Name: | nss-tools |
---|---|
Version: | 3.44.0 |
Release: | 15.el8 |
Architecture: | aarch64 |
Group: | Unspecified |
Size: | 2944662 |
License: | MPLv2.0 |
RPM: | nss-tools-3.44.0-15.el8.aarch64.rpm |
Source RPM: | nss-3.44.0-15.el8.src.rpm |
Build Date: | Wed Apr 29 2020 |
Build Host: | ca-buildarm05.us.oracle.com |
Vendor: | Oracle America |
URL: | http://www.mozilla.org/projects/security/pki/nss/ |
Summary: | Tools for the Network Security Services |
Description: | Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards. Install the nss-tools package if you need command-line tools to manipulate the NSS certificate and key database. |
- Fix swapped CMAC PKCS #11 values. - Fix data alignment crash in CMAC.
- Fix coverify scan issue
- Fix endian problem in SP-800 108 code.
- Install cmac.h required by blapi.h (#1764513) - Fix out-of-bounds write in NSC_EncryptUpdate (#1775913)
- Add SP-800 108 Generalized kdf
- Check policy against hash algorithms used for ServerKeyExchange (#1730039)
- Add CMAC
- CKM_NSS_IKE1_APP_B_PRF_DERIVE was missing from the mechanism list, preventing PK11_Derive*() from using it. Add gtests for the PK11_Derive interface for all the CKM_NSS_IKE*_DERIVE mechanism.
- Backport fixes from 3.44.1
- Add continuous RNG test required by FIPS - fipstest: use CKM_TLS12_MASTER_KEY_DERIVE instead of vendor specific mechanism