| OLD | NEW |
| 1 Name: Network Security Services (NSS) | 1 Name: Network Security Services (NSS) |
| 2 URL: http://www.mozilla.org/projects/security/pki/nss/ | 2 URL: http://www.mozilla.org/projects/security/pki/nss/ |
| 3 Version: 3.15 Beta 2 | 3 Version: 3.15 Beta 2 |
| 4 Security Critical: Yes | 4 Security Critical: Yes |
| 5 License: MPL 2 | 5 License: MPL 2 |
| 6 License File: NOT_SHIPPED | 6 License File: NOT_SHIPPED |
| 7 | 7 |
| 8 This directory includes a copy of NSS's libssl from the hg repo at: | 8 This directory includes a copy of NSS's libssl from the hg repo at: |
| 9 https://hg.mozilla.org/projects/nss | 9 https://hg.mozilla.org/projects/nss |
| 10 | 10 |
| (...skipping 57 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 68 | 68 |
| 69 * SSL_ExportKeyingMaterial should get the RecvBufLock and SSL3HandshakeLock. | 69 * SSL_ExportKeyingMaterial should get the RecvBufLock and SSL3HandshakeLock. |
| 70 This change was made in https://chromiumcodereview.appspot.com/10454066. | 70 This change was made in https://chromiumcodereview.appspot.com/10454066. |
| 71 patches/secretexporterlocks.patch | 71 patches/secretexporterlocks.patch |
| 72 | 72 |
| 73 * Allow the constant-time CBC processing code to be compiled against older | 73 * Allow the constant-time CBC processing code to be compiled against older |
| 74 NSS that doesn't contain the CBC constant-time changes. | 74 NSS that doesn't contain the CBC constant-time changes. |
| 75 patches/cbc.patch | 75 patches/cbc.patch |
| 76 https://code.google.com/p/chromium/issues/detail?id=172658#c12 | 76 https://code.google.com/p/chromium/issues/detail?id=172658#c12 |
| 77 | 77 |
| 78 * Define AES_256_KEY_LENGTH if the system blapit.h header doesn't define it. | |
| 79 Remove this patch when all system NSS packages are NSS 3.12.10 or later. | |
| 80 patches/aes256keylength.patch | |
| 81 | |
| 82 * Change ssl3_SuiteBOnly to always return PR_TRUE. The softoken in NSS | 78 * Change ssl3_SuiteBOnly to always return PR_TRUE. The softoken in NSS |
| 83 versions older than 3.15 report an EC key size range of 112 bits to 571 | 79 versions older than 3.15 report an EC key size range of 112 bits to 571 |
| 84 bits, even when it is compiled to support only the NIST P-256, P-384, and | 80 bits, even when it is compiled to support only the NIST P-256, P-384, and |
| 85 P-521 curves. Remove this patch when all system NSS softoken packages are | 81 P-521 curves. Remove this patch when all system NSS softoken packages are |
| 86 NSS 3.15 or later. | 82 NSS 3.15 or later. |
| 87 patches/suitebonly.patch | 83 patches/suitebonly.patch |
| 88 | 84 |
| 89 * Define the SECItemArray type and declare the SECItemArray handling | 85 * Define the SECItemArray type and declare the SECItemArray handling |
| 90 functions, which were added in NSS 3.15. Remove this patch when all system | 86 functions, which were added in NSS 3.15. Remove this patch when all system |
| 91 NSS packages are NSS 3.15 or later. | 87 NSS packages are NSS 3.15 or later. |
| (...skipping 16 matching lines...) Expand all Loading... |
| 108 https://bugzilla.mozilla.org/show_bug.cgi?id=480514 | 104 https://bugzilla.mozilla.org/show_bug.cgi?id=480514 |
| 109 | 105 |
| 110 * Update Chromium-specific code for TLS 1.2. | 106 * Update Chromium-specific code for TLS 1.2. |
| 111 patches/tls12chromium.patch | 107 patches/tls12chromium.patch |
| 112 | 108 |
| 113 Apply the patches to NSS by running the patches/applypatches.sh script. Read | 109 Apply the patches to NSS by running the patches/applypatches.sh script. Read |
| 114 the comments at the top of patches/applypatches.sh for instructions. | 110 the comments at the top of patches/applypatches.sh for instructions. |
| 115 | 111 |
| 116 The ssl/bodge directory contains files taken from the NSS repo that we required | 112 The ssl/bodge directory contains files taken from the NSS repo that we required |
| 117 for building libssl outside of its usual build environment. | 113 for building libssl outside of its usual build environment. |
| OLD | NEW |