Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 24 Nov 2017 21:10:07 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-ports-bugs@FreeBSD.org
Subject:   [Bug 223840] net/chrony Not working with NSS
Message-ID:  <bug-223840-13-EAYZ6D5iV0@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-223840-13@https.bugs.freebsd.org/bugzilla/>
References:  <bug-223840-13@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D223840

--- Comment #4 from OlivierW <olivierw1+bugzilla-freebsd@hotmail.com> ---
Well, I don't know why "chronyc keygen 73 SHA1 256" doesn't work, but for n=
ow
I'd like chronyd to work and I may have found something.


The error comes from:
https://github.com/mlichvar/chrony/blob/c9f50fc686d93b982cb0ef72b9e140114fc=
cf53b/util.c#L372
        MD5_hash =3D HSH_GetHashId("MD5");
        assert(MD5_hash >=3D 0);

And I found in NSS 3.14 release note: "Support for certificate signatures u=
sing
the MD5 hash algorithm is now disabled by default.":
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.14_rele=
ase_notes

I'll search how to enable MD5 in NSS and see if that solves the problem. I'=
ll
report back later.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-223840-13-EAYZ6D5iV0>