b23eec +Section: utils +Description: Eendoe package repository + diff --git a/binaries/dists/stable/main/binary-amd64/Packages.bz2 b/binaries/dists/stable/main/binary-amd64/Packages.bz2 index d6e94dc0e1426822b298cf40779310834e006c5f..6a3d2ab5610d763c18d4c8232cd65e2cfe89a3bc 100644 GIT binary patch literal 1893 zcmV-r2b%aoT4*^jL0KkKSpx&R?f?UB-+%xRKzIN3f8yN$zyJU6U6B^eY5Nh_rQn7k zAf*dO*MFwwL%K30<6wA*9iXPkMNA#NiR+~qDwBZwvya~YuIYI6En8<^Hu~G^bm5mA zMz7>A}MMzpY9 zkI~_d6q}v$za5g+x>A)Gy~Q-SLv)h1cSmCzWZAWI9JjXWs~!}GM#fCEt&q`Wd)Z#& z!L3av6(ei#;i*>5Xyn7m9#3mxuSTEyXZ&g2)!Qz+y{?SnWiv+SG<6|y8KoT3Qc;_0 zD_7j})iDy7nUqm4HZSbO>oYK;M0GQHC4#ZSo95}gh`u}cr8RXsA~<`g6r~QHdpCjT zp8hvN=QbES2}af?wwujG;ubEvL5(Gbr{9cMTgGR}T31HYVH!*;b^8MFL_`Uu>ANYW zC{aD0c$koCUNdww!%@>bfvsI^xb%P^J$z@yrvso=FvKXjn$;{-q3(yC#Zw!L;e+gSi$G~+)~a&pBM#W+aC2+U z6%R-NC^Wwo=R2-ySgLMmEs2IgN)z8Nl|z)H%(j@0)omJEF+g;xS*X=2?kd(7)>bAj z0#WS6G@Q&~&VpX>98%>Q(O4#Iy^b!Zm!$gEvpN<-W~3#5SCmX zS+9qo9oO6m9HpGz$McWCTy@prdCRz!oasH>UujEeGf|=74Ufba{wdHJeRL>5Z4J&n z8W&B{Q_8a+q3Tq6U6@uU3UrS%XYn4HKSS-aNUk~ z^$YC_h>N^yN5oKn*&6K_OjMM_rH5s>>(hO?()+Ki+!q_cE3GgO$tqPODRY`2BpfMy z#Pp~F`s|UZk)`%q0jFFw=WU$+&HUjG*NZoAs$2Eh=@Seo7GcRR&(Jq*GO`i1T-`3PvNh<_ z5xK3mnvEo3u?cw|sOzt2C?K6lm?IzyzK35WLyM{(nT~;oWU2mN8q3!k8X`OkyQUf0 z5qkE-L-`jYXw@U;u3PBBFO;tmWVn$r2BXm)fmF_%ixDfA-M*c<1w<1N}(=d zsxC+Bvtt*wVHIXG&ob7!sEGJ4FO{PCD#tzvC@>colOuRh8!x)8PM0;8BFZ!sh=|^( zt;kXk*v8furTLhC=d_Lt5~awpQuwo}6N^`4bZl{Mb%qdfoyc`{)Ip;-Dd7%W;MlL<~zN3keq{t;+8wb|eJ z6or{yNY%POg*0r5v1cpJV|^fS~V{<=(IbO(iiK>3(k%|*Cp8uw{3#2R~B%+8{tT!T8G_{xgL$n fI@5(4r7>2sKF>*wu;y<=|BJaIoG3^Ef!+52(8-J% literal 1357 zcmV-T1+w}=T4*^jL0KkKS+ihEjQ|2$Uw{A*KxhB;f8yN$zyJSmPzBF*xBv{@w-DE0 z0F^WX0Z&tUO{SFfN0U%AdYTVVG9I96r{u(Gh(x3VKxhB}00T`^(?n^J38qg(WW)x5 z8e|MZm;fdK0$>0D0031HGzolafj+8>-1&K4mPW*vOCG!DGI42UH z5E?@o?z>zJ?fL+fyX^RQg(wAQ8yVMOoPfx=d|p!|a~ec&qA&qHlIM&f#}D zYgzE6G%VFwk04fZw%uILpi>Jr@+h~!IGNNnv94Kc$y6bGYjcx_J)~&wT0FY_AVb0x zQOap~xy?p&`cmK${X@G>6tYnJRMQ*aj04qUHPImES@#nxnJw!y@q$D)2okj|y+hW@ zr!=l;Z_TnJJ;<-1vcg*2R#_IwEtcFU-myE*qk|~Q#O7ADlw|WKTFl>4i_Gs0y*ZSU zPA|1EP{g%vKy%{P7;s`kBg4gvQBk&BQ5F1*(I}X-^mSG}mCu3lsk-TBIkR=1iDRL? zHH@O@d+{(;?|UFuQ(0|&F09hEy6*Dw(!8~4>S0KWF<|w+1amGukG!NRN+h3=6Gz1& zhK71Jjk=qei*RkyLE9p?Y_`t@f7%41Z{0MF_#iN~ zgOPh^kfRK<##^~}Y~w>Y?k*ONAZAE8sJe2CVG#nplJu@-G)<7rb}ZlyoMw}$Za1@+l=lmuGv z$AZ_4q0Bv|GVNZ@{yO(->1XXd5VneVnw||~m67#1`Q{#h!8SrAHMu?Wv7KdZf<4ai=qA>R+m!lY2-iIZ* zm@q|A7C0f)T%#PXacM>gaXJdwFzaQ*JK<*zk30=^hv~a^F-DI!Vn254;@iwFqP-q&gZ15jaOYhh<)a{%2~+in|25`E`a^rIb!WZy5sB8VM3@je(4 zti`?>)!o(7#KRe8X6RV^^;>xRe}Ng**~%CtG2mhV!;=D_M%I-)qrW(bo3b1_3SNF%|O4{U9y+Z4eae? zi2bc@|pS{90Ho3oK=U#rQYHVOdCf99SFIQx58JCYn_4v+w3iCY$w#XP~ z*VVtsrqtZe-o7&ZW_8K9mJp25$%rB$XRg4c>}7%!t*~Ww{pN+ZWLgF5JVXrINo`|E z(qs==$E=iv1Q~S1B*x>?SaJg1MH{0L*%^_v!XhltP}TkHs;k$|Pr>F5;6FV~a3*tNgYGyP&VyZVD* z5PudJ-eGE2tL~l-w_zgAV4{pZ!UR=NN+^L*TOo`>6^+Cgh2_Qz6L&CC zf|i_#!Aa?COc0#2+Cs6$LMSRa2;3_?z$6v4)+lLYG0_;17Ogf|qIJT9lU#>nPz!Ie zb2$i82sR}Zs|=)))L#}RsclMiGofK;aNX8bs;D7YX*>2))nRErU9g|q_NFE%-F6h* z#rAKtSxrV>cJL8Tn)?3}U`V~);{5h*ja|m{;fO10O0$q(0ajBlwiXtVAa=yj`fj*w z8+Eb&Fke^e3s%Z%jW-v2r+xQ%7~%3fss{`6ZFFa-5d;!@fQ@j#gHBS!6r>1VDv^X% zo)|`HtJI!d3~~#ZD8N}>yhr3Cy?7r-u7Q+H$RNNUVB^4Klm(3Rv=a&{!doD1#Haq^xolcn+I;7c{pyLCe=!=v%<@JnCm-khGfX0+7Ltb}n}`%d7A2Qb zH25Sb`9db?^Oz`vuqz9Yz@iN!yed}s!ih$x&y97wXk|m8eg^L1p)AT5AG!2iJHe$U zF%`9@X9SN?`U0felqSKavr9pFFu_}I4Yh`KNCNFCWqEUe#r3=EhnQ$PNHxw$<3NNS z=j#ruEt$-z5$^$H{$R4Lvel1^hOuHld|Ztq7rXCgJC4FU-({JL&sM5kemSPEY`>o( zeLux^T2n&Qan1$O&@RwO3nh9}j2f9-S{p5Q%E!Hmrep^o(JX|fGLk3`NO-g+M&RVi zQZ*&obSx;)R2=)mL_#BxzM$bKLcr`oaD=#QOLi(|OVct0>0I>ayv0OnA{yt91%+{j zoyY_HG<0ykz`sm+V6S$0U{{Acz<7YYyLvlg{}{RK>j%%su-fYhXzm!@GOC?6*@L`i z4Pqv?9I1VGxN2_po__ACOq!&0&=ajr-7>N1Ss=4><#5+-I=1Z>(nHu$JY;mIC+llPLA4Z$LNEfXnm0R%6O$vBW%>6D`Y zRSsw}QD`oJ2u^88Ch=sIjl_q7CL^f?Icf*e38cOY8B{TmgUo5(IzTS+x1fn$oW1@; zBc<=z>uukk^y`xj{cjp)q5ea`@(0^tx^t=XuO_G&l;i&7<`rqM37(^kA&#O#=s^D< zjX7|F=HdS4MXG~j43$%)lyr_HabhBMD7msiI+-)|u|0l4fhkyw*=U`E4ibq^ZJ{O# pnJ!+2u6xEMQZ`YQsHN3eXkB9FKsr+@#PqEa=HIY;!jWYX002FxX}ACY literal 1268 zcmVAZHAyK20?wdxh?kNn2A&TMK2yPNHJSjP1*KMeP#>v)*9 z?zE1(Wq8TswDLIFymi0hd37&s{F}|g(^=n+tLb{0ZR>cq8~$qZa`|D{_~8%Z&L-a5 z)*TOr-IG0!(-V90RkyEC?!v~u=G|`7OosdMAGUQh#yq@yR+iI#>q0Y)K?_i&(uk{O zkCI6=Lrf(M_b;A?t?L*hl$t!})HNB3cprTR_EbwzOyYf|Jlwx{8VhV4)@}uTOa+sN zk^nMh_Q*X|B#RZ;vtTU&jICs{QhaM*H7i%_!~Kh=CB&@*Evm|uQb3H+IFWYqS)`+e zU?k?ju$RQ#n|0z`1x2(ciK%)C+(HY*V(OA0Rb)o(Df!&hut4g?2vQ`n#wjBt=-z@E zw~U^KXSV1(9&zbk;oWG{@WZv#+TB&H;KNTr<9;nXufKh_Uu=G7^KZU{Xx|`zhS6R8mmnRU ze0$`7bNxDO{9Sx~Y4-_cfhxg`Gh!;0QU>aRrI%DVLIe=-HKFuJ&H#a!TMi+|S~OR( z>=B9x`xq3IeKb(HamK(6HA<1_bB7c3-hBZG9%AXJG3Vk#@hx+K#FewM#zFv+gMyeg z@>Y{3)Kp0{5PAaE<^^gpW-l2n4$o}Sc|5KcvHo-s#65cy#J#!+!e z_Y^ult%p6Yqw;R|;2y6R$J2x3*2eRLyc<41y|~G&S#$j`e<&WOHy=9vaUPrdVd^t4 z>wLPP=6Gsf4l-O0^)U7E&1ts9JseK6yMpQtN1J&)Ke{|DtL;CZ@Kqlq%`)QnQZ_~Pb`Z1fqZ3g#?-yf!THm~Oo zoez7*Za(gB#+HYx9o@UDeH?D6Y<~F-m%q2O7ydtSze(Te(`(bO{CPb-NB<^$5&khC zrs^@{&6KUTeS#2cY^_j$%f`5@ z08;{!R&s8XDOv)8uHdN!lrx{s)2 z)yjv=M~p4>(jhg>QNfqM#OzH=<=9fzCV^AGfmI}AA6S#6%v#hdBoLGw7$jAQodhG* zF3@w-BpO?2zCf*PKC~NH)H_B!r@g0wu?Nisgo#Wg^(0n&C28Js2|j4;6l<4MOB6+* zZrKQea!&7lBr@>Z&Z-l>}h@HvS348>B5{5e>U2^xdC=kJfREsJ}8 eP3PMl7{0IQzmK9&(Kx#}x?{brIl6mc{X+Tp_+*uo z5ejk$86|l>KAFG%-!3a7qbUFP_E-N~4m1d985$>VuK+)9ymSE8Px`)pz<2a%6VOR6*k=(I{B4FXSVr`R!rsR!pO1-^4 z51!+%=fP@UVy1l%JVuoMJx!OQ5`yTvXV@8S6BsKu6Au?J9SnzXMKx9MXsW4+FqOK$ z-!cnhK4#+x079h1eB_JYxXP*Q;m7aJQ&eeDyolcoFDix)T4vE~7K~1xFh~(k%VHf4 zEbw|w5vKx;n{aV8%8kT;0U}0LyImam8iG@8n*vD(^kyw5nvFdP|uLzqG$(eyo!7-oZgC`ZvxEc{v&rB%@vd0ks=q-59OO@77_R@%goU2QoF$$fZ~Vy?BHim*u~hu=vT z7GEL~Z&Mv(P!(i!b`2U6+}9-8GMOwgq1QAxS2i^GZ&LM z{vno5hR7Jx;)aSmS*yU;w5aj-@)53VHv$%t8^+Hpnc`L){;h8aDMe1QchYJb# zDQGPv>i!Pw^!`fXwJ7n1W{tGCf2{g{Z+w=>Lb}7gMMWUeW zp3$G8KRpllhtRYG+Cq$N^R#o5Fis`VJMS^|%q*J>3nzq$Wt6YEI3wSuV1Rxof~$K4 z83!&@Q!68(zpW{Bb;1CEZ!A`zrl1iOXKVoW|DgF7i2sede~GO8|G62QiUv$P7~?9&Mml(&x=`Tp1zvn{~MYp($DtU>1nQEv3W9FbHK@T!Y6y-zz!aLXWPChUvE z$l#NpuE535Y=n5pLe?5D_MP!NSeyuB0> z82tTi-Uyo?$?#re-(U2NT~#r*Qgq|QgX-0-2HZX&n`YG_nm7H)<=yT0mh)D~Wu=>F z{q_Kj(dk=Q8gZ1 zc|I@1Ca|@;iz4e74CngI!*<0ym&38p+E;|=Ug_5$aLltlPaU9>F#(xMf{$Vgi5fJj zBtAOQX|xl%;MKCumXUdLPky7-wB^l=w?%H0vrgs^lU`S1>DNuG{(Op}TIHb{1^aRk zSVejL&J{K5j&6Lq`^v2j_&}J3=_6oyH}&0ml@cwViY{Nu$3`+872N0|3{%TqnNJ)0 zaDXgt#aM4}g!D*yVo5^s?ydABsrh#Ko)d`9cuY7GS?az#$Z=3pLTcTqmFASW#G33y z+1j;vJ!Xoh@Ak3ZwB6{|GJd==5&Y}Xo_4s%VWzovC8rJdmEhh82Tzd@2eDaZhT=(d z=NIvR{#<8hHQ25)i{5Z~X39^=f34W^IBg1JWPLxcM+(k~4k*MC<1BYnoSPv|DmjxO zB&)rC!>e9|IXp++YtM$ts3-NQ*vo#gKTf8WGF}?&Tq(^{F>-6OKR&PCw6r4TtQNct zbuMX<&SvY&2{Bt7R=fGU@2r7A1^uI!u)3g78^?wScq1DVYmzMeC-yu!rVaj$x(yo{ zEk+LOkZ659^GlVlHwf5%EmAgH6NmDO!#z(K`g{ z5sP}LdVbbR;M$$p&8vTe6q)uO!CSLoEt+IkWG2!;OCvOZwjA}_V*a0*0Z6yb;mgg{ zXc0-1Co^L0%vf6$(QG|KT6cKPsotD}0c*p&j(>7RV#aBcU8TfM_Q;c)_j9C(Q#Mtj z)tMG)0m}6FwuGv-cr{MGzGcHqF5#z9)2g8i=^h1d9H(%M`1O*str#c!5A8kE?hVdz zPm_+htq8^pXqt&%u0&(tyk8RSA2rlpJON3?AN5fwG3L!e?nA>eepY(?vY!%kBMXi64JAPeurA|8yC}&Q1_|o^V>GVIhVJ8r5jPx zGb?e$VLAWR)V~X7oNTQ6vpUK1nlVCe12r=NnG_>$NRnR_gpo>ym8d$9Y2KU=3~M}w zM+d_!qWoT1c@Lw=%meUQxEDbq_Exa@*1Q_?hPY_jk_AtqHV>cq?9XeH_PDNN+uC5& zl}^={d6v1OzRde9x+bcoK2pvK%{DoDJa1*vW{?kj3x$*&bZ93P!q_>fQ@{Wk)>Avy zi$7%|@#gJe4+IAI@?*l+AFR$wYev>^NwLD-Cdum^n-N4bDze7}wa?L3mi3s71)jaz z-s9wNmRf_wP)pIDZ8Y`RpRTX}V*P&CzOpD9%J{KYS=eK@l5}al=_#`^GF7VFJ_OOweHjK{Oaau>cJ! zMxq1p?_iFG7*pNpPXS(|Xe@Qly5p_Xm|*xSW+^Dc9!Bofh*a40hF*-64RRbUM4#BK zZQNSBFv_r}CUa{<@^8MHxkLxSH@(5Tlj!BU2SIE%y+GqSWrLJY?7{n8gq>TTF9uR0 zDEiKo>XTxf!F(o}f2fE2i{OAUU;~6erxZN92GR8Ko(_PK9~zz_)Zejg2eH3>`rjfHdq z+g0~9&mXlI(E*&GvxZ?vh!g$I*+bc=S+3VLWbLyT`pO6LTZ{C+Iss#mtzY@4{mTPr z=i+QKT~uoLXa=x}!&NbczJMauJ>R6atT*8vT8<%)NqVcFe*yR8k@RAaIPjI+b6A+n YFtuvo8B=JtI-JOTi)Ae6MIX(70L08)CjbBd literal 0 HcmV?d00001 diff --git a/sources/bnhmeijer_ca_certificates/bin/build.sh b/sources/bnhmeijer_ca_certificates/bin/build.sh index bd1874a..8e06270 100755 --- a/sources/bnhmeijer_ca_certificates/bin/build.sh +++ b/sources/bnhmeijer_ca_certificates/bin/build.sh @@ -35,6 +35,7 @@ echo "Building package: $PACKAGE_NAME ($VERSION) [$ARCH] -> $DEB_FILENAME" # Ensure correct Debian directory permissions find "packaging/$PACKAGE_NAME" -type d -exec chmod 755 {} + +find "packaging/$PACKAGE_NAME" -type f -exec chmod 644 {} + find "packaging/$PACKAGE_NAME/DEBIAN" -type f -exec chmod 755 {} + 2>/dev/null || true # Build debian binary package diff --git a/sources/bnhmeijer_ca_certificates/bnhmeijer-ca-certificates.control b/sources/bnhmeijer_ca_certificates/bnhmeijer-ca-certificates.control index f864411..9c67dfd 100644 --- a/sources/bnhmeijer_ca_certificates/bnhmeijer-ca-certificates.control +++ b/sources/bnhmeijer_ca_certificates/bnhmeijer-ca-certificates.control @@ -1,12 +1,14 @@ Package: bnhmeijer-ca-certificates -Version: 1.0.0 +Version: 1.0.1 Section: utils Priority: optional Architecture: all Depends: ca-certificates +Recommends: libnss3-tools Maintainer: Bart Meijer Description: Bnhmeijer Homelab Root CA certificate Installs the Bnhmeijer Homelab Root CA certificate into the system trust store - (/usr/local/share/ca-certificates/bnhmeijer/) and updates the CA trust list. + (/usr/local/share/ca-certificates/bnhmeijer/) and configures system policies + for Firefox, Google Chrome, Chromium and Brave browsers. Ensures all homelab internal services (*.lan and *.bnhmeijer.nl) signed by cert-service are automatically trusted by the OS and browsers. diff --git a/sources/bnhmeijer_ca_certificates/packaging/bnhmeijer-ca-certificates/DEBIAN/postinst b/sources/bnhmeijer_ca_certificates/packaging/bnhmeijer-ca-certificates/DEBIAN/postinst index 08d175e..778f3dd 100755 --- a/sources/bnhmeijer_ca_certificates/packaging/bnhmeijer-ca-certificates/DEBIAN/postinst +++ b/sources/bnhmeijer_ca_certificates/packaging/bnhmeijer-ca-certificates/DEBIAN/postinst @@ -1,12 +1,40 @@ #!/bin/sh set -e +CA_CRT="/usr/local/share/ca-certificates/bnhmeijer/bnhmeijer-root-ca.crt" +CA_NICKNAME="Bnhmeijer Homelab Root CA" + case "$1" in configure|abort-upgrade) + # 1. Update OS system trust store if command -v update-ca-certificates >/dev/null 2>&1; then - echo "Updating system trusted CA certificates..." + echo "Bijwerken van systeem trusted CA certificaten..." update-ca-certificates >/dev/null 2>&1 || true fi + + # 2. Link Firefox distribution policies if application dir exists + if [ -d /usr/lib/firefox ]; then + mkdir -p /usr/lib/firefox/distribution + if [ ! -e /usr/lib/firefox/distribution/policies.json ] || [ -L /usr/lib/firefox/distribution/policies.json ]; then + ln -sf /etc/firefox/policies/policies.json /usr/lib/firefox/distribution/policies.json + fi + fi + + # 3. Import into NSS databases if certutil is installed + if command -v certutil >/dev/null 2>&1 && [ -f "$CA_CRT" ]; then + for user_home in /root $(awk -F: '$3 >= 1000 && $3 < 60000 {print $6}' /etc/passwd 2>/dev/null); do + user_name=$(stat -c '%U' "$user_home" 2>/dev/null || echo "root") + for pki_dir in "$user_home/.pki/nssdb" "$user_home/.local/share/pki/nssdb"; do + if [ -d "$pki_dir" ]; then + certutil -d "sql:$pki_dir" -A -t "TC,," -n "$CA_NICKNAME" -i "$CA_CRT" >/dev/null 2>&1 || true + chown -R "$user_name:" "$pki_dir" 2>/dev/null || true + fi + done + done + fi + + echo "Bnhmeijer Root CA is geconfigureerd voor OS, Firefox en Chromium/Chrome." + echo "Herstart actieve browsers om de nieuwe certificaatvertrouwenslijst te laden." ;; esac exit 0 diff --git a/sources/bnhmeijer_ca_certificates/packaging/bnhmeijer-ca-certificates/DEBIAN/postrm b/sources/bnhmeijer_ca_certificates/packaging/bnhmeijer-ca-certificates/DEBIAN/postrm index 71dbbcd..e0a0d4d 100755 --- a/sources/bnhmeijer_ca_certificates/packaging/bnhmeijer-ca-certificates/DEBIAN/postrm +++ b/sources/bnhmeijer_ca_certificates/packaging/bnhmeijer-ca-certificates/DEBIAN/postrm @@ -1,12 +1,31 @@ #!/bin/sh set -e +CA_NICKNAME="Bnhmeijer Homelab Root CA" + case "$1" in remove|purge|disappear) + # 1. Update OS system trust store if command -v update-ca-certificates >/dev/null 2>&1; then - echo "Removing certificate from system trust store..." + echo "Verwijderen van certificaat uit systeem trust store..." update-ca-certificates --fresh >/dev/null 2>&1 || true fi + + # 2. Clean up Firefox symlink if it points to our policy + if [ -L /usr/lib/firefox/distribution/policies.json ]; then + rm -f /usr/lib/firefox/distribution/policies.json 2>/dev/null || true + fi + + # 3. Remove from NSS databases if certutil is installed + if command -v certutil >/dev/null 2>&1; then + for user_home in /root $(awk -F: '$3 >= 1000 && $3 < 60000 {print $6}' /etc/passwd 2>/dev/null); do + for pki_dir in "$user_home/.pki/nssdb" "$user_home/.local/share/pki/nssdb"; do + if [ -d "$pki_dir" ]; then + certutil -d "sql:$pki_dir" -D -n "$CA_NICKNAME" >/dev/null 2>&1 || true + fi + done + done + fi ;; esac exit 0 diff --git a/sources/bnhmeijer_ca_certificates/packaging/bnhmeijer-ca-certificates/etc/brave/policies/managed/bnhmeijer-ca.json b/sources/bnhmeijer_ca_certificates/packaging/bnhmeijer-ca-certificates/etc/brave/policies/managed/bnhmeijer-ca.json new file mode 100644 index 0000000..68e0d84 --- /dev/null +++ b/sources/bnhmeijer_ca_certificates/packaging/bnhmeijer-ca-certificates/etc/brave/policies/managed/bnhmeijer-ca.json @@ -0,0 +1,5 @@ +{ + "CACertificates": [ + "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" + ] +} diff --git a/sources/bnhmeijer_ca_certificates/packaging/bnhmeijer-ca-certificates/etc/chromium/policies/managed/bnhmeijer-ca.json b/sources/bnhmeijer_ca_certificates/packaging/bnhmeijer-ca-certificates/etc/chromium/policies/managed/bnhmeijer-ca.json new file mode 100644 index 0000000..68e0d84 --- /dev/null +++ b/sources/bnhmeijer_ca_certificates/packaging/bnhmeijer-ca-certificates/etc/chromium/policies/managed/bnhmeijer-ca.json @@ -0,0 +1,5 @@ +{ + "CACertificates": [ + "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" + ] +} diff --git a/sources/bnhmeijer_ca_certificates/packaging/bnhmeijer-ca-certificates/etc/firefox/policies/policies.json b/sources/bnhmeijer_ca_certificates/packaging/bnhmeijer-ca-certificates/etc/firefox/policies/policies.json new file mode 100644 index 0000000..3291fd9 --- /dev/null +++ b/sources/bnhmeijer_ca_certificates/packaging/bnhmeijer-ca-certificates/etc/firefox/policies/policies.json @@ -0,0 +1,10 @@ +{ + "policies": { + "Certificates": { + "ImportEnterpriseRoots": true, + "Install": [ + "/usr/local/share/ca-certificates/bnhmeijer/bnhmeijer-root-ca.crt" + ] + } + } +} diff --git a/sources/bnhmeijer_ca_certificates/packaging/bnhmeijer-ca-certificates/etc/opt/chrome/policies/managed/bnhmeijer-ca.json b/sources/bnhmeijer_ca_certificates/packaging/bnhmeijer-ca-certificates/etc/opt/chrome/policies/managed/bnhmeijer-ca.json new file mode 100644 index 0000000..68e0d84 --- /dev/null +++ b/sources/bnhmeijer_ca_certificates/packaging/bnhmeijer-ca-certificates/etc/opt/chrome/policies/managed/bnhmeijer-ca.json @@ -0,0 +1,5 @@ +{ + "CACertificates": [ + "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" + ] +} diff --git a/staging/bnhmeijer-ca-certificates-1.0.1_all.deb b/staging/bnhmeijer-ca-certificates-1.0.1_all.deb new file mode 100644 index 0000000000000000000000000000000000000000..9a7c3e1f0f29a0383ab791bb9e4cbd3aad63159a GIT binary patch literal 3548 zcmai!c{CJ`*T!cv_OWj<*?0Lewh_bF5+O^LK^R+%vF{;+vG3Wp?E4lHvR24eDO-rr zP_mnlLVlg|zTfwp_pjeQ&$;(L_nhbc`QcZ^`Z>9&(Kx#}x?{brIl6mc{X+Tp_+*uo z5ejk$86|l>KAFG%-!3a7qbUFP_E-N~4m1d985$>VuK+)9ymSE8Px`)pz<2a%6VOR6*k=(I{B4FXSVr`R!rsR!pO1-^4 z51!+%=fP@UVy1l%JVuoMJx!OQ5`yTvXV@8S6BsKu6Au?J9SnzXMKx9MXsW4+FqOK$ z-!cnhK4#+x079h1eB_JYxXP*Q;m7aJQ&eeDyolcoFDix)T4vE~7K~1xFh~(k%VHf4 zEbw|w5vKx;n{aV8%8kT;0U}0LyImam8iG@8n*vD(^kyw5nvFdP|uLzqG$(eyo!7-oZgC`ZvxEc{v&rB%@vd0ks=q-59OO@77_R@%goU2QoF$$fZ~Vy?BHim*u~hu=vT z7GEL~Z&Mv(P!(i!b`2U6+}9-8GMOwgq1QAxS2i^GZ&LM z{vno5hR7Jx;)aSmS*yU;w5aj-@)53VHv$%t8^+Hpnc`L){;h8aDMe1QchYJb# zDQGPv>i!Pw^!`fXwJ7n1W{tGCf2{g{Z+w=>Lb}7gMMWUeW zp3$G8KRpllhtRYG+Cq$N^R#o5Fis`VJMS^|%q*J>3nzq$Wt6YEI3wSuV1Rxof~$K4 z83!&@Q!68(zpW{Bb;1CEZ!A`zrl1iOXKVoW|DgF7i2sede~GO8|G62QiUv$P7~?9&Mml(&x=`Tp1zvn{~MYp($DtU>1nQEv3W9FbHK@T!Y6y-zz!aLXWPChUvE z$l#NpuE535Y=n5pLe?5D_MP!NSeyuB0> z82tTi-Uyo?$?#re-(U2NT~#r*Qgq|QgX-0-2HZX&n`YG_nm7H)<=yT0mh)D~Wu=>F z{q_Kj(dk=Q8gZ1 zc|I@1Ca|@;iz4e74CngI!*<0ym&38p+E;|=Ug_5$aLltlPaU9>F#(xMf{$Vgi5fJj zBtAOQX|xl%;MKCumXUdLPky7-wB^l=w?%H0vrgs^lU`S1>DNuG{(Op}TIHb{1^aRk zSVejL&J{K5j&6Lq`^v2j_&}J3=_6oyH}&0ml@cwViY{Nu$3`+872N0|3{%TqnNJ)0 zaDXgt#aM4}g!D*yVo5^s?ydABsrh#Ko)d`9cuY7GS?az#$Z=3pLTcTqmFASW#G33y z+1j;vJ!Xoh@Ak3ZwB6{|GJd==5&Y}Xo_4s%VWzovC8rJdmEhh82Tzd@2eDaZhT=(d z=NIvR{#<8hHQ25)i{5Z~X39^=f34W^IBg1JWPLxcM+(k~4k*MC<1BYnoSPv|DmjxO zB&)rC!>e9|IXp++YtM$ts3-NQ*vo#gKTf8WGF}?&Tq(^{F>-6OKR&PCw6r4TtQNct zbuMX<&SvY&2{Bt7R=fGU@2r7A1^uI!u)3g78^?wScq1DVYmzMeC-yu!rVaj$x(yo{ zEk+LOkZ659^GlVlHwf5%EmAgH6NmDO!#z(K`g{ z5sP}LdVbbR;M$$p&8vTe6q)uO!CSLoEt+IkWG2!;OCvOZwjA}_V*a0*0Z6yb;mgg{ zXc0-1Co^L0%vf6$(QG|KT6cKPsotD}0c*p&j(>7RV#aBcU8TfM_Q;c)_j9C(Q#Mtj z)tMG)0m}6FwuGv-cr{MGzGcHqF5#z9)2g8i=^h1d9H(%M`1O*str#c!5A8kE?hVdz zPm_+htq8^pXqt&%u0&(tyk8RSA2rlpJON3?AN5fwG3L!e?nA>eepY(?vY!%kBMXi64JAPeurA|8yC}&Q1_|o^V>GVIhVJ8r5jPx zGb?e$VLAWR)V~X7oNTQ6vpUK1nlVCe12r=NnG_>$NRnR_gpo>ym8d$9Y2KU=3~M}w zM+d_!qWoT1c@Lw=%meUQxEDbq_Exa@*1Q_?hPY_jk_AtqHV>cq?9XeH_PDNN+uC5& zl}^={d6v1OzRde9x+bcoK2pvK%{DoDJa1*vW{?kj3x$*&bZ93P!q_>fQ@{Wk)>Avy zi$7%|@#gJe4+IAI@?*l+AFR$wYev>^NwLD-Cdum^n-N4bDze7}wa?L3mi3s71)jaz z-s9wNmRf_wP)pIDZ8Y`RpRTX}V*P&CzOpD9%J{KYS=eK@l5}al=_#`^GF7VFJ_OOweHjK{Oaau>cJ! zMxq1p?_iFG7*pNpPXS(|Xe@Qly5p_Xm|*xSW+^Dc9!Bofh*a40hF*-64RRbUM4#BK zZQNSBFv_r}CUa{<@^8MHxkLxSH@(5Tlj!BU2SIE%y+GqSWrLJY?7{n8gq>TTF9uR0 zDEiKo>XTxf!F(o}f2fE2i{OAUU;~6erxZN92GR8Ko(_PK9~zz_)Zejg2eH3>`rjfHdq z+g0~9&mXlI(E*&GvxZ?vh!g$I*+bc=S+3VLWbLyT`pO6LTZ{C+Iss#mtzY@4{mTPr z=i+QKT~uoLXa=x}!&NbczJMauJ>R6atT*8vT8<%)NqVcFe*yR8k@RAaIPjI+b6A+n YFtuvo8B=JtI-JOTi)Ae6MIX(70L08)CjbBd literal 0 HcmV?d00001