1252930 - update Firefox 46 to use NSS 3.22.3

Status: RESOLVED FIXED

(Core :: Security: PSM, defect)

Description

[Dana Keeler (she/her) (use needinfo) [:keeler]]

There are some small changes we'd like to make to the version of NSS in Firefox 46, but since it's close to/in Beta, it would be best to make a branch of NSS with the changes we'd like and uplift that to 46. In particular, the compatibility change in bug 1243641 is what we'd like to include.

Comment 1

[Kai Engert [:KaiE:]]

Attachment: beta46-to-nss-3.22.3.txt

Comment 2

[Kai Engert [:KaiE:]]

Comment on attachment 8729548 [details]
beta46-to-nss-3.22.3.txt

Approval Request Comment
Required Compatibility fix found during testing.
If you don't approve this, we must disable the Extended-Master-Secret feature in Firefox 46.

Comment 3

[Liz Henry (:lizzard) (relman/hg->git project)]

Marking affected and tracking for 46.  
David or Kai, should this also uplift to 47? Or is this already fixed in 47? Thanks.

Comment 4

[Liz Henry (:lizzard) (relman/hg->git project)]

Comment on attachment 8729548 [details]
beta46-to-nss-3.22.3.txt

NSS fixes for 46. This should go into today's beta 2 build.

Comment 5

[Kai Engert [:KaiE:]]

Firefox 47 is already fixed.

You are giving me tough deadlines!
I'll try to get this done today.

Comment 6

[Kai Engert [:KaiE:]]

beta for firefox 46
https://hg.mozilla.org/releases/mozilla-beta/rev/382ab24a1a55

firefox 47 is already fixed, as it already uses a newer version of nss that already contains the fix that we want to pick up.