Bug#855879: Please add blapi.h to libnss3-dev

[Timo Aaltonen]

Timo Aaltonen kirjoitti 21.12.2017 klo 11:43:
> Hi, I need nss-pem for certmonger which is used on a FreeIPA client to
> refresh certificates. Without it shipping FreeIPA server with a CA is
> pointless.
> 
> Six months have passed, how about just merging this patch? It wouldn't
> affect packages using libnss3-dev.

It's not just freeipa client, setting up current freeipa server fails if
libnsspem.so is not available. https://pagure.io/freeipa/issue/7422

Upstream/nss-pem folks are quite clear that nssb can't be made dynamic,
and they won't touch the others either. So while nss-pem could
technically just copy the necessary headers, it would still require the
libs from nss..
https://bugzilla.mozilla.org/show_bug.cgi?id=1429692

I've filed a bug on Ubuntu to add libnss3-pkcs11-dev
https://bugs.launchpad.net/ubuntu/+source/nss/+bug/1751140

because bionic can't wait any longer.


-- 
t