Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
For bugs related to Red Hat Enterprise Linux 5 product line. The current stable release is 5.10. For Red Hat Enterprise Linux 6 and above, please visit Red Hat JIRA https://issues.redhat.com/secure/CreateIssue!default.jspa?pid=12332745 to report new issues.

Bug 2262369

Summary: Nginx container can't start up in RHEL8 FIPS mode after upgrade to nss-softokn-freebl-3.79.0-11.el8_7 or higher version
Product: Red Hat Enterprise Linux 5 Reporter: hongylu
Component: nssAssignee: Bob Relyea <rrelyea>
Status: CLOSED WONTFIX QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: urgent Docs Contact:
Priority: unspecified    
Version: 5.0CC: hongylu
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2025-08-02 07:29:42 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description hongylu 2024-02-02 08:41:53 UTC
Steps to reproduce:

container running on rhel8 fips enabled mode
container installed nginx-1.21.6, openjdk-1.8.0
upgrade nss-softokn-freebl from nss-softokn-freebl-3.67.0-7.el8_5 to nss-softokn-freebl-3.79.0-11.el8_7
Actual results:

container can't start up
after downgrade to nss-softokn-freebl-3.67.0-7.el8_5, it works well.

Comment 2 RHEL Program Management 2025-08-02 07:29:42 UTC
After evaluating this issue, there are no plans to address it further or fix it in an upcoming release.  Therefore, it is being closed.  If plans change such that this issue will be fixed in an upcoming release, then the bug can be reopened.