1*cdf0e10cSrcweirRelation between nss, moz, moz_prebuilt 2*cdf0e10cSrcweir--------------------------------------- 3*cdf0e10cSrcweirnss containes the security libraries which are also part of moz. However nss is 4*cdf0e10cSrcweirmeant to be more current, that is it to be updated more often. This should be 5*cdf0e10cSrcweireasier than doing this with moz. 6*cdf0e10cSrcweir 7*cdf0e10cSrcweirIf nss is build depends on an environment variable (ENABLE_NSS_MODULE=YES) which 8*cdf0e10cSrcweiris per default set to YES. In this case nss is build before moz. The nss 9*cdf0e10cSrcweirlibraries/lib files/headers built in moz are then not delivered. Otherwise they 10*cdf0e10cSrcweirwould overwrite those from nss. That is, the nss libraries build in moz are 11*cdf0e10cSrcweirremoved from mozruntime.zip (build in moz/solver/bin), they are removed from the 12*cdf0e10cSrcweirlib directory (for example moz/unxlngi6.pro/lib), and the nss and nspr headers 13*cdf0e10cSrcweirare also removed (inc/nss and inc/nspr). The nss libraries from the nss module 14*cdf0e10cSrcweirare then added to mozruntime.zip. 15*cdf0e10cSrcweir 16*cdf0e10cSrcweirThis also applies for moz_prebuilt. Therefore moz and moz_prebuilt must be build 17*cdf0e10cSrcweiragain after changes have been made to the libraries in the nss module. 18*cdf0e10cSrcweir 19*cdf0e10cSrcweirAlso when moz was updated to use a newer version of mozilla, then one must make 20*cdf0e10cSrcweirsure that new files which also belong to nss are not delivered and are removed 21*cdf0e10cSrcweirfrom mozruntime.zip. 22*cdf0e10cSrcweir 23*cdf0e10cSrcweirFips 140 and signed libraries 24*cdf0e10cSrcweir------------------------------- 25*cdf0e10cSrcweirFips 140 mode is not supported. That is, the *.chk files containing the 26*cdf0e10cSrcweirchecksums for the cryptographic module are not delivered into solver and will 27*cdf0e10cSrcweirnot be part of the OOo installation sets. 28*cdf0e10cSrcweir 29*cdf0e10cSrcweirSigning has been turned off because 30*cdf0e10cSrcweir- we change the rpath (install names) after signing which breaks the signatures 31*cdf0e10cSrcweir(Mac) 32*cdf0e10cSrcweir- sqlite conflicts with the system sqlite when signing which breaks the build 33*cdf0e10cSrcweir 34*cdf0e10cSrcweir 35*cdf0e10cSrcweirlibfreebl3 36*cdf0e10cSrcweir---------- 37*cdf0e10cSrcweirPorting to other platforms may require to deliver other variants of 38*cdf0e10cSrcweirlibfreebl*. The library name varies according to the platform. Changes need to 39*cdf0e10cSrcweirbe made to 40*cdf0e10cSrcweirooo/moz/extractfiles.mk 41*cdf0e10cSrcweirooo/moz/zipped/makefile.mk 42*cdf0e10cSrcweirsun/moz_prebuilt/zipped/makefile.mk 43*cdf0e10cSrcweir 44*cdf0e10cSrcweirSee also 45*cdf0e10cSrcweirhttp://www.mozilla.org/projects/security/pki/nss/tech-notes/tn6.html 46*cdf0e10cSrcweir 47*cdf0e10cSrcweir 48*cdf0e10cSrcweirWindows builds of nss 49*cdf0e10cSrcweir--------------------- 50*cdf0e10cSrcweirTo build mozilla on windows you'll need the mozilla build tools 51*cdf0e10cSrcweir 52*cdf0e10cSrcweirBuild requirements containing the link to the build tools: 53*cdf0e10cSrcweirhttps://developer.mozilla.org/en/Windows_Build_Prerequisites#ss2.2 54*cdf0e10cSrcweir 55*cdf0e10cSrcweirThe direct link: 56*cdf0e10cSrcweir 57*cdf0e10cSrcweirhttp://ftp.mozilla.org/pub/mozilla.org/mozilla/libraries/win32/MozillaBuildSetup-1.3.exe 58*cdf0e10cSrcweir 59*cdf0e10cSrcweirlibsqlite3 60*cdf0e10cSrcweir---------- 61*cdf0e10cSrcweirThe problem described here was found on Mac with OS 10.6 62*cdf0e10cSrcweirNSS cannot use the system sqlite on Mac because the base line is still MacOS 63*cdf0e10cSrcweir10.4. That system sqlite is incompatible with the softokn3 in nss which requires 64*cdf0e10cSrcweira later version of sqlite. 65*cdf0e10cSrcweirWhen we used a more current Mac SDK then we could set 66*cdf0e10cSrcweirNSS_USE_SYSTEM_SQLITE=1 67*cdf0e10cSrcweirto build using the system sqlite. 68*cdf0e10cSrcweir 69*cdf0e10cSrcweirWe cannot deliver sqlite in the lib directory of the solver. This directory is 70*cdf0e10cSrcweirused by tools of the build environment. Using the sqlite from NSS breaks the 71*cdf0e10cSrcweirtools if they use system libraries which are linked with the system 72*cdf0e10cSrcweirsqlite. Therefore we deliver it into lib/sqlite on unix systems. 73*cdf0e10cSrcweir 74*cdf0e10cSrcweirSee also issue 75*cdf0e10cSrcweirhttp://qa.openoffice.org/issues/show_bug.cgi?id=106132 76