Update NSS to 3.41

This commit is contained in:
wolfbeast 2018-12-15 01:42:53 +01:00 committed by Roy Tam
commit 5f0986e66f
540 changed files with 49568 additions and 10631 deletions

View file

@ -13,7 +13,7 @@
#include "prio.h"
#include "seccomon.h"
#include "cert.h"
#include "keyt.h"
#include "keythi.h"
#include "sslt.h" /* public ssl data types */
@ -282,6 +282,23 @@ SSL_IMPORT PRFileDesc *DTLS_ImportFD(PRFileDesc *model, PRFileDesc *fd);
*/
#define SSL_ENABLE_DTLS_SHORT_HEADER 36
/*
* Enables the processing of the downgrade sentinel that can be added to the
* ServerHello.random by a server that supports Section 4.1.3 of TLS 1.3
* [RFC8446]. This sentinel will always be generated by a server that
* negotiates a version lower than its maximum, this only controls whether a
* client will treat receipt of a value that indicates a downgrade as an error.
*/
#define SSL_ENABLE_HELLO_DOWNGRADE_CHECK 37
/* Enables the SSLv2-compatible ClientHello for servers. NSS does not support
* SSLv2 and will never send an SSLv2-compatible ClientHello as a client. An
* NSS server with this option enabled will accept a ClientHello that is
* v2-compatible as defined in Appendix E.1 of RFC 6101.
*
* This is disabled by default and will be removed in a future version. */
#define SSL_ENABLE_V2_COMPATIBLE_HELLO 38
#ifdef SSL_DEPRECATED_FUNCTION
/* Old deprecated function names */
SSL_IMPORT SECStatus SSL_Enable(PRFileDesc *fd, int option, PRIntn on);