Changeset c9b953e6


Ignore:
Timestamp:
10/19/2011 08:18:40 PM (13 years ago)
Author:
Bruce Dubbs <bdubbs@…>
Branches:
10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal
Children:
6b5cc24
Parents:
54cfc01
Message:

Add a separate page for CA certificates.
Update to openssl-1.0.0e.
Update to bc-1.06.95.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@8900 af4574ff-66df-0310-9fd7-8a98e5e911e0

Files:
1 added
5 edited

Legend:

Unmodified
Added
Removed

  • general.ent

    r54cfc01 rc9b953e6  
    44-->
    55
    6 <!ENTITY day          "06">                   <!-- Always 2 digits -->
    7 <!ENTITY month        "09">                   <!-- Always 2 digits -->
     6<!ENTITY day          "19">                   <!-- Always 2 digits -->
     7<!ENTITY month        "10">                   <!-- Always 2 digits -->
    88<!ENTITY year         "2011">
    99<!ENTITY copyrightdate "2001-&year;">
    … …  
    2525<!ENTITY sources-anduin-http  "http://anduin.&lfs-domainname;/sources/BLFS/svn">
    2626<!ENTITY sources-anduin-ftp   "ftp://anduin.&lfs-domainname;/BLFS/svn">
     27<!ENTITY sources-anduin-other "ftp://anduin.&lfs-domainname;/BLFS">
    2728<!ENTITY files-anduin         "http://anduin.&lfs-domainname;/files/BLFS/svn">
    2829<!ENTITY hints-root           "http://www.&lfs-domainname;/hints">
    … …  
    3334<!ENTITY lfs-root             "../../../../lfs/view/&lfs-version;">
    3435<!ENTITY lfs-dev              "../../../../lfs/view/development">
     36<!ENTITY gnu-alpha-ftp        "ftp://alpha.gnu.org/gnu/">
     37<!ENTITY gnu-alpha-http       "http://alpha.gnu.org/gnu/">
    3538<!ENTITY sourceforge-repo     "http://downloads.sourceforge.net">
    3639<!ENTITY sourceforge-repo2    "http://sourceforge.net">
    … …  
    7780<!ENTITY lfs67_built          "<para>This package is known to build using an LFS
    7881                              6.7 platform but has not been tested.</para>">
     82<!ENTITY lfs70_checked        "<para>This package is known to build and work
     83                              properly using an LFS-7.0 platform.</para>">
     84<!ENTITY lfs70_built          "<para>This package is known to build using an LFS
     85                              7.0 platform but has not been tested.</para>">
    7986
    8087<!-- usage: <para>&lfssvn_checked;ccyymmdd&lfssvn_checked2;</para> -->
    … …  
    93100<!-- Chapter 4 -->
    94101
    95 <!ENTITY openssl-version              "1.0.0d">
     102<!ENTITY openssl-version              "1.0.0e">
    96103<!-- The ca-bundle-version should be updated to match nss version -->
    97104<!ENTITY ca-bundle-version            "3.12.11.0">
    … …  
    243250
    244251<!-- Chapter 10 -->
    245 <!ENTITY bc-version                   "1.06">
     252<!ENTITY bc-version                   "1.06.95">
    246253<!ENTITY rep-gtk-version              "0.18">
    247254<!ENTITY compface-version             "1.5.2">

  • general/genutils/bc.xml

    r54cfc01 rc9b953e6  
    1717    <!-- <para>To test the results, issue: <command>make check</command>.</para> -->
    1818
    19   <!ENTITY bc-download-http "http://ftp.gnu.org/gnu/bc/bc-&bc-version;.tar.gz">
    20   <!ENTITY bc-download-ftp "ftp://ftp.gnu.org/gnu/bc/bc-&bc-version;.tar.gz">
    21   <!ENTITY bc-md5sum "d44b5dddebd8a7a7309aea6c36fda117">
    22   <!ENTITY bc-size "273 KB">
     19  <!ENTITY bc-download-http "&gnu-alpha-http;/bc/bc-&bc-version;.tar.bz2">
     20  <!ENTITY bc-download-ftp "&gnu-alpha-ftp;/bc/bc-&bc-version;.tar.bz2">
     21  <!ENTITY bc-md5sum "5126a721b73f97d715bb72c13c889035">
     22  <!ENTITY bc-size "288 KB">
    2323  <!ENTITY bc-buildsize "3 MB">
    2424  <!ENTITY bc-time "less than 0.1 SBU (0.2 SBU if running the testsuite)">
    … …  
    3333  </sect1info>
    3434
    35   <title>Bc-&bc-version;</title>
     35  <title>bc-&bc-version;</title>
    3636
    3737  <indexterm zone="bc">
    … …  
    4040
    4141  <sect2 role="package">
    42     <title>Introduction to Bc</title>
     42    <title>Introduction to bc</title>
    4343
    4444    <para>The <application>bc</application> package contains
    4545    an arbitrary precision numeric processing language.</para>
    4646
    47     &lfs67_checked;
     47    &lfs70_checked;
    4848
    4949    <bridgehead renderas="sect3">Package Information</bridgehead>
    … …  
    7979    <para>Install <application>bc</application> by running the following commands:</para>
    8080
    81 <screen><userinput>sed -i '/PROTO.*readline/d' bc/scan.l &amp;&amp;
    82 sed -i '/flex -I8/s/8//' configure &amp;&amp;
    83 sed -i '/stdlib/a #include &lt;string.h&gt;' lib/number.c &amp;&amp;
    84 sed -i 's/program.*save/static &amp;/' bc/load.c &amp;&amp;
    85 ./configure --prefix=/usr --with-readline &amp;&amp;
     81<screen><userinput>./configure --prefix=/usr --with-readline &amp;&amp;
    8682make</userinput></screen>
    8783
    … …  
    10197  <sect2 role="commands">
    10298    <title>Command Explanations</title>
    103 
     99<!--
    104100    <para><command>sed -i '/PROTO.*readline/d' bc/scan.l</command>: This
    105101    command fixes the <application>Readline</application> library call.</para>
    … …  
    114110    This command fixes a segfault when running <application>bc</application>
    115111    with <command>bc -l</command>.</para>
    116 
     112-->
    117113    <para><parameter>--with-readline</parameter>: This option enables
    118114    <application>Readline</application> support in interactive mode.</para>

  • introduction/welcome/changelog.xml

    r54cfc01 rc9b953e6  
    4141
    4242-->
     43
     44    <listitem>
     45      <para>October 19th, 2011</para>
     46      <itemizedlist>
     47        <listitem>
     48          <para>[bdubbs] - Added separate page to generate CA certificates.</para>
     49        </listitem>
     50        <listitem>
     51          <para>[bdubbs] - Updated to openssl-1.0.0e.</para>
     52        </listitem>
     53        <listitem>
     54          <para>[bdubbs] - Updated to bc-1.06.95.</para>
     55        </listitem>
     56      </itemizedlist>
     57    </listitem>
     58
    4359    <listitem>
    4460      <para>September 6th, 2011</para>

  • postlfs/security/openssl.xml

    r54cfc01 rc9b953e6  
    3939    (for accessing HTTPS sites).</para>
    4040
    41     &lfs65_checked;
     41    &lfs70_checked;
    4242
    4343    <bridgehead renderas="sect3">Package Information</bridgehead>
    … …  
    5454      <listitem>
    5555        <para>Download size: &openssl-size;</para>
    56       </listitem>
    57       <listitem>
    58         <para>CA Bundle Download: <ulink url="&ca-bundle-download;"/></para>
    59       </listitem>
    60       <listitem>
    61         <para>CA Bundle size: &ca-bundle-size;</para>
    62       </listitem>
    63       <listitem>
    64         <para>CA Bundle MD5 sum: &ca-bundle-md5sum;</para>
    6556      </listitem>
    6657      <listitem>
    … …  
    9990
    10091<screen><userinput>patch -Np1 -i ../openssl-&openssl-version;-fix_manpages-1.patch &amp;&amp;
    101 tar -vxf ../BLFS-ca-bundle-&ca-bundle-version;.tar.bz2 &amp;&amp;
    10292
    10393./config --prefix=/usr         \
    … …  
    10999    <para>To test the results, issue: <command>make test</command>.</para>
    110100
    111     <!-- <para>To test the results, issue: <command>make test</command>.  Note that the
    112     test results/output depend on the availability of /etc/ssl/openssl.cnf.  If
    113     running the tests for the first time run the following as the
    114     <systemitem class="username">root</systemitem> user before running the
    115     tests:</para>
    116 
    117 <screen role="root"><userinput>install -v -m755 d /etc/ssl &amp;&amp;
    118 install -v ./apps/openssl.cnf /etc/ssl/</userinput></screen> -->
    119 
    120101    <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
    121102
    122103<screen role="root"><userinput>make MANDIR=/usr/share/man install                &amp;&amp;
    123 cp -v -r certs /etc/ssl                           &amp;&amp;
    124104install -v -d -m755 /usr/share/doc/openssl-&openssl-version; &amp;&amp;
    125105cp      -v -r       doc/{HOWTO,README,*.{txt,html,gif}} \
    126106                    /usr/share/doc/openssl-&openssl-version;</userinput></screen>
    127107
    128     <para>While still the <systemitem class="username">root</systemitem> user,
    129     create a single file that contains all of the installed certificates:</para>
    130 
    131 <screen role="root"><userinput>for pem in /etc/ssl/certs/*.pem
    132 do
    133    cat $pem
    134    echo ""
    135 done &gt; /etc/ssl/ca-bundle.crt</userinput></screen>
    136 
    137108  </sect2>
    138109
    139110  <sect2 role="commands">
    140111    <title>Command Explanations</title>
    141 
    142     <para>
    143     <command>tar -vxf ../BLFS-ca-bundle-&ca-bundle-version;.tar.bz2</command>:
    144     <application>OpenSSL</application> no longer includes any root certificates.
    145     This package adds root certificates as provided by mozilla.org.</para>
    146112
    147113    <para><parameter>shared</parameter>: This parameter forces the creation of
    … …  
    169135    all virtual hosts.</para> -->
    170136
    171     <!-- <para><option>zlib-dynamic</option>: When added to the
    172     <command>./config</command> command, this switch will enable
    173     use of <filename>libz.so</filename> for compression/decompression.</para> -->
    174 
    175     <para><command>cp -v -r certs /etc/ssl</command>: This installs both the
    176     sample certificates and documentation included with
    177     <application>OpenSSL</application>, and the certificates that were extracted
    178     from the BLFS-ca-bundle-&ca-bundle-version; package.</para>
    179 
    180     <para><command>for pem in /etc/ssl/certs/*.pem...</command>: This group of
    181     commands creates a single-file certificate bundle
    182     (<filename>/etc/ssl/ca-bundle.crt</filename>) that is usable by many
    183     other software packages.  <filename>ca-bundle.crt</filename> should be
    184     recreated every time a new or updated certificate is added to
    185     <filename class="directory">/etc/ssl/certs</filename>.</para>
    186 
    187137  </sect2>
    188138
    … …  
    204154      <title>Configuration Information</title>
    205155
    206       <para>Most people who just want to use <application>OpenSSL</application>
    207       for providing functions to other programs such as
    208       <application>OpenSSH</application> and web browsers won't need to worry
    209       about configuring <application>OpenSSL</application>. Configuring
    210       <application>OpenSSL</application> is an advanced topic and so those
    211       who do would normally be expected to either know how to do it or to be
    212       able to find out how to do it.</para>
     156      <para>Most users will want to install Certificate Authority Certificates
     157      for validataion of downloaded certificates.  For example, these
     158      certificates are used by <xref linkend='firefox'/> or <xref
     159      linkend='wget'/> when accessing secure (https protocol) sites.  To do this,
     160      follow the instructions from the <xref linkend='cacerts'/> page.</para>
     161
     162      <para>Users who just want to use <application>OpenSSL</application> for
     163      providing functions to other programs such as
     164      <application>OpenSSH</application> and web browsers do not need to worry
     165      about additional configuration. This is an advanced topic and so those
     166      who do need it would normally be expected to either know how to properly
     167      update <filename>/etc/ssl/openssl.cnf</filename> or be able to find out
     168      how to do it.</para>
    213169
    214170    </sect3>

  • postlfs/security/security.xml

    r54cfc01 rc9b953e6  
    4141
    4242  <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="openssl.xml"/>
     43  <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="cacerts.xml"/>
    4344  <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="gnutls.xml"/>
    4445  <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="cracklib.xml"/>
Note: See TracChangeset for help on using the changeset viewer.