kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/devel/nss/PLIST

139 lines
3.1 KiB
Text
Raw Normal View History

Update to 3.36 * Require devel/nspr-4.19 Changelog: The NSS team has released Network Security Services (NSS) 3.36, which is a minor release. Summary of the major changes included in this release: - Replaced existing vectorized ChaCha20 code with verified HACL* implementation. - Experimental APIs for TLS session cache handling.
2018-03-17 02:07:15 +01:00
@comment $NetBSD: PLIST,v 1.24 2018/03/17 01:07:15 ryoon Exp $
Bump PKGREVISION. Install commandline utilities
2016-11-29 13:24:10 +01:00
bin/certutil
bin/cmsutil
bin/crlutil
bin/derdump
bin/makepqg
bin/mangle
bin/modutil
Add nss-config script to match most Linux distributions. Create nss.pc file earlier, not during installation. Bump PKGREVISION.
2016-05-20 13:53:18 +02:00
bin/nss-config
Bump PKGREVISION. Install commandline utilities
2016-11-29 13:24:10 +01:00
bin/ocspclnt
bin/oidcalc
bin/p7content
bin/p7env
bin/p7sign
bin/p7verify
bin/pk12util
bin/rsaperf
bin/shlibsign
bin/signtool
bin/signver
bin/ssltap
bin/strsclnt
bin/symkeyutil
bin/vfychain
bin/vfyserv
Initial import of devel/nss from pkgsrc-wip, provided by matthewluckie: Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards.
2005-02-01 22:51:12 +01:00
include/nss/dbm/mcom_db.h
include/nss/dbm/ncompat.h
include/nss/dbm/winfile.h
include/nss/nss/base64.h
include/nss/nss/blapit.h
include/nss/nss/cert.h
include/nss/nss/certdb.h
include/nss/nss/certt.h
include/nss/nss/ciferfam.h
include/nss/nss/cmmf.h
include/nss/nss/cmmft.h
include/nss/nss/cms.h
include/nss/nss/cmsreclist.h
include/nss/nss/cmst.h
include/nss/nss/crmf.h
include/nss/nss/crmft.h
include/nss/nss/cryptohi.h
include/nss/nss/cryptoht.h
Update to 3.28.1 * Bump nspr requirement Changelog: 3.28.1: The NSS team has released Network Security Services (NSS) 3.28.1, which is a patch release. Below is a summary of the changes. Please refer to the full release notes for additional details, including the SHA256 fingerprints of the changed CA certificates. No new functionality is introduced in this release. This is a patch release to update the list of root CA certificates and address a minor TLS compatibility issue that some applications experienced with NSS 3.28. Notable Changes: * The following CA certificates were Removed - CN = Buypass Class 2 CA 1 - CN = Root CA Generalitat Valenciana - OU = RSA Security 2048 V3 * The following CA certificates were Added - OU = AC RAIZ FNMT-RCM - CN = Amazon Root CA 1 - CN = Amazon Root CA 2 - CN = Amazon Root CA 3 - CN = Amazon Root CA 4 - CN = LuxTrust Global Root 2 - CN = Symantec Class 1 Public Primary Certification Authority - G4 - CN = Symantec Class 1 Public Primary Certification Authority - G6 - CN = Symantec Class 2 Public Primary Certification Authority - G4 - CN = Symantec Class 2 Public Primary Certification Authority - G6 * The version number of the updated root CA list has been set to 2.11 * A misleading assertion/alert has been removed when NSS tries to flush data   to the peer but the connection was already reset. 3.28: The NSS team has released Network Security Services (NSS) 3.28, which is a minor release. Below is a summary of the changes. Please refer to the full release notes for additional details: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.28_release_notes Request to test and prepare for TLS 1.3 (draft): ================================================ To prepare for a change of default build options, which is planned for the future NSS 3.29 release, we'd like to encourage all users of NSS 3.28 to override the standard NSS build configuration to enable support for (draft ) TLS 1.3 by defining NSS_ENABLE_TLS_1_3=1 at build time. We'd like to ask you to please give feedback to the NSS developers for any compatibility issues that you might encounter in your tests. For providing feedback, you may send a message to this mailing list, see:   https://lists.mozilla.org/listinfo/dev-tech-crypto or please report a bug here:   https://bugzilla.mozilla.org/enter_bug.cgi?product=NSS New functionality: ================== * NSS includes support for TLS 1.3 draft -18. This includes a number    of improvements to TLS 1.3:   - The signed certificate timestamp, used in certificate transparency,      is supported in TLS 1.3.   - Key exporters for TLS 1.3 are supported. This includes the early key     exporter, which can be used if 0-RTT is enabled. Note that there is a     difference between TLS 1.3 and key exporters in older versions of TLS.     TLS 1.3 does not distinguish between an empty context and no context.   - The TLS 1.3 (draft) protocol can be enabled, by defining     NSS_ENABLE_TLS_1_3=1 when building NSS. * NSS includes support for the X25519 key exchange algorithm, which is   supported and enabled by default in all versions of TLS. New Functions: ============== * SSL_ExportEarlyKeyingMaterial * SSL_SendAdditionalKeyShares * SSL_SignatureSchemePrefSet * SSL_SignatureSchemePrefGet Notable Changes: ================ * NSS can no longer be compiled with support for additional elliptic curves.   This was previously possible by replacing certain NSS source files. * NSS will now detect the presence of tokens that support additional   elliptic curves and enable those curves for use in TLS.   Note that this detection has a one-off performance cost, which can be   avoided by using the SSL_NamedGroupConfig function to limit supported   groups to those that NSS provides. * PKCS#11 bypass for TLS is no longer supported and has been removed. * Support for "export" grade SSL/TLS cipher suites has been removed. * NSS now uses the signature schemes definition in TLS 1.3.   This also affects TLS 1.2. NSS will now only generate signatures with the   combinations of hash and signature scheme that are defined in TLS 1.3,   even when negotiating TLS 1.2.   - This means that SHA-256 will only be used with P-256 ECDSA certificates,     SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.     SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward     compatibility reasons.   - New functions to configure signature schemes are provided:     SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.     The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are     now deprecated.   - NSS will now no longer assume that default signature schemes are      supported by a peer if there was no commonly supported signature scheme. * NSS will now check if RSA-PSS signing is supported by the token that holds   the private key prior to using it for TLS. * The certificate validation code contains checks to no longer trust   certificates that are issued by old WoSign and StartCom CAs after    October 21, 2016. This is equivalent to the behavior that Mozilla will   release with Firefox 51.
2017-01-20 16:01:23 +01:00
include/nss/nss/eccutil.h
Initial import of devel/nss from pkgsrc-wip, provided by matthewluckie: Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards.
2005-02-01 22:51:12 +01:00
include/nss/nss/ecl-exp.h
include/nss/nss/hasht.h
include/nss/nss/jar-ds.h
include/nss/nss/jar.h
include/nss/nss/jarfile.h
include/nss/nss/key.h
include/nss/nss/keyhi.h
include/nss/nss/keyt.h
include/nss/nss/keythi.h
Update to 3.24 * Require nspr 4.12 or later, from he@. Thank you. Changelog: The NSS team has released Network Security Services (NSS) 3.24, which is a minor release. Below is a short summary of the changes. Please refer to the full release notes for additional details. New functionality: * NSS softoken has been updated with the latest NIST guidance (as of 2015) * NSS softoken has also been updated to allow NSS to run in FIPS level-1 (no password). * SSL_ConfigServerCert function has been added for configuring SSL/TLS server sockets with a certificate and private key. This method should be used in preference to SSL_ConfigSecureServer, SSL_ConfigSecureServerWithCertChain, SSL_SetStapledOCSPResponses, and SSL_SetSignedCertTimestamps. * Added PORTCheapArena for temporary arenas allocated on the stack. New Functions: * SSL_ConfigServerCert - Configures an SSL/TLS socket with a certificate, private key and other information. * PORT_InitCheapArena - This initializes an arena that was created on the stack. See PORTCheapArenaPool. * PORT_DestroyCheapArena - This destroys an arena that was created on the stack. See PORTCheapArenaPool. New Types * SSLExtraServerCertData - This struct is optionally passed as an argument to SSL_ConfigServerCert. It contains supplementary information about a certificate, such as the intended type of the certificate, stapled OCSP responses, or signed certificate timestamps (used for certificate transparency). * PORTCheapArenaPool - A stack-allocated arena pool, to be used for temporary arena allocations. New Macros * CKM_TLS12_MAC * SEC_OID_TLS_ECDHE_PSK - This OID is used to govern use of the TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256 cipher suite, which is only used for session resumption in TLS 1.3. Notable Changes: * The following functions have been deprecated (applications should use the new SSL_ConfigServerCert function instead): * SSL_SetStapledOCSPResponses * SSL_SetSignedCertTimestamps * SSL_ConfigSecureServer * SSL_ConfigSecureServerWithCertChain * Function NSS_FindCertKEAType is now deprecated, as it reports a misleading value for certificates that might be used for signing rather than key exchange. * SSLAuthType has been updated to define a larger number of authentication key types. * The member attribute authAlgorithm of type SSLCipherSuiteInfo has been deprecated. Instead, applications should use the newly added attribute authType. * ssl_auth_rsa has been renamed to ssl_auth_rsa_decrypt. * On Linux platforms that define FREEBL_LOWHASH, a shared library has been added: libfreeblpriv3 * Most code related to the SSL v2 has been removed, including the ability to actively send a SSL v2 compatible client hello. However, the server side implementation of the SSL/TLS protocol continues to support processing of received v2 compatible client hello messages. * NSS supports a mechanism to log SSL/TLS key material to a logfile if the environment variable named SSLKEYLOGFILE is set. NSS has been changed to disable this functionality in optimized builds by default. In order to enable the functionality in optimized builds, the symbol NSS_ALLOW_SSLKEYLOGFILE must be defined when building NSS. * NSS has been updated to be protected against the Cachebleed attack. * Support for DTLS compression has been disabled. * Support for TLS 1.3 has been improved. This includes support for DTLS 1.3. Note that TLS 1.3 support is experimental and is not suitable for production use.
2016-05-25 15:17:13 +02:00
include/nss/nss/lowkeyi.h
include/nss/nss/lowkeyti.h
Initial import of devel/nss from pkgsrc-wip, provided by matthewluckie: Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards.
2005-02-01 22:51:12 +01:00
include/nss/nss/nss.h
include/nss/nss/nssb64.h
include/nss/nss/nssb64t.h
include/nss/nss/nssbase.h
include/nss/nss/nssbaset.h
include/nss/nss/nssck.api
include/nss/nss/nssckbi.h
include/nss/nss/nssckepv.h
include/nss/nss/nssckft.h
include/nss/nss/nssckfw.h
include/nss/nss/nssckfwc.h
include/nss/nss/nssckfwt.h
include/nss/nss/nssckg.h
include/nss/nss/nssckmdt.h
include/nss/nss/nssckt.h
include/nss/nss/nssilckt.h
include/nss/nss/nssilock.h
include/nss/nss/nsslocks.h
include/nss/nss/nssrwlk.h
include/nss/nss/nssrwlkt.h
- update to 3.12.4.5 - reach over to xulrunner, track the stable gecko release - use external sqlite3 - cleanup - take maintainership This is the second part of PR pkg/42277.
2010-01-16 15:41:25 +01:00
include/nss/nss/nssutil.h
Initial import of devel/nss from pkgsrc-wip, provided by matthewluckie: Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards.
2005-02-01 22:51:12 +01:00
include/nss/nss/ocsp.h
include/nss/nss/ocspt.h
include/nss/nss/p12.h
include/nss/nss/p12plcy.h
include/nss/nss/p12t.h
include/nss/nss/pk11func.h
include/nss/nss/pk11pqg.h
Updated nss to 3.11. No ChangeLog available, but some libraries have changed: - removed libfort - added libfreebl3 - removed libswft
2006-07-12 18:30:03 +02:00
include/nss/nss/pk11priv.h
include/nss/nss/pk11pub.h
Initial import of devel/nss from pkgsrc-wip, provided by matthewluckie: Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards.
2005-02-01 22:51:12 +01:00
include/nss/nss/pk11sdr.h
include/nss/nss/pkcs11.h
include/nss/nss/pkcs11f.h
include/nss/nss/pkcs11n.h
include/nss/nss/pkcs11p.h
include/nss/nss/pkcs11t.h
include/nss/nss/pkcs11u.h
Update to 3.31 Changelog: New functionality: ================== * Allow certificates to be specified by RFC7512 PKCS#11 URIs. * Allow querying a certificate object for its temporary or permanent storage   status in a thread safe way. New Functions: ============== * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a   certificate in a thread safe way. * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a   certificate in a thread safe way. * PK11_FindCertFromURI - find a certificate identified by the given URI. * PK11_FindCertsFromURI - find a list of certificates identified by the given   URI. * PK11_GetModuleURI - retrieve the URI of the given module. * PK11_GetTokenURI - retrieve the URI of a token based on the given slot   information. * PK11URI_CreateURI - create a new PK11URI object from a set of attributes. * PK11URI_DestroyURI - destroy a PK11URI object. * PK11URI_FormatURI - format a PK11URI object to a string. * PK11URI_GetPathAttribute - retrieve a path attribute with the given name. * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name. * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object. New Macros: =========== * Several new macros that start with PK11URI_PATTR_ for path attributes defined   in RFC7512. * Several new macros that start with PK11URI_QATTR_ for query attributes defined   in RFC7512. Notable Changes: ================ * The APIs that set a TLS version range have been changed to trim the requested   range to the overlap with a systemwide crypto policy, if configured.   SSL_VersionRangeGetSupported can be used to query the overlap between the   library's supported range of TLS versions and the systemwide policy. * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a   failure if the requested version range wasn't fully allowed by the systemwide   crypto policy. They have been changed to return success, if at least one TLS   version overlaps between the requested range and the systemwide policy. An   application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to   query the TLS version range that was effectively activated. * Corrected the encoding of Domain Name Constraints extensions created by   certutil. * NSS supports a clean seeding mechanism for *NIX systems now using only   /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile   time. * CERT_AsciiToName can handle OIDs in dotted decimal form now. The HG tag is NSS_3_31_RTM. NSS 3.31 requires NSPR 4.15 or newer.
2017-06-14 13:18:55 +02:00
include/nss/nss/pkcs11uri.h
Initial import of devel/nss from pkgsrc-wip, provided by matthewluckie: Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards.
2005-02-01 22:51:12 +01:00
include/nss/nss/pkcs12.h
include/nss/nss/pkcs12t.h
security update fixing: - Incorrect DigestInfo validation in NSS (CVE-2014-1568) - RSA signature verification vulnerabilities in parsing of DigestInfo (see https://www.mozilla.org/security/announce/2014/mfsa2014-73.html)
2014-09-26 05:25:22 +02:00
include/nss/nss/pkcs1sig.h
Initial import of devel/nss from pkgsrc-wip, provided by matthewluckie: Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards.
2005-02-01 22:51:12 +01:00
include/nss/nss/pkcs7t.h
include/nss/nss/portreg.h
include/nss/nss/preenc.h
include/nss/nss/secasn1.h
include/nss/nss/secasn1t.h
include/nss/nss/seccomon.h
include/nss/nss/secder.h
include/nss/nss/secdert.h
include/nss/nss/secdig.h
include/nss/nss/secdigt.h
include/nss/nss/secerr.h
include/nss/nss/sechash.h
include/nss/nss/secitem.h
include/nss/nss/secmime.h
include/nss/nss/secmod.h
include/nss/nss/secmodt.h
include/nss/nss/secoid.h
include/nss/nss/secoidt.h
include/nss/nss/secpkcs5.h
include/nss/nss/secpkcs7.h
include/nss/nss/secport.h
include/nss/nss/shsign.h
include/nss/nss/smime.h
include/nss/nss/ssl.h
include/nss/nss/sslerr.h
Update to 3.33 Changelog: Notable Changes in NSS 3.33 TLS compression is no longer supported. API calls that attempt to enable compression are accepted without failure. However, TLS compression will remain disabled. This version of NSS uses a formally verified implementation of Curve25519 on 64-bit systems. The compile time flag DISABLE_ECC has been removed. When NSS is compiled without NSS_FORCE_FIPS=1 startup checks are not performed anymore. Various minor improvements and correctness fixes.
2017-09-26 12:59:39 +02:00
include/nss/nss/sslexp.h
Initial import of devel/nss from pkgsrc-wip, provided by matthewluckie: Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards.
2005-02-01 22:51:12 +01:00
include/nss/nss/sslproto.h
include/nss/nss/sslt.h
Update to 3.14.0 Changelog: The NSS team has released Network Security Services (NSS) 3.14, which is a minor release with the following new features: Support for TLS 1.1 (RFC 4346) Experimental support for DTLS 1.0 (RFC 4347) and DTLS-SRTP (RFC 5764) Support for AES-CTR, AES-CTS, and AES-GCM Support for Keying Material Exporters for TLS (RFC 5705) In addition to the above new features, the following major changes have been introduced: Support for certificate signatures using the MD5 hash algorithm is now disabled by default. The NSS license has changed to MPL 2.0. Previous releases were released under a MPL 1.1/GPL 2.0/LGPL 2.1 tri-license. For more information about MPL 2.0, please see http://www.mozilla.org/MPL/2.0/FAQ.html. For an additional explantation on GPL/LGPL compatibility, see security/nss/COPYING in the source code. Export and DES cipher suites are disabled by default. Non-ECC AES and Triple DES cipher suites are enabled by default.
2012-12-15 10:48:00 +01:00
include/nss/nss/utilmodt.h
include/nss/nss/utilpars.h
include/nss/nss/utilparst.h
- update to 3.12.4.5 - reach over to xulrunner, track the stable gecko release - use external sqlite3 - cleanup - take maintainership This is the second part of PR pkg/42277.
2010-01-16 15:41:25 +01:00
include/nss/nss/utilrename.h
Update xulrunner 10.0.2 and corresponding nspr and nss. * Improve sparc64 support. * Use external libraries (for example cairo, libvpx etc.) Thank you, martin@ Changelog: * Fix security bugs * Other improvements and bugfixes
2012-03-06 13:34:08 +01:00
lib/nss/libcrmf.a
Update to 3.31 Changelog: New functionality: ================== * Allow certificates to be specified by RFC7512 PKCS#11 URIs. * Allow querying a certificate object for its temporary or permanent storage   status in a thread safe way. New Functions: ============== * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a   certificate in a thread safe way. * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a   certificate in a thread safe way. * PK11_FindCertFromURI - find a certificate identified by the given URI. * PK11_FindCertsFromURI - find a list of certificates identified by the given   URI. * PK11_GetModuleURI - retrieve the URI of the given module. * PK11_GetTokenURI - retrieve the URI of a token based on the given slot   information. * PK11URI_CreateURI - create a new PK11URI object from a set of attributes. * PK11URI_DestroyURI - destroy a PK11URI object. * PK11URI_FormatURI - format a PK11URI object to a string. * PK11URI_GetPathAttribute - retrieve a path attribute with the given name. * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name. * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object. New Macros: =========== * Several new macros that start with PK11URI_PATTR_ for path attributes defined   in RFC7512. * Several new macros that start with PK11URI_QATTR_ for query attributes defined   in RFC7512. Notable Changes: ================ * The APIs that set a TLS version range have been changed to trim the requested   range to the overlap with a systemwide crypto policy, if configured.   SSL_VersionRangeGetSupported can be used to query the overlap between the   library's supported range of TLS versions and the systemwide policy. * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a   failure if the requested version range wasn't fully allowed by the systemwide   crypto policy. They have been changed to return success, if at least one TLS   version overlaps between the requested range and the systemwide policy. An   application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to   query the TLS version range that was effectively activated. * Corrected the encoding of Domain Name Constraints extensions created by   certutil. * NSS supports a clean seeding mechanism for *NIX systems now using only   /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile   time. * CERT_AsciiToName can handle OIDs in dotted decimal form now. The HG tag is NSS_3_31_RTM. NSS 3.31 requires NSPR 4.15 or newer.
2017-06-14 13:18:55 +02:00
lib/nss/libfreebl3.so
lib/nss/libnss3.so
lib/nss/libnssckbi.so
lib/nss/libnssdbm3.so
lib/nss/libnssutil3.so
lib/nss/libsmime3.so
lib/nss/libsoftokn3.so
lib/nss/libssl3.so
Make nss and nspr install pkg-config files. Bump their PKGREVISION.
2005-10-16 13:15:10 +02:00
lib/pkgconfig/nss.pc
Reference in a new issue Copy permalink