Summary: | dev-libs/nss and www-client/mozilla-firefox not built with ECC support | ||
---|---|---|---|
Product: | Gentoo Linux | Reporter: | Rob Stradling <rob> |
Component: | New packages | Assignee: | Mozilla Gentoo Team <mozilla> |
Status: | RESOLVED FIXED | ||
Severity: | normal | ||
Priority: | High | ||
Version: | 2008.0 | ||
Hardware: | All | ||
OS: | All | ||
URL: | https://comodoecccertificationauthority-ev.comodoca.com | ||
Whiteboard: | |||
Package list: | Runtime testing required: | --- |
Description
Rob Stradling
2008-11-17 15:48:30 UTC
Added to -r1, thanks. Thanks Raúl. With dev-libs/nss-3.12-r1 and www-client/mozilla-firefox-3.0.4-r1 I now get the message "Error code: sec_error_untrusted_issuer". This shows that ECC is now working, but it's still not behaving quite like vanilla Firefox 3.0.4. https://bugzilla.mozilla.org/show_bug.cgi?id=450427 comment #20 indicates that Mozilla are shipping Firefox 3.0.4 with a custom version of NSS that has the tag NSS_3_12_1_WITH_CKBI_1_72_RTM. But dev-libs/nss-3.12-r1 presumably has the tag NSS_3_12_RTM. Could you upgrade dev-libs/nss to NSS_3_12_1_WITH_CKBI_1_72_RTM? Or are you only prepared to use the NSS releases that get published to ftp://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/ ? When did nss-3.11.9-r1 become stable on amd64? I see no mention of this in the relevant ebuild.. (In reply to comment #2) > Thanks Raúl. > > With dev-libs/nss-3.12-r1 and www-client/mozilla-firefox-3.0.4-r1 I now get the > message "Error code: sec_error_untrusted_issuer". This shows that ECC is now > working, but it's still not behaving quite like vanilla Firefox 3.0.4. > > https://bugzilla.mozilla.org/show_bug.cgi?id=450427 comment #20 indicates that > Mozilla are shipping Firefox 3.0.4 with a custom version of NSS that has the > tag NSS_3_12_1_WITH_CKBI_1_72_RTM. > But dev-libs/nss-3.12-r1 presumably has the tag NSS_3_12_RTM. > > Could you upgrade dev-libs/nss to NSS_3_12_1_WITH_CKBI_1_72_RTM? > > Or are you only prepared to use the NSS releases that get published to > ftp://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/ ? > I've added 3.12.2_rc1, please test. Thanks Raúl. 3.12.2_rc1 works for me. I can now connect to https://comodoecccertificationauthority-ev.comodoca.com successfully. Good, closing then |