CVS commit: pkgsrc/devel/nss

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Fri Mar 22 15:50:34 UTC 2019

Modified Files:
        pkgsrc/devel/nss: Makefile distinfo

Log Message:
Update to 3.43

Changelog:
New Functionality:
 * in sechash.h
    HASH_GetHashOidTagByHashType - convert type HASH_HashType to type
SECOidTag

 * in sslexp.h
    SSL_SendCertificateRequest - allow server to request post-handshake client
    authentication. To use this both peers need to enable the
    SSL_ENABLE_POST_HANDSHAKE_AUTH option. Note that while the mechanism is
    present, post-handshake authentication is currently not TLS 1.3 compliant
    due to Bug 1532312

Notable changes:
 * The following CA certificates were Added:
  - CN = emSign Root CA - G1
    SHA-256 Fingerprint:
40F6AF0346A99AA1CD1D555A4E9CCE62C7F9634603EE406615833DC8C8D00367

  - CN = emSign ECC Root CA - G3
    SHA-256 Fingerprint:
86A1ECBA089C4A8D3BBE2734C612BA341D813E043CF9E8A862CD5C57A36BBE6B

  - CN = emSign Root CA - C1
    SHA-256 Fingerprint:
125609AA301DA0A249B97A8239CB6A34216F44DCAC9F3954B14292F2E8C8608F

  - CN = emSign ECC Root CA - C3
    SHA-256 Fingerprint:
BC4D809B15189D78DB3E1D8CF4F9726A795DA1643CA5F1358E1DDB0EDC0D7EB3

  - CN = Hongkong Post Root CA 3
    SHA-256 Fingerprint:
5A2FC03F0C83B090BBFA40604B0988446C7636183DF9846E17101A447FB8EFD6

Bugs fixed in NSS 3.43
 * Bug 1528669 and Bug 1529308 - Improve Gyp build system handling

 * Bug 1529950 and Bug 1521174 - Improve NSS S/MIME tests for Thunderbird

 * Bug 1530134 - If Docker isn't installed, try running a local clang-format
                 as a fallback

 * Bug 1531267 - Enable FIPS mode automatically if the system FIPS mode flag
                 is set

 * Bug 1528262 - Add a -J option to the strsclnt command to specify sigschemes

 * Bug 1513909 - Add manual for nss-policy-check

 * Bug 1531074 - Fix a deref after a null check in SECKEY_SetPublicValue

 * Bug 1517714 - Properly handle ESNI with HRR

 * Bug 1529813 - Expose HKDF-Expand-Label with mechanism

 * Bug 1535122 - Align TLS 1.3 HKDF trace levels

 * Bug 1530102 - Use getentropy on compatible versions of FreeBSD


To generate a diff of this commit:
cvs rdiff -u -r1.162 -r1.163 pkgsrc/devel/nss/Makefile
cvs rdiff -u -r1.93 -r1.94 pkgsrc/devel/nss/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/nss/Makefile
diff -u pkgsrc/devel/nss/Makefile:1.162 pkgsrc/devel/nss/Makefile:1.163
--- pkgsrc/devel/nss/Makefile:1.162     Tue Jan 29 13:07:36 2019
+++ pkgsrc/devel/nss/Makefile   Fri Mar 22 15:50:34 2019
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.162 2019/01/29 13:07:36 ryoon Exp $
+# $NetBSD: Makefile,v 1.163 2019/03/22 15:50:34 ryoon Exp $
 
 DISTNAME=              nss-${NSS_RELEASE:S/.0$//}
-NSS_RELEASE=           3.42.0
+NSS_RELEASE=           3.43.0
 CATEGORIES=            security
 MASTER_SITES=          ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/}
 

Index: pkgsrc/devel/nss/distinfo
diff -u pkgsrc/devel/nss/distinfo:1.93 pkgsrc/devel/nss/distinfo:1.94
--- pkgsrc/devel/nss/distinfo:1.93      Tue Jan 29 13:07:36 2019
+++ pkgsrc/devel/nss/distinfo   Fri Mar 22 15:50:34 2019
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.93 2019/01/29 13:07:36 ryoon Exp $
+$NetBSD: distinfo,v 1.94 2019/03/22 15:50:34 ryoon Exp $
 
-SHA1 (nss-3.42.tar.gz) = 3797c794d5ca67ca04b7701dacbfcfe73e6ac2df
-RMD160 (nss-3.42.tar.gz) = 4b288c0d772e0af863f47bbcf92dde0e16f7812c
-SHA512 (nss-3.42.tar.gz) = ad22f4b2672b4f29c7dd5544cbb642d3ec4b451137ffde4f608ff7b9826c762caa885f4802e1df291d2067a291aae9ffa1cf7298af96e1c6afa019fc7c3935bd
-Size (nss-3.42.tar.gz) = 23416008 bytes
+SHA1 (nss-3.43.tar.gz) = f7c6adc80aae41686e6238df8f0ac50d5388cf11
+RMD160 (nss-3.43.tar.gz) = f864e768542364b7fb2b7d727579f6ced82cf0a6
+SHA512 (nss-3.43.tar.gz) = e9dfba5bd6f68c5ab58fc7a6fa1b16a035be1b1b7c436cf787bdc99257c5f54c78d73d94d015bffd29420df19b2a2818166c68fe592dd7208ab5605344827fb5
+Size (nss-3.43.tar.gz) = 23466026 bytes
 SHA1 (patch-am) = bab47640c0d25629f43578e7b788859418b27ecd
 SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69
 SHA1 (patch-md) = 8547c9414332c02221b96719dea1e09cb741f4d1