Hello - Sorry for the trouble you're having. I've downgraded a clean, up to date 12.04 amd64 VM to libnss3 and libnss3-1d version 2:3.21-0ubuntu0.12.04.3. Then I set up a new user with encrypted home (`adduser --encrypt-home foo`). I verified that I can log in and access the encrypted home directory and then upgraded libnss3 and libnss3-1d to version 2:3.23-0ubuntu0.12.04.1. I could still successfully log in and access the encrypted home after upgrading.
In addition, I locally rebuilt ecryptfs-utils in Precise as there are some test cases which get run as part of the build process which excercise the same code that you're having trouble with. They all still pass with the newer NSS version. Did anything else change on your system around that time? Do you have any other information which may be helpful in reproducing the bug so that we can work towards getting you a fix? I'm going to make this a public, non-security bug since there's no vulnerability. It will be helpful for other affected users to comment on the report. ** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to nss in Ubuntu. https://bugs.launchpad.net/bugs/1602680 Title: ecryptfs not work with libnss3/libnss3-1d Version 2:3.23-0ubuntu0.12.04.1 Status in nss package in Ubuntu: New Bug description: After updating libnss3 and libnss3-1d from 2:3.21-0ubuntu0.12.04.3 to 2:3.23-0ubuntu0.12.04.1 last night it is not longer possible to mount my home directory encrypted with ecryptfs. Automatic by login or with ecryptfs-recover-private or else not work. After downgrade to Version 2:3.21-0ubuntu0.12.04.3 if works fine. syslog: Jul 13 01:29:36 Michael-Thinkpad-X121e-SSD ecryptfs-insert-wrapped-passphrase-into-keyring: do_hash: PK11_HashBuf() error; SECFailure = [-1]; PORT_GetError() = [-8128] Jul 13 01:29:36 Michael-Thinkpad-X121e-SSD ecryptfs-insert-wrapped-passphrase-into-keyring: Error generating passphrase signature; rc = [-22] Jul 13 01:29:36 Michael-Thinkpad-X121e-SSD ecryptfs-insert-wrapped-passphrase-into-keyring: Error attempting to unwrap passphrase from file [/home/michael/.ecryptfs/wrapped-passphrase]; rc = [-22] ----------------------------------------------------------------------------------------------------- lsb_release -rd Description: Ubuntu 12.04.5 LTS Release: 12.04 apt-cache policy libnss3 libnss3-1d after downgrade to previous version libnss3: Installiert: 2:3.21-0ubuntu0.12.04.3 Kandidat: 2:3.23-0ubuntu0.12.04.1 Versionstabelle: 2:3.23-0ubuntu0.12.04.1 0 500 http://archive.ubuntu.com/ubuntu/ precise-updates/main amd64 Packages 500 http://archive.ubuntu.com/ubuntu/ precise-security/main amd64 Packages *** 2:3.21-0ubuntu0.12.04.3 0 100 /var/lib/dpkg/status 3.13.1.with.ckbi.1.88-1ubuntu6 0 500 http://archive.ubuntu.com/ubuntu/ precise/main amd64 Packages libnss3-1d: Installiert: 2:3.21-0ubuntu0.12.04.3 Kandidat: 2:3.23-0ubuntu0.12.04.1 Versionstabelle: 2:3.23-0ubuntu0.12.04.1 0 500 http://archive.ubuntu.com/ubuntu/ precise-updates/main amd64 Packages 500 http://archive.ubuntu.com/ubuntu/ precise-security/main amd64 Packages *** 2:3.21-0ubuntu0.12.04.3 0 100 /var/lib/dpkg/status 3.13.1.with.ckbi.1.88-1ubuntu6 0 500 http://archive.ubuntu.com/ubuntu/ precise/main amd64 Packages I have marked the bug as security vulnerability because I must use older version they be more unsafe than the new one to work with my laptop. Unfortunately I go to holiday tomorrow. I'll be back at next monday 18. July 2016 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nss/+bug/1602680/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
