[pkgsrc/trunk]: pkgsrc/devel/nss Update to 3.46

[ryoon <ryoon%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/bc32820d6ee2
branches:  trunk
changeset: 400848:bc32820d6ee2
user:      ryoon <ryoon%pkgsrc.org@localhost>
date:      Fri Sep 06 02:54:47 2019 +0000

description:
Update to 3.46

Changelog:
Notable Changes:
 * The following CA certificates were Removed:
  - 1574670 - Remove expired Class 2 Primary root certificate
  - 1574670 - Remove expired UTN-USERFirst-Client root certificat
  - 1574670 - Remove expired Deutsche Telekom Root CA 2 root certificate
  - 1566569 - Remove Swisscom Root CA 2 root certificate
 * Significant improvements to AES-GCM performance on ARM

Bugs fixed in NSS 3.46:

 * 1572164 - Don't unnecessarily free session in NSC_WrapKey
 * 1574220 - Improve controls after errors in tstcln, selfserv and vfyserv
cmds
 * 1550636 - Upgrade SQLite in NSS to a 2019 version
 * 1572593 - Reset advertised extensions in ssl_ConstructExtensions
 * 1415118 - NSS build with ./build.sh --enable-libpkix fails
 * 1539788 - Add length checks for cryptographic primitives
 * 1542077 - mp_set_ulong and mp_set_int should return errors on bad values
 * 1572791 - Read out-of-bounds in DER_DecodeTimeChoice_Util from
SSLExp_DelegateCredential
 * 1560593 - Cleanup.sh script does not set error exit code for tests that
"Failed with core"
 * 1566601 - Add Wycheproof test vectors for AES-KW
 * 1571316 - curve25519_32.c:280: undefined reference to `PR_Assert' when
building NSS 3.45 on armhf-linux
 * 1516593 - Client to generate new random during renegotiation
 * 1563258 - fips.sh fails due to non-existent "resp" directories
 * 1561598 - Remove -Wmaybe-uninitialized warning in pqg.c
 * 1560806 - Increase softoken password max size to 500 characters
 * 1568776 - Output paths relative to repository in NSS coverity
 * 1453408 - modutil -changepw fails in FIPS mode if password is an empty
string
 * 1564727 - Use a PSS SPKI when possible for delegated credentials
 * 1493916 - fix ppc64 inline assembler for clang
 * 1561588 - Remove -Wmaybe-uninitialized warning in p7env.c
 * 1561548 - Remove -Wmaybe-uninitialized warning in
pkix_pl_ldapdefaultclient.c
 * 1512605 - Incorrect alert description after unencrypted Finished msg
 * 1564715 - Read /proc/cpuinfo when AT_HWCAP2 returns 0
 * 1532194 - Remove or fix -DDEBUG_$USER from make builds
 * 1565577 - Visual Studio's cl.exe -? hangs on Windows x64 when building nss
since changeset 9162c654d06915f0f15948fbf67d4103a229226f
 * 1564875 - Improve rebuilding with build.sh
 * 1565243 - Support TC_OWNER without email address in nss taskgraph
 * 1563778 - Increase maxRunTime on Mac taskcluster Tools, SSL tests
 * 1561591 - Remove -Wmaybe-uninitialized warning in tstclnt.c
 * 1561587 - Remove -Wmaybe-uninitialized warning in lgattr.c
 * 1561558 - Remove -Wmaybe-uninitialized warning in httpserv.c
 * 1561556 - Remove -Wmaybe-uninitialized warning in tls13esni.c
 * 1561332 - ec.c:28 warning: comparison of integers of different signs: 'int'
and 'unsigned long'
 * 1564714 - Print certutil commands during setup
 * 1565013 - HACL image builder times out while fetching gpg key
 * 1563786 - Update hacl-star docker image to pull specific commit
 * 1559012 - Improve GCM perfomance using PMULL2
 * 1528666 - Correct resumption validation checks
 * 1568803 - More tests for client certificate authentication
 * 1564284 - Support profile mobility across Windows and Linux
 * 1573942 - Gtest for pkcs11.txt with different breaking line formats
 * 1575968 - Add strsclnt option to enforce the use of either IPv4 or IPv6
 * 1549847 - Fix NSS builds on iOS
 * 1485533 - Enable NSS_SSL_TESTS on taskcluster

diffstat:

 devel/nss/Makefile                       |   5 ++---
 devel/nss/distinfo                       |  12 ++++++------
 devel/nss/patches/patch-nss_tests_all.sh |  10 +++++-----
 3 files changed, 13 insertions(+), 14 deletions(-)

diffs (68 lines):

diff -r 39de605fec28 -r bc32820d6ee2 devel/nss/Makefile
--- a/devel/nss/Makefile        Fri Sep 06 02:53:54 2019 +0000
+++ b/devel/nss/Makefile        Fri Sep 06 02:54:47 2019 +0000
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.171 2019/08/11 13:18:47 wiz Exp $
+# $NetBSD: Makefile,v 1.172 2019/09/06 02:54:47 ryoon Exp $
 
 DISTNAME=              nss-${NSS_RELEASE:S/.0$//}
-NSS_RELEASE=           3.45.0
-PKGREVISION=           1
+NSS_RELEASE=           3.46.0
 CATEGORIES=            security
 MASTER_SITES=          ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/}
 
diff -r 39de605fec28 -r bc32820d6ee2 devel/nss/distinfo
--- a/devel/nss/distinfo        Fri Sep 06 02:53:54 2019 +0000
+++ b/devel/nss/distinfo        Fri Sep 06 02:54:47 2019 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.98 2019/07/30 12:18:43 ryoon Exp $
+$NetBSD: distinfo,v 1.99 2019/09/06 02:54:47 ryoon Exp $
 
-SHA1 (nss-3.45.tar.gz) = bfbb1b7b429c4dbe649ded90f73ec9dac6cd54b8
-RMD160 (nss-3.45.tar.gz) = 610ee052bdcba83f1d5d47c8fa20bb9947c820fa
-SHA512 (nss-3.45.tar.gz) = 33360a1bb4e0a0a974070c354ee82c515d5cfa2a12c9c96817a9fdb3e4ca1ad62eb95886b9b0d60e2f69efda964376d0671c1e3c920b2ea614aeecb719c6ff29
-Size (nss-3.45.tar.gz) = 76017462 bytes
+SHA1 (nss-3.46.tar.gz) = af1590286cf852702591e5db0ef1ba7b9c1e597c
+RMD160 (nss-3.46.tar.gz) = 4950f21faeaa0783458b0344056a11e400639e7d
+SHA512 (nss-3.46.tar.gz) = de309ec8d6aa2c3cf4d5ebfe9fa1f8bf5def717d22018d5c88c1de963b4ae7b0d69ad64e68d830574fc85613483fd538cb2f319ffb3fa2e1b97ec02f85d37c48
+Size (nss-3.46.tar.gz) = 76417155 bytes
 SHA1 (patch-am) = fea682bf03bc8b645049f93ed58554ca45f47aca
 SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69
 SHA1 (patch-md) = 8547c9414332c02221b96719dea1e09cb741f4d1
@@ -18,6 +18,6 @@
 SHA1 (patch-nss_coreconf_command.mk) = 008f7670f164bf19555a7691f5a59fc8bf687078
 SHA1 (patch-nss_lib_freebl_md5.c) = 5cbec40695e296f0713895fb85cd37f6df76b85b
 SHA1 (patch-nss_lib_util_utilpars.c) = 5d3000515b01037929730a752b7d7a0f46f06deb
-SHA1 (patch-nss_tests_all.sh) = f8d0fcfcd67dca757c9ce016660210b20b1e6e8f
+SHA1 (patch-nss_tests_all.sh) = b328778b538db66f5447f962f23afd6f650f7071
 SHA1 (patch-nss_tests_merge_merge.sh) = 42a4866d226b1076740ba9a5e42c7604f2cb15a7
 SHA1 (patch-security_nss_cmd_shlibsign_sign.sh) = 7948b7b502a4c148ee185836dde8a84d3aa388af
diff -r 39de605fec28 -r bc32820d6ee2 devel/nss/patches/patch-nss_tests_all.sh
--- a/devel/nss/patches/patch-nss_tests_all.sh  Fri Sep 06 02:53:54 2019 +0000
+++ b/devel/nss/patches/patch-nss_tests_all.sh  Fri Sep 06 02:54:47 2019 +0000
@@ -1,10 +1,10 @@
-$NetBSD: patch-nss_tests_all.sh,v 1.1 2018/02/24 11:35:48 ryoon Exp $
+$NetBSD: patch-nss_tests_all.sh,v 1.2 2019/09/06 02:54:47 ryoon Exp $
 
 Revert Bug 1377940 to fix misc/libreoffice
 
---- nss/tests/all.sh.orig      2018-01-18 14:19:59.000000000 +0000
+--- nss/tests/all.sh.orig      2019-08-30 15:46:32.000000000 +0000
 +++ nss/tests/all.sh
-@@ -111,8 +111,6 @@ RUN_FIPS=""
+@@ -114,8 +114,6 @@ RUN_FIPS=""
  ########################################################################
  run_tests()
  {
@@ -13,8 +13,8 @@
      for TEST in ${TESTS}
      do
          # NOTE: the spaces are important. If you don't include
-@@ -174,9 +172,8 @@ run_cycle_pkix()
-     NSS_SSL_TESTS=`echo "${NSS_SSL_TESTS}" | sed -e "s/normal//g" -e "s/fips//g" -e "s/_//g"`
+@@ -173,9 +171,8 @@ run_cycle_pkix()
+ 
      export -n NSS_SSL_RUN
  
 -    # use the default format. (unset for the shell, export -n for binaries)