From 2379713951520d5ea3fd52d2ec9de1e166c02c72 Mon Sep 17 00:00:00 2001 From: Jeremi Piotrowski Date: Fri, 14 Feb 2025 10:49:37 +0100 Subject: [PATCH] app-misc/ca-certificates: Account for certs missing newlines Concatenating certificates missing newlines naively with cat results in broken bundle. Fix the issue by using a sed expression that appends a trailing newline after the lastline if it is missing. Issue: flatcar/flatcar#1601 Signed-off-by: Jeremi Piotrowski --- ...rtificates-3.108.ebuild => ca-certificates-3.108-r1.ebuild} | 0 .../app-misc/ca-certificates/files/update-ca-certificates | 3 ++- 2 files changed, 2 insertions(+), 1 deletion(-) rename sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/{ca-certificates-3.108.ebuild => ca-certificates-3.108-r1.ebuild} (100%) diff --git a/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/ca-certificates-3.108.ebuild b/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/ca-certificates-3.108-r1.ebuild similarity index 100% rename from sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/ca-certificates-3.108.ebuild rename to sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/ca-certificates-3.108-r1.ebuild diff --git a/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/files/update-ca-certificates b/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/files/update-ca-certificates index ea7cb27cff..fcbdd008ed 100644 --- a/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/files/update-ca-certificates +++ b/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/files/update-ca-certificates @@ -32,7 +32,8 @@ if [[ ! -e "${CERTBUNDLE}" || "${CERTSDIR}" -nt "${CERTBUNDLE}" ]]; then trap "rm -f '${CERTSDIR}/${TEMPBUNDLE}'" EXIT # Use .0 instead of .pem to pull in only what c_rehash validated - cat "${CERTSDIR}"/*.[0-9] > "${TEMPBUNDLE}" + sed --separate '$a\' "${CERTSDIR}"/*.[0-9] >"${TEMPBUNDLE}" + chmod 644 "${TEMPBUNDLE}" mv -f "${TEMPBUNDLE}" "${CERTBUNDLE}" trap - EXIT