Bug 1066236

Summary: mod_nss: documentation formatting fixes [rhel-7.1]
Product: Red Hat Enterprise Linux 7 Reporter: Kaleem <ksiddiqu>
Component: mod_nssAssignee: Matthew Harmsen <mharmsen>
Status: CLOSED ERRATA QA Contact: Kaleem <ksiddiqu>
Severity: unspecified Docs Contact:
Priority: medium    
Version: 7.0CC: nkinder, nsoman, rcritten, spoore
Target Milestone: rc   
Target Release: 7.2   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: mod_nss-1.0.11-2 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-11-19 11:09:18 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Kaleem 2014-02-18 05:29:48 UTC
Description of problem:

While verifying https://bugzilla.redhat.com/show_bug.cgi?id=1025317 , i figured out that some more fixes required which i pasted in https://bugzilla.redhat.com/show_bug.cgi?id=1025317#c5 but these can be fixed in 7.1 release and RHEL-7.0 bug can be verified. So filing this bug.

Comment 4 Matthew Harmsen 2015-07-08 23:25:58 UTC
Since the referenced bugs are closed, I copied the offending contents into this bug:

I think in below paragraphs/lines "SSL 3" should be "SSLv3" and "SSL 2" shoould be "SSLv2" in mod_nss.html

Line 1461-62:
=============
<h1><a name="SSLv2"></a>Why is SSLv2 disabled?</h1>
All major browsers (Firefox, Internet Explorer, Mozilla, Netscape, Opera, and
Safari) support SSL 3 and TLS so there is no need for a web server to support
SSL 2. There are some known attacks against SSL 2 that are handled by SSL
3/TLS. SSLv2 also doesn't support useful features like client authentication.
<br>

Line 418:
=========
</big></big><br>
Specifies the number of seconds SSL 3 sessions are cached.<br>
<br>

Line 405:
=========
<br>
Specifies the number of seconds SSL 2 sessions are cached.<br>
<br>

Comment 5 Matthew Harmsen 2015-07-08 23:36:04 UTC
Simple patch for mod_nss-1.0.11-2.el7 as it is only a few documentation changes.

Comment 7 Scott Poore 2015-10-07 17:50:29 UTC
Verified.

Version ::

mod_nss-1.0.11-6.el7.x86_64

Results ::

[root@rhel7-4 yum.repos.d]# vim /usr/share/doc/mod_nss-1.0.11/mod_nss.html
...

<h1><a name="SSLv2"></a>Why is SSLv2 disabled?</h1>
All major browsers (Firefox, Internet Explorer, Mozilla, Netscape, Opera, and
Safari) support SSLv3 and TLS so there is no need for a web server to support
SSLv2. There are some known attacks against SSLv2 that are handled by
SSLv3/TLS. SSLv2 also doesn't support useful features like client
authentication.
<br>

</big></big><br>
Specifies the number of seconds SSLv3 sessions are cached.<br>
<br>

[root@rhel7-4 yum.repos.d]# grep -i "SSL [23]" /usr/share/doc/mod_nss-1.0.11/mod_nss.html
[root@rhel7-4 yum.repos.d]#

Comment 9 errata-xmlrpc 2015-11-19 11:09:18 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2015-2305.html