summaryrefslogtreecommitdiffstats
path: root/external/nss/README
blob: 6997cea6ca0686966301c16f74d3b873caf8a3a5 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
Contains the Network Security Services (NSS) libraries from Mozilla

== Fips 140 and signed libraries ==

Fips 140 mode is not supported. That is, the *.chk files containing the
checksums for the cryptographic module are not delivered into instdir and will
not be part of the OOo installation sets.

Signing has been turned off because
- we change the rpath (install names)  after signing which breaks the signatures
(Mac)
- sqlite conflicts with the system sqlite when signing which breaks the build

See also
[https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_Tech_Notes/nss_tech_note6]

== libsqlite3 ==

With all supported macOS SDK we use
NSS_USE_SYSTEM_SQLITE=1
to build using the system sqlite.

== system NSS on Linux ==

Note that different Linux distributions use different SONAMEs for the
NSS libraries, so it is not possible to use --with-system-nss and build
a portable generic LO installation set, despite NSS upstream apparently
maintaining ABI compatibility.

Debian Squeeze:
0x000000000000000e (SONAME)             Library soname: [libnss3.so.1d]
Fedora 20:
0x000000000000000e (SONAME)             Library soname: [libnss3.so]

For the record, the LSB specified SONAME is libnss3.so
http://refspecs.linuxfoundation.org/LSB_4.1.0/LSB-Core-generic/LSB-Core-generic/libnss3.html