-
Tue Aug 21 2018 Matus Honek <mhonek@redhat.com> - 2.4.44-20
- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)
-
Tue Aug 14 2018 Matus Honek <mhonek@redhat.com> - 2.4.44-19
- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)
-
Thu Jun 21 2018 Matus Honek <mhonek@redhat.com> - 2.4.44-18
- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)
-
Thu Jun 21 2018 Matus Honek <mhonek@redhat.com> - 2.4.44-17
- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)
-
Wed Apr 04 2018 Matus Honek <mhonek@redhat.com> - 2.4.44-16
- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)
-
Thu Mar 29 2018 Matus Honek <mhonek@redhat.com> - 2.4.44-14
- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)
-
Wed Jan 31 2018 Matus Honek <mhonek@redhat.com> - 2.4.44-13
- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)
-
Thu Jan 11 2018 Matus Honek <mhonek@redhat.com> - 2.4.44-12
- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
+ Warn just before use of a PIN about key file extraction
-
Wed Jan 10 2018 Matus Honek <mhonek@redhat.com> - 2.4.44-11
- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
+ Fix a possible invalid dereference (covscan)
-
Tue Nov 28 2017 Matus Honek <mhonek@redhat.com> - 2.4.44-10
- Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
- Fix issues in MozNSS compatibility layer (#1400578)
+ Force write file with fsync to avoid race conditions
+ Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
+ Allow missing cert and key which is a valid usecase
+ Create extraction folder only in /tmp to simplify selinux rules
+ Fix Covscan issues