Bug 614532 - Add support for PKCS#8 encoded PEM RSA private key files
Summary: Add support for PKCS#8 encoded PEM RSA private key files
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: nss
Version: 14
Hardware: All
OS: Linux
low
medium
Target Milestone: ---
Assignee: Elio Maldonado Batiz
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 630102
TreeView+ depends on / blocked
 
Reported: 2010-07-14 17:05 UTC by Rich Megginson
Modified: 2010-09-11 03:39 UTC (History)
4 users (show)

Fixed In Version: nss-3.12.7-4.fc14
Clone Of:
: 630102 (view as bug list)
Environment:
Last Closed: 2010-08-20 01:31:31 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
0001-Add-support-for-PKCS-8-encoded-private-keys.patch (8.49 KB, patch)
2010-07-14 17:05 UTC, Rich Megginson
no flags Details | Diff
0001-Do-not-define-SEC_SkipTemplate.patch (1.04 KB, patch)
2010-07-14 17:39 UTC, Rich Megginson
no flags Details | Diff
patch for spec file (1.48 KB, patch)
2010-07-14 17:39 UTC, Rich Megginson
no flags Details | Diff

Description Rich Megginson 2010-07-14 17:05:13 UTC
Created attachment 431849 [details]
0001-Add-support-for-PKCS-8-encoded-private-keys.patch

These are PEM files which in ASCII begin with the header

BEGIN PRIVATE KEY

The code already supports PKCS#1 format BEGIN RSA PRIVATE KEY but the openssl req -x509 tool creates private keys with the BEGIN PRIVATE KEY format.

There is a second patch attached - with mock, nss did not build because SEC_SkipTemplate is defined more than once.  Not sure why we don't see this problem with the regular builds, so I don't know if it is needed, but I've attached it anyway.

Comment 1 Rich Megginson 2010-07-14 17:39:09 UTC
Created attachment 431859 [details]
0001-Do-not-define-SEC_SkipTemplate.patch

Comment 2 Rich Megginson 2010-07-14 17:39:48 UTC
Created attachment 431860 [details]
patch for spec file

Comment 3 Rich Megginson 2010-07-14 17:40:51 UTC
I don't know if you want these patches applied to current Fedora versions - the git patch flies should apply cleanly, don't know about the spec file patch.

Comment 4 Bug Zapper 2010-07-30 12:34:55 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 14 development cycle.
Changing version to '14'.

More information and reason for this action is here:
http://fedoraproject.org/wiki/BugZappers/HouseKeeping

Comment 5 Rob Crittenden 2010-08-09 19:47:22 UTC
These two patches have been accepted upstream.

Comment 6 Fedora Update System 2010-08-10 05:35:44 UTC
nss-3.12.6-11.fc14 has been submitted as an update for Fedora 14.
http://admin.fedoraproject.org/updates/nss-3.12.6-11.fc14

Comment 7 Fedora Update System 2010-08-11 02:55:49 UTC
nss-3.12.6-11.fc14 has been pushed to the Fedora 14 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update nss'.  You can provide feedback for this update here: http://admin.fedoraproject.org/updates/nss-3.12.6-11.fc14

Comment 8 Fedora Update System 2010-08-11 23:01:03 UTC
nss-3.12.6-11.fc12 has been submitted as an update for Fedora 12.
http://admin.fedoraproject.org/updates/nss-3.12.6-11.fc12

Comment 9 Fedora Update System 2010-08-11 23:01:20 UTC
nss-3.12.6-11.fc13 has been submitted as an update for Fedora 13.
http://admin.fedoraproject.org/updates/nss-3.12.6-11.fc13

Comment 10 Elio Maldonado Batiz 2010-08-13 21:02:17 UTC
My bad, I discovered that the nss-pem tar ball uploaded to the look-aside cache has the same contents as the one it was intended to replace. Rather than making and uploading a new tar ball I'll just apply the patches via the spec file. New builds are coming, with Rawhide first.

Comment 11 Fedora Update System 2010-08-13 21:13:33 UTC
nss-3.12.6-11.fc13 has been pushed to the Fedora 13 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update nss'.  You can provide feedback for this update here: http://admin.fedoraproject.org/updates/nss-3.12.6-11.fc13

Comment 12 Fedora Update System 2010-08-15 16:31:43 UTC
nss-3.12.6-12.fc14 has been submitted as an update for Fedora 14.
http://admin.fedoraproject.org/updates/nss-3.12.6-12.fc14

Comment 13 Fedora Update System 2010-08-15 16:36:39 UTC
nss-3.12.6-12.fc13 has been submitted as an update for Fedora 13.
http://admin.fedoraproject.org/updates/nss-3.12.6-12.fc13

Comment 14 Fedora Update System 2010-08-15 16:38:21 UTC
nss-3.12.6-12.fc12 has been submitted as an update for Fedora 12.
http://admin.fedoraproject.org/updates/nss-3.12.6-12.fc12

Comment 15 Fedora Update System 2010-08-20 01:31:15 UTC
nss-3.12.6-12.fc13 has been pushed to the Fedora 13 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 16 Fedora Update System 2010-09-02 15:42:13 UTC
nss-3.12.7-3.fc14,nss-softokn-3.12.7-3.fc14,nss-util-3.12.7-2.fc14,nspr-4.8.6-1.fc14 has been submitted as an update for Fedora 14.
https://admin.fedoraproject.org/updates/nss-3.12.7-3.fc14,nss-softokn-3.12.7-3.fc14,nss-util-3.12.7-2.fc14,nspr-4.8.6-1.fc14

Comment 17 Fedora Update System 2010-09-02 20:35:20 UTC
nss-3.12.6-12.fc12 has been pushed to the Fedora 12 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 18 Fedora Update System 2010-09-07 19:09:08 UTC
nss-3.12.7-4.fc14 has been submitted as an update for Fedora 14.
https://admin.fedoraproject.org/updates/nss-3.12.7-4.fc14

Comment 19 Fedora Update System 2010-09-11 03:39:06 UTC
nss-3.12.7-4.fc14, nspr-4.8.6-1.fc14, nss-util-3.12.7-2.fc14, nss-softokn-3.12.7-3.fc14 has been pushed to the Fedora 14 stable repository.  If problems still persist, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.