Currently it statically loads the framework. I didn't want to deal with figuring out how to install a bunch of .so's and make sure that they all get the right version in the first release.libnssckbi.so isn't an xpcom component, is it? It doesn't have
an NSGetModule or NSRegisterSelf (I can see dlsym calls for
these are they are not satisfied).
No, it's a PKCS#11 module. The "ck" in the name is for Cryptoki, "bi"
is for Built-Ins -- as in the built-in root certs.
I don't remember if the one .so is actually an entire standalone PKCS#11
module (having the NSS cryptoki framework linked in), or if it drags in
another .so with the common framework. I think the latter, but it's
been awhile.
If you have another program that uses PKCS#11 modules, you should be
able to load this library in. It doesn't implement any algorithms, but
you could look at the pretty certs.
Frederick Roeber wrote:
