From 8a9b5f6d55bc69b5d8df75953015960bccd66beb Mon Sep 17 00:00:00 2001 From: Krenzelok Frantisek Date: Wed, 4 Oct 2023 08:07:50 +0200 Subject: [PATCH 01/14] Update NSS to 3.94.0 --- .gitignore | 1 + nss.spec | 10 +++++----- sources | 2 +- 3 files changed, 7 insertions(+), 6 deletions(-) diff --git a/.gitignore b/.gitignore index 5cfabf8..61e1690 100644 --- a/.gitignore +++ b/.gitignore @@ -84,3 +84,4 @@ TestUser51.cert /nss-3.91-with-nspr-4.35.tar.gz /nss-3.92-with-nspr-4.35.tar.gz /nss-3.93-with-nspr-4.35.tar.gz +/nss-3.94-with-nspr-4.35.tar.gz diff --git a/nss.spec b/nss.spec index ad8f24f..b306d17 100644 --- a/nss.spec +++ b/nss.spec @@ -1,5 +1,5 @@ %global nspr_version 4.35.0 -%global nss_version 3.93.0 +%global nss_version 3.94.0 # NOTE: To avoid NVR clashes of nspr* packages: # - reset %%{nspr_release} to 1, when updating %%{nspr_version} # - increment %%{nspr_version}, when updating the NSS part only @@ -7,7 +7,7 @@ %global nss_release %baserelease # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when # release number between nss and nspr are different. -%global nspr_release %[%baserelease+11] +%global nspr_release %[%baserelease+12] # only need to update this as we added new # algorithms under nss policy control %global crypto_policies_version 20210118 @@ -132,9 +132,6 @@ Patch12: nss-signtool-format.patch # fedora disabled dbm by default Patch40: nss-no-dbm-man-page.patch -# https://bugzilla.mozilla.org/show_bug.cgi?id=1774659 -Patch51: nss-3.79-dbtool.patch - Patch100: nspr-config-pc.patch Patch101: nspr-gcc-atomics.patch @@ -1088,6 +1085,9 @@ update-crypto-policies &> /dev/null || : %changelog +* Wed Oct 4 2023 Frantisek Krenzelok - 3.94.0-1 +- Update NSS to 3.94.0 + * Thu Aug 31 2023 Frantisek Krenzelok - 3.93.0-1 - Update NSS to 3.93.0 diff --git a/sources b/sources index d342e47..fa784d4 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403fda3e3d4e7757838061ae56ccf5aac335cb54f254f0a9e6e9c0dd5920b4155a39264525b06 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7 -SHA512 (nss-3.93-with-nspr-4.35.tar.gz) = efe85e09021ca363df35d092b32463b359b2a23fc6e761949e944ba4209b09bdf007fc69015086a278c999411d62b9dba6fbedfb8a7c962ed40e406de45bc28e +SHA512 (nss-3.94-with-nspr-4.35.tar.gz) = 121180c80c635b0e3e9fa5d44297107d4c5da84879210e81da0f799a48e9ed1ea43e5c28d5cb53fd65218678b94b5db282b7ed0ee96482caa01493c39ed93c27 From 8e7a0b3ff97582234c80097fba62e4c652242008 Mon Sep 17 00:00:00 2001 From: Robert Relyea Date: Thu, 26 Oct 2023 08:15:45 -0700 Subject: [PATCH 02/14] Fix compatibility issue in upstream patch to use HACL ECC 256 --- nss-3.94-fix-ec-encoding.patch | 107 +++++++++++++++++++++++++++++++++ nss.spec | 7 ++- 2 files changed, 113 insertions(+), 1 deletion(-) create mode 100644 nss-3.94-fix-ec-encoding.patch diff --git a/nss-3.94-fix-ec-encoding.patch b/nss-3.94-fix-ec-encoding.patch new file mode 100644 index 0000000..f4361c9 --- /dev/null +++ b/nss-3.94-fix-ec-encoding.patch @@ -0,0 +1,107 @@ +diff --git a/lib/freebl/blapit.h b/lib/freebl/blapit.h +--- a/lib/freebl/blapit.h ++++ b/lib/freebl/blapit.h +@@ -387,17 +387,18 @@ typedef struct DHPrivateKeyStr DHPrivate + */ + + /* + ** The ECParams data structures can encode elliptic curve + ** parameters for both GFp and GF2m curves. + */ + + typedef enum { ec_params_explicit, +- ec_params_named ++ ec_params_named, ++ ec_params_edwards_named + } ECParamsType; + + typedef enum { ec_field_GFp = 1, + ec_field_GF2m, + ec_field_plain + } ECFieldType; + + struct ECFieldIDStr { +diff --git a/lib/freebl/ecdecode.c b/lib/freebl/ecdecode.c +--- a/lib/freebl/ecdecode.c ++++ b/lib/freebl/ecdecode.c +@@ -171,16 +171,17 @@ EC_FillParams(PLArenaPool *arena, const + * (the NIST P-521 curve) + */ + CHECK_SEC_OK(gf_populate_params_bytes(ECCurve_SECG_PRIME_521R1, + ec_field_GFp, params)); + break; + + case SEC_OID_CURVE25519: + /* Populate params for Curve25519 */ ++ params->type = ec_params_edwards_named; + CHECK_SEC_OK(gf_populate_params_bytes(ECCurve25519, + ec_field_plain, + params)); + break; + + default: + break; + }; +diff --git a/lib/softoken/pkcs11.c b/lib/softoken/pkcs11.c +--- a/lib/softoken/pkcs11.c ++++ b/lib/softoken/pkcs11.c +@@ -1921,17 +1921,17 @@ sftk_GetPubKey(SFTKObject *object, CK_KE + /* special note: We can't just use the first byte to distinguish + * between EC_POINT_FORM_UNCOMPRESSED and SEC_ASN1_OCTET_STRING. + * Both are 0x04. */ + + /* Handle the non-DER encoded case. + * Some curves are always pressumed to be non-DER. + */ + if (pubKey->u.ec.publicValue.len == keyLen && +- (pubKey->u.ec.ecParams.fieldID.type == ec_field_plain || ++ (pubKey->u.ec.ecParams.type == ec_params_edwards_named || + pubKey->u.ec.publicValue.data[0] == EC_POINT_FORM_UNCOMPRESSED)) { + break; /* key was not DER encoded, no need to unwrap */ + } + + /* handle the encoded case */ + if ((pubKey->u.ec.publicValue.data[0] == SEC_ASN1_OCTET_STRING) && + pubKey->u.ec.publicValue.len > keyLen) { + SECItem publicValue; +@@ -1941,17 +1941,17 @@ sftk_GetPubKey(SFTKObject *object, CK_KE + SEC_ASN1_GET(SEC_OctetStringTemplate), + &pubKey->u.ec.publicValue); + /* nope, didn't decode correctly */ + if ((rv != SECSuccess) || (publicValue.len != keyLen)) { + crv = CKR_ATTRIBUTE_VALUE_INVALID; + break; + } + /* we don't handle compressed points except in the case of ECCurve25519 */ +- if ((pubKey->u.ec.ecParams.fieldID.type != ec_field_plain) && ++ if ((pubKey->u.ec.ecParams.type != ec_params_edwards_named) && + (publicValue.data[0] != EC_POINT_FORM_UNCOMPRESSED)) { + crv = CKR_ATTRIBUTE_VALUE_INVALID; + break; + } + /* replace our previous with the decoded key */ + pubKey->u.ec.publicValue = publicValue; + break; + } +diff --git a/lib/softoken/pkcs11c.c b/lib/softoken/pkcs11c.c +--- a/lib/softoken/pkcs11c.c ++++ b/lib/softoken/pkcs11c.c +@@ -5655,17 +5655,17 @@ NSC_GenerateKeyPair(CK_SESSION_HANDLE hS + sftk_fatalError = PR_TRUE; + } + PORT_FreeArena(ecParams->arena, PR_TRUE); + crv = sftk_MapCryptError(PORT_GetError()); + break; + } + + if (PR_GetEnvSecure("NSS_USE_DECODED_CKA_EC_POINT") || +- ecParams->fieldID.type == ec_field_plain) { ++ ecParams->type == ec_params_edwards_named) { + PORT_FreeArena(ecParams->arena, PR_TRUE); + crv = sftk_AddAttributeType(publicKey, CKA_EC_POINT, + sftk_item_expand(&ecPriv->publicValue)); + } else { + PORT_FreeArena(ecParams->arena, PR_TRUE); + SECItem *pubValue = SEC_ASN1EncodeItem(NULL, NULL, + &ecPriv->publicValue, + SEC_ASN1_GET(SEC_OctetStringTemplate)); diff --git a/nss.spec b/nss.spec index b306d17..96e4075 100644 --- a/nss.spec +++ b/nss.spec @@ -3,7 +3,7 @@ # NOTE: To avoid NVR clashes of nspr* packages: # - reset %%{nspr_release} to 1, when updating %%{nspr_version} # - increment %%{nspr_version}, when updating the NSS part only -%global baserelease 1 +%global baserelease 2 %global nss_release %baserelease # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when # release number between nss and nspr are different. @@ -132,6 +132,8 @@ Patch12: nss-signtool-format.patch # fedora disabled dbm by default Patch40: nss-no-dbm-man-page.patch +Patch50: nss-3.94-fix-ec-encoding.patch + Patch100: nspr-config-pc.patch Patch101: nspr-gcc-atomics.patch @@ -1085,6 +1087,9 @@ update-crypto-policies &> /dev/null || : %changelog +* Thu Oct 26 2023 Bob Relyea - 3.94.0-2 +- binary compatibility issue with HACL ECC 256 patch. + * Wed Oct 4 2023 Frantisek Krenzelok - 3.94.0-1 - Update NSS to 3.94.0 From 0d42f83235b33afa82276ece60954cfa3c6b726e Mon Sep 17 00:00:00 2001 From: Krenzelok Frantisek Date: Mon, 27 Nov 2023 12:25:31 +0100 Subject: [PATCH 03/14] Update NSS to 3.95.0 - remove nss-3.94-fix-ec-encoding.patch (upstreamed) --- .gitignore | 1 + nss-3.94-fix-ec-encoding.patch | 107 --------------------------------- nss.spec | 11 ++-- sources | 2 +- 4 files changed, 8 insertions(+), 113 deletions(-) delete mode 100644 nss-3.94-fix-ec-encoding.patch diff --git a/.gitignore b/.gitignore index 61e1690..3f34bb5 100644 --- a/.gitignore +++ b/.gitignore @@ -85,3 +85,4 @@ TestUser51.cert /nss-3.92-with-nspr-4.35.tar.gz /nss-3.93-with-nspr-4.35.tar.gz /nss-3.94-with-nspr-4.35.tar.gz +/nss-3.95-with-nspr-4.35.tar.gz diff --git a/nss-3.94-fix-ec-encoding.patch b/nss-3.94-fix-ec-encoding.patch deleted file mode 100644 index f4361c9..0000000 --- a/nss-3.94-fix-ec-encoding.patch +++ /dev/null @@ -1,107 +0,0 @@ -diff --git a/lib/freebl/blapit.h b/lib/freebl/blapit.h ---- a/lib/freebl/blapit.h -+++ b/lib/freebl/blapit.h -@@ -387,17 +387,18 @@ typedef struct DHPrivateKeyStr DHPrivate - */ - - /* - ** The ECParams data structures can encode elliptic curve - ** parameters for both GFp and GF2m curves. - */ - - typedef enum { ec_params_explicit, -- ec_params_named -+ ec_params_named, -+ ec_params_edwards_named - } ECParamsType; - - typedef enum { ec_field_GFp = 1, - ec_field_GF2m, - ec_field_plain - } ECFieldType; - - struct ECFieldIDStr { -diff --git a/lib/freebl/ecdecode.c b/lib/freebl/ecdecode.c ---- a/lib/freebl/ecdecode.c -+++ b/lib/freebl/ecdecode.c -@@ -171,16 +171,17 @@ EC_FillParams(PLArenaPool *arena, const - * (the NIST P-521 curve) - */ - CHECK_SEC_OK(gf_populate_params_bytes(ECCurve_SECG_PRIME_521R1, - ec_field_GFp, params)); - break; - - case SEC_OID_CURVE25519: - /* Populate params for Curve25519 */ -+ params->type = ec_params_edwards_named; - CHECK_SEC_OK(gf_populate_params_bytes(ECCurve25519, - ec_field_plain, - params)); - break; - - default: - break; - }; -diff --git a/lib/softoken/pkcs11.c b/lib/softoken/pkcs11.c ---- a/lib/softoken/pkcs11.c -+++ b/lib/softoken/pkcs11.c -@@ -1921,17 +1921,17 @@ sftk_GetPubKey(SFTKObject *object, CK_KE - /* special note: We can't just use the first byte to distinguish - * between EC_POINT_FORM_UNCOMPRESSED and SEC_ASN1_OCTET_STRING. - * Both are 0x04. */ - - /* Handle the non-DER encoded case. - * Some curves are always pressumed to be non-DER. - */ - if (pubKey->u.ec.publicValue.len == keyLen && -- (pubKey->u.ec.ecParams.fieldID.type == ec_field_plain || -+ (pubKey->u.ec.ecParams.type == ec_params_edwards_named || - pubKey->u.ec.publicValue.data[0] == EC_POINT_FORM_UNCOMPRESSED)) { - break; /* key was not DER encoded, no need to unwrap */ - } - - /* handle the encoded case */ - if ((pubKey->u.ec.publicValue.data[0] == SEC_ASN1_OCTET_STRING) && - pubKey->u.ec.publicValue.len > keyLen) { - SECItem publicValue; -@@ -1941,17 +1941,17 @@ sftk_GetPubKey(SFTKObject *object, CK_KE - SEC_ASN1_GET(SEC_OctetStringTemplate), - &pubKey->u.ec.publicValue); - /* nope, didn't decode correctly */ - if ((rv != SECSuccess) || (publicValue.len != keyLen)) { - crv = CKR_ATTRIBUTE_VALUE_INVALID; - break; - } - /* we don't handle compressed points except in the case of ECCurve25519 */ -- if ((pubKey->u.ec.ecParams.fieldID.type != ec_field_plain) && -+ if ((pubKey->u.ec.ecParams.type != ec_params_edwards_named) && - (publicValue.data[0] != EC_POINT_FORM_UNCOMPRESSED)) { - crv = CKR_ATTRIBUTE_VALUE_INVALID; - break; - } - /* replace our previous with the decoded key */ - pubKey->u.ec.publicValue = publicValue; - break; - } -diff --git a/lib/softoken/pkcs11c.c b/lib/softoken/pkcs11c.c ---- a/lib/softoken/pkcs11c.c -+++ b/lib/softoken/pkcs11c.c -@@ -5655,17 +5655,17 @@ NSC_GenerateKeyPair(CK_SESSION_HANDLE hS - sftk_fatalError = PR_TRUE; - } - PORT_FreeArena(ecParams->arena, PR_TRUE); - crv = sftk_MapCryptError(PORT_GetError()); - break; - } - - if (PR_GetEnvSecure("NSS_USE_DECODED_CKA_EC_POINT") || -- ecParams->fieldID.type == ec_field_plain) { -+ ecParams->type == ec_params_edwards_named) { - PORT_FreeArena(ecParams->arena, PR_TRUE); - crv = sftk_AddAttributeType(publicKey, CKA_EC_POINT, - sftk_item_expand(&ecPriv->publicValue)); - } else { - PORT_FreeArena(ecParams->arena, PR_TRUE); - SECItem *pubValue = SEC_ASN1EncodeItem(NULL, NULL, - &ecPriv->publicValue, - SEC_ASN1_GET(SEC_OctetStringTemplate)); diff --git a/nss.spec b/nss.spec index 96e4075..1db5b05 100644 --- a/nss.spec +++ b/nss.spec @@ -1,13 +1,13 @@ %global nspr_version 4.35.0 -%global nss_version 3.94.0 +%global nss_version 3.95.0 # NOTE: To avoid NVR clashes of nspr* packages: # - reset %%{nspr_release} to 1, when updating %%{nspr_version} # - increment %%{nspr_version}, when updating the NSS part only -%global baserelease 2 +%global baserelease 1 %global nss_release %baserelease # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when # release number between nss and nspr are different. -%global nspr_release %[%baserelease+12] +%global nspr_release %[%baserelease+14] # only need to update this as we added new # algorithms under nss policy control %global crypto_policies_version 20210118 @@ -132,8 +132,6 @@ Patch12: nss-signtool-format.patch # fedora disabled dbm by default Patch40: nss-no-dbm-man-page.patch -Patch50: nss-3.94-fix-ec-encoding.patch - Patch100: nspr-config-pc.patch Patch101: nspr-gcc-atomics.patch @@ -1087,6 +1085,9 @@ update-crypto-policies &> /dev/null || : %changelog +* Mon Nov 27 2023 Frantisek Krenzelok - 3.95.0-1 +- Update NSS to 3.95.0 + * Thu Oct 26 2023 Bob Relyea - 3.94.0-2 - binary compatibility issue with HACL ECC 256 patch. diff --git a/sources b/sources index fa784d4..0a41301 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403fda3e3d4e7757838061ae56ccf5aac335cb54f254f0a9e6e9c0dd5920b4155a39264525b06 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7 -SHA512 (nss-3.94-with-nspr-4.35.tar.gz) = 121180c80c635b0e3e9fa5d44297107d4c5da84879210e81da0f799a48e9ed1ea43e5c28d5cb53fd65218678b94b5db282b7ed0ee96482caa01493c39ed93c27 +SHA512 (nss-3.95-with-nspr-4.35.tar.gz) = 8394a0381db5b5d7f975f5057e0578909901244616ccaca694c1932fd9428e651a52bbf3f30e4d993e692538a603a57df1eae5e9badda3a1291d35836ab02ecd From 566b8865112389fdb32739f5ca2682411d8969d5 Mon Sep 17 00:00:00 2001 From: Krenzelok Frantisek Date: Mon, 18 Dec 2023 13:50:03 +0100 Subject: [PATCH 04/14] Update NSS to 3.96.1 --- .gitignore | 2 ++ nss.spec | 7 +++++-- sources | 2 +- 3 files changed, 8 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 3f34bb5..4508106 100644 --- a/.gitignore +++ b/.gitignore @@ -86,3 +86,5 @@ TestUser51.cert /nss-3.93-with-nspr-4.35.tar.gz /nss-3.94-with-nspr-4.35.tar.gz /nss-3.95-with-nspr-4.35.tar.gz +/nss-3.96-with-nspr-4.35.tar.gz +/nss-3.96.1-with-nspr-4.35.tar.gz diff --git a/nss.spec b/nss.spec index 1db5b05..26c5ee4 100644 --- a/nss.spec +++ b/nss.spec @@ -1,5 +1,5 @@ %global nspr_version 4.35.0 -%global nss_version 3.95.0 +%global nss_version 3.96.1 # NOTE: To avoid NVR clashes of nspr* packages: # - reset %%{nspr_release} to 1, when updating %%{nspr_version} # - increment %%{nspr_version}, when updating the NSS part only @@ -7,7 +7,7 @@ %global nss_release %baserelease # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when # release number between nss and nspr are different. -%global nspr_release %[%baserelease+14] +%global nspr_release %[%baserelease+15] # only need to update this as we added new # algorithms under nss policy control %global crypto_policies_version 20210118 @@ -1085,6 +1085,9 @@ update-crypto-policies &> /dev/null || : %changelog +* Thu Dec 21 2023 Frantisek Krenzelok - 3.96.1-1 +- Update NSS to 3.96.1 + * Mon Nov 27 2023 Frantisek Krenzelok - 3.95.0-1 - Update NSS to 3.95.0 diff --git a/sources b/sources index 0a41301..be78d53 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403fda3e3d4e7757838061ae56ccf5aac335cb54f254f0a9e6e9c0dd5920b4155a39264525b06 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7 -SHA512 (nss-3.95-with-nspr-4.35.tar.gz) = 8394a0381db5b5d7f975f5057e0578909901244616ccaca694c1932fd9428e651a52bbf3f30e4d993e692538a603a57df1eae5e9badda3a1291d35836ab02ecd +SHA512 (nss-3.96.1-with-nspr-4.35.tar.gz) = 7831835936748adb7fdb050f06caea09ddcbf48e9c401bba9df1e405b05658204e1cea7800c565aae742551779ff0d4c9834b686b484055ee569ed3f4546f428 From bf68a03724797fa6595b5a60f8127f45ddf4d66b Mon Sep 17 00:00:00 2001 From: Krenzelok Frantisek Date: Wed, 24 Jan 2024 13:45:51 +0100 Subject: [PATCH 05/14] Update NSS to 3.97.0 --- .gitignore | 1 + nss.spec | 8 ++++++-- sources | 1 + 3 files changed, 8 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 4508106..06a3531 100644 --- a/.gitignore +++ b/.gitignore @@ -88,3 +88,4 @@ TestUser51.cert /nss-3.95-with-nspr-4.35.tar.gz /nss-3.96-with-nspr-4.35.tar.gz /nss-3.96.1-with-nspr-4.35.tar.gz +/nss-3.97-with-nspr-4.35.tar.gz diff --git a/nss.spec b/nss.spec index 26c5ee4..5b2e439 100644 --- a/nss.spec +++ b/nss.spec @@ -1,5 +1,5 @@ %global nspr_version 4.35.0 -%global nss_version 3.96.1 +%global nss_version 3.97.0 # NOTE: To avoid NVR clashes of nspr* packages: # - reset %%{nspr_release} to 1, when updating %%{nspr_version} # - increment %%{nspr_version}, when updating the NSS part only @@ -7,7 +7,7 @@ %global nss_release %baserelease # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when # release number between nss and nspr are different. -%global nspr_release %[%baserelease+15] +%global nspr_release %[%baserelease+16] # only need to update this as we added new # algorithms under nss policy control %global crypto_policies_version 20210118 @@ -1010,6 +1010,7 @@ update-crypto-policies &> /dev/null || : %{_includedir}/nss3/utilpars.h %{_includedir}/nss3/utilparst.h %{_includedir}/nss3/utilrename.h +%{_includedir}/nss3/kyber.h %{_includedir}/nss3/templates/templates.c %files softokn @@ -1085,6 +1086,9 @@ update-crypto-policies &> /dev/null || : %changelog +* Sun Feb 15 2024 Frantisek Krenzelok - 3.97.0-1 +- Update NSS to 3.97.0 + * Thu Dec 21 2023 Frantisek Krenzelok - 3.96.1-1 - Update NSS to 3.96.1 diff --git a/sources b/sources index be78d53..e731429 100644 --- a/sources +++ b/sources @@ -1,3 +1,4 @@ SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403fda3e3d4e7757838061ae56ccf5aac335cb54f254f0a9e6e9c0dd5920b4155a39264525b06 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7 SHA512 (nss-3.96.1-with-nspr-4.35.tar.gz) = 7831835936748adb7fdb050f06caea09ddcbf48e9c401bba9df1e405b05658204e1cea7800c565aae742551779ff0d4c9834b686b484055ee569ed3f4546f428 +SHA512 (nss-3.97-with-nspr-4.35.tar.gz) = 5153eb99ca3a372dfa89671d2c589675d99755c04760d65280ce694ff5761b2a0502416cb9f0950bb5156c71a5c68491582dcb7a970e65ea0b1082fff0ba0153 From 8b7129b70c2f7725eabd64b61475db63689e4b07 Mon Sep 17 00:00:00 2001 From: Krenzelok Frantisek Date: Sat, 17 Feb 2024 13:25:50 +0100 Subject: [PATCH 06/14] Update NSS to 3.98.0 --- .gitignore | 1 + nss.spec | 7 +++++-- sources | 1 + 3 files changed, 7 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 06a3531..af02f2d 100644 --- a/.gitignore +++ b/.gitignore @@ -89,3 +89,4 @@ TestUser51.cert /nss-3.96-with-nspr-4.35.tar.gz /nss-3.96.1-with-nspr-4.35.tar.gz /nss-3.97-with-nspr-4.35.tar.gz +/nss-3.98-with-nspr-4.35.tar.gz diff --git a/nss.spec b/nss.spec index 5b2e439..9faa7b6 100644 --- a/nss.spec +++ b/nss.spec @@ -1,5 +1,5 @@ %global nspr_version 4.35.0 -%global nss_version 3.97.0 +%global nss_version 3.98.0 # NOTE: To avoid NVR clashes of nspr* packages: # - reset %%{nspr_release} to 1, when updating %%{nspr_version} # - increment %%{nspr_version}, when updating the NSS part only @@ -7,7 +7,7 @@ %global nss_release %baserelease # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when # release number between nss and nspr are different. -%global nspr_release %[%baserelease+16] +%global nspr_release %[%baserelease+17] # only need to update this as we added new # algorithms under nss policy control %global crypto_policies_version 20210118 @@ -1086,6 +1086,9 @@ update-crypto-policies &> /dev/null || : %changelog +* Sat Feb 17 2024 Frantisek Krenzelok - 3.98.0-1 +- Update NSS to 3.98.0 + * Sun Feb 15 2024 Frantisek Krenzelok - 3.97.0-1 - Update NSS to 3.97.0 diff --git a/sources b/sources index e731429..72bcc3b 100644 --- a/sources +++ b/sources @@ -2,3 +2,4 @@ SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7 SHA512 (nss-3.96.1-with-nspr-4.35.tar.gz) = 7831835936748adb7fdb050f06caea09ddcbf48e9c401bba9df1e405b05658204e1cea7800c565aae742551779ff0d4c9834b686b484055ee569ed3f4546f428 SHA512 (nss-3.97-with-nspr-4.35.tar.gz) = 5153eb99ca3a372dfa89671d2c589675d99755c04760d65280ce694ff5761b2a0502416cb9f0950bb5156c71a5c68491582dcb7a970e65ea0b1082fff0ba0153 +SHA512 (nss-3.98-with-nspr-4.35.tar.gz) = 1bd2dd5b84a48371e5135866f6f823facb25034aa9d6dafc6008f7dba9aded26442a4115a7aa1df7295d857c2aed082509427b726db145e2b4660d68c55585b5 From 6c6ef64f9a37065a662cbac9ece47544eecce0ac Mon Sep 17 00:00:00 2001 From: Krenzelok Frantisek Date: Mon, 18 Mar 2024 16:10:56 +0100 Subject: [PATCH 07/14] Update NSS to 3.99.0 --- .gitignore | 1 + nss.spec | 7 +++++-- sources | 4 +--- 3 files changed, 7 insertions(+), 5 deletions(-) diff --git a/.gitignore b/.gitignore index af02f2d..61ae8a1 100644 --- a/.gitignore +++ b/.gitignore @@ -90,3 +90,4 @@ TestUser51.cert /nss-3.96.1-with-nspr-4.35.tar.gz /nss-3.97-with-nspr-4.35.tar.gz /nss-3.98-with-nspr-4.35.tar.gz +/nss-3.99-with-nspr-4.35.tar.gz diff --git a/nss.spec b/nss.spec index 9faa7b6..9503cf2 100644 --- a/nss.spec +++ b/nss.spec @@ -1,5 +1,5 @@ %global nspr_version 4.35.0 -%global nss_version 3.98.0 +%global nss_version 3.99.0 # NOTE: To avoid NVR clashes of nspr* packages: # - reset %%{nspr_release} to 1, when updating %%{nspr_version} # - increment %%{nspr_version}, when updating the NSS part only @@ -7,7 +7,7 @@ %global nss_release %baserelease # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when # release number between nss and nspr are different. -%global nspr_release %[%baserelease+17] +%global nspr_release %[%baserelease+18] # only need to update this as we added new # algorithms under nss policy control %global crypto_policies_version 20210118 @@ -1086,6 +1086,9 @@ update-crypto-policies &> /dev/null || : %changelog +* Mon Mar 18 2024 Frantisek Krenzelok - 3.99.0-1 +- Update NSS to 3.99.0 + * Sat Feb 17 2024 Frantisek Krenzelok - 3.98.0-1 - Update NSS to 3.98.0 diff --git a/sources b/sources index 72bcc3b..36b0973 100644 --- a/sources +++ b/sources @@ -1,5 +1,3 @@ SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403fda3e3d4e7757838061ae56ccf5aac335cb54f254f0a9e6e9c0dd5920b4155a39264525b06 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7 -SHA512 (nss-3.96.1-with-nspr-4.35.tar.gz) = 7831835936748adb7fdb050f06caea09ddcbf48e9c401bba9df1e405b05658204e1cea7800c565aae742551779ff0d4c9834b686b484055ee569ed3f4546f428 -SHA512 (nss-3.97-with-nspr-4.35.tar.gz) = 5153eb99ca3a372dfa89671d2c589675d99755c04760d65280ce694ff5761b2a0502416cb9f0950bb5156c71a5c68491582dcb7a970e65ea0b1082fff0ba0153 -SHA512 (nss-3.98-with-nspr-4.35.tar.gz) = 1bd2dd5b84a48371e5135866f6f823facb25034aa9d6dafc6008f7dba9aded26442a4115a7aa1df7295d857c2aed082509427b726db145e2b4660d68c55585b5 +SHA512 (nss-3.99-with-nspr-4.35.tar.gz) = d19db94a0a79335afc275876c8019621472a27a9766feed2616ff0461db2e8edebc492f98f720bd8231bf44c38138ab1d8f5d1812a55b23bed94e894c3b171fd From 7f63a1c97d59f9973b945daceaf7c866377e5ffc Mon Sep 17 00:00:00 2001 From: Krenzelok Frantisek Date: Mon, 25 Mar 2024 16:39:11 +0100 Subject: [PATCH 08/14] Fix changelog date --- nss.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nss.spec b/nss.spec index 9503cf2..c96ff6d 100644 --- a/nss.spec +++ b/nss.spec @@ -1092,7 +1092,7 @@ update-crypto-policies &> /dev/null || : * Sat Feb 17 2024 Frantisek Krenzelok - 3.98.0-1 - Update NSS to 3.98.0 -* Sun Feb 15 2024 Frantisek Krenzelok - 3.97.0-1 +* Thu Feb 15 2024 Frantisek Krenzelok - 3.97.0-1 - Update NSS to 3.97.0 * Thu Dec 21 2023 Frantisek Krenzelok - 3.96.1-1 From c8ec570ba6a96280afcbbab386ab0f5e7d96e03f Mon Sep 17 00:00:00 2001 From: Krenzelok Frantisek Date: Tue, 28 May 2024 11:40:47 +0200 Subject: [PATCH 09/14] Update NSS to 3.100.0 --- .gitignore | 1 + nss.spec | 7 +++++-- sources | 2 +- 3 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 61ae8a1..da4e16f 100644 --- a/.gitignore +++ b/.gitignore @@ -91,3 +91,4 @@ TestUser51.cert /nss-3.97-with-nspr-4.35.tar.gz /nss-3.98-with-nspr-4.35.tar.gz /nss-3.99-with-nspr-4.35.tar.gz +/nss-3.100-with-nspr-4.35.tar.gz diff --git a/nss.spec b/nss.spec index c96ff6d..e80742b 100644 --- a/nss.spec +++ b/nss.spec @@ -1,5 +1,5 @@ %global nspr_version 4.35.0 -%global nss_version 3.99.0 +%global nss_version 3.100.0 # NOTE: To avoid NVR clashes of nspr* packages: # - reset %%{nspr_release} to 1, when updating %%{nspr_version} # - increment %%{nspr_version}, when updating the NSS part only @@ -7,7 +7,7 @@ %global nss_release %baserelease # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when # release number between nss and nspr are different. -%global nspr_release %[%baserelease+18] +%global nspr_release %[%baserelease+19] # only need to update this as we added new # algorithms under nss policy control %global crypto_policies_version 20210118 @@ -1086,6 +1086,9 @@ update-crypto-policies &> /dev/null || : %changelog +* Tue May 28 2024 Frantisek Krenzelok - 3.100.0-1 +- Update NSS to 3.100.0 + * Mon Mar 18 2024 Frantisek Krenzelok - 3.99.0-1 - Update NSS to 3.99.0 diff --git a/sources b/sources index 36b0973..d01a8dd 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403fda3e3d4e7757838061ae56ccf5aac335cb54f254f0a9e6e9c0dd5920b4155a39264525b06 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7 -SHA512 (nss-3.99-with-nspr-4.35.tar.gz) = d19db94a0a79335afc275876c8019621472a27a9766feed2616ff0461db2e8edebc492f98f720bd8231bf44c38138ab1d8f5d1812a55b23bed94e894c3b171fd +SHA512 (nss-3.100-with-nspr-4.35.tar.gz) = 02ca7ed086905ce80ea1a41fa1818a0625982a8b24ba418c56c3fb8744ae39a7bfead5a05c4054c7d3c8897a4e715d4c125257047e278787b5e1701ec9f87122 From e4569e6ebe017dc8f8b1730a157fb91c8fda249d Mon Sep 17 00:00:00 2001 From: Robert Relyea Date: Tue, 11 Jun 2024 09:19:27 -0700 Subject: [PATCH 10/14] Update to NSS 3.101 --- .gitignore | 1 + nss.spec | 7 +++++-- sources | 2 +- 3 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index da4e16f..896fc68 100644 --- a/.gitignore +++ b/.gitignore @@ -92,3 +92,4 @@ TestUser51.cert /nss-3.98-with-nspr-4.35.tar.gz /nss-3.99-with-nspr-4.35.tar.gz /nss-3.100-with-nspr-4.35.tar.gz +/nss-3.101-with-nspr-4.35.tar.gz diff --git a/nss.spec b/nss.spec index e80742b..de58e81 100644 --- a/nss.spec +++ b/nss.spec @@ -1,5 +1,5 @@ %global nspr_version 4.35.0 -%global nss_version 3.100.0 +%global nss_version 3.101.0 # NOTE: To avoid NVR clashes of nspr* packages: # - reset %%{nspr_release} to 1, when updating %%{nspr_version} # - increment %%{nspr_version}, when updating the NSS part only @@ -7,7 +7,7 @@ %global nss_release %baserelease # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when # release number between nss and nspr are different. -%global nspr_release %[%baserelease+19] +%global nspr_release %[%baserelease+20] # only need to update this as we added new # algorithms under nss policy control %global crypto_policies_version 20210118 @@ -1086,6 +1086,9 @@ update-crypto-policies &> /dev/null || : %changelog +* Tue Jun 11 2024 Bob Relyea - 3.100.0-1 - Update NSS to 3.100.0 diff --git a/sources b/sources index d01a8dd..82834cf 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403fda3e3d4e7757838061ae56ccf5aac335cb54f254f0a9e6e9c0dd5920b4155a39264525b06 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7 -SHA512 (nss-3.100-with-nspr-4.35.tar.gz) = 02ca7ed086905ce80ea1a41fa1818a0625982a8b24ba418c56c3fb8744ae39a7bfead5a05c4054c7d3c8897a4e715d4c125257047e278787b5e1701ec9f87122 +SHA512 (nss-3.101-with-nspr-4.35.tar.gz) = 95c8ef1c12e1de7da4d918cebd1d5464b0ff4932083f6d395733345bd9f8598069028793fd1c08f974efcb31129cd84718487fd5326e45a878fba0d8c309bd39 From 9eaf69cff12d91ca0376cdce145b45878097ce12 Mon Sep 17 00:00:00 2001 From: Robert Relyea Date: Tue, 11 Jun 2024 13:48:01 -0700 Subject: [PATCH 11/14] Add nsshash.h to the manifests --- nss.spec | 1 + 1 file changed, 1 insertion(+) diff --git a/nss.spec b/nss.spec index de58e81..5e7b320 100644 --- a/nss.spec +++ b/nss.spec @@ -980,6 +980,7 @@ update-crypto-policies &> /dev/null || : %{_includedir}/nss3/nssb64.h %{_includedir}/nss3/nssb64t.h %{_includedir}/nss3/nsslocks.h +%{_includedir}/nss3/nsshash.h %{_includedir}/nss3/nssilock.h %{_includedir}/nss3/nssilckt.h %{_includedir}/nss3/nssrwlk.h From f8eaf49235500820a387a8e75f5bed84c82936c4 Mon Sep 17 00:00:00 2001 From: Krenzelok Frantisek Date: Mon, 5 Aug 2024 15:16:13 +0200 Subject: [PATCH 12/14] Update NSS to 3.103.0 --- .gitignore | 1 + nss-3.103-unused-cipherwrap2.patch | 17 +++++++++++++++++ nss.spec | 12 +++++++++--- sources | 2 +- 4 files changed, 28 insertions(+), 4 deletions(-) create mode 100644 nss-3.103-unused-cipherwrap2.patch diff --git a/.gitignore b/.gitignore index 896fc68..97bcca8 100644 --- a/.gitignore +++ b/.gitignore @@ -93,3 +93,4 @@ TestUser51.cert /nss-3.99-with-nspr-4.35.tar.gz /nss-3.100-with-nspr-4.35.tar.gz /nss-3.101-with-nspr-4.35.tar.gz +/nss-3.103-with-nspr-4.35.tar.gz diff --git a/nss-3.103-unused-cipherwrap2.patch b/nss-3.103-unused-cipherwrap2.patch new file mode 100644 index 0000000..2c77239 --- /dev/null +++ b/nss-3.103-unused-cipherwrap2.patch @@ -0,0 +1,17 @@ +--- ./lib/softoken/pkcs11c.c.unused 2024-08-05 17:56:10.705414972 +0200 ++++ ./lib/softoken/pkcs11c.c 2024-08-05 18:09:04.681015706 +0200 +@@ -165,10 +165,14 @@ SFTKCipherWrap(AESKeyWrapContext, AESKey + mmm##_DestroyContext(ctx, freeit); \ + } + ++#ifndef NSS_DISABLE_DEPRECATED_RC2 + SFTKCipherWrap2(RC2Context, RC2); ++#endif + SFTKCipherWrap2(RC4Context, RC4); + SFTKCipherWrap2(DESContext, DES); ++#ifndef NSS_DISABLE_DEPRECATED_SEED + SFTKCipherWrap2(SEEDContext, SEED); ++#endif + SFTKCipherWrap2(CamelliaContext, Camellia); + SFTKCipherWrap2(AESContext, AES); + SFTKCipherWrap2(AESKeyWrapContext, AESKeyWrap); diff --git a/nss.spec b/nss.spec index 5e7b320..79de337 100644 --- a/nss.spec +++ b/nss.spec @@ -1,5 +1,5 @@ %global nspr_version 4.35.0 -%global nss_version 3.101.0 +%global nss_version 3.103.0 # NOTE: To avoid NVR clashes of nspr* packages: # - reset %%{nspr_release} to 1, when updating %%{nspr_version} # - increment %%{nspr_version}, when updating the NSS part only @@ -7,7 +7,7 @@ %global nss_release %baserelease # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when # release number between nss and nspr are different. -%global nspr_release %[%baserelease+20] +%global nspr_release %[%baserelease+21] # only need to update this as we added new # algorithms under nss policy control %global crypto_policies_version 20210118 @@ -132,6 +132,9 @@ Patch12: nss-signtool-format.patch # fedora disabled dbm by default Patch40: nss-no-dbm-man-page.patch +# fix unused variable warnings +Patch42: nss-3.103-unused-cipherwrap2.patch + Patch100: nspr-config-pc.patch Patch101: nspr-gcc-atomics.patch @@ -1087,7 +1090,10 @@ update-crypto-policies &> /dev/null || : %changelog -* Tue Jun 11 2024 Bob Relyea - 3.103.0-1 +- Update NSS to 3.103.0 + +* Tue Jun 11 2024 Bob Relyea - 3.101.0-1 - Update NSS to 3.101.0 * Tue May 28 2024 Frantisek Krenzelok - 3.100.0-1 diff --git a/sources b/sources index 82834cf..c22c3f6 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403fda3e3d4e7757838061ae56ccf5aac335cb54f254f0a9e6e9c0dd5920b4155a39264525b06 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7 -SHA512 (nss-3.101-with-nspr-4.35.tar.gz) = 95c8ef1c12e1de7da4d918cebd1d5464b0ff4932083f6d395733345bd9f8598069028793fd1c08f974efcb31129cd84718487fd5326e45a878fba0d8c309bd39 +SHA512 (nss-3.103-with-nspr-4.35.tar.gz) = 46d0c948da890bd57da0e8026ec5bd1c6de2d34f66836690fa11ffbb256c933e977a1ac1d0599ceaf1b416eafe6f6733609ff1efa51a744b431b9570afe092ff From d0c137f35529710e42fa4d89034a5804207fa88f Mon Sep 17 00:00:00 2001 From: Krenzelok Frantisek Date: Wed, 4 Sep 2024 14:49:26 +0200 Subject: [PATCH 13/14] Update NSS to 3.104.0 --- .gitignore | 1 + nss.spec | 7 +++++-- sources | 2 +- 3 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 97bcca8..9d2e000 100644 --- a/.gitignore +++ b/.gitignore @@ -94,3 +94,4 @@ TestUser51.cert /nss-3.100-with-nspr-4.35.tar.gz /nss-3.101-with-nspr-4.35.tar.gz /nss-3.103-with-nspr-4.35.tar.gz +/nss-3.104-with-nspr-4.35.tar.gz diff --git a/nss.spec b/nss.spec index 79de337..adff2b9 100644 --- a/nss.spec +++ b/nss.spec @@ -1,5 +1,5 @@ %global nspr_version 4.35.0 -%global nss_version 3.103.0 +%global nss_version 3.104.0 # NOTE: To avoid NVR clashes of nspr* packages: # - reset %%{nspr_release} to 1, when updating %%{nspr_version} # - increment %%{nspr_version}, when updating the NSS part only @@ -7,7 +7,7 @@ %global nss_release %baserelease # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when # release number between nss and nspr are different. -%global nspr_release %[%baserelease+21] +%global nspr_release %[%baserelease+22] # only need to update this as we added new # algorithms under nss policy control %global crypto_policies_version 20210118 @@ -1090,6 +1090,9 @@ update-crypto-policies &> /dev/null || : %changelog +* Mon Sep 16 2024 Frantisek Krenzelok - 3.104.0-1 +- Update NSS to 3.104.0 + * Mon Aug 5 2024 Frantisek Krenzelok - 3.103.0-1 - Update NSS to 3.103.0 diff --git a/sources b/sources index c22c3f6..81e8a30 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403fda3e3d4e7757838061ae56ccf5aac335cb54f254f0a9e6e9c0dd5920b4155a39264525b06 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7 -SHA512 (nss-3.103-with-nspr-4.35.tar.gz) = 46d0c948da890bd57da0e8026ec5bd1c6de2d34f66836690fa11ffbb256c933e977a1ac1d0599ceaf1b416eafe6f6733609ff1efa51a744b431b9570afe092ff +SHA512 (nss-3.104-with-nspr-4.35.tar.gz) = 15b3b3f7d29642d86e6930dbe07cc430dbe2c41a0a7bf22167ba37187157a7196d4a198ca788f74f38a60f67e410443e2509218dce6112c468e561fd265c780a From 56b25f263db9f91be664bc6374239d98c202857e Mon Sep 17 00:00:00 2001 From: Krenzelok Frantisek Date: Thu, 3 Oct 2024 14:28:23 +0200 Subject: [PATCH 14/14] Update NSS to 3.105.0 --- .gitignore | 1 + nss.spec | 7 +++++-- sources | 2 +- 3 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 9d2e000..23bbd8b 100644 --- a/.gitignore +++ b/.gitignore @@ -95,3 +95,4 @@ TestUser51.cert /nss-3.101-with-nspr-4.35.tar.gz /nss-3.103-with-nspr-4.35.tar.gz /nss-3.104-with-nspr-4.35.tar.gz +/nss-3.105-with-nspr-4.35.tar.gz diff --git a/nss.spec b/nss.spec index adff2b9..33795bb 100644 --- a/nss.spec +++ b/nss.spec @@ -1,5 +1,5 @@ %global nspr_version 4.35.0 -%global nss_version 3.104.0 +%global nss_version 3.105.0 # NOTE: To avoid NVR clashes of nspr* packages: # - reset %%{nspr_release} to 1, when updating %%{nspr_version} # - increment %%{nspr_version}, when updating the NSS part only @@ -7,7 +7,7 @@ %global nss_release %baserelease # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when # release number between nss and nspr are different. -%global nspr_release %[%baserelease+22] +%global nspr_release %[%baserelease+23] # only need to update this as we added new # algorithms under nss policy control %global crypto_policies_version 20210118 @@ -1090,6 +1090,9 @@ update-crypto-policies &> /dev/null || : %changelog +* Thu Oct 3 2024 Frantisek Krenzelok - 3.105.0-1 +- Update NSS to 3.105.0 + * Mon Sep 16 2024 Frantisek Krenzelok - 3.104.0-1 - Update NSS to 3.104.0 diff --git a/sources b/sources index 81e8a30..4431210 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403fda3e3d4e7757838061ae56ccf5aac335cb54f254f0a9e6e9c0dd5920b4155a39264525b06 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7 -SHA512 (nss-3.104-with-nspr-4.35.tar.gz) = 15b3b3f7d29642d86e6930dbe07cc430dbe2c41a0a7bf22167ba37187157a7196d4a198ca788f74f38a60f67e410443e2509218dce6112c468e561fd265c780a +SHA512 (nss-3.105-with-nspr-4.35.tar.gz) = 8fad30acf07bddb501811fac63330816a1b0aaee301d94a4798f08e81be243afe894bd2202996339a7716a60639c0d6c4d20cc2dd407c757a6d3074c5c975673