nss: Update to 3.53

Changelog:
Notable Changes in NSS 3.53

* When using the Makefiles, NSS can be built in parallel, speeding up those
builds to more similar performance as the build.sh/ninja/gyp system. (Bug
290526)

* SEED is now moved into a new freebl directory freebl/deprecated (Bug
1636389).

  - SEED will be disabled by default in a future release of NSS. At that time,
users will need to set the compile-time flag (Bug 1622033) to disable that
deprecation in order to use the algorithm.

  - Algorithms marked as deprecated will ultimately be removed.

* Several root certificates in the Mozilla program now set the
CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can query to
further refine trust decisions. (Bug 1618404, Bug 1621159) If a builtin
certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp before the  SCT or
NotBefore date of a certificate that builtin issued, then clients can elect
not to trust it.
  - This attribute provides a more graceful phase-out for certificate
authorities than complete removal from the root certificate builtin store.

Bugs fixed in NSS 3.53

* Bug 1640260 - Initialize PBE params (ASAN fix)
* Bug 1618404 - Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
* Bug 1621159 - Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and
SK ID root certs
* Bug 1629414 - PPC64: Correct compilation error between VMX vs. VSX vector
instructions
* Bug 1639033 - Fix various compile warnings in NSS
* Bug 1640041 - Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
* Bug 1640042 - Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
* Bug 1638289 - Avoid multiple definitions of SHA{256,384,512}_* symbols when
linking libfreeblpriv3.so in Firefox on ppc64le
* Bug 1636389 - Relocate deprecated SEED algorithm
* Bug 1637083 - lib/ckfw: No such file or directory. Stop.
* Bug 1561331 - Additional modular inverse test
* Bug 1629553 - Rework and cleanup gmake builds
* Bug 1438431 - Remove mkdepend and "depend" make target
* Bug 290526 - Support parallel building of NSS when using the Makefiles
* Bug 1636206 - HACL* update after changes in libintvector.h
* Bug 1636058 - Fix building NSS on Debian s390x, mips64el, and riscv64
* Bug 1622033 - Add option to build without SEED

3 files changed, 7 insertions, 22 deletions

diff --git a/devel/nss/Makefile b/devel/nss/Makefile
index 910461a5716..8fcdb3faae4 100644
--- a/devel/nss/Makefile
+++ b/devel/nss/Makefile
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.184 2020/06/02 08:23:39 adam Exp $
+# $NetBSD: Makefile,v 1.185 2020/06/03 08:51:26 ryoon Exp $
 
 DISTNAME=		nss-${NSS_RELEASE:S/.0$//}
-NSS_RELEASE=		3.52.0
-PKGREVISION=		1
+NSS_RELEASE=		3.53.0
 CATEGORIES=		security
 MASTER_SITES=		${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/}
 
diff --git a/devel/nss/distinfo b/devel/nss/distinfo
index a9e9909d9c4..11c2468c9dd 100644
--- a/devel/nss/distinfo
+++ b/devel/nss/distinfo
@@ -1,16 +1,15 @@
-$NetBSD: distinfo,v 1.113 2020/05/06 01:09:43 ryoon Exp $
+$NetBSD: distinfo,v 1.114 2020/06/03 08:51:26 ryoon Exp $
 
-SHA1 (nss-3.52.tar.gz) = 4ff9fcff59fab1c4b0f00d3f3ac6015d0253d242
-RMD160 (nss-3.52.tar.gz) = be6af426ba8e19566b82c2f409875bd094a9bd2e
-SHA512 (nss-3.52.tar.gz) = a45baf38717bceda03c292b2c01def680a24a846327e17d36044a85e30ed40c68220c78c0a2c3025c11778ee58f5d5eb0fff1b4cd274b95c408fb59e394e62c6
-Size (nss-3.52.tar.gz) = 81220587 bytes
+SHA1 (nss-3.53.tar.gz) = 5631fd7a50ec5991052a9fa15fe775c34c8969e7
+RMD160 (nss-3.53.tar.gz) = 1d48251dbc1dbacce6ed669a67c2f870b9ba62a3
+SHA512 (nss-3.53.tar.gz) = 280edf24356b764584200bff949af4a7f88514ee8ac80bf5348a9a844a8b1eb263e9aa1d772644bd8bb1bd195c12b6cc173280cfc88cd97e56562e1c40e71503
+Size (nss-3.53.tar.gz) = 81178428 bytes
 SHA1 (patch-am) = fea682bf03bc8b645049f93ed58554ca45f47aca
 SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69
 SHA1 (patch-md) = 8547c9414332c02221b96719dea1e09cb741f4d1
 SHA1 (patch-me) = 3b23fb15a1a22204604ebe64345bb30734a131ba
 SHA1 (patch-mf) = 534fe5f711f60dadc3432bc805a6153535f11709
 SHA1 (patch-mg) = 3c878548c98bdea559a3e653e63e0ed22a2a8834
-SHA1 (patch-mh) = a46d3098a85c3a4a57895a9845bc1741fc5e9561
 SHA1 (patch-mj) = 08ca1a37afce99e0292a20348fc6855547f44e8a
 SHA1 (patch-mn) = 5b79783e48249044be1a904a6cfd20ba175b5fd4
 SHA1 (patch-nss_cmd_platlibs.mk) = 01f4350de601b29c94e8a791a28daca226866bb6
diff --git a/devel/nss/patches/patch-mh b/devel/nss/patches/patch-mh
deleted file mode 100644
index e572c340ab2..00000000000
--- a/devel/nss/patches/patch-mh
+++ /dev/null
@@ -1,13 +0,0 @@
-$NetBSD: patch-mh,v 1.2 2013/07/20 09:28:12 ryoon Exp $
-
---- nss/lib/Makefile.orig	2011-03-18 23:34:05.000000000 +0000
-+++ nss/lib/Makefile
-@@ -70,7 +70,7 @@ endif
- 
- ifndef MOZILLA_CLIENT
- ifeq ($(OS_ARCH),Linux)
--SYSINIT_SRCDIR = sysinit  # Add the sysinit directory to DIRS.
-+#SYSINIT_SRCDIR = sysinit  # Add the sysinit directory to DIRS.
- endif
- endif
-