From owner-freebsd-gecko@FreeBSD.ORG Fri Feb 18 23:14:34 2011 Return-Path: Delivered-To: freebsd-gecko@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 78DFE1065694 for ; Fri, 18 Feb 2011 23:14:34 +0000 (UTC) (envelope-from svn-freebsd-gecko@chruetertee.ch) Received: from trillian.chruetertee.ch (trillian.chruetertee.ch [217.150.245.56]) by mx1.freebsd.org (Postfix) with ESMTP id 784418FC23 for ; Fri, 18 Feb 2011 23:14:33 +0000 (UTC) Received: from trillian.chruetertee.ch (trillian [217.150.245.56]) by trillian.chruetertee.ch (8.14.3/8.14.3) with ESMTP id p1INEWN1064867 for ; Fri, 18 Feb 2011 23:14:32 GMT (envelope-from svn-freebsd-gecko@chruetertee.ch) Received: (from www@localhost) by trillian.chruetertee.ch (8.14.3/8.14.3/Submit) id p1INEQLr061595 for freebsd-gecko@freebsd.org; Fri, 18 Feb 2011 23:14:26 GMT (envelope-from svn-freebsd-gecko@chruetertee.ch) Date: Fri, 18 Feb 2011 23:14:26 GMT Message-Id: <201102182314.p1INEQLr061595@trillian.chruetertee.ch> X-Authentication-Warning: trillian.chruetertee.ch: www set sender to svn-freebsd-gecko@chruetertee.ch using -f From: svn-freebsd-gecko@chruetertee.ch To: freebsd-gecko@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Subject: [SVN-Commit] r492 - in branches/experimental/security: . nss nss/files X-BeenThere: freebsd-gecko@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: freebsd-gecko@freebsd.org List-Id: Gecko Rendering Engine issues List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Feb 2011 23:14:34 -0000 Author: beat Date: Fri Feb 18 23:14:26 2011 New Revision: 492 Log: - Add security/nss and update to 3.12.9 Added: branches/experimental/security/ branches/experimental/security/nss/ branches/experimental/security/nss/Makefile branches/experimental/security/nss/distinfo branches/experimental/security/nss/files/ branches/experimental/security/nss/files/nss-config.in branches/experimental/security/nss/files/nss.pc.in branches/experimental/security/nss/files/patch-..::coreconf::FreeBSD.mk branches/experimental/security/nss/files/patch-..::coreconf::command.mk branches/experimental/security/nss/files/patch-..::coreconf::rules.mk branches/experimental/security/nss/files/patch-Makefile branches/experimental/security/nss/files/patch-const branches/experimental/security/nss/files/patch-lib_freebl_mpi_mpcpucache.c branches/experimental/security/nss/files/patch-lib_softoken_manifest.mn branches/experimental/security/nss/files/patch-lib_softoken_pkcs11c.c branches/experimental/security/nss/files/patch-sysdb branches/experimental/security/nss/files/patch-tests branches/experimental/security/nss/pkg-descr branches/experimental/security/nss/pkg-plist Added: branches/experimental/security/nss/Makefile ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ branches/experimental/security/nss/Makefile Fri Feb 18 23:14:26 2011 (r492) @@ -0,0 +1,96 @@ +# Ports collection Makefile for: nss +# Date created: 18 December 2001 +# Whom: Maxim Sobolev +# +# $FreeBSD: ports/security/nss/Makefile,v 1.54 2010/10/21 11:19:12 beat Exp $ +# $MCom ports-experimental/security/nss/Makefile,v 1.4 2008/02/23 15:47:28 ahze Exp $ + +PORTNAME= nss +PORTVERSION= ${_MAJOR}.${_MINOR}.${_PATCH} +CATEGORIES= security +MASTER_SITES= ${MASTER_SITE_MOZILLA} +MASTER_SITE_SUBDIR= security/nss/releases/NSS_${PORTVERSION:S/./_/g}_RTM/src + +MAINTAINER= gnome@FreeBSD.org +COMMENT= Libraries to support development of security-enabled applications + +BUILD_DEPENDS= zip:${PORTSDIR}/archivers/zip +LIB_DEPENDS= nspr4.1:${PORTSDIR}/devel/nspr \ + sqlite3.8:${PORTSDIR}/databases/sqlite3 + +_MAJOR= 3 +_MINOR= 12 +_PATCH= 9 + +WRKSRC= ${WRKDIR}/${DISTNAME}/mozilla/security/nss + +MAKE_JOBS_UNSAFE= yes +USE_LDCONFIG= ${PREFIX}/lib/nss +USE_GMAKE= yes +USE_PERL5_BUILD=yes +MAKE_ENV= BSD_LDOPTS="${PTHREAD_LIBS} -L${LOCALBASE}/lib" \ + BUILD_OPT=1 NSS_ENABLE_ECC=1 NSS_USE_SYSTEM_SQLITE=1 +ALL_TARGET= nss_build_all +CFLAGS+= -I${LOCALBASE}/include/nspr -L${LOCALBASE}/lib + +DIST= ${WRKSRC:H:H}/dist + +EXTERNALS= CVS dbm security/nss/cmd/zlib nsprpub security/dbm +EXTRACT_AFTER_ARGS=| ${TAR} -xf - \ + ${EXTERNALS:C,^,--exclude ${DISTNAME}/mozilla/,} + +BINS=${DIST}/${OPSYS}${OSREL}_OPT.OBJ + +INSTALL_BINS= certcgi certutil checkcert cmsutil crlutil derdump makepqg \ + mangle modutil ocspclnt oidcalc p7content p7env p7sign \ + p7verify pk12util rsaperf shlibsign signtool signver \ + ssltap strsclnt symkeyutil vfychain vfyserv + +test: + cd ${WRKSRC}/tests; \ + ${SETENV} PATH="${BINS}/bin:${PATH}" \ + LD_LIBRARY_PATH="${BINS}/lib" \ + ./all.sh + @if ${GREP} -F '>Failed<' \ + ${WRKSRC:H:H}/tests_results/security/*/results.html; then \ + echo "Some tests have failed. Let ${MAINTAINER} know."; \ + exit 1; \ + else \ + echo "All tests succeeded. Good news."; \ + fi + +post-patch: + @${REINPLACE_CMD} -e "s|-pthread|${PTHREAD_LIBS}|g" \ + ${WRKSRC:H:H}/security/coreconf/FreeBSD.mk + @${SED} -e 's|@exec_prefix@|${PREFIX}|; \ + s|@includedir@|${PREFIX}/include/nss|; \ + s|@libdir@|${PREFIX}/lib/nss|; \ + s|@prefix@|${PREFIX}|' \ + ${FILESDIR}/nss-config.in >${WRKDIR}/nss-config + @${SED} -e 's|@PREFIX@|${PREFIX}|; s|@PORTVERSION@|${PORTVERSION}|' \ + ${FILESDIR}/nss.pc.in >${WRKDIR}/nss.pc +.for i in MAJOR MINOR PATCH + @${SED} -i.${i} -e 's|@${i}@|${_${i}}|' ${WRKDIR}/nss-config +.endfor + @cd ${WRKSRC} && \ + ${FIND} . -name "*.c" -o -name "*.h" | \ + ${XARGS} ${REINPLACE_CMD} -e 's|"nspr.h"||' + +do-install: + ${MKDIR} ${PREFIX}/include/nss/nss ${PREFIX}/lib/nss + ${FIND} ${DIST}/public/nss -type l \ + -exec ${INSTALL_DATA} {} ${PREFIX}/include/nss/nss \; + ${INSTALL_DATA} ${DIST}/FreeBSD${OSREL:C/.$/*/}_OPT.OBJ/lib/*.so.1 \ + ${PREFIX}/lib/nss + ${INSTALL_DATA} ${DIST}/FreeBSD${OSREL:C/.$/*/}_OPT.OBJ/lib/libcrmf.a \ + ${PREFIX}/lib/nss +.for bin in ${INSTALL_BINS} + ${INSTALL_PROGRAM} ${DIST}/FreeBSD${OSREL:C/.$/*/}_OPT.OBJ/bin/${bin} \ + ${PREFIX}/bin +.endfor + cd ${DIST}/FreeBSD${OSREL:C/.$/*/}_OPT.OBJ/lib && \ + ${TAR} -cf - *.so | ${TAR} --unlink -C ${PREFIX}/lib/nss -xf - + ${INSTALL_SCRIPT} ${WRKDIR}/nss-config ${PREFIX}/bin + ${INSTALL_DATA} ${WRKDIR}/nss.pc ${PREFIX}/libdata/pkgconfig + +.include Added: branches/experimental/security/nss/distinfo ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ branches/experimental/security/nss/distinfo Fri Feb 18 23:14:26 2011 (r492) @@ -0,0 +1,2 @@ +SHA256 (nss-3.12.9.tar.gz) = 0dc77718016654bbf6ffdda09e968e2b2875c05dacec967abf5725b5daae5978 +SIZE (nss-3.12.9.tar.gz) = 5984608 Added: branches/experimental/security/nss/files/nss-config.in ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ branches/experimental/security/nss/files/nss-config.in Fri Feb 18 23:14:26 2011 (r492) @@ -0,0 +1,145 @@ +#!/bin/sh + +prefix=@prefix@ + +major_version=@MAJOR@ +minor_version=@MINOR@ +patch_version=@PATCH@ + +usage() +{ + cat <&2 +fi + +lib_ssl=yes +lib_smime=yes +lib_nss=yes +lib_nssutil=yes + +while test $# -gt 0; do + case "$1" in + -*=*) optarg=`echo "$1" | sed 's/[-_a-zA-Z0-9]*=//'` ;; + *) optarg= ;; + esac + + case $1 in + --prefix=*) + prefix=$optarg + ;; + --prefix) + echo_prefix=yes + ;; + --exec-prefix=*) + exec_prefix=$optarg + ;; + --exec-prefix) + echo_exec_prefix=yes + ;; + --includedir=*) + includedir=$optarg + ;; + --includedir) + echo_includedir=yes + ;; + --libdir=*) + libdir=$optarg + ;; + --libdir) + echo_libdir=yes + ;; + --version) + echo ${major_version}.${minor_version}.${patch_version} + ;; + --cflags) + echo_cflags=yes + ;; + --libs) + echo_libs=yes + ;; + ssl) + lib_ssl=yes + ;; + smime) + lib_smime=yes + ;; + nss) + lib_nss=yes + ;; + nssutil) + lib_nssutil=yes + ;; + *) + usage 1 1>&2 + ;; + esac + shift +done + +# Set variables that may be dependent upon other variables +if test -z "$exec_prefix"; then + exec_prefix=@exec_prefix@ +fi +if test -z "$includedir"; then + includedir=@includedir@ +fi +if test -z "$libdir"; then + libdir=@libdir@ +fi + +if test "$echo_prefix" = "yes"; then + echo $prefix +fi + +if test "$echo_exec_prefix" = "yes"; then + echo $exec_prefix +fi + +if test "$echo_includedir" = "yes"; then + echo $includedir +fi + +if test "$echo_libdir" = "yes"; then + echo $libdir +fi + +if test "$echo_cflags" = "yes"; then + echo -I$includedir +fi + +if test "$echo_libs" = "yes"; then + libdirs="-L$libdir" + if test -n "$lib_ssl"; then + libdirs="$libdirs -lssl${major_version}" + fi + if test -n "$lib_smime"; then + libdirs="$libdirs -lsmime${major_version}" + fi + if test -n "$lib_nss"; then + libdirs="$libdirs -lnss${major_version}" + fi + if test -n "$lib_nssutil"; then + libdirs="$libdirs -lnssutil${major_version}" + fi + echo $libdirs +fi + Added: branches/experimental/security/nss/files/nss.pc.in ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ branches/experimental/security/nss/files/nss.pc.in Fri Feb 18 23:14:26 2011 (r492) @@ -0,0 +1,11 @@ +prefix=@PREFIX@ +exec_prefix=@PREFIX@ +libdir=@PREFIX@/lib/nss +includedir=@PREFIX@/include + +Name: NSS +Description: Mozilla Network Security Services +Version: @PORTVERSION@ +Requires: nspr +Libs: -L${libdir} -lnss3 -lsmime3 -lssl3 -lnssutil3 +Cflags: -I${includedir}/nss -I${includedir}/nss/nss Added: branches/experimental/security/nss/files/patch-..::coreconf::FreeBSD.mk ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ branches/experimental/security/nss/files/patch-..::coreconf::FreeBSD.mk Fri Feb 18 23:14:26 2011 (r492) @@ -0,0 +1,76 @@ +--- ../../security/coreconf/FreeBSD.mk.orig 2009-08-22 07:33:09.000000000 +0200 ++++ ../../security/coreconf/FreeBSD.mk 2010-03-28 23:01:33.000000000 +0200 +@@ -37,9 +37,9 @@ + + include $(CORE_DEPTH)/coreconf/UNIX.mk + +-DEFAULT_COMPILER = gcc +-CC = gcc +-CCC = g++ ++DEFAULT_COMPILER = $(CC) ++CC ?= gcc ++CCC = $(CXX) + RANLIB = ranlib + + CPU_ARCH = $(OS_TEST) +@@ -50,7 +50,26 @@ + CPU_ARCH = x86 + endif + ifeq ($(CPU_ARCH),amd64) +-CPU_ARCH = x86_64 ++CPU_ARCH = amd64 ++USE_64 = 1 ++endif ++ifeq ($(OS_TEST),alpha) ++CPU_ARCH = alpha ++endif ++ifeq ($(OS_TEST),powerpc64) ++CPU_ARCH = powerpc ++USE_64 = 1 ++endif ++ifeq ($(OS_TEST),powerpc) ++CPU_ARCH = powerpc ++endif ++ifeq ($(OS_TEST),sparc64) ++CPU_ARCH = sparc64 ++USE_64 = 1 ++endif ++ifeq ($(OS_TEST),ia64) ++CPU_ARCH = ia64 ++USE_64 = 1 + endif + + OS_CFLAGS = $(DSO_CFLAGS) -ansi -Wall -Wno-switch -DFREEBSD -DHAVE_STRERROR -DHAVE_BSD_FLOCK +@@ -65,20 +80,18 @@ + USE_PTHREADS = 1 + DEFINES += -D_THREAD_SAFE -D_REENTRANT + OS_LIBS += -pthread +-DSO_LDOPTS += -pthread ++DSO_LDOPTS += $(BSD_LDOPTS) + endif + + ARCH = freebsd + +-MOZ_OBJFORMAT := $(shell test -x /usr/bin/objformat && /usr/bin/objformat || echo elf) ++DLL_SUFFIX = so.1 + +-ifeq ($(MOZ_OBJFORMAT),elf) +-DLL_SUFFIX = so ++ifneq (,$(filter alpha ia64,$(OS_TEST))) ++MKSHLIB = $(CC) -Wl,-Bsymbolic -lc $(DSO_LDOPTS) + else +-DLL_SUFFIX = so.1.0 ++MKSHLIB = $(CC) -Wl,-Bsymbolic $(DSO_LDOPTS) + endif +- +-MKSHLIB = $(CC) $(DSO_LDOPTS) + ifdef MAPFILE + MKSHLIB += -Wl,--version-script,$(MAPFILE) + endif +@@ -87,4 +100,5 @@ + + G++INCLUDES = -I/usr/include/g++ + +-INCLUDES += -I/usr/X11R6/include ++USE_SYSTEM_ZLIB = 1 ++ZLIB_LIBS = -lz Added: branches/experimental/security/nss/files/patch-..::coreconf::command.mk ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ branches/experimental/security/nss/files/patch-..::coreconf::command.mk Fri Feb 18 23:14:26 2011 (r492) @@ -0,0 +1,9 @@ +--- ../coreconf/command.mk Mon Oct 10 19:46:12 2005 ++++ ../coreconf/command.mk Wed Jan 18 17:23:28 2006 +@@ -46,5 +46,5 @@ + LINK_DLL = $(LINK) $(OS_DLLFLAGS) $(DLLFLAGS) + LINK_EXE = $(LINK) $(OS_LFLAGS) $(LFLAGS) +-CFLAGS = $(OPTIMIZER) $(OS_CFLAGS) $(XP_DEFINE) $(DEFINES) $(INCLUDES) \ ++CFLAGS += $(OPTIMIZER) $(OS_CFLAGS) $(XP_DEFINE) $(DEFINES) $(INCLUDES) \ + $(XCFLAGS) + RANLIB = echo Added: branches/experimental/security/nss/files/patch-..::coreconf::rules.mk ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ branches/experimental/security/nss/files/patch-..::coreconf::rules.mk Fri Feb 18 23:14:26 2011 (r492) @@ -0,0 +1,10 @@ +--- ../coreconf/rules.mk.orig Sat Jan 6 00:48:54 2007 ++++ ../coreconf/rules.mk Fri Mar 23 10:15:46 2007 +@@ -114,6 +114,7 @@ + endif + ifdef SHARED_LIBRARY + $(INSTALL) -m 775 $(SHARED_LIBRARY) $(SOURCE_LIB_DIR) ++ ln -sf $(notdir $(SHARED_LIBRARY)) $(SOURCE_LIB_DIR)/$(notdir $(SHARED_LIBRARY:.so.1=.so)) + ifdef MOZ_DEBUG_SYMBOLS + ifeq (,$(filter-out _WIN%,$(NS_USE_GCC)_$(OS_TARGET))) + $(INSTALL) -m 644 $(SHARED_LIBRARY:$(DLL_SUFFIX)=pdb) $(SOURCE_LIB_DIR) Added: branches/experimental/security/nss/files/patch-Makefile ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ branches/experimental/security/nss/files/patch-Makefile Fri Feb 18 23:14:26 2011 (r492) @@ -0,0 +1,11 @@ +--- Makefile.orig Thu Apr 14 20:28:40 2005 ++++ Makefile Tue Aug 30 15:32:11 2005 +@@ -78,7 +78,7 @@ + # (7) Execute "local" rules. (OPTIONAL). # + ####################################################################### + +-nss_build_all: build_coreconf build_nspr build_dbm all ++nss_build_all: build_coreconf all + + build_coreconf: + cd $(CORE_DEPTH)/coreconf ; $(MAKE) Added: branches/experimental/security/nss/files/patch-const ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ branches/experimental/security/nss/files/patch-const Fri Feb 18 23:14:26 2011 (r492) @@ -0,0 +1,46 @@ +--- cmd/modutil/modutil.h Sun Apr 25 11:02:47 2004 ++++ cmd/modutil/modutil.h Fri Jul 22 17:35:20 2005 +@@ -53,6 +53,6 @@ + #include "error.h" + +-Error FipsMode(char *arg); +-Error ChkFipsMode(char *arg); ++Error FipsMode(const char *arg); ++Error ChkFipsMode(const char *arg); + Error AddModule(char *moduleName, char *libFile, char *ciphers, + char *mechanisms, char* modparms); +--- cmd/modutil/pk11.c Sun Apr 25 11:02:47 2004 ++++ cmd/modutil/pk11.c Fri Jul 22 17:36:48 2005 +@@ -53,5 +53,5 @@ + */ + Error +-FipsMode(char *arg) ++FipsMode(const char *arg) + { + char *internal_name; +@@ -62,14 +62,16 @@ + SECMOD_GetInternalModule()->commonName); + if(SECMOD_DeleteInternalModule(internal_name) != SECSuccess) { +- PR_fprintf(PR_STDERR, "%s\n", SECU_Strerror(PORT_GetError())); ++ PR_fprintf(PR_STDERR, "FipsMode(true): %s (%s)\n", SECU_Strerror(PORT_GetError()), internal_name); + PR_smprintf_free(internal_name); + PR_fprintf(PR_STDERR, errStrings[FIPS_SWITCH_FAILED_ERR]); + return FIPS_SWITCH_FAILED_ERR; + } +- PR_smprintf_free(internal_name); + if (!PK11_IsFIPS()) { ++ PR_fprintf(PR_STDERR, "FipsMode(true): in module %s", internal_name); ++ PR_smprintf_free(internal_name); + PR_fprintf(PR_STDERR, errStrings[FIPS_SWITCH_FAILED_ERR]); + return FIPS_SWITCH_FAILED_ERR; + } ++ PR_smprintf_free(internal_name); + PR_fprintf(PR_STDOUT, msgStrings[FIPS_ENABLED_MSG]); + } else { +@@ -112,5 +114,5 @@ + */ + Error +-ChkFipsMode(char *arg) ++ChkFipsMode(const char *arg) + { + if(!PORT_Strcasecmp(arg, "true")) { Added: branches/experimental/security/nss/files/patch-lib_freebl_mpi_mpcpucache.c ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ branches/experimental/security/nss/files/patch-lib_freebl_mpi_mpcpucache.c Fri Feb 18 23:14:26 2011 (r492) @@ -0,0 +1,43 @@ +--- lib/freebl/mpi/mpcpucache.c.orig 2010-06-11 22:39:33.000000000 +0200 ++++ lib/freebl/mpi/mpcpucache.c 2010-06-11 22:40:20.000000000 +0200 +@@ -733,6 +733,32 @@ s_mpi_getProcessorLineSize() + #endif + + #if defined(__ppc64__) ++ ++#if defined(__FreeBSD__) ++#include ++#include ++ ++#include ++#include ++ ++unsigned long ++s_mpi_getProcessorLineSize() ++{ ++ static int cacheline_size = 0; ++ static int cachemib[] = { CTL_MACHDEP, CPU_CACHELINE }; ++ int clen; ++ ++ if (cacheline_size > 0) ++ return cacheline_size; ++ ++ clen = sizeof(cacheline_size); ++ if (sysctl(cachemib, sizeof(cachemib) / sizeof(cachemib[0]), ++ &cacheline_size, &clen, NULL, 0) < 0 || !cacheline_size) ++ return 128; /* guess */ ++ ++ return cacheline_size; ++} ++#else + /* + * Sigh, The PPC has some really nice features to help us determine cache + * size, since it had lots of direct control functions to do so. The POWER +@@ -785,6 +811,7 @@ s_mpi_getProcessorLineSize() + } + return 0; + } ++#endif + + #define MPI_GET_PROCESSOR_LINE_SIZE_DEFINED 1 + #endif Added: branches/experimental/security/nss/files/patch-lib_softoken_manifest.mn ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ branches/experimental/security/nss/files/patch-lib_softoken_manifest.mn Fri Feb 18 23:14:26 2011 (r492) @@ -0,0 +1,13 @@ +--- lib/softoken/manifest.mn.orig 2010-07-30 04:33:26.000000000 +0200 ++++ lib/softoken/manifest.mn 2010-10-17 12:01:04.000000000 +0200 +@@ -47,9 +47,7 @@ + + DEFINES += -DSHLIB_SUFFIX=\"$(DLL_SUFFIX)\" -DSHLIB_PREFIX=\"$(DLL_PREFIX)\" -DSOFTOKEN_LIB_NAME=\"$(notdir $(SHARED_LIBRARY))\" -DSHLIB_VERSION=\"$(LIBRARY_VERSION)\" + +-ifdef SQLITE_INCLUDE_DIR +-INCLUDES += -I$(SQLITE_INCLUDE_DIR) +-endif ++INCLUDES += -I$(LOCALBASE)/include + + EXPORTS = \ + secmodt.h \ Added: branches/experimental/security/nss/files/patch-lib_softoken_pkcs11c.c ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ branches/experimental/security/nss/files/patch-lib_softoken_pkcs11c.c Fri Feb 18 23:14:26 2011 (r492) @@ -0,0 +1,22 @@ +--- lib/softoken/pkcs11c.c.orig 2010-05-05 14:36:05.000000000 +0000 ++++ lib/softoken/pkcs11c.c 2010-05-05 14:37:25.000000000 +0000 +@@ -4602,9 +4602,6 @@ + break; + case NSSLOWKEYDSAKey: + keyType = CKK_DSA; +- crv = (sftk_hasAttribute(key, CKA_NETSCAPE_DB)) ? CKR_OK : +- CKR_KEY_TYPE_INCONSISTENT; +- if(crv != CKR_OK) break; + crv = sftk_AddAttributeType(key, CKA_KEY_TYPE, &keyType, + sizeof(keyType)); + if(crv != CKR_OK) break; +@@ -4638,9 +4635,6 @@ + #ifdef NSS_ENABLE_ECC + case NSSLOWKEYECKey: + keyType = CKK_EC; +- crv = (sftk_hasAttribute(key, CKA_NETSCAPE_DB)) ? CKR_OK : +- CKR_KEY_TYPE_INCONSISTENT; +- if(crv != CKR_OK) break; + crv = sftk_AddAttributeType(key, CKA_KEY_TYPE, &keyType, + sizeof(keyType)); + if(crv != CKR_OK) break; Added: branches/experimental/security/nss/files/patch-sysdb ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ branches/experimental/security/nss/files/patch-sysdb Fri Feb 18 23:14:26 2011 (r492) @@ -0,0 +1,138 @@ +--- lib/softoken/legacydb/cdbhdl.h.orig 2009-08-31 12:33:12.000000000 +0200 ++++ lib/softoken/legacydb/cdbhdl.h 2009-08-31 12:33:36.000000000 +0200 +@@ -43,7 +43,8 @@ + #define _CDBHDL_H_ + + #include "nspr.h" +-#include "mcom_db.h" ++#include ++#include + #include "pcertt.h" + #include "prtypes.h" + + +--- lib/softoken/legacydb/dbmshim.c.orig 2009-08-31 10:40:23.000000000 +0200 ++++ lib/softoken/legacydb/dbmshim.c 2009-08-31 10:40:35.000000000 +0200 +@@ -39,7 +39,8 @@ + * + * $Id: dbmshim.c,v 1.2 2007/06/13 00:24:57 rrelyea%redhat.com Exp $ + */ +-#include "mcom_db.h" ++#include ++#include + #include "secitem.h" + #include "nssb64.h" + #include "blapi.h" +--- lib/softoken/legacydb/keydb.c.orig 2009-08-31 10:40:04.000000000 +0200 ++++ lib/softoken/legacydb/keydb.c 2009-08-31 10:40:08.000000000 +0200 +@@ -43,7 +43,6 @@ + #include "blapi.h" + #include "secitem.h" + #include "pcert.h" +-#include "mcom_db.h" + #include "secerr.h" + + #include "keydbi.h" +--- lib/softoken/legacydb/keydbi.h.orig 2009-08-31 12:33:17.000000000 +0200 ++++ lib/softoken/legacydb/keydbi.h 2009-08-31 12:34:13.000000000 +0200 +@@ -43,5 +43,5 @@ + + #include "nspr.h" + #include "seccomon.h" +-#include "mcom_db.h" ++#include + + /* + * Handle structure for open key databases +--- lib/softoken/legacydb/pcertdb.c.orig 2009-08-31 10:40:52.000000000 +0200 ++++ lib/softoken/legacydb/pcertdb.c 2009-08-31 10:41:26.000000000 +0200 +@@ -41,7 +41,8 @@ + */ + #include "lowkeyti.h" + #include "pcert.h" +-#include "mcom_db.h" ++#include ++#include + #include "pcert.h" + #include "secitem.h" + #include "secder.h" +--- lib/softoken/legacydb/pk11db.c.orig 2009-08-31 10:40:57.000000000 +0200 ++++ lib/softoken/legacydb/pk11db.c 2009-08-31 10:41:55.000000000 +0200 +@@ -41,7 +41,8 @@ + + #include "pk11pars.h" + #include "lgdb.h" +-#include "mcom_db.h" ++#include ++#include + #include "secerr.h" + + #define FREE_CLEAR(p) if (p) { PORT_Free(p); p = NULL; } +--- lib/ckfw/dbm/ckdbm.h.orig 2009-08-31 10:46:00.000000000 +0200 ++++ lib/ckfw/dbm/ckdbm.h 2009-08-31 10:46:22.000000000 +0200 +@@ -59,7 +59,7 @@ + #include "ckt.h" + #endif /* CKT_H */ + +-#include "mcom_db.h" ++#include + + NSS_EXTERN_DATA NSSCKMDInstance nss_dbm_mdInstance; + +--- lib/softoken/legacydb/config.mk.orig 2009-08-31 12:39:49.000000000 +0200 ++++ lib/softoken/legacydb/config.mk 2009-08-31 12:40:03.000000000 +0200 +@@ -40,10 +40,6 @@ + + EXTRA_LIBS += $(CRYPTOLIB) + +-ifndef NSS_DISABLE_DBM +-EXTRA_LIBS += $(DIST)/lib/$(LIB_PREFIX)dbm.$(LIB_SUFFIX) +-endif +- + # can't do this in manifest.mn because OS_TARGET isn't defined there. + ifeq (,$(filter-out WIN%,$(OS_TARGET))) + +--- lib/certdb/xauthkid.c.orig 2009-08-31 12:43:13.000000000 +0200 ++++ lib/certdb/xauthkid.c 2009-08-31 12:44:21.000000000 +0200 +@@ -39,7 +39,7 @@ + * + */ + +-#include "prtypes.h" ++#include + #include "seccomon.h" + #include "secdert.h" + #include "secoidt.h" +--- lib/certdb/xbsconst.c.orig 2009-08-31 12:43:22.000000000 +0200 ++++ lib/certdb/xbsconst.c 2009-08-31 12:44:41.000000000 +0200 +@@ -38,7 +38,7 @@ + * X.509 v3 Basic Constraints Extension + */ + +-#include "prtypes.h" ++#include + #include /* for LONG_MAX */ + #include "seccomon.h" + #include "secdert.h" +--- lib/certdb/xconst.c.orig 2009-08-31 12:43:46.000000000 +0200 ++++ lib/certdb/xconst.c 2009-08-31 12:44:50.000000000 +0200 +@@ -38,7 +38,7 @@ + * X.509 Extension Encoding + */ + +-#include "prtypes.h" ++#include + #include "seccomon.h" + #include "secdert.h" + #include "secoidt.h" +--- cmd/platlibs.mk.orig 2009-08-31 12:57:13.000000000 +0200 ++++ cmd/platlibs.mk 2009-08-31 12:57:29.000000000 +0200 +@@ -85,7 +85,7 @@ + ifdef NSS_DISABLE_DBM + DBMLIB = $(NULL) + else +-DBMLIB = $(DIST)/lib/$(LIB_PREFIX)dbm.$(LIB_SUFFIX) ++DBMLIB = $(NULL) + endif + + ifdef USE_STATIC_LIBS Added: branches/experimental/security/nss/files/patch-tests ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ branches/experimental/security/nss/files/patch-tests Fri Feb 18 23:14:26 2011 (r492) @@ -0,0 +1,10 @@ +--- tests/common/init.sh Mon Apr 11 22:24:17 2005 ++++ tests/common/init.sh Fri Jul 22 16:55:36 2005 +@@ -197,5 +197,6 @@ + case $HOST in + *\.*) +- HOST=`echo $HOST | sed -e "s/\..*//"` ++ DOMSUF=${HOST#*.} # remove Smallest Prefix matching ``*.'' ++ HOST=${HOST%%.*} # remove Largest Suffix ``.*''. See sh(1) + ;; + ?*) Added: branches/experimental/security/nss/pkg-descr ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ branches/experimental/security/nss/pkg-descr Fri Feb 18 23:14:26 2011 (r492) @@ -0,0 +1,7 @@ +Network Security Services (NSS) is a set of libraries designed to support +cross-platform development of security-enabled server applications. +Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, +PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security +standards. + +WWW: http://www.mozilla.org/projects/security/pki/nss/ Added: branches/experimental/security/nss/pkg-plist ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ branches/experimental/security/nss/pkg-plist Fri Feb 18 23:14:26 2011 (r492) @@ -0,0 +1,138 @@ +bin/certcgi +bin/certutil +bin/checkcert +bin/cmsutil +bin/crlutil +bin/derdump +bin/makepqg +bin/mangle +bin/modutil +bin/nss-config +bin/ocspclnt +bin/oidcalc +bin/p7content +bin/p7env +bin/p7sign +bin/p7verify +bin/pk12util +bin/rsaperf +bin/shlibsign +bin/signtool +bin/signver +bin/ssltap +bin/strsclnt +bin/symkeyutil +bin/vfychain +bin/vfyserv +include/nss/nss/base64.h +include/nss/nss/blapit.h +include/nss/nss/cert.h +include/nss/nss/certdb.h +include/nss/nss/certt.h +include/nss/nss/ciferfam.h +include/nss/nss/cmmf.h +include/nss/nss/cmmft.h +include/nss/nss/cms.h +include/nss/nss/cmsreclist.h +include/nss/nss/cmst.h +include/nss/nss/crmf.h +include/nss/nss/crmft.h +include/nss/nss/cryptohi.h +include/nss/nss/cryptoht.h +include/nss/nss/ecl-exp.h +include/nss/nss/hasht.h +include/nss/nss/jar-ds.h +include/nss/nss/jar.h +include/nss/nss/jarfile.h +include/nss/nss/key.h +include/nss/nss/keyhi.h +include/nss/nss/keyt.h +include/nss/nss/keythi.h +include/nss/nss/nss.h +include/nss/nss/nssb64.h +include/nss/nss/nssb64t.h +include/nss/nss/nssbase.h +include/nss/nss/nssbaset.h +include/nss/nss/nssck.api +include/nss/nss/nssckbi.h +include/nss/nss/nssckepv.h +include/nss/nss/nssckft.h +include/nss/nss/nssckfw.h +include/nss/nss/nssckfwc.h +include/nss/nss/nssckfwt.h +include/nss/nss/nssckg.h +include/nss/nss/nssckmdt.h +include/nss/nss/nssckt.h +include/nss/nss/nssilckt.h +include/nss/nss/nssilock.h +include/nss/nss/nsslocks.h +include/nss/nss/nssrwlk.h +include/nss/nss/nssrwlkt.h +include/nss/nss/nssutil.h +include/nss/nss/ocsp.h +include/nss/nss/ocspt.h +include/nss/nss/p12.h +include/nss/nss/p12plcy.h +include/nss/nss/p12t.h +include/nss/nss/pk11func.h +include/nss/nss/pk11pqg.h +include/nss/nss/pk11priv.h +include/nss/nss/pk11pub.h +include/nss/nss/pk11sdr.h +include/nss/nss/pkcs11.h +include/nss/nss/pkcs11f.h +include/nss/nss/pkcs11n.h +include/nss/nss/pkcs11p.h +include/nss/nss/pkcs11t.h +include/nss/nss/pkcs11u.h +include/nss/nss/pkcs12.h +include/nss/nss/pkcs12t.h +include/nss/nss/pkcs7t.h +include/nss/nss/portreg.h +include/nss/nss/preenc.h +include/nss/nss/secasn1.h +include/nss/nss/secasn1t.h +include/nss/nss/seccomon.h +include/nss/nss/secder.h +include/nss/nss/secdert.h +include/nss/nss/secdig.h +include/nss/nss/secdigt.h +include/nss/nss/secerr.h +include/nss/nss/sechash.h +include/nss/nss/secitem.h +include/nss/nss/secmime.h +include/nss/nss/secmod.h +include/nss/nss/secmodt.h +include/nss/nss/secoid.h +include/nss/nss/secoidt.h +include/nss/nss/secpkcs5.h +include/nss/nss/secpkcs7.h +include/nss/nss/secport.h +include/nss/nss/shsign.h +include/nss/nss/smime.h +include/nss/nss/ssl.h +include/nss/nss/sslerr.h +include/nss/nss/sslproto.h +include/nss/nss/sslt.h +include/nss/nss/utilrename.h +lib/nss/libcrmf.a +lib/nss/libfreebl3.so +lib/nss/libfreebl3.so.1 +lib/nss/libnss3.so +lib/nss/libnss3.so.1 +lib/nss/libnssckbi.so +lib/nss/libnssckbi.so.1 +lib/nss/libnssdbm3.so +lib/nss/libnssdbm3.so.1 +lib/nss/libnssutil3.so +lib/nss/libnssutil3.so.1 +lib/nss/libsmime3.so +lib/nss/libsmime3.so.1 +lib/nss/libsoftokn3.so +lib/nss/libsoftokn3.so.1 +lib/nss/libssl3.so +lib/nss/libssl3.so.1 +libdata/pkgconfig/nss.pc +@dirrm lib/nss +@dirrm include/nss/nss +@dirrm include/nss