cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
137,257 Commits 1 Branch 0 Tags
Commit Graph

116 Commits

Author SHA1 Message Date
landry
c746990b9c Update to nss 3.43, required by gecko 67. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.43_release_notes
been in my tree for a while...
 2019-04-22 09:24:22 +00:00
jca
86a1029472 Use ld(1) version scripts to fix symbol conflicts (hopefully) for good 
Remove the symbol renaming workaround.  Use version scripts as done on
Linux and FreeBSD to hide internal symbols (eg HMAC_Update) that
conflict with libcrypto.

Tested in a bul by ajacoutot@, ok sthen@ naddy@, no objection landry@
(maintainer)
 2019-04-16 18:45:41 +00:00
sthen
5af1768410 Rename additional symbols in NSS that conflict with libcrypto. 
NSS has a number of internal functions (used inter-library between NSS's
various libraries, not exported in the public API) that conflict with
libcrypto:

HMAC_Init, HMAC_Update, MD5_Update, SHA1_Update, SHA224_Update,
SHA256_Update, SHA384_Update, SHA512_Update.

We were already renaming (via #define macro) SHA1_Update and HMAC_Update
but some programs use others - notably libreoffice, which uses HMAC_Init and
HMAC_Update when saving encrypted .od* files - as robert@ tracked down, the
NSS version was being called instead of the expected libcrypto one.

Fix by renaming the remaining conflicting functions the same way.
 2019-04-07 18:48:38 +00:00
landry
a12ebb365b Security update to nss 3.42.1. 
Fixes CVE-2018-18508 which was supposed to be in 3.42 but missed it.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.42.1_release_notes
 2019-02-01 12:57:24 +00:00
landry
6a5f3c1aa3 Update to nss 3.42, requirement for gecko 66. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.42_release_notes
 2019-02-01 06:41:12 +00:00
landry
6fd079f8c6 Update to NSS 3.41.1. 
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41.1_release_notes
 2019-01-23 13:02:01 +00:00
landry
c07b18d3d6 Update to nss 3.41, required by gecko 65.0b6 
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41_release_notes
 2018-12-24 10:31:41 +00:00
landry
a5821d16a7 Update to nss 3.40.1. 
Fixes CVE-2018-12404
 2018-12-01 09:18:26 +00:00
landry
10d2d3e679 Update to nss 3.40, required by gecko 64. 
Cf https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.40_release_notes
 2018-10-29 15:56:41 +00:00
landry
9f19534de9 Update to nss 3.39, required by gecko 63. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.39_release_notes
 2018-09-06 18:36:41 +00:00
landry
c5961827d0 Update to nss 3.38. 
Went in an amd64 bulk build, and probably required by gecko 62.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.38_release_notes
 2018-06-27 04:53:40 +00:00
landry
8473a639e7 Remove patch that was merged upstream in 
2209bddb98
spotted by nigel@
 2018-06-07 11:29:37 +00:00
landry
7c4223b956 Update to nss 3.37.3. 2018-06-07 08:40:15 +00:00
landry
4c896e9841 Bugfix update to nss 3.37.1 2018-05-29 20:25:04 +00:00
landry
0ac926161e add link to upstream commit 2018-05-28 12:44:30 +00:00
landry
b06e682696 Fix build on !x86 by inconditionally building FStar.c. Cf 
https://bugzilla.mozilla.org/show_bug.cgi?id=1459739#c2
 2018-05-14 18:43:47 +00:00
landry
d6923b69fa Update to nss 3.37, needed by gecko 61. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.37_release_notes

Interestingly, in nss 3.31 the way entropy is gathered from the system
was revamped, and in #1057343 it started using the getentropy() syscall
by default if available, with a fallback to /dev/urandom...but only on
linux/glibc 2.25.

Add a patch to also use getentropy() on OpenBSD.. reported upstream in
#1461075
 2018-05-12 18:10:12 +00:00
landry
dd0100d4e4 Remove upstream patch from #1443400. 2018-04-10 09:55:00 +00:00
landry
0fc7710d07 Update to nss 3.36.1, required by fx 60.0b11 
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.36.1_release_notes
Fixes #1443400, #1447628 & #1452670
 2018-04-10 09:35:46 +00:00
phessler
5892e31794 a much better fix, pulled from upstream. 
OK landry@
 2018-03-21 20:39:16 +00:00
phessler
5d4b3a62bd fix build on aarch64 
OK sthen@
 2018-03-21 20:01:00 +00:00
landry
6bf6b3b7c4 Update to nss 3.36, required by gecko 60. 2018-03-14 17:15:15 +00:00
landry
ce81f2c321 Fix HaCl* build on non-clang archs by using -std=gnu99. 
Better fix discussed upstream in #1436932
 2018-02-09 08:23:38 +00:00
landry
b171c396ce Update to nss 3.35, required by gecko 59. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.35_release_notes
 2018-01-24 17:25:45 +00:00
landry
c2919da30e Minor update to nss 3.34.1, req'd by firefox 58.0b8. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.34.1_release_notes
 2017-12-01 11:25:32 +00:00
landry
71de897506 Update to nss 3.34, will be required by gecko 58. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.34_release_notes
 2017-11-15 17:42:08 +00:00
landry
e0697ba4c9 Instead of providing old versions of nss-config & nss.pc shoplifted ages 
ago from Debian, just patch & use the ones added upstream in bug
#1277852. This way, we properly list the right libs when linking,
including nssutil3 (which should fix linking chrome with lld) - and
while here fix includedir to be consistent with cflags.

Prompted by an original diff from espie@
Tested in bulks by ajacoutot@ and myself
WANTLIB fixes removing softokn3 to come
 2017-11-09 18:45:24 +00:00
landry
285b930ed4 Update to nss 3.33. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.33_release_notes

Will be required by gecko 57 branch, so might make things easier for the
upcoming -stable branch.
 2017-09-27 06:45:19 +00:00
landry
2f306a18dc (potentially security) update nss to 3.32.1 for bug #1377618 
(sec-restricted) - required by fx 56.0b11.

Relnotes might appear at https://developer.mozilla.org/fr/docs/Mozilla/Projects/NSS/NSS_3.32.1_release_notes
 2017-09-12 19:01:16 +00:00
landry
59331a241d Update to nss 3.32, will be required by upcoming gecko 56 releases. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.32_release_notes
 2017-08-07 18:48:22 +00:00
landry
bfccfb7fa2 Tentative fix for nss w/ clang on i386 - fix comparison trigerring 
-Werror,-Wtautological-constant-out-of-range-compare.

Reported upstream as https://bugzilla.mozilla.org/show_bug.cgi?id=1384827
tested w/ make CC=clang on amd64 & i386
 2017-07-27 06:33:25 +00:00
landry
60bca43e25 Update to nss 3.31, required by gecko 55. 
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.31_release_notes
 2017-06-19 04:48:49 +00:00
ajacoutot
1619cca8f2 Define HMAC_Update to NSS_HMAC_Update to prevent clashing symbol with libcrypto. 
input from landry@ and miod@
 2017-05-30 18:57:01 +00:00
landry
fb105fb645 Update to nss 3.30.2, 3.30.1 is required by firefox 54. 
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.30_release_notes
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.30.1_release_notes
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.30.2_release_notes
Bump shlib major for many symbols addition/removal.
 2017-04-22 11:57:39 +00:00
landry
fc6d5553c6 Update to 3.29.5: '3.29.4 has been deleted, because it identified itself 
with an incorrect version number'

prodded by naddy@
 2017-04-07 11:55:43 +00:00
landry
d6a0c2dbe8 Bugfix update to nss 3.29.4. 
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.29.4_release_notes
 2017-04-06 11:42:21 +00:00
landry
28e5c6b40a Bugfix update to NSS 3.29.3. 
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.29.2_release_notes
and
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.29.3_release_notes

Fixes mostly #1342358 and #1340841
 2017-03-12 15:09:43 +00:00
landry
da8f6c78c6 Update to nss 3.29.1. 
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.29_release_notes
and
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.29.1_release_notes
 2017-02-20 19:33:13 +00:00
landry
3a113f7c02 Update to nss 3.28.1, because perfection is never attained. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.28.1_release_notes
 2017-01-05 20:41:43 +00:00
landry
615e891338 Update to nss 3.28, will be required by upcoming firefox 51. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.28_release_notes

Enable TLS 1.3 (draft) support per
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.28_release_notes#Request_to_test_and_prepare_for_TLS_1.3.
 2017-01-04 12:17:48 +00:00
landry
31ef2a472e Update to nss 3.27.2. 
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.27.2_release_notes
 2016-12-15 10:15:53 +00:00
landry
fc050c27fc Update to nss 3.27, required by gecko 50. 
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.27_release_notes

Note that a bunch of CA's were removed, but not WoSign, because it owns
StartSSL/StartCOM.. see
https://docs.google.com/document/d/1C6BlmbeQfn4a9zydVi2UvjBGv6szuSB4sMYUcVrR8vQ/preview
and https://wiki.mozilla.org/CA:WoSign_Issues for details. Anyway, we
know the CA model is broken, right ?

Bump major, functions added/removed...
 2016-10-06 12:10:22 +00:00
sthen
564c6c344a Cope with moving sqlite3 back to ports. 2016-09-23 09:16:52 +00:00
landry
1c7255b5eb Update to nss 3.26. 
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.26_release_notes,
notables changes:

- the letsencrypt CA (ISRG Root X1) root certificate was added
- NPN is disabled and ALPN is enabled by default
 2016-09-04 08:55:13 +00:00
landry
a56bd35ece Update to NSS 3.25, will be required by firefox 49. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.25_release_notes
 2016-08-05 06:56:58 +00:00
landry
7a3e950865 Update to nss 3.24, requirement of firefox 48. 
- Remove patch-nss_lib_util_verref_h, merged upstream (#1226179)
- Remove useless patch-nss_coreconf_UNIX_mk, our -O2 takes precedence
- Remove chunk of patch-nss_coreconf_OpenBSD_mk, was merged upstream in
  #1250891. While here remove the addition of -Wl,Bsymbolic to MKSHLIB
which was here since forever for no justified reason.
 2016-06-14 14:48:51 +00:00
naddy
ef68f42b62 remove SHARED_ONLY from ports that don't use any MODULES 2016-03-16 16:46:31 +00:00
naddy
22bfc05958 replace after-bsd.port.mk hack with PROPERTIES check 2016-03-10 19:29:25 +00:00
landry
1d4125ae85 Update to nss 3.23. 
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.23_release_notes
for details.

Remove c++-comments patch, now that we remove -ansi from the build flags it
is allowed in C99. (see https://bugzilla.mozilla.org/show_bug.cgi?id=1250891)
 2016-03-04 16:29:24 +00:00
landry
5ab13415e4 Trololololol. 2016-02-22 20:10:37 +00:00