SUSE-RU-2015:0591-1

This update brings several improvements to apache2-mod_nss.

* 

  More TLS 1.2 ciphers have been added, including AES-GCM and Camelia
  ciphers. These can be selected by their tags:

      o rsa_aes_128_sha256
      o rsa_aes_128_gcm_sha
      o rsa_aes_256_sha256
      o rsa_camellia_128_sha
      o rsa_camellia_256_sha
      o ecdh_ecdsa_aes_128_gcm_sha
      o ecdhe_ecdsa_aes_128_sha256
      o ecdhe_ecdsa_aes_128_gcm_sha
      o ecdh_rsa_aes_128_gcm_sha
      o ecdhe_rsa_aes_128_sha256
* 

  The mod_nss.conf.in template was updated to include those ciphers.
  (bnc#863035)

* 

  VirtualHost settings in /etc/apache2/conf.d/mod_nss.conf is now
  externalized to /etc/apache2/vhosts.d/vhost-nss.template and not
  activated/read by default. (bnc#878681)

* 

  The Server Name Indication (SNI) extension was implemented.

* 

  Reading the pass phrase during start-up was improved. (bnc#863518)