Public bug reported: nss-pem is needed for apps linked with libnss3 to read certificates in PEM format. This is required when setting up a freeipa server with ipa- server-setup, and also certmonger to be able to refresh certificates on a freeipa client.
To be able to build, nss-pem needs some headers and static libs provided by nss. They are marked private though, and upstream refuses to make them public and Debian maintainer refuses to include them in the packaging because of this. The required files are blapi.h, alghmac.h, nssckfw.a, nssb.a, freebl.a and they could be shipped in a separate libnss3-pkcs11-dev package, because they're not meant for generic consumption via libnss-dev. ** Affects: nss (Ubuntu) Importance: Undecided Status: New ** Affects: nss (Debian) Importance: Unknown Status: Unknown ** Summary changed: - nss-pem needs blapi.h, alghmac.h, nssckfw.a, nssb.a, freebl.a + nss-pem needs additional headers, static libs to build ** Bug watch added: Debian Bug tracker #855879 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=855879 ** Also affects: nss (Debian) via https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=855879 Importance: Unknown Status: Unknown -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1751140 Title: nss-pem needs additional headers, static libs to build To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nss/+bug/1751140/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs