<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 2018年09月29日 20:44, Richard Purdie
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:d53eac33f13004eec2b52746d09ca77a3019ccaa.camel@linuxfoundation.org">
<pre wrap="">On Sat, 2018-09-29 at 13:43 +0800, <a class="moz-txt-link-abbreviated" href="mailto:kai.kang@windriver.com">kai.kang@windriver.com</a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">From: Kai Kang <a class="moz-txt-link-rfc2396E" href="mailto:kai.kang@windriver.com"><kai.kang@windriver.com></a>
There is a multilib install file conflict of nss:
</pre>
<blockquote type="cite">
<pre wrap="">file /etc/pki/nssdb/key4.db conflicts between attempted installs of
lib32-nss-3.38-r0.corei7_32 and nss-3.38-r0.corei7_64
</pre>
</blockquote>
<pre wrap="">
Move the creation of blank certificates to pkg_postinst. And check if
certificates exist already, don't re-create them.
Signed-off-by: Kai Kang <a class="moz-txt-link-rfc2396E" href="mailto:kai.kang@windriver.com"><kai.kang@windriver.com></a>
---
meta/recipes-support/nss/nss_3.38.bb | 32 +++++++++++++++++---------
--
1 file changed, 20 insertions(+), 12 deletions(-)
</pre>
</blockquote>
<pre wrap="">
This does raise a question - why aren't the generated files the same?
Is there a determinism problem here? This sounds like the image would
change with each build and couldn't be reproduced so we have a bigger
problem?</pre>
</blockquote>
<br>
It calls certutil to create blank certificates: <br>
<br>
certutil -N -d sql:${D}${sysconfdir}<i class="moz-txt-slash"><span
class="moz-txt-tag">/</span>pki/nssdb<span class="moz-txt-tag">/</span></i>
-f ./empty_password<br>
<br>
It should be current time related that create blank certificates in
current directory, the key4.db files are different:<br>
<br>
kkang@msp-lpggp1:~/buildarea/bar-build<br>
$ touch empty<br>
kkang@msp-lpggp1:~/buildarea/bar-build<br>
$ ./tmp/sysroots-components/x86_64/nss-native/usr/bin/certutil -N -d
sql:./ -f ./empty <br>
password file contains no data<br>
kkang@msp-lpggp1:~/buildarea/bar-build<br>
$ md5sum *.db<br>
1de1260b3f38349a8633d33acd4e4de7 cert9.db<br>
*7fea1d4dbc99db3ba1b72e30428eb5dc key4.db*<br>
kkang@msp-lpggp1:~/buildarea/bar-build<br>
$ rm *.db<br>
kkang@msp-lpggp1:~/buildarea/bar-build<br>
$ ./tmp/sysroots-components/x86_64/nss-native/usr/bin/certutil -N -d
sql:./ -f ./empty <br>
password file contains no data<br>
kkang@msp-lpggp1:~/buildarea/bar-build<br>
$ md5sum *.db<br>
1de1260b3f38349a8633d33acd4e4de7 cert9.db<br>
*9fbbae3e2d65d29f51e357a2dc4650a2 key4.db*<br>
<br>
<br>
Regards,<br>
Kai<br>
<br>
<br>
<blockquote type="cite"
cite="mid:d53eac33f13004eec2b52746d09ca77a3019ccaa.camel@linuxfoundation.org">
<pre wrap="">
Cheers,
Richard
</pre>
</blockquote>
<p><br>
</p>
<pre class="moz-signature" cols="72">--
Regards,
Neil | Kai Kang</pre>
</body>
</html>