blob: 36fa8a203bc5409fa648f975d7a2914e186f93fa (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
|
# Maintainer: kevku <kevku@gmx.com>
pkgbase=web-eid-webextension
pkgname=("firefox-extension-web-eid" "chromium-extension-web-eid")
pkgver=2.2.2
pkgrel=2
pkgdesc="Web eID browser extension"
arch=('any')
url="https://web-eid.eu/"
license=('MIT')
makedepends=('git' 'nodejs-lts-hydrogen' 'npm' 'openssl' 'zip' 'xxd' 'jq')
source=("$pkgbase::git+https://github.com/web-eid/web-eid-webextension.git?signed#tag=v$pkgver"
"web-eid-js::git+https://github.com/web-eid/web-eid.js.git")
sha256sums=("SKIP" "SKIP")
validpgpkeys=(
'1282B0F8809D0DC632C85A3F86B611CE24492160' # Mart Somermaa
'D1EBC666EFCBFBD3CFC2EBAA90C0B5E75C3B195D' # Raul Metsma
)
prepare() {
cd "$srcdir/$pkgbase"
git submodule init
git config submodule.lib/web-eid.js.url $srcdir/web-eid-js
git -c protocol.file.allow=always submodule update
}
build() {
cd "$srcdir/$pkgbase"
npm install --cache "${srcdir}/npm-cache"
SOURCE_DATE_EPOCH=$(git log -1 --pretty=%ct) TOKEN_SIGNING_BACKWARDS_COMPATIBILITY=true npm run clean build package
}
package_firefox-extension-web-eid() {
pkgdesc="Web eID Firefox extension (unsigned)"
depends=(web-eid-native)
conflicts=(web-eid-firefox)
cd "$srcdir/$pkgbase"
install -Dm644 ./dist/firefox.zip "$pkgdir/usr/share/mozilla/extensions/{ec8030f7-c20a-464f-9b0e-13a3a9e97384}/{e68418bc-f2b0-4459-a9ea-3e72b6751b07}.xpi"
install -Dm644 "$srcdir/$pkgbase/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
cat << EOF > "eu.webeid.json"
{
"name": "eu.webeid",
"description": "Web-eid native application",
"path": "/usr/bin/web-eid",
"type": "stdio",
"allowed_extensions": [ "{e68418bc-f2b0-4459-a9ea-3e72b6751b07}" ]
}
EOF
install -Dm644 "eu.webeid.json" "$pkgdir/usr/lib/mozilla/native-messaging-hosts/eu.webeid.json"
}
package_chromium-extension-web-eid() {
pkgdesc="Web eID Chromium extension (unsigned)"
depends=(web-eid-native)
conflicts=(web-eid-chrome)
cd "$srcdir/$pkgbase/dist/"
# https://stackoverflow.com/questions/18693962/pack-chrome-extension-on-server-with-only-command-line-interface
openssl genrsa 2048 | openssl pkcs8 -topk8 -nocrypt -out "$pkgbase.pem"
openssl rsa -in "$pkgbase.pem" -pubout -outform der | openssl dgst -sha256 -binary -out "$pkgbase.crxid"
truncate -s 16 "$pkgbase.crxid"
openssl rsa -pubout -outform DER < "$pkgbase.pem" > "$pkgbase.pub" 2>/dev/null
crx_id=$(xxd -p -c0 "$pkgbase.crxid" | tr '0-9a-f' 'a-p')
cd chrome
jq --ascii-output --arg key $(cat "../$pkgbase.pub" | base64 -w0) '. + {key: $key}' manifest.json > manifest.json.new
mv manifest.json.new manifest.json
zip -qr -9 -X "../$pkgbase.zip" .
cd ..
(
printf "CRX3 SignedData"
echo "00 12 00 00 00 0A 10" | xxd -r -p
cat "$pkgbase.crxid" "$pkgbase.zip"
) > "$pkgbase.presig"
openssl dgst -sha256 -binary -sign "$pkgbase.pem" < "$pkgbase.presig" > "$pkgbase.sig"
crmagic_hex="43 72 32 34" # Cr24
version_hex="03 00 00 00" # 3
header_length="45 02 00 00"
header_chunk_1="12 AC 04 0A A6 02"
header_chunk_2="12 80 02"
header_chunk_3="82 F1 04 12 0A 10"
(
echo "$crmagic_hex $version_hex $header_length $header_chunk_1" | xxd -r -p
cat "$pkgbase.pub"
echo "$header_chunk_2" | xxd -r -p
cat "$pkgbase.sig"
echo "$header_chunk_3" | xxd -r -p
cat "$pkgbase.crxid" "$pkgbase.zip"
) > "$crx_id.crx"
cat << EOF > "$crx_id.json"
{
"external_crx": "/usr/share/$pkgname/$crx_id.crx",
"external_version": "${pkgver}"
}
EOF
cat << EOF > "eu.webeid.json"
{
"name": "eu.webeid",
"description": "Web-eid native application",
"path": "/usr/bin/web-eid",
"type": "stdio",
"allowed_origins": [
"chrome-extension://$crx_id/"
]
}
EOF
install -Dm644 "eu.webeid.json" "$pkgdir/usr/share/web-eid/eu.webeid.json"
mkdir -p $pkgdir/etc/chromium/native-messaging-hosts
ln -sf "/usr/share/web-eid/eu.webeid.json" "$pkgdir/etc/chromium/native-messaging-hosts/eu.webeid.json"
install -Dm644 "$crx_id.crx" "$pkgdir/usr/share/$pkgname/$crx_id.crx"
install -Dm644 "$crx_id.json" "$pkgdir/usr/share/chromium/extensions/$crx_id.json"
# vivaldi
mkdir -p $pkgdir/etc/opt/chrome/native-messaging-hosts
ln -sf "/usr/share/web-eid/eu.webeid.json" "$pkgdir/etc/opt/chrome/native-messaging-hosts/eu.webeid.json"
}
|