diff options
author | ryoon <ryoon@pkgsrc.org> | 2015-05-05 21:42:19 +0000 |
---|---|---|
committer | ryoon <ryoon@pkgsrc.org> | 2015-05-05 21:42:19 +0000 |
commit | 50a5aee72d8add234eb1af7289de2acadc5b2e00 (patch) | |
tree | ab4e207239a327393c49546221007e6f6b8bceaa /devel/nss | |
parent | 20240b884453f1aff806ddc07028c9c2bf5aa787 (diff) | |
download | pkgsrc-50a5aee72d8add234eb1af7289de2acadc5b2e00.tar.gz |
Update to 3.19
Changelog:
The NSS team has released Network Security Services (NSS) 3.19,
which is a minor release.
New functionality:
* For some certificates, such as root CA certificates, that don't
embed any constraints, NSS might impose additional constraints,
such as name constraints. A new API has been added that allows
to lookup imposed constraints.
* It is possible to override the directory in which the NSS build
system will look for the sqlite library.
New Functions:
* CERT_GetImposedNameConstraints
Notable Changes:
* The SSL 3 protocol has been disabled by default.
* NSS now more strictly validates TLS extensions and will fail a
handshake that contains malformed extensions.
* Fixed a bug related to the ordering of TLS handshake messages.
* In TLS 1.2 handshakes, NSS advertises support for the SHA512
hash algorithm, in order to be compatible with TLS servers
that use certificates with a SHA512 signature.
Diffstat (limited to 'devel/nss')
-rw-r--r-- | devel/nss/Makefile | 4 | ||||
-rw-r--r-- | devel/nss/distinfo | 11 | ||||
-rw-r--r-- | devel/nss/patches/patch-mn | 23 | ||||
-rw-r--r-- | devel/nss/patches/patch-nss_cmd_platlibs.mk | 15 |
4 files changed, 41 insertions, 12 deletions
diff --git a/devel/nss/Makefile b/devel/nss/Makefile index 158b6c1edf1..2b5627a8554 100644 --- a/devel/nss/Makefile +++ b/devel/nss/Makefile @@ -1,7 +1,7 @@ -# $NetBSD: Makefile,v 1.95 2015/04/21 11:38:19 ryoon Exp $ +# $NetBSD: Makefile,v 1.96 2015/05/05 21:42:19 ryoon Exp $ DISTNAME= nss-${NSS_RELEASE:S/.0$//} -NSS_RELEASE= 3.18.1 +NSS_RELEASE= 3.19.0 CATEGORIES= security MASTER_SITES= ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_RELEASE:S/.0$//:S/./_/g}_RTM/src/} diff --git a/devel/nss/distinfo b/devel/nss/distinfo index dfe2f808b62..f9e708ff27d 100644 --- a/devel/nss/distinfo +++ b/devel/nss/distinfo @@ -1,8 +1,8 @@ -$NetBSD: distinfo,v 1.46 2015/04/21 11:38:19 ryoon Exp $ +$NetBSD: distinfo,v 1.47 2015/05/05 21:42:19 ryoon Exp $ -SHA1 (nss-3.18.1.tar.gz) = 0c1bd239aba56bf1f05ec19748cf8141895668db -RMD160 (nss-3.18.1.tar.gz) = 22043687b54085cee67e0ee40631fe65120b091b -Size (nss-3.18.1.tar.gz) = 6945125 bytes +SHA1 (nss-3.19.tar.gz) = 5c344b28abe7e0529d58373c5005ccfc66869716 +RMD160 (nss-3.19.tar.gz) = c3685a9dbd52bf7e64139c518386e3e2b677458b +Size (nss-3.19.tar.gz) = 6951461 bytes SHA1 (patch-am) = ee4c4beeb120397852fc4b06b7dd54534d0d5ac5 SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69 SHA1 (patch-md) = 0a09fd2abb8674a2d301f1b6a5331af5db94178f @@ -11,7 +11,8 @@ SHA1 (patch-mf) = 64d3b2cc09ffbc9c4e8ffdb68cb2fa89b6897e8c SHA1 (patch-mg) = 3c878548c98bdea559a3e653e63e0ed22a2a8834 SHA1 (patch-mh) = a46d3098a85c3a4a57895a9845bc1741fc5e9561 SHA1 (patch-mj) = 08ca1a37afce99e0292a20348fc6855547f44e8a -SHA1 (patch-mn) = ab5820ecca7e1a3aef7785763115d38fa55109b4 +SHA1 (patch-mn) = 5b79783e48249044be1a904a6cfd20ba175b5fd4 +SHA1 (patch-nss_cmd_platlibs.mk) = 7dadcb72acf15714c61ae74b21c5baf45bc51d4c SHA1 (patch-nss_coreconf_OpenBSD.mk) = fa545c993038e99bf9f59b59ec1d0bd1f6c192a9 SHA1 (patch-nss_lib_freebl_config.mk) = 1c198177da8ba7928cbfbd23e385503be99ebe27 SHA1 (patch-security_nss_cmd_shlibsign_sign.sh) = 7948b7b502a4c148ee185836dde8a84d3aa388af diff --git a/devel/nss/patches/patch-mn b/devel/nss/patches/patch-mn index 7bab723ecce..0b6cf3db4e3 100644 --- a/devel/nss/patches/patch-mn +++ b/devel/nss/patches/patch-mn @@ -1,15 +1,28 @@ -$NetBSD: patch-mn,v 1.2 2013/07/20 09:28:12 ryoon Exp $ +$NetBSD: patch-mn,v 1.3 2015/05/05 21:42:19 ryoon Exp $ Make sure we link correctly with sqlite3 from pkgsrc. ---- nss/lib/softoken/config.mk.orig 2010-07-21 00:52:46.000000000 +0000 +--- nss/lib/softoken/config.mk.orig 2015-04-30 20:00:23.000000000 +0000 +++ nss/lib/softoken/config.mk -@@ -80,7 +80,7 @@ else +@@ -22,8 +22,8 @@ RESNAME = $(LIBRARY_NAME).rc + + ifdef NS_USE_GCC + EXTRA_SHARED_LIBS += \ +- -L$(SQLITE_LIB_DIR) \ +- -l$(SQLITE_LIB_NAME) \ ++ `pkg-config --libs-only-L sqlite3` \ ++ `pkg-config --libs-only-l sqlite3` \ + -L$(NSSUTIL_LIB_DIR) \ + -lnssutil3 \ + -L$(NSPR_LIB_DIR) \ +@@ -47,8 +47,8 @@ else + # $(PROGRAM) has NO explicit dependencies on $(EXTRA_SHARED_LIBS) # $(EXTRA_SHARED_LIBS) come before $(OS_LIBS), except on AIX. EXTRA_SHARED_LIBS += \ - -L$(DIST)/lib \ +- -L$(SQLITE_LIB_DIR) \ - -l$(SQLITE_LIB_NAME) \ -+ `pkg-config --libs sqlite3` \ ++ `pkg-config --libs-only-L sqlite3` \ ++ `pkg-config --libs-only-l sqlite3` \ -L$(NSSUTIL_LIB_DIR) \ -lnssutil3 \ -L$(NSPR_LIB_DIR) \ diff --git a/devel/nss/patches/patch-nss_cmd_platlibs.mk b/devel/nss/patches/patch-nss_cmd_platlibs.mk new file mode 100644 index 00000000000..8bec5fbb60a --- /dev/null +++ b/devel/nss/patches/patch-nss_cmd_platlibs.mk @@ -0,0 +1,15 @@ +$NetBSD: patch-nss_cmd_platlibs.mk,v 1.1 2015/05/05 21:42:19 ryoon Exp $ + +--- nss/cmd/platlibs.mk.orig 2015-04-30 20:00:23.000000000 +0000 ++++ nss/cmd/platlibs.mk +@@ -135,8 +135,8 @@ endif + # $(PROGRAM) has NO explicit dependencies on $(EXTRA_SHARED_LIBS) + # $(EXTRA_SHARED_LIBS) come before $(OS_LIBS), except on AIX. + EXTRA_SHARED_LIBS += \ +- -L$(SQLITE_LIB_DIR) \ +- -l$(SQLITE_LIB_NAME) \ ++ `pkg-config --libs-only-L sqlite3` \ ++ `pkg-config --libs-only-l sqlite3` \ + -L$(NSSUTIL_LIB_DIR) \ + -lnssutil3 \ + -L$(NSPR_LIB_DIR) \ |