source: postlfs/security/nss.xml@ a5c1131

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts lazarus lxqt perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since a5c1131 was a5c1131, checked in by Pierre Labastie <pieere@…>, 7 years ago

Typos

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@18494 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 10.1 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7<!-- for when .0 is not part of the new tarball name, but always referenced -->
8 <!ENTITY nss-url "ftp.mozilla.org/pub/mozilla.org/security/nss/releases">
9
10<!-- micro versions -->
11 <!ENTITY nss-download-http "https://&nss-url;/NSS_3_&nss-minor-version;_&nss-micro-version;_RTM/src/nss-&nss-version;.tar.gz">
12
13 <!-- no micro versions -->
14<!-- <!ENTITY nss-download-http "https://&nss-url;/NSS_3_&nss-minor-version;_RTM/src/nss-&nss-version;.tar.gz">-->
15
16 <!ENTITY nss-download-ftp " ">
17
18 <!ENTITY nss-md5sum "38647a856731ab1920dc530abb056cab">
19 <!ENTITY nss-size "7.1 MB">
20 <!ENTITY nss-buildsize "109 MB">
21 <!ENTITY nss-time "1.5 SBU">
22]>
23
24<sect1 id="nss" xreflabel="NSS-&nss-version;">
25 <?dbhtml filename="nss.html"?>
26
27 <sect1info>
28 <othername>$LastChangedBy$</othername>
29 <date>$Date$</date>
30 </sect1info>
31
32 <title>NSS-&nss-version;</title>
33
34 <indexterm zone="nss">
35 <primary sortas="a-NSS">NSS</primary>
36 </indexterm>
37
38 <sect2 role="package">
39 <title>Introduction to NSS</title>
40
41 <para>
42 The Network Security Services (<application>NSS</application>) package is
43 a set of libraries designed to support cross-platform development of
44 security-enabled client and server applications. Applications built with
45 NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12,
46 S/MIME, X.509 v3 certificates, and other security standards. This is
47 useful for implementing SSL and S/MIME or other Internet security
48 standards into an application.
49 </para>
50
51 &lfs80_checked;
52
53 <bridgehead renderas="sect3">Package Information</bridgehead>
54 <itemizedlist spacing="compact">
55 <listitem>
56 <para>
57 Download (HTTP): <ulink url="&nss-download-http;"/>
58 </para>
59 </listitem>
60 <listitem>
61 <para>
62 Download (FTP): <ulink url="&nss-download-ftp;"/>
63 </para>
64 </listitem>
65 <listitem>
66 <para>
67 Download MD5 sum: &nss-md5sum;
68 </para>
69 </listitem>
70 <listitem>
71 <para>
72 Download size: &nss-size;
73 </para>
74 </listitem>
75 <listitem>
76 <para>
77 Estimated disk space required: &nss-buildsize;
78 </para>
79 </listitem>
80 <listitem>
81 <para>
82 Estimated build time: &nss-time;
83 </para>
84 </listitem>
85 </itemizedlist>
86
87 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
88 <itemizedlist spacing="compact">
89 <listitem>
90 <para>
91 Required patch:
92 <ulink url="&patch-root;/nss-&nss-version;-standalone-1.patch"/>
93 </para>
94 </listitem>
95 </itemizedlist>
96
97 <bridgehead renderas="sect3">NSS Dependencies</bridgehead>
98
99 <bridgehead renderas="sect4">Required</bridgehead>
100 <para role="required">
101 <xref linkend="nspr"/>
102 </para>
103
104 <bridgehead renderas="sect4">Recommended</bridgehead>
105 <para role="recommended">
106 <xref linkend="sqlite"/> and <xref linkend="p11-kit"/> (runtime)
107 </para>
108
109 <para condition="html" role="usernotes">
110 User Notes: <ulink url="&blfs-wiki;/nss"/>
111 </para>
112 </sect2>
113
114 <sect2 role="installation">
115 <title>Installation of NSS</title>
116
117 <note>
118 <para>
119 This package does not support parallel build.
120 </para>
121 </note>
122
123 <para>
124 Install <application>NSS</application> by running the following commands:
125 </para>
126
127<screen><userinput>patch -Np1 -i ../nss-&nss-version;-standalone-1.patch &amp;&amp;
128
129cd nss &amp;&amp;
130
131make -j1 BUILD_OPT=1 \
132 NSPR_INCLUDE_DIR=/usr/include/nspr \
133 USE_SYSTEM_ZLIB=1 \
134 ZLIB_LIBS=-lz \
135 $([ $(uname -m) = x86_64 ] &amp;&amp; echo USE_64=1) \
136 $([ -f /usr/include/sqlite3.h ] &amp;&amp; echo NSS_USE_SYSTEM_SQLITE=1)</userinput></screen>
137
138 <para>
139 This package does not come with a test suite.
140 </para>
141
142 <para>
143 Now, as the <systemitem class="username">root</systemitem> user:
144 </para>
145
146<screen role="root"><userinput>cd ../dist &amp;&amp;
147
148install -v -m755 Linux*/lib/*.so /usr/lib &amp;&amp;
149install -v -m644 Linux*/lib/{*.chk,libcrmf.a} /usr/lib &amp;&amp;
150
151install -v -m755 -d /usr/include/nss &amp;&amp;
152cp -v -RL {public,private}/nss/* /usr/include/nss &amp;&amp;
153chmod -v 644 /usr/include/nss/* &amp;&amp;
154
155install -v -m755 Linux*/bin/{certutil,nss-config,pk12util} /usr/bin &amp;&amp;
156
157install -v -m644 Linux*/lib/pkgconfig/nss.pc /usr/lib/pkgconfig</userinput></screen>
158
159 </sect2>
160
161 <sect2 role="commands">
162 <title>Command Explanations</title>
163
164 <para>
165 <parameter>BUILD_OPT=1</parameter>: This option is passed to
166 <command>make</command> so that the build is performed with no debugging
167 symbols built into the binaries and the default compiler optimizations are
168 used.
169 </para>
170
171 <para>
172 <parameter>NSPR_INCLUDE_DIR=/usr/include/nspr</parameter>: This option
173 sets the location of the nspr headers.
174 </para>
175
176 <para>
177 <parameter>USE_SYSTEM_ZLIB=1</parameter>: This option is passed to
178 <command>make</command> to ensure that the
179 <filename class="libraryfile">libssl3.so</filename> library is linked to
180 the system installed <application>zlib</application> instead of the
181 in-tree version.
182 </para>
183
184 <para>
185 <parameter>ZLIB_LIBS=-lz</parameter>: This option provides the
186 linker flags needed to link to the system <application>zlib</application>.
187 </para>
188
189 <para>
190 <command>$([ $(uname -m) = x86_64 ] &amp;&amp; echo USE_64=1)</command>:
191 The <parameter>USE_64=1</parameter> option is <emphasis>required on
192 x86_64</emphasis>, otherwise <command>make</command> will try (and fail)
193 to create 32-bit objects. The [ $(uname -m) = x86_64 ] test ensures it
194 has no effect on a 32 bit system.
195 </para>
196
197 <para>
198 <command>([ -f /usr/include/sqlite3.h ] &amp;&amp; echo
199 NSS_USE_SYSTEM_SQLITE=1)</command>: This tests if
200 <application>sqlite</application> is installed and if so it
201 <command>echo</command>s the option NSS_USE_SYSTEM_SQLITE=1 to
202 <command>make</command> so that
203 <filename class="libraryfile">libsoftokn3.so</filename> will link against
204 the system version of sqlite.
205 </para>
206
207 </sect2>
208
209 <sect2 role="configuration">
210 <title>Configuring NSS</title>
211
212 <para>If <xref linkend="p11-kit"/> is installed,
213 <filename>/usr/lib/libp11-kit.so</filename> can be used as a drop-in
214 replacement for <filename>/usr/lib/libnssckbi.so</filename> to
215 transparently make the system CAs available to
216 <application>NSS</application> aware applications, rather than the static
217 list provided by <filename>/usr/lib/libnssckbi.so</filename>. As the
218 <systemitem class="username">root</systemitem> user, execute the following
219 commands:</para>
220
221<screen role="root"><userinput>readlink /usr/lib/libnssckbi.so || \
222mv -v /usr/lib/libnssckbi.so /usr/lib/libnssckbi.so.orig &amp;&amp;
223ln -sfv libp11-kit.so /usr/lib/libnssckbi.so</userinput></screen>
224
225 <para>Additionally, for dependent applications that do not use the internal
226 database (<filename>/usr/lib/libnssckbi.so</filename>), the
227 <filename>make-ca.sh</filename> script, included on the
228 <xref linkend="cacerts"/> page, will generate a system wide NSS DB.</para>
229
230 </sect2>
231
232 <sect2 role="content">
233 <title>Contents</title>
234
235 <segmentedlist>
236 <segtitle>Installed Programs</segtitle>
237 <segtitle>Installed Libraries</segtitle>
238 <segtitle>Installed Directories</segtitle>
239
240 <seglistitem>
241 <seg>
242 certutil, nss-config, and pk12util
243 </seg>
244 <seg>
245 libcrmf.a, libfreebl3.so, libfreeblpriv3.so, libgtest1.so, libnss3.so,
246 libnssckbi.so, libnssdbm3.so, libnsssysinit.so,
247 libnssutil3.so, libsmime3.so, libsoftokn3.so, and libssl3.so
248 </seg>
249 <seg>
250 /usr/include/nss
251 </seg>
252 </seglistitem>
253 </segmentedlist>
254
255 <variablelist>
256 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
257 <?dbfo list-presentation="list"?>
258 <?dbhtml list-presentation="table"?>
259
260 <varlistentry id="certutil">
261 <term><command>certutil</command></term>
262 <listitem>
263 <para>
264 is the Mozilla Certificate Database Tool. It is a command-line
265 utility that can create and modify the Netscape Communicator
266 cert8.db and key3.db database files. It can also list, generate,
267 modify, or delete certificates within the cert8.db file and create
268 or change the password, generate new public and private key pairs,
269 display the contents of the key database, or delete key pairs within
270 the key3.db file.
271 </para>
272 <indexterm zone="nss certutil">
273 <primary sortas="b-certutil">certutil</primary>
274 </indexterm>
275 </listitem>
276 </varlistentry>
277
278 <varlistentry id="nss-config">
279 <term><command>nss-config</command></term>
280 <listitem>
281 <para>
282 is used to determine the NSS library settings of the installed NSS
283 libraries.
284 </para>
285 <indexterm zone="nss nss-config">
286 <primary sortas="b-nss-config">nss-config</primary>
287 </indexterm>
288 </listitem>
289 </varlistentry>
290
291 <varlistentry id="pk12util">
292 <term><command>pk12util</command></term>
293 <listitem>
294 <para>
295 is a tool for importing certificates and keys from pkcs #12 files
296 into NSS or exporting them. It can also list certificates and keys
297 in such files.
298 </para>
299 <indexterm zone="nss pk12util">
300 <primary sortas="b-pk12util">pk12util</primary>
301 </indexterm>
302 </listitem>
303 </varlistentry>
304
305 </variablelist>
306
307 </sect2>
308
309</sect1>
Note: See TracBrowser for help on using the repository browser.