nss 3.13.4 security =180

Libraries to support development of security-enabled applications
Maintained by: gecko@FreeBSD.org
Port Added: 19 Dec 2001 06:30:28
License: not specified in port

---

---

Network Security Services (NSS) is a set of libraries designed to support
cross-platform development of security-enabled server applications.
Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7,
PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security
standards.

WWW: http://www.mozilla.org/projects/security/pki/nss/

CVSWeb : Sources : Main Web Site : Distfiles Availability : PortsMon

---

NOTE: FreshPorts displays only required dependencies information. Optional dependencies are not covered.
Required To Build: archivers/zip, devel/nspr, devel/gmake, lang/perl5.8
Required Libraries: devel/nspr, databases/sqlite3

Required by:
for Libraries

archivers/rpm4 databases/evolution-data-server editors/libreoffice mail/evolution net-im/finch net-im/libpurple net-im/pidgin net-im/pidgin-sipe security/pidgin-encryption security/sssd www/chromium

---

To install the port: cd /usr/ports/security/nss/ && make install clean
To add the package: pkg_add -r nss

---

Configuration Options

     No options to configure

---

Master Sites:

https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_13_4_RTM/src/

http://mirror3.mirrors.tds.net/pub/mozilla.org/security/nss/releases/NSS_3_13_4_RTM/src/

http://mozilla.isc.org/pub/mozilla.org/security/nss/releases/NSS_3_13_4_RTM/src/

http://releases.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_13_4_RTM/src/

http://kyoto-mz-dl.sinet.ad.jp/pub/mozilla.org/security/nss/releases/NSS_3_13_4_RTM/src/

http://jp-nii01.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_13_4_RTM/src/

http://jp-nii02.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_13_4_RTM/src/

http://mozilla.mtk.nao.ac.jp/pub/mozilla.org/security/nss/releases/NSS_3_13_4_RTM/src/

http://mirror.internode.on.net/pub/mozilla/security/nss/releases/NSS_3_13_4_RTM/src/

http://ftp.acc.umu.se/pub/mozilla.org/security/nss/releases/NSS_3_13_4_RTM/src/

http://mozilla.c3sl.ufpr.br/releases/security/nss/releases/NSS_3_13_4_RTM/src/

http://www.gtlib.cc.gatech.edu/pub/mozilla.org/security/nss/releases/NSS_3_13_4_RTM/src/

ftp://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_13_4_RTM/src/

ftp://ftp.fh-wolfenbuettel.de/pub/www/mozilla/security/nss/releases/NSS_3_13_4_RTM/src/

ftp://ftp.informatik.rwth-aachen.de/pub/mirror/ftp.mozilla.org/pub/security/nss/releases/NSS_3_13_4_RTM/src/

http://ring.nict.go.jp/archives/net/www/mozilla/security/nss/releases/NSS_3_13_4_RTM/src/

http://ftp.twaren.net/Unix/Mozilla/security/nss/releases/NSS_3_13_4_RTM/src/

ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/

update to 3.13.4

Update to 3.13.3

update to 3.13.2

add upstream patch, to fix "__GNUC_MINOR is not defined" build error that
causes some ports depending on nss to fail. e.g. net-im/pidgin-sipe.
The patch is taken from https://bugzilla.mozilla.org/show_bug.cgi?id=702090

This patch will be part of the next nss release and can be removed with the next
update.

PR:             ports/164655
PR:             ports/164391
Submitted by:   rm

- update to NSS_3_13_1_WITH_CKBI_1_88_RTM
- some fixes to make the regression tests actually run [1]

Submitted by:   mi [1]

update to CKBI version 1.88 which includes the latest mozilla cert data

Move nspr and nss to gecko@ team. they are part of the mozilla stack.

Talked with flo@ at EuroBSD con 2011

Forced commit to note:
VID: aa5bc971-d635-11e0-b3cf-080027ef73ec

Update to 3.12.11.

This update is based on the nss-3.12.11.with.ckbi.1.87 release.
The only change with the nss-3.12.11 release is that the certs from the
DigiNotar CA are marked a untrusted.

Update to 3.12.10.

PR:             ports/159080
Submitted by:   flo@

Patch a assumtion that uname -m returns the architecture value instead of
MACHINE.
This makes it unbuildable on platforms where these differ (pc98, powerpc64,
sun4v).
Use uname -p to fix this.

PR:             ports/155228
Submitted by:   Nathan Whitehorn <nwhitehorn@FreeBSD.org>

Update to 3.12.9.

Submitted by:   beat

- Update to 3.12.8

Approved by:    kwm

I did a typo of use incorrect braces in there, so it correct.

Submitted by:   Anonymous <swell.k@gmail.com>
Feature safe:   yes

Fix race condition in sqlite3 backend (Bug#564011).

Approved by:    mezz
Feature safe:   yes

Respect the LOCALBASE in a patch to find sqlite3 correct.

PR:             ports/146197
Submitted by:   Anonymous <swell.k@gmail.com>
Feature safe:   yes

Fix the build on powerpc64. By adding CPU_ARCH detection.
And by adding some G5-specific code in mpcpucache.c to detect cacheline sizes.

PR:             ports/147696
Submitted by:   nwhitehorn@

A bunch of changes for the SQLITE3 backend:
1) fix for bug #528467 (C_UnwrapKey didn't work with DSA and EC private keys)
2) fix for bug #526231 (C_GetAttributeValue didn't correctly work)
3) partial fix for bug #564011 (object ID race on keypairgen)
4) use sqlite3 in ports (there is no reason to compile the bundled one)

Approved by:    no objections by marcus and gnome team

Fix the 'nss-config --libs' by remove the '-Wl,-R/usr/local/lib/nss' to allow
other gecko applications to be able to build with nss.

PR:             ports/144994
Submitted by:   mi

- Update to 3.12.6

Approved by:    marcus

Fix build for ia64.

Ok'd by: bland@

Fix subtle (cut'n'paste) bug.

Fix the permissions of the installed header files.

PR:             139245
Submitted by:   Aragon Gouveia <aragon@phat.za.net>

Fix the build on sparc64.

PR:             138877
Submitted by:   beat
Feature safe:   yes

Update to 3.12.4.

PR:             138419
Submitted by:   Aragon Gouveia <aragon@phat.za.net>

Add PowerPC support.

Submitted by:   Andreas Tobler <andreast-list@fgznet.ch>

- Mark MAKE_JOBS_UNSAFE

Submitted by:   David Naylor <naylor.b.david@gmail.com>

- Remove conditional checks for FreeBSD 5.x and older

Enable Elliptic Curve Crypto (ECC)

Requested by:   ale

Add part of missing patch back to fix build of net/lam

Requested by:   mezz

Update to 3.11.9

Fix the build when net/lam installed in system.

PR:             ports/117623 and ports/114871
Reported by:    Alexander Vasyanin <avasyanin@mail.ru>
                Koji Yokota <yokota@res.otaru-uc.ac.jp>

Update to 3.11.7

Update to 3.11.5

Fix a hardcore of /usr/X11R6 to X11BASE.

PR:             ports/110166
Reported by:    John Nielsen <john@jnielsen.net>

Presenting GNOME 2.18 for FreeBSD.  GNOME 2.18 is a departure from recent GNOME
releases in that it focuses more on stability and functionality than on
new features.  Not that it doesn't have its share of new and exciting
items.  See http://www.gnome.org/start/2.18/ for all the goodies in
this release.

GNOME 2.18 for FreeBSD would not have been possible without the hard work
of the FreeBSD GNOME Team and our intrepid band of testers including
J. W. Ballantine, Pawel Worach, Yasuda Keisuke, Pascal Hofstee, miwi,
Yoshihiro Ota, Vladimir Grebenschikov, Jukka A. Ukkonen,
Phillip Neumann, Franz Klammer, and Neal Delmonico.

- Fix after objformat removal

Update to 3.11.4

- Update to 3.11.3

- Remove notes about "make test" since there are known problems in it.

- Update to 3.11.2
- s/INSTALL_PROGRAM/INSTALL_DATA/ on libs

- Update to 3.11.1

- Install libcrmf (needed for firefox 2.0)

Update to 3.11.

PR:             92017
Submitted by:   mi

- Add SHA256 checksums

- Revert back to MASTER_SITE_MOZILLA

The distfile was rerolled to include a dbm subdirectory (which we no longer
use), and a RELEASE bump.  There is no need to reinstall this port if you
already have it installed.

- Distfile was rerolled; put old distfile on MASTER_SITE_LOCAL for now

Reported by:    few

Disable automatic tests on all versions of FreeBSD as they seem to fail in
a read-only port directory.  More investigation is needed.

Reported by:    GNOME Tinderbox
Approved by:    portmgr (implicit)

Disable the automatic tests on 4.X.  They are known to fail.

Reported by:    pointyhat via kris
Approved by:    portmgr (implicit)

Re-add IGNORE message for Alpha < 500035.

Reported by:    mjl on #freebsd-gnome

* Update to 3.10 [1]
* Add a target for regression testing, and run that target automatically
  when building on the package build cluster [1]
* Cleanup some portlint nits

Submitted by:   mi [1]

- Add (or fix) CONFLICTS line. The ports install bin/digest.

Approved by:    portmgr (krion)

Remove redundant USE_PERL5_BUILD.

Reported by:            Matthew Luckie <mjl@luckie.org.nz>

update to 3.9.2. Fixes a remote exploitable buffer overflow:
 
<http://www.freebsd.org/ports/portaudit/207f8ff3-f697-11d8-81b0-000347a4fa7d.html>

Unbreak on ia64 and alpha by linking directly with libc.

BROKEN on alpha and ia64: Does not compile

* Shorten COMMENT to appease portlint
* Mark IGNORE on 4.X and old 5.X versions on the Alpha architecture

Link this library symbolically so that it can be linked into executables
along with OpenSSL.  Without this, there is a symbol conflict with
MD5_Update() which can cause applications such as Evolution 1.5 to crash
when Kerberos support is enabled.

The longer-term goal is to configure Mozilla's internal NSS to be linked
symbolically which should allow us to enable OpenSSL support in gnomevfs2.

Update to 3.9.  This fixes a lockup with Evolution 1.5.5 generating a new
certificate.

Bump PORTREVISION on all ports that depend on gettext to aid with upgrading.

(Part 1)

Bump PORTREVISION, secondary to previous commit.

Reminded by:    marcus

Use ${PTHREAD_LIBS}.

Add CONFLICTS for ports that install files with the same name.

Submitted by:   Oliver Eikemeier <eikemeier@fillmore-labs.com>

Update to 3.8.

PR:     50797
Submitted by:   Oliver Eikemeier <eikemeier@fillmore-labs.com>

Clear moonlight beckons.
Requiem mors pacem pkg-comment,
And be calm ports tree.

E Nomini Patri, E Fili, E Spiritu Sancti.

Use USE_PERL5_BUILD where appropriate, instead of hardcoding
${PORTSDIR}/lang/perl5 as a dependency.

Sponsored by:   Porta Software Ltd
Approved by:    portmgr

Use the new USE_PERL5_BUILD when adding the build dependency on Perl.

Ports didn't build without USE_PERL5=yes
Noticed on: bento

Add a missing BUILD_DEPENDS on perl5.

Submitted by:   bento

Switch to using MASTER_SITE_MOZILLA.

Inspired by:    ports/41460

Update to 3.4.2.

Fix the build in the situations when minor number of ${OSREL} defined in the  
bsd.port.mk is different from one detected by port's build system. This   should
fix the build on bento, where ${OSREL} is 4.5, while the build system   detects
it as 4.4. Note: this is a workarround - we should investigate and   fix the
real source of the problem when we have more time.    

Add nss 3.3.1, a set of libraries to support development of   security-enabled
applications.    

12 vulnerabilities affecting 17 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities