ajs124
36d2488cb6
nss_3_44: drop
2021-05-15 17:59:39 +02:00
ajs124
5240b3fa7c
nss: 3.63 -> 3.64
2021-04-16 15:49:23 +02:00
ajs124
636fab48a6
nss: 3.62 -> 3.63
2021-03-20 16:41:00 +01:00
Martin Weinelt
e73210fd67
nss: 3.61 -> 3.62
2021-03-14 16:23:29 +01:00
ajs124
d86882dd0f
nss: 3.60 -> 3.61
2021-03-14 16:20:51 +01:00
Sandro Jäckel
9fc898d625
nss: remove usage of stdenv.lib
2021-01-31 16:07:26 +01:00
rnhmjoj
b9bb98cf49
nss: add option to use p11-kit
...
This commit adds an option to replace libnssckbi with the
p11-kit-trust[1] module. It makes all NSS application (like Firefox,
Chromium, etc.) use the system trust store (/etc/ssl/certs/ in NixOS)
and other PKCS#11 modules without ad-hoc configuration.
This approach was first implemented in Fedora[2] and other distributions
like Arch Linux, later.
[1]: https://p11-glue.github.io/p11-glue/p11-kit/manual/trust-nss.html
[2]: https://fedoraproject.org/wiki/Features/SharedSystemCertificates
2021-01-24 10:50:52 +01:00
Ben Siraphob
66e44425c6
pkgs/development/libraries: stdenv.lib -> lib
2021-01-21 19:11:02 -08:00
ajs124
22cd16f5b0
nss: 3.59 -> 3.60
2020-12-17 07:31:34 +01:00
ajs124
fce1a3ee1a
nss: 3.58 -> 3.59
...
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.59_release_notes
2020-11-18 20:13:23 +01:00
Andreas Rammhold
6c33216fcb
nss: 3.57 -> 3.58
...
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.58_release_notes
2020-11-18 20:13:23 +01:00
Andreas Rammhold
cbd0f8931c
nss_3_53: init
2020-11-18 20:13:23 +01:00
Andreas Rammhold
94448baf6d
cacert: decouple from NSS to reduce rebuild amount
...
In [#100765 ] @vcunat pointed out that we could decouple cacert from the
NSS package to make it more rebuild friendly. Just rebuilding packages
that depend on NSS seems to be about ~100. Rebuilding all the packages
that depend on cacert is >9k as of this writing. This makes it much more
feasible to upgrade high-profile packages that are (rightfully) pedantic
on their NSS version like firefox and thunderbird.
[#100765 ]: https://github.com/NixOS/nixpkgs/pull/100765
2020-11-18 20:13:22 +01:00
Michael Raskin
15430f8465
Merge pull request #102428 from r-burns/nss
...
nss: fix build on ppc64[le]
2020-11-15 09:42:19 +00:00
zimbatm
5ff35fab0f
fixup! nss: make reproducible ( #102156 )
...
Fixes a precedence issue from fe9f55907e
`lib.optionalString <cond> 'text' + 'text2'` will always have 'text2' as
part of the result.
2020-11-02 11:55:11 +01:00
Ryan Burns
eed2008a2d
nss: fix build on ppc64[le]
...
NSS configure scripts use the abbreviated form ppc64/ppc64le:
https://github.com/nss-dev/nss/blob/NSS_3_57_RTM/coreconf/config.gypi#L209
Whereas nixpkgs uses the longer form:
`nix eval nixpkgs.pkgsCross.powernv.hostPlatform.parsed.cpu.name`
`powerpc64le`
2020-11-01 20:37:48 -08:00
zimbatm
8f2be9ac36
nss: make reproducible ( #102156 )
...
According to
c1fad130dc/build.sh (l129)
the FIPS mode is not enabled by default. Yet we generate the .chk files
that are only meant to be used for that mode. I have a sense that those
have been cargo-culted around.
Adding FIPS is still possible but you have to explictily build the lib
with `pkgs.nss.override { enableFIPS = true; }`
More info on what FIPS is:
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_Tech_Notes/nss_tech_note6
Other distros wrangling with the same issue:
https://bugzilla.opensuse.org/show_bug.cgi?id=1081723
2020-10-31 21:17:26 +01:00
Vladimír Čunát
336bc8283b
Re-Revert "Merge #101508 : libraw: 0.20.0 -> 0.20.2"
...
This reverts commit c778945806
.
I believe this is exactly what brings the staging branch into
the right shape after the last merge from master (through staging-next);
otherwise part of staging changes would be lost
(due to being already reachable from master but reverted).
2020-10-26 08:19:17 +01:00
Vladimír Čunát
c778945806
Revert "Merge #101508 : libraw: 0.20.0 -> 0.20.2"
...
I'm sorry; I didn't notice it contained staging commits.
This reverts commit 17f5305b6c
, reversing
changes made to a8a018ddc0
.
2020-10-25 09:41:51 +01:00
Andrew Childs
722d02a720
treewide: move fixDarwinDylibNames to nativeBuildInputs
...
This hook runs at build time and depends on executing
install_name_tool from binutils.
2020-10-21 13:26:53 +09:00
Vladimír Čunát
80d90e69fe
nss: 3.56 -> 3.57
...
Release notes seem "boring":
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.57_release_notes
My understanding is that this version will be needed in Firefox 82 released
in one month from now: https://wiki.mozilla.org/NSS:Release_Versions
2020-09-19 08:23:45 +02:00
ajs124
49aa282108
nss: 3.55 -> 3.56
2020-08-26 08:34:52 +02:00
Vladimír Čunát
ce174c7bc9
Merge #94587 : nss: fix on darwin
2020-08-06 09:08:29 +02:00
Matthew Bauer
d0468f86e8
nss: set install name correctly
2020-08-02 22:35:30 -05:00
Frederik Rietdijk
cee7df4846
Merge staging-next into staging
2020-07-30 18:28:15 +02:00
ajs124
93a3c37128
nss: enable libpkix build
...
this was enabled by default with the old build system, but requires this flag with the new one
fixes ##93955
2020-07-29 20:31:14 +02:00
ajs124
67f0fcc014
nss: 3.54 -> 3.55
2020-07-26 14:06:31 +02:00
ajs124
8f925208cd
nss: try to fix darwin build
2020-07-20 17:20:35 +02:00
ajs124
6760ec6c40
nss: gyp supports python3 now
2020-07-20 14:58:46 +02:00
Vladimír Čunát
0513a9128f
nss_3_44: bring back this older branch for firefox-esr
...
/cc nss PR #91746
2020-07-19 12:30:25 +02:00
ajs124
487373fb2c
nss: 3.52.1 -> 3.54
2020-07-15 19:08:51 +02:00
Frederik Rietdijk
febc27b59a
Merge master into staging-next
2020-06-12 08:57:26 +02:00
Mario Rodas
8b2d735d1a
nss: fix build on darwin
2020-06-10 04:20:00 -05:00
ajs124
be7c11c439
nss: 3.52 -> 3.52.1
...
Needed to compile firefox 77. Taken from PR #89438 .
2020-06-05 06:24:06 +02:00
Gaelan Steele
b14d997778
nss: fix building for aarch32 on aarch64
...
There are two ways to build a package for aarch32 on an aarch64 machine:
either by cross compiling as normal, or by adding armv6l/armv7l to
extraPlatforms and doing a non-cross compile.
Previously, NSS failed to build with both methods: when using
extraPlatforms, things failed because NSS includes an armv8-specific
file (presumably based on the result of uname); when cross compiling,
NSS's build system expects to receive an architecture name of arm (not
armv6l or whatever), so was failing to include some arch-specific code
and failed with a linker error.
This commit fixes those things by a) always passing the arch, even when
not cross-compiling, and b) special-casing aarch32 to always pass in an
arch of arm.
2020-05-14 09:26:09 -07:00
Andreas Rammhold
bce5268a21
niss: 3.51 -> 3.52
2020-05-04 01:39:35 +02:00
Michael Reilly
84cf00f980
treewide: Per RFC45, remove all unquoted URLs
2020-04-10 17:54:53 +01:00
Konrad Borowski
60c646c031
nss: 3.49.2 -> 3.51
2020-03-10 14:36:52 +01:00
Andreas Rammhold
92f660e254
nss: 3.48 -> 3.49.2
2020-02-11 07:51:22 +01:00
Andreas Rammhold
6da3b5e8b7
nss: 3.47.1 -> 3.48.1
2020-01-08 14:48:30 +01:00
Robin Gloster
a085e9c061
nss: *Flags are lists
2019-12-30 11:13:40 +01:00
Andreas Rammhold
1c0b2785b4
nss: 3.46.1 -> 3.47.1
2019-11-27 21:08:19 +01:00
Andreas Rammhold
b4f278a07c
nss: 3.46 -> 3.46.1
2019-10-21 21:58:37 +02:00
Andreas Rammhold
7b504b49b0
nss: 3.44.1 -> 3.46
2019-09-02 16:13:19 +02:00
volth
46420bbaa3
treewide: name -> pname (easy cases) ( #66585 )
...
treewide replacement of
stdenv.mkDerivation rec {
name = "*-${version}";
version = "*";
to pname
2019-08-15 13:41:18 +01:00
taku0
442fd85db6
nss: 3.44 -> 3.44.1
2019-07-15 09:38:15 +02:00
Matthew Bauer
fc04ec9274
Merge pull request #58063 from illegalprime/nss-cross
...
nss: cross compile support
2019-06-10 21:33:19 -04:00
Will Dietz
979970a4cd
nss: 3.43 -> 3.44
2019-05-15 17:03:35 -05:00
Will Dietz
354ccb2052
nss: 3.42.1 -> 3.43
...
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.43_release_notes
2019-05-15 17:03:15 -05:00
Michael Eden
6261601b00
nss: move CPU_ARCH and OS_TEST to cross comp
2019-03-26 22:07:10 -04:00
Michael Eden
8f4dcedbb0
nss: cross compile support
2019-03-25 13:30:53 -04:00
Tim Steinbach
e27fa435f7
nss: 3.42 -> 3.42.1
2019-02-13 08:10:13 -05:00
Andreas Rammhold
604bd482d1
nss: 3.41 -> 3.42
2019-01-29 20:30:42 +01:00
Alyssa Ross
fdc6caf144
nss: 3.40.1 -> 3.41
2018-12-16 14:22:54 +00:00
Will Dietz
e1adb093b7
nss: 3.40 -> 3.40.1
2018-12-02 00:00:10 -06:00
Will Dietz
011c890a62
nss: generate url from version (doesn't change derivation hash)
...
Makes future upgrades easier...
2018-12-02 00:00:09 -06:00
Andreas Rammhold
376f4b9f05
nss: 3.39 -> 3.40
2018-11-15 00:28:11 +01:00
Andreas Rammhold
8a9b6bc607
nss: 3.38 -> 3.39
2018-10-23 10:15:44 +02:00
Vladimír Čunát
153a19df05
Merge branch 'master' into staging-next
...
Hydra: ?compare=1474536
2018-08-20 09:15:33 +02:00
Markus Kowalewski
73eede0543
nss: add license
2018-08-17 23:55:36 +02:00
Jan Malakhovski
f3057114fb
nss: disable tests
2018-08-11 09:35:38 +00:00
Vladimír Čunát
2f4001f41a
Merge #42729 : firefox-61 and related updates (security)
...
(cherry picked from commit 8ad921dc94
)
Fast-forwarded to get to master sooner.
2018-06-29 20:58:13 +02:00
taku0
4927422609
nss: 3.36.4 -> 3.38
2018-06-28 23:52:54 +09:00
taku0
288d0885b3
nss: 3.36.1 -> 3.36.4
2018-06-07 21:33:13 +09:00
Andreas Rammhold
4320c1151d
nss: removed aarch64 patch
...
With the update to 3.36 the patch introduced with e96473b is no longer
required.
2018-05-12 20:03:31 +09:00
Jörg Thalheim
2adc297e52
nss: 3.35 -> 3.36.1
2018-04-15 21:35:46 +01:00
Tuomas Tynkkynen
8254d2cfb0
nss: Fix aarch64 build
2018-03-19 05:11:01 +02:00
taku0
16ee6b5ed9
nss: 3.34.1 -> 3.35; cacert.certdata2pem: 20160104 -> 20170717
2018-03-16 03:42:09 +00:00
Väinö Järvelä
aacd3e5267
nss: link libraries with absolute paths on Darwin
2018-02-21 07:33:11 +02:00
Andreas Rammhold
e524549536
nss: 3.33 -> 3.34.1
2018-01-31 01:51:28 +01:00
John Wiegley
e8caa47b35
nss: Omit an extraneous definition; fix other problems on Darwin
2018-01-03 15:18:00 -08:00
taku0
b5f2a090de
nss: 3.32.1 -> 3.33
2017-11-13 23:01:02 +09:00
Robin Gloster
034c168aa2
nss: fix includedir for pkgconfig
2017-10-09 20:49:36 +02:00
taku0
6e2744ab0f
nss: 3.31 -> 3.32.1
2017-10-04 21:12:12 +09:00
taku0
0ed1aead70
nss: 3.30 -> 3.31
2017-06-14 21:50:02 +09:00
Vladimír Čunát
8eab29e26f
nss: 3.28.3 -> 3.30 ( close #24508 )
2017-04-01 13:31:05 +02:00
Nikolay Amiantov
1715e3643b
nss: propagate nspr
2017-03-23 00:03:32 +03:00
Alexey Shmalko
cb670556c5
nss: 3.28.1 -> 3.28.3
...
This should fix firefox build, which fails due to nss being too old.
2017-03-08 13:27:16 +02:00
aszlig
ca7923f111
nss: Provide a more stable URL for pkgconfig patch
...
Since 2bf0f84f1f
, the patch isn't in our
repository anymore but being fetched from its origin.
However, the origin URL is always pointing to the latest master version
of Gentoo. This has the downside that whenever Gentoo changes the patch,
our build of NSS will be broken.
Also, I'm providing a comment here indicating what the patch does.
As to the reason *why* the patch is there, I vaguely remeber seeing a
few libraries/applications that depend on NSS relying that there's a
pkgconfig file.
After checking a few distros, they all seem to have it:
https://anonscm.debian.org/cgit/pkg-mozilla/nss.git/tree/debian?id=5306c4192d6bc0a2685842e9fd533196e7302297
https://apps.fedoraproject.org/packages/nss-devel/
https://git.archlinux.org/svntogit/packages.git/tree/trunk?h=packages/nss&id=3f7f54b357e23b7ac1cec849693334ad29be07d2
The issue is already reported upstream but hasn't been fixed yet:
https://bugzilla.mozilla.org/show_bug.cgi?id=530672
Tested by building nss on x86_64-linux (the hash didn't change anyway,
but just to be sure).
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2017-01-25 16:25:00 +01:00
Vladimír Čunát
30a94deac5
nss: remove parameter that just got unused
2017-01-24 15:56:36 +01:00
Vladimír Čunát
f8e39ec13c
nss: fetchpatch -> fetchurl
...
This isn't a dynamically generated patch, so it's not required,
and the hash was for unmodified patch anyway.
2017-01-24 15:43:53 +01:00
Eelco Dolstra
2bf0f84f1f
nss: 3.27.2 -> 3.28.1
2017-01-24 14:49:46 +01:00
Eelco Dolstra
b221fc137c
nss: 3.27.1 -> 3.27.2
2016-12-01 13:02:35 +01:00
Eelco Dolstra
1624f7f174
nss: 3.26 -> 3.27.1
2016-11-15 16:58:45 +01:00
Tuomas Tynkkynen
a17216af4c
treewide: Shuffle outputs
...
Make either 'bin' or 'out' the first output.
2016-08-29 14:49:51 +03:00
Eelco Dolstra
6aabe2e4bb
nss: 3.24 -> 3.26
2016-08-11 15:20:35 +02:00
rnhmjoj
f2842da8b2
nss: 3.23 -> 3.24
2016-08-07 23:38:03 +02:00
Eelco Dolstra
cb37ab146b
Add mirror://mozilla scheme
2016-05-09 19:37:22 +02:00
Vladimír Čunát
ab15a62c68
Merge branch 'master' into closure-size
...
Beware that stdenv doesn't build. It seems something more will be needed
than just resolution of merge conflicts.
2016-04-01 10:06:01 +02:00
Franz Pletz
1a9b272c09
nss: 3.22.2 -> 3.23 (security)
...
Fixes CVE-2016-1950.
See: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.23_release_notes
2016-03-21 21:27:59 +01:00
Domen Kožar
603ea2652f
nss: 3.22 -> 3.22.2 (CVE-2016-1950)
2016-03-11 12:18:18 +00:00
Vladimír Čunát
d039c87984
Merge branch 'master' into closure-size
2016-02-14 08:33:51 +01:00
Eelco Dolstra
1f952e0172
nss: 3.21 -> 3.22
2016-02-12 16:10:59 +01:00
Vladimír Čunát
f9f6f41bff
Merge branch 'master' into closure-size
...
TODO: there was more significant refactoring of qtbase and plasma 5.5
on master, and I'm deferring pointing to correct outputs to later.
2015-12-31 09:53:02 +01:00
Eelco Dolstra
86bf3662df
nss: 3.20.1 -> 3.21
2015-12-16 16:18:42 +01:00
Luca Bruno
e289717414
rename moveToOutput and propagatedBuildInputs
2015-12-02 10:05:36 +01:00
Vladimír Čunát
333d69a5f0
Merge staging into closure-size
...
The most complex problems were from dealing with switches reverted in
the meantime (gcc5, gmp6, ncurses6).
It's likely that darwin is (still) broken nontrivially.
2015-11-20 14:32:58 +01:00
William A. Kennington III
e8cbf833ef
nss: 3.20 -> 3.20.1
2015-11-04 00:58:28 -08:00
Vladimír Čunát
ba9b80c7e0
nspr,nss: split into multiple outputs
...
Hopefully most references are OK.
2015-10-13 20:18:44 +02:00
William A. Kennington III
ec18091961
nss: Add platforms
2015-09-18 14:52:52 -07:00