summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorRob Crittenden <rcritten@redhat.com>2016-02-29 17:41:39 -0500
committerRob Crittenden <rcritten@redhat.com>2016-03-01 11:42:27 -0500
commita06c95d3b9bbefd6a4bf6c6561d6e32891f791f4 (patch)
tree5a65fc0740493603240c26fb8b65e52f2f661dd0
parentbaa0d0257d14725790bda2b727b722f8829ade23 (diff)
downloadmod_nss-a06c95d3b9bbefd6a4bf6c6561d6e32891f791f4.tar.gz
mod_nss-a06c95d3b9bbefd6a4bf6c6561d6e32891f791f4.tar.xz
mod_nss-a06c95d3b9bbefd6a4bf6c6561d6e32891f791f4.zip
Update ChangeLog: DHE ciphers, gencert, FIPS, permission, ciphers
* Check for Apache user owner/group read permissions of NSS database * Update default ciphers to something more modern and secure * Fix test for DH cipher directive * Check for test and netstat before trying to use them * Don't ignore NSSProtocol when NSSFIPS is enabled Based on patch by Matthew Harmsen <mharmsen@redhat.com> * Use proper shell syntax to avoid creating /0 * tests: Centralize the openssl ciphers flags when comparing * Basic test case for DHE cipher negotiation * Remove -DH from test strings, duplicate test, fix test * Add server support for DHE ciphers.
-rw-r--r--ChangeLog28
1 files changed, 28 insertions, 0 deletions
diff --git a/ChangeLog b/ChangeLog
index 146f06c..fba627d 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,31 @@
+2016-02-29 Rob Crittenden <rcritten@redhat.com>
+
+ * Fix test for DH cipher directive
+ * Check for test and netstat before trying to use them
+ * Don't ignore NSSProtocol when NSSFIPS is enabled
+ Based on patch by Matthew Harmsen <mharmsen@redhat.com>
+
+2016-02-24 Rob Crittenden <rcritten@redhat.com>
+
+ * Use proper shell syntax to avoid creating /0
+
+2016-02-15 Rob Crittenden <rcritten@redhat.com>
+
+ * tests: Centralize the openssl ciphers flags when comparing
+
+2016-02-10 Rob Crittenden <rcritten@redhat.com>
+
+ * Basic test case for DHE cipher negotiation
+
+2016-02-09 Rob Crittenden <rcritten@redhat.com>
+
+ * Remove -DH from test strings, duplicate test, fix test
+
+2016-02-08 Christian Heimes <cheimes@redhat.com>
+ * Add server support for DHE ciphers.
+ Similar patch was provided by Vitezslav Cizek <vcizek@suse.com>
+ Heavily modified by Rob Crittenden <rcritten@redhat.com>
+
2016-01-18 Rob Crittenden <rcritten@redhat.com>
* Drop the check that NSSProxyNickname be required
* Add basic reverse proxy test case