Add root certificate bundle to curl package, and improve git default setup.

Add root certificate bundle to curl package, and improve git default setup.

Adding root certs to the curl package.
Changing devenv to use these certs by default.

Note we may want to evaluate if the curl scripting around root
certs is sufficient. It downloads from mozilla.

Adding a default .gitconfig that supresses warnings due to lack
of /etc/passwd and git templates.

This change should make git clone and push from https urls work
out of the box.

BUG=None
TEST=local manual
R=sbc@chromium.org

Committed: https://chromium.googlesource.com/external/naclports/+/3369ff26a53f5fe7852efc7052cd284d505736b9

[Sam Clegg, 2015-04-08 23:35:00]

this is very cool!

lgtm

https://codereview.chromium.org/1071783003/diff/1/ports/curl/build.sh
File ports/curl/build.sh (right):

https://codereview.chromium.org/1071783003/diff/1/ports/curl/build.sh#newcode70
ports/curl/build.sh:70: ${SRC_DIR}/lib/mk-ca-bundle.pl
So we require perl in the build environment?  I guess we can expect that
already.   What doesn't this script do exactly?

https://codereview.chromium.org/1071783003/diff/1/ports/devenv/bashrc
File ports/devenv/bashrc (right):

https://codereview.chromium.org/1071783003/diff/1/ports/devenv/bashrc#newcode15
ports/devenv/bashrc:15: # Setup default .gitconfig if it doesn't already exist.
A bit more info here about why its needed and a TODO to remove?

https://codereview.chromium.org/1071783003/diff/1/ports/devenv/setup-environment
File ports/devenv/setup-environment (right):

https://codereview.chromium.org/1071783003/diff/1/ports/devenv/setup-environm...
ports/devenv/setup-environment:61: export
CURL_CA_BUNDLE=/mnt/html5/packages/curl.${NACL_ARCH}/ca-bundle.crt
Is there a standard place in the filesystem where these packages expect this
file to be?  Maybe add a TODO to install the certs there instead?

[Sam Clegg, 2015-04-08 23:36:28]

First line of CL could be more informative.

How about "Add root certificate bundle to curl package"

[bradn, 2015-04-09 00:01:11]

Committed patchset #2 (id:20001) manually as
3369ff26a53f5fe7852efc7052cd284d505736b9 (presubmit successful).

[bradn, 2015-04-09 00:07:21]

https://codereview.chromium.org/1071783003/diff/1/ports/curl/build.sh
File ports/curl/build.sh (right):

https://codereview.chromium.org/1071783003/diff/1/ports/curl/build.sh#newcode70
ports/curl/build.sh:70: ${SRC_DIR}/lib/mk-ca-bundle.pl
On 2015/04/08 23:34:59, Sam Clegg wrote:
> So we require perl in the build environment?  I guess we can expect that
> already.   What doesn't this script do exactly?

Yep, on the perl. I think we have that a few other places anyway.

agl has expressed concerns that his script is a better source of reliable root
certs. However, I've skipped the problem of getting it to work for now, as it
doesn't seem to generate a bundle that curl can use.

https://codereview.chromium.org/1071783003/diff/1/ports/devenv/bashrc
File ports/devenv/bashrc (right):

https://codereview.chromium.org/1071783003/diff/1/ports/devenv/bashrc#newcode15
ports/devenv/bashrc:15: # Setup default .gitconfig if it doesn't already exist.
On 2015/04/08 23:34:59, Sam Clegg wrote:
> A bit more info here about why its needed and a TODO to remove?

Done.

https://codereview.chromium.org/1071783003/diff/1/ports/devenv/setup-environment
File ports/devenv/setup-environment (right):

https://codereview.chromium.org/1071783003/diff/1/ports/devenv/setup-environm...
ports/devenv/setup-environment:61: export
CURL_CA_BUNDLE=/mnt/html5/packages/curl.${NACL_ARCH}/ca-bundle.crt
On 2015/04/08 23:35:00, Sam Clegg wrote:
> Is there a standard place in the filesystem where these packages expect this
> file to be?  Maybe add a TODO to install the certs there instead?

Done.

[Sam Clegg, 2015-04-10 21:02:11]

https://codereview.chromium.org/1071783003/diff/20001/ports/devenv/bashrc
File ports/devenv/bashrc (right):

https://codereview.chromium.org/1071783003/diff/20001/ports/devenv/bashrc#new...
ports/devenv/bashrc:19: # Setiing up a default git identity, since we lack
/etc/passwd as
Setting