From 5693c4a92807378c7ec3281628eb6ace93976137 Mon Sep 17 00:00:00 2001
From: Bojan Smojver <bojan@rexursive.com>
Date: Wed, 20 Nov 2024 09:01:09 +1100
Subject: [PATCH 01/13] Update to 3.106.0

---
 .gitignore              |  1 +
 nss-3.106.0-tests.patch | 28 ++++++++++++++++++++++++++++
 nss.spec                | 10 +++++++---
 sources                 |  2 +-
 4 files changed, 37 insertions(+), 4 deletions(-)
 create mode 100644 nss-3.106.0-tests.patch

diff --git a/.gitignore b/.gitignore
index 23bbd8b..4db04a8 100644
--- a/.gitignore
+++ b/.gitignore
@@ -96,3 +96,4 @@ TestUser51.cert
 /nss-3.103-with-nspr-4.35.tar.gz
 /nss-3.104-with-nspr-4.35.tar.gz
 /nss-3.105-with-nspr-4.35.tar.gz
+/nss-3.106-with-nspr-4.36.tar.gz
diff --git a/nss-3.106.0-tests.patch b/nss-3.106.0-tests.patch
new file mode 100644
index 0000000..cb05304
--- /dev/null
+++ b/nss-3.106.0-tests.patch
@@ -0,0 +1,28 @@
+--- nss/tests/tools/tools.sh.org	2024-11-20 06:49:20.119509555 +1100
++++ nss/tests/tools/tools.sh	2024-11-20 06:51:00.246427318 +1100
+@@ -544,21 +544,22 @@ tools_p12_import_pbmac1_samples()
+   echo "${BINDIR}/pk12util -l ${TOOLSDIR}/data/pbmac1-invalid-bad-iter.p12 -d ${P_R_COPYDIR} -k ${R_PWFILE} -W '1234'"
+   ${BINDIR}/pk12util -l ${TOOLSDIR}/data/pbmac1-invalid-bad-iter.p12 -d ${P_R_COPYDIR} -k ${R_PWFILE} -W '1234' 2>&1
+   ret=$?
+-  html_msg $ret 19 "Fail to list private key with bad iterator"
++  echo "Fail to list private key with bad iterator val=$ret"
++  html_msg $ret 17 "Fail to list private key with bad iterator"
+   check_tmpfile
+ 
+   echo "${BINDIR}/pk12util -l ${TOOLSDIR}/data/pbmac1-invalid-bad-salt.p12 -d ${P_R_COPYDIR} -k ${R_PWFILE} -W '1234'"
+   ${BINDIR}/pk12util -l ${TOOLSDIR}/data/pbmac1-invalid-bad-salt.p12 -d ${P_R_COPYDIR} -k ${R_PWFILE} -W '1234' 2>&1
+   ret=$?
+   echo "Fail to list private key with bad salt val=$ret"
+-  html_msg $ret 19 "Fail to import private key with bad salt"
++  html_msg $ret 17 "Fail to import private key with bad salt"
+   check_tmpfile
+ 
+   echo "${BINDIR}/pk12util -l ${TOOLSDIR}/data/pbmac1-invalid-no-length.p12 -d ${P_R_COPYDIR} -k ${R_PWFILE} -W '1234'"
+   ${BINDIR}/pk12util -l ${TOOLSDIR}/data/pbmac1-invalid-no-length.p12 -d ${P_R_COPYDIR} -k ${R_PWFILE} -W '1234' 2>&1
+   ret=$?
+   echo "Fail to import private key with no length val=$ret"
+-  html_msg $ret 19 "Fail to import private key with no length"
++  html_msg $ret 17 "Fail to import private key with no length"
+   check_tmpfile
+ }
+ 
diff --git a/nss.spec b/nss.spec
index 9c40d1c..572a73f 100644
--- a/nss.spec
+++ b/nss.spec
@@ -1,5 +1,5 @@
-%global nspr_version 4.35.0
-%global nss_version 3.105.0
+%global nspr_version 4.36.0
+%global nss_version 3.106.0
 # NOTE: To avoid NVR clashes of nspr* packages:
 # - reset %%{nspr_release} to 1, when updating %%{nspr_version}
 # - increment %%{nspr_version}, when updating the NSS part only
@@ -7,7 +7,7 @@
 %global nss_release %baserelease
 # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when
 # release number between nss and nspr are different.
-%global nspr_release %[%baserelease+29]
+%global nspr_release %[%baserelease+0]
 # only need to update this as we added new
 # algorithms under nss policy control
 %global crypto_policies_version 20240521
@@ -135,6 +135,7 @@ Patch41:          nss-3.101-enable-kyber-policy.patch
 
 # fix unused variable warnings
 Patch42:          nss-3.103-unused-cipherwrap2.patch
+Patch43:          nss-3.106.0-tests.patch
 
 Patch100:         nspr-config-pc.patch
 Patch101:         nspr-gcc-atomics.patch
@@ -1084,6 +1085,9 @@ fi
 
 
 %changelog
+* Tue Nov 19 2024 Bojan Smojver <bojan@rexursive.com> - 3.106.0-1
+- Update NSS to 3.106.0
+
 * Thu Oct 3 2024 Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.105.0-1
 - Update NSS to 3.105.0
 
diff --git a/sources b/sources
index 4431210..96ace72 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
 SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403fda3e3d4e7757838061ae56ccf5aac335cb54f254f0a9e6e9c0dd5920b4155a39264525b06
 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7
-SHA512 (nss-3.105-with-nspr-4.35.tar.gz) = 8fad30acf07bddb501811fac63330816a1b0aaee301d94a4798f08e81be243afe894bd2202996339a7716a60639c0d6c4d20cc2dd407c757a6d3074c5c975673
+SHA512 (nss-3.106-with-nspr-4.36.tar.gz) = c33f96e534f170bb085e1650964e25d9abd3213001e71dbdaaaf3a4b5893736e5201dd753efefa17e2d606e2cef41ca3c006afc1abb5a2ee7ef9f83e73b2403d

From bd3282acf8590d99a78aaeb2892581273c8c96a9 Mon Sep 17 00:00:00 2001
From: Krenzelok Frantisek <krenzelok.frantisek@gmail.com>
Date: Mon, 9 Dec 2024 12:30:49 +0100
Subject: [PATCH 02/13] Update NSS to 3.107.0

---
 .gitignore              |  1 +
 nss-3.106.0-tests.patch | 28 ----------------------------
 nss.spec                |  8 +++++---
 sources                 |  2 +-
 4 files changed, 7 insertions(+), 32 deletions(-)
 delete mode 100644 nss-3.106.0-tests.patch

diff --git a/.gitignore b/.gitignore
index 4db04a8..eb7df0b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -97,3 +97,4 @@ TestUser51.cert
 /nss-3.104-with-nspr-4.35.tar.gz
 /nss-3.105-with-nspr-4.35.tar.gz
 /nss-3.106-with-nspr-4.36.tar.gz
+/nss-3.107-with-nspr-4.36.tar.gz
diff --git a/nss-3.106.0-tests.patch b/nss-3.106.0-tests.patch
deleted file mode 100644
index cb05304..0000000
--- a/nss-3.106.0-tests.patch
+++ /dev/null
@@ -1,28 +0,0 @@
---- nss/tests/tools/tools.sh.org	2024-11-20 06:49:20.119509555 +1100
-+++ nss/tests/tools/tools.sh	2024-11-20 06:51:00.246427318 +1100
-@@ -544,21 +544,22 @@ tools_p12_import_pbmac1_samples()
-   echo "${BINDIR}/pk12util -l ${TOOLSDIR}/data/pbmac1-invalid-bad-iter.p12 -d ${P_R_COPYDIR} -k ${R_PWFILE} -W '1234'"
-   ${BINDIR}/pk12util -l ${TOOLSDIR}/data/pbmac1-invalid-bad-iter.p12 -d ${P_R_COPYDIR} -k ${R_PWFILE} -W '1234' 2>&1
-   ret=$?
--  html_msg $ret 19 "Fail to list private key with bad iterator"
-+  echo "Fail to list private key with bad iterator val=$ret"
-+  html_msg $ret 17 "Fail to list private key with bad iterator"
-   check_tmpfile
- 
-   echo "${BINDIR}/pk12util -l ${TOOLSDIR}/data/pbmac1-invalid-bad-salt.p12 -d ${P_R_COPYDIR} -k ${R_PWFILE} -W '1234'"
-   ${BINDIR}/pk12util -l ${TOOLSDIR}/data/pbmac1-invalid-bad-salt.p12 -d ${P_R_COPYDIR} -k ${R_PWFILE} -W '1234' 2>&1
-   ret=$?
-   echo "Fail to list private key with bad salt val=$ret"
--  html_msg $ret 19 "Fail to import private key with bad salt"
-+  html_msg $ret 17 "Fail to import private key with bad salt"
-   check_tmpfile
- 
-   echo "${BINDIR}/pk12util -l ${TOOLSDIR}/data/pbmac1-invalid-no-length.p12 -d ${P_R_COPYDIR} -k ${R_PWFILE} -W '1234'"
-   ${BINDIR}/pk12util -l ${TOOLSDIR}/data/pbmac1-invalid-no-length.p12 -d ${P_R_COPYDIR} -k ${R_PWFILE} -W '1234' 2>&1
-   ret=$?
-   echo "Fail to import private key with no length val=$ret"
--  html_msg $ret 19 "Fail to import private key with no length"
-+  html_msg $ret 17 "Fail to import private key with no length"
-   check_tmpfile
- }
- 
diff --git a/nss.spec b/nss.spec
index 572a73f..650a142 100644
--- a/nss.spec
+++ b/nss.spec
@@ -1,5 +1,5 @@
 %global nspr_version 4.36.0
-%global nss_version 3.106.0
+%global nss_version 3.107.0
 # NOTE: To avoid NVR clashes of nspr* packages:
 # - reset %%{nspr_release} to 1, when updating %%{nspr_version}
 # - increment %%{nspr_version}, when updating the NSS part only
@@ -7,7 +7,7 @@
 %global nss_release %baserelease
 # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when
 # release number between nss and nspr are different.
-%global nspr_release %[%baserelease+0]
+%global nspr_release %[%baserelease+1]
 # only need to update this as we added new
 # algorithms under nss policy control
 %global crypto_policies_version 20240521
@@ -135,7 +135,6 @@ Patch41:          nss-3.101-enable-kyber-policy.patch
 
 # fix unused variable warnings
 Patch42:          nss-3.103-unused-cipherwrap2.patch
-Patch43:          nss-3.106.0-tests.patch
 
 Patch100:         nspr-config-pc.patch
 Patch101:         nspr-gcc-atomics.patch
@@ -1085,6 +1084,9 @@ fi
 
 
 %changelog
+* Mon Dec 9 2024 Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.107.0-1
+- Update NSS to 3.107.0
+
 * Tue Nov 19 2024 Bojan Smojver <bojan@rexursive.com> - 3.106.0-1
 - Update NSS to 3.106.0
 
diff --git a/sources b/sources
index 96ace72..e18730d 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
 SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403fda3e3d4e7757838061ae56ccf5aac335cb54f254f0a9e6e9c0dd5920b4155a39264525b06
 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7
-SHA512 (nss-3.106-with-nspr-4.36.tar.gz) = c33f96e534f170bb085e1650964e25d9abd3213001e71dbdaaaf3a4b5893736e5201dd753efefa17e2d606e2cef41ca3c006afc1abb5a2ee7ef9f83e73b2403d
+SHA512 (nss-3.107-with-nspr-4.36.tar.gz) = 0d0b34f698cd87058acb3c224298cae1b92f2f0e769c5e37abef7233f04327fead03a63f9bf3be21cf9c736ca9a485d0c2c75ca3ad76bd4610791f1c3c536805

From 711cfddbb275ba56f6b12b94bd254fc8d19ec045 Mon Sep 17 00:00:00 2001
From: Krenzelok Frantisek <krenzelok.frantisek@gmail.com>
Date: Thu, 6 Feb 2025 14:16:07 +0100
Subject: [PATCH 03/13] Update NSS to 3.108.0

---
 .gitignore | 1 +
 nss.spec   | 7 +++++--
 sources    | 2 +-
 3 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/.gitignore b/.gitignore
index eb7df0b..aea47cc 100644
--- a/.gitignore
+++ b/.gitignore
@@ -98,3 +98,4 @@ TestUser51.cert
 /nss-3.105-with-nspr-4.35.tar.gz
 /nss-3.106-with-nspr-4.36.tar.gz
 /nss-3.107-with-nspr-4.36.tar.gz
+/nss-3.108-with-nspr-4.36.tar.gz
diff --git a/nss.spec b/nss.spec
index 650a142..a09e333 100644
--- a/nss.spec
+++ b/nss.spec
@@ -1,5 +1,5 @@
 %global nspr_version 4.36.0
-%global nss_version 3.107.0
+%global nss_version 3.108.0
 # NOTE: To avoid NVR clashes of nspr* packages:
 # - reset %%{nspr_release} to 1, when updating %%{nspr_version}
 # - increment %%{nspr_version}, when updating the NSS part only
@@ -7,7 +7,7 @@
 %global nss_release %baserelease
 # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when
 # release number between nss and nspr are different.
-%global nspr_release %[%baserelease+1]
+%global nspr_release %[%baserelease+2]
 # only need to update this as we added new
 # algorithms under nss policy control
 %global crypto_policies_version 20240521
@@ -1084,6 +1084,9 @@ fi
 
 
 %changelog
+* Thu Feb 6 2025 Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.108.0-1
+- Update NSS to 3.108.0
+
 * Mon Dec 9 2024 Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.107.0-1
 - Update NSS to 3.107.0
 
diff --git a/sources b/sources
index e18730d..f7cbdd3 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
 SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403fda3e3d4e7757838061ae56ccf5aac335cb54f254f0a9e6e9c0dd5920b4155a39264525b06
 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7
-SHA512 (nss-3.107-with-nspr-4.36.tar.gz) = 0d0b34f698cd87058acb3c224298cae1b92f2f0e769c5e37abef7233f04327fead03a63f9bf3be21cf9c736ca9a485d0c2c75ca3ad76bd4610791f1c3c536805
+SHA512 (nss-3.108-with-nspr-4.36.tar.gz) = 08800eb218f0b2a340d490061bfffd5b9e1d650b2df2f2289492d55931b547cb60e2b75c7209cfcaea3199afa076da422b1225775b440e338f905a90896d213e

From 1cdc5adae8819b20ba7c213e7877c4951469fd20 Mon Sep 17 00:00:00 2001
From: Krenzelok Frantisek <krenzelok.frantisek@gmail.com>
Date: Mon, 3 Mar 2025 14:59:46 +0100
Subject: [PATCH 04/13] Update NSS to 3.109.0

---
 .gitignore | 1 +
 nss.spec   | 7 +++++--
 sources    | 2 +-
 3 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/.gitignore b/.gitignore
index aea47cc..6bc35c1 100644
--- a/.gitignore
+++ b/.gitignore
@@ -99,3 +99,4 @@ TestUser51.cert
 /nss-3.106-with-nspr-4.36.tar.gz
 /nss-3.107-with-nspr-4.36.tar.gz
 /nss-3.108-with-nspr-4.36.tar.gz
+/nss-3.109-with-nspr-4.36.tar.gz
diff --git a/nss.spec b/nss.spec
index a09e333..11219f6 100644
--- a/nss.spec
+++ b/nss.spec
@@ -1,5 +1,5 @@
 %global nspr_version 4.36.0
-%global nss_version 3.108.0
+%global nss_version 3.109.0
 # NOTE: To avoid NVR clashes of nspr* packages:
 # - reset %%{nspr_release} to 1, when updating %%{nspr_version}
 # - increment %%{nspr_version}, when updating the NSS part only
@@ -7,7 +7,7 @@
 %global nss_release %baserelease
 # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when
 # release number between nss and nspr are different.
-%global nspr_release %[%baserelease+2]
+%global nspr_release %[%baserelease+3]
 # only need to update this as we added new
 # algorithms under nss policy control
 %global crypto_policies_version 20240521
@@ -1084,6 +1084,9 @@ fi
 
 
 %changelog
+* Mon Mar 3 2025 Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.109.0-1
+- Update NSS to 3.109.0
+
 * Thu Feb 6 2025 Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.108.0-1
 - Update NSS to 3.108.0
 
diff --git a/sources b/sources
index f7cbdd3..31b466d 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
 SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403fda3e3d4e7757838061ae56ccf5aac335cb54f254f0a9e6e9c0dd5920b4155a39264525b06
 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7
-SHA512 (nss-3.108-with-nspr-4.36.tar.gz) = 08800eb218f0b2a340d490061bfffd5b9e1d650b2df2f2289492d55931b547cb60e2b75c7209cfcaea3199afa076da422b1225775b440e338f905a90896d213e
+SHA512 (nss-3.109-with-nspr-4.36.tar.gz) = 8d0dbddadf4d2184214fe4cc3be815b65e340f93fbe1e2b6d73aed23b87e65cfd5e7a0c7544d5381e933c236f561b21c432b3fb5139fabe15262f623f8853895

From 047b3443ed9f0441b77be444b50b08b68ba092ff Mon Sep 17 00:00:00 2001
From: Krenzelok Frantisek <krenzelok.frantisek@gmail.com>
Date: Mon, 31 Mar 2025 16:08:23 +0200
Subject: [PATCH 05/13] Update NSS to 3.110.0

---
 .gitignore | 1 +
 nss.spec   | 7 +++++--
 sources    | 2 +-
 3 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/.gitignore b/.gitignore
index 6bc35c1..e120cf7 100644
--- a/.gitignore
+++ b/.gitignore
@@ -100,3 +100,4 @@ TestUser51.cert
 /nss-3.107-with-nspr-4.36.tar.gz
 /nss-3.108-with-nspr-4.36.tar.gz
 /nss-3.109-with-nspr-4.36.tar.gz
+/nss-3.110-with-nspr-4.36.tar.gz
diff --git a/nss.spec b/nss.spec
index 11219f6..241675f 100644
--- a/nss.spec
+++ b/nss.spec
@@ -1,5 +1,5 @@
 %global nspr_version 4.36.0
-%global nss_version 3.109.0
+%global nss_version 3.110.0
 # NOTE: To avoid NVR clashes of nspr* packages:
 # - reset %%{nspr_release} to 1, when updating %%{nspr_version}
 # - increment %%{nspr_version}, when updating the NSS part only
@@ -7,7 +7,7 @@
 %global nss_release %baserelease
 # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when
 # release number between nss and nspr are different.
-%global nspr_release %[%baserelease+3]
+%global nspr_release %[%baserelease+4]
 # only need to update this as we added new
 # algorithms under nss policy control
 %global crypto_policies_version 20240521
@@ -1084,6 +1084,9 @@ fi
 
 
 %changelog
+* Mon Mar 31 2025 Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.110.0-1
+- Update NSS to 3.110.0
+
 * Mon Mar 3 2025 Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.109.0-1
 - Update NSS to 3.109.0
 
diff --git a/sources b/sources
index 31b466d..ceb0189 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
 SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403fda3e3d4e7757838061ae56ccf5aac335cb54f254f0a9e6e9c0dd5920b4155a39264525b06
 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7
-SHA512 (nss-3.109-with-nspr-4.36.tar.gz) = 8d0dbddadf4d2184214fe4cc3be815b65e340f93fbe1e2b6d73aed23b87e65cfd5e7a0c7544d5381e933c236f561b21c432b3fb5139fabe15262f623f8853895
+SHA512 (nss-3.110-with-nspr-4.36.tar.gz) = 2d0d0d844be0ea072e120a6badf40fb06c0bc6cba3c54d20441f1b6e23f79bbc3dd56de027ca157991d96379e76d2e43363138fc2c8da6b58b753159a55ebea5

From ab89f9be59bf0b475477af8f22f2c955dd5dc537 Mon Sep 17 00:00:00 2001
From: Krenzelok Frantisek <krenzelok.frantisek@gmail.com>
Date: Tue, 22 Apr 2025 15:48:30 +0200
Subject: [PATCH 06/13] Dissable test ssl_policy_pkix_oscp due to dns issues

Related: https://issues.redhat.com/browse/FC-1613
---
 nss-3.110-dissable_test-ssl_policy_pkix_oscp.patch | 12 ++++++++++++
 nss.spec                                           |  9 ++++++++-
 2 files changed, 20 insertions(+), 1 deletion(-)
 create mode 100644 nss-3.110-dissable_test-ssl_policy_pkix_oscp.patch

diff --git a/nss-3.110-dissable_test-ssl_policy_pkix_oscp.patch b/nss-3.110-dissable_test-ssl_policy_pkix_oscp.patch
new file mode 100644
index 0000000..a14d0d3
--- /dev/null
+++ b/nss-3.110-dissable_test-ssl_policy_pkix_oscp.patch
@@ -0,0 +1,12 @@
+diff -up nss/tests/ssl/ssl.sh.ignore_test nss/tests/ssl/ssl.sh
+--- nss/tests/ssl/ssl.sh.ignore_test	2025-04-22 10:30:10.569990667 +0200
++++ nss/tests/ssl/ssl.sh	2025-04-22 10:30:34.773327320 +0200
+@@ -1600,7 +1600,7 @@ ssl_run_tests()
+             if using_sql ; then
+                 ssl_policy_listsuites
+                 ssl_policy_selfserv
+-                ssl_policy_pkix_ocsp
++#               ssl_policy_pkix_ocsp
+                 ssl_policy
+             fi
+             ;;
diff --git a/nss.spec b/nss.spec
index 241675f..a049d45 100644
--- a/nss.spec
+++ b/nss.spec
@@ -3,7 +3,7 @@
 # NOTE: To avoid NVR clashes of nspr* packages:
 # - reset %%{nspr_release} to 1, when updating %%{nspr_version}
 # - increment %%{nspr_version}, when updating the NSS part only
-%global baserelease 1
+%global baserelease 2
 %global nss_release %baserelease
 # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when
 # release number between nss and nspr are different.
@@ -136,6 +136,9 @@ Patch41:          nss-3.101-enable-kyber-policy.patch
 # fix unused variable warnings
 Patch42:          nss-3.103-unused-cipherwrap2.patch
 
+# https://issues.redhat.com/browse/FC-1613
+Patch50:          nss-3.110-dissable_test-ssl_policy_pkix_oscp.patch
+
 Patch100:         nspr-config-pc.patch
 Patch101:         nspr-gcc-atomics.patch
 
@@ -1084,6 +1087,10 @@ fi
 
 
 %changelog
+* Tue Apr 22 2025 Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.110.0-2
+- Dissable test ssl_policy_pkix_oscp due to dns resolution issues on the host
+- Related: FC-1613
+
 * Mon Mar 31 2025 Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.110.0-1
 - Update NSS to 3.110.0
 

From c39c42fb4c698c470518d65eb71b97255a10922b Mon Sep 17 00:00:00 2001
From: Krenzelok Frantisek <krenzelok.frantisek@gmail.com>
Date: Mon, 5 May 2025 13:24:52 +0200
Subject: [PATCH 07/13] Update NSS to 3.111.0

---
 .gitignore | 1 +
 nss.spec   | 7 +++++--
 sources    | 2 +-
 3 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/.gitignore b/.gitignore
index e120cf7..73a0dee 100644
--- a/.gitignore
+++ b/.gitignore
@@ -101,3 +101,4 @@ TestUser51.cert
 /nss-3.108-with-nspr-4.36.tar.gz
 /nss-3.109-with-nspr-4.36.tar.gz
 /nss-3.110-with-nspr-4.36.tar.gz
+/nss-3.111-with-nspr-4.36.tar.gz
diff --git a/nss.spec b/nss.spec
index a049d45..f9baa1c 100644
--- a/nss.spec
+++ b/nss.spec
@@ -1,5 +1,5 @@
 %global nspr_version 4.36.0
-%global nss_version 3.110.0
+%global nss_version 3.111.0
 # NOTE: To avoid NVR clashes of nspr* packages:
 # - reset %%{nspr_release} to 1, when updating %%{nspr_version}
 # - increment %%{nspr_version}, when updating the NSS part only
@@ -7,7 +7,7 @@
 %global nss_release %baserelease
 # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when
 # release number between nss and nspr are different.
-%global nspr_release %[%baserelease+4]
+%global nspr_release %[%baserelease+5]
 # only need to update this as we added new
 # algorithms under nss policy control
 %global crypto_policies_version 20240521
@@ -1087,6 +1087,9 @@ fi
 
 
 %changelog
+* Mon May 05 2025 Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.111.0-1
+- Update NSS to 3.111.0
+
 * Tue Apr 22 2025 Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.110.0-2
 - Dissable test ssl_policy_pkix_oscp due to dns resolution issues on the host
 - Related: FC-1613
diff --git a/sources b/sources
index ceb0189..f6e8787 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
 SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403fda3e3d4e7757838061ae56ccf5aac335cb54f254f0a9e6e9c0dd5920b4155a39264525b06
 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7
-SHA512 (nss-3.110-with-nspr-4.36.tar.gz) = 2d0d0d844be0ea072e120a6badf40fb06c0bc6cba3c54d20441f1b6e23f79bbc3dd56de027ca157991d96379e76d2e43363138fc2c8da6b58b753159a55ebea5
+SHA512 (nss-3.111-with-nspr-4.36.tar.gz) = d33ab2eac68e3c182faf7b1d80ea034a711e6dc8d6732ea069130a40f8d12a870b7e7b2a9ee4be417ba86623c9ab87313eabfb8152ee639f9bee77dbf359d0c8

From bb5576b0d93dcb703443468c416fb4c9d76d6721 Mon Sep 17 00:00:00 2001
From: Krenzelok Frantisek <krenzelok.frantisek@gmail.com>
Date: Tue, 27 May 2025 14:49:09 +0200
Subject: [PATCH 08/13] Update NSS to 3.112.0

---
 .gitignore | 1 +
 nss.spec   | 9 ++++++---
 sources    | 2 +-
 3 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/.gitignore b/.gitignore
index 73a0dee..f357aa4 100644
--- a/.gitignore
+++ b/.gitignore
@@ -102,3 +102,4 @@ TestUser51.cert
 /nss-3.109-with-nspr-4.36.tar.gz
 /nss-3.110-with-nspr-4.36.tar.gz
 /nss-3.111-with-nspr-4.36.tar.gz
+/nss-3.112-with-nspr-4.36.tar.gz
diff --git a/nss.spec b/nss.spec
index f9baa1c..bdb0284 100644
--- a/nss.spec
+++ b/nss.spec
@@ -1,13 +1,13 @@
 %global nspr_version 4.36.0
-%global nss_version 3.111.0
+%global nss_version 3.112.0
 # NOTE: To avoid NVR clashes of nspr* packages:
 # - reset %%{nspr_release} to 1, when updating %%{nspr_version}
 # - increment %%{nspr_version}, when updating the NSS part only
-%global baserelease 2
+%global baserelease 1
 %global nss_release %baserelease
 # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when
 # release number between nss and nspr are different.
-%global nspr_release %[%baserelease+5]
+%global nspr_release %[%baserelease+7]
 # only need to update this as we added new
 # algorithms under nss policy control
 %global crypto_policies_version 20240521
@@ -1087,6 +1087,9 @@ fi
 
 
 %changelog
+* Tue May 27 2025 Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.112.0-1
+- Update NSS to 3.112.0
+
 * Mon May 05 2025 Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.111.0-1
 - Update NSS to 3.111.0
 
diff --git a/sources b/sources
index f6e8787..a5b080a 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
 SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403fda3e3d4e7757838061ae56ccf5aac335cb54f254f0a9e6e9c0dd5920b4155a39264525b06
 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7
-SHA512 (nss-3.111-with-nspr-4.36.tar.gz) = d33ab2eac68e3c182faf7b1d80ea034a711e6dc8d6732ea069130a40f8d12a870b7e7b2a9ee4be417ba86623c9ab87313eabfb8152ee639f9bee77dbf359d0c8
+SHA512 (nss-3.112-with-nspr-4.36.tar.gz) = a3da1f5cc5a05e7d3d7082312ef6000266ca3a33a9cc61c81d9d54743522d752e7634cd11ff6b6721bde7ee0c3ca92b93c964b34cb1d377462379de075fa3fe1

From 0d1fde08fc92256fc6b1f1a883717da3ec074b1f Mon Sep 17 00:00:00 2001
From: Krenzelok Frantisek <krenzelok.frantisek@gmail.com>
Date: Mon, 30 Jun 2025 10:26:26 +0200
Subject: [PATCH 09/13] Update NSS to 3.113.0

---
 .gitignore | 1 +
 nss.spec   | 7 +++++--
 sources    | 2 +-
 3 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/.gitignore b/.gitignore
index f357aa4..6cc0a15 100644
--- a/.gitignore
+++ b/.gitignore
@@ -103,3 +103,4 @@ TestUser51.cert
 /nss-3.110-with-nspr-4.36.tar.gz
 /nss-3.111-with-nspr-4.36.tar.gz
 /nss-3.112-with-nspr-4.36.tar.gz
+/nss-3.113-with-nspr-4.36.tar.gz
diff --git a/nss.spec b/nss.spec
index bdb0284..c95e8fd 100644
--- a/nss.spec
+++ b/nss.spec
@@ -1,5 +1,5 @@
 %global nspr_version 4.36.0
-%global nss_version 3.112.0
+%global nss_version 3.113.0
 # NOTE: To avoid NVR clashes of nspr* packages:
 # - reset %%{nspr_release} to 1, when updating %%{nspr_version}
 # - increment %%{nspr_version}, when updating the NSS part only
@@ -7,7 +7,7 @@
 %global nss_release %baserelease
 # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when
 # release number between nss and nspr are different.
-%global nspr_release %[%baserelease+7]
+%global nspr_release %[%baserelease+8]
 # only need to update this as we added new
 # algorithms under nss policy control
 %global crypto_policies_version 20240521
@@ -1087,6 +1087,9 @@ fi
 
 
 %changelog
+* Mon Jun 30 2025 Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.113.0-1
+- Update NSS to 3.113.0
+
 * Tue May 27 2025 Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.112.0-1
 - Update NSS to 3.112.0
 
diff --git a/sources b/sources
index a5b080a..2fb8d58 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
 SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403fda3e3d4e7757838061ae56ccf5aac335cb54f254f0a9e6e9c0dd5920b4155a39264525b06
 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7
-SHA512 (nss-3.112-with-nspr-4.36.tar.gz) = a3da1f5cc5a05e7d3d7082312ef6000266ca3a33a9cc61c81d9d54743522d752e7634cd11ff6b6721bde7ee0c3ca92b93c964b34cb1d377462379de075fa3fe1
+SHA512 (nss-3.113-with-nspr-4.36.tar.gz) = 8490e110e417f131efd87b17382560246f9d36d24e8222031bb804d62d0fa983e2d5ab2ededa0b74dbd70d92b23621a4364bf428a156b0727d10e08a27c9d88f

From 4f074f467d23937d588deace117c2061c15cbaf4 Mon Sep 17 00:00:00 2001
From: Krenzelok Frantisek <krenzelok.frantisek@gmail.com>
Date: Wed, 30 Jul 2025 11:05:13 +0200
Subject: [PATCH 10/13] Update NSS to 3.114.0

---
 .gitignore                 |  1 +
 nss-3.114-merge-test.patch | 21 +++++++++++++++++++++
 nss.spec                   | 14 +++++++++++---
 sources                    |  2 +-
 4 files changed, 34 insertions(+), 4 deletions(-)
 create mode 100644 nss-3.114-merge-test.patch

diff --git a/.gitignore b/.gitignore
index 6cc0a15..43cc11a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -104,3 +104,4 @@ TestUser51.cert
 /nss-3.111-with-nspr-4.36.tar.gz
 /nss-3.112-with-nspr-4.36.tar.gz
 /nss-3.113-with-nspr-4.36.tar.gz
+/nss-3.114-with-nspr-4.37.tar.gz
diff --git a/nss-3.114-merge-test.patch b/nss-3.114-merge-test.patch
new file mode 100644
index 0000000..91c16ac
--- /dev/null
+++ b/nss-3.114-merge-test.patch
@@ -0,0 +1,21 @@
+--- nss/lib/pk11wrap/pk11merge.c
++++ nss/lib/pk11wrap/pk11merge.c
+@@ -1253,17 +1253,17 @@ pk11_mergeTrust(PK11SlotInfo *targetSlot
+ 
+         PORT_Assert(trustAttrsCount == PR_ARRAY_SIZE(nssTrustAttrs));
+ 
+         /* existing trust record, merge the two together */
+         for (i = 0; i < trustAttrsCount; i++) {
+             targetTemplate.type = (targetClass == CKO_TRUST)
+                                       ? nssTrustAttrs[i]
+                                       : pkcsTrustAttrs[i];
+-            targetTemplate.type = (sourceClass == CKO_TRUST)
++            sourceTemplate.type = (sourceClass == CKO_TRUST)
+                                       ? nssTrustAttrs[i]
+                                       : pkcsTrustAttrs[i];
+ 
+             targetTemplate.pValue = sourceTemplate.pValue = NULL;
+             targetTemplate.ulValueLen = sourceTemplate.ulValueLen = 0;
+             PK11_GetAttributes(arena, sourceSlot, id, &sourceTemplate, 1);
+             PK11_GetAttributes(arena, targetSlot, targetTrustID,
+                                &targetTemplate, 1);
diff --git a/nss.spec b/nss.spec
index c95e8fd..518eafb 100644
--- a/nss.spec
+++ b/nss.spec
@@ -1,5 +1,5 @@
-%global nspr_version 4.36.0
-%global nss_version 3.113.0
+%global nspr_version 4.37.0
+%global nss_version 3.114.0
 # NOTE: To avoid NVR clashes of nspr* packages:
 # - reset %%{nspr_release} to 1, when updating %%{nspr_version}
 # - increment %%{nspr_version}, when updating the NSS part only
@@ -7,7 +7,7 @@
 %global nss_release %baserelease
 # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when
 # release number between nss and nspr are different.
-%global nspr_release %[%baserelease+8]
+%global nspr_release %[%baserelease+0]
 # only need to update this as we added new
 # algorithms under nss policy control
 %global crypto_policies_version 20240521
@@ -139,6 +139,8 @@ Patch42:          nss-3.103-unused-cipherwrap2.patch
 # https://issues.redhat.com/browse/FC-1613
 Patch50:          nss-3.110-dissable_test-ssl_policy_pkix_oscp.patch
 
+Patch51:          nss-3.114-merge-test.patch
+
 Patch100:         nspr-config-pc.patch
 Patch101:         nspr-gcc-atomics.patch
 
@@ -1087,6 +1089,12 @@ fi
 
 
 %changelog
+* Thu Aug 14 2025 Bojan Smojver <bojan@rexursive.com> - 3.114.0-1
+- Patch for merge test failure (Bob Relyea <rrelyea@redhat.com>)
+
+* Wed Jul 30 2025 Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.114.0-1
+- Update NSS to 3.114.0
+
 * Mon Jun 30 2025 Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.113.0-1
 - Update NSS to 3.113.0
 
diff --git a/sources b/sources
index 2fb8d58..70ae07f 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
 SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403fda3e3d4e7757838061ae56ccf5aac335cb54f254f0a9e6e9c0dd5920b4155a39264525b06
 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7
-SHA512 (nss-3.113-with-nspr-4.36.tar.gz) = 8490e110e417f131efd87b17382560246f9d36d24e8222031bb804d62d0fa983e2d5ab2ededa0b74dbd70d92b23621a4364bf428a156b0727d10e08a27c9d88f
+SHA512 (nss-3.114-with-nspr-4.37.tar.gz) = 18d4049b5a9cd75d31bd1f70586f8941379094764de550eef951232e94356b30d48cea57d7e029d958ca56d95b67c9899f8880821a2974b8bd766f0b2d84d06d

From 5777d9e14b99e23e1e53ae32d2c9676c37d15dbf Mon Sep 17 00:00:00 2001
From: Krenzelok Frantisek <krenzelok.frantisek@gmail.com>
Date: Mon, 25 Aug 2025 19:31:09 +0200
Subject: [PATCH 11/13] Update NSS to 3.115.1

---
 .gitignore                 |  1 +
 nss-3.114-merge-test.patch | 21 ---------------------
 nss.spec                   |  9 +++++----
 sources                    |  2 +-
 4 files changed, 7 insertions(+), 26 deletions(-)
 delete mode 100644 nss-3.114-merge-test.patch

diff --git a/.gitignore b/.gitignore
index 43cc11a..6296872 100644
--- a/.gitignore
+++ b/.gitignore
@@ -105,3 +105,4 @@ TestUser51.cert
 /nss-3.112-with-nspr-4.36.tar.gz
 /nss-3.113-with-nspr-4.36.tar.gz
 /nss-3.114-with-nspr-4.37.tar.gz
+/nss-3.115.1-with-nspr-4.37.tar.gz
diff --git a/nss-3.114-merge-test.patch b/nss-3.114-merge-test.patch
deleted file mode 100644
index 91c16ac..0000000
--- a/nss-3.114-merge-test.patch
+++ /dev/null
@@ -1,21 +0,0 @@
---- nss/lib/pk11wrap/pk11merge.c
-+++ nss/lib/pk11wrap/pk11merge.c
-@@ -1253,17 +1253,17 @@ pk11_mergeTrust(PK11SlotInfo *targetSlot
- 
-         PORT_Assert(trustAttrsCount == PR_ARRAY_SIZE(nssTrustAttrs));
- 
-         /* existing trust record, merge the two together */
-         for (i = 0; i < trustAttrsCount; i++) {
-             targetTemplate.type = (targetClass == CKO_TRUST)
-                                       ? nssTrustAttrs[i]
-                                       : pkcsTrustAttrs[i];
--            targetTemplate.type = (sourceClass == CKO_TRUST)
-+            sourceTemplate.type = (sourceClass == CKO_TRUST)
-                                       ? nssTrustAttrs[i]
-                                       : pkcsTrustAttrs[i];
- 
-             targetTemplate.pValue = sourceTemplate.pValue = NULL;
-             targetTemplate.ulValueLen = sourceTemplate.ulValueLen = 0;
-             PK11_GetAttributes(arena, sourceSlot, id, &sourceTemplate, 1);
-             PK11_GetAttributes(arena, targetSlot, targetTrustID,
-                                &targetTemplate, 1);
diff --git a/nss.spec b/nss.spec
index 518eafb..ad0d15d 100644
--- a/nss.spec
+++ b/nss.spec
@@ -1,5 +1,5 @@
 %global nspr_version 4.37.0
-%global nss_version 3.114.0
+%global nss_version 3.115.1
 # NOTE: To avoid NVR clashes of nspr* packages:
 # - reset %%{nspr_release} to 1, when updating %%{nspr_version}
 # - increment %%{nspr_version}, when updating the NSS part only
@@ -7,7 +7,7 @@
 %global nss_release %baserelease
 # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when
 # release number between nss and nspr are different.
-%global nspr_release %[%baserelease+0]
+%global nspr_release %[%baserelease+1]
 # only need to update this as we added new
 # algorithms under nss policy control
 %global crypto_policies_version 20240521
@@ -139,8 +139,6 @@ Patch42:          nss-3.103-unused-cipherwrap2.patch
 # https://issues.redhat.com/browse/FC-1613
 Patch50:          nss-3.110-dissable_test-ssl_policy_pkix_oscp.patch
 
-Patch51:          nss-3.114-merge-test.patch
-
 Patch100:         nspr-config-pc.patch
 Patch101:         nspr-gcc-atomics.patch
 
@@ -1089,6 +1087,9 @@ fi
 
 
 %changelog
+* Mon Aug 25 2025 Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.115.1-1
+- Update NSS to 3.115.1
+
 * Thu Aug 14 2025 Bojan Smojver <bojan@rexursive.com> - 3.114.0-1
 - Patch for merge test failure (Bob Relyea <rrelyea@redhat.com>)
 
diff --git a/sources b/sources
index 70ae07f..7d49126 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
 SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403fda3e3d4e7757838061ae56ccf5aac335cb54f254f0a9e6e9c0dd5920b4155a39264525b06
 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7
-SHA512 (nss-3.114-with-nspr-4.37.tar.gz) = 18d4049b5a9cd75d31bd1f70586f8941379094764de550eef951232e94356b30d48cea57d7e029d958ca56d95b67c9899f8880821a2974b8bd766f0b2d84d06d
+SHA512 (nss-3.115.1-with-nspr-4.37.tar.gz) = 57d2aec33ab19908cc1f5dca3390af56aa51798186e3df2fcf71957b7ea9b48acc2fa71d3e3a388bdeb9ed39cca3c751deccf568e742187e27a7b7c553946041

From a494d817a8ecb66b5260520c899148e80b1c68b1 Mon Sep 17 00:00:00 2001
From: Krenzelok Frantisek <krenzelok.frantisek@gmail.com>
Date: Fri, 12 Sep 2025 11:16:23 +0200
Subject: [PATCH 12/13] Update NSS to 3.116.0

---
 .gitignore                         |  1 +
 nss-3.103-unused-cipherwrap2.patch | 17 -----------------
 nss.spec                           | 11 ++++++-----
 sources                            |  2 +-
 4 files changed, 8 insertions(+), 23 deletions(-)
 delete mode 100644 nss-3.103-unused-cipherwrap2.patch

diff --git a/.gitignore b/.gitignore
index 6296872..e843813 100644
--- a/.gitignore
+++ b/.gitignore
@@ -106,3 +106,4 @@ TestUser51.cert
 /nss-3.113-with-nspr-4.36.tar.gz
 /nss-3.114-with-nspr-4.37.tar.gz
 /nss-3.115.1-with-nspr-4.37.tar.gz
+/nss-3.116-with-nspr-4.37.tar.gz
diff --git a/nss-3.103-unused-cipherwrap2.patch b/nss-3.103-unused-cipherwrap2.patch
deleted file mode 100644
index 2c77239..0000000
--- a/nss-3.103-unused-cipherwrap2.patch
+++ /dev/null
@@ -1,17 +0,0 @@
---- ./lib/softoken/pkcs11c.c.unused	2024-08-05 17:56:10.705414972 +0200
-+++ ./lib/softoken/pkcs11c.c	2024-08-05 18:09:04.681015706 +0200
-@@ -165,10 +165,14 @@ SFTKCipherWrap(AESKeyWrapContext, AESKey
-         mmm##_DestroyContext(ctx, freeit);                                   \
-     }
- 
-+#ifndef NSS_DISABLE_DEPRECATED_RC2
- SFTKCipherWrap2(RC2Context, RC2);
-+#endif
- SFTKCipherWrap2(RC4Context, RC4);
- SFTKCipherWrap2(DESContext, DES);
-+#ifndef NSS_DISABLE_DEPRECATED_SEED
- SFTKCipherWrap2(SEEDContext, SEED);
-+#endif
- SFTKCipherWrap2(CamelliaContext, Camellia);
- SFTKCipherWrap2(AESContext, AES);
- SFTKCipherWrap2(AESKeyWrapContext, AESKeyWrap);
diff --git a/nss.spec b/nss.spec
index ad0d15d..4c636b1 100644
--- a/nss.spec
+++ b/nss.spec
@@ -1,5 +1,5 @@
 %global nspr_version 4.37.0
-%global nss_version 3.115.1
+%global nss_version 3.116.0
 # NOTE: To avoid NVR clashes of nspr* packages:
 # - reset %%{nspr_release} to 1, when updating %%{nspr_version}
 # - increment %%{nspr_version}, when updating the NSS part only
@@ -7,7 +7,7 @@
 %global nss_release %baserelease
 # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when
 # release number between nss and nspr are different.
-%global nspr_release %[%baserelease+1]
+%global nspr_release %[%baserelease+2]
 # only need to update this as we added new
 # algorithms under nss policy control
 %global crypto_policies_version 20240521
@@ -133,9 +133,6 @@ Patch40:          nss-no-dbm-man-page.patch
 # allow crypto policies to enable kyber
 Patch41:          nss-3.101-enable-kyber-policy.patch
 
-# fix unused variable warnings
-Patch42:          nss-3.103-unused-cipherwrap2.patch
-
 # https://issues.redhat.com/browse/FC-1613
 Patch50:          nss-3.110-dissable_test-ssl_policy_pkix_oscp.patch
 
@@ -1071,6 +1068,7 @@ fi
 %{_includedir}/nss3/ecl-exp.h
 %{_includedir}/nss3/nsslowhash.h
 %{_includedir}/nss3/shsign.h
+%{_includedir}/nss3/ml_dsat.h
 
 %files -n nspr
 %{!?_licensedir:%global license %%doc}
@@ -1087,6 +1085,9 @@ fi
 
 
 %changelog
+* Fri Sep 12 2025 Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.116.0-1
+- Update NSS to 3.116.0
+
 * Mon Aug 25 2025 Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.115.1-1
 - Update NSS to 3.115.1
 
diff --git a/sources b/sources
index 7d49126..5e2ffbd 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
 SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403fda3e3d4e7757838061ae56ccf5aac335cb54f254f0a9e6e9c0dd5920b4155a39264525b06
 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7
-SHA512 (nss-3.115.1-with-nspr-4.37.tar.gz) = 57d2aec33ab19908cc1f5dca3390af56aa51798186e3df2fcf71957b7ea9b48acc2fa71d3e3a388bdeb9ed39cca3c751deccf568e742187e27a7b7c553946041
+SHA512 (nss-3.116-with-nspr-4.37.tar.gz) = e65708e403ab622291b53244b77b045cbee1c8766b30f8824f577cc2502bb48c8d577a0ca7ad023e291e71fc4d6d2ddda9d9d25d7b2b3a0a4d708762ad5f3f33

From 16ecc3dc0bd388a903162b5f0858fa274fe27f38 Mon Sep 17 00:00:00 2001
From: Krenzelok Frantisek <krenzelok.frantisek@gmail.com>
Date: Wed, 15 Oct 2025 10:59:41 +0200
Subject: [PATCH 13/13] Update NSS to 3.117.0

---
 .gitignore | 1 +
 nss.spec   | 7 +++++--
 sources    | 1 +
 3 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/.gitignore b/.gitignore
index e843813..73bae65 100644
--- a/.gitignore
+++ b/.gitignore
@@ -107,3 +107,4 @@ TestUser51.cert
 /nss-3.114-with-nspr-4.37.tar.gz
 /nss-3.115.1-with-nspr-4.37.tar.gz
 /nss-3.116-with-nspr-4.37.tar.gz
+/nss-3.117-with-nspr-4.37.tar.gz
diff --git a/nss.spec b/nss.spec
index 4c636b1..b94c247 100644
--- a/nss.spec
+++ b/nss.spec
@@ -1,5 +1,5 @@
 %global nspr_version 4.37.0
-%global nss_version 3.116.0
+%global nss_version 3.117.0
 # NOTE: To avoid NVR clashes of nspr* packages:
 # - reset %%{nspr_release} to 1, when updating %%{nspr_version}
 # - increment %%{nspr_version}, when updating the NSS part only
@@ -7,7 +7,7 @@
 %global nss_release %baserelease
 # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when
 # release number between nss and nspr are different.
-%global nspr_release %[%baserelease+2]
+%global nspr_release %[%baserelease+3]
 # only need to update this as we added new
 # algorithms under nss policy control
 %global crypto_policies_version 20240521
@@ -1085,6 +1085,9 @@ fi
 
 
 %changelog
+* Wed Oct 15 2025 Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.117.0-1
+- Update NSS to 3.117.0
+
 * Fri Sep 12 2025 Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.116.0-1
 - Update NSS to 3.116.0
 
diff --git a/sources b/sources
index 5e2ffbd..20a298e 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,4 @@
 SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403fda3e3d4e7757838061ae56ccf5aac335cb54f254f0a9e6e9c0dd5920b4155a39264525b06
 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7
 SHA512 (nss-3.116-with-nspr-4.37.tar.gz) = e65708e403ab622291b53244b77b045cbee1c8766b30f8824f577cc2502bb48c8d577a0ca7ad023e291e71fc4d6d2ddda9d9d25d7b2b3a0a4d708762ad5f3f33
+SHA512 (nss-3.117-with-nspr-4.37.tar.gz) = 00c2d0ea33083d82a597ad6a18e355479f368cb9e50632cd0507f913fef08bde433027a9f356a41ba57f8b6f0cbda864d00e50a8dd1639e998d14c933c966950