CVS commit: pkgsrc/devel/nss

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Fri Sep 12 07:26:08 UTC 2025

Modified Files:
        pkgsrc/devel/nss: Makefile PLIST distinfo

Log Message:
nss: update to 3.116.

   - Bug 1983308 - disable DSA in NSS script tests.
   - Bug 1983308 - Disabling of some algorithms: generic cert.sh.
   - Bug 1981046 - Need to update to new mechanisms.
   - Bug 1983320 - Add ML-DSA public key printing support in NSS command-line utilities.
   - Bug 1986802 - note embedded scts before revocation checks are performed.
   - Bug 1983320 - Add support for ML-DSA keys and mechanisms in PKCS#11 interface.
   - Bug 1983320 - Add support for ML-DSA key type and public key structure.
   - Bug 1983320 - Enable ML-DSA integration via OIDs support and SECMOD flag.
   - Bug 1983308 - disable kyber.
   - Bug 1965329 - Implement PKCS #11 v3.2 PQ functions (use verify signature).
   - Bug 1983308 - Disable dsa - gtests.
   - Bug 1983313 - make group and scheme support in test tools generic.
   - Bug 1983770 - Create GH workflow to automatically close PRs.
   - Bug 1983308 - Disable dsa - base code.
   - Bug 1983308 - Disabling of some algorithms: remove dsa from pk11_mode.
   - Bug 1983308 - Disable seed and RC2 bug fixes.
   - Bug 1982742 - restore support for finding certificates by decoded serial number.
   - Bug 1984165 - avoid CKR_BUFFER_TO_SMALL error in trust lookups.
   - Bug 1983399 - lib/softtoken/{sdb.c,sftkdbti.h}: Align sftkdb_known_attributes_size type.
   - Bug 1965329 - Use PKCS #11 v3.2 KEM mechanisms and functions.


To generate a diff of this commit:
cvs rdiff -u -r1.282 -r1.283 pkgsrc/devel/nss/Makefile
cvs rdiff -u -r1.29 -r1.30 pkgsrc/devel/nss/PLIST
cvs rdiff -u -r1.196 -r1.197 pkgsrc/devel/nss/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/nss/Makefile
diff -u pkgsrc/devel/nss/Makefile:1.282 pkgsrc/devel/nss/Makefile:1.283
--- pkgsrc/devel/nss/Makefile:1.282     Fri Aug 22 07:20:54 2025
+++ pkgsrc/devel/nss/Makefile   Fri Sep 12 07:26:08 2025
@@ -1,10 +1,10 @@
-# $NetBSD: Makefile,v 1.282 2025/08/22 07:20:54 wiz Exp $
+# $NetBSD: Makefile,v 1.283 2025/09/12 07:26:08 wiz Exp $
 #
 # release notes
 # https://firefox-source-docs.mozilla.org/security/nss/releases/index.html
 
 DISTNAME=              nss-${NSS_RELEASE:S/.0$//}
-NSS_RELEASE=           3.115.1
+NSS_RELEASE=           3.116.0
 CATEGORIES=            devel security
 MASTER_SITES=          ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/}
 

Index: pkgsrc/devel/nss/PLIST
diff -u pkgsrc/devel/nss/PLIST:1.29 pkgsrc/devel/nss/PLIST:1.30
--- pkgsrc/devel/nss/PLIST:1.29 Mon Jun 10 14:52:33 2024
+++ pkgsrc/devel/nss/PLIST      Fri Sep 12 07:26:08 2025
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.29 2024/06/10 14:52:33 wiz Exp $
+@comment $NetBSD: PLIST,v 1.30 2025/09/12 07:26:08 wiz Exp $
 bin/certutil
 bin/cmsutil
 bin/crlutil
@@ -51,6 +51,7 @@ include/nss/keythi.h
 include/nss/kyber.h
 include/nss/lowkeyi.h
 include/nss/lowkeyti.h
+include/nss/ml_dsat.h
 include/nss/nss.h
 include/nss/nssb64.h
 include/nss/nssb64t.h

Index: pkgsrc/devel/nss/distinfo
diff -u pkgsrc/devel/nss/distinfo:1.196 pkgsrc/devel/nss/distinfo:1.197
--- pkgsrc/devel/nss/distinfo:1.196     Fri Aug 22 07:20:54 2025
+++ pkgsrc/devel/nss/distinfo   Fri Sep 12 07:26:08 2025
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.196 2025/08/22 07:20:54 wiz Exp $
+$NetBSD: distinfo,v 1.197 2025/09/12 07:26:08 wiz Exp $
 
-BLAKE2s (nss-3.115.1.tar.gz) = 97009d55461fa9a32330502a2d251e9965911fb5d8d94b2dc663e24317fb3145
-SHA512 (nss-3.115.1.tar.gz) = c75ab9bdddeda40d0e50837f47539b370b342216aeabf82614285485b50461600623e9a506e6026cf0928f6b0ada05a02ac1a060fca7938049b3471ac418a008
-Size (nss-3.115.1.tar.gz) = 76656855 bytes
+BLAKE2s (nss-3.116.tar.gz) = 14c32dd7c5b46fcd8f0221236a25ce83b1aaef9aa32959e18f4b1d2fcf1a7774
+SHA512 (nss-3.116.tar.gz) = 35ce4d077b733bb27a235583a27d085a988e0ac09a8390ce482e037c2fd5724a39044e01865d9a78632bd23fe26db0f5508dc27dc7640b2713c784ce8533639f
+Size (nss-3.116.tar.gz) = 76661970 bytes
 SHA1 (patch-md) = 8547c9414332c02221b96719dea1e09cb741f4d1
 SHA1 (patch-me) = ffb5f119764c158c0bd789bd18fc77c61f2e9d2b
 SHA1 (patch-mf) = 40e58385fb6f944f463bf00b9aad72bc4ea229d0