Changeset 5c69a2d

Timestamp:

02/24/2019 09:00:49 PM (5 years ago)

Author:

DJ Lucas <dj@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 8.4, 9.0, 9.1, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

cc2e1ac6

Parents:

106440d

Message:

Make libnssckbi.so link unconditionally in p11-kit and NSS instructions.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@21241 af4574ff-66df-0310-9fd7-8a98e5e911e0

Files:

• introduction/welcome/changelog.xml (modified) (1 diff)
• postlfs/security/nss.xml (modified) (1 diff)
• postlfs/security/p11-kit.xml (modified) (1 diff)

introduction/welcome/changelog.xml

@@ -45 +45 @@
       <para>February 24th, 2019</para>
       <itemizedlist>
+        <listitem>
+          <para>[dj] - Make libnssckbi.so link unconditionally in p11-kit and
+          NSS instructions.</para>
+        </listitem>
         <listitem>
           <para>[dj] - Moved example configuration for make-ca to the

postlfs/security/nss.xml

@@ -224 +224 @@
     commands:</para>
 
-<screen role="root"><userinput>if [ -e /usr/lib/libp11-kit.so ]; then
-  readlink /usr/lib/libnssckbi.so ||
-  rm -v /usr/lib/libnssckbi.so    &amp;&amp;
-  ln -sfv ./pkcs11/p11-kit-trust.so /usr/lib/libnssckbi.so
-fi</userinput></screen>
+<screen role="root"><userinput>ln -sfv ./pkcs11/p11-kit-trust.so /usr/lib/libnssckbi.so</userinput></screen>
 
     <para>Additionally, for dependent applications that do not use the internal
     database (<filename>/usr/lib/libnssckbi.so</filename>), the
     <filename>/usr/sbin/make-ca</filename> script, included on the
-    <xref linkend="make-ca"/> page, will generate a system wide NSS DB.</para>
+    <xref linkend="make-ca"/> page can generate a system wide NSS DB with the
+    <parameter>-n</parameter> switch, or by modifying the
+    <filename>/etc/make-ca.conf</filename> file.</para>
 
   </sect2>

postlfs/security/p11-kit.xml

@@ -163 +163 @@
     commands:</para>
 
-<screen role="root"><userinput>if [ -e /usr/lib/libnssckbi.so ]; then
-  readlink /usr/lib/libnssckbi.so ||
-  rm -fv /usr/lib/libnssckbi.so    &amp;&amp;
-  ln -sfv ./pkcs11/p11-kit-trust.so /usr/lib/libnssckbi.so
-fi</userinput></screen>
+<screen role="root"><userinput>ln -sfv ./pkcs11/p11-kit-trust.so /usr/lib/libnssckbi.so</userinput></screen>
 
   </sect2>