From: Ivan Zakharyaschev <imz@altlinux.org>
To: ALT Linux Team development discussions <devel@lists.altlinux.org>
Subject: Re: [devel] RFC: ca-certificates a la Fedora
Date: Wed, 10 Jan 2018 03:41:16 +0300 (MSK)
Message-ID: <alpine.LFD.2.20.1801100339150.7714@imap.altlinux.org> (raw)
In-Reply-To: <20180110023358.233def1c@sem-notebook>
[-- Attachment #1: Type: text/plain, Size: 6185 bytes --]
On Wed, 10 Jan 2018, Mikhail Efremov wrote:
> Кстати, пакеты firefox-gost и newmoon-base таскают с собой свои
> собственные libnss вместе с libnssckbi.so. Я не знаю насколько им
> действительно нужна своя libnss, но возможно хотя бы libnssckbi.so
> стоит использовать системную.
Там почти весь патч как раз на security/nss/lib/ (но не знаю насчёт
того, затрагивается ли libnssckbi.so):
$ grep '^+++ ' firefox-cryptopro-gost_patch45.patch
+++ b/browser/branding/unofficial/branding.nsi Thu Jul 07 18:22:25 2016
+0400
+++ b/browser/branding/unofficial/configure.sh Thu Jul 07 18:22:25 2016
+0400
+++ b/browser/branding/unofficial/locales/en-US/brand.dtd Thu Jul 07
18:22:25 2016 +0400
+++ b/browser/branding/unofficial/locales/en-US/brand.properties
Thu Jul 07 18:22:25 2016 +0400
+++ b/browser/installer/windows/nsis/installer.nsi Thu Jul 07
18:22:25 2016 +0400
+++ b/browser/installer/windows/nsis/maintenanceservice_installer.nsi
Thu Jul 07 18:22:25 2016 +0400
+++ b/browser/installer/windows/nsis/shared.nsh Thu Jul 07 18:22:25 2016
+0400
+++ b/browser/installer/windows/nsis/uninstaller.nsi Thu Jul 07
18:22:25 2016 +0400
+++ b/netwerk/base/nsICryptoHash.idl Thu Jul 07 18:22:25 2016 +0400
+++ b/netwerk/base/security-prefs.js Thu Jul 07 18:22:25 2016 +0400
+++ b/netwerk/mime/nsMimeTypes.h Thu Jul 07 18:22:25 2016 +0400
+++ b/security/apps/AppTrustDomain.cpp Thu Jul 07 18:22:25 2016 +0400
+++ b/security/apps/AppTrustDomain.h Thu Jul 07 18:22:25 2016 +0400
+++ b/security/certverifier/ExtendedValidation.cpp Thu Jul 07
18:22:25 2016 +0400
+++ b/security/certverifier/NSSCertDBTrustDomain.cpp Thu Jul 07
18:22:25 2016 +0400
+++ b/security/certverifier/NSSCertDBTrustDomain.h Thu Jul 07
18:22:25 2016 +0400
+++ b/security/manager/ssl/SSLServerCertVerification.cpp Thu Jul 07
18:22:25 2016 +0400
+++ b/security/manager/ssl/nsCryptoHash.cpp Thu Jul 07 18:22:25 2016
+0400
+++ b/security/manager/ssl/nsKeygenHandler.cpp Thu Jul 07 18:22:25 2016
+0400
+++ b/security/manager/ssl/nsNSSCallbacks.cpp Thu Jul 07 18:22:25 2016
+0400
+++ b/security/manager/ssl/nsNSSComponent.cpp Thu Jul 07 18:22:25 2016
+0400
+++ b/security/nss/lib/certdb/certdb.c Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/certdb/certt.h Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/certdb/stanpcertdb.c Thu Jul 07 18:22:25 2016
+0400
+++ b/security/nss/lib/cryptohi/keyhi.h Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/cryptohi/keythi.h Thu Jul 07 18:22:25 2016
+0400
+++ b/security/nss/lib/cryptohi/sechash.c Thu Jul 07 18:22:25 2016
+0400
+++ b/security/nss/lib/cryptohi/sechash.h Thu Jul 07 18:22:25 2016
+0400
+++ b/security/nss/lib/cryptohi/seckey.c Thu Jul 07 18:22:25 2016
+0400
+++ b/security/nss/lib/cryptohi/secsign.c Thu Jul 07 18:22:25 2016
+0400
+++ b/security/nss/lib/cryptohi/secvfy.c Thu Jul 07 18:22:25 2016
+0400
+++ b/security/nss/lib/nss/nss.def Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/nss/nssinit.c Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/pk11wrap/pk11akey.c Thu Jul 07 18:22:25 2016
+0400
+++ b/security/nss/lib/pk11wrap/pk11cert.c Thu Jul 07 18:22:25 2016
+0400
+++ b/security/nss/lib/pk11wrap/pk11mech.c Thu Jul 07 18:22:25 2016
+0400
+++ b/security/nss/lib/pk11wrap/pk11obj.c Thu Jul 07 18:22:25 2016
+0400
+++ b/security/nss/lib/pk11wrap/pk11pub.h Thu Jul 07 18:22:25 2016
+0400
+++ b/security/nss/lib/pk11wrap/pk11skey.c Thu Jul 07 18:22:25 2016
+0400
+++ b/security/nss/lib/pk11wrap/pk11slot.c Thu Jul 07 18:22:25 2016
+0400
+++ b/security/nss/lib/pkcs7/secmime.c Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/smime/cmscipher.c Thu Jul 07 18:22:25 2016
+0400
+++ b/security/nss/lib/smime/cmslocal.h Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/smime/cmspubkey.c Thu Jul 07 18:22:25 2016
+0400
+++ b/security/nss/lib/smime/cmsrecinfo.c Thu Jul 07 18:22:25 2016
+0400
+++ b/security/nss/lib/smime/smimeutil.c Thu Jul 07 18:22:25 2016
+0400
+++ b/security/nss/lib/ssl/derive.c Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/ssl/ssl.def Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/ssl/ssl.h Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/ssl/ssl3con.c Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/ssl/ssl3ext.c Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/ssl/ssl3prot.h Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/ssl/sslenum.c Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/ssl/sslimpl.h Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/ssl/sslinfo.c Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/ssl/sslproto.h Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/ssl/sslsecur.c Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/ssl/sslsock.c Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/ssl/sslt.h Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/util/Makefile Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/util/ciferfam.h Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/util/hasht.h Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/util/pkcs11t.h Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/util/secoid.c Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/util/secoidt.h Thu Jul 07 18:22:25 2016 +0400
+++ b/security/pkix/include/pkix/pkixnss.h Thu Jul 07 18:22:25 2016
+0400
+++ b/security/pkix/include/pkix/pkixtypes.h Thu Jul 07 18:22:25 2016
+0400
+++ b/security/pkix/lib/pkixbuild.cpp Thu Jul 07 18:22:25 2016 +0400
+++ b/security/pkix/lib/pkixcheck.cpp Thu Jul 07 18:22:25 2016 +0400
+++ b/security/pkix/lib/pkixder.cpp Thu Jul 07 18:22:25 2016 +0400
+++ b/security/pkix/lib/pkixder.h Thu Jul 07 18:22:25 2016 +0400
+++ b/security/pkix/lib/pkixnss.cpp Thu Jul 07 18:22:25 2016 +0400
+++ b/security/pkix/lib/pkixverify.cpp Thu Jul 07 18:22:25 2016 +0400
+++ b/security/pkix/test/gtest/pkixbuild_tests.cpp Thu Jul 07
18:22:25 2016 +0400
+++ b/security/pkix/test/gtest/pkixcert_signature_algorithm_tests.cpp
Thu Jul 07 18:22:25 2016 +0400
+++ b/security/pkix/test/gtest/pkixgtest.h Thu Jul 07 18:22:25 2016
+0400
+++ b/security/pkix/test/gtest/pkixocsp_CreateEncodedOCSPRequest_tests.cpp
Thu Jul 07 18:22:25 2016 +0400
$
--
Best regards,
Ivan
next prev parent reply other threads:[~2018-01-10 0:41 UTC|newest]
Thread overview: 37+ messages / expand[flat|nested] mbox.gz Atom feed top
2017-12-21 15:48 Mikhail Efremov
2017-12-21 23:21 ` Mikhail Efremov
2017-12-29 15:38 ` Mikhail Efremov
2017-12-29 15:53 ` Dmitry V. Levin
2017-12-29 16:08 ` Dmitry V. Levin
2017-12-29 16:29 ` Mikhail Efremov
2018-01-09 23:22 ` Mikhail Efremov
2018-01-09 23:33 ` Mikhail Efremov
2018-01-10 0:41 ` Ivan Zakharyaschev [this message]
2017-12-22 0:36 ` Alexey Gladkov
2017-12-22 1:28 ` Dmitry V. Levin
2017-12-22 2:26 ` Alexey Gladkov
2017-12-22 16:33 ` Mikhail Efremov
2017-12-22 22:37 ` Dmitry V. Levin
2017-12-22 23:53 ` Alexey Gladkov
2017-12-22 23:58 ` Dmitry V. Levin
2017-12-23 0:30 ` Alexey Gladkov
2017-12-23 0:05 ` Alexey Gladkov
2017-12-23 0:22 ` Dmitry V. Levin
2017-12-23 0:35 ` Alexey Gladkov
2017-12-23 0:58 ` Dmitry V. Levin
2017-12-23 1:07 ` Alexey Gladkov
2017-12-23 11:54 ` Mikhail Efremov
2017-12-23 12:00 ` Dmitry V. Levin
2017-12-23 23:58 ` Mikhail Efremov
2017-12-24 0:04 ` [devel] RFC: *-install-test Dmitry V. Levin
2017-12-24 1:05 ` Alexey Gladkov
2017-12-24 1:09 ` Dmitry V. Levin
2018-01-06 23:22 ` Dmitry V. Levin
2018-01-07 0:23 ` Alexey Tourbin
2018-01-07 0:46 ` Dmitry V. Levin
2018-01-07 6:25 ` Alexey Tourbin
2018-01-07 10:49 ` Dmitry V. Levin
2017-12-24 10:08 ` [devel] check_*_pkg? Was: " Ivan Zakharyaschev
2017-12-23 11:21 ` [devel] RFC: ca-certificates a la Fedora Mikhail Efremov
2017-12-23 11:58 ` Dmitry V. Levin
2017-12-23 14:54 ` Alexey V. Vissarionov
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=alpine.LFD.2.20.1801100339150.7714@imap.altlinux.org \
--to=imz@altlinux.org \
--cc=devel@lists.altlinux.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
ALT Linux Team development discussions
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/devel/0 devel/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 devel devel/ http://lore.altlinux.org/devel \
devel@altlinux.org devel@altlinux.ru devel@lists.altlinux.org devel@lists.altlinux.ru devel@linux.iplabs.ru mandrake-russian@linuxteam.iplabs.ru sisyphus@linuxteam.iplabs.ru
public-inbox-index devel
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.devel
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git