diff mbox series

[meta-oe] nss: upgrade 3.126 -> 3.132

Message ID 20261023100924.2643583-1-peter.marko@siemens.com
State Under Review
Headers show
Series [meta-oe] nss: upgrade 3.126 -> 3.132 | expand

Commit Message

Peter Marko Oct. 23, 2026, 10:09 a.m. UTC 
From: Peter Marko <peter.marko@siemens.com>

Amongst other things, this addresses eMudhra certificates issue.
See https://emudhra.we-have-a-problem.com/

Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
 ...bl-add-a-configure-option-to-disable-ARM-HW-cryp.patch | 8 ++++----
 .../recipes-support/nss/{nss_3.126.bb => nss_3.132.bb}    | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)
 rename meta-oe/recipes-support/nss/{nss_3.126.bb => nss_3.132.bb} (99%)
diff mbox series

Patch

diff --git a/meta-oe/recipes-support/nss/nss/0007-freebl-add-a-configure-option-to-disable-ARM-HW-cryp.patch b/meta-oe/recipes-support/nss/nss/0007-freebl-add-a-configure-option-to-disable-ARM-HW-cryp.patch
index 2a14dffbea..1d2d7b4f38 100644
--- a/meta-oe/recipes-support/nss/nss/0007-freebl-add-a-configure-option-to-disable-ARM-HW-cryp.patch
+++ b/meta-oe/recipes-support/nss/nss/0007-freebl-add-a-configure-option-to-disable-ARM-HW-cryp.patch
@@ -17,16 +17,16 @@  diff --git a/nss/lib/freebl/Makefile b/nss/lib/freebl/Makefile
 index 0ebfc92..3ee7623 100644
 --- a/nss/lib/freebl/Makefile
 +++ b/nss/lib/freebl/Makefile
-@@ -136,6 +136,8 @@ endif
+@@ -142,6 +142,8 @@ endif
          endif
      endif
  endif
 +ifdef NSS_USE_ARM_HW_CRYPTO
 +    DEFINES += -DNSS_USE_ARM_HW_CRYPTO
  ifeq ($(CPU_ARCH),aarch64)
-     ifdef CC_IS_CLANG
-         DEFINES += -DUSE_HW_AES -DUSE_HW_SHA1 -DUSE_HW_SHA2 -DHAVE_PLATFORM_GHASH
-@@ -178,6 +180,7 @@ endif
+     # CC_IS_GCC covers clang too; the Arm crypto extension intrinsics need one
+     # or the other.
+@@ -214,6 +216,7 @@ endif
          endif
      endif
  endif
diff --git a/meta-oe/recipes-support/nss/nss_3.126.bb b/meta-oe/recipes-support/nss/nss_3.132.bb
similarity index 99%
rename from meta-oe/recipes-support/nss/nss_3.126.bb
rename to meta-oe/recipes-support/nss/nss_3.132.bb
index f26e70539f..4d24497eef 100644
--- a/meta-oe/recipes-support/nss/nss_3.126.bb
+++ b/meta-oe/recipes-support/nss/nss_3.132.bb
@@ -33,7 +33,7 @@  SRC_URI = "https://ftp.mozilla.org/pub/security/nss/releases/${VERSION_DIR}/src/
            file://0006-Fix-nss-multilib-build-on-openSUSE-11.x-32bit.patch \
            file://0007-freebl-add-a-configure-option-to-disable-ARM-HW-cryp.patch \
            "
-SRC_URI[sha256sum] = "7aa07c758be1453d82d739240b249ffb7aef0041be488067e1c0f348e1f9e337"
+SRC_URI[sha256sum] = "ee9cf4837ba801141a804321c4462ad8f452ff4314275c6d5108a6b05af227ff"
 
 UPSTREAM_CHECK_URI = "https://ftp.mozilla.org/pub/security/nss/releases/"
 UPSTREAM_CHECK_REGEX = "NSS_(?P<pver>\d+(\_\d+)+)"