Bug#704180: Use p11-kit to replace nssckbi

Daniel Kahn Gillmor dkg at fifthhorseman.net
Wed Jan 9 19:04:35 GMT 2019


On Wed 2019-01-09 16:39:36 +0100, Laurent Bigonville wrote:
> So what is the status of this?
>
> In RHEL 7 they made the switch to p11-kit and libnssckbi.so is an 
> alternative between the file shipped by nss and p11-kit-trust.so shipped 
> by p11-kit (with p11-kit version being the default).
>
> Should we switch debian by default to p11-kit as well?

seems like the maintainers of p11-kit could unilaterally decide to
implement the diversion approach mentioned in
https://bugs.debian.org/704180 with a new binary package, if the nss
folks are reluctant to do it.

I'm cc'ing Andreas here to try to get some feedback -- is this something
that there's interest in for the p11-kit maintainers?

     --dkg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnutls-maint/attachments/20190109/be13fb22/attachment.sig>


More information about the Pkg-gnutls-maint mailing list