Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 2098489

Summary:	Need to be able to run self-tests at will programmatically. [rhel-9.1.0]
Product:	Red Hat Enterprise Linux 9	Reporter:	Bob Relyea <rrelyea>
Component:	nss	Assignee:	Bob Relyea <rrelyea>
Status:	CLOSED CURRENTRELEASE	QA Contact:	BaseOS QE Security Team <qe-baseos-security>
Severity:	medium	Docs Contact:
Priority:	high
Version:	9.1	CC:	cllang, ssorce
Target Milestone:	rc	Keywords:	Triaged, ZStream
Target Release:	---	Flags:	pm-rhel: mirror+
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	nss-3.79.0-8.el9_0	Doc Type:	Removed functionality
Doc Text:	This update changes the minimum key size for all RSA operations from 128 bits to 1023 bits. This means NSS will no longer - generate RSA keys < 1023 bits - sign or verify RSA signatures with RSA keys < 1023 bits - encrypt or decrypt values with RSA keys < 1023 bits	Story Points:	---
Clone Of:
Clones:	2098490 2100504 (view as bug list)		Environment:
Last Closed:	2023-06-06 10:17:53 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	2098490, 2100504

Description Bob Relyea 2022-06-19 23:39:31 UTC

Description of problem:

Fips requires that an application needs to be able to trigger self-tests from the program. Unloading the DLL does not qualify.

This is a FIPS-104-3 requirement.

Comment 3 Simo Sorce 2022-06-21 07:41:47 UTC

Ivan,
I see you set Sanity Only for this bug, but it seem this is an API we should be able to easily write a test for.
We just need to make sure the API to execute self test is callable, I agree we do not have a way to easily confirm the test actually run, but I think we need to guarantee API works.

that said, granting Z-stream as the change is required regardless.

Comment 8 Clemens Lang 2023-06-06 10:17:53 UTC

RHEL 9.1 contains nss-3.79.0-14.el9_0.