Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(55)

Side by Side Diff: net/third_party/nss/README.chromium

Issue 1131763002: Reject renegotiations in SSLClientSocket by default. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Created 5 years, 7 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 Name: Network Security Services (NSS) 1 Name: Network Security Services (NSS)
2 URL: http://www.mozilla.org/projects/security/pki/nss/ 2 URL: http://www.mozilla.org/projects/security/pki/nss/
3 Version: 3.18 RTM 3 Version: 3.18 RTM
4 Security Critical: Yes 4 Security Critical: Yes
5 License: MPL 2 5 License: MPL 2
6 License File: NOT_SHIPPED 6 License File: NOT_SHIPPED
7 7
8 This directory includes a copy of NSS's libssl from the hg repo at: 8 This directory includes a copy of NSS's libssl from the hg repo at:
9 https://hg.mozilla.org/projects/nss 9 https://hg.mozilla.org/projects/nss
10 10
(...skipping 85 matching lines...) Expand 10 before | Expand all | Expand 10 after
96 * Add a comment explaining why signature_algorithms extension should be at 96 * Add a comment explaining why signature_algorithms extension should be at
97 the end of the extension list. This works around a bug in WebSphere 97 the end of the extension list. This works around a bug in WebSphere
98 Application Server 7.0, which is intolerant to the final extension having 98 Application Server 7.0, which is intolerant to the final extension having
99 zero length. This also ensures that the padding extension has non-zero 99 zero length. This also ensures that the padding extension has non-zero
100 length. 100 length.
101 patches/reorderextensions.patch 101 patches/reorderextensions.patch
102 102
103 * Make the build metadata deterministic 103 * Make the build metadata deterministic
104 patches/removebuildmetadata.patch 104 patches/removebuildmetadata.patch
105 105
106 * Fix locking bug in ssl3_HandleHelloRequest when rejecting a renegotiation.
107 patches/norenegotiatelock.patch
108
106 Apply the patches to NSS by running the patches/applypatches.sh script. Read 109 Apply the patches to NSS by running the patches/applypatches.sh script. Read
107 the comments at the top of patches/applypatches.sh for instructions. 110 the comments at the top of patches/applypatches.sh for instructions.
108 111
109 The ssl/bodge directory contains files taken from the NSS repo that we required 112 The ssl/bodge directory contains files taken from the NSS repo that we required
110 for building libssl outside of its usual build environment. 113 for building libssl outside of its usual build environment.
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698