Skip to content

Fix "NSS could not shutdown"

SignatureHandler never freed it's signing certificate. This left an internal NSS reference that prevented cleanup of the NSS cache, causing "NSS could not shutdown".

NSS maintains an internal in-memory cache, where content is reference counted. PK11_MakeCertFromHandle increases the issuerAndSn count. CERT_DestroyCertificate decreases it. NSS tries to destruct the cache in NSS_Shutdown, which we've scheduled with atexit. There it detects a remaining reference.

Fixes #1326 (closed).

Edited by Tobias Deiminger

Merge request reports