From rcritten at redhat.com Fri Oct 17 19:01:27 2014 From: rcritten at redhat.com (Rob Crittenden) Date: Fri, 17 Oct 2014 15:01:27 -0400 Subject: [Mod_nss-list] Announcing mod_nss 1.0.10 Message-ID: <54416787.9070808@redhat.com> I'm happy to announce the release of mod_nss 1.0.10. It can be downloaded from https://fedorahosted.org/released/mod_nss/ This release provides support for TLS v1.2. SSLv3 is disabled by default in nss.conf. I left it as a configurable option for those that cannot disable it at this time. This is to address the POODLE CVE, CVE-2014-3566. 1.0.9 introduced a very simplistic test bed. I expanded on this a bit to include some protocol tests. I'm also moving away from hosting mod_nss alongside 389-ds and using the fedorahosted site instead, https://fedorahosted.org/mod_nss/wiki I haven't removed the information from the 389-ds site yet, and may not for a while, but it will no longer be updated. rob