nss: added some patches from Debian.
This commit is contained in:
parent
355699f4b4
commit
e1764bf6df
6 changed files with 2851 additions and 1 deletions
|
@ -5,6 +5,8 @@ long_desc="${long_desc}
|
|||
|
||||
This package contains files for development, headers, static libs, etc."
|
||||
|
||||
revision=1
|
||||
|
||||
Add_dependency run zlib-devel
|
||||
Add_dependency run nspr-devel
|
||||
Add_dependency run sqlite-devel
|
||||
|
|
1148
srcpkgs/nss/patches/add_spi+cacert_ca_certs.patch
Normal file
1148
srcpkgs/nss/patches/add_spi+cacert_ca_certs.patch
Normal file
File diff suppressed because it is too large
Load diff
1675
srcpkgs/nss/patches/distrust-diginotar.patch
Normal file
1675
srcpkgs/nss/patches/distrust-diginotar.patch
Normal file
File diff suppressed because it is too large
Load diff
3
srcpkgs/nss/patches/series
Normal file
3
srcpkgs/nss/patches/series
Normal file
|
@ -0,0 +1,3 @@
|
|||
distrust-diginotar.patch
|
||||
add_spi+cacert_ca_certs.patch
|
||||
ssl-renegotiate-transitional.patch
|
21
srcpkgs/nss/patches/ssl-renegotiate-transitional.patch
Normal file
21
srcpkgs/nss/patches/ssl-renegotiate-transitional.patch
Normal file
|
@ -0,0 +1,21 @@
|
|||
Enable transitional scheme for ssl renegotiation:
|
||||
|
||||
(from mozilla/security/nss/lib/ssl/ssl.h)
|
||||
Disallow unsafe renegotiation in server sockets only, but allow clients
|
||||
to continue to renegotiate with vulnerable servers.
|
||||
This value should only be used during the transition period when few
|
||||
servers have been upgraded.
|
||||
|
||||
diff --git a/mozilla/security/nss/lib/ssl/sslsock.c b/mozilla/security/nss/lib/ssl/sslsock.c
|
||||
index f1d1921..c074360 100644
|
||||
--- mozilla/security/nss/lib/ssl/sslsock.c
|
||||
+++ mozilla/security/nss/lib/ssl/sslsock.c
|
||||
@@ -181,7 +181,7 @@ static sslOptions ssl_defaults = {
|
||||
PR_FALSE, /* noLocks */
|
||||
PR_FALSE, /* enableSessionTickets */
|
||||
PR_FALSE, /* enableDeflate */
|
||||
- 2, /* enableRenegotiation (default: requires extension) */
|
||||
+ 3, /* enableRenegotiation (default: transitional) */
|
||||
PR_FALSE, /* requireSafeNegotiation */
|
||||
};
|
||||
|
|
@ -1,6 +1,7 @@
|
|||
# Template file for 'nss'
|
||||
pkgname=nss
|
||||
version=3.12.11
|
||||
revision=1
|
||||
_distver=$(echo $version|sed -e "s|\.|_|g")
|
||||
distfiles="${MOZILLA_SITE}/security/nss/releases/NSS_${_distver}_RTM/src/${pkgname}-${version}.tar.gz"
|
||||
build_style=custom-install
|
||||
|
@ -64,7 +65,7 @@ do_install()
|
|||
echo "Version: ${version}"; \
|
||||
echo "Requires: nspr >= ${version}"; \
|
||||
echo "Cflags: -I/usr/include/nss"; \
|
||||
echo "Libs: -lnss3 -lsmime3 -lssl3 -lnssutil3 -lsoftokn3 -lpthread -ldl"; \
|
||||
echo "Libs: -lnss3 -lsmime3 -lssl3 -lnssutil3"; \
|
||||
) >${DESTDIR}/usr/lib/pkgconfig/nss.pc
|
||||
chmod 644 ${DESTDIR}/usr/lib/pkgconfig/nss.pc
|
||||
cd ${DESTDIR}/usr/lib/pkgconfig && ln -s nss.pc mozilla-nss.pc
|
||||
|
|
Loading…
Reference in a new issue