Fri Feb 14 13:02:42 2020 UTC ()
nss: Update to 3.50

Changelog:
Notable Changes in NSS 3.50

* Verified primitives from HACL* were updated, bringing performance
improvements for several platforms.
  Note that Intel processors with SSE4 but without AVX are currently unable to
use the improved ChaCha20/Poly1305 due to a build issue; such platforms will
fall-back to less optimized algorithms. See Bug 1609569 for details.

* Updated DTLS 1.3 implementation to Draft-30. See Bug 1599514 for details.

* Added NIST SP800-108 KBKDF - PKCS#11 implementation. See Bug 1599603 for
details.

Bugs fixed in NSS 3.50

* Bug 1599514 - Update DTLS 1.3 implementation to Draft-30
* Bug 1603438 - Fix native tools build failure due to lack of zlib include dir
if external
* Bug 1599603 - NIST SP800-108 KBKDF - PKCS#11 implementation
* Bug 1606992 - Cache the most recent PBKDF1 password hash, to speed up
repeated SDR operations, important with the increased KDF iteration counts.
NSS 3.49.1 sped up PBKDF2 operations, though PBKDF1 operations are also
relevant for older NSS databases (also included in NSS 3.49.2)
* Bug 1608895 - Gyp builds on taskcluster broken by Setuptools v45.0.0 (for
lacking Python3)
* Bug 1574643 - Upgrade HACL* verified implementations of ChaCha20, Poly1305,
and 64-bit Curve25519
* Bug 1608327 - Two problems with NEON-specific code in freebl
* Bug 1575843 - Detect AArch64 CPU features on FreeBSD
* Bug 1607099 - Remove the buildbot configuration
* Bug 1585429 - Add more HKDF test vectors
* Bug 1573911 - Add more RSA test vectors
* Bug 1605314 - Compare all 8 bytes of an mp_digit when clamping in Windows
assembly/mp_comba
* Bug 1604596 - Update Wycheproof vectors and add support for CBC, P256-ECDH,
and CMAC tests
* Bug 1608493 - Use AES-NI for non-GCM AES ciphers on platforms with no
assembly-optimized implementation, such as macOS.
* Bug 1547639 - Update zlib in NSS to 1.2.11
* Bug 1609181 - Detect ARM (32-bit) CPU features on FreeBSD
* Bug 1602386 - Fix build on FreeBSD/powerpc*
* Bug 1608151 - Introduce NSS_DISABLE_ALTIVEC
* Bug 1612623 - Depend on NSPR 4.25
* Bug 1609673 - Fix a crash when NSS is compiled without libnssdbm support,
but the nssdbm shared object is available anyway.


(ryoon)
diff -r1.178 -r1.179 pkgsrc/devel/nss/Makefile
diff -r1.106 -r1.107 pkgsrc/devel/nss/distinfo
cvs diff -r1.178 -r1.179 pkgsrc/devel/nss/Makefile (expand / switch to unified diff)

--- pkgsrc/devel/nss/Makefile 2020/02/05 03:31:58 1.178
+++ pkgsrc/devel/nss/Makefile 2020/02/14 13:02:41 1.179
@@ -1,17 +1,17 @@ @@ -1,17 +1,17 @@
1# $NetBSD: Makefile,v 1.178 2020/02/05 03:31:58 ryoon Exp $ 1# $NetBSD: Makefile,v 1.179 2020/02/14 13:02:41 ryoon Exp $
2 2
3DISTNAME= nss-${NSS_RELEASE:S/.0$//} 3DISTNAME= nss-${NSS_RELEASE:S/.0$//}
4NSS_RELEASE= 3.49.2 4NSS_RELEASE= 3.50.0
5CATEGORIES= security 5CATEGORIES= security
6MASTER_SITES= ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/} 6MASTER_SITES= ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/}
7 7
8MAINTAINER= pkgsrc-users@NetBSD.org 8MAINTAINER= pkgsrc-users@NetBSD.org
9HOMEPAGE= https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS 9HOMEPAGE= https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS
10COMMENT= Libraries to support development of security-enabled applications 10COMMENT= Libraries to support development of security-enabled applications
11LICENSE= mpl-2.0 11LICENSE= mpl-2.0
12 12
13CHECK_PORTABILITY_SKIP+= nss/tests/libpkix/libpkix.sh 13CHECK_PORTABILITY_SKIP+= nss/tests/libpkix/libpkix.sh
14CHECK_PORTABILITY_SKIP+= nss/tests/multinit/multinit.sh 14CHECK_PORTABILITY_SKIP+= nss/tests/multinit/multinit.sh
15CHECK_PORTABILITY_SKIP+= js/src/configure 15CHECK_PORTABILITY_SKIP+= js/src/configure
16CHECK_PORTABILITY_SKIP+= configure 16CHECK_PORTABILITY_SKIP+= configure
17 17
@@ -124,18 +124,18 @@ do-install: @@ -124,18 +124,18 @@ do-install:
124 (cd ${DIST}/*_OPT.OBJ/lib && \ 124 (cd ${DIST}/*_OPT.OBJ/lib && \
125 pax -Lrw *.${SO_SUFFIX} ${DESTDIR}${PREFIX}/lib/nss/ ) 125 pax -Lrw *.${SO_SUFFIX} ${DESTDIR}${PREFIX}/lib/nss/ )
126 ${INSTALL_LIB} ${DIST}/*_OPT.OBJ/lib/libcrmf.a \ 126 ${INSTALL_LIB} ${DIST}/*_OPT.OBJ/lib/libcrmf.a \
127 ${DESTDIR}${PREFIX}/lib/nss/ 127 ${DESTDIR}${PREFIX}/lib/nss/
128 ${INSTALL_DATA} ${WRKSRC}/nss.pc ${DESTDIR}${PREFIX}/lib/pkgconfig/nss.pc 128 ${INSTALL_DATA} ${WRKSRC}/nss.pc ${DESTDIR}${PREFIX}/lib/pkgconfig/nss.pc
129 ${INSTALL_SCRIPT} ${WRKSRC}/nss-config ${DESTDIR}${PREFIX}/bin/nss-config 129 ${INSTALL_SCRIPT} ${WRKSRC}/nss-config ${DESTDIR}${PREFIX}/bin/nss-config
130.for cmd in ${INSTALL_CMDS} 130.for cmd in ${INSTALL_CMDS}
131 ${INSTALL_PROGRAM} ${DIST}/*_OPT.OBJ/bin/${cmd} ${DESTDIR}${PREFIX}/bin 131 ${INSTALL_PROGRAM} ${DIST}/*_OPT.OBJ/bin/${cmd} ${DESTDIR}${PREFIX}/bin
132.endfor 132.endfor
133 133
134# For consistency of libxul.so link in www/firefox. 134# For consistency of libxul.so link in www/firefox.
135BUILDLINK_API_DEPENDS.sqlite3+= sqlite3>=3.8.4.2 135BUILDLINK_API_DEPENDS.sqlite3+= sqlite3>=3.8.4.2
136.include "../../databases/sqlite3/buildlink3.mk" 136.include "../../databases/sqlite3/buildlink3.mk"
137BUILDLINK_API_DEPENDS.nspr+= nspr>=4.24 137BUILDLINK_API_DEPENDS.nspr+= nspr>=4.25
138.include "../../devel/nspr/buildlink3.mk" 138.include "../../devel/nspr/buildlink3.mk"
139.include "../../devel/zlib/buildlink3.mk" 139.include "../../devel/zlib/buildlink3.mk"
140.include "../../mk/pthread.buildlink3.mk" 140.include "../../mk/pthread.buildlink3.mk"
141.include "../../mk/bsd.pkg.mk" 141.include "../../mk/bsd.pkg.mk"
cvs diff -r1.106 -r1.107 pkgsrc/devel/nss/distinfo (expand / switch to unified diff)

--- pkgsrc/devel/nss/distinfo 2020/02/05 03:31:58 1.106
+++ pkgsrc/devel/nss/distinfo 2020/02/14 13:02:41 1.107
@@ -1,19 +1,19 @@ @@ -1,19 +1,19 @@
1$NetBSD: distinfo,v 1.106 2020/02/05 03:31:58 ryoon Exp $ 1$NetBSD: distinfo,v 1.107 2020/02/14 13:02:41 ryoon Exp $
2 2
3SHA1 (nss-3.49.2.tar.gz) = 08858e0fe80f0bed02e9c7e190e6bb9c2a505b8b 3SHA1 (nss-3.50.tar.gz) = 2fac8885533587d662ae74e7d9fc77ad4b4b937d
4RMD160 (nss-3.49.2.tar.gz) = 399b135e79e881d7d0e9fc6a198f2d3f8d46d227 4RMD160 (nss-3.50.tar.gz) = cb830b759bf52775361483a40de4bfd4d3e8dbeb
5SHA512 (nss-3.49.2.tar.gz) = fe0fe032db15853384a50b145dd6f3187a855109f0b81f1846312d33f8c628aededcbca4d199f974ae52530aec3f2312f80afbca3e5b97ed1ff96fcffafd2881 5SHA512 (nss-3.50.tar.gz) = d6bcaf8ad65b5a97c42cd6cbbc68add5c4b49db74b2debcedb2a007f72511ac0e9bd21fd2dec041bc1975cfc8af26a48450aa0d1b962f755931ab2ac45c795b1
6Size (nss-3.49.2.tar.gz) = 76489641 bytes 6Size (nss-3.50.tar.gz) = 78041630 bytes
7SHA1 (patch-am) = fea682bf03bc8b645049f93ed58554ca45f47aca 7SHA1 (patch-am) = fea682bf03bc8b645049f93ed58554ca45f47aca
8SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69 8SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69
9SHA1 (patch-md) = 8547c9414332c02221b96719dea1e09cb741f4d1 9SHA1 (patch-md) = 8547c9414332c02221b96719dea1e09cb741f4d1
10SHA1 (patch-me) = a0d4bf85652c0cdac7fdf95dc2fb7545d66349cd 10SHA1 (patch-me) = a0d4bf85652c0cdac7fdf95dc2fb7545d66349cd
11SHA1 (patch-mf) = 534fe5f711f60dadc3432bc805a6153535f11709 11SHA1 (patch-mf) = 534fe5f711f60dadc3432bc805a6153535f11709
12SHA1 (patch-mg) = 3c878548c98bdea559a3e653e63e0ed22a2a8834 12SHA1 (patch-mg) = 3c878548c98bdea559a3e653e63e0ed22a2a8834
13SHA1 (patch-mh) = a46d3098a85c3a4a57895a9845bc1741fc5e9561 13SHA1 (patch-mh) = a46d3098a85c3a4a57895a9845bc1741fc5e9561
14SHA1 (patch-mj) = 08ca1a37afce99e0292a20348fc6855547f44e8a 14SHA1 (patch-mj) = 08ca1a37afce99e0292a20348fc6855547f44e8a
15SHA1 (patch-mn) = 5b79783e48249044be1a904a6cfd20ba175b5fd4 15SHA1 (patch-mn) = 5b79783e48249044be1a904a6cfd20ba175b5fd4
16SHA1 (patch-nss_cmd_platlibs.mk) = 01f4350de601b29c94e8a791a28daca226866bb6 16SHA1 (patch-nss_cmd_platlibs.mk) = 01f4350de601b29c94e8a791a28daca226866bb6
17SHA1 (patch-nss_coreconf_OpenBSD.mk) = 1a4c3711d5d1f7f9e8d58b36145b15d7e444d754 17SHA1 (patch-nss_coreconf_OpenBSD.mk) = 1a4c3711d5d1f7f9e8d58b36145b15d7e444d754
18SHA1 (patch-nss_coreconf_command.mk) = a7b682d367825b48f8802fa30cee83f10680bb74 18SHA1 (patch-nss_coreconf_command.mk) = a7b682d367825b48f8802fa30cee83f10680bb74
19SHA1 (patch-nss_lib_freebl_md5.c) = 5cbec40695e296f0713895fb85cd37f6df76b85b 19SHA1 (patch-nss_lib_freebl_md5.c) = 5cbec40695e296f0713895fb85cd37f6df76b85b