Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.

Bug 1227376

Summary: Cannot specify certificates by RFC7512 PKCS#11 URI
Product: [Fedora] Fedora Reporter: David Woodhouse <dwmw2>
Component: nssAssignee: Kai Engert (:kaie) (inactive account) <kengert>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 25CC: emaldona, kdudka, kengert, nmavrogi, rrelyea
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-07-11 13:33:21 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1217727, 1411345, 1520527    

Description David Woodhouse 2015-06-02 14:05:04 UTC
Fedora packaging guidelines state that packages should accept PKCS#11 URIs to specify SSL certificates. NSS doesn't seem to have a way to do this; the best advise for Fedora packages currently linked against NSS is "if you can build against OpenSSL or GnuTLS instead, do so".

Let's fix that...

Comment 1 Jan Kurik 2016-07-26 04:16:03 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 25 development cycle.
Changing version to '25'.

Comment 2 Fedora Admin XMLRPC Client 2016-08-15 15:53:31 UTC
This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.

Comment 3 David Woodhouse 2016-08-18 06:39:35 UTC
GSoC student has this basically working. Would desperately love some NSS experts to help refine it for submission...

https://github.com/varunnaganathan/nss/commits/master

Comment 4 David Woodhouse 2016-08-19 15:28:37 UTC
First round of patches submitted to http://bugzil.la/1162897

Comment 5 Kai Engert (:kaie) (inactive account) 2017-07-11 13:33:21 UTC
This should be resolved by the upgrade to NSS 3.31, marking as duplicate.

*** This bug has been marked as a duplicate of bug 1460051 ***