nss/nss-ssl-cbc-random-iv-off-by-default.patch

diff -up nss/lib/ssl/sslsock.c.cbcrandomivoff nss/lib/ssl/sslsock.c
--- nss/lib/ssl/sslsock.c.cbcrandomivoff	2013-05-30 22:20:52.181292812 -0700
+++ nss/lib/ssl/sslsock.c	2013-05-30 22:20:52.194292913 -0700
@@ -152,7 +152,7 @@ static sslOptions ssl_defaults = {
     3,          /* enableRenegotiation (default: transitional) */
     PR_FALSE,   /* requireSafeNegotiation */
     PR_FALSE,   /* enableFalseStart   */
-    PR_TRUE,    /* cbcRandomIV        */
+    PR_FALSE    /* cbcRandomIV        */ /* defaults to off for compatibility */
     PR_FALSE    /* enableOCSPStapling */
 };
 
@@ -2906,9 +2906,9 @@ ssl_SetDefaultsFromEnvironment(void)
 	                PR_TRUE));
 	}
 	ev = getenv("NSS_SSL_CBC_RANDOM_IV");
-	if (ev && ev[0] == '0') {
-	    ssl_defaults.cbcRandomIV = PR_FALSE;
-	    SSL_TRACE(("SSL: cbcRandomIV set to 0"));
+	if (ev && ev[0] == '1') {
+	    ssl_defaults.cbcRandomIV = PR_TRUE;
+	    SSL_TRACE(("SSL: cbcRandomIV set to 1"));
 	}
     }
 #endif /* NSS_HAVE_GETENV */
Update to NSS_3_15_BETA1 - Update spec file, patches, and helper scripts on account of a shallower source tree - Update the pem sources also to adjust to the sallower source for nss 2013-04-09 23:14:36 +00:00			`diff -up nss/lib/ssl/sslsock.c.cbcrandomivoff nss/lib/ssl/sslsock.c`
Update to NSS_3_15_RTM 2013-06-15 19:48:12 +00:00			`--- nss/lib/ssl/sslsock.c.cbcrandomivoff 2013-05-30 22:20:52.181292812 -0700`
			`+++ nss/lib/ssl/sslsock.c 2013-05-30 22:20:52.194292913 -0700`
			`@@ -152,7 +152,7 @@ static sslOptions ssl_defaults = {`
- Resolves: Bug 770682 - nss update breaks pidgin-sipe connectivity - Set NSS_SSL_CBC_RANDOM_IV to 0 by default and change to 1 on user request 2012-01-06 23:50:45 +00:00			`3, /* enableRenegotiation (default: transitional) */`
			`PR_FALSE, /* requireSafeNegotiation */`
			`PR_FALSE, /* enableFalseStart */`
Update to NSS_3_15_BETA1 - Update spec file, patches, and helper scripts on account of a shallower source tree - Update the pem sources also to adjust to the sallower source for nss 2013-04-09 23:14:36 +00:00			`- PR_TRUE, /* cbcRandomIV */`
Fix the patch turn the dault as intended - Remove a pprtion that is actually applied already - Current one gives the desired results but must invertigate further why the sencnd hunk is already applied. 2012-11-28 20:52:53 +00:00			`+ PR_FALSE /* cbcRandomIV / / defaults to off for compatibility */`
Update to NSS_3_15_BETA1 - Update spec file, patches, and helper scripts on account of a shallower source tree - Update the pem sources also to adjust to the sallower source for nss 2013-04-09 23:14:36 +00:00			`PR_FALSE /* enableOCSPStapling */`
- Resolves: Bug 770682 - nss update breaks pidgin-sipe connectivity - Set NSS_SSL_CBC_RANDOM_IV to 0 by default and change to 1 on user request 2012-01-06 23:50:45 +00:00			`};`

Update to NSS_3_15_RTM 2013-06-15 19:48:12 +00:00			`@@ -2906,9 +2906,9 @@ ssl_SetDefaultsFromEnvironment(void)`
Update to NSS_3_14_2_RTM - Update the minimum requred versiobs of nspr, nss-util, and nss-softokn - Remove patch obsoleted by the update and update others - Restore missing second half of the cbc random iv by default patch - Restore the freebl tests patch until we build without nsssoftoken 2013-02-01 19:24:15 +00:00			`PR_TRUE));`
			`}`
			`ev = getenv("NSS_SSL_CBC_RANDOM_IV");`
			`- if (ev && ev[0] == '0') {`
			`- ssl_defaults.cbcRandomIV = PR_FALSE;`
			`- SSL_TRACE(("SSL: cbcRandomIV set to 0"));`
			`+ if (ev && ev[0] == '1') {`
			`+ ssl_defaults.cbcRandomIV = PR_TRUE;`
			`+ SSL_TRACE(("SSL: cbcRandomIV set to 1"));`
			`}`
			`}`
			`#endif /* NSS_HAVE_GETENV */`