summaryrefslogtreecommitdiffstats
path: root/meta/recipes-support
diff options
context:
space:
mode:
authorHongxu Jia <hongxu.jia@windriver.com>2018-08-27 23:31:26 +0800
committerRichard Purdie <richard.purdie@linuxfoundation.org>2018-08-29 10:42:48 +0100
commit7eb2ead27a256699cd3158d7a1c98f5aab87f841 (patch)
tree3e7d1ac8201042b849526d8c702da5ba89198501 /meta/recipes-support
parent855e73c613620a188984db69ad780add7bc04eb4 (diff)
downloadpoky-7eb2ead27a256699cd3158d7a1c98f5aab87f841.tar.gz
nss :improve reproducibility
- Explicitly requests the newer database `sql:' rather than retrieved from NSS_DEFAULT_DB_TYPE - Removes build path prefix from pkcs11.txt Refers certutil manual: [certutil manual] -d [prefix]directory Specify the database directory containing the certificate and key database files. certutil supports two types of databases: the legacy security databases (cert8.db, key3.db, and secmod.db) and new SQLite databases (cert9.db, key4.db, and pkcs11.txt). NSS recognizes the following prefixes: sql: requests the newer database dbm: requests the legacy database If no prefix is specified the default type is retrieved from NSS_DEFAULT_DB_TYPE. If NSS_DEFAULT_DB_TYPE is not set then dbm: is the default. [certutil manual] (From OE-Core rev: e9b99efe4b5cf7e810156f7bb55736e01be36a45) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-support')
-rw-r--r--meta/recipes-support/nss/nss_3.38.bb4
1 files changed, 3 insertions, 1 deletions
diff --git a/meta/recipes-support/nss/nss_3.38.bb b/meta/recipes-support/nss/nss_3.38.bb
index f3e5170a89..904b621a07 100644
--- a/meta/recipes-support/nss/nss_3.38.bb
+++ b/meta/recipes-support/nss/nss_3.38.bb
@@ -215,9 +215,11 @@ do_install_append_class-target() {
215 # Create a blank certificate 215 # Create a blank certificate
216 mkdir -p ${D}${sysconfdir}/pki/nssdb/ 216 mkdir -p ${D}${sysconfdir}/pki/nssdb/
217 touch ./empty_password 217 touch ./empty_password
218 certutil -N -d ${D}${sysconfdir}/pki/nssdb/ -f ./empty_password 218 certutil -N -d sql:${D}${sysconfdir}/pki/nssdb/ -f ./empty_password
219 chmod 644 ${D}${sysconfdir}/pki/nssdb/*.db 219 chmod 644 ${D}${sysconfdir}/pki/nssdb/*.db
220 rm ./empty_password 220 rm ./empty_password
221 # Remove build path prefix
222 sed -i "s:${D}::g" ${D}${sysconfdir}/pki/nssdb/pkcs11.txt
221} 223}
222 224
223PACKAGE_WRITE_DEPS += "nss-native" 225PACKAGE_WRITE_DEPS += "nss-native"