nss-3.48

[ken@…]

So I was looking at the diff for firefox-72beta1, as you do.

Needs nss-3.48.

AFAICS this has not been released yet, but the release notes are at ​https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes

The NSS team has released Network Security Services (NSS) 3.48 on XX December 2019, which is a minor release.

There is also a link for the source tarball there, which 404s at the moment.

[Bruce Dubbs]

nss-3.48.tar.gz downloads fine now.

[ken@…]

Notable Changes in NSS 3.48

TLS 1.3 is the default maximum TLS version. See Bug 1573118 for details.

TLS extended master secret is enabled by default, where possible. See Bug 1575411 for details.

The master password PBE now uses 10,000 iterations by default when using the default sql (key4.db) storage. Because using an iteration count higher than 1 with the legacy dbm (key3.db) storage creates files that are incompatible with previous versions of NSS, applications that wish to enable it for key3.db are required to set environment variable NSS_ALLOW_LEGACY_DBM_ITERATION_COUNT=1. Applications may set environment variable NSS_MIN_MP_PBE_ITERATION_COUNT to request a higher iteration count than the library's default, or NSS_MAX_MP_PBE_ITERATION_COUNT to request a lower iteration count for test environments. See Bug 1562671 for details.

Certificate Authority Changes

The following CA certificates were Added:

Bug 1591178 - Entrust Root Certification Authority - G4 Cert

SHA-256 Fingerprint: DB3517D1F6732A2D5AB97C533EC70779EE3270A62FB4AC4238372460E6F01E88

Upcoming Changes in NSS 3.49

The legacy DBM database, libnssdbm, will no longer be built by default. See Bug 1594933 for details.

[ken@…]

r22435