mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-11-24 05:11:16 +00:00
Bug 1841111 - land NSS NSS_3_92_RTM UPGRADE_NSS_RELEASE, r=nss-reviewers,bbeurdouche
Differential Revision: https://phabricator.services.mozilla.com/D184676
This commit is contained in:
Natalia Kulatova
parent
b1dc96efa9
commit
ec5057c133
@ -1 +1 @@
|
||||
NSS_3_92_BETA1
|
||||
NSS_3_92_RTM
|
||||
@ -10,4 +10,3 @@
|
||||
*/
|
||||
|
||||
#error "Do not include this header file."
|
||||
|
||||
|
||||
@ -79,7 +79,7 @@ Building NSS
|
||||
|
||||
NSS compilation on Windows uses the same shared build system as Mozilla
|
||||
Firefox. You must first install the `Windows Prerequisites
|
||||
<https://developer.mozilla.org/en-US/docs/Mozilla/Developer_guide/Build_Instructions/Windows_Prerequisites>`__,
|
||||
<https://firefox-source-docs.mozilla.org/setup/windows_build.html>`__,
|
||||
including **MozillaBuild**.
|
||||
|
||||
You can also build NSS on the Windows Subsystem for Linux, but the resulting binaries aren't
|
||||
|
||||
@ -19,12 +19,12 @@ Building NSS
|
||||
|
||||
.. container::
|
||||
|
||||
NSS needs a C and C++ compiler. It has minimal dependencies, including only standard C and C++
|
||||
NSS needs a C and C++ compiler. It has minimal dependencies, including only standard C and C++
|
||||
libraries, plus `zlib <https://www.zlib.net/>`__.
|
||||
|
||||
For building, you also need `make <https://www.gnu.org/software/make/>`__. Ideally, also install
|
||||
For building, you also need `make <https://www.gnu.org/software/make/>`__. Ideally, also install
|
||||
`gyp <https://gyp.gsrc.io/>`__ and `ninja <https://ninja-build.org/>`__ and put them on your
|
||||
path. This is recommended, as the build is faster and more reliable.
|
||||
path. This is recommended, as the build is faster and more reliable.
|
||||
|
||||
`Windows <#windows>`__
|
||||
~~~~~~~~~~~~~~~~~~~~~~
|
||||
@ -33,7 +33,7 @@ Building NSS
|
||||
|
||||
NSS compilation on Windows uses the same shared build system as Mozilla Firefox. You must first
|
||||
install the `Windows
|
||||
Prerequisites <https://developer.mozilla.org/en-US/docs/Mozilla/Developer_guide/Build_Instructions/Windows_Prerequisites>`__,
|
||||
Prerequisites <https://firefox-source-docs.mozilla.org/setup/windows_build.html>`__,
|
||||
including **MozillaBuild**.
|
||||
|
||||
You can also build NSS on the Windows Subsystem for Linux, but the resulting binaries aren't
|
||||
@ -78,7 +78,7 @@ Building NSS
|
||||
.. container::
|
||||
|
||||
Alternatively, there is a ``make`` target called "nss_build_all", which produces a similar
|
||||
result. This supports some alternative options, but can be a lot slower.
|
||||
result. This supports some alternative options, but can be a lot slower.
|
||||
|
||||
.. code::
|
||||
|
||||
@ -113,7 +113,7 @@ Building NSS
|
||||
|
||||
.. container::
|
||||
|
||||
NSS contains extensive unit tests. Scripts to run these are found in the ``tests`` directory.
|
||||
NSS contains extensive unit tests. Scripts to run these are found in the ``tests`` directory.
|
||||
Run the standard suite by:
|
||||
|
||||
.. code::
|
||||
@ -152,7 +152,7 @@ Building NSS
|
||||
|
||||
Running all tests can take a considerable amount of time.
|
||||
|
||||
Test output is stored in ``tests_results/security/$HOST.$NUMBER/``. The file ``results.html``
|
||||
Test output is stored in ``tests_results/security/$HOST.$NUMBER/``. The file ``results.html``
|
||||
summarizes the results, ``output.log`` captures all the test output.
|
||||
|
||||
Other subdirectories of ``nss/tests`` contain scripts that run a subset of the full suite. Those
|
||||
|
||||
@ -110,5 +110,4 @@ NSS 3.16.2 release notes
|
||||
.. container::
|
||||
|
||||
This Bugzilla query returns all the bugs fixed in NSS 3.16.2:
|
||||
|
||||
| https://bugzilla.mozilla.org/buglist.cgi?resolution=FIXED&classification=Components&query_format=advanced&product=NSS&target_milestone=3.16.2
|
||||
https://bugzilla.mozilla.org/buglist.cgi?resolution=FIXED&classification=Components&query_format=advanced&product=NSS&target_milestone=3.16.2
|
||||
|
||||
@ -47,7 +47,7 @@ Build instructions
|
||||
set to "0".
|
||||
|
||||
For Windows, install
|
||||
the `MozillaBuild <https://developer.mozilla.org/en-US/docs/Mozilla/Developer_guide/Build_Instructions/Windows_Prerequisites#mozillabuild>`__ environment
|
||||
the `MozillaBuild <https://firefox-source-docs.mozilla.org/setup/windows_build.html#install-mozillabuild>`__ environment
|
||||
and Microsoft Visual Studio 2010. (The free edition works, and other versions like Visual Studio
|
||||
2008 and Visual Studio 2012 may also work.) Use start-shell-msvc2010.bat from MozillaBuild to get
|
||||
a bash shell with the PATH already configured, and execute these instructions from within that
|
||||
@ -149,4 +149,4 @@ Build instructions
|
||||
The output of the build will be in ``mozilla/dist`` subdirectory.
|
||||
|
||||
For information on troubleshooting the build system, see
|
||||
:ref:`mozilla_projects_nss_reference_troubleshoot`.
|
||||
:ref:`mozilla_projects_nss_reference_troubleshoot`.
|
||||
|
||||
@ -842,4 +842,4 @@ NSS tools : certutil
|
||||
|
||||
| NOTES
|
||||
| 1. Mozilla NSS bug 836477
|
||||
| https://bugzilla.mozilla.org/show_bug.cgi?id=836477
|
||||
| https://bugzilla.mozilla.org/show_bug.cgi?id=836477
|
||||
|
||||
@ -3592,4 +3592,4 @@ sslfnc
|
||||
``SSL_RedoHandshake`` only initiates the new handshake by sending the first message of that
|
||||
handshake. To drive the new handshake to completion, you must either call ``SSL_ForceHandshake``
|
||||
or do another I/O operation (read or write) on the socket. A call to ``SSL_RedoHandshake`` is
|
||||
typically followed by a call to ``SSL_ForceHandshake``.
|
||||
typically followed by a call to ``SSL_ForceHandshake``.
|
||||
|
||||
@ -909,4 +909,4 @@ NSS Tools modutil
|
||||
Token "Communicator Certificate DB" password changed successfully.
|
||||
C:\modutil>
|
||||
|
||||
--------------
|
||||
--------------
|
||||
|
||||
@ -8,6 +8,7 @@ Releases
|
||||
:glob:
|
||||
:hidden:
|
||||
|
||||
nss_3_92.rst
|
||||
nss_3_91_0.rst
|
||||
nss_3_90_0.rst
|
||||
nss_3_89_1.rst
|
||||
@ -55,7 +56,7 @@ Releases
|
||||
|
||||
.. note::
|
||||
|
||||
**NSS 3.91.0** is the latest version of NSS.
|
||||
**NSS 3.92.0** is the latest version of NSS.
|
||||
Complete release notes are available here: :ref:`mozilla_projects_nss_nss_3_91_0_release_notes`
|
||||
|
||||
**NSS 3.90.0 (ESR)** is the latest version of NSS.
|
||||
@ -63,19 +64,15 @@ Releases
|
||||
|
||||
.. container::
|
||||
|
||||
Changes in 3.91 included in this release:
|
||||
Changes in 3.92 included in this release:
|
||||
|
||||
- Bug 1837431 - Implementation of the HW support check for ADX instruction
|
||||
- Bug 1836925 - Removing the support of Curve25519
|
||||
- Bug 1839795 - Fix comment about the addition of ticketSupportsEarlyData.
|
||||
- Bug 1839327 - Adding args to enable-legacy-db build
|
||||
- Bug 1835357 dbtests.sh failure in "certutil dump keys with explicit default trust flags"
|
||||
- Bug 1837617: Initialize flags in slot structures
|
||||
- Bug 1835425: Improve the length check of RSA input to avoid heap overflow
|
||||
- Bug 1829112 - Followup Fixes
|
||||
- Bug 1784253: avoid processing unexpected inputs by checking for m_exptmod base sign
|
||||
- Bug 1826652: add a limit check on order_k to avoid infinite loop
|
||||
- Bug 1834851 - Update HACL* to commit 5f6051d2.
|
||||
- Bug 1753026 - add SHA3 to cryptohi and softoken.
|
||||
- Bug 1753026: HACL SHA3
|
||||
- Bug 1836781 - Disabling ASM C25519 for A but X86_64
|
||||
- Bug 1822935 - Set nssckbi version number to 2.62.
|
||||
- Bug 1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS.
|
||||
- Bug 1839992 - Add 4 SSL.com Root CA certificates.
|
||||
- Bug 1840429 - Add Sectigo E46 and R46 Root CA certificates.
|
||||
- Bug 1840437 - Add LAWtrust Root CA2 (4096).
|
||||
- Bug 1822936 - Remove E-Tugra Certification Authority root.
|
||||
- Bug 1827224 - Remove Camerfirma Chambers of Commerce Root.
|
||||
- Bug 1840505 - Remove Hongkong Post Root CA 1.
|
||||
- Bug 1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3.
|
||||
- Bug 1842937 - Avoid redefining BYTE_ORDER on hppa Linux.
|
||||
|
||||
66
security/nss/doc/rst/releases/nss_3_92.rst
Normal file
66
security/nss/doc/rst/releases/nss_3_92.rst
Normal file
@ -0,0 +1,66 @@
|
||||
.. _mozilla_projects_nss_nss_3_92_release_notes:
|
||||
|
||||
NSS 3.92 release notes
|
||||
======================
|
||||
|
||||
`Introduction <#introduction>`__
|
||||
--------------------------------
|
||||
|
||||
.. container::
|
||||
|
||||
Network Security Services (NSS) 3.92 was released on *27 July 2023**.
|
||||
|
||||
|
||||
.. _distribution_information:
|
||||
|
||||
`Distribution Information <#distribution_information>`__
|
||||
--------------------------------------------------------
|
||||
|
||||
.. container::
|
||||
|
||||
The HG tag is NSS_3_92_RTM. NSS 3.92 requires NSPR 4.35 or newer.
|
||||
|
||||
NSS 3.92 source distributions are available on ftp.mozilla.org for secure HTTPS download:
|
||||
|
||||
- Source tarballs:
|
||||
https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_92_RTM/src/
|
||||
|
||||
Other releases are available :ref:`mozilla_projects_nss_releases`.
|
||||
|
||||
.. _changes_in_nss_3.92:
|
||||
|
||||
`Changes in NSS 3.92 <#changes_in_nss_3.92>`__
|
||||
----------------------------------------------------
|
||||
|
||||
.. container::
|
||||
|
||||
- Bug 1822935 - Set nssckbi version number to 2.62.
|
||||
- Bug 1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS.
|
||||
- Bug 1839992 - Add 4 SSL.com Root CA certificates.
|
||||
- Bug 1840429 - Add Sectigo E46 and R46 Root CA certificates.
|
||||
- Bug 1840437 - Add LAWtrust Root CA2 (4096).
|
||||
- Bug 1822936 - Remove E-Tugra Certification Authority root.
|
||||
- Bug 1827224 - Remove Camerfirma Chambers of Commerce Root.
|
||||
- Bug 1840505 - Remove Hongkong Post Root CA 1.
|
||||
- Bug 1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3.
|
||||
- Bug 1842937 - Avoid redefining BYTE_ORDER on hppa Linux.
|
||||
|
||||
`Compatibility <#compatibility>`__
|
||||
----------------------------------
|
||||
|
||||
.. container::
|
||||
|
||||
NSS 3.92 shared libraries are backwards-compatible with all older NSS 3.x shared
|
||||
libraries. A program linked with older NSS 3.x shared libraries will work with
|
||||
this new version of the shared libraries without recompiling or
|
||||
relinking. Furthermore, applications that restrict their use of NSS APIs to the
|
||||
functions listed in NSS Public Functions will remain compatible with future
|
||||
versions of the NSS shared libraries.
|
||||
|
||||
`Feedback <#feedback>`__
|
||||
------------------------
|
||||
|
||||
.. container::
|
||||
|
||||
Bugs discovered should be reported by filing a bug report on
|
||||
`bugzilla.mozilla.org <https://bugzilla.mozilla.org/enter_bug.cgi?product=NSS>`__ (product NSS).
|
||||
@ -22,12 +22,12 @@
|
||||
* The format of the version string should be
|
||||
* "<major version>.<minor version>[.<patch level>[.<build number>]][ <ECC>][ <Beta>]"
|
||||
*/
|
||||
#define NSS_VERSION "3.92" _NSS_CUSTOMIZED " Beta"
|
||||
#define NSS_VERSION "3.92" _NSS_CUSTOMIZED
|
||||
#define NSS_VMAJOR 3
|
||||
#define NSS_VMINOR 92
|
||||
#define NSS_VPATCH 0
|
||||
#define NSS_VBUILD 0
|
||||
#define NSS_BETA PR_TRUE
|
||||
#define NSS_BETA PR_FALSE
|
||||
|
||||
#ifndef RC_INVOKED
|
||||
|
||||
|
||||
@ -17,11 +17,11 @@
|
||||
* The format of the version string should be
|
||||
* "<major version>.<minor version>[.<patch level>[.<build number>]][ <ECC>][ <Beta>]"
|
||||
*/
|
||||
#define SOFTOKEN_VERSION "3.92" SOFTOKEN_ECC_STRING " Beta"
|
||||
#define SOFTOKEN_VERSION "3.92" SOFTOKEN_ECC_STRING
|
||||
#define SOFTOKEN_VMAJOR 3
|
||||
#define SOFTOKEN_VMINOR 92
|
||||
#define SOFTOKEN_VPATCH 0
|
||||
#define SOFTOKEN_VBUILD 0
|
||||
#define SOFTOKEN_BETA PR_TRUE
|
||||
#define SOFTOKEN_BETA PR_FALSE
|
||||
|
||||
#endif /* _SOFTKVER_H_ */
|
||||
|
||||
@ -19,12 +19,12 @@
|
||||
* The format of the version string should be
|
||||
* "<major version>.<minor version>[.<patch level>[.<build number>]][ <Beta>]"
|
||||
*/
|
||||
#define NSSUTIL_VERSION "3.92 Beta"
|
||||
#define NSSUTIL_VERSION "3.92"
|
||||
#define NSSUTIL_VMAJOR 3
|
||||
#define NSSUTIL_VMINOR 92
|
||||
#define NSSUTIL_VPATCH 0
|
||||
#define NSSUTIL_VBUILD 0
|
||||
#define NSSUTIL_BETA PR_TRUE
|
||||
#define NSSUTIL_BETA PR_FALSE
|
||||
|
||||
SEC_BEGIN_PROTOS
|
||||
|
||||
|
||||
Loading…
Reference in New Issue
Block a user