GNU logs - #73152, boring messages

Message sent to guix-patches@HIDDEN:

Subject: [bug#73152] [PATCH 0/6] NSS updates
Resent-From: Ian Eure <ian@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: guix-patches@HIDDEN
Resent-Date: Mon, 09 Sep 2024 17:54:02 +0000
Resent-Message-ID: <handler.73152.B.172590439712410 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 73152 <at> debbugs.gnu.org
Cc: Ian Eure <ian@HIDDEN>
Feedback-ID: id9014242:Fastmail
From: Ian Eure <ian@HIDDEN>
Date: Mon,  9 Sep 2024 10:52:48 -0700
Message-ID: <20240909175249.8003-1-ian@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Received-SPF: pass client-ip=103.168.172.157; envelope-from=ian@HIDDEN;
 helo=fhigh6-smtp.messagingengine.com
X-Spam_score_int: -27
X-Spam_score: -2.8
X-Spam_bar: --
X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
 RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001,
 SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: -1.7 (-)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -2.7 (--)

Hello,

This is a first pass at getting the nss packages into shape, as I proposed
earlier this year[1].  Many packages depend on nss, so these patches need to
be applied to a new branch -- my suggestion is `nss-updates', but I have no
strong preference.

This patch series:

- Ungrafts nss
- Factors out package creation into the `make-nss' procedure.
- Updates nss and nss-rapid to use that procedure.
- Updates nss and nss-certs to 3.102.1, the current ESR.
- Updates nss-rapid to 3.104, the latest release.
- Removes nspr-4.32, as it doesn’t appear to be used by anything.

[1]: https://lists.gnu.org/archive/html/guix-devel/2024-06/msg00318.html

Ian Eure (6):
  gnu: Remove nss/fixed.
  gnu: Remove nspr-4.32.
  gnu: Add make-nss.
  gnu: nss: Update to 3.102.1.
  gnu: nss-rapid: Update to 3.104.
  gnu: nss-certs: Update to 3.102.1.

 gnu/packages/certs.scm |   4 +-
 gnu/packages/nss.scm   | 208 +++++++++++------------------------------
 2 files changed, 59 insertions(+), 153 deletions(-)

-- 
2.46.0

Message sent:

Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
Content-Type: text/plain; charset=utf-8
X-Loop: help-debbugs@HIDDEN
From: help-debbugs@HIDDEN (GNU bug Tracking System)
To: Ian Eure <ian@HIDDEN>
Subject: bug#73152: Acknowledgement ([PATCH 0/6] NSS updates)
Message-ID: <handler.73152.B.172590439712410.ack <at> debbugs.gnu.org>
References: <20240909175249.8003-1-ian@HIDDEN>
X-Gnu-PR-Message: ack 73152
X-Gnu-PR-Package: guix-patches
X-Gnu-PR-Keywords: patch
Reply-To: 73152 <at> debbugs.gnu.org
Date: Mon, 09 Sep 2024 17:54:02 +0000

Thank you for filing a new bug report with debbugs.gnu.org.

This is an automatically generated reply to let you know your message
has been received.

Your message is being forwarded to the package maintainers and other
interested parties for their attention; they will reply in due course.

Your message has been sent to the package maintainer(s):
 guix-patches@HIDDEN

If you wish to submit further information on this problem, please
send it to 73152 <at> debbugs.gnu.org.

Please do not send mail to help-debbugs@HIDDEN unless you wish
to report a problem with the Bug-tracking system.

--=20
73152: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D73152
GNU Bug Tracking System
Contact help-debbugs@HIDDEN with problems

Message sent to guix-patches@HIDDEN:

Subject: [bug#73152] [PATCH 1/1] gnu: nss-certs: Update to 3.102.1.
References: <20240909175249.8003-1-ian@HIDDEN>
In-Reply-To: <20240909175249.8003-1-ian@HIDDEN>
Resent-From: Ian Eure <ian@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: guix-patches@HIDDEN
Resent-Date: Mon, 09 Sep 2024 17:56:01 +0000
Resent-Message-ID: <handler.73152.B73152.172590456013259 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 73152 <at> debbugs.gnu.org
Cc: Ian Eure <ian@HIDDEN>
Feedback-ID: id9014242:Fastmail
From: Ian Eure <ian@HIDDEN>
Date: Mon,  9 Sep 2024 10:55:33 -0700
Message-ID: <20240909175540.8156-1-ian@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

* gnu/packages/certs.scm (nss-certs): Update to 3.102.1.

Change-Id: Ibb0b39ef97e04afc37c62c5dc23ab93eef1c1f10
---
 gnu/packages/certs.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/certs.scm b/gnu/packages/certs.scm
index e2de6b168b..9756b089c0 100644
--- a/gnu/packages/certs.scm
+++ b/gnu/packages/certs.scm
@@ -133,7 +133,7 @@ (define-public nss-certs
     ;; FIXME We used to refer to the nss package here, but that eventually caused
     ;; module cycles.  The below is a quick copy-paste job that must be kept in
     ;; sync manually.  Surely there's a better way…?
-    (version "3.99")
+    (version "3.102.1")
     (source (origin
               (method url-fetch)
               (uri (let ((version-with-underscores
@@ -144,7 +144,7 @@ (define-public nss-certs
                       "nss-" version ".tar.gz")))
               (sha256
                (base32
-                "1g89ig40gfi1sp02gybvl2z818lawcnrqjzsws36cdva834c5maw"))
+                "1k1pjxz0ab4lg8xqggbb8pw77c1q8h4bldi09z4pj5g4hwsjv62l"))
               ;; Create nss.pc and nss-config.
               (patches (search-patches "nss-3.56-pkgconfig.patch"
                                        "nss-getcwd-nonnull.patch"
-- 
2.46.0

Message sent to guix-patches@HIDDEN:

Subject: [bug#73152] [PATCH 1/6] gnu: Remove nss/fixed.
Resent-From: Ian Eure <ian@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: guix-patches@HIDDEN
Resent-Date: Mon, 09 Sep 2024 17:57:02 +0000
Resent-Message-ID: <handler.73152.B73152.172590456313317 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 73152 <at> debbugs.gnu.org
Cc: Ian Eure <ian@HIDDEN>
Feedback-ID: id9014242:Fastmail
From: Ian Eure <ian@HIDDEN>
Date: Mon,  9 Sep 2024 10:55:34 -0700
Message-ID: <20240909175540.8156-2-ian@HIDDEN>
In-Reply-To: <20240909175540.8156-1-ian@HIDDEN>
References: <20240909175540.8156-1-ian@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

* gnu/packages/nss.scm (nss/fixed): Delete variable.

Change-Id: I0a071a8c3c4a9e2a24b873177402735912192212
---
 gnu/packages/nss.scm | 51 --------------------------------------------
 1 file changed, 51 deletions(-)

diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm
index 6c60e9fbae..718a3ba4c0 100644
--- a/gnu/packages/nss.scm
+++ b/gnu/packages/nss.scm
@@ -271,57 +271,6 @@ (define-public nss
 security standards.")
     (license license:mpl2.0)))
 
-(define-public nss/fixed
-  (let ((actual-version "3.99"))
-    (hidden-package
-     (package
-       (inherit nss)
-       (version (string-append actual-version ".0")) ;for grafts requirements
-       (source (origin
-                 (inherit (package-source nss))
-                 (uri (let ((version-with-underscores
-                             (string-join (string-split actual-version #\.) "_")))
-                        (string-append
-                         "https://ftp.mozilla.org/pub/mozilla.org/security/nss/"
-                         "releases/NSS_" version-with-underscores "_RTM/src/"
-                         "nss-" actual-version ".tar.gz")))
-                 (sha256
-                  (base32
-                   "1g89ig40gfi1sp02gybvl2z818lawcnrqjzsws36cdva834c5maw"))))
-       (arguments
-        (substitute-keyword-arguments (package-arguments nss)
-          ((#:phases phases)
-           #~(modify-phases #$phases
-               (replace 'check
-                 (lambda* (#:key tests? #:allow-other-keys)
-                   (if tests?
-                       (begin
-                         ;; Use 127.0.0.1 instead of $HOST.$DOMSUF as HOSTADDR for
-                         ;; testing.  The latter requires a working DNS or /etc/hosts.
-                         (setenv "DOMSUF" "localdomain")
-                         (setenv "USE_IP" "TRUE")
-                         (setenv "IP_ADDRESS" "127.0.0.1")
-
-                         ;; This specific test is looking at performance "now
-                         ;; verify that we can quickly dump a database", and
-                         ;; we're not testing performance here (especially
-                         ;; since we're using faketime), so raise the
-                         ;; threshold
-                         (substitute* "nss/tests/dbtests/dbtests.sh"
-                           ((" -lt 5") " -lt 50"))
-
-                         ;; Since the test suite is very lengthy, run the test
-                         ;; suite once, not thrice as done by default, by
-                         ;; selecting only the 'standard' cycle.
-                         (setenv "NSS_CYCLES" "standard")
-
-                         ;; The "PayPalEE.cert" certificate expires every six months,
-                         ;; leading to test failures:
-                         ;; <https://bugzilla.mozilla.org/show_bug.cgi?id=609734>.  To
-                         ;; work around that, set the time to roughly the release date.
-                         (invoke "faketime" "2024-01-23" "./nss/tests/all.sh"))
-                       (format #t "test suite not run~%"))))))))))))
-
 ;; nss-rapid tracks the rapid release channel.  Unless your package requires a
 ;; newer version, you should prefer the `nss' package, which tracks the ESR
 ;; channel.
-- 
2.46.0

Message sent to guix-patches@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: [bug#73152] [PATCH 2/6] gnu: Remove nspr-4.32.
Resent-From: Ian Eure <ian@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: guix-patches@HIDDEN
Resent-Date: Mon, 09 Sep 2024 17:57:02 +0000
Resent-Message-ID: <handler.73152.B73152.172590456413335 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 73152
X-GNU-PR-Package: guix-patches
X-GNU-PR-Keywords: patch
To: 73152 <at> debbugs.gnu.org
Cc: Ian Eure <ian@HIDDEN>
Received: via spool by 73152-submit <at> debbugs.gnu.org id=B73152.172590456413335
          (code B ref 73152); Mon, 09 Sep 2024 17:57:02 +0000
Received: (at 73152) by debbugs.gnu.org; 9 Sep 2024 17:56:04 +0000
Received: from localhost ([127.0.0.1]:34071 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1snicN-0003Sk-Ac
	for submit <at> debbugs.gnu.org; Mon, 09 Sep 2024 13:56:04 -0400
Received: from fhigh6-smtp.messagingengine.com ([103.168.172.157]:49399)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ian@HIDDEN>) id 1snicL-0003RX-6U
 for 73152 <at> debbugs.gnu.org; Mon, 09 Sep 2024 13:56:01 -0400
Received: from phl-compute-05.internal (phl-compute-05.phl.internal
 [10.202.2.45])
 by mailfhigh.phl.internal (Postfix) with ESMTP id 1EB3E114024D;
 Mon,  9 Sep 2024 13:55:51 -0400 (EDT)
Received: from phl-mailfrontend-01 ([10.202.2.162])
 by phl-compute-05.internal (MEProxy); Mon, 09 Sep 2024 13:55:51 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h=
 cc:cc:content-transfer-encoding:content-type:date:date:from:from
 :in-reply-to:in-reply-to:message-id:mime-version:references
 :reply-to:subject:subject:to:to; s=fm3; t=1725904551; x=
 1725990951; bh=jdcp3l2FNPMsXzmDpiqwwvdZl7/pKAz16Nb3EhX3SFo=; b=m
 6G3TSsICG1SyI62FI4dspJkA8XW6LqLhplilZXA0bCv/FK+s8OtrOcRzPug1VAqm
 BvQIHJgrdqRAyY0tAdobYaWN1A8I2RTyPm4SyJtlbRRcb7+XTYxrGCXitkNLLuS2
 Ez4kH+ZygQjta2F0wMgU0XaXZ9WEFPjBoxF6wSXaiSrYQ6kVkw1GHmV3+bRf3o60
 mkciz7bmQ0BIeZUmEMmnN8ANm5m4ctVlsi/2CD+WZ9aL61YTdwzv8xdcHvv6NBBN
 Ns+HNanvXFEczVy2ms/+Ep/vNXod7UOJcQU/C1MaLLG/k2pphvMIPCNY60+8mXRU
 HEtUhFLdpJXEl1ZYmYLIQ==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:cc:content-transfer-encoding
 :content-type:date:date:feedback-id:feedback-id:from:from
 :in-reply-to:in-reply-to:message-id:mime-version:references
 :reply-to:subject:subject:to:to:x-me-proxy:x-me-proxy
 :x-me-sender:x-me-sender:x-sasl-enc; s=fm1; t=1725904551; x=
 1725990951; bh=jdcp3l2FNPMsXzmDpiqwwvdZl7/pKAz16Nb3EhX3SFo=; b=g
 6oyuYqPuAYasNbJ5srL0H+cksVRV8Z5//I0seFzld1O8w1RrzJ30+hh9dUMCUWvg
 ne9rrtAIFBPt5L/BoG1JvV79+bu443xLGZH0aolBPzukwGAMMvqM/9XtQEl3RSrT
 DCQH5qd+HQnP0eYzgvIAAWca9wCPhtH7dbwpqUEmQjMKbkNjVL74HMVBPrlgroKr
 V7/wLT4GxY933LJYD1qoHdoMO3b37QQyK1AG2MHuQZpoNe+hOk9xu4SwJ2XC4yNv
 c3J5suMIZR9jsWbNznpm4fZoePWDpV6/Cub7N3GUNgac3o4a6pdDf79GzmTaLovV
 +yVno9XDC/1bmr3uumlvA==
X-ME-Sender: <xms:pjbfZgyp7tz9ZYKVnVK9VMi7FCIhbhMHo51KRb2rAxBH-uC9DX7UWg>
 <xme:pjbfZkTehATlrLJOTALO4Pu82OCOJk1F69FN4BiFzv245eenZM42VVVGa6G9C_OB0
 b1-d79_wP-VCF3lkw>
X-ME-Received: <xmr:pjbfZiUTVCJbsr7gF29PpqxRildX2BSlfskyAOA4E5gBKlpT1lTSzONZt7MsmCQi6T2EB95sV_B8KUE5rYtkEiOzHHCC74ZAzhALUA2FSLHII1IqtuTDxQ>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeeftddrudeijedguddtvdcutefuodetggdotefrod
 ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpggftfghnshhusghstghrihgsvgdp
 uffrtefokffrpgfnqfghnecuuegrihhlohhuthemuceftddtnecunecujfgurhephffvve
 fufffkofgjfhgggfestdekredtredttdenucfhrhhomhepkfgrnhcugfhurhgvuceoihgr
 nhesrhgvthhrohhsphgvtgdrthhvqeenucggtffrrghtthgvrhhnpefgteeiffdvleejle
 eiieevgeegleegieevjeekfeevledugfehteetgfeuffevhfenucffohhmrghinhepmhho
 iihilhhlrgdrohhrghenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrih
 hlfhhrohhmpehirghnsehrvghtrhhoshhpvggtrdhtvhdpnhgspghrtghpthhtohepvddp
 mhhouggvpehsmhhtphhouhhtpdhrtghpthhtohepjeefudehvdesuggvsggsuhhgshdrgh
 hnuhdrohhrghdprhgtphhtthhopehirghnsehrvghtrhhoshhpvggtrdhtvh
X-ME-Proxy: <xmx:pjbfZujQ_id2AN-ddK0ACjhJas1dhKnkJ_kyw65LrTBcMvAZ21KuaA>
 <xmx:pzbfZiAnU_kRcLBrYMxGH8UJ7fexxYn_g8yYzZQGrNVcU73UdzOIRg>
 <xmx:pzbfZvIE9S_L25ibGYgpn52y9SzbvTna8M0f1r0W3dUV2AckaRqHcA>
 <xmx:pzbfZpAYems55MDIhdarq0D-KNkCVyQFPTiYz7Nd7e2hoWJ3traxIA>
 <xmx:pzbfZlP4bw2swOjJOzOU5CxZRj5JKo8kbXcsVP5fXBC7WccJhbz5d4Iu>
Feedback-ID: id9014242:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Mon,
 9 Sep 2024 13:55:50 -0400 (EDT)
From: Ian Eure <ian@HIDDEN>
Date: Mon,  9 Sep 2024 10:55:35 -0700
Message-ID: <20240909175540.8156-3-ian@HIDDEN>
X-Mailer: git-send-email 2.46.0
In-Reply-To: <20240909175540.8156-1-ian@HIDDEN>
References: <20240909175540.8156-1-ian@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

* gnu/packages/nss.scm (nspr-4.32): Delete variable.

Change-Id: I05c97fe6fc32d045618334df118a84836c0d0261
---
 gnu/packages/nss.scm | 12 ------------
 1 file changed, 12 deletions(-)

diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm
index 718a3ba4c0..60b4b34d4e 100644
--- a/gnu/packages/nss.scm
+++ b/gnu/packages/nss.scm
@@ -94,18 +94,6 @@ (define-public nspr
 in the Mozilla clients.")
     (license license:mpl2.0)))
 
-(define-public nspr-4.32
-  (package
-    (inherit nspr)
-    (version "4.32")
-    (source (origin
-             (method url-fetch)
-             (uri (string-append
-                   "https://ftp.mozilla.org/pub/mozilla.org/nspr/releases/v"
-                   version "/src/nspr-" version ".tar.gz"))
-             (sha256
-              (base32
-               "0v3zds1id71j5a5si42a658fjz8nv2f6zp6w4gqrqmdr6ksz8sxv"))))))
 
 ;; nss should track ESRs, but currently doesn't.  3.102.1 is the current ESR.
 
-- 
2.46.0

Message sent to guix-patches@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: [bug#73152] [PATCH 3/6] gnu: Add make-nss.
Resent-From: Ian Eure <ian@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: guix-patches@HIDDEN
Resent-Date: Mon, 09 Sep 2024 17:57:03 +0000
Resent-Message-ID: <handler.73152.B73152.172590456913371 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 73152
X-GNU-PR-Package: guix-patches
X-GNU-PR-Keywords: patch
To: 73152 <at> debbugs.gnu.org
Cc: Ian Eure <ian@HIDDEN>
Received: via spool by 73152-submit <at> debbugs.gnu.org id=B73152.172590456913371
          (code B ref 73152); Mon, 09 Sep 2024 17:57:03 +0000
Received: (at 73152) by debbugs.gnu.org; 9 Sep 2024 17:56:09 +0000
Received: from localhost ([127.0.0.1]:34076 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1snicS-0003TY-8y
	for submit <at> debbugs.gnu.org; Mon, 09 Sep 2024 13:56:08 -0400
Received: from fout2-smtp.messagingengine.com ([103.168.172.145]:44627)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ian@HIDDEN>) id 1snicL-0003RZ-5F
 for 73152 <at> debbugs.gnu.org; Mon, 09 Sep 2024 13:56:02 -0400
Received: from phl-compute-03.internal (phl-compute-03.phl.internal
 [10.202.2.43])
 by mailfout.phl.internal (Postfix) with ESMTP id 29B56138018B;
 Mon,  9 Sep 2024 13:55:52 -0400 (EDT)
Received: from phl-mailfrontend-01 ([10.202.2.162])
 by phl-compute-03.internal (MEProxy); Mon, 09 Sep 2024 13:55:52 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h=
 cc:cc:content-transfer-encoding:content-type:date:date:from:from
 :in-reply-to:in-reply-to:message-id:mime-version:references
 :reply-to:subject:subject:to:to; s=fm3; t=1725904552; x=
 1725990952; bh=HfMxkMbpODFDJcRNJTb1cSoCT01RUYZ22MNtDoW7jUw=; b=N
 DWRChAgRpizz7Y2BcpUQumlA+OBm8SegeZQtMcnXOEfWuxxUTodaHuAOeb8rCxCu
 t3qe6wCHhqtk18aIQphwD+Vxim/fXai5/tf0OdHoTdJuxV4Rm4qGWN5XIRUmS1KN
 LAMmoFLcu6E2X24G1vR5zPhRdYhRR9+okSfhumI9UMsWIIX837MebWMx//oKZsFJ
 nupOX35zQQmFEeQUVgNS91qzET1t7AV27DjEl3+xCjkQq2oT4v2uDFsUi8UoJezK
 j1Sv2d3eshYhGqr+76RIsuH/KSZdtaqOTkBnbpk4Vqo091iMAiZ8nvgUgcIL9/cW
 tJPn6i6iGySFVagugAfYQ==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:cc:content-transfer-encoding
 :content-type:date:date:feedback-id:feedback-id:from:from
 :in-reply-to:in-reply-to:message-id:mime-version:references
 :reply-to:subject:subject:to:to:x-me-proxy:x-me-proxy
 :x-me-sender:x-me-sender:x-sasl-enc; s=fm1; t=1725904552; x=
 1725990952; bh=HfMxkMbpODFDJcRNJTb1cSoCT01RUYZ22MNtDoW7jUw=; b=l
 HOAnGiGNmYaDskJDgMw0r2MyBFzPIHjmuFYBIXaRFmKjZKx6D5rCgkTfXErgRuAr
 OTnn0HM2P79t2OdZgZzFj1JKz/rH4ahBsAMfHaUHButcVCsSvZiFyjTvg4xlWDX1
 yzXkFWDu3FQN+y0SRooOUHVCQ3PqRARGXLfH3W8d4sXh6Fy/nMVfoNlgv0TzaEvt
 j7gV+HY8TCGCgENySyHX3b/stVbDKa38vzmSRBSsHW8MP6H46Oaf8zUFnY5WVz5c
 p1hWsKbrEr3SYpHDryd8qn5J5CqNvrvTwKiiv3KWaPl3aVM85NRrDzD5gTj5Eule
 1YGFmID4zYjdikerxYmjA==
X-ME-Sender: <xms:qDbfZkQyeAPdmyfleVlspQlVtuA-ZTedqwvKhwS6ZcQtJa1Lv_bkjA>
 <xme:qDbfZhyb_A3_9Mb6qWIjMuK7ycNzu0NNEuVJchKpk5Q3lKtbVIhKRQx9rmO5vbmbQ
 s4hQR5fbApgtJwZbw>
X-ME-Received: <xmr:qDbfZh2LGSXklazeouIRcyqArCUPPN7tZk4cZCEAWyBfgVEvzk8zZCmy-sqKHZS05gBjoTZKe3nXyYNcKkV-tUHHIaIfAx5YS2gMN742yiiJxo7GNv76mQ>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeeftddrudeijedguddtvdcutefuodetggdotefrod
 ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpggftfghnshhusghstghrihgsvgdp
 uffrtefokffrpgfnqfghnecuuegrihhlohhuthemuceftddtnecunecujfgurhephffvve
 fufffkofgjfhgggfestdekredtredttdenucfhrhhomhepkfgrnhcugfhurhgvuceoihgr
 nhesrhgvthhrohhsphgvtgdrthhvqeenucggtffrrghtthgvrhhnpeekgfelvdehueefte
 ekfedvheetueeuledugfetgfelvedvjefffeegfefgvdduueenucffohhmrghinhepmhho
 iihilhhlrgdrohhrghdpghhnuhdrohhrghenucevlhhushhtvghrufhiiigvpedtnecurf
 grrhgrmhepmhgrihhlfhhrohhmpehirghnsehrvghtrhhoshhpvggtrdhtvhdpnhgspghr
 tghpthhtohepvddpmhhouggvpehsmhhtphhouhhtpdhrtghpthhtohepjeefudehvdesug
 gvsggsuhhgshdrghhnuhdrohhrghdprhgtphhtthhopehirghnsehrvghtrhhoshhpvggt
 rdhtvh
X-ME-Proxy: <xmx:qDbfZoC1e2jwOjNvlwijtba4av_dQN5ClfGXa5KnbpwdythIQLxqoQ>
 <xmx:qDbfZtgLATBAFVN2BdJeWwrRKPCJkC4fsHIqx_X2iLeKOKfL4S_qVQ>
 <xmx:qDbfZkq3HB0Ut-evjkx_wZofwn1N8X9Lk9admcMgQ1i9_4bh7bmP3g>
 <xmx:qDbfZggYvMguV8ZTm4qG15ACsHkfIbykxcQo-poGzOoAYRkSRd9TLQ>
 <xmx:qDbfZgu8gHFp5QDI2p2AyFNbApIl-CYvegtGd_amik2Wk6NEjmve_sDb>
Feedback-ID: id9014242:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Mon,
 9 Sep 2024 13:55:51 -0400 (EDT)
From: Ian Eure <ian@HIDDEN>
Date: Mon,  9 Sep 2024 10:55:36 -0700
Message-ID: <20240909175540.8156-4-ian@HIDDEN>
X-Mailer: git-send-email 2.46.0
In-Reply-To: <20240909175540.8156-1-ian@HIDDEN>
References: <20240909175540.8156-1-ian@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

* gnu/packages/nss.scm (make-nss): New variable.
NSS builds require time-shifting to their approximate release date to build
repeatably, because it ships with test certificates which expire.  To avoid
duplicating the whole package definition between `nss' and `nss-rapid', move
the bulk of the definition into `make-nss', which accepts a version, hash, and
release date, allowing reuse between the two definitions.

Change-Id: Iaab1bb167ceed985a3dcde57f7fe35dce3deaa36
---
 gnu/packages/nss.scm | 166 +++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 166 insertions(+)

diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm
index 60b4b34d4e..b51bebda3d 100644
--- a/gnu/packages/nss.scm
+++ b/gnu/packages/nss.scm
@@ -94,6 +94,172 @@ (define-public nspr
 in the Mozilla clients.")
     (license license:mpl2.0)))
 
+(define* (make-nss #:key version release-date hash)
+  (package
+    (name "nss")
+    ;; IMPORTANT: Also update and test the nss-certs package, which duplicates
+    ;; version and source to avoid a top-level variable reference & module
+    ;; cycle.
+    (version version)
+    (source
+     (origin
+       (method url-fetch)
+       (uri (let ((version-with-underscores
+                   (string-join (string-split version #\.) "_")))
+              (string-append
+               "https://ftp.mozilla.org/pub/mozilla.org/security/nss/"
+               "releases/NSS_" version-with-underscores "_RTM/src/"
+               "nss-" version ".tar.gz")))
+       (sha256
+        (base32 hash))
+       ;; Create nss.pc and nss-config.
+       (patches (search-patches "nss-3.56-pkgconfig.patch"
+                                "nss-getcwd-nonnull.patch"
+                                "nss-increase-test-timeout.patch"))
+       (modules '((guix build utils)))
+       (snippet
+        '(begin
+           ;; Delete the bundled copy of these libraries.
+           (delete-file-recursively "nss/lib/zlib")
+           (delete-file-recursively "nss/lib/sqlite")))))
+    (build-system gnu-build-system)
+    (outputs '("out" "bin"))
+    (arguments
+     (list
+      #:make-flags
+      #~(let ((rpath (string-append "-Wl,-rpath=" #$output "/lib/nss")))
+          (list "-C" "nss"
+                (string-append "PREFIX=" #$output)
+                "NSDISTMODE=copy"
+                "NSS_USE_SYSTEM_SQLITE=1"
+                ;; The gtests fail to compile on riscv64.
+                ;; Skipping them doesn't affect the test suite.
+                #$@(if (target-riscv64?)
+                       #~("NSS_DISABLE_GTESTS=1")
+                       #~())
+                ;; Ensure we are building for the (%current-target-system).
+                #$@(if (%current-target-system)
+                       #~((string-append
+                           "OS_TEST="
+                           (string-take #$(%current-target-system)
+                                        (string-index #$(%current-target-system) #\-)))
+                          (string-append
+                           "KERNEL=" (cond (#$(target-hurd?) "gnu")
+                                           (#$(target-linux?) "linux")
+                                           (else ""))))
+                       #~())
+                #$@(if (%current-target-system)
+                       #~("CROSS_COMPILE=1")
+                       #~())
+                (string-append "NSPR_INCLUDE_DIR="
+                               (search-input-directory %build-inputs
+                                                       "include/nspr"))
+                ;; Add $out/lib/nss to RPATH.
+                (string-append "RPATH=" rpath)
+                (string-append "LDFLAGS=" rpath)))
+      #:modules '((guix build gnu-build-system)
+                  (guix build utils)
+                  (ice-9 ftw)
+                  (ice-9 match)
+                  (srfi srfi-26))
+      #:tests? (not (or (%current-target-system)
+                        ;; Tests take more than 30 hours on some architectures.
+                        (target-riscv64?)
+                        (target-ppc32?)))
+      #:phases
+      #~(modify-phases %standard-phases
+          (replace 'configure
+            (lambda _
+              (setenv "CC" #$(cc-for-target))
+              (setenv "CCC" #$(cxx-for-target))
+              (setenv "NATIVE_CC" "gcc")
+              ;; No VSX on powerpc-linux.
+              #$@(if (target-ppc32?)
+                     #~((setenv "NSS_DISABLE_CRYPTO_VSX" "1"))
+                     #~())
+              ;; Tells NSS to build for the 64-bit ABI if we are 64-bit system.
+              #$@(if (target-64bit?)
+                     #~((setenv "USE_64" "1"))
+                     #~())))
+          (replace 'check
+            (lambda* (#:key tests? #:allow-other-keys)
+              (if tests?
+                  (begin
+                    ;; Use 127.0.0.1 instead of $HOST.$DOMSUF as HOSTADDR for
+                    ;; testing.  The latter requires a working DNS or /etc/hosts.
+                    (setenv "DOMSUF" "localdomain")
+                    (setenv "USE_IP" "TRUE")
+                    (setenv "IP_ADDRESS" "127.0.0.1")
+
+                    ;; This specific test is looking at performance "now
+                    ;; verify that we can quickly dump a database", and
+                    ;; we're not testing performance here (especially
+                    ;; since we're using faketime), so raise the
+                    ;; threshold
+                    (substitute* "nss/tests/dbtests/dbtests.sh"
+                      ((" -lt 5") " -lt 50"))
+
+                    ;; Since the test suite is very lengthy, run the test
+                    ;; suite once, not thrice as done by default, by
+                    ;; selecting only the 'standard' cycle.
+                    (setenv "NSS_CYCLES" "standard")
+
+                    #$@(if (target-64bit?)
+                           '()
+                           ;; The script fails to determine the source
+                           ;; directory when running under 'datefudge' (see
+                           ;; <https://issues.guix.gnu.org/72239>).  Help it.
+                           #~((substitute* "nss/tests/gtests/gtests.sh"
+                                (("SOURCE_DIR=.*")
+                                 (string-append "SOURCE_DIR=" (getcwd) "/nss\n")))))
+
+                    ;; The "PayPalEE.cert" certificate expires every six months,
+                    ;; leading to test failures:
+                    ;; <https://bugzilla.mozilla.org/show_bug.cgi?id=609734>.  To
+                    ;; work around that, set the time to roughly the release date.
+                    (invoke #$(if (target-64bit?) "faketime" "datefudge")
+                            #$release-date "./nss/tests/all.sh"))
+                  (format #t "test suite not run~%"))))
+          (replace 'install
+            (lambda* (#:key outputs #:allow-other-keys)
+              (let* ((out (assoc-ref outputs "out"))
+                     (bin (string-append (assoc-ref outputs "bin") "/bin"))
+                     (inc (string-append out "/include/nss"))
+                     (lib (string-append out "/lib/nss"))
+                     (obj (match (scandir "dist" (cut string-suffix? "OBJ" <>))
+                            ((obj) (string-append "dist/" obj)))))
+                ;; Install nss-config to $out/bin.
+                (install-file (string-append obj "/bin/nss-config")
+                              (string-append out "/bin"))
+                (delete-file (string-append obj "/bin/nss-config"))
+                ;; Install nss.pc to $out/lib/pkgconfig.
+                (install-file (string-append obj "/lib/pkgconfig/nss.pc")
+                              (string-append out "/lib/pkgconfig"))
+                (delete-file (string-append obj "/lib/pkgconfig/nss.pc"))
+                (rmdir (string-append obj "/lib/pkgconfig"))
+                ;; Install other files.
+                (copy-recursively "dist/public/nss" inc)
+                (copy-recursively (string-append obj "/bin") bin)
+                (copy-recursively (string-append obj "/lib") lib)))))))
+    (inputs (list sqlite zlib))
+    (propagated-inputs (list nspr))               ;required by nss.pc.
+    (native-inputs (list perl                     ;for tests
+                         (if (target-64bit?) libfaketime datefudge)
+                         which))
+
+    ;; The NSS test suite takes around 48 hours on Loongson 3A (MIPS) when
+    ;; another build is happening concurrently on the same machine.
+    (properties '((timeout . 216000)))  ;60 hours
+
+    (home-page "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS")
+    (synopsis "Network Security Services")
+    (description
+     "Network Security Services (@dfn{NSS}) is a set of libraries designed to
+support cross-platform development of security-enabled client and server
+applications.  Applications built with NSS can support SSL v2 and v3, TLS,
+PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other
+security standards.")
+    (license license:mpl2.0)))
 
 ;; nss should track ESRs, but currently doesn't.  3.102.1 is the current ESR.
 
-- 
2.46.0

Message sent to guix-patches@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: [bug#73152] [PATCH 4/6] gnu: nss: Update to 3.102.1.
Resent-From: Ian Eure <ian@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: guix-patches@HIDDEN
Resent-Date: Mon, 09 Sep 2024 17:57:03 +0000
Resent-Message-ID: <handler.73152.B73152.172590456913378 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 73152
X-GNU-PR-Package: guix-patches
X-GNU-PR-Keywords: patch
To: 73152 <at> debbugs.gnu.org
Cc: Ian Eure <ian@HIDDEN>
Received: via spool by 73152-submit <at> debbugs.gnu.org id=B73152.172590456913378
          (code B ref 73152); Mon, 09 Sep 2024 17:57:03 +0000
Received: (at 73152) by debbugs.gnu.org; 9 Sep 2024 17:56:09 +0000
Received: from localhost ([127.0.0.1]:34078 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1snicS-0003Tc-VE
	for submit <at> debbugs.gnu.org; Mon, 09 Sep 2024 13:56:09 -0400
Received: from fout2-smtp.messagingengine.com ([103.168.172.145]:34259)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ian@HIDDEN>) id 1snicL-0003Rb-Uq
 for 73152 <at> debbugs.gnu.org; Mon, 09 Sep 2024 13:56:03 -0400
Received: from phl-compute-12.internal (phl-compute-12.phl.internal
 [10.202.2.52])
 by mailfout.phl.internal (Postfix) with ESMTP id ECC411380192;
 Mon,  9 Sep 2024 13:55:52 -0400 (EDT)
Received: from phl-mailfrontend-01 ([10.202.2.162])
 by phl-compute-12.internal (MEProxy); Mon, 09 Sep 2024 13:55:52 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h=
 cc:cc:content-transfer-encoding:content-type:date:date:from:from
 :in-reply-to:in-reply-to:message-id:mime-version:references
 :reply-to:subject:subject:to:to; s=fm3; t=1725904552; x=
 1725990952; bh=MUPRRdf+cAmkLD8XJqhNFF14tKcxCGs5rMFAndHva3s=; b=I
 2uoBtXclXT6CXarN7ggi6ig1xOrdsfLBovE5A/CXxiN4iL38Xd53ZGx7+aAvuKj4
 qqtGieFb/55f0pADkrrRp5hucNQdfUTVOekcK8hujtMSazUpX/msWoXSDgo9TvhY
 Oy6FeJRof5zzX/y8Rs/mHTuxTcDPavLJadz+rwESD42Aw6AMqo50Jf3IU0eLroOY
 QXlR0C5NpWy0BJ65nC20Ys6vq5+QRV2QMqAlUfJXhZtMP6MPMexU1H9Q+eaP+gey
 oN8fA9zseKu2O+dHdYQp54zUky58+pcmaRxqlIVhBuSJ9UfwfrEthypOIkXpwUfE
 AE+wADXOnu4Ln715cBhiw==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:cc:content-transfer-encoding
 :content-type:date:date:feedback-id:feedback-id:from:from
 :in-reply-to:in-reply-to:message-id:mime-version:references
 :reply-to:subject:subject:to:to:x-me-proxy:x-me-proxy
 :x-me-sender:x-me-sender:x-sasl-enc; s=fm1; t=1725904552; x=
 1725990952; bh=MUPRRdf+cAmkLD8XJqhNFF14tKcxCGs5rMFAndHva3s=; b=i
 P43vOwpmJBQJ82fCMR5BUrpYTeCsycL19sVJHcpGsENyo4goqUgH3obFQvD6Yegd
 13SNyYym4sVsOOjVCVNBgquGeSQJd1ClAIV2U4hvv6Bh3NiYEyshA9dOzl2ulNrV
 2RZhW5A6kDqi4WR2qJN15m1ro4RQmWD6zjl4H99WnrOh+aSFQLZweebNIo5Fn2AE
 /+LaXwBfEdEzfT61/TbGJz0ygMYwKNGpTCSkzEXJ66XJI/4BTjVDlH10wzEMLUwd
 B6pWW8P/tgfEmW9zlLGLFTMcvTdjYdxOuz6TxV/DzxzRpbmRUbZCS+peXEZCJ8zW
 QlICrgDgTyp0twFg07SYQ==
X-ME-Sender: <xms:qDbfZpS3HCQKjA1vkJFI7bHqb7OszEjY3r96dBgQjHTEyYo-aPPTmg>
 <xme:qDbfZiw-jwkvhzf6GaSfy0beeNeOqqqWdtu5kQDbkCmkyBAO5rYLWYYgDEfKrcD70
 cv5mTJi-nUZsomzfg>
X-ME-Received: <xmr:qDbfZu1YyTPlOQt6ylhCcDzL4OvobkVSQQTvyuRdZO9myRiI6oejyFebXG0OQGBkipPU_6Wa0z0Sd8CjavhU6JH8SuLbvUII_CNkMZNrMct4yLmuFEAGdw>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeeftddrudeijedguddtvdcutefuodetggdotefrod
 ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpggftfghnshhusghstghrihgsvgdp
 uffrtefokffrpgfnqfghnecuuegrihhlohhuthemuceftddtnecunecujfgurhephffvve
 fufffkofgjfhgggfestdekredtredttdenucfhrhhomhepkfgrnhcugfhurhgvuceoihgr
 nhesrhgvthhrohhsphgvtgdrthhvqeenucggtffrrghtthgvrhhnpeekgfelvdehueefte
 ekfedvheetueeuledugfetgfelvedvjefffeegfefgvdduueenucffohhmrghinhepmhho
 iihilhhlrgdrohhrghdpghhnuhdrohhrghenucevlhhushhtvghrufhiiigvpedtnecurf
 grrhgrmhepmhgrihhlfhhrohhmpehirghnsehrvghtrhhoshhpvggtrdhtvhdpnhgspghr
 tghpthhtohepvddpmhhouggvpehsmhhtphhouhhtpdhrtghpthhtohepjeefudehvdesug
 gvsggsuhhgshdrghhnuhdrohhrghdprhgtphhtthhopehirghnsehrvghtrhhoshhpvggt
 rdhtvh
X-ME-Proxy: <xmx:qDbfZhA3_7d3KLMj6hAgFAAVy6z0aK1V2eC1dD2e0cyOUwEFdV33-A>
 <xmx:qDbfZiiWJoI04jxP1FKhGHGjmVjrF6W7rRwyWOz13-U0kt9gLRmxSg>
 <xmx:qDbfZlp7HLPXgRiC1xWSAMXhQv4Bmg8WFnIf_uw7bUXbBSKGGRQk7w>
 <xmx:qDbfZtjyiA_fFKbfd-idCR4VwEuQpXzI27yIRjQNnYd_6_jWuYKINg>
 <xmx:qDbfZltAzwZ4kMbgdEU1XBjjopOr2LzJokHEY6LQxhKDx3-8LIW-NLnL>
Feedback-ID: id9014242:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Mon,
 9 Sep 2024 13:55:52 -0400 (EDT)
From: Ian Eure <ian@HIDDEN>
Date: Mon,  9 Sep 2024 10:55:37 -0700
Message-ID: <20240909175540.8156-5-ian@HIDDEN>
X-Mailer: git-send-email 2.46.0
In-Reply-To: <20240909175540.8156-1-ian@HIDDEN>
References: <20240909175540.8156-1-ian@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

gnu/packages/nss.scm (nss): Update to 3.102.1.

Change-Id: Ic24624279b1d2efbe6f4dd82cb73cc63f50f2e14
---
 gnu/packages/nss.scm | 172 +++----------------------------------------
 1 file changed, 10 insertions(+), 162 deletions(-)

diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm
index b51bebda3d..b4fdd13abc 100644
--- a/gnu/packages/nss.scm
+++ b/gnu/packages/nss.scm
@@ -261,169 +261,17 @@ (define* (make-nss #:key version release-date hash)
 security standards.")
     (license license:mpl2.0)))
 
-;; nss should track ESRs, but currently doesn't.  3.102.1 is the current ESR.
-
 (define-public nss
-  (package
-    (name "nss")
-    ;; IMPORTANT: Also update and test the nss-certs package, which duplicates
-    ;; version and source to avoid a top-level variable reference & module
-    ;; cycle.
-    (version "3.99")
-    (source (origin
-              (method url-fetch)
-              (uri (let ((version-with-underscores
-                          (string-join (string-split version #\.) "_")))
-                     (string-append
-                      "https://ftp.mozilla.org/pub/mozilla.org/security/nss/"
-                      "releases/NSS_" version-with-underscores "_RTM/src/"
-                      "nss-" version ".tar.gz")))
-              (sha256
-               (base32
-                "1g89ig40gfi1sp02gybvl2z818lawcnrqjzsws36cdva834c5maw"))
-              ;; Create nss.pc and nss-config.
-              (patches (search-patches "nss-3.56-pkgconfig.patch"
-                                       "nss-getcwd-nonnull.patch"
-                                       "nss-increase-test-timeout.patch"))
-              (modules '((guix build utils)))
-              (snippet
-               '(begin
-                  ;; Delete the bundled copy of these libraries.
-                  (delete-file-recursively "nss/lib/zlib")
-                  (delete-file-recursively "nss/lib/sqlite")))))
-    (build-system gnu-build-system)
-    (outputs '("out" "bin"))
-    (arguments
-     (list
-      #:make-flags
-      #~(let ((rpath (string-append "-Wl,-rpath=" #$output "/lib/nss")))
-          (list "-C" "nss"
-                (string-append "PREFIX=" #$output)
-                "NSDISTMODE=copy"
-                "NSS_USE_SYSTEM_SQLITE=1"
-                ;; The gtests fail to compile on riscv64.
-                ;; Skipping them doesn't affect the test suite.
-                #$@(if (target-riscv64?)
-                       #~("NSS_DISABLE_GTESTS=1")
-                       #~())
-                ;; Ensure we are building for the (%current-target-system).
-                #$@(if (%current-target-system)
-                       #~((string-append
-                            "OS_TEST="
-                            (string-take #$(%current-target-system)
-                                         (string-index #$(%current-target-system) #\-)))
-                          (string-append
-                            "KERNEL=" (cond (#$(target-hurd?) "gnu")
-                                            (#$(target-linux?) "linux")
-                                            (else ""))))
-                       #~())
-                #$@(if (%current-target-system)
-                       #~("CROSS_COMPILE=1")
-                       #~())
-                (string-append "NSPR_INCLUDE_DIR="
-                               (search-input-directory %build-inputs
-                                                       "include/nspr"))
-                ;; Add $out/lib/nss to RPATH.
-                (string-append "RPATH=" rpath)
-                (string-append "LDFLAGS=" rpath)))
-      #:modules '((guix build gnu-build-system)
-                  (guix build utils)
-                  (ice-9 ftw)
-                  (ice-9 match)
-                  (srfi srfi-26))
-      #:tests? (not (or (%current-target-system)
-                        ;; Tests take more than 30 hours on some architectures.
-                        (target-riscv64?)
-                        (target-ppc32?)))
-      #:phases
-      #~(modify-phases %standard-phases
-          (replace 'configure
-            (lambda _
-              (setenv "CC" #$(cc-for-target))
-              (setenv "CCC" #$(cxx-for-target))
-              (setenv "NATIVE_CC" "gcc")
-              ;; No VSX on powerpc-linux.
-              #$@(if (target-ppc32?)
-                     #~((setenv "NSS_DISABLE_CRYPTO_VSX" "1"))
-                     #~())
-              ;; Tells NSS to build for the 64-bit ABI if we are 64-bit system.
-              #$@(if (target-64bit?)
-                     #~((setenv "USE_64" "1"))
-                     #~())))
-          (replace 'check
-            (lambda* (#:key tests? #:allow-other-keys)
-              (if tests?
-                  (begin
-                    ;; Use 127.0.0.1 instead of $HOST.$DOMSUF as HOSTADDR for
-                    ;; testing.  The latter requires a working DNS or /etc/hosts.
-                    (setenv "DOMSUF" "localdomain")
-                    (setenv "USE_IP" "TRUE")
-                    (setenv "IP_ADDRESS" "127.0.0.1")
-
-                    ;; This specific test is looking at performance "now
-                    ;; verify that we can quickly dump a database", and
-                    ;; we're not testing performance here (especially
-                    ;; since we're using faketime), so raise the
-                    ;; threshold
-                    (substitute* "nss/tests/dbtests/dbtests.sh"
-                      ((" -lt 5") " -lt 50"))
-
-                    #$@(if (target-64bit?)
-                           '()
-                           ;; The script fails to determine the source
-                           ;; directory when running under 'datefudge' (see
-                           ;; <https://issues.guix.gnu.org/72239>).  Help it.
-                           #~((substitute* "nss/tests/gtests/gtests.sh"
-                                (("SOURCE_DIR=.*")
-                                 (string-append "SOURCE_DIR=" (getcwd) "/nss\n")))))
-
-                    ;; The "PayPalEE.cert" certificate expires every six months,
-                    ;; leading to test failures:
-                    ;; <https://bugzilla.mozilla.org/show_bug.cgi?id=609734>.  To
-                    ;; work around that, set the time to roughly the release date.
-                    (invoke #$(if (target-64bit?) "faketime" "datefudge")
-                            "2024-01-23" "./nss/tests/all.sh"))
-                  (format #t "test suite not run~%"))))
-          (replace 'install
-            (lambda* (#:key outputs #:allow-other-keys)
-              (let* ((out (assoc-ref outputs "out"))
-                     (bin (string-append (assoc-ref outputs "bin") "/bin"))
-                     (inc (string-append out "/include/nss"))
-                     (lib (string-append out "/lib/nss"))
-                     (obj (match (scandir "dist" (cut string-suffix? "OBJ" <>))
-                            ((obj) (string-append "dist/" obj)))))
-                ;; Install nss-config to $out/bin.
-                (install-file (string-append obj "/bin/nss-config")
-                              (string-append out "/bin"))
-                (delete-file (string-append obj "/bin/nss-config"))
-                ;; Install nss.pc to $out/lib/pkgconfig.
-                (install-file (string-append obj "/lib/pkgconfig/nss.pc")
-                              (string-append out "/lib/pkgconfig"))
-                (delete-file (string-append obj "/lib/pkgconfig/nss.pc"))
-                (rmdir (string-append obj "/lib/pkgconfig"))
-                ;; Install other files.
-                (copy-recursively "dist/public/nss" inc)
-                (copy-recursively (string-append obj "/bin") bin)
-                (copy-recursively (string-append obj "/lib") lib)))))))
-    (inputs (list sqlite zlib))
-    (propagated-inputs (list nspr))               ;required by nss.pc.
-    (native-inputs (list perl                     ;for tests
-                         (if (target-64bit?) libfaketime datefudge)
-                         which))
-
-    ;; The NSS test suite takes around 48 hours on Loongson 3A (MIPS) when
-    ;; another build is happening concurrently on the same machine.
-    (properties '((timeout . 216000)))  ;60 hours
-
-    (home-page "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS")
-    (synopsis "Network Security Services")
-    (description
-     "Network Security Services (@dfn{NSS}) is a set of libraries designed to
-support cross-platform development of security-enabled client and server
-applications.  Applications built with NSS can support SSL v2 and v3, TLS,
-PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other
-security standards.")
-    (license license:mpl2.0)))
+  (let ((base (make-nss
+               #:version "3.102.1"
+               #:release-date "2024-07-24"
+               #:hash "1k1pjxz0ab4lg8xqggbb8pw77c1q8h4bldi09z4pj5g4hwsjv62l")))
+    (package
+      (inherit base)
+      (synopsis (string-append (package-synopsis base) " (ESR)"))
+      (description
+       (string-append (package-description base) "
+This package tracks the Extended Support Release channel.")))))
 
 ;; nss-rapid tracks the rapid release channel.  Unless your package requires a
 ;; newer version, you should prefer the `nss' package, which tracks the ESR
-- 
2.46.0

Message sent to guix-patches@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: [bug#73152] [PATCH 5/6] gnu: nss-rapid: Update to 3.104.
Resent-From: Ian Eure <ian@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: guix-patches@HIDDEN
Resent-Date: Mon, 09 Sep 2024 17:57:03 +0000
Resent-Message-ID: <handler.73152.B73152.172590457013386 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 73152
X-GNU-PR-Package: guix-patches
X-GNU-PR-Keywords: patch
To: 73152 <at> debbugs.gnu.org
Cc: Ian Eure <ian@HIDDEN>
Received: via spool by 73152-submit <at> debbugs.gnu.org id=B73152.172590457013386
          (code B ref 73152); Mon, 09 Sep 2024 17:57:03 +0000
Received: (at 73152) by debbugs.gnu.org; 9 Sep 2024 17:56:10 +0000
Received: from localhost ([127.0.0.1]:34080 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1snicT-0003To-Q9
	for submit <at> debbugs.gnu.org; Mon, 09 Sep 2024 13:56:10 -0400
Received: from fout2-smtp.messagingengine.com ([103.168.172.145]:44757)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ian@HIDDEN>) id 1snicM-0003Rd-Pl
 for 73152 <at> debbugs.gnu.org; Mon, 09 Sep 2024 13:56:04 -0400
Received: from phl-compute-11.internal (phl-compute-11.phl.internal
 [10.202.2.51])
 by mailfout.phl.internal (Postfix) with ESMTP id C7ABA1380218;
 Mon,  9 Sep 2024 13:55:53 -0400 (EDT)
Received: from phl-mailfrontend-01 ([10.202.2.162])
 by phl-compute-11.internal (MEProxy); Mon, 09 Sep 2024 13:55:53 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h=
 cc:cc:content-transfer-encoding:content-type:date:date:from:from
 :in-reply-to:in-reply-to:message-id:mime-version:references
 :reply-to:subject:subject:to:to; s=fm3; t=1725904553; x=
 1725990953; bh=csjlkF6BSlXrWoEzKE+PQ3amLZ/aJSt4QbQ6bQcGwJY=; b=o
 GClErLX8PSkycrsZiKne6NJ02NQySFub2vVQwUbFnw/zpYupVDcPfN+m+c7699Av
 FMuA0ys1hM3Pel/RPJPrpIHv3k4pUQYW+fwFZCzUw+2HQ4OQSviDgz/4oPhu+3/m
 z70dWL4ubpLslRkgAKQeVNZNVmK5xoptYeyExv5zFNeb+mJa6eBvSMk2KzEtoUZb
 guSzITcTZ5fEx9VdiroVIoii6bD4Y1oaKDzhWDyGzo5NGfxSerTxa4ryan/IXdLF
 WGwKCSXNlIsV9fP6fMLzhgB/2P2SkLY4OjowxUYPN+Za7NcphYC65D2WqwLfVTi3
 b60reeQn4pdFuz5ogOB+A==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:cc:content-transfer-encoding
 :content-type:date:date:feedback-id:feedback-id:from:from
 :in-reply-to:in-reply-to:message-id:mime-version:references
 :reply-to:subject:subject:to:to:x-me-proxy:x-me-proxy
 :x-me-sender:x-me-sender:x-sasl-enc; s=fm1; t=1725904553; x=
 1725990953; bh=csjlkF6BSlXrWoEzKE+PQ3amLZ/aJSt4QbQ6bQcGwJY=; b=E
 RFTx9Y487PNbUwqHXyED9qoSdSPxwfhHpoVuUo8ZU/6cIS/YPm9Y/MUzmu8cwD1w
 vo7nkiY4Ea32YXrSG5XSE1CaUFvyvu0XrZx1hAU+PhBbaCwwS0cAS/PphehnozfC
 8jVtzWP7mzk4qxxTtVanUy0Fpq76a8AiT4LKm7OEOO7TGnhgGr7OBXaEv1C2PSo8
 JlHHZIV5rVpUkI638j6mtO/MIjisc9d3Q1mC5nonp7vKDrY1PTwThlIhw4EfVhb0
 aCPGfcUTfCbZqudsA6vS3SR1dpkSucOvGVl18FvjpEzawBimUOMEKIV8X3i7Xy9W
 jPU3GXIpqaqdiVu4e2HgA==
X-ME-Sender: <xms:qTbfZg6fcwZkxucsUYDuRGxhaOEvknp2Ms4Rml2386c35pS5GMZpbQ>
 <xme:qTbfZh5p_6w_pzTX7dhw4KGn_Q4vKxF9u6BUjLr7rYxOAelrQnQ3KJr4hCLPdDAAv
 O6DiVLaR7b7WdKBOw>
X-ME-Received: <xmr:qTbfZvcNOQRzAfHwzMcez8Yv6Ac4HquJLiAzKqh97rHs8NDNCpX_HbsZiRQdcB3H_xQtZPTArG8xqhB1JgHOfpF4YFPd0b0o0CVZGd5ZE8U2VpXB58V_nw>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeeftddrudeijedguddtvdcutefuodetggdotefrod
 ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpggftfghnshhusghstghrihgsvgdp
 uffrtefokffrpgfnqfghnecuuegrihhlohhuthemuceftddtnecunecujfgurhephffvve
 fufffkofgjfhgggfestdekredtredttdenucfhrhhomhepkfgrnhcugfhurhgvuceoihgr
 nhesrhgvthhrohhsphgvtgdrthhvqeenucggtffrrghtthgvrhhnpefgteeiffdvleejle
 eiieevgeegleegieevjeekfeevledugfehteetgfeuffevhfenucffohhmrghinhepmhho
 iihilhhlrgdrohhrghenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrih
 hlfhhrohhmpehirghnsehrvghtrhhoshhpvggtrdhtvhdpnhgspghrtghpthhtohepvddp
 mhhouggvpehsmhhtphhouhhtpdhrtghpthhtohepjeefudehvdesuggvsggsuhhgshdrgh
 hnuhdrohhrghdprhgtphhtthhopehirghnsehrvghtrhhoshhpvggtrdhtvh
X-ME-Proxy: <xmx:qTbfZlJIbmWTx81y_Xgv64KcS7u712I2p6atp8KI2NnTCbGCFIt6pg>
 <xmx:qTbfZkI7ykh8BSzvDvUqI9NijeMOTFwzTKij3onhoJazPnV4gsnhUw>
 <xmx:qTbfZmwjFw0zILPD_AC2rl1ZKp_1m1Qk-nwhli77wKP3MF1bf5bhyg>
 <xmx:qTbfZoKu2h6EdjBIr_Pk-QtXS9-FHOJ-ZfgCPvUgqj3ydtzIRjKZhQ>
 <xmx:qTbfZrWuNEiBO3pZ6LN1NcOwD3dTroQhS3N9XR6t4s8-RS-DF5A4Vyfb>
Feedback-ID: id9014242:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Mon,
 9 Sep 2024 13:55:53 -0400 (EDT)
From: Ian Eure <ian@HIDDEN>
Date: Mon,  9 Sep 2024 10:55:38 -0700
Message-ID: <20240909175540.8156-6-ian@HIDDEN>
X-Mailer: git-send-email 2.46.0
In-Reply-To: <20240909175540.8156-1-ian@HIDDEN>
References: <20240909175540.8156-1-ian@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

* gnu/packages/nss.scm (nss-rapid): Update to 3.104.

Change-Id: I22772d75a98a479a65717ea7bcbfbb7986bd0c77
---
 gnu/packages/nss.scm | 67 ++++++++------------------------------------
 1 file changed, 11 insertions(+), 56 deletions(-)

diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm
index b4fdd13abc..b53e6e22cf 100644
--- a/gnu/packages/nss.scm
+++ b/gnu/packages/nss.scm
@@ -281,63 +281,18 @@ (define-public nss
 ;; and https://wiki.mozilla.org/Rapid_Release_Model
 
 (define-public nss-rapid
-  (package
-   (inherit nss)
-   (name "nss-rapid")
-   (version "3.103")
-   (source (origin
-             (inherit (package-source nss))
-             (uri (let ((version-with-underscores
-                         (string-join (string-split version #\.) "_")))
-                    (string-append
-                     "https://ftp.mozilla.org/pub/mozilla.org/security/nss/"
-                     "releases/NSS_" version-with-underscores "_RTM/src/"
-                     "nss-" version ".tar.gz")))
-             (sha256
-              (base32
-               "0qp9rs226rr6gh51b42cdbydr4mj80cli3bfqhh7bp3jyxbvcjkv"))))
-   (arguments
-    (substitute-keyword-arguments (package-arguments nss)
-      ((#:phases phases)
-       #~(modify-phases #$phases
-           (replace 'check
-             (lambda* (#:key tests? #:allow-other-keys)
-               (if tests?
-                   (begin
-                     ;; Use 127.0.0.1 instead of $HOST.$DOMSUF as HOSTADDR for
-                     ;; testing.  The latter requires a working DNS or /etc/hosts.
-                     (setenv "DOMSUF" "localdomain")
-                     (setenv "USE_IP" "TRUE")
-                     (setenv "IP_ADDRESS" "127.0.0.1")
-
-                     ;; This specific test is looking at performance "now
-                     ;; verify that we can quickly dump a database", and
-                     ;; we're not testing performance here (especially
-                     ;; since we're using faketime), so raise the
-                     ;; threshold
-                     (substitute* "nss/tests/dbtests/dbtests.sh"
-                       ((" -lt 5") " -lt 50"))
-
-                     ;; Since the test suite is very lengthy, run the test
-                     ;; suite once, not thrice as done by default, by
-                     ;; selecting only the 'standard' cycle.
-                     (setenv "NSS_CYCLES" "standard")
-
-                     ;; The "PayPalEE.cert" certificate expires every six months,
-                     ;; leading to test failures:
-                     ;; <https://bugzilla.mozilla.org/show_bug.cgi?id=609734>.  To
-                     ;; work around that, set the time to roughly the release date.
-                     (invoke "faketime" "2024-08-17" "./nss/tests/all.sh"))
-                   (format #t "test suite not run~%"))))))))
-   (synopsis "Network Security Services (Rapid Release)")
-   (description
-    "Network Security Services (@dfn{NSS}) is a set of libraries designed to
-support cross-platform development of security-enabled client and server
-applications.  Applications built with NSS can support SSL v2 and v3, TLS,
-PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other
-security standards.
+  (let ((base (make-nss
+               #:version "3.104"
+               #:release-date "2024-08-30"
+               #:hash "13mca2y92sm05kxb40qvlkq8l93ghmrhh0s3iawpc7idc8ik4xp2")))
+    (package
+      (inherit base)
+      (name (string-append (package-name base) "-rapid"))
+      (synopsis (string-append (package-synopsis base) " (Rapid Release)"))
+      (description
+       (string-append (package-description base) "
+This package tracks the Rapid Release channel, which updates frequently.")))))
 
-This package tracks the Rapid Release channel, which updates frequently.")))
 (define-public nsncd
   (package
     (name "nsncd")
-- 
2.46.0

Message sent to guix-patches@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: [bug#73152] [PATCH 6/6] gnu: nss-certs: Update to 3.102.1.
Resent-From: Ian Eure <ian@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: guix-patches@HIDDEN
Resent-Date: Mon, 09 Sep 2024 17:57:04 +0000
Resent-Message-ID: <handler.73152.B73152.172590457013392 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 73152
X-GNU-PR-Package: guix-patches
X-GNU-PR-Keywords: patch
To: 73152 <at> debbugs.gnu.org
Cc: Ian Eure <ian@HIDDEN>
Received: via spool by 73152-submit <at> debbugs.gnu.org id=B73152.172590457013392
          (code B ref 73152); Mon, 09 Sep 2024 17:57:04 +0000
Received: (at 73152) by debbugs.gnu.org; 9 Sep 2024 17:56:10 +0000
Received: from localhost ([127.0.0.1]:34082 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1snicU-0003Tr-9M
	for submit <at> debbugs.gnu.org; Mon, 09 Sep 2024 13:56:10 -0400
Received: from fhigh6-smtp.messagingengine.com ([103.168.172.157]:56815)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ian@HIDDEN>) id 1snicN-0003Rf-JI
 for 73152 <at> debbugs.gnu.org; Mon, 09 Sep 2024 13:56:04 -0400
Received: from phl-compute-05.internal (phl-compute-05.phl.internal
 [10.202.2.45])
 by mailfhigh.phl.internal (Postfix) with ESMTP id 89D8C114022B;
 Mon,  9 Sep 2024 13:55:54 -0400 (EDT)
Received: from phl-mailfrontend-01 ([10.202.2.162])
 by phl-compute-05.internal (MEProxy); Mon, 09 Sep 2024 13:55:54 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h=
 cc:cc:content-transfer-encoding:content-type:content-type:date
 :date:from:from:in-reply-to:in-reply-to:message-id:mime-version
 :references:reply-to:subject:subject:to:to; s=fm3; t=1725904554;
 x=1725990954; bh=IA0HG7y/gNi3ioVs0zjWg98Pb1MiQz2B58MCsePxsS4=; b=
 kfOWjMPhBfhlO+xmxW5U2sNyLLfQ4krKWAmEP0an/0enUkjhNnFpkAgjRkONC5xE
 bgclP8tRgOsN4OhJwfE4VqfG5HKeQ/byoFVsOKYosJYLMuchbrnug1Uzqe8RXYTh
 Myd1nMlkoDwbFSMYMYup74qkVnyzceYUV+gfbYVdJMEzAB5Xubvzk/34d13Dau2x
 LqCjC3wLZcqBl5mpIjlPCj7QttLd5Qgym7dMW/o/BsYnjoItijRJY7BQNhqUxAJg
 tj8LnY/NQPrZ6aPXVFPeXk0IxdAsNq1Xllw8Wd+d+GWZU3nudBCYBLRZwoE9ZgHZ
 4IAL/2pkl05X3W5yn70cSA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:cc:content-transfer-encoding
 :content-type:content-type:date:date:feedback-id:feedback-id
 :from:from:in-reply-to:in-reply-to:message-id:mime-version
 :references:reply-to:subject:subject:to:to:x-me-proxy:x-me-proxy
 :x-me-sender:x-me-sender:x-sasl-enc; s=fm1; t=1725904554; x=
 1725990954; bh=IA0HG7y/gNi3ioVs0zjWg98Pb1MiQz2B58MCsePxsS4=; b=e
 OVJ8bC7+R31Hoafm4zwJJsRyRUdIzfqQzBWuPV6TpsYEaa2oZ7pasMZKbZBV6gfg
 N6K0SBQtxHDjuh1nvhKiYu5/3sw4vpxa78fuh3AhTKbxHryP39xwIUOX7A1eaoIl
 N7pAagtOyJ+cQlBVK1kLiUXvDGHiskaHykPK8C4fof45mMnjeEGZqbOkzvzZcC0t
 SSM8A+GRBvfDwgdeMyPeZ4w3ar0jUAtmxUy4OBqjZf3UFcU7ub7bx7N/rfG2HQm0
 GBfEV/5mT5eXEMpo3vx+7fpzY0G8TAE6zlPbwV7PEif15SN1HTyMbPSKOlO8FL0x
 7wgw5Sb7tcZUJsAk0iBRA==
X-ME-Sender: <xms:qjbfZsmpjScj5mEojlxbGIFgWugKNH_S7Dxc_BNk_6ZuATehhSwh_Q>
 <xme:qjbfZr38HTmrTE1krFj3fo-XhGadm1vA8N6U9Y8JiJDBFTzou7EKUYF7PIecgvNOi
 qKPT2LeeuQ4Ah6Wpw>
X-ME-Received: <xmr:qjbfZqrCch5LhzeWfoEggyE915S3h_-yHoioD-8iV6649_TnVszU3W_1K9LyQFhtdlXqZ9div_H-Z3ivv_OoY6zSeSWNpGjiU8AAdQHclNWdmGWYq6eZ_A>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeeftddrudeijedguddtvdcutefuodetggdotefrod
 ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpggftfghnshhusghstghrihgsvgdp
 uffrtefokffrpgfnqfghnecuuegrihhlohhuthemuceftddtnecunecujfgurhephffvve
 fufffkofgjfhggtgfgsehtkeertdertdejnecuhfhrohhmpefkrghnucfguhhrvgcuoehi
 rghnsehrvghtrhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhepgfegheduleelge
 fgveeuhefffeegveeijeeitdetudelleeuhfejieduhfduffetnecuvehluhhsthgvrhfu
 ihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomhepihgrnhesrhgvthhrohhsphgvtg
 drthhvpdhnsggprhgtphhtthhopedvpdhmohguvgepshhmthhpohhuthdprhgtphhtthho
 peejfeduhedvseguvggssghughhsrdhgnhhurdhorhhgpdhrtghpthhtohepihgrnhesrh
 gvthhrohhsphgvtgdrthhv
X-ME-Proxy: <xmx:qjbfZokKXTcoM8c9eopx6jREtQz2gr0CYETEeGh-nNg_goYClJefGQ>
 <xmx:qjbfZq1WpOpSU9zc14_wk6K0rdlSI1skwoGrqQ5ciERQSlftlCKaEA>
 <xmx:qjbfZvvxOvwvTjpPw6RBkD2DDahKKnLz5nryBexxE6954VNDIT5NZA>
 <xmx:qjbfZmUbgoqedYe3sQoUi31-Fme0H7_G_POwTHMBuptaHq-NjXCHQg>
 <xmx:qjbfZoCs0AfNWQhb0jBsyl97Wz9j0bxMzZi2UtQ-YL2b1kUVpHrYpupj>
Feedback-ID: id9014242:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Mon,
 9 Sep 2024 13:55:53 -0400 (EDT)
From: Ian Eure <ian@HIDDEN>
Date: Mon,  9 Sep 2024 10:55:39 -0700
Message-ID: <20240909175540.8156-7-ian@HIDDEN>
X-Mailer: git-send-email 2.46.0
In-Reply-To: <20240909175540.8156-1-ian@HIDDEN>
References: <20240909175540.8156-1-ian@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

* gnu/packages/certs.scm (nss-certs): Update to 3.102.1.

Change-Id: Ibb0b39ef97e04afc37c62c5dc23ab93eef1c1f10
---
 gnu/packages/certs.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/certs.scm b/gnu/packages/certs.scm
index e2de6b168b..9756b089c0 100644
--- a/gnu/packages/certs.scm
+++ b/gnu/packages/certs.scm
@@ -133,7 +133,7 @@ (define-public nss-certs
     ;; FIXME We used to refer to the nss package here, but that eventually caused
     ;; module cycles.  The below is a quick copy-paste job that must be kept in
     ;; sync manually.  Surely there's a better way…?
-    (version "3.99")
+    (version "3.102.1")
     (source (origin
               (method url-fetch)
               (uri (let ((version-with-underscores
@@ -144,7 +144,7 @@ (define-public nss-certs
                       "nss-" version ".tar.gz")))
               (sha256
                (base32
-                "1g89ig40gfi1sp02gybvl2z818lawcnrqjzsws36cdva834c5maw"))
+                "1k1pjxz0ab4lg8xqggbb8pw77c1q8h4bldi09z4pj5g4hwsjv62l"))
               ;; Create nss.pc and nss-config.
               (patches (search-patches "nss-3.56-pkgconfig.patch"
                                        "nss-getcwd-nonnull.patch"
-- 
2.46.0

Message sent to guix-patches@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: [bug#73152] [PATCH 3/6] gnu: Add make-nss.
Resent-From: Liliana Marie Prikler <liliana.prikler@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: guix-patches@HIDDEN
Resent-Date: Tue, 10 Sep 2024 18:01:02 +0000
Resent-Message-ID: <handler.73152.B73152.17259912306361 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 73152
X-GNU-PR-Package: guix-patches
X-GNU-PR-Keywords: patch
To: Ian Eure <ian@HIDDEN>, 73152 <at> debbugs.gnu.org
Received: via spool by 73152-submit <at> debbugs.gnu.org id=B73152.17259912306361
          (code B ref 73152); Tue, 10 Sep 2024 18:01:02 +0000
Received: (at 73152) by debbugs.gnu.org; 10 Sep 2024 18:00:30 +0000
Received: from localhost ([127.0.0.1]:36983 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1so5AD-0001eX-U0
	for submit <at> debbugs.gnu.org; Tue, 10 Sep 2024 14:00:30 -0400
Received: from mail-ed1-f66.google.com ([209.85.208.66]:49512)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <liliana.prikler@HIDDEN>) id 1so5AB-0001eK-Ue
 for 73152 <at> debbugs.gnu.org; Tue, 10 Sep 2024 14:00:28 -0400
Received: by mail-ed1-f66.google.com with SMTP id
 4fb4d7f45d1cf-5c251ba0d1cso1235083a12.3
 for <73152 <at> debbugs.gnu.org>; Tue, 10 Sep 2024 11:00:22 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=gmail.com; s=20230601; t=1725991157; x=1726595957; darn=debbugs.gnu.org;
 h=mime-version:user-agent:content-transfer-encoding:references
 :in-reply-to:date:to:from:subject:message-id:from:to:cc:subject:date
 :message-id:reply-to;
 bh=GfeFZc6GcmThQpSwC2z9AdLo2lkYi0Xx2H9hl1l8osY=;
 b=CSlmcc678e3GMAo0KEHClBp3a2PPNDWKlIBBS6DXq29l15w5gIlLfL46EANfTFbXA8
 LIpJ9UJw6dRB79NZEjtbav0SnAPKAsF54M4QybbCP8aucNyHIYQXWH/1Ku7Un4ki3uhu
 5cOxAwStzSihcgSRV51wVqE5Y0N/m6du1PhYXEztKMx9KH6csfqb9hI1+lZwxiX2rx5h
 hv75Prgi/G4B9cukIlCWcnhMvGttdfa+5WMaVH9iZ2yRRlQJR+iOfP3z7fzyrAdKtiLR
 pmvN+H48HxQGi8Z9UzSwHRkysjXKvlNIM/PmNl81/lHTMURl3dCUwrcqu81JWU/yaiSr
 jLrQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20230601; t=1725991157; x=1726595957;
 h=mime-version:user-agent:content-transfer-encoding:references
 :in-reply-to:date:to:from:subject:message-id:x-gm-message-state:from
 :to:cc:subject:date:message-id:reply-to;
 bh=GfeFZc6GcmThQpSwC2z9AdLo2lkYi0Xx2H9hl1l8osY=;
 b=cqP/4Iwiu4qA5LDKbW6Jn4KZHxMjrqvdgogqMxBiwk3Ef8h5U/DydDPgvAw6MOAUuh
 X9JhVtnpdwCp928Ktbs2pm+HHiNEGCctw3BtH+Lxw9qzAgU4Ma4smKzezwtThjOFc1pk
 UPC1uvwfmR3AsvsohIsjuC+zuKMRX48Qe5bcbUxrNCCvhNu3VLfnkKJGnuKyf3UX8KKK
 1VKCCpTkhjARCb8a0PDNBHbtWxeBrurc5HjEJQ6N7nTCPnUxoY3nQVsUzc1cZlBz8kPQ
 YXvCWasGevaStUd/ebJx5RManCpGEa5wXUFUCdyk4j4ejDk6dxUuxWgE+bSULSiwZOhM
 958A==
X-Forwarded-Encrypted: i=1;
 AJvYcCU8Rq/XkEAOBVDKFUY1R2Kzx8r8kaF43Ik07S0gXh3+gWDuhGPJQ+C2yP5HB6h6KFN3/sIrEw==@debbugs.gnu.org
X-Gm-Message-State: AOJu0Yxt8U6zZUrOPLDlG35U9tTXG4MY1X1DuGb9xJLfh7pgSBHkM4/M
 KT/1VVKrdgVMQsnvuVSVblKEiWPYewf1lV5VqQHTZJu/O2qhXKWB
X-Google-Smtp-Source: AGHT+IHh+aqMRGjdVvyN7a33uJ9efJYHoa4gY5uVHqFbpOkrpJUOaGyMXQdrHwiknxerqCLir+LsKw==
X-Received: by 2002:a05:6402:34cb:b0:5c0:ad76:f70e with SMTP id
 4fb4d7f45d1cf-5c40bc14898mr228494a12.6.1725991156331; 
 Tue, 10 Sep 2024 10:59:16 -0700 (PDT)
Received: from lumine.fritz.box (85-127-114-32.dsl.dynamic.surfer.at.
 [85.127.114.32]) by smtp.gmail.com with ESMTPSA id
 4fb4d7f45d1cf-5c3ebd523casm4502825a12.58.2024.09.10.10.59.15
 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
 Tue, 10 Sep 2024 10:59:15 -0700 (PDT)
Message-ID: <04bf227b79ecc755e5137a8296c2a5458073393f.camel@HIDDEN>
From: Liliana Marie Prikler <liliana.prikler@HIDDEN>
Date: Tue, 10 Sep 2024 19:59:14 +0200
In-Reply-To: <20240909175540.8156-4-ian@HIDDEN>
References: <20240909175540.8156-1-ian@HIDDEN>
 <20240909175540.8156-4-ian@HIDDEN>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
User-Agent: Evolution 3.48.4 
MIME-Version: 1.0
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

Am Montag, dem 09.09.2024 um 10:55 -0700 schrieb Ian Eure:
> * gnu/packages/nss.scm (make-nss): New variable.
> NSS builds require time-shifting to their approximate release date to
> build repeatably, because it ships with test certificates which
> expire.=C2=A0 To avoid duplicating the whole package definition between
> `nss' and `nss-rapid', move the bulk of the definition into `make-
> nss', which accepts a version, hash, and release date, allowing reuse
> between the two definitions.
>=20
> Change-Id: Iaab1bb167ceed985a3dcde57f7fe35dce3deaa36
> ---
Note: the explanation should come before the ChangeLog.

Cheers

Last modified: Sun, 12 Jan 2025 05:45:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.