Changeset 1ac799b for postlfs/security/p11-kit.xml

Timestamp:

07/04/2017 11:28:56 PM (7 years ago)

Author:

DJ Lucas <dj@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

6bb33c2

Parents:

542d478

Message:

Use PKCS #11 modules where possible with gnutls.
Update to GnuTLS-3.5.14. Fixes #9444.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@18915 af4574ff-66df-0310-9fd7-8a98e5e911e0

File:

• postlfs/security/p11-kit.xml (modified) (2 diffs)

postlfs/security/p11-kit.xml

@@ -143 +143 @@
     <title>Configuring p11-kit</title>
 
-    <para>If <xref linkend="nss"/> is installed,
-    <filename>/usr/lib/libp11-kit.so</filename> can be used as a drop-in
-    replacement for <filename>/usr/lib/libnssckbi.so</filename> to
+    <para>The <application>p11-kit</application> trust module
+    (<filename>/usr/lib/pkcs11/p11-kit-trust.so</filename>) can be used as a
+    drop-in replacement for <filename>/usr/lib/libnssckbi.so</filename> to
     transparently make the system CAs available to
     <application>NSS</application> aware applications, rather than the static
@@ -155 +155 @@
   readlink /usr/lib/libnssckbi.so ||
   rm -v /usr/lib/libnssckbi.so    &amp;&amp;
-  ln -sfv libp11-kit.so /usr/lib/libnssckbi.so
+  ln -sfv ./pkcs11/p11-kit-trust.so /usr/lib/libnssckbi.so
 fi</userinput></screen>