CVS commit: pkgsrc/devel/nss

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Wed Jun 14 11:18:55 UTC 2017

Modified Files:
        pkgsrc/devel/nss: Makefile PLIST distinfo

Log Message:
Update to 3.31

Changelog:
New functionality:
==================
* Allow certificates to be specified by RFC7512 PKCS#11 URIs.
* Allow querying a certificate object for its temporary or permanent storage
  status in a thread safe way.

New Functions:
==============
* CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
  certificate in a thread safe way.
* CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
  certificate in a thread safe way.
* PK11_FindCertFromURI - find a certificate identified by the given URI.
* PK11_FindCertsFromURI - find a list of certificates identified by the given
  URI.
* PK11_GetModuleURI - retrieve the URI of the given module.
* PK11_GetTokenURI - retrieve the URI of a token based on the given slot
  information.
* PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
* PK11URI_DestroyURI - destroy a PK11URI object.
* PK11URI_FormatURI - format a PK11URI object to a string.
* PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
* PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
* PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.

New Macros:
===========
* Several new macros that start with PK11URI_PATTR_ for path attributes defined
  in RFC7512.
* Several new macros that start with PK11URI_QATTR_ for query attributes defined
  in RFC7512.

Notable Changes:
================
* The APIs that set a TLS version range have been changed to trim the requested
  range to the overlap with a systemwide crypto policy, if configured.
  SSL_VersionRangeGetSupported can be used to query the overlap between the
  library's supported range of TLS versions and the systemwide policy.
* Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
  failure if the requested version range wasn't fully allowed by the systemwide
  crypto policy. They have been changed to return success, if at least one TLS
  version overlaps between the requested range and the systemwide policy. An
  application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
  query the TLS version range that was effectively activated.
* Corrected the encoding of Domain Name Constraints extensions created by
  certutil.
* NSS supports a clean seeding mechanism for *NIX systems now using only
  /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
  time.
* CERT_AsciiToName can handle OIDs in dotted decimal form now.

The HG tag is NSS_3_31_RTM. NSS 3.31 requires NSPR 4.15 or newer.


To generate a diff of this commit:
cvs rdiff -u -r1.135 -r1.136 pkgsrc/devel/nss/Makefile
cvs rdiff -u -r1.21 -r1.22 pkgsrc/devel/nss/PLIST
cvs rdiff -u -r1.73 -r1.74 pkgsrc/devel/nss/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/nss/Makefile
diff -u pkgsrc/devel/nss/Makefile:1.135 pkgsrc/devel/nss/Makefile:1.136
--- pkgsrc/devel/nss/Makefile:1.135     Thu Apr 27 01:47:21 2017
+++ pkgsrc/devel/nss/Makefile   Wed Jun 14 11:18:55 2017
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.135 2017/04/27 01:47:21 ryoon Exp $
+# $NetBSD: Makefile,v 1.136 2017/06/14 11:18:55 ryoon Exp $
 
 DISTNAME=              nss-${NSS_RELEASE:S/.0$//}
-NSS_RELEASE=           3.30.2
+NSS_RELEASE=           3.31.0
 CATEGORIES=            security
 MASTER_SITES=          ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/}
 

Index: pkgsrc/devel/nss/PLIST
diff -u pkgsrc/devel/nss/PLIST:1.21 pkgsrc/devel/nss/PLIST:1.22
--- pkgsrc/devel/nss/PLIST:1.21 Sun Feb  5 02:41:13 2017
+++ pkgsrc/devel/nss/PLIST      Wed Jun 14 11:18:55 2017
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.21 2017/02/05 02:41:13 ryoon Exp $
+@comment $NetBSD: PLIST,v 1.22 2017/06/14 11:18:55 ryoon Exp $
 bin/certcgi
 bin/certutil
 bin/cmsutil
@@ -91,6 +91,7 @@ include/nss/nss/pkcs11n.h
 include/nss/nss/pkcs11p.h
 include/nss/nss/pkcs11t.h
 include/nss/nss/pkcs11u.h
+include/nss/nss/pkcs11uri.h
 include/nss/nss/pkcs12.h
 include/nss/nss/pkcs12t.h
 include/nss/nss/pkcs1sig.h
@@ -126,12 +127,12 @@ include/nss/nss/utilpars.h
 include/nss/nss/utilparst.h
 include/nss/nss/utilrename.h
 lib/nss/libcrmf.a
-lib/nss/libfreebl3.${SO_SUFFIX}
-lib/nss/libnss3.${SO_SUFFIX}
-lib/nss/libnssckbi.${SO_SUFFIX}
-lib/nss/libnssdbm3.${SO_SUFFIX}
-lib/nss/libnssutil3.${SO_SUFFIX}
-lib/nss/libsmime3.${SO_SUFFIX}
-lib/nss/libsoftokn3.${SO_SUFFIX}
-lib/nss/libssl3.${SO_SUFFIX}
+lib/nss/libfreebl3.so
+lib/nss/libnss3.so
+lib/nss/libnssckbi.so
+lib/nss/libnssdbm3.so
+lib/nss/libnssutil3.so
+lib/nss/libsmime3.so
+lib/nss/libsoftokn3.so
+lib/nss/libssl3.so
 lib/pkgconfig/nss.pc

Index: pkgsrc/devel/nss/distinfo
diff -u pkgsrc/devel/nss/distinfo:1.73 pkgsrc/devel/nss/distinfo:1.74
--- pkgsrc/devel/nss/distinfo:1.73      Thu Apr 27 01:47:21 2017
+++ pkgsrc/devel/nss/distinfo   Wed Jun 14 11:18:55 2017
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.73 2017/04/27 01:47:21 ryoon Exp $
+$NetBSD: distinfo,v 1.74 2017/06/14 11:18:55 ryoon Exp $
 
-SHA1 (nss-3.30.2.tar.gz) = e8ceea087e2ab2d53ffe156d8641007abad2b13f
-RMD160 (nss-3.30.2.tar.gz) = 2960cfce2c133a6066df7cd9c6f279232c0f0f68
-SHA512 (nss-3.30.2.tar.gz) = 02f14bc000cbde42268c4b6f42df80680b010d1491643ef9b11e0bac31a286a2e7fa251c40cb4ac70b64883a1b90efc64440ef9d797357f8a47cd37195fc5500
-Size (nss-3.30.2.tar.gz) = 9499119 bytes
+SHA1 (nss-3.31.tar.gz) = 006a13a5e52867c49ea1e7d986b7c02a3cd8ebfb
+RMD160 (nss-3.31.tar.gz) = ddfee55651c172c84986098d8c86e61e5cf5e851
+SHA512 (nss-3.31.tar.gz) = 2b56405b32d37cc4386cbbe54462cc57092e47b3418a743adbae14e1825ca69d07256fbfe16c0cfd7540c46cea67259151b42a0d95419c80964015eacdcafea1
+Size (nss-3.31.tar.gz) = 9537011 bytes
 SHA1 (patch-am) = bab47640c0d25629f43578e7b788859418b27ecd
 SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69
 SHA1 (patch-md) = 0a09fd2abb8674a2d301f1b6a5331af5db94178f