Route 'p11-kit extract-trust' over to trust tool

The actual command is 'trust extract-compat'. Make installed placeholder
script reflect this. We still support the old placeholder script
if it is present.

1 files changed, 26 insertions, 0 deletions

diff --git a/trust/trust-extract-compat.in b/trust/trust-extract-compat.in
new file mode 100755
index 0000000..2d8809c
--- /dev/null
+++ b/trust/trust-extract-compat.in
@@ -0,0 +1,26 @@
+#!/bin/sh
+
+# This script is a placeholder designed to be replaced when this software
+# has been customized for distribution. It should be symlinked linked to the
+# distribution's update-ca-certificates or update-ca-trust command as
+# appropriate. In the future this script will be called when the PKCS#11
+# trust module is used to modifiy trust anchors and related data.
+
+if [ $# -ne 0 ]; then
+	echo "usage: trust extract-compat" >&2
+	exit 2
+fi
+
+echo "trust: the placeholder extract-compat command has not been customized by your distribution." >&2
+
+# You can use commands like this to extract data from trust modules
+# into appropriate locations for your distribution.
+#
+# trust extract --format=openssl-bundle --filter=ca-anchors \
+# 	--overwrite /tmp/openssl-bundle.pem
+# trust extract --format=pem-bundle --filter=ca-anchors --overwrite \
+# 	--purpose server-auth /tmp/server-auth-bundle.pem
+# trust extract --format=java-cacerts --filter=ca-anchors --overwrite \
+# 	--purpose server-auth /tmp/cacerts
+
+exit 1