Commit graph

204 commits

Author SHA1 Message Date
ajs124 dda22045e7 nss_latest: 3.86 -> 3.87
https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_87.html
2023-01-06 15:57:52 +01:00
Adam Joseph c0a40bee00 nss: set -DNS_PTR_LE_32=1 if isILP32
A comment in RNG_RandomUpdate() (drdbg.c) says to add the
-DNS_PTR_LE_32=1 flag on ILP32 platforms.

Without this PR, pkgsCross.mips64el-linux-gnuabin32.nss fails to
build.  With this PR, it succeeds.
2023-01-02 20:53:12 -08:00
ajs124 c13ed541db nss_latest: 3.85 -> 3.86
https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/NqCkaX216zY/m/QAUPTaBWCgAJ
2022-12-09 00:22:17 +01:00
ajs124 9930d35129 nss_latest: 3.84 -> 3.85
https://github.com/nss-dev/nss/blob/master/doc/rst/releases/nss_3_85.rst
2022-11-11 23:45:10 +01:00
Martin Weinelt be990edc4a
nss: 3.79.1 -> 3.79.2
https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/dbVxfMyXEyE
2022-10-26 01:51:36 +02:00
Martin Weinelt 989e8d8568
nss: 3.83 -> 3.84
https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/uV-FYp6SUr8/m/M5TvBj0eAQAJ
2022-10-13 18:21:29 +02:00
Martin Weinelt 5d4267b0f2 Merge remote-tracking branch 'origin/master' into staging-next 2022-09-20 12:25:19 +02:00
Martin Weinelt 61b5db3336
nss_latest: 3.82 -> 3.83
https://github.com/nss-dev/nss/blob/master/doc/rst/releases/nss_3_83.rst
2022-09-15 21:31:38 +02:00
Martin Weinelt d1e2a371f0
nss: 3.68.4 -> 3.79.1
The 3.68.4 release was the last of the 3.68 ESR series and 3.79 is the
new ESR series.

https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_79.html
https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_79_1.html
2022-09-03 12:49:09 +02:00
Martin Weinelt 0badc2389a
nss: migrate manual patching into postPatch 2022-08-19 15:16:13 +02:00
Martin Weinelt df214678dc
nss: Drop ckpem patch
It's usefulness is not clear to us maintainers.
2022-08-19 01:34:40 +02:00
Martin Weinelt 7f01443ef1
nss: Drop nss-pem patchset
The patch url went 404 and other distros¹ have discarded it as well in
favor of packaging nss-pem²

[1] https://gitweb.gentoo.org/repo/gentoo.git/commit/dev-libs/nss?id=5eca3e02c87163b3c541cdee893830d201abfb86
[2] https://github.com/kdudka/nss-pem
2022-08-19 01:34:37 +02:00
Martin Weinelt 1393dba610
nss_latest: 3.81 -> 3.82
https://github.com/nss-dev/nss/blob/master/doc/rst/releases/nss_3_82.rst
2022-08-18 17:04:23 +02:00
Martin Weinelt 24ae5203be
nss: test individual firefox versions in passthru 2022-08-06 11:36:36 +02:00
ajs124 20ada9a6c7 nss_latest: 3.80 -> 3.81
https://github.com/nss-dev/nss/blob/master/doc/rst/releases/nss_3_81.rst
2022-07-21 16:03:03 +02:00
ajs124 0bd02d1963 nss_latest: 3.79 -> 3.80
https://github.com/nss-dev/nss/blob/master/doc/rst/releases/nss_3_80.rst
2022-06-24 00:41:32 +02:00
Martin Weinelt 0af7e9c407 Revert "nss: 3.68.4 -> 3.79"
This reverts commit 1c76a270d2.

This breaks the Firefox 91esr build, which is apparently not compatible
with this NSS version.

/build/firefox-91.10.0/security/certverifier/OCSPVerificationTrustDomain.cpp:63:11: error: unknown type name 'SignedDigest'

Will revisit this upgrade, when we drop 91esr in favor of 102esr soon.
2022-06-12 01:24:12 +02:00
ajs124 1c76a270d2 nss: 3.68.4 -> 3.79
This ESR branch has reached EOL:
https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/-z6f6dOWx9A/m/Bpl8VWd_FwAJ
2022-06-08 22:27:15 +02:00
ajs124 309bfdf2e2 nss: sha256 -> hash 2022-06-01 12:47:36 +02:00
ajs124 ae1f1709b7 nss_latest: 3.78 -> 3.79
https://github.com/nss-dev/nss/blob/master/doc/rst/releases/nss_3_79.rst
2022-06-01 12:47:31 +02:00
ajs124 bf5c00fc75 nss_esr: 3.68.3 -> 3.68.4
https://github.com/nss-dev/nss/blob/master/doc/rst/releases/nss_3_68_4.rst
2022-06-01 12:47:23 +02:00
Martin Weinelt 2473837984
nss_latest: 3.77 -> 3.78
https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_78.html

Fixes the ordering of the security load patchset to save us rebuilds.
2022-05-03 15:36:13 +02:00
Martin Weinelt c773303215
Revert "Revert "nss_latest: 3.76.1 -> 3.77""
This reverts commit 79a5b548cc.
2022-05-03 15:36:13 +02:00
Martin Weinelt 79a5b548cc Revert "nss_latest: 3.76.1 -> 3.77"
This reverts commit eb9c616c79.

Breaks the Firefox build and needs further investigation.

In file included from Unified_cpp_certverifier0.cpp:47:
/build/firefox-99.0/security/certverifier/OCSPVerificationTrustDomain.cpp:63:11: error: unknown type name 'SignedDigest'
    const SignedDigest& aSignedDigest, Input aSubjectPublicKeyInfo) {
          ^
/build/firefox-99.0/security/certverifier/OCSPVerificationTrustDomain.cpp:74:11: error: unknown type name 'SignedDigest'
    const SignedDigest& aSignedDigest, Input aSubjectPublicKeyInfo) {
          ^

https://github.com/NixOS/nixpkgs/pull/164511#issuecomment-1089496003
2022-04-06 18:09:45 +02:00
ajs124 eb9c616c79 nss_latest: 3.76.1 -> 3.77 2022-04-03 13:14:08 +01:00
ajs124 faee35ce35 nss_latest: 3.76 -> 3.76.1 2022-04-03 13:14:08 +01:00
ajs124 9109742c6b nss: add maintainers 2022-04-03 13:14:07 +01:00
ajs124 44f241f69a nss: split into nss_latest and nss_esr 2022-04-03 13:14:07 +01:00
ajs124 4e0daeeee4 nss: 3.75 -> 3.76
https://github.com/nss-dev/nss/blob/master/doc/rst/releases/nss_3_76.rst
2022-03-14 18:23:34 +01:00
ajs124 de76433f54 nss: 3.74 -> 3.75 2022-02-04 00:52:14 +01:00
ajs124 da28ed7df0 nss: 3.73.1 -> 3.74 2022-01-06 22:25:53 +01:00
R. RyanTM 8a4345ee0d
nss: 3.73 -> 3.73.1 (#151041) 2021-12-25 16:56:14 -05:00
Léo Gaspard ee36cb7d2c
nss: 3.72 -> 3.73 (#148219)
Update done by running the `nss` and `cacert` update scripts, then
running nixpkgs-check to validate things look good enough to be thrown
at hydra
2021-12-02 01:24:35 +01:00
Vladimír Čunát a4f105791c
Merge #144218: nss: 3.71 -> 3.72 (into staging) 2021-11-15 22:28:32 +01:00
Martin Weinelt dff515718d
nss_3_53: drop 2021-11-02 14:41:05 +01:00
R. Ryantm f0b1f93f1d nss: 3.71 -> 3.72 2021-11-02 09:44:16 +00:00
Martin Weinelt adf4e67dd4 Merge remote-tracking branch 'origin/staging' into staging-next 2021-10-15 01:34:36 +02:00
Alyssa Ross 851b719ac6 treewide: use stdenv.hostPlatform.extensions.sharedLibrary where appropriate 2021-10-13 17:39:37 +00:00
ajs124 c47854697c nss: 3.70 -> 3.71 2021-09-30 21:16:07 +02:00
Tim Steinbach b558d1552b nss: Add updateScript 2021-09-16 09:33:38 -04:00
Tim Steinbach e079a9b46d nss: 3.68 -> 3.70 2021-09-09 08:37:00 -04:00
Sandro Jäckel d7a6dc0bb9
nss: format, cleanup 2021-08-10 13:01:51 +02:00
Sandro Jäckel 4b84c7a0c8
nss: format, cleanup 2021-08-10 13:01:37 +02:00
github-actions[bot] 08a8809bfe
Merge staging-next into staging 2021-07-18 00:02:06 +00:00
Felix Buehler e023025ee0 various: cleanup of "inherit version;" 2021-07-17 22:39:35 +02:00
ajs124 04bc2667d1 nss: 3.67 -> 3.68 2021-07-12 16:52:41 +02:00
ajs124 1128dadcd8 nss: 3.66 -> 3.67 2021-06-14 16:28:39 +02:00
Martin Weinelt b70b74f52a
Merge pull request #125280 from zhaofengli/nss-use-64
nss: Set NSS_USE_64=1 for 64-bit platforms
2021-06-02 00:32:04 +02:00
ajs124 db82e8c2e2 nss: 3.64 -> 3.66 2021-06-01 23:10:39 +02:00
Zhaofeng Li 345e777888 nss: Set NSS_USE_64=1 for 64-bit platforms
The config script does that automatically for a few architectures [1],
but on 64-bit platforms that are not listed (like riscv64) the
freebl build fails. Debian always adds the USE_64=1 flag when
compiling on 64-bit architectures (they use legacy make instead of gyp),
and we should do that as well to fix the general problem at the cost of
a mass rebuild.

[1] 0ef2306a62/coreconf/config.gypi (l212)
[2] c446c61808/debian/rules (L66)
2021-06-01 12:23:41 -07:00