From 3adcfa10598f5f407c9575153ea2713c7bb4682069ba3ee9956b60189fc71f07 Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Mon, 24 Jan 2022 08:20:50 +0000 Subject: [PATCH] - update to NSS 3.74 * bmo#966856 - mozilla::pkix: support SHA-2 hashes in CertIDs in OCSP responses * bmo#1553612 - Ensure clients offer consistent ciphersuites after HRR * bmo#1721426 - NSS does not properly restrict server keys based on policy * bmo#1733003 - Set nssckbi version number to 2.54 * bmo#1735407 - Replace Google Trust Services LLC (GTS) R4 root certificate * bmo#1735407 - Replace Google Trust Services LLC (GTS) R3 root certificate * bmo#1735407 - Replace Google Trust Services LLC (GTS) R2 root certificate * bmo#1735407 - Replace Google Trust Services LLC (GTS) R1 root certificate * bmo#1735407 - Replace GlobalSign ECC Root CA R4 * bmo#1733560 - Remove Expired Root Certificates - DST Root CA X3 * bmo#1740807 - Remove Expiring Cybertrust Global Root and GlobalSign root certificates * bmo#1741930 - Add renewed Autoridad de Certificacion Firmaprofesional CIF A62634068 root certificate * bmo#1740095 - Add iTrusChina ECC root certificate * bmo#1740095 - Add iTrusChina RSA root certificate * bmo#1738805 - Add ISRG Root X2 root certificate * bmo#1733012 - Add Chunghwa Telecom's HiPKI Root CA - G1 root certificate * bmo#1738028 - Avoid a clang 13 unused variable warning in opt build * bmo#1735028 - Check for missing signedData field * bmo#1737470 - Ensure DER encoded signatures are within size limits - enable key logging option (boo#1195040) OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/mozilla-nss?expand=0&rev=373 --- mozilla-nss.changes | 28 ++++++++++++++++++++++++++++ mozilla-nss.spec | 9 +++++---- nss-3.73.1.tar.gz | 3 --- nss-3.74.tar.gz | 3 +++ 4 files changed, 36 insertions(+), 7 deletions(-) delete mode 100644 nss-3.73.1.tar.gz create mode 100644 nss-3.74.tar.gz diff --git a/mozilla-nss.changes b/mozilla-nss.changes index f7fa1b5..db7b6fd 100644 --- a/mozilla-nss.changes +++ b/mozilla-nss.changes @@ -1,3 +1,31 @@ +------------------------------------------------------------------- +Mon Jan 24 08:13:53 UTC 2022 - Wolfgang Rosenauer + +- update to NSS 3.74 + * bmo#966856 - mozilla::pkix: support SHA-2 hashes in CertIDs in + OCSP responses + * bmo#1553612 - Ensure clients offer consistent ciphersuites after HRR + * bmo#1721426 - NSS does not properly restrict server keys based on policy + * bmo#1733003 - Set nssckbi version number to 2.54 + * bmo#1735407 - Replace Google Trust Services LLC (GTS) R4 root certificate + * bmo#1735407 - Replace Google Trust Services LLC (GTS) R3 root certificate + * bmo#1735407 - Replace Google Trust Services LLC (GTS) R2 root certificate + * bmo#1735407 - Replace Google Trust Services LLC (GTS) R1 root certificate + * bmo#1735407 - Replace GlobalSign ECC Root CA R4 + * bmo#1733560 - Remove Expired Root Certificates - DST Root CA X3 + * bmo#1740807 - Remove Expiring Cybertrust Global Root and GlobalSign root + certificates + * bmo#1741930 - Add renewed Autoridad de Certificacion Firmaprofesional + CIF A62634068 root certificate + * bmo#1740095 - Add iTrusChina ECC root certificate + * bmo#1740095 - Add iTrusChina RSA root certificate + * bmo#1738805 - Add ISRG Root X2 root certificate + * bmo#1733012 - Add Chunghwa Telecom's HiPKI Root CA - G1 root certificate + * bmo#1738028 - Avoid a clang 13 unused variable warning in opt build + * bmo#1735028 - Check for missing signedData field + * bmo#1737470 - Ensure DER encoded signatures are within size limits +- enable key logging option (boo#1195040) + ------------------------------------------------------------------- Wed Dec 29 11:27:06 UTC 2021 - Andreas Stieger diff --git a/mozilla-nss.spec b/mozilla-nss.spec index f7d37dd..f2499b6 100644 --- a/mozilla-nss.spec +++ b/mozilla-nss.spec @@ -1,7 +1,7 @@ # # spec file for package mozilla-nss # -# Copyright (c) 2021 SUSE LLC +# Copyright (c) 2022 SUSE LLC # Copyright (c) 2006-2021 Wolfgang Rosenauer # # All modifications and additions to the file contributed by third parties @@ -17,14 +17,14 @@ # -%global nss_softokn_fips_version 3.73 +%global nss_softokn_fips_version 3.74 %define NSPR_min_version 4.32 %define nspr_ver %(rpm -q --queryformat '%%{VERSION}' mozilla-nspr) %define nssdbdir %{_sysconfdir}/pki/nssdb Name: mozilla-nss -Version: 3.73.1 +Version: 3.74 Release: 0 -%define underscore_version 3_73_1 +%define underscore_version 3_74 Summary: Network Security Services License: MPL-2.0 Group: System/Libraries @@ -252,6 +252,7 @@ DATE="\"$(date -d "${modified}" "+%%b %%e %%Y")\"" TIME="\"$(date -d "${modified}" "+%%R")\"" find . -name '*.[ch]' -print -exec sed -i "s/__DATE__/${DATE}/g;s/__TIME__/${TIME}/g" {} + +export NSS_ALLOW_SSLKEYLOGFILE=1 export NSS_ENABLE_WERROR=0 export NSS_NO_PKCS11_BYPASS=1 export FREEBL_NO_DEPEND=1 diff --git a/nss-3.73.1.tar.gz b/nss-3.73.1.tar.gz deleted file mode 100644 index c58edc2..0000000 --- a/nss-3.73.1.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:c768f9fe3129e8bcc2e9679456d7edd9453a225784a8fc7dc4501806f1fe9abe -size 83931597 diff --git a/nss-3.74.tar.gz b/nss-3.74.tar.gz new file mode 100644 index 0000000..9cde25b --- /dev/null +++ b/nss-3.74.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:88928811f9f40f87d42e2eaccdf6e454562e51486067f2ddbe90aa47ea6cd056 +size 83937875