[pkgsrc/trunk]: pkgsrc/devel/nss Update to 3.39

[ryoon <ryoon%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/90362813dbd2
branches:  trunk
changeset: 384895:90362813dbd2
user:      ryoon <ryoon%pkgsrc.org@localhost>
date:      Wed Sep 05 15:19:03 2018 +0000

description:
Update to 3.39

Changelog:
Notable bug fixes:
* Bug 1483128 - NSS responded to an SSLv2-compatible ClientHello
  with a ServerHello that had an all-zero random (CVE-2018-12384)

New functionality:
* The tstclnt and selfserv utilities added support for configuring
  the enabled TLS signature schemes using the -J parameter.
* NSS will use RSA-PSS keys to authenticate in TLS. Support for
  these keys is disabled by default but can be enabled using
  SSL_SignatureSchemePrefSet().
* certutil added the ability to delete an orphan private key from
  an NSS key database.
* Added the nss-policy-check utility, which can be used to check
  an NSS policy configuration for problems.
* A PKCS#11 URI can be used as an identifier for a PKCS#11 token.

Notable changes:
* The TLS 1.3 implementation uses the final version number from
  RFC 8446.
* Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
  where the DigestInfo structure was missing the NULL parameter.
  Starting with version 3.39, NSS requires the encoding to contain
  the NULL parameter.
* The tstclnt and selfserv test utilities no longer accept the -z
  parameter, as support for TLS compression was removed in a
  previous NSS version.
* The CA certificates list was updated to version 2.26.
* The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  The following CA certificate was Removed:
  - CN = ComSign
  The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3

diffstat:

 devel/nss/Makefile |   5 ++---
 devel/nss/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 8 deletions(-)

diffs (32 lines):

diff -r 594829ca6a02 -r 90362813dbd2 devel/nss/Makefile
--- a/devel/nss/Makefile        Wed Sep 05 14:39:13 2018 +0000
+++ b/devel/nss/Makefile        Wed Sep 05 15:19:03 2018 +0000
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.156 2018/08/22 09:43:33 wiz Exp $
+# $NetBSD: Makefile,v 1.157 2018/09/05 15:19:03 ryoon Exp $
 
 DISTNAME=              nss-${NSS_RELEASE:S/.0$//}
-NSS_RELEASE=           3.37.3
-PKGREVISION=           2
+NSS_RELEASE=           3.39.0
 CATEGORIES=            security
 MASTER_SITES=          ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/}
 
diff -r 594829ca6a02 -r 90362813dbd2 devel/nss/distinfo
--- a/devel/nss/distinfo        Wed Sep 05 14:39:13 2018 +0000
+++ b/devel/nss/distinfo        Wed Sep 05 15:19:03 2018 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.89 2018/06/07 19:04:59 ryoon Exp $
+$NetBSD: distinfo,v 1.90 2018/09/05 15:19:03 ryoon Exp $
 
-SHA1 (nss-3.37.3.tar.gz) = 8bef50b806fee13da9133cd12c2608685c4ed916
-RMD160 (nss-3.37.3.tar.gz) = 5881c09b9a5b36f066925ffe0009b7a85ab2e34b
-SHA512 (nss-3.37.3.tar.gz) = 11b21818f9fcff11d0e7f4c066ae9fbce0052a30a6b30df9a20022792039b5348554834a472e1b1195e467b9902067f9719678d5ca32efb4e60f1df161feed6f
-Size (nss-3.37.3.tar.gz) = 23034239 bytes
+SHA1 (nss-3.39.tar.gz) = 351e0e9607ead50174efe5f5107e2dc97e7358f2
+RMD160 (nss-3.39.tar.gz) = 84a0a74fc8666cbfba370c7ce5fa69e27863a04e
+SHA512 (nss-3.39.tar.gz) = 16358c2d8660ca301410b1d39b2eae64fe2ebbbfab797872410e5fcc67f802ef48f4e362edeecb0591626c77013537019094a6a5dfc8d24487b6b6e54564da8f
+Size (nss-3.39.tar.gz) = 23048561 bytes
 SHA1 (patch-am) = bab47640c0d25629f43578e7b788859418b27ecd
 SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69
 SHA1 (patch-md) = 8547c9414332c02221b96719dea1e09cb741f4d1