| author | Urja (ARMLFS builder)
<urja+armlfs@urja.dev> 2026-01-10 11:13:29 UTC |
| committer | Urja (ARMLFS builder)
<urja+armlfs@urja.dev> 2026-01-10 11:13:29 UTC |
| parent | 13ccc8ebfa36dfb47936cdef5fb8b39040ae99fc |
| .SRCINFO | +3 | -3 |
| PKGBUILD | +2 | -2 |
| PKGBUILD.old | +133 | -0 |
diff --git a/.SRCINFO b/.SRCINFO index 28a1012..95f9391 100644 --- a/.SRCINFO +++ b/.SRCINFO @@ -1,6 +1,6 @@ pkgbase = nss pkgdesc = Network Security Services - pkgver = 3.119 + pkgver = 3.119.1 pkgrel = 1 url = https://firefox-source-docs.mozilla.org/security/nss/index.html arch = x86_64 @@ -17,12 +17,12 @@ pkgbase = nss depends = sh depends = sqlite depends = zlib - source = hg+https://hg.mozilla.org/projects/nss#tag=NSS_3_119_RTM + source = hg+https://hg.mozilla.org/projects/nss#tag=NSS_3_119_1_RTM source = bundle.sh source = certdata2pem.py source = 0001-Don-t-USE_ARM_GCM.patch source = 0002-fix-armv8_c_lib-dependency.patch - b2sums = fa65ad2e0504d5cb19cf72801aff067cbde2e0ec9b85c494df66e8676a1d287e53b93850017d123f7c6a72afb4c7b344f9827fd5b105c22d4a4e5a323d5f2981 + b2sums = 55c47b046e58fb84ac8c5600635b2ab39c365c21985a364d4bc92adaf2a2c18af266acac695b1b6890a957a984c8b22e88cfb3a46fe0f8b70f2c4eb0674efec3 b2sums = 4be5dd836c844fdd7b63302a6994d62149082c3bc81eef70f373f416fed80a61a923960e4390d1c391b81ab01b409370d788818a30ffdd3a4ed467b670f990f6 b2sums = 6bb59dcc9289916dcbf8fb6d73db0c0cd7582dc12a3aa4e8be19ec62c9ede65fdd9470a2d92ec5a114506b78d2d21b8ae0a1b45a17dc1f90f7d75434a93da510 b2sums = c7126ea70883cc4ab0bcb98d2a22062a8a84583b51f6ac2f1aa19451a59bc3ab0f49ecb6250f1a1910e6e009c93b6771692d0ac2523d181ddb020501ca987649 diff --git a/PKGBUILD b/PKGBUILD index 8686c57..8b63604 100644 --- a/PKGBUILD +++ b/PKGBUILD @@ -11,7 +11,7 @@ pkgname=( nss ca-certificates-mozilla ) -pkgver=3.119 +pkgver=3.119.1 pkgrel=1 pkgdesc="Network Security Services" url="https://firefox-source-docs.mozilla.org/security/nss/index.html" @@ -38,7 +38,7 @@ source=( 0001-Don-t-USE_ARM_GCM.patch 0002-fix-armv8_c_lib-dependency.patch ) -b2sums=('fa65ad2e0504d5cb19cf72801aff067cbde2e0ec9b85c494df66e8676a1d287e53b93850017d123f7c6a72afb4c7b344f9827fd5b105c22d4a4e5a323d5f2981' +b2sums=('55c47b046e58fb84ac8c5600635b2ab39c365c21985a364d4bc92adaf2a2c18af266acac695b1b6890a957a984c8b22e88cfb3a46fe0f8b70f2c4eb0674efec3' '4be5dd836c844fdd7b63302a6994d62149082c3bc81eef70f373f416fed80a61a923960e4390d1c391b81ab01b409370d788818a30ffdd3a4ed467b670f990f6' '6bb59dcc9289916dcbf8fb6d73db0c0cd7582dc12a3aa4e8be19ec62c9ede65fdd9470a2d92ec5a114506b78d2d21b8ae0a1b45a17dc1f90f7d75434a93da510' 'c7126ea70883cc4ab0bcb98d2a22062a8a84583b51f6ac2f1aa19451a59bc3ab0f49ecb6250f1a1910e6e009c93b6771692d0ac2523d181ddb020501ca987649' diff --git a/PKGBUILD.old b/PKGBUILD.old new file mode 100644 index 0000000..8686c57 --- /dev/null +++ b/PKGBUILD.old @@ -0,0 +1,133 @@ +# Maintainer: Jan Alexander Steffens (heftig) <heftig@archlinux.org> +# Contributor: Jan de Groot <jgc@archlinux.org> + +# ALARM: Kevin Mihelich <kevin@archlinuxarm.org> +# - remove --target x64 from build.sh line +# - add -Ddisable_arm32_neon=1 -Ddisable_arm_hw_aes=1 -Ddisable_arm_hw_sha1=1 -Ddisable_arm_hw_sha2=1 to build.sh +# - remove -march=armv8-a in AArch64 CFLAGS to not conflict with -march=armv8-a+crypto being added + +pkgbase=nss +pkgname=( + nss + ca-certificates-mozilla +) +pkgver=3.119 +pkgrel=1 +pkgdesc="Network Security Services" +url="https://firefox-source-docs.mozilla.org/security/nss/index.html" +arch=(x86_64 armv7h aarch64) +license=(MPL-2.0) +depends=( + glibc + nspr + p11-kit + sh + sqlite + zlib +) +makedepends=( + gyp + mercurial + perl + python +) +source=( + "hg+https://hg.mozilla.org/projects/nss#tag=NSS_${pkgver//./_}_RTM" + bundle.sh + certdata2pem.py + 0001-Don-t-USE_ARM_GCM.patch + 0002-fix-armv8_c_lib-dependency.patch +) +b2sums=('fa65ad2e0504d5cb19cf72801aff067cbde2e0ec9b85c494df66e8676a1d287e53b93850017d123f7c6a72afb4c7b344f9827fd5b105c22d4a4e5a323d5f2981' + '4be5dd836c844fdd7b63302a6994d62149082c3bc81eef70f373f416fed80a61a923960e4390d1c391b81ab01b409370d788818a30ffdd3a4ed467b670f990f6' + '6bb59dcc9289916dcbf8fb6d73db0c0cd7582dc12a3aa4e8be19ec62c9ede65fdd9470a2d92ec5a114506b78d2d21b8ae0a1b45a17dc1f90f7d75434a93da510' + 'c7126ea70883cc4ab0bcb98d2a22062a8a84583b51f6ac2f1aa19451a59bc3ab0f49ecb6250f1a1910e6e009c93b6771692d0ac2523d181ddb020501ca987649' + '61119ff32d9573d176460e50447cd548211cad6ae63e8758ac42c74081513bf0243c0d81534c34ef2bfd34caff3b1022bb60457ebf3b111c3247b76b04a07eba') + +prepare() { + mkdir -p certs + ln -srft certs nss/lib/ckfw/builtins/{certdata.txt,nssckbi.h} + + cd nss + patch -p1 -i "${srcdir}"/0001-Don-t-USE_ARM_GCM.patch + patch -p1 -i "${srcdir}"/0002-fix-armv8_c_lib-dependency.patch +} + +build() { + local buildsh_options=( + --disable-tests + --enable-libpkix + --opt + --system-nspr + --system-sqlite + -Ddisable_arm32_neon=1 + -Ddisable_arm_hw_aes=1 + -Ddisable_arm_hw_sha1=1 + -Ddisable_arm_hw_sha2=1 + ) + [[ $CARCH == "aarch64" ]] && CFLAGS=`echo $CFLAGS | sed -e 's/-march=armv8-a//'` && CXXFLAGS="$CFLAGS" + + cd certs + ../certdata2pem.py + + cd .. + ./bundle.sh + + cd nss + ./build.sh "${buildsh_options[@]}" +} + +package_nss() { + local nsprver="$(pkg-config --modversion nspr)" + local libdir=/usr/lib includedir=/usr/include/nss + + sed nss/pkg/pkg-config/nss.pc.in \ + -e "s,%prefix%,/usr,g" \ + -e "s,%exec_prefix%,\${prefix},g" \ + -e "s,%libdir%,$libdir,g" \ + -e "s,%includedir%,$includedir,g" \ + -e "s,%NSPR_VERSION%,$nsprver,g" \ + -e "s,%NSS_VERSION%,$pkgver,g" | + install -Dm644 /dev/stdin "$pkgdir$libdir/pkgconfig/nss.pc" + + ln -s nss.pc "$pkgdir$libdir/pkgconfig/mozilla-nss.pc" + + install -Dt "$pkgdir$libdir" dist/Release/lib/*.so + + local vmajor vminor vpatch + { read vmajor; read vminor; read vpatch; } \ + < <(awk '/#define.*NSS_V(MAJOR|MINOR|PATCH)/ {print $3}' nss/lib/nss/nss.h) + + sed nss/pkg/pkg-config/nss-config.in \ + -e "s,@prefix@,/usr,g" \ + -e "s,@exec_prefix@,/usr,g" \ + -e "s,@libdir@,$libdir,g" \ + -e "s,@includedir@,$includedir,g" \ + -e "s,@MOD_MAJOR_VERSION@,$vmajor,g" \ + -e "s,@MOD_MINOR_VERSION@,$vminor,g" \ + -e "s,@MOD_PATCH_VERSION@,$vpatch,g" | + install -D /dev/stdin "$pkgdir/usr/bin/nss-config" + + install -Dt "$pkgdir/usr/bin" \ + dist/Release/bin/{*util,shlibsign,signtool,signver,ssltap} + + install -Dt "$pkgdir$includedir" -m644 dist/public/nss/*.h + + install -Dt "$pkgdir/usr/share/man/man1" -m644 \ + nss/doc/nroff/{*util,signtool,signver,ssltap}.1 + + # Replace built-in trust with p11-kit connection + #ln -s pkcs11/p11-kit-trust.so "$pkgdir$libdir/p11-kit-trust.so" + #ln -sf p11-kit-trust.so "$pkgdir$libdir/libnssckbi.so" + rm -rf "$pkgdir$libdir/libnssckbi.so" +} + +package_ca-certificates-mozilla() { + pkgdesc="Mozilla's set of trusted CA certificates" + depends=('ca-certificates-utils>=20181109-3') + + install -Dm644 ca-bundle.trust.p11-kit \ + "$pkgdir/usr/share/ca-certificates/trust-source/mozilla.trust.p11-kit" +} + +# vim:set sw=2 sts=-1 et: