OLD | NEW |
---|---|
1 Name: Network Security Services (NSS) | 1 Name: Network Security Services (NSS) |
2 URL: http://www.mozilla.org/projects/security/pki/nss/ | 2 URL: http://www.mozilla.org/projects/security/pki/nss/ |
3 Version: 3.13.4 pre-release snapshot 20120319 | 3 Version: 3.13.4 pre-release snapshot 20120319 |
4 Security Critical: Yes | 4 Security Critical: Yes |
5 | 5 |
6 This directory includes a copy of NSS's libssl from the CVS repo at: | 6 This directory includes a copy of NSS's libssl from the CVS repo at: |
7 :pserver:anonymous@cvs-mirror.mozilla.org:/cvsroot | 7 :pserver:anonymous@cvs-mirror.mozilla.org:/cvsroot |
8 | 8 |
9 The snapshot was updated to the CVS tag: NSS_SSL_3_13_4_20120319_TAG | 9 The snapshot was updated to the CVS tag: NSS_SSL_3_13_4_20120319_TAG |
10 | 10 |
(...skipping 22 matching lines...) Expand all Loading... | |
33 | 33 |
34 * Add support for client auth with native crypto APIs on Mac and Windows | 34 * Add support for client auth with native crypto APIs on Mac and Windows |
35 patches/clientauth.patch | 35 patches/clientauth.patch |
36 ssl/sslplatf.c | 36 ssl/sslplatf.c |
37 | 37 |
38 * Add a function to export whether the last handshake on a socket resumed a | 38 * Add a function to export whether the last handshake on a socket resumed a |
39 previous session. | 39 previous session. |
40 patches/didhandshakeresume.patch | 40 patches/didhandshakeresume.patch |
41 https://bugzilla.mozilla.org/show_bug.cgi?id=731798 | 41 https://bugzilla.mozilla.org/show_bug.cgi?id=731798 |
42 | 42 |
43 * Support origin bound certificates. | |
44 http://balfanz.github.com/tls-obc-spec/draft-balfanz-tls-obc-00.txt | |
45 https://bugzilla.mozilla.org/show_bug.cgi?id=680292 | |
46 patches/origin_bound_certs.patch | |
47 | |
48 * Add a function to restart a handshake after a client certificate request. | 43 * Add a function to restart a handshake after a client certificate request. |
49 patches/restartclientauth.patch | 44 patches/restartclientauth.patch |
50 | 45 |
51 * Allow SSL_HandshakeNegotiatedExtension to be called before the handshake | 46 * Allow SSL_HandshakeNegotiatedExtension to be called before the handshake |
52 is finished. | 47 is finished. |
53 https://bugzilla.mozilla.org/show_bug.cgi?id=681839 | 48 https://bugzilla.mozilla.org/show_bug.cgi?id=681839 |
54 patches/negotiatedextension.patch | 49 patches/negotiatedextension.patch |
55 | 50 |
56 * Support the encrypted client certificates extension. | |
57 https://bugzilla.mozilla.org/show_bug.cgi?id=691991 | |
wtc
2012/05/22 00:39:47
For future reference: the correct NSS bug report i
agl
2012/05/22 15:13:13
For the sake of code history, I committed a change
| |
58 patches/encryptedclientcerts.patch | |
59 | |
60 * Add function to retrieve TLS client cert types requested by server. | 51 * Add function to retrieve TLS client cert types requested by server. |
61 https://bugzilla.mozilla.org/show_bug.cgi?id=51413 | 52 https://bugzilla.mozilla.org/show_bug.cgi?id=51413 |
62 patches/getrequestedclientcerttypes.patch | 53 patches/getrequestedclientcerttypes.patch |
63 | 54 |
64 * Add DTLS support. | 55 * Add DTLS support. |
65 https://bugzilla.mozilla.org/show_bug.cgi?id=681065 | 56 https://bugzilla.mozilla.org/show_bug.cgi?id=681065 |
66 patches/dtls.patch | 57 patches/dtls.patch |
67 | 58 |
68 * Enable False Start only when the server supports forward secrecy. | 59 * Enable False Start only when the server supports forward secrecy. |
69 patches/falsestartnpn.patch | 60 patches/falsestartnpn.patch |
70 | 61 |
71 * Reject DH generators and public values equal to zero or one. | 62 * Reject DH generators and public values equal to zero or one. |
72 patches/dhvalues.patch | 63 patches/dhvalues.patch |
73 | 64 |
74 Apply the patches to NSS by running the patches/applypatches.sh script. Read | 65 Apply the patches to NSS by running the patches/applypatches.sh script. Read |
75 the comments at the top of patches/applypatches.sh for instructions. | 66 the comments at the top of patches/applypatches.sh for instructions. |
76 | 67 |
77 The ssl/bodge directory contains files taken from the NSS repo that we required | 68 The ssl/bodge directory contains files taken from the NSS repo that we required |
78 for building libssl outside of its usual build environment. | 69 for building libssl outside of its usual build environment. |
OLD | NEW |