source: postlfs/security/nss.xml@ 096492a

systemd-13485
Last change on this file since 096492a was 096492a, checked in by Douglas R. Reno <renodr@…>, 8 years ago

(both) Update to pciutils-3.5.0
(both) Update to NSS-3.24
(both) Update to sysstat-11.3.4

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/branches/systemd@17393 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 9.4 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7<!-- for when .0 is not part of the new tarball name, but always referneced -->
8 <!ENTITY nss-url "ftp.mozilla.org/pub/mozilla.org/security/nss/releases">
9<!--
10<!ENTITY nss-download-http "https://&nss-url;/NSS_3_&nss-minor-version;_&nss-micro-version;_RTM/src/nss-&nss-version;.tar.gz">
11-->
12<!ENTITY nss-download-ftp " ">
13<!-- <!ENTITY nss-download-ftp "ftp://&nss-url;/NSS_3_&nss-minor-version;_&nss-micro-version;_RTM/src/nss-&nss-version;.tar.gz"> -->
14<!-- no micro versions -->
15<!ENTITY nss-download-http "https://&nss-url;/NSS_3_&nss-minor-version;_RTM/src/nss-&nss-version;.tar.gz">
16<!--<!ENTITY nss-download-ftp "ftp://&nss-url;/NSS_3_&nss-minor-version;_RTM/src/nss-&nss-version;.tar.gz">-->
17
18 <!ENTITY nss-md5sum "35854c549cb02100d0f90a6ef328e2e8">
19 <!ENTITY nss-size "7.0 MB">
20 <!ENTITY nss-buildsize "92 MB">
21 <!ENTITY nss-time "1.1 SBU">
22]>
23
24<sect1 id="nss" xreflabel="NSS-&nss-version;">
25 <?dbhtml filename="nss.html"?>
26
27 <sect1info>
28 <othername>$LastChangedBy$</othername>
29 <date>$Date$</date>
30 </sect1info>
31
32 <title>NSS-&nss-version;</title>
33
34 <indexterm zone="nss">
35 <primary sortas="a-NSS">NSS</primary>
36 </indexterm>
37
38 <sect2 role="package">
39 <title>Introduction to NSS</title>
40
41 <para>
42 The Network Security Services (<application>NSS</application>) package is
43 a set of libraries designed to support cross-platform development of
44 security-enabled client and server applications. Applications built with
45 NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12,
46 S/MIME, X.509 v3 certificates, and other security standards. This is
47 useful for implementing SSL and S/MIME or other Internet security
48 standards into an application.
49 </para>
50
51 &lfs79_checked;&gcc6_checked;
52
53 <bridgehead renderas="sect3">Package Information</bridgehead>
54 <itemizedlist spacing="compact">
55 <listitem>
56 <para>
57 Download (HTTP): <ulink url="&nss-download-http;"/>
58 </para>
59 </listitem>
60 <listitem>
61 <para>
62 Download (FTP): <ulink url="&nss-download-ftp;"/>
63 </para>
64 </listitem>
65 <listitem>
66 <para>
67 Download MD5 sum: &nss-md5sum;
68 </para>
69 </listitem>
70 <listitem>
71 <para>
72 Download size: &nss-size;
73 </para>
74 </listitem>
75 <listitem>
76 <para>
77 Estimated disk space required: &nss-buildsize;
78 </para>
79 </listitem>
80 <listitem>
81 <para>
82 Estimated build time: &nss-time;
83 </para>
84 </listitem>
85 </itemizedlist>
86
87 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
88 <itemizedlist spacing="compact">
89 <listitem>
90 <para>
91 Required patch:
92 <ulink url="&patch-root;/nss-&nss-version;-standalone-1.patch"/>
93 </para>
94 </listitem>
95 </itemizedlist>
96
97 <bridgehead renderas="sect3">NSS Dependencies</bridgehead>
98
99 <bridgehead renderas="sect4">Required</bridgehead>
100 <para role="required">
101 <xref linkend="nspr"/>
102 </para>
103
104 <bridgehead renderas="sect4">Recommended</bridgehead>
105 <para role="recommended">
106 <xref linkend="sqlite"/>
107 </para>
108
109 <para condition="html" role="usernotes">
110 User Notes: <ulink url="&blfs-wiki;/nss"/>
111 </para>
112 </sect2>
113
114 <sect2 role="installation">
115 <title>Installation of NSS</title>
116
117 <note>
118 <para>
119 This package does not support parallel build.
120 </para>
121 </note>
122
123 <para>
124 Install <application>NSS</application> by running the following commands:
125 </para>
126
127<screen><userinput>patch -Np1 -i ../nss-&nss-version;-standalone-1.patch &amp;&amp;
128
129cd nss &amp;&amp;
130make BUILD_OPT=1 \
131 NSPR_INCLUDE_DIR=/usr/include/nspr \
132 USE_SYSTEM_ZLIB=1 \
133 ZLIB_LIBS=-lz \
134 $([ $(uname -m) = x86_64 ] &amp;&amp; echo USE_64=1) \
135 $([ -f /usr/include/sqlite3.h ] &amp;&amp; echo NSS_USE_SYSTEM_SQLITE=1) -j1</userinput></screen>
136
137 <para>
138 This package does not come with a test suite.
139 </para>
140
141 <para>
142 Now, as the <systemitem class="username">root</systemitem> user:
143 </para>
144
145<screen role="root"><userinput>cd ../dist &amp;&amp;
146install -v -m755 Linux*/lib/*.so /usr/lib &amp;&amp;
147install -v -m644 Linux*/lib/{*.chk,libcrmf.a} /usr/lib &amp;&amp;
148install -v -m755 -d /usr/include/nss &amp;&amp;
149cp -v -RL {public,private}/nss/* /usr/include/nss &amp;&amp;
150chmod -v 644 /usr/include/nss/* &amp;&amp;
151install -v -m755 Linux*/bin/{certutil,nss-config,pk12util} /usr/bin &amp;&amp;
152install -v -m644 Linux*/lib/pkgconfig/nss.pc /usr/lib/pkgconfig</userinput></screen>
153
154 </sect2>
155
156 <sect2 role="commands">
157 <title>Command Explanations</title>
158
159 <para>
160 <parameter>BUILD_OPT=1</parameter>: This option is passed to
161 <command>make</command> so that the build is performed with no debugging
162 symbols built into the binaries and the default compiler optimizations are
163 used.
164 </para>
165
166 <para>
167 <parameter>NSPR_INCLUDE_DIR=/usr/include/nspr</parameter>: This option
168 sets the location of the <application>NSPR</application> headers.
169 </para>
170
171 <para>
172 <parameter>USE_SYSTEM_ZLIB=1</parameter>: This option is passed to
173 <command>make</command> to ensure that the
174 <filename class="libraryfile">libssl3.so</filename> library is linked to
175 the system installed <application>Zlib</application> instead of the
176 in-tree version.
177 </para>
178
179 <para>
180 <parameter>ZLIB_LIBS=-lz</parameter>: This option provides the
181 linker flags needed to link to the system <application>Zlib</application>.
182 </para>
183
184 <para>
185 <command>$([ $(uname -m) = x86_64 ] &amp;&amp; echo USE_64=1)</command>:
186 The <parameter>USE_64=1</parameter> option is <emphasis>required on
187 x86_64</emphasis>, otherwise <command>make</command> will try (and fail)
188 to create 32-bit objects. The [ $(uname -m) = x86_64 ] test ensures it
189 has no effect on a 32 bit system.
190 </para>
191
192 <para>
193 <command>([ -f /usr/include/sqlite3.h ] &amp;&amp; echo
194 NSS_USE_SYSTEM_SQLITE=1)</command>: This tests if
195 <application>SQLite</application> is installed and if so it
196 <command>echo</command>s the option NSS_USE_SYSTEM_SQLITE=1 to
197 <command>make</command> so that
198 <filename class="libraryfile">libsoftokn3.so</filename> will link against
199 the system version of <application>SQLite</application>.
200 </para>
201
202 </sect2>
203
204 <sect2 role="content">
205 <title>Contents</title>
206
207 <segmentedlist>
208 <segtitle>Installed Programs</segtitle>
209 <segtitle>Installed Libraries</segtitle>
210 <segtitle>Installed Directories</segtitle>
211
212 <seglistitem>
213 <seg>
214 certutil,
215 nss-config,
216 and pk12util
217 </seg>
218 <seg>
219 libcrmf.a,
220 libfreebl3.so,
221 libfreeblpriv3.so,
222 libgtest1.so,
223 libnss3.so,
224 libnssckbi.so,
225 libnssdbm3.so,
226 libnsssysinit.so,
227 libnssutil3.so,
228 libsmime3.so,
229 libsoftokn3.so,
230 and libssl3.so
231 </seg>
232 <seg>
233 /usr/include/nss
234 </seg>
235 </seglistitem>
236 </segmentedlist>
237
238 <variablelist>
239 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
240 <?dbfo list-presentation="list"?>
241 <?dbhtml list-presentation="table"?>
242
243 <varlistentry id="certutil">
244 <term><command>certutil</command></term>
245 <listitem>
246 <para>
247 is the Mozilla Certificate Database Tool. It is a command-line
248 utility that can create and modify the Netscape Communicator
249 cert8.db and key3.db database files. It can also list, generate,
250 modify, or delete certificates within the cert8.db file and create
251 or change the password, generate new public and private key pairs,
252 display the contents of the key database, or delete key pairs within
253 the key3.db file.
254 </para>
255 <indexterm zone="nss certutil">
256 <primary sortas="b-certutil">certutil</primary>
257 </indexterm>
258 </listitem>
259 </varlistentry>
260
261 <varlistentry id="nss-config">
262 <term><command>nss-config</command></term>
263 <listitem>
264 <para>
265 is used to determine the NSS library settings of the installed NSS
266 libraries.
267 </para>
268 <indexterm zone="nss nss-config">
269 <primary sortas="b-nss-config">nss-config</primary>
270 </indexterm>
271 </listitem>
272 </varlistentry>
273
274 <varlistentry id="pk12util">
275 <term><command>pk12util</command></term>
276 <listitem>
277 <para>
278 is a tool for importing certificates and keys from pkcs #12 files
279 into NSS or exporting them. It can also list certificates and keys
280 in such files.
281 </para>
282 <indexterm zone="nss pk12util">
283 <primary sortas="b-pk12util">pk12util</primary>
284 </indexterm>
285 </listitem>
286 </varlistentry>
287
288 </variablelist>
289
290 </sect2>
291
292</sect1>
Note: See TracBrowser for help on using the repository browser.