Q on nss-3.11 (Re: Does Mozilla trunk build successfully on FreeBSD?)

[Wan-Teh Chang]

Hi Mikhail,

Mikhail Teterin wrote:
>
> Was the fortcrypt simply removed from the nss-3.11? So it seems, but I wanted 
> to verify it.

Yes.  We removed all the "Fortezza" code in NSS 3.11.

Note that we added libfreebl3.so and libfreebl3.chk in
NSS 3.11.  Applications should not link with -lfreebl3.
NSS's libsoftokn3.so library will automatically load
(using dlopen) libfreebl3.so at run time.  You just need
to install libfreebl3.so and libfreebl3.chk right next
to libsoftokn3.so and libsoftokn3.chk.

> Also gone are the "instinit" and the "newuser" executables, but the "fipstest" 
> and the "crmftest" are added. Are these useful to anyone after the build is 
> finished and verified?

None of these tools are generally useful.

The generally useful NSS tools are:
certutil
pk12util
modutil
signtool
ssltap

You should only install these in your system
binary directory.

> Gnome, I don't see anything in our ports tree, that depends on the removed 
> -lswft...

No app is linked with -lswft.  That's why it was
safe for us to remove it.

Wan-Teh
-- 
Learn. Network. Experience open source.
Red Hat Summit Nashville  |  May 30 - June 2, 2006
Learn more: http://www.redhat.com/promo/summit/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3458 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.freebsd.org/pipermail/freebsd-gnome/attachments/20060119/d7b3dc88/smime.bin