rpms/nss
3
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
462 Commits 51 Branches 231 Tags 4.1 MiB
a91fad25d2
Commit Graph

462 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Elio Maldonado
8943f1ad54 Update to NSS_3_15_RTM 2013-07-02 13:44:44 -07:00
Elio Maldonado
efdced7007 Revert "Reenable patches required for compatibility on stable fedora branches" 
This reverts commit 65efb2c2f3.
That commit wasn't untended for this branch
 2013-06-23 19:39:13 -07:00
Elio Maldonado
65efb2c2f3 Reenable patches required for compatibility on stable fedora branches 
- Reenable nss-ssl-enforce-no-pkcs11-bypass.path
- Renable nss-ssl-cbc-random-iv-off-by-default.patch
 2013-06-23 19:00:21 -07:00
Elio Maldonado
fd6098c240 Install man pages for nss-tools and the nss-config and setup-nsssysinit scripts 
- Resolves: rhbz#606020 - nss security tools lack man pages
 2013-06-19 21:30:57 -07:00
Elio Maldonado
b8273ce04c Install man pages for nss-tools and the nss-config and setup-nsssysinit scripts 
- Resolves: rhbz#606020 - nss security tools lack man pages
 2013-06-19 20:32:27 -07:00
Elio Maldonado
b8228ed18c Merge branch 'master' into f19 2013-06-18 18:29:01 -07:00
Elio Maldonado
e36079dd45 Build nss without softoken or util sources in the tree 
- Resolves: rhbz#689918
 2013-06-18 17:45:38 -07:00
Elio Maldonado
497b79c7da Merge branch 'master' into f19 
- update nss-ssl-cbc-random-iv-off-by-default.patch
- disable patch that makes failed attempt at unsupported ssl pkcs11 bypass fatal
 2013-06-17 17:32:22 -07:00
Elio Maldonado
41e94360c9 Update ssl-cbc-random-iv-by-default.patch 
- Added a missing comma
 2013-06-17 16:23:06 -07:00
Elio Maldonado
35c607f549 Add missing file 2013-06-17 16:18:53 -07:00
Elio Maldonado
b70c8423a2 Update to NSS_3_15_RTM 
- manual merge from master
 2013-06-17 16:17:29 -07:00
Elio Maldonado
2f66633263 Fix generation of NSS_VMAJOR, NSS_VMINOR, and NSS_VPATCH for nss-config 
- These were blank in nss-config causing build failures on client paclages
- Reported by Martin Stransky when a xulrunner build failed
 2013-06-16 10:07:11 -07:00
Elio Maldonado
f6ec57311f Update to NSS_3_15_RTM 2013-06-15 12:48:12 -07:00
Elio Maldonado
68c8f5228f Reactivate nss-ssl-cbc-random-iv-off-by-default.patch 
- now that f19 is entering beta it must be treated like a stable branch
- compatibity takes precedence
 2013-05-13 18:04:31 -07:00
Elio Maldonado
2249db62a6 Fix incorrect path that hid failed test from view 
- Add ocsp to the test suites to run but ...
- Temporarily disable the ocsp stapling tests
- Do not treat failed attempts at ssl pkcs11 bypass as fatal errors
 2013-04-24 18:46:52 -07:00
Kai Engert
60d1b4b4b7 - Update expired test certificates (fixed in upstream bug 852781) 2013-04-22 16:13:17 +02:00
Kai Engert
7a5aba2bfb * Mon Apr 22 2013 Kai Engert <kaie@redhat.com> - 3.14.3-2 
- Add upstream patch to fix rhbz#872761
 2013-04-22 15:28:47 +02:00
Kai Engert
d6b57e36c1 * Fri Apr 19 2013 Kai Engert <kaie@redhat.com> - 3.14.3-12.0 
- Add upstream patch to fix rhbz#872761
 2013-04-22 15:23:51 +02:00
Elio Maldonado
30056fd35c Update nss-pem-20130405.tar.bz2 to the git lookaside cache 2013-04-09 16:22:42 -07:00
Elio Maldonado
2a8c1318ea Update to NSS_3_15_BETA1 
- Update spec file, patches, and helper scripts on account of a shallower source tree
- Update the pem sources also to adjust to the sallower source for nss
 2013-04-09 16:14:36 -07:00
Kai Engert
59b5d52d9e * Sun Mar 24 2013 Kai Engert <kaie@redhat.com> - 3.14.3-12 
- Update expired test certificates (fixed in upstream bug 852781)
 2013-03-24 00:28:39 +01:00
Kai Engert
c3a3134be3 * Sun Mar 24 2013 Kai Engert <kaie@redhat.com> - 3.14.3-11 
- Update expired test certificates (fixed in upstream bug 852781)
 2013-03-24 00:11:03 +01:00
Kai Engert
21e8668243 * Fri Mar 08 2013 Kai Engert <kaie@redhat.com> - 3.14.3-10 
- Fix incorrect post/postun scripts. Fix broken links in posttrans.
 2013-03-08 23:34:55 +01:00
Kai Engert
7b5d7ea05f * Wed Mar 06 2013 Kai Engert <kaie@redhat.com> - 3.14.3-9 
- Configure libnssckbi.so to use the alternatives system
  in order to prepare for a drop in replacement.
 2013-03-06 00:49:27 +01:00
Elio Maldonado
10de960df7 Merge branch 'master' into f18 
- Update to NSS_3_14_RTM
 2013-02-22 10:41:35 -08:00
Elio Maldonado
a7508f6a97 Update to NSS_3_14_3_RTM 
- cherry-pick from master to keep the nss-cbc-random-iv-off-by-by-default patch enabled
- sync up pem rsawrapr.c with softoken upstream changes for nss-3.14.3
- Resolves: rhbz#908257 - CVE-2013-1620 nss: TLS CBC padding timing attack
- Resolves: rhbz#909775 - specfile support for AArch64
- Resolves: rhbz#910584 - certutil -a does not produce ASCII output
- Resolves: rhbz#896651 - PEM module trashes private keys if login fails,
  patch contributed by Nalin Dahyabhai
 2013-02-19 18:12:05 -08:00
Elio Maldonado
b03345792c Update to NSS_3_14_3_RTM 
- sync up pem rsawrapr.c with softoken upstream changes for nss-3.14.3
- Resolves: rhbz#908257 - CVE-2013-1620 nss: TLS CBC padding timing attack
- Resolves: rhbz#909775 - specfile support for AArch64
- Resolves: rhbz#910584 - certutil -a does not produce ASCII output
- Resolves: rhbz#896651 - PEM module trashes private keys if login fails,
  patch contributed by Nalin Dahyabhai
 2013-02-17 20:02:37 -08:00
Elio Maldonado
0370142fd0 Add pem module fix, spec file support for AArch64 and document additional fix 
- Resolves: rhbz#896651 - PEM module trashes private keys if login fails
- Resolves: rhbz#909775 - specfile support for AArch64
- Resolves: rhbz#910584 - certutil -a does not produce ASCII output, upstream fix
 2013-02-16 15:02:25 -08:00
Elio Maldonado
b3f05b9f44 Update to NSS_3_14_3_RTM 
- sync up pem rsawrapr.c with softoken upstream changes for nss-3.14.3
- these changes are in experimental RSA OAEP code currently in a state of flux
- and required for the PEM module to compile with the nss 3.4.3 update
 2013-02-15 15:34:49 -08:00
Elio Maldonado
966b5e412f Merge branch 'master' into f18 2013-02-04 15:43:44 -08:00
Elio Maldonado
96957e805a Allow building nss softoken against older sqlite 
- Adding a patch already applied upstream by Kai Engert
 2013-02-04 15:12:54 -08:00
Elio Maldonado
cc8dc4398b Don't try to apply path 42 that was removed. 2013-02-03 19:29:42 -08:00
Elio Maldonado
9b0bed55b9 Merge branch 'master' into f18 
Update to NSS_3_14_2_RTM
 2013-02-01 16:57:32 -08:00
Elio Maldonado
7a7f48e712 Reenable patch to run the freebl tests that were ron as part of the nss-softokn build 
- continue turning off the ocsp tests
 2013-02-01 13:39:03 -08:00
Elio Maldonado
830ee96f85 Update to NSS_3_14_2_RTM 
- Update the minimum requred versiobs of nspr, nss-util, and nss-softokn
- Remove patch obsoleted by the update and update others
- Restore missing second half of the cbc random iv by default patch
- Restore the freebl tests patch until we build without nsssoftoken
 2013-02-01 11:24:15 -08:00
Kai Engert
ca00551ea7 - Update to NSS_3_14_1_WITH_CKBI_1_93_RTM 2013-01-03 19:17:24 +01:00
Kai Engert
37e12fb581 - Update to NSS_3_14_1_WITH_CKBI_1_93_RTM 2013-01-03 19:16:40 +01:00
Elio Maldonado
57fe405127 Merge branch 'master' into f18 
- Update to NSS_3_14_1_RTM
 2012-12-22 19:18:43 -08:00
Elio Maldonado
b13dc44579 Require nspr >= 4.9.4 
- Fix changelog invalid dates
- Patch highlights nss-softoken tests we plan to disable in upcoming release
 2012-12-22 17:50:41 -08:00
Elio Maldonado
5a0d6572e1 Update to NSS_3_14_1_RTM 
- added a patch to not compile the softoken/freebl tests
- needed due to upstream changes to coreconf
- to be addjusted or removed if patch to enabled building nss without softoken is accepted upstream
 2012-12-16 22:25:51 -08:00
Elio Maldonado
9c95ae5deb Merge branch 'master' into f18 2012-12-11 21:58:01 -08:00
Elio Maldonado
edea054ffc Bug 879978 - Install the nssck.api header template where mod_revocator can access it 
- Install nssck.api in /usr/includes/nss3/templates, otherwise it won't install
 2012-12-11 21:26:58 -08:00
Elio Maldonado
c5c74121b2 Fix the first hunk so it does what's intended 
- Remove the second hunk so it applies, patch compliens it a previously appled change
- Must investigate why the second part seems to be applied already
 2012-11-28 12:59:48 -08:00
Elio Maldonado
765b3c410b Fix the patch turn the dault as intended 
- Remove a pprtion that is actually applied already
- Current one gives the desired results but must invertigate further why the sencnd hunk is already applied.
 2012-11-28 12:52:53 -08:00
Elio Maldonado
c3296995e7 - Reenable patch 29 which is required for stable branches 2012-11-28 11:28:37 -08:00
Elio Maldonado
7f564e02e5 Bug 879978 - Install the nssck.api header template in a place where mod_revocator can access it 
- Install nssck.api in /usr/includes/nss3
- cherry-pick merge from master
 2012-11-28 10:38:08 -08:00
Elio Maldonado
461744f676 Bug 879978 - Install the nssck.api header template in a place where mod_revocator can access it 
- Install nssck.api in /usr/includes/nss3
 2012-11-27 21:55:17 -08:00
Elio Maldonado
4e9cb6d944 Cleanup the file paths as it was done on the f18 version 2012-11-20 12:10:58 -08:00
Elio Maldonado
2b57162ae4 Bug 870864 - Add support in NSS for Secure Boot 
- manually merged from master
 2012-11-20 11:16:56 -08:00
Elio Maldonado
e45858c07c Keep the patch as it was approved with only the recommended changes. 
- Revert back to using szOID_KP_CTL_USAGE_SIGNING instead of SEC_OID_KP_CTL_USAGE_SIGNING
- This is our temporary local private name and what makes this code work even after we rebase
- and pick up the upstream changes. Of course, this patch will be removed when that happens.
 2012-11-20 09:42:53 -08:00