Created attachment 431844 [details]
These are PEM files which in ASCII begin with the header
BEGIN PRIVATE KEY
The code already supports PKCS#1 format BEGIN RSA PRIVATE KEY but the openssl req -x509 tool creates private keys with the BEGIN PRIVATE KEY format.
There is a second patch attached - with mock and the latest RHEL-6 bits, nss did not build because SEC_SkipTemplate is defined more than once. Not sure why we don't see this problem with the regular RHEL-6 builds in brew, so I don't know if it is needed, but I've attached it anyway.
Created attachment 431845 [details]
Created attachment 431846 [details]
patch for spec file
*** This bug has been marked as a duplicate of bug 631000 ***