Source: ca-certificates Version: 20150426 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: fileordering X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org
Hi! While working on the "reproducible builds" effort [1], we have noticed that ca-certificates could not be built reproducibly. It embeds an unsorted list of crt files in a config file. The attached patch fixes this by sorting the list before it is embedded. Regards, Reiner [1]: https://wiki.debian.org/ReproducibleBuilds
diff --git a/debian/rules b/debian/rules index ddd7cee..fd4632b 100755 --- a/debian/rules +++ b/debian/rules @@ -44,7 +44,7 @@ install: build $(MAKE) install DESTDIR=$(CURDIR)/debian/ca-certificates (cd $(CURDIR)/debian/ca-certificates/usr/share/ca-certificates; \ crts=""; \ - for crt in $$(find . -type f -name '*.crt' -print); \ + for crt in $$(find . -type f -name '*.crt' -print | LC_ALL=C sort); \ do \ crt=$$(echo $$crt | sed -e 's/\.\///'); \ if test "$$crts" = ""; then \