[Rpm-maint] [rpm-software-management/rpm] Calling NSS_InitContext() without define-able parameters breaks the ability to use the NSS keystore (#654)

[Panu Matilainen]

NSS_InitContext() is supposed to return a *private* NSS context (see https://wiki.mozilla.org/NSS_Library_Init), and rpm uses it on NSS versions where available. Either rpm was compiled against an NSS version that doesn't have that function (in which case this is a distro issue) or  the context is not as private as the docs seem to indicate, in which case it's an NSS bug. 

Sorry but there's simply nothing rpm can do about either problem. It's just not possible to try co-operate with arbitrary other consumers of NSS with different and potentially conflicting configuration. That is precisely the problem  NSS_InitContext() is supposed to solve over the older NSS_Init()/NSS_NoDB_Init() and if it doesn't, it's an NSS bug.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/654#issuecomment-479772845
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20190403/99e4aa62/attachment.html>