On Mon, Jan 30, 2017 at 02:39:24AM +0000, Ken Moffat wrote: > On Sun, Jan 29, 2017 at 04:50:31PM +0000, Ken Moffat wrote: > > > > It's not the end of the world - the old certs seem to be working in > > firefox, it's just annoying. > > > > DJ sent me a mail asking if my locale was UTF-8 : in all my main > scripts I export LC_ALL=C - can't immediately remember why, but I'm > sure there was a very good reason. Temporarily changing that to > en_GB.UTF-8 allowed it to work - for safety I'll just do similar in the > script which directly runs make-ca.sh : I see the make-ca script > already sets LANG to en_US.UTF-8. > > So - DJ, thanks for the pointer, and I'll let you comment if you wish > to, I'm going to bed. > A further follow-up : on the problematic systems, LANG was already set to en_GB.UTF-8 when I invoked make-ca.sh, but setting LC_ALL (which does not affect LANG) fixed it. AFAICS this problem is specific to glibc-2.23 (LFS-7.9 and similar) - on my newer systems with glibc-2.24, and older ones with glibc-2.21 and 2.22, the current make-ca.sh worked fine.
And I don't have any older "nominally-maintained" systems than glibc-2.21 (7.7) - I've now stopped trying to maintain the key parts of 7.6 because openssl-1.0.1 is no longer maintained. So for me, I just need to remember to hack make-ca.sh on glibc-2.23 systems if I ever need to update it. Thanks for listening, and thanks again to DJ for the replies. Now if only I could manage to get to bed at a time I think of as early (updating the kernel on the 7.7 system at the moment, still got to boot htat nad then run the backups). Cheers. ĸen -- `I shall take my mountains', said Lu-Tze. `The climate will be good for them.' -- Small Gods -- http://lists.linuxfromscratch.org/listinfo/blfs-dev FAQ: http://www.linuxfromscratch.org/blfs/faq.html Unsubscribe: See the above information page
