d07560c593
Merge branch 'master' into private-emaldona-crypto-policy-work
2016-07-14 15:17:42 -07:00
7854e70d7e
Incorporate more changes requested in upstream review and commited upstream ( #1157720 )
...
- still keeping two separate patches
2016-07-14 10:41:00 -07:00
ff192a931a
Incorporate some changes requested in upstream review and commited upstream ( #1157720 )
2016-07-13 17:44:26 -07:00
a06fcaba6f
Merge remote-tracking branch 'origin/private-rebase-work-fedora-rawhide' into private-emaldona-crypto-policy-work
2016-07-13 08:11:08 -07:00
270f23d149
Implement changes requested in upstream review and pushed upstream ( #1157720 )
...
- merge the two policy related patches
2016-07-12 20:25:49 -07:00
90700e6be2
Add support to listsuites to list ciphers allowed by policy
2016-07-08 12:07:05 -07:00
e666a29edf
Add support for conditionally ignoring the system policy ( #1157720 )
...
- Remove unneeded test scripts patches in order to run more tests
- Remove unneeded test data modifications from the spec file
2016-07-01 18:22:06 -07:00
68e30820ed
Add a reference to bug filed upstream
2016-06-28 09:33:42 -07:00
ef6c2f08e7
Remove obsolete patch and spurious lines from the spec file ( #1347336 )
2016-06-28 07:47:13 -07:00
8baa8a8f80
Merge remote-tracking branch 'origin/master' into private-emaldona-crypto-policy-work
2016-06-26 16:44:53 -07:00
e51bf1ce38
Cleanup spec file and patches and add references to bugs filed upstream
2016-06-26 15:03:12 -07:00
0f3f4c9f32
Add support for conditionally ignoring the system-wide crypto policy
...
- Add support to listsuites for making queries related to system policy
2016-06-25 09:00:07 -07:00
731ce5035a
Add tests-data-adjust-for-policy.patch
2016-06-25 08:42:40 -07:00
93a134afa1
Remove adjust4policy.txt for the list of sources
2016-06-25 08:40:11 -07:00
82cee71d15
Merge branch 'private-emaldona-upstream-experiment' into private-emaldona-crypto-policy-work
2016-06-25 08:37:06 -07:00
0ee7d5581e
Merge branch 'master' into private-emaldona-upstream-experiment
2016-06-24 17:18:56 -07:00
7f2e27a8d5
Merge branch 'master' into private-emaldona-crypto-policy-work
2016-06-24 14:39:32 -07:00
3792f60887
Rebase to NSS 3.15
...
- Remove three patches obsolted by the rebase and updated two
- Temporarily not building the ecperf tool
- ecperef requires freebl/ec.h and ecl-curve.h and the latter
- causes compile failure because it requires that
- NSS_ECC_MORE_THAN_SUITE_B not be defined yet this is
- required for nss builds to allow external pkcs #11 providers
- to support curves beyond suite-b, such restriction only applies
- to the internal crypto module
2016-06-24 14:13:59 -07:00
1911d47990
Bug 1347336, decouple nss-pem from the nss package, patch contributed by Kamil Dudka
2016-06-22 15:20:39 +02:00
f1288f2a53
Renamed a source file and deleted the patch that it replaces.
2016-06-15 12:06:02 -07:00
50d1896848
Fix syntax error in specfile and sync. up with what's under review
2016-06-15 08:41:56 -07:00
80580e8121
Add support for conditionally ignoring the system policy
2016-06-13 17:54:00 -07:00
4d5d729ef7
Merge branch 'master' into private-emaldona-upstream-experiment
2016-06-13 17:33:24 -07:00
e31a061409
Renumber the last patch.
2016-06-08 21:25:21 -07:00
404526cfc6
Merge branch 'private-emaldona-crypto-policy-work' of ssh://pkgs.fedoraproject.org/rpms/nss into private-emaldona-crypto-policy-work
2016-06-08 20:32:04 -07:00
671275a78f
Fix conditional nesting config.mk
2016-06-08 20:29:36 -07:00
a8195b73f1
Move the other patching of some sslcov and sslsterss test data from build to test phase.
2016-06-08 17:09:33 -07:00
cb9d721509
Fix comment
2016-06-08 14:03:10 -07:00
d92ceb305d
Simplied the changes to contionally load the policy file
...
- just change lib/nss.config.mk
2016-06-08 13:34:55 -07:00
cc245db464
Add support for conditionally ignoring the system policy
...
- alternative approach to what's currently subitted for review
- one patch file is now a source file as i'ts used to conditionally patch test dat
- test data is modified accrording to the type of build as expected results are different
- supports enforcing or ignoring the crypto policy files as suggested by Nikos
- this is still experimental work thus the use of a private branch
2016-06-07 17:32:07 -07:00
f5c6a9ac04
Apply the patch that was last introduced
...
- Renumber and reorder some of the patches
- Resolves: Bug 1342158
2016-06-03 08:40:01 -07:00
85c6e70f3c
Allow application requests to disable SSL v2 to succeed
...
- Resolves: Bug 1342158 - nss-3.24 does no longer support ssl V2, installation of IPA fails because nss init fails
2016-06-02 13:47:29 -07:00
c460de4d23
Rebase to NSS 3.24.0
...
- Restore setting the policy file location
- Make ssl tests scripts aware of policy
- Ajust tests data expected result for policy
2016-05-29 10:14:36 -07:00
29b52f2caf
Bootstrap build to rebase to NSS 3.24.0
...
- Temporarily not setting the policy file location
2016-05-25 19:55:49 -07:00
b485416766
Merge branch 'master' into private-emaldona-upstream-experiment
2016-05-25 14:27:54 -07:00
fc09930b4d
Update nss_util_version and nss_softoken_version to 3.24.0
...
- Resolves: Bug 1336849 - nss-3.24 is available
2016-05-24 06:49:40 -07:00
3648d70a92
Update to NSS 3.24.0
...
- Resolves: Bug 1336849 - nss-3.24 is available
- Update patches on account of the rebase
- Remove unused patches un account of the rebase
- Patch pem module to compile with wrning for unitilaized variables treated as errors
- Patch to skip some of the gtests as they use private calls and need to statically link with libnssutil.a
- TODO: bring this up with the external_tests framework developers upstream
2016-05-23 18:10:46 -07:00
2e6c8d6f71
Change POLICY_FILE to "nss.config"
2016-05-12 12:04:57 -07:00
299e9058d1
Change POLICY_FILE to "nss.cfg"
2016-04-22 08:25:14 -07:00
21d9cd13e1
Change the POLICY_PATH to "/etc/crypto-policies/back-ends"
...
- Regenerate the check policy patch with hg to provide more context
- the nss-util portion included though not applied here but in nss-util
- todo: file bug upstream once we have done some testing
2016-04-20 08:49:00 -07:00
b9c9bc550c
Fix typo in the last %changelog entry
2016-04-14 14:16:05 -07:00
ea86d5898c
Load policy file if /etc/pki/nssdb/policy.cfg exists
...
- Resolves: Bug 1157720 - NSS should enforce the system-wide crypto policy
2016-03-24 15:18:49 -07:00
b22cf46b7c
Remove unused patch rendered obsolete by pem update
2016-03-08 15:41:14 -08:00
2a45956d5b
Update pem sources to latest from nss-pem upstream
...
- Resolves: Bug 1300652 - [PEM] insufficient input validity checking while loading a private key
- Fixes memory leak on failed ASN1 decoding of RSA keys with rebase
- https://git.fedorahosted.org/cgit/nss-pem.git
2016-03-08 06:47:48 -08:00
e4343992f0
Rebase to NSS 3.23
2016-03-05 12:42:26 -08:00
c0f6099656
Requite nss and nss-softokn version 3.22.2
2016-02-27 16:45:41 -08:00
69c688f3b5
Rebase to NSS 3.22.2
...
- Resolves: Bug 1304135 - nss-3.22.2 is available
2016-02-26 21:59:01 -08:00
fe44847276
Fix ssl2/exp test disabling to run all the required tests
2016-02-22 20:49:28 -08:00
c281a339e1
Rebase to NSS 3.22.1
...
- Bug 1304135 - nss-3.22.1 is available
2016-02-21 11:30:52 -08:00
317de01a4d
Update .gitignore as part of updating to nss 3.22
2016-02-08 13:47:18 -08:00
Elio Maldonado
Kai Engert