Daiki Ueno
db341dd2e0
Update to NSS 3.39
2018-09-03 13:55:21 +02:00
Kai Engert
89b8b47d46
Backport upstream addition of nss-policy-check utility, rhbz#1428746
2018-07-20 16:09:32 +02:00
Fedora Release Engineering
e4c3da9da7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-07-13 14:31:25 +00:00
Jason Tibbitts
137780ff5d
Remove needless use of %defattr
2018-07-10 02:12:27 -05:00
Daiki Ueno
6f4f615c05
Install crypto-policies configuration file for p11-kit-proxy
2018-07-03 13:31:49 +02:00
Daiki Ueno
2b3aa61f20
Update to NSS 3.38
2018-07-02 16:10:47 +02:00
Daiki Ueno
3b822a7262
Backport fix for handling DTLS application_data before handshake
2018-06-06 11:18:51 +02:00
Daiki Ueno
8d5d06f814
Drop more tests failing intermittently
2018-06-06 10:17:29 +02:00
Daiki Ueno
26f23aeeb6
Disable tests failing intermittently
2018-06-05 16:40:58 +02:00
Daiki Ueno
dfa19ec931
Update to NSS 3.37.3
2018-06-05 13:52:07 +02:00
Daiki Ueno
e874285f92
Temporarily disable AlertBeforeServerHello test on all archtectures
2018-06-04 09:46:39 +02:00
Daiki Ueno
abfbe95c8d
Temporarily disable AlertBeforeServerHello test on s390x and aarch64
2018-06-01 17:13:57 +02:00
Daiki Ueno
e42c9742c4
Update to NSS 3.37.1
2018-05-28 17:25:42 +02:00
Kai Engert
a24d6b1353
Upstream patch to keep nicknames stable on repeated certificate import into SQL DB, mozbz#1458518
2018-05-02 16:01:40 +02:00
Daiki Ueno
418745fdce
Update to NSS 3.36.1
2018-04-11 12:41:21 +02:00
Daiki Ueno
03874d1272
Fix partial injection of LDFLAGS
2018-03-12 15:20:53 +01:00
Daiki Ueno
2007524db8
Remove obsolete Conflicts
2018-03-12 15:04:04 +01:00
Daiki Ueno
67567fd852
Remove nss-3.14.0.0-disble-ocsp-test.patch
2018-03-12 15:03:33 +01:00
Daiki Ueno
2eadf22a1d
Make test failure detection robuster
2018-03-09 15:38:51 +01:00
Daiki Ueno
3edcb8bd09
Update to NSS 3.36.0
2018-03-09 13:59:41 +01:00
Igor Gnatenko
b33603605a
Remove %clean section
...
None of currently supported distributions need that.
Last one was EL5 which is EOL for a while.
Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-14 09:16:55 +01:00
Igor Gnatenko
7504d3f5b2
Remove BuildRoot definition
...
None of currently supported distributions need that.
It was needed last for EL5 which is EOL now
Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-13 23:55:40 +01:00
Fedora Release Engineering
51a16f5968
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-02-08 08:28:30 +00:00
Kai Engert
1689d12cbb
Set NSS_FORCE_FIPS=1 at %%build time, and remove from %%check.
2018-02-01 14:26:39 +01:00
Kai Engert
0a70bce56d
Fix a compiler error with gcc 8, mozbz#1434070
2018-01-29 22:58:11 +01:00
Kai Engert
ccf407af47
Stop pulling in nss-pem automatically, packages that need it should depend on it, rhbz#1539401
2018-01-29 19:03:50 +01:00
Daiki Ueno
08f152ebf9
Update to NSS 3.35.0
2018-01-23 14:38:31 +01:00
Daiki Ueno
bd239c046a
Update to NSS 3.34.0
2017-11-14 14:20:29 +01:00
Daiki Ueno
6d15c06123
Fix nss-pem requirement on multilib
2017-11-10 15:13:21 +01:00
Kai Engert
423cf344b1
fix test script
2017-11-08 14:53:14 +01:00
Kai Engert
cd77ff2c17
Update tests to be compatible with default NSS DB changed to sql (the default was changed in the nss-util package).
2017-11-07 14:13:10 +01:00
Kai Engert
c4dce982fc
rhbz#1505487, backport upstream fixes required for rhbz#1496560
2017-10-24 14:05:16 +02:00
Daiki Ueno
06c6c5b05b
Forcibly run FIPS tests, and install new header file
2017-10-03 15:41:34 +02:00
Daiki Ueno
8a8a89e2ed
Update to NSS 3.33.0
2017-10-03 10:18:40 +02:00
Daiki Ueno
c6bdcf333a
Update to NSS 3.32.1
2017-09-15 14:21:47 +02:00
Daiki Ueno
3e4febd5a1
Prefer in-tree headers over system headers
...
See https://bugzilla.redhat.com/show_bug.cgi?id=1422046#c6
2017-09-06 14:38:46 +02:00
Kai Engert
61169569b1
NSS libnssckbi.so has already been obsoleted by p11-kit-trust, rhbz#1484449
2017-08-23 19:41:28 +02:00
Daiki Ueno
2d62c98a25
Don't build util_gtest
2017-08-08 12:47:53 +02:00
Daiki Ueno
7ae9f54af6
Update to NSS 3.32.0
2017-08-07 13:58:01 +02:00
Fedora Release Engineering
3bbfdef75c
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
2017-08-03 04:07:03 +00:00
Fedora Release Engineering
7a90b2748d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
2017-07-27 01:18:19 +00:00
Daiki Ueno
943827bba4
Fix the previous commit
2017-07-19 18:34:50 +02:00
Daiki Ueno
82b3129713
Fix the previous commit for deprecating signtool
...
signtool.1 must be installed even if it is unsupported
2017-07-19 15:39:19 +02:00
Daiki Ueno
4b45ae6d65
Backport mozbz#1381784 to avoid deadlock in dnf
2017-07-18 13:18:15 +02:00
Daiki Ueno
314afd2133
Move signtool to %%_libdir/nss/unsupported-tools
2017-07-13 16:16:30 +02:00
Petr Písař
b2ceaeb648
perl dependency renamed to perl-interpreter < https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules >
2017-07-12 14:42:33 +02:00
Daiki Ueno
5ed56146a2
Rebase to NSS 3.31.0
2017-06-21 17:41:09 +02:00
Daiki Ueno
4a49c5748c
Enable gtests
2017-06-02 15:18:09 +02:00
Daiki Ueno
405310c946
Rebase to NSS 3.30.2
2017-04-24 09:50:22 +02:00
Kai Engert
cd8db2917d
Backport upstream mozbz#1328318 to support crypto policy FUTURE.
2017-03-30 11:54:51 +02:00
Daiki Ueno
17cd27bdca
Revert workaround for pkgconf transition
...
This reverts commit 70bf1cefc1
.
2017-03-21 12:37:13 +01:00
Daiki Ueno
b6664ebb77
Update to NSS 3.30.0
2017-03-21 12:20:45 +01:00
Kai Engert
8b601d64b2
Backport mozbz#1334976 and mozbz#1336487.
2017-03-02 13:44:16 +01:00
Daiki Ueno
65a4d20cc7
Update to NSS 3.29.1
2017-02-17 15:32:15 +01:00
Daiki Ueno
07c729494a
Disable TLS 1.3 again
2017-02-09 10:13:07 +01:00
Daiki Ueno
73106743c1
Update to NSS 3.29.0
2017-02-08 16:33:58 +01:00
Daiki Ueno
70bf1cefc1
Work around pkgconfig -> pkgconf transition issue
2017-01-23 14:41:48 +01:00
Daiki Ueno
877f068e97
Temporarily remove Conflicts: for icecat
2017-01-23 14:15:36 +01:00
Daiki Ueno
82e9983e43
Disable TLS 1.3 again
...
Also add Conflicts for old Mozilla apps
2017-01-20 17:41:36 +01:00
Daiki Ueno
c6535e87bd
Add "Conflicts" with older firefox
2017-01-17 12:49:10 +01:00
Daiki Ueno
8b6e6cc656
Fix incorrect version requirement for nss-util/nss-softokn
2017-01-13 09:41:31 +01:00
Daiki Ueno
9168316fa8
Update to NSS 3.28.1
2017-01-06 14:35:27 +01:00
Daiki Ueno
1df1edced7
Update to 3.27.2
2016-11-30 15:35:31 +01:00
Daiki Ueno
f52ebc585d
Revert the previous fix for RSA-PSS and use the upstream fix instead
2016-11-15 16:27:37 +01:00
Kai Engert
387bb6b467
Disable the use of RSA-PSS with SSL/TLS. #1383809
2016-11-02 14:19:58 +01:00
Daiki Ueno
74f302809f
Disable TLS 1.3 by default
2016-10-02 07:12:26 +02:00
Daiki Ueno
ddcac56c2e
Update to NSS 3.27.0
2016-09-29 13:52:40 +02:00
Daiki Ueno
e0be40e6f7
Add explanation about NSS_IGNORE_SYSTEM_POLICY=1
2016-08-19 10:33:21 +02:00
Daiki Ueno
351f464ed1
Update to NSS 3.26.0
2016-08-10 14:46:53 +02:00
Elio Maldonado
7854e70d7e
Incorporate more changes requested in upstream review and commited upstream ( #1157720 )
...
- still keeping two separate patches
2016-07-14 10:41:00 -07:00
Elio Maldonado
ff192a931a
Incorporate some changes requested in upstream review and commited upstream ( #1157720 )
2016-07-13 17:44:26 -07:00
Elio Maldonado
270f23d149
Implement changes requested in upstream review and pushed upstream ( #1157720 )
...
- merge the two policy related patches
2016-07-12 20:25:49 -07:00
Elio Maldonado
e666a29edf
Add support for conditionally ignoring the system policy ( #1157720 )
...
- Remove unneeded test scripts patches in order to run more tests
- Remove unneeded test data modifications from the spec file
2016-07-01 18:22:06 -07:00
Elio Maldonado
68e30820ed
Add a reference to bug filed upstream
2016-06-28 09:33:42 -07:00
Elio Maldonado
ef6c2f08e7
Remove obsolete patch and spurious lines from the spec file ( #1347336 )
2016-06-28 07:47:13 -07:00
Elio Maldonado
e51bf1ce38
Cleanup spec file and patches and add references to bugs filed upstream
2016-06-26 15:03:12 -07:00
Elio Maldonado
3792f60887
Rebase to NSS 3.15
...
- Remove three patches obsolted by the rebase and updated two
- Temporarily not building the ecperf tool
- ecperef requires freebl/ec.h and ecl-curve.h and the latter
- causes compile failure because it requires that
- NSS_ECC_MORE_THAN_SUITE_B not be defined yet this is
- required for nss builds to allow external pkcs #11 providers
- to support curves beyond suite-b, such restriction only applies
- to the internal crypto module
2016-06-24 14:13:59 -07:00
Kai Engert
1911d47990
Bug 1347336, decouple nss-pem from the nss package, patch contributed by Kamil Dudka
2016-06-22 15:20:39 +02:00
Elio Maldonado
f5c6a9ac04
Apply the patch that was last introduced
...
- Renumber and reorder some of the patches
- Resolves: Bug 1342158
2016-06-03 08:40:01 -07:00
Elio Maldonado
85c6e70f3c
Allow application requests to disable SSL v2 to succeed
...
- Resolves: Bug 1342158 - nss-3.24 does no longer support ssl V2, installation of IPA fails because nss init fails
2016-06-02 13:47:29 -07:00
Elio Maldonado
c460de4d23
Rebase to NSS 3.24.0
...
- Restore setting the policy file location
- Make ssl tests scripts aware of policy
- Ajust tests data expected result for policy
2016-05-29 10:14:36 -07:00
Elio Maldonado
29b52f2caf
Bootstrap build to rebase to NSS 3.24.0
...
- Temporarily not setting the policy file location
2016-05-25 19:55:49 -07:00
Elio Maldonado
fc09930b4d
Update nss_util_version and nss_softoken_version to 3.24.0
...
- Resolves: Bug 1336849 - nss-3.24 is available
2016-05-24 06:49:40 -07:00
Elio Maldonado
3648d70a92
Update to NSS 3.24.0
...
- Resolves: Bug 1336849 - nss-3.24 is available
- Update patches on account of the rebase
- Remove unused patches un account of the rebase
- Patch pem module to compile with wrning for unitilaized variables treated as errors
- Patch to skip some of the gtests as they use private calls and need to statically link with libnssutil.a
- TODO: bring this up with the external_tests framework developers upstream
2016-05-23 18:10:46 -07:00
Elio Maldonado
2e6c8d6f71
Change POLICY_FILE to "nss.config"
2016-05-12 12:04:57 -07:00
Elio Maldonado
299e9058d1
Change POLICY_FILE to "nss.cfg"
2016-04-22 08:25:14 -07:00
Elio Maldonado
21d9cd13e1
Change the POLICY_PATH to "/etc/crypto-policies/back-ends"
...
- Regenerate the check policy patch with hg to provide more context
- the nss-util portion included though not applied here but in nss-util
- todo: file bug upstream once we have done some testing
2016-04-20 08:49:00 -07:00
Elio Maldonado
b9c9bc550c
Fix typo in the last %changelog entry
2016-04-14 14:16:05 -07:00
Elio Maldonado
ea86d5898c
Load policy file if /etc/pki/nssdb/policy.cfg exists
...
- Resolves: Bug 1157720 - NSS should enforce the system-wide crypto policy
2016-03-24 15:18:49 -07:00
Elio Maldonado
b22cf46b7c
Remove unused patch rendered obsolete by pem update
2016-03-08 15:41:14 -08:00
Elio Maldonado
2a45956d5b
Update pem sources to latest from nss-pem upstream
...
- Resolves: Bug 1300652 - [PEM] insufficient input validity checking while loading a private key
- Fixes memory leak on failed ASN1 decoding of RSA keys with rebase
- https://git.fedorahosted.org/cgit/nss-pem.git
2016-03-08 06:47:48 -08:00
Elio Maldonado
e4343992f0
Rebase to NSS 3.23
2016-03-05 12:42:26 -08:00
Elio Maldonado
c0f6099656
Requite nss and nss-softokn version 3.22.2
2016-02-27 16:45:41 -08:00
Elio Maldonado
69c688f3b5
Rebase to NSS 3.22.2
...
- Resolves: Bug 1304135 - nss-3.22.2 is available
2016-02-26 21:59:01 -08:00
Elio Maldonado
fe44847276
Fix ssl2/exp test disabling to run all the required tests
2016-02-22 20:49:28 -08:00
Elio Maldonado
c281a339e1
Rebase to NSS 3.22.1
...
- Bug 1304135 - nss-3.22.1 is available
2016-02-21 11:30:52 -08:00
Elio Maldonado
317de01a4d
Update .gitignore as part of updating to nss 3.22
2016-02-08 13:47:18 -08:00
Elio Maldonado
5953345108
Update to NSS 3.22
2016-02-08 07:57:39 -08:00
Fedora Release Engineering
f7ddea92df
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
2016-02-04 10:56:52 +00:00
Elio Maldonado
5fe1656484
Resolves: Bug 1299040 - Enable ssl_gtests upstream test suite
...
- Remove 'export NSS_DISABLE_GTESTS=1' go ssl_gtests are built
- Use %define when specifying the nss_tests to run
2016-01-15 11:12:08 -08:00