index.rst (9581B)
1 .. _mozilla_projects_nss_nss_3_12_2_release_notes_html: 2 3 NSS_3.12.2_release_notes.html 4 ============================= 5 6 .. _nss_3.12.2_release_notes: 7 8 `NSS 3.12.2 Release Notes <#nss_3.12.2_release_notes>`__ 9 -------------------------------------------------------- 10 11 .. container:: 12 13 .. _2008-10-20: 14 15 `2008-10-20 <#2008-10-20>`__ 16 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 17 18 .. container:: 19 20 Newsgroup: `mozilla.dev.tech.crypto <news://news.mozilla.org/mozilla.dev.tech.crypto>`__ 21 22 `Contents <#contents>`__ 23 ~~~~~~~~~~~~~~~~~~~~~~~~ 24 25 .. container:: 26 27 - `Introduction <#introduction>`__ 28 - `Distribution Information <#distribution_information>`__ 29 - `New in NSS 3.12.2 <#new_in_nss_3.12.2>`__ 30 - `Bugs Fixed <#bugs_fixed>`__ 31 - `Documentation <#documentation>`__ 32 - `Compatibility <#compatibility>`__ 33 - `Feedback <#feedback>`__ 34 35 -------------- 36 37 `Introduction <#introduction>`__ 38 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 39 40 .. container:: 41 42 Network Security Services (NSS) 3.12.2 is a patch release for NSS 3.12. The bug fixes in NSS 43 3.12.2 are described in the "`Bugs Fixed <#bugs_fixed>`__" section below. 44 NSS 3.12.2 is tri-licensed under the MPL 1.1/GPL 2.0/LGPL 2.1. 45 46 -------------- 47 48 49 50 `Distribution Information <#distribution_information>`__ 51 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 52 53 .. container:: 54 55 The CVS tag for the NSS 3.12.2 release is NSS_3_12_2_RTM. NSS 3.12.2 requires `NSPR 56 4.7.1 <https://www.mozilla.org/projects/nspr/release-notes/nspr471.html>`__. 57 See the `Documentation <#documentation>`__ section for the build instructions. 58 NSS 3.12.2 source and binary distributions are also available on ftp.mozilla.org for secure HTTPS 59 download: 60 61 - Source tarballs: 62 https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_12_2_RTM/src/. 63 - Binary distributions: 64 https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_12_2_RTM/. Both debug and 65 optimized builds are provided. Go to the subdirectory for your platform, DBG (debug) or OPT 66 (optimized), to get the tar.gz or zip file. The tar.gz or zip file expands to an nss-3.12.2 67 directory containing three subdirectories: 68 69 - include - NSS header files 70 - lib - NSS shared libraries 71 - bin< - `NSS Tools <https://www.mozilla.org/projects/security/pki/nss/tools/>`__ and test 72 programs 73 74 You also need to download the NSPR 4.7.1 binary distributions to get the NSPR 4.7.1 header files 75 and shared libraries, which NSS 3.12.2 requires. NSPR 4.7.1 binary distributions are in 76 https://ftp.mozilla.org/pub/mozilla.org/nspr/releases/v4.7.1/. 77 78 -------------- 79 80 .. _new_in_nss_3.12.2: 81 82 `New in NSS 3.12.2 <#new_in_nss_3.12.2>`__ 83 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 84 85 .. container:: 86 87 - New functions in the nss shared library: 88 89 - SEC_PKCS12AddCertOrChainAndKey (see p12.h) 90 91 - New PKCS11 errors (see secerr.h) 92 93 - SEC_ERROR_PKCS11_GENERAL_ERROR 94 - SEC_ERROR_PKCS11_FUNCTION_FAILED 95 - SEC_ERROR_PKCS11_DEVICE_ERROR 96 97 -------------- 98 99 .. _bugs_fixed: 100 101 `Bugs Fixed <#bugs_fixed>`__ 102 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 103 104 .. container:: 105 106 The following bugs have been fixed in NSS 3.12.2. 107 108 - `Bug 200704 <https://bugzilla.mozilla.org/show_bug.cgi?id=200704>`__: PKCS11: invalid session 109 handle 0 110 - `Bug 205434 <https://bugzilla.mozilla.org/show_bug.cgi?id=205434>`__: Fully implement new 111 libPKIX cert verification API from bug 294531 112 - `Bug 302670 <https://bugzilla.mozilla.org/show_bug.cgi?id=302670>`__: Use the installed 113 libz.so where available 114 - `Bug 305693 <https://bugzilla.mozilla.org/show_bug.cgi?id=305693>`__: shlibsign generates PQG 115 for every run 116 - `Bug 311483 <https://bugzilla.mozilla.org/show_bug.cgi?id=311483>`__: exposing 117 includeCertChain as a parameter to SEC_PKCS12AddCertAndKey 118 - `Bug 390527 <https://bugzilla.mozilla.org/show_bug.cgi?id=390527>`__: get rid of pkixErrorMsg 119 variable in PKIX_Error 120 - `Bug 391560 <https://bugzilla.mozilla.org/show_bug.cgi?id=391560>`__: libpkix does not 121 consistently return PKIX_ValidateNode tree that truly represent failure reasons 122 - `Bug 408260 <https://bugzilla.mozilla.org/show_bug.cgi?id=408260>`__: certutil usage doesn't 123 give enough information about trust arguments 124 - `Bug 412311 <https://bugzilla.mozilla.org/show_bug.cgi?id=412311>`__: Replace 125 PR_INTERVAL_NO_WAIT with PR_INTERVAL_NO_TIMEOUT in client initialization calls 126 - `Bug 423839 <https://bugzilla.mozilla.org/show_bug.cgi?id=423839>`__: Add multiple PKCS#11 127 token password command line option to NSS tools. 128 - `Bug 432260 <https://bugzilla.mozilla.org/show_bug.cgi?id=432260>`__: [[@ 129 pkix_pl_HttpDefaultClient_HdrCheckComplete - PKIX_PL_Memcpy] crashes when there is no 130 content-length header in the http response 131 - `Bug 436599 <https://bugzilla.mozilla.org/show_bug.cgi?id=436599>`__: PKIX: AIA extension is 132 not used in some Bridge CA / known certs configuration 133 - `Bug 437804 <https://bugzilla.mozilla.org/show_bug.cgi?id=437804>`__: certutil -R for cert 134 renewal should derive the subject from the cert if none is specified. 135 - `Bug 444974 <https://bugzilla.mozilla.org/show_bug.cgi?id=444974>`__: Crash upon reinsertion 136 of E-Identity smartcard 137 - `Bug 447563 <https://bugzilla.mozilla.org/show_bug.cgi?id=447563>`__: modutil -add prints no 138 error explanation on failure 139 - `Bug 448431 <https://bugzilla.mozilla.org/show_bug.cgi?id=448431>`__: PK11_CreateMergeLog() 140 declaration causes gcc warning when compiling with -Wstrict-prototypes 141 - `Bug 449334 <https://bugzilla.mozilla.org/show_bug.cgi?id=449334>`__: pk12util has duplicate 142 options letters 143 - `Bug 449725 <https://bugzilla.mozilla.org/show_bug.cgi?id=449725>`__: signver is still using 144 static libraries. 145 - `Bug 450427 <https://bugzilla.mozilla.org/show_bug.cgi?id=450427>`__: Add COMODO ECC 146 Certification Authority certificate to NSS 147 - `Bug 450536 <https://bugzilla.mozilla.org/show_bug.cgi?id=450536>`__: Remove obsolete XP_MAC 148 code 149 - `Bug 451024 <https://bugzilla.mozilla.org/show_bug.cgi?id=451024>`__: certutil.exe crashes 150 with Segmentation fault inside PR_Cleanup 151 - `Bug 451927 <https://bugzilla.mozilla.org/show_bug.cgi?id=451927>`__: 152 security/coreconf/WINNT6.0.mk has invalid defines 153 - `Bug 452751 <https://bugzilla.mozilla.org/show_bug.cgi?id=452751>`__: Slot leak in 154 PK11_FindSlotsByNames 155 - `Bug 452865 <https://bugzilla.mozilla.org/show_bug.cgi?id=452865>`__: Remove obsolete linker 156 flags needed when libnss3 was linked with libsoftokn3 157 - `Bug 454961 <https://bugzilla.mozilla.org/show_bug.cgi?id=454961>`__: Fix the implementation 158 and use of pr_fgets in signtool 159 - `Bug 455348 <https://bugzilla.mozilla.org/show_bug.cgi?id=455348>`__: Change hyphens to 160 underscores in DEBUG_$(shell whoami). 161 - `Bug 455424 <https://bugzilla.mozilla.org/show_bug.cgi?id=455424>`__: nssilckt.h defines the 162 enumeration constant 'Lock' 163 - `Bug 456036 <https://bugzilla.mozilla.org/show_bug.cgi?id=456036>`__: Stubs for deprecated 164 functions in lib/certdb/stanpcertdb.c should set the PR_NOT_IMPLEMENTED_ERROR error. 165 - `Bug 456854 <https://bugzilla.mozilla.org/show_bug.cgi?id=456854>`__: CERT_DecodeCertPackage 166 does not set NSPR error code upon error 167 - `Bug 457980 <https://bugzilla.mozilla.org/show_bug.cgi?id=457980>`__: hundreds of kilobytes of 168 useless strings in libPKIX 169 - `Bug 457984 <https://bugzilla.mozilla.org/show_bug.cgi?id=457984>`__: Enable PKCS11 module 170 logging in optimized builds 171 - `Bug 458905 <https://bugzilla.mozilla.org/show_bug.cgi?id=458905>`__: Memory leaks in PKIX 172 bridge certificates. 173 - `Bug 459231 <https://bugzilla.mozilla.org/show_bug.cgi?id=459231>`__: Memory leak in cert 174 fetching - AIA extension. 175 - `Bug 459248 <https://bugzilla.mozilla.org/show_bug.cgi?id=459248>`__: Support Intel AES 176 extensions. 177 - `Bug 459359 <https://bugzilla.mozilla.org/show_bug.cgi?id=459359>`__: ForwardBuilderState 178 object is leaked when AIA path incorrect 179 - `Bug 459481 <https://bugzilla.mozilla.org/show_bug.cgi?id=459481>`__: NSS build problem with 180 GCC 3.4.6 on OS/2 181 182 -------------- 183 184 `Documentation <#documentation>`__ 185 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 186 187 .. container:: 188 189 For a list of the primary NSS documentation pages on mozilla.org, see `NSS 190 Documentation <../index.html#Documentation>`__. New and revised documents available since the 191 release of NSS 3.11 include the following: 192 193 - `Build Instructions for NSS 3.11.4 and above <../nss-3.11.4/nss-3.11.4-build.html>`__ 194 - `NSS Shared DB <http://wiki.mozilla.org/NSS_Shared_DB>`__ 195 196 -------------- 197 198 `Compatibility <#compatibility>`__ 199 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 200 201 .. container:: 202 203 NSS 3.12.2 shared libraries are backward compatible with all older NSS 3.x shared libraries. A 204 program linked with older NSS 3.x shared libraries will work with NSS 3.12.2 shared libraries 205 without recompiling or relinking. Furthermore, applications that restrict their use of NSS APIs 206 to the functions listed in `NSS Public Functions <../ref/nssfunctions.html>`__ will remain 207 compatible with future versions of the NSS shared libraries. 208 209 -------------- 210 211 `Feedback <#feedback>`__ 212 ~~~~~~~~~~~~~~~~~~~~~~~~ 213 214 .. container:: 215 216 Bugs discovered should be reported by filing a bug report with `mozilla.org 217 Bugzilla <https://bugzilla.mozilla.org/>`__ (product NSS).