From 544a20de7667f05c1a406c4dea0706b0ab507430 Mon Sep 17 00:00:00 2001 From: Sumit Bose Date: Thu, 5 Nov 2015 18:20:27 +0100 Subject: p11: enable ocsp checks This patch enables the Online Certificate Status Protocol in NSS and adds an option to disable it if needed. To make further tuning of certificate verification more easy it is not an option on its own but an option to the new certificate_verification configuration option. Resolves https://fedorahosted.org/sssd/ticket/2812 Reviewed-by: Jakub Hrozek --- Makefile.am | 2 ++ 1 file changed, 2 insertions(+) (limited to 'Makefile.am') diff --git a/Makefile.am b/Makefile.am index ba59b16b4..848f70e48 100644 --- a/Makefile.am +++ b/Makefile.am @@ -3163,6 +3163,7 @@ proxy_child_LDADD = \ p11_child_SOURCES = \ src/p11_child/p11_child_nss.c \ src/util/atomic_io.c \ + src/util/util.c \ $(NULL) p11_child_CFLAGS = \ $(AM_CFLAGS) \ @@ -3172,6 +3173,7 @@ p11_child_CFLAGS = \ p11_child_LDADD = \ libsss_debug.la \ $(TALLOC_LIBS) \ + $(DHASH_LIBS) \ $(POPT_LIBS) \ $(NSS_LIBS) \ libsss_crypt.la \ -- cgit