CVS commit: pkgsrc/devel/nss

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Fri Feb 14 13:02:42 UTC 2020

Modified Files:
        pkgsrc/devel/nss: Makefile distinfo

Log Message:
nss: Update to 3.50

Changelog:
Notable Changes in NSS 3.50

* Verified primitives from HACL* were updated, bringing performance
improvements for several platforms.
  Note that Intel processors with SSE4 but without AVX are currently unable to
use the improved ChaCha20/Poly1305 due to a build issue; such platforms will
fall-back to less optimized algorithms. See Bug 1609569 for details.

* Updated DTLS 1.3 implementation to Draft-30. See Bug 1599514 for details.

* Added NIST SP800-108 KBKDF - PKCS#11 implementation. See Bug 1599603 for
details.

Bugs fixed in NSS 3.50

* Bug 1599514 - Update DTLS 1.3 implementation to Draft-30
* Bug 1603438 - Fix native tools build failure due to lack of zlib include dir
if external
* Bug 1599603 - NIST SP800-108 KBKDF - PKCS#11 implementation
* Bug 1606992 - Cache the most recent PBKDF1 password hash, to speed up
repeated SDR operations, important with the increased KDF iteration counts.
NSS 3.49.1 sped up PBKDF2 operations, though PBKDF1 operations are also
relevant for older NSS databases (also included in NSS 3.49.2)
* Bug 1608895 - Gyp builds on taskcluster broken by Setuptools v45.0.0 (for
lacking Python3)
* Bug 1574643 - Upgrade HACL* verified implementations of ChaCha20, Poly1305,
and 64-bit Curve25519
* Bug 1608327 - Two problems with NEON-specific code in freebl
* Bug 1575843 - Detect AArch64 CPU features on FreeBSD
* Bug 1607099 - Remove the buildbot configuration
* Bug 1585429 - Add more HKDF test vectors
* Bug 1573911 - Add more RSA test vectors
* Bug 1605314 - Compare all 8 bytes of an mp_digit when clamping in Windows
assembly/mp_comba
* Bug 1604596 - Update Wycheproof vectors and add support for CBC, P256-ECDH,
and CMAC tests
* Bug 1608493 - Use AES-NI for non-GCM AES ciphers on platforms with no
assembly-optimized implementation, such as macOS.
* Bug 1547639 - Update zlib in NSS to 1.2.11
* Bug 1609181 - Detect ARM (32-bit) CPU features on FreeBSD
* Bug 1602386 - Fix build on FreeBSD/powerpc*
* Bug 1608151 - Introduce NSS_DISABLE_ALTIVEC
* Bug 1612623 - Depend on NSPR 4.25
* Bug 1609673 - Fix a crash when NSS is compiled without libnssdbm support,
but the nssdbm shared object is available anyway.


To generate a diff of this commit:
cvs rdiff -u -r1.178 -r1.179 pkgsrc/devel/nss/Makefile
cvs rdiff -u -r1.106 -r1.107 pkgsrc/devel/nss/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/nss/Makefile
diff -u pkgsrc/devel/nss/Makefile:1.178 pkgsrc/devel/nss/Makefile:1.179
--- pkgsrc/devel/nss/Makefile:1.178     Wed Feb  5 03:31:58 2020
+++ pkgsrc/devel/nss/Makefile   Fri Feb 14 13:02:41 2020
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.178 2020/02/05 03:31:58 ryoon Exp $
+# $NetBSD: Makefile,v 1.179 2020/02/14 13:02:41 ryoon Exp $
 
 DISTNAME=              nss-${NSS_RELEASE:S/.0$//}
-NSS_RELEASE=           3.49.2
+NSS_RELEASE=           3.50.0
 CATEGORIES=            security
 MASTER_SITES=          ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/}
 
@@ -134,7 +134,7 @@ do-install:
 # For consistency of libxul.so link in www/firefox.
 BUILDLINK_API_DEPENDS.sqlite3+=        sqlite3>=3.8.4.2
 .include "../../databases/sqlite3/buildlink3.mk"
-BUILDLINK_API_DEPENDS.nspr+=   nspr>=4.24
+BUILDLINK_API_DEPENDS.nspr+=   nspr>=4.25
 .include "../../devel/nspr/buildlink3.mk"
 .include "../../devel/zlib/buildlink3.mk"
 .include "../../mk/pthread.buildlink3.mk"

Index: pkgsrc/devel/nss/distinfo
diff -u pkgsrc/devel/nss/distinfo:1.106 pkgsrc/devel/nss/distinfo:1.107
--- pkgsrc/devel/nss/distinfo:1.106     Wed Feb  5 03:31:58 2020
+++ pkgsrc/devel/nss/distinfo   Fri Feb 14 13:02:41 2020
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.106 2020/02/05 03:31:58 ryoon Exp $
+$NetBSD: distinfo,v 1.107 2020/02/14 13:02:41 ryoon Exp $
 
-SHA1 (nss-3.49.2.tar.gz) = 08858e0fe80f0bed02e9c7e190e6bb9c2a505b8b
-RMD160 (nss-3.49.2.tar.gz) = 399b135e79e881d7d0e9fc6a198f2d3f8d46d227
-SHA512 (nss-3.49.2.tar.gz) = fe0fe032db15853384a50b145dd6f3187a855109f0b81f1846312d33f8c628aededcbca4d199f974ae52530aec3f2312f80afbca3e5b97ed1ff96fcffafd2881
-Size (nss-3.49.2.tar.gz) = 76489641 bytes
+SHA1 (nss-3.50.tar.gz) = 2fac8885533587d662ae74e7d9fc77ad4b4b937d
+RMD160 (nss-3.50.tar.gz) = cb830b759bf52775361483a40de4bfd4d3e8dbeb
+SHA512 (nss-3.50.tar.gz) = d6bcaf8ad65b5a97c42cd6cbbc68add5c4b49db74b2debcedb2a007f72511ac0e9bd21fd2dec041bc1975cfc8af26a48450aa0d1b962f755931ab2ac45c795b1
+Size (nss-3.50.tar.gz) = 78041630 bytes
 SHA1 (patch-am) = fea682bf03bc8b645049f93ed58554ca45f47aca
 SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69
 SHA1 (patch-md) = 8547c9414332c02221b96719dea1e09cb741f4d1