eb3cdf4581
* Support for TLS 1.1 (RFC 4346)
* Experimental support for DTLS 1.0 (RFC 4347) and DTLS-SRTP (RFC 5764)
* Support for AES-CTR, AES-CTS, and AES-GCM
* Support for Keying Material Exporters for TLS (RFC 5705)
* Support for certificate signatures using the MD5 hash algorithm
is now disabled by default
* The NSS license has changed to MPL 2.0. Previous releases were
released under a MPL 1.1/GPL 2.0/LGPL 2.1 tri-license. For more
information about MPL 2.0, please see
http://www.mozilla.org/MPL/2.0/FAQ.html. For an additional
explanation on GPL/LGPL compatibility, see security/nss/COPYING
in the source code.
* Export and DES cipher suites are disabled by default. Non-ECC
AES and Triple DES cipher suites are enabled by default
- disabled OCSP testcases since they need external network
(nss-disable-ocsp-test.patch)
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/mozilla-nss?expand=0&rev=105
23 lines
945 B
Diff
23 lines
945 B
Diff
Index: security/nss/lib/ssl/sslsock.c
|
|
===================================================================
|
|
RCS file: /cvsroot/mozilla/security/nss/lib/ssl/sslsock.c,v
|
|
retrieving revision 1.96
|
|
diff -u -p -6 -r1.96 sslsock.c
|
|
--- security/nss/lib/ssl/sslsock.c 24 Sep 2012 23:57:42 -0000 1.96
|
|
+++ security/nss/lib/ssl/sslsock.c 25 Oct 2012 12:08:56 -0000
|
|
@@ -147,13 +147,13 @@ static sslOptions ssl_defaults = {
|
|
PR_TRUE, /* detectRollBack */
|
|
PR_FALSE, /* noStepDown */
|
|
PR_FALSE, /* bypassPKCS11 */
|
|
PR_FALSE, /* noLocks */
|
|
PR_FALSE, /* enableSessionTickets */
|
|
PR_FALSE, /* enableDeflate */
|
|
- 2, /* enableRenegotiation (default: requires extension) */
|
|
+ 3, /* enableRenegotiation (default: requires extension) */
|
|
PR_FALSE, /* requireSafeNegotiation */
|
|
PR_FALSE, /* enableFalseStart */
|
|
PR_TRUE /* cbcRandomIV */
|
|
};
|
|
|
|
/*
|