diff mbox series

[meta-oe,kirkstone,1/2] nss: fix failed test of nss.

Message ID 20240718065946.3964212-1-haixiao.yan.cn@windriver.com
State New
Headers show
Series [meta-oe,kirkstone,1/2] nss: fix failed test of nss. | expand

Commit Message

Haixiao.Yan July 18, 2024, 6:59 a.m. UTC
From: Wentao Zhang <wentao.zhang@windriver.com>

The expiration date of the "PayPalEE.cert" test certificate in the nss package
is Jan 12 2022 and causing a test failure.

Signed-off-by: Wentao Zhang <wentao.zhang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Haixiao Yan <haixiao.yan.cn@windriver.com>
---
 ...validation-date-for-PayPalEE-test-ce.patch | 64 +++++++++++++++++++
 meta-oe/recipes-support/nss/nss_3.74.bb       |  1 +
 2 files changed, 65 insertions(+)
 create mode 100644 meta-oe/recipes-support/nss/nss/0001-Bug-1750624-Pin-validation-date-for-PayPalEE-test-ce.patch

Comments

Haixiao.Yan Aug. 1, 2024, 9:07 a.m. UTC | #1
Ping

On 7/18/24 14:59, Yan, Haixiao (CN) via lists.openembedded.org wrote:
> From: Haixiao Yan <haixiao.yan.cn@windriver.com>
>
> The expiration date of the "NameConstraints.*.cert" test certificate in
> the nss package is Sep 4 2023 and causing a test failure.
>
> This commit regenerate NameConstraints test certificates and changes the
> validity period of test certs generated by `make-nc` from ~10 years to
> ~20 years.
>
> regenerate_NameConstrain_test_certificates.tar.gz is a snapshot of certs
> files based on the commit which update them. It fails to apply binary
> commit, so create a tarball as part of SRC_URI rather than a .patch
> file.
>
> Upstream-Status: Backport [https://hg.mozilla.org/projects/nss/rev/1d565dc7e17dad6d2851b2d6ff522c5d6345ae26]
>
> Signed-off-by: Haixiao Yan <haixiao.yan.cn@windriver.com>
> ---
>   ...erate_NameConstrain_test_certificates.tar.gz | Bin 0 -> 10734 bytes
>   meta-oe/recipes-support/nss/nss_3.74.bb         |   1 +
>   2 files changed, 1 insertion(+)
>   create mode 100644 meta-oe/recipes-support/nss/nss/regenerate_NameConstrain_test_certificates.tar.gz
>
> diff --git a/meta-oe/recipes-support/nss/nss/regenerate_NameConstrain_test_certificates.tar.gz b/meta-oe/recipes-support/nss/nss/regenerate_NameConstrain_test_certificates.tar.gz
> new file mode 100644
> index 0000000000000000000000000000000000000000..568db6e7ec3fde7dfc0b778968b9d9b46f9e1c48
> GIT binary patch
> literal 10734
> zcmV<KDG}BmiwFP!000001MHg#IMmz!$7dL_lQmmN_U$`6%1+8Ig|ZF}rZ5_7b}HgV
> z*+Zd3DA~7eC6Q3HTM}gpC2f)x{J$>0d!uet()~YqKM&8GuX%jWcRuI5KA-bGXPjMK
> zrI6BClnmtO2>^vfqalIdYXWU*)KnXeLj84pMi4j(gF+)Q2mphH0B{6=MnL${Ke11L
> z%iYxtN8;y)IPAeWOW8Vq<$ZXP>r!-RY32OC_=7Kg))@GX_+!AgFUNlgG%NmYcvrWd
> zFbWnNe>fV0!GPD{C;)+6j{j2V3-Na(*tqN>crD&I`1bgtQJCfVza;uf{B7~1#i7Bs
> z#~*_MmgB!9nm7J>I48Us(b?6Fgd;e+xk`h-@FXYv4g$^%kCvW#&%F1T3NQwYcOc}8
> z@rO^no)v!t8i@q!Kj5c7J><8KKM+i24Fp5$)5yu7WMoi9fS!_CJY-|YTY4yzmI4Ae
> z!D#_%O7g8RN*1!MMsOBj<y3=;g+>kMNU$T4oC!EMJHR@1aRm##F45iD4IC%@#ss`4
> zoEc!6x=zDFt*WoN)reou$Oz60a8F$$XJG|f{F^=*O#EspNMJPwJpu_}rd9wbI1;m+
> zgC6y16VRRAotXv|3z?b<d?mm*eLE_BHwQdPpJWeT4e(6gjqM9}<3|8Nsh>VClmbE?
> z6afK(!pMSxAZ4Z8FH_O|^pl6pRXaFkCnvcFUOGA!zhZM4>M$(i%{W%Lk4M|k0&9JM
> zhPJic#kGyCTHm1k**FzOt>-nwNGD(3En(aFA}WLTcf9>xUUM(RIPQ#`9N6MoK;I{v
> zdF4Fk<)A?tG4s8Odk&DLL`cUgTGi&!@X#UaO7sFZWGd^EkwYQSbO4YBKXPj8kd4rg
> zF;yrO1|uhftN`f1$KqvyQ2^vn=p;Zp)nc6b6O?jJ0Lj58(a<V*&)GBq&H0eG-bsl^
> ztz`&Gc7-b_tErE=fq2BARw}e>5*dCn$*lP-H-mk6MJ-z>e;q5`Gk4iHM|cVg!or04
> zx$g)k)-pcv*~5+x2+eub_qtj`b?vS#opHI>^s6P!YeyeJgJR6C+v!#%%SVcfpBA|i
> zm~O=+EXdXCY4PuKYFWQr-^_n!TU*@1u>ZH_<39q4p2L468Y~Hx`M(4L`JV{>kj?O)
> zY##p40`9kPUkDJKCNa+xiKhk?|KFnuzk`1>k>~~@d4~Vk8Q^25`H%j)xzyeHT7Jmp
> zue1x-V}C3B?o_+AvhD4loj2*sk50I2AFbBtE6#9h(#Ec`H;640&mnHoIhLV^IN54H
> zOs#&gDFmjnum1kY1eWG)hw|QIw{Eg4JC!Cem|3t^r#UI#H|=)d>7tPqf+R*3CSC1!
> zyE1x$w!Kd*w@+U&RvTZ_P?{Mo<?q|1GMyhb0h(XR4;)h&VKs~iU`V3_Xo9Jv@m@G5
> z7f1ZJB@V8*iPhsNh=W;z3D7@Is}k2Uve8H!qoDVDqg0?r%A&};oE-ZUKbnjWvfp{Z
> zeNsv<CbrcyWs>8hG(5|2Rhet#bIPiAjRc`#lgQk4uT62S!o}JQ7q5Esyf-<q_Dm`@
> zvqu$od4)D(iiYCH6FC&O@2LdI;!K(XjkZ}<$obw0{MD1=H_$ipAH<*so&^7v6fiIU
> z5p(N*6dVIz=KoR%WdC8X{(m>af6=-8cU<K9p9kQY1~1DOD)Jfp%g*o~J&k|l-%S9&
> z$h~0$Sf+bJH#PLZwXFyEe|CHo`&UbIdeSSNyvU~(v#~ItcmcH0oM6YF;_kgy9?tzb
> z)kj&UBSYD-H|L0P-L)v7t+ZL^rD)UP?ps?kBDcp#@~)D&f^{or%;5CSlIF3tRPRtb
> zfx&qfXnyp+Ak9a)J+It4iM?_K^!~%OCwCHX&seHbKHR71x{-M5&k3oPyo)bs|H1xW
> zj9)p$_~6;ypPLUTFU?>dL_UlRfP8{|^71cWUtmqG((u6Eb<MA%x7Bjr92GHesJYia
> z`YaA-F%maQe&`x=`ZEzVq3#S`cWdJYo{<On=9}wZ9IDl}T8(&g;qp7<y%}TI?KDTy
> zS#6%S8|QOhvyTeAq$+(JD#wWEk@P5I++jtrMyFVY;_xk8*pqHgxuf|T{*2ObeX^fZ
> z_o8La(662ozmtB*|3NL1|AWMS?*AZ{`M(qb`ELgDzh;L23jcBcXX97uf3VP<z8(1n
> zBJqc;pPU4BW_kO5xu_f%ljFp&#HD-itZHaCYaGn7EP1d^f5OI%3mPLO$?TmnFtGYT
> zc-bD0tn9UR>QpC2U9GpvtCQB|a24H?En@KDSgnBalk-c=XRK$mKTyfrBiP<YDD^z&
> z<U=TJUmu@+P?v8I_G%O&@1Zg72fIjRnSUuxMPTu)A0CFQjtK&_qUkp(2G#Ha6#OgF
> ztr&QfqOU`w&qp+i=@!>bx`rUC&B*MEgx7VpTX02ml$JWs9ErE`vw>2`MOaigWu^;8
> zCz%-;vPL}da`a57Ph#2fOkQ>4))yQTLj40ZDg`I3TlD-qV?xM8H41c&-%gj<SoFj(
> z?s6oJ*qKAWdU!8u9(`~9zd-B%FU`w;EMji`k3cW`KT9Hz{~jR!AI|V!c`pBTzRhs|
> zD&8@3>U-?$`X0L-a9HGQvkG9J?hfPB(6%EI7gXYB`ft~K!k&7ILN%N0m_Tv~V-Gd;
> z9s>(aV{yE)F^j%!BFhFF)6U8shu)FLR&T>_>x(XS+z(lmn=j$7!6|5?s}(dv9wIHh
> zEx(@FEuJ$f<`HERcBql*^eJ*XHrIRV)o;hQx#6Q!pN^<Xw4Bu)sfw)2;QBDJb4_NW
> z!$7l9r{*;NbpWlu)=FTB4}K28pFP2kR{2$Asr#Auu0FqGPe`xG>bFE*QYM7?HzHV9
> zy2y$55&ccedrUs6OFusG-eoVlvuq9Xi~TBktW0Sfa>5cS^(Bpr$(^dN)532(^txG`
> zCA0ZR>?J4fgmHy;`KJ`>P&-v3+S>*DWI{dI{UT4uoQlaU<E&htzTVOCEb=Oy#qRXh
> z$X`A3mo=sD<o^OI|7p$d|IDrbQE&`)ng2^6kpD3t|3A*~A2FBz&WlXs`O5P793Z<z
> z?$6A7$yw;920vm!`Jpv$qeAm$?_rrSH|8^4Hm$0m*hb30wcSlE;W~U_mFX8%`VOG0
> zRpXp6T!@=jhZuIJb`}vKv6=8aPx<bw@Hgb%q6j%BBAKAbV$Z2hC)=5s=z^{$J<3hs
> zOB1-B?!|#BPdPborQI*7x)HB<oT@NXJI94nyAUQGtvzw?IBC}sSU~%kLkYV?s{HKb
> zNdx|b*2b*e$vWnty*|4&B5TSIub>Myc;5VaUm;L@;yiFxu;%Gb5@qg%L(#8=UeKNH
> z^xjn?%#d`MUEd<d5g{jFA<_`DLTV+qU)<To7tS}OUi5tcR`8+3Gj&Qd4O$TOZ;`UJ
> zjwJy)*QL4y+n(=JscqczGfyKg>r;Ji{r@cqU_Sl>Sj^}3|MK~tB@xJfd656<)BGoc
> zKAD>U7Wu@@d@Fzr3pRNE*-5}T6Q^!3Jyjk5Z=dsP{H}P6Yr#t1IAgyb?U5c)Qs``y
> z!l`}zo%SvIw<4pbpL5mN76(Ktbe0sY?-?1pU0{?kaFU<!5v!g1pt!Np98K0xk?o6H
> z*&!%1jxfBXDYb@@wLEyG<#y)?$zWE?Si9DQlx`+9r)X-S;Ip)`(5zAZk14JGxx2D0
> zUcGO@vzI9RyS?+RnD!bL_aA&|@nl~=->$YEe;qoNUayLdK9)_Ib)*Y!S{r)bOq^Vm
> zkJ3IaV6}~r+0tqU&C4RUyFv#WU~2JH(H+;WY0H~ZDT-a^!q_w%zHnfh4zZ)nOSGJt
> zhM0P6GMN+gK%?Ul<*S3ET7PO@PrXF?BT^LTs=`L3AyP#vydjCIzk2j8>qqrN{y$=I
> z{C{xnf9C%qP|N&Z3W59&1o=NWQ~$I57xsTKv#bAqnoGVK`C1lf-*kq}6lHRNlPTdL
> z1`uztO1N;q@NAfh);;N%-O?SxV;o`^pxKND@9c^WjSSQCZLa7v6nisB*-=@q^rUv8
> zA)atBdYn-v7h0}vEtBU}8DI9M|G`Afnnz5qbE5IWFV5xQbo12Z=r3PQWF*V1-Mb|e
> z2=v_n=@vQC$`=;=o__H*38cL}G;cptrmIkv&pAv>VBaZ^2LS4%I+q)dPe*dbDpMqw
> zz<Sz>4<vA(zQ2<|vqz0zYJdD=8e}zX(;ty{B<jb-QL*Ee@7ndb45GK2!>s=3ZZQad
> zUpKVLBb<&oDjeSKc}ZO8nT;5vMT~qb`G&5>x|-(W8%9~pYAnhN?o(a()pOu?)(`O?
> zxj6hs0&~xQg8X0hf0jfb|Es_s@qgq0jzuOeE5JNWT-qt(ZUG0}=f^%VvyXjZK0EgL
> zvv;AthW)2*wG3O>nX%^nEms+Gl>EKUPOi(2&^SddiwrOh<DR@eD$mSQQ^>1(m0A52
> zaa_TCJ*uU@upy-CjFHTZW2>`+?~XkSKs(%h3frtIgxAo#bgY9NhiVDDIk>BWR|?k^
> zZ_{sHncZ~my}5@OBgLjr5<_ge?JX^{b+12m$@Hp*O=I61@cI(=H%=e>Q~{LI6ae~Q
> z+D}(Rk|)Ih(N8`{ch^r=SGKs>tE+EIAR?mA?DY4A?I`w#`Qgp)QKp?{Z5ixR6Qk##
> zs#SU57#5YRh!Mzt6}?hQR+K;QZt#$$`*4g=><yAh8DXGUIXB!;=c93rEWP>WYnxXP
> zO-j44`CL)qYFde&BsVN!#jq0I{tCTT6nDh%hupIr5;wP?J@1W;=y+{u_2Uo@Jxl!6
> zlj#4kzSsW&7SsR10H66k$YuU7i9q&Cg7tsg4F4tP@_+FT+{|`<FteQ>knxHOzSBQB
> z#0E!NkmFOJ9)6Q~rQ}mUldLkP`;yJTMG?WFqej<5-Za&GFsd~-6m=i*Is1}rlI7y=
> zP>P^}3XW{2`+>fON7`=kcIobkP>PI*Q+T85U+?MLZa5n0o1&(QFHtv2ly5s=N>SU?
> zLMOm`%!4i|piW+V;9lnk>dwntW{jr|uB7^y_8N2Mmo1*-qb(@YXZOI}>a|#3;@yl#
> zLfcaZ*41reUK{L?(_FA&G$NphZeKoYnU;Xzv-{R>lNDh(^w0KAIGJv@(;qz6#^oLj
> z4_-~;bAJ4GRh^2->BNW{G=oOoq*Yw0#noaAJk{<2d4o=IqM3j-S7~jYzhrVNai1QO
> z&R%r6Z#o03uV?G89<R$<Tzx117wG&<YkvO+`Pu$2dYS)AB9Q+9ApZwu_%HTf@PGb&
> z_xES51L#<1_7JQV{5^n+B_~oPiYiL?;rRxXn`{rCQ4_WD=e#2*pXYo|XY0|brp5%r
> z$@s3c?Jw!1_$yo7Qe%;sL(xY@t_d~YeKmfWQfO?qg`Ic^@6}vks_^RU%Z%f9J#wOT
> zT37ZO!ycRQm*VU{2-m;E?Jz$0`naLHag-E;A3ZcDW{ca9W(QlihsENh6jVP+b~kyn
> zsbsp8+7&jV(Wa5!(5~njg6?Ksj$WlU3#0?~jZ%hq8uJ>>u6z$WyZH55(u4rNc&_U(
> z{{5!$wP_Qs5B5@RX4PADTw=1&ttw~Z#<UDGI>CC_{<p{M%A?&^<W~ouUuVODUK9H2
> zeqkx`=qS<Q2$U(~7KiT#u42<)Jq3Pi{gD5&z$7sL`JcJ`M<Y<n=l_>PApZ}6{2!a)
> zKkI+N|3T08e?aapZ5H|(_6yf}`|4Kg_vszJ<|s00!Y1O6iBKhl;Dg*>CDTIbyk2y)
> z4n>f&6|){DZ(tn=ReR+71iR&p3B=Nm{YJs_t^<rF5~dh0RMhi9`VHM!7XhV~U=DM0
> zL~Glj>gS_JuS%}3AJZ&9{79p;kz&U?r*p^wfWUUjtYnQmt?)*Xws_<ceCroh?Y(|;
> z#MYNogFbb{{05hX_M0b#X_`haZ}K6(9SYs|ynifKFaInRzC*3HL@Gen$ILwTt`^*O
> z6XFBLbZx26fxdupk5Lr`TQBkS6JnkL3ho1f-Z$lPvuOUTOL9{xQ%5CL=IfT<dPr$b
> zZmA$un!g9d^9MG$L|?HjN$S#R_g_6Fek*-v{g3(C=RdK_-~U|_%{l*x`rXfeF2qgB
> z4<QA5Zb-cxEZaZKeIx-}K1Tnxx0lK4ycPctOx3nbh3Vj(9%J+S?J4Wzl!HSWh1al!
> ztO~m_;j5ADQe*Sj%}Dk5MEK-@wf&KdAvR$#yu;RFxNrb|BbGBCa?^-@a=3#hv3rl6
> z<k6Q^m>QWK?RuA2DN9!zb)HNyqLk~_{Xh1uI;!gAi-V8uZfWV1l6b(QANd5NLAs<A
> z9-?#zC?Ft8N_Pvgq_i{=qQH|72?3E%8i^mfy6dhRqO!2({P_I!=A7?&GiT1s=id3;
> zJ9kF@A^-E&;s5BFAU;3+r_2%CAo}LFvZ=B04G80m_fuuumWl1jbwg8!?Nr5+-g@iq
> zGKUXpU`0Gp6j>()^w92H=H}W87tCoww$Q7r=u<|3R%>8NXx;O*a=LzhmP(&oFHp*H
> zb&5<<8C;x%*VF1Ktwjq>AtwMTi52=)JV%}q&JJC#fq9IO5FYoo_`kt-^1t9=@;?{v
> zU-17){?CzMpa1Fh`9Js*|Fa&S{?GTvp8ojfpD%J58#x^~(X$Yk34AbL6CcdUV;a6N
> zbk`|&MoPrexF*@V4Ww$<9$K|(*)FH~s)#v#=azk!@UG&VHHZ1DZQ2SMkIL?BL&)wD
> zR}3<kgOdG2yMx2FfNNA&rlN*WV6qf2gW=i~v+fPiy7yPt_6Uk~m)HlUkUERfl*R$|
> zO2lx6^E>8}JQIhf(NK5ZF0)6Eco_>e&b}+qWJ*T%b_W@qbMn&7-Zl-9CbLJu+@Q({
> z?tx}}t@qlz2y!}FN>b$2xovYRk@95M4M^UWoWB9l-vIeaoomj7+M+Q5&IWsklj<cZ
> zSnyz8=F=E=tEF0Ike3rKy{Skk{)h&hC0M?og2wN~$TU@KZ)DwZFVhqJOZeXS?*UVP
> ze!+L;|DX8(M}j}*|NmM4KjQR%*>CIa`^-XxiY55Go=_}>e3mKYu=8VqcP9BWIBASe
> z?^R$rxkkhZExkd+?TFgA4v)Aa7M;{DDuTZzktPY0j?I<H*+r>ha5`J0Z@oWPs05%r
> zbdFKR6l+8$zu_QA{F=o0Y1gemVm9eBm8<x#;#!G7x&~LA=fqU=w_m|rw2|&S;SFFv
> zJhQ+;?=rWW`96BJo-k*qCV2g9pBm@0q^f7)op&K+3KxpeCXwW(>Edoty%khc&ppK%
> ziZ`e~h)?n+z$#w?wHOp|IbXsSBs^XeVYkaPct2Z;-|97C^U$+v1QUEF3oeGPL}3^*
> zjOw=+H*}oe&0O^Hl_k3#J}w(gxkzCUko`VG`M6i_34Rpc%>Sk)R*sHFHa7NG%}ftT
> z|K}6<GXIC~EZ>R#e<a}Y0XXg30KJd=55NYlerW-`Z~TsvWmLJb_docBlaXYu7}=Sa
> zabx|$SqRAZh!CSIR*u{_Tv#7@8X2O*sU|C>{OcF!_=r-HYHHwL+W>q-u&g8}h?|a!
> z=C?jk;fV;WEKH2V9W6}lI2>#_EbO7q9OhTPFdgSUnvTy+F3^EbD#TobAG^o;oyGXM
> z3m<seFRg|TJof$^!K0n>frp2ylSsT~tq8#h;F!>DjuMk4iSlFE=uAu!o_}1Skz?0p
> z-8Pw;Z4E9;;n<^RWQpdi@rNMW=HDsxSG*)|j^)Et8yX3gp#Um)QG+@HiFZ&U9MI&z
> zH$h{LmqQX~b<zVwNT){KR)S?*P_MS`!6{Je^xwg$@>4`*-E2aeYF5Z@tFl@Pk0`Js
> zFkGTao#=QX#*USs^CbRaa2?s8)<i*cOwpNQryf|UqTgv01LdI-id8^mhcL_D-6e`1
> zExsEGPZ3E~9$sm8zlX)#a84Lg1^1NZLQdaZv8?C5p+&(lqq9_gjPRrp@Yy%AKCJtN
> zKzoftiP0)Dy%M-4h8#?FRu9Q={XCTpea?*qE8d%F&k^iCgv%_s*>~!c@geB4eK2jU
> zF~>|DU-n&loFv<M-&i)S2P}LE?;JD)Y)WP-GPW+ruc*zg+7dlUpI2HfoST*rK0#Ez
> zp|A!Rnk|n3l`p2BZINdmeSse2u*16}-PL)OtZ3tbUSasVbb}2R)_dU%uv7#AUQ|HN
> zwK1d80S#D>1-uStiU9?-$yL+wuDqz17Eh)vC8sG>v>h`w^ZLqKqAnn?R3s5Ok|j+D
> zFuYvOPnGLeKYP^xJ8W%`C{e<H*w#;78&pT;^76XD+aOiW(9L?BOC=sq3gHORhok0@
> z9WG>XDlfcZ6Tgs6c7CLVQ@ANevB$mdf5mtD{{n}p|8R5tss0Z)|H=K|Bf&oRi|+GV
> z=HL1MN2mWl4&2kH7CJt_*yzf4o&j=ZNuV7Rd@D47L|{{TkF7*(4xZiflwrvh0ewHU
> z$Bs(~SQwH-o*miuO)lMgPk(PNX%Pn5^Y=(l=dhq595TzhAE6!_Z-dO&q~a*J!)t<#
> z7?<z$_Ni8+ax1a3Gw^grbXwS0XLp1F2kSx-wX5yKlKDBo*UoVmn>}bil{DPLI|Ep?
> z$GxWsM%7-u^++u1X;aH4QzN-2ptQU|d|rBaSl`sX=&{Gfg&8i|N5STqa2+^l=-x%o
> z=W^(m9#i^zhT;lOI*o?OrcY|x_oS`lVZ8v)&F03<0W)uT-qi7G<U^!*n-sc+t~}#@
> z;ryEP3m6ZE=tE01e1}AAYbGDP2x)r8<6glh_z`?3|9?yQw*%yV{z?Dg{`vi<6aN4A
> zvCscL`}{xmiT`>2>+#=zYdjc)zs~?YSRJ5Jk3vD{lKNfYJzKB5#N1OTqnyl$sW8S-
> zj{A@7I(1&Z#`WkJe(v+ZY$PwEiWCOJXN?LKa99^D0(vq%2vNMg5P(N66uVV@^ND67
> zKQ!K1rEG=U5KRe>TL8W@HIn#t#pn!T%?PW0djO58>qS`WEOvZdz!;7&Rnav;x+R6=
> z!?PhE$ylPAl=nn?+x^s&&8Md?k6u)rXNrGAaeYZAQ0Y{dPTWvt7{eoIzd@;2LzC-F
> zR!W4q2U@3Dtc0@Q1)Qt>xYbQA`g6uz8QL1ujItd!g07G|r_M!a&dnOP?({MS&0MX?
> zGUm`oU|@@JXgBrCQ2&XpU{{Jzw7w=GhzIwT_Hplm|6hEc{$pbAaP8n0;A{NPFYx94
> zUtWH$llbqEfXfF^v2O#Cf75@K|J(Wx{~z_A&&~hLIKL($6-8c%AKZOuY<SgFs`i$^
> z!=bJ0c(>xh`uyw_s977cXrYAgGxRoP<eo<|Ez+i-hdWvxrH1#^=7Uz&={&sgXX=xw
> zJXHHTIAgknc7ZZUY}mBV?Vs?_QdzsD@HRvSp+-ZtUGF%#c-qsz-`=_W_~N2ijHg^x
> zGT6W}j=7h#Z6go)-lMhR4jr20+YGgH5+6D^nb+fHpD4kD8r7|7rcf}IMihg0C-Lif
> zP8$^=1Uh%pZu{EuHJ2$|2;_{yfxN~W3sfjB57+HY@!}?y3hq58Da{E=X6w+;tile7
> zu<x#h^SnHPZX<c_A%=u;T(+k4h6r93%Yaog<uE2bZ)yA?)vfq>Dm^FJQP5+9$@6ho
> z{n^fwhHEPXuZ*v!NHue6(^R*Z8uyuyu_7k0nfO4HSLXCxENz1|>RrPysN4zQSWYbv
> zKTjk`0^Ekj4<r*OBjq<JbS$lSL)|b*S4y<ICqX^NBC31l)zq4PpP*+bQ=xiFxuY=y
> zHj+n_3NTPoYaSS=1_vI~8y}HJeTMY1E5&+gDP5OU5x!&LYN{U1;F{s)cEjkirpE)%
> zMk5s{iO%w)Mhq&WTdEMvFmE!w^RHit9dLGy(d=-b_YWz>Bu^Yds=k9w5729h$(Oz(
> z3E(YQbkC1<u9n2=)1Kz^8F3Z%S=@36)$(?LKoD;vSj6V*k)$5N{{P<i@3#m*U)6v3
> z|04c-;{P8B_PPIO${PCQ|4STi{pWu-yOZ}o%Fv647FF;iYXF!nDGXujqESEsP;naz
> zcK=-ldr!vQ0uko>fnj7k9#za_YHQI}1=F|DfW}_rL}pS(Sk;%v5fZla+JRoSRuJBm
> zr}Zqt)^q2nyH#{^`C)Dhfmn%M?;0;uISUn&ZM{--@CfOn<6Etpb_*Jc!@p-zI$m)}
> zVNl^CKgx5-aglt??%bbdpD)J$qyGLN+$O+wDkS;>@`ASLlo1DYcx#$am<4QsV$AVW
> z{bKnJDjT$%fZ2kzlPU%mZn}0lVzv%zc^QpkkfeMRQ+DibTT}rgOSuUAWQGDo8>|6;
> zhKxggvUODe;Ee661xTuyPs|FXmtxk$8C7EQ=gpsI%+0V4<ipWjT)zoRtPDTyReyqC
> z@qPZkv5mdSr9+JWa{np*%X3oy|46X!|3mj}fc|g(|H^;c|Nr~=uf&1l2cIJbzmNZ#
> z*xP>9ch3RVp0^VfR!JpTKX;2~7cx1(qv0@FKfgnVMNIurk-lWN%8GoDB+L{S=HD@L
> zUriIz|6ZxCgZbRdL*#aX@~yF^4d;G=`ABP2U9W609kgAs9YaNJrA?|gHFt}dkWTyX
> zb*D3zzrBX-CQ`Q6U>1jBN7d{c%AI#j->Y8(o2NvGAroG{uB*MiRvS~5RybaXcJsP|
> zM~NEBKo!TF6c?Jubn_}4d*c)Gg>L^0{?p`&3TyKZExk{N=EYFz@|dtwEQ&3)Kvz`Q
> z^ao<msvpdgJ`R2@U<(GDvo6W0Wn%0Gl_PFuSB~|%*SamLsd~R_z+v_R0F$}epR5le
> zn?AUFhyh@h1bJ9aEj_Smn4ZfsK-(tEx0~$@00b6NRG8V5VYf*tZNIL<)~q*D;9BBp
> z=#E9lw;Zfvb@p-4op<ckmuK}!bvU}2r@NF$_#~dTR&AmA{RB60i(b{Tf$0K|Rn#N8
> zydZlpEk?E;^4L(8fl#_g&_%4&Fpp_9Vo@9WEIZ(WLnC1x8%pXVdaV`uj(Mu3abcsc
> zdVi;HM}<BD30Q}#YGS^l%x`fCZ~i&77m~zIZbGW<FBr4fs%EG*6zD!eSV{aql<q;D
> zvt`kCP2A*?qgTwZKg=b?`mx@?i+kaCH^N5AeV9}-nKZGdT7+Js8*u=1Q{rAnWxo*`
> z_O&~+bKD#M6MpFa?*VUtebxWx{nP#5llR|`2>aZBai88=Kl%S+|B3g1`Tux8_}o0?
> z<H$c91Kt?G_=y!*w%)2yipVlz1l|Kbdvhv4(Z&ngX~~Z-kAft&Y3Y^hEV<2mS^|%r
> zWtB(faN=cXx8U}Ycis+?{Lqy>(1Q<_1nD=7y3`&}Z$r?-jqz{lWfBdsLa_ASoa^ov
> zW2w|=iM^PPp{-Zr6Vk1bAjf?hx2|t(jrS3|K=aGPEAMI03wSvPh}L3Aa1Re2LL`>q
> zcb5$pUs;(f)F*xo<!yyTw4&O-GG~X9)-?=3FZlH^7p^J}alma*5Tj3p%DcCKjNFmE
> z&SSS^Jmj?LYdN!Qa89X;%E;1EFLLxwap~C?{xlUimKrTKqh-|8v!%8{Lkn#MBfexl
> zz1C$RRl=sny~I!O5BO&O|K``<52F8kng7GH|LcVRj{^JrZ@16?1E2UG{y6JD{C(Z$
> zqZ!3NnS=6f!Kdt?;tXn91=YY3ze~?;2^X&QM>1_9>DV-PZJAt)YDi*|SqPgqMV>Ys
> zO$JqZ?>Mc<g_z&C_yI9@P+z4*b3s+3+@Zd;r1P2+9}M92GTY47Y3&*3>AeOT13@cD
> z4k4-BQfo?^T>yvgd9?y+9v1u{dLuJ-$R$;>jw>dIXAVN>`x7d>k#g}gqV5t`ORBnz
> zOG~^MtRa5H%WhcLVp(gxakC{Ak_vQP-*ik$Yk8#<O7R8?Mt*+DR$EK!MbOg_{<D?V
> zImJAe3tMdY$;+ht#b28vx*5uuyc|bl$!{1&Xd@DET5M>Kj#{+fD{2qKEod0wm5e0v
> zu59GT#gxZ5?iGK6-{X7r|8IE!{;T}Y{iXiHdzR-!|34D!^S|^y{}+7XfA-_c{}elL
> zPoH0HceHXcJCLY9(lq6OHv~=p04*!_WbzuN^j^M>Stk3yrqUsUy@+4|A$F`(Ko1*l
> z&&6H<SL8bVhK1GKRk3<%+U0QnSH+ItiapKkrXF7hN{_y5X|7mbc;M|tjfx0qbsODK
> zlcB~S@YJ0!x(0)_-sa`%E=tgR92}NQLjgi=5RjLA-Ah^bBYn$p$^0TcoyJAL{<1vt
> zk4pM_V@O7<S?*@ecoA;>Ed;km32wgGeCvc#>W$KuS)1&8zP&Eo=f0<=Q79~xB#coQ
> zD~`wy;wW~rk(BQ)^DXh1fd<_Y6QU0=edV8IFNSxhDsN-{Z|7d68@i}z-Z>{7!eqDM
> z%U21el>GTe|8)7U<C{L+WP$txn{yKWYp)i2vbDHa40J*s1!Ms-%YRa~{}OTj5BmKt
> zCWdCC`@iS{faU)LVEO+OTK;Pd?(;uWsq7j=O@eZI4!)XX{?83c!C{iS)sDyQi`RTF
> z9B|_etATNT)GO`THOD4(D@Ck$8e{bE^<uA-+=_&Q1)Ba{kItw!3r;`s-jwg^?w+%v
> zq0`Gk)PyDaC+&@L7gM^M(dCk`@lL-$V|tcx;{D?*8YZZmy6EN*#b4V0AlY8w$GK;z
> z*Zyo<bUbKEpl)yUI((NuQmZPNYA}0Z>$!I;ZR{GB+h05$)O*P0LD@yNm+O+Qc%S_F
> z<lm7?&yTx)JpV(GVbA_!qE4<J8JoQ%mi~%s2|BTQPxJiJj1{*zR)3khEF*Hd<$s$=
> zJd+O!JovVMVsjRI&H7Y6AEr+Sy0!L~eR4Ue`b1yBw>85sfPw3zu-5mJucvFenb%nl
> zbe<SVfZX;!DF?t29{<NE|3~kCrxO5{{|UhI|0J~hcO2ODKlEAMZ%owc{x{LlTCV4s
> zR70drPCCFb#Vl3pYT=<CAJfov?t!ulPjj87S+GdEh5ok9NZK`ZT772oPwDR3GX}MW
> ze(O%==9XM}8@hjKj&iVgW=gbr-;^bd)^Zw|3Wu&9_WrW%&qkG6`)R5+@xhiRTzfj?
> zC55NO1~+=2vwa=o;=c37Jm=V4hidAr?hmN?Z*uPFn(LVhI`my~og*enl@)X*r^Qa3
> zA}4X@_u19!N}p`}5fW6|%Ji^qVP3MK`RZ5)lRqI1ulIVKZF=rGTXxc#xD`Jo?p=M`
> zW+whHR<ow!o>i{dD*oh~3O6=tSiNuWzatu{HGMAM=J>fjEvuh1H+QbkPEDNorp`Nj
> z`}M}rTOtQBAhZ0ppz8T=W|-}N^U?WVx&UDLZvZU+XX0xA({KETob@}T?D##ibN6Hy
> z{v?&+9dlK0n|=Spr?Kb%#Yg9>79@RAI(0<&@MgBIm1_47tUAc?`(N+x7dkgzHwP?P
> z#_*=!)Bl7in==2_-P@Sec6F%#Zp~h_?rw3-&$gQX!Ag?(4Grq;!Ye&uIJ2XgbGFo1
> z8;AuNo>XG@S<_Up=-`o5k-VV(lS01!*Qr;YPoCx^e_isC>h%rI{SK8vdj$W<U0Hub
> z=i1unJtfB&yyO@r&t1q`qxwAcnU(L2g>H#EyHcZ?DvTcPba4{&FSz!AMg8oig@09V
> zhzJE$><fE-ThnjOi_Ykt<t7c6%u~)R-*I_+oy5dTM<h(9{F-I)@4?m&oh!=Jy3TjC
> ztxnpq^vsFt1D$3^0rdd6?SE1(fFWG|W1Rmmdj3D10I>Ym1D5~Oq2<5cz?J_FMB9W|
> z)$fs?2b#NeOwIsWg}3zIonn0O0MpM6v!spE?DzV`b!kS1e*aVbia~L$TT}n~8cq$@
> zpyn5=zQ52a6?)U;8vP;d!qGCG>gg8+)8&<pYzoYC`}S^LRJhS@<2MW9<%Caca5~I<
> zj4$WAFmvXOf5~4sxBgkO`SUww(eu&00jHmeEp8L|6l3*o%~=(;j$^APt$9hk(tp`B
> zMFnZGgV%Q+>aK{^n7MAJ0uS%^Ou^;yb1qqbTWhkwY`?JSneNY=pJ#rW<Q;zf+Vwx*
> zo;t?-U$n+r{8vU{&pLtphg(l>ylX4|enWcR4x6|bA=i)-yj$(QZch1fZgS7jPR44R
> zpRKEys(r*xM69WH`Pye9+-bMi_QhhawABhJI|n+&j)GAz3P!;w7zLwX6pVsVFbYP&
> gC>RB!U=)mkQ7{Td!6+C7qks?q01QDXP5{UN00#iITL1t6
>
> literal 0
> HcmV?d00001
>
> diff --git a/meta-oe/recipes-support/nss/nss_3.74.bb b/meta-oe/recipes-support/nss/nss_3.74.bb
> index 4777f7937..cffeee5ec 100644
> --- a/meta-oe/recipes-support/nss/nss_3.74.bb
> +++ b/meta-oe/recipes-support/nss/nss_3.74.bb
> @@ -36,6 +36,7 @@ SRC_URI = "http://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/${VERSIO
>              file://0001-Bug-1867408-add-a-defensive-check-for-large-ssl_DefS.patch;patchdir=nss \
>              file://CVE-2023-0767.patch \
>              file://0001-Bug-1750624-Pin-validation-date-for-PayPalEE-test-ce.patch \
> +           file://regenerate_NameConstrain_test_certificates.tar.gz \
>              "
>   SRC_URI[sha256sum] = "88928811f9f40f87d42e2eaccdf6e454562e51486067f2ddbe90aa47ea6cd056"
>   
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#111395): https://lists.openembedded.org/g/openembedded-devel/message/111395
> Mute This Topic: https://lists.openembedded.org/mt/107413073/8599992
> Group Owner: openembedded-devel+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [Haixiao.Yan.CN@windriver.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
diff mbox series

Patch

diff --git a/meta-oe/recipes-support/nss/nss/0001-Bug-1750624-Pin-validation-date-for-PayPalEE-test-ce.patch b/meta-oe/recipes-support/nss/nss/0001-Bug-1750624-Pin-validation-date-for-PayPalEE-test-ce.patch
new file mode 100644
index 000000000..d905bf10e
--- /dev/null
+++ b/meta-oe/recipes-support/nss/nss/0001-Bug-1750624-Pin-validation-date-for-PayPalEE-test-ce.patch
@@ -0,0 +1,64 @@ 
+From 1109c1b8259ad840ac1688d533f76ca268c67b6b Mon Sep 17 00:00:00 2001
+From: "John M. Schanck" <jschanck@mozilla.com>
+Date: Sat, 5 Feb 2022 11:12:43 +0000
+Subject: [PATCH] Bug 1750624 - Pin validation date for PayPalEE test cert.
+ r=nss-reviewers,bbeurdouche,rrelyea
+
+Differential Revision: https://phabricator.services.mozilla.com/D136289
+
+--HG--
+extra : moz-landing-system : lando
+
+Upstream-Status: Backport
+
+---
+ tests/chains/chains.sh               | 6 +++++-
+ tests/chains/scenarios/realcerts.cfg | 1 +
+ 2 files changed, 6 insertions(+), 1 deletion(-)
+
+diff --git a/tests/chains/chains.sh b/tests/chains/chains.sh
+index 32c7ef54c..e13ae52f9 100755
+--- a/nss/tests/chains/chains.sh
++++ b/nss/tests/chains/chains.sh
+@@ -917,7 +917,7 @@ verify_cert()
+     done
+ 
+     VFY_OPTS_TNAME="${DB_OPT} ${ENGINE} ${TRUST_AND_DB_OPT} ${REV_OPTS} ${FETCH_OPT} ${USAGE_OPT} ${POLICY_OPT} ${TRUST_OPT}"
+-    VFY_OPTS_ALL="${DB_OPT} ${ENGINE} -vv ${TRUST_AND_DB_OPT} ${REV_OPTS} ${FETCH_OPT} ${USAGE_OPT} ${POLICY_OPT} ${VFY_CERTS} ${TRUST_OPT}"
++    VFY_OPTS_ALL="${DB_OPT} ${ENGINE} -vv ${VFY_TIME_OPT} ${TRUST_AND_DB_OPT} ${REV_OPTS} ${FETCH_OPT} ${USAGE_OPT} ${POLICY_OPT} ${VFY_CERTS} ${TRUST_OPT}"
+ 
+     TESTNAME="Verifying certificate(s) ${VFY_LIST} with flags ${VFY_OPTS_TNAME}"
+     echo "${SCRIPTNAME}: ${TESTNAME}"
+@@ -1118,6 +1118,7 @@ parse_config()
+             ;;
+         "verify")
+             VERIFY="${VALUE}"
++            VFY_TIME_OPT=
+             TRUST=
+             TRUST_AND_DB=
+             POLICY=
+@@ -1126,6 +1127,9 @@ parse_config()
+             REV_OPTS=
+             USAGE_OPT=
+             ;;
++        "at_time")
++            VFY_TIME_OPT="-b ${VALUE}"
++            ;;
+         "cert")
+             VERIFY="${VERIFY} ${VALUE}"
+             ;;
+diff --git a/tests/chains/scenarios/realcerts.cfg b/tests/chains/scenarios/realcerts.cfg
+index 305443fc3..f8b0fc452 100644
+--- a/nss/tests/chains/scenarios/realcerts.cfg
++++ b/nss/tests/chains/scenarios/realcerts.cfg
+@@ -22,6 +22,7 @@ verify TestUser51:x
+ 
+ verify PayPalEE:x
+   policy OID.2.16.840.1.114412.2.1 
++  at_time 2201010000Z
+   result pass
+ 
+ verify BrAirWaysBadSig:x
+-- 
+2.25.1
+
diff --git a/meta-oe/recipes-support/nss/nss_3.74.bb b/meta-oe/recipes-support/nss/nss_3.74.bb
index ce4137a67..4777f7937 100644
--- a/meta-oe/recipes-support/nss/nss_3.74.bb
+++ b/meta-oe/recipes-support/nss/nss_3.74.bb
@@ -35,6 +35,7 @@  SRC_URI = "http://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/${VERSIO
            file://0001-Bug-1780432-CVE-2023-5388-Timing-attack-against-RSA-.patch;patchdir=nss \
            file://0001-Bug-1867408-add-a-defensive-check-for-large-ssl_DefS.patch;patchdir=nss \
            file://CVE-2023-0767.patch \
+           file://0001-Bug-1750624-Pin-validation-date-for-PayPalEE-test-ce.patch \
            "
 SRC_URI[sha256sum] = "88928811f9f40f87d42e2eaccdf6e454562e51486067f2ddbe90aa47ea6cd056"