Bug 960193
| Summary: | Enable ECC in nss and nss-softoken | |||
|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 6 | Reporter: | Elio Maldonado Batiz <emaldona> | |
| Component: | nss | Assignee: | Elio Maldonado Batiz <emaldona> | |
| Status: | CLOSED ERRATA | QA Contact: | Hubert Kario <hkario> | |
| Severity: | high | Docs Contact: | ||
| Priority: | high | |||
| Version: | 6.5 | CC: | error, fweimer, hkario, i.grok, janfrode, jorti, ksrot, pbrobinson, redhat-bugzilla, rrelyea, rsawhill, sgraf | |
| Target Milestone: | rc | |||
| Target Release: | 6.5 | |||
| Hardware: | Unspecified | |||
| OS: | Unspecified | |||
| Whiteboard: | ||||
| Fixed In Version: | nss-3.14.3-33.el6 | Doc Type: | Release Note | |
| Doc Text: |
Network Security Services's (NSS) own internal cryptographic module in Red Hat Enterprise Linux 6.5 now supports the NIST Suite B set of recommended algorithms for Elliptic curve cryptography (ECC).
|
Story Points: | --- | |
| Clone Of: | ||||
| : | 960208 960241 990223 1002964 (view as bug list) | Environment: | ||
| Last Closed: | 2013-11-21 06:14:01 UTC | Type: | Bug | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | 990223 | |||
| Bug Blocks: | 960208, 960241, 968473, 1002964 | |||
| Attachments: | ||||
|
Description
Elio Maldonado Batiz
2013-05-06 16:28:39 UTC
Created attachment 744260 [details]
Required nss changes for ecc in patch format
Comment on attachment 744260 [details]
Required nss changes for ecc in patch format
r+ assuming your are using the latest upstream sources that have no MORE_THAN_SUITE_B defines in nss proper.
I'm using using sources from NSS_3.14.3-RTM sources. Looking at the latest usptream sources it doesn't seem that the NSS_ECC_MORE_THAN_SUITE_B change has been made yet. Upon close isnpection the changes to support only SUITE B have already been made upstream. Sone on the mucurila source repositories and some had already been made in the ole cvs source repository post nss-3.4.3. Created attachment 750633 [details]
Part 1: add support ecc suite-b only - libraries
same patch as was submitted for rhel-5.10.
Created attachment 750634 [details]
Part 2: add support ecc suite-b only - test scripts
same patch as submitted for rhel-5.10.
Comment on attachment 750633 [details]
Part 1: add support ecc suite-b only - libraries
I attached the wrong patch.
Created attachment 750635 [details]
Part 3: limit the ecc support to suite-b only - spec file
Includes into one patch:
1) patch for the libraries --- same 5.10
2) patch for the tests sripts --- same 5.10
3) changes to the spec file
Comment on attachment 750635 [details]
Part 3: limit the ecc support to suite-b only - spec file
When I click on diff it doesn't show the 1) libraries patch nor the 2) test patches, only the spec file changes. I'll submit those separately.
Created attachment 750639 [details]
Part 1: limit the ecc support to suite-b only - libraries
Created attachment 750640 [details]
Part 2: limit the ecc support to suite-b only - test scripts
Comment on attachment 750639 [details]
Part 1: limit the ecc support to suite-b only - libraries
r+ rrelyea
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2013-1558.html |