mod_nss.git/docs, branch master Unnamed repository; edit this file 'description' to name the repository. Check filesystem permissions on NSS database at startup 2016-03-01T16:42:27+00:00 Rob Crittenden rcritten@redhat.com 2016-03-01T03:33:23+00:00 105d65bfedfa0e381dcebd197ef67aab799fc8b1 See if the configured user has read access to the NSS database during initialization so the server can gracefully shutdown rather than ending up in a forking loop because the database is owned by root and is therefore unreadable once Apache starts forking. Adds a new configuration option, NSSSkipPermissionCheck <on/off>, to skip this check in case something goes wrong. https://fedorahosted.org/mod_nss/ticket/3 
See if the configured user has read access to the NSS database
during initialization so the server can gracefully shutdown
rather than ending up in a forking loop because the database is
owned by root and is therefore unreadable once Apache starts
forking.

Adds a new configuration option, NSSSkipPermissionCheck <on/off>,
to skip this check in case something goes wrong.

https://fedorahosted.org/mod_nss/ticket/3
Add server support for DHE ciphers 2016-02-29T21:09:17+00:00 Christian Heimes cheimes@redhat.com 2016-02-08T14:52:25+00:00 9205812071bcd7bcf098efd80b82ec2bc1a62da4 Similar patch was provided by Vitezslav Cizek <vcizek@suse.com> Heavily modified by Rob Crittenden <rcritten@redhat.com> https://fedorahosted.org/mod_nss/ticket/15 
Similar patch was provided by Vitezslav Cizek <vcizek@suse.com>

Heavily modified by Rob Crittenden <rcritten@redhat.com>

https://fedorahosted.org/mod_nss/ticket/15
Cleanup to remove a slew of trailing whitespace 2015-10-02T20:51:57+00:00 Rob Crittenden rcritten@redhat.com 2015-10-02T19:34:36+00:00 44409398b2bb63a092e16db686f4ddcd2cd88554 






Add support for Server Name Indication (SNI)
2015-10-02T20:51:56+00:00

Rob Crittenden
rcritten@redhat.com

2015-09-24T21:13:20+00:00

00fe09480dfd28674661830d8a045e0f560bbe51

Uses a hash table to pair up server names and nicknames and
a lookup is done during the handshake to determine which
nickname to be used, and therefore which VirtualHost.

Based heavily on patch from Stanislav Tokos <stokos@suse.de>





Uses a hash table to pair up server names and nicknames and
a lookup is done during the handshake to determine which
nickname to be used, and therefore which VirtualHost.

Based heavily on patch from Stanislav Tokos <stokos@suse.de>







Add 'v' to refererences of protocols (e.g. SSLv3)
2015-07-29T12:45:50+00:00

Matthew Harmsen
mharmsen@redhat.com

2015-07-28T20:17:57+00:00

bb1011ce19730ec168512205dfcf5f0b5d9e4657

BZ #1066236





BZ #1066236







Add support for TLS Session Tickets (RFC 5077)
2015-06-11T17:44:04+00:00

Rob Crittenden
rcritten@redhat.com

2015-06-11T17:44:04+00:00

b77f4c23aa0f8af00d119299339d0f766a071e48

New server/vhost config option, NSSSessionTickets, to enable
or disable TLS Session Tickets support. This is off by default
in NSS.





New server/vhost config option, NSSSessionTickets, to enable
or disable TLS Session Tickets support. This is off by default
in NSS.







Add RenegBufferSize option
2015-06-10T22:02:17+00:00

Rob Crittenden
rcritten@redhat.com

2015-06-10T22:01:45+00:00

a62526d425dcbeaa1486cf685c2927afa0459e1d

Control the buffer size used on a POST when SSL renegotiation is
being done. The default is 128K.

Resolves BZ 1214366





Control the buffer size used on a POST when SSL renegotiation is
being done. The default is 128K.

Resolves BZ 1214366







Add compatibility for mod_ssl-style cipher definitions
2014-12-02T18:59:03+00:00

Rob Crittenden
rcritten@redhat.com

2014-11-12T16:48:23+00:00

2d1650900f4d47dc43400d826c0f7e1a7c5229b8

- Add Camelia ciphers
- Remove Fortezza ciphers
- Add TLSv1.2-specific ciphers

Resolves BZ: #862938





- Add Camelia ciphers
- Remove Fortezza ciphers
- Add TLSv1.2-specific ciphers

Resolves BZ: #862938







Completely remove support for SSLv2
2014-11-12T16:35:06+00:00

Rob Crittenden
rcritten@redhat.com

2014-11-06T21:44:20+00:00

f8b6ab7dab90e92537de3cddc01d915d31bb87fc












Add support for sqlite NSS databases
2014-10-28T21:41:22+00:00

Rob Crittenden
rcritten@redhat.com

2014-10-28T21:41:22+00:00

b5d1505fc81a33aa10d013efd247d00f631fc681

We do a chdir() to the NSS database location so that libnssckbi.so
is available when the database is opened. Strip off a sql: prefix
if one is available. This allows the new sqlite format to work.

Add an additional test pass configuring NSS using the sqlite format.
This requires a bit of a hack to pass in the value to python but
it will work for now.

Resolves: #1057650





We do a chdir() to the NSS database location so that libnssckbi.so
is available when the database is opened. Strip off a sql: prefix
if one is available. This allows the new sqlite format to work.

Add an additional test pass configuring NSS using the sqlite format.
This requires a bit of a hack to pass in the value to python but
it will work for now.

Resolves: #1057650