Commit graph

99 commits

Author SHA1 Message Date
Jan Beich
f9b469ae43 security/nss: update to 3.38
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.38_release_notes
Changes:	https://hg.mozilla.org/projects/nss/shortlog/NSS_3_38_RTM
ABI:		https://abi-laboratory.pro/tracker/timeline/nss/
2018-06-26 00:54:43 +00:00
Jan Beich
13b1398607 security/nss: update to 3.37.3
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.37.3_release_notes
Changes:	https://hg.mozilla.org/projects/nss/shortlog/NSS_3_37_3_RTM
ABI:		https://abi-laboratory.pro/tracker/timeline/nss/
2018-06-06 19:01:51 +00:00
Jan Beich
fa8c963c0e security/nss: update to 3.37.1
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.37.1_release_notes
Changes:	https://hg.mozilla.org/projects/nss/shortlog/NSS_3_37_1_RTM
ABI:		https://abi-laboratory.pro/tracker/timeline/nss/
2018-05-25 14:00:41 +00:00
Jan Beich
ac6736fc71 security/nss: update to 3.37
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.37_release_notes
Changes:	https://hg.mozilla.org/projects/nss/shortlog/NSS_3_37_RTM
ABI:		https://abi-laboratory.pro/tracker/timeline/nss/
2018-05-07 20:31:26 +00:00
Jan Beich
e7b13b6b00 security/nss: update to 3.36.1
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.36.1_release_notes
Changes:	https://hg.mozilla.org/projects/nss/shortlog/NSS_3_36_1_RTM
ABI:		https://abi-laboratory.pro/tracker/timeline/nss/
2018-04-10 00:11:39 +00:00
Jan Beich
9b6544ce6c security/nss: update to 3.36
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.36_release_notes
Changes:	https://hg.mozilla.org/projects/nss/shortlog/NSS_3_36_RTM
ABI:		https://abi-laboratory.pro/tracker/timeline/nss/
MFH:		2018Q1 (required by Firefox 60)
2018-03-06 07:49:21 +00:00
Tijl Coosemans
0959ca1cf1 Fix an error reported by pkg when cert-sync doesn't exist. 2018-02-15 15:21:25 +00:00
Mark Felder
a9d6665f36 security/ca_root_nss: Add post-exec script to automatically sync to mono's
certificate store

PR:		225357
2018-02-13 20:45:38 +00:00
Jan Beich
87ce19696c security/nss: update to 3.35
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.35_release_notes
Changes:	https://hg.mozilla.org/projects/nss/shortlog/NSS_3_35_RTM
ABI:		https://abi-laboratory.pro/tracker/timeline/nss/
MFH:		2018Q1
2018-01-19 18:49:03 +00:00
Jan Beich
210de352cd security/nss: update to 3.34.1
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.34.1_release_notes
Changes:	https://hg.mozilla.org/projects/nss/shortlog/NSS_3_34_1_RTM
ABI:		https://abi-laboratory.pro/tracker/timeline/nss/
MFH:		2017Q4
2017-11-29 17:15:14 +00:00
Jan Beich
02c0d6d1f3 security/nss: update to 3.34
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.34_release_notes
Changes:	https://hg.mozilla.org/projects/nss/shortlog/NSS_3_34_RTM
ABI:		https://abi-laboratory.pro/tracker/timeline/nss/
MFH:		2017Q4
2017-11-14 21:56:56 +00:00
Sunpoet Po-Chuan Hsieh
9972eeb730 Update LICENSE
Approved by:	portmgr (blanket)
2017-09-24 18:50:00 +00:00
Jan Beich
be8b3c9367 security/nss: update to 3.32.1
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.32.1_release_notes
Changes:	https://hg.mozilla.org/projects/nss/shortlog/NSS_3_32_1_RTM
ABI:		https://abi-laboratory.pro/tracker/timeline/nss/
MFH:		2017Q3 (maybe security, required by firefox-56.0)
2017-09-12 09:12:11 +00:00
Jan Beich
6fd45bd3be security/nss: update to 3.32
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.32_release_notes
Changes:	https://hg.mozilla.org/projects/nss/shortlog/NSS_3_32_RTM
ABI:		https://abi-laboratory.pro/tracker/timeline/nss/
MFH:		2017Q3 (required by firefox-56.0 scheduled on 2017-09-26)
2017-07-28 22:23:24 +00:00
Jan Beich
2874de1620 security/nss: update to 3.31
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.31_release_notes
Changes:	https://hg.mozilla.org/projects/nss/shortlog/NSS_3_31_RTM
ABI:		https://abi-laboratory.pro/tracker/timeline/nss/
MFH:		2017Q2
2017-06-11 18:20:07 +00:00
Jan Beich
e3dc70252c security/nss: update to 3.30.2
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.30.2_release_notes
Changes:	https://hg.mozilla.org/projects/nss/shortlog/NSS_3_30_2_RTM
MFH:		2017Q2
2017-04-23 16:11:22 +00:00
Jan Beich
6eb52cec18 security/nss: update to 3.30.1
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.30.1_release_notes
Changes:	https://hg.mozilla.org/projects/nss/shortlog/NSS_3_30_1_RTM
MFH:		2017Q2
2017-04-10 16:06:57 +00:00
Jan Beich
d9d4e83882 security/nss: update to 3.30
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.30_release_notes
Changes:	https://hg.mozilla.org/projects/nss/shortlog/NSS_3_30_RTM
MFH:		2017Q1
2017-03-16 17:23:55 +00:00
Jan Beich
2948a83544 security/nss: update to 3.29.3
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.29.2_release_notes
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.29.3_release_notes
Changes:	https://hg.mozilla.org/projects/nss/shortlog/NSS_3_29_3_RTM
MFH:		2017Q1
2017-03-07 02:31:49 +00:00
Jan Beich
cf389e1b22 security/nss: update to 3.29.1
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.29.1_release_notes
Changes:	https://hg.mozilla.org/projects/nss/shortlog/NSS_3_29_1_RTM
MFH:		2017Q1
2017-02-21 02:02:17 +00:00
Jan Beich
09c5ed08f4 security/nss: update to 3.29
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.29_release_notes
Changes:	https://hg.mozilla.org/projects/nss/shortlog/NSS_3_29_RTM
MFH:		2017Q1
2017-02-15 09:48:00 +00:00
Jan Beich
0ed0359e45 security/nss: update to 3.28.1
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.28.1_release_notes
MFH:		2017Q1
2017-01-08 05:39:54 +00:00
Jan Beich
ca3bf2573c security/nss: update to 3.28
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.28_release_notes
MFH:		2016Q4
2016-12-22 15:30:16 +00:00
Mathieu Arnold
eabbfd75e3 ${RM} already has -f.
PR:		213570
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight
2016-10-21 12:51:40 +00:00
Jan Beich
6dc8464d09 security/nss: update to 3.27.1 and define license
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.27.1_release_notes
PR:		213312
Submitted by:	Vladimir Krstulja <vlad-fbsd@acheronmedia.com>
MFH:		2016Q4
2016-10-09 10:45:33 +00:00
John Marino
386a520968 security/ca_root_nss: adjust pkg-plist to address leftover directory
The port creates /etc/ssl directory with the default option, but until now,
did not remove it upon deinstallation.  While technically this requires
a revbump, rebuilding this port to fix a cleanup step would cause a
tremendous amount of fallout and it's not worth the pain IMO.

PR:		213121
Approved by:	feld (ports-secteam)
2016-10-09 01:09:57 +00:00
Jan Beich
fabce29e33 security/nss: update to 3.27
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.27_release_notes
2016-09-28 08:23:39 +00:00
Mathieu Arnold
f09251fd38 This uses OpenSSL, use openssl from ports if available.
Sponsored by:	Absolight
2016-09-23 14:59:28 +00:00
Jan Beich
2647accc43 security/nss: update to 3.26
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.26_release_notes
MFH:		2016Q3
2016-08-06 14:47:43 +00:00
Mathieu Arnold
f899c758a6 When there is a do-install target, do not use a post-install target, do
everything at once.  Sometime, rename post-install into a options helper
target.

I did not fix ports that were such a mess that I could not figure out
what they really wanted to do.  I also did not change ports that had
some version of an auto-plist code in post-install, for the same reason.

With hat:	portmgr
Sponsored by:	Absolight
2016-07-19 11:04:13 +00:00
Jan Beich
bb2dc31bc5 security/nss: update to 3.25
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.25_release_notes
2016-06-24 15:14:56 +00:00
Jan Beich
f424fb7bf7 security/nss: update to 3.22.2
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.22.2_release_notes
Changes:	https://hg.mozilla.org/projects/nss/rev/ec7aee1a4c24
MFH:		2016Q1 (maybe security)
2016-03-02 22:49:20 +00:00
Jan Beich
7e6d923605 security/nss: update to 3.22
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.22_release_notes
PR:		207030
Submitted by:	Christoph Moench-Tegeder <cmt@burggraben.net>
2016-02-09 00:09:37 +00:00
Jan Beich
66a9514680 security/nss: update to 3.21
Temporarily disable gtests as they require C++0x support and install a
library that may have conflicting API with devel/googletest.

Changes:	https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21_release_notes
2016-01-08 00:45:54 +00:00
Martin Wilke
79a0af4672 - Pass maintainership to ports-secteam, with a explicit approval for gecko@
Differential Revision:	D2640
2016-01-02 15:15:06 +00:00
Jan Beich
a356bf5bac gecko: catch up with 2015-11-03 release train
- Update NSPR to 4.10.10 [1]
- Update NSS to 3.20.1 [2]
- Update Firefox ESR and libxul to 38.4.0
- Update Firefox to 42.0 [2]
- Update SeaMonkey to 2.39

Changes:	http://mozilla.6506.n7.nabble.com/ANNOUNCE-NSPR-4-10-10-Release-td346822.html
Changes:	https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.20.1_release_notes
Changes:	https://www.mozilla.org/en-US/firefox/42.0/releasenotes/
Changes:	http://www.seamonkey-project.org/news#2015-11-08
PR:		204277 [1], 204332 [2], 203099
Submitted by:	swills, Christoph Moench-Tegeder
MFH:		2015Q4
Security:	9d04936c-75f1-4a2c-9ade-4c1708be5df9
2015-11-20 00:38:40 +00:00
Jan Beich
952acc52bc security/{,ca_root_}nss: update to 3.20
No CA root changes, just chasing NSS version.

Changes:	https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.20_release_notes
2015-08-20 13:13:51 +00:00
Jan Beich
8e29d28afc security/{,ca_root_}nss: update to 3.19.3
Changes:	https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.3_release_notes
MFH:		2015Q3
2015-08-14 12:35:26 +00:00
Jan Beich
ef0a0c91f1 - Update NSS and ca_root_nss to 3.19.2
- Update Firefox and gmp-api to 39.0
- Update Firefox ESR and libxul to 38.1.0

Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.19.2_release_notes
Changes:	https://www.mozilla.org/firefox/39.0/releasenotes/
Changes:	https://www.mozilla.org/firefox/38.1.0/releasenotes/
MFH:		2015Q3
Security:	https://vuxml.freebsd.org/freebsd/44d9daee-940c-4179-86bb-6e3ffd617869.html
2015-07-16 06:05:59 +00:00
Kubilay Kocak
71ee70bfe9 security/ca_root_nss: Enable certificate verification (for Base OpenSSL)
Enable the ETCSYMLINK option so that SSL certificate verification is
enabled by default for OpenSSL in base.

This change is the third in a set of changes [1][2] that improves the
default configuration and behaviour of client software relying on
OpenSSL for SSL/TLS and certificate verification.

A symlink is installed which points to the root certificate bundle in
the location that OpenSSL in base looks for them, as configured at build
time [2].

This allows any and all software utilising SSL_CTX_load_verify_locations
function to verify SSL certificates by default after installation of
this package.

[1] https://svnweb.freebsd.org/changeset/ports/372629
[2] https://svnweb.freebsd.org/changeset/ports/378720

PR:		189811 196357
Requested by:	many
Submitted by:	dreamcat4 gmail com
Approved by:	maintainer timeout (>1 year)
2015-06-06 07:41:51 +00:00
Jan Beich
590b9cdbb8 - Update NSS and ca_root_nss to 3.19.1
- Update Firefox to 38.0.5

Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.19.1_release_notes
Changes:	https://www.mozilla.org/firefox/38.0.5/releasenotes/
MFH:		2015Q2
2015-06-01 14:21:53 +00:00
Benjamin Kaduk
23617c84e7 Fix spelling of "certification authority"
Approved by:	portmgr (bapt), bapt (ports committer)
2015-05-20 18:08:35 +00:00
Jan Beich
83847c65aa - Update NSS and ca_root_nss to 3.19
- Update Firefox to 38.0
- Update Firefox ESR and libxul to 31.7.0
- Update Thunderbird to 31.7.0
- Update Enigmail to 1.8.2

Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.19_release_notes
Changes:	https://www.mozilla.org/firefox/38.0/releasenotes/
Changes:	https://www.mozilla.org/firefox/31.7.0/releasenotes/
Changes:	http://sourceforge.net/p/enigmail/bugs/search/?q=status%3Afixed+%26%26+_fixed%3A1.8.1
MFH:		2015Q2
Security:	https://vuxml.freebsd.org/freebsd/d9b43004-f5fd-4807-b1d7-dbf66455b244.html
2015-05-12 18:06:36 +00:00
Jan Beich
e79612feb9 - Update NSS to 3.18.1
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.18.1_release_notes
MFH:		2015Q2
2015-04-24 14:31:05 +00:00
Jan Beich
cbca8c3691 - Update OpenH264 to 1.4.0
- Update NSS and ca_root_nss to 3.18
- Update Firefox to 36.0.4
- Update Firefox ESR and libxul to 31.5.3
- Update SeaMonkey to 2.33.1
- Update Enigmail to 1.8

Changes:	https://github.com/cisco/openh264/releases/tag/v1.4.0
Changes:	https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.18_release_notes
Changes:	https://www.mozilla.org/firefox/36.0.4/releasenotes/
Changes:	https://www.mozilla.org/firefox/31.5.3/releasenotes/
Changes:	http://www.seamonkey-project.org/releases/seamonkey2.33/
Changes:	https://www.enigmail.net/download/changelog.php#enig1.8
MFH:		2015Q1
X-MFH-With:	r380090
Security:	https://vuxml.freebsd.org/freebsd/76ff65f4-17ca-4d3f-864a-a3d6026194fb.html
2015-03-22 08:00:19 +00:00
Kubilay Kocak
df684039a8 security/ca_root_nss: Fix SSL verification for ports OpenSSL consumers
Since 2.7.9, Python verifies SSL certificates by default. Currently,
even with security/ca_root_nss installed, Python fails certificate
verification.

Upon investigation, Python uses OpenSSL's standard
SSL_CTX_load_verify_locations function to load a list of CA root
certificates.

Support was added to ca_root_nss for "out of the box" certificate
verification for a number of base utilities in r372629 [1], but this
did not include support for software that uses OpenSSL's
SSL_CTX_load_verify_locations function.

[1] https://svnweb.freebsd.org/changeset/ports/372629

OpenSSL defaults (at compile time) to the following paths and filenames
for certificate and CAFile lookup:

Base:
  SSL_CERT_DIR=/etc/ssl/certs
  SSL_CERT_FILE/etc/ssl/cert.pem

Ports:
  SSL_CERT_DIR=/usr/local/openssl/certs
  SSL_CERT_FILE=/usr/local/openssl/cert.pem

This change installs a symlink which points to the root certificate
bundle in the location that OpenSSL from ports looks for them.

This allows any and all software utilising SSL_CTX_load_verify_locations
function to verify SSL certificates by default after installation of
this package.

Additionally, display a pkg-message to the user about the lack of
warranty associated with these certificates.

Note: This is *NOT* related to solving for SSL certificate verification
for OpenSSL in Base, which is covered in bug 189811.

While I'm here:

- Add LICENSE
- Use options helpers and OPTIONS_SUB
- Fix typo in !!! message !!!

PR: 196431
Submitted by:	koobs
Reviewed by:	jbeich
Approved by:	maintainer timeout (1 month)
2015-02-09 09:44:28 +00:00
Jan Beich
8b2b9d3a6b - Update NSPR to 4.10.8
- Update NSS to 3.17.2
- Update Firefox to 35.0.1

Changes:	http://mozilla.6506.n7.nabble.com/ANNOUNCE-NSPR-4-10-8-Release-td332365.html
Changes:	https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.17.4_release_notes
Changes:	https://www.mozilla.org/en-US/firefox/35.0.1/releasenotes/
Differential Revision:	https://reviews.freebsd.org/D1736
Approved by:	bapt (mentor)
2015-02-01 16:46:24 +00:00
Baptiste Daroussin
90e861bf7a Remove useless @cwd 2014-12-08 21:30:23 +00:00
Beat Gaetzi
0ccec1792b - Update Thunderbird to 31.3.0
- Update gmp-api to 35.0
- Update openh264 to 1.2
- Update NSS to 3.17.3
- Update Firefox to 34.0.5
- Update Firefox ESR 31.3.0
- Update libxul to 31.3.0
- Improve CONFIGURE_TARGET handling
- Always build using client.mk
- Switch to clang by default on systems without libc++
  (/stable/8 and /stable/9)
- Drop lang/python2 dependency, only lang/python27 is required
  to build
- Use DuckDuckGo searchplugin from upstream (has suggestions
  and purposes)
- Backport a few about:memory fixes
- Backport Web Notifications libnotify integration
- Add GTK3 option for www/firefox. Adwaita is a bit broken
  since Gtk 3.14, see:
  https://bugzilla.mozilla.org/show_bug.cgi?id=1073117

PR:		195559
Submitted by:	Jan Beich
MFH:		2014Q4
Security:	http://vuxml.org/freebsd/7ae61870-9dd2-4884-a2f2-f19bb5784d09.html
2014-12-03 14:55:25 +00:00
Baptiste Daroussin
9b3bbebd20 Link in the right place and fix plist 2014-11-16 10:15:20 +00:00