Index: net/third_party/nss/patches/chacha20poly1305.patch |
=================================================================== |
--- net/third_party/nss/patches/chacha20poly1305.patch (revision 245705) |
+++ net/third_party/nss/patches/chacha20poly1305.patch (working copy) |
@@ -1,6 +1,6 @@ |
diff -pu a/nss/lib/ssl/ssl3con.c b/nss/lib/ssl/ssl3con.c |
---- a/nss/lib/ssl/ssl3con.c 2014-01-06 14:58:15.904992214 -0800 |
-+++ b/nss/lib/ssl/ssl3con.c 2014-01-06 14:58:25.635150408 -0800 |
+--- a/nss/lib/ssl/ssl3con.c 2014-01-17 18:06:41.659713513 -0800 |
++++ b/nss/lib/ssl/ssl3con.c 2014-01-17 18:07:10.270188062 -0800 |
@@ -40,6 +40,21 @@ |
#define CKM_NSS_TLS_MASTER_KEY_DERIVE_DH_SHA256 (CKM_NSS + 24) |
#endif |
@@ -134,8 +134,8 @@ |
} |
diff -pu a/nss/lib/ssl/ssl3ecc.c b/nss/lib/ssl/ssl3ecc.c |
---- a/nss/lib/ssl/ssl3ecc.c 2014-01-06 14:57:50.984587086 -0800 |
-+++ b/nss/lib/ssl/ssl3ecc.c 2014-01-06 14:58:25.635150408 -0800 |
+--- a/nss/lib/ssl/ssl3ecc.c 2014-01-17 18:04:43.127747463 -0800 |
++++ b/nss/lib/ssl/ssl3ecc.c 2014-01-17 18:07:10.270188062 -0800 |
@@ -904,6 +904,7 @@ static const ssl3CipherSuite ecdhe_ecdsa |
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, |
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, |
@@ -169,8 +169,8 @@ |
TLS_ECDHE_RSA_WITH_RC4_128_SHA, |
TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA, |
diff -pu a/nss/lib/ssl/sslenum.c b/nss/lib/ssl/sslenum.c |
---- a/nss/lib/ssl/sslenum.c 2014-01-06 14:53:43.540566574 -0800 |
-+++ b/nss/lib/ssl/sslenum.c 2014-01-06 15:11:13.167642594 -0800 |
+--- a/nss/lib/ssl/sslenum.c 2014-01-17 17:49:26.072517368 -0800 |
++++ b/nss/lib/ssl/sslenum.c 2014-01-17 18:08:43.791739267 -0800 |
@@ -37,17 +37,21 @@ |
* |
* Exception: Because some servers ignore the high-order byte of the cipher |
@@ -180,7 +180,7 @@ |
* suites, with the MSB zeroed, look like: |
+ * TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA { 0x00,0x14 } |
+ * TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA { 0x00,0x13 } |
- * TLS_KRB5_EXPORT_WITH_RC4_40_MD5 {0x00,0x2B } |
+ * TLS_KRB5_EXPORT_WITH_RC4_40_MD5 { 0x00,0x2B } |
* TLS_RSA_WITH_AES_128_CBC_SHA { 0x00,0x2F } |
* TLS_RSA_WITH_3DES_EDE_CBC_SHA { 0x00,0x0A } |
* TLS_RSA_WITH_DES_CBC_SHA { 0x00,0x09 } |
@@ -197,8 +197,8 @@ |
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, |
/* TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA must appear before |
diff -pu a/nss/lib/ssl/sslimpl.h b/nss/lib/ssl/sslimpl.h |
---- a/nss/lib/ssl/sslimpl.h 2014-01-06 14:57:46.654516696 -0800 |
-+++ b/nss/lib/ssl/sslimpl.h 2014-01-06 14:58:25.635150408 -0800 |
+--- a/nss/lib/ssl/sslimpl.h 2014-01-17 18:03:47.906831535 -0800 |
++++ b/nss/lib/ssl/sslimpl.h 2014-01-17 18:07:10.270188062 -0800 |
@@ -65,6 +65,7 @@ typedef SSLSignType SSL3SignType; |
#define calg_camellia ssl_calg_camellia |
#define calg_seed ssl_calg_seed |
@@ -207,7 +207,7 @@ |
#define mac_null ssl_mac_null |
#define mac_md5 ssl_mac_md5 |
-@@ -292,7 +293,7 @@ typedef struct { |
+@@ -299,7 +300,7 @@ typedef struct { |
} ssl3CipherSuiteCfg; |
#ifdef NSS_ENABLE_ECC |
@@ -216,7 +216,7 @@ |
#else |
#define ssl_V3_SUITES_IMPLEMENTED 37 |
#endif /* NSS_ENABLE_ECC */ |
-@@ -474,6 +475,7 @@ typedef enum { |
+@@ -483,6 +484,7 @@ typedef enum { |
cipher_camellia_256, |
cipher_seed, |
cipher_aes_128_gcm, |
@@ -225,8 +225,8 @@ |
/* This enum must match ssl3_cipherName[] in ssl3con.c. */ |
} SSL3BulkCipher; |
diff -pu a/nss/lib/ssl/sslinfo.c b/nss/lib/ssl/sslinfo.c |
---- a/nss/lib/ssl/sslinfo.c 2014-01-06 14:57:21.444106895 -0800 |
-+++ b/nss/lib/ssl/sslinfo.c 2014-01-06 14:58:25.635150408 -0800 |
+--- a/nss/lib/ssl/sslinfo.c 2014-01-17 18:00:45.503806125 -0800 |
++++ b/nss/lib/ssl/sslinfo.c 2014-01-17 18:07:10.270188062 -0800 |
@@ -110,6 +110,7 @@ SSL_GetChannelInfo(PRFileDesc *fd, SSLCh |
#define C_NULL "NULL", calg_null |
#define C_SJ "SKIPJACK", calg_sj |
@@ -251,8 +251,8 @@ |
{0,CS(TLS_ECDHE_RSA_WITH_NULL_SHA), S_RSA, K_ECDHE, C_NULL, B_0, M_SHA, 0, 0, 0, }, |
{0,CS(TLS_ECDHE_RSA_WITH_RC4_128_SHA), S_RSA, K_ECDHE, C_RC4, B_128, M_SHA, 0, 0, 0, }, |
diff -pu a/nss/lib/ssl/sslproto.h b/nss/lib/ssl/sslproto.h |
---- a/nss/lib/ssl/sslproto.h 2014-01-06 14:53:43.540566574 -0800 |
-+++ b/nss/lib/ssl/sslproto.h 2014-01-06 14:58:25.635150408 -0800 |
+--- a/nss/lib/ssl/sslproto.h 2014-01-17 17:49:26.072517368 -0800 |
++++ b/nss/lib/ssl/sslproto.h 2014-01-17 18:07:10.270188062 -0800 |
@@ -213,6 +213,9 @@ |
#define TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 0xC02F |
#define TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256 0xC031 |
@@ -264,8 +264,8 @@ |
#define SSL_RSA_OLDFIPS_WITH_3DES_EDE_CBC_SHA 0xffe0 |
#define SSL_RSA_OLDFIPS_WITH_DES_CBC_SHA 0xffe1 |
diff -pu a/nss/lib/ssl/sslt.h b/nss/lib/ssl/sslt.h |
---- a/nss/lib/ssl/sslt.h 2014-01-06 14:58:13.034945554 -0800 |
-+++ b/nss/lib/ssl/sslt.h 2014-01-06 14:58:25.635150408 -0800 |
+--- a/nss/lib/ssl/sslt.h 2014-01-17 18:03:47.906831535 -0800 |
++++ b/nss/lib/ssl/sslt.h 2014-01-17 18:07:10.270188062 -0800 |
@@ -94,7 +94,8 @@ typedef enum { |
ssl_calg_aes = 7, |
ssl_calg_camellia = 8, |