Daiki Ueno
ef0e3207fd
Consolidate NSPR with this package
...
NSPR is no longer used outside of NSS, it makes little sense to keep
it as a separate source package, but costs the packaging burden as NSS
requires a buildroot override.
2020-10-28 15:23:41 +01:00
Bob Relyea
e698f2504c
Resolves: rhbz#1861495
...
Don't fail OCSP validations for intermediate certs if the root certs
are signed by sha1 and sha1 is disabled.
2020-10-26 16:59:30 -07:00
Daiki Ueno
0d4d4780af
Revert the last change, tolerate the first CCS in TLS 1.3
2020-10-26 06:55:42 +01:00
Daiki Ueno
0d673b36cc
Enable TLS 1.3 middlebox compatibility mode by default
2020-10-22 17:06:28 +02:00
Daiki Ueno
f73f7ce1e4
Install pk11hpke.h
2020-10-20 11:12:33 +02:00
Daiki Ueno
e5fecd4da4
Update to NSS 3.58
2020-10-20 09:31:29 +02:00
Daiki Ueno
8b34570da2
Remove upstreamed patch
2020-09-20 16:01:57 +02:00
Daiki Ueno
6b70690de5
Update to NSS 3.57
2020-09-19 09:13:11 +02:00
Daiki Ueno
2bb137e19d
Fix AArch64 build failure
2020-09-05 10:46:10 +02:00
Daiki Ueno
c77e79a71e
Update to NSS 3.56
2020-08-24 08:48:58 +02:00
Daiki Ueno
614e62c67d
Fix DBM backend disablement
...
Also add scriptlet to migrate old DBM databases.
2020-08-15 13:40:04 +02:00
Jeff Law
d4e86043ee
Disable LTO for now
2020-08-08 13:15:55 -06:00
Daiki Ueno
661472da51
Remove unused patch
2020-08-02 07:40:16 +02:00
Daiki Ueno
08dea7d5c7
Update to NSS 3.55
...
Also disable DBM support as per:
https://fedoraproject.org/wiki/Changes/NSSDBMRemoval
2020-08-02 07:36:17 +02:00
Fedora Release Engineering
2d5d6d2cf7
- Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-08-01 06:34:08 +00:00
Fedora Release Engineering
d81f1e4f76
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-07-28 11:55:03 +00:00
Daiki Ueno
c2e2fc0161
Update to NSS 3.54
2020-07-15 11:28:22 +02:00
Daiki Ueno
208c55f1d2
Update after crypto-policies packaging change
...
Suggested by Tomas Mraz in:
https://bugzilla.redhat.com/show_bug.cgi?id=1848649#c7
2020-06-22 15:21:42 +02:00
Bob Relyea
965c121198
Reolves: rhbz#1843417
...
Cannot compile code with pk11pub.h (an nss header) with -Werror=strict-prototypes
2020-06-04 17:03:01 -07:00
Daiki Ueno
9699d7efc7
Update build procedure after removal of mkdepend
2020-06-02 08:52:10 +02:00
Daiki Ueno
3f35603021
Update to NSS 3.53
2020-06-01 08:08:02 +02:00
Bob Relyea
614f823eb3
Delay new CK_GCM_PARAMS semantics until fedora 34 unless explicitly enabled.
2020-05-13 16:02:36 -07:00
Daiki Ueno
26f93fa193
Restore nss-kremlin-ppc64le.patch
2020-05-11 18:38:26 +02:00
Daiki Ueno
047dc3ed4e
Update to NSS 3.52
2020-05-11 18:21:55 +02:00
Daiki Ueno
fc0174ead1
Temporarily revert DBM disablement for kernel build failure ( #1827902 )
2020-04-25 17:16:02 +02:00
Daiki Ueno
3c018618ca
Fix the last change
2020-04-20 15:57:28 +02:00
Daiki Ueno
65271d923d
Enable conditional builds on DBM
2020-04-20 14:47:27 +02:00
Daiki Ueno
9ae0f0b9e1
Update to NSS 3.51.1
...
Also disable building DBM backend
2020-04-20 14:24:47 +02:00
Daiki Ueno
2b122e4485
Update to NSS 3.51
2020-04-07 11:18:10 +02:00
Tom Stellard
507a1cebf0
Use __make macro to invoke make
...
Using the %__make macro makes it possible for an alternative buildroot
to inject its own flags into the make invocation. This makes it easier
to do trial rebuilds of fedora using different compilers or different
compiler flags.
2020-03-27 15:39:49 +00:00
Daiki Ueno
7f30e21d0f
Apply CMAC fixes from upstream
2020-03-05 09:57:34 +01:00
Daiki Ueno
f512836b78
Fix build on ppc64le, due to bundled kremlin source
2020-02-17 14:30:50 +01:00
Daiki Ueno
58ca69fcaf
Update to NSS 3.50
2020-02-17 13:46:37 +01:00
Daiki Ueno
bd89f2ce5c
Fix build with gcc 10
2020-02-14 14:28:21 +01:00
Daiki Ueno
9e1e74ca17
Ignore false-positive compiler warnings with gcc 10
2020-02-14 12:07:57 +01:00
Daiki Ueno
656c979c95
Suppress compiler warning (treated as fatal) in libpkix
2020-02-14 10:48:31 +01:00
Fedora Release Engineering
0b17c92d39
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-01-29 19:15:25 +00:00
Daiki Ueno
3c27dc2471
Revert "pass %{_smp_mflags} to make
to speed up the build"
...
This reverts commit 6e689ce0cb
.
This still has a race condition and causes the build fail.
2020-01-27 11:07:50 +01:00
Daiki Ueno
36505c331d
Update to NSS 3.49.2
2020-01-27 10:24:30 +01:00
Kamil Dudka
6e689ce0cb
pass %{_smp_mflags} to make
to speed up the build
...
I tried an uncached build of nss on Fedora 30 VM with 8 CPU cores
and the build time was reduced with this patch from 540 s to 250 s
of wall-clock time.
2020-01-24 11:17:23 +01:00
Daiki Ueno
703a4f9a95
Remove leftover debug command in %build
2020-01-11 09:02:36 +01:00
Daiki Ueno
1e2f8acd14
Fix build on armv7hl with the patch proposed in upstream
2020-01-10 17:26:33 +01:00
Daiki Ueno
74b268dbd9
Update to NSS 3.49
2020-01-10 10:35:28 +01:00
Daiki Ueno
541296170e
Update to NSS 3.48
2020-01-03 10:59:30 +01:00
Daiki Ueno
a8a8d020bf
Update nss-3.47-certdb-temp-cert.patch to avoid setting empty trust value
2019-12-03 15:51:55 +01:00
Daiki Ueno
704f2e22d6
Update nss-3.47-certdb-temp-cert.patch to the final version
2019-12-03 09:31:24 +01:00
Daiki Ueno
4f639ad73c
Fix intermittent SEC_ERROR_UNKNOWN_ISSUER ( #1752303 , #1648617 )
2019-11-28 16:13:41 +01:00
Daiki Ueno
8c9ed11be4
Update to NSS 3.47.1
2019-11-22 18:01:14 +01:00
Bob Relyea
115989f50d
Correct change log error so it doesn't propogate to the next patch
2019-11-06 09:16:51 -08:00
Bob Relyea
2ec4745f30
Resolves: rhbz#1768652
...
NSS softoken does not include CKM_NSS_IKE1_APP_B_PRF_DERIVE in it's mechanism list, causing libreswan to crash.
2019-11-04 13:51:40 -08:00