OLD | NEW |
1 Name: Network Security Services (NSS) | 1 Name: Network Security Services (NSS) |
2 URL: http://www.mozilla.org/projects/security/pki/nss/ | 2 URL: http://www.mozilla.org/projects/security/pki/nss/ |
3 Version: 3.15 Beta 2 | 3 Version: 3.15 Beta 2 |
4 Security Critical: Yes | 4 Security Critical: Yes |
5 License: MPL 2 | 5 License: MPL 2 |
6 License File: NOT_SHIPPED | 6 License File: NOT_SHIPPED |
7 | 7 |
8 This directory includes a copy of NSS's libssl from the hg repo at: | 8 This directory includes a copy of NSS's libssl from the hg repo at: |
9 https://hg.mozilla.org/projects/nss | 9 https://hg.mozilla.org/projects/nss |
10 | 10 |
(...skipping 57 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
68 | 68 |
69 * SSL_ExportKeyingMaterial should get the RecvBufLock and SSL3HandshakeLock. | 69 * SSL_ExportKeyingMaterial should get the RecvBufLock and SSL3HandshakeLock. |
70 This change was made in https://chromiumcodereview.appspot.com/10454066. | 70 This change was made in https://chromiumcodereview.appspot.com/10454066. |
71 patches/secretexporterlocks.patch | 71 patches/secretexporterlocks.patch |
72 | 72 |
73 * Allow the constant-time CBC processing code to be compiled against older | 73 * Allow the constant-time CBC processing code to be compiled against older |
74 NSS that doesn't contain the CBC constant-time changes. | 74 NSS that doesn't contain the CBC constant-time changes. |
75 patches/cbc.patch | 75 patches/cbc.patch |
76 https://code.google.com/p/chromium/issues/detail?id=172658#c12 | 76 https://code.google.com/p/chromium/issues/detail?id=172658#c12 |
77 | 77 |
78 * Define AES_256_KEY_LENGTH if the system blapit.h header doesn't define it. | |
79 Remove this patch when all system NSS packages are NSS 3.12.10 or later. | |
80 patches/aes256keylength.patch | |
81 | |
82 * Change ssl3_SuiteBOnly to always return PR_TRUE. The softoken in NSS | 78 * Change ssl3_SuiteBOnly to always return PR_TRUE. The softoken in NSS |
83 versions older than 3.15 report an EC key size range of 112 bits to 571 | 79 versions older than 3.15 report an EC key size range of 112 bits to 571 |
84 bits, even when it is compiled to support only the NIST P-256, P-384, and | 80 bits, even when it is compiled to support only the NIST P-256, P-384, and |
85 P-521 curves. Remove this patch when all system NSS softoken packages are | 81 P-521 curves. Remove this patch when all system NSS softoken packages are |
86 NSS 3.15 or later. | 82 NSS 3.15 or later. |
87 patches/suitebonly.patch | 83 patches/suitebonly.patch |
88 | 84 |
89 * Define the SECItemArray type and declare the SECItemArray handling | 85 * Define the SECItemArray type and declare the SECItemArray handling |
90 functions, which were added in NSS 3.15. Remove this patch when all system | 86 functions, which were added in NSS 3.15. Remove this patch when all system |
91 NSS packages are NSS 3.15 or later. | 87 NSS packages are NSS 3.15 or later. |
(...skipping 16 matching lines...) Expand all Loading... |
108 https://bugzilla.mozilla.org/show_bug.cgi?id=480514 | 104 https://bugzilla.mozilla.org/show_bug.cgi?id=480514 |
109 | 105 |
110 * Update Chromium-specific code for TLS 1.2. | 106 * Update Chromium-specific code for TLS 1.2. |
111 patches/tls12chromium.patch | 107 patches/tls12chromium.patch |
112 | 108 |
113 Apply the patches to NSS by running the patches/applypatches.sh script. Read | 109 Apply the patches to NSS by running the patches/applypatches.sh script. Read |
114 the comments at the top of patches/applypatches.sh for instructions. | 110 the comments at the top of patches/applypatches.sh for instructions. |
115 | 111 |
116 The ssl/bodge directory contains files taken from the NSS repo that we required | 112 The ssl/bodge directory contains files taken from the NSS repo that we required |
117 for building libssl outside of its usual build environment. | 113 for building libssl outside of its usual build environment. |
OLD | NEW |