956650 - libnssckbi.so lookup inside /etc/pki/nssbd always fails

Status: UNCONFIRMED

(NSS :: Libraries, defect, P5)

Description

[Yuri]

User Agent: Mozilla/5.0 (X11; FreeBSD amd64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.63 Safari/537.36

Steps to reproduce:

certutil -K -X -d sql:/etc/pki/nssdb


Actual results:

Command reslult isn't important here.
Instead, I observed that this command always attempts to find libnssckbi.so inside the database directory, and such lookup always fails:
open("/etc/pki/nssdb/libnssckbi.so", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
This library is installed into the regular library directory under /usr/lib/nss, not into /etc/pki/nssdb

This lookup originates from nss_FindExternalRootPaths in nssinit.c, through dlopen, and after failure isn't attempted again.

I believe this is some kind of mistake in the code, and should be corrected.
Sorry of this is intended, but such lookup of the shared library is quite unconventional and strange.