If DO_RELEASE_BUILD is set use pubkey-release and test with it This currently fails because polarssl rejects keys with a public exponent larger then 64 bit. With the following patch all tests pass. But this currently awaits upstream comment. https://polarssl.org/discussions/bug-report-issues/rsa-keys-with-large-public-exponents-are-rejected --- rsa.c.orig 2014-04-10 17:22:32.727290031 +0200 +++ rsa.c 2014-04-10 17:22:38.847410225 +0200 @@ -154,7 +154,7 @@ return( POLARSSL_ERR_RSA_KEY_CHECK_FAILED ); if( mpi_msb( &ctx->E ) < 2 || - mpi_msb( &ctx->E ) > 64 ) + mpi_msb( &ctx->E ) > POLARSSL_MPI_MAX_BITS ) return( POLARSSL_ERR_RSA_KEY_CHECK_FAILED ); return( 0 );

#ifndef NSSTEST_H
#define NSSTEST_H

#include <QTemporaryFile>
#include <QTemporaryDir>
#include <QObject>
#include <QList>
#include <QByteArray>

#include "certificatelist.h"

class NSSTest: public QObject
{
    Q_OBJECT

    QTemporaryDir fakeHome;
    QDir fakeFirefoxDir;
    QDir fakeThunderbirdDir;
    QTemporaryDir ffNSSDir;
    QTemporaryDir tbNSSDir;
    CertificateList validList;
    QTemporaryFile validListFile;
private:
    QList<QByteArray> get_nss_certs(QTemporaryDir *nssDir);
    void setupTestDir(QTemporaryDir *nssDir);

private Q_SLOTS:
    void initTestCase();
    void testInstRemove();
};

#endif // NSSTEST_H