cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: [PATCH] docs/SSLCERTS: update the section about NSS database

From: Kamil Dudka <kdudka_at_redhat.com>
Date: Sun, 03 Aug 2014 23:39:15 +0200

On Friday, August 01, 2014 10:27:57 Von Hawkins wrote:
> >-
> >-Usually these cert databases are empty, but NSS also has built-in CAs
> >which are -provided through a shared library, libnssckbi.so; if you want
> >to use these -built-in CAs, then create a symlink to libnssckbi.so in
> >/etc/pki/nssdb: -ln -s /usr/lib[64]/libnssckbi.so
> >/etc/pki/nssdb/libnssckbi.so
> >+Starting with version 7.19.7, libcurl automatically adds the 'sql:' prefix
> >to +the certdb directory (either the hardcoded default /etc/pki/nssdb or
> >the +directory configured with SSL_DIR environment variable). To check
> >which certdb +format your distribution provides, examine the default
> >certdb location: +/etc/pki/nssdb; the new certdb format can be identified
> >by the filenames +cert9.db, key4.db, pkcs11.txt; filenames of older
> >versions are cert8.db, +key3.db, secmod.db.
>
> I'm just curious, is the symlink functionality no longer valid?

Unfortunately yes, that is exactly what this thread is about:

http://thread.gmane.org/gmane.comp.web.curl.library/43189/focus=43215

Kamil

> I liked
> that the symlink instruction was there in the older version, but it appears
> you didn't keep it in the revised version
>
>
> -Usually these cert databases are empty, but NSS also has built-in CAs which
> are -provided through a shared library, libnssckbi.so; if you want to use
> these -built-in CAs, then create a symlink to libnssckbi.so in
> /etc/pki/nssdb: -ln -s /usr/lib[64]/libnssckbi.so
> /etc/pki/nssdb/libnssckbi.so
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2014-08-03