Wolfgang Rosenauer (wrosenauer) committed about 1 year ago (revision 405)

- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
                  without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
                  coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
                  memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- add man-pages to the tools package (boo#1208242)

• Files Changed
• Browse Source

buildservice-autocommit accepted request 1059272 from Wolfgang Rosenauer (wrosenauer) over 1 year ago (revision 404)

baserev update by copy to link target

• Files Changed
• Browse Source

Wolfgang Rosenauer (wrosenauer) committed over 1 year ago (revision 403)

- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
                  CKA_NSS_EMAIL_DISTRUST_AFTER for 3
                  TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
                 for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.

• Files Changed
• Browse Source

buildservice-autocommit accepted request 1042789 from Wolfgang Rosenauer (wrosenauer) over 1 year ago (revision 402)

baserev update by copy to link target

• Files Changed
• Browse Source

Wolfgang Rosenauer (wrosenauer) committed over 1 year ago (revision 401)

- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
                  order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
                  in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
                  and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
                  warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.

• Files Changed
• Browse Source

buildservice-autocommit accepted request 1035465 from Wolfgang Rosenauer (wrosenauer) over 1 year ago (revision 400)

baserev update by copy to link target

• Files Changed
• Browse Source

Wolfgang Rosenauer (wrosenauer) committed over 1 year ago (revision 399)

- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.

• Files Changed
• Browse Source

buildservice-autocommit accepted request 1029751 from Wolfgang Rosenauer (wrosenauer) over 1 year ago (revision 398)

baserev update by copy to link target

• Files Changed
• Browse Source

Wolfgang Rosenauer (wrosenauer) committed over 1 year ago (revision 397)

- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
                  SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
                  UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
                  public server name
  * bmo#1779357 - Added comment and bug reference to
                  ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
                  overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
                  with retry configs in EncryptedExtensions and if not
                  accepting ECH. Changed config setting behavior to
                  skip configs with unsupported mandatory extensions
                  instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
                   CHInner creation to skip TLS 1.2 only extensions to
                   comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
                  server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version

• Files Changed
• Browse Source

buildservice-autocommit accepted request 1005807 from Factory Maintainer (factory-maintainer) over 1 year ago (revision 396)

baserev update by copy to link target

• Files Changed
• Browse Source

Wolfgang Rosenauer (wrosenauer) committed over 1 year ago (revision 395)

- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
                  TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
                  PKCS #11 URI.

• Files Changed
• Browse Source

buildservice-autocommit accepted request 997590 from Wolfgang Rosenauer (wrosenauer) over 1 year ago (revision 394)

baserev update by copy to link target

• Files Changed
• Browse Source

Wolfgang Rosenauer (wrosenauer) committed over 1 year ago (revision 393)

- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
                  test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
                  CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)

• Files Changed
• Browse Source

buildservice-autocommit accepted request 991359 from Wolfgang Rosenauer (wrosenauer) over 1 year ago (revision 392)

baserev update by copy to link target

• Files Changed
• Browse Source

Wolfgang Rosenauer (wrosenauer) committed almost 2 years ago (revision 391)

• Files Changed
• Browse Source

Wolfgang Rosenauer (wrosenauer) committed almost 2 years ago (revision 390)

• Files Changed
• Browse Source

Wolfgang Rosenauer (wrosenauer) committed almost 2 years ago (revision 389)

• Files Changed
• Browse Source

Wolfgang Rosenauer (wrosenauer) committed almost 2 years ago (revision 388)

- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
                  by allocating it on initialization. Replaced
                  redundant code with assert. Debug builds: Added
                  buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
                  legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.
- FIPS patch updates
- removed obsolete patches
  * nss-fips-tests-skip.patch
  * nss-fips-tls-allow-md5-prf.patch

• Files Changed
• Browse Source

buildservice-autocommit accepted request 985447 from Wolfgang Rosenauer (wrosenauer) almost 2 years ago (revision 387)

baserev update by copy to link target

• Files Changed
• Browse Source

Wolfgang Rosenauer (wrosenauer) committed almost 2 years ago (revision 386)

- sync with current SLE
  * latest FIPS changes incl. testsuite fixes (enabled now)
    nss-fips-180-3-csp-clearing.patch
    nss-fips-tests-enable-fips.patch
    nss-fips-tests-skip.patch
    nss-fips-pbkdf-kat-compliance.patch

- update to NSS 3.79
  * bmo#205717 - Use PK11_GetSlotInfo instead of raw C_GetSlotInfo calls.
  * bmo#1766907 - Update mercurial in clang-format docker image.
  * bmo#1454072 - Use of uninitialized pointer in lg_init after alloc fail.
  * bmo#1769295 - selfserv and tstclnt should use PR_GetPrefLoopbackAddrInfo.
  * bmo#1753315 - Add SECMOD_LockedModuleHasRemovableSlots.
  * bmo#1387919 - Fix secasn1d parsing of indefinite SEQUENCE inside
                  indefinite GROUP.
  * bmo#1765753 - Added RFC8422 compliant TLS <= 1.2 undefined/compressed
                  ECPointFormat extension alerts.
  * bmo#1765753 - TLS 1.3 Server: Send protocol_version alert on
                  unsupported ClientHello.legacy_version.
  * bmo#1764788 - Correct invalid record inner and outer content type alerts.
  * bmo#1757075 - NSS does not properly import or export pkcs12 files
                  with large passwords and pkcs5v2 encoding.
  * bmo#1766978 - improve error handling after nssCKFWInstance_CreateObjectHandle.
  * bmo#1767590 - Initialize pointers passed to
                  NSS_CMSDigestContext_FinishMultiple.
  * bmo#1769302 - NSS 3.79 should depend on NSPR 4.34

• Files Changed
• Browse Source