OLD | NEW |
1 Name: Network Security Services (NSS) | 1 Name: Network Security Services (NSS) |
2 URL: http://www.mozilla.org/projects/security/pki/nss/ | 2 URL: http://www.mozilla.org/projects/security/pki/nss/ |
3 | 3 |
4 This directory includes a copy of NSS's libssl from the CVS repo at: | 4 This directory includes a copy of NSS's libssl from the CVS repo at: |
5 :pserver:anonymous@cvs-mirror.mozilla.org:/cvsroot | 5 :pserver:anonymous@cvs-mirror.mozilla.org:/cvsroot |
6 | 6 |
7 The snapshot was updated to the CVS tag: NSS_3_12_9_RTM | 7 The snapshot was updated to the CVS tag: NSS_3_12_9_RTM |
8 | 8 |
9 Patches: | 9 Patches: |
10 | 10 |
(...skipping 33 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
44 https://bugzilla.mozilla.org/show_bug.cgi?id=616757 | 44 https://bugzilla.mozilla.org/show_bug.cgi?id=616757 |
45 | 45 |
46 * Add support for TLS cached info extension. | 46 * Add support for TLS cached info extension. |
47 patches/cachedinfo.patch | 47 patches/cachedinfo.patch |
48 https://bugzilla.mozilla.org/show_bug.cgi?id=665739 | 48 https://bugzilla.mozilla.org/show_bug.cgi?id=665739 |
49 | 49 |
50 * Add a function to export whether the last handshake on a socket resumed a | 50 * Add a function to export whether the last handshake on a socket resumed a |
51 previous session. | 51 previous session. |
52 patches/didhandshakeresume.patch | 52 patches/didhandshakeresume.patch |
53 | 53 |
54 * Start each set of CBC encrypted application data records, resulting from | |
55 a single call to ssl3_SendApplicationData, with a one-byte application | |
56 data record in order to randomize the IV in a backward compatible manner. | |
57 https://bugzilla.mozilla.org/show_bug.cgi?id=665814 | |
58 patches/cbcrandomiv.patch | |
59 | |
60 * Support origin bound certificates. | 54 * Support origin bound certificates. |
61 http://balfanz.github.com/tls-obc-spec/draft-balfanz-tls-obc-00.txt | 55 http://balfanz.github.com/tls-obc-spec/draft-balfanz-tls-obc-00.txt |
62 patches/origin_bound_certs.patch | 56 patches/origin_bound_certs.patch |
63 | 57 |
64 * Add a function to implement RFC 5705: Keying Material Exporters for TLS | 58 * Add a function to implement RFC 5705: Keying Material Exporters for TLS |
65 This is a reworked version of the patch from | 59 This is a reworked version of the patch from |
66 https://bugzilla.mozilla.org/show_bug.cgi?id=507359 | 60 https://bugzilla.mozilla.org/show_bug.cgi?id=507359 |
67 patches/secret_exporter.patch | 61 patches/secret_exporter.patch |
68 | 62 |
69 * Send saved write data in the SSL socket in SSL_ForceHandshake. | 63 * Send saved write data in the SSL socket in SSL_ForceHandshake. |
70 patches/handshakeshortwrite.patch | 64 patches/handshakeshortwrite.patch |
71 https://bugzilla.mozilla.org/show_bug.cgi?id=676729 | 65 https://bugzilla.mozilla.org/show_bug.cgi?id=676729 |
72 | 66 |
73 * Add a function to restart a handshake after a client certificate request. | 67 * Add a function to restart a handshake after a client certificate request. |
74 patches/restartclientauth.patch | 68 patches/restartclientauth.patch |
75 | 69 |
76 * Allow SSL_HandshakeNegotiatedExtension to be called before the handshake | 70 * Allow SSL_HandshakeNegotiatedExtension to be called before the handshake |
77 is finished.. | 71 is finished.. |
78 https://bugzilla.mozilla.org/show_bug.cgi?id=681839 | 72 https://bugzilla.mozilla.org/show_bug.cgi?id=681839 |
79 patches/negotiatedextension.patch | 73 patches/negotiatedextension.patch |
80 | 74 |
81 Apply the patches to NSS by running the patches/applypatches.sh script. Read | 75 Apply the patches to NSS by running the patches/applypatches.sh script. Read |
82 the comments at the top of patches/applypatches.sh for instructions. | 76 the comments at the top of patches/applypatches.sh for instructions. |
83 | 77 |
84 The ssl/bodge directory contains files taken from the NSS repo that we required | 78 The ssl/bodge directory contains files taken from the NSS repo that we required |
85 for building libssl outside of its usual build environment. | 79 for building libssl outside of its usual build environment. |
OLD | NEW |