From: Christina O'Donnell <cdo@mutix.org>
To: 40316@debbugs.gnu.org
Cc: guix-devel@gnu.org, steve@futurile.net, zhengjunjie@iscas.ac.cn,
Christina O'Donnell <cdo@mutix.org>
Subject: [PATCH 0/6] WIP: nss: Update to 3.99
Date: Fri, 26 Apr 2024 22:33:56 +0100 [thread overview]
Message-ID: <cover.1714166213.git.cdo@mutix.org> (raw)
Hi,
I've got as far as making nss 3.98 reproducible, however updating it to 3.99
results in 51 test failures. These are regressions, and worked correctly for
3.98. I'm not entirely sure what the issue is, but I've run out of time to
debug it this week, so I'm sending this patch up as is.
Up to patch 3 build correctly. Patch 4 is the first one that fails.
The issue specifically seems to all be related to FIPS:
A PKCS #11 module returned CKR_DEVICE_ERROR, indicating that a problem has
occurred with the token or slot.
If someone could take a look at this and see if there's anything I've missded
then I'd appreciate that. Otherwise I'm free to pick it back up again on
Tuesday.
Let me know if you have any questions.
Kind regards,
Christina
Christina O'Donnell (4):
gnu: nss: Make reproducible.
gnu: nss: Update to 3.99.
gnu: nss-certs: Update to 3.99.
WIP: nss: Attempting to resolve FIPS regression.
Zheng Junjie (2):
gnu: nss: Fix cross-compilation.
gnu: nspr: Fix cross-compilation.
gnu/packages/certs.scm | 24 +++++--
gnu/packages/nss.scm | 30 +++++++--
.../patches/nss-Disable-library-signing.patch | 67 +++++++++++++++++++
3 files changed, 111 insertions(+), 10 deletions(-)
create mode 100644 gnu/packages/patches/nss-Disable-library-signing.patch
base-commit: 9a47ef6182b6a36354699efbdbedca17f24cd9b8
--
2.41.0
next reply other threads:[~2024-04-26 21:35 UTC|newest]
Thread overview: 12+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <20200329131611.38448a58@scratchpost.org>
2024-04-26 21:33 ` Christina O'Donnell [this message]
2024-04-26 21:33 ` bug#40316: [PATCH 1/6] gnu: nss: Fix cross-compilation Christina O'Donnell
2024-04-26 21:33 ` bug#40316: [PATCH 2/6] gnu: nspr: " Christina O'Donnell
2024-04-26 21:33 ` [PATCH 3/6] gnu: nss: Make reproducible Christina O'Donnell
2024-04-26 21:34 ` [PATCH 4/6] gnu: nss: Update to 3.99 Christina O'Donnell
2024-04-26 21:34 ` [PATCH 5/6] gnu: nss-certs: " Christina O'Donnell
2024-04-26 21:34 ` [PATCH 6/6] WIP: nss: Attempting to resolve FIPS regression Christina O'Donnell
2024-05-02 8:15 ` bug#40316: nss not reproducible Ludovic Courtès
2024-05-02 15:20 ` Christina O'Donnell
2024-05-06 10:12 ` Ludovic Courtès
2024-05-06 11:37 ` Christina O'Donnell
2024-05-14 9:15 ` Ludovic Courtès
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: https://guix.gnu.org/
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=cover.1714166213.git.cdo@mutix.org \
--to=cdo@mutix.org \
--cc=40316@debbugs.gnu.org \
--cc=guix-devel@gnu.org \
--cc=steve@futurile.net \
--cc=zhengjunjie@iscas.ac.cn \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this public inbox
https://git.savannah.gnu.org/cgit/guix.git
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).