From e14c3b140e4f61448b6b29470d53cafa76a6081a Mon Sep 17 00:00:00 2001
From: Fredrik Fornwall <fredrik@fornwall.net>
Date: Mon, 3 Apr 2017 01:14:47 +0200
Subject: [PATCH] ca-certificates: Make ca-certificates-java subpkg

---
 packages/ca-certificates/build.sh                      | 18 ++++++++++++++++++
 .../ca-certificates/ca-certificates-java.subpackage.sh |  3 +++
 2 files changed, 21 insertions(+)
 create mode 100644 packages/ca-certificates/ca-certificates-java.subpackage.sh

diff --git a/packages/ca-certificates/build.sh b/packages/ca-certificates/build.sh
index a1b746e5..76ef9c8e 100644
--- a/packages/ca-certificates/build.sh
+++ b/packages/ca-certificates/build.sh
@@ -14,4 +14,22 @@ termux_step_make_install () {
 	termux_download https://raw.githubusercontent.com/bagder/ca-bundle/master/ca-bundle.crt \
 		$CERTFILE \
 		$CERTFILE_SHA256
+	touch $CERTFILE
+
+	# Build java keystore which is split out into a ca-certificates-java subpackage:
+	local KEYUTIL_JAR=$TERMUX_PKG_CACHEDIR/keyutil-0.4.0.jar
+	termux_download \
+		https://github.com/use-sparingly/keyutil/releases/download/0.4.0/keyutil-0.4.0.jar \
+		$KEYUTIL_JAR \
+		18f1d2c82839d84949b1ad015343c509e81ef678c24db6112acc6c0761314610
+
+	local JAVA_KEYSTORE_DIR=$PREFIX/lib/jvm/openjdk-9/lib/security
+	mkdir -p $JAVA_KEYSTORE_DIR
+
+	java -jar $KEYUTIL_JAR \
+		--import \
+		--new-keystore $JAVA_KEYSTORE_DIR/jssecacerts \
+		--password changeit \
+		--force-new-overwrite \
+		--import-pem-file $CERTFILE
 }
diff --git a/packages/ca-certificates/ca-certificates-java.subpackage.sh b/packages/ca-certificates/ca-certificates-java.subpackage.sh
new file mode 100644
index 00000000..c68c5b8a
--- /dev/null
+++ b/packages/ca-certificates/ca-certificates-java.subpackage.sh
@@ -0,0 +1,3 @@
+TERMUX_SUBPKG_INCLUDE="lib/jvm"
+TERMUX_SUBPKG_DESCRIPTION="Common CA certificates (java keystore format)"
+TERMUX_SUBPKG_PLATFORM_INDEPENDENT=true
-- 
2.11.0