diff options
| author | markd <markd@pkgsrc.org> | 2014-08-12 09:43:06 +0000 |
|---|---|---|
| committer | markd <markd@pkgsrc.org> | 2014-08-12 09:43:06 +0000 |
| commit | 3efbc079db430e991beff95826909b9fac19c76e (patch) | |
| tree | 193f53dadcd3c888067626ac5a52418cce3e3d68 /devel/nss | |
| parent | 7ac555d64fd1657c063449df3d9e4449c57f4295 (diff) | |
| download | pkgsrc-3efbc079db430e991beff95826909b9fac19c76e.tar.gz | |
Update to nss 3.16.4
This release consists primarily of CA certificate changes as listed
below, and includes a small number of bug fixes.
Notable Changes:
* The following 1024-bit root CA certificate was restored to allow more
time to develop a better transition strategy for affected sites. It was
removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy
forum led to the decision to keep this root included longer in order to
give website administrators more time to update their web servers.
- CN = GTE CyberTrust Global Root
* In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification
Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit
intermediate CA certificate has been included, without explicit trust.
The intention is to mitigate the effects of the previous removal of the
1024-bit Entrust.net root certificate, because many public Internet
sites still use the "USERTrust Legacy Secure Server CA" intermediate
certificate that is signed by the 1024-bit Entrust.net root certificate.
The inclusion of the intermediate certificate is a temporary measure to
allow those sites to function, by allowing them to find a trust path to
another 2048-bit root CA certificate. The temporarily included
intermediate certificate expires November 1, 2015.
Diffstat (limited to 'devel/nss')
| -rw-r--r-- | devel/nss/Makefile | 4 | ||||
| -rw-r--r-- | devel/nss/distinfo | 8 |
2 files changed, 6 insertions, 6 deletions
diff --git a/devel/nss/Makefile b/devel/nss/Makefile index 19f07a05abf..d243328cb1a 100644 --- a/devel/nss/Makefile +++ b/devel/nss/Makefile @@ -1,7 +1,7 @@ -# $NetBSD: Makefile,v 1.85 2014/07/05 04:53:39 ryoon Exp $ +# $NetBSD: Makefile,v 1.86 2014/08/12 09:43:06 markd Exp $ DISTNAME= nss-${NSS_RELEASE:S/.0$//} -NSS_RELEASE= 3.16.3 +NSS_RELEASE= 3.16.4 CATEGORIES= security MASTER_SITES= ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_RELEASE:S/.0$//:S/./_/g}_RTM/src/} diff --git a/devel/nss/distinfo b/devel/nss/distinfo index 3db725bdc2c..6c4e6e5a4d3 100644 --- a/devel/nss/distinfo +++ b/devel/nss/distinfo @@ -1,8 +1,8 @@ -$NetBSD: distinfo,v 1.39 2014/07/05 04:53:39 ryoon Exp $ +$NetBSD: distinfo,v 1.40 2014/08/12 09:43:06 markd Exp $ -SHA1 (nss-3.16.3.tar.gz) = a1937de60e03a24526591d883bcfe31a3acc8ef4 -RMD160 (nss-3.16.3.tar.gz) = abb10b9863d1198c97b124bd627861ecbcb5ea15 -Size (nss-3.16.3.tar.gz) = 6426732 bytes +SHA1 (nss-3.16.4.tar.gz) = ee2c8601041b938ecfcba520280dc3059b6cbffd +RMD160 (nss-3.16.4.tar.gz) = 958e1ed8fa110f1adeb149c164338cf42f281ce3 +Size (nss-3.16.4.tar.gz) = 6428795 bytes SHA1 (patch-am) = ee4c4beeb120397852fc4b06b7dd54534d0d5ac5 SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69 SHA1 (patch-md) = 0a09fd2abb8674a2d301f1b6a5331af5db94178f |