Re: Compile without CA

[Nicolás Reynolds]

El 01/11/10 08:28, Emmanuel Revah dijo:
> 
> Le Lun 1 novembre 2010 16:38, Emmanuel Revah a écrit :
> >
> > Le Lun 1 novembre 2010 15:29, Giuseppe Scrivano a écrit :
> >> have you tried to use an empty certdata.txt and regenerating certdata.c?
> >>
> >> I am not sure that it works, but you can try:
> >>
> >> printf "" > security/nss/lib/ckfw/builtins/certdata.txt
> >> make -C security/nss/lib/ckfw/builtins/ generate
> >>
> >> I haven't tried to build icecat without any CAs, please let us know if
> >> it will work for you.
> >>
> >> Cheers,
> >> Giuseppe
> >>
> >
> > Thanks Giuseppe,
> >
> > I will try that once I get a chance and I'll let us know how it turned
> > out.
> >
> >
> 
> 
> I tried that but does not seem to work.  I might give it another go
> sometime (I am known to have PEBKAC issues), while making sure to delete
> all files copied at 'make install', did not find a 'make uninstall' but it
> does seem like the install deletes first any old files.  I did use the
> same version as compiled previous (in case it's pertinent).

I'm checking in my system (Arch/Parabola) and it seems that CAs are only
installed with the ca-certificates package. No CA certificate on
firefox, icecat nor xulrunner packages.

In Arch it would be easy to package an empty ca-certificates package
that replaces the current one...

Have you check this project? http://web.monkeysphere.info/

-- 
Salud!
Nicolás Reynolds,
xmpp:address@hidden
omb:http://identi.ca/fauno
blog:http://selfdandi.com.ar/
gnu/linux user #455044

http://librecultivo.org.ar
http://parabolagnulinux.org

pgpoTH6h4Oyok.pgp
Description: PGP signature