[Git][reproducible-builds/reproducible-notes][master] Add comments and URL for nss

[Jochen Sprickerhof (@jspricke)]

Jochen Sprickerhof pushed to branch master at Reproducible Builds / reproducible-notes


Commits:
db8a7c8d by Tianyu Chen at 2026-09-15T14:37:09+08:00
Add comments and URL for nss

- - - - -


1 changed file:

- packages.yml


Changes:

=====================================
packages.yml
=====================================
@@ -18506,8 +18506,11 @@ nspr:
 nss:
   version: 2:3.23-2
   comments: |
-    libraries are signed with shlibsign during build.
-    See also: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_Tech_Notes/nss_tech_note6
+    .chk files generated by shlibsign contain an HMAC signature.
+    When shlibsign is invoked without -K, shlibsign generates a random HMAC
+    key making the .chk non-reproducible.
+    https://bugzilla.mozilla.org/show_bug.cgi?id=1902078
+    https://phabricator.services.mozilla.com/D217282
   issues:
     - cryptographic_signature
 nss-passwords:



View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-notes/-/commit/db8a7c8d770be0994c48bc0f4aac92fcd0979817

-- 
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-notes/-/commit/db8a7c8d770be0994c48bc0f4aac92fcd0979817
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20260915/ada25f45/attachment.htm>