Pullup ticket #4952 - requested by bsiegert

devel/nss: security update

Revisions pulled up:
- devel/nss/Makefile                                            1.106
- devel/nss/distinfo                                            1.55

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   ryoon
   Date:           Sat Feb  6 22:09:56 UTC 2016

   Modified Files:
           pkgsrc/devel/nss: Makefile distinfo

   Log Message:
   Update to 3.22

   Changelog:
   The NSS team has released Network Security Services (NSS) 3.22,
   which is a minor release.

   New functionality:
   * RSA-PSS signatures are now supported (bug 1215295)
   * Pseudorandom functions based on hashes other than SHA-1 are now supported
   * Enforce an External Policy on NSS from a config file (bug 1009429)

   New Functions:
   * PK11_SignWithMechanism - an extended version PK11_Sign()
   * PK11_VerifyWithMechanism - an extended version of PK11_Verify()
   * SSL_PeerSignedCertTimestamps - Get signed_certificate_timestamp
     TLS extension data
   * SSL_SetSignedCertTimestamps - Set signed_certificate_timestamp
     TLS extension data

   New Types:
   * ssl_signed_cert_timestamp_xtn is added to SSLExtensionType
   * Constants for several object IDs are added to SECOidTag

   New Macros:
   * SSL_ENABLE_SIGNED_CERT_TIMESTAMPS
   * NSS_USE_ALG_IN_SSL
   * NSS_USE_POLICY_IN_SSL
   * NSS_RSA_MIN_KEY_SIZE
   * NSS_DH_MIN_KEY_SIZE
   * NSS_DSA_MIN_KEY_SIZE
   * NSS_TLS_VERSION_MIN_POLICY
   * NSS_TLS_VERSION_MAX_POLICY
   * NSS_DTLS_VERSION_MIN_POLICY
   * NSS_DTLS_VERSION_MAX_POLICY
   * CKP_PKCS5_PBKD2_HMAC_SHA224
   * CKP_PKCS5_PBKD2_HMAC_SHA256
   * CKP_PKCS5_PBKD2_HMAC_SHA384
   * CKP_PKCS5_PBKD2_HMAC_SHA512
   * CKP_PKCS5_PBKD2_HMAC_GOSTR3411 - (not supported)
   * CKP_PKCS5_PBKD2_HMAC_SHA512_224 - (not supported)
   * CKP_PKCS5_PBKD2_HMAC_SHA512_256 - (not supported)

   table Changes:
   * NSS C++ tests are built by default, requiring a C++11 compiler.
     Set the NSS_DISABLE_GTESTS variable to 1 to disable building these tests.

   The HG tag is NSS_3_22_RTM. NSS 3.22 requires NSPR 4.11 or newer.


   To generate a diff of this commit:
   cvs rdiff -u -r1.105 -r1.106 pkgsrc/devel/nss/Makefile
   cvs rdiff -u -r1.54 -r1.55 pkgsrc/devel/nss/distinfo

2 files changed, 8 insertions, 8 deletions

diff --git a/devel/nss/Makefile b/devel/nss/Makefile
index 92f668edeec..cd885087d29 100644
--- a/devel/nss/Makefile
+++ b/devel/nss/Makefile
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.105 2015/12/17 13:39:59 ryoon Exp $
+# $NetBSD: Makefile,v 1.105.2.1 2016/04/03 21:02:56 spz Exp $
 
 DISTNAME=		nss-${NSS_RELEASE:S/.0$//}
-NSS_RELEASE=		3.21.0
+NSS_RELEASE=		3.22.0
 CATEGORIES=		security
 MASTER_SITES=		${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_RELEASE:S/.0$//:S/./_/g}_RTM/src/}
 
@@ -82,7 +82,7 @@ do-install:
 	{ ${ECHO} "Name: NSS"; \
 	  ${ECHO} "Description: Mozilla Network Security Services"; \
 	  ${ECHO} "Version: ${NSS_RELEASE}"; \
-	  ${ECHO} "Requires: nspr >= 4.10.3"; \
+	  ${ECHO} "Requires: nspr >= 4.11.0"; \
 	  ${ECHO} "Cflags: -I${PREFIX}/include/nss/nss -I${PREFIX}/include/nss"; \
 	  ${ECHO} "Libs: -L${PREFIX}/lib/nss" \
 	      "${COMPILER_RPATH_FLAG}${PREFIX}/lib/nss" \
diff --git a/devel/nss/distinfo b/devel/nss/distinfo
index 79497b05d15..24616d79d5f 100644
--- a/devel/nss/distinfo
+++ b/devel/nss/distinfo
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.54 2015/12/17 13:39:59 ryoon Exp $
+$NetBSD: distinfo,v 1.54.2.1 2016/04/03 21:02:56 spz Exp $
 
-SHA1 (nss-3.21.tar.gz) = d4bbbd72b967443e8b65f504cdd157e3df93a84a
-RMD160 (nss-3.21.tar.gz) = f0bbfcfcfc46274ccad4b1ec2fdf63db1eb05681
-SHA512 (nss-3.21.tar.gz) = 0645465b5d1ab05d819355a3f4a2879499539a00d95bfab3ca14a7dcd901e510b5d9ae797386ff5a42f68b0b57f7bbec4ec9d3a85ebd508eb824aba1fb589d53
-Size (nss-3.21.tar.gz) = 6978112 bytes
+SHA1 (nss-3.22.tar.gz) = 47e1b0f297eabe9965abde3f1c5baafdee513f84
+RMD160 (nss-3.22.tar.gz) = 79199bbf1706f8db6c07847cb72c0ea7cfae5efa
+SHA512 (nss-3.22.tar.gz) = f97251a17ad4ea889878ffeba64f19560978cf82c512b84c301be248ee4fe764345838fb8a88233b0fe12abe7bf78ce521a6ac64fa8d16bd0e1283eac9c17be1
+Size (nss-3.22.tar.gz) = 6992347 bytes
 SHA1 (patch-am) = ee4c4beeb120397852fc4b06b7dd54534d0d5ac5
 SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69
 SHA1 (patch-md) = 0a09fd2abb8674a2d301f1b6a5331af5db94178f