-
Wed Sep 21 2016 Rob Crittenden <rcritten@redhat.com> - 1.0.14-7
- Add the permission patch to the repository (#1312583)
-
Wed Sep 21 2016 Rob Crittenden <rcritten@redhat.com> - 1.0.14-6
- Check the NSS certificate database directory for read permissions
by the Apache user. (#1312583)
-
Wed Aug 10 2016 Rob Crittenden <rcritten@redhat.com> - 1.0.14-5
- Update clean semaphore patch to not free the pinList twice.
(#1364560)
-
Tue Aug 09 2016 Rob Crittenden <rcritten@redhat.com> - 1.0.14-4
- Update clean semaphore patch to not close pipe twice and to
shutdown NSS database (#1364560)
-
Mon Aug 08 2016 Rob Crittenden <rcritten@redhat.com> - 1.0.14-3
- Clean up semaphore in nss_pcache on shutdown (#1364560)
-
Tue Jun 28 2016 Matthew Harmsen <mharmsen@redhat.com> - 1.0.14-2
- mod_nss sets r->user in fixup even if it was long ago changed
by other module (#1347298)
-
Mon May 23 2016 Rob Crittenden <rcritten@redhat.com> - 1.0.14-1
- Rebase to 1.0.14 (#1299063)
- Add support for Server Name Indication (SNI) (#1053327)
- Use upstream method to not execute live tests as root (#1256887)
- Always call SSL_ShutdownServerSessionIDCache() in ModuleKill
(#1263301, #1296685)
- Don't require NSSProxyNickname (#1280287)
- Make link to libnssckbi.so an absolute link (#1288471)
- Fail for colons in credentials with FakeBasicAuth (#1295970)
- Don't ignore NSSProtocol when NSSFIPS is enabled (#1312491)
- Check filesystem permissions on NSS database at startup (#1312583)
- OpenSSL ciphers stopped parsing at +, CVE-2016-3099 (#1323913)
- Patch to match available ciphers so tests pass (#1299063)
- Patch to fix tests in brew (#1299063)
-
Tue Sep 22 2015 Rob Crittenden <rcritten@redhat.com> - 1.0.11-6
- Add the supported NSS SHA384 ciphers (#1253570)
- Add kECDH, AECDH, ECDSA and aECDSA macros (#1253570)
- Bump the NSS BR and Requires so the new ciphers are available
- Bump the NSPR Requires to match NSS
-
Mon Sep 21 2015 Rob Crittenden <rcritten@redhat.com> - 1.0.11-5
- Don't enable NULL ciphers in DEFAULT macro (#1253570)
- Add OpenSSL cipher macro EECDH (#1160745)
- Disable the live server testing in make check because it
may run as root and fail horribly (#1160745)
-
Thu Aug 27 2015 Rob Crittenden <rcritten@redhat.com> - 1.0.11-4
- Handle permanently disabled ciphers in call to SSL_CipherPrefSet
(#1160745)