337770 - Upgrade to NSS 3.11.2 pre-release

Status: RESOLVED FIXED

(Core :: Security: PSM, enhancement)

Description

[Wan-Teh Chang]

We need to upgrade the NSS version on the Mozilla
trunk and MOZILLA_1_8_BRANCH to the current
NSS_3_11_BRANCH, which is NSS 3.11.2 pre-release.

Comment 1

[Wan-Teh Chang]

Attachment: Patch for Mozilla trunk

Upgrade to NSS_3_11_20060512_TAG, which is a snapshot
of the NSS_3_11_BRANCH taken today.

Kai, please test this patch.  Thanks.

Comment 2

[Wan-Teh Chang]

Attachment: Diffs between NSS_3_11_20060403_TAG and NSS_3_11_20060512_TAG

Comment 3

[Wan-Teh Chang]

Attachment: Diffs between NSS_3_11_20060403_TAG and NSS_3_11_20060512_TAG (v1.1)

Same contents, except that the files are in the right order.

Comment 4

[Kai Engert [:KaiE:]]

Comment on attachment 221854 [details] [diff] [review]
Patch for Mozilla trunk

This works for me.

Comment 5

[Wan-Teh Chang]

Comment on attachment 221854 [details] [diff] [review]
Patch for Mozilla trunk

Thank you, Kai.  I checked in this patch on the
Mozilla trunk (1.9 alpha).

Checking in client.mk;
/cvsroot/mozilla/client.mk,v  <--  client.mk
new revision: 1.276; previous revision: 1.275
done

Comment 6

[Wan-Teh Chang]

Attachment: Diffs between NSS_3_11_1_RTM and NSS_3_11_20060512_TAG

NSS_3_11_1_RTM is the latest NSS 3.11.x patch release.

Comment 7

[Wan-Teh Chang]

Comment on attachment 221862 [details] [diff] [review]
Diffs between NSS_3_11_20060403_TAG and NSS_3_11_20060512_TAG (v1.1)

I just checked in the contents of NSS_3_11_20060512_TAG for
mozilla/security/coreconf and mozilla/security/nss on the
MOZILLA_1_8_BRANCH.

Comment 8

[Wan-Teh Chang]

The only know problem from the new NSS version is a MinGW build
error on Windows (bug 337887).  I will address it in that bug
(already have a patch).

Comment 9

[Nick Thomas [:nthomas] (UTC+12)]

Bug 338015 might also be fallout from this change.

Comment 10

[Bill Gianopoulos [:WG9s]]

This appears to have caused bug 338421.

Comment 11

[Boris Zbarsky [:bzbarsky]]

With this change, HTTPs connections are sometimes broken depending on the exact HTTP packet sizes.  See bug 356470.

Comment 12

[Nelson Bolyard (seldom reads bugmail)]

(In reply to comment #11)
> With this change, HTTPs connections are sometimes broken depending on the exact
> HTTP packet sizes.  See bug 356470.

More accurately, ONE SERVER is having problems with https uploads, with 
versions of the client that have this change in them.