[pkgsrc/trunk]: pkgsrc/devel/nss Update to 3.31

[ryoon <ryoon%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/3c2b3ab102a5
branches:  trunk
changeset: 363655:3c2b3ab102a5
user:      ryoon <ryoon%pkgsrc.org@localhost>
date:      Wed Jun 14 11:18:55 2017 +0000

description:
Update to 3.31

Changelog:
New functionality:
==================
* Allow certificates to be specified by RFC7512 PKCS#11 URIs.
* Allow querying a certificate object for its temporary or permanent storage
? status in a thread safe way.

New Functions:
==============
* CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
? certificate in a thread safe way.
* CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
? certificate in a thread safe way.
* PK11_FindCertFromURI - find a certificate identified by the given URI.
* PK11_FindCertsFromURI - find a list of certificates identified by the given
? URI.
* PK11_GetModuleURI - retrieve the URI of the given module.
* PK11_GetTokenURI - retrieve the URI of a token based on the given slot
? information.
* PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
* PK11URI_DestroyURI - destroy a PK11URI object.
* PK11URI_FormatURI - format a PK11URI object to a string.
* PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
* PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
* PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.

New Macros:
===========
* Several new macros that start with PK11URI_PATTR_ for path attributes defined
? in RFC7512.
* Several new macros that start with PK11URI_QATTR_ for query attributes defined
? in RFC7512.

Notable Changes:
================
* The APIs that set a TLS version range have been changed to trim the requested
? range to the overlap with a systemwide crypto policy, if configured.
? SSL_VersionRangeGetSupported can be used to query the overlap between the
? library's supported range of TLS versions and the systemwide policy.
* Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
? failure if the requested version range wasn't fully allowed by the systemwide
? crypto policy. They have been changed to return success, if at least one TLS
? version overlaps between the requested range and the systemwide policy. An
? application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
? query the TLS version range that was effectively activated.
* Corrected the encoding of Domain Name Constraints extensions created by
? certutil.
* NSS supports a clean seeding mechanism for *NIX systems now using only
? /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
? time.
* CERT_AsciiToName can handle OIDs in dotted decimal form now.

The HG tag is NSS_3_31_RTM. NSS 3.31 requires NSPR 4.15 or newer.

diffstat:

 devel/nss/Makefile |   4 ++--
 devel/nss/PLIST    |  19 ++++++++++---------
 devel/nss/distinfo |  10 +++++-----
 3 files changed, 17 insertions(+), 16 deletions(-)

diffs (69 lines):

diff -r f84bf64aca56 -r 3c2b3ab102a5 devel/nss/Makefile
--- a/devel/nss/Makefile        Wed Jun 14 10:27:31 2017 +0000
+++ b/devel/nss/Makefile        Wed Jun 14 11:18:55 2017 +0000
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.135 2017/04/27 01:47:21 ryoon Exp $
+# $NetBSD: Makefile,v 1.136 2017/06/14 11:18:55 ryoon Exp $
 
 DISTNAME=              nss-${NSS_RELEASE:S/.0$//}
-NSS_RELEASE=           3.30.2
+NSS_RELEASE=           3.31.0
 CATEGORIES=            security
 MASTER_SITES=          ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/}
 
diff -r f84bf64aca56 -r 3c2b3ab102a5 devel/nss/PLIST
--- a/devel/nss/PLIST   Wed Jun 14 10:27:31 2017 +0000
+++ b/devel/nss/PLIST   Wed Jun 14 11:18:55 2017 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.21 2017/02/05 02:41:13 ryoon Exp $
+@comment $NetBSD: PLIST,v 1.22 2017/06/14 11:18:55 ryoon Exp $
 bin/certcgi
 bin/certutil
 bin/cmsutil
@@ -91,6 +91,7 @@
 include/nss/nss/pkcs11p.h
 include/nss/nss/pkcs11t.h
 include/nss/nss/pkcs11u.h
+include/nss/nss/pkcs11uri.h
 include/nss/nss/pkcs12.h
 include/nss/nss/pkcs12t.h
 include/nss/nss/pkcs1sig.h
@@ -126,12 +127,12 @@
 include/nss/nss/utilparst.h
 include/nss/nss/utilrename.h
 lib/nss/libcrmf.a
-lib/nss/libfreebl3.${SO_SUFFIX}
-lib/nss/libnss3.${SO_SUFFIX}
-lib/nss/libnssckbi.${SO_SUFFIX}
-lib/nss/libnssdbm3.${SO_SUFFIX}
-lib/nss/libnssutil3.${SO_SUFFIX}
-lib/nss/libsmime3.${SO_SUFFIX}
-lib/nss/libsoftokn3.${SO_SUFFIX}
-lib/nss/libssl3.${SO_SUFFIX}
+lib/nss/libfreebl3.so
+lib/nss/libnss3.so
+lib/nss/libnssckbi.so
+lib/nss/libnssdbm3.so
+lib/nss/libnssutil3.so
+lib/nss/libsmime3.so
+lib/nss/libsoftokn3.so
+lib/nss/libssl3.so
 lib/pkgconfig/nss.pc
diff -r f84bf64aca56 -r 3c2b3ab102a5 devel/nss/distinfo
--- a/devel/nss/distinfo        Wed Jun 14 10:27:31 2017 +0000
+++ b/devel/nss/distinfo        Wed Jun 14 11:18:55 2017 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.73 2017/04/27 01:47:21 ryoon Exp $
+$NetBSD: distinfo,v 1.74 2017/06/14 11:18:55 ryoon Exp $
 
-SHA1 (nss-3.30.2.tar.gz) = e8ceea087e2ab2d53ffe156d8641007abad2b13f
-RMD160 (nss-3.30.2.tar.gz) = 2960cfce2c133a6066df7cd9c6f279232c0f0f68
-SHA512 (nss-3.30.2.tar.gz) = 02f14bc000cbde42268c4b6f42df80680b010d1491643ef9b11e0bac31a286a2e7fa251c40cb4ac70b64883a1b90efc64440ef9d797357f8a47cd37195fc5500
-Size (nss-3.30.2.tar.gz) = 9499119 bytes
+SHA1 (nss-3.31.tar.gz) = 006a13a5e52867c49ea1e7d986b7c02a3cd8ebfb
+RMD160 (nss-3.31.tar.gz) = ddfee55651c172c84986098d8c86e61e5cf5e851
+SHA512 (nss-3.31.tar.gz) = 2b56405b32d37cc4386cbbe54462cc57092e47b3418a743adbae14e1825ca69d07256fbfe16c0cfd7540c46cea67259151b42a0d95419c80964015eacdcafea1
+Size (nss-3.31.tar.gz) = 9537011 bytes
 SHA1 (patch-am) = bab47640c0d25629f43578e7b788859418b27ecd
 SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69
 SHA1 (patch-md) = 0a09fd2abb8674a2d301f1b6a5331af5db94178f