Bug#704180: p11-kit: provide package that diverts libnssckbi.so and replaces it with p11-kit-trust.so

Sam Morris sam at robots.org.uk
Fri Mar 3 14:43:48 GMT 2023


Package: p11-kit
Version: 0.24.1-2
Followup-For: Bug #704180
X-Debbugs-Cc: sam at robots.org.uk
Control: tag -1 + patch

FYI, the file paths in the original bug report are no longer accurate
for Debian 12 ("bookworm").

  Old path: /usr/lib/x86_64-linux-gnu/nss/libnssckbi.so
  New path: /usr/lib/x86_64-linux-gnu/libnssckbi.so

Commands to divert the original file and replace it with a symlink:

  # dpkg-divert --add --rename /usr/lib/x86_64-linux-gnu/libnssckbi.so
  # ln -sr /usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so /usr/lib/x86_64-linux-gnu/libnssckbi.so

Commands to clean up the old diversion:

  # dpkg-divert --rename --remove /usr/lib/x86_64-linux-gnu/nss/libnssckbi.so
  # dpkg -S /usr/lib/x86_64-linux-gnu/nss/libnssckbi.so
    ... output should show that this is no longer owned by any package
  # rm /usr/lib/x86_64-linux-gnu/nss/libnssckbi.so

-- System Information:
Debian Release: 11.6
  APT prefers stable-updates
  APT policy: (570, 'stable-updates'), (570, 'stable-security'), (570, 'stable-debug'), (570, 'stable'), (550, 'testing-debug'), (550, 'testing'), (530, 'unstable-debug'), (530, 'unstable'), (1, 'experimental-debug'), (1, 'experimental')
merged-usr: no
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.1.0-3-amd64 (SMP w/4 CPU threads; PREEMPT)
Kernel taint flags: TAINT_USER
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB:en
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: SELinux: enabled - Mode: Permissive - Policy name: default

Versions of packages p11-kit depends on:
ii  libc6            2.36-8
ii  libp11-kit0      0.24.1-2
ii  libtasn1-6       4.16.0-2+deb11u1
ii  p11-kit-modules  0.24.1-2

p11-kit recommends no packages.

p11-kit suggests no packages.

-- no debconf information



More information about the Pkg-gnutls-maint mailing list