131 Commits

Author SHA1 Message Date
kn
1309519045 Set BUILD_OPT only if DEBUG is not set
OK landry
2019-10-31 19:54:26 +00:00
landry
07aa5a003c Update to nss 3.47.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes
Remove patches from #1581507 fixing tests & #1581391 fixing arm64,
merged upstream.
2019-10-23 19:30:25 +00:00
landry
521db726a0 Update to nss 3.46.1.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46.1_release_notes
2019-10-13 17:05:57 +00:00
naddy
eb05078e8d UID is not an environment variable at all, but a built-in bash variable 2019-09-18 21:14:39 +00:00
naddy
4deb2d7d8c Fix regression tests:
* Export UID, which is stripped by env -i; used by checks if user is root.
* Run tests with bash.  Various scripts use bash features.
* Replace unportable grep expression.

ok landry@
2019-09-16 14:16:17 +00:00
landry
52151f5b86 Add link to upstream bug report 2019-09-15 15:20:51 +00:00
naddy
f4f7dd6f1e fix aarch64 build by adding gcm-aarch64.c to the source files regardless
of the operating system; ok landry@
2019-09-15 13:39:35 +00:00
landry
fa58923656 Update to nss 3.46.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes
2019-09-03 16:22:56 +00:00
sthen
48b0b9660c replace simple PERMIT_PACKAGE_CDROM=Yes with PERMIT_PACKAGE=Yes 2019-07-12 20:48:23 +00:00
landry
e4341a653e Update to nss 3.45, required by gecko 69.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.45_release_notes
Bump minor as PK11_FindRawCertsWithSubject was added to the API.
Remove patch chunk merged upstream (from #1554659)
2019-07-09 17:52:02 +00:00
landry
529f72283c Update to nss 3.44.1, required by upcoming gecko 68.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.44.1_release_notes
2019-06-25 11:06:25 +00:00
landry
374bf4f2d2 link to upstream commit, chunk to remove in 3.45 2019-05-28 17:00:54 +00:00
jca
e9265d55eb Stop mentioning SSLv2 and SSLv3
ok landry@ (maintainer)
2019-05-20 14:59:37 +00:00
landry
b5396dac1d Update to nss 3.44, will be a requirement for gecko 68.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.44_release_notes
Add a patch from FreeBSD via https://bugzilla.mozilla.org/show_bug.cgi?id=1551041
to fix the build on big-endian.

thanks to cwen@ for testing on macppc.
2019-05-12 17:58:20 +00:00
jca
de3bb17f6d Drop patch not needed since a few releases
ok landry@ (maintainer)
2019-05-11 00:07:08 +00:00
landry
c746990b9c Update to nss 3.43, required by gecko 67.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.43_release_notes
been in my tree for a while...
2019-04-22 09:24:22 +00:00
jca
86a1029472 Use ld(1) version scripts to fix symbol conflicts (hopefully) for good
Remove the symbol renaming workaround.  Use version scripts as done on
Linux and FreeBSD to hide internal symbols (eg HMAC_Update) that
conflict with libcrypto.

Tested in a bul by ajacoutot@, ok sthen@ naddy@, no objection landry@
(maintainer)
2019-04-16 18:45:41 +00:00
sthen
5af1768410 Rename additional symbols in NSS that conflict with libcrypto.
NSS has a number of internal functions (used inter-library between NSS's
various libraries, not exported in the public API) that conflict with
libcrypto:

HMAC_Init, HMAC_Update, MD5_Update, SHA1_Update, SHA224_Update,
SHA256_Update, SHA384_Update, SHA512_Update.

We were already renaming (via #define macro) SHA1_Update and HMAC_Update
but some programs use others - notably libreoffice, which uses HMAC_Init and
HMAC_Update when saving encrypted .od* files - as robert@ tracked down, the
NSS version was being called instead of the expected libcrypto one.

Fix by renaming the remaining conflicting functions the same way.
2019-04-07 18:48:38 +00:00
landry
a12ebb365b Security update to nss 3.42.1.
Fixes CVE-2018-18508 which was supposed to be in 3.42 but missed it.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.42.1_release_notes
2019-02-01 12:57:24 +00:00
landry
6a5f3c1aa3 Update to nss 3.42, requirement for gecko 66.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.42_release_notes
2019-02-01 06:41:12 +00:00
landry
6fd079f8c6 Update to NSS 3.41.1.
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41.1_release_notes
2019-01-23 13:02:01 +00:00
landry
c07b18d3d6 Update to nss 3.41, required by gecko 65.0b6
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41_release_notes
2018-12-24 10:31:41 +00:00
landry
a5821d16a7 Update to nss 3.40.1.
Fixes CVE-2018-12404
2018-12-01 09:18:26 +00:00
landry
10d2d3e679 Update to nss 3.40, required by gecko 64.
Cf https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.40_release_notes
2018-10-29 15:56:41 +00:00
landry
9f19534de9 Update to nss 3.39, required by gecko 63.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.39_release_notes
2018-09-06 18:36:41 +00:00
landry
c5961827d0 Update to nss 3.38.
Went in an amd64 bulk build, and probably required by gecko 62.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.38_release_notes
2018-06-27 04:53:40 +00:00
landry
8473a639e7 Remove patch that was merged upstream in
2209bddb98
spotted by nigel@
2018-06-07 11:29:37 +00:00
landry
7c4223b956 Update to nss 3.37.3. 2018-06-07 08:40:15 +00:00
landry
4c896e9841 Bugfix update to nss 3.37.1 2018-05-29 20:25:04 +00:00
landry
0ac926161e add link to upstream commit 2018-05-28 12:44:30 +00:00
landry
b06e682696 Fix build on !x86 by inconditionally building FStar.c. Cf
https://bugzilla.mozilla.org/show_bug.cgi?id=1459739#c2
2018-05-14 18:43:47 +00:00
landry
d6923b69fa Update to nss 3.37, needed by gecko 61.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.37_release_notes

Interestingly, in nss 3.31 the way entropy is gathered from the system
was revamped, and in #1057343 it started using the getentropy() syscall
by default if available, with a fallback to /dev/urandom...but only on
linux/glibc 2.25.

Add a patch to also use getentropy() on OpenBSD.. reported upstream in
#1461075
2018-05-12 18:10:12 +00:00
landry
dd0100d4e4 Remove upstream patch from #1443400. 2018-04-10 09:55:00 +00:00
landry
0fc7710d07 Update to nss 3.36.1, required by fx 60.0b11
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.36.1_release_notes
Fixes #1443400, #1447628 & #1452670
2018-04-10 09:35:46 +00:00
phessler
5892e31794 a much better fix, pulled from upstream.
OK landry@
2018-03-21 20:39:16 +00:00
phessler
5d4b3a62bd fix build on aarch64
OK sthen@
2018-03-21 20:01:00 +00:00
landry
6bf6b3b7c4 Update to nss 3.36, required by gecko 60. 2018-03-14 17:15:15 +00:00
landry
ce81f2c321 Fix HaCl* build on non-clang archs by using -std=gnu99.
Better fix discussed upstream in #1436932
2018-02-09 08:23:38 +00:00
landry
b171c396ce Update to nss 3.35, required by gecko 59.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.35_release_notes
2018-01-24 17:25:45 +00:00
landry
c2919da30e Minor update to nss 3.34.1, req'd by firefox 58.0b8.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.34.1_release_notes
2017-12-01 11:25:32 +00:00
landry
71de897506 Update to nss 3.34, will be required by gecko 58.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.34_release_notes
2017-11-15 17:42:08 +00:00
landry
e0697ba4c9 Instead of providing old versions of nss-config & nss.pc shoplifted ages
ago from Debian, just patch & use the ones added upstream in bug
#1277852. This way, we properly list the right libs when linking,
including nssutil3 (which should fix linking chrome with lld) - and
while here fix includedir to be consistent with cflags.

Prompted by an original diff from espie@
Tested in bulks by ajacoutot@ and myself
WANTLIB fixes removing softokn3 to come
2017-11-09 18:45:24 +00:00
landry
285b930ed4 Update to nss 3.33.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.33_release_notes

Will be required by gecko 57 branch, so might make things easier for the
upcoming -stable branch.
2017-09-27 06:45:19 +00:00
landry
2f306a18dc (potentially security) update nss to 3.32.1 for bug #1377618
(sec-restricted) - required by fx 56.0b11.

Relnotes might appear at https://developer.mozilla.org/fr/docs/Mozilla/Projects/NSS/NSS_3.32.1_release_notes
2017-09-12 19:01:16 +00:00
landry
59331a241d Update to nss 3.32, will be required by upcoming gecko 56 releases.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.32_release_notes
2017-08-07 18:48:22 +00:00
landry
bfccfb7fa2 Tentative fix for nss w/ clang on i386 - fix comparison trigerring
-Werror,-Wtautological-constant-out-of-range-compare.

Reported upstream as https://bugzilla.mozilla.org/show_bug.cgi?id=1384827
tested w/ make CC=clang on amd64 & i386
2017-07-27 06:33:25 +00:00
landry
60bca43e25 Update to nss 3.31, required by gecko 55.
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.31_release_notes
2017-06-19 04:48:49 +00:00
ajacoutot
1619cca8f2 Define HMAC_Update to NSS_HMAC_Update to prevent clashing symbol with libcrypto.
input from landry@ and miod@
2017-05-30 18:57:01 +00:00
landry
fb105fb645 Update to nss 3.30.2, 3.30.1 is required by firefox 54.
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.30_release_notes
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.30.1_release_notes
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.30.2_release_notes
Bump shlib major for many symbols addition/removal.
2017-04-22 11:57:39 +00:00
landry
fc6d5553c6 Update to 3.29.5: '3.29.4 has been deleted, because it identified itself
with an incorrect version number'

prodded by naddy@
2017-04-07 11:55:43 +00:00