[jdk11u-dev] RFR: 8296631: NSS tests failing on OL9 linux-aarch64 hosts [v4]

[Andrew Haley]

On Wed, 27 Nov 2024 11:29:35 GMT, Andrew Haley <aph at openjdk.org> wrote:

>> Taizo Kurashige has updated the pull request incrementally with one additional commit since the last revision:
>> 
>>   Replace pkcs11/fips/key4.db and pkcs11.txt
>
> What do you see?
> 
>  $ pwd
> /local/jdk11u-dev/test/jdk/sun/security/pkcs11/fips
>  $ /usr/lib64/nss/unsupported-tools/dbtool  -d .       
> dbdir selected is .
> 
> CertDB:
> KeyDB:

> @theRealAph
> 
> > Why are the two sets of files key4.db and cert9.db different?
> 
> The reason key4.db and cert9.db are different is that they are newly created by me using the "modutil" command. I created them with reference to [jdk/test/jdk/sun/security/pkcs11/Secmod/README-SQLITE](https://github.com/openjdk/jdk/blob/ac82a8f89c7066fb1d379b12bcfd68053cb39ba4/test/jdk/sun/security/pkcs11/Secmod/README-SQLITE) and manually copied pkcs11.txt from [jdk/test/jdk/sun/security/pkcs11/Secmod/pkcs11.txt](https://github.com/openjdk/jdk/blob/f0b251d76078e8d5b47e967b0449c4cbdcb5a005/test/jdk/sun/security/pkcs11/Secmod/pkcs11.txt). However, after receiving your comment, I realized that the README-SQLITE procedure does not correspond to the contents of pkcs11.txt. So I recreated key4.db ,cert9.db and pkcs11.txt using the following steps:

OK, that's better. Thanks.

-------------

PR Comment: https://git.openjdk.org/jdk11u-dev/pull/2955#issuecomment-2639269469