about summary refs log tree commit diff
path: root/pkgs/development/libraries/nss
AgeCommit message (Collapse)AuthorFilesLines
2023-01-06nss_latest: 3.86 -> 3.87ajs1241-2/+2
https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_87.html
2023-01-02nss: set -DNS_PTR_LE_32=1 if isILP32Adam Joseph1-1/+5
A comment in RNG_RandomUpdate() (drdbg.c) says to add the -DNS_PTR_LE_32=1 flag on ILP32 platforms. Without this PR, pkgsCross.mips64el-linux-gnuabin32.nss fails to build. With this PR, it succeeds.
2022-12-09nss_latest: 3.85 -> 3.86ajs1241-2/+2
https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/NqCkaX216zY/m/QAUPTaBWCgAJ
2022-11-11nss_latest: 3.84 -> 3.85ajs1243-12/+12
https://github.com/nss-dev/nss/blob/master/doc/rst/releases/nss_3_85.rst
2022-10-26nss: 3.79.1 -> 3.79.2Martin Weinelt1-2/+2
https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/dbVxfMyXEyE
2022-10-13nss: 3.83 -> 3.84Martin Weinelt1-2/+2
https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/uV-FYp6SUr8/m/M5TvBj0eAQAJ
2022-09-20Merge remote-tracking branch 'origin/master' into staging-nextMartin Weinelt1-2/+2
2022-09-15nss_latest: 3.82 -> 3.83Martin Weinelt1-2/+2
https://github.com/nss-dev/nss/blob/master/doc/rst/releases/nss_3_83.rst
2022-09-03nss: 3.68.4 -> 3.79.1Martin Weinelt1-2/+2
The 3.68.4 release was the last of the 3.68 ESR series and 3.79 is the new ESR series. https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_79.html https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_79_1.html
2022-08-19nss: migrate manual patching into postPatchMartin Weinelt1-11/+9
2022-08-19nss: Drop ckpem patchMartin Weinelt2-12/+0
It's usefulness is not clear to us maintainers.
2022-08-19nss: Drop nss-pem patchsetMartin Weinelt1-12/+0
The patch url went 404 and other distros¹ have discarded it as well in favor of packaging nss-pem² [1] https://gitweb.gentoo.org/repo/gentoo.git/commit/dev-libs/nss?id=5eca3e02c87163b3c541cdee893830d201abfb86 [2] https://github.com/kdudka/nss-pem
2022-08-18nss_latest: 3.81 -> 3.82Martin Weinelt1-2/+2
https://github.com/nss-dev/nss/blob/master/doc/rst/releases/nss_3_82.rst
2022-08-06nss: test individual firefox versions in passthruMartin Weinelt1-0/+7
2022-07-21nss_latest: 3.80 -> 3.81ajs1241-2/+2
https://github.com/nss-dev/nss/blob/master/doc/rst/releases/nss_3_81.rst
2022-06-24nss_latest: 3.79 -> 3.80ajs1241-2/+2
https://github.com/nss-dev/nss/blob/master/doc/rst/releases/nss_3_80.rst
2022-06-12Revert "nss: 3.68.4 -> 3.79"Martin Weinelt1-2/+2
This reverts commit 1c76a270d2d0331aaed02a308acb607e81e5c414. This breaks the Firefox 91esr build, which is apparently not compatible with this NSS version. /build/firefox-91.10.0/security/certverifier/OCSPVerificationTrustDomain.cpp:63:11: error: unknown type name 'SignedDigest' Will revisit this upgrade, when we drop 91esr in favor of 102esr soon.
2022-06-08nss: 3.68.4 -> 3.79ajs1241-2/+2
This ESR branch has reached EOL: https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/-z6f6dOWx9A/m/Bpl8VWd_FwAJ
2022-06-01nss: sha256 -> hashajs1243-4/+4
2022-06-01nss_latest: 3.78 -> 3.79ajs1241-2/+2
https://github.com/nss-dev/nss/blob/master/doc/rst/releases/nss_3_79.rst
2022-06-01nss_esr: 3.68.3 -> 3.68.4ajs1241-2/+2
https://github.com/nss-dev/nss/blob/master/doc/rst/releases/nss_3_68_4.rst
2022-05-03nss_latest: 3.77 -> 3.78Martin Weinelt2-4/+4
https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_78.html Fixes the ordering of the security load patchset to save us rebuilds.
2022-05-03Revert "Revert "nss_latest: 3.76.1 -> 3.77""Martin Weinelt3-3/+83
This reverts commit 79a5b548cc48770c062a6a60503628017ea0855e.
2022-04-06Revert "nss_latest: 3.76.1 -> 3.77"Martin Weinelt3-83/+3
This reverts commit eb9c616c79596c9ff43ec9e7ced46c4739a16047. Breaks the Firefox build and needs further investigation. In file included from Unified_cpp_certverifier0.cpp:47: /build/firefox-99.0/security/certverifier/OCSPVerificationTrustDomain.cpp:63:11: error: unknown type name 'SignedDigest' const SignedDigest& aSignedDigest, Input aSubjectPublicKeyInfo) { ^ /build/firefox-99.0/security/certverifier/OCSPVerificationTrustDomain.cpp:74:11: error: unknown type name 'SignedDigest' const SignedDigest& aSignedDigest, Input aSubjectPublicKeyInfo) { ^ https://github.com/NixOS/nixpkgs/pull/164511#issuecomment-1089496003
2022-04-03nss_latest: 3.76.1 -> 3.77ajs1243-3/+83
2022-04-03nss_latest: 3.76 -> 3.76.1ajs1241-2/+2
2022-04-03nss: add maintainersajs1241-1/+1
2022-04-03nss: split into nss_latest and nss_esrajs1243-8/+16
2022-03-14nss: 3.75 -> 3.76ajs1241-3/+5
https://github.com/nss-dev/nss/blob/master/doc/rst/releases/nss_3_76.rst
2022-02-04nss: 3.74 -> 3.75ajs1241-2/+2
2022-01-06nss: 3.73.1 -> 3.74ajs1241-2/+2
2021-12-25nss: 3.73 -> 3.73.1 (#151041)R. RyanTM1-2/+2
2021-12-02nss: 3.72 -> 3.73 (#148219)Léo Gaspard1-2/+2
Update done by running the `nss` and `cacert` update scripts, then running nixpkgs-check to validate things look good enough to be thrown at hydra
2021-11-15Merge #144218: nss: 3.71 -> 3.72 (into staging)Vladimír Čunát1-2/+2
2021-11-02nss_3_53: dropMartin Weinelt1-180/+0
2021-11-02nss: 3.71 -> 3.72R. Ryantm1-2/+2
2021-10-15Merge remote-tracking branch 'origin/staging' into staging-nextMartin Weinelt1-2/+2
2021-10-13treewide: use stdenv.hostPlatform.extensions.sharedLibrary where appropriateAlyssa Ross2-6/+2
2021-09-30nss: 3.70 -> 3.71ajs1241-2/+2
2021-09-16nss: Add updateScriptTim Steinbach2-0/+12
2021-09-09nss: 3.68 -> 3.70Tim Steinbach1-2/+2
2021-08-10nss: format, cleanupSandro Jäckel1-71/+85
2021-08-10nss: format, cleanupSandro Jäckel1-66/+82
2021-07-18Merge staging-next into staginggithub-actions[bot]1-5/+2
2021-07-17various: cleanup of "inherit version;"Felix Buehler1-5/+2
2021-07-12nss: 3.67 -> 3.68ajs1241-2/+2
2021-06-14nss: 3.66 -> 3.67ajs1241-2/+2
2021-06-02Merge pull request #125280 from zhaofengli/nss-use-64Martin Weinelt1-1/+1
nss: Set NSS_USE_64=1 for 64-bit platforms
2021-06-01nss: 3.64 -> 3.66ajs1241-2/+2
2021-06-01nss: Set NSS_USE_64=1 for 64-bit platformsZhaofeng Li1-1/+1
The config script does that automatically for a few architectures [1], but on 64-bit platforms that are not listed (like riscv64) the freebl build fails. Debian always adds the USE_64=1 flag when compiling on 64-bit architectures (they use legacy make instead of gyp), and we should do that as well to fix the general problem at the cost of a mass rebuild. [1] https://hg.mozilla.org/projects/nss/file/0ef2306a623f8fcd90f094281678f3ee9e7e4738/coreconf/config.gypi#l212 [2] https://salsa.debian.org/mozilla-team/nss/-/blob/c446c61808a3a30bb0c6c62cc6628ede3f7bc205/debian/rules#L66