Closed Bug 1140029 Opened 9 years ago Closed 9 years ago

Disable SSL 3 in the default NSS configuration

Categories

(NSS :: Libraries, defect)

3.17.2
defect
Not set
normal

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: mt, Unassigned)

References

Details

(Whiteboard: [postponed until April 2015])

Attachments

(1 file, 1 obsolete file)

It's time.
Attached patch bug1140029.patch (obsolete) — Splinter Review
As we discussed on the call.
Attachment #8573392 - Flags: review?(kaie)
Depends on: 1083900
Oops, that doesn't depend on bug 1083900, let me fix that.
Attached patch bug1140029.patchSplinter Review
Now it really does depend on bug 1083900.
Attachment #8573392 - Attachment is obsolete: true
Attachment #8573392 - Flags: review?(kaie)
Attachment #8573395 - Flags: review?(kaie)
Target Milestone: --- → 3.18.1
Whiteboard: [postponed until April 2015]
Comment on attachment 8573395 [details] [diff] [review]
bug1140029.patch

r=kaie

I'd like to delay checking this in until April 1st.
Attachment #8573395 - Flags: review?(kaie) → review+
Maybe the 2nd.  We should disable TLS and re-enable SSLv2 on April 1st.
(In reply to Martin Thomson [:mt] from comment #5)
> Maybe the 2nd.  We should disable TLS and re-enable SSLv2 on April 1st.

Don't forget to enable RC4 and give the highest priority. (I'm afraid many servers are always using this 1st April settings...)
I realize that this is nearly two weeks late, but it's in now:

https://hg.mozilla.org/projects/nss/rev/37369a50eb75
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
Target Milestone: 3.18.1 → 3.19
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: