[Bug 2060906] Re: attempt to add opensc using modutil suddenly fails

Thu Apr 11 16:07:14 UTC 2024

Can confirm on Ubuntu Jammy, package fixes the issue:

```console
vagrant at ubuntu2204:~/Downloads$ wget https://launchpad.net/~ubuntu-security-proposed/+archive/ubuntu/ppa/+files/libnss3_3.98-0ubuntu0.22.04.2_amd64.deb
--2024-04-11 15:58:37--  https://launchpad.net/~ubuntu-security-proposed/+archive/ubuntu/ppa/+files/libnss3_3.98-0ubuntu0.22.04.2_amd64.deb
Resolving launchpad.net (launchpad.net)... 185.125.189.222, 185.125.189.223, 2620:2d:4000:1009::3ba, ...
Connecting to launchpad.net (launchpad.net)|185.125.189.222|:443... connected.
HTTP request sent, awaiting response... 303 See Other
Location: https://launchpadlibrarian.net/724214470/libnss3_3.98-0ubuntu0.22.04.2_amd64.deb [following]
--2024-04-11 15:58:37--  https://launchpadlibrarian.net/724214470/libnss3_3.98-0ubuntu0.22.04.2_amd64.deb
Resolving launchpadlibrarian.net (launchpadlibrarian.net)... 185.125.189.228, 185.125.189.229, 2620:2d:4000:1009::13e, ...
Connecting to launchpadlibrarian.net (launchpadlibrarian.net)|185.125.189.228|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1346964 (1.3M) [application/x-debian-package]
Saving to: ‘libnss3_3.98-0ubuntu0.22.04.2_amd64.deb’

libnss3_3.98-0ubuntu0.22.04.2_amd64.deb
100%[====================================================================================================>]
1.28M  4.87MB/s    in 0.3s

2024-04-11 15:58:37 (4.87 MB/s) -
‘libnss3_3.98-0ubuntu0.22.04.2_amd64.deb’ saved [1346964/1346964]

vagrant at ubuntu2204:~/Downloads$ wget https://launchpad.net/~ubuntu-security-proposed/+archive/ubuntu/ppa/+files/libnss3-tools_3.98-0ubuntu0.22.04.2_amd64.deb
--2024-04-11 15:59:00--  https://launchpad.net/~ubuntu-security-proposed/+archive/ubuntu/ppa/+files/libnss3-tools_3.98-0ubuntu0.22.04.2_amd64.deb
Resolving launchpad.net (launchpad.net)... 185.125.189.222, 185.125.189.223, 2620:2d:4000:1009::f3, ...
Connecting to launchpad.net (launchpad.net)|185.125.189.222|:443... connected.
HTTP request sent, awaiting response... 303 See Other
Location: https://launchpadlibrarian.net/724214469/libnss3-tools_3.98-0ubuntu0.22.04.2_amd64.deb [following]
--2024-04-11 15:59:00--  https://launchpadlibrarian.net/724214469/libnss3-tools_3.98-0ubuntu0.22.04.2_amd64.deb
Resolving launchpadlibrarian.net (launchpadlibrarian.net)... 185.125.189.229, 185.125.189.228, 2620:2d:4000:1009::13e, ...
Connecting to launchpadlibrarian.net (launchpadlibrarian.net)|185.125.189.229|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 570044 (557K) [application/x-debian-package]
Saving to: ‘libnss3-tools_3.98-0ubuntu0.22.04.2_amd64.deb’

libnss3-tools_3.98-0ubuntu0.22.04.2_amd64.deb
100%[====================================================================================================>]
556.68K  --.-KB/s    in 0.1s

2024-04-11 15:59:00 (4.98 MB/s) -
‘libnss3-tools_3.98-0ubuntu0.22.04.2_amd64.deb’ saved [570044/570044]

vagrant at ubuntu2204:~/Downloads$ LC_ALL=C apt-cache policy libnss3 libnss3-tools
libnss3:
  Installed: 2:3.68.2-0ubuntu1
  Candidate: 2:3.98-0ubuntu0.22.04.1
  Version table:
     2:3.98-0ubuntu0.22.04.1 500
        500 https://mirrors.edge.kernel.org/ubuntu jammy-updates/main amd64 Packages
        500 https://mirrors.edge.kernel.org/ubuntu jammy-security/main amd64 Packages
 *** 2:3.68.2-0ubuntu1 500
        500 https://mirrors.edge.kernel.org/ubuntu jammy/main amd64 Packages
        100 /var/lib/dpkg/status
libnss3-tools:
  Installed: 2:3.68.2-0ubuntu1
  Candidate: 2:3.98-0ubuntu0.22.04.1
  Version table:
     2:3.98-0ubuntu0.22.04.1 500
        500 https://mirrors.edge.kernel.org/ubuntu jammy-updates/universe amd64 Packages
        500 https://mirrors.edge.kernel.org/ubuntu jammy-security/universe amd64 Packages
 *** 2:3.68.2-0ubuntu1 500
        500 https://mirrors.edge.kernel.org/ubuntu jammy/universe amd64 Packages
        100 /var/lib/dpkg/status
vagrant at ubuntu2204:~/Downloads$ LC_ALL=C sudo apt-mark unhold libnss3 libnss3-tools
Canceled hold on libnss3.
Canceled hold on libnss3-tools.
vagrant at ubuntu2204:~/Downloads$ LC_ALL=C sudo apt install --yes ./libnss3
libnss3_3.98-0ubuntu0.22.04.2_amd64.deb        libnss3-tools_3.98-0ubuntu0.22.04.2_amd64.deb  
vagrant at ubuntu2204:~/Downloads$ LC_ALL=C sudo apt install --yes ./libnss3*.deb
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Note, selecting 'libnss3' instead of './libnss3_3.98-0ubuntu0.22.04.2_amd64.deb'
Note, selecting 'libnss3-tools' instead of './libnss3-tools_3.98-0ubuntu0.22.04.2_amd64.deb'
The following additional packages will be installed:
  libnspr4
The following packages will be upgraded:
  libnspr4 libnss3 libnss3-tools
3 upgraded, 0 newly installed, 0 to remove and 156 not upgraded.
Need to get 119 kB/2036 kB of archives.
After this operation, 216 kB of additional disk space will be used.
Get:1 /home/vagrant/Downloads/libnss3_3.98-0ubuntu0.22.04.2_amd64.deb libnss3 amd64 2:3.98-0ubuntu0.22.04.2 [1347 kB]
Get:2 /home/vagrant/Downloads/libnss3-tools_3.98-0ubuntu0.22.04.2_amd64.deb libnss3-tools amd64 2:3.98-0ubuntu0.22.04.2 [570 kB]
Get:3 https://mirrors.edge.kernel.org/ubuntu jammy-updates/main amd64 libnspr4 amd64 2:4.35-0ubuntu0.22.04.1 [119 kB]
Fetched 119 kB in 0s (850 kB/s)                            
(Reading database ... 225741 files and directories currently installed.)
Preparing to unpack .../libnspr4_2%3a4.35-0ubuntu0.22.04.1_amd64.deb ...
Unpacking libnspr4:amd64 (2:4.35-0ubuntu0.22.04.1) over (2:4.32-3build1) ...
Preparing to unpack .../libnss3_3.98-0ubuntu0.22.04.2_amd64.deb ...
Unpacking libnss3:amd64 (2:3.98-0ubuntu0.22.04.2) over (2:3.68.2-0ubuntu1) ...
Preparing to unpack .../libnss3-tools_3.98-0ubuntu0.22.04.2_amd64.deb ...
Unpacking libnss3-tools (2:3.98-0ubuntu0.22.04.2) over (2:3.68.2-0ubuntu1) ...
Setting up libnspr4:amd64 (2:4.35-0ubuntu0.22.04.1) ...
Setting up libnss3:amd64 (2:3.98-0ubuntu0.22.04.2) ...
Setting up libnss3-tools (2:3.98-0ubuntu0.22.04.2) ...
Processing triggers for man-db (2.10.2-1) ...
Processing triggers for libc-bin (2.35-0ubuntu3.6) ...
Scanning processes...                                                                                                                                                                        
Scanning candidates...                                                                                                                                                                       
Scanning linux images...                                                                                                                                                                     

Running kernel seems to be up-to-date.

Restarting services...
 systemctl restart udisks2.service

No containers need to be restarted.

No user sessions are running outdated binaries.

No VM guests are running outdated hypervisor (qemu) binaries on this host.
N: Download is performed unsandboxed as root as file '/home/vagrant/Downloads/libnss3_3.98-0ubuntu0.22.04.2_amd64.deb' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)
vagrant at ubuntu2204:~/Downloads$ cd ~/.pki/nssdb/
vagrant at ubuntu2204:~/.pki/nssdb$ cat pkcs11.txt 
library=
name=NSS Internal PKCS #11 Module
parameters=configdir='sql:/home/vagrant/.pki/nssdb' certPrefix='' keyPrefix='' secmod='secmod.db' flags=optimizeSpace updatedir='' updateCertPrefix='' updateKeyPrefix='' updateid='' updateTokenDescription='' 
NSS=Flags=internal,critical trustOrder=75 cipherOrder=100 slotParams=(1={slotFlags=[ECC,RSA,DSA,DH,RC2,RC4,DES,RANDOM,SHA1,MD5,MD2,SSL,TLS,AES,Camellia,SEED,SHA256,SHA512] askpw=any timeout=30})

library=/usr/lib/x86_64-linux-gnu/onepin-opensc-pkcs11.so
name=OpenSC smartcard framework

library=/usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so
name=PKCS #11 Trust Storage Module
NSS=trustOrder=100    

vagrant at ubuntu2204:~/.pki/nssdb$ modutil -dbdir . -delete "OpenSC smartcard framework" -force
Module "OpenSC smartcard framework" deleted from database.
vagrant at ubuntu2204:~/.pki/nssdb$ modutil -dbdir . -add "OpenSC smartcard framework" -libfile /usr/lib/x86_64-linux-gnu/onepin-opensc-pkcs11.so -force
Module "OpenSC smartcard framework" added to database.
vagrant at ubuntu2204:~/.pki/nssdb$ echo $?
0
vagrant at ubuntu2204:~/.pki/nssdb$ cat pkcs11.txt 
library=
name=NSS Internal PKCS #11 Module
parameters=configdir='sql:/home/vagrant/.pki/nssdb' certPrefix='' keyPrefix='' secmod='secmod.db' flags=optimizeSpace updatedir='' updateCertPrefix='' updateKeyPrefix='' updateid='' updateTokenDescription='' 
NSS=Flags=internal,critical trustOrder=75 cipherOrder=100 slotParams=(1={slotFlags=[ECC,RSA,DSA,DH,RC2,RC4,DES,RANDOM,SHA1,MD5,MD2,SSL,TLS,AES,Camellia,SEED,SHA256,SHA512] askpw=any timeout=30})

library=/usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so
name=PKCS #11 Trust Storage Module
NSS=trustOrder=100    

library=/usr/lib/x86_64-linux-gnu/onepin-opensc-pkcs11.so
name=OpenSC smartcard framework

vagrant at ubuntu2204:~/.pki/nssdb$ LC_ALL=C apt-cache policy libnss3 libnss3-tools
libnss3:
  Installed: 2:3.98-0ubuntu0.22.04.2
  Candidate: 2:3.98-0ubuntu0.22.04.2
  Version table:
 *** 2:3.98-0ubuntu0.22.04.2 100
        100 /var/lib/dpkg/status
     2:3.98-0ubuntu0.22.04.1 500
        500 https://mirrors.edge.kernel.org/ubuntu jammy-updates/main amd64 Packages
        500 https://mirrors.edge.kernel.org/ubuntu jammy-security/main amd64 Packages
     2:3.68.2-0ubuntu1 500
        500 https://mirrors.edge.kernel.org/ubuntu jammy/main amd64 Packages
libnss3-tools:
  Installed: 2:3.98-0ubuntu0.22.04.2
  Candidate: 2:3.98-0ubuntu0.22.04.2
  Version table:
 *** 2:3.98-0ubuntu0.22.04.2 100
        100 /var/lib/dpkg/status
     2:3.98-0ubuntu0.22.04.1 500
        500 https://mirrors.edge.kernel.org/ubuntu jammy-updates/universe amd64 Packages
        500 https://mirrors.edge.kernel.org/ubuntu jammy-security/universe amd64 Packages
     2:3.68.2-0ubuntu1 500
        500 https://mirrors.edge.kernel.org/ubuntu jammy/universe amd64 Packages
vagrant at ubuntu2204:~/.pki/nssdb$
``

-- 
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to nss in Ubuntu.
https://bugs.launchpad.net/bugs/2060906

Title:
  attempt to add opensc using modutil suddenly fails

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nss/+bug/2060906/+subscriptions