From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Date: Wed, 10 Jan 2018 03:41:16 +0300 (MSK) From: Ivan Zakharyaschev To: ALT Linux Team development discussions In-Reply-To: <20180110023358.233def1c@sem-notebook> Message-ID: References: <20171221184816.2968172e@sem.office.basealt.ru> <20171222022133.0bbd543c@sem-notebook> <20171229183837.5a52dbdd@sem-notebook> <20180110022238.72078df9@sem-notebook> <20180110023358.233def1c@sem-notebook> User-Agent: Alpine 2.20 (LFD 67 2015-01-07) MIME-Version: 1.0 Content-Type: multipart/mixed; BOUNDARY="1807885841-130640721-1515544876=:7714" Subject: Re: [devel] RFC: ca-certificates a la Fedora X-BeenThere: devel@lists.altlinux.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: ALT Linux Team development discussions List-Id: ALT Linux Team development discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Jan 2018 00:41:17 -0000 Archived-At: List-Archive: List-Post: This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. --1807885841-130640721-1515544876=:7714 Content-Type: text/plain; charset=koi8-r; format=flowed Content-Transfer-Encoding: 8BIT On Wed, 10 Jan 2018, Mikhail Efremov wrote: > Кстати, пакеты firefox-gost и newmoon-base таскают с собой свои > собственные libnss вместе с libnssckbi.so. Я не знаю насколько им > действительно нужна своя libnss, но возможно хотя бы libnssckbi.so > стоит использовать системную. Там почти весь патч как раз на security/nss/lib/ (но не знаю насчёт того, затрагивается ли libnssckbi.so): $ grep '^+++ ' firefox-cryptopro-gost_patch45.patch +++ b/browser/branding/unofficial/branding.nsi Thu Jul 07 18:22:25 2016 +0400 +++ b/browser/branding/unofficial/configure.sh Thu Jul 07 18:22:25 2016 +0400 +++ b/browser/branding/unofficial/locales/en-US/brand.dtd Thu Jul 07 18:22:25 2016 +0400 +++ b/browser/branding/unofficial/locales/en-US/brand.properties Thu Jul 07 18:22:25 2016 +0400 +++ b/browser/installer/windows/nsis/installer.nsi Thu Jul 07 18:22:25 2016 +0400 +++ b/browser/installer/windows/nsis/maintenanceservice_installer.nsi Thu Jul 07 18:22:25 2016 +0400 +++ b/browser/installer/windows/nsis/shared.nsh Thu Jul 07 18:22:25 2016 +0400 +++ b/browser/installer/windows/nsis/uninstaller.nsi Thu Jul 07 18:22:25 2016 +0400 +++ b/netwerk/base/nsICryptoHash.idl Thu Jul 07 18:22:25 2016 +0400 +++ b/netwerk/base/security-prefs.js Thu Jul 07 18:22:25 2016 +0400 +++ b/netwerk/mime/nsMimeTypes.h Thu Jul 07 18:22:25 2016 +0400 +++ b/security/apps/AppTrustDomain.cpp Thu Jul 07 18:22:25 2016 +0400 +++ b/security/apps/AppTrustDomain.h Thu Jul 07 18:22:25 2016 +0400 +++ b/security/certverifier/ExtendedValidation.cpp Thu Jul 07 18:22:25 2016 +0400 +++ b/security/certverifier/NSSCertDBTrustDomain.cpp Thu Jul 07 18:22:25 2016 +0400 +++ b/security/certverifier/NSSCertDBTrustDomain.h Thu Jul 07 18:22:25 2016 +0400 +++ b/security/manager/ssl/SSLServerCertVerification.cpp Thu Jul 07 18:22:25 2016 +0400 +++ b/security/manager/ssl/nsCryptoHash.cpp Thu Jul 07 18:22:25 2016 +0400 +++ b/security/manager/ssl/nsKeygenHandler.cpp Thu Jul 07 18:22:25 2016 +0400 +++ b/security/manager/ssl/nsNSSCallbacks.cpp Thu Jul 07 18:22:25 2016 +0400 +++ b/security/manager/ssl/nsNSSComponent.cpp Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/certdb/certdb.c Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/certdb/certt.h Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/certdb/stanpcertdb.c Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/cryptohi/keyhi.h Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/cryptohi/keythi.h Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/cryptohi/sechash.c Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/cryptohi/sechash.h Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/cryptohi/seckey.c Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/cryptohi/secsign.c Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/cryptohi/secvfy.c Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/nss/nss.def Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/nss/nssinit.c Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/pk11wrap/pk11akey.c Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/pk11wrap/pk11cert.c Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/pk11wrap/pk11mech.c Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/pk11wrap/pk11obj.c Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/pk11wrap/pk11pub.h Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/pk11wrap/pk11skey.c Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/pk11wrap/pk11slot.c Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/pkcs7/secmime.c Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/smime/cmscipher.c Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/smime/cmslocal.h Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/smime/cmspubkey.c Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/smime/cmsrecinfo.c Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/smime/smimeutil.c Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/ssl/derive.c Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/ssl/ssl.def Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/ssl/ssl.h Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/ssl/ssl3con.c Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/ssl/ssl3ext.c Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/ssl/ssl3prot.h Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/ssl/sslenum.c Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/ssl/sslimpl.h Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/ssl/sslinfo.c Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/ssl/sslproto.h Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/ssl/sslsecur.c Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/ssl/sslsock.c Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/ssl/sslt.h Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/util/Makefile Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/util/ciferfam.h Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/util/hasht.h Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/util/pkcs11t.h Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/util/secoid.c Thu Jul 07 18:22:25 2016 +0400 +++ b/security/nss/lib/util/secoidt.h Thu Jul 07 18:22:25 2016 +0400 +++ b/security/pkix/include/pkix/pkixnss.h Thu Jul 07 18:22:25 2016 +0400 +++ b/security/pkix/include/pkix/pkixtypes.h Thu Jul 07 18:22:25 2016 +0400 +++ b/security/pkix/lib/pkixbuild.cpp Thu Jul 07 18:22:25 2016 +0400 +++ b/security/pkix/lib/pkixcheck.cpp Thu Jul 07 18:22:25 2016 +0400 +++ b/security/pkix/lib/pkixder.cpp Thu Jul 07 18:22:25 2016 +0400 +++ b/security/pkix/lib/pkixder.h Thu Jul 07 18:22:25 2016 +0400 +++ b/security/pkix/lib/pkixnss.cpp Thu Jul 07 18:22:25 2016 +0400 +++ b/security/pkix/lib/pkixverify.cpp Thu Jul 07 18:22:25 2016 +0400 +++ b/security/pkix/test/gtest/pkixbuild_tests.cpp Thu Jul 07 18:22:25 2016 +0400 +++ b/security/pkix/test/gtest/pkixcert_signature_algorithm_tests.cpp Thu Jul 07 18:22:25 2016 +0400 +++ b/security/pkix/test/gtest/pkixgtest.h Thu Jul 07 18:22:25 2016 +0400 +++ b/security/pkix/test/gtest/pkixocsp_CreateEncodedOCSPRequest_tests.cpp Thu Jul 07 18:22:25 2016 +0400 $ -- Best regards, Ivan --1807885841-130640721-1515544876=:7714--