blob: f956ffd5d10c12f3ebe576f12be5e8fd37c333e7 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
|
Name: Network Security Services (NSS)
URL: http://www.mozilla.org/projects/security/pki/nss/
This directory includes a copy of NSS's libssl from the CVS repo at:
:pserver:anonymous@cvs-mirror.mozilla.org:/cvsroot
The snapshot was updated to the CVS tag: NSS_3_12_9_RTM
Patches:
* Next protocol negotiation support.
patches/nextproto.patch
http://codereview.chromium.org/415005
* Commenting out a couple of functions because they need NSS symbols
which may not exist in the system NSS library.
patches/versionskew.patch
* Send empty renegotiation info extension instead of SCSV unless TLS is
disabled.
patches/renegoscsv.patch
https://bugzilla.mozilla.org/show_bug.cgi?id=549042
* Cache the peer's intermediate CA certificates in session ID, so that
they're available when we resume a session. Add certificates to
ss->ssl3.peerCertChain in the right order.
patches/cachecerts.patch
https://bugzilla.mozilla.org/show_bug.cgi?id=606049
* Add Snap Start support
patches/snapstart.patch
patches/snapstart2.patch
http://tools.ietf.org/html/draft-agl-tls-snapstart-00
* Add the SSL_PeerCertificateChain function
patches/peercertchain.patch
* Add OCSP stapling support
patches/ocspstapling.patch
* Add support for client auth with native crypto APIs on Mac and Windows
patches/clientauth.patch
ssl/sslplatf.c
* Don't send a client certificate when renegotiating if the peer does not
request one. This only happened if the previous key exchange algorithm
was non-RSA.
patches/clientauth.patch
https://bugzilla.mozilla.org/show_bug.cgi?id=616757
Apply the patches to NSS by running the patches/applypatches.sh script. Read
the comments at the top of patches/applypatches.sh for instructions.
The ssl/bodge directory contains files taken from the NSS repo that we required
for building libssl outside of its usual build environment.
|
