Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.
Bug 1768652 - NSS softoken does not include CKM_NSS_IKE1_APP_B_PRF_DERIVE in it's mechanism list, causing libreswan to crash.
Summary: NSS softoken does not include CKM_NSS_IKE1_APP_B_PRF_DERIVE in it's mechanism...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: nss
Version: 32
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Bob Relyea
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 1768653 1768655
TreeView+ depends on / blocked
 
Reported: 2019-11-04 21:38 UTC by Bob Relyea
Modified: 2020-10-26 22:31 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 1768653 1768655 (view as bug list)
Environment:
Last Closed: 2020-10-26 22:31:27 UTC
Type: Bug
Embargoed:

Attachments (Terms of Use)
Add CKM_NSS_IKE1_APP_B_PRF_DERIVE (1.28 KB, patch)
2019-11-04 21:40 UTC, Bob Relyea 		no flags Details | Diff
View All

Description Bob Relyea 2019-11-04 21:38:06 UTC 
Softoken does not advertise CKM_NSS_IKE1_APP_B_PRF_DERIVE  int it's mechanism list. This prevents libreswan from finding softoken as a token that can supply this mechanism, preventing connections that require APP_B
Comment 1 Bob Relyea 2019-11-04 21:40:25 UTC 
Created attachment 1632772 [details]
Add CKM_NSS_IKE1_APP_B_PRF_DERIVE
Comment 2 Ben Cotton 2020-02-11 17:49:22 UTC 
This bug appears to have been reported against 'rawhide' during the Fedora 32 development cycle.
Changing version to 32.
Comment 3 Paul Wouters 2020-05-11 17:39:00 UTC 
I'm pretty sure this is fixed in fedora already and the bug can be closed ?
Comment 4 Bob Relyea 2020-05-11 21:11:36 UTC 
yes, it has nss 5.1 which should have the fix.
Note You need to log in before you can comment on or make changes to this bug.