Thu Dec 17 09:52:27 2020 UTC ()
nss: Update to 3.60

Changelog:
Notable changes in NSS 3.60: 
* TLS 1.3 Encrypted Client Hello (draft-ietf-tls-esni-08) support has been
added, replacing the previous ESNI (draft-ietf-tls-esni-01) implementation.
See bug 1654332 for more information. 
* December 2020 batch of Root CA changes, builtins library updated to version
2.46. See bugs 1678189, 1678166, and 1670769 for more information.

Bugs fixed in NSS 3.60:
 * Bug 1654332 - Implement Encrypted Client Hello (draft-ietf-tls-esni-08).
 * Bug 1678189 - Update CA list version to 2.46.
 * Bug 1670769 - Remove 10 GeoTrust, thawte, and VeriSign root certs from NSS.
 * Bug 1678166 - Add NAVER Global Root Certification Authority root cert to
NSS.
 * Bug 1678384 - Add a build flag to allow building nssckbi-testlib in
mozilla-central.
 * Bug 1570539 - Remove -X alt-server-hello option from tstclnt.
 * Bug 1675523 - Fix incorrect pkcs11t.h value CKR_PUBLIC_KEY_INVALID.
 * Bug 1642174 - Fix PowerPC ABI version 1 build failure.
 * Bug 1674819 - Fix undefined shift in fuzzer mode.
 * Bug 1678990 - Fix ARM crypto extensions detection on macOS.
 * Bug 1679290 - Fix lock order inversion and potential deadlock with
libnsspem.
 * Bug 1680400 - Fix memory leak in PK11_UnwrapPrivKey.


(ryoon)
diff -r1.195 -r1.196 pkgsrc/devel/nss/Makefile
diff -r1.120 -r1.121 pkgsrc/devel/nss/distinfo
cvs diff -r1.195 -r1.196 pkgsrc/devel/nss/Makefile (expand / switch to unified diff)

--- pkgsrc/devel/nss/Makefile 2020/11/18 14:24:00 1.195
+++ pkgsrc/devel/nss/Makefile 2020/12/17 09:52:27 1.196
@@ -1,17 +1,17 @@ @@ -1,17 +1,17 @@
1# $NetBSD: Makefile,v 1.195 2020/11/18 14:24:00 ryoon Exp $ 1# $NetBSD: Makefile,v 1.196 2020/12/17 09:52:27 ryoon Exp $
2 2
3DISTNAME= nss-${NSS_RELEASE:S/.0$//} 3DISTNAME= nss-${NSS_RELEASE:S/.0$//}
4NSS_RELEASE= 3.59.0 4NSS_RELEASE= 3.60.0
5CATEGORIES= devel security 5CATEGORIES= devel security
6MASTER_SITES= ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/} 6MASTER_SITES= ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/}
7 7
8MAINTAINER= pkgsrc-users@NetBSD.org 8MAINTAINER= pkgsrc-users@NetBSD.org
9HOMEPAGE= https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS 9HOMEPAGE= https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS
10COMMENT= Libraries to support development of security-enabled applications 10COMMENT= Libraries to support development of security-enabled applications
11LICENSE= mpl-2.0 11LICENSE= mpl-2.0
12 12
13CHECK_PORTABILITY_SKIP+= nss/tests/libpkix/libpkix.sh 13CHECK_PORTABILITY_SKIP+= nss/tests/libpkix/libpkix.sh
14CHECK_PORTABILITY_SKIP+= nss/tests/multinit/multinit.sh 14CHECK_PORTABILITY_SKIP+= nss/tests/multinit/multinit.sh
15CHECK_PORTABILITY_SKIP+= js/src/configure 15CHECK_PORTABILITY_SKIP+= js/src/configure
16CHECK_PORTABILITY_SKIP+= configure 16CHECK_PORTABILITY_SKIP+= configure
17 17
cvs diff -r1.120 -r1.121 pkgsrc/devel/nss/distinfo (expand / switch to unified diff)

--- pkgsrc/devel/nss/distinfo 2020/11/18 14:24:00 1.120
+++ pkgsrc/devel/nss/distinfo 2020/12/17 09:52:27 1.121
@@ -1,19 +1,19 @@ @@ -1,19 +1,19 @@
1$NetBSD: distinfo,v 1.120 2020/11/18 14:24:00 ryoon Exp $ 1$NetBSD: distinfo,v 1.121 2020/12/17 09:52:27 ryoon Exp $
2 2
3SHA1 (nss-3.59.tar.gz) = 1459fb7f197c0b80e85333fbd33e723adcd28a7f 3SHA1 (nss-3.60.tar.gz) = 1598cc5d927ee47136e1fe53581c32ee3d6d169d
4RMD160 (nss-3.59.tar.gz) = 5e72ed96f177c7c85092027be69c697214b3ed42 4RMD160 (nss-3.60.tar.gz) = 02ea37e02171938b008fa967db801560b18ecbce
5SHA512 (nss-3.59.tar.gz) = 8963e846f2ff7222457ae59f042672cf4e44f7752807226f46c215a772fd1cbd65d0ce634da4afb698eabd4eb1c1e78146cc2a089339ada11da03d259c609a38 5SHA512 (nss-3.60.tar.gz) = 6463b2da28b5d9f1f20d45f77a3179e2b93c874af5742c7fc51eb7c44cef93270acacf79174dc63905f227256cbcee23a36f98f1cfed10dd5c56ffc0a76e2695
6Size (nss-3.59.tar.gz) = 82141516 bytes 6Size (nss-3.60.tar.gz) = 82035831 bytes
7SHA1 (patch-am) = fea682bf03bc8b645049f93ed58554ca45f47aca 7SHA1 (patch-am) = fea682bf03bc8b645049f93ed58554ca45f47aca
8SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69 8SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69
9SHA1 (patch-md) = 8547c9414332c02221b96719dea1e09cb741f4d1 9SHA1 (patch-md) = 8547c9414332c02221b96719dea1e09cb741f4d1
10SHA1 (patch-me) = 3b23fb15a1a22204604ebe64345bb30734a131ba 10SHA1 (patch-me) = 3b23fb15a1a22204604ebe64345bb30734a131ba
11SHA1 (patch-mf) = 534fe5f711f60dadc3432bc805a6153535f11709 11SHA1 (patch-mf) = 534fe5f711f60dadc3432bc805a6153535f11709
12SHA1 (patch-mg) = 3c878548c98bdea559a3e653e63e0ed22a2a8834 12SHA1 (patch-mg) = 3c878548c98bdea559a3e653e63e0ed22a2a8834
13SHA1 (patch-mj) = 08ca1a37afce99e0292a20348fc6855547f44e8a 13SHA1 (patch-mj) = 08ca1a37afce99e0292a20348fc6855547f44e8a
14SHA1 (patch-mn) = 5b79783e48249044be1a904a6cfd20ba175b5fd4 14SHA1 (patch-mn) = 5b79783e48249044be1a904a6cfd20ba175b5fd4
15SHA1 (patch-nss_cmd_platlibs.mk) = 01f4350de601b29c94e8a791a28daca226866bb6 15SHA1 (patch-nss_cmd_platlibs.mk) = 01f4350de601b29c94e8a791a28daca226866bb6
16SHA1 (patch-nss_cmd_shlibsign_sign.sh) = 7948b7b502a4c148ee185836dde8a84d3aa388af 16SHA1 (patch-nss_cmd_shlibsign_sign.sh) = 7948b7b502a4c148ee185836dde8a84d3aa388af
17SHA1 (patch-nss_coreconf_NetBSD.mk) = ed95aa1c245c9f2b8fda0a1769f9599223b61dbf 17SHA1 (patch-nss_coreconf_NetBSD.mk) = ed95aa1c245c9f2b8fda0a1769f9599223b61dbf
18SHA1 (patch-nss_coreconf_OpenBSD.mk) = 1a4c3711d5d1f7f9e8d58b36145b15d7e444d754 18SHA1 (patch-nss_coreconf_OpenBSD.mk) = 1a4c3711d5d1f7f9e8d58b36145b15d7e444d754
19SHA1 (patch-nss_coreconf_command.mk) = a7b682d367825b48f8802fa30cee83f10680bb74 19SHA1 (patch-nss_coreconf_command.mk) = a7b682d367825b48f8802fa30cee83f10680bb74