#306 Fail gracefully if NSS key generation fails
Opened by rcritten. Modified
rcritten/certmonger issue_305  into  master

Download 306.patch

If PK11_GenerateKeyPair() completely fails and returns -1
then quit generation. Nalin has a loop that will retry if
the requested key size doesn't match the actual size
generated. For the case of a complete failure this ended up
re-running key generation in a tight loop and causing
certmonger to effectively hang.

I'm not completely convinced that this test is needed at
all but it's been in here for over a decade so I'll leave
the rest.

Fixes: https://pagure.io/certmonger/issue/305

Signed-off-by: Rob Crittenden rcritten@redhat.com

Metadata