Delay NSS initialization until actually used

- since NSS is allergic (ie becomes non-functional) after forking, delay
  it's initialization until really needed, ie lazy init in rpmDigestInit()
- however as NSS init can fail if attempted in completely empty chroot,
  we force crypto init to happen at transaction set create time, forking
  past that is pretty much doomed anyway
- this is the other half of the fix for rhbz#476737, and similar case
  noticed by Pixel in Mandriva (due to urpm forking)

1 files changed, 5 insertions, 1 deletions

diff --git a/rpmio/digest.c b/rpmio/digest.c
index 64b678b86..c565cf608 100644
--- a/rpmio/digest.c
+++ b/rpmio/digest.c
@@ -75,8 +75,12 @@ DIGEST_CTX
 rpmDigestInit(pgpHashAlgo hashalgo, rpmDigestFlags flags)
 {
     HASH_HashType type;
-    DIGEST_CTX ctx = xcalloc(1, sizeof(*ctx));
+    DIGEST_CTX ctx;
 
+    if (rpmInitCrypto() < 0)
+	return NULL;
+
+    ctx = xcalloc(1, sizeof(*ctx));
     ctx->flags = flags;
 
     type = getHashType(hashalgo);