I fixed my broken box by downloading the old versions of nss manually and using 'rpm -Uvh nss*' to downgrade. I used makecache as it forces the https connected to the epel repo which was the one causing the issue.Īs soon as I updated 'nss' with the other two updating as required dependencies I had the same problem.
I setup a test box and was able to fully update it but excluded 3 packages so I still had these old versions :. The machine is centos6 running as a virtual machine within xenserver. May 31 11:08:03 smtpout2 kernel: yum trap invalid opcode ip:7ff1742afd60 sp:7ffd78372ed8 error:0 in libfreeblpriv3.so Loading mirror speeds from cached hostfile
We had the same issue after a 'yum update -disablerepo=epel' and then trying to do a regular update. $ rpm -q kernel nss nss-util nss-tools nss-sysinit
Lm 3dnowext 3dnow constant_tsc rep_good nonstop_tsc extd_apicid pni monitor cx1Ħ popcnt lahf_lm cmp_legacy svm extapic cr8_legacy abm sse4a misalignsse 3dnowprĮfetch osvw ibs skinit wdt nodeid_msr npt lbrv svm_lock nrip_save Pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt pdpe1gb rdtscp Model name : AMD Turion(tm) II Neo N54L Dual-Core Processorįlags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov I don't have the issue on bare metal without avx support, upgraded from 6.7. : Could not generate DH keypairĪt .checkThrown(Handshaker.java:1429)Īt .checkTaskThrown(SSLEngineImpl.java:535)Īt .readNetRecord(SSLEngineImpl.java:813)Īt .unwrap(SSLEngineImpl.java:781)Īt .unwrap(SSLEngine.java:624)Īt .(SecureNioChannel.java:350)Īt .(SecureNioChannel.java:208)Īt .net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1496)Īt .net.NioEndpoint$n(NioEndpoint.java:1476)Īt .runWorker(ThreadPoolExecutor.java:1142)Īt $n(ThreadPoolExecutor.java:617)Īt .threads.TaskThread$n(TaskThread.java:61)Ĭaused by: : Could not generate DH keypairĪt .(ECDHCrypt.java:68)Īt .setupEphemeralECDHKeys(ServerHandshaker.java:1432)Īt .trySetCipherSuite(ServerHandshaker.java:1219)Īt .chooseCipherSuite(ServerHandshaker.java:1023)Īt .clientHello(ServerHandshaker.java:738)Īt .processMessage(ServerHandshaker.java:221)Īt .processLoop(Handshaker.java:979)Īt $1.run(Handshaker.java:919)Īt $1.run(Handshaker.java:916)Īt (Native Method)Īt $n(Handshaker.java:1369)Īt .(SecureNioChannel.java:300)Īt .(SecureNioChannel.java:358)Ĭaused by: : Unknown curve name: 1.3.132.0.39Īt .ECKeyPairGenerator.initialize(ECKeyPairGenerator.java:100)Īt $Delegate.initialize(KeyPairGenerator.java:674)Īt .(ECDHCrypt.java:63)
Anyone have any crafty suggestions on how to temporarily address this (exporting the suggested variables didn't seem to have an effect (a shot in the dark I know but, it's pretty critical for me to get this working))? I'm seeing this manifested with this log entry in tomcat.Ģ 13:49:41.427 SEVERE .net.NioEndpoint$SocketProcessor.doRun This appears to be effecting openjdk as well. Program received signal SIGILL, Illegal instruction.Ġx00007ffff1100d60 in ? () from /usr/lib64/libfreeblpriv3.so It all started with PK11_Encrypt() function from /usr/lib64/libnss3.so which belongs to nss-3.21.86_64. We were able to identify that AVX cpu flag is in charge here: