index.rst (49427B)
1 .. _mozilla_projects_nss_nss_3_12_release_notes_html: 2 3 NSS_3.12_release_notes.html 4 =========================== 5 6 .. _nss_3.12_release_notes: 7 8 `NSS 3.12 Release Notes <#nss_3.12_release_notes>`__ 9 ---------------------------------------------------- 10 11 .. container:: 12 13 .. _17_june_2008: 14 15 `17 June 2008 <#17_june_2008>`__ 16 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 17 18 .. container:: 19 20 Newsgroup: `mozilla.dev.tech.crypto <news://news.mozilla.org/mozilla.dev.tech.crypto>`__ 21 22 `Contents <#contents>`__ 23 ~~~~~~~~~~~~~~~~~~~~~~~~ 24 25 .. container:: 26 27 - `Introduction <#introduction>`__ 28 - `Distribution Information <#distribution_information>`__ 29 - `New in NSS 3.12 <#new_in_nss_3.12>`__ 30 - `Bugs Fixed <#bugs_fixed>`__ 31 - `Documentation <#documentation>`__ 32 - `Compatibility <#compatibility>`__ 33 - `Feedback <#feedback>`__ 34 35 -------------- 36 37 `Introduction <#introduction>`__ 38 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 39 40 .. container:: 41 42 Network Security Services (NSS) 3.12 is a minor release with the following new features: 43 44 - SQLite-Based Shareable Certificate and Key Databases 45 - libpkix: an RFC 3280 Compliant Certificate Path Validation Library 46 - Camellia cipher support 47 - TLS session ticket extension (RFC 5077) 48 49 NSS 3.12 is tri-licensed under the MPL 1.1/GPL 2.0/LGPL 2.1. 50 Note: Firefox 3 uses NSS 3.12, but not the new SQLite-based shareable certificate and key 51 databases. We missed the deadline to enable that feature in Firefox 3. 52 53 -------------- 54 55 56 57 `Distribution Information <#distribution_information>`__ 58 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 59 60 .. container:: 61 62 The CVS tag for the NSS 3.12 release is NSS_3_12_RTM. NSS 3.12 requires `NSPR 63 4.7.1 <https://www.mozilla.org/projects/nspr/release-notes/nspr471.html>`__. 64 See the `Documentation <#docs>`__ section for the build instructions. 65 NSS 3.12 source and binary distributions are also available on ftp.mozilla.org for secure HTTPS 66 download: 67 68 - Source tarballs: 69 https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_12_RTM/src/. 70 - Binary distributions: 71 https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_12_RTM/. Both debug and 72 optimized builds are provided. Go to the subdirectory for your platform, DBG (debug) or OPT 73 (optimized), to get the tar.gz or zip file. The tar.gz or zip file expands to an nss-3.12 74 directory containing three subdirectories: 75 76 - include - NSS header files 77 - lib - NSS shared libraries 78 - bin - `NSS Tools <https://www.mozilla.org/projects/security/pki/nss/tools/>`__ and test 79 programs 80 81 You also need to download the NSPR 4.7.1 binary distributions to get the NSPR 4.7.1 header files 82 and shared libraries, which NSS 3.12 requires. NSPR 4.7.1 binary distributions are in 83 https://ftp.mozilla.org/pub/mozilla.org/nspr/releases/v4.7.1/. 84 NSS 3.12 libraries have the following versions: 85 86 - sqlite3: 3.3.17 87 - nssckbi: 1.70 88 - softokn3 and freebl3: 3.12.0.3 89 - other NSS libraries: 3.12.0.3 90 91 -------------- 92 93 .. _new_in_nss_3.12: 94 95 `New in NSS 3.12 <#new_in_nss_3.12>`__ 96 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 97 98 .. container:: 99 100 - 3 new shared library are shipped with NSS 3.12: 101 102 - nssutil 103 - sqlite 104 - nssdbm 105 106 - 1 new include file is shipped with NSS3.12: 107 108 - utilrename.h 109 110 - New functions in the nss shared library: 111 112 - CERT_CheckNameSpace (see cert.h) 113 - CERT_EncodeCertPoliciesExtension (see cert.h) 114 - CERT_EncodeInfoAccessExtension (see cert.h) 115 - CERT_EncodeInhibitAnyExtension (see cert.h) 116 - CERT_EncodeNoticeReference (see cert.h) 117 - CERT_EncodePolicyConstraintsExtension (see cert.h) 118 - CERT_EncodePolicyMappingExtension (see cert.h) 119 - CERT_EncodeSubjectKeyID (see certdb/cert.h) 120 - CERT_EncodeUserNotice (see cert.h) 121 - CERT_FindCRLEntryReasonExten (see cert.h) 122 - CERT_FindCRLNumberExten (see cert.h) 123 - CERT_FindNameConstraintsExten (see cert.h) 124 - CERT_GetClassicOCSPDisabledPolicy (see cert.h) 125 - CERT_GetClassicOCSPEnabledHardFailurePolicy (see cert.h) 126 - CERT_GetClassicOCSPEnabledSoftFailurePolicy (see cert.h) 127 - CERT_GetPKIXVerifyNistRevocationPolicy (see cert.h) 128 - CERT_GetUsePKIXForValidation (see cert.h) 129 - CERT_GetValidDNSPatternsFromCert (see cert.h) 130 - CERT_NewTempCertificate (see cert.h) 131 - CERT_SetOCSPTimeout (see certhigh/ocsp.h) 132 - CERT_SetUsePKIXForValidation (see cert.h) 133 - CERT_PKIXVerifyCert (see cert.h) 134 - HASH_GetType (see sechash.h) 135 - NSS_InitWithMerge (see nss.h) 136 - PK11_CreateMergeLog (see pk11pub.h) 137 - PK11_CreateGenericObject (see pk11pub.h) 138 - PK11_CreatePBEV2AlgorithmID (see pk11pub.h) 139 - PK11_DestroyMergeLog (see pk11pub.h) 140 - PK11_GenerateKeyPairWithOpFlags (see pk11pub.h) 141 - PK11_GetPBECryptoMechanism (see pk11pub.h) 142 - PK11_IsRemovable (see pk11pub.h) 143 - PK11_MergeTokens (see pk11pub.h) 144 - PK11_WriteRawAttribute (see pk11pub.h) 145 - SECKEY_ECParamsToBasePointOrderLen (see keyhi.h) 146 - SECKEY_ECParamsToKeySize (see keyhi.h) 147 - SECMOD_DeleteModuleEx (see secmod.h) 148 - SEC_GetRegisteredHttpClient (see ocsp.h) 149 - SEC_PKCS5IsAlgorithmPBEAlgTag (see secpkcs5.h) 150 - VFY_CreateContextDirect (see cryptohi.h) 151 - VFY_CreateContextWithAlgorithmID (see cryptohi.h) 152 - VFY_VerifyDataDirect (see cryptohi.h) 153 - VFY_VerifyDataWithAlgorithmID (see cryptohi.h) 154 - VFY_VerifyDigestDirect (see cryptohi.h) 155 - VFY_VerifyDigestWithAlgorithmID (see cryptohi.h) 156 157 - New macros for Camellia support (see blapit.h): 158 159 - NSS_CAMELLIA 160 - NSS_CAMELLIA_CBC 161 - CAMELLIA_BLOCK_SIZE 162 163 - New macros for RSA (see blapit.h): 164 165 - RSA_MAX_MODULUS_BITS 166 - RSA_MAX_EXPONENT_BITS 167 168 - New macros in certt.h: 169 170 - X.509 v3 171 172 - KU_ENCIPHER_ONLY 173 - CERT_MAX_SERIAL_NUMBER_BYTES 174 - CERT_MAX_DN_BYTES 175 176 - PKIX 177 178 - CERT_REV_M_DO_NOT_TEST_USING_THIS_METHOD 179 - CERT_REV_M_TEST_USING_THIS_METHOD 180 - CERT_REV_M_ALLOW_NETWORK_FETCHING 181 - CERT_REV_M_FORBID_NETWORK_FETCHING 182 - CERT_REV_M_ALLOW_IMPLICIT_DEFAULT_SOURCE 183 - CERT_REV_M_IGNORE_IMPLICIT_DEFAULT_SOURCE 184 - CERT_REV_M_SKIP_TEST_ON_MISSING_SOURCE 185 - CERT_REV_M_REQUIRE_INFO_ON_MISSING_SOURCE 186 - CERT_REV_M_IGNORE_MISSING_FRESH_INFO 187 - CERT_REV_M_FAIL_ON_MISSING_FRESH_INFO 188 - CERT_REV_M_STOP_TESTING_ON_FRESH_INFO 189 - CERT_REV_M_CONTINUE_TESTING_ON_FRESH_INFO 190 - CERT_REV_MI_TEST_EACH_METHOD_SEPARATELY 191 - CERT_REV_MI_TEST_ALL_LOCAL_INFORMATION_FIRST 192 - CERT_REV_MI_NO_OVERALL_INFO_REQUIREMENT 193 - CERT_REV_MI_REQUIRE_SOME_FRESH_INFO_AVAILABLE 194 - CERT_POLICY_FLAG_NO_MAPPING 195 - CERT_POLICY_FLAG_EXPLICIT 196 - CERT_POLICY_FLAG_NO_ANY 197 - CERT_ENABLE_LDAP_FETCH 198 - CERT_ENABLE_HTTP_FETCH 199 200 - New macro in utilrename.h: 201 202 - SMIME_AES_CBC_128 203 204 - The nssckbi PKCS #11 module's version changed to 1.70. 205 - In pkcs11n.h, all the \_NETSCAPE\_ macros are renamed with \_NSS\_ 206 207 - For example, CKO_NETSCAPE_CRL becomes CKO_NSS_CRL. 208 209 - New for PKCS #11 (see pkcs11t.h for details): 210 211 - CKK: Keys 212 213 - CKK_CAMELLIA 214 215 - CKM: Mechanisms 216 217 - CKM_SHA224_RSA_PKCS 218 - CKM_SHA224_RSA_PKCS_PSS 219 - CKM_SHA224 220 - CKM_SHA224_HMAC 221 - CKM_SHA224_HMAC_GENERAL 222 - CKM_SHA224_KEY_DERIVATION 223 - CKM_CAMELLIA_KEY_GEN 224 - CKM_CAMELLIA_ECB 225 - CKM_CAMELLIA_CBC 226 - CKM_CAMELLIA_MAC 227 - CKM_CAMELLIA_MAC_GENERAL 228 - CKM_CAMELLIA_CBC_PAD 229 - CKM_CAMELLIA_ECB_ENCRYPT_DATA 230 - CKM_CAMELLIA_CBC_ENCRYPT_DATA 231 232 - CKG: MFGs 233 234 - CKG_MGF1_SHA224 235 236 - New error codes (see secerr.h): 237 238 - SEC_ERROR_NOT_INITIALIZED 239 - SEC_ERROR_TOKEN_NOT_LOGGED_IN 240 - SEC_ERROR_OCSP_RESPONDER_CERT_INVALID 241 - SEC_ERROR_OCSP_BAD_SIGNATURE 242 - SEC_ERROR_OUT_OF_SEARCH_LIMITS 243 - SEC_ERROR_INVALID_POLICY_MAPPING 244 - SEC_ERROR_POLICY_VALIDATION_FAILED 245 - SEC_ERROR_UNKNOWN_AIA_LOCATION_TYPE 246 - SEC_ERROR_BAD_HTTP_RESPONSE 247 - SEC_ERROR_BAD_LDAP_RESPONSE 248 - SEC_ERROR_FAILED_TO_ENCODE_DATA 249 - SEC_ERROR_BAD_INFO_ACCESS_LOCATION 250 - SEC_ERROR_LIBPKIX_INTERNAL 251 252 - New mechanism flags (see secmod.h) 253 254 - PUBLIC_MECH_AES_FLAG 255 - PUBLIC_MECH_SHA256_FLAG 256 - PUBLIC_MECH_SHA512_FLAG 257 - PUBLIC_MECH_CAMELLIA_FLAG 258 259 - New OIDs (see secoidt.h) 260 261 - new EC Signature oids 262 263 - SEC_OID_ANSIX962_ECDSA_SIGNATURE_RECOMMENDED_DIGEST 264 - SEC_OID_ANSIX962_ECDSA_SIGNATURE_SPECIFIED_DIGEST 265 - SEC_OID_ANSIX962_ECDSA_SHA224_SIGNATURE 266 - SEC_OID_ANSIX962_ECDSA_SHA256_SIGNATURE 267 - SEC_OID_ANSIX962_ECDSA_SHA384_SIGNATURE 268 - SEC_OID_ANSIX962_ECDSA_SHA512_SIGNATURE 269 270 - More id-ce and id-pe OIDs from RFC 3280 271 272 - SEC_OID_X509_HOLD_INSTRUCTION_CODE 273 - SEC_OID_X509_DELTA_CRL_INDICATOR 274 - SEC_OID_X509_ISSUING_DISTRIBUTION_POINT 275 - SEC_OID_X509_CERT_ISSUER 276 - SEC_OID_X509_FRESHEST_CRL 277 - SEC_OID_X509_INHIBIT_ANY_POLICY 278 - SEC_OID_X509_SUBJECT_INFO_ACCESS 279 280 - Camellia OIDs (RFC3657) 281 282 - SEC_OID_CAMELLIA_128_CBC 283 - SEC_OID_CAMELLIA_192_CBC 284 - SEC_OID_CAMELLIA_256_CBC 285 286 - PKCS 5 V2 OIDS 287 288 - SEC_OID_PKCS5_PBKDF2 289 - SEC_OID_PKCS5_PBES2 290 - SEC_OID_PKCS5_PBMAC1 291 - SEC_OID_HMAC_SHA1 292 - SEC_OID_HMAC_SHA224 293 - SEC_OID_HMAC_SHA256 294 - SEC_OID_HMAC_SHA384 295 - SEC_OID_HMAC_SHA512 296 - SEC_OID_PKIX_TIMESTAMPING 297 - SEC_OID_PKIX_CA_REPOSITORY 298 - SEC_OID_ISO_SHA1_WITH_RSA_SIGNATURE 299 300 - Changed OIDs (see secoidt.h) 301 302 - SEC_OID_PKCS12_KEY_USAGE changed to SEC_OID_BOGUS_KEY_USAGE 303 - SEC_OID_ANSIX962_ECDSA_SIGNATURE_WITH_SHA1_DIGEST changed to 304 SEC_OID_ANSIX962_ECDSA_SHA1_SIGNATURE 305 - Note: SEC_OID_ANSIX962_ECDSA_SIGNATURE_WITH_SHA1_DIGEST is also kept for compatibility 306 reasons. 307 308 - TLS Session ticket extension (off by default) 309 310 - See SSL_ENABLE_SESSION_TICKETS in ssl.h 311 312 - New SSL error codes (see sslerr.h) 313 314 - SSL_ERROR_UNSUPPORTED_EXTENSION_ALERT 315 - SSL_ERROR_CERTIFICATE_UNOBTAINABLE_ALERT 316 - SSL_ERROR_UNRECOGNIZED_NAME_ALERT 317 - SSL_ERROR_BAD_CERT_STATUS_RESPONSE_ALERT 318 - SSL_ERROR_BAD_CERT_HASH_VALUE_ALERT 319 - SSL_ERROR_RX_UNEXPECTED_NEW_SESSION_TICKET 320 - SSL_ERROR_RX_MALFORMED_NEW_SESSION_TICKET 321 322 - New TLS cipher suites (see sslproto.h): 323 324 - TLS_RSA_WITH_CAMELLIA_128_CBC_SHA 325 - TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA 326 - TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA 327 - TLS_RSA_WITH_CAMELLIA_256_CBC_SHA 328 - TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA 329 - TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA 330 331 - Note: the following TLS cipher suites are declared but are not yet implemented: 332 333 - TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA 334 - TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA 335 - TLS_DH_ANON_WITH_CAMELLIA_128_CBC_SHA 336 - TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA 337 - TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA 338 - TLS_DH_ANON_WITH_CAMELLIA_256_CBC_SHA 339 - TLS_ECDH_anon_WITH_NULL_SHA 340 - TLS_ECDH_anon_WITH_RC4_128_SHA 341 - TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA 342 - TLS_ECDH_anon_WITH_AES_128_CBC_SHA 343 - TLS_ECDH_anon_WITH_AES_256_CBC_SHA 344 345 -------------- 346 347 .. _bugs_fixed: 348 349 `Bugs Fixed <#bugs_fixed>`__ 350 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 351 352 .. container:: 353 354 The following bugs have been fixed in NSS 3.12. 355 356 - `Bug 354403 <https://bugzilla.mozilla.org/show_bug.cgi?id=354403>`__: nssList_CreateIterator 357 returns pointer to a freed memory if the function fails to allocate a lock 358 - `Bug 399236 <https://bugzilla.mozilla.org/show_bug.cgi?id=399236>`__: pkix wrapper must print 359 debug output into stderr 360 - `Bug 399300 <https://bugzilla.mozilla.org/show_bug.cgi?id=399300>`__: PKIX error results not 361 freed after use. 362 - `Bug 414985 <https://bugzilla.mozilla.org/show_bug.cgi?id=414985>`__: Crash in 363 pkix_pl_OcspRequest_Destroy 364 - `Bug 421870 <https://bugzilla.mozilla.org/show_bug.cgi?id=421870>`__: Strsclnt crashed in PKIX 365 tests. 366 - `Bug 429388 <https://bugzilla.mozilla.org/show_bug.cgi?id=429388>`__: vfychain.main leaks 367 memory 368 - `Bug 396044 <https://bugzilla.mozilla.org/show_bug.cgi?id=396044>`__: Warning: usage of 369 uninitialized variable in ckfw/object.c(174) 370 - `Bug 396045 <https://bugzilla.mozilla.org/show_bug.cgi?id=396045>`__: Warning: usage of 371 uninitialized variable in ckfw/mechanism.c(719) 372 - `Bug 401986 <https://bugzilla.mozilla.org/show_bug.cgi?id=401986>`__: Mac OS X leopard build 373 failure in legacydb 374 - `Bug 325805 <https://bugzilla.mozilla.org/show_bug.cgi?id=325805>`__: diff considers 375 mozilla/security/nss/cmd/pk11util/scripts/pkey a binary file 376 - `Bug 385151 <https://bugzilla.mozilla.org/show_bug.cgi?id=385151>`__: Remove the link time 377 dependency from NSS to Softoken 378 - `Bug 387892 <https://bugzilla.mozilla.org/show_bug.cgi?id=387892>`__: Add Entrust root CA 379 certificate(s) to NSS 380 - `Bug 433386 <https://bugzilla.mozilla.org/show_bug.cgi?id=433386>`__: when system clock is off 381 by more than two days, OSCP check fails, can result in crash if user tries to view certificate 382 [[@ SECITEM_CompareItem_Util] [[@ memcmp] 383 - `Bug 396256 <https://bugzilla.mozilla.org/show_bug.cgi?id=396256>`__: certutil and pp do not 384 print all the GeneralNames in a CRLDP extension 385 - `Bug 398019 <https://bugzilla.mozilla.org/show_bug.cgi?id=398019>`__: correct confusing and 386 erroneous comments in DER_AsciiToTime 387 - `Bug 422866 <https://bugzilla.mozilla.org/show_bug.cgi?id=422866>`__: vfychain -pp command 388 crashes in NSS_shutdown 389 - `Bug 345779 <https://bugzilla.mozilla.org/show_bug.cgi?id=345779>`__: Useless assignment 390 statements in ec_GF2m_pt_mul_mont 391 - `Bug 349011 <https://bugzilla.mozilla.org/show_bug.cgi?id=349011>`__: please stop exporting 392 these crmf\_ symbols 393 - `Bug 397178 <https://bugzilla.mozilla.org/show_bug.cgi?id=397178>`__: Crash when entering 394 chrome://pippki/content/resetpassword.xul in URL bar 395 - `Bug 403822 <https://bugzilla.mozilla.org/show_bug.cgi?id=403822>`__: 396 pkix_pl_OcspRequest_Create can leave some members uninitialized 397 - `Bug 403910 <https://bugzilla.mozilla.org/show_bug.cgi?id=403910>`__: 398 CERT_FindUserCertByUsage() returns wrong certificate if multiple certs with same subject 399 available 400 - `Bug 404919 <https://bugzilla.mozilla.org/show_bug.cgi?id=404919>`__: memory leak in 401 sftkdb_ReadSecmodDB() (sftkmod.c) 402 - `Bug 406120 <https://bugzilla.mozilla.org/show_bug.cgi?id=406120>`__: Allow application to 403 specify OCSP timeout 404 - `Bug 361025 <https://bugzilla.mozilla.org/show_bug.cgi?id=361025>`__: Support for Camellia 405 Cipher Suites to TLS RFC4132 406 - `Bug 376417 <https://bugzilla.mozilla.org/show_bug.cgi?id=376417>`__: PK11_GenerateKeyPair 407 needs to get the key usage from the caller. 408 - `Bug 391291 <https://bugzilla.mozilla.org/show_bug.cgi?id=391291>`__: Shared Database 409 Integrity checks not yet implemented. 410 - `Bug 391292 <https://bugzilla.mozilla.org/show_bug.cgi?id=391292>`__: Shared Database 411 implementation slow 412 - `Bug 391294 <https://bugzilla.mozilla.org/show_bug.cgi?id=391294>`__: Shared Database 413 implementation really slow on network file systems 414 - `Bug 392521 <https://bugzilla.mozilla.org/show_bug.cgi?id=392521>`__: Automatic shared db 415 update fails if user opens database R/W but never supplies a password 416 - `Bug 392522 <https://bugzilla.mozilla.org/show_bug.cgi?id=392522>`__: Integrity hashes must be 417 updated when passwords are changed. 418 - `Bug 401610 <https://bugzilla.mozilla.org/show_bug.cgi?id=401610>`__: Shared DB fails on IOPR 419 tests 420 - `Bug 388120 <https://bugzilla.mozilla.org/show_bug.cgi?id=388120>`__: build error due to 421 SEC_BEGIN_PROTOS / SEC_END_PROTOS are undefined 422 - `Bug 415264 <https://bugzilla.mozilla.org/show_bug.cgi?id=415264>`__: Make Security use of new 423 NSPR rotate macros 424 - `Bug 317052 <https://bugzilla.mozilla.org/show_bug.cgi?id=317052>`__: lib/base/whatnspr.c is 425 obsolete 426 - `Bug 317323 <https://bugzilla.mozilla.org/show_bug.cgi?id=317323>`__: Set NSPR31_LIB_PREFIX to 427 empty explicitly for WIN95 and WINCE builds 428 - `Bug 320336 <https://bugzilla.mozilla.org/show_bug.cgi?id=320336>`__: SECITEM_AllocItem 429 returns a non-NULL pointer if the allocation of its 'data' buffer fails 430 - `Bug 327529 <https://bugzilla.mozilla.org/show_bug.cgi?id=327529>`__: Can't pass 0 as an 431 unnamed null pointer argument to CERT_CreateRDN 432 - `Bug 334683 <https://bugzilla.mozilla.org/show_bug.cgi?id=334683>`__: Extraneous semicolons 433 cause Empty declaration compiler warnings 434 - `Bug 335275 <https://bugzilla.mozilla.org/show_bug.cgi?id=335275>`__: Compile with the GCC 435 flag -Werror-implicit-function-declaration 436 - `Bug 354565 <https://bugzilla.mozilla.org/show_bug.cgi?id=354565>`__: fipstest sha_test needs 437 to detect SHA tests that are incorrectly configured for BIT oriented implementations 438 - `Bug 356595 <https://bugzilla.mozilla.org/show_bug.cgi?id=356595>`__: On Windows, 439 RNG_SystemInfoForRNG calls GetCurrentProcess, which returns the constant (HANDLE)-1. 440 - `Bug 357015 <https://bugzilla.mozilla.org/show_bug.cgi?id=357015>`__: On Windows, 441 ReadSystemFiles reads 21 files as opposed to 10 files in C:\WINDOWS\system32. 442 - `Bug 361076 <https://bugzilla.mozilla.org/show_bug.cgi?id=361076>`__: Clean up the 443 USE_PTHREADS related code in coreconf/SunOS5.mk. 444 - `Bug 361077 <https://bugzilla.mozilla.org/show_bug.cgi?id=361077>`__: Clean up the 445 USE_PTHREADS related code in coreconf/HP-UX*.mk. 446 - `Bug 402114 <https://bugzilla.mozilla.org/show_bug.cgi?id=402114>`__: Fix the incorrect 447 function prototypes of SSL handshake callbacks 448 - `Bug 402308 <https://bugzilla.mozilla.org/show_bug.cgi?id=402308>`__: Fix miscellaneous 449 compiler warnings in nss/cmd 450 - `Bug 402777 <https://bugzilla.mozilla.org/show_bug.cgi?id=402777>`__: lib/util can't be built 451 stand-alone. 452 - `Bug 407866 <https://bugzilla.mozilla.org/show_bug.cgi?id=407866>`__: Contributed improvement 453 to security/nss/lib/freebl/mpi/mp_comba.c 454 - `Bug 410587 <https://bugzilla.mozilla.org/show_bug.cgi?id=410587>`__: SSL_GetChannelInfo 455 returns SECSuccess on invalid arguments 456 - `Bug 416508 <https://bugzilla.mozilla.org/show_bug.cgi?id=416508>`__: Fix a \_MSC_VER typo in 457 sha512.c, and use SEC_BEGIN_PROTOS/SEC_END_PROTOS in secport.h 458 - `Bug 419242 <https://bugzilla.mozilla.org/show_bug.cgi?id=419242>`__: 'all' is not the default 459 makefile target in lib/softoken and lib/softoken/legacydb 460 - `Bug 419523 <https://bugzilla.mozilla.org/show_bug.cgi?id=419523>`__: Export 461 Cert_NewTempCertificate. 462 - `Bug 287061 <https://bugzilla.mozilla.org/show_bug.cgi?id=287061>`__: CRL number should be a 463 big integer, not ulong 464 - `Bug 301213 <https://bugzilla.mozilla.org/show_bug.cgi?id=301213>`__: Combine internal libpkix 465 function tests into a single statically linked program 466 - `Bug 324740 <https://bugzilla.mozilla.org/show_bug.cgi?id=324740>`__: add generation of SIA 467 and AIA extensions to certutil 468 - `Bug 339737 <https://bugzilla.mozilla.org/show_bug.cgi?id=339737>`__: LIBPKIX OCSP checking 469 calls CERT_VerifyCert 470 - `Bug 358785 <https://bugzilla.mozilla.org/show_bug.cgi?id=358785>`__: Merge NSS_LIBPKIX_BRANCH 471 back to trunk 472 - `Bug 365966 <https://bugzilla.mozilla.org/show_bug.cgi?id=365966>`__: infinite recursive call 473 in VFY_VerifyDigestDirect 474 - `Bug 382078 <https://bugzilla.mozilla.org/show_bug.cgi?id=382078>`__: pkix default http client 475 returns error when try to get an ocsp response. 476 - `Bug 384926 <https://bugzilla.mozilla.org/show_bug.cgi?id=384926>`__: libpkix build problems 477 - `Bug 389411 <https://bugzilla.mozilla.org/show_bug.cgi?id=389411>`__: Mingw build error - 478 undefined reference to \`_imp__PKIX_ERRORNAMES' 479 - `Bug 389904 <https://bugzilla.mozilla.org/show_bug.cgi?id=389904>`__: avoid multiple 480 decoding/encoding while creating and using PKIX_PL_X500Name 481 - `Bug 390209 <https://bugzilla.mozilla.org/show_bug.cgi?id=390209>`__: pkix AIA manager tries 482 to get certs using AIA url with OCSP access method 483 - `Bug 390233 <https://bugzilla.mozilla.org/show_bug.cgi?id=390233>`__: umbrella bug for libPKIX 484 cert validation failures discovered from running vfyserv 485 - `Bug 390499 <https://bugzilla.mozilla.org/show_bug.cgi?id=390499>`__: libpkix does not check 486 cached cert chain for revocation 487 - `Bug 390502 <https://bugzilla.mozilla.org/show_bug.cgi?id=390502>`__: libpkix fails cert 488 validation when no valid CRL (NIST validation policy is always enforced) 489 - `Bug 390530 <https://bugzilla.mozilla.org/show_bug.cgi?id=390530>`__: libpkix does not support 490 time override 491 - `Bug 390536 <https://bugzilla.mozilla.org/show_bug.cgi?id=390536>`__: Cert validation 492 functions must validate leaf cert themselves 493 - `Bug 390554 <https://bugzilla.mozilla.org/show_bug.cgi?id=390554>`__: all PKIX_NULLCHECK\_ 494 errors are reported as PKIX ALLOC ERROR 495 - `Bug 390888 <https://bugzilla.mozilla.org/show_bug.cgi?id=390888>`__: CERT_Verify\* functions 496 should be able to use libPKIX 497 - `Bug 391457 <https://bugzilla.mozilla.org/show_bug.cgi?id=391457>`__: libpkix does not check 498 for object ref leak at shutdown 499 - `Bug 391774 <https://bugzilla.mozilla.org/show_bug.cgi?id=391774>`__: PKIX_Shutdown is not 500 called by nssinit.c 501 - `Bug 393174 <https://bugzilla.mozilla.org/show_bug.cgi?id=393174>`__: Memory leaks in 502 ocspclnt/PKIX. 503 - `Bug 395093 <https://bugzilla.mozilla.org/show_bug.cgi?id=395093>`__: 504 pkix_pl_HttpCertStore_ProcessCertResponse is unable to process certs in DER format 505 - `Bug 395224 <https://bugzilla.mozilla.org/show_bug.cgi?id=395224>`__: Don't reject certs with 506 critical NetscapeCertType extensions in libPKIX 507 - `Bug 395427 <https://bugzilla.mozilla.org/show_bug.cgi?id=395427>`__: PKIX_PL_Initialize must 508 not call NSS_Init 509 - `Bug 395850 <https://bugzilla.mozilla.org/show_bug.cgi?id=395850>`__: build of libpkix tests 510 creates links to nonexistant shared libraries and breaks windows build 511 - `Bug 398401 <https://bugzilla.mozilla.org/show_bug.cgi?id=398401>`__: Memory leak in PKIX 512 init. 513 - `Bug 399326 <https://bugzilla.mozilla.org/show_bug.cgi?id=399326>`__: libpkix is unable to 514 validate cert for certUsageStatusResponder 515 - `Bug 400947 <https://bugzilla.mozilla.org/show_bug.cgi?id=400947>`__: thread unsafe operation 516 in PKIX_PL_HashTable_Add cause selfserv to crash. 517 - `Bug 402773 <https://bugzilla.mozilla.org/show_bug.cgi?id=402773>`__: Verify the list of 518 public header files in NSS 3.12 519 - `Bug 403470 <https://bugzilla.mozilla.org/show_bug.cgi?id=403470>`__: Strsclnt + tstclnt 520 crashes when PKIX enabled. 521 - `Bug 403685 <https://bugzilla.mozilla.org/show_bug.cgi?id=403685>`__: Application crashes 522 after having called CERT_PKIXVerifyCert 523 - `Bug 408434 <https://bugzilla.mozilla.org/show_bug.cgi?id=408434>`__: Crash with PKIX based 524 verify 525 - `Bug 411614 <https://bugzilla.mozilla.org/show_bug.cgi?id=411614>`__: Explicit Policy does not 526 seem to work. 527 - `Bug 417024 <https://bugzilla.mozilla.org/show_bug.cgi?id=417024>`__: Convert libpkix error 528 code into nss error code 529 - `Bug 422859 <https://bugzilla.mozilla.org/show_bug.cgi?id=422859>`__: libPKIX builds & 530 validates chain to root not in the caller-provided anchor list 531 - `Bug 425516 <https://bugzilla.mozilla.org/show_bug.cgi?id=425516>`__: need to destroy data 532 pointed by CERTValOutParam array in case of error 533 - `Bug 426450 <https://bugzilla.mozilla.org/show_bug.cgi?id=426450>`__: PKIX_PL_HashTable_Remove 534 leaks hashtable key object 535 - `Bug 429230 <https://bugzilla.mozilla.org/show_bug.cgi?id=429230>`__: memory leak in 536 pkix_CheckCert function 537 - `Bug 392696 <https://bugzilla.mozilla.org/show_bug.cgi?id=392696>`__: Fix copyright 538 boilerplate in all new PKIX code 539 - `Bug 300928 <https://bugzilla.mozilla.org/show_bug.cgi?id=300928>`__: Integrate libpkix to NSS 540 - `Bug 303457 <https://bugzilla.mozilla.org/show_bug.cgi?id=303457>`__: extensions newly 541 supported in libpkix must be marked supported 542 - `Bug 331096 <https://bugzilla.mozilla.org/show_bug.cgi?id=331096>`__: NSS Softoken must detect 543 forks on all unix-ish platforms 544 - `Bug 390710 <https://bugzilla.mozilla.org/show_bug.cgi?id=390710>`__: 545 CERTNameConstraintsTemplate is incorrect 546 - `Bug 416928 <https://bugzilla.mozilla.org/show_bug.cgi?id=416928>`__: DER decode error on this 547 policy extension 548 - `Bug 375019 <https://bugzilla.mozilla.org/show_bug.cgi?id=375019>`__: Cache-enable 549 pkix_OcspChecker_Check 550 - `Bug 391454 <https://bugzilla.mozilla.org/show_bug.cgi?id=391454>`__: libPKIX does not honor 551 NSS's override trust flags 552 - `Bug 403682 <https://bugzilla.mozilla.org/show_bug.cgi?id=403682>`__: CERT_PKIXVerifyCert 553 never succeeds 554 - `Bug 324744 <https://bugzilla.mozilla.org/show_bug.cgi?id=324744>`__: add generation of policy 555 extensions to certutil 556 - `Bug 390973 <https://bugzilla.mozilla.org/show_bug.cgi?id=390973>`__: Add long option names to 557 SECU_ParseCommandLine 558 - `Bug 161326 <https://bugzilla.mozilla.org/show_bug.cgi?id=161326>`__: need API to convert 559 dotted OID format to/from octet representation 560 - `Bug 376737 <https://bugzilla.mozilla.org/show_bug.cgi?id=376737>`__: CERT_ImportCerts 561 routinely sets VALID_PEER or VALID_CA OVERRIDE trust flags 562 - `Bug 390381 <https://bugzilla.mozilla.org/show_bug.cgi?id=390381>`__: libpkix rejects cert 563 chain when root CA cert has no basic constraints 564 - `Bug 391183 <https://bugzilla.mozilla.org/show_bug.cgi?id=391183>`__: rename libPKIX error 565 string number type to pkix error number types 566 - `Bug 397122 <https://bugzilla.mozilla.org/show_bug.cgi?id=397122>`__: NSS 3.12 alpha treats a 567 key3.db with no global salt as having no password 568 - `Bug 405966 <https://bugzilla.mozilla.org/show_bug.cgi?id=405966>`__: Unknown signature OID 569 1.3.14.3.2.29 causes sec_error_bad_signature, 3.11 ignores it 570 - `Bug 413010 <https://bugzilla.mozilla.org/show_bug.cgi?id=413010>`__: CERT_CompareRDN may 571 return a false match 572 - `Bug 417664 <https://bugzilla.mozilla.org/show_bug.cgi?id=417664>`__: false positive crl 573 revocation test on ppc/ppc64 NSS_ENABLE_PKIX_VERIFY=1 574 - `Bug 404526 <https://bugzilla.mozilla.org/show_bug.cgi?id=404526>`__: glibc detected free(): 575 invalid pointer 576 - `Bug 300929 <https://bugzilla.mozilla.org/show_bug.cgi?id=300929>`__: Certificate Policy 577 extensions not supported 578 - `Bug 129303 <https://bugzilla.mozilla.org/show_bug.cgi?id=129303>`__: NSS needs to expose 579 interfaces to deal with multiple token sources of certs. 580 - `Bug 217538 <https://bugzilla.mozilla.org/show_bug.cgi?id=217538>`__: softoken databases 581 cannot be shared between multiple processes 582 - `Bug 294531 <https://bugzilla.mozilla.org/show_bug.cgi?id=294531>`__: Design new interfaces 583 for certificate path building and verification for libPKIX 584 - `Bug 326482 <https://bugzilla.mozilla.org/show_bug.cgi?id=326482>`__: NSS ECC performance 585 problems (intel) 586 - `Bug 391296 <https://bugzilla.mozilla.org/show_bug.cgi?id=391296>`__: Need an update helper 587 for Shared Databases 588 - `Bug 395090 <https://bugzilla.mozilla.org/show_bug.cgi?id=395090>`__: remove duplication of 589 pkcs7 code from pkix_pl_httpcertstore.c 590 - `Bug 401026 <https://bugzilla.mozilla.org/show_bug.cgi?id=401026>`__: Need to provide a way to 591 modify and create new PKCS #11 objects. 592 - `Bug 403680 <https://bugzilla.mozilla.org/show_bug.cgi?id=403680>`__: CERT_PKIXVerifyCert 593 fails if CRLs are missing, implement cert_pi_revocationFlags 594 - `Bug 427706 <https://bugzilla.mozilla.org/show_bug.cgi?id=427706>`__: NSS_3_12_RC1 crashes in 595 passwordmgr tests 596 - `Bug 426245 <https://bugzilla.mozilla.org/show_bug.cgi?id=426245>`__: Assertion failure went 597 undetected by tinderbox 598 - `Bug 158242 <https://bugzilla.mozilla.org/show_bug.cgi?id=158242>`__: PK11_PutCRL is very 599 memory inefficient 600 - `Bug 287563 <https://bugzilla.mozilla.org/show_bug.cgi?id=287563>`__: Please make 601 cert_CompareNameWithConstraints a non-static function 602 - `Bug 301496 <https://bugzilla.mozilla.org/show_bug.cgi?id=301496>`__: NSS_Shutdown failure in 603 p7sign 604 - `Bug 324878 <https://bugzilla.mozilla.org/show_bug.cgi?id=324878>`__: crlutil -L outputs false 605 CRL names 606 - `Bug 337010 <https://bugzilla.mozilla.org/show_bug.cgi?id=337010>`__: OOM crash [[@ 607 NSC_DigestKey] Dereferencing possibly NULL att 608 - `Bug 343231 <https://bugzilla.mozilla.org/show_bug.cgi?id=343231>`__: certutil issues certs 609 for invalid requests 610 - `Bug 353371 <https://bugzilla.mozilla.org/show_bug.cgi?id=353371>`__: Klocwork 91117 - Null 611 Pointer Dereference in CERT_CertChainFromCert 612 - `Bug 353374 <https://bugzilla.mozilla.org/show_bug.cgi?id=353374>`__: Klocwork 76494 - Null 613 ptr derefs in CERT_FormatName 614 - `Bug 353375 <https://bugzilla.mozilla.org/show_bug.cgi?id=353375>`__: Klocwork 76513 - Null 615 ptr deref in nssCertificateList_DoCallback 616 - `Bug 353413 <https://bugzilla.mozilla.org/show_bug.cgi?id=353413>`__: Klocwork 76541 free 617 uninitialized pointer in CERT_FindCertURLExtension 618 - `Bug 353416 <https://bugzilla.mozilla.org/show_bug.cgi?id=353416>`__: Klocwork 76593 null ptr 619 deref in nssCryptokiPrivateKey_SetCertificate 620 - `Bug 353423 <https://bugzilla.mozilla.org/show_bug.cgi?id=353423>`__: Klocwork bugs in 621 nss/lib/pk11wrap/dev3hack.c 622 - `Bug 353739 <https://bugzilla.mozilla.org/show_bug.cgi?id=353739>`__: Klocwork Null ptr 623 dereferences in instance.c 624 - `Bug 353741 <https://bugzilla.mozilla.org/show_bug.cgi?id=353741>`__: klocwork cascading 625 memory leak in mpp_make_prime 626 - `Bug 353742 <https://bugzilla.mozilla.org/show_bug.cgi?id=353742>`__: klocwork null ptr 627 dereference in ocsp_DecodeResponseBytes 628 - `Bug 353748 <https://bugzilla.mozilla.org/show_bug.cgi?id=353748>`__: klocwork null ptr 629 dereferences in pki3hack.c 630 - `Bug 353760 <https://bugzilla.mozilla.org/show_bug.cgi?id=353760>`__: klocwork null pointer 631 dereference in p7decode.c 632 - `Bug 353763 <https://bugzilla.mozilla.org/show_bug.cgi?id=353763>`__: klocwork Null ptr 633 dereferences in pk11cert.c 634 - `Bug 353773 <https://bugzilla.mozilla.org/show_bug.cgi?id=353773>`__: klocwork Null ptr 635 dereferences in pk11nobj.c 636 - `Bug 353777 <https://bugzilla.mozilla.org/show_bug.cgi?id=353777>`__: Klocwork Null ptr 637 dereferences in pk11obj.c 638 - `Bug 353780 <https://bugzilla.mozilla.org/show_bug.cgi?id=353780>`__: Klocwork NULL ptr 639 dereferences in pkcs11.c 640 - `Bug 353865 <https://bugzilla.mozilla.org/show_bug.cgi?id=353865>`__: klocwork Null ptr deref 641 in softoken/pk11db.c 642 - `Bug 353888 <https://bugzilla.mozilla.org/show_bug.cgi?id=353888>`__: klockwork IDs for 643 ssl3con.c 644 - `Bug 353895 <https://bugzilla.mozilla.org/show_bug.cgi?id=353895>`__: klocwork Null ptr derefs 645 in pki/pkibase.c 646 - `Bug 353902 <https://bugzilla.mozilla.org/show_bug.cgi?id=353902>`__: klocwork bugs in 647 stanpcertdb.c 648 - `Bug 353903 <https://bugzilla.mozilla.org/show_bug.cgi?id=353903>`__: klocwork oom crash in 649 softoken/keydb.c 650 - `Bug 353908 <https://bugzilla.mozilla.org/show_bug.cgi?id=353908>`__: klocwork OOM crash in 651 tdcache.c 652 - `Bug 353909 <https://bugzilla.mozilla.org/show_bug.cgi?id=353909>`__: klocwork ptr dereference 653 before NULL check in devutil.c 654 - `Bug 353912 <https://bugzilla.mozilla.org/show_bug.cgi?id=353912>`__: Misc klocwork bugs in 655 lib/ckfw 656 - `Bug 354008 <https://bugzilla.mozilla.org/show_bug.cgi?id=354008>`__: klocwork bugs in freebl 657 - `Bug 359331 <https://bugzilla.mozilla.org/show_bug.cgi?id=359331>`__: modutil -changepw strict 658 shutdown failure 659 - `Bug 373367 <https://bugzilla.mozilla.org/show_bug.cgi?id=373367>`__: verify OCSP response 660 signature in libpkix without decoding and reencoding 661 - `Bug 390542 <https://bugzilla.mozilla.org/show_bug.cgi?id=390542>`__: libpkix fails to 662 validate a chain that consists only of one self issued, trusted cert 663 - `Bug 390728 <https://bugzilla.mozilla.org/show_bug.cgi?id=390728>`__: 664 pkix_pl_OcspRequest_Create throws an error if it was not able to get AIA location 665 - `Bug 397825 <https://bugzilla.mozilla.org/show_bug.cgi?id=397825>`__: libpkix: ifdef code that 666 uses user object types 667 - `Bug 397832 <https://bugzilla.mozilla.org/show_bug.cgi?id=397832>`__: libpkix leaks memory if 668 a macro calls a function that returns an error 669 - `Bug 402727 <https://bugzilla.mozilla.org/show_bug.cgi?id=402727>`__: functions responsible 670 for creating an object leak if subsequent function code produces an error 671 - `Bug 402731 <https://bugzilla.mozilla.org/show_bug.cgi?id=402731>`__: 672 pkix_pl_Pk11CertStore_CrlQuery will crash if fails to acquire DP cache. 673 - `Bug 406647 <https://bugzilla.mozilla.org/show_bug.cgi?id=406647>`__: libpkix does not use 674 user defined revocation checkers 675 - `Bug 407064 <https://bugzilla.mozilla.org/show_bug.cgi?id=407064>`__: 676 pkix_pl_LdapCertStore_BuildCrlList should not fail if a crl fails to be decoded 677 - `Bug 421216 <https://bugzilla.mozilla.org/show_bug.cgi?id=421216>`__: libpkix test nss_thread 678 leaks a test certificate 679 - `Bug 301259 <https://bugzilla.mozilla.org/show_bug.cgi?id=301259>`__: signtool Usage message 680 is unhelpful 681 - `Bug 389781 <https://bugzilla.mozilla.org/show_bug.cgi?id=389781>`__: NSS should be built 682 size-optimized in browser builds on Linux, Windows, and Mac 683 - `Bug 90426 <https://bugzilla.mozilla.org/show_bug.cgi?id=90426>`__: use of obsolete typedefs 684 in public NSS headers 685 - `Bug 113323 <https://bugzilla.mozilla.org/show_bug.cgi?id=113323>`__: The first argument to 686 PK11_FindCertFromNickname should be const. 687 - `Bug 132485 <https://bugzilla.mozilla.org/show_bug.cgi?id=132485>`__: built-in root certs slot 688 description is empty 689 - `Bug 177184 <https://bugzilla.mozilla.org/show_bug.cgi?id=177184>`__: NSS_CMSDecoder_Cancel 690 might have a leak 691 - `Bug 232392 <https://bugzilla.mozilla.org/show_bug.cgi?id=232392>`__: Erroneous root CA tests 692 in NSS Libraries 693 - `Bug 286642 <https://bugzilla.mozilla.org/show_bug.cgi?id=286642>`__: util should be in a 694 shared library 695 - `Bug 287052 <https://bugzilla.mozilla.org/show_bug.cgi?id=287052>`__: Function to get CRL 696 Entry reason code has incorrect prototype and implementation 697 - `Bug 299308 <https://bugzilla.mozilla.org/show_bug.cgi?id=299308>`__: Need additional APIs in 698 the CRL cache for libpkix 699 - `Bug 335039 <https://bugzilla.mozilla.org/show_bug.cgi?id=335039>`__: 700 nssCKFWCryptoOperation_UpdateCombo is not declared 701 - `Bug 340917 <https://bugzilla.mozilla.org/show_bug.cgi?id=340917>`__: crlutil should init NSS 702 read-only for some options 703 - `Bug 350948 <https://bugzilla.mozilla.org/show_bug.cgi?id=350948>`__: freebl macro change can 704 give 1% improvement in RSA performance on amd64 705 - `Bug 352439 <https://bugzilla.mozilla.org/show_bug.cgi?id=352439>`__: Reference leaks in 706 modutil 707 - `Bug 369144 <https://bugzilla.mozilla.org/show_bug.cgi?id=369144>`__: certutil needs option to 708 generate SubjectKeyID extension 709 - `Bug 391771 <https://bugzilla.mozilla.org/show_bug.cgi?id=391771>`__: pk11_config_name and 710 pk11_config_strings leaked on shutdown 711 - `Bug 401194 <https://bugzilla.mozilla.org/show_bug.cgi?id=401194>`__: crash in lg_FindObjects 712 on win64 713 - `Bug 405652 <https://bugzilla.mozilla.org/show_bug.cgi?id=405652>`__: In the TLS ClientHello 714 message the gmt_unix_time is incorrect 715 - `Bug 424917 <https://bugzilla.mozilla.org/show_bug.cgi?id=424917>`__: Performance regression 716 with studio 12 compiler 717 - `Bug 391770 <https://bugzilla.mozilla.org/show_bug.cgi?id=391770>`__: OCSP_Global.monitor is 718 leaked on shutdown 719 - `Bug 403687 <https://bugzilla.mozilla.org/show_bug.cgi?id=403687>`__: move pkix functions to 720 certvfypkix.c, turn off EV_TEST_HACK 721 - `Bug 428105 <https://bugzilla.mozilla.org/show_bug.cgi?id=428105>`__: CERT_SetOCSPTimeout is 722 not defined in any public header file 723 - `Bug 213359 <https://bugzilla.mozilla.org/show_bug.cgi?id=213359>`__: enhance PK12util to 724 extract certs from p12 file 725 - `Bug 329067 <https://bugzilla.mozilla.org/show_bug.cgi?id=329067>`__: NSS encodes cert 726 distinguished name attributes with wrong string type 727 - `Bug 339906 <https://bugzilla.mozilla.org/show_bug.cgi?id=339906>`__: sec_pkcs12_install_bags 728 passes uninitialized variables to functions 729 - `Bug 396484 <https://bugzilla.mozilla.org/show_bug.cgi?id=396484>`__: certutil doesn't 730 truncate existing temporary files when writing them 731 - `Bug 251594 <https://bugzilla.mozilla.org/show_bug.cgi?id=251594>`__: Certificate from PKCS#12 732 file with colon in friendlyName not selectable for signing/encryption 733 - `Bug 321584 <https://bugzilla.mozilla.org/show_bug.cgi?id=321584>`__: NSS PKCS12 decoder fails 734 to import bags without nicknames 735 - `Bug 332633 <https://bugzilla.mozilla.org/show_bug.cgi?id=332633>`__: remove duplicate header 736 files in nss/cmd/sslsample 737 - `Bug 335019 <https://bugzilla.mozilla.org/show_bug.cgi?id=335019>`__: pk12util takes friendly 738 name from key, not cert 739 - `Bug 339173 <https://bugzilla.mozilla.org/show_bug.cgi?id=339173>`__: mem leak whenever 740 SECMOD_HANDLE_STRING_ARG called in loop 741 - `Bug 353904 <https://bugzilla.mozilla.org/show_bug.cgi?id=353904>`__: klocwork Null ptr deref 742 in secasn1d.c 743 - `Bug 366390 <https://bugzilla.mozilla.org/show_bug.cgi?id=366390>`__: correct misleading 744 function names in fipstest 745 - `Bug 370536 <https://bugzilla.mozilla.org/show_bug.cgi?id=370536>`__: Memory leaks in pointer 746 tracker code in DEBUG builds only 747 - `Bug 372242 <https://bugzilla.mozilla.org/show_bug.cgi?id=372242>`__: CERT_CompareRDN uses 748 incorrect algorithm 749 - `Bug 379753 <https://bugzilla.mozilla.org/show_bug.cgi?id=379753>`__: S/MIME should support 750 AES 751 - `Bug 381375 <https://bugzilla.mozilla.org/show_bug.cgi?id=381375>`__: ocspclnt doesn't work on 752 Windows 753 - `Bug 398693 <https://bugzilla.mozilla.org/show_bug.cgi?id=398693>`__: DER_AsciiToTime produces 754 incorrect output for dates 1950-1970 755 - `Bug 420212 <https://bugzilla.mozilla.org/show_bug.cgi?id=420212>`__: Empty cert DNs handled 756 badly, display as !INVALID AVA! 757 - `Bug 420979 <https://bugzilla.mozilla.org/show_bug.cgi?id=420979>`__: vfychain ignores -b TIME 758 option when -p option is present 759 - `Bug 403563 <https://bugzilla.mozilla.org/show_bug.cgi?id=403563>`__: Implement the TLS 760 session ticket extension (STE) 761 - `Bug 400917 <https://bugzilla.mozilla.org/show_bug.cgi?id=400917>`__: Want exported function 762 that outputs all host names for DNS name matching 763 - `Bug 315643 <https://bugzilla.mozilla.org/show_bug.cgi?id=315643>`__: 764 test_buildchain_resourcelimits won't build 765 - `Bug 353745 <https://bugzilla.mozilla.org/show_bug.cgi?id=353745>`__: klocwork null ptr 766 dereference in PKCS12 decoder 767 - `Bug 338367 <https://bugzilla.mozilla.org/show_bug.cgi?id=338367>`__: The GF2M_POPULATE and 768 GFP_POPULATE should check the ecCurve_map array index bounds before use 769 - `Bug 201139 <https://bugzilla.mozilla.org/show_bug.cgi?id=201139>`__: SSLTap should display 770 plain text for NULL cipher suites 771 - `Bug 233806 <https://bugzilla.mozilla.org/show_bug.cgi?id=233806>`__: Support NIST CRL policy 772 - `Bug 279085 <https://bugzilla.mozilla.org/show_bug.cgi?id=279085>`__: NSS tools display public 773 exponent as negative number 774 - `Bug 363480 <https://bugzilla.mozilla.org/show_bug.cgi?id=363480>`__: ocspclnt needs option to 775 take cert from specified file 776 - `Bug 265715 <https://bugzilla.mozilla.org/show_bug.cgi?id=265715>`__: remove unused hsearch.c 777 DBM code 778 - `Bug 337361 <https://bugzilla.mozilla.org/show_bug.cgi?id=337361>`__: Leaks in jar_parse_any 779 (security/nss/lib/jar/jarver.c) 780 - `Bug 338453 <https://bugzilla.mozilla.org/show_bug.cgi?id=338453>`__: Leaks in 781 security/nss/lib/jar/jarfile.c 782 - `Bug 351408 <https://bugzilla.mozilla.org/show_bug.cgi?id=351408>`__: Leaks in 783 JAR_JAR_sign_archive (security/nss/lib/jar/jarjart.c) 784 - `Bug 351443 <https://bugzilla.mozilla.org/show_bug.cgi?id=351443>`__: Remove unused code from 785 mozilla/security/nss/lib/jar 786 - `Bug 351510 <https://bugzilla.mozilla.org/show_bug.cgi?id=351510>`__: Remove USE_MOZ_THREAD 787 code from mozilla/security/lib/jar 788 - `Bug 118830 <https://bugzilla.mozilla.org/show_bug.cgi?id=118830>`__: NSS public header files 789 should be C++ safe 790 - `Bug 123996 <https://bugzilla.mozilla.org/show_bug.cgi?id=123996>`__: certutil -H doesn't 791 document certutil -C -a 792 - `Bug 178894 <https://bugzilla.mozilla.org/show_bug.cgi?id=178894>`__: Quick decoder updates 793 for lib/certdb and lib/certhigh 794 - `Bug 220115 <https://bugzilla.mozilla.org/show_bug.cgi?id=220115>`__: CKM_INVALID_MECHANISM 795 should be an unsigned long constant. 796 - `Bug 330721 <https://bugzilla.mozilla.org/show_bug.cgi?id=330721>`__: Remove OS/2 VACPP 797 compiler support from NSS 798 - `Bug 408260 <https://bugzilla.mozilla.org/show_bug.cgi?id=408260>`__: certutil usage doesn't 799 give enough information about trust arguments 800 - `Bug 410226 <https://bugzilla.mozilla.org/show_bug.cgi?id=410226>`__: leak in 801 create_objects_from_handles 802 - `Bug 415007 <https://bugzilla.mozilla.org/show_bug.cgi?id=415007>`__: 803 PK11_FindCertFromDERSubjectAndNickname is dead code 804 - `Bug 416267 <https://bugzilla.mozilla.org/show_bug.cgi?id=416267>`__: compiler warnings on 805 solaris due to extra semicolon in SEC_ASN1_MKSUB 806 - `Bug 419763 <https://bugzilla.mozilla.org/show_bug.cgi?id=419763>`__: logger thread should be 807 joined on exit 808 - `Bug 424471 <https://bugzilla.mozilla.org/show_bug.cgi?id=424471>`__: counter overflow in 809 bltest 810 - `Bug 229335 <https://bugzilla.mozilla.org/show_bug.cgi?id=229335>`__: Remove certificates that 811 expired in August 2004 from tree 812 - `Bug 346551 <https://bugzilla.mozilla.org/show_bug.cgi?id=346551>`__: init SECItem derTemp in 813 crmf_encode_popoprivkey 814 - `Bug 395080 <https://bugzilla.mozilla.org/show_bug.cgi?id=395080>`__: Double backslash in 815 sysDir filenames causes problems on OS/2 816 - `Bug 341371 <https://bugzilla.mozilla.org/show_bug.cgi?id=341371>`__: certutil lacks a way to 817 request a certificate with an existing key 818 - `Bug 382292 <https://bugzilla.mozilla.org/show_bug.cgi?id=382292>`__: add support for Camellia 819 to cmd/symkeyutil 820 - `Bug 385642 <https://bugzilla.mozilla.org/show_bug.cgi?id=385642>`__: Add additional cert 821 usage(s) for certutil's -V -u option 822 - `Bug 175741 <https://bugzilla.mozilla.org/show_bug.cgi?id=175741>`__: strict aliasing bugs in 823 mozilla/dbm 824 - `Bug 210584 <https://bugzilla.mozilla.org/show_bug.cgi?id=210584>`__: CERT_AsciiToName doesn't 825 accept all valid values 826 - `Bug 298540 <https://bugzilla.mozilla.org/show_bug.cgi?id=298540>`__: vfychain usage option 827 should be improved and documented 828 - `Bug 323570 <https://bugzilla.mozilla.org/show_bug.cgi?id=323570>`__: Make dbck Debug mode 829 work with Softoken 830 - `Bug 371470 <https://bugzilla.mozilla.org/show_bug.cgi?id=371470>`__: vfychain needs option to 831 verify for specific date 832 - `Bug 387621 <https://bugzilla.mozilla.org/show_bug.cgi?id=387621>`__: certutil's random noise 833 generator isn't very efficient 834 - `Bug 390185 <https://bugzilla.mozilla.org/show_bug.cgi?id=390185>`__: signtool error message 835 wrongly uses the term database 836 - `Bug 391651 <https://bugzilla.mozilla.org/show_bug.cgi?id=391651>`__: Need config.mk file for 837 Windows Vista 838 - `Bug 396322 <https://bugzilla.mozilla.org/show_bug.cgi?id=396322>`__: Fix secutil's code and 839 NSS tools that print public keys 840 - `Bug 417641 <https://bugzilla.mozilla.org/show_bug.cgi?id=417641>`__: miscellaneous minor NSS 841 bugs 842 - `Bug 334914 <https://bugzilla.mozilla.org/show_bug.cgi?id=334914>`__: hopefully useless null 843 check of out it in JAR_find_next 844 - `Bug 95323 <https://bugzilla.mozilla.org/show_bug.cgi?id=95323>`__: ckfw should support cipher 845 operations. 846 - `Bug 337088 <https://bugzilla.mozilla.org/show_bug.cgi?id=337088>`__: Coverity 405, 847 PK11_ParamToAlgid() in mozilla/security/nss/lib/pk11wrap/pk11mech.c 848 - `Bug 339907 <https://bugzilla.mozilla.org/show_bug.cgi?id=339907>`__: oaep_xor_with_h1 849 allocates and leaks sha1cx 850 - `Bug 341122 <https://bugzilla.mozilla.org/show_bug.cgi?id=341122>`__: Coverity 633 851 SFTK_DestroySlotData uses slot->slotLock then checks it for NULL 852 - `Bug 351140 <https://bugzilla.mozilla.org/show_bug.cgi?id=351140>`__: Coverity 995, potential 853 crash in ecgroup_fromNameAndHex 854 - `Bug 362278 <https://bugzilla.mozilla.org/show_bug.cgi?id=362278>`__: lib/util includes header 855 files from other NSS directories 856 - `Bug 228190 <https://bugzilla.mozilla.org/show_bug.cgi?id=228190>`__: Remove unnecessary 857 NSS_ENABLE_ECC defines from manifest.mn 858 - `Bug 412906 <https://bugzilla.mozilla.org/show_bug.cgi?id=412906>`__: remove sha.c and sha.h 859 from lib/freebl 860 - `Bug 353543 <https://bugzilla.mozilla.org/show_bug.cgi?id=353543>`__: valgrind uninitialized 861 memory read in nssPKIObjectCollection_AddInstances 862 - `Bug 377548 <https://bugzilla.mozilla.org/show_bug.cgi?id=377548>`__: NSS QA test program 863 certutil's default DSA prime is only 512 bits 864 - `Bug 333405 <https://bugzilla.mozilla.org/show_bug.cgi?id=333405>`__: item cleanup is unused 865 DEADCODE in SECITEM_AllocItem loser 866 - `Bug 288730 <https://bugzilla.mozilla.org/show_bug.cgi?id=288730>`__: compiler warnings in 867 certutil 868 - `Bug 337251 <https://bugzilla.mozilla.org/show_bug.cgi?id=337251>`__: warning: /\* within 869 comment 870 - `Bug 362967 <https://bugzilla.mozilla.org/show_bug.cgi?id=362967>`__: export 871 SECMOD_DeleteModuleEx 872 - `Bug 389248 <https://bugzilla.mozilla.org/show_bug.cgi?id=389248>`__: NSS build failure when 873 NSS_ENABLE_ECC is not defined 874 - `Bug 390451 <https://bugzilla.mozilla.org/show_bug.cgi?id=390451>`__: Remembered passwords 875 lost when changing Master Password 876 - `Bug 418546 <https://bugzilla.mozilla.org/show_bug.cgi?id=418546>`__: reference leak in 877 CERT_PKIXVerifyCert 878 - `Bug 390074 <https://bugzilla.mozilla.org/show_bug.cgi?id=390074>`__: OS/2 sign.cmd doesn't 879 find sqlite3.dll 880 - `Bug 417392 <https://bugzilla.mozilla.org/show_bug.cgi?id=417392>`__: certutil -L -n reports 881 bogus trust flags 882 883 -------------- 884 885 `Documentation <#documentation>`__ 886 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 887 888 .. container:: 889 890 For a list of the primary NSS documentation pages on mozilla.org, see `NSS 891 Documentation <../index.html#Documentation>`__. New and revised documents available since the 892 release of NSS 3.11 include the following: 893 894 - :ref:`mozilla_projects_nss_reference_building_and_installing_nss_build_instructions` 895 - `NSS Shared DB <http://wiki.mozilla.org/NSS_Shared_DB>`__ 896 - :ref:`mozilla_projects_nss_reference_nss_environment_variables` 897 898 -------------- 899 900 `Compatibility <#compatibility>`__ 901 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 902 903 .. container:: 904 905 NSS 3.12 shared libraries are backward compatible with all older NSS 3.x shared libraries. A 906 program linked with older NSS 3.x shared libraries will work with NSS 3.12 shared libraries 907 without recompiling or relinking. Furthermore, applications that restrict their use of NSS APIs 908 to the functions listed in `NSS Public Functions <../ref/nssfunctions.html>`__ will remain 909 compatible with future versions of the NSS shared libraries. 910 911 -------------- 912 913 `Feedback <#feedback>`__ 914 ~~~~~~~~~~~~~~~~~~~~~~~~ 915 916 .. container:: 917 918 Bugs discovered should be reported by filing a bug report with `mozilla.org 919 Bugzilla <https://bugzilla.mozilla.org/>`__\ (product NSS).