OK, so it took me days to get around to looking at the details for the new make-ca.sh. First thing I noticed was that it checks to see if the existing certs are up to date, and if they are it bails out.
My first thought was "I like that". But then I started to think about how I *build* a new desktop system : openssl and certs get installed very early. At that time, nss is not installed. Openjdk gets installed much later, if at all. For nss in particular, it seems unlikely that the certs will have changed by the time I build it. Could we have an override to force a rewrite, which would then do whichever of nss and openjdk are now installed ? I could hack my local copy to force nss and/or openjdk, but I'll then end up diverging from what is at anduin. ĸen -- `I shall take my mountains', said Lu-Tze. `The climate will be good for them.' -- Small Gods -- http://lists.linuxfromscratch.org/listinfo/blfs-dev FAQ: http://www.linuxfromscratch.org/blfs/faq.html Unsubscribe: See the above information page
