Changeset 4a16903 for postlfs/security/p11-kit.xml

Timestamp:

11/18/2016 07:13:46 AM (7 years ago)

Author:

DJ Lucas <dj@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

539dd69d

Parents:

1c929a6d

Message:

Introduce complete PKI seutp for CA Certificates page. Fixes #8507.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@17975 af4574ff-66df-0310-9fd7-8a98e5e911e0

File:

• postlfs/security/p11-kit.xml (modified) (3 diffs)

postlfs/security/p11-kit.xml

@@ -100 +100 @@
     </para>
 
-<screen><userinput>./configure --prefix=/usr --sysconfdir=/etc &amp;&amp;
+<screen><userinput>./configure --prefix=/usr     \
+            --sysconfdir=/etc \
+            --with-trust-paths=/etc/pki/anchors &amp;&amp;
 make</userinput></screen>
 
@@ -117 +119 @@
   <sect2 role="commands">
     <title>Command Explanations</title>
+
+    <para>
+      <parameter>--with-trust-paths=/etc/pki/anchors</parameter>: this switch
+      sets the location of trusted certificates used by libp11-kit.so.
+    </para>
 
     <para>
@@ -129 +136 @@
       rebuild the documentation and generate manual pages.
     </para>
+
+  </sect2>
+
+  <sect2 role="configuration">
+    <title>Configuring p11-kit</title>
+
+    <para>If <xref linkend="nss"/> is installed,
+    <filename>/usr/lib/libp11-kit.so</filename> can be used as a drop-in
+    replacement for <filename>/usr/lib/libnssckbi.so</filename> to
+    transparently make the system CAs available to
+    <application>NSS</application> aware applications, rather than the static
+    list provided by <filename>/usr/lib/libnssckbi.so</filename>. As the
+    <systemitem class="username">root</systemitem> user, execute the following
+    commands:</para>
+
+<screen role="root"><userinput>readlink /usr/lib/libnssckbi.so || \
+mv -v /usr/lib/libnssckbi.so /usr/lib/libnssckbi.so.orig &amp;&amp;
+ln -sfv libp11-kit.so /usr/lib/libnssckbi.so</userinput></screen>
 
   </sect2>