[389-commits] mod_nss ChangeLog,1.5,1.6

[Rob Crittenden]

Author: rcritten

Update of /cvs/dirsec/mod_nss
In directory cvs01.phx2.fedoraproject.org:/tmp/cvs-serv13477

Modified Files:
	ChangeLog 
Log Message:
Bring up to date.



Index: ChangeLog
===================================================================
RCS file: /cvs/dirsec/mod_nss/ChangeLog,v
retrieving revision 1.5
retrieving revision 1.6
diff -u -r1.5 -r1.6
--- ChangeLog	14 May 2010 15:49:33 -0000	1.5
+++ ChangeLog	22 Sep 2010 21:20:55 -0000	1.6
@@ -1,3 +1,18 @@
[phone]  Rob Crittenden <rcritten(a)redhat.com&gt;
+    * Only call PK11_ListCerts once and pass it when configuring each
+      virtual server. This saves considerable time when there are a lot
+      of certificates and/or virtual servers. (#635324)
+    * Change enforce so that we only check the validity of the certificate
+      if enforcecerts is enabled (the default).
+      Patch contributed by Wolter Eldering <wolter.eldering(a)vanad.com.cn&gt;
+
[phone]  Rob Crittenden <rcritten(a)redhat.com&gt;
+    * Fix endless read loop in some situations when handling POST data
+      (#620856)
+      This was discovered in the dogtag TPS subsystem. I haven't been able
+      to duplicate it outside of that but it is trivial inside. This seems
+      to fix it and brings the code closer to what mod_ssl does here as well.
+
 2010-05-14  Rob Crittenden <rcritten(a)redhat.com&gt;
     * Ignore SIGHUP in nss_pcache (#591889). 
       Contributed by Joshua Roys <roysjosh(a)gmail.com&gt;
@@ -5,7 +20,17 @@
 2010-05-13  Rob Crittenden <rcritten(a)redhat.com&gt;
     * Compare CN value of remote host with requested host in reverse proxy.
     * Add configuration option to disable this, defaulting to on. (#591224)
-    * Based on patch from Joshua Roys <roysjosh(a)gmail.com
+      Based on patch from Joshua Roys <roysjosh(a)gmail.com&gt;
+
[phone]  Rob Crittenden <rcritten(a)redhat.com&gt;
+    * Update list of errors we translate
+
[phone]  Rob Crittenden <rcritten(a)redhat.com&gt;
+    * Add controls for managing SSL renegotiation
+      NSS is introducing some new controls in response to CVE-2009-3555,
+      MITM attacks via session renegotiation. This patch adds some tuning
+      so these options can be set at run time.
+      Patch contributed by Kai Engert <kengert(a)redhat.com&gt;
 
 2008-07-21  Rob Crittenden <rcritten(a)redhat.com&gt;
     * mod_nss 1.0.8