Update to nss 3.27, required by gecko 50.

See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.27_release_notes

Note that a bunch of CA's were removed, but not WoSign, because it owns
StartSSL/StartCOM.. see
https://docs.google.com/document/d/1C6BlmbeQfn4a9zydVi2UvjBGv6szuSB4sMYUcVrR8vQ/preview
and https://wiki.mozilla.org/CA:WoSign_Issues for details. Anyway, we
know the CA model is broken, right ?

Bump major, functions added/removed...
This commit is contained in:
landry 2016-10-06 12:10:22 +00:00
parent 7e96c35030
commit fc050c27fc
3 changed files with 10 additions and 11 deletions

View File

@ -1,12 +1,11 @@
# $OpenBSD: Makefile,v 1.66 2016/09/23 09:16:57 sthen Exp $
# $OpenBSD: Makefile,v 1.67 2016/10/06 12:10:22 landry Exp $
COMMENT= libraries to support development of security-enabled apps
VERSION= 3.26
REVISION= 0
VERSION= 3.27
DISTNAME= nss-${VERSION}
SO_VERSION= 43.0
SO_VERSION= 44.0
.for _lib in freebl3 nss3 nssckbi nssdbm3 nssutil3 smime3 softokn3 ssl3
SHARED_LIBS+= ${_lib} ${SO_VERSION}
.endfor

View File

@ -1,2 +1,2 @@
SHA256 (nss-3.26.tar.gz) = kXg6Vwq5U2k+uXfOR8UB8EwQTOwof6ARyRvMiXDRxWQ=
SIZE (nss-3.26.tar.gz) = 7386943
SHA256 (nss-3.27.tar.gz) = AhqpNrBvWBVHTdXBN/IyWz/gbKo42XmMpT7DC1NzAfo=
SIZE (nss-3.27.tar.gz) = 7397210

View File

@ -1,11 +1,11 @@
$OpenBSD: patch-nss_lib_freebl_blapi_h,v 1.3 2016/03/04 16:29:24 landry Exp $
$OpenBSD: patch-nss_lib_freebl_blapi_h,v 1.4 2016/10/06 12:10:22 landry Exp $
From firefox in pkgsrc:
SHA1_Update conflicts with openssl which may be dynamically loaded
--- nss/lib/freebl/blapi.h.orig Fri Feb 26 21:51:11 2016
+++ nss/lib/freebl/blapi.h Thu Mar 3 11:01:55 2016
@@ -1218,6 +1218,8 @@ extern void SHA1_DestroyContext(SHA1Context *cx, PRBoo
--- nss/lib/freebl/blapi.h.orig Mon Sep 26 08:00:51 2016
+++ nss/lib/freebl/blapi.h Mon Oct 3 10:11:50 2016
@@ -1212,6 +1212,8 @@ extern void SHA1_DestroyContext(SHA1Context *cx, PRBoo
*/
extern void SHA1_Begin(SHA1Context *cx);
@ -13,4 +13,4 @@ SHA1_Update conflicts with openssl which may be dynamically loaded
+
/*
** Update the SHA-1 hash function with more data.
** "cx" the context
** "cx" the context