558140 - Upgrade Mozilla to pick up new roots (NSS 3.12.6 + NSSCKBI_1_79_RTM)

Status: RESOLVED FIXED

(Core :: Security: PSM, defect)

Description

[Kai Engert [:KaiE:]]

Upgrade Mozilla to pick up new roots (NSS 3.12.6 + NSSCKBI_1_79_RTM)

Only contents of this directory will be changed:
  mozilla/security/nss/lib/ckfw/builtins

Comment 1

[Kai Engert [:KaiE:]]

NSS_3_12_6_WITH_CKBI_1_79_RTM

Comment 2

[Kai Engert [:KaiE:]]

Attachment: Proposed Action

Wan-Teh or Bob, can you please review?

Comment 3

[Wan-Teh Chang]

Comment on attachment 437913 [details]
Proposed Action

r=wtc.

Comment 4

[Kai Engert [:KaiE:]]

http://hg.mozilla.org/mozilla-central/rev/1908834320d8

I decided to avoid the usual full-upgrade-to-nss script, and reapply patches. Instead I simply created a diff between NSS_3_12_6_RTM (what we currently use) and the new tag NSS_3_12_6_WITH_CKBI_1_79_RTM

Comment 5

[Kai Engert [:KaiE:]]

Attachment: patch as checked in

Comment 6

[Kai Engert [:KaiE:]]

Comment on attachment 437913 [details]
Proposed Action

I propose to pick up new CA roots on stable branches.

Comment 7

[Mike Beltzner [:beltzner, not reading bugmail]]

Comment on attachment 437913 [details]
Proposed Action

We'll wait until 1.9.2.5 and 1.9.1.11 (reed, if you're watching, can you make that latter flag?)

Comment 8

[Daniel Veditz [:dveditz]]

Comment on attachment 437913 [details]
Proposed Action

Approved for 1.9.2.6, a=dveditz for release-drivers

Comment 9

[Kai Engert [:KaiE:]]

http://hg.mozilla.org/releases/mozilla-1.9.1/rev/24544966490c

Comment 10

[Kai Engert [:KaiE:]]

http://hg.mozilla.org/releases/mozilla-1.9.2/rev/110a5e30fad0