Gentoo Archives: gentoo-commits

From: Lars Wendler <polynomial-c@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] repo/gentoo:master commit in: dev-libs/nss/, dev-libs/nss/files/
Date: Fri, 23 Dec 2016 09:57:27
Message-Id: 1482487012.03b621dc695b5fa65be2cd713b51bbc22957efd3.polynomial-c@gentoo
1 commit: 03b621dc695b5fa65be2cd713b51bbc22957efd3
2 Author: Lars Wendler <polynomial-c <AT> gentoo <DOT> org>
3 AuthorDate: Fri Dec 23 09:56:52 2016 +0000
4 Commit: Lars Wendler <polynomial-c <AT> gentoo <DOT> org>
5 CommitDate: Fri Dec 23 09:56:52 2016 +0000
6 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=03b621dc
7
8 dev-libs/nss: Removed old.
9
10 Package-Manager: Portage-2.3.3, Repoman-2.3.1
11
12 dev-libs/nss/Manifest | 4 -
13 dev-libs/nss/files/nss-3.14.2-solaris-gcc.patch | 24 --
14 .../nss/files/nss-3.15-gentoo-fixup-warnings.patch | 10 -
15 dev-libs/nss/files/nss-3.15.4-enable-pem.patch | 13 -
16 dev-libs/nss/files/nss-3.17.1-gentoo-fixups.patch | 241 ---------------
17 dev-libs/nss/files/nss-cacert-class3.patch | 204 -------------
18 dev-libs/nss/nss-3.20.ebuild | 326 --------------------
19 dev-libs/nss/nss-3.27.1.ebuild | 338 ---------------------
20 dev-libs/nss/nss-3.27.ebuild | 338 ---------------------
21 9 files changed, 1498 deletions(-)
22
23 diff --git a/dev-libs/nss/Manifest b/dev-libs/nss/Manifest
24 index fa1784d..c5f1d3b 100644
25 --- a/dev-libs/nss/Manifest
26 +++ b/dev-libs/nss/Manifest
27 @@ -1,14 +1,10 @@
28 DIST nss-3.14.1-add_spi+cacerts_ca_certs.patch 25018 SHA256 82ca25982828fd7153ad15fc6e81408c115476eeeb4045d3a71469380b56824b SHA512 2aafbd972b073061bfd66a66a4b50060691957f2910f716f7a69d22d655c499f186f05db2101bea5248a00949f339327ba8bfffec024c61c8ee908766201ae00 WHIRLPOOL c9fe397e316dac7983b187acf7227078ebd8f8da5df53f77f2564489e85f123c4d2afb88d56e8dc14b9ebfffe8a71ade4724b3c1ea683c5c4c487cb3a64eda43
29 -DIST nss-3.20.tar.gz 6955552 SHA256 5e38d4b9837ca338af966b97fc91c07f67ad647fb38dc4af3cfd0d84e477d15c SHA512 50f666209cadd4e463f98643ec67e35f4d1b88381e17db9eed7c67559b19799fcc27e49d72536f546d4c45bca2afa4664e5590f868775a4397a77111d68fc366 WHIRLPOOL 84f20e6764b3621762fcfcb9223a3861e1f5ff02078b19b7df2eb58430a5f96943d962dca2d3366b18cd434acf3d3be746242c5064497167d5671c50233834de
30 DIST nss-3.22.2.tar.gz 6982164 SHA256 07d49287c527ac31200f02dcf8494cef19e936d8ed470802749c4dfc782d3650 SHA512 0c73ba579cb697fe295bca2ee62315bc1830b542f607c1ecfbf591fa881d2ccfb5a6d830b47cd1434bdfbac07e03848b4fe9e6bda9c6d131a2c34973dc3b337c WHIRLPOOL 37137526ffc6f583ba54615c5fadb1076a5c0830b8aef6db394fb1da02345d5b1cf394b6a3cac7b8ce5727bf23ed1053f3f0f2865f0eab7c922c8459d5768142
31 DIST nss-3.23.tar.gz 7467001 SHA256 94b383e31c9671e9dfcca81084a8a813817e8f05a57f54533509b318d26e11cf SHA512 f3e388a415493685faa6df932e9e968af41ea2e8e4cba3fbd539c60177443e4042e8d2e2bfe74183552e14522d49048be2f80fbe038bdbd499971e82abf2cc32 WHIRLPOOL 77e22bd7a525c5b10723e1d5fb6db1e9d2efebfcdf9828aa79296f71c441c065201ecda56291f37790333d9b1d1e38fef1391a033382a885b83da31a646d6243
32 DIST nss-3.25.tar.gz 7338238 SHA256 5d1ad475da19d0c033a716350dc5f8a747999d3eba5ac07ee0368c5bad6e2359 SHA512 a33cff42d0d85eea091057648d598b7421de88f16ed357965ea08a8812de968c3f18d45452afd21afc90122f65c2c5bb2d7071357947b45e935aae55d28c4218 WHIRLPOOL 3857bffe7a58043612bbeaf0e596b3afdd4f0792441af667fb503dd2d354a535bb8523c258242b470d888ef2beff267b4480e6398a3328f0c44193b83f4a5934
33 DIST nss-3.26.1.tar.gz 7387756 SHA256 abebb079288e4b0d34648a1fcdba8564ac05b29f5f1d19b53021ccb3ac37ad25 SHA512 f2a6754e4766cdf169b0abfc0ff47c469ae0e6ddc08c020ef154da7806e8ce31b49076af11b659bf19e9c4b5c6e53a0ac9e7855ee1c33b98a45cfeec446b93bd WHIRLPOOL 9152e3c7430b3362647adb494d1983cc37659b1d8691f1f1e21470aab4f496f3aecd925b8e19d83fa3735e72eeb6d6579bcc304c30e48359d05cb6e052610b0f
34 -DIST nss-3.27.1.tar.gz 7397737 SHA256 fd3637a1930cd838239a89633a7ed9a18859ae9b599043f3a18f726dc4ec2a6b SHA512 b52bc18e42cab78a325a8c4fcf2894ca879cecbb657a852baf460551ed9727f145bc328ebb61a43a1605b457f923a1495707ac4aee27be70220463818ed8db8d WHIRLPOOL 17174b7d43bd82b9e805d653a7ea8b79bc2647a5891806c1cb77e2ac99e40eb64ffee03e105a41c375ba37e26cafeff4bd4bad27c48e94ed388d0215d0545364
35 DIST nss-3.27.2.tar.gz 7397599 SHA256 dc8ac8524469d0230274fd13a53fdcd74efe4aa67205dde1a4a92be87dc28524 SHA512 699847665e93fd649cb60ce6bc8f849f452779e7232a09bbeb0613f9e6c57bb81948f1ae59cc86648e41a212cda259109850ccd14546d35910deb75f5d2a13b8 WHIRLPOOL 08229d87de1c7020c1d7fc12fb8a2afc4bc9ab9f0208aad12698aba17386fbe9163cb506101c7d4d568409fd99141fb88c0e71fc32cecbc6640a4a8f7a4efabf
36 -DIST nss-3.27.tar.gz 7397210 SHA256 021aa936b06f5815474dd5c137f2325b3fe06caa38d9798ca53ec30b537301fa SHA512 a79c31d3ade72897928cdb1cfbf9236ea781fb1951904f2f5d9688afc4e55722ba75ea5a46622d1fa45d55bb2666d05a0df3a2c2ac16ce53335722618523c272 WHIRLPOOL 16277ba6cb3c71afeab7a5ce92ba0b3c0ec8622edc87bb1fe48dad86a910fa71a09db4c83ec8a973a048c5b925dbad2bc9d6361a66b94744479c47364e7ad5c5
37 DIST nss-3.28.tar.gz 7440502 SHA256 c79dd15f66f581c294ce0ef032119357d03fee3a0aa61be263747d84f1b33254 SHA512 dd442c6d04edd0507cc49a1e3c2bfaa64555f7cde5cb9e512ccf33f14de458dddbb17efddd83271056ed6e6e32327e6e1b6f6609e1910a05e625b08e6f0965df WHIRLPOOL d013972f18d75e83da03c3903b712ef1094e6b8543c1755ea2b7ed7f6335e39ac20112808c86bb9df74cda4a8c5c1159401ecd05d1d8b07b3ecdca85f7f0ac82
38 DIST nss-cacert-class1-class3.patch 22950 SHA256 6bba29cee34276e2ca6436dabedfeba2b61fb46668c5d5ceabf0c871574649bf SHA512 a5aa740bf110a3f0262e3f1ef2fc739ac2b44f042e220039d48aee8e97cd764d5c10718220364f4098aba955882bd02cadb5481512388971a8290312f88a7df0 WHIRLPOOL 1246223b01292604e5609bb9c580f092dc5937bf8c98f6891b099e8bab960e03612b6617e30a55d6ff8817d88f190e03812fe8f89f84f25c20970493dc2f7700
39 -DIST nss-pem-015ae754dd9f6fbcd7e52030ec9732eb27fc06a8.tar.bz2 27506 SHA256 50d9ec26a75835e900302f631456e278e13d4b435b8f98aa69f79dd439ddc6ab SHA512 0158a140f112a905f7db5a4f4d04f49f6742db1d2665ddf6c32913c367f0b93a57f86ba13b9883a42a528aff44c48196941d7c0fd7a27005db6adaf07802e501 WHIRLPOOL 279ef11d2d6f0cb7c192189d64bc6971cdada7417b93a65a3ff0ba4548b736b53b9812803024c2349114e94e0864f2b58c23812687ed3f75cf28334b0f6e11ac
40 DIST nss-pem-20140125.tar.bz2 28805 SHA256 62604dfc4178399a804e87ca7566d8316a0a40a535de3b2d0fa48fd80c97f768 SHA512 352faf812735e1374c534ada6dd577842603ea193dafaacfd51f201599ffe3f7a23ce1c673421e42f8b692091b58085f90843c29f70ae916949715e7baba2b39 WHIRLPOOL 3ae81410f6f4d2699e9dc55982cad03c226045fbeee25984d53d37ff78ce5c96d008d6837e1c0a10b6c96cdff17c21142e437159896d314e81afc8820867ca62
41 DIST nss-pem-20160329.tar.xz 27732 SHA256 6c13c342e7a9fe34b585556099beca33c3078b3df3e11b72827fb70232ac1443 SHA512 5834b06e4c64205447573d4f4c8989e20986ae67ee00eebce3817eb73794a6355a404143ba1c676ec302ceefaf9df103cb879b1d4ff14ba4e3790dbee3e40eb2 WHIRLPOOL 16fb714fab29e44f7a15fa1928a0f4c1a770f0847b8da97816e29a3b124dee782cffe2357648c445f4d29081f349571b6fffe48c5bc725c7c2dde491f3e0e836
42
43 diff --git a/dev-libs/nss/files/nss-3.14.2-solaris-gcc.patch b/dev-libs/nss/files/nss-3.14.2-solaris-gcc.patch
44 deleted file mode 100644
45 index a23725d..00000000
46 --- a/dev-libs/nss/files/nss-3.14.2-solaris-gcc.patch
47 +++ /dev/null
48 @@ -1,24 +0,0 @@
49 ---- nss-3.14.2/mozilla/security/coreconf/SunOS5.mk
50 -+++ nss-3.14.2/mozilla/security/coreconf/SunOS5.mk
51 -@@ -5,6 +5,9 @@
52 -
53 - include $(CORE_DEPTH)/coreconf/UNIX.mk
54 -
55 -+NS_USE_GCC = 1
56 -+GCC_USE_GNU_LD = 1
57 -+
58 - # Sun's WorkShop defines v8, v8plus and v9 architectures.
59 - # gcc on Solaris defines v8 and v9 "cpus".
60 - # gcc's v9 is equivalent to Workshop's v8plus.
61 -@@ -71,11 +74,6 @@
62 - NOMD_OS_CFLAGS += $(DSO_CFLAGS) $(OS_DEFINES) $(SOL_CFLAGS)
63 -
64 - MKSHLIB = $(CC) $(DSO_LDOPTS) $(RPATH)
65 --ifdef NS_USE_GCC
66 --ifeq (GNU,$(findstring GNU,$(shell `$(CC) -print-prog-name=ld` -v 2>&1)))
67 -- GCC_USE_GNU_LD = 1
68 --endif
69 --endif
70 - ifdef MAPFILE
71 - ifdef NS_USE_GCC
72 - ifdef GCC_USE_GNU_LD
73
74 diff --git a/dev-libs/nss/files/nss-3.15-gentoo-fixup-warnings.patch b/dev-libs/nss/files/nss-3.15-gentoo-fixup-warnings.patch
75 deleted file mode 100644
76 index 3ce2c0e..00000000
77 --- a/dev-libs/nss/files/nss-3.15-gentoo-fixup-warnings.patch
78 +++ /dev/null
79 @@ -1,10 +0,0 @@
80 ---- nss-3.15/nss/coreconf/Linux.mk
81 -+++ nss-3.15/nss/coreconf/Linux.mk
82 -@@ -116,6 +116,7 @@
83 - OPTIMIZER += -gdwarf-2
84 - endif
85 - endif
86 -+OPTIMIZER += -fno-strict-aliasing
87 - endif
88 -
89 -
90
91 diff --git a/dev-libs/nss/files/nss-3.15.4-enable-pem.patch b/dev-libs/nss/files/nss-3.15.4-enable-pem.patch
92 deleted file mode 100644
93 index 8e61024..00000000
94 --- a/dev-libs/nss/files/nss-3.15.4-enable-pem.patch
95 +++ /dev/null
96 @@ -1,13 +0,0 @@
97 -Patches taken from http://pkgs.fedoraproject.org/cgit/nss.git/
98 -
99 ---- nss/lib/ckfw/manifest.mn.libpem
100 -+++ nss/lib/ckfw/manifest.mn
101 -@@ -5,7 +5,7 @@
102 -
103 - CORE_DEPTH = ../..
104 -
105 --DIRS = builtins
106 -+DIRS = builtins pem
107 -
108 - PRIVATE_EXPORTS = \
109 - ck.h \
110
111 diff --git a/dev-libs/nss/files/nss-3.17.1-gentoo-fixups.patch b/dev-libs/nss/files/nss-3.17.1-gentoo-fixups.patch
112 deleted file mode 100644
113 index 26b488a..00000000
114 --- a/dev-libs/nss/files/nss-3.17.1-gentoo-fixups.patch
115 +++ /dev/null
116 @@ -1,241 +0,0 @@
117 ---- nss-3.17.1/nss/config/Makefile
118 -+++ nss-3.17.1/nss/config/Makefile
119 -@@ -0,0 +1,40 @@
120 -+CORE_DEPTH = ..
121 -+DEPTH = ..
122 -+
123 -+include $(CORE_DEPTH)/coreconf/config.mk
124 -+
125 -+NSS_MAJOR_VERSION = `grep "NSS_VMAJOR" ../lib/nss/nss.h | awk '{print $$3}'`
126 -+NSS_MINOR_VERSION = `grep "NSS_VMINOR" ../lib/nss/nss.h | awk '{print $$3}'`
127 -+NSS_PATCH_VERSION = `grep "NSS_VPATCH" ../lib/nss/nss.h | awk '{print $$3}'`
128 -+PREFIX = /usr
129 -+
130 -+all: export libs
131 -+
132 -+export:
133 -+ # Create the nss.pc file
134 -+ mkdir -p $(DIST)/lib/pkgconfig
135 -+ sed -e "s,@prefix@,$(PREFIX)," \
136 -+ -e "s,@exec_prefix@,\$${prefix}," \
137 -+ -e "s,@libdir@,\$${prefix}/lib64," \
138 -+ -e "s,@includedir@,\$${prefix}/include/nss," \
139 -+ -e "s,@NSS_MAJOR_VERSION@,$(NSS_MAJOR_VERSION),g" \
140 -+ -e "s,@NSS_MINOR_VERSION@,$(NSS_MINOR_VERSION)," \
141 -+ -e "s,@NSS_PATCH_VERSION@,$(NSS_PATCH_VERSION)," \
142 -+ nss.pc.in > nss.pc
143 -+ chmod 0644 nss.pc
144 -+ ln -sf ../../../../config/nss.pc $(DIST)/lib/pkgconfig
145 -+
146 -+ # Create the nss-config script
147 -+ mkdir -p $(DIST)/bin
148 -+ sed -e "s,@prefix@,$(PREFIX)," \
149 -+ -e "s,@NSS_MAJOR_VERSION@,$(NSS_MAJOR_VERSION)," \
150 -+ -e "s,@NSS_MINOR_VERSION@,$(NSS_MINOR_VERSION)," \
151 -+ -e "s,@NSS_PATCH_VERSION@,$(NSS_PATCH_VERSION)," \
152 -+ nss-config.in > nss-config
153 -+ chmod 0755 nss-config
154 -+ ln -sf ../../../config/nss-config $(DIST)/bin
155 -+
156 -+libs:
157 -+
158 -+dummy: all export libs
159 -+
160 ---- nss-3.17.1/nss/config/nss-config.in
161 -+++ nss-3.17.1/nss/config/nss-config.in
162 -@@ -0,0 +1,145 @@
163 -+#!/bin/sh
164 -+
165 -+prefix=@prefix@
166 -+
167 -+major_version=@NSS_MAJOR_VERSION@
168 -+minor_version=@NSS_MINOR_VERSION@
169 -+patch_version=@NSS_PATCH_VERSION@
170 -+
171 -+usage()
172 -+{
173 -+ cat <<EOF
174 -+Usage: nss-config [OPTIONS] [LIBRARIES]
175 -+Options:
176 -+ [--prefix[=DIR]]
177 -+ [--exec-prefix[=DIR]]
178 -+ [--includedir[=DIR]]
179 -+ [--libdir[=DIR]]
180 -+ [--version]
181 -+ [--libs]
182 -+ [--cflags]
183 -+Dynamic Libraries:
184 -+ nss
185 -+ ssl
186 -+ smime
187 -+ nssutil
188 -+EOF
189 -+ exit $1
190 -+}
191 -+
192 -+if test $# -eq 0; then
193 -+ usage 1 1>&2
194 -+fi
195 -+
196 -+lib_ssl=yes
197 -+lib_smime=yes
198 -+lib_nss=yes
199 -+lib_nssutil=yes
200 -+
201 -+while test $# -gt 0; do
202 -+ case "$1" in
203 -+ -*=*) optarg=`echo "$1" | sed 's/[-_a-zA-Z0-9]*=//'` ;;
204 -+ *) optarg= ;;
205 -+ esac
206 -+
207 -+ case $1 in
208 -+ --prefix=*)
209 -+ prefix=$optarg
210 -+ ;;
211 -+ --prefix)
212 -+ echo_prefix=yes
213 -+ ;;
214 -+ --exec-prefix=*)
215 -+ exec_prefix=$optarg
216 -+ ;;
217 -+ --exec-prefix)
218 -+ echo_exec_prefix=yes
219 -+ ;;
220 -+ --includedir=*)
221 -+ includedir=$optarg
222 -+ ;;
223 -+ --includedir)
224 -+ echo_includedir=yes
225 -+ ;;
226 -+ --libdir=*)
227 -+ libdir=$optarg
228 -+ ;;
229 -+ --libdir)
230 -+ echo_libdir=yes
231 -+ ;;
232 -+ --version)
233 -+ echo ${major_version}.${minor_version}.${patch_version}
234 -+ ;;
235 -+ --cflags)
236 -+ echo_cflags=yes
237 -+ ;;
238 -+ --libs)
239 -+ echo_libs=yes
240 -+ ;;
241 -+ ssl)
242 -+ lib_ssl=yes
243 -+ ;;
244 -+ smime)
245 -+ lib_smime=yes
246 -+ ;;
247 -+ nss)
248 -+ lib_nss=yes
249 -+ ;;
250 -+ nssutil)
251 -+ lib_nssutil=yes
252 -+ ;;
253 -+ *)
254 -+ usage 1 1>&2
255 -+ ;;
256 -+ esac
257 -+ shift
258 -+done
259 -+
260 -+# Set variables that may be dependent upon other variables
261 -+if test -z "$exec_prefix"; then
262 -+ exec_prefix=`pkg-config --variable=exec_prefix nss`
263 -+fi
264 -+if test -z "$includedir"; then
265 -+ includedir=`pkg-config --variable=includedir nss`
266 -+fi
267 -+if test -z "$libdir"; then
268 -+ libdir=`pkg-config --variable=libdir nss`
269 -+fi
270 -+
271 -+if test "$echo_prefix" = "yes"; then
272 -+ echo $prefix
273 -+fi
274 -+
275 -+if test "$echo_exec_prefix" = "yes"; then
276 -+ echo $exec_prefix
277 -+fi
278 -+
279 -+if test "$echo_includedir" = "yes"; then
280 -+ echo $includedir
281 -+fi
282 -+
283 -+if test "$echo_libdir" = "yes"; then
284 -+ echo $libdir
285 -+fi
286 -+
287 -+if test "$echo_cflags" = "yes"; then
288 -+ echo -I$includedir
289 -+fi
290 -+
291 -+if test "$echo_libs" = "yes"; then
292 -+ libdirs=""
293 -+ if test -n "$lib_ssl"; then
294 -+ libdirs="$libdirs -lssl${major_version}"
295 -+ fi
296 -+ if test -n "$lib_smime"; then
297 -+ libdirs="$libdirs -lsmime${major_version}"
298 -+ fi
299 -+ if test -n "$lib_nss"; then
300 -+ libdirs="$libdirs -lnss${major_version}"
301 -+ fi
302 -+ if test -n "$lib_nssutil"; then
303 -+ libdirs="$libdirs -lnssutil${major_version}"
304 -+ fi
305 -+ echo $libdirs
306 -+fi
307 -+
308 ---- nss-3.17.1/nss/config/nss.pc.in
309 -+++ nss-3.17.1/nss/config/nss.pc.in
310 -@@ -0,0 +1,12 @@
311 -+prefix=@prefix@
312 -+exec_prefix=@exec_prefix@
313 -+libdir=@libdir@
314 -+includedir=@includedir@
315 -+
316 -+Name: NSS
317 -+Description: Network Security Services
318 -+Version: @NSS_MAJOR_VERSION@.@NSS_MINOR_VERSION@.@NSS_PATCH_VERSION@
319 -+Requires: nspr >= 4.8
320 -+Libs: -lssl3 -lsmime3 -lnss3 -lnssutil3
321 -+Cflags: -I${includedir}
322 -+
323 ---- nss-3.17.1/nss/Makefile
324 -+++ nss-3.17.1/nss/Makefile
325 -@@ -44,7 +44,7 @@
326 - # (7) Execute "local" rules. (OPTIONAL). #
327 - #######################################################################
328 -
329 --nss_build_all: build_nspr all
330 -+nss_build_all: all
331 -
332 - nss_clean_all: clobber_nspr clobber
333 -
334 -@@ -109,12 +109,6 @@
335 - --with-dist-prefix='$(NSPR_PREFIX)' \
336 - --with-dist-includedir='$(NSPR_PREFIX)/include'
337 -
338 --build_nspr: $(NSPR_CONFIG_STATUS)
339 -- $(MAKE) -C $(CORE_DEPTH)/../nspr/$(OBJDIR_NAME)
340 --
341 --clobber_nspr: $(NSPR_CONFIG_STATUS)
342 -- $(MAKE) -C $(CORE_DEPTH)/../nspr/$(OBJDIR_NAME) clobber
343 --
344 - build_docs:
345 - $(MAKE) -C $(CORE_DEPTH)/doc
346 -
347 ---- nss-3.17.1/nss/manifest.mn
348 -+++ nss-3.17.1/nss/manifest.mn
349 -@@ -10,7 +10,7 @@
350 -
351 - RELEASE = nss
352 -
353 --DIRS = coreconf lib cmd
354 -+DIRS = coreconf lib cmd config
355 -
356 - ifdef NSS_BUILD_GTESTS
357 - DIRS += external_tests
358
359 diff --git a/dev-libs/nss/files/nss-cacert-class3.patch b/dev-libs/nss/files/nss-cacert-class3.patch
360 deleted file mode 100644
361 index 47f4da5..00000000
362 --- a/dev-libs/nss/files/nss-cacert-class3.patch
363 +++ /dev/null
364 @@ -1,204 +0,0 @@
365 -diff -urN a/nss/lib/ckfw/builtins/certdata.txt b/nss/lib/ckfw/builtins/certdata.txt
366 ---- a/nss/lib/ckfw/builtins/certdata.txt 2015-01-22 13:49:26.000000000 -0600
367 -+++ b/nss/lib/ckfw/builtins/certdata.txt 2015-03-21 20:24:59.913637329 -0500
368 -@@ -30320,3 +30320,200 @@
369 - CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
370 - CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
371 - CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
372 -+
373 -+#
374 -+# Certificate "CAcert Inc."
375 -+#
376 -+# Issuer: E=support@××××××.org,CN=CA Cert Signing Authority,OU=http://www.cacert.org,O=Root CA
377 -+# Serial Number: 672138 (0xa418a)
378 -+# Subject: CN=CAcert Class 3 Root,OU=http://www.CAcert.org,O=CAcert Inc.
379 -+# Not Valid Before: Mon May 23 17:48:02 2011
380 -+# Not Valid After : Thu May 20 17:48:02 2021
381 -+# Fingerprint (SHA-256): 4E:DD:E9:E5:5C:A4:53:B3:88:88:7C:AA:25:D5:C5:C5:BC:CF:28:91:D7:3B:87:49:58:08:29:3D:5F:AC:83:C8
382 -+# Fingerprint (SHA1): AD:7C:3F:64:FC:44:39:FE:F4:E9:0B:E8:F4:7C:6C:FA:8A:AD:FD:CE
383 -+CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
384 -+CKA_TOKEN CK_BBOOL CK_TRUE
385 -+CKA_PRIVATE CK_BBOOL CK_FALSE
386 -+CKA_MODIFIABLE CK_BBOOL CK_FALSE
387 -+CKA_LABEL UTF8 "CAcert Inc."
388 -+CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
389 -+CKA_SUBJECT MULTILINE_OCTAL
390 -+\060\124\061\024\060\022\006\003\125\004\012\023\013\103\101\143
391 -+\145\162\164\040\111\156\143\056\061\036\060\034\006\003\125\004
392 -+\013\023\025\150\164\164\160\072\057\057\167\167\167\056\103\101
393 -+\143\145\162\164\056\157\162\147\061\034\060\032\006\003\125\004
394 -+\003\023\023\103\101\143\145\162\164\040\103\154\141\163\163\040
395 -+\063\040\122\157\157\164
396 -+END
397 -+CKA_ID UTF8 "0"
398 -+CKA_ISSUER MULTILINE_OCTAL
399 -+\060\171\061\020\060\016\006\003\125\004\012\023\007\122\157\157
400 -+\164\040\103\101\061\036\060\034\006\003\125\004\013\023\025\150
401 -+\164\164\160\072\057\057\167\167\167\056\143\141\143\145\162\164
402 -+\056\157\162\147\061\042\060\040\006\003\125\004\003\023\031\103
403 -+\101\040\103\145\162\164\040\123\151\147\156\151\156\147\040\101
404 -+\165\164\150\157\162\151\164\171\061\041\060\037\006\011\052\206
405 -+\110\206\367\015\001\011\001\026\022\163\165\160\160\157\162\164
406 -+\100\143\141\143\145\162\164\056\157\162\147
407 -+END
408 -+CKA_SERIAL_NUMBER MULTILINE_OCTAL
409 -+\002\003\012\101\212
410 -+END
411 -+CKA_VALUE MULTILINE_OCTAL
412 -+\060\202\007\131\060\202\005\101\240\003\002\001\002\002\003\012
413 -+\101\212\060\015\006\011\052\206\110\206\367\015\001\001\013\005
414 -+\000\060\171\061\020\060\016\006\003\125\004\012\023\007\122\157
415 -+\157\164\040\103\101\061\036\060\034\006\003\125\004\013\023\025
416 -+\150\164\164\160\072\057\057\167\167\167\056\143\141\143\145\162
417 -+\164\056\157\162\147\061\042\060\040\006\003\125\004\003\023\031
418 -+\103\101\040\103\145\162\164\040\123\151\147\156\151\156\147\040
419 -+\101\165\164\150\157\162\151\164\171\061\041\060\037\006\011\052
420 -+\206\110\206\367\015\001\011\001\026\022\163\165\160\160\157\162
421 -+\164\100\143\141\143\145\162\164\056\157\162\147\060\036\027\015
422 -+\061\061\060\065\062\063\061\067\064\070\060\062\132\027\015\062
423 -+\061\060\065\062\060\061\067\064\070\060\062\132\060\124\061\024
424 -+\060\022\006\003\125\004\012\023\013\103\101\143\145\162\164\040
425 -+\111\156\143\056\061\036\060\034\006\003\125\004\013\023\025\150
426 -+\164\164\160\072\057\057\167\167\167\056\103\101\143\145\162\164
427 -+\056\157\162\147\061\034\060\032\006\003\125\004\003\023\023\103
428 -+\101\143\145\162\164\040\103\154\141\163\163\040\063\040\122\157
429 -+\157\164\060\202\002\042\060\015\006\011\052\206\110\206\367\015
430 -+\001\001\001\005\000\003\202\002\017\000\060\202\002\012\002\202
431 -+\002\001\000\253\111\065\021\110\174\322\046\176\123\224\317\103
432 -+\251\335\050\327\102\052\213\363\207\170\031\130\174\017\236\332
433 -+\211\175\341\373\353\162\220\015\164\241\226\144\253\237\240\044
434 -+\231\163\332\342\125\166\307\027\173\365\004\254\106\270\303\276
435 -+\177\144\215\020\154\044\363\141\234\300\362\220\372\121\346\365
436 -+\151\001\143\303\017\126\342\112\102\317\342\104\214\045\050\250
437 -+\305\171\011\175\106\271\212\363\351\363\064\051\010\105\344\034
438 -+\237\313\224\004\034\201\250\024\263\230\145\304\103\354\116\202
439 -+\215\011\321\275\252\133\215\222\320\354\336\220\305\177\012\302
440 -+\343\353\346\061\132\136\164\076\227\063\131\350\303\003\075\140
441 -+\063\277\367\321\157\107\304\315\356\142\203\122\156\056\010\232
442 -+\244\331\025\030\221\246\205\222\107\260\256\110\353\155\267\041
443 -+\354\205\032\150\162\065\253\377\360\020\135\300\364\224\247\152
444 -+\325\073\222\176\114\220\005\176\223\301\054\213\244\216\142\164
445 -+\025\161\156\013\161\003\352\257\025\070\232\324\322\005\162\157
446 -+\214\371\053\353\132\162\045\371\071\106\343\162\033\076\004\303
447 -+\144\047\042\020\052\212\117\130\247\003\255\276\264\056\023\355
448 -+\135\252\110\327\325\175\324\052\173\134\372\106\004\120\344\314
449 -+\016\102\133\214\355\333\362\317\374\226\223\340\333\021\066\124
450 -+\142\064\070\217\014\140\233\073\227\126\070\255\363\322\133\213
451 -+\240\133\352\116\226\270\174\327\325\240\206\160\100\323\221\051
452 -+\267\242\074\255\365\214\273\317\032\222\212\344\064\173\300\330
453 -+\154\137\351\012\302\303\247\040\232\132\337\054\135\122\134\272
454 -+\107\325\233\357\044\050\160\070\040\057\325\177\051\300\262\101
455 -+\003\150\222\314\340\234\314\227\113\105\357\072\020\012\253\160
456 -+\072\230\225\160\255\065\261\352\205\053\244\034\200\041\061\251
457 -+\256\140\172\200\046\110\000\270\001\300\223\143\125\042\221\074
458 -+\126\347\257\333\072\045\363\217\061\124\352\046\213\201\131\371
459 -+\241\321\123\021\305\173\235\003\366\164\021\340\155\261\054\077
460 -+\054\206\221\231\161\232\246\167\213\064\140\321\024\264\054\254
461 -+\235\257\214\020\323\237\304\152\370\157\023\374\163\131\367\146
462 -+\102\164\036\212\343\370\334\322\157\230\234\313\107\230\225\100
463 -+\005\373\351\002\003\001\000\001\243\202\002\015\060\202\002\011
464 -+\060\035\006\003\125\035\016\004\026\004\024\165\250\161\140\114
465 -+\210\023\360\170\331\211\167\265\155\305\211\337\274\261\172\060
466 -+\201\243\006\003\125\035\043\004\201\233\060\201\230\200\024\026
467 -+\265\062\033\324\307\363\340\346\216\363\275\322\260\072\356\262
468 -+\071\030\321\241\175\244\173\060\171\061\020\060\016\006\003\125
469 -+\004\012\023\007\122\157\157\164\040\103\101\061\036\060\034\006
470 -+\003\125\004\013\023\025\150\164\164\160\072\057\057\167\167\167
471 -+\056\143\141\143\145\162\164\056\157\162\147\061\042\060\040\006
472 -+\003\125\004\003\023\031\103\101\040\103\145\162\164\040\123\151
473 -+\147\156\151\156\147\040\101\165\164\150\157\162\151\164\171\061
474 -+\041\060\037\006\011\052\206\110\206\367\015\001\011\001\026\022
475 -+\163\165\160\160\157\162\164\100\143\141\143\145\162\164\056\157
476 -+\162\147\202\001\000\060\017\006\003\125\035\023\001\001\377\004
477 -+\005\060\003\001\001\377\060\135\006\010\053\006\001\005\005\007
478 -+\001\001\004\121\060\117\060\043\006\010\053\006\001\005\005\007
479 -+\060\001\206\027\150\164\164\160\072\057\057\157\143\163\160\056
480 -+\103\101\143\145\162\164\056\157\162\147\057\060\050\006\010\053
481 -+\006\001\005\005\007\060\002\206\034\150\164\164\160\072\057\057
482 -+\167\167\167\056\103\101\143\145\162\164\056\157\162\147\057\143
483 -+\141\056\143\162\164\060\112\006\003\125\035\040\004\103\060\101
484 -+\060\077\006\010\053\006\001\004\001\201\220\112\060\063\060\061
485 -+\006\010\053\006\001\005\005\007\002\001\026\045\150\164\164\160
486 -+\072\057\057\167\167\167\056\103\101\143\145\162\164\056\157\162
487 -+\147\057\151\156\144\145\170\056\160\150\160\077\151\144\075\061
488 -+\060\060\064\006\011\140\206\110\001\206\370\102\001\010\004\047
489 -+\026\045\150\164\164\160\072\057\057\167\167\167\056\103\101\143
490 -+\145\162\164\056\157\162\147\057\151\156\144\145\170\056\160\150
491 -+\160\077\151\144\075\061\060\060\120\006\011\140\206\110\001\206
492 -+\370\102\001\015\004\103\026\101\124\157\040\147\145\164\040\171
493 -+\157\165\162\040\157\167\156\040\143\145\162\164\151\146\151\143
494 -+\141\164\145\040\146\157\162\040\106\122\105\105\054\040\147\157
495 -+\040\164\157\040\150\164\164\160\072\057\057\167\167\167\056\103
496 -+\101\143\145\162\164\056\157\162\147\060\015\006\011\052\206\110
497 -+\206\367\015\001\001\013\005\000\003\202\002\001\000\051\050\205
498 -+\256\104\251\271\257\244\171\023\360\250\243\053\227\140\363\134
499 -+\356\343\057\301\366\342\146\240\021\256\066\067\072\166\025\004
500 -+\123\352\102\365\371\352\300\025\330\246\202\331\344\141\256\162
501 -+\013\051\134\220\103\350\101\262\341\167\333\002\023\104\170\107
502 -+\125\257\130\374\314\230\366\105\271\321\040\370\330\041\007\376
503 -+\155\252\163\324\263\306\007\351\011\205\314\073\362\266\276\054
504 -+\034\045\325\161\214\071\265\056\352\276\030\201\272\260\223\270
505 -+\017\343\346\327\046\214\061\132\162\003\204\122\346\246\365\063
506 -+\042\105\012\310\013\015\212\270\066\157\220\011\241\253\275\327
507 -+\325\116\056\161\242\324\256\372\247\124\053\353\065\215\132\267
508 -+\124\210\057\356\164\237\355\110\026\312\015\110\320\224\323\254
509 -+\244\242\366\044\337\222\343\275\353\103\100\221\156\034\030\216
510 -+\126\264\202\022\363\251\223\237\324\274\234\255\234\165\356\132
511 -+\227\033\225\347\164\055\034\017\260\054\227\237\373\251\063\071
512 -+\172\347\003\072\222\216\042\366\214\015\344\331\176\015\166\030
513 -+\367\001\371\357\226\226\242\125\163\300\074\161\264\035\032\126
514 -+\103\267\303\012\215\162\374\342\020\011\013\101\316\214\224\240
515 -+\371\003\375\161\163\113\212\127\063\345\216\164\176\025\001\000
516 -+\346\314\112\034\347\177\225\031\055\305\245\014\213\273\265\355
517 -+\205\263\134\323\337\270\271\362\312\307\015\001\024\254\160\130
518 -+\305\214\215\063\324\235\146\243\032\120\225\043\374\110\340\006
519 -+\103\022\331\315\247\206\071\057\066\162\243\200\020\344\341\363
520 -+\321\313\133\032\300\344\200\232\174\023\163\006\117\333\243\153
521 -+\044\012\272\263\034\274\112\170\273\345\343\165\070\245\110\247
522 -+\242\036\257\166\324\136\367\070\206\126\132\211\316\326\303\247
523 -+\171\262\122\240\306\361\205\264\045\214\362\077\226\263\020\331
524 -+\215\154\127\073\237\157\206\072\030\202\042\066\310\260\221\070
525 -+\333\052\241\223\252\204\077\365\047\145\256\163\325\310\325\323
526 -+\167\352\113\235\307\101\273\307\300\343\240\077\344\175\244\215
527 -+\163\346\022\113\337\241\163\163\163\072\200\350\325\313\216\057
528 -+\313\352\023\247\326\101\213\254\372\074\211\327\044\365\116\264
529 -+\340\141\222\267\363\067\230\304\276\226\243\267\212
530 -+END
531 -+
532 -+# Trust for "CAcert Inc."
533 -+# Issuer: E=support@××××××.org,CN=CA Cert Signing Authority,OU=http://www.cacert.org,O=Root CA
534 -+# Serial Number: 672138 (0xa418a)
535 -+# Subject: CN=CAcert Class 3 Root,OU=http://www.CAcert.org,O=CAcert Inc.
536 -+# Not Valid Before: Mon May 23 17:48:02 2011
537 -+# Not Valid After : Thu May 20 17:48:02 2021
538 -+# Fingerprint (SHA-256): 4E:DD:E9:E5:5C:A4:53:B3:88:88:7C:AA:25:D5:C5:C5:BC:CF:28:91:D7:3B:87:49:58:08:29:3D:5F:AC:83:C8
539 -+# Fingerprint (SHA1): AD:7C:3F:64:FC:44:39:FE:F4:E9:0B:E8:F4:7C:6C:FA:8A:AD:FD:CE
540 -+CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
541 -+CKA_TOKEN CK_BBOOL CK_TRUE
542 -+CKA_PRIVATE CK_BBOOL CK_FALSE
543 -+CKA_MODIFIABLE CK_BBOOL CK_FALSE
544 -+CKA_LABEL UTF8 "CAcert Inc."
545 -+CKA_CERT_SHA1_HASH MULTILINE_OCTAL
546 -+\255\174\077\144\374\104\071\376\364\351\013\350\364\174\154\372
547 -+\212\255\375\316
548 -+END
549 -+CKA_CERT_MD5_HASH MULTILINE_OCTAL
550 -+\367\045\022\202\116\147\265\320\215\222\267\174\013\206\172\102
551 -+END
552 -+CKA_ISSUER MULTILINE_OCTAL
553 -+\060\171\061\020\060\016\006\003\125\004\012\023\007\122\157\157
554 -+\164\040\103\101\061\036\060\034\006\003\125\004\013\023\025\150
555 -+\164\164\160\072\057\057\167\167\167\056\143\141\143\145\162\164
556 -+\056\157\162\147\061\042\060\040\006\003\125\004\003\023\031\103
557 -+\101\040\103\145\162\164\040\123\151\147\156\151\156\147\040\101
558 -+\165\164\150\157\162\151\164\171\061\041\060\037\006\011\052\206
559 -+\110\206\367\015\001\011\001\026\022\163\165\160\160\157\162\164
560 -+\100\143\141\143\145\162\164\056\157\162\147
561 -+END
562 -+CKA_SERIAL_NUMBER MULTILINE_OCTAL
563 -+\002\003\012\101\212
564 -+END
565 -+CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
566 -+CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
567 -+CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
568 -+CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
569
570 diff --git a/dev-libs/nss/nss-3.20.ebuild b/dev-libs/nss/nss-3.20.ebuild
571 deleted file mode 100644
572 index 7153cea..00000000
573 --- a/dev-libs/nss/nss-3.20.ebuild
574 +++ /dev/null
575 @@ -1,326 +0,0 @@
576 -# Copyright 1999-2015 Gentoo Foundation
577 -# Distributed under the terms of the GNU General Public License v2
578 -# $Id$
579 -
580 -EAPI=5
581 -inherit eutils flag-o-matic multilib toolchain-funcs multilib-minimal
582 -
583 -NSPR_VER="4.10.8"
584 -RTM_NAME="NSS_${PV//./_}_RTM"
585 -# Rev of https://git.fedorahosted.org/cgit/nss-pem.git
586 -PEM_GIT_REV="015ae754dd9f6fbcd7e52030ec9732eb27fc06a8"
587 -PEM_P="${PN}-pem-${PEM_GIT_REV}"
588 -
589 -DESCRIPTION="Mozilla's Network Security Services library that implements PKI support"
590 -HOMEPAGE="http://www.mozilla.org/projects/security/pki/nss/"
591 -SRC_URI="http://archive.mozilla.org/pub/mozilla.org/security/nss/releases/${RTM_NAME}/src/${P}.tar.gz
592 - cacert? ( https://dev.gentoo.org/~anarchy/patches/${PN}-3.14.1-add_spi+cacerts_ca_certs.patch )
593 - nss-pem? ( https://git.fedorahosted.org/cgit/nss-pem.git/snapshot/${PEM_P}.tar.bz2 )"
594 -
595 -LICENSE="|| ( MPL-2.0 GPL-2 LGPL-2.1 )"
596 -SLOT="0"
597 -KEYWORDS="alpha amd64 arm arm64 hppa ia64 m68k ~mips ppc ppc64 s390 sh sparc x86 ~amd64-fbsd ~x86-fbsd ~amd64-linux ~x86-linux ~x86-macos ~sparc-solaris ~x64-solaris ~x86-solaris"
598 -IUSE="+cacert +nss-pem utils"
599 -CDEPEND=">=dev-db/sqlite-3.8.2[${MULTILIB_USEDEP}]
600 - >=sys-libs/zlib-1.2.8-r1[${MULTILIB_USEDEP}]"
601 -DEPEND=">=virtual/pkgconfig-0-r1[${MULTILIB_USEDEP}]
602 - >=dev-libs/nspr-${NSPR_VER}[${MULTILIB_USEDEP}]
603 - ${CDEPEND}"
604 -RDEPEND=">=dev-libs/nspr-${NSPR_VER}[${MULTILIB_USEDEP}]
605 - ${CDEPEND}
606 - abi_x86_32? (
607 - !<=app-emulation/emul-linux-x86-baselibs-20140508-r12
608 - !app-emulation/emul-linux-x86-baselibs[-abi_x86_32(-)]
609 - )"
610 -
611 -RESTRICT="test"
612 -
613 -S="${WORKDIR}/${P}/${PN}"
614 -
615 -MULTILIB_CHOST_TOOLS=(
616 - /usr/bin/nss-config
617 -)
618 -
619 -src_unpack() {
620 - unpack ${A}
621 - if use nss-pem ; then
622 - mv "${PEM_P}"/nss/lib/ckfw/pem/ "${S}"/lib/ckfw/ || die
623 - fi
624 -}
625 -
626 -src_prepare() {
627 - # Custom changes for gentoo
628 - epatch "${FILESDIR}/${PN}-3.17.1-gentoo-fixups.patch"
629 - epatch "${FILESDIR}/${PN}-3.15-gentoo-fixup-warnings.patch"
630 - use cacert && epatch "${DISTDIR}/${PN}-3.14.1-add_spi+cacerts_ca_certs.patch"
631 - use nss-pem && epatch "${FILESDIR}/${PN}-3.15.4-enable-pem.patch"
632 - epatch "${FILESDIR}/nss-3.14.2-solaris-gcc.patch"
633 - epatch "${FILESDIR}/${PN}-cacert-class3.patch" # 521462
634 -
635 - pushd coreconf >/dev/null || die
636 - # hack nspr paths
637 - echo 'INCLUDES += -I$(DIST)/include/dbm' \
638 - >> headers.mk || die "failed to append include"
639 -
640 - # modify install path
641 - sed -e '/CORE_DEPTH/s:SOURCE_PREFIX.*$:SOURCE_PREFIX = $(CORE_DEPTH)/dist:' \
642 - -i source.mk || die
643 -
644 - # Respect LDFLAGS
645 - sed -i -e 's/\$(MKSHLIB) -o/\$(MKSHLIB) \$(LDFLAGS) -o/g' rules.mk
646 - popd >/dev/null || die
647 -
648 - # Fix pkgconfig file for Prefix
649 - sed -i -e "/^PREFIX =/s:= /usr:= ${EPREFIX}/usr:" \
650 - config/Makefile || die
651 -
652 - # use host shlibsign if need be #436216
653 - if tc-is-cross-compiler ; then
654 - sed -i \
655 - -e 's:"${2}"/shlibsign:shlibsign:' \
656 - cmd/shlibsign/sign.sh || die
657 - fi
658 -
659 - # dirty hack
660 - sed -i -e "/CRYPTOLIB/s:\$(SOFTOKEN_LIB_DIR):../freebl/\$(OBJDIR):" \
661 - lib/ssl/config.mk || die
662 - sed -i -e "/CRYPTOLIB/s:\$(SOFTOKEN_LIB_DIR):../../lib/freebl/\$(OBJDIR):" \
663 - cmd/platlibs.mk || die
664 -
665 - multilib_copy_sources
666 -
667 - strip-flags
668 -}
669 -
670 -multilib_src_configure() {
671 - # Ensure we stay multilib aware
672 - sed -i -e "/@libdir@/ s:lib64:$(get_libdir):" config/Makefile || die
673 -}
674 -
675 -nssarch() {
676 - # Most of the arches are the same as $ARCH
677 - local t=${1:-${CHOST}}
678 - case ${t} in
679 - aarch64*)echo "aarch64";;
680 - hppa*) echo "parisc";;
681 - i?86*) echo "i686";;
682 - x86_64*) echo "x86_64";;
683 - *) tc-arch ${t};;
684 - esac
685 -}
686 -
687 -nssbits() {
688 - local cc cppflags="${1}CPPFLAGS" cflags="${1}CFLAGS"
689 - if [[ ${1} == BUILD_ ]]; then
690 - cc=$(tc-getBUILD_CC)
691 - else
692 - cc=$(tc-getCC)
693 - fi
694 - echo > "${T}"/test.c || die
695 - ${cc} ${!cppflags} ${!cflags} -c "${T}"/test.c -o "${T}/${1}test.o" || die
696 - case $(file "${T}/${1}test.o") in
697 - *32-bit*x86-64*) echo USE_X32=1;;
698 - *64-bit*|*ppc64*|*x86_64*) echo USE_64=1;;
699 - *32-bit*|*ppc*|*i386*) ;;
700 - *) die "Failed to detect whether ${cc} builds 64bits or 32bits, disable distcc if you're using it, please";;
701 - esac
702 -}
703 -
704 -multilib_src_compile() {
705 - # use ABI to determine bit'ness, or fallback if unset
706 - local buildbits mybits
707 - case "${ABI}" in
708 - n32) mybits="USE_N32=1";;
709 - x32) mybits="USE_X32=1";;
710 - s390x|*64) mybits="USE_64=1";;
711 - ${DEFAULT_ABI})
712 - einfo "Running compilation test to determine bit'ness"
713 - mybits=$(nssbits)
714 - ;;
715 - esac
716 - # bitness of host may differ from target
717 - if tc-is-cross-compiler; then
718 - buildbits=$(nssbits BUILD_)
719 - fi
720 -
721 - local makeargs=(
722 - CC="$(tc-getCC)"
723 - AR="$(tc-getAR) rc \$@"
724 - RANLIB="$(tc-getRANLIB)"
725 - OPTIMIZER=
726 - ${mybits}
727 - )
728 -
729 - # Take care of nspr settings #436216
730 - local myCPPFLAGS="${CPPFLAGS} $($(tc-getPKG_CONFIG) nspr --cflags)"
731 - unset NSPR_INCLUDE_DIR
732 -
733 - # Do not let `uname` be used.
734 - if use kernel_linux ; then
735 - makeargs+=(
736 - OS_TARGET=Linux
737 - OS_RELEASE=2.6
738 - OS_TEST="$(nssarch)"
739 - )
740 - fi
741 -
742 - export BUILD_OPT=1
743 - export NSS_USE_SYSTEM_SQLITE=1
744 - export NSDISTMODE=copy
745 - export NSS_ENABLE_ECC=1
746 - export FREEBL_NO_DEPEND=1
747 - export ASFLAGS=""
748 -
749 - local d
750 -
751 - # Build the host tools first.
752 - LDFLAGS="${BUILD_LDFLAGS}" \
753 - XCFLAGS="${BUILD_CFLAGS}" \
754 - NSPR_LIB_DIR="${T}/fakedir" \
755 - emake -j1 -C coreconf \
756 - CC="$(tc-getBUILD_CC)" \
757 - ${buildbits:-${mybits}}
758 - makeargs+=( NSINSTALL="${PWD}/$(find -type f -name nsinstall)" )
759 -
760 - # Then build the target tools.
761 - for d in . lib/dbm ; do
762 - CPPFLAGS="${myCPPFLAGS}" \
763 - XCFLAGS="${CFLAGS} ${CPPFLAGS}" \
764 - NSPR_LIB_DIR="${T}/fakedir" \
765 - emake -j1 "${makeargs[@]}" -C ${d}
766 - done
767 -}
768 -
769 -# Altering these 3 libraries breaks the CHK verification.
770 -# All of the following cause it to break:
771 -# - stripping
772 -# - prelink
773 -# - ELF signing
774 -# http://www.mozilla.org/projects/security/pki/nss/tech-notes/tn6.html
775 -# Either we have to NOT strip them, or we have to forcibly resign after
776 -# stripping.
777 -#local_libdir="$(get_libdir)"
778 -#export STRIP_MASK="
779 -# */${local_libdir}/libfreebl3.so*
780 -# */${local_libdir}/libnssdbm3.so*
781 -# */${local_libdir}/libsoftokn3.so*"
782 -
783 -export NSS_CHK_SIGN_LIBS="freebl3 nssdbm3 softokn3"
784 -
785 -generate_chk() {
786 - local shlibsign="$1"
787 - local libdir="$2"
788 - einfo "Resigning core NSS libraries for FIPS validation"
789 - shift 2
790 - local i
791 - for i in ${NSS_CHK_SIGN_LIBS} ; do
792 - local libname=lib${i}.so
793 - local chkname=lib${i}.chk
794 - "${shlibsign}" \
795 - -i "${libdir}"/${libname} \
796 - -o "${libdir}"/${chkname}.tmp \
797 - && mv -f \
798 - "${libdir}"/${chkname}.tmp \
799 - "${libdir}"/${chkname} \
800 - || die "Failed to sign ${libname}"
801 - done
802 -}
803 -
804 -cleanup_chk() {
805 - local libdir="$1"
806 - shift 1
807 - local i
808 - for i in ${NSS_CHK_SIGN_LIBS} ; do
809 - local libfname="${libdir}/lib${i}.so"
810 - # If the major version has changed, then we have old chk files.
811 - [ ! -f "${libfname}" -a -f "${libfname}.chk" ] \
812 - && rm -f "${libfname}.chk"
813 - done
814 -}
815 -
816 -multilib_src_install() {
817 - pushd dist >/dev/null || die
818 -
819 - dodir /usr/$(get_libdir)
820 - cp -L */lib/*$(get_libname) "${ED}"/usr/$(get_libdir) || die "copying shared libs failed"
821 - cp -L */lib/libcrmf.a "${ED}"/usr/$(get_libdir) || die "copying libs failed"
822 - cp -L */lib/libfreebl.a "${ED}"/usr/$(get_libdir) || die "copying libs failed"
823 -
824 - # Install nss-config and pkgconfig file
825 - dodir /usr/bin
826 - cp -L */bin/nss-config "${ED}"/usr/bin || die
827 - dodir /usr/$(get_libdir)/pkgconfig
828 - cp -L */lib/pkgconfig/nss.pc "${ED}"/usr/$(get_libdir)/pkgconfig || die
829 -
830 - # create an nss-softokn.pc from nss.pc for libfreebl and some private headers
831 - # bug 517266
832 - sed -e 's#Libs:#Libs: -lfreebl#' \
833 - -e 's#Cflags:#Cflags: -I${includedir}/private#' \
834 - */lib/pkgconfig/nss.pc >"${ED}"/usr/$(get_libdir)/pkgconfig/nss-softokn.pc \
835 - || die "could not create nss-softokn.pc"
836 -
837 - # all the include files
838 - insinto /usr/include/nss
839 - doins public/nss/*.h
840 - insinto /usr/include/nss/private
841 - doins private/nss/{blapi,alghmac}.h
842 -
843 - popd >/dev/null || die
844 -
845 - local f nssutils
846 - # Always enabled because we need it for chk generation.
847 - nssutils="shlibsign"
848 -
849 - if multilib_is_native_abi ; then
850 - if use utils; then
851 - # The tests we do not need to install.
852 - #nssutils_test="bltest crmftest dbtest dertimetest
853 - #fipstest remtest sdrtest"
854 - nssutils="addbuiltin atob baddbdir btoa certcgi certutil checkcert
855 - cmsutil conflict crlutil derdump digest makepqg mangle modutil multinit
856 - nonspr10 ocspclnt oidcalc p7content p7env p7sign p7verify pk11mode
857 - pk12util pp rsaperf selfserv shlibsign signtool signver ssltap strsclnt
858 - symkeyutil tstclnt vfychain vfyserv"
859 - # install man-pages for utils (bug #516810)
860 - doman doc/nroff/*.1
861 - fi
862 - pushd dist/*/bin >/dev/null || die
863 - for f in ${nssutils}; do
864 - dobin ${f}
865 - done
866 - popd >/dev/null || die
867 - fi
868 -
869 - # Prelink breaks the CHK files. We don't have any reliable way to run
870 - # shlibsign after prelink.
871 - local l libs=() liblist
872 - for l in ${NSS_CHK_SIGN_LIBS} ; do
873 - libs+=("${EPREFIX}/usr/$(get_libdir)/lib${l}.so")
874 - done
875 - liblist=$(printf '%s:' "${libs[@]}")
876 - echo -e "PRELINK_PATH_MASK=${liblist%:}" > "${T}/90nss-${ABI}"
877 - doenvd "${T}/90nss-${ABI}"
878 -}
879 -
880 -pkg_postinst() {
881 - multilib_pkg_postinst() {
882 - # We must re-sign the libraries AFTER they are stripped.
883 - local shlibsign="${EROOT}/usr/bin/shlibsign"
884 - # See if we can execute it (cross-compiling & such). #436216
885 - "${shlibsign}" -h >&/dev/null
886 - if [[ $? -gt 1 ]] ; then
887 - shlibsign="shlibsign"
888 - fi
889 - generate_chk "${shlibsign}" "${EROOT}"/usr/$(get_libdir)
890 - }
891 -
892 - multilib_foreach_abi multilib_pkg_postinst
893 -}
894 -
895 -pkg_postrm() {
896 - multilib_pkg_postrm() {
897 - cleanup_chk "${EROOT}"/usr/$(get_libdir)
898 - }
899 -
900 - multilib_foreach_abi multilib_pkg_postrm
901 -}
902
903 diff --git a/dev-libs/nss/nss-3.27.1.ebuild b/dev-libs/nss/nss-3.27.1.ebuild
904 deleted file mode 100644
905 index 3e9034e..00000000
906 --- a/dev-libs/nss/nss-3.27.1.ebuild
907 +++ /dev/null
908 @@ -1,338 +0,0 @@
909 -# Copyright 1999-2016 Gentoo Foundation
910 -# Distributed under the terms of the GNU General Public License v2
911 -# $Id$
912 -
913 -EAPI=6
914 -
915 -inherit eutils flag-o-matic multilib toolchain-funcs multilib-minimal
916 -
917 -NSPR_VER="4.12"
918 -RTM_NAME="NSS_${PV//./_}_RTM"
919 -# Rev of https://git.fedorahosted.org/cgit/nss-pem.git
920 -PEM_GIT_REV="429b0222759d8ad8e6dcd29e62875ae3efd69116"
921 -PEM_P="${PN}-pem-20160329"
922 -
923 -DESCRIPTION="Mozilla's Network Security Services library that implements PKI support"
924 -HOMEPAGE="http://www.mozilla.org/projects/security/pki/nss/"
925 -SRC_URI="https://archive.mozilla.org/pub/security/nss/releases/${RTM_NAME}/src/${P}.tar.gz
926 - nss-pem? ( https://dev.gentoo.org/~polynomial-c/${PEM_P}.tar.xz )"
927 -
928 -LICENSE="|| ( MPL-2.0 GPL-2 LGPL-2.1 )"
929 -SLOT="0"
930 -KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~amd64-fbsd ~x86-fbsd ~amd64-linux ~x86-linux ~x86-macos ~sparc-solaris ~x64-solaris ~x86-solaris"
931 -IUSE="cacert +nss-pem utils"
932 -CDEPEND=">=dev-db/sqlite-3.8.2[${MULTILIB_USEDEP}]
933 - >=sys-libs/zlib-1.2.8-r1[${MULTILIB_USEDEP}]"
934 -DEPEND=">=virtual/pkgconfig-0-r1[${MULTILIB_USEDEP}]
935 - >=dev-libs/nspr-${NSPR_VER}[${MULTILIB_USEDEP}]
936 - ${CDEPEND}"
937 -RDEPEND=">=dev-libs/nspr-${NSPR_VER}[${MULTILIB_USEDEP}]
938 - ${CDEPEND}
939 - abi_x86_32? (
940 - !<=app-emulation/emul-linux-x86-baselibs-20140508-r12
941 - !app-emulation/emul-linux-x86-baselibs[-abi_x86_32(-)]
942 - )"
943 -
944 -RESTRICT="test"
945 -
946 -S="${WORKDIR}/${P}/${PN}"
947 -
948 -MULTILIB_CHOST_TOOLS=(
949 - /usr/bin/nss-config
950 -)
951 -
952 -PATCHES=(
953 - # Custom changes for gentoo
954 - "${FILESDIR}/${PN}-3.21-gentoo-fixups.patch"
955 - "${FILESDIR}/${PN}-3.21-gentoo-fixup-warnings.patch"
956 - "${FILESDIR}/${PN}-3.23-hppa-byte_order.patch"
957 -)
958 -
959 -src_unpack() {
960 - unpack ${A}
961 - if use nss-pem ; then
962 - mv "${PN}"/lib/ckfw/pem/ "${S}"/lib/ckfw/ || die
963 - fi
964 -}
965 -
966 -src_prepare() {
967 - if use nss-pem ; then
968 - PATCHES+=(
969 - "${FILESDIR}/${PN}-3.21-enable-pem.patch"
970 - )
971 - fi
972 - if use cacert ; then #521462
973 - PATCHES+=(
974 - "${FILESDIR}/${PN}-3.21-cacert-class3.patch"
975 - )
976 - fi
977 -
978 - default
979 -
980 - pushd coreconf >/dev/null || die
981 - # hack nspr paths
982 - echo 'INCLUDES += -I$(DIST)/include/dbm' \
983 - >> headers.mk || die "failed to append include"
984 -
985 - # modify install path
986 - sed -e '/CORE_DEPTH/s:SOURCE_PREFIX.*$:SOURCE_PREFIX = $(CORE_DEPTH)/dist:' \
987 - -i source.mk || die
988 -
989 - # Respect LDFLAGS
990 - sed -i -e 's/\$(MKSHLIB) -o/\$(MKSHLIB) \$(LDFLAGS) -o/g' rules.mk
991 - popd >/dev/null || die
992 -
993 - # Fix pkgconfig file for Prefix
994 - sed -i -e "/^PREFIX =/s:= /usr:= ${EPREFIX}/usr:" \
995 - config/Makefile || die
996 -
997 - # use host shlibsign if need be #436216
998 - if tc-is-cross-compiler ; then
999 - sed -i \
1000 - -e 's:"${2}"/shlibsign:shlibsign:' \
1001 - cmd/shlibsign/sign.sh || die
1002 - fi
1003 -
1004 - # dirty hack
1005 - sed -i -e "/CRYPTOLIB/s:\$(SOFTOKEN_LIB_DIR):../freebl/\$(OBJDIR):" \
1006 - lib/ssl/config.mk || die
1007 - sed -i -e "/CRYPTOLIB/s:\$(SOFTOKEN_LIB_DIR):../../lib/freebl/\$(OBJDIR):" \
1008 - cmd/platlibs.mk || die
1009 -
1010 - multilib_copy_sources
1011 -
1012 - strip-flags
1013 -}
1014 -
1015 -multilib_src_configure() {
1016 - # Ensure we stay multilib aware
1017 - sed -i -e "/@libdir@/ s:lib64:$(get_libdir):" config/Makefile || die
1018 -}
1019 -
1020 -nssarch() {
1021 - # Most of the arches are the same as $ARCH
1022 - local t=${1:-${CHOST}}
1023 - case ${t} in
1024 - aarch64*)echo "aarch64";;
1025 - hppa*) echo "parisc";;
1026 - i?86*) echo "i686";;
1027 - x86_64*) echo "x86_64";;
1028 - *) tc-arch ${t};;
1029 - esac
1030 -}
1031 -
1032 -nssbits() {
1033 - local cc cppflags="${1}CPPFLAGS" cflags="${1}CFLAGS"
1034 - if [[ ${1} == BUILD_ ]]; then
1035 - cc=$(tc-getBUILD_CC)
1036 - else
1037 - cc=$(tc-getCC)
1038 - fi
1039 - echo > "${T}"/test.c || die
1040 - ${cc} ${!cppflags} ${!cflags} -c "${T}"/test.c -o "${T}/${1}test.o" || die
1041 - case $(file "${T}/${1}test.o") in
1042 - *32-bit*x86-64*) echo USE_X32=1;;
1043 - *64-bit*|*ppc64*|*x86_64*) echo USE_64=1;;
1044 - *32-bit*|*ppc*|*i386*) ;;
1045 - *) die "Failed to detect whether ${cc} builds 64bits or 32bits, disable distcc if you're using it, please";;
1046 - esac
1047 -}
1048 -
1049 -multilib_src_compile() {
1050 - # use ABI to determine bit'ness, or fallback if unset
1051 - local buildbits mybits
1052 - case "${ABI}" in
1053 - n32) mybits="USE_N32=1";;
1054 - x32) mybits="USE_X32=1";;
1055 - s390x|*64) mybits="USE_64=1";;
1056 - ${DEFAULT_ABI})
1057 - einfo "Running compilation test to determine bit'ness"
1058 - mybits=$(nssbits)
1059 - ;;
1060 - esac
1061 - # bitness of host may differ from target
1062 - if tc-is-cross-compiler; then
1063 - buildbits=$(nssbits BUILD_)
1064 - fi
1065 -
1066 - local makeargs=(
1067 - CC="$(tc-getCC)"
1068 - AR="$(tc-getAR) rc \$@"
1069 - RANLIB="$(tc-getRANLIB)"
1070 - OPTIMIZER=
1071 - ${mybits}
1072 - )
1073 -
1074 - # Take care of nspr settings #436216
1075 - local myCPPFLAGS="${CPPFLAGS} $($(tc-getPKG_CONFIG) nspr --cflags)"
1076 - unset NSPR_INCLUDE_DIR
1077 -
1078 - # Do not let `uname` be used.
1079 - if use kernel_linux ; then
1080 - makeargs+=(
1081 - OS_TARGET=Linux
1082 - OS_RELEASE=2.6
1083 - OS_TEST="$(nssarch)"
1084 - )
1085 - fi
1086 -
1087 - export NSS_ENABLE_WERROR=0 #567158
1088 - export BUILD_OPT=1
1089 - export NSS_USE_SYSTEM_SQLITE=1
1090 - export NSDISTMODE=copy
1091 - export NSS_ENABLE_ECC=1
1092 - export FREEBL_NO_DEPEND=1
1093 - export ASFLAGS=""
1094 -
1095 - local d
1096 -
1097 - # Build the host tools first.
1098 - LDFLAGS="${BUILD_LDFLAGS}" \
1099 - XCFLAGS="${BUILD_CFLAGS}" \
1100 - NSPR_LIB_DIR="${T}/fakedir" \
1101 - emake -j1 -C coreconf \
1102 - CC="$(tc-getBUILD_CC)" \
1103 - ${buildbits:-${mybits}}
1104 - makeargs+=( NSINSTALL="${PWD}/$(find -type f -name nsinstall)" )
1105 -
1106 - # Then build the target tools.
1107 - for d in . lib/dbm ; do
1108 - CPPFLAGS="${myCPPFLAGS}" \
1109 - XCFLAGS="${CFLAGS} ${CPPFLAGS}" \
1110 - NSPR_LIB_DIR="${T}/fakedir" \
1111 - emake -j1 "${makeargs[@]}" -C ${d}
1112 - done
1113 -}
1114 -
1115 -# Altering these 3 libraries breaks the CHK verification.
1116 -# All of the following cause it to break:
1117 -# - stripping
1118 -# - prelink
1119 -# - ELF signing
1120 -# http://www.mozilla.org/projects/security/pki/nss/tech-notes/tn6.html
1121 -# Either we have to NOT strip them, or we have to forcibly resign after
1122 -# stripping.
1123 -#local_libdir="$(get_libdir)"
1124 -#export STRIP_MASK="
1125 -# */${local_libdir}/libfreebl3.so*
1126 -# */${local_libdir}/libnssdbm3.so*
1127 -# */${local_libdir}/libsoftokn3.so*"
1128 -
1129 -export NSS_CHK_SIGN_LIBS="freebl3 nssdbm3 softokn3"
1130 -
1131 -generate_chk() {
1132 - local shlibsign="$1"
1133 - local libdir="$2"
1134 - einfo "Resigning core NSS libraries for FIPS validation"
1135 - shift 2
1136 - local i
1137 - for i in ${NSS_CHK_SIGN_LIBS} ; do
1138 - local libname=lib${i}.so
1139 - local chkname=lib${i}.chk
1140 - "${shlibsign}" \
1141 - -i "${libdir}"/${libname} \
1142 - -o "${libdir}"/${chkname}.tmp \
1143 - && mv -f \
1144 - "${libdir}"/${chkname}.tmp \
1145 - "${libdir}"/${chkname} \
1146 - || die "Failed to sign ${libname}"
1147 - done
1148 -}
1149 -
1150 -cleanup_chk() {
1151 - local libdir="$1"
1152 - shift 1
1153 - local i
1154 - for i in ${NSS_CHK_SIGN_LIBS} ; do
1155 - local libfname="${libdir}/lib${i}.so"
1156 - # If the major version has changed, then we have old chk files.
1157 - [ ! -f "${libfname}" -a -f "${libfname}.chk" ] \
1158 - && rm -f "${libfname}.chk"
1159 - done
1160 -}
1161 -
1162 -multilib_src_install() {
1163 - pushd dist >/dev/null || die
1164 -
1165 - dodir /usr/$(get_libdir)
1166 - cp -L */lib/*$(get_libname) "${ED}"/usr/$(get_libdir) || die "copying shared libs failed"
1167 - cp -L */lib/libcrmf.a "${ED}"/usr/$(get_libdir) || die "copying libs failed"
1168 - cp -L */lib/libfreebl.a "${ED}"/usr/$(get_libdir) || die "copying libs failed"
1169 -
1170 - # Install nss-config and pkgconfig file
1171 - dodir /usr/bin
1172 - cp -L */bin/nss-config "${ED}"/usr/bin || die
1173 - dodir /usr/$(get_libdir)/pkgconfig
1174 - cp -L */lib/pkgconfig/nss.pc "${ED}"/usr/$(get_libdir)/pkgconfig || die
1175 -
1176 - # create an nss-softokn.pc from nss.pc for libfreebl and some private headers
1177 - # bug 517266
1178 - sed -e 's#Libs:#Libs: -lfreebl#' \
1179 - -e 's#Cflags:#Cflags: -I${includedir}/private#' \
1180 - */lib/pkgconfig/nss.pc >"${ED}"/usr/$(get_libdir)/pkgconfig/nss-softokn.pc \
1181 - || die "could not create nss-softokn.pc"
1182 -
1183 - # all the include files
1184 - insinto /usr/include/nss
1185 - doins public/nss/*.h
1186 - insinto /usr/include/nss/private
1187 - doins private/nss/{blapi,alghmac}.h
1188 -
1189 - popd >/dev/null || die
1190 -
1191 - local f nssutils
1192 - # Always enabled because we need it for chk generation.
1193 - nssutils="shlibsign"
1194 -
1195 - if multilib_is_native_abi ; then
1196 - if use utils; then
1197 - # The tests we do not need to install.
1198 - #nssutils_test="bltest crmftest dbtest dertimetest
1199 - #fipstest remtest sdrtest"
1200 - # checkcert utils has been removed in nss-3.22:
1201 - # https://bugzilla.mozilla.org/show_bug.cgi?id=1187545
1202 - # https://hg.mozilla.org/projects/nss/rev/df1729d37870
1203 - nssutils="addbuiltin atob baddbdir btoa certcgi certutil
1204 - cmsutil conflict crlutil derdump digest makepqg mangle modutil multinit
1205 - nonspr10 ocspclnt oidcalc p7content p7env p7sign p7verify pk11mode
1206 - pk12util pp rsaperf selfserv shlibsign signtool signver ssltap strsclnt
1207 - symkeyutil tstclnt vfychain vfyserv"
1208 - # install man-pages for utils (bug #516810)
1209 - doman doc/nroff/*.1
1210 - fi
1211 - pushd dist/*/bin >/dev/null || die
1212 - for f in ${nssutils}; do
1213 - dobin ${f}
1214 - done
1215 - popd >/dev/null || die
1216 - fi
1217 -
1218 - # Prelink breaks the CHK files. We don't have any reliable way to run
1219 - # shlibsign after prelink.
1220 - dodir /etc/prelink.conf.d
1221 - printf -- "-b ${EPREFIX}/usr/$(get_libdir)/lib%s.so\n" ${NSS_CHK_SIGN_LIBS} \
1222 - > "${ED}"/etc/prelink.conf.d/nss.conf
1223 -}
1224 -
1225 -pkg_postinst() {
1226 - multilib_pkg_postinst() {
1227 - # We must re-sign the libraries AFTER they are stripped.
1228 - local shlibsign="${EROOT}/usr/bin/shlibsign"
1229 - # See if we can execute it (cross-compiling & such). #436216
1230 - "${shlibsign}" -h >&/dev/null
1231 - if [[ $? -gt 1 ]] ; then
1232 - shlibsign="shlibsign"
1233 - fi
1234 - generate_chk "${shlibsign}" "${EROOT}"/usr/$(get_libdir)
1235 - }
1236 -
1237 - multilib_foreach_abi multilib_pkg_postinst
1238 -}
1239 -
1240 -pkg_postrm() {
1241 - multilib_pkg_postrm() {
1242 - cleanup_chk "${EROOT}"/usr/$(get_libdir)
1243 - }
1244 -
1245 - multilib_foreach_abi multilib_pkg_postrm
1246 -}
1247
1248 diff --git a/dev-libs/nss/nss-3.27.ebuild b/dev-libs/nss/nss-3.27.ebuild
1249 deleted file mode 100644
1250 index 3e9034e..00000000
1251 --- a/dev-libs/nss/nss-3.27.ebuild
1252 +++ /dev/null
1253 @@ -1,338 +0,0 @@
1254 -# Copyright 1999-2016 Gentoo Foundation
1255 -# Distributed under the terms of the GNU General Public License v2
1256 -# $Id$
1257 -
1258 -EAPI=6
1259 -
1260 -inherit eutils flag-o-matic multilib toolchain-funcs multilib-minimal
1261 -
1262 -NSPR_VER="4.12"
1263 -RTM_NAME="NSS_${PV//./_}_RTM"
1264 -# Rev of https://git.fedorahosted.org/cgit/nss-pem.git
1265 -PEM_GIT_REV="429b0222759d8ad8e6dcd29e62875ae3efd69116"
1266 -PEM_P="${PN}-pem-20160329"
1267 -
1268 -DESCRIPTION="Mozilla's Network Security Services library that implements PKI support"
1269 -HOMEPAGE="http://www.mozilla.org/projects/security/pki/nss/"
1270 -SRC_URI="https://archive.mozilla.org/pub/security/nss/releases/${RTM_NAME}/src/${P}.tar.gz
1271 - nss-pem? ( https://dev.gentoo.org/~polynomial-c/${PEM_P}.tar.xz )"
1272 -
1273 -LICENSE="|| ( MPL-2.0 GPL-2 LGPL-2.1 )"
1274 -SLOT="0"
1275 -KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~amd64-fbsd ~x86-fbsd ~amd64-linux ~x86-linux ~x86-macos ~sparc-solaris ~x64-solaris ~x86-solaris"
1276 -IUSE="cacert +nss-pem utils"
1277 -CDEPEND=">=dev-db/sqlite-3.8.2[${MULTILIB_USEDEP}]
1278 - >=sys-libs/zlib-1.2.8-r1[${MULTILIB_USEDEP}]"
1279 -DEPEND=">=virtual/pkgconfig-0-r1[${MULTILIB_USEDEP}]
1280 - >=dev-libs/nspr-${NSPR_VER}[${MULTILIB_USEDEP}]
1281 - ${CDEPEND}"
1282 -RDEPEND=">=dev-libs/nspr-${NSPR_VER}[${MULTILIB_USEDEP}]
1283 - ${CDEPEND}
1284 - abi_x86_32? (
1285 - !<=app-emulation/emul-linux-x86-baselibs-20140508-r12
1286 - !app-emulation/emul-linux-x86-baselibs[-abi_x86_32(-)]
1287 - )"
1288 -
1289 -RESTRICT="test"
1290 -
1291 -S="${WORKDIR}/${P}/${PN}"
1292 -
1293 -MULTILIB_CHOST_TOOLS=(
1294 - /usr/bin/nss-config
1295 -)
1296 -
1297 -PATCHES=(
1298 - # Custom changes for gentoo
1299 - "${FILESDIR}/${PN}-3.21-gentoo-fixups.patch"
1300 - "${FILESDIR}/${PN}-3.21-gentoo-fixup-warnings.patch"
1301 - "${FILESDIR}/${PN}-3.23-hppa-byte_order.patch"
1302 -)
1303 -
1304 -src_unpack() {
1305 - unpack ${A}
1306 - if use nss-pem ; then
1307 - mv "${PN}"/lib/ckfw/pem/ "${S}"/lib/ckfw/ || die
1308 - fi
1309 -}
1310 -
1311 -src_prepare() {
1312 - if use nss-pem ; then
1313 - PATCHES+=(
1314 - "${FILESDIR}/${PN}-3.21-enable-pem.patch"
1315 - )
1316 - fi
1317 - if use cacert ; then #521462
1318 - PATCHES+=(
1319 - "${FILESDIR}/${PN}-3.21-cacert-class3.patch"
1320 - )
1321 - fi
1322 -
1323 - default
1324 -
1325 - pushd coreconf >/dev/null || die
1326 - # hack nspr paths
1327 - echo 'INCLUDES += -I$(DIST)/include/dbm' \
1328 - >> headers.mk || die "failed to append include"
1329 -
1330 - # modify install path
1331 - sed -e '/CORE_DEPTH/s:SOURCE_PREFIX.*$:SOURCE_PREFIX = $(CORE_DEPTH)/dist:' \
1332 - -i source.mk || die
1333 -
1334 - # Respect LDFLAGS
1335 - sed -i -e 's/\$(MKSHLIB) -o/\$(MKSHLIB) \$(LDFLAGS) -o/g' rules.mk
1336 - popd >/dev/null || die
1337 -
1338 - # Fix pkgconfig file for Prefix
1339 - sed -i -e "/^PREFIX =/s:= /usr:= ${EPREFIX}/usr:" \
1340 - config/Makefile || die
1341 -
1342 - # use host shlibsign if need be #436216
1343 - if tc-is-cross-compiler ; then
1344 - sed -i \
1345 - -e 's:"${2}"/shlibsign:shlibsign:' \
1346 - cmd/shlibsign/sign.sh || die
1347 - fi
1348 -
1349 - # dirty hack
1350 - sed -i -e "/CRYPTOLIB/s:\$(SOFTOKEN_LIB_DIR):../freebl/\$(OBJDIR):" \
1351 - lib/ssl/config.mk || die
1352 - sed -i -e "/CRYPTOLIB/s:\$(SOFTOKEN_LIB_DIR):../../lib/freebl/\$(OBJDIR):" \
1353 - cmd/platlibs.mk || die
1354 -
1355 - multilib_copy_sources
1356 -
1357 - strip-flags
1358 -}
1359 -
1360 -multilib_src_configure() {
1361 - # Ensure we stay multilib aware
1362 - sed -i -e "/@libdir@/ s:lib64:$(get_libdir):" config/Makefile || die
1363 -}
1364 -
1365 -nssarch() {
1366 - # Most of the arches are the same as $ARCH
1367 - local t=${1:-${CHOST}}
1368 - case ${t} in
1369 - aarch64*)echo "aarch64";;
1370 - hppa*) echo "parisc";;
1371 - i?86*) echo "i686";;
1372 - x86_64*) echo "x86_64";;
1373 - *) tc-arch ${t};;
1374 - esac
1375 -}
1376 -
1377 -nssbits() {
1378 - local cc cppflags="${1}CPPFLAGS" cflags="${1}CFLAGS"
1379 - if [[ ${1} == BUILD_ ]]; then
1380 - cc=$(tc-getBUILD_CC)
1381 - else
1382 - cc=$(tc-getCC)
1383 - fi
1384 - echo > "${T}"/test.c || die
1385 - ${cc} ${!cppflags} ${!cflags} -c "${T}"/test.c -o "${T}/${1}test.o" || die
1386 - case $(file "${T}/${1}test.o") in
1387 - *32-bit*x86-64*) echo USE_X32=1;;
1388 - *64-bit*|*ppc64*|*x86_64*) echo USE_64=1;;
1389 - *32-bit*|*ppc*|*i386*) ;;
1390 - *) die "Failed to detect whether ${cc} builds 64bits or 32bits, disable distcc if you're using it, please";;
1391 - esac
1392 -}
1393 -
1394 -multilib_src_compile() {
1395 - # use ABI to determine bit'ness, or fallback if unset
1396 - local buildbits mybits
1397 - case "${ABI}" in
1398 - n32) mybits="USE_N32=1";;
1399 - x32) mybits="USE_X32=1";;
1400 - s390x|*64) mybits="USE_64=1";;
1401 - ${DEFAULT_ABI})
1402 - einfo "Running compilation test to determine bit'ness"
1403 - mybits=$(nssbits)
1404 - ;;
1405 - esac
1406 - # bitness of host may differ from target
1407 - if tc-is-cross-compiler; then
1408 - buildbits=$(nssbits BUILD_)
1409 - fi
1410 -
1411 - local makeargs=(
1412 - CC="$(tc-getCC)"
1413 - AR="$(tc-getAR) rc \$@"
1414 - RANLIB="$(tc-getRANLIB)"
1415 - OPTIMIZER=
1416 - ${mybits}
1417 - )
1418 -
1419 - # Take care of nspr settings #436216
1420 - local myCPPFLAGS="${CPPFLAGS} $($(tc-getPKG_CONFIG) nspr --cflags)"
1421 - unset NSPR_INCLUDE_DIR
1422 -
1423 - # Do not let `uname` be used.
1424 - if use kernel_linux ; then
1425 - makeargs+=(
1426 - OS_TARGET=Linux
1427 - OS_RELEASE=2.6
1428 - OS_TEST="$(nssarch)"
1429 - )
1430 - fi
1431 -
1432 - export NSS_ENABLE_WERROR=0 #567158
1433 - export BUILD_OPT=1
1434 - export NSS_USE_SYSTEM_SQLITE=1
1435 - export NSDISTMODE=copy
1436 - export NSS_ENABLE_ECC=1
1437 - export FREEBL_NO_DEPEND=1
1438 - export ASFLAGS=""
1439 -
1440 - local d
1441 -
1442 - # Build the host tools first.
1443 - LDFLAGS="${BUILD_LDFLAGS}" \
1444 - XCFLAGS="${BUILD_CFLAGS}" \
1445 - NSPR_LIB_DIR="${T}/fakedir" \
1446 - emake -j1 -C coreconf \
1447 - CC="$(tc-getBUILD_CC)" \
1448 - ${buildbits:-${mybits}}
1449 - makeargs+=( NSINSTALL="${PWD}/$(find -type f -name nsinstall)" )
1450 -
1451 - # Then build the target tools.
1452 - for d in . lib/dbm ; do
1453 - CPPFLAGS="${myCPPFLAGS}" \
1454 - XCFLAGS="${CFLAGS} ${CPPFLAGS}" \
1455 - NSPR_LIB_DIR="${T}/fakedir" \
1456 - emake -j1 "${makeargs[@]}" -C ${d}
1457 - done
1458 -}
1459 -
1460 -# Altering these 3 libraries breaks the CHK verification.
1461 -# All of the following cause it to break:
1462 -# - stripping
1463 -# - prelink
1464 -# - ELF signing
1465 -# http://www.mozilla.org/projects/security/pki/nss/tech-notes/tn6.html
1466 -# Either we have to NOT strip them, or we have to forcibly resign after
1467 -# stripping.
1468 -#local_libdir="$(get_libdir)"
1469 -#export STRIP_MASK="
1470 -# */${local_libdir}/libfreebl3.so*
1471 -# */${local_libdir}/libnssdbm3.so*
1472 -# */${local_libdir}/libsoftokn3.so*"
1473 -
1474 -export NSS_CHK_SIGN_LIBS="freebl3 nssdbm3 softokn3"
1475 -
1476 -generate_chk() {
1477 - local shlibsign="$1"
1478 - local libdir="$2"
1479 - einfo "Resigning core NSS libraries for FIPS validation"
1480 - shift 2
1481 - local i
1482 - for i in ${NSS_CHK_SIGN_LIBS} ; do
1483 - local libname=lib${i}.so
1484 - local chkname=lib${i}.chk
1485 - "${shlibsign}" \
1486 - -i "${libdir}"/${libname} \
1487 - -o "${libdir}"/${chkname}.tmp \
1488 - && mv -f \
1489 - "${libdir}"/${chkname}.tmp \
1490 - "${libdir}"/${chkname} \
1491 - || die "Failed to sign ${libname}"
1492 - done
1493 -}
1494 -
1495 -cleanup_chk() {
1496 - local libdir="$1"
1497 - shift 1
1498 - local i
1499 - for i in ${NSS_CHK_SIGN_LIBS} ; do
1500 - local libfname="${libdir}/lib${i}.so"
1501 - # If the major version has changed, then we have old chk files.
1502 - [ ! -f "${libfname}" -a -f "${libfname}.chk" ] \
1503 - && rm -f "${libfname}.chk"
1504 - done
1505 -}
1506 -
1507 -multilib_src_install() {
1508 - pushd dist >/dev/null || die
1509 -
1510 - dodir /usr/$(get_libdir)
1511 - cp -L */lib/*$(get_libname) "${ED}"/usr/$(get_libdir) || die "copying shared libs failed"
1512 - cp -L */lib/libcrmf.a "${ED}"/usr/$(get_libdir) || die "copying libs failed"
1513 - cp -L */lib/libfreebl.a "${ED}"/usr/$(get_libdir) || die "copying libs failed"
1514 -
1515 - # Install nss-config and pkgconfig file
1516 - dodir /usr/bin
1517 - cp -L */bin/nss-config "${ED}"/usr/bin || die
1518 - dodir /usr/$(get_libdir)/pkgconfig
1519 - cp -L */lib/pkgconfig/nss.pc "${ED}"/usr/$(get_libdir)/pkgconfig || die
1520 -
1521 - # create an nss-softokn.pc from nss.pc for libfreebl and some private headers
1522 - # bug 517266
1523 - sed -e 's#Libs:#Libs: -lfreebl#' \
1524 - -e 's#Cflags:#Cflags: -I${includedir}/private#' \
1525 - */lib/pkgconfig/nss.pc >"${ED}"/usr/$(get_libdir)/pkgconfig/nss-softokn.pc \
1526 - || die "could not create nss-softokn.pc"
1527 -
1528 - # all the include files
1529 - insinto /usr/include/nss
1530 - doins public/nss/*.h
1531 - insinto /usr/include/nss/private
1532 - doins private/nss/{blapi,alghmac}.h
1533 -
1534 - popd >/dev/null || die
1535 -
1536 - local f nssutils
1537 - # Always enabled because we need it for chk generation.
1538 - nssutils="shlibsign"
1539 -
1540 - if multilib_is_native_abi ; then
1541 - if use utils; then
1542 - # The tests we do not need to install.
1543 - #nssutils_test="bltest crmftest dbtest dertimetest
1544 - #fipstest remtest sdrtest"
1545 - # checkcert utils has been removed in nss-3.22:
1546 - # https://bugzilla.mozilla.org/show_bug.cgi?id=1187545
1547 - # https://hg.mozilla.org/projects/nss/rev/df1729d37870
1548 - nssutils="addbuiltin atob baddbdir btoa certcgi certutil
1549 - cmsutil conflict crlutil derdump digest makepqg mangle modutil multinit
1550 - nonspr10 ocspclnt oidcalc p7content p7env p7sign p7verify pk11mode
1551 - pk12util pp rsaperf selfserv shlibsign signtool signver ssltap strsclnt
1552 - symkeyutil tstclnt vfychain vfyserv"
1553 - # install man-pages for utils (bug #516810)
1554 - doman doc/nroff/*.1
1555 - fi
1556 - pushd dist/*/bin >/dev/null || die
1557 - for f in ${nssutils}; do
1558 - dobin ${f}
1559 - done
1560 - popd >/dev/null || die
1561 - fi
1562 -
1563 - # Prelink breaks the CHK files. We don't have any reliable way to run
1564 - # shlibsign after prelink.
1565 - dodir /etc/prelink.conf.d
1566 - printf -- "-b ${EPREFIX}/usr/$(get_libdir)/lib%s.so\n" ${NSS_CHK_SIGN_LIBS} \
1567 - > "${ED}"/etc/prelink.conf.d/nss.conf
1568 -}
1569 -
1570 -pkg_postinst() {
1571 - multilib_pkg_postinst() {
1572 - # We must re-sign the libraries AFTER they are stripped.
1573 - local shlibsign="${EROOT}/usr/bin/shlibsign"
1574 - # See if we can execute it (cross-compiling & such). #436216
1575 - "${shlibsign}" -h >&/dev/null
1576 - if [[ $? -gt 1 ]] ; then
1577 - shlibsign="shlibsign"
1578 - fi
1579 - generate_chk "${shlibsign}" "${EROOT}"/usr/$(get_libdir)
1580 - }
1581 -
1582 - multilib_foreach_abi multilib_pkg_postinst
1583 -}
1584 -
1585 -pkg_postrm() {
1586 - multilib_pkg_postrm() {
1587 - cleanup_chk "${EROOT}"/usr/$(get_libdir)
1588 - }
1589 -
1590 - multilib_foreach_abi multilib_pkg_postrm
1591 -}