79 Commits

Author SHA1 Message Date
landry
fa58923656 Update to nss 3.46.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes
2019-09-03 16:22:56 +00:00
landry
e4341a653e Update to nss 3.45, required by gecko 69.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.45_release_notes
Bump minor as PK11_FindRawCertsWithSubject was added to the API.
Remove patch chunk merged upstream (from #1554659)
2019-07-09 17:52:02 +00:00
landry
529f72283c Update to nss 3.44.1, required by upcoming gecko 68.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.44.1_release_notes
2019-06-25 11:06:25 +00:00
landry
b5396dac1d Update to nss 3.44, will be a requirement for gecko 68.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.44_release_notes
Add a patch from FreeBSD via https://bugzilla.mozilla.org/show_bug.cgi?id=1551041
to fix the build on big-endian.

thanks to cwen@ for testing on macppc.
2019-05-12 17:58:20 +00:00
landry
c746990b9c Update to nss 3.43, required by gecko 67.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.43_release_notes
been in my tree for a while...
2019-04-22 09:24:22 +00:00
landry
a12ebb365b Security update to nss 3.42.1.
Fixes CVE-2018-18508 which was supposed to be in 3.42 but missed it.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.42.1_release_notes
2019-02-01 12:57:24 +00:00
landry
6a5f3c1aa3 Update to nss 3.42, requirement for gecko 66.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.42_release_notes
2019-02-01 06:41:12 +00:00
landry
6fd079f8c6 Update to NSS 3.41.1.
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41.1_release_notes
2019-01-23 13:02:01 +00:00
landry
c07b18d3d6 Update to nss 3.41, required by gecko 65.0b6
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41_release_notes
2018-12-24 10:31:41 +00:00
landry
a5821d16a7 Update to nss 3.40.1.
Fixes CVE-2018-12404
2018-12-01 09:18:26 +00:00
landry
10d2d3e679 Update to nss 3.40, required by gecko 64.
Cf https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.40_release_notes
2018-10-29 15:56:41 +00:00
landry
9f19534de9 Update to nss 3.39, required by gecko 63.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.39_release_notes
2018-09-06 18:36:41 +00:00
landry
c5961827d0 Update to nss 3.38.
Went in an amd64 bulk build, and probably required by gecko 62.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.38_release_notes
2018-06-27 04:53:40 +00:00
landry
7c4223b956 Update to nss 3.37.3. 2018-06-07 08:40:15 +00:00
landry
4c896e9841 Bugfix update to nss 3.37.1 2018-05-29 20:25:04 +00:00
landry
d6923b69fa Update to nss 3.37, needed by gecko 61.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.37_release_notes

Interestingly, in nss 3.31 the way entropy is gathered from the system
was revamped, and in #1057343 it started using the getentropy() syscall
by default if available, with a fallback to /dev/urandom...but only on
linux/glibc 2.25.

Add a patch to also use getentropy() on OpenBSD.. reported upstream in
#1461075
2018-05-12 18:10:12 +00:00
landry
0fc7710d07 Update to nss 3.36.1, required by fx 60.0b11
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.36.1_release_notes
Fixes #1443400, #1447628 & #1452670
2018-04-10 09:35:46 +00:00
landry
6bf6b3b7c4 Update to nss 3.36, required by gecko 60. 2018-03-14 17:15:15 +00:00
landry
b171c396ce Update to nss 3.35, required by gecko 59.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.35_release_notes
2018-01-24 17:25:45 +00:00
landry
c2919da30e Minor update to nss 3.34.1, req'd by firefox 58.0b8.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.34.1_release_notes
2017-12-01 11:25:32 +00:00
landry
71de897506 Update to nss 3.34, will be required by gecko 58.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.34_release_notes
2017-11-15 17:42:08 +00:00
landry
285b930ed4 Update to nss 3.33.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.33_release_notes

Will be required by gecko 57 branch, so might make things easier for the
upcoming -stable branch.
2017-09-27 06:45:19 +00:00
landry
2f306a18dc (potentially security) update nss to 3.32.1 for bug #1377618
(sec-restricted) - required by fx 56.0b11.

Relnotes might appear at https://developer.mozilla.org/fr/docs/Mozilla/Projects/NSS/NSS_3.32.1_release_notes
2017-09-12 19:01:16 +00:00
landry
59331a241d Update to nss 3.32, will be required by upcoming gecko 56 releases.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.32_release_notes
2017-08-07 18:48:22 +00:00
landry
60bca43e25 Update to nss 3.31, required by gecko 55.
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.31_release_notes
2017-06-19 04:48:49 +00:00
landry
fb105fb645 Update to nss 3.30.2, 3.30.1 is required by firefox 54.
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.30_release_notes
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.30.1_release_notes
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.30.2_release_notes
Bump shlib major for many symbols addition/removal.
2017-04-22 11:57:39 +00:00
landry
fc6d5553c6 Update to 3.29.5: '3.29.4 has been deleted, because it identified itself
with an incorrect version number'

prodded by naddy@
2017-04-07 11:55:43 +00:00
landry
d6a0c2dbe8 Bugfix update to nss 3.29.4.
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.29.4_release_notes
2017-04-06 11:42:21 +00:00
landry
28e5c6b40a Bugfix update to NSS 3.29.3.
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.29.2_release_notes
and
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.29.3_release_notes

Fixes mostly #1342358 and #1340841
2017-03-12 15:09:43 +00:00
landry
da8f6c78c6 Update to nss 3.29.1.
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.29_release_notes
and
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.29.1_release_notes
2017-02-20 19:33:13 +00:00
landry
3a113f7c02 Update to nss 3.28.1, because perfection is never attained.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.28.1_release_notes
2017-01-05 20:41:43 +00:00
landry
615e891338 Update to nss 3.28, will be required by upcoming firefox 51.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.28_release_notes

Enable TLS 1.3 (draft) support per
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.28_release_notes#Request_to_test_and_prepare_for_TLS_1.3.
2017-01-04 12:17:48 +00:00
landry
31ef2a472e Update to nss 3.27.2.
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.27.2_release_notes
2016-12-15 10:15:53 +00:00
landry
fc050c27fc Update to nss 3.27, required by gecko 50.
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.27_release_notes

Note that a bunch of CA's were removed, but not WoSign, because it owns
StartSSL/StartCOM.. see
https://docs.google.com/document/d/1C6BlmbeQfn4a9zydVi2UvjBGv6szuSB4sMYUcVrR8vQ/preview
and https://wiki.mozilla.org/CA:WoSign_Issues for details. Anyway, we
know the CA model is broken, right ?

Bump major, functions added/removed...
2016-10-06 12:10:22 +00:00
landry
1c7255b5eb Update to nss 3.26.
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.26_release_notes,
notables changes:

- the letsencrypt CA (ISRG Root X1) root certificate was added
- NPN is disabled and ALPN is enabled by default
2016-09-04 08:55:13 +00:00
landry
a56bd35ece Update to NSS 3.25, will be required by firefox 49.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.25_release_notes
2016-08-05 06:56:58 +00:00
landry
7a3e950865 Update to nss 3.24, requirement of firefox 48.
- Remove patch-nss_lib_util_verref_h, merged upstream (#1226179)
- Remove useless patch-nss_coreconf_UNIX_mk, our -O2 takes precedence
- Remove chunk of patch-nss_coreconf_OpenBSD_mk, was merged upstream in
  #1250891. While here remove the addition of -Wl,Bsymbolic to MKSHLIB
which was here since forever for no justified reason.
2016-06-14 14:48:51 +00:00
landry
1d4125ae85 Update to nss 3.23.
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.23_release_notes
for details.

Remove c++-comments patch, now that we remove -ansi from the build flags it
is allowed in C99. (see https://bugzilla.mozilla.org/show_bug.cgi?id=1250891)
2016-03-04 16:29:24 +00:00
landry
303455caf2 Security update to nss 3.21.1.
No CVE or MFSA (yet?), bug #1245528 (details undisclosed), commit
https://hg.mozilla.org/projects/nss/rev/b9a31471759d says "fix bugs in
ASN.1 decoding" adding overflow checks.

discussed with naddy@ & sthen@
2016-02-22 19:56:50 +00:00
landry
5bd2a921a8 Update to nss 3.21.
Tested in a bulk and ok ajacoutot@, thanks!
2015-11-23 11:32:12 +00:00
landry
ccd918b8ff Update to nss 3.20.1.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.20_release_notes
for 3.20 relnotes.

nss & nspr were tested in a bulk build by ajacoutot@, thanks!
2015-10-30 07:59:39 +00:00
landry
6cc463cdec Update to nss 3.19.2 - will be required by upcoming fx 39, now at rc4.
Fixes a regression introduced in 3.19.1, see
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.2_release_notes
and https://bugzilla.mozilla.org/show_bug.cgi?id=1172128
2015-06-26 07:42:27 +00:00
landry
7ef2704721 Update to nss 3.19.1, will be required by firefox 39 anyway. Bump minor.
Fixes for logjam attack, among other things, see
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.1_release_notes
and https://bugzilla.mozilla.org/show_bug.cgi?id=1138554

Commited over urndis0 in a hytte in Å, Lofoten :)
2015-05-30 21:33:59 +00:00
landry
8ce46fdfed Bugfix update to nss 3.18.1, required by upcoming firefox 38.
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.18.1_release_notes
for details.
2015-04-27 19:15:10 +00:00
landry
4265020636 Update to nss 3.18, required by firefox 38.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.18_release_notes
for details. Bump major since CERT_FindCertURLExtension was removed.
2015-04-04 08:57:41 +00:00
landry
08c6cabf90 Bugfix update to nss 3.17.4.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.17.4_release_notes
for details.
2015-03-16 19:15:44 +00:00
landry
ffae1f351f bugfix update to nss 3.17.3
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.17.3_release_notes
Passes all regress tests on amd64.
2014-12-06 08:33:29 +00:00
landry
c354040f1d Update to nss 3.17.2, will be required by gecko 35 anyway (see #1075686)..
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.17_release_notes
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.17.1_release_notes
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.17.2_release_notes
For the changes (note that 3.16.2.1 had the same fixes as 3.17.1)
2014-10-13 09:39:34 +00:00
landry
38e5c395b8 Security update to NSS 3.16.2.1.
Fixes bug #1064636 / CVE-2014-1568: RSA signature malleability in NSS
(sorry, that's all the information i could find)

We'll update to 3.17.1 later..
2014-09-24 18:47:08 +00:00
landry
52fd890687 Bugfix update to 3.16.2, required by upcoming gecko 31 releases.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.16.2_release_notes
2014-07-08 20:07:53 +00:00