New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 596217 link

Starred by 1 user

Issue metadata

Status: Verified
Owner:
Closed: Mar 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 1
Type: Bug

Blocking:
issue 585658



Sign in to add a comment

Uprev NSS to 3.23 and NSPR to 4.12

Project Member Reported by rsleevi@chromium.org, Mar 18 2016

Issue description

Current stable releases, which includes stability and security fixes.
 
Project Member

Comment 1 by bugdroid1@chromium.org, Mar 22 2016

The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/overlays/chromiumos-overlay/+/2bf1979103cc029b713bab12910c1265668d0949

commit 2bf1979103cc029b713bab12910c1265668d0949
Author: Ryan Sleevi <rsleevi@chromium.org>
Date: Fri Mar 18 00:16:53 2016

nss: Unmask nss

Unmask dev-libs/nss/nss-3.23 and app-crypt/nss/nss-3.23

This applies the Chromium-relevant patches, as well as converts back
from EAPI=6 to EAPI=5 for the time being.

BUG= chromium:596217 
TEST=Accessing HTTPS sites, using client certificates, enterprise
enrolling, and WiFi all work the same
CQ-DEPEND=I714789877e6c6f495e93b6c4ca320043cc2bdeb8

Change-Id: Iad9f8442748994fe75f0c2179c22e79c7552734a
Reviewed-on: https://chromium-review.googlesource.com/333977
Commit-Ready: Ryan Sleevi <rsleevi@chromium.org>
Tested-by: Ryan Sleevi <rsleevi@chromium.org>
Reviewed-by: Mike Frysinger <vapier@chromium.org>

[delete] https://crrev.com/5aa6cb9a504070ba92967874c17a73b41708ae6f/profiles/default/linux/package.mask/nss-uprev
[add] https://crrev.com/2bf1979103cc029b713bab12910c1265668d0949/app-crypt/nss/nss-3.23-r1.ebuild
[add] https://crrev.com/2bf1979103cc029b713bab12910c1265668d0949/dev-libs/nss/nss-3.23-r1.ebuild
[modify] https://crrev.com/2bf1979103cc029b713bab12910c1265668d0949/dev-libs/nss/nss-3.23.ebuild
[modify] https://crrev.com/2bf1979103cc029b713bab12910c1265668d0949/app-crypt/nss/nss-3.23.ebuild

Project Member

Comment 2 by bugdroid1@chromium.org, Mar 22 2016

The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/overlays/chromiumos-overlay/+/5aa6cb9a504070ba92967874c17a73b41708ae6f

commit 5aa6cb9a504070ba92967874c17a73b41708ae6f
Author: Ryan Sleevi <rsleevi@chromium.org>
Date: Thu Mar 17 23:41:58 2016

nss: upgraded package to upstream, keeping it masked

Upgraded dev-libs/nss to version 3.23 on amd64, arm, x86
Upgraded app-crypt/nss to version 3.23 on amd64, arm, x86

BUG= chromium:596217 
TEST=equery-${BOARD} which dev-libs/nss does not change
CQ-DEPEND=I8bf3e3db02f81b135fa69b4a849549d53291f734

Change-Id: I714789877e6c6f495e93b6c4ca320043cc2bdeb8
Reviewed-on: https://chromium-review.googlesource.com/333976
Commit-Ready: Ryan Sleevi <rsleevi@chromium.org>
Tested-by: Ryan Sleevi <rsleevi@chromium.org>
Reviewed-by: Ryan Sleevi <rsleevi@chromium.org>

[add] https://crrev.com/5aa6cb9a504070ba92967874c17a73b41708ae6f/profiles/default/linux/package.mask/nss-uprev
[add] https://crrev.com/5aa6cb9a504070ba92967874c17a73b41708ae6f/dev-libs/nss/files/nss-3.23-hppa-byte_order.patch
[modify] https://crrev.com/5aa6cb9a504070ba92967874c17a73b41708ae6f/app-crypt/nss/Manifest
[add] https://crrev.com/5aa6cb9a504070ba92967874c17a73b41708ae6f/app-crypt/nss/metadata.xml
[add] https://crrev.com/5aa6cb9a504070ba92967874c17a73b41708ae6f/app-crypt/nss/nss-3.23.ebuild
[modify] https://crrev.com/5aa6cb9a504070ba92967874c17a73b41708ae6f/dev-libs/nss/Manifest
[add] https://crrev.com/5aa6cb9a504070ba92967874c17a73b41708ae6f/app-crypt/nss/files/nss-3.23-hppa-byte_order.patch
[modify] https://crrev.com/5aa6cb9a504070ba92967874c17a73b41708ae6f/dev-libs/nss/metadata.xml
[add] https://crrev.com/5aa6cb9a504070ba92967874c17a73b41708ae6f/dev-libs/nss/nss-3.23.ebuild

Project Member

Comment 3 by bugdroid1@chromium.org, Mar 22 2016

The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/third_party/autotest/+/7fd4d6fedd8e86bebcc0ac6451c83725153e1a2d

commit 7fd4d6fedd8e86bebcc0ac6451c83725153e1a2d
Author: Ryan Sleevi <rsleevi@chromium.org>
Date: Fri Mar 18 23:25:15 2016

security_RootCA: Update the set of known CAs to match NSS 3.23

BUG= chromium:596217 
TEST=security_RootCA passes when NSS 3.23 is emerged
CQ-DEPEND=Iad9f8442748994fe75f0c2179c22e79c7552734a

Change-Id: I6d76a10d332f57f4bd22fb6f55a761cf0237e837
Reviewed-on: https://chromium-review.googlesource.com/334010
Commit-Ready: Ryan Sleevi <rsleevi@chromium.org>
Tested-by: Ryan Sleevi <rsleevi@chromium.org>
Reviewed-by: Jorge Lucangeli Obes <jorgelo@chromium.org>

[modify] https://crrev.com/7fd4d6fedd8e86bebcc0ac6451c83725153e1a2d/client/site_tests/security_RootCA/baseline

Project Member

Comment 4 by bugdroid1@chromium.org, Mar 22 2016

The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/overlays/portage-stable/+/b28340845fc5cbb02c79b6ef075903ffc178fe6a

commit b28340845fc5cbb02c79b6ef075903ffc178fe6a
Author: Ryan Sleevi <rsleevi@chromium.org>
Date: Thu Mar 17 23:26:47 2016

nspr: upgraded packages to upstream

Upgraded dev-libs/nspr to version 4.12 on amd64, arm, x86

BUG= chromium:596217 
TEST=build; CQ is happy
CQ-DEPEND=I6d76a10d332f57f4bd22fb6f55a761cf0237e837

Change-Id: I8bf3e3db02f81b135fa69b4a849549d53291f734
Reviewed-on: https://chromium-review.googlesource.com/333669
Commit-Ready: Ryan Sleevi <rsleevi@chromium.org>
Tested-by: Ryan Sleevi <rsleevi@chromium.org>
Reviewed-by: Ryan Sleevi <rsleevi@chromium.org>
Reviewed-by: Mike Frysinger <vapier@chromium.org>

[modify] https://crrev.com/b28340845fc5cbb02c79b6ef075903ffc178fe6a/dev-libs/nspr/metadata.xml
[rename] https://crrev.com/b28340845fc5cbb02c79b6ef075903ffc178fe6a/metadata/md5-cache/dev-libs/nspr-4.12
[modify] https://crrev.com/b28340845fc5cbb02c79b6ef075903ffc178fe6a/dev-libs/nspr/Manifest
[rename] https://crrev.com/b28340845fc5cbb02c79b6ef075903ffc178fe6a/dev-libs/nspr/nspr-4.12.ebuild

Labels: Merge-Request-50 M-51
Setting Merge-Request for M-50 due to  Issue 585658 . I'm not sure how long TPMs like such packages to sit on ToT before merging.
Blocking: 585658

Comment 7 by tin...@google.com, Mar 23 2016

Labels: -Merge-Request-50 Merge-Approved-50 Hotlist-Merge-Approved
Your change meets the bar and is auto-approved for M50 (branch: 2661)
Cc: keta...@chromium.org
Labels: -Merge-Approved-50 -Hotlist-Merge-Approved Merge-Request-50 Needs-Feedback
ketakid: After talking with tinazh@, it sounds like https://bugs.chromium.org/p/chromium/issues/detail?id=596217#c7 was the script being over-zealous. Could you confirm you're good for M-50?

Comment 9 by tin...@google.com, Mar 25 2016

Labels: -Merge-Request-50 Merge-Approved-50 Hotlist-Merge-Approved
Your change meets the bar and is auto-approved for M50 (branch: 2661)
Approving merge for M50.
Project Member

Comment 11 by bugdroid1@chromium.org, Mar 25 2016

Labels: merge-merged-release-R50-7978.B
The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/overlays/portage-stable/+/26a88e0957f9f280fa070448c008ec0af1fe1e8d

commit 26a88e0957f9f280fa070448c008ec0af1fe1e8d
Author: Ryan Sleevi <rsleevi@chromium.org>
Date: Thu Mar 17 23:26:47 2016

nspr: upgraded packages to upstream

Upgraded dev-libs/nspr to version 4.12 on amd64, arm, x86

BUG= chromium:596217 
TEST=build; CQ is happy
CQ-DEPEND=I6d76a10d332f57f4bd22fb6f55a761cf0237e837

Change-Id: I8bf3e3db02f81b135fa69b4a849549d53291f734
Previous-Reviewed-on: https://chromium-review.googlesource.com/333669
(cherry picked from commit f61cb497c4fb6429d281882e3e4b5e69e5c0d3a9)
Reviewed-on: https://chromium-review.googlesource.com/335202
Reviewed-by: Ryan Sleevi <rsleevi@chromium.org>
Commit-Queue: Ryan Sleevi <rsleevi@chromium.org>
Tested-by: Ryan Sleevi <rsleevi@chromium.org>

[modify] https://crrev.com/26a88e0957f9f280fa070448c008ec0af1fe1e8d/dev-libs/nspr/metadata.xml
[rename] https://crrev.com/26a88e0957f9f280fa070448c008ec0af1fe1e8d/metadata/md5-cache/dev-libs/nspr-4.12
[modify] https://crrev.com/26a88e0957f9f280fa070448c008ec0af1fe1e8d/dev-libs/nspr/Manifest
[rename] https://crrev.com/26a88e0957f9f280fa070448c008ec0af1fe1e8d/dev-libs/nspr/nspr-4.12.ebuild

Project Member

Comment 12 by bugdroid1@chromium.org, Mar 25 2016

The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/overlays/chromiumos-overlay/+/b04d2d7a100edd9422a1e4dc5849027a2b396eb1

commit b04d2d7a100edd9422a1e4dc5849027a2b396eb1
Author: Ryan Sleevi <rsleevi@chromium.org>
Date: Thu Mar 17 23:41:58 2016

nss: upgraded package to upstream, keeping it masked

Upgraded dev-libs/nss to version 3.23 on amd64, arm, x86
Upgraded app-crypt/nss to version 3.23 on amd64, arm, x86

BUG= chromium:596217 
TEST=equery-${BOARD} which dev-libs/nss does not change
CQ-DEPEND=I8bf3e3db02f81b135fa69b4a849549d53291f734

Change-Id: I714789877e6c6f495e93b6c4ca320043cc2bdeb8
Previous-Reviewed-on: https://chromium-review.googlesource.com/333976
(cherry picked from commit 33fe628e5bedd443f87b9287c60156cea7214325)
Reviewed-on: https://chromium-review.googlesource.com/335252
Reviewed-by: Ryan Sleevi <rsleevi@chromium.org>
Commit-Queue: Ryan Sleevi <rsleevi@chromium.org>
Tested-by: Ryan Sleevi <rsleevi@chromium.org>

[add] https://crrev.com/b04d2d7a100edd9422a1e4dc5849027a2b396eb1/profiles/default/linux/package.mask/nss-uprev
[add] https://crrev.com/b04d2d7a100edd9422a1e4dc5849027a2b396eb1/dev-libs/nss/files/nss-3.23-hppa-byte_order.patch
[modify] https://crrev.com/b04d2d7a100edd9422a1e4dc5849027a2b396eb1/app-crypt/nss/Manifest
[add] https://crrev.com/b04d2d7a100edd9422a1e4dc5849027a2b396eb1/app-crypt/nss/metadata.xml
[add] https://crrev.com/b04d2d7a100edd9422a1e4dc5849027a2b396eb1/app-crypt/nss/nss-3.23.ebuild
[modify] https://crrev.com/b04d2d7a100edd9422a1e4dc5849027a2b396eb1/dev-libs/nss/Manifest
[add] https://crrev.com/b04d2d7a100edd9422a1e4dc5849027a2b396eb1/app-crypt/nss/files/nss-3.23-hppa-byte_order.patch
[modify] https://crrev.com/b04d2d7a100edd9422a1e4dc5849027a2b396eb1/dev-libs/nss/metadata.xml
[add] https://crrev.com/b04d2d7a100edd9422a1e4dc5849027a2b396eb1/dev-libs/nss/nss-3.23.ebuild

Project Member

Comment 13 by bugdroid1@chromium.org, Mar 25 2016

The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/overlays/chromiumos-overlay/+/23149eef1b5e40c59cd3e5cd93ef19848d36854e

commit 23149eef1b5e40c59cd3e5cd93ef19848d36854e
Author: Ryan Sleevi <rsleevi@chromium.org>
Date: Fri Mar 18 00:16:53 2016

nss: Unmask nss

Unmask dev-libs/nss/nss-3.23 and app-crypt/nss/nss-3.23

This applies the Chromium-relevant patches, as well as converts back
from EAPI=6 to EAPI=5 for the time being.

BUG= chromium:596217 
TEST=Accessing HTTPS sites, using client certificates, enterprise
enrolling, and WiFi all work the same
CQ-DEPEND=I714789877e6c6f495e93b6c4ca320043cc2bdeb8

Change-Id: Iad9f8442748994fe75f0c2179c22e79c7552734a
Previous-Reviewed-on: https://chromium-review.googlesource.com/333977
(cherry picked from commit ac015fc284cdb95665e992d96ca36e6e34a61a28)
Reviewed-on: https://chromium-review.googlesource.com/335231
Reviewed-by: Ryan Sleevi <rsleevi@chromium.org>
Tested-by: Ryan Sleevi <rsleevi@chromium.org>

[delete] https://crrev.com/b04d2d7a100edd9422a1e4dc5849027a2b396eb1/profiles/default/linux/package.mask/nss-uprev
[add] https://crrev.com/23149eef1b5e40c59cd3e5cd93ef19848d36854e/app-crypt/nss/nss-3.23-r1.ebuild
[add] https://crrev.com/23149eef1b5e40c59cd3e5cd93ef19848d36854e/dev-libs/nss/nss-3.23-r1.ebuild
[modify] https://crrev.com/23149eef1b5e40c59cd3e5cd93ef19848d36854e/dev-libs/nss/nss-3.23.ebuild
[modify] https://crrev.com/23149eef1b5e40c59cd3e5cd93ef19848d36854e/app-crypt/nss/nss-3.23.ebuild

Project Member

Comment 14 by bugdroid1@chromium.org, Mar 25 2016

The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/third_party/autotest/+/d987a4afc5440c6ec8aa42d6657f254b536ed2c9

commit d987a4afc5440c6ec8aa42d6657f254b536ed2c9
Author: Ryan Sleevi <rsleevi@chromium.org>
Date: Fri Mar 18 23:25:15 2016

security_RootCA: Update the set of known CAs to match NSS 3.23

BUG= chromium:596217 
TEST=security_RootCA passes when NSS 3.23 is emerged
CQ-DEPEND=Iad9f8442748994fe75f0c2179c22e79c7552734a

Change-Id: I6d76a10d332f57f4bd22fb6f55a761cf0237e837
Previous-Reviewed-on: https://chromium-review.googlesource.com/334010
(cherry picked from commit 6a0eea9e1edfb00bf088844f6e20d71d0d6c60cb)
Reviewed-on: https://chromium-review.googlesource.com/335241
Reviewed-by: Jorge Lucangeli Obes <jorgelo@chromium.org>
Reviewed-by: Ryan Sleevi <rsleevi@chromium.org>
Tested-by: Ryan Sleevi <rsleevi@chromium.org>

[modify] https://crrev.com/d987a4afc5440c6ec8aa42d6657f254b536ed2c9/client/site_tests/security_RootCA/baseline

Labels: M-50
Status: Fixed (was: Assigned)
Setting as fixed for M-50 and M-51.

Can be verified by accessing https://ssl.elektronicznypodpis.pl/ (which chains to the newly added SZAFIR ROOT CA2) and seeing it load.
Project Member

Comment 16 by sheriffbot@chromium.org, Apr 29 2016

This issue has been approved for a merge. Please merge the fix to any appropriate branches as soon as possible!

If all merges have been completed, please remove any remaining Merge-Approved labels from this issue.

Thanks for your time! To disable nags, add the Disable-Nags label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Project Member

Comment 17 by sheriffbot@chromium.org, May 3 2016

This issue has been approved for a merge. Please merge the fix to any appropriate branches as soon as possible!

If all merges have been completed, please remove any remaining Merge-Approved labels from this issue.

Thanks for your time! To disable nags, add the Disable-Nags label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Status: Verified (was: Fixed)
bulk verify (M50 clean up)
Labels: -Merge-Approved-50 -Hotlist-Merge-Approved

Sign in to add a comment