-
Sat Aug 01 2020 Daiki Ueno <dueno@redhat.com> - 3.53.1-3
- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles
-
Thu Jul 30 2020 Daiki Ueno <dueno@redhat.com> - 3.53.1-2
- Disable TLS 1.3 by default
-
Wed Jul 22 2020 Daiki Ueno <dueno@redhat.com> - 3.53.1-1
- Rebase to NSS 3.53.1
-
Fri Dec 06 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-8
- Increase timeout on ssl_gtest so that slow platforms can complete when
running on a busy system.
-
Thu Dec 05 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-7
- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)
-
Wed Dec 04 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-6
- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)
-
Wed Aug 14 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-5
- Fix pkix name constraints processing to only process the common name if the
certusage you are checking is IPSEC or SSL Server.
-
Wed Jun 05 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-4
- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa
-
Thu May 30 2019 Daiki Ueno <dueno@redhat.com> - 3.44.0-3
- Disable TLS 1.3 under FIPS mode
- Disable RSASSA-PKCS1-v1_5 in TLS 1.3
- Fix post-handshake auth transcript calculation if
SSL_ENABLE_SESSION_TICKETS is set
-
Thu May 16 2019 Daiki Ueno <dueno@redhat.com> - 3.44.0-2
- Skip sysinit gtests properly
- Fix shell syntax error in tests/ssl/ssl.sh
- Regenerate manual pages