On 11/23/2016 11:54 AM, Ken Moffat wrote:
OK, so it took me days to get around to looking at the details for the new make-ca.sh. First thing I noticed was that it checks to see if the existing certs are up to date, and if they are it bails out. My first thought was "I like that". But then I started to think about how I *build* a new desktop system : openssl and certs get installed very early. At that time, nss is not installed. Openjdk gets installed much later, if at all. For nss in particular, it seems unlikely that the certs will have changed by the time I build it. Could we have an override to force a rewrite, which would then do whichever of nss and openjdk are now installed ? I could hack my local copy to force nss and/or openjdk, but I'll then end up diverging from what is at anduin.
Yeah, should add something for this case. I'll take a look. I might just take it all the way to a generic tool as was done with the Java one, but keep the defaults as they are.
Oops, never hit send. New version in just a few minutes. --DJ -- http://lists.linuxfromscratch.org/listinfo/blfs-dev FAQ: http://www.linuxfromscratch.org/blfs/faq.html Unsubscribe: See the above information page
