- 
    Wed Dec 04 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-9
    
- Fix out-of-bounds write in NSC_EncryptUpdate (#1775912)
   
  
  - 
    Thu Aug 08 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-8
    
- CKM_NSS_IKE1_APP_B_PRF_DERIVE was missing from the mechanism list, preventing
  PK11_Derive*() from using it. Add gtests for the PK11_Derive interface for
  all the CKM_NSS_IKE*_DERIVE mechanism.
   
  
  - 
    Wed Jul 03 2019 Daiki Ueno <dueno@redhat.com> - 3.44.0-7
    
- Backport fixes from 3.44.1
   
  
  - 
    Wed Jun 26 2019 Daiki Ueno <dueno@redhat.com> - 3.44.0-6
    
- Add continuous RNG test required by FIPS
- fipstest: use CKM_TLS12_MASTER_KEY_DERIVE instead of vendor specific mechanism
   
  
  - 
    Mon Jun 10 2019 Daiki Ueno <dueno@redhat.com> - 3.44.0-5
    
- Rebuild with the correct build target
   
  
  - 
    Fri Jun 07 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-4.1
    
- rebuild to try to retrigger CI tests
   
  
  - 
    Wed Jun 05 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-4
    
- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa
   
  
  - 
    Thu May 30 2019 Daiki Ueno <dueno@redhat.com> - 3.44.0-3
    
- Disable TLS 1.3 under FIPS mode
- Disable RSASSA-PKCS1-v1_5 in TLS 1.3
- Fix post-handshake auth transcript calculation if
  SSL_ENABLE_SESSION_TICKETS is set
- Revert the change to use XDG basedirs (mozilla#818686)
   
  
  - 
    Fri May 24 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-2
    
- Add ike mechanisms in softokn
- Add FIPS checks in softoken
   
  
  - 
    Fri May 24 2019 Daiki Ueno <dueno@redhat.com> - 3.44.0-1
    
- Update to NSS 3.44
- Define NSS_SEED_ONLY_DEV_URANDOM=1 to exclusively use getentropy
- Use %autosetup
- Clean up manual pages generation
- Clean up %check
- Remove prelink dependency, which is not available in RHEL-8
- Remove upstreamed patches