[devel] RFC: ca-certificates a la Fedora

[Ivan Zakharyaschev]

On Wed, 10 Jan 2018, Mikhail Efremov wrote:

> Кстати, пакеты firefox-gost и newmoon-base таскают с собой свои
> собственные libnss вместе с libnssckbi.so. Я не знаю насколько им
> действительно нужна своя libnss, но возможно хотя бы libnssckbi.so
> стоит использовать системную.

Там почти весь патч как раз на security/nss/lib/ (но не знаю насчёт 
того, затрагивается ли libnssckbi.so):

$ grep '^+++ ' firefox-cryptopro-gost_patch45.patch
+++ b/browser/branding/unofficial/branding.nsi	Thu Jul 07 18:22:25 2016 
+0400
+++ b/browser/branding/unofficial/configure.sh	Thu Jul 07 18:22:25 2016 
+0400
+++ b/browser/branding/unofficial/locales/en-US/brand.dtd	Thu Jul 07 
18:22:25 2016 +0400
+++ b/browser/branding/unofficial/locales/en-US/brand.properties 
Thu Jul 07 18:22:25 2016 +0400
+++ b/browser/installer/windows/nsis/installer.nsi	Thu Jul 07 
18:22:25 2016 +0400
+++ b/browser/installer/windows/nsis/maintenanceservice_installer.nsi 
Thu Jul 07 18:22:25 2016 +0400
+++ b/browser/installer/windows/nsis/shared.nsh	Thu Jul 07 18:22:25 2016 
+0400
+++ b/browser/installer/windows/nsis/uninstaller.nsi	Thu Jul 07 
18:22:25 2016 +0400
+++ b/netwerk/base/nsICryptoHash.idl	Thu Jul 07 18:22:25 2016 +0400
+++ b/netwerk/base/security-prefs.js	Thu Jul 07 18:22:25 2016 +0400
+++ b/netwerk/mime/nsMimeTypes.h	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/apps/AppTrustDomain.cpp	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/apps/AppTrustDomain.h	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/certverifier/ExtendedValidation.cpp	Thu Jul 07 
18:22:25 2016 +0400
+++ b/security/certverifier/NSSCertDBTrustDomain.cpp	Thu Jul 07 
18:22:25 2016 +0400
+++ b/security/certverifier/NSSCertDBTrustDomain.h	Thu Jul 07 
18:22:25 2016 +0400
+++ b/security/manager/ssl/SSLServerCertVerification.cpp	Thu Jul 07 
18:22:25 2016 +0400
+++ b/security/manager/ssl/nsCryptoHash.cpp	Thu Jul 07 18:22:25 2016 
+0400
+++ b/security/manager/ssl/nsKeygenHandler.cpp	Thu Jul 07 18:22:25 2016 
+0400
+++ b/security/manager/ssl/nsNSSCallbacks.cpp	Thu Jul 07 18:22:25 2016 
+0400
+++ b/security/manager/ssl/nsNSSComponent.cpp	Thu Jul 07 18:22:25 2016 
+0400
+++ b/security/nss/lib/certdb/certdb.c	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/certdb/certt.h	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/certdb/stanpcertdb.c	Thu Jul 07 18:22:25 2016 
+0400
+++ b/security/nss/lib/cryptohi/keyhi.h	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/cryptohi/keythi.h	Thu Jul 07 18:22:25 2016 
+0400
+++ b/security/nss/lib/cryptohi/sechash.c	Thu Jul 07 18:22:25 2016 
+0400
+++ b/security/nss/lib/cryptohi/sechash.h	Thu Jul 07 18:22:25 2016 
+0400
+++ b/security/nss/lib/cryptohi/seckey.c	Thu Jul 07 18:22:25 2016 
+0400
+++ b/security/nss/lib/cryptohi/secsign.c	Thu Jul 07 18:22:25 2016 
+0400
+++ b/security/nss/lib/cryptohi/secvfy.c	Thu Jul 07 18:22:25 2016 
+0400
+++ b/security/nss/lib/nss/nss.def	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/nss/nssinit.c	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/pk11wrap/pk11akey.c	Thu Jul 07 18:22:25 2016 
+0400
+++ b/security/nss/lib/pk11wrap/pk11cert.c	Thu Jul 07 18:22:25 2016 
+0400
+++ b/security/nss/lib/pk11wrap/pk11mech.c	Thu Jul 07 18:22:25 2016 
+0400
+++ b/security/nss/lib/pk11wrap/pk11obj.c	Thu Jul 07 18:22:25 2016 
+0400
+++ b/security/nss/lib/pk11wrap/pk11pub.h	Thu Jul 07 18:22:25 2016 
+0400
+++ b/security/nss/lib/pk11wrap/pk11skey.c	Thu Jul 07 18:22:25 2016 
+0400
+++ b/security/nss/lib/pk11wrap/pk11slot.c	Thu Jul 07 18:22:25 2016 
+0400
+++ b/security/nss/lib/pkcs7/secmime.c	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/smime/cmscipher.c	Thu Jul 07 18:22:25 2016 
+0400
+++ b/security/nss/lib/smime/cmslocal.h	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/smime/cmspubkey.c	Thu Jul 07 18:22:25 2016 
+0400
+++ b/security/nss/lib/smime/cmsrecinfo.c	Thu Jul 07 18:22:25 2016 
+0400
+++ b/security/nss/lib/smime/smimeutil.c	Thu Jul 07 18:22:25 2016 
+0400
+++ b/security/nss/lib/ssl/derive.c	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/ssl/ssl.def	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/ssl/ssl.h	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/ssl/ssl3con.c	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/ssl/ssl3ext.c	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/ssl/ssl3prot.h	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/ssl/sslenum.c	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/ssl/sslimpl.h	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/ssl/sslinfo.c	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/ssl/sslproto.h	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/ssl/sslsecur.c	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/ssl/sslsock.c	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/ssl/sslt.h	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/util/Makefile	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/util/ciferfam.h	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/util/hasht.h	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/util/pkcs11t.h	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/util/secoid.c	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/nss/lib/util/secoidt.h	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/pkix/include/pkix/pkixnss.h	Thu Jul 07 18:22:25 2016 
+0400
+++ b/security/pkix/include/pkix/pkixtypes.h	Thu Jul 07 18:22:25 2016 
+0400
+++ b/security/pkix/lib/pkixbuild.cpp	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/pkix/lib/pkixcheck.cpp	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/pkix/lib/pkixder.cpp	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/pkix/lib/pkixder.h	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/pkix/lib/pkixnss.cpp	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/pkix/lib/pkixverify.cpp	Thu Jul 07 18:22:25 2016 +0400
+++ b/security/pkix/test/gtest/pkixbuild_tests.cpp	Thu Jul 07 
18:22:25 2016 +0400
+++ b/security/pkix/test/gtest/pkixcert_signature_algorithm_tests.cpp 
Thu Jul 07 18:22:25 2016 +0400
+++ b/security/pkix/test/gtest/pkixgtest.h	Thu Jul 07 18:22:25 2016 
+0400
+++ b/security/pkix/test/gtest/pkixocsp_CreateEncodedOCSPRequest_tests.cpp 
Thu Jul 07 18:22:25 2016 +0400
$


-- 
Best regards,
Ivan