diff options
| author | Kamil Dudka <kdudka@redhat.com> | 2015-09-18 17:10:05 +0200 |
|---|---|---|
| committer | Kamil Dudka <kdudka@redhat.com> | 2015-09-18 17:38:51 +0200 |
| commit | 958d2ffb198166a062a0ff20d009c64972a2b374 (patch) | |
| tree | 72cc69c08e28f2f3226abc00bed55671d68d5f14 /RELEASE-NOTES | |
| parent | a9fd53887ba07cd8313a8b9706f2dc71d6b8ed1b (diff) | |
nss: prevent NSS from incorrectly re-using a session
Without this workaround, NSS re-uses a session cache entry despite the
server name does not match. This causes SNI host name to differ from
the actual host name. Consequently, certain servers (e.g. github.com)
respond by 400 to such requests.
Bug: https://bugzilla.mozilla.org/1202264
Diffstat (limited to 'RELEASE-NOTES')
| -rw-r--r-- | RELEASE-NOTES | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/RELEASE-NOTES b/RELEASE-NOTES index a1d40d595..770145dfa 100644 --- a/RELEASE-NOTES +++ b/RELEASE-NOTES @@ -58,6 +58,7 @@ This release includes the following bugfixes: o winbuild: run buildconf.bat if necessary o buildconf.bat: fix syntax error o curl_sspi: fix possibly undefined CRYPT_E_REVOKED [16] + o nss: prevent NSS from incorrectly re-using a session [18] This release includes the following known bugs: @@ -96,3 +97,4 @@ References to bug reports and discussions on issues: [15] = http://curl.haxx.se/bug/?i=409 [16] = http://curl.haxx.se/bug/?i=411 [17] = http://daniel.haxx.se/blog/2015/09/11/unnecessary-use-of-curl-x/ + [18] = https://bugzilla.mozilla.org/1202264 |