Initialize NSS early (rhbz#382091)

- add new rpmInitCrypto() API for directly initializing any crypto
- call it from rpmReadConfig() to ensure it's always initialized early on

1 files changed, 9 insertions, 0 deletions

diff --git a/rpmio/rpmpgp.h b/rpmio/rpmpgp.h
index 5d3e2ae5c..fc3b4cd3e 100644
--- a/rpmio/rpmpgp.h
+++ b/rpmio/rpmpgp.h
@@ -1307,6 +1307,15 @@ unsigned int pgpCRC(const byte *octets, size_t len)
 }
 
 /** \ingroup rpmio
+ * Perform cryptography initialization.
+ * It must be called before any cryptography can be used within rpm.
+ * It's not normally necessary to call it directly as it's called in
+ * general rpm initialization routines.
+ * @return		0 on success, -1 on failure
+ */
+int rpmInitCrypto(void);
+
+/** \ingroup rpmio
  * Duplicate a digest context.
  * @param octx		existing digest context
  * @return		duplicated digest context