Bug 1691454

Summary: TLS Keying Material Exporter is unsupported by command line tools
Product: Red Hat Enterprise Linux 8 Reporter: Alicja Kario <hkario>
Component: nssAssignee: nss-nspr-maint <nss-nspr-maint>
Status: CLOSED ERRATA QA Contact: Ivan Nikolchev <inikolch>
Severity: low Docs Contact:
Priority: low    
Version: 8.0CC: dueno, inikolch, ssorce
Target Milestone: rcKeywords: Triaged, ZStream
Target Release: 8.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: nss-3.53.1-6.el8_2 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-08-03 13:01:31 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1809549    
Bug Blocks:    

Description Alicja Kario 2019-03-21 15:57:20 UTC
Description of problem:
neither tstclnt nor selfserv support the export of keying material as specified in RFC 5705 and RFC 8446.

Version-Release number of selected component (if applicable):
nss-3.41.0-5.el8.x86_64

How reproducible:
always

Steps to Reproduce:
1. tstclnt --help 2>&1 | grep -i exporter
2. selfserv --help 2>&1 | grep -i exporter

Actual results:
no output

Expected results:
Options supported, both the label and length of provided material can be specified, the algorithm follows the above mentioned RFCs

Additional info:
supported in openssl command line tools

Comment 10 errata-xmlrpc 2020-08-03 13:01:31 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2020:3280