On Wed, Dec 21, 2016 at 01:09:38AM -0500, Leo Famulari wrote:
> At least some of these failures are caused by an expired test
> certificate:
> 
> https://bugzilla.mozilla.org/show_bug.cgi?id=1323978
> 
> This breaks compilation of NSS 3.27.1 and 3.27.2 across all of our
> architectures.

With the attached patch, I can build NSS 3.27.1 on x86_64. If we decide
to use this patch, let's build it on its own Hydra branch, because I
suspect there is some non-determinism in the test suite, and I'd rather
not make everyone try building it themselves if it fails on Hydra for
some reason.

By the way, Git shows the upstream patch as binary data, but if you
apply the attached patch to your work tree, there is plain text
annotation you can use to reproduce it. I recreate the annotation here:

Update expired test certificate:
https://bugzilla.mozilla.org/show_bug.cgi?id=1323978

Patch copied from upstream source repository:
https://hg.mozilla.org/projects/nss/rev/03429dfa184e

# HG changeset patch
# User Kai Engert <kaie@kuix.de>
# Date 1481895886 -3600
#      Fri Dec 16 14:44:46 2016 +0100
# Node ID 03429dfa184ec0a11bda4e35e6621ee2ab16a928
# Parent  5e7b5e3d301d7c3395ee982e8f082b0babc333c7
Bug 1323978, The PayPalEE test cert has expired, r=bustage

diff -r 5e7b5e3d301d -r 03429dfa184e tests/libpkix/certs/PayPalEE.cert
--- a/nss/tests/libpkix/certs/PayPalEE.cert     Fri Dec 16 13:41:23 2016 +0100
+++ b/nss/tests/libpkix/certs/PayPalEE.cert     Fri Dec 16 14:44:46 2016 +0100
@@ -1,8 +1,9 @@
[... binary data ...]