[patch] PR461: don't use the NSS provider bundled with the browser

[Matthias Klose]

Seen this at least with firefox, would be nice if somebody could check that for 
chromium as well.

The firefox start script in MOZILLA_FIVE_HOME sets LD_LIBRARY_PATH to include 
MOZILLA_FIVE_HOME and a number of subdirectories of MOZILLA_FIVE_HOME. The 
current NSS provider code seems to honor LD_LIBRARY_PATH, and loads the 
libnss3.so provided by the browser.

Caused by: java.io.IOException: An incompatible version of NSS is already 
loaded, 3.7 or later required
         at sun.security.pkcs11.Secmod.isInitialized(Secmod.java:130)
         at sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:168)

(wondering why the nss version shipped with firefox 3.6.3 identifies itself as 3.7).

However the openjdk build is configured for the nss version configured at build 
time, and you can run it with more than one browser.

My current solution/workaround is to pass a modified LD_LIBRARY_PATH to the 
subprocess such that the libnss3.so which was configured at build time is always 
used.

Something like this, or another fix should go to the 1.8 branch as well.

   Matthias

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: pr461.diff
Url: http://mail.openjdk.java.net/pipermail/distro-pkg-dev/attachments/20100412/782f73b4/pr461.diff