Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
P
p11-kit
Project overview
Project overview
Details
Activity
Releases
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
pkg
obcore
p11-kit
Commits
a5aea6cc
Commit
a5aea6cc
authored
Aug 06, 2019
by
Eric Vidal
💬
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
upgpkg: 0.23.16.1-2
parent
87eaa40d
Changes
2
Hide whitespace changes
Inline
Side-by-side
Showing
2 changed files
with
171 additions
and
0 deletions
+171
-0
version/0.23.16.1-2/0001-Build-and-install-libnssckbi-p11-kit.so.patch
...16.1-2/0001-Build-and-install-libnssckbi-p11-kit.so.patch
+76
-0
version/0.23.16.1-2/PKGBUILD
version/0.23.16.1-2/PKGBUILD
+95
-0
No files found.
version/0.23.16.1-2/0001-Build-and-install-libnssckbi-p11-kit.so.patch
0 → 100644
View file @
a5aea6cc
From 8a1c9bb1170213498d3386d2a5c2882868e4f535 Mon Sep 17 00:00:00 2001
Message-Id: <8a1c9bb1170213498d3386d2a5c2882868e4f535.1548110948.git.jan.steffens@gmail.com>
From: "Jan Alexander Steffens (heftig)" <jan.steffens@gmail.com>
Date: Thu, 1 Mar 2018 16:20:59 +0100
Subject: [PATCH] Build and install libnssckbi-p11-kit.so
Create an additional library which is a copy of p11-kit-trust.so but
uses the same label for root certs as libnssckbi.so:
"Builtin Object Token" instead of "Default Trust".
https://bugs.freedesktop.org/show_bug.cgi?id=66161
---
trust/Makefile.am | 14 ++++++++++++++
trust/module.c | 12 +++++++++++-
2 files changed, 25 insertions(+), 1 deletion(-)
diff --git a/trust/Makefile.am b/trust/Makefile.am
index c4a65a3..303e1d0 100644
--- a/trust/Makefile.am
+++ b/trust/Makefile.am
@@ -66,6 +66,20 @@
p11_kit_trust_la_LDFLAGS = \
p11_kit_trust_la_SOURCES = $(TRUST_SRCS) trust/module-init.c
+libnssckbi_compatdir = $(libdir)
+libnssckbi_compat_LTLIBRARIES = \
+ libnssckbi-p11-kit.la
+
+libnssckbi_p11_kit_la_CFLAGS = \
+ -DLIBNSSCKBI_COMPAT \
+ $(p11_kit_trust_la_CFLAGS)
+
+libnssckbi_p11_kit_la_LIBADD = $(p11_kit_trust_la_LIBADD)
+
+libnssckbi_p11_kit_la_LDFLAGS = $(p11_kit_trust_la_LDFLAGS)
+
+libnssckbi_p11_kit_la_SOURCES = $(p11_kit_trust_la_SOURCES)
+
libtrust_testable_la_LDFLAGS = \
-no-undefined
diff --git a/trust/module.c b/trust/module.c
index 1722340..e776270 100644
--- a/trust/module.c
+++ b/trust/module.c
@@ -201,7 +201,11 @@
create_tokens_inlock (p11_array *tokens,
int flags;
} labels[] = {
{ "~/", "User Trust", P11_TOKEN_FLAG_NONE },
+#ifdef LIBNSSCKBI_COMPAT
+ { P11_DEFAULT_TRUST_PREFIX, "Builtin Object Token", P11_TOKEN_FLAG_WRITE_PROTECTED },
+#else
{ P11_DEFAULT_TRUST_PREFIX, "Default Trust", P11_TOKEN_FLAG_WRITE_PROTECTED },
+#endif
{ P11_SYSTEM_TRUST_PREFIX, "System Trust", P11_TOKEN_FLAG_NONE },
{ NULL },
};
@@ -534,8 +538,14 @@
sys_C_GetSlotInfo (CK_SLOT_ID id,
info->flags = CKF_TOKEN_PRESENT;
memcpy ((char*)info->manufacturerID, MANUFACTURER_ID, 32);
+#ifdef LIBNSSCKBI_COMPAT
+ /* Change description to match libnssckbi so HPKP works in Chromium */
+ if (strcmp (p11_token_get_label (token), "Builtin Object Token") == 0)
+ path = "NSS Builtin Objects";
+ else
+#endif
+ path = p11_token_get_path (token);
/* If too long, copy the first 64 characters into buffer */
- path = p11_token_get_path (token);
length = strlen (path);
if (length > sizeof (info->slotDescription))
length = sizeof (info->slotDescription);
--
2.20.1
version/0.23.16.1-2/PKGBUILD
0 → 100644
View file @
a5aea6cc
# Obarun : 66 init/supervisor
# Maintainer : Eric Vidal <eric@obarun.org>
# Maintainer : Jean-Michel T.Dydak <jean-michel@obarun.org>
# PkgSource : url="https://framagit.org/pkg/obcore/p11-kit"
#-----------------------------------------------------------------------------------------------
#-----------------------------------------| DESCRIPTION |---------------------------------------
pkgname
=
p11-kit
pkgdesc
=
"Provides a way to load and enumerate PKCS#11 modules"
pkgver
=
0.23.16.1
pkgrel
=
2
url
=
"https://p11-glue.freedesktop.org"
track
=
"tag"
target
=
"
${
pkgver
}
"
source
=(
"git+https://github.com/p11-glue/p11-kit#
${
track
}
=
${
target
}
"
0001-Build-and-install-libnssckbi-p11-kit.so.patch
)
#-------------------------------------| BUILD CONFIGURATION |-----------------------------------
makedepends
=(
'gtk-doc'
'git'
)
#--------------------------------------| BUILD PREPARATION |------------------------------------
prepare
()
{
cd
p11-kit
# Build and install an additional library (libnssckbi-p11-kit.so) which
# is a copy of p11-kit-trust.so but uses the same label for root certs as
# libnssckbi.so ("Builtin Object Token" instead of "Default Trust")
# https://bugs.freedesktop.org/show_bug.cgi?id=66161
patch
-Np1
-i
../0001-Build-and-install-libnssckbi-p11-kit.so.patch
NOCONFIGURE
=
1 ./autogen.sh
}
#--------------------------------------------| BUILD |------------------------------------------
build
()
{
cd
p11-kit
./configure
--prefix
=
/usr
\
--sysconfdir
=
/etc
\
--localstatedir
=
/var
\
--libexecdir
=
/usr/lib
\
--enable-doc
\
--with-module-path
=
/usr/lib/pkcs11
\
--with-trust-paths
=
/etc/ca-certificates/trust-source:/usr/share/ca-certificates/trust-source
\
--without-systemd
make
}
#--------------------------------------------| CHECK |------------------------------------------
check
()
{
cd
p11-kit
make check
}
#-------------------------------------------| PACKAGE |-----------------------------------------
package
()
{
cd
p11-kit
make
DESTDIR
=
"
$pkgdir
"
install
install
-Dt
"
$pkgdir
/usr/share/licenses/
$pkgname
"
-m644
COPYING
ln
-srf
"
$pkgdir
/usr/bin/update-ca-trust"
"
$pkgdir
/usr/lib/p11-kit/trust-extract-compat"
}
#------------------------------------| INSTALL CONFIGURATION |----------------------------------
arch
=(
x86_64
)
depends
=(
'glibc'
'libtasn1'
'libffi'
)
#-------------------------------------| SECURITY AND LICENCE |----------------------------------
sha256sums
=(
'SKIP'
'a2222e092b2c9ae2d2c344b3268f8f86e7b424973433d49653f72e6c51fa54cf'
)
license
=(
BSD
)
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment