Elio Maldonado
299e9058d1
Change POLICY_FILE to "nss.cfg"
2016-04-22 08:25:14 -07:00
Elio Maldonado
21d9cd13e1
Change the POLICY_PATH to "/etc/crypto-policies/back-ends"
...
- Regenerate the check policy patch with hg to provide more context
- the nss-util portion included though not applied here but in nss-util
- todo: file bug upstream once we have done some testing
2016-04-20 08:49:00 -07:00
Elio Maldonado
b9c9bc550c
Fix typo in the last %changelog entry
2016-04-14 14:16:05 -07:00
Elio Maldonado
ea86d5898c
Load policy file if /etc/pki/nssdb/policy.cfg exists
...
- Resolves: Bug 1157720 - NSS should enforce the system-wide crypto policy
2016-03-24 15:18:49 -07:00
Elio Maldonado
b22cf46b7c
Remove unused patch rendered obsolete by pem update
2016-03-08 15:41:14 -08:00
Elio Maldonado
2a45956d5b
Update pem sources to latest from nss-pem upstream
...
- Resolves: Bug 1300652 - [PEM] insufficient input validity checking while loading a private key
- Fixes memory leak on failed ASN1 decoding of RSA keys with rebase
- https://git.fedorahosted.org/cgit/nss-pem.git
2016-03-08 06:47:48 -08:00
Elio Maldonado
e4343992f0
Rebase to NSS 3.23
2016-03-05 12:42:26 -08:00
Elio Maldonado
c0f6099656
Requite nss and nss-softokn version 3.22.2
2016-02-27 16:45:41 -08:00
Elio Maldonado
69c688f3b5
Rebase to NSS 3.22.2
...
- Resolves: Bug 1304135 - nss-3.22.2 is available
2016-02-26 21:59:01 -08:00
Elio Maldonado
fe44847276
Fix ssl2/exp test disabling to run all the required tests
2016-02-22 20:49:28 -08:00
Elio Maldonado
c281a339e1
Rebase to NSS 3.22.1
...
- Bug 1304135 - nss-3.22.1 is available
2016-02-21 11:30:52 -08:00
Elio Maldonado
317de01a4d
Update .gitignore as part of updating to nss 3.22
2016-02-08 13:47:18 -08:00
Elio Maldonado
5953345108
Update to NSS 3.22
2016-02-08 07:57:39 -08:00
Fedora Release Engineering
f7ddea92df
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
2016-02-04 10:56:52 +00:00
Elio Maldonado
5fe1656484
Resolves: Bug 1299040 - Enable ssl_gtests upstream test suite
...
- Remove 'export NSS_DISABLE_GTESTS=1' go ssl_gtests are built
- Use %define when specifying the nss_tests to run
2016-01-15 11:12:08 -08:00
Elio Maldonado
0483a01742
Add 64-bit MIPS to multilib arches
...
- Patch contributed by Michal Toman <michal.toman@gmail.com>
- Resolves: Bug 1294878 - Add 64-bit MIPS to multilib_arches
2015-12-31 08:11:54 -08:00
Jaromir Capik
65e0fbe683
Copy verref.h to the right dir in the STAGE2 recipe
2015-12-15 14:26:29 +01:00
Elio Maldonado
337a03cdd8
Fix style of commit message
2015-11-20 14:56:41 -08:00
Elio Maldonado
34058a2a6e
Update %{nss_util_version} and %{nss_softokn_version} to 3.21.0
...
- Bug 1284095 - all https fails with sec_error_no_token
2015-11-20 14:39:49 -08:00
Elio Maldonado
66122a0ff7
Add references to bugs filed upstream
2015-11-15 10:51:54 -08:00
Elio Maldonado
03da09b383
Enclose the _isa_bits check inside a %ifnarch noarch ... %endif one
2015-11-14 14:49:57 -08:00
Elio Maldonado
69b02be530
Change the test to %if 0%{__isa_bits} == 64 as required in fedora
...
- As done in the patch contributed by Marcin Juszkiewicz <mjuszkiewicz@redhat.com>
- Resolves: Bug 1258425 - Use __isa_bits macro instead of list of 64-bit architectures
2015-11-14 11:32:57 -08:00
Elio Maldonado
0a91ce3fe8
Complete the commits to update to NSS 3.21
...
- Add files missed in previous commit as they weren't staged
- Package listsuites as part of the unsupported tools set
- Resolves: Bug 1279912 - nss-3.21 is available
- Resolves: Bug 1258425 - Use __isa_bits macro instead of list of 64-bit
- Resolves: Bug 1280032 - Package listsuites as part of the nss unsupported tools set
2015-11-13 18:03:07 -08:00
Elio Maldonado
c13e32fe80
Update to NSS 3.21
...
- Package listsuites as part of the unsupported tools set
- Resolves: Bug 1279912 - nss-3.21 is available
- Resolves: Bug 1258425 - Use __isa_bits macro instead of list of 64-bit
- Resolves: Bug 1280032 - Package listsuites as part of the nss unsupported tools set
2015-11-13 17:53:10 -08:00
Jaromir Capik
81b37a0f74
Adding STAGE2 bootstrap recipe
2015-11-04 17:48:00 +01:00
Elio Maldonado
75207789dc
Update to NSS 3.20.1
2015-10-31 08:55:27 -07:00
Elio Maldonado
82653be6b2
Enable ECC cipher-suites by default [hrbz#1185708]
...
- Split the enabling patch in two for easier maintenance
- Remove unused patches rendered obsolete by prior rebase
2015-09-30 11:34:48 -07:00
Elio Maldonado
ae64727ebb
Enable ECC cipher-suites by default [hrbz#1185708]
...
- Implement corrections requested in code review
2015-09-16 09:25:43 -07:00
Elio Maldonado
a046ce773a
Enable ECC cipher-suites by default [hrbz#1185708]
2015-09-15 16:21:10 -07:00
Elio Maldonado
17f536942a
- Fix patches that disable ssl2 and export cipher suites support
...
- Fix libssl patch that disables ssl2 & export cipher suites not disable RSA_WITH_NULL ciphers
- Fix syntax erros in patch to skip ssl2 and export cipher suite tests to only skip what;s needed
- Turn ssl2 off by default in the tstclnt tool
- Disable ssl stress tests containing TLS RC4 128 with MD5
- Resolves: Bug 1263005
2015-09-14 18:15:13 -07:00
Elio Maldonado
b10f7b1f18
Fix the version number in last %%changelog entry to be NSS 3.20
2015-08-20 15:15:28 -07:00
Elio Maldonado
c4f83dca30
Update to NSS 3.120
2015-08-20 13:50:06 -07:00
Elio Maldonado
8b92dbf50e
Update to NSS 3.19.3
...
- Resolves: Bug 1251624 - nss-3.19.3 is available
2015-08-07 21:13:01 -07:00
Elio Maldonado
f35af25385
Create on the fly versions of sslcov.txt and sslstress.txt that disable tests for SSL2 and EXPORT ciphers
...
- Enhancement from Kai Engert already used on RHEL-7
2015-06-26 14:53:21 -07:00
Kai Engert
0779a363b4
Update to NSS 3.19.2
2015-06-17 21:15:31 +02:00
Kai Engert
3a7ef4801d
Update to NSS 3.19.1
2015-05-28 22:28:05 +02:00
Kai Engert
c0a0ca5eb2
forgot to udpate sources/gitignore
2015-05-19 21:23:31 +02:00
Kai Engert
856e33f728
Update to NSS 3.19
2015-05-19 21:07:35 +02:00
Kai Engert
a58533f703
Replace expired test certificates, upstream bug 1151037
2015-05-15 16:23:25 +02:00
Elio Maldonado
f59c0d1275
Update to nss-3.18.0
...
- Resolves: Bug 1203689 - nss-3.18 is available
2015-03-19 09:52:30 -07:00
Elio Maldonado
9b7199b3db
Disable export suites and SSL2 support at build time
...
- Fix syntax errors in various shell scripts
- Resolves: Bug 1189952 - Disable SSL2 and the export cipher suites
2015-03-03 14:35:20 -08:00
Till Maas
fa80ce0efb
Rebuilt for Fedora 23 Change
...
https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code
2015-02-21 22:27:31 +01:00
Elio Maldonado
8687a87da5
Commented out the export NSS_NO_SSL2=1 line to not disable ssl2
...
- Backing out from disabling ssl2 until the patches are fixed
2015-02-09 17:52:50 -08:00
Elio Maldonado
8cfb70a447
Disable SSL2 support at build time
...
- Fix syntax errors in various shell scripts
- Resolves: Bug 1189952 - Disable SSL2 and the export cipher suites
2015-02-08 18:30:17 -08:00
Elio Maldonado
8c142e52fe
Update to nss-3.17.4
...
- remove a patch rendered obsolete by the rebase
2015-01-28 17:23:35 -08:00
Ville Skyttä
c70e45537d
Own the %{_datadir}/doc/nss-tools dir
...
https://bugzilla.redhat.com/show_bug.cgi?id=1185573
2015-01-27 13:16:42 +02:00
Elio Maldonado
62096f81c3
Resolves: Bug 987189 - nss-tools RPM conflicts with perl-PAR-Packer
...
- Install pp man page in %{_datadir}/doc/nss-tools/pp.1
- Use %{_mandir} instead of /usr/share/man as more generic
2014-12-16 07:43:44 -08:00
Elio Maldonado
a60e3001fe
Install pp man page in alternative location
...
- Resolves: Bug 987189 - nss-tools RPM conflicts with perl-PAR-Packer
2014-12-15 08:26:07 -08:00
Elio Maldonado
a7df0838aa
Update to nss-3.17.3
...
- Resolves: Bug 1171012 - nss-3.17.3 is available
2014-12-05 07:32:38 -08:00
Elio Maldonado
3e2a0ea4de
Resolves: Bug 994599 - Enable TLS 1.2 by default
2014-10-16 16:36:18 -07:00