[pkgsrc/trunk]: pkgsrc/devel/nss nss: Update to 3.57

[ryoon <ryoon%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/10f86f6ba49f
branches:  trunk
changeset: 439431:10f86f6ba49f
user:      ryoon <ryoon%pkgsrc.org@localhost>
date:      Sat Sep 19 23:54:14 2020 +0000

description:
nss: Update to 3.57

Changelog:
Notable Changes in NSS 3.57

* NSPR dependency updated to 4.29.
* The following CA certificates were Added:
    Bug 1663049 - CN=Trustwave Global Certification Authority
        SHA-256 Fingerprint:
97552015F5DDFC3C8788C006944555408894450084F100867086BC1A2BB58DC8
    Bug 1663049 - CN=Trustwave Global ECC P256 Certification Authority
        SHA-256 Fingerprint:
945BBC825EA554F489D1FD51A73DDF2EA624AC7019A05205225C22A78CCFA8B4
    Bug 1663049 - CN=Trustwave Global ECC P384 Certification Authority
        SHA-256 Fingerprint:
55903859C8C0C3EBB8759ECE4E2557225FF5758BBD38EBD48276601E1BD58097
* The following CA certificates were Removed:
    Bug 1651211 - CN=EE Certification Centre Root CA
        SHA-256 Fingerprint:
3E84BA4342908516E77573C0992F0979CA084E4685681FF195CCBA8A229B8A76
    Bug 1656077 - O=Government Root Certification Authority; C=TW
        SHA-256 Fingerprint:
7600295EEFE85B9E1FD624DB76062AAAAE59818A54D2774CD4C0B2C01131E1B3
* Trust settings for the following CA certificates were Modified:
    Bug 1653092 - CN=OISTE WISeKey Global Root GA CA
        Websites (server authentication) trust bit removed.

Bugs fixed in NSS 3.57

* Bug 1651211 - Remove EE Certification Centre Root CA certificate.
* Bug 1653092 - Turn off Websites Trust Bit for OISTE WISeKey Global Root GA
CA.
* Bug 1656077 - Remove Taiwan Government Root Certification Authority
certificate.
* Bug 1663049 - Add SecureTrust's Trustwave Global root certificates to NSS.
* Bug 1659256 - AArch64 AES optimization shouldn't be enabled with gcc 4.8.
* Bug 1651834 - Fix Clang static analyzer warnings.
* Bug 1661378 - Fix Build failure with Clang 11.
* Bug 1659727 - Fix mpcpucache.c invalid output constraint on Linux/ARM.
* Bug 1662738 - Only run freebl_fips_RNG_PowerUpSelfTest when linked with
NSPR.
* Bug 1661810 - Fix Crash @ arm_aes_encrypt_ecb_128 when building with Clang
11.
* Bug 1659252 - Fix Make build with NSS_DISABLE_DBM=1.
* Bug 1660304 - Add POST tests for KDFs as required by FIPS.
* Bug 1663346 - Use 64-bit compilation on e2k architecture.
* Bug 1605922 - Account for negative sign in mp_radix_size.
* Bug 1653641 - Cleanup inaccurate DTLS comments, code review fixes.
* Bug 1660372 - NSS 3.57 should depend on NSPR 4.29
* Bug 1660734 - Fix Makefile typos.
* Bug 1660735 - Fix Makefile typos.

diffstat:

 devel/nss/Makefile |   7 +++----
 devel/nss/distinfo |  10 +++++-----
 2 files changed, 8 insertions(+), 9 deletions(-)

diffs (41 lines):

diff -r b3367783df02 -r 10f86f6ba49f devel/nss/Makefile
--- a/devel/nss/Makefile        Sat Sep 19 23:53:50 2020 +0000
+++ b/devel/nss/Makefile        Sat Sep 19 23:54:14 2020 +0000
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.191 2020/08/31 18:07:24 wiz Exp $
+# $NetBSD: Makefile,v 1.192 2020/09/19 23:54:14 ryoon Exp $
 
 DISTNAME=              nss-${NSS_RELEASE:S/.0$//}
-NSS_RELEASE=           3.56.0
-PKGREVISION=           1
+NSS_RELEASE=           3.57.0
 CATEGORIES=            security
 MASTER_SITES=          ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/}
 
@@ -136,7 +135,7 @@
 # For consistency of libxul.so link in www/firefox.
 BUILDLINK_API_DEPENDS.sqlite3+=        sqlite3>=3.8.4.2
 .include "../../databases/sqlite3/buildlink3.mk"
-BUILDLINK_API_DEPENDS.nspr+=   nspr>=4.25
+BUILDLINK_API_DEPENDS.nspr+=   nspr>=4.29
 .include "../../devel/nspr/buildlink3.mk"
 .include "../../devel/zlib/buildlink3.mk"
 .include "../../mk/pthread.buildlink3.mk"
diff -r b3367783df02 -r 10f86f6ba49f devel/nss/distinfo
--- a/devel/nss/distinfo        Sat Sep 19 23:53:50 2020 +0000
+++ b/devel/nss/distinfo        Sat Sep 19 23:54:14 2020 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.117 2020/08/23 08:31:27 ryoon Exp $
+$NetBSD: distinfo,v 1.118 2020/09/19 23:54:14 ryoon Exp $
 
-SHA1 (nss-3.56.tar.gz) = 5203e66425f51738c723c5db1940fdc20a4c5472
-RMD160 (nss-3.56.tar.gz) = df67362953fcce5bd8cbc2ced72f536ff3912399
-SHA512 (nss-3.56.tar.gz) = f2eed8252c13b38a4d80a11203136d22a521205f814b6d954cc119ccf8921fcb8f689d919944bea4739d1575e9bda7e13cf2ad054ac91d51e049abe246efc845
-Size (nss-3.56.tar.gz) = 81706176 bytes
+SHA1 (nss-3.57.tar.gz) = ee150322d22ca2b449b31a9a4188eab156e0a13d
+RMD160 (nss-3.57.tar.gz) = d00996339012f73e11eb61d9e162e334921e4082
+SHA512 (nss-3.57.tar.gz) = 7e312d7539a26f57b968548935a7715cfa895aa61da21d0542ae45b71cb16f63167728534cdfd15f8eca68c75753a0df3d05e87b4c5acaabbda63c736e552ea2
+Size (nss-3.57.tar.gz) = 81712830 bytes
 SHA1 (patch-am) = fea682bf03bc8b645049f93ed58554ca45f47aca
 SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69
 SHA1 (patch-md) = 8547c9414332c02221b96719dea1e09cb741f4d1