8442248c89
* latest FIPS changes incl. testsuite fixes (enabled now)
nss-fips-180-3-csp-clearing.patch
nss-fips-tests-enable-fips.patch
nss-fips-tests-skip.patch
nss-fips-pbkdf-kat-compliance.patch
- update to NSS 3.79
* bmo#205717 - Use PK11_GetSlotInfo instead of raw C_GetSlotInfo calls.
* bmo#1766907 - Update mercurial in clang-format docker image.
* bmo#1454072 - Use of uninitialized pointer in lg_init after alloc fail.
* bmo#1769295 - selfserv and tstclnt should use PR_GetPrefLoopbackAddrInfo.
* bmo#1753315 - Add SECMOD_LockedModuleHasRemovableSlots.
* bmo#1387919 - Fix secasn1d parsing of indefinite SEQUENCE inside
indefinite GROUP.
* bmo#1765753 - Added RFC8422 compliant TLS <= 1.2 undefined/compressed
ECPointFormat extension alerts.
* bmo#1765753 - TLS 1.3 Server: Send protocol_version alert on
unsupported ClientHello.legacy_version.
* bmo#1764788 - Correct invalid record inner and outer content type alerts.
* bmo#1757075 - NSS does not properly import or export pkcs12 files
with large passwords and pkcs5v2 encoding.
* bmo#1766978 - improve error handling after nssCKFWInstance_CreateObjectHandle.
* bmo#1767590 - Initialize pointers passed to
NSS_CMSDigestContext_FinishMultiple.
* bmo#1769302 - NSS 3.79 should depend on NSPR 4.34
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/mozilla-nss?expand=0&rev=386
26 lines
860 B
Diff
26 lines
860 B
Diff
Index: nss/tests/cert/cert.sh
|
|
===================================================================
|
|
--- nss.orig/tests/cert/cert.sh
|
|
+++ nss/tests/cert/cert.sh
|
|
@@ -1353,6 +1353,11 @@ cert_stresscerts()
|
|
##############################################################################
|
|
cert_fips()
|
|
{
|
|
+ OLD_FIPS_MODE=`echo ${NSS_FIPS}`
|
|
+ OLD_CHECKSUMS_MODE=`echo ${NSS_IGNORE_CHECKSUMS}`
|
|
+ export NSS_FIPS=1
|
|
+ export NSS_IGNORE_CHECKSUMS=1
|
|
+
|
|
CERTFAILED=0
|
|
echo "$SCRIPTNAME: Creating FIPS 140 DSA Certificates =============="
|
|
cert_init_cert "${FIPSDIR}" "FIPS PUB 140 Test Certificate" 1000 "${D_FIPS}"
|
|
@@ -1393,6 +1398,8 @@ MODSCRIPT
|
|
cert_log "SUCCESS: FIPS passed"
|
|
fi
|
|
|
|
+ export NSS_FIPS=${OLD_FIPS_MODE}
|
|
+ export NSS_IGNORE_CHECKSUMS=${OLD_CHECKSUMS_MODE}
|
|
}
|
|
|
|
########################## cert_rsa_exponent #################################
|