nss: added some patches from Debian.

This commit is contained in:
Juan RP 2011-10-08 13:00:22 +02:00
parent 355699f4b4
commit e1764bf6df
6 changed files with 2851 additions and 1 deletions

View file

@ -5,6 +5,8 @@ long_desc="${long_desc}
This package contains files for development, headers, static libs, etc."
revision=1
Add_dependency run zlib-devel
Add_dependency run nspr-devel
Add_dependency run sqlite-devel

File diff suppressed because it is too large Load diff

File diff suppressed because it is too large Load diff

View file

@ -0,0 +1,3 @@
distrust-diginotar.patch
add_spi+cacert_ca_certs.patch
ssl-renegotiate-transitional.patch

View file

@ -0,0 +1,21 @@
Enable transitional scheme for ssl renegotiation:
(from mozilla/security/nss/lib/ssl/ssl.h)
Disallow unsafe renegotiation in server sockets only, but allow clients
to continue to renegotiate with vulnerable servers.
This value should only be used during the transition period when few
servers have been upgraded.
diff --git a/mozilla/security/nss/lib/ssl/sslsock.c b/mozilla/security/nss/lib/ssl/sslsock.c
index f1d1921..c074360 100644
--- mozilla/security/nss/lib/ssl/sslsock.c
+++ mozilla/security/nss/lib/ssl/sslsock.c
@@ -181,7 +181,7 @@ static sslOptions ssl_defaults = {
PR_FALSE, /* noLocks */
PR_FALSE, /* enableSessionTickets */
PR_FALSE, /* enableDeflate */
- 2, /* enableRenegotiation (default: requires extension) */
+ 3, /* enableRenegotiation (default: transitional) */
PR_FALSE, /* requireSafeNegotiation */
};

View file

@ -1,6 +1,7 @@
# Template file for 'nss'
pkgname=nss
version=3.12.11
revision=1
_distver=$(echo $version|sed -e "s|\.|_|g")
distfiles="${MOZILLA_SITE}/security/nss/releases/NSS_${_distver}_RTM/src/${pkgname}-${version}.tar.gz"
build_style=custom-install
@ -64,7 +65,7 @@ do_install()
echo "Version: ${version}"; \
echo "Requires: nspr >= ${version}"; \
echo "Cflags: -I/usr/include/nss"; \
echo "Libs: -lnss3 -lsmime3 -lssl3 -lnssutil3 -lsoftokn3 -lpthread -ldl"; \
echo "Libs: -lnss3 -lsmime3 -lssl3 -lnssutil3"; \
) >${DESTDIR}/usr/lib/pkgconfig/nss.pc
chmod 644 ${DESTDIR}/usr/lib/pkgconfig/nss.pc
cd ${DESTDIR}/usr/lib/pkgconfig && ln -s nss.pc mozilla-nss.pc