Changeset 47274444 for postlfs/security/nss.xml
- Timestamp:
- 03/24/2020 07:19:44 PM (4 years ago)
- Branches:
- 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal
- Children:
- fa3edfef
- Parents:
- 914049f6
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
postlfs/security/nss.xml
r914049f6 r47274444 213 213 <title>Configuring NSS</title> 214 214 215 <para>If <xref linkend="p11-kit"/> is installed, the 216 <application>p11-kit</application> trust module 217 (<filename>/usr/lib/pkcs11/p11-kit-trust.so</filename>) can be used as a 218 drop-in replacement for <filename>/usr/lib/libnssckbi.so</filename> to 219 transparently make the system CAs available to 220 <application>NSS</application> aware applications, rather than the static 221 list provided by <filename>/usr/lib/libnssckbi.so</filename>. As the 222 <systemitem class="username">root</systemitem> user, execute the following 223 commands:</para> 215 <para> 216 If <xref linkend="p11-kit"/> is installed, the 217 <application>p11-kit</application> trust module 218 (<filename>/usr/lib/pkcs11/p11-kit-trust.so</filename>) can be used as a 219 drop-in replacement for <filename>/usr/lib/libnssckbi.so</filename> to 220 transparently make the system CAs available to 221 <application>NSS</application> aware applications, rather than the static 222 list provided by <filename>/usr/lib/libnssckbi.so</filename>. As the 223 <systemitem class="username">root</systemitem> user, execute the following 224 commands: 225 </para> 224 226 225 227 <screen role="root"><userinput>ln -sfv ./pkcs11/p11-kit-trust.so /usr/lib/libnssckbi.so</userinput></screen> 226 228 227 <para>Additionally, for dependent applications that do not use the internal 228 database (<filename>/usr/lib/libnssckbi.so</filename>), the 229 <filename>/usr/sbin/make-ca</filename> script, included on the 230 <xref linkend="make-ca"/> page can generate a system wide NSS DB with the 231 <parameter>-n</parameter> switch, or by modifying the 232 <filename>/etc/make-ca.conf</filename> file.</para> 229 <para> 230 Additionally, for dependent applications that do not use the internal 231 database (<filename>/usr/lib/libnssckbi.so</filename>), the 232 <filename>/usr/sbin/make-ca</filename> script, included on the 233 <xref linkend="make-ca"/> page can generate a system wide NSS DB with the 234 <parameter>-n</parameter> switch, or by modifying the 235 <filename>/etc/make-ca.conf</filename> file. 236 </para> 233 237 234 238 </sect2>
Note:
See TracChangeset
for help on using the changeset viewer.