ca-certificates: Updated (1.87 -> 20201104)

and reworked to install individual hashes

Signed-off-by: Nagy Károly Gábriel <k@jpi.io>

security/ca-certificates/ca-certificates.conf

@@ -58,6 +58,8 @@ ca_pm()
 	mkdir -p $root/etc/ssl
 	ca_convert "$( match_source_file -p ca-certificates )"
 	cd $root/etc/ssl && ln -sf certs/ca-bundle.crt cert.pem
+	cd $root/etc/ssl/certs && awk 'BEGIN {c=0;} /BEGIN CERT/{c++} { print > "cert." c ".pem"}' < ca-bundle.crt
+	cd $root/etc/ssl/certs && $root/usr/bin/c_rehash .
 }
 
 chownsrcdir=0

security/ca-certificates/ca-certificates.desc

@@ -12,7 +12,7 @@
 [COPY] GNU General Public License can be found in the file COPYING.
 [COPY] --- SDE-COPYRIGHT-NOTE-END ---
 
-[I] The Mozilla CA root certificate bundle
+[I] The Mozilla CA root certificate bundle and hashes
 
 [T] This package contains the set of CA certificates chosen by the
 [T] Mozilla Foundation for use with the Internet PKI.
@@ -24,9 +24,9 @@
 
 [C] extra/crypto
 
-[L] PublicDomain
+[L] MPL
 [S] Stable
-[V] 1.87
+[V] 20201104
 [P] X -----5---9 800.000
 
-[D] 1440859986 ca-certificates-1.87.txt !http://mxr.mozilla.org/security/source/security/nss/lib/ckfw/builtins/certdata.txt?raw=1
+[D] 4016209721 ca-certificates-20201104.txt !https://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt