Re: (nss-3.12.6) unable to engage FIPS mode: "security library: invalid arguments."

2010-06-13 Thread Robin H. Johnson
On Sun, Jun 13, 2010 at 03:08:07PM -0700, Nelson B Bolyard wrote: > On 2010-06-13 13:02 PDT, Robin H. Johnson wrote: > > On Sun, Jun 13, 2010 at 02:02:39AM -0700, Nelson B Bolyard wrote: > >>> The root of the problem is that the shared libraries can change > >>>

Re: (nss-3.12.6) unable to engage FIPS mode: "security library: invalid arguments."

2010-06-13 Thread Robin H. Johnson
On Sun, Jun 13, 2010 at 02:02:39AM -0700, Nelson B Bolyard wrote: > > The root of the problem is that the shared libraries can change > > POST-install, as needed for ELF signing, split-debug and prelinking. The > > ELF signing is a catch-22. Either I have to run shlibsign afterwards, or > > I have

Re: (nss-3.12.6) unable to engage FIPS mode: "security library: invalid arguments."

2010-06-13 Thread Robin H. Johnson
On Sat, Jun 12, 2010 at 02:11:14PM -0700, Nelson B Bolyard wrote: > You have a problem with a distribution of NSS that is not identical to the > NSS as built from the upstream NSS source repository. Mozilla's NSS team > supports NSS as it comes from the builds from the upstream NSS source > reposi

Re: (nss-3.12.6) unable to engage FIPS mode: "security library: invalid arguments."

2010-06-12 Thread Robin H. Johnson
On Sat, Jun 12, 2010 at 12:15:07PM -0700, Matt McCutchen wrote: > On Jun 12, 2:25 pm, Nelson B Bolyard wrote: > > On 2010-06-10 22:59 PDT, Robin H. Johnson wrote: > > > The testcase has been run on Arch and Fedora now, and both of those > > > cases it works fine. >

Re: (nss-3.12.6) unable to engage FIPS mode: "security library: invalid arguments."

2010-06-10 Thread Robin H. Johnson
On Fri, Jun 11, 2010 at 05:59:27AM +, Robin H. Johnson wrote: > On Thu, Jun 10, 2010 at 10:45:03PM +0000, Robin H. Johnson wrote: > > Testcase 2: > > (see attached minimal C code, based on posts to the list and used in the > > modutils source AND Mozilla). > Bah

Re: (nss-3.12.6) unable to engage FIPS mode: "security library: invalid arguments."

2010-06-10 Thread Robin H. Johnson
On Thu, Jun 10, 2010 at 10:45:03PM +, Robin H. Johnson wrote: > Testcase 2: > (see attached minimal C code, based on posts to the list and used in the > modutils source AND Mozilla). Bah, forgot the actual file. The testcase has been run on Arch and Fedora now, and both of those

(nss-3.12.6) unable to engage FIPS mode: "security library: invalid arguments."

2010-06-10 Thread Robin H. Johnson
I was trying to package up the hmaccalc application from Fedora so we can have it in Gentoo as well, and noticed that it was failing when it tried to engage FIPS mode. Doing some backtracing, it seems FIPS isn't enabling at all on my system, as the DeleteInternalModule call is returning INVALID_AR