1048876 - Update Mozilla 32 to use NSS 3.16.4

Status: RESOLVED FIXED

(Core :: Security: PSM, defect, P1)

Description

[Kai Engert (:KaiE:)]

This bug is for mozilla-beta 32, ONLY, because later branches already use newer NSS.

This bug is a follow-up to bug 1029561, to reduce transitioning impact after having removed 1024-bit-root-CAs for increased security.

This bug suggest to update the mozilla-beta 32 branch to NSS 3.16.4, which will include the following changes:

- bug 1045189 (a driver for this bug)
- bug 1046343 (a driver for this bug)
- a test suite fix (doesn't affect the code)
- a one line, obvious correctness fix to libpkix (1047210)
- a one line fix to make windows 64 builds work, doesn't affect other platforms

Comment 1

[Kai Engert (:KaiE:)]

[Tracking Requested - why for this release]:

Comment 2

[Kai Engert (:KaiE:)]

Attachment: patch v1

This patch shows the changes the update to NSS 3.16.4 contains.

Requesting approval.
On Checkin, the file security/nss/TAG-INFO will contain the final release tag.

Comment 3

[Lawrence Mandel [:lmandel] (use needinfo)]

Comment on attachment 8467909 [details] [diff] [review]
patch v1

Beta+ As discussed, please land by EOD Wed in order to get this change into beta5.

Comment 4

[Kai Engert (:KaiE:)]

https://hg.mozilla.org/releases/mozilla-beta/rev/22589028e561

Comment 5

[Lawrence Mandel [:lmandel] (use needinfo)]

I don't think that this bug is worth noting but have added a relnote? to bug 1045189, one of the two drivers for this bug.