From 1b792e8970f0e2a01f6a47db79346317ad8d2e9b Mon Sep 17 00:00:00 2001 From: Krenzelok Frantisek Date: Thu, 3 Oct 2024 14:28:23 +0200 Subject: [PATCH] Update NSS to 3.105.0 --- .gitignore | 1 + nss-3.101-enable-kyber-policy.patch | 2 +- nss.spec | 7 +++++-- sources | 2 +- 4 files changed, 8 insertions(+), 4 deletions(-) diff --git a/.gitignore b/.gitignore index 9d2e000..23bbd8b 100644 --- a/.gitignore +++ b/.gitignore @@ -95,3 +95,4 @@ TestUser51.cert /nss-3.101-with-nspr-4.35.tar.gz /nss-3.103-with-nspr-4.35.tar.gz /nss-3.104-with-nspr-4.35.tar.gz +/nss-3.105-with-nspr-4.35.tar.gz diff --git a/nss-3.101-enable-kyber-policy.patch b/nss-3.101-enable-kyber-policy.patch index 374e4e6..89fce1c 100644 --- a/nss-3.101-enable-kyber-policy.patch +++ b/nss-3.101-enable-kyber-policy.patch @@ -8,6 +8,6 @@ diff -up ./lib/pk11wrap/pk11pars.c.enable_kyber_policy ./lib/pk11wrap/pk11pars.c - { CIPHER_NAME("XYBER768D00"), SEC_OID_XYBER768D00, 0 }, + { CIPHER_NAME("XYBER768D00"), SEC_OID_XYBER768D00, + NSS_USE_ALG_IN_SSL_KX }, + { CIPHER_NAME("MLKEM768X25519"), SEC_OID_MLKEM768X25519, 0 }, /* ANSI X9.62 named elliptic curves (characteristic two field) */ { CIPHER_NAME("C2PNB163V1"), SEC_OID_ANSIX962_EC_C2PNB163V1, - NSS_USE_ALG_IN_SSL_KX | NSS_USE_ALG_IN_CERT_SIGNATURE }, diff --git a/nss.spec b/nss.spec index 5871113..9c40d1c 100644 --- a/nss.spec +++ b/nss.spec @@ -1,5 +1,5 @@ %global nspr_version 4.35.0 -%global nss_version 3.104.0 +%global nss_version 3.105.0 # NOTE: To avoid NVR clashes of nspr* packages: # - reset %%{nspr_release} to 1, when updating %%{nspr_version} # - increment %%{nspr_version}, when updating the NSS part only @@ -7,7 +7,7 @@ %global nss_release %baserelease # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when # release number between nss and nspr are different. -%global nspr_release %[%baserelease+28] +%global nspr_release %[%baserelease+29] # only need to update this as we added new # algorithms under nss policy control %global crypto_policies_version 20240521 @@ -1084,6 +1084,9 @@ fi %changelog +* Thu Oct 3 2024 Frantisek Krenzelok - 3.105.0-1 +- Update NSS to 3.105.0 + * Wed Sep 4 2024 Frantisek Krenzelok - 3.104.0-1 - Update NSS to 3.104.0 diff --git a/sources b/sources index 81e8a30..4431210 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403fda3e3d4e7757838061ae56ccf5aac335cb54f254f0a9e6e9c0dd5920b4155a39264525b06 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7 -SHA512 (nss-3.104-with-nspr-4.35.tar.gz) = 15b3b3f7d29642d86e6930dbe07cc430dbe2c41a0a7bf22167ba37187157a7196d4a198ca788f74f38a60f67e410443e2509218dce6112c468e561fd265c780a +SHA512 (nss-3.105-with-nspr-4.35.tar.gz) = 8fad30acf07bddb501811fac63330816a1b0aaee301d94a4798f08e81be243afe894bd2202996339a7716a60639c0d6c4d20cc2dd407c757a6d3074c5c975673