Sun May 16 17:42:31 2021 UTC ()
nss: update to 3.65.

Bugs fixed in NSS 3.65:
* Bug 1709654 - Update for NetBSD configuration.
* Bug 1709750 - Disable HPKE test when fuzzing.
* Bug 1566124 - Optimize AES-GCM for ppc64le.
* Bug 1699021 - Add AES-256-GCM to HPKE.
* Bug 1698419 - ECH -10 updates.
* Bug 1692930 - Update HPKE to final version.
* Bug 1707130 - NSS should use modern algorithms in PKCS#12 files by default.
* Bug 1703936 - New coverity/cpp scanner errors.
* Bug 1697303 - NSS needs to update it's csp clearing to FIPS 180-3 standards.
* Bug 1702663 - Need to support RSA PSS with Hashing PKCS #11 Mechanisms.
* Bug 1705119 - Deadlock when using GCM and non-thread safe tokens.


(wiz)
diff -r1.205 -r1.206 pkgsrc/devel/nss/Makefile
diff -r1.130 -r1.131 pkgsrc/devel/nss/distinfo
diff -r1.4 -r0 pkgsrc/devel/nss/patches/patch-nss_coreconf_NetBSD.mk
cvs diff -r1.205 -r1.206 pkgsrc/devel/nss/Makefile (expand / switch to unified diff)

--- pkgsrc/devel/nss/Makefile 2021/05/01 21:52:02 1.205
+++ pkgsrc/devel/nss/Makefile 2021/05/16 17:42:31 1.206
@@ -1,18 +1,17 @@ @@ -1,18 +1,17 @@
1# $NetBSD: Makefile,v 1.205 2021/05/01 21:52:02 wiz Exp $ 1# $NetBSD: Makefile,v 1.206 2021/05/16 17:42:31 wiz Exp $
2 2
3DISTNAME= nss-${NSS_RELEASE:S/.0$//} 3DISTNAME= nss-${NSS_RELEASE:S/.0$//}
4NSS_RELEASE= 3.64.0 4NSS_RELEASE= 3.65.0
5PKGREVISION= 3 
6CATEGORIES= devel security 5CATEGORIES= devel security
7MASTER_SITES= ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/} 6MASTER_SITES= ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/}
8 7
9MAINTAINER= pkgsrc-users@NetBSD.org 8MAINTAINER= pkgsrc-users@NetBSD.org
10HOMEPAGE= https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS 9HOMEPAGE= https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS
11COMMENT= Libraries to support development of security-enabled applications 10COMMENT= Libraries to support development of security-enabled applications
12LICENSE= mpl-2.0 11LICENSE= mpl-2.0
13 12
14CHECK_PORTABILITY_SKIP+= nss/tests/libpkix/libpkix.sh 13CHECK_PORTABILITY_SKIP+= nss/tests/libpkix/libpkix.sh
15CHECK_PORTABILITY_SKIP+= nss/tests/multinit/multinit.sh 14CHECK_PORTABILITY_SKIP+= nss/tests/multinit/multinit.sh
16CHECK_PORTABILITY_SKIP+= js/src/configure 15CHECK_PORTABILITY_SKIP+= js/src/configure
17CHECK_PORTABILITY_SKIP+= configure 16CHECK_PORTABILITY_SKIP+= configure
18 17
@@ -85,27 +84,27 @@ MAKE_ENV+= USE_SYSTEM_ZLIB=1 @@ -85,27 +84,27 @@ MAKE_ENV+= USE_SYSTEM_ZLIB=1
85MAKE_ENV+= EXTRA_SHARED_LIBS="${COMPILER_RPATH_FLAG}${BUILDLINK_PREFIX.nspr}/lib/nspr ${COMPILER_RPATH_FLAG}${PREFIX}/lib/nss -L${BUILDLINK_PREFIX.nspr}/lib/nspr -lplc4 -lplds4 -lnspr4 "${LDFLAGS:Q} 84MAKE_ENV+= EXTRA_SHARED_LIBS="${COMPILER_RPATH_FLAG}${BUILDLINK_PREFIX.nspr}/lib/nspr ${COMPILER_RPATH_FLAG}${PREFIX}/lib/nss -L${BUILDLINK_PREFIX.nspr}/lib/nspr -lplc4 -lplds4 -lnspr4 "${LDFLAGS:Q}
86MAKE_ENV+= NSS_DISABLE_GTESTS=yes 85MAKE_ENV+= NSS_DISABLE_GTESTS=yes
87MAKE_ENV+= NSS_ENABLE_TLS_1_3=1 86MAKE_ENV+= NSS_ENABLE_TLS_1_3=1
88.include "../../mk/compiler.mk" 87.include "../../mk/compiler.mk"
89.if !empty(CC_VERSION:Mgcc-4.[0-7]*) 88.if !empty(CC_VERSION:Mgcc-4.[0-7]*)
90CFLAGS+= -DNSS_NO_GCC48 89CFLAGS+= -DNSS_NO_GCC48
91.endif 90.endif
92 91
93MOD_MAJOR_VERSION= ${NSS_RELEASE:C/\.[0-9.]*//} 92MOD_MAJOR_VERSION= ${NSS_RELEASE:C/\.[0-9.]*//}
94MOD_MINOR_VERSION= ${NSS_RELEASE:S/3.//:C/\.[0-9]*//} 93MOD_MINOR_VERSION= ${NSS_RELEASE:S/3.//:C/\.[0-9]*//}
95MOD_PATCH_VERSION= ${NSS_RELEASE:C/[0-9.]*\.//} 94MOD_PATCH_VERSION= ${NSS_RELEASE:C/[0-9.]*\.//}
96NSS_DIST_DIR_VERSION= ${MOD_MAJOR_VERSION}_${MOD_MINOR_VERSION}_${MOD_PATCH_VERSION} 95NSS_DIST_DIR_VERSION= ${MOD_MAJOR_VERSION}_${MOD_MINOR_VERSION}_${MOD_PATCH_VERSION}
97 96
98NSPR_MINIMUM_VERSION= 4.29 97NSPR_MINIMUM_VERSION= 4.30
99 98
100PKGCONFIG_OVERRIDE= nss.pc 99PKGCONFIG_OVERRIDE= nss.pc
101 100
102SUBST_CLASSES+= config 101SUBST_CLASSES+= config
103# nss.pc 102# nss.pc
104SUBST_SED.config+= -e "s,@PTHREAD@,${BUILDLINK_LIBS.pthread:Q}," 103SUBST_SED.config+= -e "s,@PTHREAD@,${BUILDLINK_LIBS.pthread:Q},"
105SUBST_SED.config+= -e "s,%prefix%,${PREFIX}," 104SUBST_SED.config+= -e "s,%prefix%,${PREFIX},"
106SUBST_SED.config+= -e "s,%exec_prefix%,${PREFIX}," 105SUBST_SED.config+= -e "s,%exec_prefix%,${PREFIX},"
107SUBST_SED.config+= -e "s,%libdir%,${PREFIX}/lib/nss," 106SUBST_SED.config+= -e "s,%libdir%,${PREFIX}/lib/nss,"
108SUBST_SED.config+= -e "s,%includedir%,${PREFIX}/include/nss," 107SUBST_SED.config+= -e "s,%includedir%,${PREFIX}/include/nss,"
109SUBST_SED.config+= -e "s,%NSS_VERSION%,${PKGVERSION_NOREV}," 108SUBST_SED.config+= -e "s,%NSS_VERSION%,${PKGVERSION_NOREV},"
110SUBST_SED.config+= -e "s,%NSPR_VERSION%,${NSPR_MINIMUM_VERSION}," 109SUBST_SED.config+= -e "s,%NSPR_VERSION%,${NSPR_MINIMUM_VERSION},"
111# nss-config 110# nss-config
cvs diff -r1.130 -r1.131 pkgsrc/devel/nss/distinfo (expand / switch to unified diff)

--- pkgsrc/devel/nss/distinfo 2021/05/05 16:54:02 1.130
+++ pkgsrc/devel/nss/distinfo 2021/05/16 17:42:31 1.131
@@ -1,20 +1,19 @@ @@ -1,20 +1,19 @@
1$NetBSD: distinfo,v 1.130 2021/05/05 16:54:02 wiz Exp $ 1$NetBSD: distinfo,v 1.131 2021/05/16 17:42:31 wiz Exp $
2 2
3SHA1 (nss-3.64.tar.gz) = e8f7dd8ab325a57a46b1d717c86bdae1be66e911 3SHA1 (nss-3.65.tar.gz) = a7ec3874d091c4783a8cb78f064bceafba875c1f
4RMD160 (nss-3.64.tar.gz) = bad3022ebac60e794d999dd7c74092c6b80c39d0 4RMD160 (nss-3.65.tar.gz) = d0b6da2d2ab3c4faea885413651dfaf3b4237615
5SHA512 (nss-3.64.tar.gz) = 0a85e1f64f97670f70596d8a479693939ca454025a4b3bbd557a54ed683ffed625c670fef6a6e3440365af9aa472384f84464942381b1c093659f6a6a222ba04 5SHA512 (nss-3.65.tar.gz) = 6f980f44056c69c74754124ce16d4880fb47440146d55906584f70d1be8e74885570308914d4482b3ee676a1f5b1e529616eae8ccd6906d678394dd929dd0825
6Size (nss-3.64.tar.gz) = 82173054 bytes 6Size (nss-3.65.tar.gz) = 82386222 bytes
7SHA1 (patch-md) = 8547c9414332c02221b96719dea1e09cb741f4d1 7SHA1 (patch-md) = 8547c9414332c02221b96719dea1e09cb741f4d1
8SHA1 (patch-me) = ffb5f119764c158c0bd789bd18fc77c61f2e9d2b 8SHA1 (patch-me) = ffb5f119764c158c0bd789bd18fc77c61f2e9d2b
9SHA1 (patch-mf) = 40e58385fb6f944f463bf00b9aad72bc4ea229d0 9SHA1 (patch-mf) = 40e58385fb6f944f463bf00b9aad72bc4ea229d0
10SHA1 (patch-mn) = 5b79783e48249044be1a904a6cfd20ba175b5fd4 10SHA1 (patch-mn) = 5b79783e48249044be1a904a6cfd20ba175b5fd4
11SHA1 (patch-nss_cmd_platlibs.mk) = 01f4350de601b29c94e8a791a28daca226866bb6 11SHA1 (patch-nss_cmd_platlibs.mk) = 01f4350de601b29c94e8a791a28daca226866bb6
12SHA1 (patch-nss_cmd_shlibsign_sign.sh) = 7948b7b502a4c148ee185836dde8a84d3aa388af 12SHA1 (patch-nss_cmd_shlibsign_sign.sh) = 7948b7b502a4c148ee185836dde8a84d3aa388af
13SHA1 (patch-nss_coreconf_NetBSD.mk) = 176663074ce42719fed33dcaac69a930e3ede301 
14SHA1 (patch-nss_coreconf_OpenBSD.mk) = 944f71fcaaa7d5b2b3ed008341b1392a65480f2b 13SHA1 (patch-nss_coreconf_OpenBSD.mk) = 944f71fcaaa7d5b2b3ed008341b1392a65480f2b
15SHA1 (patch-nss_coreconf_command.mk) = a7b682d367825b48f8802fa30cee83f10680bb74 14SHA1 (patch-nss_coreconf_command.mk) = a7b682d367825b48f8802fa30cee83f10680bb74
16SHA1 (patch-nss_lib_freebl_aes-armv8.c) = aa698f61dd3d66ba707a9b5425bc15d057244ad7 15SHA1 (patch-nss_lib_freebl_aes-armv8.c) = aa698f61dd3d66ba707a9b5425bc15d057244ad7
17SHA1 (patch-nss_lib_freebl_gcm-aarch64.c) = 311cfe7ca58e91285052d0ca27bd2df3f325071b 16SHA1 (patch-nss_lib_freebl_gcm-aarch64.c) = 311cfe7ca58e91285052d0ca27bd2df3f325071b
18SHA1 (patch-nss_lib_util_utilpars.c) = 5d3000515b01037929730a752b7d7a0f46f06deb 17SHA1 (patch-nss_lib_util_utilpars.c) = 5d3000515b01037929730a752b7d7a0f46f06deb
19SHA1 (patch-nss_tests_all.sh) = b328778b538db66f5447f962f23afd6f650f7071 18SHA1 (patch-nss_tests_all.sh) = b328778b538db66f5447f962f23afd6f650f7071
20SHA1 (patch-nss_tests_merge_merge.sh) = 42a4866d226b1076740ba9a5e42c7604f2cb15a7 19SHA1 (patch-nss_tests_merge_merge.sh) = 42a4866d226b1076740ba9a5e42c7604f2cb15a7
File Deleted: pkgsrc/devel/nss/patches/Attic/patch-nss_coreconf_NetBSD.mk