Changelog for jss-4.4.2-5.fc27.i686.rpm :

* Mon Sep 11 2017 Dogtag Team 4.4.2-5- Mozilla Bugzilla #1370778 - PBE and padded block cipher enhancements and fixes (ftweedal)- Mozilla Bugzilla #1371147 - PK11Store.getEncryptedPrivateKeyInfo() segfault if export fails (ftweedal)- Mozilla Bugzilla #1373824 - Mozilla Bug #1373824 - Bug 1308027 (change 2163) breaks HMAC-SHA1 key imports (jmagne)
* Thu Aug 03 2017 Fedora Release Engineering - 4.4.2-4- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering - 4.4.2-3- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Tue May 09 2017 Matthew Harmsen - 4.4.2-2- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in Mozilla Bugzilla #1360207 - Fix incorrect if (ss->...) in SSL_ReconfigFD
* Mon May 01 2017 Matthew Harmsen - 4.4.2-1- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a release tag (mharmsen)- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and exporting EncryptedPrivateKeyInfo (ftweedal)- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements (ftweedal)
* Mon Apr 17 2017 Matthew Harmsen - 4.4.1-2- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of idm-console-framework < 1.1.17-4- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files
* Mon Mar 27 2017 Matthew Harmsen - 4.4.1-1- Bugzilla Bug #1431937 - Rebase jss to 4.4.x in Fedora 25+- Updated build requirements for NSPR- Updated build and runtime requirements for NSS- ## \'jss-post-rebase.patch\' resolves the following issues ported from - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1 code for RFC5272+ (cfu)- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket class. (edewata)- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole(). (edewata)- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)- Mozilla Bugzilla #1350130 - Missing CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)
* Tue Mar 21 2017 Matthew Harmsen - 4.4.0-3- Bugzilla Bug #1434535 - JSS 4.4.x is incompatible with versions of pki-base < 10.4.0
* Wed Mar 15 2017 Matthew Harmsen - 4.4.0-2- Bugzilla Bug #1432568 - JSS 4.4.x is incompatible with versions of tomcatjss < 7.2.1
* Mon Mar 13 2017 Elio Maldonado - 4.4.0-1- Bugzilla Bug #1431937 - Rebase jss to 4.4.x in Fedora 25+- ## JSS 4.4.0 includes the following patches ported from downstream:- Mozilla Bugzilla #507536 - Add IPv6 functionality to JSS- Mozilla Bugzilla #1307872 - Expose NSS calls for OCSP settings- Mozilla Bugzilla #1307882 - RFE ecc - add ecc curve name support in JSS and CS interface- Mozilla Bugzilla #1307993 - Expose updated certificate verification function in JSS- Mozilla Bugzilla #1308000 - Incorrect socket accept error message due to bad pointer arithmetic- Mozilla Bugzilla #1308001 - Verification should fail when a revoked certificate is added- Mozilla Bugzilla #1308004 - Warnings should be cleaned up in JSS build- Mozilla Bugzilla #1308006 - DRM failed to recovery keys when in FIPS mode (HSM + NSS)- Mozilla Bugzilla #1308008 - Defects revealed by Coverity scan- Mozilla Bugzilla #1308009 - Add support for PKCS5v2; support for secure PKCS12- Mozilla Bugzilla #1308012 - DRM: during archiving and recovering, wrapping unwrapping keys should be done in the token- Mozilla Bugzilla #1308013 - JSS - HSM token name was mistaken for manufacturer identifier- Mozilla Bugzilla #1308017 - Un-deprecate previously deprecated methods in JSS 4.2.6- Mozilla Bugzilla #1308019 - Provide Tomcat support for TLS v1.1 and TLS v1.2 via NSS through JSS- Mozilla Bugzilla #1308026 - JSS certificate validation does not pass up exact error from NSS- Mozilla Bugzilla #1308027 - Merge pki-symkey into jss- Mozilla Bugzilla #1308029 - Resolve Javadoc build issues- Mozilla Bugzilla #1308047 - support ECC encryption key archival and recovery- Mozilla Bugzilla #1313122 - Remove bypass tests as latest NSS has removed PKCS#11 bypass support- Mozilla Bugzilla #1328675 - Simple problem unwrapping AES sym keys on token- Mozilla Bugzilla #1345174 - Cannot create system certs when using LunaSA HSM in FIPS Mode and ECC algorithms- Mozilla Bugzilla #1345613 - expose AES KeyWrap and add some useful OID functions- Mozilla Bugzilla #1346410 - Load JSS libraries appropriately- ## JSS 4.4.0 includes the following changes for building and testing:- Mozilla Bugzilla #1331765 - Simplify JSS Makefile build and test- Mozilla Bugzilla #1346420 - Document steps required to use the proper libjss4.so when running certain HMAC Algorithms tests
* Wed Feb 22 2017 Jack Magne - 4.2.6-44- Bugzilla Bug #1425971 - Simple problem unwrapping AES sym keys on token
* Fri Feb 10 2017 Fedora Release Engineering - 4.2.6-43- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Tue Aug 09 2016 Christina Fu - 4.2.6-42- Sync up patches from both Fedora and RHEL; adding two patches (cfu, edewata, mharmsen) from RHEL:- Bugzilla Bug #1238450 - UnsatisfiedLinkError on Windows (cfu)- make it compile on Windows platforms (cfu for nhosoi)
* Fri Jun 24 2016 Christina Fu - 4.2.6-41- Bugzilla 1221295 jss fails to decode EncryptedKey >> EnvelopedData (cfu for roysjoshAATTgmail.com)
* Thu May 19 2016 Christina Fu - 4.2.6-40- Bugzilla 1074208 - pass up exact JSS certificate validation errors from NSS (edewata)- Bugzilla 1331596 - Key archival fails when KRA is configured with lunasa. (cfu)- PKI ticket 801 - Merge pki-symkey into jss (phase 1) (jmagne)
* Wed Dec 09 2015 Endi Dewata - 4.2.6-38- Bugzilla Bug #1289799 - JSS build failure on F23 and Rawhide (edewata)
* Thu Apr 09 2015 Marcin Juszkiewicz - 4.2.6-37- Fix use of __isa_bits macro so it does not fail during srpm generation on koji
* Thu Apr 09 2015 Marcin Juszkiewicz - 4.2.6-36- Use __isa_bits macro to check for 64-bit arch. Unblocks aarch64 and ppc64le.
* Tue Sep 30 2014 Christina Fu - 4.2.6-35- Bugzilla Bug #1040640 - Incorrect OIDs for SHA2 algorithms (cfu for jnimehAATTgmail.com)- Bugzilla Bug #1133718 - Key strength validation is not performed for RC4 algorithm (nkinder)- Bugzilla Bug #816396 - Provide Tomcat support for TLS v1.1 and TLS v1.2 via NSS through JSS (cfu)
* Sat Aug 16 2014 Fedora Release Engineering - 4.2.6-34- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sun Jun 08 2014 Fedora Release Engineering - 4.2.6-33- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Fri Mar 28 2014 Michael Simacek - 4.2.6-32- Use Requires: java-headless rebuild (#1067528)
* Sat Aug 03 2013 Fedora Release Engineering - 4.2.6-31- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Wed Jul 17 2013 Nathan Kinder - 4.2.6-30- Bugzilla Bug #847120 - Unable to build JSS on F17 or newer
* Thu Feb 14 2013 Fedora Release Engineering - 4.2.6-29- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Wed Dec 19 2012 Stanislav Ochotnicky - 4.2.6-28- revbump after jnidir change
* Wed Dec 12 2012 Stanislav Ochotnicky - 4.2.6-27- Simple rebuild
* Mon Nov 19 2012 Christina Fu - 4.2.6-26- added source URLs in spec file to pass Package Wrangler
* Thu Jul 19 2012 Fedora Release Engineering - 4.2.6-25- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Fri Mar 30 2012 Matthew Harmsen - 4.2.6-24- Bugzilla Bug #783007 - Un-deprecate previously deprecated methods in JSS 4.2.6 . . . BadPaddingException (mharmsen)
* Tue Mar 20 2012 Christina Fu - 4.2.6-23- Bugzilla Bug #797351 - JSS - HSM token name was mistaken for manufacturer identifier (cfu)- Bugzilla Bug #804840 - [RFE] ECC encryption keys cannot be archived ECC phase2 work - support for ECC encryption key archival and recovery (cfu)- Bugzilla Bug #783007 - Un-deprecate previously deprecated methods in JSS 4.2.6 . . . (mharmsen)- Dogtag TRAC Task #109 (https://fedorahosted.org/pki/ticket/109) - add benign JNI jar file symbolic link from JNI libdir to JNI jar file (mharmsen)
* Fri Jan 13 2012 Fedora Release Engineering - 4.2.6-22- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Wed Oct 19 2011 Christina Fu - 4.2.6-21- Bugzilla Bug #737122 - DRM: during archiving and recovering, wrapping unwrapping keys should be done in the token- support for PKCS5v2; support for secure PKCS12- Bugzilla Bug #744797 - KRA key recovery (retrieve pkcs#12) fails after the in-place upgrade( CS 8.0->8.1)
* Mon Sep 19 2011 Matthew Harmsen - 4.2.6-20- Bugzilla Bug #715621 - Defects revealed by Coverity scan
* Wed Aug 31 2011 Matthew Harmsen - 4.2.6-19.1- Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
* Mon Aug 15 2011 Christina Fu - 4.2.6-19- Bugzilla Bug 733550 - DRM failed to recovery keys when in FIPS mode (HSM + NSS)
* Fri Aug 12 2011 Matthew Harmsen - 4.2.6-18- Bugzilla Bug #660436 - Warnings should be cleaned up in JSS build (jdennis, mharmsen)
* Wed May 18 2011 Christina Fu - 4.2.6-17- Bug 670980 - Cannot create system certs when using LunaSA HSM in FIPS Mode and ECC algorithms (support tokens that don\'t do ECDH)
* Fri Apr 08 2011 Jack Magne - 4.2.6-15.99- bug 694661 - TKS instance crash during token enrollment. Back out of previous patch for #676083.
* Thu Feb 24 2011 Andrew Wnuk - 4.2.6-15- bug 676083 - JSS: slots not freed
* Wed Feb 09 2011 Fedora Release Engineering - 4.2.6-14- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Mon Jan 31 2011 John Dennis - 4.2.6-13- remove misleading comment in spec file concerning jar signing
* Tue Jan 11 2011 Kevin Wright - 4.2.6-12- added missing patch line
* Tue Dec 21 2010 Christina Fu - 4.2.6-11- bug 654657 - Incorrect socket accept error message due to bad pointer arithmetic- bug 661142 - Verification should fail when a revoked certificate is added
* Thu Dec 16 2010 John Dennis - 4.2.6-10- Resolves: bug 656094 - Rebase jss to at least jss-4.2.6-9- merge in updates from Fedora move jar location to %{_libdir}/jss and provide symlinks, on 32bit looks like this: /usr/lib/java/jss4.jar -> /usr/lib/jss/jss4.jar /usr/lib/jss/jss4-.jar /usr/lib/jss/jss4.jar -> jss4-.jar /usr/lib/jss/libjss4.so- bug 654657 - Incorrect socket accept error message due to bad pointer arithmetic- bug 647364 - Expose updated certificate verification function in JSS- bug 529945 - expose NSS calls for OCSP settings- bug 638833 - rfe ecc - add ec curve name support in JSS and CS- Need to explicitly catch UnsatisfiedLinkError exception for System.load()- bug 533304 - Move location of libjss4.so to subdirectory and use System.load() to load it instead of System.loadLibrary() for Fedora packaging compliance
* Mon Nov 30 2009 Dennis Gregorovic - 4.2.6-4.1- Rebuilt for RHEL 6
* Fri Jul 31 2009 Rob Crittenden 4.2.6-4- Resolves: bug 224688 - Support ECC POP on the server- Resolves: bug 469456 - Server Sockets are hard coded to IPV4- Resolves: bug 509183 - Set NSS dependency >= 3.12.3.99
* Fri Jul 24 2009 Fedora Release Engineering - 4.2.6-3- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
* Fri Jun 05 2009 Rob Crittenden 4.2.6-2- Include patch to fix missing AATTparam so javadocs will build
* Fri Jun 05 2009 Rob Crittenden 4.2.6-1- Resolves: bug 455305 - CA ECC Signing Key Failure- Resolves: bug 502111 - Need JSS interface for NSS\'s PK11_GenerateKeyPairWithOpFlags() function- Resolves: bug 503809 - Update JSS version to 4.2.6- Resolves: bug 503817 - Create JSS Javadocs as their own RPM
* Wed Feb 25 2009 Fedora Release Engineering - 4.2.5-4- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
* Tue Aug 05 2008 Tom \"spot\" Callaway - 4.2.5-3- fix license tag
* Tue Feb 19 2008 Fedora Release Engineering - 4.2.5-2- Autorebuild for GCC 4.3
* Fri Aug 03 2007 Rob Crittenden 4.2.5-1- update to 4.2.5
* Thu May 24 2007 Rob Crittenden 4.2.4-6- Use _jnidir macro instead of _javadir for the jar files. This will break multilib installs but adheres to the jpackage spec.
* Wed May 16 2007 Rob Crittenden 4.2.4-5- Include the 3 license files- Remove Requires for nss and nspr. These libraries have versioned symbols so BuildRequires is enough to set the minimum.- Add sparc64 for the 64-bit list
* Mon May 14 2007 Rob Crittenden 4.2.4-4- Included additional comments on jar signing and why ldconfig is not required.
* Thu May 10 2007 Rob Crittenden 4.2.4-3- Added information on how to pull the source into a tar.gz
* Thu Mar 15 2007 Rob Crittenden 4.2.4-2- Added RPM_OPT_FLAGS to XCFLAGS- Added link to Sun JCE information
* Tue Feb 27 2007 Rob Crittenden 4.2.4-1- Initial build