NSS

lp:~mozillateam/nss/nss.lucid

Created by Chris Coulson on 2010-10-04 and last modified on 2011-09-07

Get this branch:: bzr branch lp:~mozillateam/nss/nss.lucid

Members of Mozilla Team can upload to this branch. Log in for directions.

Branch merges

No branches dependent on this one.

Related bugs

Bug #741729: Blacklist fraudulent UTN-USERFirst-Hardware certificates	Undecided	Fix Released
Bug #837557: fraudulent DigiNotar certificate issuance	Medium	Fix Released

Link a bug report

Related blueprints

Branch information

Owner:: Mozilla Team

Project:: NSS

Status:: Mature

Recent revisions

120. By Micah Gersten on 2011-09-07: releasing version 3.12.9+ckbi-1.82-0ubuntu0.10.04.3
119. By Micah Gersten on 2011-09-07: * Fix diginotar.patch to not FTBFS
118. By Micah Gersten on 2011-09-07: releasing version 3.12.9+ckbi-1.82-0ubuntu0.10.04.2
117. By Micah Gersten on 2011-09-07: * SECURITY UPDATE: Add patch from Debian version 3.12.11-3 rebased against
  3.12.9 to remove the DigiNotar certificates and actively distrust them;
  Thanks to Mike Hommey from Debian for the original patch (LP: #837557)
  - mozilla/security/nss/lib/ckfw/builtins/certdata.*:
    Explicitely distrust various DigiNotar CAs:
    - DigiNotar Root CA
    - DigiNotar Services 1024 CA
    - DigiNotar Cyber CA
    - DigiNotar Cyber CA 2nd
    - DigiNotar PKIoverheid
    - DigiNotar PKIoverheid G2
  - mozilla/security/nss/lib/ckfw/builtins/certdata.*:
    Remove DigiNotar Root CA.
116. By Micah Gersten on 2011-03-28: releasing version 3.12.9+ckbi-1.82-0ubuntu0.10.04.1
115. By Micah Gersten on 2011-03-28: * Add new symbols
- update debian/libnss3-1d.symbols
114. By Micah Gersten on 2011-03-28: * New upstream release v3.12.9 with updated ckbi module
  (NSS_3_12_9_WITH_CKBI_1_82_RTM)
  - SECURITY UPDATE: Update "builtin certificates" module (ckbi) to
    explicitly mark the recently issued and revoked fraudulent certificates
    as explicitly not trusted; NSS will report SEC_ERROR_UNTRUSTED_CERT when
    attempting to verify one of these fraudulent certificates (LP: #741729)
113. By Chris Coulson on 2010-10-04: releasing version 3.12.8-0ubuntu0.10.04.1
112. By Chris Coulson on 2010-10-04: * New upstream release v3.12.8 (NSS_3_12_8_RTM)
  - Fix browser wildcard certificate validation issue
  - Update root certs
  - Fix SSL deadlocks
* Refresh patches:
  - update debian/patches/38_kbsd.patch
  - update debian/patches/97_SSL_RENEGOTIATE_TRANSITIONAL.patch
* Bump minimum nspr version to 4.8.6
  - update debian/control
* Add new API to symbols file
  - update debian/libnss3-1d.symbols
111. By Chris Coulson on 2010-04-10: releasing version 3.12.6-0ubuntu3