1cdf0e10cSrcweirRelation between nss, moz, moz_prebuilt 2cdf0e10cSrcweir--------------------------------------- 3c38ced1bSHerbert Dürrnss contains the security libraries which are also part of moz. However nss is 4c38ced1bSHerbert Dürrmeant to be more current, that is, it to be updated more often. This 5c38ced1bSHerbert Dürrshould be easier than updating moz. 6cdf0e10cSrcweir 7c38ced1bSHerbert DürrWhen nss is build, it depends on an environment variable (ENABLE_NSS_MODULE) 8c38ced1bSHerbert Dürrwhich is by default set to YES. In this case nss is build before moz. The nss 9cdf0e10cSrcweirlibraries/lib files/headers built in moz are then not delivered. Otherwise they 10c38ced1bSHerbert Dürrwould overwrite those from nss. The nss libraries build in moz are then 11cdf0e10cSrcweirremoved from mozruntime.zip (build in moz/solver/bin), they are removed from the 12cdf0e10cSrcweirlib directory (for example moz/unxlngi6.pro/lib), and the nss and nspr headers 13cdf0e10cSrcweirare also removed (inc/nss and inc/nspr). The nss libraries from the nss module 14cdf0e10cSrcweirare then added to mozruntime.zip. 15cdf0e10cSrcweir 16cdf0e10cSrcweirThis also applies for moz_prebuilt. Therefore moz and moz_prebuilt must be build 17cdf0e10cSrcweiragain after changes have been made to the libraries in the nss module. 18cdf0e10cSrcweir 19cdf0e10cSrcweirAlso when moz was updated to use a newer version of mozilla, then one must make 20cdf0e10cSrcweirsure that new files which also belong to nss are not delivered and are removed 21cdf0e10cSrcweirfrom mozruntime.zip. 22cdf0e10cSrcweir 23cdf0e10cSrcweirFips 140 and signed libraries 24cdf0e10cSrcweir------------------------------- 25cdf0e10cSrcweirFips 140 mode is not supported. That is, the *.chk files containing the 26cdf0e10cSrcweirchecksums for the cryptographic module are not delivered into solver and will 27cdf0e10cSrcweirnot be part of the OOo installation sets. 28cdf0e10cSrcweir 29cdf0e10cSrcweirSigning has been turned off because 30c38ced1bSHerbert Dürr- we change the rpath (install names) after signing which breaks the signatures 31cdf0e10cSrcweir(Mac) 32cdf0e10cSrcweir- sqlite conflicts with the system sqlite when signing which breaks the build 33cdf0e10cSrcweir 34cdf0e10cSrcweir 35cdf0e10cSrcweirlibfreebl3 36cdf0e10cSrcweir---------- 37cdf0e10cSrcweirPorting to other platforms may require to deliver other variants of 38cdf0e10cSrcweirlibfreebl*. The library name varies according to the platform. Changes need to 39cdf0e10cSrcweirbe made to 40cdf0e10cSrcweirooo/moz/extractfiles.mk 41cdf0e10cSrcweirooo/moz/zipped/makefile.mk 42cdf0e10cSrcweirsun/moz_prebuilt/zipped/makefile.mk 43cdf0e10cSrcweir 44cdf0e10cSrcweirSee also 45cdf0e10cSrcweirhttp://www.mozilla.org/projects/security/pki/nss/tech-notes/tn6.html 46cdf0e10cSrcweir 47cdf0e10cSrcweir 48cdf0e10cSrcweirWindows builds of nss 49cdf0e10cSrcweir--------------------- 50*8a0cb20aSmseidelTo build nss on Windows you need the MozillaBuild tools. 51cdf0e10cSrcweir 52*8a0cb20aSmseidelWiki page containing the link to the build tools: 53*8a0cb20aSmseidelhttps://wiki.mozilla.org/MozillaBuild#Overview 54cdf0e10cSrcweir 55*8a0cb20aSmseidelThe direct link (latest supported version): 56*8a0cb20aSmseidelhttps://ftp.mozilla.org/pub/mozilla/libraries/win32/MozillaBuildSetup-3.4.exe 57cdf0e10cSrcweir 58cdf0e10cSrcweirlibsqlite3 59cdf0e10cSrcweir---------- 60cdf0e10cSrcweirThe problem described here was found on Mac with OS 10.6 61cdf0e10cSrcweirNSS cannot use the system sqlite on Mac because the base line is still MacOS 62cdf0e10cSrcweir10.4. That system sqlite is incompatible with the softokn3 in nss which requires 63cdf0e10cSrcweira later version of sqlite. 64cdf0e10cSrcweirWhen we used a more current Mac SDK then we could set 65cdf0e10cSrcweirNSS_USE_SYSTEM_SQLITE=1 66cdf0e10cSrcweirto build using the system sqlite. 67cdf0e10cSrcweir 68cdf0e10cSrcweirWe cannot deliver sqlite in the lib directory of the solver. This directory is 69cdf0e10cSrcweirused by tools of the build environment. Using the sqlite from NSS breaks the 70cdf0e10cSrcweirtools if they use system libraries which are linked with the system 71cdf0e10cSrcweirsqlite. Therefore we deliver it into lib/sqlite on unix systems. 72cdf0e10cSrcweir 73cdf0e10cSrcweirSee also issue 74cdf0e10cSrcweirhttp://qa.openoffice.org/issues/show_bug.cgi?id=106132 75