Author: rcritten
Update of /cvs/dirsec/mod_nss
In directory cvs01.phx2.fedoraproject.org:/tmp/cvs-serv13477
Modified Files:
ChangeLog
Log Message:
Bring up to date.
Index: ChangeLog
===================================================================
RCS file: /cvs/dirsec/mod_nss/ChangeLog,v
retrieving revision 1.5
retrieving revision 1.6
diff -u -r1.5 -r1.6
--- ChangeLog 14 May 2010 15:49:33 -0000 1.5
+++ ChangeLog 22 Sep 2010 21:20:55 -0000 1.6
@@ -1,3 +1,18 @@
+2010-09-22 Rob Crittenden <rcritten(a)redhat.com>
+ * Only call PK11_ListCerts once and pass it when configuring each
+ virtual server. This saves considerable time when there are a lot
+ of certificates and/or virtual servers. (#635324)
+ * Change enforce so that we only check the validity of the certificate
+ if enforcecerts is enabled (the default).
+ Patch contributed by Wolter Eldering <wolter.eldering(a)vanad.com.cn>
+
+2010-09-17 Rob Crittenden <rcritten(a)redhat.com>
+ * Fix endless read loop in some situations when handling POST data
+ (#620856)
+ This was discovered in the dogtag TPS subsystem. I haven't been able
+ to duplicate it outside of that but it is trivial inside. This seems
+ to fix it and brings the code closer to what mod_ssl does here as well.
+
2010-05-14 Rob Crittenden <rcritten(a)redhat.com>
* Ignore SIGHUP in nss_pcache (#591889).
Contributed by Joshua Roys <roysjosh(a)gmail.com>
@@ -5,7 +20,17 @@
2010-05-13 Rob Crittenden <rcritten(a)redhat.com>
* Compare CN value of remote host with requested host in reverse proxy.
* Add configuration option to disable this, defaulting to on. (#591224)
- * Based on patch from Joshua Roys <roysjosh(a)gmail.com
+ Based on patch from Joshua Roys <roysjosh(a)gmail.com>
+
+2010-03-22 Rob Crittenden <rcritten(a)redhat.com>
+ * Update list of errors we translate
+
+2010-03-02 Rob Crittenden <rcritten(a)redhat.com>
+ * Add controls for managing SSL renegotiation
+ NSS is introducing some new controls in response to CVE-2009-3555,
+ MITM attacks via session renegotiation. This patch adds some tuning
+ so these options can be set at run time.
+ Patch contributed by Kai Engert <kengert(a)redhat.com>
2008-07-21 Rob Crittenden <rcritten(a)redhat.com>
* mod_nss 1.0.8
Show replies by thread