3 files changed, 36 insertions, 0 deletions
diff --git a/local-certificates/.gitignore b/local-certificates/.gitignore
new file mode 100644
index 000000000..e92bbfb1c
--- /dev/null
+++ b/local-certificates/.gitignore
@@ -0,0 +1,2 @@
+*.pem
+*.pem.new
diff --git a/local-certificates/PKGBUILD b/local-certificates/PKGBUILD
new file mode 100644
index 000000000..4a4067074
--- /dev/null
+++ b/local-certificates/PKGBUILD
@@ -0,0 +1,23 @@
+# Maintainer: Erich Eckner <arch at eckner dot net>
+
+pkgname='local-certificates'
+arch=('any')
+pkgver=0
+pkgrel=1
+pkgdesc='Certificate for local version of https://arch.eckner.net'
+
+install='local-certificates.install'
+
+source=(
+  'https://eckner.net/certs/arch.eckner.net.cert.pem'
+  'https://eckner.net/certs/arch.eckner.net.cert.pem.new'
+)
+sha512sums=('88204e95fb4a87bbcb0a415afd87ccac6b2063dcba9fdde2b7c53430a654dda06d4c5a19394e4a8e0b1cd77bac0123ef62e476107f8475a7f370f696bb291323'
+            'f47a38879c346c487a9d53640e681e2600362d9e37d8463282e5f2ed3d02c0fbe60e5e48582335d18b0fb6e76b42544b7e8aa3cf40d796c9ae733ad44dd5bc42')
+
+package() {
+  install -D \
+    -t "${pkgdir}/usr/share/ca-certificates/trust-source/anchors" \
+    "${srcdir}/arch.eckner.net.cert.pem" \
+    "${srcdir}/arch.eckner.net.cert.pem.new"
+}
diff --git a/local-certificates/local-certificates.install b/local-certificates/local-certificates.install
new file mode 100644
index 000000000..ca7c8afe7
--- /dev/null
+++ b/local-certificates/local-certificates.install
@@ -0,0 +1,11 @@
+post_install () {
+  trust extract-compat
+}
+
+post_upgrade() {
+  post_install "$@"
+}
+
+post_remove() {
+  post_install "$@"
+}