Changeset 21114f6

Timestamp:

03/20/2023 11:05:26 AM (7 months ago)

Author:

Xi Ruoyao <xry111@…>

Branches:

12.0, kea, lazarus, lxqt, qt5new, trunk, xry111/xf86-video-removal

Children:

4e992e5

Parents:

ad7f3b7

Message:

make-ca: Mark p11-kit again as runtime, and ...

add a note about running make-ca itself in the installation section.

File:

• postlfs/security/make-ca.xml (modified) (2 diffs)

postlfs/security/make-ca.xml

@@ -84 +84 @@
     <bridgehead renderas="sect4">Required</bridgehead>
     <para role="required">
-      <xref linkend="p11-kit"/> (built after
+      <!-- Attention: no role="runtime" here because jhalfs don't assume
+           runtime dependencies are needed to run commands.  -->
+      <xref linkend="p11-kit"/> (runtime, built after
       <xref role="nodep" linkend="libtasn1"/>, required in the following
       instructions to generate certificate stores from trust anchors, and
@@ -127 +129 @@
 <screen role="root"><userinput>make install &amp;&amp;
 install -vdm755 /etc/ssl/local</userinput></screen>
+
+   <note>
+     <para>
+       Technically, this package is already installed at this point.
+       But most packages listing <application>make-ca</application> as
+       a dependency actually requires the system certificate store set up
+       by this package, instead of requiring the <command>make-ca</command>
+       program itself.  So the instructions for using
+       <command>make-ca</command> for setting up the system certificate
+       store is included in this section.  You should make sure the required
+       runtime dependency for <application>make-ca</application> is
+       satisified now, and continue to follow the instructions.
+     </para>
+   </note>
 
    <para>