Control: found -1 2:3.89-2

On Mon, Mar 14, 2022 at 10:28:25AM +0100, Laurent Bigonville wrote:
> Source: nss
> Version: 2:3.52-1
>
> nss currently FTBFS on x32 architecture with the following error:
> 
> A PKCS #11 module returned CKR_DEVICE_ERROR, indicating that a problem has 
> occurred with the token or slot.
> ERROR: Unable to switch FIPS modes.

The same FTBFS affects 2:3.89-2 on the buildds:
  
https://buildd.debian.org/status/fetch.php?pkg=nss&arch=x32&ver=2%3A3.89-2&stamp=1679018281&raw=0
however, on my x32 machine, I just built nss 2:3.89-2 on x32
(apt source, dpkg-buildpackage, no funny options) on current sid
with no hiccups.

Tail of log below.

Best,
наб

-- >8 --

Check File: debian/libnss3/usr/lib/x86_64-linux-gnux32/libnssdbm3.chk
Generate an HMAC key ...
Library File Size: 173560 bytes
  key: 32 bytes
    ae 74 83 c2 ce 8e 82 9a e6 a3
    24 0e 71 ab 72 63 97 95 e6 35
    da e6 b5 fa 9a 68 87 a9 2a cb
    aa 8b
  signature: 32 bytes
    20 53 30 e6 ec dc 4b 80 24 be
    12 70 65 66 c8 ef 16 c5 b1 6e
    ac 1a be 65 9d e6 a8 61 23 ab
    3b f8
# Check FIPS mode correctly works
mkdir debian/tmp
LD_LIBRARY_PATH=debian/libnss3/usr/lib/x86_64-linux-gnux32 
debian/libnss3-tools/usr/bin/modutil -create -dbdir debian/tmp
< /dev/null

WARNING: Performing this operation while the browser is running could cause
corruption of your security databases. If the browser is currently running,
you should exit browser before continuing this operation. Type
'q <enter>' to abort, or <enter> to continue:
LD_LIBRARY_PATH=debian/libnss3/usr/lib/x86_64-linux-gnux32 
debian/libnss3-tools/usr/bin/modutil -fips true -dbdir debian/tmp < /dev/null

WARNING: Performing this operation while the browser is running could cause
corruption of your security databases. If the browser is currently running,
you should exit browser before continuing this operation. Type
'q <enter>' to abort, or <enter> to continue:
FIPS mode enabled.
make[1]: Leaving directory '/tmp/nss-3.89'
   debian/rules override_dh_makeshlibs
make[1]: Entering directory '/tmp/nss-3.89'
dh_makeshlibs -a -- -c4
make[1]: Leaving directory '/tmp/nss-3.89'
   dh_shlibdeps -a
   dh_installdeb
   dh_gencontrol
   dh_md5sums
   dh_builddeb
dpkg-deb: building package 'libnss3' in '../libnss3_3.89-2_x32.deb'.

Attachment: signature.asc
Description: PGP signature

Reply via email to