From 5147d71466455b3d087b3f3a7472a35e8216c55a Mon Sep 17 00:00:00 2001
From: Stef Walter <stefw@gnome.org>
Date: Thu, 24 Jan 2013 11:34:47 +0100
Subject: Add basic trust module

This is based off the roots-store from gnome-keyring and loads
certificates from a root directory and exposes them as PKCS#11
objects.
---
 doc/p11-kit-devel.xml | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)

(limited to 'doc/p11-kit-devel.xml')

diff --git a/doc/p11-kit-devel.xml b/doc/p11-kit-devel.xml
index f2a1f58..f3acde1 100644
--- a/doc/p11-kit-devel.xml
+++ b/doc/p11-kit-devel.xml
@@ -131,6 +131,8 @@ $ make install
 				<listitem><para><command>xsltproc</command> is required to build the command
 				manual pages. Use <literal>--enable-doc</literal> to control this
 				dependency.</para></listitem>
+				<listitem><para><command>libtasn1</command> is required to build the trust
+				module and code that interacts with certificates.</para></listitem>
 			</itemizedlist>
 
 		</section>
@@ -143,6 +145,10 @@ $ make install
 
 			<variablelist>
 				<varlistentry>
+					<term><option>--disable-trust-module</option></term>
+					<listitem><para>Disables building of the trust policy module.</para></listitem>
+				</varlistentry>
+				<varlistentry>
 					<term><option>--disable-debug</option>, <option>--enable-debug</option></term>
 					<listitem><para>By default p11-kit is built with debug symbols assertions and
 					and precondition checks. Enabling the debug option configures even more
@@ -164,11 +170,29 @@ $ make install
 					compiler warnings become errors.</para></listitem>
 				</varlistentry>
 				<varlistentry>
+					<term><option>--with-libtasn1</option>, <option>--without-libtasn1</option></term>
+					<listitem><para>Build with a dependency on the libtasn1 library. This dependency
+					allows the trust policy module to be built as well as other code that interacts with
+					certificates.</para></listitem>
+				</varlistentry>
+				<varlistentry>
 					<term><option>--with-module-path</option></term>
 					<listitem><para>Specify the path to look for PKCS#11 modules which were
 					listed in a module config file with a relative path.</para></listitem>
 				</varlistentry>
 				<varlistentry>
+					<term><option>--with-system-anchors</option></term>
+					<listitem><para>Specify the files or directories to look for system
+					certificate anchors. Multiple files and/or directories are specified with
+					a <literal>:</literal> in between them.</para></listitem>
+				</varlistentry>
+				<varlistentry>
+					<term><option>--with-system-certificates</option></term>
+					<listitem><para>Specify the files or directories to look for other
+					non-anchor system certificates. Multiple files and/or directories are
+					specified with a <literal>:</literal> in between them.</para></listitem>
+				</varlistentry>
+				<varlistentry>
 					<term><option>--with-system-config</option></term>
 					<listitem><para>Specify the path to look for p11-kit config files. This
 					usually defaults to something like <literal>/etc/pkcs11</literal></para></listitem>
-- 
cgit v1.1