Name Date Size #Lines LOC

..22-May-2021-

prj/H22-May-2021-

makefile.mkH A D22-May-20214.4 KiB16796

nss.patchH A D22-May-202111.3 KiB290263

nss.patch.mingwH A D22-May-20215.2 KiB144133

nss_bug_1348767.patchH A D22-May-2021780 1511

nss_bug_1437734.patchH A D22-May-20214.5 KiB119109

nss_bug_1438426.patchH A D22-May-2021485 1312

nss_freebsd.patchH A D22-May-2021449 1612

nss_linux.patchH A D22-May-20211.2 KiB3029

nss_macosx.patchH A D22-May-2021878 1716

readme.txtH A D22-May-20213 KiB7659

readme.txt

1Relation between nss, moz, moz_prebuilt
2---------------------------------------
3nss contains the security libraries which are also part of moz. However nss is
4meant to be more current, that is, it to be updated more often. This
5should be easier than updating moz.
6
7When nss is build, it depends on an environment variable (ENABLE_NSS_MODULE)
8which is by default set to YES. In this case nss is build before moz. The nss
9libraries/lib files/headers built in moz are then not delivered. Otherwise they
10would overwrite those from nss. The nss libraries build in moz are then
11removed from mozruntime.zip (build in moz/solver/bin), they are removed from the
12lib directory (for example moz/unxlngi6.pro/lib), and the nss and nspr headers
13are also removed (inc/nss and inc/nspr).  The nss libraries from the nss module
14are then added to mozruntime.zip.
15
16This also applies for moz_prebuilt. Therefore moz and moz_prebuilt must be build
17again after changes have been made to the libraries in the nss module.
18
19Also when moz was updated to use a newer version of mozilla, then one must make
20sure that new files which also belong to nss are not delivered and are removed
21from mozruntime.zip.
22
23Fips 140 and signed libraries
24-------------------------------
25Fips 140 mode is not supported. That is, the *.chk files containing the
26checksums for the cryptographic module are not delivered into solver and will
27not be part of the OOo installation sets.
28
29Signing has been turned off because
30- we change the rpath (install names) after signing which breaks the signatures
31(Mac)
32- sqlite conflicts with the system sqlite when signing which breaks the build
33
34
35libfreebl3
36----------
37Porting to other platforms may require to deliver other variants of
38libfreebl*. The library name varies according to the platform. Changes need to
39be made to
40ooo/moz/extractfiles.mk
41ooo/moz/zipped/makefile.mk
42sun/moz_prebuilt/zipped/makefile.mk
43
44See also
45http://www.mozilla.org/projects/security/pki/nss/tech-notes/tn6.html
46
47
48Windows builds of nss
49---------------------
50To build mozilla on windows you'll need the mozilla build tools
51
52Build requirements containing the link to the build tools:
53https://developer.mozilla.org/en/Windows_Build_Prerequisites#ss2.2
54
55The direct link:
56
57http://ftp.mozilla.org/pub/mozilla/libraries/win32/MozillaBuildSetup-2.2.0.exe
58
59libsqlite3
60----------
61The problem described here was found on Mac with OS 10.6
62NSS cannot use the system sqlite on Mac because the base line is still MacOS
6310.4. That system sqlite is incompatible with the softokn3 in nss which requires
64a later version of sqlite.
65When we used a more current Mac SDK then we could set
66NSS_USE_SYSTEM_SQLITE=1
67to build using the system sqlite.
68
69We cannot deliver sqlite in the lib directory of the solver. This directory is
70used by tools of the build environment. Using the sqlite from NSS breaks the
71tools if they use system libraries which are linked with the system
72sqlite. Therefore we deliver it into lib/sqlite on unix systems.
73
74See also issue
75http://qa.openoffice.org/issues/show_bug.cgi?id=106132
76