-
Fri Dec 06 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-7
- Increase timeout on ssl_gtest so that slow platforms can complete when
running on a busy system.
-
Thu Dec 05 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-6
- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)
-
Wed Dec 04 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-5
- Fix out-of-bounds write in NSC_EncryptUpdate (#1775910)
-
Wed Jun 05 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-4
- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa
-
Thu May 30 2019 Daiki Ueno <dueno@redhat.com> - 3.44.0-3
- Disable TLS 1.3 under FIPS mode
- Disable RSASSA-PKCS1-v1_5 in TLS 1.3
- Fix post-handshake auth transcript calculation if
SSL_ENABLE_SESSION_TICKETS is set
-
Thu May 16 2019 Daiki Ueno <dueno@redhat.com> - 3.44.0-2
- Skip sysinit gtests properly
- Fix shell syntax error in tests/ssl/ssl.sh
- Regenerate manual pages
-
Wed May 15 2019 Daiki Ueno <dueno@redhat.com> - 3.44.0-1
- Rebase to NSS 3.44
- Restore fix-min-library-version-in-SSLVersionRange.patch to keep
SSL3 supported in the code level while it is disabled by policy
- Skip TLS 1.3 tests under FIPS mode
-
Fri May 10 2019 Daiki Ueno <dueno@redhat.com> - 3.43.0-9
- Ignore system policy when running %check
-
Fri May 03 2019 Daiki Ueno <dueno@redhat.com> - 3.43.0-8
- Fix policy string
-
Fri Apr 26 2019 Daiki Ueno <dueno@redhat.com> - 3.43.0-7
- Don't override date in man-pages
- Revert the change to use XDG basedirs (mozilla#818686)
- Enable SSL2 compatible ClientHello by default
- Disable SSL3 and RC4 by default