[ol6_u10_base] nss-softokn-freebl-devel-3.14.3-23.3.0.1.el6_8.i686

NSS Softoken Cryptographic Module Freelb Library Development Tools
This package supports special needs of some PKCS #11 module developers and
is otherwise considered private to NSS. As such, the programming interfaces
may change and the usual NSS binary compatibility commitments do not apply.
Developers should rely only on the officially supported NSS public API.

Changelog (Show File list) (Show related packages)

• Fri Sep 22 2017 Ilya Okomin <ilya.okomin@oracle.com> - 3.14.3-23.3.0.1

  - Add fips140-2 DSA Known Answer Test fix [Orabug 26696773]
  - Add fips140-2 ECDSA/RSA/DSA Pairwise Consistency Test fix [Orabug 26617866],
    [Orabug 26617833], [Orabug 26617780]
  - Add fips140-2 ECDSA Known Answer Test fix [Orabug 26696762]
  - Add fips140-2 RSA Key Generation fix [Orabug 26618348]
  - Add fips140-2 AES Key Wrap fix [Orabug 26617904]

• Mon May 23 2016 Elio Maldonado <emaldona@redhat.com> - 3.14.3-23.3

  - Build using the proper RHEL-6.8-Z release target
  - Resolves: Bug 1337821

• Fri May 20 2016 Elio Maldonado <emaldona@redhat.com> - 3.14.3-23.2

  - Bump the release tag
  - Turn off AVX if the OS (or VM) doesn't support it.
  - Resolves: Bug 1337821

• Fri May 20 2016 Bob Relyea <rrelyea@redhat.com> - 3.14.3-23.1

  - Turn off AVX if the OS (or VM) doesn't support it.
  - Resolves: Bug 1337821

• Mon Aug 10 2015 Elio Maldonado <emaldona@redhat.com> - 3.14.3-23

  - Pick up upstream freebl patch for CVE-2015-2730
  - Check for P == Q or P ==-Q before adding P and Q

• Wed Jan 28 2015 Bob Relyea <rrelyea@redhat.com> - 3.14.3-22

  - fix permissions on dracut install file.
  - Resolves: Bug 1182297

• Fri Jan 16 2015 Bob Relyea <rrelyea@redhat.com> - 3.14.3-21

  - Require nss-softokn-freebl of at least the same version and release
  - Resolves: Bug 1182662 - nss-softokn-3.14.3-19.el6_6 breaking yum and rpm

• Thu Jan 08 2015 Bob Relyea <rrelyea@redhat.com> - 3.14.3-20

  - keep a dummy libfreebl3.chk to keep dracut happy.

• Mon Dec 01 2014 Bob Relyea <rrelyea@redhat.com> - 3.14.3-19

  - Resolves: Bug 1166921 - nss-softokn recent change causes application to segfault

• Wed Oct 22 2014 Bob Relyea <rrelyea@redhat.com> - 3.14.3-18

  - Silent sigchld events

• Thu Sep 25 2014 Kai Engert <kaie@redhat.com> - 3.14.3-17

  - Adjust patch to be compatible with legacy softokn API.
  - Resolves: Bug 1145432 - CVE-2014-1568

• Tue Sep 23 2014 Elio Maldonado <emaldona@redhat.com> - 3.14.3-16

  - Resolves: Bug 1145432 - CVE-2014-1568

• Thu Aug 07 2014 Elio Maldonado <emaldona@redhat.com> - 3.14.3-15

  - Fix shlibsign to return non-zero on failure
  - Resolves: Bug 587634 - shlibsign returns 0 although if fails

• Mon Jun 09 2014 Bob Relyea <rrelyea@redhat.com> - 3.14.3.14

  - Final Fips review comments.

• Mon Apr 07 2014 Bob Relyea <rrelyea@redhat.com> - 3.14.3.13

  - Fips review comments.

• Tue Mar 25 2014 Elio Maldonado <emaldona@redhat.com> - 3.14.3-12

  - Avoid call to sdb_measureAccess in lib/softoken/sdb.c s_open if NSS_SDB_USE_CACHE is "yes" or "no"
  - Resolves: Bug 1044666 - Can curl HTTPS requests make fewer access system calls?

• Tue Mar 25 2014 Elio Maldonado <emaldona@redhat.com> - 3.14.3-11

  - Skip calls to CHECK_FORK in {C & NSC}_GetFunctionList
  - Resolves: Bug 1053437 - Admin server segfault when configuration DS configured on SSL port

• Mon Mar 24 2014 Bob Relyea <rrelyea@redhat.com> - 3.14.3.10

  - add fips precheck back into softokn.

• Tue Sep 24 2013 Elio Maldonado <emaldona@redhat.com> - 3.14.3-9

  - back out -fips package changes

• Fri Sep 20 2013 Elio Maldonado <emaldona@redhat.com> - 3.14.3-8

  - Enable new packaging but don't apply nss-fips-post.patch
  - Related: rhbz#1008513 - Unable to login in fips mode

• Thu Sep 19 2013 Elio Maldonado <emaldona@redhat.com> - 3.14.3-7

  - Fix the PR_Access stub to actually access the correct permissions
  - Resolves: rhbz#1008513 - Unable to login in fips mode
  - Run the lowhash tests
  - Require nspr-4.0.0 and nss-util-3.15.1

• Thu Sep 12 2013 Elio Maldonado <emaldona@redhat.com> - 3.14.3-6

  - create -fips packages 
  - patch submitted by Bob Relyea <rrelyea@redhat.com>
  - fix the script that splits softoken off from nss
  - patch nss/cmd/lib/basicutil.c to build against nss-util-3.15.1
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]

• Mon Jul 29 2013 Elio Maldonado <emaldona@redhat.com> - 3.14.3-5

  - Resolves: rhbz#976572 - Pick up various upstream GCM code fixes applied since nss-3.14.3 was released
  - Display cpuifo as part of the tests and make NSS_DISABLE_HW_GCM the environment variable to test for
  - When appling the patches use a backup file suffix that better describes the patch purpose

• Thu May 23 2013 Elio Maldonado <emaldona@redhat.com> - 3.14.3-4

  - Enable ECC support for suite b and add upstream fixes for aec gcm
  - Use the unstripped upstream sources with ecc support
  - Limit the ECC support to suite b
  - Apply several upstream aes gcm fixes
  - Rename macros EC_MIN_KEY_BITS and EC_MAX_KEY_BITS per upstream
  - Resolves: rhbz#960208 - Enable ECC in nss-softoken
  - Related: rhbz#919172

• Fri Apr 26 2013 Elio Maldonado <emaldona@redhat.com> - 3.14.3-3

  - Add patch to conditionally compile according to old or new sqlite api
  - new is used on rhel-6 while rhel-5 uses old but we need the same code for both
  - Resolves: rhbz#919172 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue

• Tue Apr 09 2013 Elio Maldonado <emaldona@redhat.com> - 3.14.3-2

  - Revert to using a code patch for relro support
  - Related: rhbz#919172

• Sun Mar 24 2013 Elio Maldonado <emaldona@redhat.com> - 3.14.3-1

  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#919172 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue
  - Add export LD_LIBRARY_PATH=$RPM_BUILD_ROOT//usr/lib before the signing commands in __spec_install_post scriplet
    to ensure signing tool links with in-tree freebl so verification uses same algorithm as in signing
  - Add %check section to run the upstream crypto reqression test suite as per packaging guidelines
  - Don't install sechash.h or secmodt.h which as per 3.14 are provided by nss-devel
  - Update the licence to MPLv2.0

• Sat Mar 23 2013 Elio Maldonado - 3.12.9-12

  - Bootstrapping of the builroot in preparation for rebase to 3.14.3
  - Remove hasht.h from the %files devel list to prevent update conflicts with nss-util
  - With 3.14.3 hasht.h will be provided by nss-util-devel
  - Related: rhbz#919172 - rebase nss-softokn to 3.14.3

• Thu Oct 27 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-11

  - Bug 748524 - On NSS_NoDB_Init don't try to open pkcs11.txt or secmod.db

• Mon Oct 24 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-10

  - Bug 747053 - FIPS changes for NSS, more DRBG tests

• Tue Sep 27 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-9

  - Add relro support for executables and shared libraries

• Mon Jul 25 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-8

  - Include the patch

• Mon Jul 25 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-7

  - Fix the tag

• Fri Jul 22 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-5

  - Add partial RELRO support as a security enhancement

• Thu Jun 23 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-5

  - Retagging to pick up latest patch - Resolves: rhbz#710298

• Thu Jun 23 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-4

  - Resolves: rhbz#710298 - fix intel optimized aes code to handle case where input and ouput are in the same buffer

• Sun Feb 27 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-3

  - Add requires nss-softokn-freebl-devel to devel

• Fri Feb 04 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-2

  - Add headers for nss-softokn-freebl-devel and expand the description

• Mon Jan 17 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-1

  - Update to 3.12.9
  - Enable Intel AES Hardware optimizations

• Fri Oct 01 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.8-1

  - Update to 3.12.8

• Thu Aug 26 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.7-1.1

  - Retagging to remove an obsolete file

• Thu Aug 26 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.7-1

  - Update to 3.12.7

• Thu Aug 05 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.4-19

  - Turn off Intel AES optimizations

• Tue Jun 08 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.6-2.1

  - Don't enable FIPS when CONFIG_CRYPTO_FIPS=n
  - Fix typo in the package description
  - Fix capitalization error in prelink conflict statement
  - Require nspr 4.8.4

• Wed Apr 21 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.4-17

  - Updated prelink patch

• Thu Apr 15 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.4-16

  - allow prelink of softoken and freebl. Change the verify code to use
    prelink -u if prelink is installed. Fix by Robert Relyea

• Mon Jan 18 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.4-11

  - Move libfreebl3.so and its .chk file to /lib{64} keeping
  - symbolic links to them in /usr/lib{64} so as not break others

• Mon Jan 18 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.4-10.3

  - fix broken global

• Sun Jan 17 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.4-10.2

  - rebuilt for RHEL-6-test-build

• Fri Jan 15 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.4-10.1

  - Update to 3.12.4, reenable installing and pick up fixes from F-12

• Wed Aug 19 2009 Elio Maldonado <emaldona@redhat.com> 3.12.3.99.3-8.1

  - Disable installing until conflicts are relsoved

• Wed Aug 19 2009 Elio Maldonado <emaldona@redhat.com> 3.12.3.99.3-8

  - Initial build