From nobody Fri Sep 16 10:58:32 2022 X-Original-To: dev-commits-ports-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4MTWJm3NNHz4cQ1S; Fri, 16 Sep 2022 10:58:32 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4MTWJm2p3tz4D4g; Fri, 16 Sep 2022 10:58:32 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1663325912; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=s9/ExJVsLbk4sGLQo3n/bEwqEaXEwkVbG6lUtPzzsI8=; b=c0vj1pvDnn6aJ4AhiR0FC5J09z1dXaCZKWTiKE3ZdkH2vt5dg4XURrKhybBJQbBR4Ee1J6 /YFIZwuzgZhpfF5LygKO6RQq7PvI5XfSX3zYGxmXeYJ1nBi7H5zAvrpVuE/xmdZ1QeVLsc DpdSUHURFJu6URCMQD4YBzyx28+E0+vbgwczfbgsBidQ4KR8cFvZPKkx4vPAo9M0Vay6cj uUUK2klEHs9FcdvJzlGZX1mkCaaErAs7IHqBBtNYIpW0/VT4R3MQ9vylSPjrQWG7eLAIOm 0SQ6LswcpncXlKlwAndFFn/s6ZDFsk5CUIeJA4XTnHA3h3H1Mk9tIVTlwln1Uw== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4MTWJm1gLTzKyX; Fri, 16 Sep 2022 10:58:32 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.16.1/8.16.1) with ESMTP id 28GAwWRY014111; Fri, 16 Sep 2022 10:58:32 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.16.1/8.16.1/Submit) id 28GAwWaK014110; Fri, 16 Sep 2022 10:58:32 GMT (envelope-from git) Date: Fri, 16 Sep 2022 10:58:32 GMT Message-Id: <202209161058.28GAwWaK014110@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Jochen Neumeister Subject: git: aa43592e856b - main - security/ca_root_nss: Update to 3.83 List-Id: Commits to the main branch of the FreeBSD ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-ports-main@freebsd.org X-BeenThere: dev-commits-ports-main@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: joneum X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: aa43592e856baaa1da52bfe6a853dea81e231912 Auto-Submitted: auto-generated ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1663325912; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=s9/ExJVsLbk4sGLQo3n/bEwqEaXEwkVbG6lUtPzzsI8=; b=JnY9vdjb9uYGRmuu6tqfSx/ne9aViVuS8dTHXvU4SkQLOS+hXuR1D3t27y0R0dqPpLSoAu pR0ukN+8VpyJue7dVtKwlZ5cc/Mzhm4YyaQ9QMEqVd/qk85GXEBkIiaxUBk3Ik5slIhUx9 75RyuA7FhRlABr7Rmp8gm4iqLNk13bHUNmzeefY4hczbUxnZ52SSMXubnqghz+zG/mVw4D NDsTzHtLyLxFUhULthKV0zlEah/HigM123dBPK95sSNARGZ2nxRGvuTaTGqcMI0BV7NcfL 9AfVaEtDzMZB3wvZ19UnrsJNqayBiVUCUyM0+aFTg1qXivu+OSNYKKuB8+TLAA== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1663325912; a=rsa-sha256; cv=none; b=KLO0EhJqhcieerrEAR/kbiECtNTTy7yghLKffZL3ZfSkJ976VZk0AYPH5m3OVlyaGxQAB3 tdoEkM2Kf5BNYblmmeXf+AI2+IK8ThCOJ7l/KV/5qdzD6Gjr/4XKrJi7lJefBm17ZPURbS IFMDiBxYbV9ufM/B1Csu0sVhSl41um13qrTz24pHl+JD/OhGSNJuzk+N6YLfcafwJYk2Hz pZv2/L5KlJLATl+EFiF4gfh/NJa2XjG3ZpFNZTYLawpCG/F6Zu3lvDr4Es3JdLp/mZLffR KRcGIfkoFYG5zdv4EwUC7gd/IE+EN4+x7eDYNspUqy5YpTkz77Wmz1k2s7FLOQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none X-ThisMailContainsUnwantedMimeParts: N The branch main has been updated by joneum: URL: https://cgit.FreeBSD.org/ports/commit/?id=aa43592e856baaa1da52bfe6a853dea81e231912 commit aa43592e856baaa1da52bfe6a853dea81e231912 Author: Jochen Neumeister AuthorDate: 2022-09-16 10:56:30 +0000 Commit: Jochen Neumeister CommitDate: 2022-09-16 10:58:25 +0000 security/ca_root_nss: Update to 3.83 Changelog: Network Security Services (NSS) 3.83 was released on 15 September 2022. The HG tag is NSS_3_83_RTM. This version of NSS requires NSPR 4.34.1 or newer. Changes: - Bug 1788875 - Remove set-but-unused variables from SEC_PKCS12DecoderValidateBags - Bug 1563221 - remove older oses that are unused part3/ BeOS - Bug 1563221 - remove older unix support in NSS part 3 Irix - Bug 1563221 - remove support for older unix in NSS part 2 DGUX - Bug 1563221 - remove support for older unix in NSS part 1 OSF - Bug 1778413 - Set nssckbi version number to 2.58 - Bug 1785297 - Add two SECOM root certificates to NSS - Bug 1787075 - Add two DigitalSign root certificates to NSS - Bug 1778412 - Remove Camerfirma Global Chambersign Root from NSS - Bug 1771100 - Added bug reference and description to disabled UnsolicitedServerNameAck bogo ECH test - Bug 1779361 - Removed skipping of ECH on equality of private and public server name - Bug 1779357 - Added comment and bug reference to ECHRandomHRRExtension bogo test - Bug 1779370 - Added Bogo shim client HRR test support. Fixed overwriting of CHInner.random on HRR - Bug 1779234 - Added check for server only sending ECH extension with retry configs in EncryptedExtensions and if not accepting ECH. Changed config setting behavior to skip configs with unsupported mandatory extensions instead of failing - Bug 1771100 - Added ECH client support to BoGo shim. Changed CHInner creation to skip TLS 1.2 only extensions to comply with BoGo - Bug 1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH server accept_confirmation bugs - Bug 1771100 - Update BoGo tests to recent BoringSSL version - Bug 1785846 - Bump minimum NSPR version to 4.34.1 NSS 3.83 shared libraries are backwards-compatible with all older NSS 3.x shared libraries. A program linked with older NSS 3.x shared libraries will work with this new version of the shared libraries without recompiling or relinking. Furthermore, applications that restrict their use of NSS APIs to the functions listed in NSS Public Functions will remain compatible with future versions of the NSS shared libraries. Sponsored by: Netzkommune GmbH --- security/ca_root_nss/Makefile | 2 +- security/ca_root_nss/distinfo | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/security/ca_root_nss/Makefile b/security/ca_root_nss/Makefile index 0c997a60a338..cfde4021d1fa 100644 --- a/security/ca_root_nss/Makefile +++ b/security/ca_root_nss/Makefile @@ -28,7 +28,7 @@ ETCSYMLINK_CONFLICTS_INSTALL= ca-roots-[0-9]* CERTDIR?= share/certs PLIST_SUB+= CERTDIR=${CERTDIR} -VERSION_NSS= 3.82 +VERSION_NSS= 3.83 CERTDATA_TXT_PATH= lib/ckfw/builtins/certdata.txt BUNDLE_PROCESSOR= MAca-bundle.pl diff --git a/security/ca_root_nss/distinfo b/security/ca_root_nss/distinfo index fdfc2f25b785..221d5d356f36 100644 --- a/security/ca_root_nss/distinfo +++ b/security/ca_root_nss/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1663230185 -SHA256 (nss-3.82.tar.gz) = 32bf673b72c2f9953ed3b4c7033abf5a6cad302854a24ae588c575a6567c1573 -SIZE (nss-3.82.tar.gz) = 84708994 +TIMESTAMP = 1663323124 +SHA256 (nss-3.83.tar.gz) = ab23ea67f964090b8b73c80a674082571c36e5f4eba92057ac648c9c1def0128 +SIZE (nss-3.83.tar.gz) = 84844191