009bd2b01c
* no releasenotes available yet
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.66_release_notes
- update to NSS 3.65
* bmo#1709654 - Update for NetBSD configuration.
* bmo#1709750 - Disable HPKE test when fuzzing.
* bmo#1566124 - Optimize AES-GCM for ppc64le.
* bmo#1699021 - Add AES-256-GCM to HPKE.
* bmo#1698419 - ECH -10 updates.
* bmo#1692930 - Update HPKE to final version.
* bmo#1707130 - NSS should use modern algorithms in PKCS#12 files by default.
* bmo#1703936 - New coverity/cpp scanner errors.
* bmo#1697303 - NSS needs to update it's csp clearing to FIPS 180-3 standards.
* bmo#1702663 - Need to support RSA PSS with Hashing PKCS #11 Mechanisms.
* bmo#1705119 - Deadlock when using GCM and non-thread safe tokens.
- refreshed patches
- Firefox 90.0 requires NSS 3.66
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/mozilla-nss?expand=0&rev=361
36 lines
1.2 KiB
Diff
36 lines
1.2 KiB
Diff
# HG changeset patch
|
|
# User Hans Petter Jansson <hpj@cl.no>
|
|
# Date 1574138371 -3600
|
|
# Tue Nov 19 05:39:31 2019 +0100
|
|
# Node ID 557f9009507c9e70941dbe39965028049e1ef5a2
|
|
# Parent 4ae6bed68a83c01f6d2ce7a37bdb0bdb0556416f
|
|
[PATCH 07/22] 15
|
|
From 2a162c34b7aad7399f33069cd9930fd92714861c Mon Sep 17 00:00:00 2001
|
|
---
|
|
nss/lib/softoken/pkcs11c.c | 5 +++--
|
|
1 file changed, 3 insertions(+), 2 deletions(-)
|
|
|
|
Index: nss/lib/softoken/pkcs11c.c
|
|
===================================================================
|
|
--- nss.orig/lib/softoken/pkcs11c.c
|
|
+++ nss/lib/softoken/pkcs11c.c
|
|
@@ -4822,8 +4822,8 @@ loser:
|
|
return crv;
|
|
}
|
|
|
|
-#define PAIRWISE_DIGEST_LENGTH SHA1_LENGTH /* 160-bits */
|
|
-#define PAIRWISE_MESSAGE_LENGTH 20 /* 160-bits */
|
|
+#define PAIRWISE_DIGEST_LENGTH SHA224_LENGTH /* 224-bits */
|
|
+#define PAIRWISE_MESSAGE_LENGTH 20 /* 160-bits */
|
|
|
|
/*
|
|
* FIPS 140-2 pairwise consistency check utilized to validate key pair.
|
|
@@ -5771,6 +5771,7 @@ NSC_GenerateKeyPair(CK_SESSION_HANDLE hS
|
|
(PRUint32)crv);
|
|
sftk_LogAuditMessage(NSS_AUDIT_ERROR, NSS_AUDIT_SELF_TEST, msg);
|
|
}
|
|
+ sftk_fatalError = PR_TRUE;
|
|
}
|
|
}
|
|
|