Mozilla SSL/TLS module for the Apache HTTP server
The mod_nss module provides strong cryptography for the Apache Web server via the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols using the Network Security Services (NSS) security library.
- Developed at Apache:Modules
- Sources inherited from project openSUSE:Factory
-
2
derived packages
- Download package
-
Checkout Package
osc -A https://api.opensuse.org checkout openSUSE:Leap:15.1:Staging:FactoryCandidates/apache2-mod_nss && cd $_ - Create Badge
Refresh
Refresh
Source Files
| Filename | Size | Changed |
|---|---|---|
|
0001-Fix-up-some-broken-cipher-strings-from-a-bad- |
0000006361 6.21 KB | |
| README-SUSE.txt | 0000003829 3.74 KB | |
| apache2-mod_nss.changes | 0000017223 16.8 KB | |
| apache2-mod_nss.spec | 0000009074 8.86 KB | |
| listen_nss.conf | 0000001580 1.54 KB | |
| mod_nss-1.0.15.tar.gz | 0000183083 179 KB | |
| mod_nss-gencert-correct-ownership.patch | 0000000513 513 Bytes | |
| mod_nss-gencert_use_ss_instead_of_netstat.patch | 0000002355 2.3 KB | |
| mod_nss-migrate.patch | 0000000419 419 Bytes | |
| mod_nss.conf.in | 0000013001 12.7 KB | |
| vhost-nss.template | 0000005532 5.4 KB |
Revision 28 (latest revision is 36)
Dominique Leuenberger (dimstar_suse)
accepted
request 585105
from
Petr Gajdos (pgajdos)
(revision 28)
- Since the update to NSS 3.35, the default NSS certificate
database format changed from Berkley DB to SQLite
- use %license tag
- Update to 1.0.15
* Try to auto-detect the NSS database format if not specified
* Update nss_pcache.8 man page to drop directory and prefix
* When a token is configured in password file only authenticate once
* Return an error when NSSPassPhraseDialog is invalid
* Move 3DES ciphers down from HIGH to MEDIUM to match OpenSSL 1.0.2k+
* Add -Werror=implicit-function-declaration to CFLAGS
* Handle group membership when testing for file permissions
* NSS system-wide policy now disables SSLv3, don't use it in tests
* Add missing error messages for libssl errors
* Fix doc typo in SSL_[SERVER|CLIENT]_SAN_IPaddr env variable name
* When including additional test config use specific extension
* Fix the TLS Session ID cache
* Make an invalid protocol setting fatal
* Don't use same NSS db in nss_pcache as mod_nss, use NSS_NoDB_Init()
* Add info log message when FIPS is enabled
* Add AES-256 and drop DES, CAST128, SKIPJACK as wrapping key types
* Fix removal of CR from PEM certificates
* Add OCSP caching and timeout tuning knobs
* Check the NSS database directory permissions as well as the files
inside it for read access on startup.
* Add in simple aliases for ciphers to fix those that
don't follow the pattern (dhe_rsa_aes_128_sha256,
dhe_rsa_aes_256_sha256) and those with typos
(camelia_128_sha, camelia_256_sha)
* Fix semaphore leak (forwarded request 584463 from vitezslav_cizek)
Comments 0