1100424 - .chk files for dynamic libraries no longer generated/packaged in .app bundles on OSX

Status: RESOLVED WONTFIX

(Firefox Build System :: General, defect)

Description

[Stephen A Pohl [:spohl]]

Bug 1096494 intentionally removed the generation and packaging of .chk files in .app bundles on OSX since it only seemed to affect FIPS mode. If .chk files are still necessary, the .chk files should be packaged under Contents/Resources and NSS should look for them there (while leaving the corresponding dylibs under Contents/MacOS).

Comment 1

[(not currently active) Ted Mielczarek]

I think we should just WONTFIX this. I argued for not worrying about generating these files in the original bug, and I think that still stands. Per bug 1096494 comment 31 it doesn't seem like anyone actually needs FIPS mode in Firefox, at least for government use, and it's not clear who else would actually be using it.

Comment 2

[J.C. Jones [:jcj] (he/him)]

Agreed. Conversations last week indicated some support for the idea that FIPS-validated builds will have to be built/packaged by entities other than Mozilla.

Comment 3

[(not currently active) Ted Mielczarek]

Sold.