cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: [PATCH] docs/SSLCERTS: update the section about NSS database

From: Kamil Dudka <kdudka_at_redhat.com>
Date: Mon, 11 Aug 2014 16:54:03 +0200

On Sunday, August 03, 2014 23:39:15 Kamil Dudka wrote:
> On Friday, August 01, 2014 10:27:57 Von Hawkins wrote:
> > >-
> > >-Usually these cert databases are empty, but NSS also has built-in CAs
> > >which are -provided through a shared library, libnssckbi.so; if you want
> > >to use these -built-in CAs, then create a symlink to libnssckbi.so in
> > >/etc/pki/nssdb: -ln -s /usr/lib[64]/libnssckbi.so
> > >/etc/pki/nssdb/libnssckbi.so
> > >+Starting with version 7.19.7, libcurl automatically adds the 'sql:'
> > >prefix
> > >to +the certdb directory (either the hardcoded default /etc/pki/nssdb or
> > >the +directory configured with SSL_DIR environment variable). To check
> > >which certdb +format your distribution provides, examine the default
> > >certdb location: +/etc/pki/nssdb; the new certdb format can be identified
> > >by the filenames +cert9.db, key4.db, pkcs11.txt; filenames of older
> > >versions are cert8.db, +key3.db, secmod.db.
> > >
> > I'm just curious, is the symlink functionality no longer valid?
>
> Unfortunately yes, that is exactly what this thread is about:
>
> http://thread.gmane.org/gmane.comp.web.curl.library/43189/focus=43215

I have just pushed the patch upstream:

https://github.com/bagder/curl/commit/cb1f1866

> Kamil
>
> > I liked
> >
> > that the symlink instruction was there in the older version, but it
> > appears
> > you didn't keep it in the revised version
> >
> >
> > -Usually these cert databases are empty, but NSS also has built-in CAs
> > which are -provided through a shared library, libnssckbi.so; if you want
> > to use these -built-in CAs, then create a symlink to libnssckbi.so in
> > /etc/pki/nssdb: -ln -s /usr/lib[64]/libnssckbi.so
> > /etc/pki/nssdb/libnssckbi.so
>
> -------------------------------------------------------------------
> List admin: http://cool.haxx.se/list/listinfo/curl-library
> Etiquette: http://curl.haxx.se/mail/etiquette.html

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2014-08-11