是否可以通过配置来保证parameter http://curl.haxx.se/docs/manpage.html, that curl uses OpenSSL http://www.openssl.org/, and not NSS http://www.mozilla.org/projects/security/pki/nss/检索 https 内容？我需要确保这一点，以便强制遵守FIPS 140-2 http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-all.htm，哪个RHEL6.2已经认证了？
我认为答案是“不”。
所以我也会在这里询问后续...我可以重新编译curl以确保它使用libssl而不是libnss吗？我试过了：
./configure --with-ssl --without-nss
我仍然得到一个动态链接的curl二进制文件libnss3.so.
[root@fips curl-7.19.7]# ldd /usr/bin/curl
linux-vdso.so.1 => (0x00007fffacbe8000)
libcurl.so.4 => /usr/lib64/libcurl.so.4 (0x00007f5d8fe03000)
libidn.so.11 => /lib64/libidn.so.11 (0x00007f5d8fbd1000)
libldap-2.4.so.2 => /lib64/libldap-2.4.so.2 (0x00007f5d8f983000)
librt.so.1 => /lib64/librt.so.1 (0x00007f5d8f77b000)
libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00007f5d8f537000)
libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007f5d8f250000)
libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x00007f5d8f024000)
libcom_err.so.2 => /lib64/libcom_err.so.2 (0x00007f5d8ee20000)
libssl.so.10 => /usr/lib64/libssl.so.10 (0x00007f5d8ebc2000)
libcrypto.so.10 => /usr/lib64/libcrypto.so.10 (0x00007f5d8e828000)
libdl.so.2 => /lib64/libdl.so.2 (0x00007f5d8e624000)
libssh2.so.1 => /usr/lib64/libssh2.so.1 (0x00007f5d8e3fb000)
libz.so.1 => /lib64/libz.so.1 (0x00007f5d8e1e5000)
libc.so.6 => /lib64/libc.so.6 (0x00007f5d8de52000)
liblber-2.4.so.2 => /lib64/liblber-2.4.so.2 (0x00007f5d8dc42000)
libresolv.so.2 => /lib64/libresolv.so.2 (0x00007f5d8da28000)
libssl3.so => /usr/lib64/libssl3.so (0x00007f5d8d7f2000)
libsmime3.so => /usr/lib64/libsmime3.so (0x00007f5d8d5c5000)
---> libnss3.so => /usr/lib64/libnss3.so (0x00007f5d8d28a000)
---> libnssutil3.so => /usr/lib64/libnssutil3.so (0x00007f5d8d05f000)
libplds4.so => /lib64/libplds4.so (0x00007f5d8ce5a000)
libplc4.so => /lib64/libplc4.so (0x00007f5d8cc55000)
libnspr4.so => /lib64/libnspr4.so (0x00007f5d8ca18000)
libsasl2.so.2 => /usr/lib64/libsasl2.so.2 (0x00007f5d8c7fd000)
libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f5d8c5e0000)
/lib64/ld-linux-x86-64.so.2 (0x00007f5d90062000)
libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007f5d8c3d5000)
libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x00007f5d8c1d1000)
libcrypt.so.1 => /lib64/libcrypt.so.1 (0x00007f5d8bf99000)
libselinux.so.1 => /lib64/libselinux.so.1 (0x00007f5d8bd7a000)
libfreebl3.so => /lib64/libfreebl3.so (0x00007f5d8bb18000)
Try:
./configure --with-ssl=/usr/include --without-nss
本文内容由网友自发贡献，版权归原作者所有，本站不承担相应法律责任。如您发现有涉嫌抄袭侵权的内容，请联系:hwhale#tublm.com(使用前将#替换为@)
