Files
mozilla-nss/bmo1962556.patch
Wolfgang Rosenauer dd11f885b2 - update to NSS 3.112
* bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with
                  SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in
                  sec_asn1d_init_state_based_on_template.
  * bmo#1965754 - update taskgraph to v14.2.1.
  * bmo#1964358 - Workflow for automation of the release on GitHub
                  when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or
                  CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in
                  NSS_CMSMessage_ContainsCertsOrCrls.
  * bmo#1963102 - Remove Cryptofuzz CI version check
- Modify bmo1962556.patch to catch OBS specific errors

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/mozilla-nss?expand=0&rev=478
2025-07-07 12:23:31 +00:00

30 lines
1.3 KiB
Diff

commit ae5fe2c5652185fe58f9a7bb97486388f84ad5f9
Author: Dennis Jackson <djackson@mozilla.com>
Date: Tue Apr 29 08:07:21 2025 +0000
Bug 1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp. r=nss-reviewers,jschanck
Differential Revision: https://phabricator.services.mozilla.com/D246682
NOTE(Martin Sirringhaus): We get a different error code in OBS:
PR_DIRECTORY_LOOKUP_ERROR (-5973L)
instead of
PR_CONNECT_RESET_ERROR (-5961L)
so I modified the upstreamed patch to grep for both
Index: nss/tests/ssl/ssl.sh
===================================================================
--- nss.orig/tests/ssl/ssl.sh
+++ nss/tests/ssl/ssl.sh
@@ -982,8 +982,8 @@ ssl_policy_pkix_ocsp()
echo " vfyserv -o wrong.host.badssl.com -d ${P_R_SERVERDIR} 2>&1 | tee ${P_R_SERVERDIR}/vfy.out"
vfyserv -o wrong.host.badssl.com -d ${P_R_SERVERDIR} 2>&1 | tee ${P_R_SERVERDIR}/vfy.out
# make sure we have the domain mismatch, not bad signature error
- echo "grep -E '12276|5961' ${P_R_SERVERDIR}/vfy.out"
- grep -E '12276|5961' ${P_R_SERVERDIR}/vfy.out
+ echo "grep -E '12276|5961|5973' ${P_R_SERVERDIR}/vfy.out"
+ grep -E '12276|5961|5973' ${P_R_SERVERDIR}/vfy.out
RET=$?
html_msg $RET $RET_EXP "${testname}" \
"produced a returncode of $RET, expected is $RET_EXP"