The NSS 3.12.4 release is now available.

Please read the NSS 3.12.4 release notes at:

https://developer.mozilla.org/NSS_3.12.4_release_notes

The CVS tag NSS_3_12_4_RTM.  NSS 3.12.4 requires NSPR 4.8.

You can check out the source from CVS by

     cvs co -r NSPR_4_8_RTM NSPR
     cvs co -r NSS_3_12_4_RTM NSS

NSS 3.12.4 source is also available on ftp.mozilla.org for secure HTTPS 
download:

   * Source tarball: 
https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_12_4_RTM/src/.

Major changes in NSS 3.12.4

   * NSS 3.12.4 is the version that we submitted to NIST for FIPS 140-2 
validation.
     Currently NSS 3.12.4 is in the "Review Pending" state in the FIPS 140-2 
pre-validation
     list at 
http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140InProcess.pdf

   * The old documentation of the expression matching syntax rules was
     incorrect, and the new corrected documentation is as follows for
     public nssutil functions (see portreq.h):

           PORT_RegExpValid
           PORT_RegExpSearch
           PORT_RegExpCaseSearch

     These functions will match a string with a shell expression. The 
expressions
     accepted are based loosely on the expressions accepted by zsh.
     Expected return values:

           NON_SXP if exp is a standard string
           INVALID_SXP if exp is a shell expression, but invalid
           IVALID_SXP if exp is a valid shell expression
     Expression matching rules:
               + * matches anything
               + ? matches one character
               + \ will escape a special character
               + $ matches the end of the string
               + Bracketed expressions:
                 [abc] matches one occurence of a, b, or c.
                 [^abc] matches any character except a, b, or c.
                 To be matched between [ and ], these characters must be 
escaped: \ ]
                 No other characters need be escaped between brackets.
                 Unnecessary escaping is permitted.
               + [a-z] matches any character between a and z, inclusive.
                 The two range-definition characters must be alphanumeric ASCII.
                 If one is upper case and the other is lower case, then the 
ASCII
                 non-alphanumeric characters between Z and a will also be in 
range.
               + [^a-z] matches any character except those between a and z, 
inclusive.
                 These forms cannot be combined, e.g [a-gp-z] does not work.
               + Exclusions:
                 As a top level, outter-most expression only, the expression
                 foo~bar will match the expression foo, provided it does not 
also
                 match the expression bar. Either expression or both may be a 
union.
                 Except between brackets, any unescaped ~ is an exclusion.
                 At most one exclusion is permitted.
                 Exclusions cannot be nested (contain other exclusions).
                 example: *~abc will match any string except abc
               + Unions:
                 (foo|bar) will match either the expression foo, or the 
expression bar.
                 At least one '|' separator is required. More are permitted.
                 Expressions inside unions may not include unions or exclusions.
                 Inside a union, to be matched and not treated as a special 
character,
                 these characters must be escaped: \ ( | ) [ ~ except when they 
occur
                 inside a bracketed expression, where only \ and ] require 
escaping.

   * New functions in the nss shared library:
           PK11_IsInternalKeySlot (see pk11pub.h)
           SECMOD_OpenNewSlot (see pk11pub.h)

   * New error codes (see secerr.h):
           SEC_ERROR_BAD_INFO_ACCESS_METHOD
           SEC_ERROR_CRL_IMPORT_FAILED

   * New OIDs (see secoidt.h)
           SEC_OID_X509_ANY_POLICY

   * The nssckbi PKCS #11 module's version changed to 1.75.

   * Support for win16 has been removed.

   * Support for OpenVMS has been removed.

-Glen Beasley



Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to