New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 878434 link

Starred by 1 user

Issue metadata

Status: Verified
Owner:
Closed: Sep 4
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 3
Type: Bug



Sign in to add a comment

Uprev NSS, NSPR, and app-misc/ca-certificates

Project Member Reported by rsleevi@chromium.org, Aug 28

Issue description

NSS 3.29.5 is current Gentoo upstream stable
NSS 3.30.2 is current ChromiumOS stable
NSS 3.38 is current Mozilla stable
NSS 3.38 is current Gentoo upstream unstable

Decision: Uprev to NSS 3.38

NSPR 4.13.1 is current Gentoo upstream stable
NSPR 4.14 is current ChromiumOS stable
NSPR 4.19 is current Mozilla stable
NSPR 4.19 is current Gentoo upstream unstable

Decision: Uprev to NSPR 4.19

app-misc/ca-certificates-20170717.3.36.1 is current Gentoo upstream stable
app-misc/ca-certificates-20170717.3.36.1 is current ChromiumOS stable
app-misc/ca-certificates-20180409.3.37 matches upstream Mozilla stable
app-misc/ca-certificates-20180409.3.37 is current Gentoo upstream unstable

Decision: Uprev to app-misc/ca-certificates-20180409.3.37
 
Project Member

Comment 1 by bugdroid1@chromium.org, Aug 31

The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/overlays/chromiumos-overlay/+/246a48e7fe83c7cdb57153378816c4918753d87a

commit 246a48e7fe83c7cdb57153378816c4918753d87a
Author: Ryan Sleevi <rsleevi@chromium.org>
Date: Fri Aug 31 07:27:49 2018

nss: import package from upstream, keeping it masked

Import dev-libs/nss at version 3.38 on amd64, arm

BUG= chromium:878434 
TEST=Device Enterprise Enrollment, EAP-TLS, and Client Cert Auth work
CQ-DEPEND=CL:1194588

Change-Id: I5ce5781dc28de5e239ee33840aabddb36ebae259
Reviewed-on: https://chromium-review.googlesource.com/1194460
Commit-Ready: Ryan Sleevi <rsleevi@chromium.org>
Tested-by: Ryan Sleevi <rsleevi@chromium.org>
Reviewed-by: Mike Frysinger <vapier@chromium.org>

[add] https://crrev.com/246a48e7fe83c7cdb57153378816c4918753d87a/dev-libs/nss/nss-3.38.ebuild
[add] https://crrev.com/246a48e7fe83c7cdb57153378816c4918753d87a/profiles/default/linux/package.mask/nss
[add] https://crrev.com/246a48e7fe83c7cdb57153378816c4918753d87a/metadata/md5-cache/app-crypt/nss-3.38
[modify] https://crrev.com/246a48e7fe83c7cdb57153378816c4918753d87a/app-crypt/nss/Manifest
[modify] https://crrev.com/246a48e7fe83c7cdb57153378816c4918753d87a/app-crypt/nss/files/nss-3.21-enable-pem.patch
[modify] https://crrev.com/246a48e7fe83c7cdb57153378816c4918753d87a/dev-libs/nss/files/nss-3.21-gentoo-fixup-warnings.patch
[modify] https://crrev.com/246a48e7fe83c7cdb57153378816c4918753d87a/app-crypt/nss/files/nss-3.21-gentoo-fixup-warnings.patch
[add] https://crrev.com/246a48e7fe83c7cdb57153378816c4918753d87a/app-crypt/nss/nss-3.38.ebuild
[modify] https://crrev.com/246a48e7fe83c7cdb57153378816c4918753d87a/dev-libs/nss/Manifest
[add] https://crrev.com/246a48e7fe83c7cdb57153378816c4918753d87a/dev-libs/nss/files/nss-3.32-gentoo-fixups.patch
[add] https://crrev.com/246a48e7fe83c7cdb57153378816c4918753d87a/app-crypt/nss/files/nss-3.32-gentoo-fixups.patch
[add] https://crrev.com/246a48e7fe83c7cdb57153378816c4918753d87a/metadata/md5-cache/dev-libs/nss-3.38
[modify] https://crrev.com/246a48e7fe83c7cdb57153378816c4918753d87a/dev-libs/nss/files/nss-3.21-enable-pem.patch

Project Member

Comment 2 by bugdroid1@chromium.org, Aug 31

The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/overlays/chromiumos-overlay/+/88758e95d2495908a55812eaae0d6da06a72336c

commit 88758e95d2495908a55812eaae0d6da06a72336c
Author: Ryan Sleevi <rsleevi@chromium.org>
Date: Fri Aug 31 07:27:52 2018

nss: Unmask & apply ChromiumOS patches to upstream

Upgraded dev-libs/nss to version 3.38 on amd64, arm

BUG= chromium:878434 
TEST=Device Enterprise Enrollment, EAP-TLS, and Client Cert Auth work
CQ-DEPEND=CL:1194460

Change-Id: I71b1d16adcb205abd9d30a1186de42366ccbc82b
Reviewed-on: https://chromium-review.googlesource.com/1194461
Commit-Ready: Ryan Sleevi <rsleevi@chromium.org>
Tested-by: Ryan Sleevi <rsleevi@chromium.org>
Reviewed-by: Mike Frysinger <vapier@chromium.org>

[delete] https://crrev.com/246a48e7fe83c7cdb57153378816c4918753d87a/app-crypt/nss/files/nss-3.28-gentoo-fixups.patch
[modify] https://crrev.com/88758e95d2495908a55812eaae0d6da06a72336c/dev-libs/nss/nss-3.38.ebuild
[delete] https://crrev.com/246a48e7fe83c7cdb57153378816c4918753d87a/profiles/default/linux/package.mask/nss
[modify] https://crrev.com/88758e95d2495908a55812eaae0d6da06a72336c/app-crypt/nss/Manifest
[delete] https://crrev.com/246a48e7fe83c7cdb57153378816c4918753d87a/app-crypt/nss/nss-3.30.2-r1.ebuild
[delete] https://crrev.com/246a48e7fe83c7cdb57153378816c4918753d87a/dev-libs/nss/nss-3.30.2.ebuild
[delete] https://crrev.com/246a48e7fe83c7cdb57153378816c4918753d87a/app-crypt/nss/nss-3.30.2.ebuild
[delete] https://crrev.com/246a48e7fe83c7cdb57153378816c4918753d87a/dev-libs/nss/files/nss-3.28-gentoo-fixups.patch
[delete] https://crrev.com/246a48e7fe83c7cdb57153378816c4918753d87a/dev-libs/nss/files/nss-3.15-abort-on-failed-urandom-access.patch
[modify] https://crrev.com/88758e95d2495908a55812eaae0d6da06a72336c/app-crypt/nss/nss-3.38.ebuild
[modify] https://crrev.com/88758e95d2495908a55812eaae0d6da06a72336c/dev-libs/nss/Manifest
[add] https://crrev.com/88758e95d2495908a55812eaae0d6da06a72336c/app-crypt/nss/nss-3.38-r1.ebuild
[add] https://crrev.com/88758e95d2495908a55812eaae0d6da06a72336c/chromeos/config/env/dev-libs/nss
[add] https://crrev.com/88758e95d2495908a55812eaae0d6da06a72336c/dev-libs/nss/nss-3.38-r1.ebuild
[delete] https://crrev.com/246a48e7fe83c7cdb57153378816c4918753d87a/dev-libs/nss/nss-3.30.2-r4.ebuild
[delete] https://crrev.com/246a48e7fe83c7cdb57153378816c4918753d87a/app-crypt/nss/files/nss-3.15-abort-on-failed-urandom-access.patch

Project Member

Comment 3 by bugdroid1@chromium.org, Aug 31

The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/third_party/autotest/+/3689684cafa43e257b7a064024ee27fd49cc1249

commit 3689684cafa43e257b7a064024ee27fd49cc1249
Author: Ryan Sleevi <rsleevi@chromium.org>
Date: Fri Aug 31 07:27:50 2018

security_RootCA: Update the set of known CAs

This updates the set of known CAs to match dev-libs/nss-3.38
and app-misc/ca-certificates-3.37

BUG= chromium:878434 
TEST=Device Enterprise Enrollment, EAP-TLS, and Client Cert Auth work
CQ-DEPEND=CL:1194460

Change-Id: I889eea18840833a1b0d750de8416601f646232cb
Reviewed-on: https://chromium-review.googlesource.com/1194487
Commit-Ready: Ryan Sleevi <rsleevi@chromium.org>
Tested-by: Ryan Sleevi <rsleevi@chromium.org>
Reviewed-by: Jorge Lucangeli Obes <jorgelo@chromium.org>
Reviewed-by: Daniel Wang <wonderfly@google.com>

[modify] https://crrev.com/3689684cafa43e257b7a064024ee27fd49cc1249/client/site_tests/security_RootCA/baseline.json

Project Member

Comment 4 by bugdroid1@chromium.org, Aug 31

The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/overlays/portage-stable/+/1dd9f91b655719c17fc42846b7e4841100437432

commit 1dd9f91b655719c17fc42846b7e4841100437432
Author: Ryan Sleevi <rsleevi@chromium.org>
Date: Fri Aug 31 07:27:49 2018

nspr: upgraded packages to upstream

Upgraded dev-libs/nspr to version 4.19 on amd64, arm

BUG= chromium:878434 
TEST=Device Enterprise Enrollment, EAP-TLS, and Client Cert Auth work
CQ-DEPEND=CL:1194487

Change-Id: Idc602a159b4fc66c51a43ea5a73ee7c820e61780
Reviewed-on: https://chromium-review.googlesource.com/1194587
Commit-Ready: Ryan Sleevi <rsleevi@chromium.org>
Tested-by: Ryan Sleevi <rsleevi@chromium.org>
Reviewed-by: Mike Frysinger <vapier@chromium.org>

[delete] https://crrev.com/1f6c729d02bb74203acb25b4e073927c53aedeba/dev-libs/nspr/files/nspr-4.10.10-musl-support.patch
[delete] https://crrev.com/1f6c729d02bb74203acb25b4e073927c53aedeba/metadata/md5-cache/dev-libs/nspr-4.14
[delete] https://crrev.com/1f6c729d02bb74203acb25b4e073927c53aedeba/metadata/md5-cache/dev-libs/nspr-4.13.1
[rename] https://crrev.com/1dd9f91b655719c17fc42846b7e4841100437432/metadata/md5-cache/dev-libs/nspr-4.19
[modify] https://crrev.com/1dd9f91b655719c17fc42846b7e4841100437432/dev-libs/nspr/Manifest
[delete] https://crrev.com/1f6c729d02bb74203acb25b4e073927c53aedeba/dev-libs/nspr/nspr-4.14.ebuild
[modify] https://crrev.com/1dd9f91b655719c17fc42846b7e4841100437432/dev-libs/nspr/files/nspr-4.7.1-solaris.patch
[delete] https://crrev.com/1f6c729d02bb74203acb25b4e073927c53aedeba/dev-libs/nspr/files/nspr-4.6.1-lang.patch
[modify] https://crrev.com/1dd9f91b655719c17fc42846b7e4841100437432/dev-libs/nspr/files/nspr-4.8.9-link-flags.patch
[rename] https://crrev.com/1dd9f91b655719c17fc42846b7e4841100437432/dev-libs/nspr/nspr-4.19.ebuild
[delete] https://crrev.com/1f6c729d02bb74203acb25b4e073927c53aedeba/dev-libs/nspr/nspr-4.12.ebuild
[modify] https://crrev.com/1dd9f91b655719c17fc42846b7e4841100437432/dev-libs/nspr/files/nspr-4.7.0-prtime.patch
[modify] https://crrev.com/1dd9f91b655719c17fc42846b7e4841100437432/dev-libs/nspr/files/nspr-4.10.6-solaris.patch
[modify] https://crrev.com/1dd9f91b655719c17fc42846b7e4841100437432/dev-libs/nspr/files/nspr-4.9.5_nspr_config.patch
[modify] https://crrev.com/1dd9f91b655719c17fc42846b7e4841100437432/dev-libs/nspr/files/nspr-4.8.4-darwin-install_name.patch
[delete] https://crrev.com/1f6c729d02bb74203acb25b4e073927c53aedeba/dev-libs/nspr/files/nspr-4.7.4-solaris.patch

Project Member

Comment 5 by bugdroid1@chromium.org, Aug 31

The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/overlays/portage-stable/+/059bfb0c9c7a2f0ff4ddde06092afb066231aacb

commit 059bfb0c9c7a2f0ff4ddde06092afb066231aacb
Author: Ryan Sleevi <rsleevi@chromium.org>
Date: Fri Aug 31 07:27:51 2018

ca-certificates: upgraded package to upstream

Upgraded app-misc/ca-certificates to version 20180409.3.37 on amd64, arm

BUG= chromium:878434 
TEST=Device Enterprise Enrollment, EAP-TLS, and Client Cert Auth work
CQ-DEPEND=CL:1194587

Change-Id: I972db82e29144df2ce138487caf14873a270ad89
Reviewed-on: https://chromium-review.googlesource.com/1194588
Commit-Ready: Ryan Sleevi <rsleevi@chromium.org>
Tested-by: Ryan Sleevi <rsleevi@chromium.org>
Reviewed-by: Daniel Wang <wonderfly@google.com>
Reviewed-by: Mike Frysinger <vapier@chromium.org>

[modify] https://crrev.com/059bfb0c9c7a2f0ff4ddde06092afb066231aacb/app-misc/ca-certificates/Manifest
[rename] https://crrev.com/059bfb0c9c7a2f0ff4ddde06092afb066231aacb/metadata/md5-cache/app-misc/ca-certificates-20180409.3.37
[rename] https://crrev.com/059bfb0c9c7a2f0ff4ddde06092afb066231aacb/app-misc/ca-certificates/ca-certificates-20180409.3.37.ebuild

Labels: M-70
Status: Verified (was: Started)

Sign in to add a comment