gecko-dev/security/nss
Tim Taubert 6ecc0e0e1a Bug 1401594 - land NSS 4bf658832d89 UPGRADE_NSS_RELEASE, r=me 2017-10-12 15:34:02 +02:00
..
automation Bug 1401594 - land NSS 6fb9c5396d52 UPGRADE_NSS_RELEASE, r=me 2017-10-04 10:42:25 +02:00
cmd Bug 1401594 - land NSS 6fb9c5396d52 UPGRADE_NSS_RELEASE, r=me 2017-10-04 10:42:25 +02:00
coreconf Bug 1401594 - land NSS 4bf658832d89 UPGRADE_NSS_RELEASE, r=me 2017-10-12 15:34:02 +02:00
cpputil Bug 1386955 - land NSS d50a14c51077 UPGRADE_NSS_RELEASE, r=me 2017-08-18 08:26:30 +02:00
doc Bug 1305970 - land NSS 0x3e7b53b18112, r=me 2016-10-25 20:38:17 +02:00
fuzz Bug 1401594 - land NSS 6fb9c5396d52 UPGRADE_NSS_RELEASE, r=me 2017-10-04 10:42:25 +02:00
gtests Bug 1401594 - land NSS 4bf658832d89 UPGRADE_NSS_RELEASE, r=me 2017-10-12 15:34:02 +02:00
lib Bug 1401594 - land NSS 4bf658832d89 UPGRADE_NSS_RELEASE, r=me 2017-10-12 15:34:02 +02:00
nss-tool Bug 1370890 - land NSS a1a6eb781dd4 UPGRADE_NSS_RELEASE, r=me 2017-06-13 14:26:51 +02:00
pkg Bug 1296266 - Land NSS_3_27_BETA1, r=kaie 2016-08-19 11:20:21 +02:00
tests Bug 1401594 - land NSS 6fb9c5396d52 UPGRADE_NSS_RELEASE, r=me 2017-10-04 10:42:25 +02:00
.clang-format Bug 1277255, land NSS_3_25_BETA1, r=franziskus 2016-06-02 22:33:04 +02:00
.gitignore Bug 1370890 - land NSS f212be04f3d0 UPGRADE_NSS_RELEASE, r=me 2017-07-24 10:12:57 +02:00
.taskcluster.yml Bug 1386955 - land NSS a83094ccf952 UPGRADE_NSS_RELEASE, r=me 2017-09-12 14:46:59 +02:00
COPYING
Makefile Bug 1370890 - land NSS a1a6eb781dd4 UPGRADE_NSS_RELEASE, r=me 2017-06-13 14:26:51 +02:00
TAG-INFO Bug 1401594 - land NSS 4bf658832d89 UPGRADE_NSS_RELEASE, r=me 2017-10-12 15:34:02 +02:00
build.sh Bug 1386955 - land NSS fff2c933097d UPGRADE_NSS_RELEASE, r=me 2017-08-25 09:37:32 +02:00
exports.gyp Bug 1317947 - land NSS 0x5b7a40ced8c5, r=me 2016-11-16 14:06:23 +01:00
help.txt Bug 1386955 - land NSS fff2c933097d UPGRADE_NSS_RELEASE, r=me 2017-08-25 09:37:32 +02:00
mach Bug 1386955 - land NSS 7fcf7848095c UPGRADE_NSS_RELEASE, r=me 2017-08-31 15:29:36 +02:00
manifest.mn Bug 1370890 - land NSS a1a6eb781dd4 UPGRADE_NSS_RELEASE, r=me 2017-06-13 14:26:51 +02:00
nss.gyp Bug 1386955 - land NSS a83094ccf952 UPGRADE_NSS_RELEASE, r=me 2017-09-12 14:46:59 +02:00
readme.md Bug 1386955 - land NSS 3e81bdac8449 UPGRADE_NSS_RELEASE, r=me 2017-08-10 09:22:53 +02:00
trademarks.txt

readme.md

Network Security Services

Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications. NSS supports SSL v3-TLS 1.2 (experimental TLS 1.3), PKCS #5, PKCS#7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards.

Getting started

In order to get started create a new directory on that you will be uses as your local work area, and check out NSS and NSPR. (Note that there's no git mirror of NSPR and you require mercurial to get the latest NSPR source.)

git clone https://github.com/nss-dev/nss.git
hg clone https://hg.mozilla.org/projects/nspr

NSS can also be cloned with mercurial

hg clone https://hg.mozilla.org/projects/nss

Building NSS

This build system is under development. It does not yet support all the features or platforms that NSS supports. To build on anything other than Mac or Linux please use the legacy build system as described below.

Build requirements:

After changing into the NSS directory a typical build is done as follows

./build.sh

Once the build is done the build output is found in the directory ../dist/Debug for debug builds and ../dist/Release for opt builds. Exported header files can be found in the include directory, library files in directory lib, and tools in directory bin. In order to run the tools, set your system environment to use the libraries of your build from the "lib" directory, e.g., using the LD_LIBRARY_PATH or DYLD_LIBRARY_PATH.

See help.txt for more information on using build.sh.

Building NSS (legacy build system)

After changing into the NSS directory a typical build of 32-bit NSS is done as follows:

make nss_build_all

The following environment variables might be useful:

  • BUILD_OPT=1 to get an optimised build

  • USE_64=1 to get a 64-bit build (recommended)

The complete list of environment variables can be found here.

To clean the build directory run:

make nss_clean_all

Tests

Setup

Make sure that the address $HOST.$DOMSUF on your computer is available. This is necessary because NSS tests generate certificates and establish TLS connections, which requires a fully qualified domain name. You can test this by calling ping $HOST.$DOMSUF. If this is working, you're all set. If it's not, set or export:

HOST=nss
DOMSUF=local

Note that you might have to add nss.local to /etc/hosts if it's not there. The entry should look something like 127.0.0.1 nss.local nss.

Running tests

Runnning all tests will take a while!

cd tests
./all.sh

Make sure that all environment variables set for the build are set while running the tests as well. Test results are published in the folder ../../test_results/.

Individual tests can be run with the NSS_TESTS environment variable, e.g. NSS_TESTS=ssl_gtests ./all.sh or by changing into the according directory and running the bash script there cd ssl_gtests && ./ssl_gtests.sh. The following tests are available:

cipher lowhash libpkix cert dbtests tools fips sdr crmf smime ssl ocsp merge pkits chains ec gtests ssl_gtests bogo

To make tests run faster it's recommended to set NSS_CYCLES=standard to run only the standard cycle.

Releases

NSS releases can be found at Mozilla's download server. Because NSS depends on the base library NSPR you should download the archive that combines both NSS and NSPR.

Contributing

Bugzilla is used to track NSS development and bugs. File new bugs in the NSS product.

A list with good first bugs to start with are listed here.

NSS Folder Structure

The nss directory contains the following important subdirectories:

  • coreconf contains the build logic.

  • lib contains all library code that is used to create the runtime libraries.

  • cmd contains a set of various tool programs that are built with NSS. Several tools are general purpose and can be used to inspect and manipulate the storage files that software using the NSS library creates and modifies. Other tools are only used for testing purposes.

  • test and gtests contain the NSS test suite. While test contains shell scripts to drive test programs in cmd, gtests holds a set of gtests.

A more comprehensible overview of the NSS folder structure and API guidelines can be found here.