491044 - Remove support for VMS (a.k.a., OpenVMS) from NSS

Status: RESOLVED FIXED

(NSS :: Libraries, defect, P2)

Description

[Nelson Bolyard (seldom reads bugmail)]

Doing so will slightly decrease our maintenance burden in the long run.

Comment 1

[Nelson Bolyard (seldom reads bugmail)]

Attachment: Patch v1 for NSS Trunk

This patch includes a modification to one file in freebl. 
That change will obviously need to wait until freebl is open.

Comment 2

[Nelson Bolyard (seldom reads bugmail)]

Comment on attachment 375404 [details] [diff] [review]
Patch v1 for NSS Trunk

It occurs to me that we now must consider mozilla/dbm to be frozen, as well as freebl and softoken.
So there are two files modified by this patch whose modifications must wait until the FIPS part of the tree is open (on a branch).

Comment 3

[Robert Relyea]

There shouldn't be any more issue with mozilla/dbm than with mozilla/security/util or mozilla/security/sqlite

dbm itself never gets access to unencrypted keys.

bob

Comment 4

[Nelson Bolyard (seldom reads bugmail)]

Bob, 
Isn't the dbm code part of the legacy DB shared library, which we just moved 
inside the FIPS boundary?

Comment 5

[Robert Relyea]

No more than mozilla/security/sqlite is part of the boundary before.... oh wait. It's a static library... grumble... yes you are right. The library itself wouldn't have to be, but it's a static library, bound directly to the nssdbm3 shared library (yet another reason I was trying to ditch it).

In short: the code itself wouldn't be, but because it is included in the .so itself that makes it part of the boundry.

bob

Comment 6

[Robert Relyea]

Comment on attachment 375404 [details] [diff] [review]
Patch v1 for NSS Trunk

r+ I only saw one change to freebl/softoken/libdbm. Those are all separable. If you want them in nominate for FIPS.

bob

Comment 7

[Nelson Bolyard (seldom reads bugmail)]

I'm committing this is pieces.  First: coreconf.

Removing OpenVMS.mk;       new revision: delete; previous revision: 1.9
Removing OpenVMSV7.1-2.mk; new revision: delete; previous revision: 1.2
Checking in Linux.mk;      new revision: 1.37;   previous revision: 1.36
Checking in WINCE.mk;      new revision: 1.5;    previous revision: 1.4
Checking in arch.mk;       new revision: 1.23;   previous revision: 1.22
Checking in config.mk;     new revision: 1.28;   previous revision: 1.27
Checking in rules.mk;      new revision: 1.79;   previous revision: 1.78

Comment 8

[Nelson Bolyard (seldom reads bugmail)]

Next: cmd/zlib

Checking in cmd/zlib/README;     new revision: 1.6; previous revision: 1.5
Checking in cmd/zlib/example.c;  new revision: 1.6; previous revision: 1.5
Checking in cmd/zlib/minigzip.c; new revision: 1.6; previous revision: 1.5
Checking in cmd/zlib/zconf.h;    new revision: 1.7; previous revision: 1.6
Checking in cmd/zlib/zutil.h;    new revision: 1.8; previous revision: 1.7

Comment 9

[Nelson Bolyard (seldom reads bugmail)]

The rest of cmd

Checking in certutil/keystuff.c; new revision: 1.21; previous revision: 1.20
Checking in lib/secpwd.c;        new revision: 1.16; previous revision: 1.15
Checking in lib/secutil.c;       new revision: 1.98; previous revision: 1.97
Checking in shlibsign/sign.sh;   new revision: 1.18; previous revision: 1.17

Comment 10

[Nelson Bolyard (seldom reads bugmail)]

nss/lib/ssl

Checking in lib/ssl/sslmutex.c; new revision: 1.24; previous revision: 1.23
Checking in lib/ssl/sslmutex.h; new revision: 1.12; previous revision: 1.11
Checking in lib/ssl/sslsnce.c;  new revision: 1.50; previous revision: 1.49

This leaves only two files from the original patch that are not yet 
committed, which are:

- mozilla/dbm/src/hash.c
- mozilla/security/nss/lib/freebl/unix_rand.c

Bob, you've already given this patch r+.  If you agree, I will commit the
changes to the above two files during this window of opportunity.

Comment 11

[Robert Relyea]

re comment 10

you can check those changes in.

bob

Comment 12

[Nelson Bolyard (seldom reads bugmail)]

dbm/src/hash.c;                      new revision: 3.26; previous revision: 3.25
security/nss/lib/freebl/unix_rand.c; new revision: 1.38; previous revision: 1.37