aboutsummaryrefslogtreecommitdiff
path: root/security/nss
Commit message (Collapse)AuthorAgeFilesLines
* Update to 3.15.1Florian Smeets2013-07-1010-36/+28
| | | | | | | Submitted by: Jan Beich <jbeich@tormail.org> Notes: svn path=/head/; revision=322687
* - update firefox to 21.0Florian Smeets2013-05-162-17/+5
| | | | | | | | | | | | - update firefox-esr and thunderbird to 17.0.6 - WEBRTC now supports PULSEAUDIO - make linux-firefox work with plugins again (e.g. quakelive) Security: 4a1ca8a4-bd82-11e2-b7a0-d43d7e0c7c02 In collaboration with: Jan Beich <jbeich@tormail.org> Notes: svn path=/head/; revision=318268
* Rely on bsdtar to autodetermine the format of the distfiles when possibleBaptiste Daroussin2013-04-291-2/+1
| | | | | | | | | | For a while now bsdtar is able to autotermine compression and archive format. Let's then use tar directly instead of piping to tar. Now USE_BZIP2 and USE_XZ only set EXTRACT_SUFX to the right format Notes: svn path=/head/; revision=316786
* - update thunderbird, firefox-esr, linux-thunderbird and linux-firefox toFlorian Smeets2013-04-033-20/+6
| | | | | | | | | | | | | | | | | | | 17.0.5 - update firefox to 20.0 - update seamonkey and linux-seamonkey to 2.17 - update nspr to 4.9.6 - remove mail/thunderbird-esr, Mozilla stopped providing 2 versions of thunderbird - prune support for old FreeBSD versions; users of 8.2, 7.4 or earlier are advised to upgrade - http://www.freebsd.org/security/ - add vuln.xml entry Security: 94976433-9c74-11e2-a9fc-d43d7e0c7c02 Approved by: portmgr (miwi) In collaboration with: Jan Beich <jbeich@tormail.org> Notes: svn path=/head/; revision=315713
* Move this check to the correct place.Florian Smeets2013-02-231-1/+1
| | | | | | | | Submitted by: Jan Beich <jbeich@tormail.org> Pointhat to: flo Notes: svn path=/head/; revision=312801
* Add support for older FreeBSD released by relying on USE_GCCFlorian Smeets2013-02-211-0/+4
| | | | | | | | Requested by: ale Submitted by: Jan Beich <jbeich@tormail.org> Notes: svn path=/head/; revision=312726
* The files we are looking for are also in ${LOCALBASE}/bin, this shouldFlorian Smeets2013-02-201-1/+1
| | | | | | | | | | | | | | | | | | | | | help people that installed binutils on an older version of FreeBSD and upgraded base in the meantime. e.g. Install binutils on 9.0 they got installed in ${LOCALBASE}/x86_64-portbld-freebsd9.0 after upgrading to 9.1 the nss port would look in ${LOCALBASE}/x86_64-portbld-freebsd9.1 and not find the tools its looking for, falling back to the tools from base that don't support all the instructions the nss ports needs. Avoid all this by using ${LOCALBASE}/bin Notes: svn path=/head/; revision=312675
* - update firefox to 19.0Florian Smeets2013-02-199-56/+64
| | | | | | | | | | | | | | | | | - update firefox-esr, thunderbird, linux-firefox, linux-thunderbird to 17.0.3 - update linux-seamonkey to 2.16 - update nspr to 4.9.5 - update nss to 3.14.3 - add DuckDuckGo search plugin to firefox [1] - mark kompozer deprecated - clang fixes for www/libxul19 [2] Security: http://www.vuxml.org/freebsd/e3f0374a-7ad6-11e2-84cd-d43d7e0c7c02.html Submitted by: DuckDuckGo [1], dim [2] In collaboration with: Jan Beich <jbeich@tormail.org> Notes: svn path=/head/; revision=312608
* - update firefox, thunderbird, linux-firefox and linux-thunderbird to 17.0.2Florian Smeets2013-01-091-5/+3
| | | | | | | | | | - update firefox-esr, thunderbird-esr and libxul to 10.0.12 - update linux-seamonkey to 2.15 Security: http://www.vuxml.org/freebsd/a4ed6632-5aa9-11e2-8fcb-c8600054b392.html Notes: svn path=/head/; revision=310165
* Update to 3.14.1.with.ckbi.1.93Florian Smeets2013-01-052-6/+7
| | | | | | | | | | This was released to revoke certificates that were used for MITM. For details see: https://blog.mozilla.org/security/2013/01/03/revoking-trust-in-two-turktrust-certficates/ Notes: svn path=/head/; revision=309970
* - Update www/firefox{,-i18n} to 16.0.2Florian Smeets2012-10-283-6/+8
| | | | | | | | | | | | | | | | | | | | | - Update seamonkey to 2.13.2 - Update ESR ports and libxul to 10.0.10 - Update nspr to 4.9.3 - Update nss to 3.14 - with GNOMEVFS2 option build its extension, too [1] - make heap-committed and heap-dirty reporters work in about:memory - properly mark QT4 as experimental (needs love upstream) - *miscellaneous cleanups and fixups* mail/thunderbird will be updated once the tarballs are available. PR: ports/173052 [1] Security: 6b3b1b97-207c-11e2-a03f-c8600054b392 Feature safe: yes In collaboration with: Jan Beich <jbeich@tormail.org> Notes: svn path=/head/; revision=306558
* - Update firefox-esr, thunderbird-esr, linux-firefox and linux-thunderbird ↵Florian Smeets2012-10-103-1/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | to 10.0.8 - Update firefox and thunderbird to 16.0 - Update seamonkey to 2.13 - Update all -i18n ports respectively - switch firefox 16.0 and seamonkey 2.13 to ALSA by default for better latency during pause and seeking with HTML5 video - remove fedisableexcept() hacks, obsolete since FreeBSD 4.0 - support system hunspell dictionaries [1] - unbreak -esr ports with clang3.2 [2] - unbreak nss build when CC contains full path [3] - remove GNOME option grouping [4] - integrate enigmail into thunderbird/seamonkey as an option [5] - remove mail/enigmail* [6] - enable ENIGMAIL, LIGHTNING and GIO options by default - add more reporters in about:memory: page-faults-hard, page-faults-soft, resident, vsize - use bundled jemalloc 3.0.0 on FreeBSD < 10.0 for gecko 16.0, only heap-allocated reporter works in about:memory (see bug 762445) - use lrintf() instead of slow C cast in bundled libopus - use libjpeg-turbo's faster color conversion if available during build - record startup time for telemetry - use -z origin instead of hardcoding path to gecko runtime - fail early if incompatible libxul version is installed (in USE_GECKO) - *miscellaneous cleanups and fixups* PR: ports/171534 [1] PR: ports/171566 [2] PR: ports/172164 [3] PR: ports/172201 [4] Discussed with: ale, beat, Jan Beich [5] Approved by: ale [6] In collaboration with: Jan Beich <jbeich@tormail.org> Security: 6e5a9afd-12d3-11e2-b47d-c8600054b392 Feature safe: yes Approved by: portmgr (beat) Notes: svn path=/head/; revision=305684
* - Update firefox to 15.0.1Florian Smeets2012-09-072-9/+15
| | | | | | | | | | | | | | | | | | | | | | | - Sync changes from gecko repository@r995 general - don't specify prefix for libevent when using pkg-config - ia64 and sparc64 use 8k pagesize by default - add visibility hack for clang 3.2 with libc++ - fix build using clang 3.2 (on FreeBSD 10-CURRENT) - rename a few more patches to ease tracking of bugzilla bugs www/seamonkey - unbreak unsetting LDAP and MAILNEWS options after bug 707305 - use compile time debugging WITH_DEBUG security/nss - unbreak install WITH_DEBUG - unbreak powerpc64 devel/nspr - use absolute paths when specifiying srcdir to make gdb(1) happy In collaboration with: andreast, zeising, Jan Beich <jbeich@tormail.org> Notes: svn path=/head/; revision=303831
* - update firefox and thunderbird to 15.0Florian Smeets2012-08-305-23/+33
| | | | | | | | | | | | | | | | | | | | | | | | - update firefox-esr, thunderbird-esr, linux-thunderbird and linux-firefox to 10.0.7 - update seamonkey and linux-seamonkey to 2.12 - update nss to 3.13.6 - update bsdipc code (posix_spawn, SysV shared memory) - rename patches to easily track those not (yet) submitted upstream - reduce package size, except for www/libxul[1] - restore default objdir to what it was in 13.0 - fix mail/enigmail after thunderbird build changes - don't accidentally pick up headers from installed ports[3] - add support for PREFIX != LOCALBASE to Makefile.webplugins [4] - document vulnerabilities in vuln.xml - *miscellaneous cleanups and fixups* Obtained from: OpenBSD ports[1] PR: ports/159831, ports/160933, ports/170467[3], ports/170236 [4] Submitted by: avilla [4] In collaboration with: Jan Beich <jbeich@tormail.net> Who did most of the hard work. Notes: svn path=/head/; revision=303378
* - update firefox/thunderbird ESR versions to 10.0.6Florian Smeets2012-07-262-2/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - update firefox 14.0.1 - update thunderbird to 14.0 - update seamonkey to 2.11 - switch to new options framework - add experimental rendering via cairo-qt (QT4 option) - add audio backend options (ALSA and PulseAudio) - rename SMB option to GNOMEVFS2 - turn on LOGGING by default (like upstream linux builds) - improve about:memory output - unbreak PGO - use system libs [1] - switch to libevent2 [2] - fix conflict with devel/libunwind and base gcc [3] - unbreak clang/libc++ build [4] - unbreak build with base gcc on >= 9.x [5] - use common IPC code with other BSDs[6] - and *miscellaneous improvements* PR: ports/146231 [1], ports/161421 [2] ports/150631, ports/168369, ports/168637, ports/168793, ports/168978 [3] ports/163454, ports/164905, ports/169231 [4] ports/169389, ports/169479 [5] Obtained from: pkgsrc via bugzilla #753046 [6] In collaboration with: Jan Beich (who did the major part of this work and deserves a special thank you!) Notes: svn path=/head/; revision=301582
* Update to 3.13.5Florian Smeets2012-06-042-3/+3
| | | | Notes: svn path=/head/; revision=298395
* update to 3.13.4Florian Smeets2012-04-142-3/+3
| | | | Notes: svn path=/head/; revision=294830
* Update to 3.13.3Florian Smeets2012-03-052-3/+3
| | | | Notes: svn path=/head/; revision=292757
* update to 3.13.2Florian Smeets2012-02-204-39/+10
| | | | Notes: svn path=/head/; revision=291954
* add upstream patch, to fix "__GNUC_MINOR is not defined" build error thatFlorian Smeets2012-01-312-0/+24
| | | | | | | | | | | | | | | causes some ports depending on nss to fail. e.g. net-im/pidgin-sipe. The patch is taken from https://bugzilla.mozilla.org/show_bug.cgi?id=702090 This patch will be part of the next nss release and can be removed with the next update. PR: ports/164655 PR: ports/164391 Submitted by: rm Notes: svn path=/head/; revision=290207
* - update to NSS_3_13_1_WITH_CKBI_1_88_RTMFlorian Smeets2012-01-122-8/+10
| | | | | | | | | - some fixes to make the regression tests actually run [1] Submitted by: mi [1] Notes: svn path=/head/; revision=289060
* update to CKBI version 1.88 which includes the latest mozilla cert dataFlorian Smeets2011-12-282-3/+4
| | | | Notes: svn path=/head/; revision=288205
* Move nspr and nss to gecko@ team. they are part of the mozilla stack.Koop Mast2011-10-071-1/+1
| | | | | | | Talked with flo@ at EuroBSD con 2011 Notes: svn path=/head/; revision=283150
* Update to 3.12.11.Koop Mast2011-09-032-5/+8
| | | | | | | | | This update is based on the nss-3.12.11.with.ckbi.1.87 release. The only change with the nss-3.12.11 release is that the certs from the DigiNotar CA are marked a untrusted. Notes: svn path=/head/; revision=281099
* Update to 3.12.10.Koop Mast2011-08-132-4/+5
| | | | | | | | PR: ports/159080 Submitted by: flo@ Notes: svn path=/head/; revision=279603
* Patch a assumtion that uname -m returns the architecture value instead of ↵Koop Mast2011-03-031-0/+11
| | | | | | | | | | | | | MACHINE. This makes it unbuildable on platforms where these differ (pc98, powerpc64, sun4v). Use uname -p to fix this. PR: ports/155228 Submitted by: Nathan Whitehorn <nwhitehorn@FreeBSD.org> Notes: svn path=/head/; revision=270208
* Update to 3.12.9.Koop Mast2011-03-023-15/+5
| | | | | | | Submitted by: beat Notes: svn path=/head/; revision=270119
* - Update to 3.12.8Beat Gaetzi2010-10-215-203/+8
| | | | | | | Approved by: kwm Notes: svn path=/head/; revision=263400
* I did a typo of use incorrect braces in there, so it correct.Jeremy Messenger2010-07-131-1/+1
| | | | | | | | Submitted by: Anonymous <swell.k@gmail.com> Feature safe: yes Notes: svn path=/head/; revision=257705
* Fix race condition in sqlite3 backend (Bug#564011).Alex Dupre2010-06-252-5/+98
| | | | | | | | Approved by: mezz Feature safe: yes Notes: svn path=/head/; revision=256957
* Respect the LOCALBASE in a patch to find sqlite3 correct.Jeremy Messenger2010-06-241-1/+1
| | | | | | | | | PR: ports/146197 Submitted by: Anonymous <swell.k@gmail.com> Feature safe: yes Notes: svn path=/head/; revision=256919
* Fix the build on powerpc64. By adding CPU_ARCH detection.Koop Mast2010-06-112-1/+48
| | | | | | | | | | And by adding some G5-specific code in mpcpucache.c to detect cacheline sizes. PR: ports/147696 Submitted by: nwhitehorn@ Notes: svn path=/head/; revision=256407
* A bunch of changes for the SQLITE3 backend:Alex Dupre2010-05-207-87/+129
| | | | | | | | | | | | 1) fix for bug #528467 (C_UnwrapKey didn't work with DSA and EC private keys) 2) fix for bug #526231 (C_GetAttributeValue didn't correctly work) 3) partial fix for bug #564011 (object ID race on keypairgen) 4) use sqlite3 in ports (there is no reason to compile the bundled one) Approved by: no objections by marcus and gnome team Notes: svn path=/head/; revision=254639
* Fix the 'nss-config --libs' by remove the '-Wl,-R/usr/local/lib/nss' to allowJeremy Messenger2010-04-292-1/+2
| | | | | | | | | | other gecko applications to be able to build with nss. PR: ports/144994 Submitted by: mi Notes: svn path=/head/; revision=253404
* - Update to 3.12.6Beat Gaetzi2010-04-104-27/+26
| | | | | | | Approved by: marcus Notes: svn path=/head/; revision=252517
* Fix build for ia64.Marcel Moolenaar2009-11-201-5/+10
| | | | | | | Ok'd by: bland@ Notes: svn path=/head/; revision=244494
* Fix subtle (cut'n'paste) bug.Alex Dupre2009-10-192-1/+12
| | | | Notes: svn path=/head/; revision=243053
* Fix the permissions of the installed header files.Joe Marcus Clarke2009-10-041-3/+4
| | | | | | | | PR: 139245 Submitted by: Aragon Gouveia <aragon@phat.za.net> Notes: svn path=/head/; revision=242459
* Fix the build on sparc64.Joe Marcus Clarke2009-09-171-5/+10
| | | | | | | | | PR: 138877 Submitted by: beat Feature safe: yes Notes: svn path=/head/; revision=241549
* Update to 3.12.4.Joe Marcus Clarke2009-09-0810-153/+213
| | | | | | | | PR: 138419 Submitted by: Aragon Gouveia <aragon@phat.za.net> Notes: svn path=/head/; revision=241057
* Add PowerPC support.Joe Marcus Clarke2009-08-172-6/+18
| | | | | | | Submitted by: Andreas Tobler <andreast-list@fgznet.ch> Notes: svn path=/head/; revision=239774
* - Mark MAKE_JOBS_UNSAFEPav Lucistnik2009-05-211-0/+1
| | | | | | | Submitted by: David Naylor <naylor.b.david@gmail.com> Notes: svn path=/head/; revision=234325
* - Remove conditional checks for FreeBSD 5.x and olderPav Lucistnik2009-01-061-4/+0
| | | | Notes: svn path=/head/; revision=225335
* Enable Elliptic Curve Crypto (ECC)Michael Johnson2008-03-201-2/+2
| | | | | | | Requested by: ale Notes: svn path=/head/; revision=209441
* Add part of missing patch back to fix build of net/lamMichael Johnson2008-03-122-2/+3
| | | | | | | Requested by: mezz Notes: svn path=/head/; revision=208906
* Update to 3.11.9Michael Johnson2008-03-124-43/+23
| | | | Notes: svn path=/head/; revision=208890
* Fix the build when net/lam installed in system.Jeremy Messenger2007-12-112-8/+8
| | | | | | | | | PR: ports/117623 and ports/114871 Reported by: Alexander Vasyanin <avasyanin@mail.ru> Koji Yokota <yokota@res.otaru-uc.ac.jp> Notes: svn path=/head/; revision=202963
* Update to 3.11.7Michael Johnson2007-07-102-4/+4
| | | | Notes: svn path=/head/; revision=195368
* Update to 3.11.5Michael Johnson2007-03-233-11/+10
| | | | Notes: svn path=/head/; revision=188099
* Fix a hardcore of /usr/X11R6 to X11BASE.Jeremy Messenger2007-03-211-1/+2
| | | | | | | | PR: ports/110166 Reported by: John Nielsen <john@jnielsen.net> Notes: svn path=/head/; revision=187931