nss: added some patches from Debian.

srcpkgs/nss/nss-devel.template

@@ -5,6 +5,8 @@ long_desc="${long_desc}
 
  This package contains files for development, headers, static libs, etc."
 
+revision=1
+
 Add_dependency run zlib-devel
 Add_dependency run nspr-devel
 Add_dependency run sqlite-devel

srcpkgs/nss/patches/series

@@ -0,0 +1,3 @@
+distrust-diginotar.patch
+add_spi+cacert_ca_certs.patch
+ssl-renegotiate-transitional.patch

srcpkgs/nss/patches/ssl-renegotiate-transitional.patch

@@ -0,0 +1,21 @@
+Enable transitional scheme for ssl renegotiation:
+
+(from mozilla/security/nss/lib/ssl/ssl.h)
+Disallow unsafe renegotiation in server sockets only, but allow clients
+to continue to renegotiate with vulnerable servers.
+This value should only be used during the transition period when few
+servers have been upgraded.
+
+diff --git a/mozilla/security/nss/lib/ssl/sslsock.c b/mozilla/security/nss/lib/ssl/sslsock.c
+index f1d1921..c074360 100644
+--- mozilla/security/nss/lib/ssl/sslsock.c
++++ mozilla/security/nss/lib/ssl/sslsock.c
+@@ -181,7 +181,7 @@ static sslOptions ssl_defaults = {
+     PR_FALSE,   /* noLocks            */
+     PR_FALSE,   /* enableSessionTickets */
+     PR_FALSE,   /* enableDeflate      */
+-    2,          /* enableRenegotiation (default: requires extension) */
++    3,          /* enableRenegotiation (default: transitional) */
+     PR_FALSE,   /* requireSafeNegotiation */
+ };
+ 

srcpkgs/nss/template

@@ -1,6 +1,7 @@
 # Template file for 'nss'
 pkgname=nss
 version=3.12.11
+revision=1
 _distver=$(echo $version|sed -e "s|\.|_|g")
 distfiles="${MOZILLA_SITE}/security/nss/releases/NSS_${_distver}_RTM/src/${pkgname}-${version}.tar.gz"
 build_style=custom-install
@@ -64,7 +65,7 @@ do_install()
 	  echo "Version: ${version}"; \
 	  echo "Requires: nspr >= ${version}"; \
 	  echo "Cflags: -I/usr/include/nss"; \
-	  echo "Libs: -lnss3 -lsmime3 -lssl3 -lnssutil3 -lsoftokn3 -lpthread -ldl"; \
+	  echo "Libs: -lnss3 -lsmime3 -lssl3 -lnssutil3"; \
 	) >${DESTDIR}/usr/lib/pkgconfig/nss.pc
 	chmod 644 ${DESTDIR}/usr/lib/pkgconfig/nss.pc
 	cd ${DESTDIR}/usr/lib/pkgconfig && ln -s nss.pc mozilla-nss.pc