linux-from-scratch/glfs
1
0
Fork 0
mirror of https://github.com/Zeckmathederg/glfs.git synced 2025-01-24 23:32:12 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

Rename make-ca page.

Browse Source 
git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@19860 af4574ff-66df-0310-9fd7-8a98e5e911e0
This commit is contained in:
DJ Lucas 2018-02-24 23:05:35 +00:00
parent 4042082069
commit 2198a3224b
17 changed files with 42 additions and 43 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
general/genlib/qca.xml
View File

@ -62,7 +62,7 @@
<bridgehead renderas="sect4">Required</bridgehead>
<para role="required">
<xref linkend="cacerts"/>,
<xref linkend="make-ca"/>,
<xref linkend="cmake"/>,
<xref linkend="qt5"/>, and
<xref linkend="which"/>

2
general/prog/mercurial.xml
View File

@ -198,7 +198,7 @@ EOF</userinput></screen>
disabled extensions, and more information, such as how to enable or
disable them using configuration files.</para>
<para>If you have installed the <xref linkend="cacerts"/> and want
<para>If you have installed <xref linkend="make-ca"/> and want
<application>Mercurial</application> to use them, as the <systemitem
class="username">root</systemitem> user, issue:</para>

4
general/prog/ojdk-conf.xml
View File

@ -75,10 +75,8 @@ mkdir -p /var/cache/man
mandb -c /opt/jdk/man</userinput></screen>
<para>
The installation of the JRE Certificate Authority Certificates (cacerts)
The installation of the JRE certificate authority bundle
is described in the <xref linkend="ojdk-certs"/> section.
If you are using the binary version, those certificates may already be
installed.
</para>
</sect1>

17
general/prog/openjdk.xml
View File

@ -191,7 +191,7 @@
<bridgehead renderas="sect4">Recommended</bridgehead>
<para role="recommended">
<xref linkend="cacerts"/>,
<xref linkend="make-ca"/>,
<xref linkend="giflib"/>,
<xref linkend="lcms2"/>,
<xref linkend="libjpeg"/>,
@ -450,8 +450,8 @@ EOF</userinput></screen>
<para>
<parameter>--with-cacerts-file=/etc/ssl/java/cacerts.jks</parameter>:
Specifies where to find a <filename>cacerts</filename> file,
<filename class="directory">/etc/ssl/java/cacerts</filename> on a BLFS
system. Otherwise, an empty one is created. You can use the
<filename>/etc/ssl/java/</filename> on a BLFS system. Otherwise, an empty
one is created. You can use the
<command>/usr/sbin/make-ca --force</command> command to generate it, once
you have installed the Java binaries.
</para>
@ -501,13 +501,14 @@ EOF</userinput></screen>
CA certificates. Those certificates are located in a file named
<filename>/etc/ssl/java/cacerts.jks</filename>. That file should be
generated using the system PKI trust store. The instructions
on the <xref linkend="cacerts"/> page should be used to update the file
located in <filename>/etc/ssl/java</filename>. Setup a symlink in the
default location as the <systemitem class="username">root</systemitem>
user:
on the <xref linkend="make-ca"/> page should be used to update the file
located in <filename>/etc/ssl/java</filename>. Run the conversion and
setup a symlink in the default location as the <systemitem
class="username">root</systemitem> user:
</para>
<screen role="root"><userinput>ln -sfv /etc/ssl/java/cacerts.jks /opt/jdk/lib/security/cacerts</userinput></screen>
<screen role="root"><userinput>/usr/sbin/make-ca --force &amp;&amp;
ln -sfv /etc/ssl/java/cacerts.jks /opt/jdk/lib/security/cacerts</userinput></screen>
<para>
Use the following commands to check if the <filename>cacerts</filename>

2
general/sysutils/systemd.xml
View File

@ -78,7 +78,7 @@
<bridgehead renderas="sect4">Optional</bridgehead>
<para role="optional">
<xref linkend="cacerts"/>,
<xref linkend="make-ca"/>,
<xref linkend="curl"/>,
<!-- <xref linkend="elfutils"/>, -->
<xref linkend="gnutls"/>,

4
gnome/platform/rest.xml
View File

@ -76,7 +76,7 @@
<bridgehead renderas="sect4">Required</bridgehead>
<para role="required">
<xref linkend="cacerts"/> and
<xref linkend="make-ca"/> and
<xref linkend="libsoup"/>
</para>
@ -125,7 +125,7 @@ make</userinput></screen>
<para>
<parameter>--with-ca-certificates=/etc/ssl/ca-bundle.crt</parameter>: This
switch sets the location of the BLFS <xref linkend="cacerts"/> bundle.
switch sets the location of the BLFS certificate authority bundle.
</para>
<xi:include xmlns:xi="http://www.w3.org/2001/XInclude"

4
networking/netlibs/curl.xml
View File

@ -89,7 +89,7 @@
<bridgehead renderas="sect4">Recommended</bridgehead>
<para role="recommended">
<xref role="runtime" linkend="cacerts"/> (runtime)
<xref role="runtime" linkend="make-ca"/> (runtime)
</para>
<bridgehead renderas="sect4">Optional</bridgehead>
@ -237,7 +237,7 @@ cp -v -R docs/* /usr/share/doc/curl-&curl-version;</userinput></screen>
<para>
<parameter>--with-ca-path=/etc/ssl/certs</parameter>: This
switch sets the location of the BLFS <xref linkend="cacerts"/>.
switch sets the location of the BLFS Certificate Authority store.
</para>
<para>

2
networking/netlibs/glib-networking.xml
View File

@ -83,7 +83,7 @@
<bridgehead renderas="sect4">Recommended</bridgehead>
<para role="recommended">
<xref linkend="cacerts"/> and
<xref linkend="make-ca"/> and
<xref linkend="p11-kit"/>
</para>

2
networking/netlibs/ldns.xml
View File

@ -81,7 +81,7 @@
-->
<bridgehead renderas="sect4">Optional</bridgehead>
<para role="optional">
<xref linkend="cacerts"/> and
<xref linkend="make-ca"/> and
<xref linkend="libpcap"/> (for example programs),
<xref linkend="python2"/> and
<xref linkend="swig"/> (for Python bindings), and

4
networking/netprogs/wget.xml
View File

@ -76,7 +76,7 @@
<bridgehead renderas="sect4">Recommended</bridgehead>
<para role="recommended">
<xref role="runtime" linkend="cacerts"/> (runtime)
<xref role="runtime" linkend="make-ca"/> (runtime)
</para>
<bridgehead renderas="sect4">Optional</bridgehead>
@ -164,7 +164,7 @@ make</userinput></screen>
<!--
<para>
If you have installed the <xref linkend="cacerts"/> and you want
If you have installed <xref linkend="make-ca"/> and you want
<application>Wget</application> to use them, as the
<systemitem class="username">root</systemitem> user:
</para>

2
postlfs/security/gnutls.xml
View File

@ -100,7 +100,7 @@
<bridgehead renderas="sect4">Recommended</bridgehead>
<para role="recommended">
<xref linkend="cacerts"/>,
<xref linkend="make-ca"/>,
<xref linkend="libunistring"/>,
<xref linkend="libtasn1"/>, and
<xref linkend="p11-kit"/>

30
postlfs/security/cacerts.xml → postlfs/security/make-ca.xml
View File

@ -6,23 +6,23 @@
<!ENTITY certhost "https://hg.mozilla.org/">
<!ENTITY certpath "/lib/ckfw/builtins/certdata.txt">
<!ENTITY cacerts-buildsize "6.6 MB (with all runtime deps)">
<!ENTITY cacerts-time "0.3 SBU (with all runtime deps)">
<!ENTITY make-ca-buildsize "6.6 MB (with all runtime deps)">
<!ENTITY make-ca-time "0.3 SBU (with all runtime deps)">
<!ENTITY make-ca-download "https://github.com/djlucas/make-ca/archive/v&make-ca-version;/make-ca-&make-ca-version;.tar.gz">
<!ENTITY make-ca-size "36 KB">
<!ENTITY make-ca-md5sum "4f180b9bf3b11f29d6a79e6022aeae23">
]>
<sect1 id="cacerts" xreflabel="Certificate Authority Certificates">
<?dbhtml filename="cacerts.html"?>
<sect1 id="make-ca" xreflabel="make-ca">
<?dbhtml filename="make-ca.html"?>
<sect1info>
<othername>$LastChangedBy$</othername>
<date>$Date$</date>
</sect1info>
<title>Certificate Authority Certificates</title>
<title>make-ca</title>
<para>Public Key Infrastructure (PKI) is a method to validate the
authenticity of an otherwise unknown entity across untrusted networks. PKI
@ -44,12 +44,12 @@
&lfs82_checked;
<indexterm zone="cacerts">
<primary sortas="a-cacerts">Certificate Authority Certificates</primary>
<indexterm zone="make-ca">
<primary sortas="a-make-ca">make-ca</primary>
</indexterm>
<sect2 role="package">
<title>Introduction to Certificate Authorities</title>
<title>Introduction to make-ca</title>
<bridgehead renderas="sect3">Package Information</bridgehead>
<itemizedlist spacing="compact">
@ -63,14 +63,14 @@
<para>Download MD5 Sum: &make-ca-md5sum;</para>
</listitem>
<listitem>
<para>Estimated disk space required: &cacerts-buildsize;</para>
<para>Estimated disk space required: &make-ca-buildsize;</para>
</listitem>
<listitem>
<para>Estimated build time: &cacerts-time;</para>
<para>Estimated build time: &make-ca-time;</para>
</listitem>
</itemizedlist>
<bridgehead renderas="sect3">Certificate Authority Certificates Dependencies</bridgehead>
<bridgehead renderas="sect3">make-ca Dependencies</bridgehead>
<!--
<bridgehead renderas="sect4">Required</bridgehead>
<para role="required"><xref linkend="openssl"/></para>
@ -84,11 +84,11 @@
</para>
<para condition="html" role="usernotes">User Notes:
<ulink url='&blfs-wiki;/cacerts'/></para>
<ulink url='&blfs-wiki;/make-ca'/></para>
</sect2>
<sect2 role="installation">
<title>Installation of Certificate Authority Certificates</title>
<title>Installation of make-ca</title>
<para>The <application>make-ca</application> script will download and
process the certificates included in the <filename>certdata.txt</filename>
@ -215,13 +215,13 @@ openssl x509 -in class3.crt -text -fingerprint -setalias "CAcert Class 3 root" \
<?dbfo list-presentation="list"?>
<?dbhtml list-presentation="table"?>
<varlistentry id="make-ca">
<varlistentry id="make-ca-bin">
<term><command>make-ca</command></term>
<listitem>
<para>is a shell script that adapts a current version of
<filename>certdata.txt</filename>, and prepares it for use
as the system certificate store.</para>
<indexterm zone="cacerts make-ca">
<indexterm zone="make-ca make-ca">
<primary sortas="b-make-ca">make-ca</primary>
</indexterm>
</listitem>

2
postlfs/security/nss.xml
View File

@ -229,7 +229,7 @@ fi</userinput></screen>
<para>Additionally, for dependent applications that do not use the internal
database (<filename>/usr/lib/libnssckbi.so</filename>), the
<filename>/usr/sbin/make-ca</filename> script, included on the
<xref linkend="cacerts"/> page, will generate a system wide NSS DB.</para>
<xref linkend="make-ca"/> page, will generate a system wide NSS DB.</para>
</sect2>

2
postlfs/security/p11-kit.xml
View File

@ -74,7 +74,7 @@
<bridgehead renderas="sect4">Recommended</bridgehead>
<para role="recommended">
<xref linkend="cacerts"/> and
<xref linkend="make-ca"/> and
<xref linkend="libtasn1"/>
</para>

2
postlfs/security/security.xml
View File

@ -41,7 +41,7 @@ $Date$
"signatures" and compares for files that have been changed.</para>
<xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="vulnerabilities.xml"/>
<xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="cacerts.xml"/>
<xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="make-ca.xml"/>
<!-- sysv only -->
<xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="consolekit.xml"/>

2
x/lib/qt5.xml
View File

@ -88,7 +88,7 @@
<bridgehead renderas="sect4">Recommended</bridgehead>
<para role="recommended">
<xref linkend="alsa-lib"/>,
<xref linkend="cacerts"/>,
<xref linkend="make-ca"/>,
<xref linkend="cups"/>,
<xref linkend="glib2"/>,
<xref linkend="gst10-plugins-base"/> (QtMultimedia backend),

2
xsoft/graphweb/chromium.xml
View File

@ -135,7 +135,7 @@
<bridgehead renderas="sect4">Recommended</bridgehead>
<para role="recommended">
<xref linkend="cacerts"/> (runtime),
<xref linkend="make-ca"/> (runtime),
<!-- <xref linkend="ffmpeg"/>, -->
<xref linkend="flac"/>,
<xref linkend="git"/>,