On Sun, Sep 2, 2018 at 4:13 AM, DJ Lucas <[email protected]> wrote:
>
> Finally added this in git version. Sorry it took me so long.
>
No problem, by the way I also had to add the same to
update-pciids.service and update-usbids.service.
>
> Please open yet another bug report with Debian to get that part fixed
> properly. :-) I'm kidding. Debian has had a slightly broken setup for
> several years now, not that we didn't at one time either, but I imagine it's
> a much more difficult problem to solve for them - quite a few more packages
> - coordination would be a royal pain.
>
> Anyway, with current make-ca, you don't want it there before the script
> completes (so the directory is overwritten each time). I can't do this for
> LFS proper, but if you can commit to never running 'openssl c-rehash' on the
> directory manually, a suitable workaround is to simply add the following
> line to the end of the /usr/sbin/make-ca script (or really, anywhere after
> c_rehash is run in that script):
> ls -s ../ca-bundle.crt "${DESTDIR}${CERTDIR}/ca-certificates.crt"
>
> I'll be ditching c_rehash in the next version of that script (0.9), but
> p11-kit does the same thing with the directory in our use case (overwrite).
> Same workaround should be good, however, it must be moved to just before the
> last "fi" in the 0.9 version of make-ca, which should land in the
> development BLFS in a couple of days.
>
> HTH
>
>
Thanks for the info, that should definitely help with my use case.
--
http://lists.linuxfromscratch.org/listinfo/blfs-dev
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page
