212384 - PSM and crypto modules not working on HP PA-RISC 1.1 workstations due to 2.0 libs

Status: RESOLVED WONTFIX

(NSS :: Build, defect)

Description

[Roland Lammel]

User-Agent:       Mozilla/5.0 (X11; U; HP-UX 9000/785; en-US; rv:1.4) Gecko/20030707
Build Identifier: Mozilla/5.0 (X11; U; HP-UX 9000/785; en-US; rv:1.4) Gecko/20030707

Using the Mozilla 1.4 build for HP-UX 10.20 (downloaded 10.07.2003) the security
related functionality from PSM (and NSS) is only working on PA-RISC2.0
workstations (e.g.: HP 9000/785, B1000 and newer) but not on the older (and
still widly used) B180L workstations.

Checking for the file types revealed the following:
find . -exec file {} \; | grep PA-RISC | grep PA-RISC2.0 
./components/libpipnss.sl:      PA-RISC2.0 shared library
./libfreebl_hybrid_3.sl:        PA-RISC2.0 shared library
./libfreebl_pure32_3.sl:        PA-RISC2.0 shared library
./libnss3.sl:   PA-RISC2.0 shared library
./libnssckbi.sl:        PA-RISC2.0 shared library
./libsmime3.sl: PA-RISC2.0 shared library
./libsoftokn3.sl:       PA-RISC2.0 shared library
./libssl3.sl:   PA-RISC2.0 shared library
./mangle:       PA-RISC2.0 shared executable dynamically linked
./shlibsign:    PA-RISC2.0 shared executable dynamically linked

Whereas all other libs and binaries are PA-RISC1.1.

Therefor when trying to access a page that uses SSL, mozilla tells me to
download and install PSM.

Using the PSM test page http://gemal.dk/browserspy/psm.html a java-script error
occurs, stating that the crypto object can not be accessed in java-script
(crypto.xxx has no properties).

Reproducible: Always

Steps to Reproduce:
1. Download and install Mozilla 1.4 for HP-UX 10.20 on an HP PA-RISC1.1
workstation (e.g. HP 712 or B180L)
2. Type a URL with https:// or use PSM checker http://gemal.dk/browserspy/psm.html


Actual Results:  
A message is shown to install PSM  or for the PSM checker a (actually 3)
javascript errors occur

Expected Results:  
Show the page or let PSM checker check the crytpo object in javascript and show
the results without errors

Comment 1

[Nelson Bolyard (seldom reads bugmail)]

Assuming this is true, this is apparently a difference between the way that
mozilla builds NSS from sources, and the way that the NSS binary product is
built from NSS sources.   

The NSS binary product, built and released by the NSS team, builds the main
libraries as 1.1 libs, and builds one special 2.0 library to accelerate the 
math functions on that platform.  That version of NSS runs on both 1.1 and
2.0 systems, performing as well as can be hoped on both.

So, my suggestion is: try to download the NSS (not PSM) binary release.
replace the NSS libraries that came with mozilla with the NSS binary 
release and see if everything works again.  

If that solves the problem, then this is a mozilla/PSM build issue.  
The NSS tests and supports its own builds.  problems caused by the way
mozilla builds NSS are not supported by the NSS team.

Comment 2

[Nelson Bolyard (seldom reads bugmail)]

Adding NSS team folks to CC list.

NSS binaries for HPUX on PA-Risc1.1 can be downloaded from
ftp://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_9_BETA5/HP-UXB.11.00_DBG.OBJ

Comment 3

[Roland Lammel]

After testing 1.5 (from mozilla.org) only one library is compiled for PA-RISC2.0
only (libfreebl_hybrid_3.sl), all others should work fine on 1.1 too.

If this lib is only dynamically used on the correct platform, there should not
be any issues with older hardware (espacially the PA-RISC1.1 B180L).

I'm going to test the 1.6 tarball for hppa-2.0 too and see if it works, then
probably this issues has been resolved allready by the NSS folks.

Comment 4

[Wan-Teh Chang]

I found that this is an NSS build system issue.
NSS is not built correctly on HP-UX 10.x systems
because the necessary makefile code:

            ifdef USE_HYBRID
                OS_CFLAGS += -Aa +e +DA2.0 +DS2.0
            else
                OS_CFLAGS += +DAportable +DS2.0
            endif

is only present in mozilla/security/coreconf/HP-UXB.11.mk.

If you use a Mozilla build that was built on a
HP-UX 11.x system and your system is running HP-UX 11.x,
it will work.  We have stopped supporting HP-UX 10.x
for a couple of years.  I hope your system is not still
running HP-UX 10.x.

Comment 5

[Wan-Teh Chang]

Changed product/component to NSS/Build.

Comment 6

[Roland Lammel]

You wouldn't believe it, but most of our boxes are on 10.20, but we're in the
process off upgrading, so this issue is basically for 11.00/11.11.

Comment 7

[Wan-Teh Chang]

Marked the bug WONTFIX.

NSS is not built correctly on HP-UX 10.20.  We no longer
support HP-UX 10.20.  It is possible to modify our
makefiles so that we compile with the correct compiler
flags on HP-UX 10.20, but there doesn't seem to be a
demand for this work.  If someone contributes a patch,
we can review and check it in.

For HP-UX 11.x systems, you should download an executable
that was built on an HP-UX 11.x system.

Comment 8

[Wan-Teh Chang]

I forgot to mention (in response to comment 3) that
libfreebl_hybrid_3.sl is only dynamically used on
the correct platform.