Set NSS_FORCE_FIPS=1 at %%build time, and remove from %%check.

This commit is contained in:
Kai Engert 2018-02-01 14:26:39 +01:00
parent 0a70bce56d
commit 1689d12cbb

View File

@ -213,6 +213,9 @@ export NSS_NO_PKCS11_BYPASS
FREEBL_NO_DEPEND=1 FREEBL_NO_DEPEND=1
export FREEBL_NO_DEPEND export FREEBL_NO_DEPEND
NSS_FORCE_FIPS=1
export NSS_FORCE_FIPS
# Enable compiler optimizations and disable debugging code # Enable compiler optimizations and disable debugging code
export BUILD_OPT=1 export BUILD_OPT=1
@ -389,8 +392,6 @@ export SOFTOKEN_LIB_DIR=%{_libdir}
# disabled by the system policy. # disabled by the system policy.
export NSS_IGNORE_SYSTEM_POLICY=1 export NSS_IGNORE_SYSTEM_POLICY=1
export NSS_FORCE_FIPS=1
# enable the following line to force a test failure # enable the following line to force a test failure
# find ./nss -name \*.chk | xargs rm -f # find ./nss -name \*.chk | xargs rm -f
@ -753,6 +754,7 @@ done
%changelog %changelog
* Mon Jan 29 2018 Kai Engert <kaie@redhat.com> - 3.35.0-4 * Mon Jan 29 2018 Kai Engert <kaie@redhat.com> - 3.35.0-4
- Fix a compiler error with gcc 8, mozbz#1434070 - Fix a compiler error with gcc 8, mozbz#1434070
- Set NSS_FORCE_FIPS=1 at %%build time, and remove from %%check.
* Mon Jan 29 2018 Kai Engert <kaie@redhat.com> - 3.35.0-3 * Mon Jan 29 2018 Kai Engert <kaie@redhat.com> - 3.35.0-3
- Stop pulling in nss-pem automatically, packages that need it should - Stop pulling in nss-pem automatically, packages that need it should