Author: dj
Date: Sat Feb 24 15:05:35 2018
New Revision: 19860
Log:
Rename make-ca page.
Added:
trunk/BOOK/postlfs/security/make-ca.xml (contents, props changed)
- copied, changed from r19859, trunk/BOOK/postlfs/security/cacerts.xml
Deleted:
trunk/BOOK/postlfs/security/cacerts.xml
Modified:
trunk/BOOK/general/genlib/qca.xml
trunk/BOOK/general/prog/mercurial.xml
trunk/BOOK/general/prog/ojdk-conf.xml
trunk/BOOK/general/prog/openjdk.xml
trunk/BOOK/general/sysutils/systemd.xml
trunk/BOOK/gnome/platform/rest.xml
trunk/BOOK/networking/netlibs/curl.xml
trunk/BOOK/networking/netlibs/glib-networking.xml
trunk/BOOK/networking/netlibs/ldns.xml
trunk/BOOK/networking/netprogs/wget.xml
trunk/BOOK/postlfs/security/gnutls.xml
trunk/BOOK/postlfs/security/nss.xml
trunk/BOOK/postlfs/security/p11-kit.xml
trunk/BOOK/postlfs/security/security.xml
trunk/BOOK/x/lib/qt5.xml
trunk/BOOK/xsoft/graphweb/chromium.xml
Modified: trunk/BOOK/general/genlib/qca.xml
==============================================================================
--- trunk/BOOK/general/genlib/qca.xml Sat Feb 24 11:44:14 2018 (r19859)
+++ trunk/BOOK/general/genlib/qca.xml Sat Feb 24 15:05:35 2018 (r19860)
@@ -62,7 +62,7 @@
<bridgehead renderas="sect4">Required</bridgehead>
<para role="required">
- <xref linkend="cacerts"/>,
+ <xref linkend="make-ca"/>,
<xref linkend="cmake"/>,
<xref linkend="qt5"/>, and
<xref linkend="which"/>
Modified: trunk/BOOK/general/prog/mercurial.xml
==============================================================================
--- trunk/BOOK/general/prog/mercurial.xml Sat Feb 24 11:44:14 2018
(r19859)
+++ trunk/BOOK/general/prog/mercurial.xml Sat Feb 24 15:05:35 2018
(r19860)
@@ -198,7 +198,7 @@
disabled extensions, and more information, such as how to enable or
disable them using configuration files.</para>
- <para>If you have installed the <xref linkend="cacerts"/> and want
+ <para>If you have installed <xref linkend="make-ca"/> and want
<application>Mercurial</application> to use them, as the <systemitem
class="username">root</systemitem> user, issue:</para>
Modified: trunk/BOOK/general/prog/ojdk-conf.xml
==============================================================================
--- trunk/BOOK/general/prog/ojdk-conf.xml Sat Feb 24 11:44:14 2018
(r19859)
+++ trunk/BOOK/general/prog/ojdk-conf.xml Sat Feb 24 15:05:35 2018
(r19860)
@@ -75,10 +75,8 @@
mandb -c /opt/jdk/man</userinput></screen>
<para>
- The installation of the JRE Certificate Authority Certificates (cacerts)
+ The installation of the JRE certificate authority bundle
is described in the <xref linkend="ojdk-certs"/> section.
- If you are using the binary version, those certificates may already be
- installed.
</para>
</sect1>
Modified: trunk/BOOK/general/prog/openjdk.xml
==============================================================================
--- trunk/BOOK/general/prog/openjdk.xml Sat Feb 24 11:44:14 2018 (r19859)
+++ trunk/BOOK/general/prog/openjdk.xml Sat Feb 24 15:05:35 2018 (r19860)
@@ -191,7 +191,7 @@
<bridgehead renderas="sect4">Recommended</bridgehead>
<para role="recommended">
- <xref linkend="cacerts"/>,
+ <xref linkend="make-ca"/>,
<xref linkend="giflib"/>,
<xref linkend="lcms2"/>,
<xref linkend="libjpeg"/>,
@@ -450,8 +450,8 @@
<para>
<parameter>--with-cacerts-file=/etc/ssl/java/cacerts.jks</parameter>:
Specifies where to find a <filename>cacerts</filename> file,
- <filename class="directory">/etc/ssl/java/cacerts</filename> on a BLFS
- system. Otherwise, an empty one is created. You can use the
+ <filename>/etc/ssl/java/</filename> on a BLFS system. Otherwise, an empty
+ one is created. You can use the
<command>/usr/sbin/make-ca --force</command> command to generate it, once
you have installed the Java binaries.
</para>
@@ -501,13 +501,14 @@
CA certificates. Those certificates are located in a file named
<filename>/etc/ssl/java/cacerts.jks</filename>. That file should be
generated using the system PKI trust store. The instructions
- on the <xref linkend="cacerts"/> page should be used to update the file
- located in <filename>/etc/ssl/java</filename>. Setup a symlink in the
- default location as the <systemitem class="username">root</systemitem>
- user:
+ on the <xref linkend="make-ca"/> page should be used to update the file
+ located in <filename>/etc/ssl/java</filename>. Run the conversion and
+ setup a symlink in the default location as the <systemitem
+ class="username">root</systemitem> user:
</para>
-<screen role="root"><userinput>ln -sfv /etc/ssl/java/cacerts.jks
/opt/jdk/lib/security/cacerts</userinput></screen>
+<screen role="root"><userinput>/usr/sbin/make-ca --force &&
+ln -sfv /etc/ssl/java/cacerts.jks
/opt/jdk/lib/security/cacerts</userinput></screen>
<para>
Use the following commands to check if the <filename>cacerts</filename>
Modified: trunk/BOOK/general/sysutils/systemd.xml
==============================================================================
--- trunk/BOOK/general/sysutils/systemd.xml Sat Feb 24 11:44:14 2018
(r19859)
+++ trunk/BOOK/general/sysutils/systemd.xml Sat Feb 24 15:05:35 2018
(r19860)
@@ -78,7 +78,7 @@
<bridgehead renderas="sect4">Optional</bridgehead>
<para role="optional">
- <xref linkend="cacerts"/>,
+ <xref linkend="make-ca"/>,
<xref linkend="curl"/>,
<!-- <xref linkend="elfutils"/>, -->
<xref linkend="gnutls"/>,
Modified: trunk/BOOK/gnome/platform/rest.xml
==============================================================================
--- trunk/BOOK/gnome/platform/rest.xml Sat Feb 24 11:44:14 2018 (r19859)
+++ trunk/BOOK/gnome/platform/rest.xml Sat Feb 24 15:05:35 2018 (r19860)
@@ -76,7 +76,7 @@
<bridgehead renderas="sect4">Required</bridgehead>
<para role="required">
- <xref linkend="cacerts"/> and
+ <xref linkend="make-ca"/> and
<xref linkend="libsoup"/>
</para>
@@ -125,7 +125,7 @@
<para>
<parameter>--with-ca-certificates=/etc/ssl/ca-bundle.crt</parameter>:
This
- switch sets the location of the BLFS <xref linkend="cacerts"/> bundle.
+ switch sets the location of the BLFS certificate authority bundle.
</para>
<xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
Modified: trunk/BOOK/networking/netlibs/curl.xml
==============================================================================
--- trunk/BOOK/networking/netlibs/curl.xml Sat Feb 24 11:44:14 2018
(r19859)
+++ trunk/BOOK/networking/netlibs/curl.xml Sat Feb 24 15:05:35 2018
(r19860)
@@ -89,7 +89,7 @@
<bridgehead renderas="sect4">Recommended</bridgehead>
<para role="recommended">
- <xref role="runtime" linkend="cacerts"/> (runtime)
+ <xref role="runtime" linkend="make-ca"/> (runtime)
</para>
<bridgehead renderas="sect4">Optional</bridgehead>
@@ -237,7 +237,7 @@
<para>
<parameter>--with-ca-path=/etc/ssl/certs</parameter>: This
- switch sets the location of the BLFS <xref linkend="cacerts"/>.
+ switch sets the location of the BLFS Certificate Authority store.
</para>
<para>
Modified: trunk/BOOK/networking/netlibs/glib-networking.xml
==============================================================================
--- trunk/BOOK/networking/netlibs/glib-networking.xml Sat Feb 24 11:44:14
2018 (r19859)
+++ trunk/BOOK/networking/netlibs/glib-networking.xml Sat Feb 24 15:05:35
2018 (r19860)
@@ -83,7 +83,7 @@
<bridgehead renderas="sect4">Recommended</bridgehead>
<para role="recommended">
- <xref linkend="cacerts"/> and
+ <xref linkend="make-ca"/> and
<xref linkend="p11-kit"/>
</para>
Modified: trunk/BOOK/networking/netlibs/ldns.xml
==============================================================================
--- trunk/BOOK/networking/netlibs/ldns.xml Sat Feb 24 11:44:14 2018
(r19859)
+++ trunk/BOOK/networking/netlibs/ldns.xml Sat Feb 24 15:05:35 2018
(r19860)
@@ -81,7 +81,7 @@
-->
<bridgehead renderas="sect4">Optional</bridgehead>
<para role="optional">
- <xref linkend="cacerts"/> and
+ <xref linkend="make-ca"/> and
<xref linkend="libpcap"/> (for example programs),
<xref linkend="python2"/> and
<xref linkend="swig"/> (for Python bindings), and
Modified: trunk/BOOK/networking/netprogs/wget.xml
==============================================================================
--- trunk/BOOK/networking/netprogs/wget.xml Sat Feb 24 11:44:14 2018
(r19859)
+++ trunk/BOOK/networking/netprogs/wget.xml Sat Feb 24 15:05:35 2018
(r19860)
@@ -76,7 +76,7 @@
<bridgehead renderas="sect4">Recommended</bridgehead>
<para role="recommended">
- <xref role="runtime" linkend="cacerts"/> (runtime)
+ <xref role="runtime" linkend="make-ca"/> (runtime)
</para>
<bridgehead renderas="sect4">Optional</bridgehead>
@@ -164,7 +164,7 @@
<!--
<para>
- If you have installed the <xref linkend="cacerts"/> and you want
+ If you have installed <xref linkend="make-ca"/> and you want
<application>Wget</application> to use them, as the
<systemitem class="username">root</systemitem> user:
</para>
Modified: trunk/BOOK/postlfs/security/gnutls.xml
==============================================================================
--- trunk/BOOK/postlfs/security/gnutls.xml Sat Feb 24 11:44:14 2018
(r19859)
+++ trunk/BOOK/postlfs/security/gnutls.xml Sat Feb 24 15:05:35 2018
(r19860)
@@ -100,7 +100,7 @@
<bridgehead renderas="sect4">Recommended</bridgehead>
<para role="recommended">
- <xref linkend="cacerts"/>,
+ <xref linkend="make-ca"/>,
<xref linkend="libunistring"/>,
<xref linkend="libtasn1"/>, and
<xref linkend="p11-kit"/>
Copied and modified: trunk/BOOK/postlfs/security/make-ca.xml (from r19859,
trunk/BOOK/postlfs/security/cacerts.xml)
==============================================================================
--- trunk/BOOK/postlfs/security/cacerts.xml Sat Feb 24 11:44:14 2018
(r19859, copy source)
+++ trunk/BOOK/postlfs/security/make-ca.xml Sat Feb 24 15:05:35 2018
(r19860)
@@ -6,23 +6,23 @@
<!ENTITY certhost "https://hg.mozilla.org/">
<!ENTITY certpath "/lib/ckfw/builtins/certdata.txt">
- <!ENTITY cacerts-buildsize "6.6 MB (with all runtime deps)">
- <!ENTITY cacerts-time "0.3 SBU (with all runtime deps)">
+ <!ENTITY make-ca-buildsize "6.6 MB (with all runtime deps)">
+ <!ENTITY make-ca-time "0.3 SBU (with all runtime deps)">
<!ENTITY make-ca-download
"https://github.com/djlucas/make-ca/archive/v&make-ca-version;/make-ca-&make-ca-version;.tar.gz">
<!ENTITY make-ca-size "36 KB">
<!ENTITY make-ca-md5sum "4f180b9bf3b11f29d6a79e6022aeae23">
]>
-<sect1 id="cacerts" xreflabel="Certificate Authority Certificates">
- <?dbhtml filename="cacerts.html"?>
+<sect1 id="make-ca" xreflabel="make-ca">
+ <?dbhtml filename="make-ca.html"?>
<sect1info>
<othername>$LastChangedBy$</othername>
<date>$Date$</date>
</sect1info>
- <title>Certificate Authority Certificates</title>
+ <title>make-ca</title>
<para>Public Key Infrastructure (PKI) is a method to validate the
authenticity of an otherwise unknown entity across untrusted networks. PKI
@@ -44,12 +44,12 @@
&lfs82_checked;
- <indexterm zone="cacerts">
- <primary sortas="a-cacerts">Certificate Authority Certificates</primary>
+ <indexterm zone="make-ca">
+ <primary sortas="a-make-ca">make-ca</primary>
</indexterm>
<sect2 role="package">
- <title>Introduction to Certificate Authorities</title>
+ <title>Introduction to make-ca</title>
<bridgehead renderas="sect3">Package Information</bridgehead>
<itemizedlist spacing="compact">
@@ -63,14 +63,14 @@
<para>Download MD5 Sum: &make-ca-md5sum;</para>
</listitem>
<listitem>
- <para>Estimated disk space required: &cacerts-buildsize;</para>
+ <para>Estimated disk space required: &make-ca-buildsize;</para>
</listitem>
<listitem>
- <para>Estimated build time: &cacerts-time;</para>
+ <para>Estimated build time: &make-ca-time;</para>
</listitem>
</itemizedlist>
- <bridgehead renderas="sect3">Certificate Authority Certificates
Dependencies</bridgehead>
+ <bridgehead renderas="sect3">make-ca Dependencies</bridgehead>
<!--
<bridgehead renderas="sect4">Required</bridgehead>
<para role="required"><xref linkend="openssl"/></para>
@@ -84,11 +84,11 @@
</para>
<para condition="html" role="usernotes">User Notes:
- <ulink url='&blfs-wiki;/cacerts'/></para>
+ <ulink url='&blfs-wiki;/make-ca'/></para>
</sect2>
<sect2 role="installation">
- <title>Installation of Certificate Authority Certificates</title>
+ <title>Installation of make-ca</title>
<para>The <application>make-ca</application> script will download and
process the certificates included in the <filename>certdata.txt</filename>
@@ -215,13 +215,13 @@
<?dbfo list-presentation="list"?>
<?dbhtml list-presentation="table"?>
- <varlistentry id="make-ca">
+ <varlistentry id="make-ca-bin">
<term><command>make-ca</command></term>
<listitem>
<para>is a shell script that adapts a current version of
<filename>certdata.txt</filename>, and prepares it for use
as the system certificate store.</para>
- <indexterm zone="cacerts make-ca">
+ <indexterm zone="make-ca make-ca">
<primary sortas="b-make-ca">make-ca</primary>
</indexterm>
</listitem>
Modified: trunk/BOOK/postlfs/security/nss.xml
==============================================================================
--- trunk/BOOK/postlfs/security/nss.xml Sat Feb 24 11:44:14 2018 (r19859)
+++ trunk/BOOK/postlfs/security/nss.xml Sat Feb 24 15:05:35 2018 (r19860)
@@ -229,7 +229,7 @@
<para>Additionally, for dependent applications that do not use the internal
database (<filename>/usr/lib/libnssckbi.so</filename>), the
<filename>/usr/sbin/make-ca</filename> script, included on the
- <xref linkend="cacerts"/> page, will generate a system wide NSS DB.</para>
+ <xref linkend="make-ca"/> page, will generate a system wide NSS DB.</para>
</sect2>
Modified: trunk/BOOK/postlfs/security/p11-kit.xml
==============================================================================
--- trunk/BOOK/postlfs/security/p11-kit.xml Sat Feb 24 11:44:14 2018
(r19859)
+++ trunk/BOOK/postlfs/security/p11-kit.xml Sat Feb 24 15:05:35 2018
(r19860)
@@ -74,7 +74,7 @@
<bridgehead renderas="sect4">Recommended</bridgehead>
<para role="recommended">
- <xref linkend="cacerts"/> and
+ <xref linkend="make-ca"/> and
<xref linkend="libtasn1"/>
</para>
Modified: trunk/BOOK/postlfs/security/security.xml
==============================================================================
--- trunk/BOOK/postlfs/security/security.xml Sat Feb 24 11:44:14 2018
(r19859)
+++ trunk/BOOK/postlfs/security/security.xml Sat Feb 24 15:05:35 2018
(r19860)
@@ -41,7 +41,7 @@
"signatures" and compares for files that have been changed.</para>
<xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
href="vulnerabilities.xml"/>
- <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="cacerts.xml"/>
+ <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="make-ca.xml"/>
<!-- sysv only -->
<xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
href="consolekit.xml"/>
Modified: trunk/BOOK/x/lib/qt5.xml
==============================================================================
--- trunk/BOOK/x/lib/qt5.xml Sat Feb 24 11:44:14 2018 (r19859)
+++ trunk/BOOK/x/lib/qt5.xml Sat Feb 24 15:05:35 2018 (r19860)
@@ -88,7 +88,7 @@
<bridgehead renderas="sect4">Recommended</bridgehead>
<para role="recommended">
<xref linkend="alsa-lib"/>,
- <xref linkend="cacerts"/>,
+ <xref linkend="make-ca"/>,
<xref linkend="cups"/>,
<xref linkend="glib2"/>,
<xref linkend="gst10-plugins-base"/> (QtMultimedia backend),
Modified: trunk/BOOK/xsoft/graphweb/chromium.xml
==============================================================================
--- trunk/BOOK/xsoft/graphweb/chromium.xml Sat Feb 24 11:44:14 2018
(r19859)
+++ trunk/BOOK/xsoft/graphweb/chromium.xml Sat Feb 24 15:05:35 2018
(r19860)
@@ -135,7 +135,7 @@
<bridgehead renderas="sect4">Recommended</bridgehead>
<para role="recommended">
- <xref linkend="cacerts"/> (runtime),
+ <xref linkend="make-ca"/> (runtime),
<!-- <xref linkend="ffmpeg"/>, -->
<xref linkend="flac"/>,
<xref linkend="git"/>,
--
http://lists.linuxfromscratch.org/listinfo/blfs-book
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page