Bug#704180: Use p11-kit to replace nssckbi

[Daniel Kahn Gillmor]

On Sun 2019-01-13 19:07:42 +0100, Andreas Metzler wrote:
> The coding would be straightforward afaict.
>
> https://salsa.debian.org/gnutls-team/p11-kit/commits/tmp-704180-divertnss

I like the looks of this, though perhaps we want to name the new package
p11-kit-trust to be more in line with the name given by other distros.

> I have not done any firefox testing apart from "it does not crash",
> though. ;-)

I will try to build and test it soon -- it'd be good to write an
automated test suite too, though i'm not sure how to do that with
firefox.

        --dkg