Bug 1430470 – Add SSLAlertHandler callback hook

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1430470 - Add SSLAlertHandler callback hook

Summary:	Add SSLAlertHandler callback hook

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat Enterprise Linux 7
Classification:	Red Hat
Component:	nss (Show other bugs)
Sub Component:
Version:	7.4
Hardware:	Unspecified Unspecified

Priority	unspecified Severity unspecified
Target Milestone:	rc
Target Release:	---
Assigned To:	Daiki Ueno
QA Contact:	Hubert Kario
Docs Contact:

URL:
Whiteboard:
Keywords:

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	2017-03-08 11:52 EST by Nathan Kinder
Modified:	2017-08-01 12:50 EDT (History)
CC List:	6 users (show)

See Also:
Fixed In Version:	nss-3.28.4-6.el7
Doc Type:	If docs needed, set a value
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2017-08-01 12:50:07 EDT
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Mozilla Foundation	956866	None	None	None	2017-03-09 04:43 EST
Red Hat Product Errata	RHEA-2017:1977	normal	SHIPPED_LIVE	nss bug fix and enhancement update	2017-08-01 13:57:47 EDT

Groups: None (edit)

Description Nathan Kinder 2017-03-08 11:52:23 EST

Red Hat Certificate System (which uses NSS via JSS) has a requirement to audit SSL/TLS errors, such as attempts for client to authenticate using an expired client certificate.  To satisfy this requirement, we need the ability to intercept SSL alerts from NSS.  Adding an SSLAlertHandler callback hook to NSS would allow us to satisfy this requirement.

An upstream bug with a potential implementation is available here:

  https://bugzilla.mozilla.org/show_bug.cgi?id=956866

Comment 14 errata-xmlrpc 2017-08-01 12:50:07 EDT

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2017:1977

Note You need to log in before you can comment on or make changes to this bug.