NSS 3.56 release notes

Introduction

The NSS team has released Network Security Services (NSS) 3.56 on 21 August 2020, which is a minor release.

Distribution Information

The HG tag is NSS_3_56_RTM. NSS 3.56 requires NSPR 4.28 or newer.

NSS 3.56 source distributions are available on ftp.mozilla.org for secure HTTPS download:

Other releases are available Release notes for recent versions of NSS.

Notable Changes in NSS 3.56

  • NSPR dependency updated to 4.28.

  • The known issue where Makefile builds failed to locate seccomon.h was fixed in Bug 1653975.

Bugs fixed in NSS 3.56

  • Bug 1650702 - Support SHA-1 HW acceleration on ARMv8

  • Bug 1656981 - Use MPI comba and mulq optimizations on x86-64 MacOS.

  • Bug 1654142 - Add CPU feature detection for Intel SHA extension.

  • Bug 1648822 - Add stricter validation of DH keys in FIPS mode.

  • Bug 1656986 - Properly detect arm64 during GYP build architecture detection.

  • Bug 1652729 - Add build flag to disable RC2 and relocate to lib/freebl/deprecated.

  • Bug 1656429 - Correct RTT estimate used in 0-RTT anti-replay.

  • Bug 1588941 - Send empty certificate message when scheme selection fails.

  • Bug 1652032 - Fix failure to build in Windows arm64 makefile cross-compilation.

  • Bug 1625791 - Fix deadlock issue in nssSlot_IsTokenPresent.

  • Bug 1653975 - Fix 3.53 regression by setting “all” as the default makefile target.

  • Bug 1659792 - Fix broken libpkix tests with unexpired PayPal cert.

  • Bug 1659814 - Fix interop.sh failures with newer tls-interop commit and dependencies.

  • Bug 1656519 - Update NSPR dependency to 4.28.

This Bugzilla query returns all the bugs fixed in NSS 3.56:

https://bugzilla.mozilla.org/buglist.cgi?resolution=FIXED&classification=Components&query_format=advanced&product=NSS&target_milestone=3.56

Compatibility

NSS 3.56 shared libraries are backward compatible with all older NSS 3.x shared libraries. A program linked with older NSS 3.x shared libraries will work with NSS 3.56 shared libraries without recompiling or relinking. Furthermore, applications that restrict their use of NSS APIs to the functions listed in NSS Public Functions will remain compatible with future versions of the NSS shared libraries.

Feedback

Bugs discovered should be reported by filing a bug report with bugzilla.mozilla.org (product NSS).