On Thu, 21 Sep 2023 00:31:37 GMT, Mark Powers <mpow...@openjdk.org> wrote:

> Without updating `Secmod/cert9.db` and `Secmod/key4.db`, both 
> `Secmod/JksSetPrivateKey` and `Secmod/GetPrivateKey` will fail. The old 
> values must have been incorrect. This was not noticed because `cert8.db` and 
> `key3.db` were used if there were a `libnssdbm3` on the machine. In OL9, 
> there is no `libnssdbm3`, so the failures appeared.
> 
> Regarding your second question, every `cert8/key3` pair has a `cert9/key4` 
> pair except for `pkcs11/tls` tests which only have `cert8/key3`.

Thanks for the explanation~
Then what happens to the `pkcs11/tls/tls12` test which does not have 
cert9.db/key4.db? Will they continue to work against newer NSS releases with 
default sqlite=true?

-------------

PR Comment: https://git.openjdk.org/jdk/pull/15644#issuecomment-1732135896

Reply via email to