OLD | NEW |
1 Name: Network Security Services (NSS) | 1 Name: Network Security Services (NSS) |
2 URL: http://www.mozilla.org/projects/security/pki/nss/ | 2 URL: http://www.mozilla.org/projects/security/pki/nss/ |
3 Version: 3.15 Beta 2 | 3 Version: 3.15 Beta 2 |
4 Security Critical: Yes | 4 Security Critical: Yes |
5 License: MPL 2 | 5 License: MPL 2 |
6 License File: NOT_SHIPPED | 6 License File: NOT_SHIPPED |
7 | 7 |
8 This directory includes a copy of NSS's libssl from the hg repo at: | 8 This directory includes a copy of NSS's libssl from the hg repo at: |
9 https://hg.mozilla.org/projects/nss | 9 https://hg.mozilla.org/projects/nss |
10 | 10 |
(...skipping 57 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
68 | 68 |
69 * SSL_ExportKeyingMaterial should get the RecvBufLock and SSL3HandshakeLock. | 69 * SSL_ExportKeyingMaterial should get the RecvBufLock and SSL3HandshakeLock. |
70 This change was made in https://chromiumcodereview.appspot.com/10454066. | 70 This change was made in https://chromiumcodereview.appspot.com/10454066. |
71 patches/secretexporterlocks.patch | 71 patches/secretexporterlocks.patch |
72 | 72 |
73 * Allow the constant-time CBC processing code to be compiled against older | 73 * Allow the constant-time CBC processing code to be compiled against older |
74 NSS that doesn't contain the CBC constant-time changes. | 74 NSS that doesn't contain the CBC constant-time changes. |
75 patches/cbc.patch | 75 patches/cbc.patch |
76 https://code.google.com/p/chromium/issues/detail?id=172658#c12 | 76 https://code.google.com/p/chromium/issues/detail?id=172658#c12 |
77 | 77 |
| 78 * Define AES_256_KEY_LENGTH if the system blapit.h header doesn't define it. |
| 79 Remove this patch when all system NSS packages are NSS 3.12.10 or later. |
| 80 patches/aes256keylength.patch |
| 81 |
78 * Change ssl3_SuiteBOnly to always return PR_TRUE. The softoken in NSS | 82 * Change ssl3_SuiteBOnly to always return PR_TRUE. The softoken in NSS |
79 versions older than 3.15 report an EC key size range of 112 bits to 571 | 83 versions older than 3.15 report an EC key size range of 112 bits to 571 |
80 bits, even when it is compiled to support only the NIST P-256, P-384, and | 84 bits, even when it is compiled to support only the NIST P-256, P-384, and |
81 P-521 curves. Remove this patch when all system NSS softoken packages are | 85 P-521 curves. Remove this patch when all system NSS softoken packages are |
82 NSS 3.15 or later. | 86 NSS 3.15 or later. |
83 patches/suitebonly.patch | 87 patches/suitebonly.patch |
84 | 88 |
85 * Define the SECItemArray type and declare the SECItemArray handling | 89 * Define the SECItemArray type and declare the SECItemArray handling |
86 functions, which were added in NSS 3.15. Remove this patch when all system | 90 functions, which were added in NSS 3.15. Remove this patch when all system |
87 NSS packages are NSS 3.15 or later. | 91 NSS packages are NSS 3.15 or later. |
(...skipping 16 matching lines...) Expand all Loading... |
104 https://bugzilla.mozilla.org/show_bug.cgi?id=480514 | 108 https://bugzilla.mozilla.org/show_bug.cgi?id=480514 |
105 | 109 |
106 * Update Chromium-specific code for TLS 1.2. | 110 * Update Chromium-specific code for TLS 1.2. |
107 patches/tls12chromium.patch | 111 patches/tls12chromium.patch |
108 | 112 |
109 Apply the patches to NSS by running the patches/applypatches.sh script. Read | 113 Apply the patches to NSS by running the patches/applypatches.sh script. Read |
110 the comments at the top of patches/applypatches.sh for instructions. | 114 the comments at the top of patches/applypatches.sh for instructions. |
111 | 115 |
112 The ssl/bodge directory contains files taken from the NSS repo that we required | 116 The ssl/bodge directory contains files taken from the NSS repo that we required |
113 for building libssl outside of its usual build environment. | 117 for building libssl outside of its usual build environment. |
OLD | NEW |