On 5/30/19 6:07 PM, Hans Malissa via blfs-support wrote:
In the instructions for make-ca-1.2
(http://linuxfromscratch.org/blfs/view/stable-systemd/postlfs/make-ca.html)
it says:
'As the root user, after installing p11-kit-0.23.15, download the
certificate source...'.
This means, (1) install make-ca, (2) install p11-kit, (3) run
/usr/sbin/make-ca -g.
Now, p11-kit
(http://linuxfromscratch.org/blfs/view/stable-systemd/postlfs/p11-kit.html)
lists NSS
(http://linuxfromscratch.org/blfs/view/stable-systemd/postlfs/nss.html)
as optional runtime dependency, but NSS lists p11-kit as recommended
runtime dependency.
And both, NSS and p11-kit, create a link:
/usr/lib/libnssckbi.so -> ./pkcs11/p11-kit-trust.so
which seems to be doing the same thing.
Is this some kind of circular dependency? In which order should I
install NSS, p11-kit, and make-ca?
Greetings,
First, p11-kit. The make-ca and nss packages are only needed at
runtime, not build time or install time.
Second, make-ca. It also uses nss at runtime, but is not needed for
installation.
Third, nss. It can use p11-kit at runtime, but is not needed for
installation. Even so, p11-kit should be installed as above.
-- Bruce
--
http://lists.linuxfromscratch.org/listinfo/blfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page
