[pkgsrc/trunk]: pkgsrc/devel/nss Update to 3.41

[ryoon <ryoon%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/eb6bd3aa36db
branches:  trunk
changeset: 316411:eb6bd3aa36db
user:      ryoon <ryoon%pkgsrc.org@localhost>
date:      Wed Dec 12 14:02:01 2018 +0000

description:
Update to 3.41

New functionality:
* Bug 1252891 - Implemented EKU handling for IPsec IKE.
* Bug 1423043 - Enable half-closed states for TLS.
* Bug 1493215 - Enabled the following ciphersuites by default:
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384

Notable changes:
* The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root

* The following CA certificates were removed:
    CN = AC Ra?z Certic?mara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3

Bugs fixed in NSS 3.41:
* Bug 1412829, Reject empty supported_signature_algorithms in Certificate
  Request in TLS 1.2
* Bug 1485864 - Cache side-channel variant of the Bleichenbacher attack
  (CVE-2018-12404)
* Bug 1481271 - Resend the same ticket in ClientHello after HelloRetryRequest
* Bug 1493769 - Set session_id for external resumption tokens
* Bug 1507179 - Reject CCS after handshake is complete in TLS 1.3

diffstat:

 devel/nss/Makefile |   5 ++---
 devel/nss/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 8 deletions(-)

diffs (32 lines):

diff -r ce586cd3537d -r eb6bd3aa36db devel/nss/Makefile
--- a/devel/nss/Makefile        Wed Dec 12 12:55:33 2018 +0000
+++ b/devel/nss/Makefile        Wed Dec 12 14:02:01 2018 +0000
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.160 2018/12/09 18:52:24 adam Exp $
+# $NetBSD: Makefile,v 1.161 2018/12/12 14:02:01 ryoon Exp $
 
 DISTNAME=              nss-${NSS_RELEASE:S/.0$//}
-NSS_RELEASE=           3.40.0
-PKGREVISION=           1
+NSS_RELEASE=           3.41.0
 CATEGORIES=            security
 MASTER_SITES=          ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/}
 
diff -r ce586cd3537d -r eb6bd3aa36db devel/nss/distinfo
--- a/devel/nss/distinfo        Wed Dec 12 12:55:33 2018 +0000
+++ b/devel/nss/distinfo        Wed Dec 12 14:02:01 2018 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.91 2018/11/04 00:33:27 ryoon Exp $
+$NetBSD: distinfo,v 1.92 2018/12/12 14:02:01 ryoon Exp $
 
-SHA1 (nss-3.40.tar.gz) = 735b8b15134cf84d730c19b0e2f891b0fd7b5e9d
-RMD160 (nss-3.40.tar.gz) = 77b06721a1563a5360ed984d26e78b2d58febaf9
-SHA512 (nss-3.40.tar.gz) = 3781c94595126757c95ea82c3134eb3f06f4c3814e9ed2bfceae22623a413d622349d08c6779e1230b2dbebd1f07aba58094fe83dcddebb3e043481e7a478239
-Size (nss-3.40.tar.gz) = 23308315 bytes
+SHA1 (nss-3.41.tar.gz) = 69c60e8d3190573dbcbc01f50e68e3ceb7d92522
+RMD160 (nss-3.41.tar.gz) = 5e095b56c8e5f17d9dda092305f2ae19dbd16b47
+SHA512 (nss-3.41.tar.gz) = b5a43fe86ded664002fd714c493d9222a64539cd6139b64720625d1742fec5100712cbe401c90c79196e9cbad9ec07d9b4f0f517ce34e4b207beaa3e01c9e114
+Size (nss-3.41.tar.gz) = 23319563 bytes
 SHA1 (patch-am) = bab47640c0d25629f43578e7b788859418b27ecd
 SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69
 SHA1 (patch-md) = 8547c9414332c02221b96719dea1e09cb741f4d1