Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Save cipherboy/e96ab28561c5382633280a6b9002fe22 to your computer and use it in GitHub Desktop.
Save cipherboy/e96ab28561c5382633280a6b9002fe22 to your computer and use it in GitHub Desktop.
Build and run capabilities
[cipherboy@x1c ~]$ podman pull fedora:rawhide
[cipherboy@x1c ~]$ podman run -ti fedora:rawhide /bin/bash
...
[root@4868520a8a28 jss]# git checkout capabilities-change-output
Branch 'capabilities-change-output' set up to track remote branch 'capabilities-change-output' from 'origin'.
Switched to a new branch 'capabilities-change-output'
[root@4868520a8a28 jss]# cd build/ && cmake ..
-- The C compiler identification is GNU 11.1.1
-- The CXX compiler identification is GNU 11.1.1
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- Check for working C compiler: /usr/bin/cc - skipped
-- Detecting C compile features
-- Detecting C compile features - done
-- Detecting CXX compiler ABI info
-- Detecting CXX compiler ABI info - done
-- Check for working CXX compiler: /usr/bin/c++ - skipped
-- Detecting CXX compile features
-- Detecting CXX compile features - done
-- Found PkgConfig: /usr/bin/pkg-config (found version "1.7.3")
-- Checking for module 'nspr'
-- Found nspr, version 4.30.0
-- Found NSPR: /usr/lib64
-- Checking for module 'nss'
-- Found nss, version 3.63.0
-- Found NSS: /usr/lib64
-- Found Java: /usr/bin/java (found version "11.0.11")
-- Found JNI: /usr/lib/jvm/java/lib/libjawt.so
-- Performing Test HAVE_C_FLAG
-- Performing Test HAVE_C_FLAG - Success
-- JSS C FLAGS: -O2;-Wall;-std=gnu99;-Wno-cast-function-type;-Wno-unused-parameter;-Wno-unknown-warning-option;-Wno-unused-but-set-variable;-Werror-implicit-function-declaration;-Wno-switch;-I/jss/build/include/jss;-I/usr/lib/jvm/java/include;-I/usr/lib/jvm/java/include/linux;-I/usr/lib/jvm/java/include;-I/usr/include/nspr4;-I/usr/include/nss3;-L/usr/lib64;-L/usr/lib64
-- JSS LD FLAGS: -lsmime3;-lssl3;-lnss3;-lnssutil3;-lplc4;-lplds4;-lnspr4;-lpthread;-ldl
-- JSS LIBRARY FLAGS: -shared;-Wl,-z,defs;-Wl,-soname;-Wl,libjss4.so
-- javac classpath: /usr/share/java/slf4j/api.jar:/usr/share/java/apache-commons-lang3.jar:/usr/share/java/jaxb-api.jar
-- tests classpath: /jss/build/jss4.jar:/jss/build/tests-jss4.jar:/usr/share/java/slf4j/api.jar:/usr/share/java/apache-commons-lang3.jar:/usr/share/java/jaxb-api.jar:/usr/share/java/slf4j/jdk14.jar:/usr/share/java/junit.jar:/usr/share/java/hamcrest/core.jar
-- JSS JAVAC FLAGS: -classpath;/usr/share/java/slf4j/api.jar:/usr/share/java/apache-commons-lang3.jar:/usr/share/java/jaxb-api.jar;-sourcepath;/jss/src/main/java;-target;1.8;-source;1.8;-O
-- JSS TEST JAVAC FLAGS: -classpath;/usr/share/java/slf4j/api.jar:/usr/share/java/apache-commons-lang3.jar:/usr/share/java/jaxb-api.jar:/usr/share/java/junit.jar:/jss/build/classes/jss;-sourcepath;/jss/src/test/java;-target;1.8;-source;1.8;-O
-- Looking for CKM_AES_CMAC
-- Looking for CKM_AES_CMAC - found
-- Looking for CKM_SP800_108_COUNTER_KDF
-- Looking for CKM_SP800_108_COUNTER_KDF - found
-- Performing Test HAVE_NSS_CIPHER_SUITE_INFO_KDFHASH
-- Performing Test HAVE_NSS_CIPHER_SUITE_INFO_KDFHASH - Success
-- Performing Test HAVE_NSS_CHANNEL_INFO_ORIGINAL_KEA_GROUP
-- Performing Test HAVE_NSS_CHANNEL_INFO_ORIGINAL_KEA_GROUP - Success
-- Performing Test HAVE_NSS_CHANNEL_INFO_PEER_DELEG_CRED
-- Performing Test HAVE_NSS_CHANNEL_INFO_PEER_DELEG_CRED - Success
-- Performing Test HAVE_NSS_PRELIMINARY_CHANNEL_INFO_ZERO_RTT_CIPHER_SUITE
-- Performing Test HAVE_NSS_PRELIMINARY_CHANNEL_INFO_ZERO_RTT_CIPHER_SUITE - Success
-- Performing Test HAVE_NSS_PRELIMINARY_CHANNEL_INFO_PEER_DELEG_CRED
-- Performing Test HAVE_NSS_PRELIMINARY_CHANNEL_INFO_PEER_DELEG_CRED - Success
-- Configuring done
-- Generating done
-- Build files have been written to: /jss/build
[root@4868520a8a28 build]# make all
[ 1%] Generating .targets/finished_generate_java
warning: [options] bootstrap class path not set in conjunction with -source 8
/jss/src/main/java/org/mozilla/jss/netscape/security/x509/X509Cert.java:25: warning: [removal] Certificate in java.security has been deprecated and marked for removal
import java.security.Certificate;
^
/jss/src/main/java/org/mozilla/jss/netscape/security/x509/X509Cert.java:50: warning: [removal] Certificate in java.security has been deprecated and marked for removal
public class X509Cert implements Certificate, Serializable {
^
Note: Some input files use or override a deprecated API.
Note: Recompile with -Xlint:deprecation for details.
3 warnings
[ 3%] Generating .targets/finished_tests_generate_java
warning: [options] bootstrap class path not set in conjunction with -source 8
Note: Some input files use or override a deprecated API.
Note: Recompile with -Xlint:deprecation for details.
Note: /jss/src/test/java/org/mozilla/jss/tests/CapabilitiesList.java uses unchecked or unsafe operations.
Note: Recompile with -Xlint:unchecked for details.
1 warning
[ 3%] Built target generate_java
[ 3%] Generating staging.jar
[ 3%] Built target generate_build_jar
[ 5%] Generating jss4.jar
[ 7%] Generating tests-jss4.jar
[ 7%] Built target generate_jar
[ 7%] Built target generate_includes
[ 8%] Generating lib/CryptoManager.o
[ 10%] Generating lib/PK11Finder.o
[ 10%] Generating lib/KeyManager.o
[ 12%] Generating lib/ASN1Util.o
[ 14%] Generating lib/Algorithm.o
[ 16%] Generating lib/JSSOAEPParameterSpec.o
[ 17%] Generating lib/KBKDF.o
[ 17%] Generating lib/PQGParams.o
[ 19%] Generating lib/Policy.o
[ 21%] Generating lib/SecretDecoderRing.o
[ 23%] Generating lib/Buffer.o
[ 25%] Generating lib/BufferProxy.o
[ 26%] Generating lib/PR.o
[ 28%] Generating lib/PRErrors.o
[ 30%] Generating lib/PRFDProxy.o
[ 32%] Generating lib/SECErrors.o
[ 32%] Generating lib/SSL.o
[ 33%] Generating lib/SSLErrors.o
[ 35%] Generating lib/SSLFDProxy.o
[ 37%] Generating lib/PK11Cert.o
[ 39%] Generating lib/PK11Cipher.o
[ 39%] Generating lib/PK11KeyGenerator.o
[ 41%] Generating lib/PK11KeyPairGenerator.o
[ 42%] Generating lib/PK11KeyWrapper.o
[ 44%] Generating lib/PK11MessageDigest.o
[ 46%] Generating lib/PK11Module.o
[ 48%] Generating lib/PK11PrivKey.o
[ 50%] Generating lib/PK11PubKey.o
[ 50%] Generating lib/PK11SecureRandom.o
[ 51%] Generating lib/PK11Signature.o
[ 53%] Generating lib/PK11Store.o
[ 55%] Generating lib/PK11SymKey.o
[ 57%] Generating lib/PK11SymmetricKeyDeriver.o
[ 58%] Generating lib/PK11Token.o
[ 58%] Generating lib/CKAttribute.o
[ 60%] Generating lib/JSSKeyStoreSpi.o
[ 62%] Generating lib/SSLCipher.o
[ 64%] Generating lib/SSLServerSocket.o
[ 66%] Generating lib/SSLSocket.o
[ 66%] Generating lib/SSLVersionRange.o
[ 67%] Generating lib/callbacks.o
[ 69%] Generating lib/common.o
[ 69%] Generating lib/javasock.o
[ 71%] Generating lib/BufferPRFD.o
[ 73%] Generating lib/j_buffer.o
[ 75%] Generating lib/GlobalRefProxy.o
[ 76%] Generating lib/NativeEnclosure.o
[ 78%] Generating lib/NativeErrcodes.o
[ 80%] Generating lib/StaticVoidPointer.o
[ 82%] Generating lib/errstrings.o
[ 83%] Generating lib/jssutil.o
[ 85%] Generating lib/jssver.o
[ 85%] Built target generate_c
[ 87%] Generating libjss4.so, lib/libjss4.so
[ 89%] Generating bin/buffer_size_1
[ 89%] Built target generate_c_buffer_size_1
[ 91%] Generating bin/buffer_size_4
[ 92%] Built target generate_c_buffer_size_4
[ 92%] Generating bin/TestBufferPRFDSSL
[ 94%] Built target generate_c_TestBufferPRFDSSL
[ 96%] Generating bin/TestBufferPRFD
[ 98%] Built target generate_c_TestBufferPRFD
[100%] Built target generate_so
[root@4868520a8a28 build]# ./run_test.sh org.mozilla.jss.tests.CapabilitiesList
FINE: Starting call to JSSProviderLoader.addProvider()...
FINE: CryptoManager: loading JSS library
FINE: CryptoManager: loaded JSS library from java.library.path
FINE: Loaded org.mozilla.jss.provider.java.security.JSSMessageDigestSpi$SHA1@4c98385c
FINE: Loaded RSA
WARNING: JSS provider is already installed
INFO: JSS CryptoManager: successfully initialized from NSS database at /etc/pki/nssdb
[root@4868520a8a28 build]# history
[root@4868520a8a28 build]# history
1 git clone https://github.com/cipherboy/jss
2 dnf update && dnf install -y git
3 git clone https://github.com/cipherboy/jss
4 cd jss
5 dnf builddep -y ./jss.spec
6 dnf install 'dnf-command(builddep)' -y
7 dnf builddep -y ./jss.spec
8 git checkout capabilities-change-output
9 cd build/ && cmake ..
10 make all
11 ./run_test.sh org.mozilla.jss.tests.CapabilitiesList
12 history
[root@4868520a8a28 build]# cat /etc/os-release
NAME=Fedora
VERSION="35 (Container Image Prerelease)"
ID=fedora
VERSION_ID=35
VERSION_CODENAME=""
PLATFORM_ID="platform:f35"
PRETTY_NAME="Fedora 35 (Container Image Prerelease)"
ANSI_COLOR="0;38;2;60;110;180"
LOGO=fedora-logo-icon
CPE_NAME="cpe:/o:fedoraproject:fedora:35"
HOME_URL="https://fedoraproject.org/"
DOCUMENTATION_URL="https://docs.fedoraproject.org/en-US/fedora/rawhide/system-administrators-guide/"
SUPPORT_URL="https://fedoraproject.org/wiki/Communicating_and_getting_help"
BUG_REPORT_URL="https://bugzilla.redhat.com/"
REDHAT_BUGZILLA_PRODUCT="Fedora"
REDHAT_BUGZILLA_PRODUCT_VERSION=rawhide
REDHAT_SUPPORT_PRODUCT="Fedora"
REDHAT_SUPPORT_PRODUCT_VERSION=rawhide
PRIVACY_POLICY_URL="https://fedoraproject.org/wiki/Legal:PrivacyPolicy"
VARIANT="Container Image"
VARIANT_ID=container
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment