pkg/51929: nss3.28 breaks firefox access to google

[paul%whooppee.com@localhost]

>Number:         51929
>Category:       pkg
>Synopsis:       nss-3.28 breaks firefox access to google
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Jan 31 08:35:00 +0000 2017
>Originator:     Paul Goyette
>Release:        NetBSD 7.99.53
>Organization:
+------------------+--------------------------+------------------------+
| Paul Goyette     | PGP Key fingerprint:     | E-mail addresses:      |
| (Retired)        | FA29 0E3B 35AF E8AE 6651 | paul at whooppee.com   |
| Kernel Developer | 0786 F758 55DE 53BA 7731 | pgoyette at netbsd.org |
+------------------+--------------------------+------------------------+
>Environment:
	
	
System: NetBSD speedy.whooppee.com 7.99.53 NetBSD 7.99.53 (SPEEDY 2016-12-31 23:00:24) #1: Sun Jan 1 01:39:34 UTC 2017 paul%speedy.whooppee.com@localhost:/build/netbsd-local/obj/amd64/sys/arch/amd64/compile/SPEEDY amd64
Architecture: x86_64
Machine: amd64
>Description:
Just updated my locally-installed packages.  It appears that updating
nss to 3.28 results in the following error message when accessing google
or wikipedia (and likely other sites):

	Your connection is not secure

	The website tried to negotiate an inadequate level of security.

	gmail.com uses security technology that is outdated and vulnerable
	to attack. An attacker could easily reveal information which you
	thought to be safe. The website administrator will need to fix the
	server first before you can visit the site.

	Error code: NS_ERROR_NET_INADEQUATE_SECURITY


I don't know enough about nss or firefox (or anything else) to file a
meaningful error report upstream; perhaps someone more knowledgeable
than I could do that?

In the meantime, nss3.28 might not be the right version to leave as
current in pkgsrc.

	
>How-To-Repeat:
See above
	
>Fix:
	

>Unformatted: