Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-107046

NSS selfserv/tstclnt certificate compression is broken on s390x

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • No
    • Low
    • 2
    • rhel-security-crypto-clubs
    • 1.5
    • False
    • False
    • Hide

      None

      Show
      None
    • No
    • Crypto25August, Crypto25September
    • Hide

      Existing NSS certificate compression tests pass:

      • /CoreOS/nss/Sanity/compressed-certificate-coverage
      • /CoreOS/gnutls/Interoperability/cert-compression-with-NSS
      • /CoreOS/openssl/Interoperability/cert-compression-with-NSS
      Show
      Existing NSS certificate compression tests pass: /CoreOS/nss/Sanity/compressed-certificate-coverage /CoreOS/gnutls/Interoperability/cert-compression-with-NSS /CoreOS/openssl/Interoperability/cert-compression-with-NSS
    • Pass
    • Automated
    • Unspecified Release Note Type - Unknown
    • Unspecified
    • Unspecified
    • Unspecified
    • s390x
    • None

      What were you trying to do that didn't work?

      Use zlib certificate compression with tstclnt/selfserv on s390x.

      What is the impact of this issue to you?

      I try to not attach personally to such stuff, but that leaves cert compression as implemented in NSS broken on big-endian platforms.

      Please provide the package NVR for which the bug is seen:

      nss-3.112.0-2.el10_0

      How reproducible is this bug?:

      reliably

      Steps to reproduce

      1. selfserv -n server -d sql:nssdb -q -p 4433
      2. connect with openssl, gnutls or tlsfuzzer's test-tls13-certificate-compression.py

      Expected results

      cert compression works

      Actual results

      handshake_failed alerts from NSS

      Fix

      https://phabricator.services.mozilla.com/D259453

              rrelyea Robert Relyea
              asosedki@redhat.com Alexander Sosedkin
              Robert Relyea Robert Relyea
              Alexander Sosedkin Alexander Sosedkin
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: