Bug#588806: libnss3-1d: Impossible to enable FIPS mode

Lior Okman lior.okman at insightix.com
Mon Jul 12 12:31:11 UTC 2010


Package: libnss3-1d
Version: 3.12.6-2
Severity: normal


It is impossible to enable FIPS mode using the libnss3-1d binaries available
in Squeeze.

The same functionality works both in the Lenny version and in upstream.

squeeze:~# mkdir db
squeeze:~# cd db
squeeze:~/db# modutil  -create -dbdir .
squeeze:~/db# modutil -fips true -dbdir .

security library: invalid arguments.
ERROR: Unable to switch FIPS modes.

This is caused by invalid .chk files packaged with the shared objects.

-- System Information:
Debian Release: squeeze/sid
   APT prefers testing
   APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libnss3-1d depends on:
ii  libc6                   2.11.2-2         Embedded GNU C Library: 
Shared lib
ii  libnspr4-0d             4.8.4-1          NetScape Portable Runtime 
Library
ii  libsqlite3-0            3.6.23.1-4       SQLite 3 shared library
ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime

libnss3-1d recommends no packages.

libnss3-1d suggests no packages.

-- no debconf information





More information about the pkg-mozilla-maintainers mailing list