This request was evaluated by Red Hat Product Management for inclusion in a Red Hat Enterprise Linux release. Product Management has requested further review of this request by Red Hat Engineering, for potential inclusion in a Red Hat Enterprise Linux release for currently deployed products. This request is not yet committed for inclusion in a release.
Aftee a carefull inspection and comparisons of the nss-3.15 against the ones downstream Bob Relyea identified several files within freebl and softoken that need to be synched up further with upstream to pick fixes. I will submit next the changes split into tree patches: for util, freebl, and softoekn as this way they are easier to apply either on rhel-5.10 or rhel-6.5.
Created attachment 777840 [details] adds to util/pkcs11n.h with new #defines needed for the rest new TLS 1.2 mechanisms. This is one of the pkcs11 nss internal headers.
Created attachment 777843 [details] change to lib/freebl/gcm.c
Created attachment 777845 [details] changes to files within lib/softoken
Comment on attachment 777840 [details] adds to util/pkcs11n.h with new #defines needed for the rest r+ rrelyea
Comment on attachment 777843 [details] change to lib/freebl/gcm.c r+ rrelyea
Comment on attachment 777845 [details] changes to files within lib/softoken r+ rrelyea
Created attachment 778908 [details] Display CPUINFO before the test start, already applied Already checked it so it's for the record.
Created attachment 778910 [details] Disable HW GCM if builtime environment variable DISABLE_HW_GCM=1 This is Bob Relyea's patch which is inside the crypto boundary. Therefore with it be applied here and also to nss-softokn for RHEL-6.5 as the code must be the same. Disabling of hawraware GM requres that 'export DISABLE_HW_GCM=1' be set on nss.spec. For RHEL-6.5 nss-softokn.spec we don't set it.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2013-1318.html