From debbugs-submit-bounces@debbugs.gnu.org Sun Nov 04 04:53:11 2018 Received: (at submit) by debbugs.gnu.org; 4 Nov 2018 09:53:11 +0000 Received: from localhost ([127.0.0.1]:33329 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1gJF5j-000347-J2 for submit@debbugs.gnu.org; Sun, 04 Nov 2018 04:53:11 -0500 Received: from eggs.gnu.org ([208.118.235.92]:37769) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1gJF5h-00033u-Qt for submit@debbugs.gnu.org; Sun, 04 Nov 2018 04:53:10 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gJF5b-0001Kz-Tb for submit@debbugs.gnu.org; Sun, 04 Nov 2018 04:53:04 -0500 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-0.5 required=5.0 tests=BAYES_05,FREEMAIL_FROM, HTML_MESSAGE autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:59815) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1gJF5b-0001JO-Oe for submit@debbugs.gnu.org; Sun, 04 Nov 2018 04:53:03 -0500 Received: from eggs.gnu.org ([2001:4830:134:3::10]:47370) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gJF5a-00083J-O6 for bug-guix@gnu.org; Sun, 04 Nov 2018 04:53:03 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gJF5Y-00010B-QI for bug-guix@gnu.org; Sun, 04 Nov 2018 04:53:02 -0500 Received: from mail-io1-xd36.google.com ([2607:f8b0:4864:20::d36]:33586) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1gJF5Y-0000fx-Kw for bug-guix@gnu.org; Sun, 04 Nov 2018 04:53:00 -0500 Received: by mail-io1-xd36.google.com with SMTP id f12-v6so4424450iog.0 for ; Sun, 04 Nov 2018 01:52:56 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=+l5qHO6W5Y1tqMhUKAflDn0Dp5gR9j+mB0b3fnCMrFc=; b=J34VUbYsFJd4rG6YDRZgQwGTliDXG31TFX2K+eDRleXn7Ar6P0Ql6hlIQXWPNN9zvR LgdARrptx/f6Fjn2XXbbVZXSD9jNi5OE/WUb83a9/GZZckyodeNQ8O+tr0FS3STzHgYX wXWUdURSUe709QwmCArCmhjZDUXBzLK9RJo38kwUhw/nZbD4ubssSlNIniVoaXYKLnnn lzOhma9Uf0vUMQX7ZNqdKUwunCKpmRdL0cV2Cn7luaUMySz1KGZWh8WzjIzNVLNDJhss iPxy6F58qr3WmjbQhTFYo2KmgyF8t0+lwJCRiDzpB6DldM5RFEfxIPZ9pE/TiZpOdZTC DTdg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=+l5qHO6W5Y1tqMhUKAflDn0Dp5gR9j+mB0b3fnCMrFc=; b=e1aNsUkCvQeaHlXRt4pUaJ2l+VWRW1CHTqXfZYLXpqZ6OS42rAGOvdvLHEBn3rxLM7 PyDen13GyGyo5PK5TphLiIPOiXxOV2koUaDgM7rTgPS8d/OneOljDrFkDeD3/tLslTRX nQO7+mWY1ftBE9Dr5CCp9HVbkIlXjGdKzuwsAf8rhv14ACVymdRTZ7vvucAHKkU6067K /bRpnf1rONH5PuEropum2EcmZX5zIIuXwZKiGcIgAphgBFpvhJwonlGosxWN4w+Nc6fh xD89F+eL3kek7Iv6WY/bEcR1d/YqJIktvzXdOOo65fa5U65FXJENwvs4H7oEib5fhALZ aG8A== X-Gm-Message-State: AGRZ1gKxB2fuosf7ZhuTG3UHbwR2m2ec30kHQfCEfSSSX25lFn9U2gNc hgVHo8PliyANGbuZDaigaWa75fDnPjVRVI+W2Lbn7Q== X-Google-Smtp-Source: AJdET5ft8UwwZHMmd3RlsyO9swqlru3b2DLagA+kyC8SmL3w+6MyCBqcVRu+ERNSnyAQ6FZJza1S+7DKBb/mBDngubk= X-Received: by 2002:a5e:d717:: with SMTP id v23-v6mr14756636iom.54.1541325176126; Sun, 04 Nov 2018 01:52:56 -0800 (PST) MIME-Version: 1.0 From: =?UTF-8?Q?Gnu_R=C3=B6oty?= Date: Sun, 4 Nov 2018 09:52:44 +0000 Message-ID: Subject: nss cannot build To: bug-guix@gnu.org Content-Type: multipart/alternative; boundary="0000000000009b44a00579d3bb68" X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.0 (----) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) --0000000000009b44a00579d3bb68 Content-Type: text/plain; charset="UTF-8" HI from 2 days I build the installation of guixSD to berlin.guixsd.org and nss-3.36.6 cant build. --0000000000009b44a00579d3bb68 Content-Type: text/html; charset="UTF-8"
HI from 2 days I build the installation of guixSD to berlin.guixsd.org and nss-3.36.6 cant build.
--0000000000009b44a00579d3bb68-- From debbugs-submit-bounces@debbugs.gnu.org Sun Nov 04 07:52:56 2018 Received: (at submit) by debbugs.gnu.org; 4 Nov 2018 12:52:56 +0000 Received: from localhost ([127.0.0.1]:33428 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1gJHtf-0003DY-UN for submit@debbugs.gnu.org; Sun, 04 Nov 2018 07:52:56 -0500 Received: from eggs.gnu.org ([208.118.235.92]:48873) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1gJHte-0003DN-I0 for submit@debbugs.gnu.org; Sun, 04 Nov 2018 07:52:54 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gJHtV-0006fi-BD for submit@debbugs.gnu.org; Sun, 04 Nov 2018 07:52:49 -0500 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:43973) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1gJHtT-0006co-2T for submit@debbugs.gnu.org; Sun, 04 Nov 2018 07:52:45 -0500 Received: from eggs.gnu.org ([2001:4830:134:3::10]:58468) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gJHtR-0007M5-29 for bug-guix@gnu.org; Sun, 04 Nov 2018 07:52:42 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gJHtK-0006QR-Fu for bug-guix@gnu.org; Sun, 04 Nov 2018 07:52:38 -0500 Received: from mx1.riseup.net ([198.252.153.129]:49289) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1gJHtJ-0006Li-GV for bug-guix@gnu.org; Sun, 04 Nov 2018 07:52:33 -0500 Received: from piha.riseup.net (piha-pn.riseup.net [10.0.1.163]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "*.riseup.net", Issuer "COMODO RSA Domain Validation Secure Server CA" (verified OK)) by mx1.riseup.net (Postfix) with ESMTPS id 7ED781A01F4 for ; Sun, 4 Nov 2018 04:52:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak; t=1541335950; bh=b8OFbSDQd7QjahkYFsuaOm5bD+pE7XMocHohWr9NXdA=; h=Date:From:To:Subject:Reply-To:In-Reply-To:References:From; b=YXvHujietx9mSj9YHJZH5v+WYf4ZZzu4hOAZlJ7CjkGBu9i2nAejBSNMSMPGr2seG x18EMQ4SKts8Qdr/NOt/R2FHmHYwoTkjwdJcnqWlSFtSRYSCrbuRzSwVD1/noXJFE0 LB4VJ2hoEGsMCqGyW3NEehJvSjJcjvGxqbIm4+sM= X-Riseup-User-ID: CB5AA8AB644E5DB231710DF2D2B2F10A4D8AE2E3DB91CB017C942FD1288B5907 Received: from [127.0.0.1] (localhost [127.0.0.1]) by piha.riseup.net with ESMTPSA id 50B82645DB for ; Sun, 4 Nov 2018 04:52:30 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Date: Sun, 04 Nov 2018 04:52:29 -0800 From: Quiliro Ordonez To: bug-guix@gnu.org Subject: Re: bug#33253: nss cannot build Mail-Reply-To: quiliro@fsfla.org In-Reply-To: References: Message-ID: <075f2744c3f4eb6df7d0baaf57e4a2e7@riseup.net> Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.1 (----) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: quiliro@fsfla.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.1 (-----) El 2018-11-04 04:52, Gnu R=C3=B6oty escribi=C3=B3: > HI from 2 days I build the installation of guixSD to berlin.guixsd.org = and nss-3.36.6 cant build. Errors? Tested solutions? Understandings about Guix? Please provide information so that helping is not so difficult. From debbugs-submit-bounces@debbugs.gnu.org Sun Nov 04 11:30:18 2018 Received: (at 33253) by debbugs.gnu.org; 4 Nov 2018 16:30:19 +0000 Received: from localhost ([127.0.0.1]:34181 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1gJLI2-00023Q-Nu for submit@debbugs.gnu.org; Sun, 04 Nov 2018 11:30:18 -0500 Received: from m4s11.vlinux.de ([83.151.27.109]:34188 helo=bjoernhoefling.de) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1gJLI1-00023I-16 for 33253@debbugs.gnu.org; Sun, 04 Nov 2018 11:30:17 -0500 Received: from alma-ubu (aftr-185-17-204-48.dynamic.mnet-online.de [185.17.204.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by bjoernhoefling.de (Postfix) with ESMTPSA id 7D9AC40A4B; Sun, 4 Nov 2018 17:30:15 +0100 (CET) Date: Sun, 4 Nov 2018 17:30:14 +0100 From: =?UTF-8?B?QmrDtnJuIEjDtmZsaW5n?= To: Gnu =?UTF-8?B?UsO2b3R5?= Subject: Re: bug#33253: nss cannot build Message-ID: <20181104173014.0a56d2dd@alma-ubu> In-Reply-To: References: X-Mailer: Claws Mail 3.13.2 (GTK+ 2.24.30; x86_64-pc-linux-gnu) MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; boundary="Sig_/tpLCyC=R2s8Q6l4hSFkhvBG"; protocol="application/pgp-signature" X-Spam-Score: 0.1 (/) X-Debbugs-Envelope-To: 33253 Cc: 33253@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.9 (/) --Sig_/tpLCyC=R2s8Q6l4hSFkhvBG Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On Sun, 4 Nov 2018 09:52:44 +0000 Gnu R=C3=B6oty wrote: > HI from 2 days I build the installation of guixSD to > berlin.guixsd.org and nss-3.36.6 cant build. This was also reported on guix-help by Brian Woodcox. Here is some analysis I reported to that thread: This package does not build reproducibly. At least in the long term: There are tests that check certificates on temporal validity and that depends on the system time. I can reproduce your result with the 3.39 version. It looks like one certificate is expired. All 6 failing tests look about like this one: s -d AllDB -pp - PASSED chains.sh: Verifying certificate(s) PayPalEE.cert with flags -d AllDB -pp = =20 -o OID.2.16.840.1.114412.1.1=20 vfychain -d AllDB -pp -vv -o OID.2.16.840.1.114412.1.1 /tmp/guix-buil= d-nss -3.39.drv-0/nss-3.39/nss/tests/libpkix/certs/PayPalEE.cert=20 Chain is bad! PROBLEM WITH THE CERT CHAIN: CERT 0. PayPalEE : ERROR -8181: Peer's Certificate has expired. Returned value is 1, expected result is pass chains.sh: #1555: RealCerts: Verifying certificate(s) PayPalEE.cert with f= lags -d AllDB -pp -o OID.2.16.840.1.114412.1.1 - FAILED I don't know how to check the expiration date of PayPalEE.cert. It looks like upstream has not yet worked on it, as the file was lastly modified two years ago: https://hg.mozilla.org/projects/nss/log/tip/tests/libpkix/certs/PayPalEE.ce= rt Cmp also this bug that demands non-expiration certificates: https://bugzilla.mozilla.org/show_bug.cgi?id=3D1330010 Building 3.40 does not work with just updating version/hashsum. A quick solution would be to build nss from a Guix git-checkout and disable tests. But it has many dependencies, so you more or less rebuild th= e world. Bj=C3=B6rn --Sig_/tpLCyC=R2s8Q6l4hSFkhvBG Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iEYEARECAAYFAlvfHpYACgkQvyhstlk+X/2UGgCeNOjEgts62kBSjaZU8RFSLLj9 KB0An0bAlIcLxQzTvq4fzO6yz+kekcBo =6Iju -----END PGP SIGNATURE----- --Sig_/tpLCyC=R2s8Q6l4hSFkhvBG-- From debbugs-submit-bounces@debbugs.gnu.org Sat Apr 03 00:44:29 2021 Received: (at 33253-done) by debbugs.gnu.org; 3 Apr 2021 04:44:29 +0000 Received: from localhost ([127.0.0.1]:33094 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lSY97-0006Op-JG for submit@debbugs.gnu.org; Sat, 03 Apr 2021 00:44:29 -0400 Received: from mail-qk1-f180.google.com ([209.85.222.180]:33309) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lSY95-0006Od-Ri for 33253-done@debbugs.gnu.org; Sat, 03 Apr 2021 00:44:28 -0400 Received: by mail-qk1-f180.google.com with SMTP id o5so7008049qkb.0 for <33253-done@debbugs.gnu.org>; Fri, 02 Apr 2021 21:44:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version:content-transfer-encoding; bh=8phYrpyZI6MsxxyVgYMq9dTbGxAw+6/XWWYdYbl74nQ=; b=tCnMV0uW31Hm/nD96FI283IFI3nubB9D3lslXEd7ZTeQS3kjDFIzDoswRijJzJnq1r 3acVraH21PLmuhxEflJHj78L5Yigt3x+OH2Xr6mGiYwiqT2qUuqgh/8VA2Mpq2lwGyWf zx5jFhl787vQ6kldbWftONOWAKl/FJgyz+j4a9c/bRx0me8EsELGOQtR1ivz0XEuANyR xzVz+piiXETEoSF5Xcyo/cquCwv6Apu5hk9ryFo8XUBwZIWUZts00jrvewpfY9e6kRS9 GrgLEcrh1WodV7dMdAFyKVg0g95Mqhp3E4fzy4hySxJU4Pp2cmlXQ9fDD526sSLqaBVW 9IFg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version:content-transfer-encoding; bh=8phYrpyZI6MsxxyVgYMq9dTbGxAw+6/XWWYdYbl74nQ=; b=h8B+10oxnkM2QavxU1Q2EKLbfZd4flUzciMDVzrc/zGbguPyrb0it2HnXiTyDoJ5DU +gJTrbxnjtJwPy5+4sYfzW2W4hZue2PKKi1jt/x1zuATRFDCYZGrnpVp7aIm6iTFItgE S7EFFLpuWd8SZjLGoYMdBEBM4nn5gKRtn0XmFFEXt0wTbClEKaJko/GPKyJ1s2JSGVeb eWHU70c5wYwWS/toUDO1WQrfOgIlRMlYmlyDmPG0BHDMJSmv/gP6HEhDvOT5rQfEMVIg 1DxXQYNB8ithIADUw4xfmKaJeTu2zAL15Ajd6xZrBuRd3ohQLjiYHGN/PaluB0Ie3ATO 9Srw== X-Gm-Message-State: AOAM532xZgFuVEIEEwm+bRXewuXnDi6UF7uePBmW8sLeS63vldlFvodJ S091rqOaIa391oEBtcS7f21uefeekrl8Jg== X-Google-Smtp-Source: ABdhPJzTcyND/NoF0Y+KGK6Nz6KbFpzEtXgrPhn3ebigdtf1ExH9a815UXS5KPDlAB4ejBtJoT0wCA== X-Received: by 2002:a37:b807:: with SMTP id i7mr15855397qkf.126.1617425062277; Fri, 02 Apr 2021 21:44:22 -0700 (PDT) Received: from hurd (dsl-10-133-254.b2b2c.ca. [72.10.133.254]) by smtp.gmail.com with ESMTPSA id 207sm6988589qkl.125.2021.04.02.21.44.18 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 02 Apr 2021 21:44:21 -0700 (PDT) From: Maxim Cournoyer To: =?utf-8?Q?Bj=C3=B6rn_H=C3=B6fling?= Subject: Re: bug#33253: nss cannot build References: <20181104173014.0a56d2dd@alma-ubu> Date: Sat, 03 Apr 2021 00:44:11 -0400 In-Reply-To: <20181104173014.0a56d2dd@alma-ubu> (=?utf-8?Q?=22Bj=C3=B6rn?= =?utf-8?Q?_H=C3=B6fling=22's?= message of "Sun, 4 Nov 2018 17:30:14 +0100") Message-ID: <87eefsq8o4.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 33253-done Cc: 33253-done@debbugs.gnu.org, Gnu =?utf-8?Q?R=C3=B6oty?= X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi, Bj=C3=B6rn H=C3=B6fling writes: > On Sun, 4 Nov 2018 09:52:44 +0000 > Gnu R=C3=B6oty wrote: > >> HI from 2 days I build the installation of guixSD to >> berlin.guixsd.org and nss-3.36.6 cant build. > > This was also reported on guix-help by Brian Woodcox. > > Here is some analysis I reported to that thread: > > This package does not build reproducibly. At least in the long term: > There are tests that check certificates on temporal validity and that > depends on the system time. > > I can reproduce your result with the 3.39 version. It looks like one > certificate is expired. All 6 failing tests look about like this one: > > > s -d AllDB -pp - PASSED > chains.sh: Verifying certificate(s) PayPalEE.cert with flags -d AllDB -p= p=20=20=20=20=20=20 > -o OID.2.16.840.1.114412.1.1=20 > vfychain -d AllDB -pp -vv -o OID.2.16.840.1.114412.1.1 /tmp/guix-bu= ild-nss > -3.39.drv-0/nss-3.39/nss/tests/libpkix/certs/PayPalEE.cert=20 > Chain is bad! > PROBLEM WITH THE CERT CHAIN: > CERT 0. PayPalEE : > ERROR -8181: Peer's Certificate has expired. > Returned value is 1, expected result is pass > chains.sh: #1555: RealCerts: Verifying certificate(s) PayPalEE.cert > with flags -d AllDB -pp -o OID.2.16.840.1.114412.1.1 - FAILED > > > I don't know how to check the expiration date of PayPalEE.cert. > > It looks like upstream has not yet worked on it, as the file was lastly > modified two years ago: > > https://hg.mozilla.org/projects/nss/log/tip/tests/libpkix/certs/PayPalEE.= cert > > Cmp also this bug that demands non-expiration certificates: > > https://bugzilla.mozilla.org/show_bug.cgi?id=3D1330010 > > Building 3.40 does not work with just updating version/hashsum. > > A quick solution would be to build nss from a Guix git-checkout and > disable tests. But it has many dependencies, so you more or less rebuild = the world. > > > Bj=C3=B6rn Since at least Thu Apr 4 15:14:57 2019 +0200, the test dealing with the problematic PayPalEE.cert certificate is now done after faking the time to a date around the release date with the 'faketime' utility. As nss builds fine currently, I'm marking this bug as done. Thanks for the report! Maxim From unknown Fri Sep 12 02:09:36 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Sat, 01 May 2021 11:24:12 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator