183 Commits (0bc70ad43489682489adfcf0678cec700c6d5a20)

Author	SHA1	Message	Date
Martin Weinelt	2473837984	nss_latest: 3.77 -> 3.78 ... https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_78.html Fixes the ordering of the security load patchset to save us rebuilds.	2 years ago
Martin Weinelt	c773303215	Revert "Revert "nss_latest: 3.76.1 -> 3.77"" ... This reverts commit 79a5b548cc.	2 years ago
Martin Weinelt	79a5b548cc	Revert "nss_latest: 3.76.1 -> 3.77" ... This reverts commit eb9c616c79. Breaks the Firefox build and needs further investigation. In file included from Unified_cpp_certverifier0.cpp:47: /build/firefox-99.0/security/certverifier/OCSPVerificationTrustDomain.cpp:63:11: error: unknown type name 'SignedDigest' const SignedDigest& aSignedDigest, Input aSubjectPublicKeyInfo) { ^ /build/firefox-99.0/security/certverifier/OCSPVerificationTrustDomain.cpp:74:11: error: unknown type name 'SignedDigest' const SignedDigest& aSignedDigest, Input aSubjectPublicKeyInfo) { ^ https://github.com/NixOS/nixpkgs/pull/164511#issuecomment-1089496003	2 years ago
ajs124	eb9c616c79	nss_latest: 3.76.1 -> 3.77	2 years ago
ajs124	faee35ce35	nss_latest: 3.76 -> 3.76.1	2 years ago
ajs124	9109742c6b	nss: add maintainers	2 years ago
ajs124	44f241f69a	nss: split into nss_latest and nss_esr	2 years ago
ajs124	4e0daeeee4	nss: 3.75 -> 3.76 ... https://github.com/nss-dev/nss/blob/master/doc/rst/releases/nss_3_76.rst	2 years ago
ajs124	de76433f54	nss: 3.74 -> 3.75	2 years ago
ajs124	da28ed7df0	nss: 3.73.1 -> 3.74	3 years ago
R. RyanTM	8a4345ee0d	nss: 3.73 -> 3.73.1 (#151041)	3 years ago
Léo Gaspard	ee36cb7d2c	nss: 3.72 -> 3.73 (#148219) ... Update done by running the `nss` and `cacert` update scripts, then running nixpkgs-check to validate things look good enough to be thrown at hydra	3 years ago
Martin Weinelt	dff515718d	nss_3_53: drop	3 years ago
R. Ryantm	f0b1f93f1d	nss: 3.71 -> 3.72	3 years ago
Alyssa Ross	851b719ac6	treewide: use stdenv.hostPlatform.extensions.sharedLibrary where appropriate	3 years ago
ajs124	c47854697c	nss: 3.70 -> 3.71	3 years ago
Tim Steinbach	b558d1552b	nss: Add updateScript	3 years ago
Tim Steinbach	e079a9b46d	nss: 3.68 -> 3.70	3 years ago
Sandro Jäckel	d7a6dc0bb9	nss: format, cleanup	3 years ago
Sandro Jäckel	4b84c7a0c8	nss: format, cleanup	3 years ago
Felix Buehler	e023025ee0	various: cleanup of "inherit version;"	3 years ago
ajs124	04bc2667d1	nss: 3.67 -> 3.68	3 years ago
ajs124	1128dadcd8	nss: 3.66 -> 3.67	3 years ago
ajs124	db82e8c2e2	nss: 3.64 -> 3.66	3 years ago
Zhaofeng Li	345e777888	nss: Set NSS_USE_64=1 for 64-bit platforms ... The config script does that automatically for a few architectures [1], but on 64-bit platforms that are not listed (like riscv64) the freebl build fails. Debian always adds the USE_64=1 flag when compiling on 64-bit architectures (they use legacy make instead of gyp), and we should do that as well to fix the general problem at the cost of a mass rebuild. [1] 0ef2306a62/coreconf/config.gypi (l212) [2] c446c61808/debian/rules (L66)	3 years ago
ajs124	36d2488cb6	nss_3_44: drop	3 years ago
ajs124	5240b3fa7c	nss: 3.63 -> 3.64	3 years ago
ajs124	636fab48a6	nss: 3.62 -> 3.63	3 years ago
Martin Weinelt	e73210fd67	nss: 3.61 -> 3.62	3 years ago
ajs124	d86882dd0f	nss: 3.60 -> 3.61	3 years ago
ajs124	ea63f9a4da	nss: 3.60 -> 3.61	3 years ago
Sandro Jäckel	9fc898d625	nss: remove usage of stdenv.lib	3 years ago
rnhmjoj	b9bb98cf49	nss: add option to use p11-kit ... This commit adds an option to replace libnssckbi with the p11-kit-trust[1] module. It makes all NSS application (like Firefox, Chromium, etc.) use the system trust store (/etc/ssl/certs/ in NixOS) and other PKCS#11 modules without ad-hoc configuration. This approach was first implemented in Fedora[2] and other distributions like Arch Linux, later. [1]: https://p11-glue.github.io/p11-glue/p11-kit/manual/trust-nss.html [2]: https://fedoraproject.org/wiki/Features/SharedSystemCertificates	3 years ago
Ben Siraphob	66e44425c6	pkgs/development/libraries: stdenv.lib -> lib	3 years ago
ajs124	22cd16f5b0	nss: 3.59 -> 3.60	4 years ago
ajs124	fce1a3ee1a	nss: 3.58 -> 3.59 ... https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.59_release_notes	4 years ago
Andreas Rammhold	6c33216fcb	nss: 3.57 -> 3.58 ... https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.58_release_notes	4 years ago
Andreas Rammhold	cbd0f8931c	nss_3_53: init	4 years ago
Andreas Rammhold	94448baf6d	cacert: decouple from NSS to reduce rebuild amount ... In [#100765] @vcunat pointed out that we could decouple cacert from the NSS package to make it more rebuild friendly. Just rebuilding packages that depend on NSS seems to be about ~100. Rebuilding all the packages that depend on cacert is >9k as of this writing. This makes it much more feasible to upgrade high-profile packages that are (rightfully) pedantic on their NSS version like firefox and thunderbird. [#100765]: https://github.com/NixOS/nixpkgs/pull/100765	4 years ago
zimbatm	5ff35fab0f	fixup! nss: make reproducible (#102156) ... Fixes a precedence issue from fe9f55907e `lib.optionalString <cond> 'text' + 'text2'` will always have 'text2' as part of the result.	4 years ago
Ryan Burns	eed2008a2d	nss: fix build on ppc64[le] ... NSS configure scripts use the abbreviated form ppc64/ppc64le: https://github.com/nss-dev/nss/blob/NSS_3_57_RTM/coreconf/config.gypi#L209 Whereas nixpkgs uses the longer form: `nix eval nixpkgs.pkgsCross.powernv.hostPlatform.parsed.cpu.name` `powerpc64le`	4 years ago
zimbatm	8f2be9ac36	nss: make reproducible (#102156) ... According to c1fad130dc/build.sh (l129) the FIPS mode is not enabled by default. Yet we generate the .chk files that are only meant to be used for that mode. I have a sense that those have been cargo-culted around. Adding FIPS is still possible but you have to explictily build the lib with `pkgs.nss.override { enableFIPS = true; }` More info on what FIPS is: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_Tech_Notes/nss_tech_note6 Other distros wrangling with the same issue: https://bugzilla.opensuse.org/show_bug.cgi?id=1081723	4 years ago
Vladimír Čunát	336bc8283b	Re-Revert "Merge #101508: libraw: 0.20.0 -> 0.20.2" ... This reverts commit c778945806. I believe this is exactly what brings the staging branch into the right shape after the last merge from master (through staging-next); otherwise part of staging changes would be lost (due to being already reachable from master but reverted).	4 years ago
Vladimír Čunát	c778945806	Revert "Merge #101508: libraw: 0.20.0 -> 0.20.2" ... I'm sorry; I didn't notice it contained staging commits. This reverts commit 17f5305b6c, reversing changes made to a8a018ddc0.	4 years ago
Andrew Childs	722d02a720	treewide: move fixDarwinDylibNames to nativeBuildInputs ... This hook runs at build time and depends on executing install_name_tool from binutils.	4 years ago
Vladimír Čunát	80d90e69fe	nss: 3.56 -> 3.57 ... Release notes seem "boring": https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.57_release_notes My understanding is that this version will be needed in Firefox 82 released in one month from now: https://wiki.mozilla.org/NSS:Release_Versions	4 years ago
ajs124	49aa282108	nss: 3.55 -> 3.56	4 years ago
Matthew Bauer	d0468f86e8	nss: set install name correctly	4 years ago
ajs124	93a3c37128	nss: enable libpkix build ... this was enabled by default with the old build system, but requires this flag with the new one fixes ##93955	4 years ago
ajs124	67f0fcc014	nss: 3.54 -> 3.55	4 years ago