Fernando de Oliveira <[email protected]> wrote: >Em 20-07-2013 10:54, Bruce Dubbs escreveu: >> On Fri, Jul 19, 2013 at 9:38 PM, Fernando de Oliveira > > >>> Problem: no root certificates generated for some non-english >locales. >>> >>> In this message, first, I describe the problem, then the solution. >Many >>> users may have the bug, so a test is necessary. This test is >described >>> below. >> >> I will need to spend some time studying this. > >OK. > >The most important point was informing about the problem, so, if >someone >has a problem, we can send to the thread, and user will not have to >rebuild everything. This is useful even after the book being fixed. > >... > >>> $ echo $LANG >>> pt_BR.utf8 >> >> That's probably why I don't see that. > >Today, failed for many other locales. > >... > >>> First, correct the patch...: >>> >>> sed 's/echo yes | /echo yes | env LC_ALL=C /' \ >>> icedtea-2.4.1-add_cacerts-1.patch > >icedtea-2.4.1-add_cacerts-2.patch >> >> OK, so we fix the patch. > >Thanks. This is almost all. Unfortunately, the binaries do not have the >certificates, almost sure they need to be corrected. Shall I do it or >wait for a future release? > >The rest of the message was for others to be informed about the problem >and have a solution. > >>> 5. Difference Between Original And New Scripts >>> >>> $ diff -Naur mkcacerts-blfs-1.0.7.40-2.4.1.sh >>> mkcacerts-new-1.0.7.40-2.4.1.sh > >... > >> I'm not sure where this change goes. Is it not the same as the >patch? > >Yes, it was just for cross-checking if the previous part was correct. >Cat command and diffs are all broken by the mail client. I hope that >those who read it understand the necessity of editing (here, I am not >referring to you, Bruce). > >One command was wrong. When editing, I deleted the certificates >filename: > >> sh mkcacerts.sh -d "/etc/ssl/certs/" -k "bin/keytool" -s >> "/usr/bin/openssl" \ >> -o "../" > >It should read: > >sh mkcacerts.sh -d "/etc/ssl/certs/" -k "bin/keytool" \ > -s "/usr/bin/openssl" -o "../certificates" > >output (-o "../") was being sent to a directory. > >Please, do not bother about allowing a big message through. It would be >useful for other, not you, but readers can edit the mail client broken >lines, of original one, I think...
Good catch. One request though, since this will not likely get upstreamed, why not just install mkcacerts.sh in the jre bin directory and add a blurb about it in the cacerts page? Could even add a conditional for it during update. --DJ -- Sent from my Android phone with K-9 Mail. Please excuse my brevity. -- This message has been scanned for viruses and dangerous content, and is believed to be clean. -- http://linuxfromscratch.org/mailman/listinfo/blfs-dev FAQ: http://www.linuxfromscratch.org/blfs/faq.html Unsubscribe: See the above information page
