Update to 3.19

Changelog:
The NSS team has released Network Security Services (NSS) 3.19,
which is a minor release.

New functionality:
* For some certificates, such as root CA certificates, that don't
  embed any constraints, NSS might impose additional constraints,
  such as name constraints. A new API has been added that allows
  to lookup imposed constraints.
* It is possible to override the directory in which the NSS build
  system will look for the sqlite library.

New Functions:
* CERT_GetImposedNameConstraints

Notable Changes:
* The SSL 3 protocol has been disabled by default.
* NSS now more strictly validates TLS extensions and will fail a
  handshake that contains malformed extensions.
* Fixed a bug related to the ordering of TLS handshake messages.
* In TLS 1.2 handshakes, NSS advertises support for the SHA512
  hash algorithm, in order to be compatible with TLS servers
  that use certificates with a SHA512 signature.

4 files changed, 41 insertions, 12 deletions

diff --git a/devel/nss/Makefile b/devel/nss/Makefile
index 158b6c1edf1..2b5627a8554 100644
--- a/devel/nss/Makefile
+++ b/devel/nss/Makefile
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.95 2015/04/21 11:38:19 ryoon Exp $
+# $NetBSD: Makefile,v 1.96 2015/05/05 21:42:19 ryoon Exp $
 
 DISTNAME=		nss-${NSS_RELEASE:S/.0$//}
-NSS_RELEASE=		3.18.1
+NSS_RELEASE=		3.19.0
 CATEGORIES=		security
 MASTER_SITES=		${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_RELEASE:S/.0$//:S/./_/g}_RTM/src/}
 
diff --git a/devel/nss/distinfo b/devel/nss/distinfo
index dfe2f808b62..f9e708ff27d 100644
--- a/devel/nss/distinfo
+++ b/devel/nss/distinfo
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.46 2015/04/21 11:38:19 ryoon Exp $
+$NetBSD: distinfo,v 1.47 2015/05/05 21:42:19 ryoon Exp $
 
-SHA1 (nss-3.18.1.tar.gz) = 0c1bd239aba56bf1f05ec19748cf8141895668db
-RMD160 (nss-3.18.1.tar.gz) = 22043687b54085cee67e0ee40631fe65120b091b
-Size (nss-3.18.1.tar.gz) = 6945125 bytes
+SHA1 (nss-3.19.tar.gz) = 5c344b28abe7e0529d58373c5005ccfc66869716
+RMD160 (nss-3.19.tar.gz) = c3685a9dbd52bf7e64139c518386e3e2b677458b
+Size (nss-3.19.tar.gz) = 6951461 bytes
 SHA1 (patch-am) = ee4c4beeb120397852fc4b06b7dd54534d0d5ac5
 SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69
 SHA1 (patch-md) = 0a09fd2abb8674a2d301f1b6a5331af5db94178f
@@ -11,7 +11,8 @@ SHA1 (patch-mf) = 64d3b2cc09ffbc9c4e8ffdb68cb2fa89b6897e8c
 SHA1 (patch-mg) = 3c878548c98bdea559a3e653e63e0ed22a2a8834
 SHA1 (patch-mh) = a46d3098a85c3a4a57895a9845bc1741fc5e9561
 SHA1 (patch-mj) = 08ca1a37afce99e0292a20348fc6855547f44e8a
-SHA1 (patch-mn) = ab5820ecca7e1a3aef7785763115d38fa55109b4
+SHA1 (patch-mn) = 5b79783e48249044be1a904a6cfd20ba175b5fd4
+SHA1 (patch-nss_cmd_platlibs.mk) = 7dadcb72acf15714c61ae74b21c5baf45bc51d4c
 SHA1 (patch-nss_coreconf_OpenBSD.mk) = fa545c993038e99bf9f59b59ec1d0bd1f6c192a9
 SHA1 (patch-nss_lib_freebl_config.mk) = 1c198177da8ba7928cbfbd23e385503be99ebe27
 SHA1 (patch-security_nss_cmd_shlibsign_sign.sh) = 7948b7b502a4c148ee185836dde8a84d3aa388af
diff --git a/devel/nss/patches/patch-mn b/devel/nss/patches/patch-mn
index 7bab723ecce..0b6cf3db4e3 100644
--- a/devel/nss/patches/patch-mn
+++ b/devel/nss/patches/patch-mn
@@ -1,15 +1,28 @@
-$NetBSD: patch-mn,v 1.2 2013/07/20 09:28:12 ryoon Exp $
+$NetBSD: patch-mn,v 1.3 2015/05/05 21:42:19 ryoon Exp $
 
 Make sure we link correctly with sqlite3 from pkgsrc.
 
---- nss/lib/softoken/config.mk.orig	2010-07-21 00:52:46.000000000 +0000
+--- nss/lib/softoken/config.mk.orig	2015-04-30 20:00:23.000000000 +0000
 +++ nss/lib/softoken/config.mk
-@@ -80,7 +80,7 @@ else
+@@ -22,8 +22,8 @@ RESNAME = $(LIBRARY_NAME).rc
+ 
+ ifdef NS_USE_GCC
+ EXTRA_SHARED_LIBS += \
+-	-L$(SQLITE_LIB_DIR) \
+-	-l$(SQLITE_LIB_NAME) \
++	`pkg-config --libs-only-L sqlite3` \
++	`pkg-config --libs-only-l sqlite3` \
+ 	-L$(NSSUTIL_LIB_DIR) \
+ 	-lnssutil3 \
+ 	-L$(NSPR_LIB_DIR) \
+@@ -47,8 +47,8 @@ else
+ # $(PROGRAM) has NO explicit dependencies on $(EXTRA_SHARED_LIBS)
  # $(EXTRA_SHARED_LIBS) come before $(OS_LIBS), except on AIX.
  EXTRA_SHARED_LIBS += \
- 	-L$(DIST)/lib \
+-	-L$(SQLITE_LIB_DIR) \
 -	-l$(SQLITE_LIB_NAME) \
-+	`pkg-config --libs sqlite3` \
++	`pkg-config --libs-only-L sqlite3` \
++	`pkg-config --libs-only-l sqlite3` \
  	-L$(NSSUTIL_LIB_DIR) \
  	-lnssutil3 \
  	-L$(NSPR_LIB_DIR) \
diff --git a/devel/nss/patches/patch-nss_cmd_platlibs.mk b/devel/nss/patches/patch-nss_cmd_platlibs.mk
new file mode 100644
index 00000000000..8bec5fbb60a
--- /dev/null
+++ b/devel/nss/patches/patch-nss_cmd_platlibs.mk
@@ -0,0 +1,15 @@
+$NetBSD: patch-nss_cmd_platlibs.mk,v 1.1 2015/05/05 21:42:19 ryoon Exp $
+
+--- nss/cmd/platlibs.mk.orig	2015-04-30 20:00:23.000000000 +0000
++++ nss/cmd/platlibs.mk
+@@ -135,8 +135,8 @@ endif
+ # $(PROGRAM) has NO explicit dependencies on $(EXTRA_SHARED_LIBS)
+ # $(EXTRA_SHARED_LIBS) come before $(OS_LIBS), except on AIX.
+ EXTRA_SHARED_LIBS += \
+-	-L$(SQLITE_LIB_DIR) \
+-	-l$(SQLITE_LIB_NAME) \
++	`pkg-config --libs-only-L sqlite3` \
++	`pkg-config --libs-only-l sqlite3` \
+ 	-L$(NSSUTIL_LIB_DIR) \
+ 	-lnssutil3 \
+ 	-L$(NSPR_LIB_DIR) \