Failing PKCS11 tests if NSS is not installed

Thomas Stüfe thomas.stuefe at
Tue Jul 3 10:47:41 UTC 2018

Hi all,

I just opened - the
tests fail if NSS is not properly installed, which is the case on some
of our test machines.

I am not an expert here. The test code reads as if in this case the
tests should just be skipped; however, this is not what happens - the
tests fail.

At some points (e.g. PKCS11Test::testNSS()) we attempt to skip the
test if the NSS library directory cannot be found. However, we already
fail the test - any test pulling PKCS11Test.class - because we
statically initalize

    static final boolean badNSSVersion =
            getNSSVersion() >= 3.11 && getNSSVersion() < 3.12;

and getNSSVersion() does not handle the "not installed" case correctly.

Thanks, Thomas

More information about the security-dev mailing list