Mercurial > trustbridge > nss-cmake-static
comparison README.chromium @ 0:1e5118fa0cb1
This is NSS with a Cmake Buildsyste
To compile a static NSS library for Windows we've used the
Chromium-NSS fork and added a Cmake buildsystem to compile
it statically for Windows. See README.chromium for chromium
changes and README.trustbridge for our modifications.
| author | Andre Heinecke <andre.heinecke@intevation.de> |
|---|---|
| date | Mon, 28 Jul 2014 10:47:06 +0200 |
| parents | |
| children |
comparison
equal
deleted
inserted
replaced
| -1:000000000000 | 0:1e5118fa0cb1 |
|---|---|
| 1 Name: Network Security Services (NSS) | |
| 2 Short Name: nss | |
| 3 URL: http://www.mozilla.org/projects/security/pki/nss/ | |
| 4 Version: 3.16.2 Beta 3 | |
| 5 License: MPL 2 | |
| 6 License File: nss/COPYING | |
| 7 Security Critical: yes | |
| 8 | |
| 9 Description: | |
| 10 NSS 3.16.2 Beta 3 with NSPR 4.10.4 | |
| 11 | |
| 12 This copy of NSS has been customized for Chromium. NSPR is also put here | |
| 13 rather than in a separate directory to emphasize the fact that Chromium is | |
| 14 using NSPR strictly as an NSS dependency. | |
| 15 | |
| 16 We took a subset of NSS, omitting the SSL and SMIME libraries and the | |
| 17 built-in root CA certificates module. This NSS subset satisfies the | |
| 18 dependencies of the NSS SSL library in src/net/third_party/nss. Do NOT use | |
| 19 this copy of NSS on platforms that have NSS as system libraries, such as | |
| 20 Linux. | |
| 21 | |
| 22 The source code was checked out from the mozilla.org CVS or hg repository using | |
| 23 the nspr-checkout.sh and nss-checkout.sh scripts in the scripts directory. | |
| 24 The current source code was checked out with the hg tag NSS_3_16_2_BETA3 | |
| 25 and the hg tag NSPR_4_10_4_RTM. | |
| 26 | |
| 27 Local Modifications: | |
| 28 | |
| 29 We made the following local changes to NSPR. | |
| 30 - patches/nspr-static.patch: to build NSPR as static libraries. See NSPR | |
| 31 bug 533014 (https://bugzilla.mozilla.org/show_bug.cgi?id=533014). | |
| 32 - patches/prcpucfg.h: added to the nspr/pr/include directory. | |
| 33 - patches/nspr-attach-as-system-thread.patch: attach a "foreign" thread | |
| 34 (a thread not created by NSPR) to NSPR as a "system" thread rather than | |
| 35 a "user" thread, which needs to terminate before PR_Cleanup can return. | |
| 36 (The "system" vs. "user" thread distinction comes from Java, and | |
| 37 ultimately from Solaris threads.) This is a workaround for | |
| 38 http://crbug.com/40663. | |
| 39 - patches/nspr-remove-io.patch: Remove IO operations in NSPR to allow NSS | |
| 40 to work in the sandbox. Do not initialize IO when initializing NSPR. | |
| 41 Windows version of NSPR also tried to use getaddrinfo to resolve hostname | |
| 42 in a SSL connection. By removing _PR_HAVE_GETADDRINFO this will force it | |
| 43 to use PR_GetHostByName. Removing _PR_INET6_PROBE will prevent it from | |
| 44 creating an IPv6 socket to probe if IPv6 is there. | |
| 45 DO NOT upstream this patch. | |
| 46 | |
| 47 We made the following local changes to NSS. | |
| 48 - patches/nss-static.patch: to build NSS as static libraries and omit | |
| 49 libpkix (the new certification path validation library) and | |
| 50 softoken/legacydb (support for the old Berkeley DB databases). See NSS | |
| 51 bug 534471 (https://bugzilla.mozilla.org/show_bug.cgi?id=534471). | |
| 52 - nss/exports_win.def: The list of exports to use when building nss as a | |
| 53 dynamic library (crnss.dll). | |
| 54 - nss/lib/ckfw/builtins/certdata.c: a generated file. Do an upstream NSS | |
| 55 build and copy the generated certdata.c. | |
| 56 - nss/lib/freebl/build_config_mac.h: a header that defines the target arch | |
| 57 specific configuration macros for lib/freebl on iOS and Mac OS X. This | |
| 58 works around the lack of support for the xcode_settings | |
| 59 GCC_PREPROCESSOR_DEFINITIONS[arch=foo] by the ninja GYP generator | |
| 60 (http://crbug.com/122592). | |
| 61 - nss/lib/freebl/mpi/mpi_arm_mac.c: a wrapper file for mpi_arm.c for iOS | |
| 62 and Mac OS X. This works around the inability to specify target arch | |
| 63 specific source files in Xcode. | |
| 64 - patches/nss-remove-fortezza.patch: remove Fortezza certificate support | |
| 65 from PK11_ImportPublicKey. See NSS bug 668397 | |
| 66 (https://bugzilla.mozilla.org/show_bug.cgi?id=668397). | |
| 67 - patches/nss-urandom-abort.patch: call abort() if NSS cannot read from | |
| 68 /dev/urandom. See Chromium issue 244661 (http://crbug.com/244661). | |
| 69 - patches/nss-chacha20-poly1305.patch: Support ChaCha20+Poly1305 cipher | |
| 70 suites. See NSS bug 917571 | |
| 71 (https://bugzilla.mozilla.org/show_bug.cgi?id=917571). | |
| 72 - patches/nss-genname-warnings.patch: Fix compiler warnings in | |
| 73 lib/certdb/genname.c that are treated as errors by -Werror,-Wpointer-sign. | |
| 74 Will be fixed in NSS 3.16.2. | |
| 75 - patches/nss-rsa-key-check.patch: RSA_PrivateKeyCheck should not swap | |
| 76 members of the input RSAPrivateKey. | |
| 77 https://bugzilla.mozilla.org/show_bug.cgi?id=1021102 |