further discussion in https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732201 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=726073 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=726116 https://bugzilla.mozilla.org/show_bug.cgi?id=1429692
long story short; NSS upstream wouldn't merge nss-pem, so it was forked as a separate project which uses APIs that will not be made public, nor libs dynamically loadable nss-pem Debian ITP is https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=888820 and I've verified that with nss-pem (and some other, unrelated fixes) freeipa server setup and autopkgtest passes fine. ** Bug watch added: Debian Bug tracker #732201 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732201 ** Bug watch added: Debian Bug tracker #726073 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=726073 ** Bug watch added: Debian Bug tracker #726116 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=726116 ** Bug watch added: Mozilla Bugzilla #1429692 https://bugzilla.mozilla.org/show_bug.cgi?id=1429692 ** Bug watch added: Debian Bug tracker #888820 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=888820 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to nss in Ubuntu. https://bugs.launchpad.net/bugs/1751140 Title: nss-pem needs additional headers, static libs to build Status in nss package in Ubuntu: New Status in nss package in Debian: Unknown Bug description: nss-pem is needed for apps linked with libnss3 to read certificates in PEM format. This is required when setting up a freeipa server with ipa-server-setup, and also certmonger to be able to refresh certificates on a freeipa client. To be able to build, nss-pem needs some headers and static libs provided by nss. They are marked private though, and upstream refuses to make them public and Debian maintainer refuses to include them in the packaging because of this. The required files are blapi.h, alghmac.h, nssckfw.a, nssb.a, freebl.a and they could be shipped in a separate libnss3-pkcs11-dev package, because they're not meant for generic consumption via libnss-dev. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nss/+bug/1751140/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
