rpms/nss
7
0
Fork 0
Code Issues Pull Requests Releases Activity
630 Commits 7 Branches 56 Tags 5.9 MiB
7f30e21d0f
Commit Graph

530 Commits

Author SHA1 Message Date
Elio Maldonado
b03345792c Update to NSS_3_14_3_RTM 
- sync up pem rsawrapr.c with softoken upstream changes for nss-3.14.3
- Resolves: rhbz#908257 - CVE-2013-1620 nss: TLS CBC padding timing attack
- Resolves: rhbz#909775 - specfile support for AArch64
- Resolves: rhbz#910584 - certutil -a does not produce ASCII output
- Resolves: rhbz#896651 - PEM module trashes private keys if login fails,
  patch contributed by Nalin Dahyabhai
 2013-02-17 20:02:37 -08:00
Elio Maldonado
0370142fd0 Add pem module fix, spec file support for AArch64 and document additional fix 
- Resolves: rhbz#896651 - PEM module trashes private keys if login fails
- Resolves: rhbz#909775 - specfile support for AArch64
- Resolves: rhbz#910584 - certutil -a does not produce ASCII output, upstream fix
 2013-02-16 15:02:25 -08:00
Elio Maldonado
b3f05b9f44 Update to NSS_3_14_3_RTM 
- sync up pem rsawrapr.c with softoken upstream changes for nss-3.14.3
- these changes are in experimental RSA OAEP code currently in a state of flux
- and required for the PEM module to compile with the nss 3.4.3 update
 2013-02-15 15:34:49 -08:00
Elio Maldonado
96957e805a Allow building nss softoken against older sqlite 
- Adding a patch already applied upstream by Kai Engert
 2013-02-04 15:12:54 -08:00
Elio Maldonado
7a7f48e712 Reenable patch to run the freebl tests that were ron as part of the nss-softokn build 
- continue turning off the ocsp tests
 2013-02-01 13:39:03 -08:00
Elio Maldonado
830ee96f85 Update to NSS_3_14_2_RTM 
- Update the minimum requred versiobs of nspr, nss-util, and nss-softokn
- Remove patch obsoleted by the update and update others
- Restore missing second half of the cbc random iv by default patch
- Restore the freebl tests patch until we build without nsssoftoken
 2013-02-01 11:24:15 -08:00
Kai Engert
ca00551ea7 - Update to NSS_3_14_1_WITH_CKBI_1_93_RTM 2013-01-03 19:17:24 +01:00
Elio Maldonado
b13dc44579 Require nspr >= 4.9.4 
- Fix changelog invalid dates
- Patch highlights nss-softoken tests we plan to disable in upcoming release
 2012-12-22 17:50:41 -08:00
Elio Maldonado
5a0d6572e1 Update to NSS_3_14_1_RTM 
- added a patch to not compile the softoken/freebl tests
- needed due to upstream changes to coreconf
- to be addjusted or removed if patch to enabled building nss without softoken is accepted upstream
 2012-12-16 22:25:51 -08:00
Elio Maldonado
edea054ffc Bug 879978 - Install the nssck.api header template where mod_revocator can access it 
- Install nssck.api in /usr/includes/nss3/templates, otherwise it won't install
 2012-12-11 21:26:58 -08:00
Elio Maldonado
461744f676 Bug 879978 - Install the nssck.api header template in a place where mod_revocator can access it 
- Install nssck.api in /usr/includes/nss3
 2012-11-27 21:55:17 -08:00
Elio Maldonado Batiz
6e1a26a079 Resolves: rhbz#870864 - Add support in NSS for Secure Boot 2012-11-19 21:45:58 -08:00
Elio Maldonado
19ad65d608 Disable bypass code at build time and return failure on attempts to enable at runtime 
- Bug 806588 - Disable SSL PKCS #11 bypass at build time
 2012-11-09 17:20:07 -08:00
Elio Maldonado
fef81756fd Rename the patch to reflect the correct bug number 
- Renamed: Bug-872838-fix-pk11wrap-locking.patch -> Bug-872124-fix-pk11wrap-locking.patch
- Fixed the reference in spec file

Please enter the commit message for your changes. Lines starting
 2012-11-04 22:00:38 -08:00
Elio Maldonado
b5d7c8e158 Fix the last changelog entry and quote the correct bug number. 2012-11-04 17:07:18 -08:00
Elio Maldonado
247ec13766 Fix pk11wrap locking to fix 'fedpkg new-sources' and 'fedpkg update' hangs 
- Bug 87838 - nss-3.14 causes fedpkg new-sources breakage
- Fix should be considered preliminary since the patch may change upon upstream approval
 2012-11-04 15:44:01 -08:00
Elio Maldonado
f2639d5e85 Fix the change log by adding a missing entry 
- Add missing - * Wed Oct 31 2012 Elio Maldonado <emaldona@redhat.com> - 3.14-5
 2012-11-04 15:31:50 -08:00
Elio Maldonado
93eeb31cf1 Add a dummy source file for testing /preventing fedpkg breakage 
- Helps test the fedpkg new-sources and upload commands for breakage by nss updates
- Related to Bug 872124 - nss 3.14 breaks fedpkg new-sources
 2012-11-01 16:07:26 -07:00
Elio Maldonado
e4dd1babb0 Fix a previous unwanted merge from f18 
- Update the SS_SSL_CBC_RANDOM_IV patch to match new sources while
- Keeping the patch disabled while we are still in rawhide and
- State in comment that patch is needed for both stable and beta branches
- Update .gitignore to download only the new sources
 2012-11-01 11:36:35 -07:00
Elio Maldonado
edf5ff0634 Reenable patch to set NSS_SSL_CBC_RANDOM_IV to 1 by default 
- Bug 872124 - nss 3.14 breaks fedpkg new-sources
 2012-11-01 09:29:38 -07:00
Elio Maldonado
c2e20984e1 Fix the spec file so sechash.h gets installed 
- Resolves: rhbz#871882 - missing header: sechash.h in nss 3.14
 2012-10-31 14:05:29 -07:00
Elio Maldonado
192d1d33fb Update the license to MPLv2.0 2012-10-27 01:58:29 -04:00
Elio Maldonado
3be7379237 Use only -f when removing unwanted headers 
- alerted to this flaw by Kamil Dudka
- unneeded as we are only removing headers, not directories, and a dangerous practice
 2012-10-24 11:13:25 -07:00
Elio Maldonado
982583d915 Add secmodt.h to the headers installed by nss-devel 
- nss-devel must install secmodt.h which moved from softoken to pk11wrap with nss-3.14
 2012-10-23 18:48:54 -04:00
Elio Maldonado
b11609d88a Update to NSS_3_14_RTM 2012-10-22 14:49:08 -07:00
Elio Maldonado
1f01ab68b1 Update to NSS_3_14_RC1 
- update nss-589636.patch to apply to httpdserv
- turn off ocsp tests for now
- remove no longer needed patches
- remove headers shipped by nss-util
 2012-10-21 20:47:52 -04:00
Kai Engert
53a120c4af * Fri Oct 05 2012 Kai Engert <kaie@redhat.com> - 3.13.6-1 
- Update to NSS_3_13_6_RTM
 2012-10-06 00:22:39 +02:00
Elio Maldonado
ab9d670692 Rebase pem sources to fedora-hosted upstream to pick up two fixes from rhel-6.3 
- Resolves: rhbz#847460 - Fix invalid read and free on invalid cert load
- Resolves: rhbz#847462 - PEM module may attempt to free uninitialized pointer
- Remove unneeded fix gcc 4.7 c++ issue in secmodt.h that actually undoes the upstream fix
 2012-08-27 16:19:41 -07:00
Elio Maldonado
99a740d2ee Fix pluggable ecc support 
- Build nss in three phases
- Phase 1: build softoken, freebl, and util with NSS_ENABLE_ECC unset
- Phase 2: build the rest of nss (muinus bltest and fipstest) with NSS_ENABLE_ECC and NSS_ECC_MORE_THAN_SUITEB set
- Phase 3: build bltest and fipstest with NSS_ENABLE_ECC unset as in phsae 1
 2012-08-13 15:05:06 -07:00
Dennis Gilmore
bd7e7ae750 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild 2012-07-20 00:20:58 -05:00
Elio Maldonado
f304d0d0cf Fix checkin comment to prevent unwanted expansions of percents 
- Done on previous commit but must retag now
 2012-07-01 11:42:00 -07:00
Elio Maldonado
18cd8ce5de Fix the checkin comment to use %% 2012-07-01 11:33:54 -07:00
Elio Maldonado
967fa1be0d Require nspr 4.9.1 2012-07-01 10:35:21 -07:00
Elio Maldonado
7011f18b86 Enable sha224 portion of powerup selftest when running test suites 
- That disabling was meant for RHEL-6 wich at time has and older softoken
 2012-07-01 10:25:16 -07:00
Elio Maldonado
6b33cec549 Resolves: Bug 830410 - Missing Requires %{?_isa} 
- Use Requires: %{name}%{?_isa} = %{version}-%{release} on tools
- Drop zlib requires which rpmlint reports as error E: explicit-lib-dependency zlib
 2012-07-01 10:13:07 -07:00
Elio Maldonado Batiz
e1a1b3583b Bug 833529 - revert unwanted change to nss.pc.in 
- Remove the /nss3 fom Lib: line in nss.pc.in
 2012-06-20 21:58:09 -07:00
Elio Maldonado
580fd0d7b9 Resolves: rhbz#833529 - Remove unwanted space from the Libs: line on nss.pc.in 2012-06-19 10:55:57 -07:00
Elio Maldonado
a27d98a9ec Update to 3.13.5 2012-06-18 07:20:04 -07:00
Elio Maldonado
c38003c691 Resolves: Bug 812423 - nss_Init leaks memory, fix from RHEL 6.3 
- Fix conributed by Kamil Dudka
 2012-04-13 10:10:57 -07:00
Elio Maldonado
41064271a8 Resolves: Bug 805723 - Library needs partial RELRO support added 
- Patch coreconf/Linux.mk as done on RHEL 6.2
 2012-04-08 11:13:29 -07:00
Elio Maldonado
034c16be36 Merge branch 'master' into f17 
- Update to NSS_3_13_4_RTM
- Update the nss-pem source archive to the latest version
- Remove no longer needed patches
- Resolves: Bug 806043 - use pem files interchangeably in a single process
- Resolves: Bug 806051 - PEM various flaws detected by Coverity
- Resolves: Bug 806058 - PEM pem_CreateObject leaks memory given a non-existing file name
 2012-04-06 15:26:15 -07:00
Elio Maldonado
5203007534 Update to NSS_3_13_14_RTM 2012-04-06 10:06:51 -07:00
Elio Maldonado
310e64d3c2 Update the nss-pem source archive to the latest version 
- Resolves: Bug 806043 - use pem files interchangeably in a single process
- Resolves: Bug 806051 - PEM various flaws detected by Coverity
- Resolves: Bug 806058 - PEM pem_CreateObject leaks memory given a non-existing file name
- Remove patches obsoleted by the nss and pem updates
 2012-04-02 13:34:11 -07:00
Elio Maldonado
c408966515 Require nss-util and nss-softokn at 3.12.4 2012-04-01 17:24:02 -07:00
Elio Maldonado
89045d8452 Update to NSS_3_13.4_BETA1 2012-04-01 16:35:48 -07:00
Elio Maldonado Batiz
51c4dcf0e0 Merge branch 'master' into f17 2012-03-27 15:26:25 -07:00
Elio Maldonado
39b507ea3c - Resolves: Bug 805723 - Library needs partial RELRO support added 2012-03-21 15:01:07 -07:00
Elio Maldonado
19fee62ac7 Enable the Patch29: nss-ssl-cbc-random-iv-off-by-default.patch 
- F17 is already aplha, let's treat it as a stable branch
- Todo: Ask communinty members to try turning it on and provide
- feedack on servers and clients that may still be broken.
 2012-03-09 18:07:15 -08:00
Elio Maldonado Batiz
7d1bd46bd6 Cleanup the spec file 
- Add references to the upstream bugs
- Fix typo in Summary for sysinit
 2012-03-09 14:40:23 -08:00
Elio Maldonado
3ccc11c806 Pick up fixes from RHEL 
- Resolves: rhbz#800674 - Unable to contact LDAP Server during winsync
- Resolves: rhbz#800682 - Qpid AMQP daemon fails to load after nss update
- Resolves: rhbz#800676 - NSS workaround for freebl bug that causes openswan to drop connections
 2012-03-07 18:39:32 -08:00
Elio Maldonado Batiz
85a1075a8d Require nss-softokn 3.13.3 as part of the update to NSS_3_13_3_RTM 2012-03-01 12:48:17 -08:00
Elio Maldonado
ca7f73c317 - Update to NSS_3_13_3_RTM 
- Keeping the requires on nss-softokn at 3.13.1 temporarily
- Removed nss-ckbi-1.88.rtm.patch which we no longer need due to the update
 2012-02-29 19:20:40 -08:00
Tom Callaway
6e9d7578fc fix gcc47 issue causing xulrunner to ftbfs in rawhide 2012-01-30 17:10:53 -05:00
Elio Maldonado
81470bd3c4 - Resolves: Bug 784672 - nss should protect against being called before nss_Init 2012-01-26 14:56:36 -08:00
Dennis Gilmore
b6f8eca453 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild 2012-01-13 05:16:40 -06:00
Elio Maldonado
1f56c5ccc5 - Deactivate a patch currently meant for stable branches only 2012-01-06 16:01:07 -08:00
Elio Maldonado
40928cb8e3 - Resolves: Bug 770682 - nss update breaks pidgin-sipe connectivity 
- Set NSS_SSL_CBC_RANDOM_IV to 0 by default and change to 1 on user request
 2012-01-06 15:50:45 -08:00
Elio Maldonado
d5f0675cc9 - Revert to using current nss_softokn_version 
- Patch to deal with lack of sha224 is no longer needed
 2011-12-13 14:29:45 -08:00
Elio Maldonado
def217ea25 - Resolves: Bug 754771 - [PEM] an unregistered callback causes a SIGSEGV 2011-12-13 06:54:05 -08:00
Elio Maldonado
543ae9ce83 - Resolves: Bug 750376 - nss 3.13 breaks sssd TLS 
- Fix how pem is built so that nss-3.13.x works with nss-softokn-3.12.y
- Only patch blapitest for the lack of sha224 on system freebl
- Completed the patch to make pem link against system freebl
 2011-12-12 15:42:30 -08:00
Elio Maldonado
109e79922c - Drop the Batiz from my name, it confuses people 2011-12-06 16:56:09 -08:00
Elio Maldonado
3fe2df48eb - Remove reference to obsoleted terminalrecord.patch 2011-12-05 15:54:44 -08:00
Elio Maldonado
f67889f49c - Fix the missing CERTDB_TERMINAL_RECORD symbol problem 
- Removed unwanted /usr/include/nss3 in front of the normal cflags include path
- Removed ugly and unnecessary patch dealing with CERTDB_TERMINAL_RECORD
 2011-12-05 15:51:15 -08:00
Elio Maldonado
321e446e77 - Bug 75036 Enable usage of nss-3.13.3 with nss-softokn-3.12.x 2011-12-04 23:21:22 -08:00
Elio Maldonado
cb85c9e1da - Bug 750376 Enable updating nss to 3.13.x while keeping nss-softokn at 3.12.9 
- Statically link the pem module against system freebl found in buildroot
- Disable sha224-related powerup selftest until we update softokn
- Disable sha224 and rsapss tests which nss-softokn 3.12.x doesn't support
- nss-softokn 3.12.9 was submitted for FIPS 140 minor revalidation
 2011-12-04 23:08:24 -08:00
Elio Maldonado
953f3cef9d - Rebuild with nss-softokn from 3.12 in the buildroot 
- Allows the pem module to statically link against 3.12.x freebl
- Required for using nss-3.13.x with nss-softokn-3.12.y for a merge into ia new rhel git repo
- Build to be temporarily placed on buildroot override but never pushed to updates-testing
 2011-12-02 14:21:08 -08:00
Elio Maldonado
1c8a4130f1 - Merge from master 
- This is an experimental build to fix Bug 750376
- To be added to the buildroot override but should not be pushed to updates-testing
  until the bug has been verified as fixed
 2011-11-28 15:37:12 -08:00
Elio Maldonado
0598777c8d Merge branch 'master' into f16 
Keeping softokn at 3.12.10 as we are bootstrapping the system
 2011-11-07 08:36:10 -08:00
Elio Maldonado
cc7766a55d - Fix broken dependencies by updating the nss-util and nss-softokn versions 2011-11-04 12:26:07 -07:00
Elio Maldonado
28928af492 - Fix the name of the patch file 2011-11-03 20:44:32 -07:00
Elio Maldonado
4a87b24862 - Update to NSS_3_13_1_RTM 
- Update builtin certs to those from NSSCKBI_1_88_RTM
 2011-11-03 17:21:40 -07:00
Elio Maldonado
7b078b5247 - Update to NSS_3_13_RTM 2011-10-15 20:24:39 -07:00
Elio Maldonado
bc4ac545c9 - Update to NSS_3_13_RC0 
- Adjust patches to new sources
- Remove builtin patch which isn't needed due to the update
- update sources
 2011-10-08 12:04:26 -07:00
Elio Maldonado
3586aff4e7 - Fix attempt to free initialized pointer (#717338) 
- Fix leak on pem_CreateObject when given non-existing file name (#734760)
- Fix pem_Initialize to return CKR_CANT_LOCK on multi-treaded calls (#736410)
 2011-09-14 12:28:24 -07:00
Kai Engert
a1e61fa589 NSSCKBI_1_87_RTM 2011-09-06 22:51:08 +02:00
Kai Engert
c26c5b1326 NSSCKBI_1_87_RTM 2011-09-06 22:48:46 +02:00
Elio Maldonado
d7c5a94ba8 - Update to NSS_3_12_11_RTM 2011-08-09 18:31:35 -07:00
Elio Maldonado
a7fb38e80b - Indicate the provenance of stripped source tarball (#688015) 
- Add the code stripping script to the sources
 2011-07-23 20:16:38 -07:00
Michael Schwendt
e2ce6e022c Provide virtual -static package to meet guidelines (#609612). 2011-06-27 20:17:03 +02:00
Elio Maldonado
5c50a33200 - Enable pluggable ecc support (#712556) 
- Disable the nssdb write-access-on-read-only-dir tests when user is root (#646045)
 2011-06-11 18:05:04 -07:00
Dennis Gilmore
321ca50d42 fix typo in date 2011-05-20 09:09:41 -05:00
Dennis Gilmore
7232ae1bc7 make the test suite non fatal on arm arches 2011-05-20 09:07:45 -05:00
Elio Maldonado
c409805d45 - Fix crmf hard-coded maximum size for wrapped private keys (#703658) 
- Use the safer bound off
- ( ( RSA_MAX_MODULUS_BITS / 8 ) *8 ) = RSA_MAX_MODULUS_BITS
- which will accomodate other algorithms
 2011-05-17 09:07:55 -07:00
Elio Maldonado
656b5456ab - Update to NSS_3_12_10_RTM 2011-05-06 14:53:40 -07:00
Elio Maldonado
976de5ebbe - Update to NSS_3_12_10_BETA1 
- Update nss-539183.patch for new 3.12.10 sources
 2011-04-27 18:05:46 -07:00
Elio Maldonado
6e1b6bdc24 - Implement PEM logging using NSPR's own (#695011) 2011-04-12 11:53:46 -07:00
Elio Maldonado
4a912ae4d0 Fix the tag name in changelog comment 2011-03-23 15:17:21 -07:00
Elio Maldonado
0b0026515f - Update to NSS_3.12.9_WITH_CKPI_1_82_RTM 2011-03-23 15:13:45 -07:00
Elio Maldonado
c40f16fc52 Bug 539183 - Short-term fix for ssl test suites hangs on ipv6 type connections 
Change selfserv to use a dual-stack IPv6 listening socket, which can accept
connections from both IPv4 and IPv6 clients.  NSPR's IPv6 sockets have the
IPV6_V6ONLY socket option default to false.
 2011-02-24 15:05:17 -08:00
Elio Maldonado
ab4de6fd80 - Add to pkcs11-devel a requires on nss-softokn-freebl-freebl (#675196) 
- This is needed because the latter now owns headers that pkcs11-devel depends on.
 2011-02-18 13:09:28 -08:00
Elio Maldonado
87fcbd4706 - Run the test suites in the check section (#677809) 2011-02-15 20:20:54 -08:00
Elio Maldonado
882fcb9fcf Fix fips mode switch handling bug detected while running JSS tests 
Fix NSS to swap the internal key slot on fips mode switches
Fix white space usage in cpp reserved words patch per reviewer request
 2011-02-11 07:56:25 -08:00
Elio Maldonado
4c53349943 - Fix cms headers to not use c++ reserved words (#676036) 
- Reenabling Bug 499444 patches
 2011-02-10 11:58:38 -08:00
Elio Maldonado
a2f2732911 Temorarily revert patches for 499444 until all c++ reserved words are found and extirpated 2011-02-08 17:26:32 -08:00
Dennis Gilmore
114f631980 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild 2011-02-08 19:07:37 -06:00
Elio Maldonado
cab275f8b6 - Fix cms header to not use c++ reserved word (#676036) 
- Reenable patches for bug 499444
 2011-02-08 11:48:11 -08:00
Christopher Aillon
40064d5204 Revert patches for 499444 
since they use a C++ reserved word and cause compilation of Firefox to fail
 2011-02-08 09:39:11 -08:00
Elio Maldonado
1850759856 - Fix the earlier infinite recursion patch (#499444) 
- Remove a header that now nss-softokn-freebl-devel ships
 2011-02-04 15:20:54 -08:00
Elio Maldonado
453276ca4d Fix infinite recursion when encoding NSS enveloped/digested data (#499444) 
Add support in CMS for content types other than S/MIME
 2011-02-01 16:13:13 -08:00
Elio Maldonado
f76d0921cd Bug 633043: Update the patch to implement upstream review requests. 2011-01-31 13:04:01 -08:00
Elio Maldonado
5f7dfcf00d Update the cacert trust patch per upstream review (#633043) 
- Add comments to the new internal functions
- Rename macro to better reflect purpose and fix typos
- Patch matches the code as checked in upstream
 2011-01-26 10:59:29 -08:00
Elio Maldonado
612496b72d Bug 633043 - nss trusts certificates it shouldn't, fixed 
- Add patch to honor the user's cert trust preferences (#633043)
- Rename nss-sysinit-fix-trustorder.patch honor-user-trust-preferences.patch
- Remove nss-sysinit-userdb-first.patch, it's obsoleted by current patch
 2011-01-22 09:39:22 -08:00
Elio Maldonado
d7e6ef54a1 Update to 3.12.9 2011-01-12 17:46:43 -08:00
Elio Maldonado
fa715a1966 - Follow the fedora pre-release package naming guidelines 
- Using the nss-3.12.9-stripped.tar.bz source tar ball
 2010-12-27 10:55:39 -08:00
Elio Maldonado
9cfe30c547 - Update to NSS_3_12_9_BETA2 
- Fix libpnsspem crash when cacert dir contains other directories (#642433)
- Remove unused-patch
 2010-12-10 13:11:24 -08:00
Elio Maldonado
f5fbb3f944 Update to NSS_3_12_9_BETA1 2010-12-08 14:10:33 -08:00
Elio Maldonado
c45196731a - Update pem source tar with fixes for 614532 and 596674 
- Remove no longer needed patches
 2010-11-25 12:43:08 -08:00
Elio Maldonado
4c96b0e51a Update test certificate which had expired 2010-11-05 08:24:44 -07:00
Elio Maldonado
2cded812be Tell rpm to not veryfy md5, sixe, and mtime of the configuration files. 
Fixes 'rpm -qV nss-sysinit nss' failures.
 2010-10-31 09:47:13 -07:00
Elio Maldonado
7292dd3723 - Fix certificates trust order (#643134) 
- Apply nss-sysinit-userdb-first.patch last
 2010-10-18 15:54:32 -07:00
Elio Maldonado
50867d6093 Move triggerpostun -n nss-sysinit script ahead of the other ones (#639248) 2010-10-06 20:22:32 -07:00
Elio Maldonado
89b371d9fc Fix invalid %postun scriptlet (#639248) 2010-10-05 10:07:31 -07:00
Elio Maldonado
c5201d23da Improve the fixes for bugs 636787, 636792, 636801 
Replace posttrans sysinit scriptlet with a triggerpostun one (#636787)
Fix and cleanup the setup-nsssysinit.sh script (#636792, #636801)
 2010-09-29 11:46:10 -07:00
Elio Maldonado
c51d121d29 Add posttrans sysinit scriptlet to re-enable nssysinit - resolves rhbz#636787. 2010-09-27 21:47:31 -07:00
Elio Maldonado
53ccaaaa26 Changes related to the fix for 636787 and 609612 
system-pkcs11.txt has nss-sysinit enabled (#636787)
Added provides pkcs11-devel-static to comply with packaging guidelines (#609612)
 2010-09-25 13:10:51 -07:00
Elio Maldonado
06f202356f Fix the nss_util_version and nss_softokn_version to be 3.12.8 2010-09-23 17:52:31 -07:00
Elio Maldonado
1e21f59c8c Update to 3.12.8 and resolve bugs 636787, 636787, 636801 
nss.spec prevents disabling of nss-sysinit on package upgrade - #636787
setup-nsssysinit.shc creates pkcs11.txt with correct permissions regardless of umask - #636792
setup-nsssysinit.sh reports whether nss-sysinit is turned on or off - #636801
 2010-09-23 17:45:52 -07:00
Elio Maldonado
958c0f4fd5 Update to NSS 3.12.8 RC0 2010-09-19 13:19:26 -07:00
Elio Maldonado
4a3d4a018a Fix nss-util_version and nss_softokn_version required to be 3.12.7.99.3. 
This is the currently higest version that can be satisfied, previous value caused build breakage.
 2010-09-05 11:03:04 -07:00
Elio Maldonado
759a662b45 Update for NSS 3.12.8 Beta 3 2010-09-04 13:24:39 -07:00
Elio Maldonado
5cb30e27e1 Change BuildRequries to available version of nss-util-devel. 2010-08-30 15:56:50 -07:00
Elio Maldonado
2becd412b2 Complete the change log 2010-08-29 12:56:11 -07:00
Elio Maldonado
8e3710e2cf Rely on NSS_USE_SYSTEM_SQLITE for no local sql 
Define NSS_USE_SYSTEM_SQLITE and remove nss-nolocalsql patch
Fix rpmlint warnings about macros in comments and changelog
Build requires nss-softokn-devel >= 3.12.7
 2010-08-29 12:46:20 -07:00
Elio Maldonado
1c9dbe330c Updating to 3.12.7 2010-08-18 18:01:57 -07:00
Elio Maldonado
c647f9551c Apply the patches to fix rhbz#614532 
Added 0001-Add-support-for-PKCS-8-encoded-private-keys.patch
Added 0001-Do-not-define-SEC_SkipTemplate.patch
Modified nss.spec to apply the patches
 2010-08-14 15:54:14 -07:00
Elio Maldonado
ebb7b25b6f Remove pem source tar 2010-08-09 21:36:17 -07:00
Elio Maldonado
37584d01a1 Update source tar to add support for PKCS#8 encoded PEM RSA private key files rhbz#614532 2010-08-09 15:06:09 -07:00
Elio Maldonado
a3ec3dfe11 * Fri Jul 31 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.6-9 
- Fix nsssysinit to return userdb ahead of systemdb (#603313)
 2010-07-31 09:51:45 -07:00
Dennis Gilmore
99c5eddfda fix typo 2010-06-08 19:59:30 +00:00
Dennis Gilmore
f2b0bb17ab changes the requires and BuildRequires versions from = to >= 2010-06-08 19:58:16 +00:00
Elio Maldonado
7edcfc8148 Require nss-softoken 3.12.6 2010-06-08 19:01:01 +00:00
Elio Maldonado
fbbc54fbf1 Fix SIGSEGV within CreateObject rhbz#596674 2010-06-07 04:41:51 +00:00
Elio Maldonado
0b1d72fd87 Synch. up pem source tar with git repo to pick up various fixes 2010-04-12 22:46:45 +00:00
Elio Maldonado
f1e2b65a89 Update test cert in setup phase instead of changing the source tar ball 2010-04-08 01:38:51 +00:00
Elio Maldonado
0578cf1b19 Fix requires for nss-sysinit and update an expired - #576071, #580207 2010-04-07 23:29:25 +00:00
Elio Maldonado
c2a52bb832 Add sed to sysinit requires as setup-nsssysinit.sh requires it - 
rhbz#576071
 2010-04-06 23:37:08 +00:00
Elio Maldonado
b84ca16585 Remove nss-softokn from requires in ns.pc - rhbz#575001 2010-03-19 04:13:21 +00:00
Elio Maldonado
ba88c56bfa Reenable all tests 2010-03-07 02:05:27 +00:00
Elio Maldonado
688080c659 Add renegotiate-transitional patch and disable ssl tests suites 2010-03-06 21:52:07 +00:00
Elio Maldonado
f9076c4e22 Update to 3.12.6 2010-03-06 21:13:40 +00:00
Elio Maldonado
90bba8e3ec Pick up fixes from F-12 2010-01-25 22:10:27 +00:00
Elio Maldonado
6bcb3eb1cd retagging 2010-01-13 15:21:37 +00:00
Elio Maldonado
19b99b2cd7 Fix sigsegv on call to NSS_Initialize - rhbz #553638 2010-01-13 06:13:28 +00:00
Elio Maldonado
d06d666dbb Address review comments in patch #547860 2010-01-07 02:37:35 +00:00
Elio Maldonado
88e3f7f389 Temporarily disabling the ssl tests 2009-12-31 22:14:53 +00:00
Elio Maldonado
c33feabbec Fix nsssysinit to allow root to modify the nss system database (#547860) 2009-12-31 01:21:59 +00:00
Elio Maldonado
2d16454a8b Renamed nsssysinit.patch to 545779.patch 2009-12-31 00:07:36 +00:00
Elio Maldonado
d2c868c9a3 Fix error introduced when adapting the 546221 patch 2009-12-26 05:14:22 +00:00
Elio Maldonado
e10b9063cb Removed some left-over fprintf lines from patch 2009-12-20 06:17:58 +00:00
Elio Maldonado
4edf8a9398 Fix a misconstructed patch for #546221 2009-12-18 19:36:23 +00:00
Elio Maldonado
9287622223 sysinit requires coreutils for post install scriplet (#547067) 2009-12-18 09:26:37 +00:00
Elio Maldonado
911a125478 Patch nsssysinit to set the default flags on the crypto module - #545779 2009-12-12 06:48:43 +00:00
Elio Maldonado
99bd1bfc40 Remove unneeded patch 2009-12-09 17:04:26 +00:00
Elio Maldonado
037460c0f7 Reatagging to pick up another patch 2009-12-04 05:07:04 +00:00
Elio Maldonado
319760bdff Update to 3.12.5 2009-12-04 04:24:51 +00:00
Elio Maldonado
2f6ca3a1fa Update to 3.12.5 2009-12-03 22:13:38 +00:00
Elio Maldonado
b936bcd440 Retagging 2009-11-20 17:49:08 +00:00
Elio Maldonado
dfe95ffa5f Require nss-softoken of same architecture as nss (#527867) and Merge 
setup-nsssysinit.sh improvements from F-12 (#527051)
 2009-10-20 14:12:59 +00:00
Elio Maldonado
e498f6c61b Fix setup-nsssysinit to handle more general formats (#527051) User no 
longer prompted for a password when listing keys an empty system db
    (#527048)
 2009-10-06 00:12:07 +00:00
Elio Maldonado
112062ceda Fix syntax error in setup-nsssysinit.sh that prevented uninstall 2009-09-27 19:15:08 +00:00
Elio Maldonado
f6653922f7 Fix sysinit to be under mozilla/security/nss/lib 2009-09-27 17:50:52 +00:00
Elio Maldonado
fb2fffccbb Add nss-sysinit activation/deactivation script 2009-09-26 17:22:20 +00:00
Elio Maldonado
98d8df1f81 Install system wide shared nssdb and update nssysinit patch 2009-09-19 16:35:44 +00:00
Elio Maldonado
6c848200f3 Reverting to having nssutil and -rpath-link in nss-config not to break 
other's builds - 522477
 2009-09-10 23:55:12 +00:00
Elio Maldonado
9c5e014b12 Add the nss-sysinit subpackage, add NSS_INCLUDE_DIR and NSS_LIB_DIR to the 
path
 2009-09-09 22:38:09 +00:00
Elio Maldonado
c7deab353c Installing shared libraries to %{_libdir} 2009-09-08 18:32:10 +00:00
Elio Maldonado
377991d930 retagging to pick up new sources 2009-09-07 19:19:31 +00:00
Elio Maldonado
9452372858 Update pem enabling source tar with latest fixes (509705, 51209) 2009-09-07 19:11:04 +00:00
Elio Maldonado
1f48a6ef4d PEM module fixes to implement memory management for internal objects and 
fix crash when processing malformed key files : bz #509705, #51209
 2009-09-06 20:39:23 +00:00
Elio Maldonado
4f6e1c66fc Single copy if the shared libraries (521155), no rpath-link in nss-config 
nss.spec (rpmlint)
 2009-09-05 23:09:42 +00:00
Elio Maldonado
5defb2b727 update to 3.12.4 2009-09-05 00:57:47 +00:00
Elio Maldonado
aed9acfe30 Fix FORTIFY_SOURCE buffer overflows in test suite on ppc and ppc64 - bug 
519766
 2009-09-01 00:11:24 +00:00
Elio Maldonado
2461dd439b Restore the stubs and nolocalsql patches, the latter fixes sqlite 
dependency problems - bug 520277
 2009-08-31 03:21:20 +00:00
Elio Maldonado
3069fb3fb9 restore require sqlite, it's a legtimate requirement and not the cause of 
the nss-tools dependency failures
 2009-08-31 00:25:16 +00:00
Elio Maldonado
4bf33e7173 Do not require sqlite for nss, it breaks nss-util install - bug 520277 2009-08-30 07:13:53 +00:00
Elio Maldonado
d4d1c79960 Added nss_util_version and nss_softokn_version for the required versions of 
those packages
 2009-08-29 20:46:40 +00:00
Elio Maldonado
2e4cd3ef83 Build with temprary nss.pc.in hack to unblock others, removed obsolete 
nss-prelink.conf
 2009-08-28 20:44:12 +00:00
Warren Togami
cfe6bf928d caolan's nss.pc patch 2009-08-28 14:26:58 +00:00
Elio Maldonado
440dee86d3 Bump the release number for a chained build of nss-util, nss-softokn and 
nss
 2009-08-28 05:42:50 +00:00
Elio Maldonado
f6c1d3c53e Add BuildRequres nss-softokn and nss-util as build runs tests 2009-08-28 01:38:30 +00:00
Elio Maldonado
56e4ce99ba Disable test suite until ppc crashing bug if fixed 2009-08-27 19:23:56 +00:00
Elio Maldonado
b559a434b0 disabling test until we invertigate bug 519766 2009-08-27 18:55:24 +00:00
Elio Maldonado
aa8c558d79 Delete patched taht belong in nss-softkn, remove spurious exec perms for 
nss.pc
 2009-08-27 17:27:53 +00:00
Elio Maldonado
cd4fd0c0c9 Fix BuildRequires nss-softokn-devel release number 2009-08-26 17:38:29 +00:00
Elio Maldonado
3a2758790c Downgrade the release number for the BuildRequires on nss-softokn-devel 2009-08-26 17:33:41 +00:00
Elio Maldonado
85b2938cf6 fix nss.pc.in to have one single requires line - bug 519391 2009-08-26 16:36:26 +00:00
Dennis Gilmore
3cecc97c63 further softokn clenups 2009-08-25 21:49:52 +00:00
Dennis Gilmore
3135805eb4 remove the softokn packages 2009-08-25 20:10:08 +00:00
Dennis Gilmore
45322aee51 bump 2009-08-25 03:19:16 +00:00
Dennis Gilmore
cce5278c40 dont install the nss-util pkgconfig files 2009-08-25 03:18:41 +00:00
Dennis Gilmore
22aee06a3f remove from -devel %files the 3 headers that are in nss-util-devel 2009-08-24 23:31:26 +00:00
Dennis Gilmore
54f73856f4 clean up post and postun for util package 2009-08-24 22:43:21 +00:00
Dennis Gilmore
e798b1ce92 drop the nss-util subpackages 2009-08-24 22:41:06 +00:00
Elio Maldonado
e9604df12f split off nss-softokn and nss-util as subpackages with their own rpms 2009-08-23 21:17:44 +00:00
Elio Maldonado
cf5144616f install libnssutil3 while nss-util package is in untagged state 2009-08-21 01:48:33 +00:00
Dennis Gilmore
32013d0f06 ppacrently -8 was already tagged 2009-08-20 19:43:59 +00:00
Dennis Gilmore
86f79bc9bd dont install libnssutil3.so its part of nss-util 2009-08-20 19:41:35 +00:00
Elio Maldonado
47b4b2b7f6 Reverting to the last stable tag nss-3_12_3_99_3-7_1_fc12 2009-08-20 18:28:37 +00:00
Elio Maldonado
f1329e78eb Split off nss-softokn and nss-util as their own packages rhbz# 508479 2009-08-20 00:41:40 +00:00
Elio Maldonado
29f74fb2bf Fix to preserve the configuration files and other spec file problems 
uncovered by Fedora_12_Mass_Rebuild
 2009-08-16 16:31:55 +00:00
Jesse Keating
c0eb0acd9a - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild 2009-07-25 19:34:25 +00:00
Elio Maldonado
83fe6ce8bc revert to previous version 2009-07-07 16:11:33 +00:00
Elio Maldonado
a81017aa37 changed softkn to softokn 2009-07-07 16:03:55 +00:00
Elio Maldonado
1d5ac5c524 removed two patch files which are no longer needed and fixed previous 
change log
 2009-06-23 01:27:07 +00:00
Elio Maldonado
dad318a3a0 updated pem module incorporates fixes for 483855, 429175, 501080, 501118 
501058, 500815, 500180, 501191
 2009-06-23 00:58:55 +00:00
Elio Maldonado
afba8cf133 restore a change log line that got accidentally deleted 2009-06-09 16:43:59 +00:00
Elio Maldonado
8b9004738c add patch for bug 502133 2009-06-09 05:13:20 +00:00
Kai Engert
5f40643e20 - rebuild with higher release number for upgrade sanity 2009-06-05 14:59:48 +00:00
Kai Engert
84365bbb46 - updated to NSS_3_12_4_FIPS1_WITH_CKBI_1_75 2009-06-05 01:58:20 +00:00
Kai Engert
52a319230b - re-enable test suite 
- add patch for upstream bug 488646 and add newer paypal certs in order to
    make the test suite pass
 2009-05-08 20:07:13 +00:00
Kai Engert
38b8c14270 - re-enable test suite 2009-05-07 20:26:11 +00:00
Kai Engert
7e3acf486b remove bogus line 2009-05-07 20:24:11 +00:00
Kai Engert
6dc6a9a7fe - re-enable test suite 2009-05-07 20:11:33 +00:00
Kai Engert
cbf4a20bfb - add conflicts info in order to fix bug 499436 2009-05-06 16:45:13 +00:00
Kai Engert
c713a53f6e - ship .chk files instead of running shlibsign at install time 
- include .chk file in softokn-freebl subpackage
- add patch for upstream nss bug 488350
 2009-04-14 22:21:51 +00:00
Kai Engert
79bf6c1c6e - Update to NSS 3.12.3 2009-04-14 15:21:19 +00:00
Kai Engert
d02b896095 - temporarily disable the test suite because of bug 494266 2009-04-06 14:46:53 +00:00
Kai Engert
e9d8216884 - fix softokn-freebl dependency for multilib (bug 494122) 2009-04-06 10:33:23 +00:00
Kai Engert
22ee35ce92 - introduce separate nss-softokn-freebl package 2009-04-02 22:06:40 +00:00
Kai Engert
37d66db220 - disable execstack when building freebl 2009-04-02 16:36:08 +00:00
Kai Engert
7c0fe911a5 - add upstream patch to fix bug 483855 2009-03-31 23:05:13 +00:00
Kai Engert
724f4ea068 - build nspr-less freebl library 2009-03-31 21:41:15 +00:00
Kai Engert
5ff871a313 - Update to NSS_3_12_3_BETA4 2009-03-31 20:32:27 +00:00
Jesse Keating
25c0914795 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild 2009-02-26 06:10:01 +00:00
Kai Engert
df5886276b - use system zlib 2008-10-22 03:56:43 +00:00
Kai Engert
ce07e5f443 - update to NSS_3_12_2_RC1 2008-10-22 03:25:42 +00:00
Dennis Gilmore
a31a41ac9f add sparc64 to the list of 64 bit arches 2008-09-30 19:36:04 +00:00
Kai Engert
3434861fc6 - bug 456847, move pkgconfig requirement to devel package 2008-09-24 09:07:52 +00:00
Kai Engert
04409e9ac7 - Update to NSS_3_12_1_RC2 2008-09-05 19:24:57 +00:00
Kai Engert
75a9dc0dd7 - NSS 3.12.1 RC1 2008-08-22 21:48:09 +00:00
Kai Engert
59d263fa78 - fix bug bug 429175 in libpem module 2008-08-15 10:50:01 +00:00
Kai Engert
3a3e2a0570 rebase nss-enable-pem.patch 2008-08-05 23:36:23 +00:00
Kai Engert
7729d267a9 ... apparently I need both Requires and BuildRequires 
Tue Aug 05 2008 Kai Engert <kengert@redhat.com> - 3.12.0.3-5
- bug 456847, add Requires: pkgconfig
 2008-08-05 23:20:52 +00:00
Kai Engert
824971507b - bug 456847, Requires: pkgconfig 2008-08-05 23:13:24 +00:00
Kai Engert
f78be8f9b2 - nss package should own /etc/prelink.conf.d folder, rhbz#452062 
- use upstream patch to fix test suite abort
 2008-06-24 18:23:59 +00:00
Kai Engert
93ebcc19c9 - Update to NSS_3_12_RC4 2008-06-02 12:13:11 +00:00
Kai Engert
1575c26b70 - Update to NSS_3_12_RC2 2008-04-14 13:21:37 +00:00
Jesse Keating
246489240b - Zapping old Obsoletes/Provides. No longer needed, causes multilib 
headache.
 2008-03-20 18:01:56 +00:00
Kai Engert
bddacee193 - Update to NSS_3_12_BETA3 2008-03-17 20:58:41 +00:00
Kai Engert
a2b7a459f1 - NSS 3.12 Beta 2 
- Use /usr/lib{64} as devel libdir, create symbolic links.
 2008-02-22 18:15:54 +00:00
Kai Engert
21e39a1686 - Apply upstream patch for bug 417664, enable test suite on pcc. 2008-02-16 05:38:51 +00:00
Kai Engert
79f6667ff3 - Support concurrent runs of the test suite on a single build host. 2008-02-15 16:57:37 +00:00
Kai Engert
fc46195105 - disable test suite on ppc 2008-02-15 02:44:07 +00:00
Kai Engert
1c7c94c1d0 - disable test suite on ppc64 2008-02-15 02:02:53 +00:00
Kai Engert
9bb178439b - Build against gcc 4.3.0, use workaround for bug 432146 
- Run the test suite after the build and abort on failures.
 2008-02-15 01:11:51 +00:00
Kai Engert
6887e03df9 NSS 3.12 Beta 1 2008-01-25 12:29:12 +00:00
Kai Engert
f0c6761fb7 - move .so files to /lib 2008-01-08 05:07:23 +00:00
Kai Engert
8cbe248c92 - NSS 3.12 alpha 2b 2007-12-12 17:28:52 +00:00
Kai Engert
eded0595cb - upstream patches to avoid calling netstat for random data 2007-12-03 21:19:26 +00:00
Kai Engert
613a5e18e4 - NSS 3.12 alpha 2 2007-11-07 00:37:19 +00:00
Kai Engert
cf095e0763 - Add /etc/prelink.conf.d/nss-prelink.conf in order to blacklist our signed 
libraries and protect them from modification.
 2007-10-11 13:22:10 +00:00
Kai Engert
726c3f6e3b - Fix off-by-one error in the PEM module 2007-09-06 21:42:39 +00:00
Kai Engert
8f343923c1 - fix a C++ mode compilation error 2007-09-06 16:06:32 +00:00
Kai Engert
3b9b992cb2 - Add 3.12 ckfw and libnsspem 2007-09-05 20:00:42 +00:00
Kai Engert
9c5168ea31 - Updated license tag 2007-08-28 11:04:07 +00:00
Kai Engert
3d727384ad - Ensure the workaround for mozilla bug 51429 really get's built. 2007-07-12 02:03:29 +00:00
Kai Engert
d5b7e00105 - Better approach to ship freebl/softokn based on 3.11.5 
- Remove link time dependency on softokn
 2007-06-19 00:01:44 +00:00
Kai Engert
f126583ff6 - Fix unowned directories, rhbz#233890 2007-06-11 00:50:06 +00:00
Kai Engert
731ecc11ff - Update to 3.11.7, but freebl/softokn remain at 3.11.5. 
- Use a workaround to avoid mozilla bug 51429.
 2007-06-01 01:59:53 +00:00
Kai Engert
7d533dae82 - Fix rhbz#230545, failure to enable FIPS mode 
- Fix rhbz#220542, make NSS more tolerant of resets when in the middle of
    prompting for a user password.
 2007-03-02 18:53:44 +00:00
Kai Engert
7f17142907 - Update to 3.11.5 
- This update fixes two security vulnerabilities with SSL 2
- Do not use -rpath link option
- Added several unsupported tools to tools package
 2007-02-24 08:43:08 +00:00
Robert Relyea
191c28e50c - disable ECC 2007-01-23 01:27:55 +00:00
Kai Engert
8026606545 - Update to 3.11.4 2006-11-21 23:44:06 +00:00
Kai Engert
73d9520daa - Revert the attempt to require latest NSPR, as it is not yet available in 
the build infrastructure.
 2006-09-14 23:52:31 +00:00
Kai Engert
4c54a2f7cb - Update to 3.11.3 2006-09-14 23:19:13 +00:00
Kai Engert
6b76e16b6c - Add /etc/pki/nssdb 2006-08-04 16:51:01 +00:00
Jesse Keating
c89c153148 bumped for rebuild 2006-07-12 07:29:20 +00:00
Kai Engert
70b6ea6c35 - Update to 3.11.2 
- Enable executable bit on shared libs, also fixes debug info.
 2006-06-30 23:10:12 +00:00
Kai Engert
4331349eaf Enable Elliptic Curve Cryptography (ECC) 2006-06-14 21:39:44 +00:00
Kai Engert
2bb335b1b9 - Update to 3.11.1 
- Include upstream patch to limit curves
 2006-05-26 23:28:21 +00:00
Kai Engert
0d7e255d29 fix bug 180726 2006-02-15 07:14:13 +00:00
Jesse Keating
dbf10e77aa bump for bug in double-long on ppc(64) 2006-02-11 04:47:28 +00:00
Jesse Keating
0b94c4f3cf bump for new gcc/glibc 2006-02-07 13:14:45 +00:00
Ray Strode
df3a736924 - rebuild 2006-01-19 14:42:48 +00:00
Christopher Aillon
f8f08415b2 - Update file list for the devel packages 2005-12-17 05:27:19 +00:00
Christopher Aillon
9ab5b4df75 - Update to 3.11 2005-12-16 06:48:37 +00:00
Christopher Aillon
03109eeea6 typo correction 2005-12-15 22:06:15 +00:00
Christopher Aillon
e00571c324 - Update the pkgconfig file to Require nspr 2005-12-15 21:50:37 +00:00
Christopher Aillon
a8fe385dde - Add patch to allow building on ppc* 2005-12-15 21:39:46 +00:00
Christopher Aillon
245af989b8 auto-import nss-3.11-0 on branch devel from nss-3.11-0.src.rpm 2005-12-15 19:35:41 +00:00