CVE-2013-4566

This update brings several improvements to apache2-mod_nss.

* 

  More TLS 1.2 ciphers have been added, including AES-GCM and Camelia
  ciphers. These can be selected by their tags:

      o rsa_aes_128_sha256
      o rsa_aes_128_gcm_sha
      o rsa_aes_256_sha256
      o rsa_camellia_128_sha
      o rsa_camellia_256_sha
      o ecdh_ecdsa_aes_128_gcm_sha
      o ecdhe_ecdsa_aes_128_sha256
      o ecdhe_ecdsa_aes_128_gcm_sha
      o ecdh_rsa_aes_128_gcm_sha
      o ecdhe_rsa_aes_128_sha256
* 

  The mod_nss.conf.in template was updated to include those ciphers.
  (bnc#863035)

* 

  VirtualHost settings in /etc/apache2/conf.d/mod_nss.conf is now
  externalized to /etc/apache2/vhosts.d/vhost-nss.template and not
  activated/read by default. (bnc#878681)

* 

  The Server Name Indication (SNI) extension was implemented.

* 

  Reading the pass phrase during start-up was improved. (bnc#863518)

This update provides apache2-mod_nss 1.0.14, which brings several fixes and enhancements:

• Fix OpenSSL ciphers stopped parsing at +. (CVE-2016-3099)
• Created valgrind suppression files to ease debugging.
• Implement SSL_PPTYPE_FILTER to call executables to get the key password pins.
• Improvements to migrate.pl.
• Update default ciphers to something more modern and secure.
• Check for host and netstat commands in gencert before trying to use them.
• Add server support for DHE ciphers.
• Extract SAN from server/client certificates into env
• Fix memory leaks and other coding issues caught by clang analyzer.
• Add support for Server Name Indication (SNI).
• Add support for SNI for reverse proxy connections.
• Add RenegBufferSize? option.
• Add support for TLS Session Tickets (RFC 5077).
• Fix logical AND support in OpenSSL cipher compatibility.
• Correctly handle disabled ciphers. (CVE-2015-5244)
• Implement a slew more OpenSSL cipher macros.
• Fix a number of illegal memory accesses and memory leaks.
• Support for SHA384 ciphers if they are available in NSS.
• Add compatibility for mod_ssl-style cipher definitions.
• Add TLSv1.2-specific ciphers.
• Completely remove support for SSLv2.
• Add support for sqlite NSS databases.
• Compare subject CN and VS hostname during server start up.
• Add support for enabling TLS v1.2.
• Don't enable SSL 3 by default. (CVE-2014-3566)
• Fix CVE-2013-4566.
• Move nss_pcache to /usr/libexec.
• Support httpd 2.4+.
• Use apache2-systemd-ask-pass to prompt for a certificate passphrase. (bsc#972968, bsc#975394)

This update provides apache2-mod_nss 1.0.14, which brings several fixes and enhancements:

• SHA256 cipher names change spelling from *_sha256 to *_sha_256.
• Drop mod_nss_migrate.pl and use upstream migrate script instead.
• Check for Apache user owner/group read permissions of NSS database at startup.
• Update default ciphers to something more modern and secure.
• Check for host and netstat commands in gencert before trying to use them.
• Don't ignore NSSProtocol when NSSFIPS is enabled.
• Use proper shell syntax to avoid creating /0 in gencert.
• Add server support for DHE ciphers.
• Extract SAN from server/client certificates into env.
• Fix memory leaks and other coding issues caught by clang analyzer.
• Add support for Server Name Indication (SNI)
• Add support for SNI for reverse proxy connections.
• Add RenegBufferSize? option.
• Add support for TLS Session Tickets (RFC 5077).
• Implement a slew more OpenSSL cipher macros.
• Fix a number of illegal memory accesses and memory leaks.
• Support for SHA384 ciphers if they are available in the version of NSS mod_nss is built against.
• Add the SECURE_RENEG environment variable.
• Add some hints when NSS database cannot be initialized.
• Code cleanup including trailing whitespace and compiler warnings.
• Modernize autotools configuration slightly, add config.h.
• Add small test suite for SNI.
• Add compatibility for mod_ssl-style cipher definitions.
• Add Camelia ciphers.
• Remove Fortezza ciphers.
• Add TLSv1.2-specific ciphers.
• Initialize cipher list when re-negotiating handshake.
• Completely remove support for SSLv2.
• Add support for sqlite NSS databases.
• Compare subject CN and VS hostname during server start up.
• Add support for enabling TLS v1.2.
• Don't enable SSL 3 by default. (CVE-2014-3566)
• Improve protocol testing.
• Add nss_pcache man page.
• Fix argument handling in nss_pcache.
• Support httpd 2.4+.
• Allow users to configure a helper to ask for certificate passphrases via NSSPassPhraseDialog. (bsc#975394)

This update provides apache2-mod_nss 1.0.14, which brings several fixes and enhancements:

• Fix OpenSSL ciphers stopped parsing at +. (CVE-2016-3099)
• Created valgrind suppression files to ease debugging.
• Implement SSL_PPTYPE_FILTER to call executables to get the key password pins.
• Improvements to migrate.pl.
• Update default ciphers to something more modern and secure.
• Check for host and netstat commands in gencert before trying to use them.
• Add server support for DHE ciphers.
• Extract SAN from server/client certificates into env
• Fix memory leaks and other coding issues caught by clang analyzer.
• Add support for Server Name Indication (SNI).
• Add support for SNI for reverse proxy connections.
• Add RenegBufferSize? option.
• Add support for TLS Session Tickets (RFC 5077).
• Fix logical AND support in OpenSSL cipher compatibility.
• Correctly handle disabled ciphers. (CVE-2015-5244)
• Implement a slew more OpenSSL cipher macros.
• Fix a number of illegal memory accesses and memory leaks.
• Support for SHA384 ciphers if they are available in NSS.
• Add compatibility for mod_ssl-style cipher definitions.
• Add TLSv1.2-specific ciphers.
• Completely remove support for SSLv2.
• Add support for sqlite NSS databases.
• Compare subject CN and VS hostname during server start up.
• Add support for enabling TLS v1.2.
• Don't enable SSL 3 by default. (CVE-2014-3566)
• Fix CVE-2013-4566.
• Move nss_pcache to /usr/libexec.
• Support httpd 2.4+.
• SHA256 cipher names change spelling from *_sha256 to *_sha_256.
• Use apache2-systemd-ask-pass to prompt for a certificate passphrase. (bsc#972968, bsc#975394)

mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does not enforce the NSSVerifyClient setting in the directory context, which allows remote attackers to bypass intended access restrictions.