Please find the logs after patch: 019-04-26 04:57:09.000|info |||0||Initializing NSS with certpath: sql:/etc/pki/nssdb ||qwerty.cc:123| 2019-04-26 04:57:10.000|info |||0||NSS error -8127 (SEC_ERROR_NO_TOKEN) ||qwerty.cc:123| 2019-04-26 04:57:10.000|info |||0||The security card or token does not exist, needs to be initialized, or has been removed. ||qwerty.cc:123| 2019-04-26 04:57:10.000|info |||0||Closing connection 0 ||qwerty.cc:123| 2019-04-26 04:57:10.000|info |||0||Hostname <hostname> was found in DNS cache ||qwerty.cc:123| 2019-04-26 04:57:10.000|info |||0|| Trying 11.111.111.11... ||qwerty.cc:123 2019-04-26 04:57:10.000|info |||0||Connected to <hostname> (11.111.111.11) port 443 (#1) ||qwerty.cc:123| 2019-04-26 04:57:10.000|info |||0||Initializing NSS with certpath: sql:/etc/pki/nssdb ||qwerty.cc:123| 2019-04-26 04:57:10.000|info |||0||skipping SSL peer certificate verification ||qwerty.cc:123| 2019-04-26 04:57:10.000|info |||0||ALPN/NPN, server did not agree to a protocol ||qwerty.cc:123| 2019-04-26 04:57:10.000|info |||0||SSL connection using TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
*After this few data transfer was success and then it started continuously failing with below logs:* 2019-04-26 05:02:20.000|info |||0||Hostname <hostname> was found in DNS cache ||qwerty.cc:123| 2019-04-26 05:02:20.000|info |||0|| Trying 11.111.111.11... ||qwerty.cc:123| 2019-04-26 05:02:20.000|info |||0||Connected to <hostname> (11.111.111.11) port 443 (#1) ||qwerty.cc:123| 2019-04-26 05:02:20.000|info |||0||Initializing NSS with certpath: sql:/etc/pki/nssdb ||qwerty.cc:123| 2019-04-26 05:02:20.000|info |||0||Unable to initialize NSS database ||qwerty.cc:123| 2019-04-26 05:02:20.000|info |||0||Initializing NSS with certpath: none ||qwerty.cc:123| 2019-04-26 05:02:20.000|info |||0||Unable to initialize NSS On Fri, Apr 26, 2019 at 5:19 PM surya chandrika <contactsur...@gmail.com> wrote: > The verbose output does not include any information about the reason why > NSS > failed to initialize. Could you please rebuild libcurl with the following > patch and capture the verbose output again? > > https://github.com/curl/curl/pull/3808/files > > Yes - i will try this , Thanks > > On Fri, Apr 26, 2019 at 4:00 PM Kamil Dudka <kdu...@redhat.com> wrote: > >> On Friday, April 26, 2019 7:08:52 AM CEST surya chandrika via >> curl-library >> wrote: >> > I am occasionally seeing "Unable to initialize NSS database" log during >> my >> > curl call initialization from my CPP module using libcurl and at that >> time, >> > my curl calls are not working. >> > *Note:* only at certain times , else is works properly without any >> changes >> > in system >> > >> > Please find the logs in working case and not working case below, if you >> see >> > the timestamp its just the next call:- >> >> The verbose output does not include any information about the reason why >> NSS >> failed to initialize. Could you please rebuild libcurl with the >> following >> patch and capture the verbose output again? >> >> https://github.com/curl/curl/pull/3808/files >> >> Note that there is no vtls/ subdirectory in the source tree of curl-7.29 >> but >> if you just remove that substring from the patch, it applies fine on the >> el7 >> source code. >> >> Kamil >> >> >>
------------------------------------------------------------------- Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library Etiquette: https://curl.haxx.se/mail/etiquette.html