source: postlfs/security/nss.xml@ 47888b9

10.0 10.1 11.0 11.1 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind lazarus perl-modules qt5new trunk upgradedb xry111/intltool xry111/test-20220226
Last change on this file since 47888b9 was 47888b9, checked in by Bruce Dubbs <bdubbs@…>, 5 years ago

Update to guile-2.2.0.
Update to keyutils-1.5.10.
Update to llvm-4.0.0.
Update to nss-3.30.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@18500 af4574ff-66df-0310-9fd7-8a98e5e911e0

  • Property mode set to 100644
File size: 10.1 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7<!-- for when .0 is not part of the new tarball name, but always referenced -->
8 <!ENTITY nss-url "ftp.mozilla.org/pub/mozilla.org/security/nss/releases">
9
10<!-- micro versions -->
11<!-- <!ENTITY nss-download-http "https://&nss-url;/NSS_3_&nss-minor-version;_&nss-micro-version;_RTM/src/nss-&nss-version;.tar.gz">-->
12
13 <!-- no micro versions -->
14 <!ENTITY nss-download-http "https://&nss-url;/NSS_3_&nss-minor-version;_RTM/src/nss-&nss-version;.tar.gz">
15
16 <!ENTITY nss-download-ftp " ">
17 <!ENTITY nss-md5sum "7408c77e8267939ac66b6617f8cb555f">
18 <!ENTITY nss-size "9.1 MB">
19 <!ENTITY nss-buildsize "104 MB">
20 <!ENTITY nss-time "1.5 SBU">
21]>
22
23<sect1 id="nss" xreflabel="NSS-&nss-version;">
24 <?dbhtml filename="nss.html"?>
25
26 <sect1info>
27 <othername>$LastChangedBy$</othername>
28 <date>$Date$</date>
29 </sect1info>
30
31 <title>NSS-&nss-version;</title>
32
33 <indexterm zone="nss">
34 <primary sortas="a-NSS">NSS</primary>
35 </indexterm>
36
37 <sect2 role="package">
38 <title>Introduction to NSS</title>
39
40 <para>
41 The Network Security Services (<application>NSS</application>) package is
42 a set of libraries designed to support cross-platform development of
43 security-enabled client and server applications. Applications built with
44 NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12,
45 S/MIME, X.509 v3 certificates, and other security standards. This is
46 useful for implementing SSL and S/MIME or other Internet security
47 standards into an application.
48 </para>
49
50 &lfs80_checked;
51
52 <bridgehead renderas="sect3">Package Information</bridgehead>
53 <itemizedlist spacing="compact">
54 <listitem>
55 <para>
56 Download (HTTP): <ulink url="&nss-download-http;"/>
57 </para>
58 </listitem>
59 <listitem>
60 <para>
61 Download (FTP): <ulink url="&nss-download-ftp;"/>
62 </para>
63 </listitem>
64 <listitem>
65 <para>
66 Download MD5 sum: &nss-md5sum;
67 </para>
68 </listitem>
69 <listitem>
70 <para>
71 Download size: &nss-size;
72 </para>
73 </listitem>
74 <listitem>
75 <para>
76 Estimated disk space required: &nss-buildsize;
77 </para>
78 </listitem>
79 <listitem>
80 <para>
81 Estimated build time: &nss-time;
82 </para>
83 </listitem>
84 </itemizedlist>
85
86 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
87 <itemizedlist spacing="compact">
88 <listitem>
89 <para>
90 Required patch:
91 <ulink url="&patch-root;/nss-&nss-version;-standalone-1.patch"/>
92 </para>
93 </listitem>
94 </itemizedlist>
95
96 <bridgehead renderas="sect3">NSS Dependencies</bridgehead>
97
98 <bridgehead renderas="sect4">Required</bridgehead>
99 <para role="required">
100 <xref linkend="nspr"/>
101 </para>
102
103 <bridgehead renderas="sect4">Recommended</bridgehead>
104 <para role="recommended">
105 <xref linkend="sqlite"/> and <xref linkend="p11-kit"/> (runtime)
106 </para>
107
108 <para condition="html" role="usernotes">
109 User Notes: <ulink url="&blfs-wiki;/nss"/>
110 </para>
111 </sect2>
112
113 <sect2 role="installation">
114 <title>Installation of NSS</title>
115
116 <note>
117 <para>
118 This package does not support parallel build.
119 </para>
120 </note>
121
122 <para>
123 Install <application>NSS</application> by running the following commands:
124 </para>
125
126<screen><userinput>patch -Np1 -i ../nss-&nss-version;-standalone-1.patch &amp;&amp;
127
128cd nss &amp;&amp;
129
130make -j1 BUILD_OPT=1 \
131 NSPR_INCLUDE_DIR=/usr/include/nspr \
132 USE_SYSTEM_ZLIB=1 \
133 ZLIB_LIBS=-lz \
134 $([ $(uname -m) = x86_64 ] &amp;&amp; echo USE_64=1) \
135 $([ -f /usr/include/sqlite3.h ] &amp;&amp; echo NSS_USE_SYSTEM_SQLITE=1)</userinput></screen>
136
137 <para>
138 This package does not come with a test suite.
139 </para>
140
141 <para>
142 Now, as the <systemitem class="username">root</systemitem> user:
143 </para>
144
145<screen role="root"><userinput>cd ../dist &amp;&amp;
146
147install -v -m755 Linux*/lib/*.so /usr/lib &amp;&amp;
148install -v -m644 Linux*/lib/{*.chk,libcrmf.a} /usr/lib &amp;&amp;
149
150install -v -m755 -d /usr/include/nss &amp;&amp;
151cp -v -RL {public,private}/nss/* /usr/include/nss &amp;&amp;
152chmod -v 644 /usr/include/nss/* &amp;&amp;
153
154install -v -m755 Linux*/bin/{certutil,nss-config,pk12util} /usr/bin &amp;&amp;
155
156install -v -m644 Linux*/lib/pkgconfig/nss.pc /usr/lib/pkgconfig</userinput></screen>
157
158 </sect2>
159
160 <sect2 role="commands">
161 <title>Command Explanations</title>
162
163 <para>
164 <parameter>BUILD_OPT=1</parameter>: This option is passed to
165 <command>make</command> so that the build is performed with no debugging
166 symbols built into the binaries and the default compiler optimizations are
167 used.
168 </para>
169
170 <para>
171 <parameter>NSPR_INCLUDE_DIR=/usr/include/nspr</parameter>: This option
172 sets the location of the nspr headers.
173 </para>
174
175 <para>
176 <parameter>USE_SYSTEM_ZLIB=1</parameter>: This option is passed to
177 <command>make</command> to ensure that the
178 <filename class="libraryfile">libssl3.so</filename> library is linked to
179 the system installed <application>zlib</application> instead of the
180 in-tree version.
181 </para>
182
183 <para>
184 <parameter>ZLIB_LIBS=-lz</parameter>: This option provides the
185 linker flags needed to link to the system <application>zlib</application>.
186 </para>
187
188 <para>
189 <command>$([ $(uname -m) = x86_64 ] &amp;&amp; echo USE_64=1)</command>:
190 The <parameter>USE_64=1</parameter> option is <emphasis>required on
191 x86_64</emphasis>, otherwise <command>make</command> will try (and fail)
192 to create 32-bit objects. The [ $(uname -m) = x86_64 ] test ensures it
193 has no effect on a 32 bit system.
194 </para>
195
196 <para>
197 <command>([ -f /usr/include/sqlite3.h ] &amp;&amp; echo
198 NSS_USE_SYSTEM_SQLITE=1)</command>: This tests if
199 <application>sqlite</application> is installed and if so it
200 <command>echo</command>s the option NSS_USE_SYSTEM_SQLITE=1 to
201 <command>make</command> so that
202 <filename class="libraryfile">libsoftokn3.so</filename> will link against
203 the system version of sqlite.
204 </para>
205
206 </sect2>
207
208 <sect2 role="configuration">
209 <title>Configuring NSS</title>
210
211 <para>If <xref linkend="p11-kit"/> is installed,
212 <filename>/usr/lib/libp11-kit.so</filename> can be used as a drop-in
213 replacement for <filename>/usr/lib/libnssckbi.so</filename> to
214 transparently make the system CAs available to
215 <application>NSS</application> aware applications, rather than the static
216 list provided by <filename>/usr/lib/libnssckbi.so</filename>. As the
217 <systemitem class="username">root</systemitem> user, execute the following
218 commands:</para>
219
220<screen role="root"><userinput>readlink /usr/lib/libnssckbi.so || \
221mv -v /usr/lib/libnssckbi.so /usr/lib/libnssckbi.so.orig &amp;&amp;
222ln -sfv libp11-kit.so /usr/lib/libnssckbi.so</userinput></screen>
223
224 <para>Additionally, for dependent applications that do not use the internal
225 database (<filename>/usr/lib/libnssckbi.so</filename>), the
226 <filename>make-ca.sh</filename> script, included on the
227 <xref linkend="cacerts"/> page, will generate a system wide NSS DB.</para>
228
229 </sect2>
230
231 <sect2 role="content">
232 <title>Contents</title>
233
234 <segmentedlist>
235 <segtitle>Installed Programs</segtitle>
236 <segtitle>Installed Libraries</segtitle>
237 <segtitle>Installed Directories</segtitle>
238
239 <seglistitem>
240 <seg>
241 certutil, nss-config, and pk12util
242 </seg>
243 <seg>
244 libcrmf.a, libfreebl3.so, libfreeblpriv3.so, libgtest1.so, libnss3.so,
245 libnssckbi.so, libnssdbm3.so, libnsssysinit.so,
246 libnssutil3.so, libsmime3.so, libsoftokn3.so, and libssl3.so
247 </seg>
248 <seg>
249 /usr/include/nss
250 </seg>
251 </seglistitem>
252 </segmentedlist>
253
254 <variablelist>
255 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
256 <?dbfo list-presentation="list"?>
257 <?dbhtml list-presentation="table"?>
258
259 <varlistentry id="certutil">
260 <term><command>certutil</command></term>
261 <listitem>
262 <para>
263 is the Mozilla Certificate Database Tool. It is a command-line
264 utility that can create and modify the Netscape Communicator
265 cert8.db and key3.db database files. It can also list, generate,
266 modify, or delete certificates within the cert8.db file and create
267 or change the password, generate new public and private key pairs,
268 display the contents of the key database, or delete key pairs within
269 the key3.db file.
270 </para>
271 <indexterm zone="nss certutil">
272 <primary sortas="b-certutil">certutil</primary>
273 </indexterm>
274 </listitem>
275 </varlistentry>
276
277 <varlistentry id="nss-config">
278 <term><command>nss-config</command></term>
279 <listitem>
280 <para>
281 is used to determine the NSS library settings of the installed NSS
282 libraries.
283 </para>
284 <indexterm zone="nss nss-config">
285 <primary sortas="b-nss-config">nss-config</primary>
286 </indexterm>
287 </listitem>
288 </varlistentry>
289
290 <varlistentry id="pk12util">
291 <term><command>pk12util</command></term>
292 <listitem>
293 <para>
294 is a tool for importing certificates and keys from pkcs #12 files
295 into NSS or exporting them. It can also list certificates and keys
296 in such files.
297 </para>
298 <indexterm zone="nss pk12util">
299 <primary sortas="b-pk12util">pk12util</primary>
300 </indexterm>
301 </listitem>
302 </varlistentry>
303
304 </variablelist>
305
306 </sect2>
307
308</sect1>
Note: See TracBrowser for help on using the repository browser.