cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: Howto use libcurl with libnss and PKCS11 Interface to a Security Module?

From: Oliver Graute <oliver.graute_at_gmail.com>
Date: Tue, 29 Mar 2016 10:18:01 +0200

On 24/03/16, Kamil Dudka wrote:
> On Thursday 24 March 2016 16:52:48 Oliver Graute wrote:
> > On 24/03/16, Kamil Dudka wrote:
> > > On Thursday, March 24, 2016 10:49:21 Oliver Graute wrote:
> > > > ok CURLOPT_VERBOSE to 1L helped a lot thx for that hint.
> > > >
> > > > No its complaining about missing libnsspem.so. Is this lib part of nss
> > > > itself? I couldn't find it there.
> > >
> > > Unfortunately, it is not part of the upstream nss distribution. There was
> > >
> > > a plan to include it back in 2007:
> > > https://bugzilla.mozilla.org/show_bug.cgi?id=402712
> > >
> > > ... but it has never happened. On the other hand, it is included in the
> > > nss package on Fedora, (optionally) on Gentoo and maybe some other Linux
> > > distros.>
> > > > Or is libnsspem.so part of nss-pem package?
> > >
> > > Currently yes. There is a git repository of the nss-pem source code but
> > > it
> > > needs to be built as part of the nss package in quite a complicated way.
> >
> > ok allready I tried to patch my nss with the nss-pem source code. But
> > make didn't compiled the stuff in the lib/ckfw/pem folder. I'am wondering
> > why?
>
> You need to patch the build system of nss to include the directory into the
> build. This is the one-line patch that Fedora and Gentoo Linux use to build
> it:
>
> http://pkgs.fedoraproject.org/cgit/rpms/nss.git/tree/nss-enable-pem.patch

thank you exactly what I'm looking for.

then I got this error caused by uninitialized variable.

4_glibc_PTH_64_OPT.OBJ/include -I../../../../dist/public/nss -I../../../../dist/private/nss -I../../../../dist/public/nspr pinst.c
| pinst.c: In function 'AddCertificate':
| pinst.c:584:18: error: 'i' may be used uninitialized in this function [-Werror=maybe-uninitialized]
| nickname = getUniquePEMNicknameFromFilename(certfile, i);
| ^
and this:

4_glibc_PTH_64_OPT.OBJ/include -I../../../../dist/public/nss -I../../../../dist/private/nss -I../../../../dist/public/nspr pinst.c
| pinst.c: In function 'AddCertificate':
| pinst.c:624:16: error: 'o' may be used uninitialized in this function [-Werror=maybe-uninitialized]
| nss_ZFreeIf(o);
| ^
| cc1: all warnings being treated as errors

I fixed both with attached patches. I will send them to nss-dev to.

Best Regards,

Oliver

-------------------------------------------------------------------
List admin: https://cool.haxx.se/list/listinfo/curl-library
Etiquette: https://curl.haxx.se/mail/etiquette.html

Received on 2016-03-29