[ANNOUNCE] NSS 3.53 release

2020-06-01 Thread JC Jones
The NSS team released Network Security Services (NSS) 3.53 on 29 May 2020. NSS 3.53 will be a long-term support release, supporting Firefox 78 ESR. The NSS team would like to recognize first-time contributors: Jan-Marek Glogowski Jeff Walden The HG tag is NSS_3_53_RTM. NSS 3.53 requir

[ANNOUNCE] NSS 3.44.4 and 3.52.1 Releases

2020-05-20 Thread JC Jones
The NSS Development Team announces multiple security patch releases:  NSS 3.44.4 for NSS 3.44 NSS 3.52.1 for NSS 3.52 No new functionality is introduced in these releases. These releases fix a  security issue; users are encouraged to upgrade.   - Bug 1631576 (CVE-2020-12399) - Force a fixed leng

Re: NSS ESR release date.

2020-03-26 Thread JC Jones
On Thursday, March 26, 2020 at 9:01:57 AM UTC-7, Robert Relyea wrote: > Red Hat Planning would like to know the estimate for when the NSS > targetted for ESR will be released. We are working on the theory it will > be end of May (balancing time for PKCS #11 3.0 changes versus when ESR > needs a

[ANNOUNCE] NSS 3.50 Release

2020-02-13 Thread JC Jones
The NSS team has released Network Security Services (NSS) 3.50 on 7 February 2020, which is a minor release. The HG tag is NSS_3_50_RTM. NSS 3.50 requires NSPR 4.25 or newer. NSS 3.50 source distributions are available on ftp.mozilla.org for secure HTTPS download: https://ftp.mozilla.org/pub/m

Re: Allow users to untrust CA's provided by Firefox

2020-01-24 Thread JC Jones
On Wednesday, January 22, 2020 at 8:29:23 AM UTC-7, Richard van den Berg wrote: > As discussed in https://bugzilla.mozilla.org/show_bug.cgi?id=1606802 and > https://phabricator.services.mozilla.com/D60382 Firefox currently does > not let users fully untrust a root CA provided by Mozilla. Event thou

[ANNOUNCE] NSS 3.49.2 Release

2020-01-24 Thread JC Jones
The NSS Development Team announces multiple patch releases: - NSS 3.49.2 for NSS 3.49 No new functionality is introduced in this release. This release fixes several issues: - Bug 1606992 - Cache the most recent PBKDF1 password hash, to speed up repeated SDR operations when using profiles u

Re: [ANNOUNCE] NSS 3.48.1 and 3.49.1 Releases

2020-01-13 Thread JC Jones
On Monday, January 13, 2020 at 1:19:40 PM UTC-7, JC Jones wrote: > > Apologies but there was a build error in the 3.48.1 release archive, and the > release is being re-produced and will be replaced shortly. The NSS 3.48.1 archive is updated. The mercurial tag is https://hg.mozilla.org

Re: [ANNOUNCE] NSS 3.48.1 and 3.49.1 Releases

2020-01-13 Thread JC Jones
On Monday, January 13, 2020 at 12:49:24 PM UTC-7, JC Jones wrote: > NSS 3.48.1 source distributions are available on ftp.mozilla.org for secure > HTTPS download: > https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_48_1_RTM/src/ > > Full release notes are availa

[ANNOUNCE] NSS 3.48.1 and 3.49.1 Releases

2020-01-13 Thread JC Jones
The NSS Development Team announces multiple patch releases: - NSS 3.48.1 for NSS 3.48 - NSS 3.49.1 for NSS 3.49 No new functionality is introduced in these releases. These releases fix a performance issue: - Bug 1606992 - Cache the most recent PBKDF2 password hash, to speed up repeated SDR ope

[ANNOUNCE] NSS 3.49 Release

2020-01-09 Thread JC Jones
The NSS team has released Network Security Services (NSS) 3.49 on 3 January 2020, which is a minor release. Please accept my apologies for being late on the notice here, it was an unintentional oversight. The NSS team would like to recognize first-time contributors: Alex Henrie The HG tag is NS

[ANNOUNCE] NSS 3.48 Release

2019-12-05 Thread JC Jones
The NSS team has released Network Security Services (NSS) 3.48 on 5 December 2019, which is a minor release. The NSS team would like to recognize first-time contributors: Craig Disselkoen, Giulio Benetti, Lauri Kasanen, Tom Prince The HG tag is NSS_3_48_RTM. NSS 3.48 requires NSPR 4.24 or newer

[ANNOUNCE] NSS 3.44.3 and 3.47.1 Releases

2019-11-21 Thread JC Jones
The NSS Development Team announces multiple patch releases: NSS 3.44.3 for NSS 3.44 NSS 3.47.1 for NSS 3.47 No new functionality is introduced in these releases. Users are encouraged to upgrade. The NSS team would like to recognize first-time contributors: * Craig Disselkoen NSS 3.44.3 includ

[ANNOUNCE] NSS 3.44.2 and 3.46.1 Releases

2019-10-03 Thread JC Jones
The NSS Development Team announces multiple patch releases: * NSS 3.44.2 for NSS 3.44 * NSS 3.46.1 for NSS 3.46 No new functionality is introduced in these releases. The following fixes are included in both releases. Users are encouraged to upgrade. * 1582343 - Soft token MAC verification not c

Re: NSS 3.45 building hang on windows

2019-08-30 Thread JC Jones
On Thursday, August 29, 2019 at 7:31:46 PM UTC-7, John Jiang wrote: > Hi, > When I build NSS 3.45 on windows 2016 with VS2017, it hung at "cd freebl; > make export". > > The followings are the last outputs in the console, > ... ... > make[1]: Entering directory `/path/to/nss-3.45/nss/lib' > cd uti

[ANNOUNCE] NSS 3.45 Release

2019-07-09 Thread JC Jones
The NSS team has released Network Security Services (NSS) 3.45 on 5 July 2019, which is a minor release. The NSS team would like to recognize first-time contributors: Bastien Abadie Christopher Patton Jeremie Courreges-Anglas Marcus Burghardt Michael Shigorin Tomas Mraz

Re: Accessing Firefox key store for signing

2019-05-28 Thread JC Jones
As Ryan said, there's no mechanism to use a certificate or smart card for this purpose at the web application layer, but it's feasible to use W3C Web Authentication and a security key device to do this. Explicit confirmation of a transaction is provided in that via an extension not yet implement

Re: [ANNOUNCE] NSS 3.44 Release

2019-05-17 Thread JC Jones
On Thursday, May 16, 2019 at 9:28:39 AM UTC-7, Paul Wouters wrote: > Wait, what? > > They need work to make them simpler and better support cross compiling > for sure, but getting rid of them would really hamper our use of NSS > on different platforms. How would you support that without Makefiles

[ANNOUNCE] NSS 3.44 Release

2019-05-15 Thread JC Jones
The NSS team has released Network Security Services (NSS) 3.44 on 10 May 2019, which is a minor release. The NSS team would like to recognize first-time contributors: Kevin Jacobs, David Carlier, Alexander Scheel, and Edouard Oger. The HG tag is NSS_3_44_RTM. NSS 3.44 requires NSPR 4.21 or newe