Bug#704180: Use p11-kit to replace nssckbi

[Andreas Metzler]

On 2019-01-11 Daniel Kahn Gillmor <dkg at fifthhorseman.net> wrote:
> On Thu 2019-01-10 21:48:22 +0000, David Woodhouse wrote:
>> On Thu, 2019-01-10 at 15:53 -0500, Daniel Kahn Gillmor wrote:
>>> what's the advantage of using alternatives instead of a package-
>>> specific displacement?

>> None really, as long as you put it in a separate p11-kit-trust package
>> as Fedora/RHEL do.

>> You don't want installation of the p11-kit package itself to trigger
>> the replacement, necessarily. Lots of other things use p11-kit.

> yes, agreed, it would be a separate and distinct binary package, not
> p11-kit on its own.

The coding would be straightforward afaict.

https://salsa.debian.org/gnutls-team/p11-kit/commits/tmp-704180-divertnss

I have not done any firefox testing apart from "it does not crash",
though. ;-)

cu Andreas

-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'