NSS 3.16.1 release notes¶

Introduction ¶

Network Security Services (NSS) 3.16.1 is a patch release for NSS 3.16. The bug fixes in NSS 3.16.1 are described in the “Bugs Fixed” section below.

Distribution Information ¶

The HG tag is NSS_3_16_1_RTM. NSS 3.16.1 requires NSPR 4.10.5 or newer.

NSS 3.16.1 source distributions are available on ftp.mozilla.org for secure HTTPS download:

Source tarballs: https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_16_1_RTM/src/

New in NSS 3.16.1 ¶

New Functionality ¶

Added the “ECC” flag for modutil to select the module used for elliptic curve cryptography (ECC) operations.

New Functions

in pk11pub.h
- PK11_ExportDERPrivateKeyInfo and PK11_ExportPrivKeyInfo - exports a private key in a DER-encoded ASN.1 PrivateKeyInfo type or a SECKEYPrivateKeyInfo structure. Only RSA private keys are supported now.
in secmod.h
- SECMOD_InternalToPubMechFlags - converts from NSS-internal to public representation of mechanism flags.

New Types

in sslt.h
- ssl_padding_xtn - the value of this enum constant changed from the experimental value 35655 to the IANA-assigned value 21. .

New Macros

in secmod.h
- PUBLIC_MECH_ECC_FLAG - a public mechanism flag for elliptic curve cryptography (ECC) operations.
in utilmodt.h
- SECMOD_ECC_FLAG - an NSS-internal mechanism flag for elliptic curve cryptography (ECC) operations. This macro has the same numeric value as PUBLIC_MECH_ECC_FLAG.

Notable Changes in NSS 3.16.1 ¶

Imposed name constraints on the French government root CA ANSSI (DCISS).

Bugs fixed in NSS 3.16.1 ¶

This Bugzilla query returns all the bugs fixed in NSS 3.16.1:

https://bugzilla.mozilla.org/buglist.cgi?resolution=FIXED&classification=Components&query_format=advanced&product=NSS&target_milestone=3.16.1