John Hein <z7dr6ut...@snkmail.com> has reassigned Bugzilla Automation
<bugzi...@freebsd.org>'s request for maintainer-feedback to ge...@freebsd.org:
Bug 205171: security/nss: install nsslowhash.h
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=205171



--- Description ---
Created attachment 164027
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=164027&action=edit
[patch] enable NSSLOWHASH API

libfreebl.so is installed by security/nss, but the NSSLOWHASH hashing API is
not enabled.

After building with the attached patch, it provides:

nm -oCD /usr/local/lib/nss/libfreebl3.so | egrep 'NSSLOW'
/usr/local/lib/nss/libfreebl3.so:0004a2f0 T NSSLOWHASH_Begin
/usr/local/lib/nss/libfreebl3.so:0004a380 T NSSLOWHASH_Destroy
/usr/local/lib/nss/libfreebl3.so:0004a340 T NSSLOWHASH_End
/usr/local/lib/nss/libfreebl3.so:0004a370 T NSSLOWHASH_Length
/usr/local/lib/nss/libfreebl3.so:0004a3c0 T NSSLOWHASH_NewContext
/usr/local/lib/nss/libfreebl3.so:0004a310 T NSSLOWHASH_Update
/usr/local/lib/nss/libfreebl3.so:0004a680 T NSSLOW_Init
/usr/local/lib/nss/libfreebl3.so:0004a2b0 T NSSLOW_Shutdown


And nsslowhash.h is installed - this declares these functions for the API.

Other distributions separate out libfreebl and install nsslowhash.h with the
package that includes libfreebl.  FreeBSD installs lifreebl as part of the full
nss port.  For example, on fedora:

% rpm -qf /usr/lib64/libfreebl3.so /usr/include/nss3/nsslowhash.h
nss-softokn-freebl-3.19.1-1.0.fc20.x86_64
nss-softokn-devel-3.19.1-1.0.fc20.x86_64

I'm not suggesting the freebsd do the same... that's just FYI.

Noticed by: hashing library detection failure (due to missing nsslowhash.h) in
net/chrony's configure stage that causes the secure hash feature to be turned
off.


QA:
 - portlint: pass
 - stage-qa: pass
 - testport: pass (9-stable i386)
_______________________________________________
freebsd-gecko@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-gecko
To unsubscribe, send any mail to "freebsd-gecko-unsubscr...@freebsd.org"

Reply via email to