On Wed, Apr 22, 2020 at 10:12 AM Daiki Ueno ueno@fedoraproject.org wrote:
Hello,
I am not sure if this deserves a Fedora Change proposal, so I'd like to hear any opinions first before proceeding with the process.
NSS (the crypto library used by Firefox) historically supports 2 database formats: SQLite and DBM. The latter is considered legacy and we switched the default database format to SQLite in F28[1]. Since then I presume most of the applications have switched to the new format. Therefore we are planning to phase out the support of DBM, targetting F33+.
Please let me know if there is any concern.
It seems this broke the kernel build. I did some scratch build today to test some patches, but it failed with this:
+ /usr/bin/pesign -c 'Red Hat Test Certificate' --certdir /etc/pki/pesign-rh-test -i arch/x86/boot/bzImage -o vmlinuz.signed -s pesign: Could not initialize nss. NSS says "The certificate/key database is in an old, unsupported format." errno says "No such file or directory" error: Bad exit status from /var/tmp/rpm-tmp.YKqoK0 (%build) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.YKqoK0 (%build) Child return code was: 1
Here is a clean scratch build from current dist-git master: https://koji.fedoraproject.org/koji/taskinfo?taskID=43737486
At the time of writing it failed on x86_64 with this error and passed on s390x (it seems pesign is not run there).
Footnotes: [1] https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
Regards,
Daiki Ueno
devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
-- Ondrej Mosnacek <omosnace at redhat dot com> Software Engineer, Security Technologies Red Hat, Inc.
kernel@lists.fedoraproject.org