Re: MoNSS support in openldap

[Rich Megginson <rich.megginson@gmail.com>]

Silvan Marco Fin wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi!
>
>  Is there any magic to be cast upon openldap to enable the MozNSS
> support when compiling it? Perhaps I'm missing something, but there
> doesn't seem to be a configure switch to enable NSS, like with Gnutls or
> OpenSSL.
>   
It is not yet supported by configure.  In the meantime, you have to do 
something like this (I use 64-bit RHEL and Fedora, so your OS may vary):
This assumes you have openldap from a source tarball or CVS in a 
directory called ol2.4.23:
ls
ol2.4.23/

mkdir build
cd build # I don't build "in tree" - I build in a separate directory
EXTRA_CFLAGS="-I/usr/include/nss3 -I/usr/include/nspr4 -DHAVE_TLS 
-DHAVE_MOZNSS"
if [ ! -d include/nss ] ; then
       # openldap uses the #include <nss/file.h> style, but nspr and 
nss use the
       # #include <file.h> style - so we have to accommodate both styles
       mkdir include ; cd include ; ln -s /usr/include/nss3 nss ; cd ..
fi
if [ ! -d include/nspr ] ; then
       # openldap uses the #include <nss/file.h> style, but nspr and 
nss use the
       # #include <file.h> style - so we have to accommodate both styles
       mkdir include ; cd include ; ln -s /usr/include/nspr4 nspr ; cd ..
fi
TLS_LIBS="-lssl3 -lsmime3 -lnss3 -lnssutil3 -lplds4 -lplc4 -lnspr4"
LIBS="$TLS_LIBS" CFLAGS="-g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 
-fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 
-mtune=generic $EXTRA_CFLAGS" ../ol2.4.23/configure --with-tls=no 
...other configure args...


>  Kind regards,
>   Silvan
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.10 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAkyc3wAACgkQ9s/B3wYT4543twCfcdYTtJyeKbtiJoT8yFZblvDb
> 8DQAmwfZpxpoaHic1ZIpovUeH+jqzo1d
> =ih5n
> -----END PGP SIGNATURE-----
>