efdced7007
Revert "Reenable patches required for compatibility on stable fedora branches"
...
This reverts commit 65efb2c2f3
2013-06-23 19:39:13 -07:00
65efb2c2f3
Reenable patches required for compatibility on stable fedora branches
...
- Reenable nss-ssl-enforce-no-pkcs11-bypass.path
- Renable nss-ssl-cbc-random-iv-off-by-default.patch
2013-06-23 19:00:21 -07:00
b8273ce04c
Install man pages for nss-tools and the nss-config and setup-nsssysinit scripts
...
- Resolves: rhbz#606020 - nss security tools lack man pages
2013-06-19 20:32:27 -07:00
e36079dd45
Build nss without softoken or util sources in the tree
...
- Resolves: rhbz#689918
2013-06-18 17:45:38 -07:00
41e94360c9
Update ssl-cbc-random-iv-by-default.patch
...
- Added a missing comma
2013-06-17 16:23:06 -07:00
2f66633263
Fix generation of NSS_VMAJOR, NSS_VMINOR, and NSS_VPATCH for nss-config
...
- These were blank in nss-config causing build failures on client paclages
- Reported by Martin Stransky when a xulrunner build failed
2013-06-16 10:07:11 -07:00
f6ec57311f
Update to NSS_3_15_RTM
2013-06-15 12:48:12 -07:00
2249db62a6
Fix incorrect path that hid failed test from view
...
- Add ocsp to the test suites to run but ...
- Temporarily disable the ocsp stapling tests
- Do not treat failed attempts at ssl pkcs11 bypass as fatal errors
2013-04-24 18:46:52 -07:00
2a8c1318ea
Update to NSS_3_15_BETA1
...
- Update spec file, patches, and helper scripts on account of a shallower source tree
- Update the pem sources also to adjust to the sallower source for nss
2013-04-09 16:14:36 -07:00
59b5d52d9e
* Sun Mar 24 2013 Kai Engert <kaie@redhat.com> - 3.14.3-12
...
- Update expired test certificates (fixed in upstream bug 852781)
2013-03-24 00:28:39 +01:00
21e8668243
* Fri Mar 08 2013 Kai Engert <kaie@redhat.com> - 3.14.3-10
...
- Fix incorrect post/postun scripts. Fix broken links in posttrans.
2013-03-08 23:34:55 +01:00
7b5d7ea05f
* Wed Mar 06 2013 Kai Engert <kaie@redhat.com> - 3.14.3-9
...
- Configure libnssckbi.so to use the alternatives system
in order to prepare for a drop in replacement.
2013-03-06 00:49:27 +01:00
b03345792c
Update to NSS_3_14_3_RTM
...
- sync up pem rsawrapr.c with softoken upstream changes for nss-3.14.3
- Resolves: rhbz#908257 - CVE-2013-1620 nss: TLS CBC padding timing attack
- Resolves: rhbz#909775 - specfile support for AArch64
- Resolves: rhbz#910584 - certutil -a does not produce ASCII output
- Resolves: rhbz#896651 - PEM module trashes private keys if login fails,
patch contributed by Nalin Dahyabhai
2013-02-17 20:02:37 -08:00
0370142fd0
Add pem module fix, spec file support for AArch64 and document additional fix
...
- Resolves: rhbz#896651 - PEM module trashes private keys if login fails
- Resolves: rhbz#909775 - specfile support for AArch64
- Resolves: rhbz#910584 - certutil -a does not produce ASCII output, upstream fix
2013-02-16 15:02:25 -08:00
b3f05b9f44
Update to NSS_3_14_3_RTM
...
- sync up pem rsawrapr.c with softoken upstream changes for nss-3.14.3
- these changes are in experimental RSA OAEP code currently in a state of flux
- and required for the PEM module to compile with the nss 3.4.3 update
2013-02-15 15:34:49 -08:00
96957e805a
Allow building nss softoken against older sqlite
...
- Adding a patch already applied upstream by Kai Engert
2013-02-04 15:12:54 -08:00
7a7f48e712
Reenable patch to run the freebl tests that were ron as part of the nss-softokn build
...
- continue turning off the ocsp tests
2013-02-01 13:39:03 -08:00
830ee96f85
Update to NSS_3_14_2_RTM
...
- Update the minimum requred versiobs of nspr, nss-util, and nss-softokn
- Remove patch obsoleted by the update and update others
- Restore missing second half of the cbc random iv by default patch
- Restore the freebl tests patch until we build without nsssoftoken
2013-02-01 11:24:15 -08:00
ca00551ea7
- Update to NSS_3_14_1_WITH_CKBI_1_93_RTM
2013-01-03 19:17:24 +01:00
b13dc44579
Require nspr >= 4.9.4
...
- Fix changelog invalid dates
- Patch highlights nss-softoken tests we plan to disable in upcoming release
2012-12-22 17:50:41 -08:00
5a0d6572e1
Update to NSS_3_14_1_RTM
...
- added a patch to not compile the softoken/freebl tests
- needed due to upstream changes to coreconf
- to be addjusted or removed if patch to enabled building nss without softoken is accepted upstream
2012-12-16 22:25:51 -08:00
edea054ffc
Bug 879978 - Install the nssck.api header template where mod_revocator can access it
...
- Install nssck.api in /usr/includes/nss3/templates, otherwise it won't install
2012-12-11 21:26:58 -08:00
461744f676
Bug 879978 - Install the nssck.api header template in a place where mod_revocator can access it
...
- Install nssck.api in /usr/includes/nss3
2012-11-27 21:55:17 -08:00
6e1a26a079
Resolves: rhbz#870864 - Add support in NSS for Secure Boot
2012-11-19 21:45:58 -08:00
19ad65d608
Disable bypass code at build time and return failure on attempts to enable at runtime
...
- Bug 806588 - Disable SSL PKCS #11 bypass at build time
2012-11-09 17:20:07 -08:00
fef81756fd
Rename the patch to reflect the correct bug number
...
- Renamed: Bug-872838-fix-pk11wrap-locking.patch -> Bug-872124-fix-pk11wrap-locking.patch
- Fixed the reference in spec file
Please enter the commit message for your changes. Lines starting
2012-11-04 22:00:38 -08:00
b5d7c8e158
Fix the last changelog entry and quote the correct bug number.
2012-11-04 17:07:18 -08:00
247ec13766
Fix pk11wrap locking to fix 'fedpkg new-sources' and 'fedpkg update' hangs
...
- Bug 87838 - nss-3.14 causes fedpkg new-sources breakage
- Fix should be considered preliminary since the patch may change upon upstream approval
2012-11-04 15:44:01 -08:00
f2639d5e85
Fix the change log by adding a missing entry
...
- Add missing - * Wed Oct 31 2012 Elio Maldonado <emaldona@redhat.com> - 3.14-5
2012-11-04 15:31:50 -08:00
93eeb31cf1
Add a dummy source file for testing /preventing fedpkg breakage
...
- Helps test the fedpkg new-sources and upload commands for breakage by nss updates
- Related to Bug 872124 - nss 3.14 breaks fedpkg new-sources
2012-11-01 16:07:26 -07:00
e4dd1babb0
Fix a previous unwanted merge from f18
...
- Update the SS_SSL_CBC_RANDOM_IV patch to match new sources while
- Keeping the patch disabled while we are still in rawhide and
- State in comment that patch is needed for both stable and beta branches
- Update .gitignore to download only the new sources
2012-11-01 11:36:35 -07:00
edf5ff0634
Reenable patch to set NSS_SSL_CBC_RANDOM_IV to 1 by default
...
- Bug 872124 - nss 3.14 breaks fedpkg new-sources
2012-11-01 09:29:38 -07:00
c2e20984e1
Fix the spec file so sechash.h gets installed
...
- Resolves: rhbz#871882 - missing header: sechash.h in nss 3.14
2012-10-31 14:05:29 -07:00
192d1d33fb
Update the license to MPLv2.0
2012-10-27 01:58:29 -04:00
3be7379237
Use only -f when removing unwanted headers
...
- alerted to this flaw by Kamil Dudka
- unneeded as we are only removing headers, not directories, and a dangerous practice
2012-10-24 11:13:25 -07:00
982583d915
Add secmodt.h to the headers installed by nss-devel
...
- nss-devel must install secmodt.h which moved from softoken to pk11wrap with nss-3.14
2012-10-23 18:48:54 -04:00
b11609d88a
Update to NSS_3_14_RTM
2012-10-22 14:49:08 -07:00
1f01ab68b1
Update to NSS_3_14_RC1
...
- update nss-589636.patch to apply to httpdserv
- turn off ocsp tests for now
- remove no longer needed patches
- remove headers shipped by nss-util
2012-10-21 20:47:52 -04:00
53a120c4af
* Fri Oct 05 2012 Kai Engert <kaie@redhat.com> - 3.13.6-1
...
- Update to NSS_3_13_6_RTM
2012-10-06 00:22:39 +02:00
ab9d670692
Rebase pem sources to fedora-hosted upstream to pick up two fixes from rhel-6.3
...
- Resolves: rhbz#847460 - Fix invalid read and free on invalid cert load
- Resolves: rhbz#847462 - PEM module may attempt to free uninitialized pointer
- Remove unneeded fix gcc 4.7 c++ issue in secmodt.h that actually undoes the upstream fix
2012-08-27 16:19:41 -07:00
99a740d2ee
Fix pluggable ecc support
...
- Build nss in three phases
- Phase 1: build softoken, freebl, and util with NSS_ENABLE_ECC unset
- Phase 2: build the rest of nss (muinus bltest and fipstest) with NSS_ENABLE_ECC and NSS_ECC_MORE_THAN_SUITEB set
- Phase 3: build bltest and fipstest with NSS_ENABLE_ECC unset as in phsae 1
2012-08-13 15:05:06 -07:00
bd7e7ae750
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
2012-07-20 00:20:58 -05:00
f304d0d0cf
Fix checkin comment to prevent unwanted expansions of percents
...
- Done on previous commit but must retag now
2012-07-01 11:42:00 -07:00
18cd8ce5de
Fix the checkin comment to use %%
2012-07-01 11:33:54 -07:00
967fa1be0d
Require nspr 4.9.1
2012-07-01 10:35:21 -07:00
7011f18b86
Enable sha224 portion of powerup selftest when running test suites
...
- That disabling was meant for RHEL-6 wich at time has and older softoken
2012-07-01 10:25:16 -07:00
6b33cec549
Resolves: Bug 830410 - Missing Requires %{?_isa}
...
- Use Requires: %{name}%{?_isa} = %{version}-%{release} on tools
- Drop zlib requires which rpmlint reports as error E: explicit-lib-dependency zlib
2012-07-01 10:13:07 -07:00
e1a1b3583b
Bug 833529 - revert unwanted change to nss.pc.in
...
- Remove the /nss3 fom Lib: line in nss.pc.in
2012-06-20 21:58:09 -07:00
580fd0d7b9
Resolves: rhbz#833529 - Remove unwanted space from the Libs: line on nss.pc.in
2012-06-19 10:55:57 -07:00
a27d98a9ec
Update to 3.13.5
2012-06-18 07:20:04 -07:00
Elio Maldonado
Kai Engert
Elio Maldonado
Dennis Gilmore