From edd04b610c1c83f26ed036569ad95b89a41fc558 Mon Sep 17 00:00:00 2001
From: Stef Walter <stef@thewalter.net>
Date: Wed, 10 Jul 2013 14:28:15 +0200
Subject: Add support for using freebl3 for SHA1 and MD5 hashing

Since we don't want to link freebl3 to libp11-kit.so where it isn't
needed, move the SHA-1 and MD5 digest functionality to the trust/
directory.
---
 doc/manual/p11-kit-devel.xml | 11 +++++++++++
 1 file changed, 11 insertions(+)

(limited to 'doc/manual')

diff --git a/doc/manual/p11-kit-devel.xml b/doc/manual/p11-kit-devel.xml
index 873aff1..007118a 100644
--- a/doc/manual/p11-kit-devel.xml
+++ b/doc/manual/p11-kit-devel.xml
@@ -160,6 +160,10 @@ $ make install
 				dependency.</para></listitem>
 				<listitem><para><command>libtasn1</command> is required to build the trust
 				module and code that interacts with certificates.</para></listitem>
+				<listitem><para><command>freebl3</command> (developed as part of the NSS
+				code base) is an optional dependency that may be used to meet policy
+				requirements of system builders. Enabling this dependency provides no other
+				advantage.</para></listitem>
 			</itemizedlist>
 
 		</section>
@@ -197,6 +201,13 @@ $ make install
 					compiler warnings become errors.</para></listitem>
 				</varlistentry>
 				<varlistentry>
+					<term><option>--with-hash-impl=freebl</option></term>
+					<listitem><para>Instead of using internal hash code, link to the freebl3
+					library and use its hash implementations. The only advantage this brings is to
+					meet the policy requirements of system builders.</para>
+					</listitem>
+				</varlistentry>
+				<varlistentry>
 					<term><option>--with-libtasn1</option>, <option>--without-libtasn1</option></term>
 					<listitem><para>Build with a dependency on the libtasn1 library. This dependency
 					allows the trust policy module to be built as well as other code that interacts with
-- 
cgit v1.1