[EMAIL PROTECTED] wrote:
NSS 3.11 is the most recent version is it not? Are there updated
release notes / build instructions somewhere?

The most recent version of NSS is NSS 3.11.3.  It should be
used with NSPR 4.6.3.  The CVS tags are NSS_3_11_3_RTM and
NSPR_4_6_3_RTM.

NSS 3.11.3 has a fix for an implementation error that allows
someone to forge RSA signatures if the RSA public exponent is 3.
See http://www.mozilla.org/security/announce/2006/mfsa2006-60.html.

NSPR 4.6.3 release notes are at
http://www.mozilla.org/projects/nspr/release-notes/nspr463.html.

Build instructions are:

  cvs co -r NSPR_4_6_3_RTM mozilla/nsprpub
  cvs co -r NSS_3_11_3_RTM mozilla/dbm mozilla/security/dbm
  cvs co -r NSS_3_11_3_RTM mozilla/security/coreconf mozilla/security/nss

  set environment variable BUILD_OPT to 1 (the default is debug
  build)

  set environment variable USE_64 to 1 if you want a 64-bit
  build

  set environment variable NSS_ENABLE_ECC to 1 if you want
  elliptic curve cryptography (ECC) support

  on Windows, set environment variable OS_TARGET to WIN95

  cd mozilla/security/nss (or, on Windows, cd mozilla\security\nss)
  gmake nss_build_all

Wan-Teh Chang

_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to