rpms/nss
3
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
514 Commits 51 Branches 231 Tags 4.1 MiB
f23
Commit Graph

514 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Kai Engert
7b5d7ea05f * Wed Mar 06 2013 Kai Engert <kaie@redhat.com> - 3.14.3-9 
- Configure libnssckbi.so to use the alternatives system
  in order to prepare for a drop in replacement.
 2013-03-06 00:49:27 +01:00
Elio Maldonado
b03345792c Update to NSS_3_14_3_RTM 
- sync up pem rsawrapr.c with softoken upstream changes for nss-3.14.3
- Resolves: rhbz#908257 - CVE-2013-1620 nss: TLS CBC padding timing attack
- Resolves: rhbz#909775 - specfile support for AArch64
- Resolves: rhbz#910584 - certutil -a does not produce ASCII output
- Resolves: rhbz#896651 - PEM module trashes private keys if login fails,
  patch contributed by Nalin Dahyabhai
 2013-02-17 20:02:37 -08:00
Elio Maldonado
0370142fd0 Add pem module fix, spec file support for AArch64 and document additional fix 
- Resolves: rhbz#896651 - PEM module trashes private keys if login fails
- Resolves: rhbz#909775 - specfile support for AArch64
- Resolves: rhbz#910584 - certutil -a does not produce ASCII output, upstream fix
 2013-02-16 15:02:25 -08:00
Elio Maldonado
b3f05b9f44 Update to NSS_3_14_3_RTM 
- sync up pem rsawrapr.c with softoken upstream changes for nss-3.14.3
- these changes are in experimental RSA OAEP code currently in a state of flux
- and required for the PEM module to compile with the nss 3.4.3 update
 2013-02-15 15:34:49 -08:00
Elio Maldonado
96957e805a Allow building nss softoken against older sqlite 
- Adding a patch already applied upstream by Kai Engert
 2013-02-04 15:12:54 -08:00
Elio Maldonado
7a7f48e712 Reenable patch to run the freebl tests that were ron as part of the nss-softokn build 
- continue turning off the ocsp tests
 2013-02-01 13:39:03 -08:00
Elio Maldonado
830ee96f85 Update to NSS_3_14_2_RTM 
- Update the minimum requred versiobs of nspr, nss-util, and nss-softokn
- Remove patch obsoleted by the update and update others
- Restore missing second half of the cbc random iv by default patch
- Restore the freebl tests patch until we build without nsssoftoken
 2013-02-01 11:24:15 -08:00
Kai Engert
ca00551ea7 - Update to NSS_3_14_1_WITH_CKBI_1_93_RTM 2013-01-03 19:17:24 +01:00
Elio Maldonado
b13dc44579 Require nspr >= 4.9.4 
- Fix changelog invalid dates
- Patch highlights nss-softoken tests we plan to disable in upcoming release
 2012-12-22 17:50:41 -08:00
Elio Maldonado
5a0d6572e1 Update to NSS_3_14_1_RTM 
- added a patch to not compile the softoken/freebl tests
- needed due to upstream changes to coreconf
- to be addjusted or removed if patch to enabled building nss without softoken is accepted upstream
 2012-12-16 22:25:51 -08:00
Elio Maldonado
edea054ffc Bug 879978 - Install the nssck.api header template where mod_revocator can access it 
- Install nssck.api in /usr/includes/nss3/templates, otherwise it won't install
 2012-12-11 21:26:58 -08:00
Elio Maldonado
765b3c410b Fix the patch turn the dault as intended 
- Remove a pprtion that is actually applied already
- Current one gives the desired results but must invertigate further why the sencnd hunk is already applied.
 2012-11-28 12:52:53 -08:00
Elio Maldonado
461744f676 Bug 879978 - Install the nssck.api header template in a place where mod_revocator can access it 
- Install nssck.api in /usr/includes/nss3
 2012-11-27 21:55:17 -08:00
Elio Maldonado
4e9cb6d944 Cleanup the file paths as it was done on the f18 version 2012-11-20 12:10:58 -08:00
Elio Maldonado
e45858c07c Keep the patch as it was approved with only the recommended changes. 
- Revert back to using szOID_KP_CTL_USAGE_SIGNING instead of SEC_OID_KP_CTL_USAGE_SIGNING
- This is our temporary local private name and what makes this code work even after we rebase
- and pick up the upstream changes. Of course, this patch will be removed when that happens.
 2012-11-20 09:42:53 -08:00
Elio Maldonado Batiz
6e1a26a079 Resolves: rhbz#870864 - Add support in NSS for Secure Boot 2012-11-19 21:45:58 -08:00
Elio Maldonado
19ad65d608 Disable bypass code at build time and return failure on attempts to enable at runtime 
- Bug 806588 - Disable SSL PKCS #11 bypass at build time
 2012-11-09 17:20:07 -08:00
Elio Maldonado
fef81756fd Rename the patch to reflect the correct bug number 
- Renamed: Bug-872838-fix-pk11wrap-locking.patch -> Bug-872124-fix-pk11wrap-locking.patch
- Fixed the reference in spec file

Please enter the commit message for your changes. Lines starting
 2012-11-04 22:00:38 -08:00
Elio Maldonado
b5d7c8e158 Fix the last changelog entry and quote the correct bug number. 2012-11-04 17:07:18 -08:00
Elio Maldonado
247ec13766 Fix pk11wrap locking to fix 'fedpkg new-sources' and 'fedpkg update' hangs 
- Bug 87838 - nss-3.14 causes fedpkg new-sources breakage
- Fix should be considered preliminary since the patch may change upon upstream approval
 2012-11-04 15:44:01 -08:00
Elio Maldonado
fdff72cd4e Merge branch 'master' of ssh://pkgs.fedoraproject.org/nss 
- My local copy is behind by one commi after doing a reset on user
 2012-11-04 15:32:56 -08:00
Elio Maldonado
f2639d5e85 Fix the change log by adding a missing entry 
- Add missing - * Wed Oct 31 2012 Elio Maldonado <emaldona@redhat.com> - 3.14-5
 2012-11-04 15:31:50 -08:00
Elio Maldonado
b89655218d Fix the change log by adding a missing entry 
- Add missing - * Wed Oct 31 2012 Elio Maldonado <emaldona@redhat.com> - 3.14-5
 2012-11-04 15:15:16 -08:00
Elio Maldonado
93eeb31cf1 Add a dummy source file for testing /preventing fedpkg breakage 
- Helps test the fedpkg new-sources and upload commands for breakage by nss updates
- Related to Bug 872124 - nss 3.14 breaks fedpkg new-sources
 2012-11-01 16:07:26 -07:00
Elio Maldonado
e4dd1babb0 Fix a previous unwanted merge from f18 
- Update the SS_SSL_CBC_RANDOM_IV patch to match new sources while
- Keeping the patch disabled while we are still in rawhide and
- State in comment that patch is needed for both stable and beta branches
- Update .gitignore to download only the new sources
 2012-11-01 11:36:35 -07:00
Elio Maldonado
edf5ff0634 Reenable patch to set NSS_SSL_CBC_RANDOM_IV to 1 by default 
- Bug 872124 - nss 3.14 breaks fedpkg new-sources
 2012-11-01 09:29:38 -07:00
Elio Maldonado
c2e20984e1 Fix the spec file so sechash.h gets installed 
- Resolves: rhbz#871882 - missing header: sechash.h in nss 3.14
 2012-10-31 14:05:29 -07:00
Elio Maldonado
192d1d33fb Update the license to MPLv2.0 2012-10-27 01:58:29 -04:00
Elio Maldonado
3be7379237 Use only -f when removing unwanted headers 
- alerted to this flaw by Kamil Dudka
- unneeded as we are only removing headers, not directories, and a dangerous practice
 2012-10-24 11:13:25 -07:00
Elio Maldonado
982583d915 Add secmodt.h to the headers installed by nss-devel 
- nss-devel must install secmodt.h which moved from softoken to pk11wrap with nss-3.14
 2012-10-23 18:48:54 -04:00
Elio Maldonado
b11609d88a Update to NSS_3_14_RTM 2012-10-22 14:49:08 -07:00
Elio Maldonado
0889879046 Upload new sources to the git lookaside cache 2012-10-21 20:50:37 -04:00
Elio Maldonado
1f01ab68b1 Update to NSS_3_14_RC1 
- update nss-589636.patch to apply to httpdserv
- turn off ocsp tests for now
- remove no longer needed patches
- remove headers shipped by nss-util
 2012-10-21 20:47:52 -04:00
Kai Engert
61aa73d6e8 remove empty line... 2012-10-06 00:34:44 +02:00
Kai Engert
53a120c4af * Fri Oct 05 2012 Kai Engert <kaie@redhat.com> - 3.13.6-1 
- Update to NSS_3_13_6_RTM
 2012-10-06 00:22:39 +02:00
Elio Maldonado
ab9d670692 Rebase pem sources to fedora-hosted upstream to pick up two fixes from rhel-6.3 
- Resolves: rhbz#847460 - Fix invalid read and free on invalid cert load
- Resolves: rhbz#847462 - PEM module may attempt to free uninitialized pointer
- Remove unneeded fix gcc 4.7 c++ issue in secmodt.h that actually undoes the upstream fix
 2012-08-27 16:19:41 -07:00
Elio Maldonado
99a740d2ee Fix pluggable ecc support 
- Build nss in three phases
- Phase 1: build softoken, freebl, and util with NSS_ENABLE_ECC unset
- Phase 2: build the rest of nss (muinus bltest and fipstest) with NSS_ENABLE_ECC and NSS_ECC_MORE_THAN_SUITEB set
- Phase 3: build bltest and fipstest with NSS_ENABLE_ECC unset as in phsae 1
 2012-08-13 15:05:06 -07:00
Dennis Gilmore
bd7e7ae750 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild 2012-07-20 00:20:58 -05:00
Elio Maldonado
f304d0d0cf Fix checkin comment to prevent unwanted expansions of percents 
- Done on previous commit but must retag now
 2012-07-01 11:42:00 -07:00
Elio Maldonado
18cd8ce5de Fix the checkin comment to use %% 2012-07-01 11:33:54 -07:00
Elio Maldonado
967fa1be0d Require nspr 4.9.1 2012-07-01 10:35:21 -07:00
Elio Maldonado
7011f18b86 Enable sha224 portion of powerup selftest when running test suites 
- That disabling was meant for RHEL-6 wich at time has and older softoken
 2012-07-01 10:25:16 -07:00
Elio Maldonado
6b33cec549 Resolves: Bug 830410 - Missing Requires %{?_isa} 
- Use Requires: %{name}%{?_isa} = %{version}-%{release} on tools
- Drop zlib requires which rpmlint reports as error E: explicit-lib-dependency zlib
 2012-07-01 10:13:07 -07:00
Elio Maldonado Batiz
e1a1b3583b Bug 833529 - revert unwanted change to nss.pc.in 
- Remove the /nss3 fom Lib: line in nss.pc.in
 2012-06-20 21:58:09 -07:00
Elio Maldonado
580fd0d7b9 Resolves: rhbz#833529 - Remove unwanted space from the Libs: line on nss.pc.in 2012-06-19 10:55:57 -07:00
Elio Maldonado
a27d98a9ec Update to 3.13.5 2012-06-18 07:20:04 -07:00
Elio Maldonado
c38003c691 Resolves: Bug 812423 - nss_Init leaks memory, fix from RHEL 6.3 
- Fix conributed by Kamil Dudka
 2012-04-13 10:10:57 -07:00
Elio Maldonado
41064271a8 Resolves: Bug 805723 - Library needs partial RELRO support added 
- Patch coreconf/Linux.mk as done on RHEL 6.2
 2012-04-08 11:13:29 -07:00
Elio Maldonado
034c16be36 Merge branch 'master' into f17 
- Update to NSS_3_13_4_RTM
- Update the nss-pem source archive to the latest version
- Remove no longer needed patches
- Resolves: Bug 806043 - use pem files interchangeably in a single process
- Resolves: Bug 806051 - PEM various flaws detected by Coverity
- Resolves: Bug 806058 - PEM pem_CreateObject leaks memory given a non-existing file name
 2012-04-06 15:26:15 -07:00
Elio Maldonado
99d4b15c76 Fix duplicate entries 
- Reemove the previous entry for nss tar ball, keep latest
 2012-04-06 11:04:36 -07:00