Mozilla SSL/TLS module for the Apache HTTP server

Edit Package apache2-mod_nss

The mod_nss module provides strong cryptography for the Apache Web server via the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols using the Network Security Services (NSS) security library.

Refresh
Refresh
Source Files
Filename Size Changed
0001-Fix-up-some-broken-cipher-strings-from-a-bad-merge.patch 0000006361 6.21 KB
README-SUSE.txt 0000003829 3.74 KB
apache2-mod_nss.changes 0000017223 16.8 KB
apache2-mod_nss.spec 0000009074 8.86 KB
listen_nss.conf 0000001580 1.54 KB
mod_nss-1.0.15.tar.gz 0000183083 179 KB
mod_nss-gencert-correct-ownership.patch 0000000513 513 Bytes
mod_nss-gencert_use_ss_instead_of_netstat.patch 0000002355 2.3 KB
mod_nss-migrate.patch 0000000419 419 Bytes
mod_nss.conf.in 0000013001 12.7 KB
vhost-nss.template 0000005532 5.4 KB
Revision 28 (latest revision is 37)
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 585105 from Petr Gajdos's avatar Petr Gajdos (pgajdos) (revision 28)
- Since the update to NSS 3.35, the default NSS certificate
  database format changed from Berkley DB to SQLite
- use %license tag

- Update to 1.0.15
  * Try to auto-detect the NSS database format if not specified
  * Update nss_pcache.8 man page to drop directory and prefix
  * When a token is configured in password file only authenticate once
  * Return an error when NSSPassPhraseDialog is invalid
  * Move 3DES ciphers down from HIGH to MEDIUM to match OpenSSL 1.0.2k+
  * Add -Werror=implicit-function-declaration to CFLAGS
  * Handle group membership when testing for file permissions
  * NSS system-wide policy now disables SSLv3, don't use it in tests
  * Add missing error messages for libssl errors
  * Fix doc typo in SSL_[SERVER|CLIENT]_SAN_IPaddr env variable name
  * When including additional test config use specific extension
  * Fix the TLS Session ID cache
  * Make an invalid protocol setting fatal
  * Don't use same NSS db in nss_pcache as mod_nss, use NSS_NoDB_Init()
  * Add info log message when FIPS is enabled
      * Add AES-256 and drop DES, CAST128, SKIPJACK as wrapping key types
  * Fix removal of CR from PEM certificates
  * Add OCSP caching and timeout tuning knobs
  * Check the NSS database directory permissions as well as the files
    inside it for read access on startup.
  * Add in simple aliases for ciphers to fix those that
    don't follow the pattern (dhe_rsa_aes_128_sha256,
    dhe_rsa_aes_256_sha256) and those with typos
    (camelia_128_sha, camelia_256_sha)
  * Fix semaphore leak (forwarded request 584463 from vitezslav_cizek)
Comments 0
openSUSE Build Service is sponsored by