On 5/30/2019 6:07 PM, Hans Malissa via blfs-support wrote:
In the instructions for make-ca-1.2
(http://linuxfromscratch.org/blfs/view/stable-systemd/postlfs/make-ca.html)
it says:
'As the root user, after installing p11-kit-0.23.15, download the
certificate source...'.
This means, (1) install make-ca, (2) install p11-kit, (3) run
/usr/sbin/make-ca -g.
Now, p11-kit
(http://linuxfromscratch.org/blfs/view/stable-systemd/postlfs/p11-kit.html)
lists NSS
(http://linuxfromscratch.org/blfs/view/stable-systemd/postlfs/nss.html)
as optional runtime dependency, but NSS lists p11-kit as recommended
runtime dependency.
And both, NSS and p11-kit, create a link:
/usr/lib/libnssckbi.so -> ./pkcs11/p11-kit-trust.so
which seems to be doing the same thing.
Is this some kind of circular dependency? In which order should I
install NSS, p11-kit, and make-ca?
Greetings,
Just like you said above, install make-ca, then install p11-kit, and
finally run 'make-ca -g' to generate the stores. After you install NSS,
you can optionally install a system NSSDB, but this should not be
necessary for anything in BLFS. After you install Java, you can also
optionally generate a java pkcs12 store if needed (again not needed by
anything in BLFS). The link is included in both sets of instructions so
that if you reinstall either, you will not forget to create the link,
but it's not strictly necessary to be in p11-kit unless you are
packaging.If there is a better way to explain that, let me know and I'll
get it in the book.
--DJ
--
http://lists.linuxfromscratch.org/listinfo/blfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page
