From 09045d720a91f0b7d61cf70d67d61b3f96e69c79aa8ff9b14f1d7314f329f39a Mon Sep 17 00:00:00 2001
From: Wolfgang Rosenauer <wolfgang@rosenauer.org>
Date: Sat, 23 Jun 2018 14:10:30 +0000
Subject: [PATCH] =?UTF-8?q?-=20update=20to=20NSS=203.37.3=20=20=20*=20requ?=
 =?UTF-8?q?ired=20by=20Firefox=2061.0=20=20=20Notable=20changes:=20=20=20*?=
 =?UTF-8?q?=20The=20TLS=201.3=20implementation=20was=20updated=20to=20Draf?=
 =?UTF-8?q?t=2028.=20=20=20*=20Added=20HACL*=20Poly1305=2032-bit=20=20=20*?=
 =?UTF-8?q?=20The=20code=20to=20support=20the=20NPN=20protocol=20has=20bee?=
 =?UTF-8?q?n=20fully=20removed.=20=20=20*=20NSS=20allows=20servers=20now?=
 =?UTF-8?q?=20to=20register=20ALPN=20handling=20callbacks=20to=20=20=20=20?=
 =?UTF-8?q?=20select=20a=20protocol.=20=20=20*=20NSS=20supports=20opening?=
 =?UTF-8?q?=20SQL=20databases=20in=20read-only=20mode.=20=20=20*=20On=20Li?=
 =?UTF-8?q?nux,=20some=20build=20configurations=20can=20use=20glibc's=20fu?=
 =?UTF-8?q?nction=20=20=20=20=20getentropy(),=20which=20uses=20the=20kerne?=
 =?UTF-8?q?l's=20getrandom()=20function.=20=20=20*=20The=20CA=20list=20was?=
 =?UTF-8?q?=20updated=20to=20version=202.24,=20which=20removed=20the=20=20?=
 =?UTF-8?q?=20=20=20following=20CA=20certificates:=20=20=20=20=20-=20CN=20?=
 =?UTF-8?q?=3D=20S-TRUST=20Universal=20Root=20CA=20=20=20=20=20-=20CN=20?=
 =?UTF-8?q?=3D=20TC=20TrustCenter=20Class=203=20CA=20II=20=20=20=20=20-=20?=
 =?UTF-8?q?CN=20=3D=20T=C3=9CRKTRUST=20Elektronik=20Sertifika=20Hizmet=20S?=
 =?UTF-8?q?a=C4=9Flay=C4=B1c=C4=B1s=C4=B1=20H5=20=20=20*=20Fix=20build=20o?=
 =?UTF-8?q?n=20armv6/armv7=20and=20other=20platforms=20(bmo#1459739)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/mozilla-nss?expand=0&rev=266
---
 mozilla-nss.changes | 21 +++++++++++++++++++++
 mozilla-nss.spec    |  6 +++---
 nss-3.36.4.tar.gz   |  3 ---
 nss-3.37.3.tar.gz   |  3 +++
 4 files changed, 27 insertions(+), 6 deletions(-)
 delete mode 100644 nss-3.36.4.tar.gz
 create mode 100644 nss-3.37.3.tar.gz

diff --git a/mozilla-nss.changes b/mozilla-nss.changes
index 8b06129..30ac3d6 100644
--- a/mozilla-nss.changes
+++ b/mozilla-nss.changes
@@ -1,3 +1,24 @@
+-------------------------------------------------------------------
+Sat Jun 23 14:08:46 UTC 2018 - wr@rosenauer.org
+
+- update to NSS 3.37.3
+  * required by Firefox 61.0
+  Notable changes:
+  * The TLS 1.3 implementation was updated to Draft 28.
+  * Added HACL* Poly1305 32-bit
+  * The code to support the NPN protocol has been fully removed.
+  * NSS allows servers now to register ALPN handling callbacks to
+    select a protocol.
+  * NSS supports opening SQL databases in read-only mode.
+  * On Linux, some build configurations can use glibc's function
+    getentropy(), which uses the kernel's getrandom() function.
+  * The CA list was updated to version 2.24, which removed the
+    following CA certificates:
+    - CN = S-TRUST Universal Root CA
+    - CN = TC TrustCenter Class 3 CA II
+    - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
+  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
+
 -------------------------------------------------------------------
 Tue Jun 19 15:00:43 UTC 2018 - schwab@suse.de
 
diff --git a/mozilla-nss.spec b/mozilla-nss.spec
index d3535ad..f2bec93 100644
--- a/mozilla-nss.spec
+++ b/mozilla-nss.spec
@@ -25,7 +25,7 @@ BuildRequires:  mozilla-nspr-devel >= 4.19
 BuildRequires:  pkg-config
 BuildRequires:  sqlite-devel
 BuildRequires:  zlib-devel
-Version:        3.36.4
+Version:        3.37.3
 Release:        0
 # bug437293
 %ifarch ppc64
@@ -36,8 +36,8 @@ Summary:        Network Security Services
 License:        MPL-2.0
 Group:          System/Libraries
 Url:            http://www.mozilla.org/projects/security/pki/nss/
-Source:         https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_36_4_RTM/src/nss-%{version}.tar.gz
-# hg clone https://hg.mozilla.org/projects/nss nss-3.36.4/nss ; cd nss-3.36.4/nss ; hg up NSS_3_36_4_RTM
+Source:         https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_37_3_RTM/src/nss-%{version}.tar.gz
+# hg clone https://hg.mozilla.org/projects/nss nss-3.37.3/nss ; cd nss-3.37.3/nss ; hg up NSS_3_37_3_RTM
 #Source:         nss-%{version}.tar.gz
 Source1:        nss.pc.in
 Source3:        nss-config.in
diff --git a/nss-3.36.4.tar.gz b/nss-3.36.4.tar.gz
deleted file mode 100644
index 98bfb0b..0000000
--- a/nss-3.36.4.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:33de96b33dc9225d8f637debc3f62bd1fee6a4415cd97c9cf07d7e685779246a
-size 23030385
diff --git a/nss-3.37.3.tar.gz b/nss-3.37.3.tar.gz
new file mode 100644
index 0000000..59f69a6
--- /dev/null
+++ b/nss-3.37.3.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:9af2bbb615d010bd866bb83f8c0bb22b0fa086171e93030ffb03da3da15cc5be
+size 23034239