Bug 910584

Summary: certutil -a does not produce ASCII output
Product: [Fedora] Fedora Reporter: Rob Crittenden <rcritten>
Component: nssAssignee: Elio Maldonado Batiz <emaldona>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: urgent Docs Contact:
Priority: unspecified    
Version: 18CC: chuck.lever, deanhunter, emaldona, jmontleo, kdudka, kengert
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Fixed In Version: nss-3.14.3-1.fc18 nss-3.14.3-1.fc17 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-02-28 02:04:11 EST Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---
Description Flags
patch approved upstream none

Description Rob Crittenden 2013-02-12 16:59:49 EST
Description of problem:

certutil -a does not produce a base64-encode CSR wrapped with BEGIN/END blocks, it produces garbage.

Version-Release number of selected component (if applicable):


How reproducible:

Every time

Steps to Reproduce:
1. mkdir /tmp/db && cd /tmp/db
2. certutil -N -d . (set no password)
3. /usr/bin/certutil -d . -R -k rsa -g 2048 -s 'CN=IPA RA,O=EXAMPLE.COM' -z /etc/group -a
Actual results:

Generating key.  This may take a few moments...


Expected results:

Generating key.  This may take a few moments...

Certificate request generated by Netscape certutil
Phone: (not specified)

Common Name: IPA RA
Email: (not specified)
Organization: EXAMPLE.COM
State: (not specified)
Country: (not specified)

Comment 1 Rob Crittenden 2013-02-12 17:11:22 EST
NSS upstream BZ https://bugzilla.mozilla.org/show_bug.cgi?id=840714
Comment 2 Elio Maldonado Batiz 2013-02-13 11:25:40 EST
Created attachment 696893 [details]
patch approved upstream
Comment 3 Fedora Update System 2013-02-22 14:33:23 EST
nss-3.14.3-1.fc18,nss-softokn-3.14.3-1.fc18,nss-util-3.14.3-1.fc18,nspr-4.9.5-2.fc18 has been submitted as an update for Fedora 18.
Comment 4 Dean Hunter 2013-02-22 16:10:37 EST
I know I have done this before, but please remind me how to apply this update so that I may test it. I have misplaced my mind.
Comment 5 Elio Maldonado Batiz 2013-02-22 17:19:35 EST
(In reply to comment #4)
It should appear in updates-testing in a couple of days. When it does you can  update via su -c 'yum --enablerepo=updates-testting nss' that should bring the dependencies. If for some odd reason it doesn't, then execute
su -c 'yum --enablerepo=updates-testing update nspr nss-util nss-softokn nss'
If you also need the -devel packages add nss-pkcs11-devel and that should bring all of the other -devel packages. Thank you for offering to test it. -Elio
Comment 6 Fedora Update System 2013-02-24 03:41:50 EST
Package nss-3.14.3-1.fc18, nss-softokn-3.14.3-1.fc18, nss-util-3.14.3-1.fc18, nspr-4.9.5-2.fc18:
* should fix your issue,
* was pushed to the Fedora 18 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing nss-3.14.3-1.fc18 nss-softokn-3.14.3-1.fc18 nss-util-3.14.3-1.fc18 nspr-4.9.5-2.fc18'
as soon as you are able to.
Please go to the following url:
then log in and leave karma (feedback).
Comment 7 Dean Hunter 2013-02-25 12:25:31 EST
The update fixed this bug for me. I have left anonymous karma.
Comment 8 Fedora Update System 2013-02-25 13:49:52 EST
nss-3.14.3-1.fc17,nss-softokn-3.14.3-1.fc17,nss-util-3.14.3-1.fc17,nspr-4.9.5-2.fc17 has been submitted as an update for Fedora 17.
Comment 9 Fedora Update System 2013-02-28 02:04:13 EST
nss-3.14.3-1.fc18, nss-softokn-3.14.3-1.fc18, nss-util-3.14.3-1.fc18, nspr-4.9.5-2.fc18 has been pushed to the Fedora 18 stable repository.  If problems still persist, please make note of it in this bug report.
Comment 10 Fedora Update System 2013-03-13 22:39:57 EDT
nss-3.14.3-1.fc17, nss-softokn-3.14.3-1.fc17, nss-util-3.14.3-1.fc17, nspr-4.9.5-2.fc17 has been pushed to the Fedora 17 stable repository.  If problems still persist, please make note of it in this bug report.