Add root certificate bundle to curl package, and improve git default setup.

ports/curl/build.sh

 # Copyright (c) 2013 The Native Client Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 export ac_cv_func_gethostbyname=yes
 export ac_cv_func_getaddrinfo=no
 export ac_cv_func_connect=yes
 export LIBS="-lnacl_io -pthread -l${NACL_CXX_LIB}"
 
 if [ "${NACL_LIBC}" = "newlib" ]; then
@@ skipping 49 matching lines @@
   MakeDir ${PUBLISH_DIR}
 
   local exe=${PUBLISH_DIR}/curl_ppapi_${NACL_ARCH}${NACL_EXEEXT}
 
   LogExecute mv src/${EXECUTABLE_DIR}/curl_ppapi${NACL_EXEEXT} ${exe}
   if [ "${NACL_ARCH}" = "pnacl" ]; then
     LogExecute ${PNACLFINALIZE} ${exe}
   fi
 
   pushd ${PUBLISH_DIR}
+  ${SRC_DIR}/lib/mk-ca-bundle.pl

[Sam Clegg, 2015/04/08 23:34:59]

So we require perl in the build environment?  I guess we can expect that
already.   What doesn't this script do exactly?

[bradn, 2015/04/09 00:07:21]

Yep, on the perl. I think we have that a few other places anyway.

agl has expressed concerns that his script is a better source of reliable root
certs. However, I've skipped the problem of getting it to work for now, as it
doesn't seem to generate a bundle that curl can use.

   LogExecute python ${NACL_SDK_ROOT}/tools/create_nmf.py \
       ${PUBLISH_DIR}/curl_ppapi*${NACL_EXEEXT} \
       -L${DESTDIR_LIB} \
       -s . \
       -o curl.nmf
   popd
 
   InstallNaClTerm ${PUBLISH_DIR}
   LogExecute cp ${START_DIR}/index.html ${PUBLISH_DIR}
   LogExecute cp ${START_DIR}/curl.js ${PUBLISH_DIR}
 }