752de7e6400a17e4f602ce077526d5d4d5fdffd2: start second experimental branch JSS_EXPERIMENTAL2_BRANCH
Elio Maldonado <emaldona@redhat.com> - Thu, 09 Feb 2017 06:41:19 -0800 - rev 2141
Push 21 by emaldona@redhat.com at Thu, 09 Feb 2017 14:42:36 +0000
start second experimental branch
64d25072a22d857db9c5a4b4137247bec9f15f33: Bug 1308047 - support ECC encryption key archival and recovery
Elio Maldonado <emaldona@redhat.com> - Wed, 08 Feb 2017 20:17:34 -0800 - rev 2140
Push 21 by emaldona@redhat.com at Thu, 09 Feb 2017 14:42:36 +0000
Bug 1308047 - support ECC encryption key archival and recovery - regenerated, not ready for review yet, 31 or 31 test passed - this the last of the orginal set of patches listed in - Bug 1307859 - Pick up work done downstream for Fedora and RHEL and used by various Linux distributions - https://bugzilla.mozilla.org/show_bug.cgi?id=1307859 - an additional smaller set of patches is expected
688934f5c44fae94bd6cef2a41c2b2031498a0c8: Bug 1308029 - Resolve Javadoc build issues
Elio Maldonado <emaldona@redhat.com> - Wed, 08 Feb 2017 20:08:51 -0800 - rev 2139
Push 21 by emaldona@redhat.com at Thu, 09 Feb 2017 14:42:36 +0000
Bug 1308029 - Resolve Javadoc build issues - More info when ready for review after all patches have been tested
f125bb5adbf68090aa69a25457133ff43efbc1b3: Bug 1308027 - Merge pki-symkey into jss, a=jmagne
Elio Maldonado <emaldona@redhat.com> - Wed, 08 Feb 2017 20:04:29 -0800 - rev 2138
Push 21 by emaldona@redhat.com at Thu, 09 Feb 2017 14:42:36 +0000
Bug 1308027 - Merge pki-symkey into jss, a=jmagne - adapted to current sources - will provide additional info when the final version is ready for review
5cd3eb611cebe7bc336446d3a0d3707c483ef2a5: Bug 1308026 - JSS certificate validation does not pass up exact error from NSS, edewata
Elio Maldonado <emaldona@redhat.com> - Wed, 08 Feb 2017 19:47:17 -0800 - rev 2137
Push 21 by emaldona@redhat.com at Thu, 09 Feb 2017 14:42:36 +0000
Bug 1308026 - JSS certificate validation does not pass up exact error from NSS, edewata - The following was in the original version of the patch - - From 3c4ca8a2010889fe292704ebcc8b922f77f2f7c2 Mon Sep 17 00:00:00 2001 - From: "Endi S. Dewata" <edewata@redhat.com> - Date: Wed, 9 Dec 2015 00:30:50 +0100 - Subject: [PATCH] Added verifyCertificate() method. - - A new CryptoManager.verifyCertificate() method has been added as - an alternative to isCertValid(). If there is a certificate - validation problem, the method will throw a CertificateValidation - exception that contains the NSS error message and code. The - exception will also provide a stack trace to help troubleshoot - validation issues. - - https://fedorahosted.org/pki/ticket/850 - --- - .../jss/org/mozilla/jss/CryptoManager.java | 54 ++++++++------ - mozilla/security/jss/org/mozilla/jss/PK11Finder.c | 83 +++++++++++++++++++--- - .../jss/org/mozilla/jss/util/jss_exceptions.h | 2 + - 3 files changed, 110 insertions(+), 29 deletions(-) - - which was lost when it was regenerated with hg.
af1a5fa71a69e1f2a021764d3113d00b167b1828: Bug 1308019 - Provide Tomcat support for TLS v1.1 and TLS v1.2 via NSS through JSS
Elio Maldonado <emaldona@redhat.com> - Wed, 08 Feb 2017 18:55:43 -0800 - rev 2136
Push 21 by emaldona@redhat.com at Thu, 09 Feb 2017 14:42:36 +0000
Bug 1308019 - Provide Tomcat support for TLS v1.1 and TLS v1.2 via NSS through JSS
15967d65ec7a32bd0c590dabb5f777f757918ae3: Bug 1308017 - Un-deprecate previously deprecated methods in JSS 4.2.6
Elio Maldonado <emaldona@redhat.com> - Wed, 08 Feb 2017 15:44:09 -0800 - rev 2135
Push 21 by emaldona@redhat.com at Thu, 09 Feb 2017 14:42:36 +0000
Bug 1308017 - Un-deprecate previously deprecated methods in JSS 4.2.6
718cff0f3b3b809e0bd79a2365f50a1dc37499bb: Bug 1308013 - JSS - HSM token name was mistaken for manufacturer identifier
Elio Maldonado <emaldona@redhat.com> - Wed, 08 Feb 2017 15:36:57 -0800 - rev 2134
Push 21 by emaldona@redhat.com at Thu, 09 Feb 2017 14:42:36 +0000
Bug 1308013 - JSS - HSM token name was mistaken for manufacturer identifier
63d49fb76aee0a6a03eb266280fe6f5b08566d67: Bug 1308009 - Add support for PKCS5v2; support for secure PKCS12
Elio Maldonado <emaldona@redhat.com> - Wed, 08 Feb 2017 15:17:41 -0800 - rev 2133
Push 21 by emaldona@redhat.com at Thu, 09 Feb 2017 14:42:36 +0000
Bug 1308009 - Add support for PKCS5v2; support for secure PKCS12
f3d05b5cff6a2dd5b00fd2d276c9abe44e08e636: Bug 1308008 - Defects revealed by Coverity scan
Elio Maldonado <emaldona@redhat.com> - Wed, 08 Feb 2017 15:03:36 -0800 - rev 2132
Push 21 by emaldona@redhat.com at Thu, 09 Feb 2017 14:42:36 +0000
Bug 1308008 - Defects revealed by Coverity scan
e645b9c266ffca0466754801962ac4c1b01c51eb: Bug 1308006 - DRM failed to recovery keys when in FIPS mode (HSM + NSS)
Elio Maldonado <emaldona@redhat.com> - Wed, 08 Feb 2017 13:11:10 -0800 - rev 2131
Push 21 by emaldona@redhat.com at Thu, 09 Feb 2017 14:42:36 +0000
Bug 1308006 - DRM failed to recovery keys when in FIPS mode (HSM + NSS)
08c088d0608f6b447db60f10cc547bee13e52242: Bug 1308004 - Warnings should be cleaned up in JSS build - eliminate native warnings
Elio Maldonado <emaldona@redhat.com> - Wed, 08 Feb 2017 13:04:24 -0800 - rev 2130
Push 21 by emaldona@redhat.com at Thu, 09 Feb 2017 14:42:36 +0000
Bug 1308004 - Warnings should be cleaned up in JSS build - eliminate native warnings
598af9fe3eca826176b011183703a946d53867d7: Bug 1308000 - Incorrect socket accept error message due to bad pointer arithmetic
Elio Maldonado <emaldona@redhat.com> - Wed, 08 Feb 2017 12:57:00 -0800 - rev 2129
Push 21 by emaldona@redhat.com at Thu, 09 Feb 2017 14:42:36 +0000
Bug 1308000 - Incorrect socket accept error message due to bad pointer arithmetic
a162ae7172cba803f0bff6cbf457aa905a20b25e: Bug 1307993 - Expose updated certificate verification function in JSS
Elio Maldonado <emaldona@redhat.com> - Wed, 08 Feb 2017 11:40:21 -0800 - rev 2128
Push 21 by emaldona@redhat.com at Thu, 09 Feb 2017 14:42:36 +0000
Bug 1307993 - Expose updated certificate verification function in JSS
9e013c74baeabb5786eae771b6e36e01e517c447: Bug 1307872 - Expose NSS calls for OCSP settings
Elio Maldonado <emaldona@redhat.com> - Wed, 08 Feb 2017 11:31:47 -0800 - rev 2127
Push 21 by emaldona@redhat.com at Thu, 09 Feb 2017 14:42:36 +0000
Bug 1307872 - Expose NSS calls for OCSP settings
4d331f04a6ca2e599c21909ab6f4bf3dbf41df9d: Bug 1307863 - JSS violates Fedora packaging guidelines
Elio Maldonado <emaldona@redhat.com> - Wed, 08 Feb 2017 11:22:58 -0800 - rev 2126
Push 21 by emaldona@redhat.com at Thu, 09 Feb 2017 14:42:36 +0000
Bug 1307863 - JSS violates Fedora packaging guidelines - using cfu's hack for now
e2b21b8db4d7bbb6f538678e8b00a6520dc50566: Bug 507536 - Add IPv6 functionality to JSS, add org/mozilla/jss/util/Debug.java
Elio Maldonado <emaldona@redhat.com> - Tue, 07 Feb 2017 19:37:07 -0800 - rev 2125
Push 21 by emaldona@redhat.com at Thu, 09 Feb 2017 14:42:36 +0000
Bug 507536 - Add IPv6 functionality to JSS, add org/mozilla/jss/util/Debug.java
044329321fc9b5f1fd9c9b25d95d518bdacc40ea: Bug 507536 - Add IPv6 functionality to JSS
Elio Maldonado <emaldona@redhat.com> - Tue, 07 Feb 2017 19:34:44 -0800 - rev 2124
Push 21 by emaldona@redhat.com at Thu, 09 Feb 2017 14:42:36 +0000
Bug 507536 - Add IPv6 functionality to JSS
e5e2f877029d5c7f4beaa99f43b269f986593fad: Bug 1321350 - Keep constants backward compatible with previous versions of JSS, a=mmcclain, r=cfu
Matthew McClain <mmcclain@uplogix.com> - Fri, 27 Jan 2017 17:31:23 -0800 - rev 2123
Push 20 by emaldona@redhat.com at Sat, 28 Jan 2017 01:34:30 +0000
Bug 1321350 - Keep constants backward compatible with previous versions of JSS, a=mmcclain, r=cfu - Fix contributed by Matthew McClain <mmcclain@uplogix.com> - Trivially modified on account of recent code changes
819b115893f8aad1f972cc58221bce064a81f6e8: Bug 1331765 - Synch. up with the default branch JSS_EXPERIMENTAL_BRANCH
Elio Maldonado <emaldona@redhat.com> - Fri, 20 Jan 2017 13:16:06 -0800 - rev 2122
Push 19 by emaldona@redhat.com at Fri, 20 Jan 2017 21:16:12 +0000
Bug 1331765 - Synch. up with the default branch
(0) -1000 -300 -100 -50 -20 +20 +50 tip