urgent customer request to have mod_nss work with nethsm 2000 hardware accelerator. Found the mod_nss version on Fedora having the exact fix we need: the "NSS forking model." Porting the code onto RHEL will resolve this urgent issue (have tested that with my own build). See the following bug for more detail: https://bugzilla.redhat.com/show_bug.cgi?id=496342 Because of the urgency, we need it spun on Brew for RHCS8.0 early delivery (beta2) early next week.
build complete
Some Notes from rcrit: ------------------------------------------------------------------ mod_nss 1.0.3 initialized NSS and then forked its child listeners. This was allowed by older NSS versions but was not the correct thing to do under the PKCS#11 spec and therefore broke in some hardware readers which enforced the spec. mod_nss 1.0.8 initializes NSS after forking each child. So you basically just need to test that mod_nss still works. If you have access to a hardware device testing that you can use keys/certs stored on that with mod_nss would be a good way to test too. ---------------------------------------------------------------
Verified: RHEL5.6(x86_64, i386) Version: mod_nss-1.0.8-2.el5.x86_64.rpm mod_nss does work fine with the new build Successful run of beaker auto tests -- https://beaker.engineering.redhat.com/jobs/27209
An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on therefore solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHBA-2011-0049.html