cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
154,851 Commits 1 Branch 0 Tags
Commit Graph

158 Commits

Author SHA1 Message Date
sthen
1d94b9da31 Drop the patch backing out the certdata update in NSS 3.61; the main public 
sites affected by dropping the geotrust root (apple store, apple news etc)
are on different CAs now and the other known ones are api endpoints not so
likely to be important in a standard browser. OK robert, landry said 'rm
all the things' earlier which I am treating as an OK ;)
 2021-02-12 18:39:04 +00:00
robert
5b14a55191 revert to the certdata.txt file from version 3.59 because they removed 
some root certificates which are still used by Apple, so let's keep them
until Apple fixes their shit

This essentially reverts this commit:
091c01dfb4

ok landry@
 2021-02-03 16:16:10 +00:00
landry
eca95595d1 security/nss: update to 3.61. 
Will be required by gecko 86.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.61_release_notes
 2021-01-25 07:43:16 +00:00
jasper
c613826f46 implement s_mpi_getProcessorLineSize() for powerpc64 by returning a hardcoded 
value (128) as discussed with kettenis@. turns out, the code to detect this on
the fly doesn't seem to work properly on linux too.

ok landry@ (MAINTAINER)
 2021-01-18 12:17:47 +00:00
landry
b27ba54375 security/nss: update to 3.60. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.60_release_notes

will be required by gecko 85.
 2020-12-15 09:04:27 +00:00
landry
2f7f9d9e4c Update to nss 3.59, will be required by gecko 84. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.59_release_notes
 2020-11-14 08:20:57 +00:00
landry
153e516396 Update to nss 3.58, required by gecko 83. 
See https://developer.mozilla.org/fr/docs/Mozilla/Projects/NSS/NSS_3.58_release_notes
 2020-10-20 14:44:46 +00:00
landry
c3e37e097d Remove patch which was merged upstream 
reported by naddy@, sorry for the breakage
 2020-09-22 07:25:36 +00:00
landry
e8272b667e Update to NSS 3.57, req'd by gecko 82. 
See https://developer.mozilla.org/fr/docs/Mozilla/Projects/NSS/NSS_3.57_release_notes
 2020-09-21 13:50:58 +00:00
naddy
964348a371 Fix aarch64 build by making sure that the aarch64-specific code that is 
referenced elsewhere is actually built.  From a proposed upstream fix.
https://bugzilla.mozilla.org/show_bug.cgi?id=1662833
https://phabricator.services.mozilla.com/D87174
ok landry@
 2020-09-07 14:10:07 +00:00
landry
dae94c1fb0 Update to nss 3.56, req'd by gecko 81. 
See https://developer.mozilla.org/fr/docs/Mozilla/Projects/NSS/NSS_3.56_release_notes
 2020-08-25 13:43:38 +00:00
landry
32637dc565 Update to nss 3.55, will be required by gecko 80. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes
 2020-07-25 05:38:27 +00:00
landry
52bb7ce2ce Update to nss 3.54, req'd by gecko 79. 
see https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.54_release_notes
(mostly root certs changes)
 2020-06-27 06:35:16 +00:00
landry
6e4a22d352 Update to nss 3.53.1. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53.1_release_notes
Fixes https://bugzilla.mozilla.org/show_bug.cgi?id=CVE-2020-12402 (no access)
 2020-06-19 06:17:52 +00:00
landry
7a26dd3b5f Update to nss 3.53, requirement for gecko 78. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53_release_notes
 2020-06-02 15:18:09 +00:00
landry
31eb0ebd27 Update to nss 3.52.1, reqd by fx 77.0b8. 
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.52.1_release_notes

Fixes https://bugzilla.mozilla.org/show_bug.cgi?id=CVE-2020-12399 'Force
a fixed length for DSA exponentiation' (bug details not public)
 2020-05-20 08:43:09 +00:00
landry
1da67e1abd Update to nss 3.52, required for gecko 77. 
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.52_release_notes
 2020-05-14 11:22:43 +00:00
landry
399473ec3b Update to nss 3.51.1, required to build gecko 76. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.51.1_release_notes
 2020-04-09 11:09:19 +00:00
landry
2ea476f60c Update to nss 3.51. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.51_release_notes
remove arm64 build fix from kurt@, was merged upstream in #1618400
 2020-03-08 16:01:25 +00:00
kurt
66975f6f4e Fix build on arm64. okay landry@ 2020-02-28 16:04:29 +00:00
landry
7433557b75 Update to nss 3.50. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.50_release_notes
remove powerpc patch not needed anymore.
tested by cwen@ & tb@ on macppc and by jca@ on sparc64
 2020-02-11 16:48:29 +00:00
landry
aa77601e58 Update to nss 3.49.2. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.2_release_notes
 2020-01-28 08:42:33 +00:00
landry
f6e0a90895 Update to nss 3.49.1. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
Fixes https://bugzilla.mozilla.org/show_bug.cgi?id=1606992
 2020-01-14 06:54:14 +00:00
landry
4fd100bba5 Update to nss 3.49. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
 2020-01-07 17:26:46 +00:00
cwen
409e7f3cfb nss: powerpc-only fix. Work around the lack of <sys/auxv.h> and 
getauxval(), and keep it built with base-gcc. Thanks to jca@ who
improved my diff.

OK jca@, "Fix it whichever way you prefer" landry@ (maintainer)
 2019-12-26 22:15:12 +00:00
landry
aba44ded0e Update to NSS 3.48. 
Cf https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
 2019-12-09 09:43:36 +00:00
landry
9fcada5e4a Security update to nss 3.47.1 
(no details yet, dont ask)
 2019-11-21 18:26:07 +00:00
kn
1309519045 Set BUILD_OPT only if DEBUG is not set 
OK landry
 2019-10-31 19:54:26 +00:00
landry
07aa5a003c Update to nss 3.47. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes
Remove patches from #1581507 fixing tests & #1581391 fixing arm64,
merged upstream.
 2019-10-23 19:30:25 +00:00
landry
521db726a0 Update to nss 3.46.1. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46.1_release_notes
 2019-10-13 17:05:57 +00:00
naddy
eb05078e8d UID is not an environment variable at all, but a built-in bash variable 2019-09-18 21:14:39 +00:00
naddy
4deb2d7d8c Fix regression tests: 
* Export UID, which is stripped by env -i; used by checks if user is root.
* Run tests with bash.  Various scripts use bash features.
* Replace unportable grep expression.

ok landry@
 2019-09-16 14:16:17 +00:00
landry
52151f5b86 Add link to upstream bug report 2019-09-15 15:20:51 +00:00
naddy
f4f7dd6f1e fix aarch64 build by adding gcm-aarch64.c to the source files regardless 
of the operating system; ok landry@
 2019-09-15 13:39:35 +00:00
landry
fa58923656 Update to nss 3.46. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes
 2019-09-03 16:22:56 +00:00
sthen
48b0b9660c replace simple PERMIT_PACKAGE_CDROM=Yes with PERMIT_PACKAGE=Yes 2019-07-12 20:48:23 +00:00
landry
e4341a653e Update to nss 3.45, required by gecko 69. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.45_release_notes
Bump minor as PK11_FindRawCertsWithSubject was added to the API.
Remove patch chunk merged upstream (from #1554659)
 2019-07-09 17:52:02 +00:00
landry
529f72283c Update to nss 3.44.1, required by upcoming gecko 68. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.44.1_release_notes
 2019-06-25 11:06:25 +00:00
landry
374bf4f2d2 link to upstream commit, chunk to remove in 3.45 2019-05-28 17:00:54 +00:00
jca
e9265d55eb Stop mentioning SSLv2 and SSLv3 
ok landry@ (maintainer)
 2019-05-20 14:59:37 +00:00
landry
b5396dac1d Update to nss 3.44, will be a requirement for gecko 68. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.44_release_notes
Add a patch from FreeBSD via https://bugzilla.mozilla.org/show_bug.cgi?id=1551041
to fix the build on big-endian.

thanks to cwen@ for testing on macppc.
 2019-05-12 17:58:20 +00:00
jca
de3bb17f6d Drop patch not needed since a few releases 
ok landry@ (maintainer)
 2019-05-11 00:07:08 +00:00
landry
c746990b9c Update to nss 3.43, required by gecko 67. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.43_release_notes
been in my tree for a while...
 2019-04-22 09:24:22 +00:00
jca
86a1029472 Use ld(1) version scripts to fix symbol conflicts (hopefully) for good 
Remove the symbol renaming workaround.  Use version scripts as done on
Linux and FreeBSD to hide internal symbols (eg HMAC_Update) that
conflict with libcrypto.

Tested in a bul by ajacoutot@, ok sthen@ naddy@, no objection landry@
(maintainer)
 2019-04-16 18:45:41 +00:00
sthen
5af1768410 Rename additional symbols in NSS that conflict with libcrypto. 
NSS has a number of internal functions (used inter-library between NSS's
various libraries, not exported in the public API) that conflict with
libcrypto:

HMAC_Init, HMAC_Update, MD5_Update, SHA1_Update, SHA224_Update,
SHA256_Update, SHA384_Update, SHA512_Update.

We were already renaming (via #define macro) SHA1_Update and HMAC_Update
but some programs use others - notably libreoffice, which uses HMAC_Init and
HMAC_Update when saving encrypted .od* files - as robert@ tracked down, the
NSS version was being called instead of the expected libcrypto one.

Fix by renaming the remaining conflicting functions the same way.
 2019-04-07 18:48:38 +00:00
landry
a12ebb365b Security update to nss 3.42.1. 
Fixes CVE-2018-18508 which was supposed to be in 3.42 but missed it.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.42.1_release_notes
 2019-02-01 12:57:24 +00:00
landry
6a5f3c1aa3 Update to nss 3.42, requirement for gecko 66. 
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.42_release_notes
 2019-02-01 06:41:12 +00:00
landry
6fd079f8c6 Update to NSS 3.41.1. 
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41.1_release_notes
 2019-01-23 13:02:01 +00:00
landry
c07b18d3d6 Update to nss 3.41, required by gecko 65.0b6 
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41_release_notes
 2018-12-24 10:31:41 +00:00
landry
a5821d16a7 Update to nss 3.40.1. 
Fixes CVE-2018-12404
 2018-12-01 09:18:26 +00:00