Elio Maldonado
461744f676
Bug 879978 - Install the nssck.api header template in a place where mod_revocator can access it
...
- Install nssck.api in /usr/includes/nss3
2012-11-27 21:55:17 -08:00
Elio Maldonado
4e9cb6d944
Cleanup the file paths as it was done on the f18 version
2012-11-20 12:10:58 -08:00
Elio Maldonado
e45858c07c
Keep the patch as it was approved with only the recommended changes.
...
- Revert back to using szOID_KP_CTL_USAGE_SIGNING instead of SEC_OID_KP_CTL_USAGE_SIGNING
- This is our temporary local private name and what makes this code work even after we rebase
- and pick up the upstream changes. Of course, this patch will be removed when that happens.
2012-11-20 09:42:53 -08:00
Elio Maldonado Batiz
6e1a26a079
Resolves: rhbz#870864 - Add support in NSS for Secure Boot
2012-11-19 21:45:58 -08:00
Elio Maldonado
19ad65d608
Disable bypass code at build time and return failure on attempts to enable at runtime
...
- Bug 806588 - Disable SSL PKCS #11 bypass at build time
2012-11-09 17:20:07 -08:00
Elio Maldonado
fef81756fd
Rename the patch to reflect the correct bug number
...
- Renamed: Bug-872838-fix-pk11wrap-locking.patch -> Bug-872124-fix-pk11wrap-locking.patch
- Fixed the reference in spec file
Please enter the commit message for your changes. Lines starting
2012-11-04 22:00:38 -08:00
Elio Maldonado
b5d7c8e158
Fix the last changelog entry and quote the correct bug number.
2012-11-04 17:07:18 -08:00
Elio Maldonado
247ec13766
Fix pk11wrap locking to fix 'fedpkg new-sources' and 'fedpkg update' hangs
...
- Bug 87838 - nss-3.14 causes fedpkg new-sources breakage
- Fix should be considered preliminary since the patch may change upon upstream approval
2012-11-04 15:44:01 -08:00
Elio Maldonado
fdff72cd4e
Merge branch 'master' of ssh://pkgs.fedoraproject.org/nss
...
- My local copy is behind by one commi after doing a reset on user
2012-11-04 15:32:56 -08:00
Elio Maldonado
f2639d5e85
Fix the change log by adding a missing entry
...
- Add missing - * Wed Oct 31 2012 Elio Maldonado <emaldona@redhat.com> - 3.14-5
2012-11-04 15:31:50 -08:00
Elio Maldonado
b89655218d
Fix the change log by adding a missing entry
...
- Add missing - * Wed Oct 31 2012 Elio Maldonado <emaldona@redhat.com> - 3.14-5
2012-11-04 15:15:16 -08:00
Elio Maldonado
93eeb31cf1
Add a dummy source file for testing /preventing fedpkg breakage
...
- Helps test the fedpkg new-sources and upload commands for breakage by nss updates
- Related to Bug 872124 - nss 3.14 breaks fedpkg new-sources
2012-11-01 16:07:26 -07:00
Elio Maldonado
e4dd1babb0
Fix a previous unwanted merge from f18
...
- Update the SS_SSL_CBC_RANDOM_IV patch to match new sources while
- Keeping the patch disabled while we are still in rawhide and
- State in comment that patch is needed for both stable and beta branches
- Update .gitignore to download only the new sources
2012-11-01 11:36:35 -07:00
Elio Maldonado
edf5ff0634
Reenable patch to set NSS_SSL_CBC_RANDOM_IV to 1 by default
...
- Bug 872124 - nss 3.14 breaks fedpkg new-sources
2012-11-01 09:29:38 -07:00
Elio Maldonado
c2e20984e1
Fix the spec file so sechash.h gets installed
...
- Resolves: rhbz#871882 - missing header: sechash.h in nss 3.14
2012-10-31 14:05:29 -07:00
Elio Maldonado
192d1d33fb
Update the license to MPLv2.0
2012-10-27 01:58:29 -04:00
Elio Maldonado
3be7379237
Use only -f when removing unwanted headers
...
- alerted to this flaw by Kamil Dudka
- unneeded as we are only removing headers, not directories, and a dangerous practice
2012-10-24 11:13:25 -07:00
Elio Maldonado
982583d915
Add secmodt.h to the headers installed by nss-devel
...
- nss-devel must install secmodt.h which moved from softoken to pk11wrap with nss-3.14
2012-10-23 18:48:54 -04:00
Elio Maldonado
b11609d88a
Update to NSS_3_14_RTM
2012-10-22 14:49:08 -07:00
Elio Maldonado
0889879046
Upload new sources to the git lookaside cache
2012-10-21 20:50:37 -04:00
Elio Maldonado
1f01ab68b1
Update to NSS_3_14_RC1
...
- update nss-589636.patch to apply to httpdserv
- turn off ocsp tests for now
- remove no longer needed patches
- remove headers shipped by nss-util
2012-10-21 20:47:52 -04:00
Kai Engert
61aa73d6e8
remove empty line...
2012-10-06 00:34:44 +02:00
Kai Engert
53a120c4af
* Fri Oct 05 2012 Kai Engert <kaie@redhat.com> - 3.13.6-1
...
- Update to NSS_3_13_6_RTM
2012-10-06 00:22:39 +02:00
Elio Maldonado
ab9d670692
Rebase pem sources to fedora-hosted upstream to pick up two fixes from rhel-6.3
...
- Resolves: rhbz#847460 - Fix invalid read and free on invalid cert load
- Resolves: rhbz#847462 - PEM module may attempt to free uninitialized pointer
- Remove unneeded fix gcc 4.7 c++ issue in secmodt.h that actually undoes the upstream fix
2012-08-27 16:19:41 -07:00
Elio Maldonado
99a740d2ee
Fix pluggable ecc support
...
- Build nss in three phases
- Phase 1: build softoken, freebl, and util with NSS_ENABLE_ECC unset
- Phase 2: build the rest of nss (muinus bltest and fipstest) with NSS_ENABLE_ECC and NSS_ECC_MORE_THAN_SUITEB set
- Phase 3: build bltest and fipstest with NSS_ENABLE_ECC unset as in phsae 1
2012-08-13 15:05:06 -07:00
Dennis Gilmore
bd7e7ae750
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
2012-07-20 00:20:58 -05:00
Elio Maldonado
f304d0d0cf
Fix checkin comment to prevent unwanted expansions of percents
...
- Done on previous commit but must retag now
2012-07-01 11:42:00 -07:00
Elio Maldonado
18cd8ce5de
Fix the checkin comment to use %%
2012-07-01 11:33:54 -07:00
Elio Maldonado
967fa1be0d
Require nspr 4.9.1
2012-07-01 10:35:21 -07:00
Elio Maldonado
7011f18b86
Enable sha224 portion of powerup selftest when running test suites
...
- That disabling was meant for RHEL-6 wich at time has and older softoken
2012-07-01 10:25:16 -07:00
Elio Maldonado
6b33cec549
Resolves: Bug 830410 - Missing Requires %{?_isa}
...
- Use Requires: %{name}%{?_isa} = %{version}-%{release} on tools
- Drop zlib requires which rpmlint reports as error E: explicit-lib-dependency zlib
2012-07-01 10:13:07 -07:00
Elio Maldonado Batiz
e1a1b3583b
Bug 833529 - revert unwanted change to nss.pc.in
...
- Remove the /nss3 fom Lib: line in nss.pc.in
2012-06-20 21:58:09 -07:00
Elio Maldonado
580fd0d7b9
Resolves: rhbz#833529 - Remove unwanted space from the Libs: line on nss.pc.in
2012-06-19 10:55:57 -07:00
Elio Maldonado
a27d98a9ec
Update to 3.13.5
2012-06-18 07:20:04 -07:00
Elio Maldonado
c38003c691
Resolves: Bug 812423 - nss_Init leaks memory, fix from RHEL 6.3
...
- Fix conributed by Kamil Dudka
2012-04-13 10:10:57 -07:00
Elio Maldonado
41064271a8
Resolves: Bug 805723 - Library needs partial RELRO support added
...
- Patch coreconf/Linux.mk as done on RHEL 6.2
2012-04-08 11:13:29 -07:00
Elio Maldonado
034c16be36
Merge branch 'master' into f17
...
- Update to NSS_3_13_4_RTM
- Update the nss-pem source archive to the latest version
- Remove no longer needed patches
- Resolves: Bug 806043 - use pem files interchangeably in a single process
- Resolves: Bug 806051 - PEM various flaws detected by Coverity
- Resolves: Bug 806058 - PEM pem_CreateObject leaks memory given a non-existing file name
2012-04-06 15:26:15 -07:00
Elio Maldonado
99d4b15c76
Fix duplicate entries
...
- Reemove the previous entry for nss tar ball, keep latest
2012-04-06 11:04:36 -07:00
Elio Maldonado
4fe7a90965
Updated the correct stripped source archive
2012-04-06 10:11:54 -07:00
Elio Maldonado
5203007534
Update to NSS_3_13_14_RTM
2012-04-06 10:06:51 -07:00
Elio Maldonado
310e64d3c2
Update the nss-pem source archive to the latest version
...
- Resolves: Bug 806043 - use pem files interchangeably in a single process
- Resolves: Bug 806051 - PEM various flaws detected by Coverity
- Resolves: Bug 806058 - PEM pem_CreateObject leaks memory given a non-existing file name
- Remove patches obsoleted by the nss and pem updates
2012-04-02 13:34:11 -07:00
Elio Maldonado
c408966515
Require nss-util and nss-softokn at 3.12.4
2012-04-01 17:24:02 -07:00
Elio Maldonado
89045d8452
Update to NSS_3_13.4_BETA1
2012-04-01 16:35:48 -07:00
Elio Maldonado Batiz
51c4dcf0e0
Merge branch 'master' into f17
2012-03-27 15:26:25 -07:00
Elio Maldonado
39b507ea3c
- Resolves: Bug 805723 - Library needs partial RELRO support added
2012-03-21 15:01:07 -07:00
Elio Maldonado
19fee62ac7
Enable the Patch29: nss-ssl-cbc-random-iv-off-by-default.patch
...
- F17 is already aplha, let's treat it as a stable branch
- Todo: Ask communinty members to try turning it on and provide
- feedack on servers and clients that may still be broken.
2012-03-09 18:07:15 -08:00
Elio Maldonado Batiz
7d1bd46bd6
Cleanup the spec file
...
- Add references to the upstream bugs
- Fix typo in Summary for sysinit
2012-03-09 14:40:23 -08:00
Elio Maldonado
3ccc11c806
Pick up fixes from RHEL
...
- Resolves: rhbz#800674 - Unable to contact LDAP Server during winsync
- Resolves: rhbz#800682 - Qpid AMQP daemon fails to load after nss update
- Resolves: rhbz#800676 - NSS workaround for freebl bug that causes openswan to drop connections
2012-03-07 18:39:32 -08:00
Elio Maldonado Batiz
85a1075a8d
Require nss-softokn 3.13.3 as part of the update to NSS_3_13_3_RTM
2012-03-01 12:48:17 -08:00
Elio Maldonado
ca7f73c317
- Update to NSS_3_13_3_RTM
...
- Keeping the requires on nss-softokn at 3.13.1 temporarily
- Removed nss-ckbi-1.88.rtm.patch which we no longer need due to the update
2012-02-29 19:20:40 -08:00