CVS commit: pkgsrc/devel/nss

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Fri Sep 30 11:59:12 UTC 2016

Modified Files:
        pkgsrc/devel/nss: Makefile distinfo
        pkgsrc/devel/nss/patches: patch-am patch-nss_coreconf_command.mk

Log Message:
Update to 3.27

Changelog:
The NSS team has released Network Security Services (NSS) 3.27,
which is a minor release.

Below is a summary of the changes.
Please refer to the full release notes for additional details,
including the SHA256 fingerprints of the changed CA certificates.

New functionality:
* Allow custom named group priorities for TLS key exchange handshake
  (SSL_NamedGroupConfig).
* Added support for RSA-PSS signatures in TLS 1.2 and TLS 1.3

New Functions:
* SSL_NamedGroupConfig

Notable Changes:
* NPN can not be enabled anymore.
* Hard limits on the maximum number of TLS records encrypted with the same 
  key are enforced.
* Disabled renegotiation in DTLS.
* The following CA certificates were Removed
- CN = IGC/A, O = PM/SGDN, OU = DCSSI
- CN = Juur-SK, O = AS Sertifitseerimiskeskus
- CN = EBG Elektronik Sertifika Hizmet Sağlayıcısı
- CN = S-TRUST Authentication and Encryption Root CA 2005:PN
- O = VeriSign, Inc., OU = Class 1 Public Primary Certification Authority
- O = VeriSign, Inc., OU = Class 2 Public Primary Certification Authority - G2
- O = VeriSign, Inc., OU = Class 3 Public Primary Certification Authority
- O = Equifax, OU = Equifax Secure Certificate Authority
- CN = Equifax Secure eBusiness CA-1
- CN = Equifax Secure Global eBusiness CA-1

The full release notes are available at
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.27_release_notes


To generate a diff of this commit:
cvs rdiff -u -r1.117 -r1.118 pkgsrc/devel/nss/Makefile
cvs rdiff -u -r1.61 -r1.62 pkgsrc/devel/nss/distinfo
cvs rdiff -u -r1.4 -r1.5 pkgsrc/devel/nss/patches/patch-am
cvs rdiff -u -r1.2 -r1.3 \
    pkgsrc/devel/nss/patches/patch-nss_coreconf_command.mk

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/nss/Makefile
diff -u pkgsrc/devel/nss/Makefile:1.117 pkgsrc/devel/nss/Makefile:1.118
--- pkgsrc/devel/nss/Makefile:1.117     Sat Jul  9 06:38:11 2016
+++ pkgsrc/devel/nss/Makefile   Fri Sep 30 11:59:12 2016
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.117 2016/07/09 06:38:11 wiz Exp $
+# $NetBSD: Makefile,v 1.118 2016/09/30 11:59:12 ryoon Exp $
 
 DISTNAME=              nss-${NSS_RELEASE:S/.0$//}
-NSS_RELEASE=           3.25.0
-PKGREVISION=           1
+NSS_RELEASE=           3.27.0
 CATEGORIES=            security
 MASTER_SITES=          ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_MAJOR_VERSION}_${NSS_MINOR_VERSION}_RTM/src/}
 

Index: pkgsrc/devel/nss/distinfo
diff -u pkgsrc/devel/nss/distinfo:1.61 pkgsrc/devel/nss/distinfo:1.62
--- pkgsrc/devel/nss/distinfo:1.61      Sat Jul  2 12:22:47 2016
+++ pkgsrc/devel/nss/distinfo   Fri Sep 30 11:59:12 2016
@@ -1,10 +1,10 @@
-$NetBSD: distinfo,v 1.61 2016/07/02 12:22:47 ryoon Exp $
+$NetBSD: distinfo,v 1.62 2016/09/30 11:59:12 ryoon Exp $
 
-SHA1 (nss-3.25.tar.gz) = ffa55041a7904bb43afbc6821f479819d9802abf
-RMD160 (nss-3.25.tar.gz) = a3a711df9516788c9f872f4946f68adabcded836
-SHA512 (nss-3.25.tar.gz) = a33cff42d0d85eea091057648d598b7421de88f16ed357965ea08a8812de968c3f18d45452afd21afc90122f65c2c5bb2d7071357947b45e935aae55d28c4218
-Size (nss-3.25.tar.gz) = 7338238 bytes
-SHA1 (patch-am) = ee4c4beeb120397852fc4b06b7dd54534d0d5ac5
+SHA1 (nss-3.27.tar.gz) = e3579204ceffb915caacf2514b24b76ee503012c
+RMD160 (nss-3.27.tar.gz) = f61867a334b7ad043ba545392d2027dbc670350e
+SHA512 (nss-3.27.tar.gz) = a79c31d3ade72897928cdb1cfbf9236ea781fb1951904f2f5d9688afc4e55722ba75ea5a46622d1fa45d55bb2666d05a0df3a2c2ac16ce53335722618523c272
+Size (nss-3.27.tar.gz) = 7397210 bytes
+SHA1 (patch-am) = bab47640c0d25629f43578e7b788859418b27ecd
 SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69
 SHA1 (patch-md) = 0a09fd2abb8674a2d301f1b6a5331af5db94178f
 SHA1 (patch-me) = e785e4e12b54f2618746a550a09593c2eede5f65
@@ -15,6 +15,6 @@ SHA1 (patch-mj) = 08ca1a37afce99e0292a20
 SHA1 (patch-mn) = 5b79783e48249044be1a904a6cfd20ba175b5fd4
 SHA1 (patch-nss_cmd_platlibs.mk) = 7dadcb72acf15714c61ae74b21c5baf45bc51d4c
 SHA1 (patch-nss_coreconf_OpenBSD.mk) = fccc17845c28f5b1268c96eb4e952e32dd530d1d
-SHA1 (patch-nss_coreconf_command.mk) = 182d513f40fa9c16006601dd7a7a654bb3139828
+SHA1 (patch-nss_coreconf_command.mk) = 008f7670f164bf19555a7691f5a59fc8bf687078
 SHA1 (patch-nss_lib_freebl_config.mk) = 1c198177da8ba7928cbfbd23e385503be99ebe27
 SHA1 (patch-security_nss_cmd_shlibsign_sign.sh) = 7948b7b502a4c148ee185836dde8a84d3aa388af

Index: pkgsrc/devel/nss/patches/patch-am
diff -u pkgsrc/devel/nss/patches/patch-am:1.4 pkgsrc/devel/nss/patches/patch-am:1.5
--- pkgsrc/devel/nss/patches/patch-am:1.4       Sat Jul 20 09:28:11 2013
+++ pkgsrc/devel/nss/patches/patch-am   Fri Sep 30 11:59:12 2016
@@ -1,12 +1,12 @@
-$NetBSD: patch-am,v 1.4 2013/07/20 09:28:11 ryoon Exp $
+$NetBSD: patch-am,v 1.5 2016/09/30 11:59:12 ryoon Exp $
 
 SHA1_Update conflicts with openssl which may be dynamically loaded
 at runtime via libcups or libgssapi so causing a crash due to using
 the wrong binding.  So rename here to avoid conflict.
 
---- nss/lib/freebl/blapi.h.orig        2009-06-29 18:15:13.000000000 +0200
+--- nss/lib/freebl/blapi.h.orig        2016-09-26 06:00:51.000000000 +0000
 +++ nss/lib/freebl/blapi.h
-@@ -925,6 +925,8 @@ extern void SHA1_DestroyContext(SHA1Cont
+@@ -1212,6 +1212,8 @@ extern void SHA1_DestroyContext(SHA1Cont
  */
  extern void SHA1_Begin(SHA1Context *cx);
  
@@ -14,4 +14,4 @@ the wrong binding.  So rename here to av
 +
  /*
  ** Update the SHA-1 hash function with more data.
- **    "cx" the context
+ **  "cx" the context

Index: pkgsrc/devel/nss/patches/patch-nss_coreconf_command.mk
diff -u pkgsrc/devel/nss/patches/patch-nss_coreconf_command.mk:1.2 pkgsrc/devel/nss/patches/patch-nss_coreconf_command.mk:1.3
--- pkgsrc/devel/nss/patches/patch-nss_coreconf_command.mk:1.2  Sun Apr 17 19:27:10 2016
+++ pkgsrc/devel/nss/patches/patch-nss_coreconf_command.mk      Fri Sep 30 11:59:12 2016
@@ -1,13 +1,13 @@
-$NetBSD: patch-nss_coreconf_command.mk,v 1.2 2016/04/17 19:27:10 ryoon Exp $
+$NetBSD: patch-nss_coreconf_command.mk,v 1.3 2016/09/30 11:59:12 ryoon Exp $
 
 * Pass CFLAGS from pkgsrc
 
---- nss/coreconf/command.mk.orig       2016-02-26 20:51:11.000000000 +0000
+--- nss/coreconf/command.mk.orig       2016-09-26 06:00:51.000000000 +0000
 +++ nss/coreconf/command.mk
 @@ -12,7 +12,7 @@ AS            = $(CC)
  ASFLAGS      += $(CFLAGS)
  CCF           = $(CC) $(CFLAGS)
- LINK_DLL      = $(LINK) $(OS_DLLFLAGS) $(DLLFLAGS) $(XLDFLAGS)
+ LINK_DLL      = $(LD) $(OS_DLLFLAGS) $(DLLFLAGS) $(XLDFLAGS)
 -CFLAGS        = $(OPTIMIZER) $(OS_CFLAGS) $(WARNING_CFLAGS) $(XP_DEFINE) \
 +CFLAGS       += $(OPTIMIZER) $(OS_CFLAGS) $(WARNING_CFLAGS) $(XP_DEFINE) \
                  $(DEFINES) $(INCLUDES) $(XCFLAGS)