Bug 1336849
Summary: | nss-3.24 is available | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Upstream Release Monitoring <upstream-release-monitoring> |
Component: | nss | Assignee: | Elio Maldonado Batiz <emaldona> |
Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | unspecified | Docs Contact: | |
Priority: | unspecified | ||
Version: | rawhide | CC: | emaldona, hkario, kdudka, kengert, nmavrogi, rrelyea |
Target Milestone: | --- | Keywords: | FutureFeature, Triaged |
Target Release: | --- | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | nss-3.24.0-1.2.fc24 | Doc Type: | Enhancement |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2016-06-18 18:55:22 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Attachments: |
Description
Upstream Release Monitoring
2016-05-17 14:54:01 UTC
Patching or scratch build for nss-3.23.0 failed. Created attachment 1158356 [details] Rebase-helper rebase-helper-debug.log log file. See for details and report the eventual error to rebase-helper https://github.com/phracek/rebase-helper/issues. Patches were not touched. All were applied properly This rebase have been a bit difficult, nss-util and nss-softoken were straightforward but the nss rebase has been difficult. 1) Due to some changes upstream in one of google tests until test framework I had to disable some of of the gtests. I'll bring that topic upstream. 2) The second problem has to do with Rawhide where some of the ssl test suites are failing. Did a local rebase on my f23 and f24 systems and were I had no problems at all. It's only with Rawhide where I am getting those failures. I'm currently investigating and may have a temporary workaround which I'll explain later. I'll need help from some Bob and Nikos on it's analysis as I think it's related to the current work in in progress to enforce the system-wide crypto policy - Bug 1157720 which is Rawhide-only. Let me attach the changes I have made for nss-util, nss-softoken, and nss in Rawhide, the ones for other branches are similar, and I'll elaborate on the problem after that. Created attachment 1161215 [details]
all changes for nss-util rebase - in patch format
Created attachment 1161216 [details]
all changes for nss-softokn rebase - in patch format
Created attachment 1161217 [details]
all changes for nss rebase - in patch format
Created attachment 1161218 [details]
nss.spec changes - in patch format
Created attachment 1161226 [details] changes so the test pass - temporay With attachment 1161218 [details] the brew build for Rawide failed as you can see on http://koji.fedoraproject.org/koji/taskinfo?taskID=14236223 I then tried the changes attached where I disabled Patch59: nss-check-policy-file.patch and all tests passed. Scratch build at http://koji.fedoraproject.org/koji/taskinfo?taskID=14237602 I went ahead and installed that build on my Rawhide system and build with the original version nss.spec, that has the patch enabled, and all tests passed, It's seems to me that for rawhide we may need to do some sort of bootstrapping build without the patch and once that one is on the buildroot override subsequent build will have no problems. Years ago, while doing split of nss into three packages, I had to do that kind of bootstrapping before I could be successful with the package split Bob or Nikos, what is your advise? Do I need the bootstrapping I mentioned or is this a sign that something else regarding the policy enforcement needs work? Comment on attachment 1161226 [details]
changes so the test pass - temporay
Assuming that we need a bootstrapping build there is a lot simpler way, without having to temporarily disable any patches, which is to comment out in the spec file the setting of two build time variables
#export POLICY_FILE=nss.config
#export POLICY_PATH=/etc/crypto-policies/back-ends
Hmm it may be necessary. The question is is there an nss.config on the build platform, and is it turnning off cipher by default (that you may be testing)? bob There is an nss.config on the build platform. It is part of the base system. For the test suite you'll need to override the system one with another policy specific for testing. nss-3.24.0-1.0.fc24 nss-softokn-3.24.0-1.0.fc24 nss-util-3.24.0-1.0.fc24 has been submitted as an update to Fedora 24. https://bodhi.fedoraproject.org/updates/FEDORA-2016-fa807cca6f nss-3.24.0-1.1.fc24, nss-softokn-3.24.0-1.0.fc24, nss-util-3.24.0-1.0.fc24 has been pushed to the Fedora 24 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-fa807cca6f nss-3.24.0-1.2.fc24 nss-softokn-3.24.0-1.0.fc24 nss-util-3.24.0-1.0.fc24 has been submitted as an update to Fedora 24. https://bodhi.fedoraproject.org/updates/FEDORA-2016-fa807cca6f nss-3.24.0-1.2.fc24, nss-softokn-3.24.0-1.0.fc24, nss-util-3.24.0-1.0.fc24 has been pushed to the Fedora 24 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-fa807cca6f nss-3.24.0-1.2.fc24, nss-softokn-3.24.0-1.0.fc24, nss-util-3.24.0-1.0.fc24 has been pushed to the Fedora 24 stable repository. If problems still persist, please make note of it in this bug report. |