[Bug 223840] net/chrony Not working with NSS

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=223840

--- Comment #4 from OlivierW <olivierw1+bugzilla-freebsd at hotmail.com> ---
Well, I don't know why "chronyc keygen 73 SHA1 256" doesn't work, but for now
I'd like chronyd to work and I may have found something.


The error comes from:
https://github.com/mlichvar/chrony/blob/c9f50fc686d93b982cb0ef72b9e140114fccf53b/util.c#L372
        MD5_hash = HSH_GetHashId("MD5");
        assert(MD5_hash >= 0);

And I found in NSS 3.14 release note: "Support for certificate signatures using
the MD5 hash algorithm is now disabled by default.":
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.14_release_notes

I'll search how to enable MD5 in NSS and see if that solves the problem. I'll
report back later.

-- 
You are receiving this mail because:
You are the assignee for the bug.