nss-utils: Illegal instruction on i386

Maintainer: @lucize
Environment: (Geode(TM) Integrated Processor by AMD PCS, Alix Board, OpenWrt 22.03.05 and 23.05.0-rc3)

Description:

I believe it is related to compilation options of nss-utils package (and those it depends on).

Steps to reproduce:

Board: Alix Board
CPU: Geode(TM) Integrated Processor by AMD PCS (family: 0x5, model: 0xa, stepping: 0x2)
OpenWRT: 22.03.05
Package: nss-utils

    mkdir ${HOME}/temp
    certutil -N -d sql:${HOME}/temp
    certutil -S -x -n "Router CA" -s "O=Router,CN=Router CA" -k rsa -g 4096 -v 12 -d sql:${HOME}/temp -t "CT,," -2

During CA generation it will generate Illegal instruction with following lines in dmesg:

traps: certutil[8135] trap invalid opcode ip:b7b2c5a4 sp:bf8e49d0 error:0 in libfreebl3.so[b7acb000+62000]

P.S. I posted it at forum already but I also submit it here in order respect formalities - https://forum.openwrt.org/t/nss-utils-i386-illegal-instruction

Start with the nss-utils package definition and its compilation options, then inspect the dependencies providing certutil and libfreebl3.so. Reproduce the listed certutil commands on the Geode i386 environment and identify which build setting causes the invalid opcode; done means CA generation completes without an illegal-instruction trap on the affected board.