Log of /cauldron/apache-mod_nss/current/SPECS/apache-mod_nss.spec
Parent Directory
| 
Revision Log
Revision
1037990 -
(
view)
(
download)
(
annotate)
-
[select for diffs]
Modified
Mon Jun 27 23:53:47 2016 UTC
(8 years, 6 months ago)
by
spuhler
File length: 5161 byte(s)
Diff to
previous 1006993
- reversed Rev 856719 and put nss-db back to
%define nssdir %{_sysconfdir}/pki/nss/apache-mod_nss
* this way, we will have our WEB certs in a defined place apart from the others
* this is the upstream way.
Revision
555267 -
(
view)
(
download)
(
annotate)
-
[select for diffs]
Modified
Wed Dec 4 23:06:56 2013 UTC
(11 years, 1 month ago)
by
spuhler
File length: 6535 byte(s)
Diff to
previous 552013
- added patches # 20 -24
* Resolves: CVE-2013-4566, Bug # 11872
- [mod_nss-nssverifyclient.patch]
* CVE-2013-4566 mod_nss: incorrect handling of
NSSVerifyClient in directory context
* mod_nss does not respect `NSSVerifyClient` in Directory
- [mod_nss-usecases.patch]
- [DOC] making mod_nss work in FIPS mode (mharmsen)
* [mod_nss-SSLEngine-off.patch]
* Implicit SSLEngine for 443 port breaks mod_nss configuration
* [mod_nss-unused-filter_ctx.patch]
-Remove unused variable 'filter_ctx'
* [mod_nss-docs-fix.patch]
- mod_nss: documentation formatting fixes
Revision
475835 -
(
view)
(
download)
(
annotate)
-
[select for diffs]
Modified
Sat Sep 7 23:07:31 2013 UTC
(11 years, 4 months ago)
by
spuhler
File length: 6200 byte(s)
Diff to
previous 471509
- moved nss.conf to /etc/httpd/conf/conf.d so apache can find it.
- renamed libmodnss.so to mod_nss.so to be consistent with the oder mod names
- moved the certs to /etc/pki/nss/apache-mod_nss
* updated nss.conf accordingly
- changed permissions of the certs so apache can use them
* permission similar to those in nss
- changed gencert script on %post in order to create the correct certs
- added patches 1- to 17 to fix a lot of bugs from upstream (Fedora/RHEL)
* patches taken from opensuse
- mod_nss-tlsv1_1.patch: nss.conf.in missed for TLSv1.2 default.
- mod_nss-clientauth.patch: merged from RHEL6 pkg
- mod_nss-PK11_ListCerts_2.patch: merged from RHEL6 pkg
- mod_nss-no_shutdown_if_not_init_2.patch: merged from RHEL6 pkg
- mod_nss-sslmultiproxy.patch: merged from RHEL6 pkg
- make it build on both Apache2 2.4 and 2.2 systems
- Add support for TLS v1.1 and TLS v1.2
(TLS v1.2 requires mozilla nss 3.15.1 or newer.)
* merged in mod_nss-proxyvariables.patch and mod_nss-tlsv1_1.patch
from redhat to allow tls v1.1 too.
* ported the tls v1.1 patch to be tls v1.2 aware
update %_post_service and %_preun_service as per policy
* added mod_nss-proxyvariables.patch (from RHEL6 package)
* added mod_nss-tlsv1_1.patch (from RHEL6 package, enhanced with TLS 1.2)
Revision
471509 -
(
view)
(
download)
(
annotate)
-
[select for diffs]
Modified
Sat Aug 24 23:35:50 2013 UTC
(11 years, 5 months ago)
by
spuhler
File length: 6363 byte(s)
Diff to
previous 450555
- moved nss certs from {_sysconfdir}/httpd/alias to %{_sysconfdir}/pki/nss/apache-mod_nss/nssdb
* we have the ssl cert in %{_sysconfdir}/pki/ as well
This form allows you to request diffs between any two revisions of this file.
For each of the two "sides" of the diff,
enter a numeric revision.
