diff options
author | ryoon <ryoon@pkgsrc.org> | 2019-09-06 02:54:47 +0000 |
---|---|---|
committer | ryoon <ryoon@pkgsrc.org> | 2019-09-06 02:54:47 +0000 |
commit | 1ad131a75fff66f8c9daeec9a23210c2fc75dcd1 (patch) | |
tree | cac05ba4b1a377f19a102ef6dc9ba46763d27d77 /devel/nss | |
parent | 23dc61c306c9ee74fce44b30371680b5040ecade (diff) | |
download | pkgsrc-1ad131a75fff66f8c9daeec9a23210c2fc75dcd1.tar.gz |
Update to 3.46
Changelog:
Notable Changes:
* The following CA certificates were Removed:
- 1574670 - Remove expired Class 2 Primary root certificate
- 1574670 - Remove expired UTN-USERFirst-Client root certificat
- 1574670 - Remove expired Deutsche Telekom Root CA 2 root certificate
- 1566569 - Remove Swisscom Root CA 2 root certificate
* Significant improvements to AES-GCM performance on ARM
Bugs fixed in NSS 3.46:
* 1572164 - Don't unnecessarily free session in NSC_WrapKey
* 1574220 - Improve controls after errors in tstcln, selfserv and vfyserv
cmds
* 1550636 - Upgrade SQLite in NSS to a 2019 version
* 1572593 - Reset advertised extensions in ssl_ConstructExtensions
* 1415118 - NSS build with ./build.sh --enable-libpkix fails
* 1539788 - Add length checks for cryptographic primitives
* 1542077 - mp_set_ulong and mp_set_int should return errors on bad values
* 1572791 - Read out-of-bounds in DER_DecodeTimeChoice_Util from
SSLExp_DelegateCredential
* 1560593 - Cleanup.sh script does not set error exit code for tests that
"Failed with core"
* 1566601 - Add Wycheproof test vectors for AES-KW
* 1571316 - curve25519_32.c:280: undefined reference to `PR_Assert' when
building NSS 3.45 on armhf-linux
* 1516593 - Client to generate new random during renegotiation
* 1563258 - fips.sh fails due to non-existent "resp" directories
* 1561598 - Remove -Wmaybe-uninitialized warning in pqg.c
* 1560806 - Increase softoken password max size to 500 characters
* 1568776 - Output paths relative to repository in NSS coverity
* 1453408 - modutil -changepw fails in FIPS mode if password is an empty
string
* 1564727 - Use a PSS SPKI when possible for delegated credentials
* 1493916 - fix ppc64 inline assembler for clang
* 1561588 - Remove -Wmaybe-uninitialized warning in p7env.c
* 1561548 - Remove -Wmaybe-uninitialized warning in
pkix_pl_ldapdefaultclient.c
* 1512605 - Incorrect alert description after unencrypted Finished msg
* 1564715 - Read /proc/cpuinfo when AT_HWCAP2 returns 0
* 1532194 - Remove or fix -DDEBUG_$USER from make builds
* 1565577 - Visual Studio's cl.exe -? hangs on Windows x64 when building nss
since changeset 9162c654d06915f0f15948fbf67d4103a229226f
* 1564875 - Improve rebuilding with build.sh
* 1565243 - Support TC_OWNER without email address in nss taskgraph
* 1563778 - Increase maxRunTime on Mac taskcluster Tools, SSL tests
* 1561591 - Remove -Wmaybe-uninitialized warning in tstclnt.c
* 1561587 - Remove -Wmaybe-uninitialized warning in lgattr.c
* 1561558 - Remove -Wmaybe-uninitialized warning in httpserv.c
* 1561556 - Remove -Wmaybe-uninitialized warning in tls13esni.c
* 1561332 - ec.c:28 warning: comparison of integers of different signs: 'int'
and 'unsigned long'
* 1564714 - Print certutil commands during setup
* 1565013 - HACL image builder times out while fetching gpg key
* 1563786 - Update hacl-star docker image to pull specific commit
* 1559012 - Improve GCM perfomance using PMULL2
* 1528666 - Correct resumption validation checks
* 1568803 - More tests for client certificate authentication
* 1564284 - Support profile mobility across Windows and Linux
* 1573942 - Gtest for pkcs11.txt with different breaking line formats
* 1575968 - Add strsclnt option to enforce the use of either IPv4 or IPv6
* 1549847 - Fix NSS builds on iOS
* 1485533 - Enable NSS_SSL_TESTS on taskcluster
Diffstat (limited to 'devel/nss')
-rw-r--r-- | devel/nss/Makefile | 5 | ||||
-rw-r--r-- | devel/nss/distinfo | 12 | ||||
-rw-r--r-- | devel/nss/patches/patch-nss_tests_all.sh | 10 |
3 files changed, 13 insertions, 14 deletions
diff --git a/devel/nss/Makefile b/devel/nss/Makefile index 9d82e5f958e..cbd5ee0834f 100644 --- a/devel/nss/Makefile +++ b/devel/nss/Makefile @@ -1,8 +1,7 @@ -# $NetBSD: Makefile,v 1.171 2019/08/11 13:18:47 wiz Exp $ +# $NetBSD: Makefile,v 1.172 2019/09/06 02:54:47 ryoon Exp $ DISTNAME= nss-${NSS_RELEASE:S/.0$//} -NSS_RELEASE= 3.45.0 -PKGREVISION= 1 +NSS_RELEASE= 3.46.0 CATEGORIES= security MASTER_SITES= ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/} diff --git a/devel/nss/distinfo b/devel/nss/distinfo index f4056e09d5b..c154ee2fb58 100644 --- a/devel/nss/distinfo +++ b/devel/nss/distinfo @@ -1,9 +1,9 @@ -$NetBSD: distinfo,v 1.98 2019/07/30 12:18:43 ryoon Exp $ +$NetBSD: distinfo,v 1.99 2019/09/06 02:54:47 ryoon Exp $ -SHA1 (nss-3.45.tar.gz) = bfbb1b7b429c4dbe649ded90f73ec9dac6cd54b8 -RMD160 (nss-3.45.tar.gz) = 610ee052bdcba83f1d5d47c8fa20bb9947c820fa -SHA512 (nss-3.45.tar.gz) = 33360a1bb4e0a0a974070c354ee82c515d5cfa2a12c9c96817a9fdb3e4ca1ad62eb95886b9b0d60e2f69efda964376d0671c1e3c920b2ea614aeecb719c6ff29 -Size (nss-3.45.tar.gz) = 76017462 bytes +SHA1 (nss-3.46.tar.gz) = af1590286cf852702591e5db0ef1ba7b9c1e597c +RMD160 (nss-3.46.tar.gz) = 4950f21faeaa0783458b0344056a11e400639e7d +SHA512 (nss-3.46.tar.gz) = de309ec8d6aa2c3cf4d5ebfe9fa1f8bf5def717d22018d5c88c1de963b4ae7b0d69ad64e68d830574fc85613483fd538cb2f319ffb3fa2e1b97ec02f85d37c48 +Size (nss-3.46.tar.gz) = 76417155 bytes SHA1 (patch-am) = fea682bf03bc8b645049f93ed58554ca45f47aca SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69 SHA1 (patch-md) = 8547c9414332c02221b96719dea1e09cb741f4d1 @@ -18,6 +18,6 @@ SHA1 (patch-nss_coreconf_OpenBSD.mk) = 1a4c3711d5d1f7f9e8d58b36145b15d7e444d754 SHA1 (patch-nss_coreconf_command.mk) = 008f7670f164bf19555a7691f5a59fc8bf687078 SHA1 (patch-nss_lib_freebl_md5.c) = 5cbec40695e296f0713895fb85cd37f6df76b85b SHA1 (patch-nss_lib_util_utilpars.c) = 5d3000515b01037929730a752b7d7a0f46f06deb -SHA1 (patch-nss_tests_all.sh) = f8d0fcfcd67dca757c9ce016660210b20b1e6e8f +SHA1 (patch-nss_tests_all.sh) = b328778b538db66f5447f962f23afd6f650f7071 SHA1 (patch-nss_tests_merge_merge.sh) = 42a4866d226b1076740ba9a5e42c7604f2cb15a7 SHA1 (patch-security_nss_cmd_shlibsign_sign.sh) = 7948b7b502a4c148ee185836dde8a84d3aa388af diff --git a/devel/nss/patches/patch-nss_tests_all.sh b/devel/nss/patches/patch-nss_tests_all.sh index c82a01642b9..23a9094427b 100644 --- a/devel/nss/patches/patch-nss_tests_all.sh +++ b/devel/nss/patches/patch-nss_tests_all.sh @@ -1,10 +1,10 @@ -$NetBSD: patch-nss_tests_all.sh,v 1.1 2018/02/24 11:35:48 ryoon Exp $ +$NetBSD: patch-nss_tests_all.sh,v 1.2 2019/09/06 02:54:47 ryoon Exp $ Revert Bug 1377940 to fix misc/libreoffice ---- nss/tests/all.sh.orig 2018-01-18 14:19:59.000000000 +0000 +--- nss/tests/all.sh.orig 2019-08-30 15:46:32.000000000 +0000 +++ nss/tests/all.sh -@@ -111,8 +111,6 @@ RUN_FIPS="" +@@ -114,8 +114,6 @@ RUN_FIPS="" ######################################################################## run_tests() { @@ -13,8 +13,8 @@ Revert Bug 1377940 to fix misc/libreoffice for TEST in ${TESTS} do # NOTE: the spaces are important. If you don't include -@@ -174,9 +172,8 @@ run_cycle_pkix() - NSS_SSL_TESTS=`echo "${NSS_SSL_TESTS}" | sed -e "s/normal//g" -e "s/fips//g" -e "s/_//g"` +@@ -173,9 +171,8 @@ run_cycle_pkix() + export -n NSS_SSL_RUN - # use the default format. (unset for the shell, export -n for binaries) |