There are three types Mozilla mirrors.
(http://www.mozilla.org/mirroring.html)
* mozilla-current
contains only the current version of Firefox and Thunderbird
* mozilla-release
contains Firefox, Thunderbird, and Sunbird releases
* mozilla-all
complete archive
Define following variables for mozilla master sites:
MASTER_SITE_MOZILLA_ALL = mozilla-all
MASTER_SITE_MOZILLA = mozilla-release
and change some packages to use appropriate variable.
Update contents of MASTER_SITE_MOZILLA with master and primary mirrors
taken from http://www.mozilla.org/mirrors.html and add some sample definitions.
match *_OPT.OBJ so use that for the install target and simplyfy things quite
a bit. This should also fix build problems noted on solaris/x86. Also
dynamically add the libfreebl part to the PLIST. This should make things
more robust as the exact set of libfreebl*.so libs depends on the OS and
hardward platform.
The following bugs have been fixed in NSS 3.11.4.
* Bug 115951: freebl dynamic library is never unloaded by
libsoftoken or libssl. Also tiny one-time leak in freebl's
loader.c.
* Bug 127960: SSL force handshake function should take a timeout.
* Bug 335454: Unable to find library 'libsoftokn3.sl' on HP-UX 64 bit.
* Bug 350200: Implement DHMAC based POP (ProofOfPossession).
* Bug 351482: audit_log_user_message doesn't exist in all
versions of libaudit.so.0. (the "paranoia patch")
* Bug 352041: oom [@ CERT_DecodeDERCrlWithFlags] "extended"
tracked as NULL was dereferenced.
* Bug 353422: Klocwork bugs in nss/lib/crmf.
* Bug 353475: Cannot run cmd tools compiled with VC++ 2005.
* Bug 353572: leak in sftk_OpenCertDB.
* Bug 353608: NSS_RegisterShutdown may fail, and appData argument
to callbacks is always NULL.
* Bug 353749: PowerUpSelf tests update for DSA and ECDSA KAT.
* Bug 353896: Building tip with NSS_ECC_MORE_THAN_SUITE_B causes
crashes in all.sh.
* Bug 353910: memory leak in RNG_RNGInit.
* Bug 354313: STAN_GetCERTCertificateName leaks "instance" struct.
* Bug 354384: vfyserv shutdown failure when client auth requested.
* Bug 354900: Audit modifications, accesses, deletions, and
additions of cryptographic keys.
* Bug 355297: Improve the very first RNG_RandomUpdate call.
* Bug 356073: C_GetTokenInfo should return CKR_CRYPTOKI_NOT_INITIALIZED
if not initialized.
* Bug 356309: CertVerifyLog in CERT_VerifyCertificate terminates
early on expired certs.
* Bug 357197: OCSP response code fails to match CERTIds. (hot fix only)
* Bug 359484: FireFox 2 tries to negotiate ECC cipher suites
using ssl2 client hello. (hot fix only)
* Bug 360818: No RPATH set for signtool and signver.
- when building with gcc, the solaris /usr/ccs/bin/as assembler is still
used in a couple of places but the correct flags aren't set.
- The object directory has a different name when building with gcc instead
of the sun studio compilers.
- There are a couple of libs which are installed that aren't part of the install
for other systems (freebl).
and add a new helper target and script, "show-buildlink3", that outputs
a listing of the buildlink3.mk files included as well as the depth at
which they are included.
For example, "make show-buildlink3" in fonts/Xft2 displays:
zlib
fontconfig
iconv
zlib
freetype2
expat
freetype2
Xrender
renderproto
RECOMMENDED is removed. It becomes ABI_DEPENDS.
BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo.
BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo.
BUILDLINK_DEPENDS does not change.
IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS
which defaults to "yes".
Added to obsolete.mk checking for IGNORE_RECOMMENDED.
I did not manually go through and fix any aesthetic tab/spacing issues.
I have tested the above patch on DragonFly building and packaging
subversion and pkglint and their many dependencies.
I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I
have used IGNORE_RECOMMENDED for a long time). I have been an active user
of IGNORE_RECOMMENDED since it was available.
As suggested, I removed the documentation sentences suggesting bumping for
"security" issues.
As discussed on tech-pkg.
I will commit to revbump, pkglint, pkg_install, createbuildlink separately.
Note that if you use wip, it will fail! I will commit to pkgsrc-wip
later (within day).
makefile issues. There are still some problems on solaris, but this
gets you further. Don't mark as available yet on solaris since it
still doesn't compile.
build and run on other platforms when MAINTAINER knows what magic
Makefile glue is required. This is from maintainer's discussion
on tech-pkg.
Remove patch-af. Use LD_LIBS instead, which the build already knows
about.
Add custom settings for above platforms so they install correctly.
Idea provided by maintainer on tech-pkg. I tweaked it more.
I tested on NetBSD 2.0.2, Linux and DragonFly.
Also remove blank line from end of Makefile.
around at either build-time or at run-time is:
USE_TOOLS+= perl # build-time
USE_TOOLS+= perl:run # run-time
Also remove some places where perl5/buildlink3.mk was being included
by a package Makefile, but all that the package wanted was the Perl
executable.
Network Security Services (NSS) is a set of libraries designed to support
cross-platform development of security-enabled server applications.
Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7,
PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security
standards.
