Bug 330091

Summary:	Cannot prelink /usr/lib/libsoftokn3.so
Product:	[Fedora] Fedora	Reporter:	Daniel Qarras <dqarras>
Component:	nss_compat_ossl	Assignee:	Rob Crittenden <rcritten>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	low	Docs Contact:
Priority:	low
Version:	8	CC:	kengert, rrelyea
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	nss_compat_ossl-0_9_2-3_fc8	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2007-10-18 17:08:08 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Daniel Qarras 2007-10-12 21:04:17 UTC

When prelinking I get few errors related to nss:

Prelinking /usr/libexec/hal-storage-closetray
prelink: Could not prelink /usr/lib/libnss_compat_ossl.so.0 because its
dependency /usr/lib/libsoftokn3.so could not be prelinked

Applies also to nss_compat.

Comment 1 Kai Engert (:kaie) (inactive account) 2007-10-12 21:29:18 UTC

This is not an error, but by design.

In order to allow NSS' FIPS mode to work, we must ensure that the .so files
which implement the cryptographic operations will not get changed by prelink.
Therefore we have blacklisted them.

So, all libraries that "statically" link with libfreebl3.so or libsoftokn3.so
can not get prelinked either.

The good news is, it's no longer required to statically link with them. The
solution is to change nss_compat_ossl and remove the link time dependency.

Comment 2 Rob Crittenden 2007-10-18 17:08:08 UTC

Added patch to fix in devel and fixed upstream as well.

Just removed -lsoftokn3.so from src/Makefile.in and src/Makefile.am