David Stutzman wrote: > Nelson, > > Thanks for the info, I tried to list out the tags from the repository > which didn't go so well so I just grabbed the HEAD for everything and it > ended up working just fine for me, both on the command line and for > Dogtag. The Dogtag devs and I have updated the wiki to remove the > 3.11.4/4.6.4 tags and just pull the head.
I object to that. Please don't do that. It's a bad idea for many reasons. The HEAD tag is for NSS developers only. The NSS team makes no promises, guarantees, or assurances that the contents of that tag will even build, much less work correctly, all the time. It's not acceptable to the NSS team to have people outside the team start complaining when the HEAD tag doesn't produce acceptable results. We don't even allow the Mozilla browser development team to use the HEAD tag, ever! The BRANCH tags are also not releases, but the NSS 3.11 branch is very stable at this point, so the probability of pulling from the 3.11 branch tag and getting an unusable build is much lower than the probability of getting an unusable build from HEAD. > I have plans to figure out if the release versions of 3.12 and 4.7 will > work I expect they will work, and it would be better for you to pull "RTM" tags (release tags) than to pull either HEAD or BRANCH tags. But what about FIPS 140? NSS 3.12.x is not yet FIPS 140 certified. If you have requirements to use FIPS, you should stick to tags that are known to have FIPS validated components. > and I will update the wiki again as I'm sure pulling the head won't > always be the best thing to do. Indeed. :) _______________________________________________ dev-tech-crypto mailing list [email protected] https://lists.mozilla.org/listinfo/dev-tech-crypto
