diff --git a/.gitignore b/.gitignore index 32c257f..9c6334a 100644 --- a/.gitignore +++ b/.gitignore @@ -50,3 +50,4 @@ TestUser51.cert /nss-3.52.tar.gz /nss-3.53.tar.gz /nss-3.54.tar.gz +/nss-3.55.tar.gz diff --git a/STAGE2-nss b/STAGE2-nss deleted file mode 100644 index 3d43b92..0000000 --- a/STAGE2-nss +++ /dev/null @@ -1,68 +0,0 @@ -#requires nspr -#requires perl -#requires nss-util -#requires nss-softokn - -mcd $BUILDDIR/nss - -export BUILD_OPT=1 -export PKG_CONFIG_ALLOW_SYSTEM_LIBS=1 -export PKG_CONFIG_ALLOW_SYSTEM_CFLAGS=1 -export NSPR_INCLUDE_DIR=/usr/include/nspr -export NSPR_LIB_DIR=/usr/lib${SUFFIX} -export NSS_USE_SYSTEM_SQLITE=1 -export NSS_BUILD_WITHOUT_SOFTOKEN=1 -export USE_SYSTEM_SOFTOKEN=1 -export SOFTOKEN_LIB_DIR=/usr/lib${SUFFIX} -export NSSUTIL_INCLUDE_DIR=/usr/include/nss3 -export NSSUTIL_LIB_DIR=/usr/lib${SUFFIX} -export USE_SYSTEM_NSSUTIL=1 -export FREEBL_INCLUDE_DIR=/usr/include/nss3 -export FREEBL_LIB_DIR=/usr/lib${SUFFIX} -export USE_SYSTEM_FREEBL=1 -export NSS_USE_SYSTEM_FREEBL=1 -export FREEBL_NO_DEPEND=1 -export IN_TREE_FREEBL_HEADERS_FIRST=1 -export NSS_BLTEST_NOT_AVAILABLE=1 -export NSS_NO_SSL2_NO_EXPORT=1 -export NSS_ECC_MORE_THAN_SUITE_B=1 -export NSS_NO_PKCS11_BYPASS=1 -#export NSDISTMODE="copy" - -if [ "$SUFFIX" = "64" ]; then - USE_64=1 - export USE_64 -fi - -(cd $SRC/nss-3.* && mkdir -p dist/private/nss && cp nss/lib/ckfw/nssck.api dist/private/nss/) - -make -C $SRC/nss-3.*/nss/coreconf -make -C $SRC/nss-3.*/nss/lib/dbm - -# nss/nssinit.c, ssl/sslcon.c, smime/smimeutil.c and ckfw/builtins/binst.c -# need nss/verref.h which is exported privately, move it to where it can be found. -(cd $SRC/nss-3.* && mkdir -p dist/private/nss && cp -a nss/verref.h dist/private/nss/) - -make -C $SRC/nss-3.*/nss -cd $SRC/nss-3.*/nss/coreconf -make install -cd $SRC/nss-3.*/nss/lib/dbm -make install -cd $SRC/nss-3.*/nss -make install -# Copy the binary libraries we want -NSSLIBS="libnss3.so libnssckbi.so libnsspem.so libnsssysinit.so libsmime3.so libssl3.so" -# BOZO: temporarily disable FIPS140 support -#NSSLIBCHKS="libnssdbm3.chk libfreebl3.chk libsoftokn3.chk" -NSSLIBCHKS="" -# END BOZO -cd $SRC/nss-3.* -for file in $NSSLIBS $NSSLIBCHKS -do - install -p -m 755 dist/*.OBJ/lib/$file /usr/lib${SUFFIX}/ -done -# Copy the include files we want -for file in $SRC/nss-*/dist/public/nss/*.h -do - install -p -m 644 $file /usr/include/nss3/ -done diff --git a/nss-3.53-strict-proto-fix.patch b/nss-3.53-strict-proto-fix.patch deleted file mode 100644 index e69c977..0000000 --- a/nss-3.53-strict-proto-fix.patch +++ /dev/null @@ -1,12 +0,0 @@ -diff -up ./lib/pk11wrap/pk11pub.h.strict_proto_fix ./lib/pk11wrap/pk11pub.h ---- ./lib/pk11wrap/pk11pub.h.strict_proto_fix 2020-06-04 16:48:54.721954514 -0700 -+++ ./lib/pk11wrap/pk11pub.h 2020-06-04 16:49:17.074066050 -0700 -@@ -948,7 +948,7 @@ PRBool SECMOD_HasRootCerts(void); - * the system state independent of the database state and can be called - * before NSS initializes. - */ --int SECMOD_GetSystemFIPSEnabled(); -+int SECMOD_GetSystemFIPSEnabled(void); - - SEC_END_PROTOS - diff --git a/nss.spec b/nss.spec index 1db6f03..ee33070 100644 --- a/nss.spec +++ b/nss.spec @@ -1,5 +1,5 @@ %global nspr_version 4.26.0 -%global nss_version 3.54.0 +%global nss_version 3.55.0 %global unsupported_tools_directory %{_libdir}/nss/unsupported-tools %global saved_files_dir %{_libdir}/nss/saved %global dracutlibdir %{_prefix}/lib/dracut @@ -111,8 +111,6 @@ Patch12: nss-signtool-format.patch Patch20: nss-gcm-param-default-pkcs11v2.patch %endif %endif -# Upstream bug https://bugzilla.mozilla.org/show_bug.cgi?id=1643528 -Patch30: nss-3.53-strict-proto-fix.patch %description Network Security Services (NSS) is a set of libraries designed to @@ -876,6 +874,9 @@ update-crypto-policies &> /dev/null || : %changelog +* Sun Aug 2 2020 Daiki Ueno - 3.55.0-1 +- Update to NSS 3.55 + * Wed Jul 15 2020 Daiki Ueno - 3.54.0-1 - Update to NSS 3.54 diff --git a/sources b/sources index a019b76..040d300 100644 --- a/sources +++ b/sources @@ -3,4 +3,4 @@ SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403 SHA512 (blank-key3.db) = 01f7314e9fc8a7c9aa997652624cfcde213d18a6b3bb31840c1a60bbd662e56b5bc3221d13874abb42ce78163b225a6dfce2e1326cf6dd29366ad9c28ba5a71c SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7 SHA512 (blank-secmod.db) = 06a2dbd861839ef6315093459328b500d3832333a34b30e6fac4a2503af337f014a4d319f0f93322409e719142904ce8bc08252ae9a4f37f30d4c3312e900310 -SHA512 (nss-3.54.tar.gz) = 9b9253469514c085730ae580f6544e882a8264e253687950627a4fa1eeb956287c9da46caf7d8988cd6363f6dee26cb8db755203375751fe53795697d7ae9b7b +SHA512 (nss-3.55.tar.gz) = acae7b803a3219cd4b78216cb8a6352805741e42eca6a42a5e6289ebbabc6189c7c6bc138cbd8a93d8631d06175c4d34e72957d49fe726adada6aaa2566e399e