Red Hat Bugzilla – Bug 330091
Cannot prelink /usr/lib/libsoftokn3.so
Last modified: 2007-11-30 17:12:18 EST
When prelinking I get few errors related to nss:
prelink: Could not prelink /usr/lib/libnss_compat_ossl.so.0 because its
dependency /usr/lib/libsoftokn3.so could not be prelinked
Applies also to nss_compat.
This is not an error, but by design.
In order to allow NSS' FIPS mode to work, we must ensure that the .so files
which implement the cryptographic operations will not get changed by prelink.
Therefore we have blacklisted them.
So, all libraries that "statically" link with libfreebl3.so or libsoftokn3.so
can not get prelinked either.
The good news is, it's no longer required to statically link with them. The
solution is to change nss_compat_ossl and remove the link time dependency.
Added patch to fix in devel and fixed upstream as well.
Just removed -lsoftokn3.so from src/Makefile.in and src/Makefile.am