nss: update to 3.41
Bug fix only update.
Bug
1252891 - Implemented EKU handling for IPsec IKE.
Bug
1423043 - Enable half-closed states for TLS.
Bug
1493215 - Enabled the following ciphersuites by default:
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
TLS_RSA_WITH_AES_256_GCM_SHA384
Bug
1412829, Reject empty supported_signature_algorithms in Certificate Request in TLS 1.2
Bug
1485864 - Cache side-channel variant of the Bleichenbacher attack (CVE-2018-12404)
Bug
1481271 - Resend the same ticket in ClientHello after HelloRetryRequest
Bug
1493769 - Set session_id for external resumption tokens
Bug
1507179 - Reject CCS after handshake is complete in TLS 1.3
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
