Updated python-nss packages that fix several bugs and add various enhancements are now available for Red Hat Enterprise Linux 6.
The python-nss packages provide bindings for Network Security Services (NSS) that allow Python programs to use the NSS cryptographic libraries for SSL/TLS and PKI certificate management.
The python-nss packages have been upgraded to upstream version 0.13, which provides a number of bug fixes and enhancements over the previous version. (BZ#827616)
- On the 64-bit architecture, the setup_certs.py script contained an incorrect path to the libnssckbi.so library. As a consequence, the script attempted to run the "modutil -dbdir pki -add ca_certs -libfile /usr/lib/libnssckbi.so" command and failed with an error, because on this architecture, the libnssckbi.so library is located in the /usr/lib64/ directory. This update allows the modutil command-line utility to find the libnssckbi.so module based on its knowledge of the system.
- When setting Basic Constraints for a CA certificate, the python-nss package failed with the following message:
cannot decode Basic ConstraintsThis was because of an incorrect format specifier, which is now fixed and python-nss no longer fails in this scenario.
- The python-nss package has been updated to add support for PKCS#12 files.
Users of python-nss are advised to upgrade to these updated packages, which fix these bugs and add these enhancements.