Changeset 540d060


Ignore:
Timestamp:
08/12/2014 01:18:44 AM (10 years ago)
Author:
Bruce Dubbs <bdubbs@…>
Branches:
10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 7.10, 7.6, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal
Children:
009eb04
Parents:
db22f6c
Message:

Clean up CA Certificate install instructions

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@13885 af4574ff-66df-0310-9fd7-8a98e5e911e0

Files:
2 edited

Legend:

Unmodified
Added
Removed

  • introduction/welcome/changelog.xml

    rdb22f6c r540d060  
    4949      <itemizedlist>
    5050        <listitem>
    51           <para>[igor] - Update to lvm2.2.02.109. Fixes
     51          <para>[bdubbs] - Clean up CA Certificate install instructions. Fixes
     52          <ulink url="&blfs-ticket-root;5350">#5350</ulink>.</para>
     53        </listitem>
     54        <listitem>
     55          <para>[bdubbs] - Update to lvm2.2.02.109. Fixes
    5256          <ulink url="&blfs-ticket-root;5333">#5333</ulink>.</para>
    5357        </listitem>

  • postlfs/security/cacerts.xml

    rdb22f6c r540d060  
    8282    class="username">root</systemitem> user:</para>
    8383
    84 <screen role="root"><userinput>cat > /bin/make-cert.pl &lt;&lt; "EOF"
     84<screen role="root"><userinput>cat > /usr/bin/make-cert.pl &lt;&lt; "EOF"
    8585<literal>#!/usr/bin/perl -w
    8686
    … …  
    134134EOF
    135135
    136 chmod +x /bin/make-cert.pl</userinput></screen>
     136chmod +x /usr/bin/make-cert.pl</userinput></screen>
    137137
    138138   <para>The following script creates the certificates and a bundle of all the
    … …  
    142142   user:</para>
    143143
    144 <screen role="root"><userinput>cat > /bin/make-ca.sh &lt;&lt; "EOF"
     144<screen role="root"><userinput>cat > /usr/bin/make-ca.sh &lt;&lt; "EOF"
    145145<literal>#!/bin/sh
    146146# Begin make-ca.sh
    … …  
    174174TRUSTATTRIBUTES="CKA_TRUST_SERVER_AUTH"
    175175BUNDLE="BLFS-ca-bundle-${VERSION}.crt"
    176 CONVERTSCRIPT="/bin/make-cert.pl"
     176CONVERTSCRIPT="/usr/bin/make-cert.pl"
    177177SSLDIR="/etc/ssl"
    178178
    … …  
    240240EOF
    241241
    242 chmod +x /bin/make-ca.sh</userinput></screen>
     242chmod +x /usr/bin/make-ca.sh</userinput></screen>
    243243
    244244   <para>Add a short script to remove expired certificates from a directory.
    … …  
    246246   class="username">root</systemitem> user:</para>
    247247
    248 <screen role="root"><userinput>cat > /bin/remove-expired-certs.sh &lt;&lt; "EOF"
     248<screen role="root"><userinput>cat > /usr/bin/remove-expired-certs.sh &lt;&lt; "EOF"
    249249<literal>#!/bin/sh
    250 # Begin /bin/remove-expired-certs.sh
     250# Begin /usr/bin/remove-expired-certs.sh
    251251#
    252252# Version 20120211
    … …  
    302302EOF
    303303
    304 chmod +x /bin/remove-expired-certs.sh</userinput></screen>
     304chmod +x /usr/bin/remove-expired-certs.sh</userinput></screen>
    305305
    306306   <para>The following commands will fetch the certificates and convert them to
    … …  
    310310   necessary to update the CA Certificates.</para>
    311311
    312    <screen><userinput>certhost='http://mxr.mozilla.org'                        &amp;&amp;
    313 certdir='/mozilla/source/security/nss/lib/ckfw/builtins' &amp;&amp;
    314 url="$certhost$certdir/certdata.txt?raw=1"               &amp;&amp;
    315 
    316 wget --output-document certdata.txt $url &amp;&amp;
    317 unset certhost certdir url               &amp;&amp;
    318 make-ca.sh                               &amp;&amp;
     312   <screen><userinput>URL=&sources-anduin-other-http;/certdata.txt &amp;&amp;
     313rm -f certdata.txt &amp;&amp;
     314wget $URL          &amp;&amp;
     315make-ca.sh         &amp;&amp;
    319316remove-expired-certs.sh certs</userinput></screen>
    320317
    321318   <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
    322319
    323 <screen role="root"><userinput>SSLDIR=/etc/ssl                                             &amp;&amp;
    324 install -d ${SSLDIR}/certs                                  &amp;&amp;
    325 cp -v certs/*.pem ${SSLDIR}/certs                           &amp;&amp;
    326 c_rehash                                                    &amp;&amp;
    327 install BLFS-ca-bundle*.crt ${SSLDIR}/ca-bundle.crt         &amp;&amp;
    328 ln -sv ../ca-bundle.crt ${SSLDIR}/certs/ca-certificates.crt &amp;&amp;
     320<screen role="root"><userinput>SSLDIR=/etc/ssl                                              &amp;&amp;
     321install -d ${SSLDIR}/certs                                   &amp;&amp;
     322cp -v certs/*.pem ${SSLDIR}/certs                            &amp;&amp;
     323c_rehash                                                     &amp;&amp;
     324install BLFS-ca-bundle*.crt ${SSLDIR}/ca-bundle.crt          &amp;&amp;
     325ln -sfv ../ca-bundle.crt ${SSLDIR}/certs/ca-certificates.crt &amp;&amp;
    329326unset SSLDIR</userinput></screen>
    330327
Note: See TracChangeset for help on using the changeset viewer.