| OLD | NEW |
| 1 Name: Network Security Services (NSS) | 1 Name: Network Security Services (NSS) |
| 2 Short Name: nss | 2 Short Name: nss |
| 3 URL: http://www.mozilla.org/projects/security/pki/nss/ | 3 URL: http://www.mozilla.org/projects/security/pki/nss/ |
| 4 Version: 3.13.5 | 4 Version: 3.14 pre-release snapshot 2012-09-25 |
| 5 License: MPL 2 and MPL/LGPL/GPL tri-license | 5 License: MPL 2 and MPL/LGPL/GPL tri-license |
| 6 License File: http://www.mozilla.org/MPL/ | 6 License File: http://www.mozilla.org/MPL/ |
| 7 Security Critical: yes | 7 Security Critical: yes |
| 8 | 8 |
| 9 Description: | 9 Description: |
| 10 NSS 3.13.5 with NSPR 4.9 | 10 NSS 3.14 pre-release snapshot 2012-09-25 with NSPR 4.9 |
| 11 | 11 |
| 12 This copy of NSS has been customized for Chromium. NSPR is also put here | 12 This copy of NSS has been customized for Chromium. NSPR is also put here |
| 13 rather than in a separate directory to emphasize the fact that Chromium is | 13 rather than in a separate directory to emphasize the fact that Chromium is |
| 14 using NSPR strictly as an NSS dependency. | 14 using NSPR strictly as an NSS dependency. |
| 15 | 15 |
| 16 We took a subset of NSS, omitting the SSL and SMIME libraries and the | 16 We took a subset of NSS, omitting the SSL and SMIME libraries and the |
| 17 built-in root CA certificates module. This NSS subset satisfies the | 17 built-in root CA certificates module. This NSS subset satisfies the |
| 18 dependencies of the NSS SSL library in src/net/third_party/nss. Do NOT use | 18 dependencies of the NSS SSL library in src/net/third_party/nss. Do NOT use |
| 19 this copy of NSS on platforms that have NSS as system libraries, such as | 19 this copy of NSS on platforms that have NSS as system libraries, such as |
| 20 Linux. | 20 Linux. |
| 21 | 21 |
| 22 The source code was checked out from the mozilla.org CVS repository using | 22 The source code was checked out from the mozilla.org CVS repository using |
| 23 the nspr-checkout.sh and nss-checkout.sh scripts in the scripts directory. | 23 the nspr-checkout.sh and nss-checkout.sh scripts in the scripts directory. |
| 24 The current source code was checked out with the CVS tags -r NSS_3_13_5_RTM | 24 The current source code was checked out with the CVS tags |
| 25 and -r NSPR_4_9_RTM. | 25 -D "2012-09-25 21:00:00 PDT" and -r NSPR_4_9_RTM. |
| 26 | 26 |
| 27 Local Modifications: | 27 Local Modifications: |
| 28 | 28 |
| 29 We made the following local changes to NSPR. | 29 We made the following local changes to NSPR. |
| 30 - patches/nspr-static.patch: to build NSPR as static libraries. See NSPR | 30 - patches/nspr-static.patch: to build NSPR as static libraries. See NSPR |
| 31 bug 533014 (https://bugzilla.mozilla.org/show_bug.cgi?id=533014). | 31 bug 533014 (https://bugzilla.mozilla.org/show_bug.cgi?id=533014). |
| 32 - patches/prcpucfg.h: added to the mozilla/nsprpub/pr/include directory. | 32 - patches/prcpucfg.h: added to the mozilla/nsprpub/pr/include directory. |
| 33 - patches/nspr-attach-as-system-thread.patch: attach a "foreign" thread | 33 - patches/nspr-attach-as-system-thread.patch: attach a "foreign" thread |
| 34 (a thread not created by NSPR) to NSPR as a "system" thread rather than | 34 (a thread not created by NSPR) to NSPR as a "system" thread rather than |
| 35 a "user" thread, which needs to terminate before PR_Cleanup can return. | 35 a "user" thread, which needs to terminate before PR_Cleanup can return. |
| 36 (The "system" vs. "user" thread distinction comes from Java, and | 36 (The "system" vs. "user" thread distinction comes from Java, and |
| 37 ultimately from Solaris threads.) This is a workaround for | 37 ultimately from Solaris threads.) This is a workaround for |
| 38 http://crbug.com/40663. | 38 http://crbug.com/40663. |
| 39 - patches/nspr-remove-io.patch: Remove IO operations in NSPR to allow NSS | 39 - patches/nspr-remove-io.patch: Remove IO operations in NSPR to allow NSS |
| 40 to work in the sandbox. Do not initialize IO when initializing NSPR. | 40 to work in the sandbox. Do not initialize IO when initializing NSPR. |
| 41 Windows version of NSPR also tried to use getaddrinfo to resolve hostname | 41 Windows version of NSPR also tried to use getaddrinfo to resolve hostname |
| 42 in a SSL connection. By removing _PR_HAVE_GETADDRINFO this will force it | 42 in a SSL connection. By removing _PR_HAVE_GETADDRINFO this will force it |
| 43 to use PR_GetHostByName. Removing _PR_INET6_PROBE will prevent it from | 43 to use PR_GetHostByName. Removing _PR_INET6_PROBE will prevent it from |
| 44 creating an IPv6 socket to probe if IPv6 is there. | 44 creating an IPv6 socket to probe if IPv6 is there. |
| 45 DO NOT upstream this patch. | 45 DO NOT upstream this patch. |
| 46 - patches/nspr-warnings.patch: fix compiler warnings. See NSPR bug 699567 | 46 - patches/nspr-warnings.patch: fix compiler warnings. See NSPR bug 699567 |
| 47 (https://bugzilla.mozilla.org/show_bug.cgi?id=699567). | 47 (https://bugzilla.mozilla.org/show_bug.cgi?id=699567). |
| 48 | 48 |
| 49 We made the following local changes to NSS. | 49 We made the following local changes to NSS. |
| 50 - patches/nss-static.patch: to build NSS as static libraries and omit | 50 - patches/nss-static.patch: to build NSS as static libraries and omit |
| 51 libpkix (the new certification path validation library) and | 51 libpkix (the new certification path validation library) and |
| 52 softoken/legacydb (support for the old Berkeley DB databases). See NSS | 52 softoken/legacydb (support for the old Berkeley DB databases). See NSS |
| 53 bug 534471 (https://bugzilla.mozilla.org/show_bug.cgi?id=534471). | 53 bug 534471 (https://bugzilla.mozilla.org/show_bug.cgi?id=534471). |
| 54 - patches/nss-static2.patch: fix a compiler warning in | |
| 55 patches/nss-static.patch. This should be merged into | |
| 56 patches/nss-static.patch. | |
| 57 - mozilla/security/nss/exports_win.def: The list of exports to use when | 54 - mozilla/security/nss/exports_win.def: The list of exports to use when |
| 58 building nss as a dynamic library (crnss.dll). | 55 building nss as a dynamic library (crnss.dll). |
| 59 - patches/nss-remove-fortezza.patch: remove Fortezza certificate support | 56 - patches/nss-remove-fortezza.patch: remove Fortezza certificate support |
| 60 from PK11_ImportPublicKey. See NSS bug 668397 | 57 from PK11_ImportPublicKey. See NSS bug 668397 |
| 61 (https://bugzilla.mozilla.org/show_bug.cgi?id=668397). | 58 (https://bugzilla.mozilla.org/show_bug.cgi?id=668397). |
| 62 - patches/nss-warnings.patch: fix compiler warnings. See NSS bug 753189 | |
| 63 (https://bugzilla.mozilla.org/show_bug.cgi?id=753189). | |
| 64 - patches/nss-libpkix-leak.patch: Fix a leak when using libpkix. See NSS bug | |
| 65 762353 (https://bugzilla.mozilla.org/show_bug.cgi?id=762353) and NSS bug | |
| 66 762351 (https://bugzilla.mozilla.org/show_bug.cgi?id=762351) | |
| 67 - patches/nss-der-encode-time-choice.patch: Fix handling of dates before 1950 | |
| 68 and exactly 2050-01-01 00:00:00. See NSS bug 786531 | |
| 69 (https://bugzilla.mozilla.org/show_bug.cgi?id=786531) | |
| 70 - Change the license headers to MPL 2. | |
| OLD | NEW |