summaryrefslogtreecommitdiffstats
path: root/net/third_party/nss/README.chromium
blob: d7f242fea4d1366d5178a23c7ebe2468d555a982 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
Name: Network Security Services (NSS)
URL: http://www.mozilla.org/projects/security/pki/nss/

This directory includes a copy of NSS's libssl from the CVS repo at:
  :pserver:anonymous@cvs-mirror.mozilla.org:/cvsroot

The snapshot was updated to the CVS tag: NSS_3_12_7_RTM

Patches:

  * Next protocol negotiation support.
    patches/nextproto.patch
    http://codereview.chromium.org/415005

  * False start support
    patches/falsestart.patch
    patches/falsestart2.patch
    https://bugzilla.mozilla.org/show_bug.cgi?id=525092

  * Commenting out a couple of functions because they need NSS symbols
    which may not exist in the system NSS library.
    patches/versionskew.patch

  * Send empty renegotiation info extension instead of SCSV unless TLS is
    disabled.
    patches/renegoscsv.patch
    https://bugzilla.mozilla.org/show_bug.cgi?id=549042

  * Cache the peer's intermediate CA certificates in session ID, so that
    they're available when we resume a session.  Add certificates to
    ss->ssl3.peerCertChain in the right order.
    patches/cachecerts.patch
    https://bugzilla.mozilla.org/show_bug.cgi?id=606049

  * Add the SSL_ERROR_WEAK_SERVER_KEY error code for a weak server key in 
    the Server Key Exchange handshake message.
    patches/weakserverkey.patch
    http://crbug.com/51694
    https://bugzilla.mozilla.org/show_bug.cgi?id=587234

  * Add Snap Start support
    patches/snapstart.patch
    http://tools.ietf.org/html/draft-agl-tls-snapstart-00

The ssl/bodge directory contains files taken from the NSS repo that we required
for building libssl outside of its usual build environment.