URL: https://github.com/freeipa/freeipa/pull/2700
Author: tiran
 Title: #2700: Require 3.41.0-3 on Fedora 28
Action: opened

PR body:
"""
nss-3.41.0-3.fc28 fixes an issue with p11-kit crypto policy that caused
OpenLDAP to fail when SoftHSM2 is installed. The build is available in
Fedora updates-testing and @freeipa/freeipa-master COPR.

nss-3.41.0-1.fc29 will land in stable today.

See: https://pagure.io/freeipa/issue/7810
Signed-off-by: Christian Heimes <chei...@redhat.com>
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2700/head:pr2700
git checkout pr2700
From 8841dc67b78b32d42377074b97f5df55ef0d0d98 Mon Sep 17 00:00:00 2001
From: Christian Heimes <chei...@redhat.com>
Date: Fri, 14 Dec 2018 11:21:42 +0100
Subject: [PATCH] Require 3.41.0-3 on Fedora 28

nss-3.41.0-3.fc28 fixes an issue with p11-kit crypto policy that caused
OpenLDAP to fail when SoftHSM2 is installed. The build is available in
Fedora updates-testing and @freeipa/freeipa-master COPR.

nss-3.41.0-1.fc29 will land in stable today.

See: https://pagure.io/freeipa/issue/7810
Signed-off-by: Christian Heimes <chei...@redhat.com>
---
 .test_runner_config.yaml |  2 --
 freeipa.spec.in          | 10 +++++++---
 2 files changed, 7 insertions(+), 5 deletions(-)

diff --git a/.test_runner_config.yaml b/.test_runner_config.yaml
index c7467ad6b3..3ba83731a2 100644
--- a/.test_runner_config.yaml
+++ b/.test_runner_config.yaml
@@ -50,8 +50,6 @@ steps:
   install_packages:
   - sed -i 's/%_install_langs \(.*\)/\0:fr/g' /etc/rpm/macros.image-language-conf
   - dnf install -y ${container_working_dir}/dist/rpms/*.rpm --best --allowerasing
-  # nss-p11-kit causes OpenLDAP's TLSMC patch to block
-  - rm -f /etc/crypto-policies/local.d/nss-p11-kit.config && update-crypto-policies
   install_server:
   - ipa-server-install -U --domain ${server_domain} --realm ${server_realm} -p ${server_password}
     -a ${server_password} --setup-dns --setup-kra --auto-forwarders
diff --git a/freeipa.spec.in b/freeipa.spec.in
index 92e6bf2ac6..9ec79f0772 100644
--- a/freeipa.spec.in
+++ b/freeipa.spec.in
@@ -82,9 +82,13 @@
 # and https://pagure.io/dogtagpki/issue/3073
 %global pki_version 10.6.8-3
 
-# NSS release with fix for CKA_LABEL import bug in shared SQL database.
-# https://bugzilla.redhat.com/show_bug.cgi?id=1568271
-%global nss_version 3.36.1-1.1
+# NSS release with fix for p11-kit-proxy issue, affects F28
+# https://pagure.io/freeipa/issue/7810
+%if 0%{?fedora} = 28
+%global nss_version 3.41.0-3
+%else
+%global nss_version 3.41.0-1
+%endif
 
 # One-Way Trust authenticated by trust secret
 # https://bugzilla.redhat.com/show_bug.cgi?id=1345975#c20
_______________________________________________
FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org
To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorahosted.org

Reply via email to