Bug 580207 - nss fails to build because of expired test certificate
Summary: nss fails to build because of expired test certificate
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: nss
Version: rawhide
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Elio Maldonado Batiz
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 576071
TreeView+ depends on / blocked
 
Reported: 2010-04-07 17:46 UTC by Elio Maldonado Batiz
Modified: 2010-05-03 20:16 UTC (History)
5 users (show)

Fixed In Version: nss-3.12.6-4.fc12
Clone Of:
Environment:
Last Closed: 2010-04-22 22:57:05 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)

Description Elio Maldonado Batiz 2010-04-07 17:46:50 UTC 
Description of problem: Build of nss-3.12.6-3.fc14 failed. The build log http://koji.fedoraproject.org/koji/getfile?taskID=2098589&name=build.log
shows three test failures. Examination of the failures shows that the PayPalEE.cert using in some tests has expired.

Version-Release number of selected component (if applicable): nss-3.12.6-2 or higher for F-12, F=13, and F-314.

How reproducible: Always

Steps to Reproduce:
1. submit a scratch build of nss
2. wait for the notification from Koji
  
Actual results: 
tests failures cause build to fail, build.log shows the cause being the expired PayPalEE.cert certificate

Expected results:
build succeds

Additional info: This problem was encountered upstream and a new certificate is available
Comment 1 Elio Maldonado Batiz 2010-04-07 17:55:16 UTC 
The fix is to replace the expired certificate with the new one, regenerate the source tar ball, and update the cvs look-aside cache with it.
Comment 2 Elio Maldonado Batiz 2010-04-08 23:27:27 UTC 
(In reply to comment #1) Kai pointed out to me that the proper way is leave the source tar ball as it is. In  %setup after the sources have been extracted copy the new cert to its proper location. I have implemented the fixed as indicated.
Comment 3 Fedora Update System 2010-04-09 04:23:22 UTC 
nss-3.12.6-4.fc13 has been submitted as an update for Fedora 13.
http://admin.fedoraproject.org/updates/nss-3.12.6-4.fc13
Comment 4 Fedora Update System 2010-04-09 21:05:59 UTC 
nss-3.12.6-4.fc13 has been pushed to the Fedora 13 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update nss'.  You can provide feedback for this update here: http://admin.fedoraproject.org/updates/nss-3.12.6-4.fc13
Comment 5 Fedora Update System 2010-04-09 23:59:04 UTC 
nss-3.12.6-4.fc12 has been submitted as an update for Fedora 12.
http://admin.fedoraproject.org/updates/nss-3.12.6-4.fc12
Comment 6 Fedora Update System 2010-04-13 01:59:06 UTC 
nss-3.12.6-4.fc12 has been pushed to the Fedora 12 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update nss'.  You can provide feedback for this update here: http://admin.fedoraproject.org/updates/nss-3.12.6-4.fc12
Comment 7 Fedora Update System 2010-04-22 22:56:45 UTC 
nss-3.12.6-4.fc13 has been pushed to the Fedora 13 stable repository.  If problems still persist, please make note of it in this bug report.
Comment 8 Fedora Update System 2010-05-03 16:14:18 UTC 
nss-3.12.6-4.fc12 has been pushed to the Fedora 12 stable repository.  If problems still persist, please make note of it in this bug report.
Comment 9 Albert Strasheim 2010-05-03 20:16:50 UTC 
Noticed the same bug in RHEL 6 beta1.
Note You need to log in before you can comment on or make changes to this bug.