On Thu, 21 Sep 2023 00:31:37 GMT, Mark Powers <mpow...@openjdk.org> wrote:
> Without updating `Secmod/cert9.db` and `Secmod/key4.db`, both > `Secmod/JksSetPrivateKey` and `Secmod/GetPrivateKey` will fail. The old > values must have been incorrect. This was not noticed because `cert8.db` and > `key3.db` were used if there were a `libnssdbm3` on the machine. In OL9, > there is no `libnssdbm3`, so the failures appeared. > > Regarding your second question, every `cert8/key3` pair has a `cert9/key4` > pair except for `pkcs11/tls` tests which only have `cert8/key3`. Thanks for the explanation~ Then what happens to the `pkcs11/tls/tls12` test which does not have cert9.db/key4.db? Will they continue to work against newer NSS releases with default sqlite=true? ------------- PR Comment: https://git.openjdk.org/jdk/pull/15644#issuecomment-1732135896