Update to 3.27

Changelog:
The NSS team has released Network Security Services (NSS) 3.27,
which is a minor release.

Below is a summary of the changes.
Please refer to the full release notes for additional details,
including the SHA256 fingerprints of the changed CA certificates.

New functionality:
* Allow custom named group priorities for TLS key exchange handshake
  (SSL_NamedGroupConfig).
* Added support for RSA-PSS signatures in TLS 1.2 and TLS 1.3

New Functions:
* SSL_NamedGroupConfig

Notable Changes:
* NPN can not be enabled anymore.
* Hard limits on the maximum number of TLS records encrypted with the same 
  key are enforced.
* Disabled renegotiation in DTLS.
* The following CA certificates were Removed
- CN = IGC/A, O = PM/SGDN, OU = DCSSI
- CN = Juur-SK, O = AS Sertifitseerimiskeskus
- CN = EBG Elektronik Sertifika Hizmet Sağlayıcısı
- CN = S-TRUST Authentication and Encryption Root CA 2005:PN
- O = VeriSign, Inc., OU = Class 1 Public Primary Certification Authority
- O = VeriSign, Inc., OU = Class 2 Public Primary Certification Authority - G2
- O = VeriSign, Inc., OU = Class 3 Public Primary Certification Authority
- O = Equifax, OU = Equifax Secure Certificate Authority
- CN = Equifax Secure eBusiness CA-1
- CN = Equifax Secure Global eBusiness CA-1

The full release notes are available at
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.27_release_notes

4 files changed, 16 insertions, 17 deletions

diff --git a/devel/nss/Makefile b/devel/nss/Makefile
index 149154a035a..9740fd870d9 100644
--- a/devel/nss/Makefile
+++ b/devel/nss/Makefile
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.117 2016/07/09 06:38:11 wiz Exp $
+# $NetBSD: Makefile,v 1.118 2016/09/30 11:59:12 ryoon Exp $
 
 DISTNAME=		nss-${NSS_RELEASE:S/.0$//}
-NSS_RELEASE=		3.25.0
-PKGREVISION=		1
+NSS_RELEASE=		3.27.0
 CATEGORIES=		security
 MASTER_SITES=		${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_MAJOR_VERSION}_${NSS_MINOR_VERSION}_RTM/src/}
 
diff --git a/devel/nss/distinfo b/devel/nss/distinfo
index ddc241452a9..89c7166196a 100644
--- a/devel/nss/distinfo
+++ b/devel/nss/distinfo
@@ -1,10 +1,10 @@
-$NetBSD: distinfo,v 1.61 2016/07/02 12:22:47 ryoon Exp $
+$NetBSD: distinfo,v 1.62 2016/09/30 11:59:12 ryoon Exp $
 
-SHA1 (nss-3.25.tar.gz) = ffa55041a7904bb43afbc6821f479819d9802abf
-RMD160 (nss-3.25.tar.gz) = a3a711df9516788c9f872f4946f68adabcded836
-SHA512 (nss-3.25.tar.gz) = a33cff42d0d85eea091057648d598b7421de88f16ed357965ea08a8812de968c3f18d45452afd21afc90122f65c2c5bb2d7071357947b45e935aae55d28c4218
-Size (nss-3.25.tar.gz) = 7338238 bytes
-SHA1 (patch-am) = ee4c4beeb120397852fc4b06b7dd54534d0d5ac5
+SHA1 (nss-3.27.tar.gz) = e3579204ceffb915caacf2514b24b76ee503012c
+RMD160 (nss-3.27.tar.gz) = f61867a334b7ad043ba545392d2027dbc670350e
+SHA512 (nss-3.27.tar.gz) = a79c31d3ade72897928cdb1cfbf9236ea781fb1951904f2f5d9688afc4e55722ba75ea5a46622d1fa45d55bb2666d05a0df3a2c2ac16ce53335722618523c272
+Size (nss-3.27.tar.gz) = 7397210 bytes
+SHA1 (patch-am) = bab47640c0d25629f43578e7b788859418b27ecd
 SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69
 SHA1 (patch-md) = 0a09fd2abb8674a2d301f1b6a5331af5db94178f
 SHA1 (patch-me) = e785e4e12b54f2618746a550a09593c2eede5f65
@@ -15,6 +15,6 @@ SHA1 (patch-mj) = 08ca1a37afce99e0292a20348fc6855547f44e8a
 SHA1 (patch-mn) = 5b79783e48249044be1a904a6cfd20ba175b5fd4
 SHA1 (patch-nss_cmd_platlibs.mk) = 7dadcb72acf15714c61ae74b21c5baf45bc51d4c
 SHA1 (patch-nss_coreconf_OpenBSD.mk) = fccc17845c28f5b1268c96eb4e952e32dd530d1d
-SHA1 (patch-nss_coreconf_command.mk) = 182d513f40fa9c16006601dd7a7a654bb3139828
+SHA1 (patch-nss_coreconf_command.mk) = 008f7670f164bf19555a7691f5a59fc8bf687078
 SHA1 (patch-nss_lib_freebl_config.mk) = 1c198177da8ba7928cbfbd23e385503be99ebe27
 SHA1 (patch-security_nss_cmd_shlibsign_sign.sh) = 7948b7b502a4c148ee185836dde8a84d3aa388af
diff --git a/devel/nss/patches/patch-am b/devel/nss/patches/patch-am
index e88279c3098..0bd58f78c27 100644
--- a/devel/nss/patches/patch-am
+++ b/devel/nss/patches/patch-am
@@ -1,12 +1,12 @@
-$NetBSD: patch-am,v 1.4 2013/07/20 09:28:11 ryoon Exp $
+$NetBSD: patch-am,v 1.5 2016/09/30 11:59:12 ryoon Exp $
 
 SHA1_Update conflicts with openssl which may be dynamically loaded
 at runtime via libcups or libgssapi so causing a crash due to using
 the wrong binding.  So rename here to avoid conflict.
 
---- nss/lib/freebl/blapi.h.orig	2009-06-29 18:15:13.000000000 +0200
+--- nss/lib/freebl/blapi.h.orig	2016-09-26 06:00:51.000000000 +0000
 +++ nss/lib/freebl/blapi.h
-@@ -925,6 +925,8 @@ extern void SHA1_DestroyContext(SHA1Cont
+@@ -1212,6 +1212,8 @@ extern void SHA1_DestroyContext(SHA1Cont
  */
  extern void SHA1_Begin(SHA1Context *cx);
  
@@ -14,4 +14,4 @@ the wrong binding.  So rename here to avoid conflict.
 +
  /*
  ** Update the SHA-1 hash function with more data.
- **	"cx" the context
+ **  "cx" the context
diff --git a/devel/nss/patches/patch-nss_coreconf_command.mk b/devel/nss/patches/patch-nss_coreconf_command.mk
index 783a4f21bf0..ad9fc3da798 100644
--- a/devel/nss/patches/patch-nss_coreconf_command.mk
+++ b/devel/nss/patches/patch-nss_coreconf_command.mk
@@ -1,13 +1,13 @@
-$NetBSD: patch-nss_coreconf_command.mk,v 1.2 2016/04/17 19:27:10 ryoon Exp $
+$NetBSD: patch-nss_coreconf_command.mk,v 1.3 2016/09/30 11:59:12 ryoon Exp $
 
 * Pass CFLAGS from pkgsrc
 
---- nss/coreconf/command.mk.orig	2016-02-26 20:51:11.000000000 +0000
+--- nss/coreconf/command.mk.orig	2016-09-26 06:00:51.000000000 +0000
 +++ nss/coreconf/command.mk
 @@ -12,7 +12,7 @@ AS            = $(CC)
  ASFLAGS      += $(CFLAGS)
  CCF           = $(CC) $(CFLAGS)
- LINK_DLL      = $(LINK) $(OS_DLLFLAGS) $(DLLFLAGS) $(XLDFLAGS)
+ LINK_DLL      = $(LD) $(OS_DLLFLAGS) $(DLLFLAGS) $(XLDFLAGS)
 -CFLAGS        = $(OPTIMIZER) $(OS_CFLAGS) $(WARNING_CFLAGS) $(XP_DEFINE) \
 +CFLAGS       += $(OPTIMIZER) $(OS_CFLAGS) $(WARNING_CFLAGS) $(XP_DEFINE) \
                  $(DEFINES) $(INCLUDES) $(XCFLAGS)