Changeset 47274444 for postlfs/security/p11-kit.xml
- Timestamp:
- 03/24/2020 07:19:44 PM (4 years ago)
- Branches:
- 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal
- Children:
- fa3edfef
- Parents:
- 914049f6
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
postlfs/security/p11-kit.xml
r914049f6 r47274444 96 96 <title>Installation of p11-kit</title> 97 97 98 <para>Prepare the distribution specific anchor hook:</para> 98 <para> 99 Prepare the distribution specific anchor hook: 100 </para> 99 101 100 102 <screen><userinput>sed '20,$ d' -i trust/trust-extract-compat.in && … … 158 160 <title>Configuring p11-kit</title> 159 161 160 <para>The <application>p11-kit</application> trust module 161 (<filename>/usr/lib/pkcs11/p11-kit-trust.so</filename>) can be used as a 162 drop-in replacement for <filename>/usr/lib/libnssckbi.so</filename> to 163 transparently make the system CAs available to 164 <application>NSS</application> aware applications, rather than the static 165 list provided by <filename>/usr/lib/libnssckbi.so</filename>. As the 166 <systemitem class="username">root</systemitem> user, execute the following 167 commands:</para> 162 <para> 163 The <application>p11-kit</application> trust module 164 (<filename>/usr/lib/pkcs11/p11-kit-trust.so</filename>) can be used as a 165 drop-in replacement for <filename>/usr/lib/libnssckbi.so</filename> to 166 transparently make the system CAs available to 167 <application>NSS</application> aware applications, rather than the static 168 list provided by <filename>/usr/lib/libnssckbi.so</filename>. As the 169 <systemitem class="username">root</systemitem> user, execute the 170 following commands: 171 </para> 168 172 169 173 <screen role="root"><userinput>ln -sfv ./pkcs11/p11-kit-trust.so /usr/lib/libnssckbi.so</userinput></screen> … … 207 211 <para> 208 212 is a command line tool that can be used to perform operations 209 213 on PKCS#11 modules configured on the system. 210 214 </para> 211 215 <indexterm zone="p11-kit p11-kit-prog"> … … 234 238 is a command line tool to both extract local certificates from an 235 239 updated anchor store, and regenerate all anchors and certificate 236 240 stores on the system. This is done unconditionally on BLFS using 237 241 the <parameter>--force</parameter> and <parameter>--get</parameter> 238 242 flags to <command>make-ca</command> and should likely not be used
Note:
See TracChangeset
for help on using the changeset viewer.