[Bug 1870] --enable-sunec requires a nss-softokn.pc which is only available in Fedora

[bugzilla-daemon at icedtea.classpath.org]

http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=1870

--- Comment #1 from Andrew John Hughes <gnu.andrew at redhat.com> ---
It requires libfreebl.a and the alghmac.h & blapi.h headers from NSS >= 3.16.1
or libfreebl.a, libsoftokn.a and {softoken,lowkeyti,softoknt,blapi,alghmac}.h
on earlier versions. Refactoring was done in NSS in 3.16.1 at our request to
reduce the required footprint [0].

IcedTea actually supports two options, both of which we've used on Gentoo for
the different NSS versions:

1. For >= 3.16.1, use nss-softokn from pkg-config. The build will use the
libraries from NSS, adding -lfreebl itself, but the CFLAGS from nss-softokn, so
an additional include directory can be added (Gentoo uses
/usr/include/nss/private).
2. For earlier versions, use nss-java which uses the CFLAGS and libs from that
package. It appends -DLEGACY_NSS to the CFLAGS so that softoken.h is included
rather than freebl.h.

We can look at more options if really necessary but I'd prefer you worked with
one of the existing ones with your NSS package. This code has been worked on in
HEAD since about April.

Alternatively, if you are already happy with the ECC support provided by the
PKCS11+NSS provider, you don't need this option at all. Fedora's never used
that in an actual release, but I know Debian & Gentoo have been using it for
years.

[0] https://bugzilla.redhat.com/show_bug.cgi?id=1075702

-- 
You are receiving this mail because:
You are on the CC list for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.openjdk.java.net/pipermail/distro-pkg-dev/attachments/20140716/4595ad15/attachment.html>