source: postlfs/security/nss.xml@ 6d35e46

10.0 10.1 11.0 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind ken/refactor-virt lazarus perl-modules qt5new trunk xry111/git-date xry111/git-date-for-trunk xry111/git-date-test
Last change on this file since 6d35e46 was 6d35e46, checked in by Douglas R. Reno <renodr@…>, 5 years ago

Update to nss-3.29
Update to thunderbird-45.7.1

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@18275 af4574ff-66df-0310-9fd7-8a98e5e911e0

  • Property mode set to 100644
File size: 10.4 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7<!-- for when .0 is not part of the new tarball name, but always referenced -->
8 <!ENTITY nss-url "ftp.mozilla.org/pub/mozilla.org/security/nss/releases">
9
10<!-- micro versions
11 <!ENTITY nss-download-http "https://&nss-url;/NSS_3_&nss-minor-version;_&nss-micro-version;_RTM/src/nss-&nss-version;.tar.gz">
12-->
13
14<!-- <!ENTITY nss-download-ftp "ftp://&nss-url;/NSS_3_&nss-minor-version;_&nss-micro-version;_RTM/src/nss-&nss-version;.tar.gz">-->
15 <!ENTITY nss-download-ftp " ">
16
17 <!-- no micro versions -->
18 <!ENTITY nss-download-http "https://&nss-url;/NSS_3_&nss-minor-version;_RTM/src/nss-&nss-version;.tar.gz">
19<!-- <!ENTITY nss-download-ftp "ftp://&nss-url;/NSS_3_&nss-minor-version;_RTM/src/nss-&nss-version;.tar.gz">
20 -->
21
22 <!ENTITY nss-md5sum "253d1ae4cf5a560373bbadb4bf483945">
23 <!ENTITY nss-size "7.1 MB">
24 <!ENTITY nss-buildsize "109 MB">
25 <!ENTITY nss-time "1.3 SBU">
26]>
27
28<sect1 id="nss" xreflabel="NSS-&nss-version;">
29 <?dbhtml filename="nss.html"?>
30
31 <sect1info>
32 <othername>$LastChangedBy$</othername>
33 <date>$Date$</date>
34 </sect1info>
35
36 <title>NSS-&nss-version;</title>
37
38 <indexterm zone="nss">
39 <primary sortas="a-NSS">NSS</primary>
40 </indexterm>
41
42 <sect2 role="package">
43 <title>Introduction to NSS</title>
44
45 <para>
46 The Network Security Services (<application>NSS</application>) package is
47 a set of libraries designed to support cross-platform development of
48 security-enabled client and server applications. Applications built with
49 NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12,
50 S/MIME, X.509 v3 certificates, and other security standards. This is
51 useful for implementing SSL and S/MIME or other Internet security
52 standards into an application.
53 </para>
54
55 &lfs7a_checked;
56
57 <bridgehead renderas="sect3">Package Information</bridgehead>
58 <itemizedlist spacing="compact">
59 <listitem>
60 <para>
61 Download (HTTP): <ulink url="&nss-download-http;"/>
62 </para>
63 </listitem>
64 <listitem>
65 <para>
66 Download (FTP): <ulink url="&nss-download-ftp;"/>
67 </para>
68 </listitem>
69 <listitem>
70 <para>
71 Download MD5 sum: &nss-md5sum;
72 </para>
73 </listitem>
74 <listitem>
75 <para>
76 Download size: &nss-size;
77 </para>
78 </listitem>
79 <listitem>
80 <para>
81 Estimated disk space required: &nss-buildsize;
82 </para>
83 </listitem>
84 <listitem>
85 <para>
86 Estimated build time: &nss-time;
87 </para>
88 </listitem>
89 </itemizedlist>
90
91 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
92 <itemizedlist spacing="compact">
93 <listitem>
94 <para>
95 Required patch:
96 <ulink url="&patch-root;/nss-&nss-version;-standalone-1.patch"/>
97 </para>
98 </listitem>
99 </itemizedlist>
100
101 <bridgehead renderas="sect3">NSS Dependencies</bridgehead>
102
103 <bridgehead renderas="sect4">Required</bridgehead>
104 <para role="required">
105 <xref linkend="nspr"/>
106 </para>
107
108 <bridgehead renderas="sect4">Recommended</bridgehead>
109 <para role="recommended">
110 <xref linkend="sqlite"/> and <xref linkend="p11-kit"/> (runtime)
111 </para>
112
113 <para condition="html" role="usernotes">
114 User Notes: <ulink url="&blfs-wiki;/nss"/>
115 </para>
116 </sect2>
117
118 <sect2 role="installation">
119 <title>Installation of NSS</title>
120
121 <note>
122 <para>
123 This package does not support parallel build.
124 </para>
125 </note>
126
127 <para>
128 Install <application>NSS</application> by running the following commands:
129 </para>
130
131<screen><userinput>patch -Np1 -i ../nss-&nss-version;-standalone-1.patch &amp;&amp;
132
133cd nss &amp;&amp;
134
135make -j1 BUILD_OPT=1 \
136 NSPR_INCLUDE_DIR=/usr/include/nspr \
137 USE_SYSTEM_ZLIB=1 \
138 ZLIB_LIBS=-lz \
139 $([ $(uname -m) = x86_64 ] &amp;&amp; echo USE_64=1) \
140 $([ -f /usr/include/sqlite3.h ] &amp;&amp; echo NSS_USE_SYSTEM_SQLITE=1)</userinput></screen>
141
142 <para>
143 This package does not come with a test suite.
144 </para>
145
146 <para>
147 Now, as the <systemitem class="username">root</systemitem> user:
148 </para>
149
150<screen role="root"><userinput>cd ../dist &amp;&amp;
151
152install -v -m755 Linux*/lib/*.so /usr/lib &amp;&amp;
153install -v -m644 Linux*/lib/{*.chk,libcrmf.a} /usr/lib &amp;&amp;
154
155install -v -m755 -d /usr/include/nss &amp;&amp;
156cp -v -RL {public,private}/nss/* /usr/include/nss &amp;&amp;
157chmod -v 644 /usr/include/nss/* &amp;&amp;
158
159install -v -m755 Linux*/bin/{certutil,nss-config,pk12util} /usr/bin &amp;&amp;
160
161install -v -m644 Linux*/lib/pkgconfig/nss.pc /usr/lib/pkgconfig</userinput></screen>
162
163 </sect2>
164
165 <sect2 role="commands">
166 <title>Command Explanations</title>
167
168 <para>
169 <parameter>BUILD_OPT=1</parameter>: This option is passed to
170 <command>make</command> so that the build is performed with no debugging
171 symbols built into the binaries and the default compiler optimizations are
172 used.
173 </para>
174
175 <para>
176 <parameter>NSPR_INCLUDE_DIR=/usr/include/nspr</parameter>: This option
177 sets the location of the nspr headers.
178 </para>
179
180 <para>
181 <parameter>USE_SYSTEM_ZLIB=1</parameter>: This option is passed to
182 <command>make</command> to ensure that the
183 <filename class="libraryfile">libssl3.so</filename> library is linked to
184 the system installed <application>zlib</application> instead of the
185 in-tree version.
186 </para>
187
188 <para>
189 <parameter>ZLIB_LIBS=-lz</parameter>: This option provides the
190 linker flags needed to link to the system <application>zlib</application>.
191 </para>
192
193 <para>
194 <command>$([ $(uname -m) = x86_64 ] &amp;&amp; echo USE_64=1)</command>:
195 The <parameter>USE_64=1</parameter> option is <emphasis>required on
196 x86_64</emphasis>, otherwise <command>make</command> will try (and fail)
197 to create 32-bit objects. The [ $(uname -m) = x86_64 ] test ensures it
198 has no effect on a 32 bit system.
199 </para>
200
201 <para>
202 <command>([ -f /usr/include/sqlite3.h ] &amp;&amp; echo
203 NSS_USE_SYSTEM_SQLITE=1)</command>: This tests if
204 <application>sqlite</application> is installed and if so it
205 <command>echo</command>s the option NSS_USE_SYSTEM_SQLITE=1 to
206 <command>make</command> so that
207 <filename class="libraryfile">libsoftokn3.so</filename> will link against
208 the system version of sqlite.
209 </para>
210
211 </sect2>
212
213 <sect2 role="configuration">
214 <title>Configuring NSS</title>
215
216 <para>If <xref linkend="p11-kit"/> is installed,
217 <filename>/usr/lib/libp11-kit.so</filename> can be used as a drop-in
218 replacement for <filename>/usr/lib/libnssckbi.so</filename> to
219 transparently make the system CAs available to
220 <application>NSS</application> aware applications, rather than the static
221 list provided by <filename>/usr/lib/libnssckbi.so</filename>. As the
222 <systemitem class="username">root</systemitem> user, execute the following
223 commands:</para>
224
225<screen role="root"><userinput>readlink /usr/lib/libnssckbi.so || \
226mv -v /usr/lib/libnssckbi.so /usr/lib/libnssckbi.so.orig &amp;&amp;
227ln -sfv libp11-kit.so /usr/lib/libnssckbi.so</userinput></screen>
228
229 <para>Additionally, for dependent applicaions that do not use the internal
230 database (<filename>/usr/lib/libnssckbi.so</filename>), the
231 <filename>make-ca.sh</filename> script, incldued on the
232 <xref linkend="cacerts"/> page, will generate a system wide NSS DB.</para>
233
234 </sect2>
235
236 <sect2 role="content">
237 <title>Contents</title>
238
239 <segmentedlist>
240 <segtitle>Installed Programs</segtitle>
241 <segtitle>Installed Libraries</segtitle>
242 <segtitle>Installed Directories</segtitle>
243
244 <seglistitem>
245 <seg>
246 certutil, nss-config, and pk12util
247 </seg>
248 <seg>
249 libcrmf.a, libfreebl3.so, libfreeblpriv3.so, libgtest1.so, libnss3.so,
250 libnssckbi.so, libnssdbm3.so, libnsssysinit.so,
251 libnssutil3.so, libsmime3.so, libsoftokn3.so, and libssl3.so
252 </seg>
253 <seg>
254 /usr/include/nss
255 </seg>
256 </seglistitem>
257 </segmentedlist>
258
259 <variablelist>
260 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
261 <?dbfo list-presentation="list"?>
262 <?dbhtml list-presentation="table"?>
263
264 <varlistentry id="certutil">
265 <term><command>certutil</command></term>
266 <listitem>
267 <para>
268 is the Mozilla Certificate Database Tool. It is a command-line
269 utility that can create and modify the Netscape Communicator
270 cert8.db and key3.db database files. It can also list, generate,
271 modify, or delete certificates within the cert8.db file and create
272 or change the password, generate new public and private key pairs,
273 display the contents of the key database, or delete key pairs within
274 the key3.db file.
275 </para>
276 <indexterm zone="nss certutil">
277 <primary sortas="b-certutil">certutil</primary>
278 </indexterm>
279 </listitem>
280 </varlistentry>
281
282 <varlistentry id="nss-config">
283 <term><command>nss-config</command></term>
284 <listitem>
285 <para>
286 is used to determine the NSS library settings of the installed NSS
287 libraries.
288 </para>
289 <indexterm zone="nss nss-config">
290 <primary sortas="b-nss-config">nss-config</primary>
291 </indexterm>
292 </listitem>
293 </varlistentry>
294
295 <varlistentry id="pk12util">
296 <term><command>pk12util</command></term>
297 <listitem>
298 <para>
299 is a tool for importing certificates and keys from pkcs #12 files
300 into NSS or exporting them. It can also list certificates and keys
301 in such files.
302 </para>
303 <indexterm zone="nss pk12util">
304 <primary sortas="b-pk12util">pk12util</primary>
305 </indexterm>
306 </listitem>
307 </varlistentry>
308
309 </variablelist>
310
311 </sect2>
312
313</sect1>
Note: See TracBrowser for help on using the repository browser.