Bug 650197

Summary: Self-test of NSS fails
Product: [Fedora] Fedora Reporter: Steve Snyder <swsnyder>
Component: nssAssignee: Elio Maldonado Batiz <emaldona>
Status: CLOSED WONTFIX QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: low    
Version: 12CC: csieh, emaldona, kdudka, kengert, squinney
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: nss-3.12.8-3.fc12 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2010-12-03 12:03:07 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Full log file of NSS self-tests none

Description Steve Snyder 2010-11-05 14:05:37 UTC 
Description of problem:

The binary NSS v3.12.8 packages cannot be built due to self-test failures.

Version-Release number of selected component (if applicable):

nss-3.12.8-2.fc12

How reproducible:

Always

Steps to Reproduce:

1. Start with a fully-updated F12 system (mine is x86_64)
2. Download source RPM: nss-3.12.8-2.fc12.src.rpm
3. Run: rpmbuild --rebuild nss-3.12.8-2.fc12.src.rpm
  
Actual results:

Same 3 self-tests always fail, halting the build:

$ grep FAILED BUILD/nss-3.12.8/mozilla/tests_results/security/localhost.1/output.log
chains.sh: #1066: RealCerts: Verifying certificate(s)  PayPalEE.cert with flags  -d AllDB    -o OID.2.16.840.1.113733.1.7.23.6  - FAILED
chains.sh: #2144: RealCerts: Verifying certificate(s)  PayPalEE.cert with flags  -d AllDB    -o OID.2.16.840.1.113733.1.7.23.6  - FAILED
chains.sh: #3571: RealCerts: Verifying certificate(s)  PayPalEE.cert with flags  -d AllDB    -o OID.2.16.840.1.113733.1.7.23.6  - FAILED

Expected results:

Self-tests should not fail.

Additional info:
Comment 1 Steve Snyder 2010-11-05 14:21:06 UTC 
Created attachment 458101 [details]
Full log file of NSS self-tests

242KB when compressed, 3.5MB when decompressed.
Comment 2 Elio Maldonado Batiz 2010-11-05 15:32:11 UTC 
The tests failed because the PayPalEE test certifiacte expired on Oct 31. I have replaced it with a new one and will rebuild NSS for f{15|14|13|12}. That's a short term solution. Long term we should probably generate the cert on-the-fly like we do with other test certificates. I have opened a bug upstream to that effect.
Comment 3 Steve Snyder 2010-11-05 15:49:24 UTC 
Thanks for the quick diagnoses of the problem, Elio.
Comment 4 Kamil Dudka 2010-11-09 12:32:21 UTC 
*** Bug 651370 has been marked as a duplicate of this bug. ***
Comment 5 Bug Zapper 2010-12-03 12:03:07 UTC 
Fedora 12 changed to end-of-life (EOL) status on 2010-12-02. Fedora 12 is 
no longer maintained, which means that it will not receive any further 
security or bug fix updates. As a result we are closing this bug.

If you can reproduce this bug against a currently maintained version of 
Fedora please feel free to reopen this bug against that version.

Thank you for reporting this bug and we are sorry it could not be fixed.