summaryrefslogtreecommitdiff
path: root/doc/p11-kit-devel.xml
diff options
context:
space:
mode:
authorStef Walter <stefw@gnome.org>2013-01-24 11:34:47 +0100
committerStef Walter <stefw@gnome.org>2013-02-05 14:54:46 +0100
commit5147d71466455b3d087b3f3a7472a35e8216c55a (patch)
tree4b81eee35b7d0ec877a34c4fde06478d700a3960 /doc/p11-kit-devel.xml
parent603c7d4eb996f51178ccc9d235597497bbb2c7a4 (diff)
Add basic trust module
This is based off the roots-store from gnome-keyring and loads certificates from a root directory and exposes them as PKCS#11 objects.
Diffstat (limited to 'doc/p11-kit-devel.xml')
-rw-r--r--doc/p11-kit-devel.xml24
1 files changed, 24 insertions, 0 deletions
diff --git a/doc/p11-kit-devel.xml b/doc/p11-kit-devel.xml
index f2a1f58..f3acde1 100644
--- a/doc/p11-kit-devel.xml
+++ b/doc/p11-kit-devel.xml
@@ -131,6 +131,8 @@ $ make install
<listitem><para><command>xsltproc</command> is required to build the command
manual pages. Use <literal>--enable-doc</literal> to control this
dependency.</para></listitem>
+ <listitem><para><command>libtasn1</command> is required to build the trust
+ module and code that interacts with certificates.</para></listitem>
</itemizedlist>
</section>
@@ -143,6 +145,10 @@ $ make install
<variablelist>
<varlistentry>
+ <term><option>--disable-trust-module</option></term>
+ <listitem><para>Disables building of the trust policy module.</para></listitem>
+ </varlistentry>
+ <varlistentry>
<term><option>--disable-debug</option>, <option>--enable-debug</option></term>
<listitem><para>By default p11-kit is built with debug symbols assertions and
and precondition checks. Enabling the debug option configures even more
@@ -164,11 +170,29 @@ $ make install
compiler warnings become errors.</para></listitem>
</varlistentry>
<varlistentry>
+ <term><option>--with-libtasn1</option>, <option>--without-libtasn1</option></term>
+ <listitem><para>Build with a dependency on the libtasn1 library. This dependency
+ allows the trust policy module to be built as well as other code that interacts with
+ certificates.</para></listitem>
+ </varlistentry>
+ <varlistentry>
<term><option>--with-module-path</option></term>
<listitem><para>Specify the path to look for PKCS#11 modules which were
listed in a module config file with a relative path.</para></listitem>
</varlistentry>
<varlistentry>
+ <term><option>--with-system-anchors</option></term>
+ <listitem><para>Specify the files or directories to look for system
+ certificate anchors. Multiple files and/or directories are specified with
+ a <literal>:</literal> in between them.</para></listitem>
+ </varlistentry>
+ <varlistentry>
+ <term><option>--with-system-certificates</option></term>
+ <listitem><para>Specify the files or directories to look for other
+ non-anchor system certificates. Multiple files and/or directories are
+ specified with a <literal>:</literal> in between them.</para></listitem>
+ </varlistentry>
+ <varlistentry>
<term><option>--with-system-config</option></term>
<listitem><para>Specify the path to look for p11-kit config files. This
usually defaults to something like <literal>/etc/pkcs11</literal></para></listitem>