source: postlfs/security/nss.xml@ 1353bb4

systemd-13485
Last change on this file since 1353bb4 was 1353bb4, checked in by Douglas R. Reno <renodr@…>, 8 years ago

Update to LibRaw-0.17.2
Update to libevdev-1.5.1
Above merged from trunk r17363.
GCC6 Tags

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/branches/systemd@17364 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 9.4 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7<!-- for when .0 is not part of the new tarball name, but always referneced -->
8 <!ENTITY nss-url "ftp.mozilla.org/pub/mozilla.org/security/nss/releases">
9<!--
10<!ENTITY nss-download-http "https://&nss-url;/NSS_3_&nss-minor-version;_&nss-micro-version;_RTM/src/nss-&nss-version;.tar.gz">
11-->
12<!ENTITY nss-download-ftp " ">
13<!-- <!ENTITY nss-download-ftp "ftp://&nss-url;/NSS_3_&nss-minor-version;_&nss-micro-version;_RTM/src/nss-&nss-version;.tar.gz"> -->
14<!-- no micro versions -->
15<!ENTITY nss-download-http "https://&nss-url;/NSS_3_&nss-minor-version;_RTM/src/nss-&nss-version;.tar.gz">
16<!--<!ENTITY nss-download-ftp "ftp://&nss-url;/NSS_3_&nss-minor-version;_RTM/src/nss-&nss-version;.tar.gz">-->
17
18 <!ENTITY nss-md5sum "21c3fed84441b2ab4c50ac626f6517e7">
19 <!ENTITY nss-size "7.3 MB">
20 <!ENTITY nss-buildsize "96 MB">
21 <!ENTITY nss-time "1.0 SBU">
22]>
23
24<sect1 id="nss" xreflabel="NSS-&nss-version;">
25 <?dbhtml filename="nss.html"?>
26
27 <sect1info>
28 <othername>$LastChangedBy$</othername>
29 <date>$Date$</date>
30 </sect1info>
31
32 <title>NSS-&nss-version;</title>
33
34 <indexterm zone="nss">
35 <primary sortas="a-NSS">NSS</primary>
36 </indexterm>
37
38 <sect2 role="package">
39 <title>Introduction to NSS</title>
40
41 <para>
42 The Network Security Services (<application>NSS</application>) package is
43 a set of libraries designed to support cross-platform development of
44 security-enabled client and server applications. Applications built with
45 NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12,
46 S/MIME, X.509 v3 certificates, and other security standards. This is
47 useful for implementing SSL and S/MIME or other Internet security
48 standards into an application.
49 </para>
50
51 &lfs79_checked;
52
53 &gcc6_checked;
54
55 <bridgehead renderas="sect3">Package Information</bridgehead>
56 <itemizedlist spacing="compact">
57 <listitem>
58 <para>
59 Download (HTTP): <ulink url="&nss-download-http;"/>
60 </para>
61 </listitem>
62 <listitem>
63 <para>
64 Download (FTP): <ulink url="&nss-download-ftp;"/>
65 </para>
66 </listitem>
67 <listitem>
68 <para>
69 Download MD5 sum: &nss-md5sum;
70 </para>
71 </listitem>
72 <listitem>
73 <para>
74 Download size: &nss-size;
75 </para>
76 </listitem>
77 <listitem>
78 <para>
79 Estimated disk space required: &nss-buildsize;
80 </para>
81 </listitem>
82 <listitem>
83 <para>
84 Estimated build time: &nss-time;
85 </para>
86 </listitem>
87 </itemizedlist>
88
89 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
90 <itemizedlist spacing="compact">
91 <listitem>
92 <para>
93 Required patch:
94 <ulink url="&patch-root;/nss-&nss-version;-standalone-1.patch"/>
95 </para>
96 </listitem>
97 </itemizedlist>
98
99 <bridgehead renderas="sect3">NSS Dependencies</bridgehead>
100
101 <bridgehead renderas="sect4">Required</bridgehead>
102 <para role="required">
103 <xref linkend="nspr"/>
104 </para>
105
106 <bridgehead renderas="sect4">Recommended</bridgehead>
107 <para role="recommended">
108 <xref linkend="sqlite"/>
109 </para>
110
111 <para condition="html" role="usernotes">
112 User Notes: <ulink url="&blfs-wiki;/nss"/>
113 </para>
114 </sect2>
115
116 <sect2 role="installation">
117 <title>Installation of NSS</title>
118
119 <note>
120 <para>
121 This package does not support parallel build.
122 </para>
123 </note>
124
125 <para>
126 Install <application>NSS</application> by running the following commands:
127 </para>
128
129<screen><userinput>patch -Np1 -i ../nss-&nss-version;-standalone-1.patch &amp;&amp;
130
131cd nss &amp;&amp;
132make BUILD_OPT=1 \
133 NSPR_INCLUDE_DIR=/usr/include/nspr \
134 USE_SYSTEM_ZLIB=1 \
135 ZLIB_LIBS=-lz \
136 $([ $(uname -m) = x86_64 ] &amp;&amp; echo USE_64=1) \
137 $([ -f /usr/include/sqlite3.h ] &amp;&amp; echo NSS_USE_SYSTEM_SQLITE=1) -j1</userinput></screen>
138
139 <para>
140 This package does not come with a test suite.
141 </para>
142
143 <para>
144 Now, as the <systemitem class="username">root</systemitem> user:
145 </para>
146
147<screen role="root"><userinput>cd ../dist &amp;&amp;
148install -v -m755 Linux*/lib/*.so /usr/lib &amp;&amp;
149install -v -m644 Linux*/lib/{*.chk,libcrmf.a} /usr/lib &amp;&amp;
150install -v -m755 -d /usr/include/nss &amp;&amp;
151cp -v -RL {public,private}/nss/* /usr/include/nss &amp;&amp;
152chmod -v 644 /usr/include/nss/* &amp;&amp;
153install -v -m755 Linux*/bin/{certutil,nss-config,pk12util} /usr/bin &amp;&amp;
154install -v -m644 Linux*/lib/pkgconfig/nss.pc /usr/lib/pkgconfig</userinput></screen>
155
156 </sect2>
157
158 <sect2 role="commands">
159 <title>Command Explanations</title>
160
161 <para>
162 <parameter>BUILD_OPT=1</parameter>: This option is passed to
163 <command>make</command> so that the build is performed with no debugging
164 symbols built into the binaries and the default compiler optimizations are
165 used.
166 </para>
167
168 <para>
169 <parameter>NSPR_INCLUDE_DIR=/usr/include/nspr</parameter>: This option
170 sets the location of the <application>NSPR</application> headers.
171 </para>
172
173 <para>
174 <parameter>USE_SYSTEM_ZLIB=1</parameter>: This option is passed to
175 <command>make</command> to ensure that the
176 <filename class="libraryfile">libssl3.so</filename> library is linked to
177 the system installed <application>Zlib</application> instead of the
178 in-tree version.
179 </para>
180
181 <para>
182 <parameter>ZLIB_LIBS=-lz</parameter>: This option provides the
183 linker flags needed to link to the system <application>Zlib</application>.
184 </para>
185
186 <para>
187 <command>$([ $(uname -m) = x86_64 ] &amp;&amp; echo USE_64=1)</command>:
188 The <parameter>USE_64=1</parameter> option is <emphasis>required on
189 x86_64</emphasis>, otherwise <command>make</command> will try (and fail)
190 to create 32-bit objects. The [ $(uname -m) = x86_64 ] test ensures it
191 has no effect on a 32 bit system.
192 </para>
193
194 <para>
195 <command>([ -f /usr/include/sqlite3.h ] &amp;&amp; echo
196 NSS_USE_SYSTEM_SQLITE=1)</command>: This tests if
197 <application>SQLite</application> is installed and if so it
198 <command>echo</command>s the option NSS_USE_SYSTEM_SQLITE=1 to
199 <command>make</command> so that
200 <filename class="libraryfile">libsoftokn3.so</filename> will link against
201 the system version of <application>SQLite</application>.
202 </para>
203
204 </sect2>
205
206 <sect2 role="content">
207 <title>Contents</title>
208
209 <segmentedlist>
210 <segtitle>Installed Programs</segtitle>
211 <segtitle>Installed Libraries</segtitle>
212 <segtitle>Installed Directories</segtitle>
213
214 <seglistitem>
215 <seg>
216 certutil,
217 nss-config,
218 and pk12util
219 </seg>
220 <seg>
221 libcrmf.a,
222 libfreebl3.so,
223 libgtest1.so,
224 libnss3.so,
225 libnssckbi.so,
226 libnssdbm3.so,
227 libnsssysinit.so,
228 libnssutil3.so,
229 libsmime3.so,
230 libsoftokn3.so,
231 and libssl3.so
232 </seg>
233 <seg>
234 /usr/include/nss
235 </seg>
236 </seglistitem>
237 </segmentedlist>
238
239 <variablelist>
240 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
241 <?dbfo list-presentation="list"?>
242 <?dbhtml list-presentation="table"?>
243
244 <varlistentry id="certutil">
245 <term><command>certutil</command></term>
246 <listitem>
247 <para>
248 is the Mozilla Certificate Database Tool. It is a command-line
249 utility that can create and modify the Netscape Communicator
250 cert8.db and key3.db database files. It can also list, generate,
251 modify, or delete certificates within the cert8.db file and create
252 or change the password, generate new public and private key pairs,
253 display the contents of the key database, or delete key pairs within
254 the key3.db file.
255 </para>
256 <indexterm zone="nss certutil">
257 <primary sortas="b-certutil">certutil</primary>
258 </indexterm>
259 </listitem>
260 </varlistentry>
261
262 <varlistentry id="nss-config">
263 <term><command>nss-config</command></term>
264 <listitem>
265 <para>
266 is used to determine the NSS library settings of the installed NSS
267 libraries.
268 </para>
269 <indexterm zone="nss nss-config">
270 <primary sortas="b-nss-config">nss-config</primary>
271 </indexterm>
272 </listitem>
273 </varlistentry>
274
275 <varlistentry id="pk12util">
276 <term><command>pk12util</command></term>
277 <listitem>
278 <para>
279 is a tool for importing certificates and keys from pkcs #12 files
280 into NSS or exporting them. It can also list certificates and keys
281 in such files.
282 </para>
283 <indexterm zone="nss pk12util">
284 <primary sortas="b-pk12util">pk12util</primary>
285 </indexterm>
286 </listitem>
287 </varlistentry>
288
289 </variablelist>
290
291 </sect2>
292
293</sect1>
Note: See TracBrowser for help on using the repository browser.