Overview
Request 531472 accepted
- update to NSS 3.33
Notable changes
* TLS compression is no longer supported. API calls that attempt
to enable compression are accepted without failure. However,
TLS compression will remain disabled.
* This version of NSS uses a formally verified implementation of
Curve25519 on 64-bit systems.
* The compile time flag DISABLE_ECC has been removed.
* When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
are not performed anymore.
* Various minor improvements and correctness fixes.
New functionality
* When listing an NSS database using certutil -L, but the database
hasn't yet been initialized with any non-empty or empty password,
the text "Database needs user init" will be included in the listing.
* When using certutil to set an inacceptable password in FIPS mode,
a correct explanation of acceptable passwords will be printed.
New functions
* CERT_FindCertByIssuerAndSNCX - a variation of existing function
CERT_FindCertByIssuerAndSN that accepts an additional password
context parameter.
* CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
function CERT_FindCertByNicknameOrEmailAddr that accepts an
additional password context parameter.
* CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
accepts an additional password context parameter.
* NSS_SecureMemcmpZero - check if a memory region is all zero in
constant time.
* PORT_ZAllocAligned - allocate aligned memory.
- Created by wrosenauer
- In state accepted
Request History
wrosenauer created request
- update to NSS 3.33
Notable changes
* TLS compression is no longer supported. API calls that attempt
to enable compression are accepted without failure. However,
TLS compression will remain disabled.
* This version of NSS uses a formally verified implementation of
Curve25519 on 64-bit systems.
* The compile time flag DISABLE_ECC has been removed.
* When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
are not performed anymore.
* Various minor improvements and correctness fixes.
New functionality
* When listing an NSS database using certutil -L, but the database
hasn't yet been initialized with any non-empty or empty password,
the text "Database needs user init" will be included in the listing.
* When using certutil to set an inacceptable password in FIPS mode,
a correct explanation of acceptable passwords will be printed.
New functions
* CERT_FindCertByIssuerAndSNCX - a variation of existing function
CERT_FindCertByIssuerAndSN that accepts an additional password
context parameter.
* CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
function CERT_FindCertByNicknameOrEmailAddr that accepts an
additional password context parameter.
* CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
accepts an additional password context parameter.
* NSS_SecureMemcmpZero - check if a memory region is all zero in
constant time.
* PORT_ZAllocAligned - allocate aligned memory.
factory-auto added opensuse-review-team as a reviewer
Please review sources
factory-auto added repo-checker as a reviewer
Please review build success
factory-auto accepted review
Check script succeeded
licensedigger accepted review
ok
staging-bot added openSUSE:Factory:Staging:D as a reviewer
Being evaluated by staging project "openSUSE:Factory:Staging:D"
staging-bot accepted review
Picked openSUSE:Factory:Staging:D
jengelh accepted review
repo-checker accepted review
cycle and install check passed
dimstar_suse accepted review
ready to accept
dimstar_suse approved review
ready to accept
dimstar_suse accepted request
Accept to openSUSE:Factory