On Oct 23, 2026, at 2:50 PM, Kirill A. Korinsky <[email protected]> wrote: > > On Fri, 23 Oct 2026 17:48:11 +0200, > Kurt Miller <[email protected]> wrote: >> >> >> do-install: >> - ${INSTALL_DATA_DIR} ${PREFIX}/${PKGSTEM} >> + ${INSTALL_DATA_DIR} ${PREFIX}/${PKGSTEM} \ >> + ${WRKINST}/${SYSCONFDIR}/ssl >> cd ${IMAGEDIR} && tar -cf - * | tar -C ${PREFIX}/${PKGSTEM} -xf - >> - ${INSTALL_DATA} ${JDKFILESDIR}/blocked.certs \ >> - ${PREFIX}/${PKGSTEM}/lib/security/ >> + touch ${WRKINST}/${SYSCONFDIR}/ssl/jdk-cacerts >> + rm ${PREFIX}/${PKGSTEM}/lib/security/cacerts >> + ln -s ${SYSCONFDIR}/ssl/jdk-cacerts \ >> + ${PREFIX}/${PKGSTEM}/lib/security/cacerts >> > > I not sure why do you need touch and rm here. > > I think ln -sf is enough, but it is style question. >
I can use ln -sf. The touch is there to quash this warning: Warning: symlink(s) point to non-existent /usr/ports/pobj/jdk-21.0.12.8.1/fake-aarch64/etc/ssl/jdk-cacerts /usr/ports/pobj/jdk-21.0.12.8.1/fake-aarch64/usr/local/jdk-21/lib/security/carets Updates for the jdk’s should be here in a few days, I will combine using the jdk-ca-certs with those updates so that the blocked.certs from upstream will contain the eMudrha certs as well - belt and suspenders approach. Thank you and tb@ for all the help with this. -Kurt
