| Message ID | 20240718065946.3964212-1-haixiao.yan.cn@windriver.com |
|---|---|
| State | New |
| Headers | show |
| Series | [meta-oe,kirkstone,1/2] nss: fix failed test of nss. | expand |
Ping On 7/18/24 14:59, Yan, Haixiao (CN) via lists.openembedded.org wrote: > From: Haixiao Yan <haixiao.yan.cn@windriver.com> > > The expiration date of the "NameConstraints.*.cert" test certificate in > the nss package is Sep 4 2023 and causing a test failure. > > This commit regenerate NameConstraints test certificates and changes the > validity period of test certs generated by `make-nc` from ~10 years to > ~20 years. > > regenerate_NameConstrain_test_certificates.tar.gz is a snapshot of certs > files based on the commit which update them. It fails to apply binary > commit, so create a tarball as part of SRC_URI rather than a .patch > file. > > Upstream-Status: Backport [https://hg.mozilla.org/projects/nss/rev/1d565dc7e17dad6d2851b2d6ff522c5d6345ae26] > > Signed-off-by: Haixiao Yan <haixiao.yan.cn@windriver.com> > --- > ...erate_NameConstrain_test_certificates.tar.gz | Bin 0 -> 10734 bytes > meta-oe/recipes-support/nss/nss_3.74.bb | 1 + > 2 files changed, 1 insertion(+) > create mode 100644 meta-oe/recipes-support/nss/nss/regenerate_NameConstrain_test_certificates.tar.gz > > diff --git a/meta-oe/recipes-support/nss/nss/regenerate_NameConstrain_test_certificates.tar.gz b/meta-oe/recipes-support/nss/nss/regenerate_NameConstrain_test_certificates.tar.gz > new file mode 100644 > index 0000000000000000000000000000000000000000..568db6e7ec3fde7dfc0b778968b9d9b46f9e1c48 > GIT binary patch > literal 10734 > zcmV<KDG}BmiwFP!000001MHg#IMmz!$7dL_lQmmN_U$`6%1+8Ig|ZF}rZ5_7b}HgV > z*+Zd3DA~7eC6Q3HTM}gpC2f)x{J$>0d!uet()~YqKM&8GuX%jWcRuI5KA-bGXPjMK > zrI6BClnmtO2>^vfqalIdYXWU*)KnXeLj84pMi4j(gF+)Q2mphH0B{6=MnL${Ke11L > z%iYxtN8;y)IPAeWOW8Vq<$ZXP>r!-RY32OC_=7Kg))@GX_+!AgFUNlgG%NmYcvrWd > zFbWnNe>fV0!GPD{C;)+6j{j2V3-Na(*tqN>crD&I`1bgtQJCfVza;uf{B7~1#i7Bs > z#~*_MmgB!9nm7J>I48Us(b?6Fgd;e+xk`h-@FXYv4g$^%kCvW#&%F1T3NQwYcOc}8 > z@rO^no)v!t8i@q!Kj5c7J><8KKM+i24Fp5$)5yu7WMoi9fS!_CJY-|YTY4yzmI4Ae > z!D#_%O7g8RN*1!MMsOBj<y3=;g+>kMNU$T4oC!EMJHR@1aRm##F45iD4IC%@#ss`4 > zoEc!6x=zDFt*WoN)reou$Oz60a8F$$XJG|f{F^=*O#EspNMJPwJpu_}rd9wbI1;m+ > zgC6y16VRRAotXv|3z?b<d?mm*eLE_BHwQdPpJWeT4e(6gjqM9}<3|8Nsh>VClmbE? > z6afK(!pMSxAZ4Z8FH_O|^pl6pRXaFkCnvcFUOGA!zhZM4>M$(i%{W%Lk4M|k0&9JM > zhPJic#kGyCTHm1k**FzOt>-nwNGD(3En(aFA}WLTcf9>xUUM(RIPQ#`9N6MoK;I{v > zdF4Fk<)A?tG4s8Odk&DLL`cUgTGi&!@X#UaO7sFZWGd^EkwYQSbO4YBKXPj8kd4rg > zF;yrO1|uhftN`f1$KqvyQ2^vn=p;Zp)nc6b6O?jJ0Lj58(a<V*&)GBq&H0eG-bsl^ > ztz`&Gc7-b_tErE=fq2BARw}e>5*dCn$*lP-H-mk6MJ-z>e;q5`Gk4iHM|cVg!or04 > zx$g)k)-pcv*~5+x2+eub_qtj`b?vS#opHI>^s6P!YeyeJgJR6C+v!#%%SVcfpBA|i > zm~O=+EXdXCY4PuKYFWQr-^_n!TU*@1u>ZH_<39q4p2L468Y~Hx`M(4L`JV{>kj?O) > zY##p40`9kPUkDJKCNa+xiKhk?|KFnuzk`1>k>~~@d4~Vk8Q^25`H%j)xzyeHT7Jmp > zue1x-V}C3B?o_+AvhD4loj2*sk50I2AFbBtE6#9h(#Ec`H;640&mnHoIhLV^IN54H > zOs#&gDFmjnum1kY1eWG)hw|QIw{Eg4JC!Cem|3t^r#UI#H|=)d>7tPqf+R*3CSC1! > zyE1x$w!Kd*w@+U&RvTZ_P?{Mo<?q|1GMyhb0h(XR4;)h&VKs~iU`V3_Xo9Jv@m@G5 > z7f1ZJB@V8*iPhsNh=W;z3D7@Is}k2Uve8H!qoDVDqg0?r%A&};oE-ZUKbnjWvfp{Z > zeNsv<CbrcyWs>8hG(5|2Rhet#bIPiAjRc`#lgQk4uT62S!o}JQ7q5Esyf-<q_Dm`@ > zvqu$od4)D(iiYCH6FC&O@2LdI;!K(XjkZ}<$obw0{MD1=H_$ipAH<*so&^7v6fiIU > z5p(N*6dVIz=KoR%WdC8X{(m>af6=-8cU<K9p9kQY1~1DOD)Jfp%g*o~J&k|l-%S9& > z$h~0$Sf+bJH#PLZwXFyEe|CHo`&UbIdeSSNyvU~(v#~ItcmcH0oM6YF;_kgy9?tzb > z)kj&UBSYD-H|L0P-L)v7t+ZL^rD)UP?ps?kBDcp#@~)D&f^{or%;5CSlIF3tRPRtb > zfx&qfXnyp+Ak9a)J+It4iM?_K^!~%OCwCHX&seHbKHR71x{-M5&k3oPyo)bs|H1xW > zj9)p$_~6;ypPLUTFU?>dL_UlRfP8{|^71cWUtmqG((u6Eb<MA%x7Bjr92GHesJYia > z`YaA-F%maQe&`x=`ZEzVq3#S`cWdJYo{<On=9}wZ9IDl}T8(&g;qp7<y%}TI?KDTy > zS#6%S8|QOhvyTeAq$+(JD#wWEk@P5I++jtrMyFVY;_xk8*pqHgxuf|T{*2ObeX^fZ > z_o8La(662ozmtB*|3NL1|AWMS?*AZ{`M(qb`ELgDzh;L23jcBcXX97uf3VP<z8(1n > zBJqc;pPU4BW_kO5xu_f%ljFp&#HD-itZHaCYaGn7EP1d^f5OI%3mPLO$?TmnFtGYT > zc-bD0tn9UR>QpC2U9GpvtCQB|a24H?En@KDSgnBalk-c=XRK$mKTyfrBiP<YDD^z& > z<U=TJUmu@+P?v8I_G%O&@1Zg72fIjRnSUuxMPTu)A0CFQjtK&_qUkp(2G#Ha6#OgF > ztr&QfqOU`w&qp+i=@!>bx`rUC&B*MEgx7VpTX02ml$JWs9ErE`vw>2`MOaigWu^;8 > zCz%-;vPL}da`a57Ph#2fOkQ>4))yQTLj40ZDg`I3TlD-qV?xM8H41c&-%gj<SoFj( > z?s6oJ*qKAWdU!8u9(`~9zd-B%FU`w;EMji`k3cW`KT9Hz{~jR!AI|V!c`pBTzRhs| > zD&8@3>U-?$`X0L-a9HGQvkG9J?hfPB(6%EI7gXYB`ft~K!k&7ILN%N0m_Tv~V-Gd; > z9s>(aV{yE)F^j%!BFhFF)6U8shu)FLR&T>_>x(XS+z(lmn=j$7!6|5?s}(dv9wIHh > zEx(@FEuJ$f<`HERcBql*^eJ*XHrIRV)o;hQx#6Q!pN^<Xw4Bu)sfw)2;QBDJb4_NW > z!$7l9r{*;NbpWlu)=FTB4}K28pFP2kR{2$Asr#Auu0FqGPe`xG>bFE*QYM7?HzHV9 > zy2y$55&ccedrUs6OFusG-eoVlvuq9Xi~TBktW0Sfa>5cS^(Bpr$(^dN)532(^txG` > zCA0ZR>?J4fgmHy;`KJ`>P&-v3+S>*DWI{dI{UT4uoQlaU<E&htzTVOCEb=Oy#qRXh > z$X`A3mo=sD<o^OI|7p$d|IDrbQE&`)ng2^6kpD3t|3A*~A2FBz&WlXs`O5P793Z<z > z?$6A7$yw;920vm!`Jpv$qeAm$?_rrSH|8^4Hm$0m*hb30wcSlE;W~U_mFX8%`VOG0 > zRpXp6T!@=jhZuIJb`}vKv6=8aPx<bw@Hgb%q6j%BBAKAbV$Z2hC)=5s=z^{$J<3hs > zOB1-B?!|#BPdPborQI*7x)HB<oT@NXJI94nyAUQGtvzw?IBC}sSU~%kLkYV?s{HKb > zNdx|b*2b*e$vWnty*|4&B5TSIub>Myc;5VaUm;L@;yiFxu;%Gb5@qg%L(#8=UeKNH > z^xjn?%#d`MUEd<d5g{jFA<_`DLTV+qU)<To7tS}OUi5tcR`8+3Gj&Qd4O$TOZ;`UJ > zjwJy)*QL4y+n(=JscqczGfyKg>r;Ji{r@cqU_Sl>Sj^}3|MK~tB@xJfd656<)BGoc > zKAD>U7Wu@@d@Fzr3pRNE*-5}T6Q^!3Jyjk5Z=dsP{H}P6Yr#t1IAgyb?U5c)Qs``y > z!l`}zo%SvIw<4pbpL5mN76(Ktbe0sY?-?1pU0{?kaFU<!5v!g1pt!Np98K0xk?o6H > z*&!%1jxfBXDYb@@wLEyG<#y)?$zWE?Si9DQlx`+9r)X-S;Ip)`(5zAZk14JGxx2D0 > zUcGO@vzI9RyS?+RnD!bL_aA&|@nl~=->$YEe;qoNUayLdK9)_Ib)*Y!S{r)bOq^Vm > zkJ3IaV6}~r+0tqU&C4RUyFv#WU~2JH(H+;WY0H~ZDT-a^!q_w%zHnfh4zZ)nOSGJt > zhM0P6GMN+gK%?Ul<*S3ET7PO@PrXF?BT^LTs=`L3AyP#vydjCIzk2j8>qqrN{y$=I > z{C{xnf9C%qP|N&Z3W59&1o=NWQ~$I57xsTKv#bAqnoGVK`C1lf-*kq}6lHRNlPTdL > z1`uztO1N;q@NAfh);;N%-O?SxV;o`^pxKND@9c^WjSSQCZLa7v6nisB*-=@q^rUv8 > zA)atBdYn-v7h0}vEtBU}8DI9M|G`Afnnz5qbE5IWFV5xQbo12Z=r3PQWF*V1-Mb|e > z2=v_n=@vQC$`=;=o__H*38cL}G;cptrmIkv&pAv>VBaZ^2LS4%I+q)dPe*dbDpMqw > zz<Sz>4<vA(zQ2<|vqz0zYJdD=8e}zX(;ty{B<jb-QL*Ee@7ndb45GK2!>s=3ZZQad > zUpKVLBb<&oDjeSKc}ZO8nT;5vMT~qb`G&5>x|-(W8%9~pYAnhN?o(a()pOu?)(`O? > zxj6hs0&~xQg8X0hf0jfb|Es_s@qgq0jzuOeE5JNWT-qt(ZUG0}=f^%VvyXjZK0EgL > zvv;AthW)2*wG3O>nX%^nEms+Gl>EKUPOi(2&^SddiwrOh<DR@eD$mSQQ^>1(m0A52 > zaa_TCJ*uU@upy-CjFHTZW2>`+?~XkSKs(%h3frtIgxAo#bgY9NhiVDDIk>BWR|?k^ > zZ_{sHncZ~my}5@OBgLjr5<_ge?JX^{b+12m$@Hp*O=I61@cI(=H%=e>Q~{LI6ae~Q > z+D}(Rk|)Ih(N8`{ch^r=SGKs>tE+EIAR?mA?DY4A?I`w#`Qgp)QKp?{Z5ixR6Qk## > zs#SU57#5YRh!Mzt6}?hQR+K;QZt#$$`*4g=><yAh8DXGUIXB!;=c93rEWP>WYnxXP > zO-j44`CL)qYFde&BsVN!#jq0I{tCTT6nDh%hupIr5;wP?J@1W;=y+{u_2Uo@Jxl!6 > zlj#4kzSsW&7SsR10H66k$YuU7i9q&Cg7tsg4F4tP@_+FT+{|`<FteQ>knxHOzSBQB > z#0E!NkmFOJ9)6Q~rQ}mUldLkP`;yJTMG?WFqej<5-Za&GFsd~-6m=i*Is1}rlI7y= > zP>P^}3XW{2`+>fON7`=kcIobkP>PI*Q+T85U+?MLZa5n0o1&(QFHtv2ly5s=N>SU? > zLMOm`%!4i|piW+V;9lnk>dwntW{jr|uB7^y_8N2Mmo1*-qb(@YXZOI}>a|#3;@yl# > zLfcaZ*41reUK{L?(_FA&G$NphZeKoYnU;Xzv-{R>lNDh(^w0KAIGJv@(;qz6#^oLj > z4_-~;bAJ4GRh^2->BNW{G=oOoq*Yw0#noaAJk{<2d4o=IqM3j-S7~jYzhrVNai1QO > z&R%r6Z#o03uV?G89<R$<Tzx117wG&<YkvO+`Pu$2dYS)AB9Q+9ApZwu_%HTf@PGb& > z_xES51L#<1_7JQV{5^n+B_~oPiYiL?;rRxXn`{rCQ4_WD=e#2*pXYo|XY0|brp5%r > z$@s3c?Jw!1_$yo7Qe%;sL(xY@t_d~YeKmfWQfO?qg`Ic^@6}vks_^RU%Z%f9J#wOT > zT37ZO!ycRQm*VU{2-m;E?Jz$0`naLHag-E;A3ZcDW{ca9W(QlihsENh6jVP+b~kyn > zsbsp8+7&jV(Wa5!(5~njg6?Ksj$WlU3#0?~jZ%hq8uJ>>u6z$WyZH55(u4rNc&_U( > z{{5!$wP_Qs5B5@RX4PADTw=1&ttw~Z#<UDGI>CC_{<p{M%A?&^<W~ouUuVODUK9H2 > zeqkx`=qS<Q2$U(~7KiT#u42<)Jq3Pi{gD5&z$7sL`JcJ`M<Y<n=l_>PApZ}6{2!a) > zKkI+N|3T08e?aapZ5H|(_6yf}`|4Kg_vszJ<|s00!Y1O6iBKhl;Dg*>CDTIbyk2y) > z4n>f&6|){DZ(tn=ReR+71iR&p3B=Nm{YJs_t^<rF5~dh0RMhi9`VHM!7XhV~U=DM0 > zL~Glj>gS_JuS%}3AJZ&9{79p;kz&U?r*p^wfWUUjtYnQmt?)*Xws_<ceCroh?Y(|; > z#MYNogFbb{{05hX_M0b#X_`haZ}K6(9SYs|ynifKFaInRzC*3HL@Gen$ILwTt`^*O > z6XFBLbZx26fxdupk5Lr`TQBkS6JnkL3ho1f-Z$lPvuOUTOL9{xQ%5CL=IfT<dPr$b > zZmA$un!g9d^9MG$L|?HjN$S#R_g_6Fek*-v{g3(C=RdK_-~U|_%{l*x`rXfeF2qgB > z4<QA5Zb-cxEZaZKeIx-}K1Tnxx0lK4ycPctOx3nbh3Vj(9%J+S?J4Wzl!HSWh1al! > ztO~m_;j5ADQe*Sj%}Dk5MEK-@wf&KdAvR$#yu;RFxNrb|BbGBCa?^-@a=3#hv3rl6 > z<k6Q^m>QWK?RuA2DN9!zb)HNyqLk~_{Xh1uI;!gAi-V8uZfWV1l6b(QANd5NLAs<A > z9-?#zC?Ft8N_Pvgq_i{=qQH|72?3E%8i^mfy6dhRqO!2({P_I!=A7?&GiT1s=id3; > zJ9kF@A^-E&;s5BFAU;3+r_2%CAo}LFvZ=B04G80m_fuuumWl1jbwg8!?Nr5+-g@iq > zGKUXpU`0Gp6j>()^w92H=H}W87tCoww$Q7r=u<|3R%>8NXx;O*a=LzhmP(&oFHp*H > zb&5<<8C;x%*VF1Ktwjq>AtwMTi52=)JV%}q&JJC#fq9IO5FYoo_`kt-^1t9=@;?{v > zU-17){?CzMpa1Fh`9Js*|Fa&S{?GTvp8ojfpD%J58#x^~(X$Yk34AbL6CcdUV;a6N > zbk`|&MoPrexF*@V4Ww$<9$K|(*)FH~s)#v#=azk!@UG&VHHZ1DZQ2SMkIL?BL&)wD > zR}3<kgOdG2yMx2FfNNA&rlN*WV6qf2gW=i~v+fPiy7yPt_6Uk~m)HlUkUERfl*R$| > zO2lx6^E>8}JQIhf(NK5ZF0)6Eco_>e&b}+qWJ*T%b_W@qbMn&7-Zl-9CbLJu+@Q({ > z?tx}}t@qlz2y!}FN>b$2xovYRk@95M4M^UWoWB9l-vIeaoomj7+M+Q5&IWsklj<cZ > zSnyz8=F=E=tEF0Ike3rKy{Skk{)h&hC0M?og2wN~$TU@KZ)DwZFVhqJOZeXS?*UVP > ze!+L;|DX8(M}j}*|NmM4KjQR%*>CIa`^-XxiY55Go=_}>e3mKYu=8VqcP9BWIBASe > z?^R$rxkkhZExkd+?TFgA4v)Aa7M;{DDuTZzktPY0j?I<H*+r>ha5`J0Z@oWPs05%r > zbdFKR6l+8$zu_QA{F=o0Y1gemVm9eBm8<x#;#!G7x&~LA=fqU=w_m|rw2|&S;SFFv > zJhQ+;?=rWW`96BJo-k*qCV2g9pBm@0q^f7)op&K+3KxpeCXwW(>Edoty%khc&ppK% > ziZ`e~h)?n+z$#w?wHOp|IbXsSBs^XeVYkaPct2Z;-|97C^U$+v1QUEF3oeGPL}3^* > zjOw=+H*}oe&0O^Hl_k3#J}w(gxkzCUko`VG`M6i_34Rpc%>Sk)R*sHFHa7NG%}ftT > z|K}6<GXIC~EZ>R#e<a}Y0XXg30KJd=55NYlerW-`Z~TsvWmLJb_docBlaXYu7}=Sa > zabx|$SqRAZh!CSIR*u{_Tv#7@8X2O*sU|C>{OcF!_=r-HYHHwL+W>q-u&g8}h?|a! > z=C?jk;fV;WEKH2V9W6}lI2>#_EbO7q9OhTPFdgSUnvTy+F3^EbD#TobAG^o;oyGXM > z3m<seFRg|TJof$^!K0n>frp2ylSsT~tq8#h;F!>DjuMk4iSlFE=uAu!o_}1Skz?0p > z-8Pw;Z4E9;;n<^RWQpdi@rNMW=HDsxSG*)|j^)Et8yX3gp#Um)QG+@HiFZ&U9MI&z > zH$h{LmqQX~b<zVwNT){KR)S?*P_MS`!6{Je^xwg$@>4`*-E2aeYF5Z@tFl@Pk0`Js > zFkGTao#=QX#*USs^CbRaa2?s8)<i*cOwpNQryf|UqTgv01LdI-id8^mhcL_D-6e`1 > zExsEGPZ3E~9$sm8zlX)#a84Lg1^1NZLQdaZv8?C5p+&(lqq9_gjPRrp@Yy%AKCJtN > zKzoftiP0)Dy%M-4h8#?FRu9Q={XCTpea?*qE8d%F&k^iCgv%_s*>~!c@geB4eK2jU > zF~>|DU-n&loFv<M-&i)S2P}LE?;JD)Y)WP-GPW+ruc*zg+7dlUpI2HfoST*rK0#Ez > zp|A!Rnk|n3l`p2BZINdmeSse2u*16}-PL)OtZ3tbUSasVbb}2R)_dU%uv7#AUQ|HN > zwK1d80S#D>1-uStiU9?-$yL+wuDqz17Eh)vC8sG>v>h`w^ZLqKqAnn?R3s5Ok|j+D > zFuYvOPnGLeKYP^xJ8W%`C{e<H*w#;78&pT;^76XD+aOiW(9L?BOC=sq3gHORhok0@ > z9WG>XDlfcZ6Tgs6c7CLVQ@ANevB$mdf5mtD{{n}p|8R5tss0Z)|H=K|Bf&oRi|+GV > z=HL1MN2mWl4&2kH7CJt_*yzf4o&j=ZNuV7Rd@D47L|{{TkF7*(4xZiflwrvh0ewHU > z$Bs(~SQwH-o*miuO)lMgPk(PNX%Pn5^Y=(l=dhq595TzhAE6!_Z-dO&q~a*J!)t<# > z7?<z$_Ni8+ax1a3Gw^grbXwS0XLp1F2kSx-wX5yKlKDBo*UoVmn>}bil{DPLI|Ep? > z$GxWsM%7-u^++u1X;aH4QzN-2ptQU|d|rBaSl`sX=&{Gfg&8i|N5STqa2+^l=-x%o > z=W^(m9#i^zhT;lOI*o?OrcY|x_oS`lVZ8v)&F03<0W)uT-qi7G<U^!*n-sc+t~}#@ > z;ryEP3m6ZE=tE01e1}AAYbGDP2x)r8<6glh_z`?3|9?yQw*%yV{z?Dg{`vi<6aN4A > zvCscL`}{xmiT`>2>+#=zYdjc)zs~?YSRJ5Jk3vD{lKNfYJzKB5#N1OTqnyl$sW8S- > zj{A@7I(1&Z#`WkJe(v+ZY$PwEiWCOJXN?LKa99^D0(vq%2vNMg5P(N66uVV@^ND67 > zKQ!K1rEG=U5KRe>TL8W@HIn#t#pn!T%?PW0djO58>qS`WEOvZdz!;7&Rnav;x+R6= > z!?PhE$ylPAl=nn?+x^s&&8Md?k6u)rXNrGAaeYZAQ0Y{dPTWvt7{eoIzd@;2LzC-F > zR!W4q2U@3Dtc0@Q1)Qt>xYbQA`g6uz8QL1ujItd!g07G|r_M!a&dnOP?({MS&0MX? > zGUm`oU|@@JXgBrCQ2&XpU{{Jzw7w=GhzIwT_Hplm|6hEc{$pbAaP8n0;A{NPFYx94 > zUtWH$llbqEfXfF^v2O#Cf75@K|J(Wx{~z_A&&~hLIKL($6-8c%AKZOuY<SgFs`i$^ > z!=bJ0c(>xh`uyw_s977cXrYAgGxRoP<eo<|Ez+i-hdWvxrH1#^=7Uz&={&sgXX=xw > zJXHHTIAgknc7ZZUY}mBV?Vs?_QdzsD@HRvSp+-ZtUGF%#c-qsz-`=_W_~N2ijHg^x > zGT6W}j=7h#Z6go)-lMhR4jr20+YGgH5+6D^nb+fHpD4kD8r7|7rcf}IMihg0C-Lif > zP8$^=1Uh%pZu{EuHJ2$|2;_{yfxN~W3sfjB57+HY@!}?y3hq58Da{E=X6w+;tile7 > zu<x#h^SnHPZX<c_A%=u;T(+k4h6r93%Yaog<uE2bZ)yA?)vfq>Dm^FJQP5+9$@6ho > z{n^fwhHEPXuZ*v!NHue6(^R*Z8uyuyu_7k0nfO4HSLXCxENz1|>RrPysN4zQSWYbv > zKTjk`0^Ekj4<r*OBjq<JbS$lSL)|b*S4y<ICqX^NBC31l)zq4PpP*+bQ=xiFxuY=y > zHj+n_3NTPoYaSS=1_vI~8y}HJeTMY1E5&+gDP5OU5x!&LYN{U1;F{s)cEjkirpE)% > zMk5s{iO%w)Mhq&WTdEMvFmE!w^RHit9dLGy(d=-b_YWz>Bu^Yds=k9w5729h$(Oz( > z3E(YQbkC1<u9n2=)1Kz^8F3Z%S=@36)$(?LKoD;vSj6V*k)$5N{{P<i@3#m*U)6v3 > z|04c-;{P8B_PPIO${PCQ|4STi{pWu-yOZ}o%Fv647FF;iYXF!nDGXujqESEsP;naz > zcK=-ldr!vQ0uko>fnj7k9#za_YHQI}1=F|DfW}_rL}pS(Sk;%v5fZla+JRoSRuJBm > zr}Zqt)^q2nyH#{^`C)Dhfmn%M?;0;uISUn&ZM{--@CfOn<6Etpb_*Jc!@p-zI$m)} > zVNl^CKgx5-aglt??%bbdpD)J$qyGLN+$O+wDkS;>@`ASLlo1DYcx#$am<4QsV$AVW > z{bKnJDjT$%fZ2kzlPU%mZn}0lVzv%zc^QpkkfeMRQ+DibTT}rgOSuUAWQGDo8>|6; > zhKxggvUODe;Ee661xTuyPs|FXmtxk$8C7EQ=gpsI%+0V4<ipWjT)zoRtPDTyReyqC > z@qPZkv5mdSr9+JWa{np*%X3oy|46X!|3mj}fc|g(|H^;c|Nr~=uf&1l2cIJbzmNZ# > z*xP>9ch3RVp0^VfR!JpTKX;2~7cx1(qv0@FKfgnVMNIurk-lWN%8GoDB+L{S=HD@L > zUriIz|6ZxCgZbRdL*#aX@~yF^4d;G=`ABP2U9W609kgAs9YaNJrA?|gHFt}dkWTyX > zb*D3zzrBX-CQ`Q6U>1jBN7d{c%AI#j->Y8(o2NvGAroG{uB*MiRvS~5RybaXcJsP| > zM~NEBKo!TF6c?Jubn_}4d*c)Gg>L^0{?p`&3TyKZExk{N=EYFz@|dtwEQ&3)Kvz`Q > z^ao<msvpdgJ`R2@U<(GDvo6W0Wn%0Gl_PFuSB~|%*SamLsd~R_z+v_R0F$}epR5le > zn?AUFhyh@h1bJ9aEj_Smn4ZfsK-(tEx0~$@00b6NRG8V5VYf*tZNIL<)~q*D;9BBp > z=#E9lw;Zfvb@p-4op<ckmuK}!bvU}2r@NF$_#~dTR&AmA{RB60i(b{Tf$0K|Rn#N8 > zydZlpEk?E;^4L(8fl#_g&_%4&Fpp_9Vo@9WEIZ(WLnC1x8%pXVdaV`uj(Mu3abcsc > zdVi;HM}<BD30Q}#YGS^l%x`fCZ~i&77m~zIZbGW<FBr4fs%EG*6zD!eSV{aql<q;D > zvt`kCP2A*?qgTwZKg=b?`mx@?i+kaCH^N5AeV9}-nKZGdT7+Js8*u=1Q{rAnWxo*` > z_O&~+bKD#M6MpFa?*VUtebxWx{nP#5llR|`2>aZBai88=Kl%S+|B3g1`Tux8_}o0? > z<H$c91Kt?G_=y!*w%)2yipVlz1l|Kbdvhv4(Z&ngX~~Z-kAft&Y3Y^hEV<2mS^|%r > zWtB(faN=cXx8U}Ycis+?{Lqy>(1Q<_1nD=7y3`&}Z$r?-jqz{lWfBdsLa_ASoa^ov > zW2w|=iM^PPp{-Zr6Vk1bAjf?hx2|t(jrS3|K=aGPEAMI03wSvPh}L3Aa1Re2LL`>q > zcb5$pUs;(f)F*xo<!yyTw4&O-GG~X9)-?=3FZlH^7p^J}alma*5Tj3p%DcCKjNFmE > z&SSS^Jmj?LYdN!Qa89X;%E;1EFLLxwap~C?{xlUimKrTKqh-|8v!%8{Lkn#MBfexl > zz1C$RRl=sny~I!O5BO&O|K``<52F8kng7GH|LcVRj{^JrZ@16?1E2UG{y6JD{C(Z$ > zqZ!3NnS=6f!Kdt?;tXn91=YY3ze~?;2^X&QM>1_9>DV-PZJAt)YDi*|SqPgqMV>Ys > zO$JqZ?>Mc<g_z&C_yI9@P+z4*b3s+3+@Zd;r1P2+9}M92GTY47Y3&*3>AeOT13@cD > z4k4-BQfo?^T>yvgd9?y+9v1u{dLuJ-$R$;>jw>dIXAVN>`x7d>k#g}gqV5t`ORBnz > zOG~^MtRa5H%WhcLVp(gxakC{Ak_vQP-*ik$Yk8#<O7R8?Mt*+DR$EK!MbOg_{<D?V > zImJAe3tMdY$;+ht#b28vx*5uuyc|bl$!{1&Xd@DET5M>Kj#{+fD{2qKEod0wm5e0v > zu59GT#gxZ5?iGK6-{X7r|8IE!{;T}Y{iXiHdzR-!|34D!^S|^y{}+7XfA-_c{}elL > zPoH0HceHXcJCLY9(lq6OHv~=p04*!_WbzuN^j^M>Stk3yrqUsUy@+4|A$F`(Ko1*l > z&&6H<SL8bVhK1GKRk3<%+U0QnSH+ItiapKkrXF7hN{_y5X|7mbc;M|tjfx0qbsODK > zlcB~S@YJ0!x(0)_-sa`%E=tgR92}NQLjgi=5RjLA-Ah^bBYn$p$^0TcoyJAL{<1vt > zk4pM_V@O7<S?*@ecoA;>Ed;km32wgGeCvc#>W$KuS)1&8zP&Eo=f0<=Q79~xB#coQ > zD~`wy;wW~rk(BQ)^DXh1fd<_Y6QU0=edV8IFNSxhDsN-{Z|7d68@i}z-Z>{7!eqDM > z%U21el>GTe|8)7U<C{L+WP$txn{yKWYp)i2vbDHa40J*s1!Ms-%YRa~{}OTj5BmKt > zCWdCC`@iS{faU)LVEO+OTK;Pd?(;uWsq7j=O@eZI4!)XX{?83c!C{iS)sDyQi`RTF > z9B|_etATNT)GO`THOD4(D@Ck$8e{bE^<uA-+=_&Q1)Ba{kItw!3r;`s-jwg^?w+%v > zq0`Gk)PyDaC+&@L7gM^M(dCk`@lL-$V|tcx;{D?*8YZZmy6EN*#b4V0AlY8w$GK;z > z*Zyo<bUbKEpl)yUI((NuQmZPNYA}0Z>$!I;ZR{GB+h05$)O*P0LD@yNm+O+Qc%S_F > z<lm7?&yTx)JpV(GVbA_!qE4<J8JoQ%mi~%s2|BTQPxJiJj1{*zR)3khEF*Hd<$s$= > zJd+O!JovVMVsjRI&H7Y6AEr+Sy0!L~eR4Ue`b1yBw>85sfPw3zu-5mJucvFenb%nl > zbe<SVfZX;!DF?t29{<NE|3~kCrxO5{{|UhI|0J~hcO2ODKlEAMZ%owc{x{LlTCV4s > zR70drPCCFb#Vl3pYT=<CAJfov?t!ulPjj87S+GdEh5ok9NZK`ZT772oPwDR3GX}MW > ze(O%==9XM}8@hjKj&iVgW=gbr-;^bd)^Zw|3Wu&9_WrW%&qkG6`)R5+@xhiRTzfj? > zC55NO1~+=2vwa=o;=c37Jm=V4hidAr?hmN?Z*uPFn(LVhI`my~og*enl@)X*r^Qa3 > zA}4X@_u19!N}p`}5fW6|%Ji^qVP3MK`RZ5)lRqI1ulIVKZF=rGTXxc#xD`Jo?p=M` > zW+whHR<ow!o>i{dD*oh~3O6=tSiNuWzatu{HGMAM=J>fjEvuh1H+QbkPEDNorp`Nj > z`}M}rTOtQBAhZ0ppz8T=W|-}N^U?WVx&UDLZvZU+XX0xA({KETob@}T?D##ibN6Hy > z{v?&+9dlK0n|=Spr?Kb%#Yg9>79@RAI(0<&@MgBIm1_47tUAc?`(N+x7dkgzHwP?P > z#_*=!)Bl7in==2_-P@Sec6F%#Zp~h_?rw3-&$gQX!Ag?(4Grq;!Ye&uIJ2XgbGFo1 > z8;AuNo>XG@S<_Up=-`o5k-VV(lS01!*Qr;YPoCx^e_isC>h%rI{SK8vdj$W<U0Hub > z=i1unJtfB&yyO@r&t1q`qxwAcnU(L2g>H#EyHcZ?DvTcPba4{&FSz!AMg8oig@09V > zhzJE$><fE-ThnjOi_Ykt<t7c6%u~)R-*I_+oy5dTM<h(9{F-I)@4?m&oh!=Jy3TjC > ztxnpq^vsFt1D$3^0rdd6?SE1(fFWG|W1Rmmdj3D10I>Ym1D5~Oq2<5cz?J_FMB9W| > z)$fs?2b#NeOwIsWg}3zIonn0O0MpM6v!spE?DzV`b!kS1e*aVbia~L$TT}n~8cq$@ > zpyn5=zQ52a6?)U;8vP;d!qGCG>gg8+)8&<pYzoYC`}S^LRJhS@<2MW9<%Caca5~I< > zj4$WAFmvXOf5~4sxBgkO`SUww(eu&00jHmeEp8L|6l3*o%~=(;j$^APt$9hk(tp`B > zMFnZGgV%Q+>aK{^n7MAJ0uS%^Ou^;yb1qqbTWhkwY`?JSneNY=pJ#rW<Q;zf+Vwx* > zo;t?-U$n+r{8vU{&pLtphg(l>ylX4|enWcR4x6|bA=i)-yj$(QZch1fZgS7jPR44R > zpRKEys(r*xM69WH`Pye9+-bMi_QhhawABhJI|n+&j)GAz3P!;w7zLwX6pVsVFbYP& > gC>RB!U=)mkQ7{Td!6+C7qks?q01QDXP5{UN00#iITL1t6 > > literal 0 > HcmV?d00001 > > diff --git a/meta-oe/recipes-support/nss/nss_3.74.bb b/meta-oe/recipes-support/nss/nss_3.74.bb > index 4777f7937..cffeee5ec 100644 > --- a/meta-oe/recipes-support/nss/nss_3.74.bb > +++ b/meta-oe/recipes-support/nss/nss_3.74.bb > @@ -36,6 +36,7 @@ SRC_URI = "http://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/${VERSIO > file://0001-Bug-1867408-add-a-defensive-check-for-large-ssl_DefS.patch;patchdir=nss \ > file://CVE-2023-0767.patch \ > file://0001-Bug-1750624-Pin-validation-date-for-PayPalEE-test-ce.patch \ > + file://regenerate_NameConstrain_test_certificates.tar.gz \ > " > SRC_URI[sha256sum] = "88928811f9f40f87d42e2eaccdf6e454562e51486067f2ddbe90aa47ea6cd056" > > > -=-=-=-=-=-=-=-=-=-=-=- > Links: You receive all messages sent to this group. > View/Reply Online (#111395): https://lists.openembedded.org/g/openembedded-devel/message/111395 > Mute This Topic: https://lists.openembedded.org/mt/107413073/8599992 > Group Owner: openembedded-devel+owner@lists.openembedded.org > Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [Haixiao.Yan.CN@windriver.com] > -=-=-=-=-=-=-=-=-=-=-=- >
diff --git a/meta-oe/recipes-support/nss/nss/0001-Bug-1750624-Pin-validation-date-for-PayPalEE-test-ce.patch b/meta-oe/recipes-support/nss/nss/0001-Bug-1750624-Pin-validation-date-for-PayPalEE-test-ce.patch new file mode 100644 index 000000000..d905bf10e --- /dev/null +++ b/meta-oe/recipes-support/nss/nss/0001-Bug-1750624-Pin-validation-date-for-PayPalEE-test-ce.patch @@ -0,0 +1,64 @@ +From 1109c1b8259ad840ac1688d533f76ca268c67b6b Mon Sep 17 00:00:00 2001 +From: "John M. Schanck" <jschanck@mozilla.com> +Date: Sat, 5 Feb 2022 11:12:43 +0000 +Subject: [PATCH] Bug 1750624 - Pin validation date for PayPalEE test cert. + r=nss-reviewers,bbeurdouche,rrelyea + +Differential Revision: https://phabricator.services.mozilla.com/D136289 + +--HG-- +extra : moz-landing-system : lando + +Upstream-Status: Backport + +--- + tests/chains/chains.sh | 6 +++++- + tests/chains/scenarios/realcerts.cfg | 1 + + 2 files changed, 6 insertions(+), 1 deletion(-) + +diff --git a/tests/chains/chains.sh b/tests/chains/chains.sh +index 32c7ef54c..e13ae52f9 100755 +--- a/nss/tests/chains/chains.sh ++++ b/nss/tests/chains/chains.sh +@@ -917,7 +917,7 @@ verify_cert() + done + + VFY_OPTS_TNAME="${DB_OPT} ${ENGINE} ${TRUST_AND_DB_OPT} ${REV_OPTS} ${FETCH_OPT} ${USAGE_OPT} ${POLICY_OPT} ${TRUST_OPT}" +- VFY_OPTS_ALL="${DB_OPT} ${ENGINE} -vv ${TRUST_AND_DB_OPT} ${REV_OPTS} ${FETCH_OPT} ${USAGE_OPT} ${POLICY_OPT} ${VFY_CERTS} ${TRUST_OPT}" ++ VFY_OPTS_ALL="${DB_OPT} ${ENGINE} -vv ${VFY_TIME_OPT} ${TRUST_AND_DB_OPT} ${REV_OPTS} ${FETCH_OPT} ${USAGE_OPT} ${POLICY_OPT} ${VFY_CERTS} ${TRUST_OPT}" + + TESTNAME="Verifying certificate(s) ${VFY_LIST} with flags ${VFY_OPTS_TNAME}" + echo "${SCRIPTNAME}: ${TESTNAME}" +@@ -1118,6 +1118,7 @@ parse_config() + ;; + "verify") + VERIFY="${VALUE}" ++ VFY_TIME_OPT= + TRUST= + TRUST_AND_DB= + POLICY= +@@ -1126,6 +1127,9 @@ parse_config() + REV_OPTS= + USAGE_OPT= + ;; ++ "at_time") ++ VFY_TIME_OPT="-b ${VALUE}" ++ ;; + "cert") + VERIFY="${VERIFY} ${VALUE}" + ;; +diff --git a/tests/chains/scenarios/realcerts.cfg b/tests/chains/scenarios/realcerts.cfg +index 305443fc3..f8b0fc452 100644 +--- a/nss/tests/chains/scenarios/realcerts.cfg ++++ b/nss/tests/chains/scenarios/realcerts.cfg +@@ -22,6 +22,7 @@ verify TestUser51:x + + verify PayPalEE:x + policy OID.2.16.840.1.114412.2.1 ++ at_time 2201010000Z + result pass + + verify BrAirWaysBadSig:x +-- +2.25.1 + diff --git a/meta-oe/recipes-support/nss/nss_3.74.bb b/meta-oe/recipes-support/nss/nss_3.74.bb index ce4137a67..4777f7937 100644 --- a/meta-oe/recipes-support/nss/nss_3.74.bb +++ b/meta-oe/recipes-support/nss/nss_3.74.bb @@ -35,6 +35,7 @@ SRC_URI = "http://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/${VERSIO file://0001-Bug-1780432-CVE-2023-5388-Timing-attack-against-RSA-.patch;patchdir=nss \ file://0001-Bug-1867408-add-a-defensive-check-for-large-ssl_DefS.patch;patchdir=nss \ file://CVE-2023-0767.patch \ + file://0001-Bug-1750624-Pin-validation-date-for-PayPalEE-test-ce.patch \ " SRC_URI[sha256sum] = "88928811f9f40f87d42e2eaccdf6e454562e51486067f2ddbe90aa47ea6cd056"