Mozilla SSL/TLS module for the Apache HTTP server
The mod_nss module provides strong cryptography for the Apache Web server via the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols using the Network Security Services (NSS) security library.
- Developed at Apache:Modules
- Sources inherited from project openSUSE:Factory
-
3
derived packages
- Download package
-
Checkout Package
osc -A https://api.opensuse.org checkout openSUSE:Leap:16.0:FactoryCandidates/apache2-mod_nss && cd $_
- Create Badge
Refresh
Refresh
Source Files
Filename | Size | Changed |
---|---|---|
0001-Fix-up-some-broken-cipher-strings-from-a-bad- |
0000006361 6.21 KB | |
README-SUSE.txt | 0000003829 3.74 KB | |
apache2-mod_nss.changes | 0000017223 16.8 KB | |
apache2-mod_nss.spec | 0000009074 8.86 KB | |
listen_nss.conf | 0000001580 1.54 KB | |
mod_nss-1.0.15.tar.gz | 0000183083 179 KB | |
mod_nss-gencert-correct-ownership.patch | 0000000513 513 Bytes | |
mod_nss-gencert_use_ss_instead_of_netstat.patch | 0000002355 2.3 KB | |
mod_nss-migrate.patch | 0000000419 419 Bytes | |
mod_nss.conf.in | 0000013001 12.7 KB | |
vhost-nss.template | 0000005532 5.4 KB |
Revision 28 (latest revision is 37)
Dominique Leuenberger (dimstar_suse)
accepted
request 585105
from
Petr Gajdos (pgajdos)
(revision 28)
- Since the update to NSS 3.35, the default NSS certificate database format changed from Berkley DB to SQLite - use %license tag - Update to 1.0.15 * Try to auto-detect the NSS database format if not specified * Update nss_pcache.8 man page to drop directory and prefix * When a token is configured in password file only authenticate once * Return an error when NSSPassPhraseDialog is invalid * Move 3DES ciphers down from HIGH to MEDIUM to match OpenSSL 1.0.2k+ * Add -Werror=implicit-function-declaration to CFLAGS * Handle group membership when testing for file permissions * NSS system-wide policy now disables SSLv3, don't use it in tests * Add missing error messages for libssl errors * Fix doc typo in SSL_[SERVER|CLIENT]_SAN_IPaddr env variable name * When including additional test config use specific extension * Fix the TLS Session ID cache * Make an invalid protocol setting fatal * Don't use same NSS db in nss_pcache as mod_nss, use NSS_NoDB_Init() * Add info log message when FIPS is enabled * Add AES-256 and drop DES, CAST128, SKIPJACK as wrapping key types * Fix removal of CR from PEM certificates * Add OCSP caching and timeout tuning knobs * Check the NSS database directory permissions as well as the files inside it for read access on startup. * Add in simple aliases for ciphers to fix those that don't follow the pattern (dhe_rsa_aes_128_sha256, dhe_rsa_aes_256_sha256) and those with typos (camelia_128_sha, camelia_256_sha) * Fix semaphore leak (forwarded request 584463 from vitezslav_cizek)
Comments 0