Mon Aug 9 07:54:47 2021 UTC ()
nss: update to 3.69.

Bugs fixed:
   - Bug 1722613 - Disable DTLS 1.0 and 1.1 by default
   - Bug 1720226 - integrity checks in key4.db not happening on private components with AES_CBC
   - Bug 1720235 - SSL handling of signature algorithms ignores environmental invalid algorithms.
   - Bug 1721476 - sqlite 3.34 changed it's open semantics, causing nss failures.
   - Bug 1720230 - Gtest update changed the gtest reports, losing gtest details in all.sh reports.
   - Bug 1720228 - NSS incorrectly accepting 1536 bit DH primes in FIPS mode
   - Bug 1720232 - SQLite calls could timeout in starvation situations.
   - Bug 1720225 - Coverity/cpp scanner errors found in nss 3.67
   - Bug 1709817 - Import the NSS documentation from MDN in nss/doc.
   - Bug 1720227 - NSS using a tempdir to measure sql performance not active


(wiz)
diff -r1.209 -r1.210 pkgsrc/devel/nss/Makefile
diff -r1.133 -r1.134 pkgsrc/devel/nss/distinfo
cvs diff -r1.209 -r1.210 pkgsrc/devel/nss/Makefile (expand / switch to unified diff)

--- pkgsrc/devel/nss/Makefile 2021/06/28 08:48:20 1.209
+++ pkgsrc/devel/nss/Makefile 2021/08/09 07:54:47 1.210
@@ -1,17 +1,17 @@ @@ -1,17 +1,17 @@
1# $NetBSD: Makefile,v 1.209 2021/06/28 08:48:20 wiz Exp $ 1# $NetBSD: Makefile,v 1.210 2021/08/09 07:54:47 wiz Exp $
2 2
3DISTNAME= nss-${NSS_RELEASE:S/.0$//} 3DISTNAME= nss-${NSS_RELEASE:S/.0$//}
4NSS_RELEASE= 3.67.0 4NSS_RELEASE= 3.69.0
5CATEGORIES= devel security 5CATEGORIES= devel security
6MASTER_SITES= ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/} 6MASTER_SITES= ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/}
7 7
8MAINTAINER= pkgsrc-users@NetBSD.org 8MAINTAINER= pkgsrc-users@NetBSD.org
9HOMEPAGE= https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS 9HOMEPAGE= https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS
10COMMENT= Libraries to support development of security-enabled applications 10COMMENT= Libraries to support development of security-enabled applications
11LICENSE= mpl-2.0 11LICENSE= mpl-2.0
12 12
13CHECK_PORTABILITY_SKIP+= nss/tests/libpkix/libpkix.sh 13CHECK_PORTABILITY_SKIP+= nss/tests/libpkix/libpkix.sh
14CHECK_PORTABILITY_SKIP+= nss/tests/multinit/multinit.sh 14CHECK_PORTABILITY_SKIP+= nss/tests/multinit/multinit.sh
15CHECK_PORTABILITY_SKIP+= js/src/configure 15CHECK_PORTABILITY_SKIP+= js/src/configure
16CHECK_PORTABILITY_SKIP+= configure 16CHECK_PORTABILITY_SKIP+= configure
17 17
@@ -84,27 +84,27 @@ MAKE_ENV+= USE_SYSTEM_ZLIB=1 @@ -84,27 +84,27 @@ MAKE_ENV+= USE_SYSTEM_ZLIB=1
84MAKE_ENV+= EXTRA_SHARED_LIBS="${COMPILER_RPATH_FLAG}${BUILDLINK_PREFIX.nspr}/lib/nspr ${COMPILER_RPATH_FLAG}${PREFIX}/lib/nss -L${BUILDLINK_PREFIX.nspr}/lib/nspr -lplc4 -lplds4 -lnspr4 "${LDFLAGS:Q} 84MAKE_ENV+= EXTRA_SHARED_LIBS="${COMPILER_RPATH_FLAG}${BUILDLINK_PREFIX.nspr}/lib/nspr ${COMPILER_RPATH_FLAG}${PREFIX}/lib/nss -L${BUILDLINK_PREFIX.nspr}/lib/nspr -lplc4 -lplds4 -lnspr4 "${LDFLAGS:Q}
85MAKE_ENV+= NSS_DISABLE_GTESTS=yes 85MAKE_ENV+= NSS_DISABLE_GTESTS=yes
86MAKE_ENV+= NSS_ENABLE_TLS_1_3=1 86MAKE_ENV+= NSS_ENABLE_TLS_1_3=1
87.include "../../mk/compiler.mk" 87.include "../../mk/compiler.mk"
88.if !empty(CC_VERSION:Mgcc-4.[0-7]*) 88.if !empty(CC_VERSION:Mgcc-4.[0-7]*)
89CFLAGS+= -DNSS_NO_GCC48 89CFLAGS+= -DNSS_NO_GCC48
90.endif 90.endif
91 91
92MOD_MAJOR_VERSION= ${NSS_RELEASE:C/\.[0-9.]*//} 92MOD_MAJOR_VERSION= ${NSS_RELEASE:C/\.[0-9.]*//}
93MOD_MINOR_VERSION= ${NSS_RELEASE:S/3.//:C/\.[0-9]*//} 93MOD_MINOR_VERSION= ${NSS_RELEASE:S/3.//:C/\.[0-9]*//}
94MOD_PATCH_VERSION= ${NSS_RELEASE:C/[0-9.]*\.//} 94MOD_PATCH_VERSION= ${NSS_RELEASE:C/[0-9.]*\.//}
95NSS_DIST_DIR_VERSION= ${MOD_MAJOR_VERSION}_${MOD_MINOR_VERSION}_${MOD_PATCH_VERSION} 95NSS_DIST_DIR_VERSION= ${MOD_MAJOR_VERSION}_${MOD_MINOR_VERSION}_${MOD_PATCH_VERSION}
96 96
97NSPR_MINIMUM_VERSION= 4.30 97NSPR_MINIMUM_VERSION= 4.32
98 98
99PKGCONFIG_OVERRIDE= nss.pc 99PKGCONFIG_OVERRIDE= nss.pc
100 100
101SUBST_CLASSES+= config 101SUBST_CLASSES+= config
102# nss.pc 102# nss.pc
103SUBST_SED.config+= -e "s,@PTHREAD@,${BUILDLINK_LIBS.pthread:Q}," 103SUBST_SED.config+= -e "s,@PTHREAD@,${BUILDLINK_LIBS.pthread:Q},"
104SUBST_SED.config+= -e "s,%prefix%,${PREFIX}," 104SUBST_SED.config+= -e "s,%prefix%,${PREFIX},"
105SUBST_SED.config+= -e "s,%exec_prefix%,${PREFIX}," 105SUBST_SED.config+= -e "s,%exec_prefix%,${PREFIX},"
106SUBST_SED.config+= -e "s,%libdir%,${PREFIX}/lib/nss," 106SUBST_SED.config+= -e "s,%libdir%,${PREFIX}/lib/nss,"
107SUBST_SED.config+= -e "s,%includedir%,${PREFIX}/include/nss," 107SUBST_SED.config+= -e "s,%includedir%,${PREFIX}/include/nss,"
108SUBST_SED.config+= -e "s,%NSS_VERSION%,${PKGVERSION_NOREV}," 108SUBST_SED.config+= -e "s,%NSS_VERSION%,${PKGVERSION_NOREV},"
109SUBST_SED.config+= -e "s,%NSPR_VERSION%,${NSPR_MINIMUM_VERSION}," 109SUBST_SED.config+= -e "s,%NSPR_VERSION%,${NSPR_MINIMUM_VERSION},"
110# nss-config 110# nss-config
cvs diff -r1.133 -r1.134 pkgsrc/devel/nss/distinfo (expand / switch to unified diff)

--- pkgsrc/devel/nss/distinfo 2021/06/28 08:48:20 1.133
+++ pkgsrc/devel/nss/distinfo 2021/08/09 07:54:47 1.134
@@ -1,19 +1,19 @@ @@ -1,19 +1,19 @@
1$NetBSD: distinfo,v 1.133 2021/06/28 08:48:20 wiz Exp $ 1$NetBSD: distinfo,v 1.134 2021/08/09 07:54:47 wiz Exp $
2 2
3SHA1 (nss-3.67.tar.gz) = 9cccf98f0476905c0d863a6b2cb08a1955482241 3SHA1 (nss-3.69.tar.gz) = e3c99a69ecf1073c473ce52a8b1532c56357c2b1
4RMD160 (nss-3.67.tar.gz) = e32b0e90e4b3d4d92e613b905252e725554e685d 4RMD160 (nss-3.69.tar.gz) = 45db84366dcf41ea40b44ece97954a767f962963
5SHA512 (nss-3.67.tar.gz) = 1d3fa3fafbf3e54c9c3b54b0b3c291aebb48542380a1b704fa07359d3cefab93f166b31928c9db190ed58118e289e67ce8aa1619e4219d69b2c098484a22bc9d 5SHA512 (nss-3.69.tar.gz) = 9dd824b3e96aa5a032d5005cdf60a55efac23f69f3857cd1f4337f3ebad92fc2354bb05ed85f04a368e55306a46ebd17a91f7f432f1c191a96e99aecfa62cfdf
6Size (nss-3.67.tar.gz) = 82402188 bytes 6Size (nss-3.69.tar.gz) = 82427268 bytes
7SHA1 (patch-md) = 8547c9414332c02221b96719dea1e09cb741f4d1 7SHA1 (patch-md) = 8547c9414332c02221b96719dea1e09cb741f4d1
8SHA1 (patch-me) = ffb5f119764c158c0bd789bd18fc77c61f2e9d2b 8SHA1 (patch-me) = ffb5f119764c158c0bd789bd18fc77c61f2e9d2b
9SHA1 (patch-mf) = 40e58385fb6f944f463bf00b9aad72bc4ea229d0 9SHA1 (patch-mf) = 40e58385fb6f944f463bf00b9aad72bc4ea229d0
10SHA1 (patch-mn) = 5b79783e48249044be1a904a6cfd20ba175b5fd4 10SHA1 (patch-mn) = 5b79783e48249044be1a904a6cfd20ba175b5fd4
11SHA1 (patch-nss_cmd_platlibs.mk) = 01f4350de601b29c94e8a791a28daca226866bb6 11SHA1 (patch-nss_cmd_platlibs.mk) = 01f4350de601b29c94e8a791a28daca226866bb6
12SHA1 (patch-nss_cmd_shlibsign_sign.sh) = 7948b7b502a4c148ee185836dde8a84d3aa388af 12SHA1 (patch-nss_cmd_shlibsign_sign.sh) = 7948b7b502a4c148ee185836dde8a84d3aa388af
13SHA1 (patch-nss_coreconf_OpenBSD.mk) = 944f71fcaaa7d5b2b3ed008341b1392a65480f2b 13SHA1 (patch-nss_coreconf_OpenBSD.mk) = 944f71fcaaa7d5b2b3ed008341b1392a65480f2b
14SHA1 (patch-nss_coreconf_command.mk) = a7b682d367825b48f8802fa30cee83f10680bb74 14SHA1 (patch-nss_coreconf_command.mk) = a7b682d367825b48f8802fa30cee83f10680bb74
15SHA1 (patch-nss_lib_freebl_aes-armv8.c) = aa698f61dd3d66ba707a9b5425bc15d057244ad7 15SHA1 (patch-nss_lib_freebl_aes-armv8.c) = aa698f61dd3d66ba707a9b5425bc15d057244ad7
16SHA1 (patch-nss_lib_freebl_gcm-aarch64.c) = 311cfe7ca58e91285052d0ca27bd2df3f325071b 16SHA1 (patch-nss_lib_freebl_gcm-aarch64.c) = 311cfe7ca58e91285052d0ca27bd2df3f325071b
17SHA1 (patch-nss_lib_util_utilpars.c) = 5d3000515b01037929730a752b7d7a0f46f06deb 17SHA1 (patch-nss_lib_util_utilpars.c) = 5d3000515b01037929730a752b7d7a0f46f06deb
18SHA1 (patch-nss_tests_all.sh) = b328778b538db66f5447f962f23afd6f650f7071 18SHA1 (patch-nss_tests_all.sh) = b328778b538db66f5447f962f23afd6f650f7071
19SHA1 (patch-nss_tests_merge_merge.sh) = 42a4866d226b1076740ba9a5e42c7604f2cb15a7 19SHA1 (patch-nss_tests_merge_merge.sh) = 42a4866d226b1076740ba9a5e42c7604f2cb15a7