I already mentioned this bug in #266021, but I was told to file a seperate bug. A few days ago the curl package switched from OpenSSL to NSS. This change has caused a program of mine to fail working correctly. This program of mine retrieves a gzip compressed webpage from some webserver. Normally curl automatically decodes this gzip stream to normal readable data. However the change introduced in curl 7.16.4-3 has caused my program to stop working correctly. The gzip stream isn't automatically decoded anymore. From 7.16.4-3 on my program has stopped functioning correctly. This problem still occurs with 7.16.4-6. If I reinstall 7.16.4-2 (using rpm --oldpackage) the problem disappears. Due to the fact this webserver is only accessible for registered users I'm not able to provide you a testcase. However, I can give you a wireshark dump which shows the traffic involved. In the wireshark dump there are no differences visible in using 7.16.4-2 or a later version of curl, so I'm only attaching the dump created using curl 7.16.4-6.
Created attachment 196561 [details] Wireshark dump containing the gzip compressed data
I've been able to create a testcase after all. This is now attached to this bugreport. With curl 7.16.4-2 or earlier some XML output is shown (expected), while with 7.16.4-3 or later only gzip compressed data is shown.
Created attachment 196771 [details] Testcase
Adding the NSS guys to Cc.
It's completely unrelated to the NSS port. There is a missing Buildrequires: zlib-devel in spec.
Right, it seems like zlib-devel was removed from the exceptionlist sometime between 7.16.4-2 and 7.16.4-6 because curl has never had the explicit zlib-devel BR. Added since 7.16.4-7.