Bug 712556 - Pluggable ECC in NSS not enabled
Summary: Pluggable ECC in NSS not enabled
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: nss
Version: rawhide
Hardware: Unspecified
OS: Linux
high
high
Target Milestone: ---
Assignee: Elio Maldonado Batiz
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On: 688423
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-06-11 04:10 UTC by Elio Maldonado Batiz
Modified: 2014-01-23 16:35 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of: 688423
Environment:
Last Closed: 2013-03-11 23:00:52 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
nss.spec %build section changes to truly enable pluggable ecc support (2.08 KB, patch)
2012-08-11 17:57 UTC, Elio Maldonado Batiz
rrelyea: review+
Details | Diff

Comment 1 Fedora Update System 2011-07-22 17:34:41 UTC
nss-3.12.10-5.fc15 has been submitted as an update for Fedora 15.
https://admin.fedoraproject.org/updates/nss-3.12.10-5.fc15

Comment 2 Fedora Update System 2011-07-23 02:08:48 UTC
Package nss-3.12.10-5.fc15:
* should fix your issue,
* was pushed to the Fedora 15 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing nss-3.12.10-5.fc15'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/nss-3.12.10-5.fc15
then log in and leave karma (feedback).

Comment 3 Fedora Update System 2011-08-05 23:56:54 UTC
nss-3.12.10-5.fc15 has been pushed to the Fedora 15 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 4 Elio Maldonado Batiz 2012-08-11 17:57:15 UTC
Created attachment 603701 [details]
nss.spec %build section changes to truly enable pluggable ecc support

Comment 5 Bob Relyea 2012-08-13 19:42:55 UTC
Comment on attachment 603701 [details]
nss.spec %build section changes to truly enable pluggable ecc support

r+, but the how 'stash bltest and fipstest' away seems a bit hacky. It would be better just to remove them from the make targets with a patch to the make file and add them to a test_ecc sections.

Also, you can just not build these for nss. They aren't they actually build with softokn? you don't need fipstest for all.sh, and you can turn off bltest (which should have ran with softoken, not nss.

bob

Comment 6 Elio Maldonado Batiz 2012-08-13 21:54:19 UTC
You are right and I already run the bltest suite as part of the nss-softokn build for fedora. I look forward to the day when we rebase to 3.14 where everything, test as well as build, should be a lot cleaner.

Comment 7 Jack Magne 2012-08-14 01:10:58 UTC
I have tested this feature to the extent of using a test build of this to have a smart card using the coolkey pkcs#11 module the ability to complete an SSL client auth protected connection to a server. This exercised the EC signing ability of the smart card, which was successful. This is development in progress to give our smart cards ECC capabilities.

Comment 8 Elio Maldonado Batiz 2013-03-11 23:00:52 UTC
It's been a while, let's close this then.


Note You need to log in before you can comment on or make changes to this bug.