diff options
author | Rob Crittenden <rcritten@redhat.com> | 2016-02-29 17:41:39 -0500 |
---|---|---|
committer | Rob Crittenden <rcritten@redhat.com> | 2016-03-01 11:42:27 -0500 |
commit | a06c95d3b9bbefd6a4bf6c6561d6e32891f791f4 (patch) | |
tree | 5a65fc0740493603240c26fb8b65e52f2f661dd0 | |
parent | baa0d0257d14725790bda2b727b722f8829ade23 (diff) | |
download | mod_nss-a06c95d3b9bbefd6a4bf6c6561d6e32891f791f4.tar.gz mod_nss-a06c95d3b9bbefd6a4bf6c6561d6e32891f791f4.tar.xz mod_nss-a06c95d3b9bbefd6a4bf6c6561d6e32891f791f4.zip |
Update ChangeLog: DHE ciphers, gencert, FIPS, permission, ciphers
* Check for Apache user owner/group read permissions of NSS database
* Update default ciphers to something more modern and secure
* Fix test for DH cipher directive
* Check for test and netstat before trying to use them
* Don't ignore NSSProtocol when NSSFIPS is enabled
Based on patch by Matthew Harmsen <mharmsen@redhat.com>
* Use proper shell syntax to avoid creating /0
* tests: Centralize the openssl ciphers flags when comparing
* Basic test case for DHE cipher negotiation
* Remove -DH from test strings, duplicate test, fix test
* Add server support for DHE ciphers.
-rw-r--r-- | ChangeLog | 28 |
1 files changed, 28 insertions, 0 deletions
@@ -1,3 +1,31 @@ +2016-02-29 Rob Crittenden <rcritten@redhat.com> + + * Fix test for DH cipher directive + * Check for test and netstat before trying to use them + * Don't ignore NSSProtocol when NSSFIPS is enabled + Based on patch by Matthew Harmsen <mharmsen@redhat.com> + +2016-02-24 Rob Crittenden <rcritten@redhat.com> + + * Use proper shell syntax to avoid creating /0 + +2016-02-15 Rob Crittenden <rcritten@redhat.com> + + * tests: Centralize the openssl ciphers flags when comparing + +2016-02-10 Rob Crittenden <rcritten@redhat.com> + + * Basic test case for DHE cipher negotiation + +2016-02-09 Rob Crittenden <rcritten@redhat.com> + + * Remove -DH from test strings, duplicate test, fix test + +2016-02-08 Christian Heimes <cheimes@redhat.com> + * Add server support for DHE ciphers. + Similar patch was provided by Vitezslav Cizek <vcizek@suse.com> + Heavily modified by Rob Crittenden <rcritten@redhat.com> + 2016-01-18 Rob Crittenden <rcritten@redhat.com> * Drop the check that NSSProxyNickname be required * Add basic reverse proxy test case |