diff --git a/nss-3.101-allow-fips-rsa-oaep.patch b/nss-3.101-allow-fips-rsa-oaep.patch index 576232e..151643e 100644 --- a/nss-3.101-allow-fips-rsa-oaep.patch +++ b/nss-3.101-allow-fips-rsa-oaep.patch @@ -5,7 +5,7 @@ diff -up ./lib/softoken/pkcs11u.c.fipsrsaoaep ./lib/softoken/pkcs11u.c } } return sftk_checkKeyLength(targetKeyLength, 112, 512, 1); -+ case SFTKFIPSRSAOAEP: ++ case SFTKFIPSRSAOAEP:; + CK_RSA_PKCS_OAEP_PARAMS *rsaoaep = (CK_RSA_PKCS_OAEP_PARAMS *) + mech->pParameter; + diff --git a/nss.spec b/nss.spec index 850ffb4..a11f9cf 100644 --- a/nss.spec +++ b/nss.spec @@ -3,7 +3,7 @@ # NOTE: To avoid NVR clashes of nspr* packages: # - reset %%{nspr_release} to 1, when updating %%{nspr_version} # - increment %%{nspr_version}, when updating the NSS part only -%global baserelease 12 +%global baserelease 13 %global nss_release %baserelease # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when # release number between nss and nspr are different. @@ -1174,11 +1174,16 @@ fi %changelog -* Thu Nov 11 2024 Frantisek Krenzelok - 3.101.0-12 +* Mon Nov 18 2024 Frantisek Krenzelok - 3.101.0-13 +- fix the "Allow RSA-OAEP in FIPS mode" patch for the declaration after switch statement +- fix changelog message for 3.101.0-11 + +* Mon Nov 11 2024 Frantisek Krenzelok - 3.101.0-12 - Allow RSA-OAEP in FIPS mode * Mon Nov 11 2024 Frantisek Krenzelok - 3.101.0-11 -- fips check ed25519 key size. +- Add SEC_OID_CURVE25519 to FIPS checks. +- This will mark algorithm using it as FIPS unapproved. * Mon Nov 4 2024 Bob Relyea - 3.101.0-10 - remove dbm references in pkconfig