Nelson,

   Thank you for your response.

The module is an access manager Apache agent module from Sun
(libamapc2). This gets loaded when Apache starts and handles handles
authentication of AM protected applications.

You are correct that I don't see sec_error_ext_not_found in logs, but
I found it is happening from tracing AM agent module. The error
message in the AM agent module is

 all: Connection::read(): NSPR Error while reading data:-5990
 AuthService: BaseService::doRequest() caught NSPRException: PR_Recv
called by Connection::read() returned PR_IO_TIMEOUT_ERROR

The NSS/NSPR/SSL library that we are using is the one shipped with
Solaris 10 update 6.

NSPR version = 4.6.7
NSS version = 3.11.7
libssl is also the same version as NSS

we have a working config
NSS 3.11.10
NSPR 4.7.1

The AM agent modules itself is not configured with a CA cert that
trusts, that's what I have been told and I have also been told it is
configured to trust all certs since this only involves internal SSL
communication with internal load balancer.

Is the application (AM agent module) trying to create some temp
certificate when it calls __CERT_NewTempCertificate? Any  reference
where I can get more info is appreciated.

Thanks
SN
-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to