Changeset c1cd435e


Ignore:
Timestamp:
09/06/2018 12:36:36 AM (6 years ago)
Author:
DJ Lucas <dj@…>
Branches:
10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal
Children:
11759d2
Parents:
4d7d99d
Message:

Update to make-ca-0.9. Fixes #11114.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@20462 af4574ff-66df-0310-9fd7-8a98e5e911e0

Files:
7 edited

Legend:

Unmodified
Added
Removed

  • general.ent

    r4d7d99d rc1cd435e  
    11<!-- $LastChangedBy$ $Date$ -->
    22
    3 <!ENTITY day          "05">                   <!-- Always 2 digits -->
     3<!ENTITY day          "06">                   <!-- Always 2 digits -->
    44<!ENTITY month        "09">                   <!-- Always 2 digits -->
    55<!ENTITY year         "2018">
    … …  
    77<!ENTITY copyholder   "The BLFS Development Team">
    88<!ENTITY version      "&year;-&month;-&day;">
    9 <!ENTITY releasedate  "September 5th, &year;">
     9<!ENTITY releasedate  "September 6th, &year;">
    1010<!ENTITY pubdate      "&year;-&month;-&day;"> <!-- metadata req. by TLDP -->
    1111<!ENTITY blfs-version "svn">                  <!-- svn|[release #] -->

  • general/prog/ojdk-conf.xml

    r4d7d99d rc1cd435e  
    8989      <envar>$JAVA_HOME</envar><filename>/lib/security/cacerts</filename> by
    9090      default. In order to keep all the certificates in one place, we use
    91       <filename>/etc/ssl/java/cacerts.jks</filename>. That file should be
     91      <filename>/etc/ssl/java/cacerts</filename>. That file should be
    9292      generated using the system PKI trust store. The instructions
    9393      on the <xref linkend="make-ca"/> page should be used to update the file
    … …  
    9898
    9999<screen role="root"><userinput>/usr/sbin/make-ca -g --force &amp;&amp;
    100 ln -sfv /etc/ssl/java/cacerts.jks /opt/jdk/lib/security/cacerts</userinput></screen>
     100ln -sfv /etc/ssl/java/cacerts /opt/jdk/lib/security/cacerts</userinput></screen>
    101101
    102102    <para>

  • general/prog/openjdk.xml

    r4d7d99d rc1cd435e  
    241241               --with-version-pre=""        \
    242242               --with-version-opt=""        \
    243                --with-cacerts-file=/etc/ssl/java/cacerts.jks &amp;&amp;
     243               --with-cacerts-file=/etc/ssl/java/cacerts &amp;&amp;
    244244make images</userinput></screen>
    245245
    … …  
    394394
    395395    <para>
    396       <parameter>--with-cacerts-file=/etc/ssl/java/cacerts.jks</parameter>:
     396      <parameter>--with-cacerts-file=/etc/ssl/java/cacerts</parameter>:
    397397      Specifies where to find a <filename>cacerts</filename> file,
    398398      <filename>/etc/ssl/java/</filename> on a BLFS system. Otherwise, an empty
    … …  
    444444
    445445      <para>
    446         If you have run the instructions for <xref linkend="ojdk-certs"/>,
    447         you only need to create a symlink in the default location for
    448         those certificates. As user <systemitem
     446        If you have run the instructions on the <xref linkend="make-ca"/> page,
     447        you only need to create a symlink in the default location for the
     448        <filename>cacerts</filename> file. As user <systemitem
    449449        class="username">root</systemitem>:
    450450      </para>
    451451
    452 <screen role="root"><userinput>ln -sfv /etc/ssl/java/cacerts.jks /opt/jdk/lib/security/cacerts</userinput></screen>
     452<screen role="root"><userinput>ln -sfv /etc/ssl/java/cacerts /opt/jdk/lib/security/cacerts</userinput></screen>
    453453
    454454      <para>
    455         To check the installatiion, as when <xref linkend="ojdk-certs"/>, issue:
     455        To check the installatiion, issue:
    456456      </para>
    457457

  • introduction/welcome/changelog.xml

    r4d7d99d rc1cd435e  
    4343-->
    4444    <listitem>
     45      <para>September 6th, 2018</para>
     46      <itemizedlist>
     47        <listitem>
     48          <para>[dj] - Update to make-ca-0.9. Fixes
     49          <ulink url="&blfs-ticket-root;11114">#11114</ulink>.</para>
     50        </listitem>
     51      </itemizedlist>
     52    </listitem>
     53
     54    <listitem>
    4555      <para>September 5th, 2018</para>
    4656      <itemizedlist>

  • packages.ent

    r4d7d99d rc1cd435e  
    2525<!ENTITY linux-pam-docs-version       "1.2.0">
    2626<!ENTITY libpwquality-version         "1.4.0">
    27 <!ENTITY make-ca-version              "0.8">
     27<!ENTITY make-ca-version              "0.9">
    2828<!ENTITY mitkrb-major-version         "1.16">
    2929<!ENTITY mitkrb-version               "1.16.1">

  • postlfs/security/make-ca.xml

    r4d7d99d rc1cd435e  
    88  <!ENTITY certpath              "/lib/ckfw/builtins/certdata.txt">
    99  <!ENTITY make-ca-buildsize     "6.6 MB (with all runtime deps)">
    10   <!ENTITY make-ca-time          "0.3 SBU (with all runtime deps)">
     10  <!ENTITY make-ca-time          "0.1 SBU (with all runtime deps)">
    1111
    1212  <!ENTITY make-ca-download      "https://github.com/djlucas/make-ca/archive/v&make-ca-version;/make-ca-&make-ca-version;.tar.gz">
    1313  <!ENTITY make-ca-size          "36 KB">
    14   <!ENTITY make-ca-md5sum        "1f0176c4fa89274971b2826a97f303f7">
     14  <!ENTITY make-ca-md5sum        "0eeaf712eedeae4fa55d8bfa37f4ca32">
    1515]>
    1616
    … …  
    7575
    7676    <bridgehead renderas="sect3">make-ca Dependencies</bridgehead>
    77 <!--
    78     <bridgehead renderas="sect4">Required</bridgehead>
    79     <para role="required"><xref linkend="openssl"/></para>
    80 -->
     77
     78    <bridgehead renderas="sect4">Recommended</bridgehead>
     79    <para role="recommended"><xref linkend="p11-kit"/> (required at runtime to
     80    generate certificate stores from trust anchors)</para>
     81
    8182   <bridgehead renderas="sect4">Optional (runtime)</bridgehead>
    8283    <para role="optional">
    8384      <xref role="runtime" linkend="java"/> or
    84       <xref role="runtime" linkend="openjdk"/>,
    85       <xref role="runtime" linkend="nss"/>, and
    86       <xref role="runtime" linkend="p11-kit"/>
     85      <xref role="runtime" linkend="openjdk"/> (to generate a java PKCS#12
     86      store), and <xref role="runtime" linkend="nss"/> (to generate a shared
     87      NSSDB)
    8788    </para>
    8889
    … …  
    9697    <para>The <application>make-ca</application> script will download and
    9798    process the certificates included in the <filename>certdata.txt</filename>
    98     file for use in multiple certificate stores (if the associated applications
    99     are present on the system). Additionally, any local certificates stored in
    100     <filename>/etc/ssl/local</filename> will be imported to the certificate
    101     stores. Certificates in this directory should be stored as PEM encoded
     99    file for use as trust anchors for the <xref linkend="p11-kit"/> trust
     100    module. Additionally, it will generate system certificate stores used by
     101    BLFS applications (if the recommended and optional applications are present
     102    on the system). Any local certificates stored in
     103    <filename>/etc/ssl/local</filename> will be imported to both the trust
     104    anchors and the generated certificate stores (overriding Mozilla's trust).
     105    Certificates in this directory should be stored as PEM encoded
    102106    <application>OpenSSL</application> trusted certificates.</para>
    103107
    … …  
    141145<screen role="root"><userinput>make install</userinput></screen>
    142146
    143    <para>As the <systemitem class="username">root</systemitem> user, download
    144    and update the certificate stores with the following command:</para>
     147   <para>As the <systemitem class="username">root</systemitem> user, after
     148   installing <xref linkend="p11-kit"/>, download the certificate source and
     149   prepare for system use with the following command:</para>
    145150
    146151    <note>
    147152      <para>If running the script a second time with the same version of
    148153      <filename>certdata.txt</filename>, for instance, to add additional stores
    149       as the requisite software is installed, add the <parameter>-f</parameter>
     154      as the requisite software is installed, add the <parameter>-r</parameter>
    150155      switch to the command line. If packaging, run <command>make-ca
    151156      --help</command> to see all available command line options.</para>
    … …  
    224229          <para>is a shell script that adapts a current version of
    225230          <filename>certdata.txt</filename>, and prepares it for use
    226           as the system certificate store.</para>
     231          as the system trust store.</para>
    227232          <indexterm zone="make-ca make-ca">
    228233            <primary sortas="b-make-ca">make-ca</primary>

  • postlfs/security/p11-kit.xml

    r4d7d99d rc1cd435e  
    7575    <bridgehead renderas="sect4">Recommended</bridgehead>
    7676    <para role="recommended">
    77       <xref linkend="make-ca"/> and
    7877      <xref linkend="libtasn1"/>
    7978    </para>
    … …  
    8180    <bridgehead renderas="sect4">Optional</bridgehead>
    8281    <para role="optional">
    83       <xref linkend="nss"/>,
     82      <xref linkend="make-ca"/> (runtime),
     83      <xref linkend="nss"/> (runtime),
    8484      <xref linkend="gtk-doc"/> and
    8585      <xref linkend="libxslt"/>
Note: See TracChangeset for help on using the changeset viewer.