Changeset 8f6f10e for postlfs/security/p11-kit.xml

Timestamp:

01/02/2019 07:00:52 AM (6 years ago)

Author:

DJ Lucas <dj@…>

Branches:

elogind

Children:

d60cd837

Parents:

4199730

Message:

Merge to HEAD 20905.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/branches/BOOK-elogind@20907 af4574ff-66df-0310-9fd7-8a98e5e911e0

File:

• postlfs/security/p11-kit.xml (modified) (3 diffs)

postlfs/security/p11-kit.xml

@@ -98 +98 @@
 <screen><userinput>sed '20,$ d' -i trust/trust-extract-compat.in &amp;&amp;
 cat &gt;&gt; trust/trust-extract-compat.in &lt;&lt; "EOF"
-echo "Please create an OpenSSL Trusted Certificate with appropriate"
-echo "trust arguments in /etc/ssl/local/ and run '/usr/sbin/make-ca -f'"
-echo "as the root user."
-exit 1
+<literal># Copy existing anchor modifications to /etc/ssl/local
+/usr/libexec/make-ca/copy-trust-modifications
+
+# Generate a new trust store
+/usr/sbin/make-ca -f -g</literal>
 EOF</userinput></screen>
 
@@ -123 +124 @@
     </para>
 
-<screen role="root"><userinput>make install</userinput></screen>
+<screen role="root"><userinput>make install &amp;&amp;
+ln -s /usr/libexec/p11-kit/trust-extract-compat \
+      /usr/bin/update-ca-certificates</userinput></screen>
 
   </sect2>
@@ -225 +228 @@
       </varlistentry>
 
+      <varlistentry id="update-ca-certificates">
+        <term><command>update-ca-certificates</command></term>
+        <listitem>
+          <para>
+            is a command line tool to both extract local certificates from an
+            upadated anchor store, and regenerate all anchors and certificate
+            stores on the system.
+          </para>
+          <indexterm zone="p11-kit update-ca-certificates">
+            <primary sortas="b-trust">update-ca-certificates</primary>
+          </indexterm>
+        </listitem>
+      </varlistentry>
 
       <varlistentry id="libp11-kit">