Changeset 0d0f150

Timestamp:

11/02/2018 07:23:26 PM (5 years ago)

Author:

Ken Moffat <ken@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 8.4, 9.0, 9.1, bdubbs/svn, elogind, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

be9b178

Parents:

62182cc

Message:

Trunk: use system certificates with perl modules.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@20669 af4574ff-66df-0310-9fd7-8a98e5e911e0

Files:

• general.ent (modified) (2 diffs)
• general/prog/perl-modules.xml (modified) (3 diffs)
• introduction/welcome/changelog.xml (modified) (1 diff)
• networking/netprogs/ntp.xml (modified) (1 diff)
• postlfs/security/make-ca.xml (modified) (1 diff)

general.ent

@@ -1 +1 @@
 <!-- $LastChangedBy$ $Date$ -->
 
-<!ENTITY day          "01">                   <!-- Always 2 digits -->
+<!ENTITY day          "02">                   <!-- Always 2 digits -->
 <!ENTITY month        "11">                   <!-- Always 2 digits -->
 <!ENTITY year         "2018">
@@ -7 +7 @@
 <!ENTITY copyholder   "The BLFS Development Team">
 <!ENTITY version      "&year;-&month;-&day;">
-<!ENTITY releasedate  "November 1st, &year;">
+<!ENTITY releasedate  "November 2nd, &year;">
 <!ENTITY pubdate      "&year;-&month;-&day;"> <!-- metadata req. by TLDP -->
 <!ENTITY blfs-version "svn">                  <!-- svn|[release #] -->

general/prog/perl-modules.xml

@@ -1592 +1592 @@
     <para>LWP::Protocol::https provides https support for
     LWP::UserAgent (i.e. for LWP). This module uses the
-    standard <xref linkend="perl-standard-install"/>.</para>
+    standard <xref linkend="perl-standard-install"/> but requires
+    a patch to use the system certificates (using the CPAN automated
+    install will instead use <application>Mozilla::CA</application>).
+    </para>
+
+      <bridgehead renderas="sect4">Additional Download</bridgehead>
+      <itemizedlist spacing="compact">
+        <listitem>
+          <para>
+            Required patch:
+            <ulink url="&patch-root;/LWP-Protocol-https-&LWP-Protocol-https-version;-system_certs-1.patch"/>
+          </para>
+        </listitem>
+      </itemizedlist>
 
     <!-- LWP-Protocol-https -->
@@ -1610 +1623 @@
             <para><xref linkend="perl-lwp"/></para>
           </listitem>
-
           <listitem>
             <para><xref linkend="perl-io-socket-ssl"/></para>
           </listitem>
-
-          <listitem><literallayout><ulink url="https://cpan.metacpan.org/authors/id/A/AB/ABH/Mozilla-CA-20180117.tar.gz">Mozilla::CA</ulink>
+          <listitem>
+            <para><xref linkend="make-ca"/> with the
+              <literal>/etc/pki/tls/certs/ca-bundle.crt</literal> symlink
+            </para>
+          </listitem>
+
+<!--      <listitem><literallayout><ulink url="https://cpan.metacpan.org/authors/id/A/AB/ABH/Mozilla-CA-20180117.tar.gz">Mozilla::CA</ulink>
 (https://cpan.metacpan.org/authors/id/A/AB/ABH/Mozilla-CA-20180117.tar.gz)</literallayout>
-           </listitem>
+           </listitem>-->
 
         </itemizedlist>
@@ -2727 +2744 @@
     <para>Install <application>Perl</application> modules by running the
     following commands:</para>
-<!--
-    <para>For <xref linkend="perl-data-uniqid"/>, first apply the required
+
+    <para>For <xref linkend="perl-lwp-protocol-https"/>, first apply the required
     patch with:</para>
 
-<screen><userinput>patch -Np1 -i ../Data-Uniqid-&Data-Uniqid-version;-disable_failing_test-1.patch</userinput></screen>
+<screen><userinput>patch -Np1 -i ../LWP-Protocol-https-&LWP-Protocol-https-version;-system_certs-1.patch</userinput></screen>
 
     <para>Then, or for all other modules using the standard installation, proceed
-    with:</para>-->
+    with:</para>
 
 <screen><userinput>perl Makefile.PL &amp;&amp;

introduction/welcome/changelog.xml

@@ -43 +43 @@
 -->
     <listitem>
+      <para>November 2nd, 2018</para>
+      <itemizedlist>
+        <listitem>
+          <para>[ken] - Add a symlink to make-ca so that Perl modules can
+          find the system certificates, and drop module Mozilla::CA. Fixes
+          <ulink url="&blfs-ticket-root;11307">#11307</ulink>.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
+    <listitem>
       <para>November 1st, 2018</para>
       <itemizedlist>

networking/netprogs/ntp.xml

@@ -63 +63 @@
     <bridgehead renderas="sect4">Required</bridgehead>
     <para role="required">
-      <xref linkend="perl-lwp-protocol-https"/>
-    </para>
-    
+      <xref linkend="perl-io-socket-ssl"/>
+    </para>
+
 <!-- Tested 4.2.8p11 with neither wget nor lynx on system: Not required.
     <bridgehead renderas="sect4">Recommended</bridgehead>

postlfs/security/make-ca.xml

@@ -144 +144 @@
     As the <systemitem class="username">root</systemitem> user:</para>
 
-<screen role="root"><userinput>make install</userinput></screen>
+<screen role="root"><userinput>make install                             &amp;&amp;
+mkdir -pv /etc/pki/tls/certs             &amp;&amp;
+ln -svf /etc/ssl/ca-bundle.crt \
+        /etc/pki/tls/certs/ca-bundle.crt</userinput></screen>
 
    <para>As the <systemitem class="username">root</systemitem> user, after