* bmo#1963792 - Fix alias for mac workers on try
* bmo#1966786 - ensure all options can be configured with
SSL_OptionSet and SSL_OptionSetDefault
* bmo#1931930 - ABI/API break in ssl certificate processing
* bmo#1955971 - remove unnecessary assertion in
sec_asn1d_init_state_based_on_template.
* bmo#1965754 - update taskgraph to v14.2.1.
* bmo#1964358 - Workflow for automation of the release on GitHub
when pushing a tag
* bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
* bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
* bmo#1951396 - update taskgraph to v14.1.1
* bmo#1962503 - Partial fix for ACVP build CI job
* bmo#1961827 - Initialize find in sftk_searchDatabase
* bmo#1963121 - Add clang-18 to extra builds
* bmo#1963044 - Fault tolerant git fetch for fuzzing
* bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
* bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or
CMSDEBUG are set
* bmo#1961835 - fix content type tag check in
NSS_CMSMessage_ContainsCertsOrCrls.
* bmo#1963102 - Remove Cryptofuzz CI version check
- Modify bmo1962556.patch to catch OBS specific errors
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/mozilla-nss?expand=0&rev=478
30 lines
1.3 KiB
Diff
30 lines
1.3 KiB
Diff
commit ae5fe2c5652185fe58f9a7bb97486388f84ad5f9
|
|
Author: Dennis Jackson <djackson@mozilla.com>
|
|
Date: Tue Apr 29 08:07:21 2025 +0000
|
|
|
|
Bug 1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp. r=nss-reviewers,jschanck
|
|
|
|
Differential Revision: https://phabricator.services.mozilla.com/D246682
|
|
|
|
NOTE(Martin Sirringhaus): We get a different error code in OBS:
|
|
PR_DIRECTORY_LOOKUP_ERROR (-5973L)
|
|
instead of
|
|
PR_CONNECT_RESET_ERROR (-5961L)
|
|
so I modified the upstreamed patch to grep for both
|
|
|
|
Index: nss/tests/ssl/ssl.sh
|
|
===================================================================
|
|
--- nss.orig/tests/ssl/ssl.sh
|
|
+++ nss/tests/ssl/ssl.sh
|
|
@@ -982,8 +982,8 @@ ssl_policy_pkix_ocsp()
|
|
echo " vfyserv -o wrong.host.badssl.com -d ${P_R_SERVERDIR} 2>&1 | tee ${P_R_SERVERDIR}/vfy.out"
|
|
vfyserv -o wrong.host.badssl.com -d ${P_R_SERVERDIR} 2>&1 | tee ${P_R_SERVERDIR}/vfy.out
|
|
# make sure we have the domain mismatch, not bad signature error
|
|
- echo "grep -E '12276|5961' ${P_R_SERVERDIR}/vfy.out"
|
|
- grep -E '12276|5961' ${P_R_SERVERDIR}/vfy.out
|
|
+ echo "grep -E '12276|5961|5973' ${P_R_SERVERDIR}/vfy.out"
|
|
+ grep -E '12276|5961|5973' ${P_R_SERVERDIR}/vfy.out
|
|
RET=$?
|
|
html_msg $RET $RET_EXP "${testname}" \
|
|
"produced a returncode of $RET, expected is $RET_EXP"
|