mirror of
https://abf.rosa.ru/djam/nss.git
synced 2025-02-23 08:22:50 +00:00
Automatic import for version 3.12.11
This commit is contained in:
Rosa
commit
3756aac9ec
15 changed files with 9681 additions and 0 deletions
2
.abf.yml
Normal file
2
.abf.yml
Normal file
|
|
@ -0,0 +1,2 @@
|
|||
sources:
|
||||
"nss-3.12.11.tar.gz": 187ae83a8368512bb8729c206da2ed34db1725ad
|
||||
BIN
blank-cert8.db
Normal file
BIN
blank-cert8.db
Normal file
Binary file not shown.
BIN
blank-key3.db
Normal file
BIN
blank-key3.db
Normal file
Binary file not shown.
BIN
blank-secmod.db
Normal file
BIN
blank-secmod.db
Normal file
Binary file not shown.
7
certdata_empty.txt
Normal file
7
certdata_empty.txt
Normal file
|
|
@ -0,0 +1,7 @@
|
|||
CVS_ID "@(#) $RCSfile: certdata_empty.txt,v $ $Revision: 0 $ $Date: 2011/04/07 09:38:18 $"
|
||||
BEGINDATA
|
||||
CKA_CLASS CK_OBJECT_CLASS CKO_NETSCAPE_BUILTIN_ROOT_LIST
|
||||
CKA_TOKEN CK_BBOOL CK_TRUE
|
||||
CKA_PRIVATE CK_BBOOL CK_FALSE
|
||||
CKA_MODIFIABLE CK_BBOOL CK_FALSE
|
||||
CKA_LABEL UTF8 "Mozilla Builtin Roots"
|
||||
BIN
certificadoACRaiz.crt
Normal file
BIN
certificadoACRaiz.crt
Normal file
Binary file not shown.
8418
nss-3.12.11-new_certdata.txt_format.diff
Normal file
8418
nss-3.12.11-new_certdata.txt_format.diff
Normal file
File diff suppressed because it is too large
Load diff
|
|
@ -0,0 +1,186 @@
|
|||
diff -Naur nss-3.12.3/mozilla/security/nss/cmd/certcgi/certcgi.c nss-3.12.3.tpg/mozilla/security/nss/cmd/certcgi/certcgi.c
|
||||
--- nss-3.12.3/mozilla/security/nss/cmd/certcgi/certcgi.c 2008-02-16 01:17:40.000000000 +0000
|
||||
+++ nss-3.12.3.tpg/mozilla/security/nss/cmd/certcgi/certcgi.c 2009-05-30 17:24:44.000000000 +0000
|
||||
@@ -97,7 +97,7 @@
|
||||
error_out(char *error_string)
|
||||
{
|
||||
printf("Content-type: text/plain\n\n");
|
||||
- printf(error_string);
|
||||
+ printf("%s", error_string);
|
||||
fflush(stderr);
|
||||
fflush(stdout);
|
||||
exit(1);
|
||||
diff -Naur nss-3.12.3/mozilla/security/nss/cmd/certutil/keystuff.c nss-3.12.3.tpg/mozilla/security/nss/cmd/certutil/keystuff.c
|
||||
--- nss-3.12.3/mozilla/security/nss/cmd/certutil/keystuff.c 2009-02-19 04:24:41.000000000 +0000
|
||||
+++ nss-3.12.3.tpg/mozilla/security/nss/cmd/certutil/keystuff.c 2009-05-30 17:24:44.000000000 +0000
|
||||
@@ -95,7 +95,7 @@
|
||||
char meter[] = {
|
||||
"\r| |" };
|
||||
|
||||
-#define FPS fprintf(stderr,
|
||||
+#define FPS fprintf(stderr, "%s",
|
||||
FPS "\n");
|
||||
FPS "A random seed must be generated that will be used in the\n");
|
||||
FPS "creation of your key. One of the easiest ways to create a\n");
|
||||
diff -Naur nss-3.12.3/mozilla/security/nss/cmd/digest/digest.c nss-3.12.3.tpg/mozilla/security/nss/cmd/digest/digest.c
|
||||
--- nss-3.12.3/mozilla/security/nss/cmd/digest/digest.c 2004-10-07 04:13:50.000000000 +0000
|
||||
+++ nss-3.12.3.tpg/mozilla/security/nss/cmd/digest/digest.c 2009-05-30 17:24:44.000000000 +0000
|
||||
@@ -105,7 +105,7 @@
|
||||
"-t type");
|
||||
fprintf(stderr, "%-20s ", "");
|
||||
for (htype = HASH_AlgNULL + 1; htype < HASH_AlgTOTAL; htype++) {
|
||||
- fprintf(stderr, HashTypeToOID(htype)->desc);
|
||||
+ fprintf(stderr, "%s", HashTypeToOID(htype)->desc);
|
||||
if (htype == (HASH_AlgTOTAL - 2))
|
||||
fprintf(stderr, " or ");
|
||||
else if (htype != (HASH_AlgTOTAL - 1))
|
||||
diff -Naur nss-3.12.3/mozilla/security/nss/cmd/signver/pk7print.c nss-3.12.3.tpg/mozilla/security/nss/cmd/signver/pk7print.c
|
||||
--- nss-3.12.3/mozilla/security/nss/cmd/signver/pk7print.c 2008-10-06 23:37:54.000000000 +0000
|
||||
+++ nss-3.12.3.tpg/mozilla/security/nss/cmd/signver/pk7print.c 2009-05-30 17:24:44.000000000 +0000
|
||||
@@ -79,7 +79,7 @@
|
||||
{
|
||||
unsigned i;
|
||||
|
||||
- if (m) fprintf(out, m);
|
||||
+ if (m) fprintf(out, "%s", m);
|
||||
|
||||
for (i = 0; i < data->len; i++) {
|
||||
if (i < data->len - 1) {
|
||||
@@ -136,10 +136,10 @@
|
||||
{
|
||||
int rv;
|
||||
|
||||
- fprintf(out, m);
|
||||
+ fprintf(out, "%s", m);
|
||||
rv = sv_PrintTime(out, &v->notBefore, "notBefore=");
|
||||
if (rv) return rv;
|
||||
- fprintf(out, m);
|
||||
+ fprintf(out, "%s", m);
|
||||
sv_PrintTime(out, &v->notAfter, "notAfter=");
|
||||
return rv;
|
||||
}
|
||||
@@ -181,7 +181,7 @@
|
||||
int i;
|
||||
char om[100];
|
||||
|
||||
- fprintf(out, m);
|
||||
+ fprintf(out, "%s", m);
|
||||
|
||||
/*
|
||||
* XXX Make this smarter; look at the type field and then decode
|
||||
@@ -278,16 +278,16 @@
|
||||
SEC_PKCS7Attribute *attr;
|
||||
int iv;
|
||||
|
||||
- fprintf(out, m);
|
||||
+ fprintf(out, "%s", m);
|
||||
sv_PrintInteger(out, &(info->version), "version=");
|
||||
|
||||
- fprintf(out, m);
|
||||
+ fprintf(out, "%s", m);
|
||||
sv_PrintName(out, &(info->issuerAndSN->issuer), "issuerName=");
|
||||
- fprintf(out, m);
|
||||
+ fprintf(out, "%s", m);
|
||||
sv_PrintInteger(out, &(info->issuerAndSN->serialNumber),
|
||||
"serialNumber=");
|
||||
|
||||
- fprintf(out, m);
|
||||
+ fprintf(out, "%s", m);
|
||||
sv_PrintAlgorithmID(out, &(info->digestAlg), "digestAlgorithm=");
|
||||
|
||||
if (info->authAttr != NULL) {
|
||||
@@ -304,9 +304,9 @@
|
||||
}
|
||||
|
||||
/* Parse and display signature */
|
||||
- fprintf(out, m);
|
||||
+ fprintf(out, "%s", m);
|
||||
sv_PrintAlgorithmID(out, &(info->digestEncAlg), "digestEncryptionAlgorithm=");
|
||||
- fprintf(out, m);
|
||||
+ fprintf(out, "%s", m);
|
||||
sv_PrintAsHex(out, &(info->encDigest), "encryptedDigest=");
|
||||
|
||||
if (info->unAuthAttr != NULL) {
|
||||
@@ -326,22 +326,22 @@
|
||||
void
|
||||
sv_PrintRSAPublicKey(FILE *out, SECKEYPublicKey *pk, char *m)
|
||||
{
|
||||
- fprintf(out, m);
|
||||
+ fprintf(out, "%s", m);
|
||||
sv_PrintInteger(out, &pk->u.rsa.modulus, "modulus=");
|
||||
- fprintf(out, m);
|
||||
+ fprintf(out, "%s", m);
|
||||
sv_PrintInteger(out, &pk->u.rsa.publicExponent, "exponent=");
|
||||
}
|
||||
|
||||
void
|
||||
sv_PrintDSAPublicKey(FILE *out, SECKEYPublicKey *pk, char *m)
|
||||
{
|
||||
- fprintf(out, m);
|
||||
+ fprintf(out, "%s", m);
|
||||
sv_PrintInteger(out, &pk->u.dsa.params.prime, "prime=");
|
||||
- fprintf(out, m);
|
||||
+ fprintf(out, "%s", m);
|
||||
sv_PrintInteger(out, &pk->u.dsa.params.subPrime, "subprime=");
|
||||
- fprintf(out, m);
|
||||
+ fprintf(out, "%s", m);
|
||||
sv_PrintInteger(out, &pk->u.dsa.params.base, "base=");
|
||||
- fprintf(out, m);
|
||||
+ fprintf(out, "%s", m);
|
||||
sv_PrintInteger(out, &pk->u.dsa.publicValue, "publicValue=");
|
||||
}
|
||||
|
||||
@@ -432,7 +432,7 @@
|
||||
|
||||
oidTag = SECOID_FindOIDTag (&((*extensions)->id));
|
||||
|
||||
- fprintf(out, msg);
|
||||
+ fprintf(out, "%s", msg);
|
||||
tmpitem = &((*extensions)->value);
|
||||
if (oidTag == SEC_OID_X509_INVALID_DATE)
|
||||
sv_PrintInvalidDateExten (out, tmpitem,"invalidExt");
|
||||
@@ -458,13 +458,13 @@
|
||||
int iv;
|
||||
char om[100];
|
||||
|
||||
- fprintf(out, m);
|
||||
+ fprintf(out, "%s", m);
|
||||
sv_PrintAlgorithmID(out, &(crl->signatureAlg), "signatureAlgorithm=");
|
||||
- fprintf(out, m);
|
||||
+ fprintf(out, "%s", m);
|
||||
sv_PrintName(out, &(crl->name), "name=");
|
||||
- fprintf(out, m);
|
||||
+ fprintf(out, "%s", m);
|
||||
sv_PrintTime(out, &(crl->lastUpdate), "lastUpdate=");
|
||||
- fprintf(out, m);
|
||||
+ fprintf(out, "%s", m);
|
||||
sv_PrintTime(out, &(crl->nextUpdate), "nextUpdate=");
|
||||
|
||||
if (crl->entries != NULL) {
|
||||
@@ -563,10 +563,10 @@
|
||||
}
|
||||
|
||||
m[PORT_Strlen(m) - 5] = 0;
|
||||
- fprintf(out, m);
|
||||
+ fprintf(out, "%s", m);
|
||||
sv_PrintAlgorithmID(out, &sd->signatureAlgorithm, "signatureAlgorithm=");
|
||||
DER_ConvertBitString(&sd->signature);
|
||||
- fprintf(out, m);
|
||||
+ fprintf(out, "%s", m);
|
||||
sv_PrintAsHex(out, &sd->signature, "signature=");
|
||||
|
||||
PORT_FreeArena(arena, PR_FALSE);
|
||||
@@ -632,11 +632,11 @@
|
||||
iv = 0;
|
||||
while ((aCrl = src->crls[iv]) != NULL) {
|
||||
sprintf(om, "signedRevocationList[%d].", iv);
|
||||
- fprintf(out, om);
|
||||
+ fprintf("%s", out, om);
|
||||
sv_PrintAlgorithmID(out, &aCrl->signatureWrap.signatureAlgorithm,
|
||||
"signatureAlgorithm=");
|
||||
DER_ConvertBitString(&aCrl->signatureWrap.signature);
|
||||
- fprintf(out, om);
|
||||
+ fprintf("%s", out, om);
|
||||
sv_PrintAsHex(out, &aCrl->signatureWrap.signature, "signature=");
|
||||
sprintf(om, "certificateRevocationList[%d].", iv);
|
||||
sv_PrintCRLInfo(out, &aCrl->crl, om);
|
||||
137
nss-config.in
Normal file
137
nss-config.in
Normal file
|
|
@ -0,0 +1,137 @@
|
|||
#!/bin/sh
|
||||
|
||||
prefix=@prefix@
|
||||
|
||||
major_version=@MOD_MAJOR_VERSION@
|
||||
minor_version=@MOD_MINOR_VERSION@
|
||||
patch_version=@MOD_PATCH_VERSION@
|
||||
|
||||
usage()
|
||||
{
|
||||
cat <<EOF
|
||||
Usage: nss-config [OPTIONS] [LIBRARIES]
|
||||
Options:
|
||||
[--prefix[=DIR]]
|
||||
[--exec-prefix[=DIR]]
|
||||
[--includedir[=DIR]]
|
||||
[--libdir[=DIR]]
|
||||
[--version]
|
||||
[--libs]
|
||||
[--cflags]
|
||||
Dynamic Libraries:
|
||||
nss
|
||||
ssl
|
||||
smime
|
||||
EOF
|
||||
exit $1
|
||||
}
|
||||
|
||||
if test $# -eq 0; then
|
||||
usage 1 1>&2
|
||||
fi
|
||||
|
||||
lib_ssl=yes
|
||||
lib_smime=yes
|
||||
lib_nss=yes
|
||||
|
||||
while test $# -gt 0; do
|
||||
case "$1" in
|
||||
-*=*) optarg=`echo "$1" | sed 's/[-_a-zA-Z0-9]*=//'` ;;
|
||||
*) optarg= ;;
|
||||
esac
|
||||
|
||||
case $1 in
|
||||
--prefix=*)
|
||||
prefix=$optarg
|
||||
;;
|
||||
--prefix)
|
||||
echo_prefix=yes
|
||||
;;
|
||||
--exec-prefix=*)
|
||||
exec_prefix=$optarg
|
||||
;;
|
||||
--exec-prefix)
|
||||
echo_exec_prefix=yes
|
||||
;;
|
||||
--includedir=*)
|
||||
includedir=$optarg
|
||||
;;
|
||||
--includedir)
|
||||
echo_includedir=yes
|
||||
;;
|
||||
--libdir=*)
|
||||
libdir=$optarg
|
||||
;;
|
||||
--libdir)
|
||||
echo_libdir=yes
|
||||
;;
|
||||
--version)
|
||||
echo ${major_version}.${minor_version}.${patch_version}
|
||||
;;
|
||||
--cflags)
|
||||
echo_cflags=yes
|
||||
;;
|
||||
--libs)
|
||||
echo_libs=yes
|
||||
;;
|
||||
ssl)
|
||||
lib_ssl=yes
|
||||
;;
|
||||
smime)
|
||||
lib_smime=yes
|
||||
;;
|
||||
nss)
|
||||
lib_nss=yes
|
||||
;;
|
||||
*)
|
||||
usage 1 1>&2
|
||||
;;
|
||||
esac
|
||||
shift
|
||||
done
|
||||
|
||||
# Set variables that may be dependent upon other variables
|
||||
if test -z "$exec_prefix"; then
|
||||
exec_prefix=`pkg-config --variable=exec_prefix nss`
|
||||
fi
|
||||
if test -z "$includedir"; then
|
||||
includedir=`pkg-config --variable=includedir nss`
|
||||
fi
|
||||
if test -z "$libdir"; then
|
||||
libdir=`pkg-config --variable=libdir nss`
|
||||
fi
|
||||
|
||||
if test "$echo_prefix" = "yes"; then
|
||||
echo $prefix
|
||||
fi
|
||||
|
||||
if test "$echo_exec_prefix" = "yes"; then
|
||||
echo $exec_prefix
|
||||
fi
|
||||
|
||||
if test "$echo_includedir" = "yes"; then
|
||||
echo $includedir
|
||||
fi
|
||||
|
||||
if test "$echo_libdir" = "yes"; then
|
||||
echo $libdir
|
||||
fi
|
||||
|
||||
if test "$echo_cflags" = "yes"; then
|
||||
echo -I$includedir
|
||||
fi
|
||||
|
||||
if test "$echo_libs" = "yes"; then
|
||||
libdirs="-Wl,-rpath-link,$libdir -L$libdir"
|
||||
if test -n "$lib_ssl"; then
|
||||
libdirs="$libdirs -lssl${major_version}"
|
||||
fi
|
||||
if test -n "$lib_smime"; then
|
||||
libdirs="$libdirs -lsmime${major_version}"
|
||||
fi
|
||||
if test -n "$lib_nss"; then
|
||||
libdirs="$libdirs -lnssutil${major_version} -lnss${major_version}"
|
||||
fi
|
||||
echo $libdirs
|
||||
fi
|
||||
|
||||
11
nss-fixrandom.patch
Normal file
11
nss-fixrandom.patch
Normal file
|
|
@ -0,0 +1,11 @@
|
|||
--- mozilla/security/nss/lib/freebl/unix_rand.c.orig 2006-12-16 09:38:48.000000000 +0100
|
||||
+++ mozilla/security/nss/lib/freebl/unix_rand.c 2006-12-16 09:38:59.000000000 +0100
|
||||
@@ -876,7 +876,7 @@
|
||||
/* Fork netstat to collect its output by default. Do not unset this unless
|
||||
* another source of entropy is available
|
||||
*/
|
||||
-#define DO_NETSTAT 1
|
||||
+#define DO_NETSTAT 0
|
||||
|
||||
void RNG_SystemInfoForRNG(void)
|
||||
{
|
||||
14
nss-no-rpath.patch
Normal file
14
nss-no-rpath.patch
Normal file
|
|
@ -0,0 +1,14 @@
|
|||
--- mozilla/security/nss/cmd/platlibs.mk 2009-06-18 01:01:48.000000000 +0200
|
||||
+++ mozilla/security/nss/cmd/platlibs.mk.oden 2009-08-31 17:16:16.000000000 +0200
|
||||
@@ -59,9 +59,9 @@
|
||||
endif
|
||||
else
|
||||
ifeq ($(USE_64), 1)
|
||||
-EXTRA_SHARED_LIBS += -Wl,-rpath,'$$ORIGIN/../lib64:$$ORIGIN/../lib'
|
||||
+#EXTRA_SHARED_LIBS += -Wl,-rpath,'$$ORIGIN/../lib64:$$ORIGIN/../lib'
|
||||
else
|
||||
-EXTRA_SHARED_LIBS += -Wl,-rpath,'$$ORIGIN/../lib'
|
||||
+#EXTRA_SHARED_LIBS += -Wl,-rpath,'$$ORIGIN/../lib'
|
||||
endif
|
||||
endif
|
||||
endif
|
||||
11
nss.pc.in
Normal file
11
nss.pc.in
Normal file
|
|
@ -0,0 +1,11 @@
|
|||
prefix=%prefix%
|
||||
exec_prefix=%exec_prefix%
|
||||
libdir=%libdir%
|
||||
includedir=%includedir%
|
||||
|
||||
Name: NSS
|
||||
Description: Network Security Services
|
||||
Version: %NSS_VERSION%
|
||||
Requires: nspr >= %NSPR_VERSION%
|
||||
Libs: -lssl3 -lsmime3 -lnss3 -lsoftokn3 -lnssutil3
|
||||
Cflags: -I${includedir}
|
||||
884
nss.spec
Normal file
884
nss.spec
Normal file
|
|
@ -0,0 +1,884 @@
|
|||
%bcond_without lib
|
||||
|
||||
%define major 3
|
||||
%define libname %mklibname %{name} %{major}
|
||||
%define develname %mklibname -d %{name}
|
||||
%define sdevelname %mklibname -d -s %{name}
|
||||
%define cvsver 3_12
|
||||
|
||||
%define nspr_libname %mklibname nspr 4
|
||||
%define nspr_version 4.8.8
|
||||
|
||||
%if %mandriva_branch == Cooker
|
||||
# Cooker
|
||||
%define release %mkrel 1
|
||||
%else
|
||||
# Old distros
|
||||
%define subrel 1
|
||||
%define release %mkrel 0
|
||||
%endif
|
||||
|
||||
# this seems fragile, so require the exact version or later (#58754)
|
||||
%define sqlite3_version %(pkg-config --modversion sqlite3 &>/dev/null && pkg-config --modversion sqlite3 2>/dev/null || echo 0)
|
||||
%define nspr_version %(pkg-config --modversion nspr &>/dev/null && pkg-config --modversion nspr 2>/dev/null || echo 0)
|
||||
|
||||
%define build_empty 0
|
||||
%{?_with_empty: %{expand: %%global build_empty 1}}
|
||||
%{?_without_empty: %{expand: %%global build_empty 0}}
|
||||
|
||||
Name: nss
|
||||
Version: 3.12.11
|
||||
Release: %{release}
|
||||
Epoch: 2
|
||||
Summary: Netscape Security Services
|
||||
Group: System/Libraries
|
||||
License: MPLv1.1 or GPLv2+ or LGPLv2+
|
||||
URL: http://www.mozilla.org/projects/security/pki/nss/index.html
|
||||
Source0: ftp://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_%{cvsver}_RTM/src/nss-%{version}.tar.gz
|
||||
Source1: nss.pc.in
|
||||
Source2: nss-config.in
|
||||
Source3: blank-cert8.db
|
||||
Source4: blank-key3.db
|
||||
Source5: blank-secmod.db
|
||||
Source6: certdata_empty.txt
|
||||
# https://www.verisign.com/support/verisign-intermediate-ca/secure-site-intermediate/index.html
|
||||
# converted from PEM to DER format with openssl command:
|
||||
# openssl x509 -in cert.pem -inform PEM -outform DER -out cert.der
|
||||
# this way we can avoid a buildrequires for openssl
|
||||
Source7: verisign-class-3-secure-server-ca.der
|
||||
# Brasilian government certificate
|
||||
# verified in person with a government official
|
||||
Source8: http://www.icpbrasil.gov.br/certificadoACRaiz.crt
|
||||
Patch0: nss-no-rpath.patch
|
||||
Patch1: nss-fixrandom.patch
|
||||
Patch3: nss-3.12.7-format_not_a_string_literal_and_no_format_arguments.patch
|
||||
Patch4: renegotiate-transitional.patch
|
||||
Patch5: nss-3.12.11-new_certdata.txt_format.diff
|
||||
%if %mdkversion >= 200700
|
||||
BuildRequires: rootcerts >= 1:20110413.00
|
||||
%endif
|
||||
BuildRequires: libnspr-devel >= 2:4.8.8
|
||||
BuildRequires: libz-devel
|
||||
%if %mdkversion >= 200800
|
||||
BuildRequires: libsqlite3-devel >= 3.6.22
|
||||
%endif
|
||||
BuildRequires: zip
|
||||
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-buildroot
|
||||
|
||||
%description
|
||||
Network Security Services (NSS) is a set of libraries designed to
|
||||
support cross-platform development of security-enabled client and server
|
||||
applications. Applications built with NSS can support SSL v2 and v3,
|
||||
TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and
|
||||
other security standards. For detailed information on standards supported, see
|
||||
http://www.mozilla.org/projects/security/pki/nss/overview.html.
|
||||
%if %without lib
|
||||
|
||||
Note: This package currently contains the NSS binaries only. The
|
||||
libraries have been not been included due to conflicts with the Mozilla
|
||||
libraries.
|
||||
%endif
|
||||
|
||||
%if %with lib
|
||||
%package -n %{libname}
|
||||
Summary: Network Security Services (NSS)
|
||||
Group: System/Libraries
|
||||
Provides: mozilla-nss = %{epoch}:%{version}-%{release}
|
||||
Requires(post): nss
|
||||
Requires(post): rpm-helper
|
||||
%if %mdkversion >= 200800
|
||||
Requires: %{mklibname sqlite3_ 0} >= %{sqlite3_version}
|
||||
%endif
|
||||
Requires: %{nspr_libname} >= 2:%{nspr_version}
|
||||
|
||||
%description -n %{libname}
|
||||
Network Security Services (NSS) is a set of libraries designed to
|
||||
support cross-platform development of security-enabled server
|
||||
applications. Applications built with NSS can support SSL v2 and v3,
|
||||
TLS, PKCS #5, PKCS #7, PKCS #11, PKCS
|
||||
#12, S/MIME, X.509 v3 certificates, and other security standards. For
|
||||
detailed information on standards supported, see
|
||||
http://www.mozilla.org/projects/security/pki/nss/overview.html.
|
||||
|
||||
%package -n %{develname}
|
||||
Summary: Network Security Services (NSS) - development files
|
||||
Group: Development/C++
|
||||
Requires: %{libname} = %{epoch}:%{version}-%{release}
|
||||
Requires: libnspr-devel
|
||||
Provides: libnss-devel = %{epoch}:%{version}-%{release}
|
||||
Provides: nss-devel = %{epoch}:%{version}-%{release}
|
||||
Obsoletes: %{libname}-devel
|
||||
Conflicts: %{libname} < 2:3.12-8
|
||||
|
||||
%description -n %{develname}
|
||||
Header files to doing development with Network Security Services.
|
||||
|
||||
%package -n %{sdevelname}
|
||||
Summary: Network Security Services (NSS) - static libraries
|
||||
Group: Development/C++
|
||||
Requires: %{libname} = %{epoch}:%{version}-%{release}
|
||||
Requires: %{develname} = %{epoch}:%{version}-%{release}
|
||||
Requires: libnspr-devel
|
||||
Provides: libnss-static-devel = %{epoch}:%{version}-%{release}
|
||||
Provides: nss-static-devel = %{epoch}:%{version}-%{release}
|
||||
Conflicts: libopenssl-static-devel
|
||||
Obsoletes: %{libname}-static-devel
|
||||
|
||||
%description -n %{sdevelname}
|
||||
Static libraries for doing development with Network Security Services.
|
||||
%endif
|
||||
|
||||
%prep
|
||||
|
||||
%setup -q
|
||||
%patch0 -p0
|
||||
%patch1 -p0
|
||||
%patch3 -p1
|
||||
%patch4 -p0 -b .transitional
|
||||
%patch5 -p1
|
||||
|
||||
find . -type d -perm 0700 -exec chmod 755 {} \;
|
||||
find . -type f -perm 0555 -exec chmod 755 {} \;
|
||||
find . -type f -perm 0444 -exec chmod 644 {} \;
|
||||
|
||||
%build
|
||||
%if %mdkversion >= 200900
|
||||
%setup_compile_flags
|
||||
%endif
|
||||
export BUILD_OPT=1
|
||||
export OPTIMIZER="%{optflags}"
|
||||
export XCFLAGS="%{optflags}"
|
||||
export ARCHFLAG="$LDFLAGS"
|
||||
export LIBDIR=%{_libdir}
|
||||
export USE_SYSTEM_ZLIB=1
|
||||
export ZLIB_LIBS="-lz"
|
||||
export PKG_CONFIG_ALLOW_SYSTEM_LIBS=1
|
||||
export PKG_CONFIG_ALLOW_SYSTEM_CFLAGS=1
|
||||
export NSPR_INCLUDE_DIR=`%{_bindir}/pkg-config --cflags-only-I nspr | sed 's/-I//'`
|
||||
export NSPR_LIB_DIR=`%{_bindir}/pkg-config --libs-only-L nspr | sed 's/-L//'`
|
||||
export MOZILLA_CLIENT=1
|
||||
export NS_USE_GCC=1
|
||||
export NSS_USE_SYSTEM_SQLITE=1
|
||||
export NSS_ENABLE_ECC=1
|
||||
%ifarch x86_64 ppc64 ia64 s390x
|
||||
export USE_64=1
|
||||
%endif
|
||||
|
||||
%if %{build_empty}
|
||||
# (oe) the "trust no one" scenario, it goes like:
|
||||
# 1. mv /%{_lib}/libnssckbi.so /%{_lib}/libnssckbi.so.BAK
|
||||
# 2. mv /%{_lib}/libnssckbi_empty.so /%{_lib}/libnssckbi.so
|
||||
# 3. restart ff/tb
|
||||
# it has to be done manually for now, but at least we have a way for
|
||||
# users to quickly mitigate future problems, or whatever :-)
|
||||
|
||||
pushd mozilla/security/nss/lib/ckfw/builtins
|
||||
%{__perl} ./certdata.perl < %{SOURCE6}
|
||||
popd
|
||||
%endif
|
||||
|
||||
# Parallel is broken as of 3.11.4 :(
|
||||
%make -j1 -C ./mozilla/security/nss \
|
||||
build_coreconf \
|
||||
build_dbm \
|
||||
all
|
||||
|
||||
%if %{build_empty}
|
||||
# tuck away the empty libnssckbi.so library
|
||||
cp -p mozilla/security/nss/lib/ckfw/builtins/Linux*/libnssckbi.so libnssckbi_empty.so
|
||||
%endif
|
||||
|
||||
# install new Verisign intermediate certificate
|
||||
# http://qa.mandriva.com/show_bug.cgi?id=29612
|
||||
# use built addbuildin command to avoid having
|
||||
# a buildrequires for nss
|
||||
ADDBUILTIN=`%{_bindir}/find . -type f -name addbuiltin`
|
||||
if [ -z "$ADDBUILTIN" ]; then
|
||||
exit 1
|
||||
fi
|
||||
ADDBUILTIN="$PWD/$ADDBUILTIN"
|
||||
OLD="$LD_LIBRARY_PATH"
|
||||
libpath=`%{_bindir}/find mozilla/dist/ -name "Linux2.*" -type d`
|
||||
# to use the built libraries instead of requiring nss
|
||||
# again as buildrequires
|
||||
export LD_LIBRARY_PATH="$PWD/$libpath/lib"
|
||||
|
||||
pushd mozilla/security/nss/lib/ckfw/builtins
|
||||
|
||||
# (oe) for reference:
|
||||
# *ALL* of the root CA certs are hard coded into the libnssckbi.so library.
|
||||
# So, for Mandriva we can add/remove certs easily in the rootcerts package. Please
|
||||
# checkout and examine the rootcerts package.
|
||||
# Once this has been done and the new rootcerts package has been installed this
|
||||
# package (nss) has to be rebuilt to pickup the changes made. The "recreate
|
||||
# certificates" lines below generates a new certdata.c source containing the root
|
||||
# CA certs for mozilla.
|
||||
# *ALL* of the mozilla based softwares that support SSL has to link against
|
||||
# the NSS library.
|
||||
# recreate certificates
|
||||
%{__perl} ./certdata.perl < /etc/pki/tls/mozilla/certdata.txt
|
||||
|
||||
%make clean
|
||||
%make -j1
|
||||
|
||||
popd
|
||||
export LD_LIBRARY_PATH="$OLD"
|
||||
|
||||
%install
|
||||
%{__rm} -rf %{buildroot}
|
||||
|
||||
pushd mozilla/dist/$(uname -s)*
|
||||
|
||||
%{__mkdir_p} %{buildroot}%{_bindir}
|
||||
%{__cp} -aL bin/* %{buildroot}%{_bindir}
|
||||
|
||||
%if %with lib
|
||||
%{__mkdir_p} %{buildroot}%{_libdir}
|
||||
%{__mkdir_p} %{buildroot}/%{_lib}
|
||||
%{__mkdir_p} %{buildroot}%{_includedir}/nss
|
||||
%{__cp} -aL ../public/nss/* %{buildroot}%{_includedir}/nss
|
||||
|
||||
%{__cp} -aL lib/libcrmf.a \
|
||||
lib/libnss.a \
|
||||
lib/libnssb.a \
|
||||
lib/libnssckbi.so \
|
||||
lib/libnssckfw.a \
|
||||
lib/libnssutil.a \
|
||||
lib/libsmime.a \
|
||||
lib/libssl.a \
|
||||
%{buildroot}%{_libdir}
|
||||
|
||||
# Copy the binary libraries we want
|
||||
for file in libsoftokn3.so libfreebl3.so libnss3.so libnssutil3.so \
|
||||
libssl3.so libsmime3.so libnssckbi.so libnssdbm3.so
|
||||
do
|
||||
%{__install} -m 755 lib/$file %{buildroot}/%{_lib}
|
||||
ln -sf ../../%{_lib}/$file %{buildroot}%{_libdir}/$file
|
||||
done
|
||||
|
||||
# These ghost files will be generated in the post step
|
||||
# Make sure chk files can be found in both places
|
||||
for file in libsoftokn3.chk libfreebl3.chk
|
||||
do
|
||||
touch %{buildroot}/%{_lib}/$file
|
||||
ln -s ../../%{_lib}/$file %{buildroot}%{_libdir}/$file
|
||||
done
|
||||
|
||||
%{__mkdir_p} %{buildroot}%{_libdir}/pkgconfig
|
||||
cat %{SOURCE1} | sed -e "s,%%libdir%%,%{_libdir},g" \
|
||||
-e "s,%%prefix%%,%{_prefix},g" \
|
||||
-e "s,%%exec_prefix%%,%{_prefix},g" \
|
||||
-e "s,%%includedir%%,%{_includedir}/nss,g" \
|
||||
-e "s,%%NSPR_VERSION%%,%{nspr_version},g" \
|
||||
-e "s,%%NSS_VERSION%%,%{version},g" > \
|
||||
%{buildroot}%{_libdir}/pkgconfig/nss.pc
|
||||
%endif
|
||||
|
||||
popd
|
||||
|
||||
%if %with lib
|
||||
export NSS_VMAJOR=`cat mozilla/security/nss/lib/nss/nss.h | grep "#define.*NSS_VMAJOR" | awk '{print $3}'`
|
||||
export NSS_VMINOR=`cat mozilla/security/nss/lib/nss/nss.h | grep "#define.*NSS_VMINOR" | awk '{print $3}'`
|
||||
export NSS_VPATCH=`cat mozilla/security/nss/lib/nss/nss.h | grep "#define.*NSS_VPATCH" | awk '{print $3}'`
|
||||
|
||||
%{__mkdir_p} %{buildroot}%{_bindir}
|
||||
cat %{SOURCE2} | sed -e "s,@libdir@,%{_libdir},g" \
|
||||
-e "s,@prefix@,%{_prefix},g" \
|
||||
-e "s,@exec_prefix@,%{_prefix},g" \
|
||||
-e "s,@includedir@,%{_includedir}/nss%{major},g" \
|
||||
-e "s,@MOD_MAJOR_VERSION@,$NSS_VMAJOR,g" \
|
||||
-e "s,@MOD_MINOR_VERSION@,$NSS_VMINOR,g" \
|
||||
-e "s,@MOD_PATCH_VERSION@,$NSS_VPATCH,g" \
|
||||
> %{buildroot}/%{_bindir}/nss-config
|
||||
%endif
|
||||
|
||||
pushd mozilla/security/nss/cmd/smimetools
|
||||
%{__install} -m 0755 smime %{buildroot}%{_bindir}
|
||||
%{__perl} -pi -e 's|/usr/local/bin|%{_bindir}|g' %{buildroot}%{_bindir}/smime
|
||||
popd
|
||||
|
||||
# add docs
|
||||
%{__mkdir_p} docs/SSLsample
|
||||
#%{__cp} -a mozilla/security/nss/cmd/SSLsample/README docs/SSLsample/
|
||||
|
||||
%{__mkdir_p} docs/bltest
|
||||
%{__cp} -a mozilla/security/nss/cmd/bltest/tests/* docs/bltest/
|
||||
|
||||
%{__mkdir_p} docs/certcgi
|
||||
%{__cp} -a mozilla/security/nss/cmd/certcgi/*.html docs/certcgi/
|
||||
%{__cp} -a mozilla/security/nss/cmd/certcgi/HOWTO.txt docs/certcgi/
|
||||
|
||||
%{__mkdir_p} docs/modutil
|
||||
%{__cp} -a mozilla/security/nss/cmd/modutil/*.html docs/modutil/
|
||||
|
||||
%{__mkdir_p} docs/signtool
|
||||
%{__cp} -a mozilla/security/nss/cmd/signtool/README docs/signtool/
|
||||
|
||||
%{__mkdir_p} docs/signver
|
||||
%{__cp} -a mozilla/security/nss/cmd/signver/examples/1/*.pl docs/signver/
|
||||
%{__cp} -a mozilla/security/nss/cmd/signver/examples/1/*.html docs/signver/
|
||||
|
||||
%{__mkdir_p} docs/ssltap
|
||||
%{__cp} -a mozilla/security/nss/cmd/ssltap/*.html docs/ssltap/
|
||||
|
||||
# Install the empty NSS db files
|
||||
%{__mkdir_p} %{buildroot}%{_sysconfdir}/pki/nssdb
|
||||
%{__install} -m 644 %{SOURCE3} %{buildroot}%{_sysconfdir}/pki/nssdb/cert8.db
|
||||
%{__install} -m 644 %{SOURCE4} %{buildroot}%{_sysconfdir}/pki/nssdb/key3.db
|
||||
%{__install} -m 644 %{SOURCE5} %{buildroot}%{_sysconfdir}/pki/nssdb/secmod.db
|
||||
|
||||
%{_bindir}/find docs -type f | %{_bindir}/xargs -t %{__perl} -pi -e 's/\r$//g'
|
||||
|
||||
%if %{build_empty}
|
||||
# install the empty libnssckbi.so library (use alternatives?)
|
||||
install -m0755 libnssckbi_empty.so %{buildroot}/%{_lib}/libnssckbi_empty.so
|
||||
%endif
|
||||
|
||||
%multiarch_binaries %{buildroot}%{_bindir}/nss-config
|
||||
|
||||
%clean
|
||||
%{__rm} -rf %{buildroot}
|
||||
|
||||
%if %with lib
|
||||
%post -n %{libname}
|
||||
%if %mdkversion < 200900
|
||||
/sbin/ldconfig
|
||||
%endif
|
||||
%create_ghostfile /%{_lib}/libsoftokn%{major}.chk root root 644
|
||||
%create_ghostfile /%{_lib}/libfreebl%{major}.chk root root 644
|
||||
%{_bindir}/shlibsign -i /%{_lib}/libsoftokn%{major}.so >/dev/null 2>/dev/null
|
||||
%{_bindir}/shlibsign -i /%{_lib}/libfreebl%{major}.so >/dev/null 2>/dev/null
|
||||
|
||||
%postun -n %{libname}
|
||||
%if %mdkversion < 200900
|
||||
/sbin/ldconfig
|
||||
%endif
|
||||
%endif
|
||||
|
||||
%files
|
||||
%defattr(0644,root,root,0755)
|
||||
%doc docs/*
|
||||
%attr(0755,root,root) %{_bindir}/addbuiltin
|
||||
%attr(0755,root,root) %{_bindir}/atob
|
||||
%attr(0755,root,root) %{_bindir}/baddbdir
|
||||
%attr(0755,root,root) %{_bindir}/bltest
|
||||
%attr(0755,root,root) %{_bindir}/btoa
|
||||
%attr(0755,root,root) %{_bindir}/certcgi
|
||||
%attr(0755,root,root) %{_bindir}/certutil
|
||||
%attr(0755,root,root) %{_bindir}/checkcert
|
||||
%attr(0755,root,root) %{_bindir}/cmsutil
|
||||
%attr(0755,root,root) %{_bindir}/conflict
|
||||
%attr(0755,root,root) %{_bindir}/crlutil
|
||||
%attr(0755,root,root) %{_bindir}/crmftest
|
||||
%attr(0755,root,root) %{_bindir}/dbtest
|
||||
%attr(0755,root,root) %{_bindir}/derdump
|
||||
%attr(0755,root,root) %{_bindir}/dertimetest
|
||||
%attr(0755,root,root) %{_bindir}/digest
|
||||
%attr(0755,root,root) %{_bindir}/fipstest
|
||||
%attr(0755,root,root) %{_bindir}/makepqg
|
||||
%attr(0755,root,root) %{_bindir}/mangle
|
||||
%attr(0755,root,root) %{_bindir}/modutil
|
||||
%attr(0755,root,root) %{_bindir}/multinit
|
||||
%attr(0755,root,root) %{_bindir}/nonspr10
|
||||
%attr(0755,root,root) %{_bindir}/ocspclnt
|
||||
%attr(0755,root,root) %{_bindir}/oidcalc
|
||||
%attr(0755,root,root) %{_bindir}/p7content
|
||||
%attr(0755,root,root) %{_bindir}/p7env
|
||||
%attr(0755,root,root) %{_bindir}/p7sign
|
||||
%attr(0755,root,root) %{_bindir}/p7verify
|
||||
%attr(0755,root,root) %{_bindir}/pk11mode
|
||||
%attr(0755,root,root) %{_bindir}/pk12util
|
||||
%attr(0755,root,root) %{_bindir}/pp
|
||||
%attr(0755,root,root) %{_bindir}/remtest
|
||||
%attr(0755,root,root) %{_bindir}/rsaperf
|
||||
%attr(0755,root,root) %{_bindir}/sdrtest
|
||||
%attr(0755,root,root) %{_bindir}/selfserv
|
||||
%attr(0755,root,root) %{_bindir}/shlibsign
|
||||
%attr(0755,root,root) %{_bindir}/signtool
|
||||
%attr(0755,root,root) %{_bindir}/signver
|
||||
%attr(0755,root,root) %{_bindir}/smime
|
||||
%attr(0755,root,root) %{_bindir}/ssltap
|
||||
%attr(0755,root,root) %{_bindir}/strsclnt
|
||||
%attr(0755,root,root) %{_bindir}/symkeyutil
|
||||
%attr(0755,root,root) %{_bindir}/tstclnt
|
||||
%attr(0755,root,root) %{_bindir}/vfychain
|
||||
%attr(0755,root,root) %{_bindir}/vfyserv
|
||||
%dir %{_sysconfdir}/pki/nssdb
|
||||
%config(noreplace) %{_sysconfdir}/pki/nssdb/cert8.db
|
||||
%config(noreplace) %{_sysconfdir}/pki/nssdb/key3.db
|
||||
%config(noreplace) %{_sysconfdir}/pki/nssdb/secmod.db
|
||||
|
||||
%if %with lib
|
||||
%files -n %{libname}
|
||||
%defattr(0755,root,root,0755)
|
||||
/%{_lib}/libfreebl%{major}.so
|
||||
/%{_lib}/libnss%{major}.so
|
||||
/%{_lib}/libnssckbi.so
|
||||
%if %{build_empty}
|
||||
/%{_lib}/libnssckbi_empty.so
|
||||
%endif
|
||||
/%{_lib}/libsmime%{major}.so
|
||||
/%{_lib}/libsoftokn%{major}.so
|
||||
/%{_lib}/libssl%{major}.so
|
||||
/%{_lib}/libnssutil%{major}.so
|
||||
/%{_lib}/libnssdbm%{major}.so
|
||||
%defattr(0644,root,root,0755)
|
||||
%ghost /%{_lib}/libsoftokn%{major}.chk
|
||||
%ghost /%{_lib}/libfreebl%{major}.chk
|
||||
|
||||
%files -n %{develname}
|
||||
%defattr(0644,root,root,0755)
|
||||
%attr(0755,root,root) %{_bindir}/nss-config
|
||||
%attr(0755,root,root) %{multiarch_bindir}/nss-config
|
||||
%_libdir/*.so
|
||||
%dir %{_includedir}/nss
|
||||
%{_includedir}/nss/base64.h
|
||||
%{_includedir}/nss/blapit.h
|
||||
%{_includedir}/nss/certdb.h
|
||||
%{_includedir}/nss/cert.h
|
||||
%{_includedir}/nss/certt.h
|
||||
%{_includedir}/nss/ciferfam.h
|
||||
%{_includedir}/nss/cmmf.h
|
||||
%{_includedir}/nss/cmmft.h
|
||||
%{_includedir}/nss/cms.h
|
||||
%{_includedir}/nss/cmsreclist.h
|
||||
%{_includedir}/nss/cmst.h
|
||||
%{_includedir}/nss/crmf.h
|
||||
%{_includedir}/nss/crmft.h
|
||||
%{_includedir}/nss/cryptohi.h
|
||||
%{_includedir}/nss/cryptoht.h
|
||||
%{_includedir}/nss/ecl-exp.h
|
||||
%{_includedir}/nss/hasht.h
|
||||
%{_includedir}/nss/jar-ds.h
|
||||
%{_includedir}/nss/jarfile.h
|
||||
%{_includedir}/nss/jar.h
|
||||
%{_includedir}/nss/key.h
|
||||
%{_includedir}/nss/keyhi.h
|
||||
%{_includedir}/nss/keyt.h
|
||||
%{_includedir}/nss/keythi.h
|
||||
%{_includedir}/nss/nssb64.h
|
||||
%{_includedir}/nss/nssb64t.h
|
||||
%{_includedir}/nss/nssbase.h
|
||||
%{_includedir}/nss/nssbaset.h
|
||||
%{_includedir}/nss/nssck.api
|
||||
%{_includedir}/nss/nssckbi.h
|
||||
%{_includedir}/nss/nssckepv.h
|
||||
%{_includedir}/nss/nssckft.h
|
||||
%{_includedir}/nss/nssckfwc.h
|
||||
%{_includedir}/nss/nssckfw.h
|
||||
%{_includedir}/nss/nssckfwt.h
|
||||
%{_includedir}/nss/nssckg.h
|
||||
%{_includedir}/nss/nssckmdt.h
|
||||
%{_includedir}/nss/nssckt.h
|
||||
%{_includedir}/nss/nss.h
|
||||
%{_includedir}/nss/nssilckt.h
|
||||
%{_includedir}/nss/nssilock.h
|
||||
%{_includedir}/nss/nsslocks.h
|
||||
%{_includedir}/nss/nsslowhash.h
|
||||
%{_includedir}/nss/nssrwlk.h
|
||||
%{_includedir}/nss/nssrwlkt.h
|
||||
%{_includedir}/nss/nssutil.h
|
||||
%{_includedir}/nss/ocsp.h
|
||||
%{_includedir}/nss/ocspt.h
|
||||
%{_includedir}/nss/p12.h
|
||||
%{_includedir}/nss/p12plcy.h
|
||||
%{_includedir}/nss/p12t.h
|
||||
%{_includedir}/nss/pk11func.h
|
||||
%{_includedir}/nss/pk11pqg.h
|
||||
%{_includedir}/nss/pk11priv.h
|
||||
%{_includedir}/nss/pk11pub.h
|
||||
%{_includedir}/nss/pk11sdr.h
|
||||
%{_includedir}/nss/pkcs11f.h
|
||||
%{_includedir}/nss/pkcs11.h
|
||||
%{_includedir}/nss/pkcs11n.h
|
||||
%{_includedir}/nss/pkcs11p.h
|
||||
%{_includedir}/nss/pkcs11t.h
|
||||
%{_includedir}/nss/pkcs11u.h
|
||||
%{_includedir}/nss/pkcs12.h
|
||||
%{_includedir}/nss/pkcs12t.h
|
||||
%{_includedir}/nss/pkcs7t.h
|
||||
%{_includedir}/nss/portreg.h
|
||||
%{_includedir}/nss/preenc.h
|
||||
%{_includedir}/nss/secasn1.h
|
||||
%{_includedir}/nss/secasn1t.h
|
||||
%{_includedir}/nss/seccomon.h
|
||||
%{_includedir}/nss/secder.h
|
||||
%{_includedir}/nss/secdert.h
|
||||
%{_includedir}/nss/secdig.h
|
||||
%{_includedir}/nss/secdigt.h
|
||||
%{_includedir}/nss/secerr.h
|
||||
%{_includedir}/nss/sechash.h
|
||||
%{_includedir}/nss/secitem.h
|
||||
%{_includedir}/nss/secmime.h
|
||||
%{_includedir}/nss/secmod.h
|
||||
%{_includedir}/nss/secmodt.h
|
||||
%{_includedir}/nss/secoid.h
|
||||
%{_includedir}/nss/secoidt.h
|
||||
%{_includedir}/nss/secpkcs5.h
|
||||
%{_includedir}/nss/secpkcs7.h
|
||||
%{_includedir}/nss/secport.h
|
||||
%{_includedir}/nss/shsign.h
|
||||
%{_includedir}/nss/smime.h
|
||||
%{_includedir}/nss/sslerr.h
|
||||
%{_includedir}/nss/ssl.h
|
||||
%{_includedir}/nss/sslproto.h
|
||||
%{_includedir}/nss/sslt.h
|
||||
%{_includedir}/nss/utilrename.h
|
||||
%{_libdir}/pkgconfig/nss.pc
|
||||
%{_libdir}/libsoftokn%{major}.chk
|
||||
%{_libdir}/libfreebl%{major}.chk
|
||||
|
||||
%files -n %{sdevelname}
|
||||
%defattr(0644,root,root,0755)
|
||||
%{_libdir}/libcrmf.a
|
||||
%{_libdir}/libnss.a
|
||||
%{_libdir}/libnssutil.a
|
||||
%{_libdir}/libnssb.a
|
||||
%{_libdir}/libnssckfw.a
|
||||
%{_libdir}/libsmime.a
|
||||
%{_libdir}/libssl.a
|
||||
%endif
|
||||
|
||||
|
||||
%changelog
|
||||
* Fri Aug 12 2011 Oden Eriksson <oeriksson@mandriva.com> 2:3.12.11-0.1mdv2011.0
|
||||
+ Revision: 694115
|
||||
- 3.12.11
|
||||
- rediffed the new_certdata.txt_format patch
|
||||
|
||||
* Tue May 17 2011 Oden Eriksson <oeriksson@mandriva.com> 2:3.12.10-1
|
||||
+ Revision: 675834
|
||||
- allow build with the new format of the certdata.txt file from cvs
|
||||
- don't build the libnssckbi_empty.so library per default
|
||||
- 3.12.10
|
||||
- adjust deps a bit
|
||||
|
||||
* Thu Apr 07 2011 Oden Eriksson <oeriksson@mandriva.com> 2:3.12.9-5
|
||||
+ Revision: 651409
|
||||
- added some funny stuff :-)
|
||||
- document the ssl crap in the spec file...
|
||||
|
||||
* Fri Mar 25 2011 Oden Eriksson <oeriksson@mandriva.com> 2:3.12.9-4
|
||||
+ Revision: 648517
|
||||
- rebuilt against new certdata.txt file
|
||||
|
||||
* Sat Feb 26 2011 Funda Wang <fwang@mandriva.org> 2:3.12.9-3
|
||||
+ Revision: 639991
|
||||
- rebuild
|
||||
|
||||
* Wed Jan 26 2011 Funda Wang <fwang@mandriva.org> 2:3.12.9-2
|
||||
+ Revision: 632997
|
||||
- fix build with latest rpm (wrong definition acturally)
|
||||
|
||||
* Fri Jan 14 2011 Funda Wang <fwang@mandriva.org> 2:3.12.9-1
|
||||
+ Revision: 631033
|
||||
- new version 3.12.9
|
||||
|
||||
* Sat Dec 25 2010 Oden Eriksson <oeriksson@mandriva.com> 2:3.12.8-3mdv2011.0
|
||||
+ Revision: 625024
|
||||
- rebuilt to pickup rootcerts-20101202 changes
|
||||
- fix #61964 (nss should depend of the latest version of nspr)
|
||||
|
||||
* Thu Nov 25 2010 Oden Eriksson <oeriksson@mandriva.com> 2:3.12.8-2mdv2011.0
|
||||
+ Revision: 601067
|
||||
- rebuilt to pickup the changes in rootcerts-20101119.00
|
||||
|
||||
* Tue Oct 12 2010 Oden Eriksson <oeriksson@mandriva.com> 2:3.12.8-1mdv2011.0
|
||||
+ Revision: 585167
|
||||
- 3.12.8
|
||||
- rediffed one patch
|
||||
- dropped bsolete patches
|
||||
|
||||
* Tue Oct 12 2010 Oden Eriksson <oeriksson@mandriva.com> 2:3.12.7-3mdv2011.0
|
||||
+ Revision: 585103
|
||||
- require the version, or later of the nspr libs nss was built against. fixes #61249
|
||||
|
||||
* Thu Sep 09 2010 Oden Eriksson <oeriksson@mandriva.com> 2:3.12.7-2mdv2011.0
|
||||
+ Revision: 576968
|
||||
- fix backporting to older products
|
||||
- rebuilt against new rootcerts-20100827
|
||||
|
||||
* Sat Aug 21 2010 Funda Wang <fwang@mandriva.org> 2:3.12.7-1mdv2011.0
|
||||
+ Revision: 571721
|
||||
- New version 3.12.7
|
||||
|
||||
* Mon May 17 2010 Oden Eriksson <oeriksson@mandriva.com> 2:3.12.6-6mdv2010.1
|
||||
+ Revision: 545022
|
||||
- fix deps
|
||||
- rebuilt against rootcerts-20100408.00
|
||||
|
||||
* Tue Apr 27 2010 Christophe Fergeau <cfergeau@mandriva.com> 2:3.12.6-5mdv2010.1
|
||||
+ Revision: 539590
|
||||
- rebuild so that shared libraries are properly stripped again
|
||||
|
||||
* Wed Apr 21 2010 Oden Eriksson <oeriksson@mandriva.com> 2:3.12.6-4mdv2010.1
|
||||
+ Revision: 537675
|
||||
- dacapo, but for the nss library
|
||||
|
||||
* Wed Apr 21 2010 Oden Eriksson <oeriksson@mandriva.com> 2:3.12.6-3mdv2010.1
|
||||
+ Revision: 537664
|
||||
- require the exact version of sqlite3 it was built against or a later version
|
||||
|
||||
* Tue Apr 13 2010 Oden Eriksson <oeriksson@mandriva.com> 2:3.12.6-2mdv2010.1
|
||||
+ Revision: 534197
|
||||
- added backporting magic for updates
|
||||
- adjust deps
|
||||
|
||||
* Thu Apr 01 2010 Oden Eriksson <oeriksson@mandriva.com> 2:3.12.6-1mdv2010.1
|
||||
+ Revision: 530645
|
||||
- 3.12.6 (official release)
|
||||
|
||||
* Tue Mar 23 2010 Oden Eriksson <oeriksson@mandriva.com> 2:3.12.6-0.0.1mdv2010.1
|
||||
+ Revision: 526884
|
||||
- use a cvs snap (NSS_3_12_6_RTM)
|
||||
- rediffed the sqlite patch
|
||||
- added two patches from fedora
|
||||
|
||||
* Fri Mar 12 2010 Oden Eriksson <oeriksson@mandriva.com> 2:3.12.5-4mdv2010.1
|
||||
+ Revision: 518394
|
||||
- rebuilt to pickup changes from rootcerts-20100216.01
|
||||
|
||||
* Wed Feb 03 2010 Oden Eriksson <oeriksson@mandriva.com> 2:3.12.5-3mdv2010.1
|
||||
+ Revision: 500472
|
||||
- rebuilt to pickup fixes in rootcerts-20091203.04
|
||||
|
||||
* Sun Jan 24 2010 Oden Eriksson <oeriksson@mandriva.com> 2:3.12.5-2mdv2010.1
|
||||
+ Revision: 495471
|
||||
- rebuilt against rootcerts-20091203.00
|
||||
|
||||
* Wed Dec 16 2009 Funda Wang <fwang@mandriva.org> 2:3.12.5-1mdv2010.1
|
||||
+ Revision: 479151
|
||||
- fix file list
|
||||
- new version 3.12.5
|
||||
|
||||
* Mon Oct 19 2009 Oden Eriksson <oeriksson@mandriva.com> 2:3.12.4-2mdv2010.0
|
||||
+ Revision: 458252
|
||||
- rebuilt to pickup changes from rootcerts-20090831.00-1mdv2010.0
|
||||
|
||||
* Mon Aug 31 2009 Oden Eriksson <oeriksson@mandriva.com> 2:3.12.4-1mdv2010.0
|
||||
+ Revision: 422988
|
||||
- 3.12.4
|
||||
- nuke one *.orig file
|
||||
|
||||
* Tue Aug 04 2009 Oden Eriksson <oeriksson@mandriva.com> 2:3.12.3.1-1mdv2010.0
|
||||
+ Revision: 408938
|
||||
- 3.12.3.1
|
||||
|
||||
* Sat May 30 2009 Tomasz Pawel Gajc <tpg@mandriva.org> 2:3.12.3-2mdv2010.0
|
||||
+ Revision: 381501
|
||||
- fix file list one more time
|
||||
|
||||
* Sat May 30 2009 Tomasz Pawel Gajc <tpg@mandriva.org> 2:3.12.3-1mdv2010.0
|
||||
+ Revision: 381500
|
||||
- update to new version 3.12.3
|
||||
rediff patch 4 and 5
|
||||
- drop patch 6, fixed upstream
|
||||
- fix file list
|
||||
|
||||
* Mon Mar 23 2009 Oden Eriksson <oeriksson@mandriva.com> 2:3.12-12mdv2009.1
|
||||
+ Revision: 360727
|
||||
- rebuilt to pickup new data from the rootcerts (20090115.00) package
|
||||
|
||||
* Sun Jan 25 2009 Per Øyvind Karlsen <peroyvind@mandriva.org> 2:3.12-11mdv2009.1
|
||||
+ Revision: 333523
|
||||
- bump..
|
||||
- increase size for string allocated by one to make room for string terminator
|
||||
(P6, fixes /usr/bin/addbuiltin SIGABRT with 'free(): invalid pointer')
|
||||
|
||||
* Sun Jan 25 2009 Oden Eriksson <oeriksson@mandriva.com> 2:3.12-10mdv2009.1
|
||||
+ Revision: 333463
|
||||
- rebuilt with a better patch for fixing -Werror=format-security (P5)
|
||||
- fix broken patch
|
||||
|
||||
* Mon Dec 22 2008 Tomasz Pawel Gajc <tpg@mandriva.org> 2:3.12-9mdv2009.1
|
||||
+ Revision: 317711
|
||||
- build with %%setup_compile_flags macro
|
||||
- Patch5: fix building with -Werror=format-security
|
||||
- spec file clean
|
||||
|
||||
* Mon Dec 08 2008 Funda Wang <fwang@mandriva.org> 2:3.12-8mdv2009.1
|
||||
+ Revision: 311850
|
||||
- use fedora package layout (put actual .so at /lib, and devel symbolic link at /usr/lib)
|
||||
|
||||
* Thu Oct 23 2008 Guillaume Rousse <guillomovitch@mandriva.org> 2:3.12-7mdv2009.1
|
||||
+ Revision: 296799
|
||||
- remove undocumented and unexplainable conflict with perl-PAR
|
||||
|
||||
+ Oden Eriksson <oeriksson@mandriva.com>
|
||||
- added ugly provides due to ugly nss libnames and sonames
|
||||
|
||||
* Sun Aug 10 2008 Tomasz Pawel Gajc <tpg@mandriva.org> 2:3.12-5mdv2009.0
|
||||
+ Revision: 270259
|
||||
- fix mixture of tabs and spaces
|
||||
- bump release tag
|
||||
- package libnssdbm3.so, hopefully this will fix bug #42603
|
||||
- export few options for nss build
|
||||
|
||||
+ Frederik Himpe <fhimpe@mandriva.org>
|
||||
- Fix license
|
||||
- Remove nss-clobber.sh and noexecstack patch, both are
|
||||
not necessary anymore according to RH
|
||||
|
||||
* Sat Aug 09 2008 Tiago Salem <salem@mandriva.com.br> 2:3.12-4mdv2009.0
|
||||
+ Revision: 269769
|
||||
- add -lnssutil3 to nss-config.in
|
||||
- bump release
|
||||
|
||||
* Fri Aug 08 2008 Tiago Salem <salem@mandriva.com.br> 2:3.12-3mdv2009.0
|
||||
+ Revision: 269661
|
||||
- add missing -lnssutil3 to nss.pc (breaks thunderbird build)
|
||||
- bump release
|
||||
|
||||
* Thu Aug 07 2008 Funda Wang <fwang@mandriva.org> 2:3.12-2mdv2009.0
|
||||
+ Revision: 266297
|
||||
- bump release
|
||||
- use system sqlite3
|
||||
- add nssutil.so
|
||||
|
||||
+ Tomasz Pawel Gajc <tpg@mandriva.org>
|
||||
- package libnssutil3.so also
|
||||
|
||||
* Thu Aug 07 2008 Tomasz Pawel Gajc <tpg@mandriva.org> 2:3.12-1mdv2009.0
|
||||
+ Revision: 265867
|
||||
- update to new version 3.12
|
||||
- drop patch1, fixed upstream
|
||||
- fix file list
|
||||
- spec file clean
|
||||
|
||||
* Tue Jun 17 2008 Thierry Vignaud <tv@mandriva.org> 2:3.11.9-3mdv2009.0
|
||||
+ Revision: 223350
|
||||
- rebuild
|
||||
|
||||
+ Pixel <pixel@mandriva.com>
|
||||
- do not call ldconfig in %%post/%%postun, it is now handled by filetriggers
|
||||
|
||||
* Thu Feb 14 2008 Oden Eriksson <oeriksson@mandriva.com> 2:3.11.9-2mdv2008.1
|
||||
+ Revision: 168377
|
||||
- rebuilt to pickup new root ca's in rootcerts-20080117.00
|
||||
|
||||
* Thu Feb 14 2008 Marcelo Ricardo Leitner <mrl@mandriva.com> 2:3.11.9-1mdv2008.1
|
||||
+ Revision: 167772
|
||||
- New upstream: 3.11.9
|
||||
|
||||
* Thu Feb 07 2008 Per Øyvind Karlsen <peroyvind@mandriva.org> 2:3.11.7-4mdv2008.1
|
||||
+ Revision: 163760
|
||||
- really fix incorrect major
|
||||
- bump back release a bit since neither of previous ones went through :)
|
||||
- bah! nss.pc should be working properly now! %%&#?\194?\164%%#
|
||||
- grf, fix nspr version require and, libdir path and include path
|
||||
- fix nss.pc so we don't ship an old, static one..
|
||||
|
||||
* Thu Dec 20 2007 Oden Eriksson <oeriksson@mandriva.com> 2:3.11.7-3mdv2008.1
|
||||
+ Revision: 135405
|
||||
- use the correct syntax for the rootcerts build dependency
|
||||
- rebuilt to pickup latest rootcerts (hardcoded into the %%{_libdir}/libnssckbi.so library)
|
||||
|
||||
+ Thierry Vignaud <tv@mandriva.org>
|
||||
- kill re-definition of %%buildroot on Pixel's request
|
||||
|
||||
* Fri Jul 20 2007 Funda Wang <fwang@mandriva.org> 2:3.11.7-2mdv2008.0
|
||||
+ Revision: 53912
|
||||
- fix static devel requires
|
||||
|
||||
* Fri Jul 20 2007 Funda Wang <fwang@mandriva.org> 2:3.11.7-1mdv2008.0
|
||||
+ Revision: 53885
|
||||
- fix file list
|
||||
- New version
|
||||
|
||||
* Sun Jun 24 2007 David Walluck <walluck@mandriva.org> 2:3.11.5-5mdv2008.0
|
||||
+ Revision: 43748
|
||||
- add patch for certdata.txt
|
||||
- spec cleanup
|
||||
|
||||
|
||||
* Wed Mar 21 2007 Andreas Hasenack <andreas@mandriva.com> 3.11.5-4mdv2007.1
|
||||
+ Revision: 147547
|
||||
- fix library path
|
||||
- add back Brazilian Gov. certificate
|
||||
- add new Verisign certificate (#29612)
|
||||
|
||||
* Fri Mar 09 2007 David Walluck <walluck@mandriva.org> 2:3.11.5-4mdv2007.1
|
||||
+ Revision: 139555
|
||||
- fix description
|
||||
|
||||
* Fri Mar 09 2007 David Walluck <walluck@mandriva.org> 2:3.11.5-3mdv2007.1
|
||||
+ Revision: 138691
|
||||
- add docs to file list (accidently removed)
|
||||
|
||||
* Fri Mar 09 2007 David Walluck <walluck@mandriva.org> 2:3.11.5-2mdv2007.1
|
||||
+ Revision: 138688
|
||||
- really enable lib
|
||||
static-devel package conflicts with libopenssl-static-devel
|
||||
use find and xargs to remove CVS directories
|
||||
use cp -a everywhere
|
||||
macros
|
||||
mark nss-config as multiarch
|
||||
fix duplicate nss-config in file list
|
||||
run shlibsign in libnss %%post (requires nss)
|
||||
use explicit file list
|
||||
|
||||
* Fri Mar 09 2007 David Walluck <walluck@mandriva.org> 2:3.11.5-1mdv2007.1
|
||||
+ Revision: 138582
|
||||
- 3.11.5
|
||||
|
||||
* Tue Mar 06 2007 Marcelo Ricardo Leitner <mrl@mandriva.com> 2:3.11.4-8mdv2007.1
|
||||
+ Revision: 133767
|
||||
- Fix lib versions on nss-config
|
||||
|
||||
* Tue Mar 06 2007 Marcelo Ricardo Leitner <mrl@mandriva.com> 2:3.11.4-7mdv2007.1
|
||||
+ Revision: 133671
|
||||
- Add support to /usr/bin/nss-config (based on Fedora's one)
|
||||
|
||||
* Sun Mar 04 2007 David Walluck <walluck@mandriva.org> 2:3.11.4-6mdv2007.1
|
||||
+ Revision: 132567
|
||||
- rebuild
|
||||
|
||||
* Wed Feb 21 2007 Götz Waschk <waschk@mandriva.org> 2:3.11.4-5mdv2007.1
|
||||
+ Revision: 123208
|
||||
- rebuild
|
||||
|
||||
+ Oden Eriksson <oeriksson@mandriva.com>
|
||||
- fix deps
|
||||
|
||||
* Fri Feb 09 2007 Marcelo Ricardo Leitner <mrl@mandriva.com> 2:3.11.4-3mdv2007.1
|
||||
+ Revision: 118491
|
||||
- Added pkcs11 devel files to libnss3-devel package.
|
||||
|
||||
* Thu Feb 08 2007 Marcelo Ricardo Leitner <mrl@mandriva.com> 2:3.11.4-2mdv2007.1
|
||||
+ Revision: 118137
|
||||
- Bump epoch, so we upgrade cleanly old firefox's libnss3.
|
||||
- Do not enforce (wrong) nspr version.
|
||||
- Removed patch nss-system-nspr: prefer doing it via env. variables.
|
||||
- Tagged as license LGPL too
|
||||
- Enabled the library.
|
||||
- Do not use chrpath: it is not needed, and we are using this library now.
|
||||
- Fixed epoch stuff on library packages.
|
||||
- Added ldconfig call to library package.
|
||||
|
||||
* Sat Dec 16 2006 David Walluck <walluck@mandriva.org> 1:3.11.4-1mdv2007.1
|
||||
+ Revision: 98079
|
||||
- 3.11.4
|
||||
- Import nss
|
||||
|
||||
* Fri Apr 28 2006 Oden Eriksson <oeriksson@mandriva.com> 1:3.11-1mdk
|
||||
- drop redundant patches; P0,P4
|
||||
- drop upstream patches; P2,P3,P85
|
||||
- added P50,P51 from fedora
|
||||
|
||||
* Fri Nov 11 2005 Oden Eriksson <oeriksson@mandriva.com> 1:3.9.2-1mdk
|
||||
- rolled back to match mozilla-firefox libs
|
||||
- added some patches from the mozilla-firefox package
|
||||
- added P4 to teach it ~/.mozilla
|
||||
|
||||
* Sat Nov 05 2005 Nicolas Lécureuil <neoclust@mandriva.org> 3.10.2-3mdk
|
||||
- Fix BuildRequires
|
||||
|
||||
* Fri Nov 04 2005 Nicolas Lécureuil <neoclust@mandriva.org> 3.10.2-2mdk
|
||||
- Fix BuildRequires
|
||||
|
||||
* Wed Nov 02 2005 David Walluck <walluck@mandrake.org> 0:3.10.2-1mdk
|
||||
- 3.10.2
|
||||
|
||||
* Fri Jan 28 2005 David Walluck <walluck@mandrake.org> 3.9.2-1mdk
|
||||
- release
|
||||
|
||||
11
renegotiate-transitional.patch
Normal file
11
renegotiate-transitional.patch
Normal file
|
|
@ -0,0 +1,11 @@
|
|||
--- mozilla/security/nss/lib/ssl/sslsock.c 2010-07-31 06:33:52.000000000 +0200
|
||||
+++ mozilla/security/nss/lib/ssl/sslsock.c.oden 2010-10-12 16:15:56.536434663 +0200
|
||||
@@ -181,7 +181,7 @@ static sslOptions ssl_defaults = {
|
||||
PR_FALSE, /* noLocks */
|
||||
PR_FALSE, /* enableSessionTickets */
|
||||
PR_FALSE, /* enableDeflate */
|
||||
- 2, /* enableRenegotiation (default: requires extension) */
|
||||
+ 3, /* enableRenegotiation (default: transitional) */
|
||||
PR_FALSE, /* requireSafeNegotiation */
|
||||
PR_FALSE, /* enableFalseStart */
|
||||
};
|
||||
BIN
verisign-class-3-secure-server-ca.der
Normal file
BIN
verisign-class-3-secure-server-ca.der
Normal file
Binary file not shown.
Loading…
Add table
Reference in a new issue