-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathnss.spec
1080 lines (866 loc) · 40.9 KB
/
nss.spec
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
%global nspr_version 4.8.8
%global nss_util_version 3.12.10
%global nss_softokn_version 3.12.9
%global unsupported_tools_directory %{_libdir}/nss/unsupported-tools
Summary: Network Security Services
Name: nss
Version: 3.12.10
Release: 16%{?dist}
License: MPLv1.1 or GPLv2+ or LGPLv2+
URL: http://www.mozilla.org/projects/security/pki/nss/
Group: System Environment/Libraries
Requires: nspr >= %{nspr_version}
Requires: nss-util >= %{nss_util_version}
Requires: nss-softokn%{_isa} >= %{nss_softokn_version}
Requires: nss-system-init
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
BuildRequires: nspr-devel >= %{nspr_version}
BuildRequires: nss-softokn-devel >= %{nss_softokn_version}
BuildRequires: nss-util-devel >= %{nss_util_version}
BuildRequires: sqlite-devel
BuildRequires: zlib-devel
BuildRequires: pkgconfig
BuildRequires: gawk
BuildRequires: psmisc
BuildRequires: perl
Conflicts: curl < 7.19.7-26.el6
Source0: %{name}-%{version}-stripped.tar.bz2
Source1: nss.pc.in
Source2: nss-config.in
Source3: blank-cert8.db
Source4: blank-key3.db
Source5: blank-secmod.db
Source6: blank-cert9.db
Source7: blank-key4.db
Source8: system-pkcs11.txt
Source9: setup-nsssysinit.sh
Source10: PayPalEE.cert
Source12: %{name}-pem-20101125.tar.bz2
Patch2: add-relro-linker-option.patch
Patch3: renegotiate-transitional.patch
Patch6: nss-enable-pem.patch
Patch7: nsspem-643564.patch
Patch8: nsspem-logging.patch
Patch16: nss-589636.patch
Patch18: nss-dbtests-noroot.patch
Patch19: nss-bz689031.patch
Patch20: nss-703658.patch
Patch21: builtins-nssckbi_1_87_rtm.patch
# coverity - rhbz#735047 includes patch for rhbz#717913
# reported bad eof check upstream as mozilla bugzilla #684389
# partial fix for bad eof check fixed upstream picked up here
# patches for rhbz#717338, #hbz734760, and rhbz#736410 from
# fedora are absorved here as they fix coverity issues as well.
# TODO remove or adjust this patch when we update to nss 3.13
Patch22: nss-735047.patch
# Remove when we update to nss 3.13.2 or higher
Patch23: nss-671266.patch
# TODO: Remove when we update to 3.13.2 or higher
Patch24: nss-747387.patch
# To be removed when we update to 3.13.2 or higher
Patch25: builtins-nssckbi_1_88_rtm.patch
%description
Network Security Services (NSS) is a set of libraries designed to
support cross-platform development of security-enabled client and
server applications. Applications built with NSS can support SSL v2
and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509
v3 certificates, and other security standards.
%package tools
Summary: Tools for the Network Security Services
Group: System Environment/Base
Requires: nss = %{version}-%{release}
Requires: zlib
%description tools
Network Security Services (NSS) is a set of libraries designed to
support cross-platform development of security-enabled client and
server applications. Applications built with NSS can support SSL v2
and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509
v3 certificates, and other security standards.
Install the nss-tools package if you need command-line tools to
manipulate the NSS certificate and key database.
%package sysinit
Summary: System NSS Initilization
Group: System Environment/Base
# providing nss-system-init without version so that it can
# be replaced by a better one, e.g. supplied by the os vendor
Provides: nss-system-init
Requires: nss = %{version}-%{release}
Requires(post): coreutils, sed
%description sysinit
Default Operating System module that manages applications loading
NSS globally on the system. This module loads the system defined
PKCS #11 modules for NSS and chains with other NSS modules to load
any system or user configured modules.
%package devel
Summary: Development libraries for Network Security Services
Group: Development/Libraries
Requires: nss = %{version}-%{release}
Requires: nss-util-devel
Requires: nss-softokn-devel
Requires: nspr-devel >= %{nspr_version}
Requires: pkgconfig
%description devel
Header and Library files for doing development with Network Security Services.
%package pkcs11-devel
Summary: Development libraries for PKCS #11 (Cryptoki) using NSS
Group: Development/Libraries
Provides: nss-pkcs11-devel-static = %{version}-%{release}
Requires: nss-devel = %{version}-%{release}
Requires: nss-softokn-freebl-devel = %{nss_softokn_version}
%description pkcs11-devel
Library files for developing PKCS #11 modules using basic NSS
low level services.
%prep
%setup -q
%{__cp} %{SOURCE10} -f ./mozilla/security/nss/tests/libpkix/certs
%setup -q -T -D -n %{name}-%{version} -a 12
%patch2 -p0 -b .relro
%patch3 -p0 -b .transitional
%patch6 -p0 -b .libpem
%patch7 -p0 -b .643564
%patch8 -p1 -b .695018
%patch16 -p0 -b .589636
%patch18 -p0 -b .noroot
%patch19 -p1 -b .bz689031
%patch20 -p0 -b .703658
%patch21 -p0 -b .diginotar
# remove when we update to nss 3.13
%patch22 -p0 -b .735047
%patch23 -p0 -b .671266
%patch24 -p0 -b .747387
%patch25 -p0 -b .ckbi188rtm
%build
FREEBL_NO_DEPEND=1
export FREEBL_NO_DEPEND
# Enable compiler optimizations and disable debugging code
BUILD_OPT=1
export BUILD_OPT
# Uncomment to disable optimizations
#RPM_OPT_FLAGS=`echo $RPM_OPT_FLAGS | sed -e 's/-O2/-O0/g'`
#export RPM_OPT_FLAGS
# Generate symbolic info for debuggers
XCFLAGS=$RPM_OPT_FLAGS
export XCFLAGS
PKG_CONFIG_ALLOW_SYSTEM_LIBS=1
PKG_CONFIG_ALLOW_SYSTEM_CFLAGS=1
export PKG_CONFIG_ALLOW_SYSTEM_LIBS
export PKG_CONFIG_ALLOW_SYSTEM_CFLAGS
NSPR_INCLUDE_DIR=`/usr/bin/pkg-config --cflags-only-I nspr | sed 's/-I//'`
NSPR_LIB_DIR=`/usr/bin/pkg-config --libs-only-L nspr | sed 's/-L//'`
export NSPR_INCLUDE_DIR
export NSPR_LIB_DIR
NSS_INCLUDE_DIR=`/usr/bin/pkg-config --cflags-only-I nss-util | sed 's/-I//'`
NSS_LIB_DIR=`/usr/bin/pkg-config --libs-only-L nss-util | sed 's/-L//'`
NSS_USE_SYSTEM_SQLITE=1
export NSS_USE_SYSTEM_SQLITE
%ifarch x86_64 ppc64 ia64 s390x sparc64
USE_64=1
export USE_64
%endif
##### phase 1: build freebl/softokn shared libraries
# ecc not supported by freebl
unset NSS_ENABLE_ECC
# Compile softoken plus needed support
%{__make} -C ./mozilla/security/coreconf
%{__make} -C ./mozilla/security/dbm
%{__make} -C ./mozilla/security/nss
##### phase 2: build the rest of nss
# nss supports pluggable ecc
NSS_ENABLE_ECC=1
export NSS_ENABLE_ECC
NSS_ECC_MORE_THAN_SUITE_B=1
export NSS_ECC_MORE_THAN_SUITE_B
# We only ship the nss proper libraries, no softoken nor util, yet
# we must compile with the entire source tree because nss needs
# private exports from util. The install section will ensure not
# to override nss-util and nss-softoken headers already installed.
#
%{__make} -C ./mozilla/security/coreconf
%{__make} -C ./mozilla/security/dbm
%{__make} -C ./mozilla/security/nss
# Set up our package file
# The nspr_version and nss_{util|softokn}_version globals used
# here match the ones nss has for its Requires.
%{__mkdir_p} ./mozilla/dist/pkgconfig
%{__cat} %{SOURCE1} | sed -e "s,%%libdir%%,%{_libdir},g" \
-e "s,%%prefix%%,%{_prefix},g" \
-e "s,%%exec_prefix%%,%{_prefix},g" \
-e "s,%%includedir%%,%{_includedir}/nss3,g" \
-e "s,%%NSS_VERSION%%,%{version},g" \
-e "s,%%NSPR_VERSION%%,%{nspr_version},g" \
-e "s,%%NSSUTIL_VERSION%%,%{nss_util_version},g" \
-e "s,%%SOFTOKEN_VERSION%%,%{nss_softokn_version},g" > \
./mozilla/dist/pkgconfig/nss.pc
NSS_VMAJOR=`cat mozilla/security/nss/lib/nss/nss.h | grep "#define.*NSS_VMAJOR" | awk '{print $3}'`
NSS_VMINOR=`cat mozilla/security/nss/lib/nss/nss.h | grep "#define.*NSS_VMINOR" | awk '{print $3}'`
NSS_VPATCH=`cat mozilla/security/nss/lib/nss/nss.h | grep "#define.*NSS_VPATCH" | awk '{print $3}'`
export NSS_VMAJOR
export NSS_VMINOR
export NSS_VPATCH
%{__cat} %{SOURCE2} | sed -e "s,@libdir@,%{_libdir},g" \
-e "s,@prefix@,%{_prefix},g" \
-e "s,@exec_prefix@,%{_prefix},g" \
-e "s,@includedir@,%{_includedir}/nss3,g" \
-e "s,@MOD_MAJOR_VERSION@,$NSS_VMAJOR,g" \
-e "s,@MOD_MINOR_VERSION@,$NSS_VMINOR,g" \
-e "s,@MOD_PATCH_VERSION@,$NSS_VPATCH,g" \
> ./mozilla/dist/pkgconfig/nss-config
chmod 755 ./mozilla/dist/pkgconfig/nss-config
%{__cat} %{SOURCE9} > ./mozilla/dist/pkgconfig/setup-nsssysinit.sh
chmod 755 ./mozilla/dist/pkgconfig/setup-nsssysinit.sh
%check
# Begin -- copied from the build section
FREEBL_NO_DEPEND=1
export FREEBL_NO_DEPEND
BUILD_OPT=1
export BUILD_OPT
%ifarch x86_64 ppc64 ia64 s390x sparc64
USE_64=1
export USE_64
%endif
# End -- copied from the build section
# enable the following line to force a test failure
# find ./mozilla -name \*.chk | xargs rm -f
# Run test suite.
# In order to support multiple concurrent executions of the test suite
# (caused by concurrent RPM builds) on a single host,
# we'll use a random port. Also, we want to clean up any stuck
# selfserv processes. If process name "selfserv" is used everywhere,
# we can't simply do a "killall selfserv", because it could disturb
# concurrent builds. Therefore we'll do a search and replace and use
# a different process name.
# Using xargs doesn't mix well with spaces in filenames, in order to
# avoid weird quoting we'll require that no spaces are being used.
SPACEISBAD=`find ./mozilla/security/nss/tests | grep -c ' '` ||:
if [ $SPACEISBAD -ne 0 ]; then
echo "error: filenames containing space are not supported (xargs)"
exit 1
fi
MYRAND=`perl -e 'print 9000 + int rand 1000'`; echo $MYRAND ||:
RANDSERV=selfserv_${MYRAND}; echo $RANDSERV ||:
DISTBINDIR=`ls -d ./mozilla/dist/*.OBJ/bin`; echo $DISTBINDIR ||:
pushd `pwd`
cd $DISTBINDIR
ln -s selfserv $RANDSERV
popd
# man perlrun, man perlrequick
# replace word-occurrences of selfserv with selfserv_$MYRAND
find ./mozilla/security/nss/tests -type f |\
grep -v "\.db$" |grep -v "\.crl$" | grep -v "\.crt$" |\
grep -vw CVS |xargs grep -lw selfserv |\
xargs -l perl -pi -e "s/\bselfserv\b/$RANDSERV/g" ||:
killall $RANDSERV || :
rm -rf ./mozilla/tests_results
cd ./mozilla/security/nss/tests/
# all.sh is the test suite script
# don't need to run all the tests when testing packaging
# nss_cycles: standard pkix upgradedb sharedb
# nss_tests: cipher libpkix cert dbtests tools fips sdr crmf smime ssl ocsp merge pkits chains
# nss_ssl_tests: crl bypass_normal normal_bypass normal_fips fips_normal iopr
# nss_ssl_run: cov auth stress
# Uncomment these lines if you need to temporarily
# disable the ssl test suites for faster test builds
# global nss_ssl_tests "normal_fips"
# global nss_ssl_run "cov auth"
HOST=localhost DOMSUF=localdomain PORT=$MYRAND NSS_CYCLES=%{?nss_cycles} NSS_TESTS=%{?nss_tests} NSS_SSL_TESTS=%{?nss_ssl_tests} NSS_SSL_RUN=%{?nss_ssl_run} ./all.sh
cd ../../../../
killall $RANDSERV || :
TEST_FAILURES=`grep -c FAILED ./mozilla/tests_results/security/localhost.1/output.log` || :
if [ $TEST_FAILURES -ne 0 ]; then
echo "error: test suite returned failure(s)"
exit 1
fi
echo "test suite completed"
%install
%{__rm} -rf $RPM_BUILD_ROOT
# There is no make install target so we'll do it ourselves.
%{__mkdir_p} $RPM_BUILD_ROOT/%{_includedir}/nss3
%{__mkdir_p} $RPM_BUILD_ROOT/%{_bindir}
%{__mkdir_p} $RPM_BUILD_ROOT/%{_libdir}
%{__mkdir_p} $RPM_BUILD_ROOT/%{unsupported_tools_directory}
%{__mkdir_p} $RPM_BUILD_ROOT/%{_libdir}/pkgconfig
# Copy the binary libraries we want
for file in libnss3.so libnssckbi.so libnsspem.so libnsssysinit.so libsmime3.so libssl3.so
do
%{__install} -p -m 755 mozilla/dist/*.OBJ/lib/$file $RPM_BUILD_ROOT/%{_libdir}
done
# Install the empty NSS db files
# Legacy db
%{__mkdir_p} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb
%{__install} -p -m 644 %{SOURCE3} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/cert8.db
%{__install} -p -m 644 %{SOURCE4} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/key3.db
%{__install} -p -m 644 %{SOURCE5} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/secmod.db
# Shared db
%{__install} -p -m 644 %{SOURCE6} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/cert9.db
%{__install} -p -m 644 %{SOURCE7} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/key4.db
%{__install} -p -m 644 %{SOURCE8} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/pkcs11.txt
# Copy the development libraries we want
for file in libcrmf.a libnssb.a libnssckfw.a
do
%{__install} -p -m 644 mozilla/dist/*.OBJ/lib/$file $RPM_BUILD_ROOT/%{_libdir}
done
# Copy the binaries we want
for file in certutil cmsutil crlutil modutil pk12util signtool signver ssltap
do
%{__install} -p -m 755 mozilla/dist/*.OBJ/bin/$file $RPM_BUILD_ROOT/%{_bindir}
done
# Copy the binaries we ship as unsupported
for file in atob btoa derdump ocspclnt pp selfserv strsclnt symkeyutil tstclnt vfyserv vfychain
do
%{__install} -p -m 755 mozilla/dist/*.OBJ/bin/$file $RPM_BUILD_ROOT/%{unsupported_tools_directory}
done
# Copy the include files we want
for file in mozilla/dist/public/nss/*.h
do
%{__install} -p -m 644 $file $RPM_BUILD_ROOT/%{_includedir}/nss3
done
# Copy the package configuration files
%{__install} -p -m 644 ./mozilla/dist/pkgconfig/nss.pc $RPM_BUILD_ROOT/%{_libdir}/pkgconfig/nss.pc
%{__install} -p -m 755 ./mozilla/dist/pkgconfig/nss-config $RPM_BUILD_ROOT/%{_bindir}/nss-config
# Copy the pkcs #11 configuration script
%{__install} -p -m 755 ./mozilla/dist/pkgconfig/setup-nsssysinit.sh $RPM_BUILD_ROOT/%{_bindir}/setup-nsssysinit.sh
#remove the nss-util-devel headers
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/base64.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/ciferfam.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/nssb64.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/nssb64t.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/nsslocks.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/nssilock.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/nssilckt.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/nssrwlk.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/nssrwlkt.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/nssutil.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/pkcs11.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/pkcs11f.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/pkcs11n.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/pkcs11p.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/pkcs11t.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/pkcs11u.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/portreg.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/secasn1.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/secasn1t.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/seccomon.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/secder.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/secdert.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/secdig.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/secdigt.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/secerr.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/secitem.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/secoid.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/secoidt.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/secport.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/utilrename.h
#remove header shipped by nss-softokn-devel and nss-softokn-freebl-devel
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/alghmac.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/blapit.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/ecl-exp.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/hasht.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/sechash.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/secmodt.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/shsign.h
rm -rf $RPM_BUILD_ROOT/%{_includedir}/nss3/nsslowhash.h
%clean
%{__rm} -rf $RPM_BUILD_ROOT
%triggerpostun -n nss-sysinit -- nss-sysinit < 3.12.8-2
# Reverse unwanted disabling of sysinit by faulty preun sysinit scriplet
# from previous versions of nss.spec
/usr/bin/setup-nsssysinit.sh on
%post -p /sbin/ldconfig
%postun -p /sbin/ldconfig
%files
%defattr(-,root,root)
%{_libdir}/libnss3.so
%{_libdir}/libssl3.so
%{_libdir}/libsmime3.so
%{_libdir}/libnssckbi.so
%{_libdir}/libnsspem.so
%dir %{_sysconfdir}/pki/nssdb
%config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/cert8.db
%config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/key3.db
%config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/secmod.db
%files sysinit
%defattr(-,root,root)
%{_libdir}/libnsssysinit.so
%config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/cert9.db
%config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/key4.db
%config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/pkcs11.txt
%{_bindir}/setup-nsssysinit.sh
%files tools
%defattr(-,root,root)
%{_bindir}/certutil
%{_bindir}/cmsutil
%{_bindir}/crlutil
%{_bindir}/modutil
%{_bindir}/pk12util
%{_bindir}/signtool
%{_bindir}/signver
%{_bindir}/ssltap
%{unsupported_tools_directory}/atob
%{unsupported_tools_directory}/btoa
%{unsupported_tools_directory}/derdump
%{unsupported_tools_directory}/ocspclnt
%{unsupported_tools_directory}/pp
%{unsupported_tools_directory}/selfserv
%{unsupported_tools_directory}/strsclnt
%{unsupported_tools_directory}/symkeyutil
%{unsupported_tools_directory}/tstclnt
%{unsupported_tools_directory}/vfyserv
%{unsupported_tools_directory}/vfychain
%files devel
%defattr(-,root,root)
%{_libdir}/libcrmf.a
%{_libdir}/pkgconfig/nss.pc
%{_bindir}/nss-config
%dir %{_includedir}/nss3
%{_includedir}/nss3/cert.h
%{_includedir}/nss3/certdb.h
%{_includedir}/nss3/certt.h
%{_includedir}/nss3/cmmf.h
%{_includedir}/nss3/cmmft.h
%{_includedir}/nss3/cms.h
%{_includedir}/nss3/cmsreclist.h
%{_includedir}/nss3/cmst.h
%{_includedir}/nss3/crmf.h
%{_includedir}/nss3/crmft.h
%{_includedir}/nss3/cryptohi.h
%{_includedir}/nss3/cryptoht.h
%{_includedir}/nss3/jar-ds.h
%{_includedir}/nss3/jar.h
%{_includedir}/nss3/jarfile.h
%{_includedir}/nss3/key.h
%{_includedir}/nss3/keyhi.h
%{_includedir}/nss3/keyt.h
%{_includedir}/nss3/keythi.h
%{_includedir}/nss3/nss.h
%{_includedir}/nss3/nssckbi.h
%{_includedir}/nss3/nsspem.h
%{_includedir}/nss3/ocsp.h
%{_includedir}/nss3/ocspt.h
%{_includedir}/nss3/p12.h
%{_includedir}/nss3/p12plcy.h
%{_includedir}/nss3/p12t.h
%{_includedir}/nss3/pk11func.h
%{_includedir}/nss3/pk11pqg.h
%{_includedir}/nss3/pk11priv.h
%{_includedir}/nss3/pk11pub.h
%{_includedir}/nss3/pk11sdr.h
%{_includedir}/nss3/pkcs12.h
%{_includedir}/nss3/pkcs12t.h
%{_includedir}/nss3/pkcs7t.h
%{_includedir}/nss3/preenc.h
%{_includedir}/nss3/secmime.h
%{_includedir}/nss3/secmod.h
%{_includedir}/nss3/secpkcs5.h
%{_includedir}/nss3/secpkcs7.h
%{_includedir}/nss3/smime.h
%{_includedir}/nss3/ssl.h
%{_includedir}/nss3/sslerr.h
%{_includedir}/nss3/sslproto.h
%{_includedir}/nss3/sslt.h
%files pkcs11-devel
%defattr(-, root, root)
%{_includedir}/nss3/nssbase.h
%{_includedir}/nss3/nssbaset.h
%{_includedir}/nss3/nssckepv.h
%{_includedir}/nss3/nssckft.h
%{_includedir}/nss3/nssckfw.h
%{_includedir}/nss3/nssckfwc.h
%{_includedir}/nss3/nssckfwt.h
%{_includedir}/nss3/nssckg.h
%{_includedir}/nss3/nssckmdt.h
%{_includedir}/nss3/nssckt.h
%{_libdir}/libnssb.a
%{_libdir}/libnssckfw.a
%changelog
* Tue Nov 08 2011 Elio Maldonado <[email protected]> - 3.12.10-16
- Update builtins certs to those from NSSCKBI_1_88_RTM
* Thu Oct 27 2011 Elio Maldonado <[email protected]> - 3.12.10-15
- Bug 747387 - Unable to contact LDAP Server during winsync
* Wed Oct 19 2011 Elio Maldonado <[email protected]> - 3.12.10-14
- Add to the spec file the patch for Bug 671266
* Sun Oct 16 2011 Elio Maldonado <[email protected]> - 3.12.10-13
- More coverity related fixes in the pem module
* Sun Oct 16 2011 Elio Maldonado <[email protected]> - 3.12.10-12
- Coverity related fixes
* Tue Sep 27 2011 Elio Maldonado <[email protected]> - 3.12.10-11
- Add relro support for executables and shared libraries
* Mon Sep 19 2011 Elio Maldonado <[email protected]> - 3.12.10-10
- Add partial RELRO support
* Fri Sep 02 2011 Elio Maldonado <[email protected]> - 3.12.10-9
- Fix the name of the last patch file
* Fri Sep 02 2011 Elio Maldonado <[email protected]> - 3.12.10-8
- Retagging to pick up two missing commits
* Fri Sep 02 2011 Elio Maldonado <[email protected]> - 3.12.10-7
- Update builtins certs to those from NSSCKBI_1_87_RTM
* Wed Aug 31 2011 Elio Maldonado <[email protected]> - 3.12.10-6
- Update builtins certs to those from NSSCKBI_1_86_RTM
* Tue Aug 30 2011 Elio Maldonado <[email protected]> - 3.12.10-5
- Update builtins certs to those from NSSCKBI_1_85_RTM
* Sun Aug 14 2011 Elio Maldonado <[email protected]> - 3.12.10-4
- Fix CMS to verify signed data when SignerInfo indicates signer by subjectKeyID
* Fri Aug 12 2011 Elio Maldonado <[email protected]> - 3.12.10-3
- Fix pem logging to deal with files originally created by root
* Mon Jul 11 2011 Elio Maldonado <[email protected]> - 3.12.10-2
- Retagging for updated patch missing from previous tag
* Mon Jul 11 2011 Elio Maldonado <[email protected]> - 3.12.10-1
- Update to 3.12.10
* Thu Jun 23 2011 Elio Maldonado <[email protected]> - 3.12.9-11
- Resolves: rhbz# 703658 - Fix crmf hard-coded maximum size for wrapped private keys
* Thu Jun 23 2011 Elio Maldonado <[email protected]> - 3.12.9-10
- Resolves: rhbz#688423 - Enable NSS support for pluggable ECC
* Thu Apr 21 2011 Elio Maldonado Batiz <[email protected]> - 3.12.9-9
- Add "Conflicts: curl < 7.19.7-26.el6" to fix Bug 694663
* Thu Apr 07 2011 Elio Maldonado <[email protected]> - 3.12.9-8
- Construct private key nickname based on the full pathname of the pem file
* Wed Apr 06 2011 Elio Maldonado <[email protected]> - 3.12.9-7
- Update expired PayPayEE.cert test certificate
- Conditionalize some database tests on user not being root
* Wed Mar 23 2011 Elio Maldonado <[email protected]> - 3.12.9-6
- Update to NSS_3.12.9_WITH_CKBI_1_82_RTM
* Tue Mar 01 2011 Elio Maldonado <[email protected]> - 3.12.9-5
- Fix memory leaks caused by SECKEY_ImportDERPublicKey
* Wed Feb 24 2011 Elio Maldonado <[email protected]> - 3.12.9-4
- Short-term fix for ssl test suites hangs on ipv6 type connections
* Thu Feb 17 2011 Elio Maldonado <[email protected]> - 3.12.9-3
- Add requires for pkcs11-devel on nss-softokn-freebl devel
- Run the test suites in check section per packaging guidelines
* Sat Jan 22 2011 Elio Maldonado <[email protected]> - 3.12.9-2
- Prefer user database ca cert trust settings system's ones
- Swap internal key slot on fips mode switches
* Mon Jan 17 2011 Elio Maldonado <[email protected]> - 3.12.9-1
- Update to 3.12.9
- Fix libnsspem to test for and reject directories
* Fri Nov 27 2010 Elio Maldonado <[email protected]> - 3.12.8-2
- Add suppport for pkcs8 formatted keys in the pem module
- Add verify(not md5 size mtime) to configuration files attributes
- Prevent nss-sysinit disabling on package upgrade
- Create pkcs11.txt with correct permissions regardless of current umask
- Add option to setup-nsssysinit.sh to report nss-sysinit status
- Update test certificate which had expired
* Fri Oct 01 2010 Elio Maldonado <[email protected]> - 3.12.8-1
- Update to 3.12.8
* Thu Aug 27 2010 Kai Engert <[email protected]> - 3.12.7-2
- Increase release version number, no code changes
* Thu Aug 26 2010 Elio Maldonado <[email protected]> - 3.12.7-1
- Update to 3.12.7
* Thu Aug 26 2010 Elio Maldonado <[email protected]> - 3.12.6-6
- Rebuilt
* Thu Aug 26 2010 Elio Maldonado <[email protected]> - 3.12.6-5
- Appying the changes in previous log
- Changing some BuildRequires to >= as well
- Temporarily disabling all tests for faster builds
* Thu Aug 26 2010 Elio Maldonado <[email protected]> - 3.12.6-4
- Change some = to >= in Requires to enable a rebase next
* Mon Jun 07 2010 Elio Maldonado <[email protected]> - 3.12.6-3
- Fix SIGSEGV within CreateObject (#596783)
- Update expired test certificate
* Mon Mar 22 2010 Elio Maldonado <[email protected]> - 3.12.6-2
- Fix nss.pc to not require nss-softokn
* Thu Mar 04 2010 Elio Maldonado <[email protected]> - 3.12.6-1.2
- rebuilt using nss-util 3.2.6
* Thu Mar 04 2010 Elio Maldonado <[email protected]> - 3.12.6-1.1
- rebuilt using nspr-devel 4.8.4
* Wed Mar 03 2010 Elio Maldonado <[email protected]> - 3.12.6-1
- Update to 3.12.6
* Wed Feb 24 2010 Elio Maldonado <[email protected]> - 3.12.5.99-1
- Update to NSS_3_12_6_RC1
* Mon Jan 25 2010 Elio Maldonado <[email protected]> - 3.12.5-8
- Fix curl related regression and general patch code clean up
* Tue Jan 19 2010 Elio Maldonado <[email protected]> - 3.12.5-7.3
- Resolves: #551784 rebuilt after nss-softokn and nss-util builds
- this will generate the coorect nss.spec
* Sun Jan 17 2010 Elio Maldonado <[email protected]> - 3.12.5-7.2
- rebuilt for RHEL-6 candidate, Resolves: #551784
* Sun Jan 17 2010 Elio Maldonado <[email protected]> - 3.12.5-7.1
- Updated to 3.12.5 from CVS import from Fedora 12
- Moved blank legacy databases to the lookaside cache
- Reenabled the full test suite
- Retagging for a RHEL-6-test-build
* Wed Jan 13 2010 Elio Maldonado <[email protected]> - 3.12.5-7
- Retagged
* Wed Jan 13 2010 Elio Maldonado <[email protected]> - 3.12.5-6
- retagging
* Tue Jan 12 2010 Elio Maldonado <[email protected]> - 3.12.5-2.1
- Fix SIGSEGV on call of NSS_Initialize (#553638)
* Wed Jan 06 2010 Elio Maldonado <[email protected]> - 3.12.5-2
- bump release number and rebuild
* Wed Jan 06 2010 Elio Maldonado<[email protected]> - 3.12.5-1.14
- Fix nsssysinit to allow root to modify the nss system database (#547860)
* Wed Jan 06 2010 Elio Maldonado<[email protected]> - 3.12.5-1.12.1
- Temporarily disabling the ssl tests until Bug 539183 is resolved
* Sat Dec 25 2009 Elio Maldonado<[email protected]> - 3.12.5-1.11
- Fix an error introduced when adapting the patch for 546211
* Sat Dec 19 2009 Elio maldonado<[email protected]> - 3.12.5-1.10
- Remove some left over trace statements from nsssysinit patching
* Thu Dec 17 2009 Elio Maldonado<[email protected]> - 3.12.5-1.8
- Fix nsssysinit to set the default flags on the crypto module (#545779)
- Fix nsssysinit to enable apps to use the system cert store, patch contributed by David Woodhouse (#546221)
- Fix segmentation fault when listing keys or certs in the database, patch contributed by Kamil Dudka (#540387)
- Sysinit requires coreutils for post install scriplet (#547067)
- Remove redundant header from the pem module
* Wed Dec 09 2009 Elio Maldonado<[email protected]> - 3.12.5-2.1
- Remove unneeded patch
* Thu Dec 04 2009 Elio Maldonado<[email protected]> - 3.12.5-1.2
- Update to 3.12.5
- CVE-2009-3555 TLS: MITM attacks via session renegotiation
* Mon Oct 26 2009 Elio Maldonado<[email protected]> - 3.12.4-15
- Require nss-softoken of same arch as nss (#527867)
* Mon Oct 06 2009 Elio Maldonado<[email protected]> - 3.12.4-14
- Fix bug where user was prompted for a password when listing keys on an empty system database (#527048)
- Fix setup-nsssysinit to handle more general flags formats (#527051)
* Sun Sep 27 2009 Elio Maldonado<[email protected]> - 3.12.4-12
- Fix syntax error in setup-nsssysinit.sh
* Sun Sep 27 2009 Elio Maldonado<[email protected]> - 3.12.4-11
- Fix sysinit to be under mozilla/security/nss/lib
* Sat Sep 26 2009 Elio Maldonado<[email protected]> - 3.12.4-10
- Add nss-sysinit activation/deactivation script
* Fri Sep 18 2009 Elio Maldonado<[email protected] - 3.12.4-9
- Install blank databases and configuration file for system shared database
- nsssysinit queries system for fips mode before relying on environment variable
* Thu Sep 10 2009 Elio Maldonado<[email protected]> - 3.12.4-8
- Restoring nssutil and -rpath-link to nss-config for now - 522477
* Tue Sep 08 2009 Elio Maldonado<[email protected] - 3.12.4-7
- Add the nss-sysinit subpackage
* Tue Sep 08 2009 Elio Maldonado<[email protected]> - 3.12.4-6
- Installing shared libraries to %%{_libdir}
* Mon Sep 07 2009 Elio Maldonado<[email protected]> - 3.12.4-5
- Retagging to pick up new sources
* Mon Sep 07 2009 Elio Maldonado<[email protected]> - 3.12.4-4
- Update pem enabling source tar with latest fixes (509705, 51209)
* Sun Sep 06 2009 Elio Maldonado<[email protected]> - 3.12.4-3
- PEM module implements memory management for internal objects - 509705
- PEM module doesn't crash when processing malformed key files - 512019
* Sat Sep 05 2009 Elio Maldonado<[email protected]> - 3.12.4-2
- Remove symbolic links to shared libraries from devel - 521155
- No rpath-link in nss-softokn-config
* Tue Sep 01 2009 Elio Maldonado<[email protected]> - 3.12.4-1
- Update to 3.12.4
* Mon Aug 31 2009 Elio Maldonado<[email protected]> - 3.12.3.99.3-30
- Fix FORTIFY_SOURCE buffer overflows in test suite on ppc and ppc64 - bug 519766
- Fixed requires and buildrequires as per recommendations in spec file review
* Sun Aug 30 2009 Elio Maldonado<[email protected]> - 3.12.3.99.3-29
- Restoring patches 2 and 7 as we still compile all sources
- Applying the nss-nolocalsql.patch solves nss-tools sqlite dependency problems
* Sun Aug 30 2009 Elio Maldonado<[email protected]> - 3.12.3.99.3-28
- restore require sqlite
* Sat Aug 29 2009 Elio Maldonado<[email protected]> - 3.12.3.99.3-27
- Don't require sqlite for nss
* Sat Aug 29 2009 Elio Maldonado<[email protected]> - 3.12.3.99.3-26
- Ensure versions in the requires match those used when creating nss.pc
* Fri Aug 28 2009 Elio Maldonado<[email protected]> - 3.12.3.99.3-25
- Remove nss-prelink.conf as signed all shared libraries moved to nss-softokn
- Add a temprary hack to nss.pc.in to unblock builds
* Fri Aug 28 2009 Warren Togami <[email protected]> - 3.12.3.99.3-24
- caolan's nss.pc patch
* Thu Aug 27 2009 Elio Maldonado<[email protected]> - 3.12.3.99.3-23
- Bump the release number for a chained build of nss-util, nss-softokn and nss
* Thu Aug 27 2009 Elio Maldonado<[email protected]> - 3.12.3.99.3-22
- Fix nss-config not to include nssutil
- Add BuildRequires on nss-softokn and nss-util since build also runs the test suite
* Wed Aug 27 2009 Elio Maldonado<[email protected]> - 3.12.3.99.3-21
- disabling all tests while we investigate a buffer overflow bug
* Wed Aug 27 2009 Elio Maldonado<[email protected]> - 3.12.3.99.3-20
- disabling some tests while we investigate a buffer overflow bug - 519766
* Wed Aug 27 2009 Elio Maldonado<[email protected]> - 3.12.3.99.3-19
- remove patches that are now in nss-softokn and
- remove spurious exec-permissions for nss.pc per rpmlint
- single requires line in nss.pc.in
* Wed Aug 26 2009 Elio Maldonado<[email protected]> - 3.12.3.99.3-18
- Fix BuildRequires: nss-softokn-devel release number
* Wed Aug 26 2009 Elio Maldonado<[email protected] - 3.12.3.99.3-17
- fix nss.pc.in to have one single requires line
* Tue Aug 25 2009 Dennis Gilmore <[email protected]> - 3.12.3.99.3-16
- cleanups for softokn
* Tue Aug 25 2009 Dennis Gilmore <[email protected]> - 3.12.3.99.3-15
- remove the softokn subpackages
* Mon Aug 24 2009 Dennis Gilmore <[email protected]> - 3.12.3.99.3-14
- don install the nss-util pkgconfig bits
* Mon Aug 24 2009 Dennis Gilmore <[email protected]> - 3.12.3.99.3-13
- remove from -devel the 3 headers that ship in nss-util-devel
* Mon Aug 24 2009 Dennis Gilmore <[email protected]> - 3.12.3.99.3-12
- kill off the nss-util nss-util-devel subpackages
* Sun Aug 23 2009 Elio [email protected] - 3.12.3.99.3-11
- split off nss-softokn and nss-util as subpackages with their own rpms
- first phase of splitting nss-softokn and nss-util as their own packages
* Thu Aug 20 2009 Elio Maldonado <[email protected]> - 3.12.3.99.3-10
- must install libnssutil3.since nss-util is untagged at the moment
- preserve time stamps when installing various files
* Thu Aug 20 2009 Dennis Gilmore <[email protected]> - 3.12.3.99.3-9
- dont install libnssutil3.so since its now in nss-util
* Sat Aug 06 2009 Elio Maldonado <[email protected]> - 3.12.3.99.3-7.1
- Fix spec file problems uncovered by Fedora_12_Mass_Rebuild
* Sat Jul 25 2009 Fedora Release Engineering <[email protected]> - 3.12.3.99.3-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
* Mon Jun 22 2009 Elio Maldonado <[email protected]> - 3.12.3.99.3-6
- removed two patch files which are no longer needed and fixed previous change log number
* Mon Jun 22 2009 Elio Maldonado <[email protected]> - 3.12.3.99.3-5
- updated pem module incorporates various patches
- fix off-by-one error when computing size to reduce memory leak. (483855)
- fix data type to work on x86_64 systems. (429175)
- fix various memory leaks and free internal objects on module unload. (501080)
- fix to not clone internal objects in collect_objects(). (501118)
- fix to not bypass initialization if module arguments are omitted. (501058)
- fix numerous gcc warnings. (500815)
- fix to support arbitrarily long password while loading a private key. (500180)
- fix memory leak in make_key and memory leaks and return values in pem_mdSession_Login (501191)
* Fri Jun 08 2009 Elio Maldonado <[email protected]> - 3.12.3.99.3-4
- add patch for bug 502133 upstream bug 496997
* Fri Jun 05 2009 Kai Engert <[email protected]> - 3.12.3.99.3-3
- rebuild with higher release number for upgrade sanity
* Fri Jun 05 2009 Kai Engert <[email protected]> - 3.12.3.99.3-2
- updated to NSS_3_12_4_FIPS1_WITH_CKBI_1_75
* Thu May 07 2009 Kai Engert <[email protected]> - 3.12.3-7
- re-enable test suite
- add patch for upstream bug 488646 and add newer paypal
certs in order to make the test suite pass
* Wed May 06 2009 Kai Engert <[email protected]> - 3.12.3-4
- add conflicts info in order to fix bug 499436
* Tue Apr 14 2009 Kai Engert <[email protected]> - 3.12.3-3
- ship .chk files instead of running shlibsign at install time
- include .chk file in softokn-freebl subpackage
- add patch for upstream nss bug 488350
* Tue Apr 14 2009 Kai Engert <[email protected]> - 3.12.3-2
- Update to NSS 3.12.3
* Mon Apr 06 2009 Kai Engert <[email protected]> - 3.12.2.99.3-7
- temporarily disable the test suite because of bug 494266
* Mon Apr 06 2009 Kai Engert <[email protected]> - 3.12.2.99.3-6
- fix softokn-freebl dependency for multilib (bug 494122)
* Thu Apr 02 2009 Kai Engert <[email protected]> - 3.12.2.99.3-5
- introduce separate nss-softokn-freebl package
* Thu Apr 02 2009 Kai Engert <[email protected]> - 3.12.2.99.3-4
- disable execstack when building freebl
* Tue Mar 31 2009 Kai Engert <[email protected]> - 3.12.2.99.3-3
- add upstream patch to fix bug 483855
* Tue Mar 31 2009 Kai Engert <[email protected]> - 3.12.2.99.3-2
- build nspr-less freebl library
* Tue Mar 31 2009 Kai Engert <[email protected]> - 3.12.2.99.3-1
- Update to NSS_3_12_3_BETA4
* Wed Feb 25 2009 Fedora Release Engineering <[email protected]> - 3.12.2.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
* Wed Oct 22 2008 Kai Engert <[email protected]> - 3.12.2.0-3
- update to NSS_3_12_2_RC1
- use system zlib
* Tue Sep 30 2008 Dennis Gilmore <[email protected]> - 3.12.1.1-4
- add sparc64 to the list of 64 bit arches
* Wed Sep 24 2008 Kai Engert <[email protected]> - 3.12.1.1-3
- bug 456847, move pkgconfig requirement to devel package
* Fri Sep 05 2008 Kai Engert <[email protected]> - 3.12.1.1-2
- Update to NSS_3_12_1_RC2
* Fri Aug 22 2008 Kai Engert <[email protected]> - 3.12.1.0-2
- NSS 3.12.1 RC1
* Fri Aug 15 2008 Kai Engert <[email protected]> - 3.12.0.3-7
- fix bug bug 429175 in libpem module
* Tue Aug 05 2008 Kai Engert <[email protected]> - 3.12.0.3-6
- bug 456847, add Requires: pkgconfig
* Tue Jun 24 2008 Kai Engert <[email protected]> - 3.12.0.3-3
- nss package should own /etc/prelink.conf.d folder, rhbz#452062
- use upstream patch to fix test suite abort
* Mon Jun 02 2008 Kai Engert <[email protected]> - 3.12.0.3-2
- Update to NSS_3_12_RC4
* Mon Apr 14 2008 Kai Engert <[email protected]> - 3.12.0.1-1
- Update to NSS_3_12_RC2
* Thu Mar 20 2008 Jesse Keating <[email protected]> - 3.11.99.5-2
- Zapping old Obsoletes/Provides. No longer needed, causes multilib headache.
* Mon Mar 17 2008 Kai Engert <[email protected]> - 3.11.99.5-1
- Update to NSS_3_12_BETA3
* Fri Feb 22 2008 Kai Engert <[email protected]> - 3.11.99.4-1
- NSS 3.12 Beta 2
- Use /usr/lib{64} as devel libdir, create symbolic links.
* Sat Feb 16 2008 Kai Engert <[email protected]> - 3.11.99.3-6
- Apply upstream patch for bug 417664, enable test suite on pcc.
* Fri Feb 15 2008 Kai Engert <[email protected]> - 3.11.99.3-5
- Support concurrent runs of the test suite on a single build host.
* Thu Feb 14 2008 Kai Engert <[email protected]> - 3.11.99.3-4
- disable test suite on ppc
* Thu Feb 14 2008 Kai Engert <[email protected]> - 3.11.99.3-3
- disable test suite on ppc64
* Thu Feb 14 2008 Kai Engert <[email protected]> - 3.11.99.3-2
- Build against gcc 4.3.0, use workaround for bug 432146
- Run the test suite after the build and abort on failures.
* Thu Jan 24 2008 Kai Engert <[email protected]> - 3.11.99.3-1
* NSS 3.12 Beta 1
* Mon Jan 07 2008 Kai Engert <[email protected]> - 3.11.99.2b-3
- move .so files to /lib
* Wed Dec 12 2007 Kai Engert <[email protected]> - 3.11.99.2b-2
- NSS 3.12 alpha 2b
* Mon Dec 03 2007 Kai Engert <[email protected]> - 3.11.99.2-2
- upstream patches to avoid calling netstat for random data
* Wed Nov 07 2007 Kai Engert <[email protected]> - 3.11.99.2-1
- NSS 3.12 alpha 2
* Wed Oct 10 2007 Kai Engert <[email protected]> - 3.11.7-10
- Add /etc/prelink.conf.d/nss-prelink.conf in order to blacklist
our signed libraries and protect them from modification.
* Thu Sep 06 2007 Rob Crittenden <[email protected]> - 3.11.7-9
- Fix off-by-one error in the PEM module
* Thu Sep 06 2007 Kai Engert <[email protected]> - 3.11.7-8
- fix a C++ mode compilation error
* Wed Sep 05 2007 Bob Relyea <[email protected]> - 3.11.7-7
- Add 3.12 ckfw and libnsspem
* Tue Aug 28 2007 Kai Engert <[email protected]> - 3.11.7-6
- Updated license tag
* Wed Jul 11 2007 Kai Engert <[email protected]> - 3.11.7-5
- Ensure the workaround for mozilla bug 51429 really get's built.
* Mon Jun 18 2007 Kai Engert <[email protected]> - 3.11.7-4
- Better approach to ship freebl/softokn based on 3.11.5
- Remove link time dependency on softokn
* Sun Jun 10 2007 Kai Engert <[email protected]> - 3.11.7-3
- Fix unowned directories, rhbz#233890