422717 - fail to check eku on FIPS_PUB_140_Test_Certificate

Status: RESOLVED DUPLICATE of bug 390381

(NSS :: Libraries, defect, P1)

Description

[Alexei Volkov]

This failure was reported by tinderbox. The certutil command fails with the following error:

certutil -d ../fips -V -n FIPS_PUB_140_Test_Certificate -u SR -e -f ../tests.fipspw.28520
BUILD ERROR:
*** CERTVFYPKIX Error- Unable to build chain
*** Cause (2): *** BUILD Error- pkix_Build_InitiateBuildChain failed
*** Cause (3): *** BUILD Error- pkix_BuildForwardDepthFirstSearch failed
*** Cause (4): *** BUILD Error- userCheckerCheck failed
*** Cause (5): *** BUILD Error- userCheckerCheck failed
*** Cause (6): *** EKUCHECKER Error- Extended Key Usage Checking failed

The failure is related to enabled eku checker(attachment 307111 [details] [diff] [review] bug 390381).

Comment 1

[Alexei Volkov]

The failure is the result of incorrect trust settings in a cert reported by Nelson in https://bugzilla.mozilla.org/show_bug.cgi?id=390381#c11. Applying attachment 307388 [details] [diff] [review](bug 390381) solves the problem.

Comment 2

[Nelson Bolyard (seldom reads bugmail)]

This answers the question I asked in 
https://bugzilla.mozilla.org/show_bug.cgi?id=390381#c21

Comment 3

[Nelson Bolyard (seldom reads bugmail)]

Now that bug 390381 is fixed, is there any remaining issue with this bug?
Or is this merely a duplicate of bug 390381?  (If so, please resolve it as
a duplicate)

Comment 4

[Alexei Volkov]

this is a dup.