|
 |
da103d |
diff -up ./nss/lib/softoken/pkcs11c.c.tls_abi_fix ./nss/lib/softoken/pkcs11c.c
|
|
|
da103d |
--- ./nss/lib/softoken/pkcs11c.c.tls_abi_fix 2017-03-23 14:44:59.059880273 -0700
|
|
|
da103d |
+++ ./nss/lib/softoken/pkcs11c.c 2017-03-23 14:45:24.738316707 -0700
|
|
|
da103d |
@@ -2672,6 +2672,7 @@ NSC_SignInit(CK_SESSION_HANDLE hSession,
|
|
|
da103d |
case CKM_TLS_PRF_GENERAL:
|
|
|
da103d |
crv = sftk_TLSPRFInit(context, key, key_type, HASH_AlgNULL, 0);
|
|
|
da103d |
break;
|
|
|
da103d |
+ case CKM_TLS_KDF:
|
|
|
da103d |
case CKM_TLS_MAC: {
|
|
|
da103d |
CK_TLS_MAC_PARAMS *tls12_mac_params;
|
|
|
da103d |
HASH_HashType tlsPrfHash;
|
|
|
da103d |
diff -up ./nss/lib/softoken/pkcs11.c.tls_abi_fix ./nss/lib/softoken/pkcs11.c
|
|
|
da103d |
--- ./nss/lib/softoken/pkcs11.c.tls_abi_fix 2017-03-23 14:42:21.055194120 -0700
|
|
|
da103d |
+++ ./nss/lib/softoken/pkcs11.c 2017-03-23 14:44:44.321629780 -0700
|
|
|
da103d |
@@ -373,6 +373,11 @@ static const struct mechanismList mechan
|
|
|
da103d |
{ CKM_SHA512_HMAC_GENERAL, { 1, 128, CKF_SN_VR }, PR_TRUE },
|
|
|
da103d |
{ CKM_TLS_PRF_GENERAL, { 0, 512, CKF_SN_VR }, PR_FALSE },
|
|
|
da103d |
{ CKM_TLS_MAC, { 0, 512, CKF_SN_VR }, PR_FALSE },
|
|
|
da103d |
+ { CKM_TLS_KDF, { 0, 512, CKF_SN_VR }, PR_FALSE }, /* in RHEL 7.3 we had the wrong
|
|
|
da103d |
+ * number for TLS_MAC. keep the old
|
|
|
da103d |
+ * number to allow old versions of
|
|
|
da103d |
+ * nss on * RHEL 7 to work with
|
|
|
da103d |
+ * this softoken */
|
|
|
da103d |
{ CKM_NSS_TLS_PRF_GENERAL_SHA256,
|
|
|
da103d |
{ 0, 512, CKF_SN_VR },
|
|
|
da103d |
PR_FALSE },
|