Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Update to 3.73 to alievate critical vulnerability CVE-2021-43527:
Memory corruption via DER-encoded DSA and RSA-PSS signatures

https://www.mozilla.org/en-US/security/advisories/mfsa2021-51/

Signed-off-by: Donald Hoskins <grommish@gmail.com>

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Switch to AUTORELEASE for simplicity.

Disable parallel compilation as there's something wrong with NSS' build
system. Reliably fails with make -j 12 on a ryzen 3600.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Commit 657574f45 disabled building the host nsinstall program when using
QUILT.  However, the host nsinstall is needed to compile the package,
breaking compilation with QUILT.

Move the native compile to Build/Configure, which will not be called for
prepare, refresh, or update targets, but will be called before
Build/Compile.

nss does not have a configure script, so Build/Configure/Default is not
being called.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

FPIC may be defined with more than one flag.  In that case, it becomes
necessary to use it inside QUOTES in a shell context.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Allows targets such as prepare, refresh, or update to be run without
building dependencies for easier patch maintenance.

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>

Added patch to fix compilation with musl 1.2.x.

Install nss-config file and fix it up. Might help some packages...

Refreshed others.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Fixes
CVE-2020-12403
CVE-2020-12401
CVE-2020-6829
CVE-2020-12400

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

also enable parallel build as now is safe

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

disable arm32_neon on unsupported target

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

it seems that it can lead to segfault in libfreebl3.so

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

also refresh patches

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

_GNU_SOURCE is needed for fdopen, sigaction, and probably more.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

also package libnssckbi.so

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

also refresh patches

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

and clean some comments

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

usleep is deprecated and is optionally not available with uClibc-ng.

Added PKG_LICENSE_FILES.

Added PKG_CPE_ID for proper CVE tracking.

Other minor cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

also rework the installed files

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Network Security Services (NSS) is a set of libraries designed
to support cross-platform development of security-enabled client
and server applications. Applications built with NSS can support
SSL v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME,
X.509 v3 certificates, and other security standards.

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>