Index: net/third_party/nss/README.chromium |
=================================================================== |
--- net/third_party/nss/README.chromium (revision 152010) |
+++ net/third_party/nss/README.chromium (working copy) |
@@ -90,8 +90,8 @@ |
* Don't crash when the SSL keylog file cannot be opened. |
patches/sslkeylogerror.patch |
- * Set the record layer version number of ClientHello to at most TLS 1.0 |
- if we don't know what protocol version the server supports. |
+ * Set the record layer version number of the initial ClientHello to at |
+ most TLS 1.0 if we don't know what protocol version the server supports. |
https://bugzilla.mozilla.org/show_bug.cgi?id=774547 |
patches/recordlayerversion.patch |
@@ -99,6 +99,11 @@ |
https://bugzilla.mozilla.org/show_bug.cgi?id=681065 |
patches/sslprotocolvariant.patch |
+ * When renegotiating, continue to use the client_version used in the |
+ initial ClientHello to work around a Windows SChannel bug. |
+ https://bugzilla.mozilla.org/show_bug.cgi?id=783448 |
+ patches/renegoclientversion.patch |
+ |
Apply the patches to NSS by running the patches/applypatches.sh script. Read |
the comments at the top of patches/applypatches.sh for instructions. |