Release 1.5

PKGBUILD

@@ -1,5 +1,5 @@
 pkgname=ca-certificates-st
-pkgver=1.1
+pkgver=1.5
 pkgrel=1
 pkgdesc="Meine Zertifikate"
 arch=('any')

build_archlinux.sh

@@ -2,4 +2,4 @@
 set -eu -o pipefail
 makepkg -s --needed --noconfirm
 mkdir -p packages
-mv ../*.pkg.* packages
+mv *.pkg.* packages

build_debian.sh

@@ -2,8 +2,6 @@
 set -eu -o pipefail
 sudo apt update
 sudo mk-build-deps -iBrt 'apt -o Debug::pkgProblemResolver=yes --no-install-recommends -y'
-git config --global --add safe.directory /src
-DEBEMAIL=build@$(hostname) gbp dch
 gbp buildpackage '--diff-ignore=.*' --no-sign
 mkdir -p packages
 cp ../*.deb packages

build_ubi.sh

@@ -10,4 +10,5 @@ printf "%%%s %s\n" \
 rpmdev-setuptree
 sudo dnf builddep -y package.spec
 cp release_pkg.sh /src/SOURCES
+cp changelog.spec /src/SOURCES
 rpmbuild --quiet -bb package.spec

changelog-debian.toml

@@ -0,0 +1,27 @@
+[changelog]
+body = """ca-certificates-st {% if version %}({{ version | trim_start_matches(pat="v") }}-1){% else %}unreleased{% endif %} stable; urgency=medium
+{% for commit in commits %}
+  * {% if commit.scope %}*({{ commit.scope }})* {% endif %}{% if commit.breaking %}[**breaking**] {% endif %}{{ commit.message }}
+{%- endfor %}
+
+ -- {% set release = commits | last %}{{ release.author.name }} <{{ release.author.email }}>  {{ release.author.timestamp | date(format="%a, %d %b %Y %H:%M:%S +0000", timezone="UTC") }}\n
+"""
+trim = false
+postprocessors = []
+output = "debian/changelog"
+
+[git]
+conventional_commits = false
+filter_unconventional = false
+split_commits = false
+commit_preprocessors = [
+  # Replace issue numbers
+  #{ pattern = '\((\w+\s)?#([0-9]+)\)', replace = "([#${2}](<REPO>/issues/${2}))"},
+  # Check spelling of the commit with https://github.com/crate-ci/typos
+  # If the spelling is incorrect, it will be automatically fixed.
+  #{ pattern = '.*', replace_command = 'typos --write-changes -' },
+]
+commit_parsers = []
+filter_commits = false
+topo_order = false
+sort_commits = "oldest"

changelog-rhel.toml

@@ -0,0 +1,42 @@
+[changelog]
+header = "%changelog"
+body = """{% for commit in commits | reverse %}
+* {{ commit.author.timestamp | date(format="%a %B %d %Y", timezone="UTC") }} {{ commit.author.name }} <{{ commit.author.email }}>{%if version%} {{ version }}{% endif %}
+  - {% if commit.scope %}*({{ commit.scope }})* {% endif %}{% if commit.breaking %}[**breaking**] {% endif %}{{ commit.message }}
+{%- endfor %}
+"""
+# template for the changelog footer
+footer = ""
+# remove the leading and trailing s
+trim = true
+# postprocessors
+postprocessors = [
+  # { pattern = '<REPO>', replace = "https://github.com/orhun/git-cliff" }, # replace repository URL
+]
+# render body even when there are no releases to process
+# render_always = true
+# output file path
+output = "changelog.spec"
+
+[git]
+# filter out the commits that are not conventional
+filter_unconventional = false
+# process each line of a commit as an individual commit
+split_commits = false
+# regex for preprocessing the commit messages
+commit_preprocessors = [
+  # Replace issue numbers
+  #{ pattern = '\((\w+\s)?#([0-9]+)\)', replace = "([#${2}](<REPO>/issues/${2}))"},
+  # Check spelling of the commit with https://github.com/crate-ci/typos
+  # If the spelling is incorrect, it will be automatically fixed.
+  #{ pattern = '.*', replace_command = 'typos --write-changes -' },
+]
+# regex for parsing and grouping commits
+commit_parsers = [
+]
+# filter out the commits that are not matched by commit parsers
+filter_commits = false
+# sort the tags topologically
+topo_order = false
+# sort the commits inside sections by oldest/newest order
+sort_commits = "oldest"

changelog.spec

@@ -0,0 +1,34 @@
+%changelog
+
+* Wed May 25 2005 Sebastian Tobie <sebastian@sebastian-tobie.de> v1.5
+- Release 1.5
+* Mon May 05 2025 Sebastian Tobie <sebastian@sebastian-tobie.de> v1.5
+- added an prefix to prevent one ca overwriting an other
+* Wed May 25 2005 Sebastian Tobie <sebastian@sebastian-tobie.de> v1.4
+- Release 1.4
+* Mon May 05 2025 Sebastian Tobie <sebastian@sebastian-tobie.de> v1.4
+- added an script for releasing the package
+* Sun May 04 2025 Sebastian Tobie <sebastian@sebastian-tobie.de> v1.3
+- release 1.3
+* Sun May 04 2025 Sebastian Tobie <sebastian@sebastian-tobie.de> v1.3
+- removed dch bause it changes the changelog
+* Sun May 04 2025 Sebastian Tobie <sebastian@sebastian-tobie.de> v1.3
+- automated the changelog using git-cliff
+* Sun May 04 2025 Sebastian Tobie <sebastian@sebastian-tobie.de> v1.3
+- added old ca
+* Sun May 04 2025 Sebastian Tobie <sebastian@sebastian-tobie.de> v1.2
+- release  1.2
+* Sun May 04 2025 Sebastian Tobie <sebastian@sebastian-tobie.de> v1.2
+- adjusted the build.pkg file to copy files into the container and only modify the packages directory
+* Sun May 04 2025 Sebastian Tobie <sebastian@sebastian-tobie.de> v1.2
+- created the specfile for rhel based distros
+* Sun May 04 2025 Sebastian Tobie <sebastian@sebastian-tobie.de> v1.2
+- fixed the permissions of build_archlinux.sh
+* Sun May 04 2025 Sebastian Tobie <sebastian@sebastian-tobie.de> v1.2
+- removed the unnessesary subdirectory
+* Sat May 03 2025 Sebastian Tobie <sebastian@sebastian-tobie.de> v1.2
+- moving the arch packages instead of copying
+* Sat March 08 2025 Sebastian Tobie <sebastian@sebastian-tobie.de> v1.2
+- added debian build data
+* Sat March 08 2025 Sebastian Tobie <sebastian@sebastian-tobie.de> v1.0
+- arch package build working

debian/changelog

@@ -1,7 +1,41 @@
-ca-certificates-st (1.0-1) unstable; urgency=medium
+ca-certificates-st (1.5-1) stable; urgency=medium
+
+  * added an prefix to prevent one ca overwriting an other
+  * Release 1.5
+
+ -- Sebastian Tobie <sebastian@sebastian-tobie.de>  Wed, 25 May 2005 06:06:54 +0000
+
+ca-certificates-st (1.4-1) stable; urgency=medium
+
+  * added an script for releasing the package
+  * Release 1.4
+
+ -- Sebastian Tobie <sebastian@sebastian-tobie.de>  Wed, 25 May 2005 06:02:30 +0000
+
+ca-certificates-st (1.3-1) stable; urgency=medium
+
+  * added old ca
+  * automated the changelog using git-cliff
+  * removed dch bause it changes the changelog
+  * release 1.3
+
+ -- Sebastian Tobie <sebastian@sebastian-tobie.de>  Sun, 04 May 2025 20:55:52 +0000
+
+ca-certificates-st (1.2-1) stable; urgency=medium
+
+  * added debian build data
+  * moving the arch packages instead of copying
+  * removed the unnessesary subdirectory
+  * fixed the permissions of build_archlinux.sh
+  * created the specfile for rhel based distros
+  * adjusted the build.pkg file to copy files into the container and only modify the packages directory
+  * release  1.2
+
+ -- Sebastian Tobie <sebastian@sebastian-tobie.de>  Sun, 04 May 2025 16:09:32 +0000
+
+ca-certificates-st (1.0-1) stable; urgency=medium
 
-  [ Sebastian Tobie ]
-  * Initial release.
   * arch package build working
 
- -- root <build@c8e6036d866c>  Sat, 03 May 2025 20:48:30 +0000
+ -- Sebastian Tobie <sebastian@sebastian-tobie.de>  Sat, 08 Mar 2025 08:28:04 +0000
+

package.spec

@@ -1,7 +1,8 @@
 Name: ca-certificates-st
-Version: 1.0
+Version: 1.5
 Release: 1
-Source: release_pkg.sh
+Source0: release_pkg.sh
+Source1: changelog.spec
 License: Propietary
 BuildArch: noarch
 Requires: ca-certificates
@@ -14,6 +15,7 @@ Meine Zertifikate
 %prep
 %setup -T -c
 cp %SOURCE0 .
+cp %SOURCE1 .
 
 %build
 ./release_pkg.sh

release.sh

@@ -0,0 +1,14 @@
+#!/bin/bash
+version="$1"
+date=$(date '+%y-%d-%m %H:%M:%S')
+sed -i "s;^Version: .*$;Version: ${version};" package.spec
+sed -i "s;^pkgver=.*$;pkgver=${version};" PKGBUILD
+git add -A
+git commit --date="${date}" -m "Release ${version}"
+git tag -m "Release ${version}" "v${version}"
+git cliff -c changelog-debian.toml
+git cliff -c changelog-rhel.toml
+git add -A
+git commit --amend --date="${date}" -m "Release ${version}"
+git tag -fm "Release ${version}" "v${version}"
+./build.pkg || git reset --soft HEAD^

release_pkg.sh

@@ -18,10 +18,11 @@ download_certs() {
         if [ -n "$trust" ] ; then
             args+=" -addtrust ${trust}"
         fi
-        bao read -field=certificate "${ca}/issuer/${uuid}" | openssl x509 -out "${subdir}/${name}.pem" -setalias "${uuid}" ${args}
+        bao read -field=certificate "${ca}/issuer/${uuid}" | openssl x509 -out "${subdir}/${ca}-${name}.pem" -setalias "${uuid}" ${args}
     done
 }
 
+download_certs "ca" "certs" "anyExtendedKeyUsage"
 download_certs "root_ca" "certs" "anyExtendedKeyUsage"
 download_certs "acme_ca" "certs" "anyExtendedKeyUsage"
 download_certs "secureboot_ca" "certs" "codeSigning"