[Bug 205171] security/nss: install nsslowhash.h

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=205171

            Bug ID: 205171
           Summary: security/nss: install nsslowhash.h
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: gecko at FreeBSD.org
          Reporter: z7dr6ut7gs at snkmail.com
          Assignee: gecko at FreeBSD.org
             Flags: maintainer-feedback?(gecko at FreeBSD.org)

Created attachment 164027
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=164027&action=edit
[patch] enable NSSLOWHASH API

libfreebl.so is installed by security/nss, but the NSSLOWHASH hashing API is
not enabled.

After building with the attached patch, it provides:

nm -oCD /usr/local/lib/nss/libfreebl3.so | egrep 'NSSLOW'
/usr/local/lib/nss/libfreebl3.so:0004a2f0 T NSSLOWHASH_Begin
/usr/local/lib/nss/libfreebl3.so:0004a380 T NSSLOWHASH_Destroy
/usr/local/lib/nss/libfreebl3.so:0004a340 T NSSLOWHASH_End
/usr/local/lib/nss/libfreebl3.so:0004a370 T NSSLOWHASH_Length
/usr/local/lib/nss/libfreebl3.so:0004a3c0 T NSSLOWHASH_NewContext
/usr/local/lib/nss/libfreebl3.so:0004a310 T NSSLOWHASH_Update
/usr/local/lib/nss/libfreebl3.so:0004a680 T NSSLOW_Init
/usr/local/lib/nss/libfreebl3.so:0004a2b0 T NSSLOW_Shutdown


And nsslowhash.h is installed - this declares these functions for the API.

Other distributions separate out libfreebl and install nsslowhash.h with the
package that includes libfreebl.  FreeBSD installs lifreebl as part of the full
nss port.  For example, on fedora:

% rpm -qf /usr/lib64/libfreebl3.so /usr/include/nss3/nsslowhash.h
nss-softokn-freebl-3.19.1-1.0.fc20.x86_64
nss-softokn-devel-3.19.1-1.0.fc20.x86_64

I'm not suggesting the freebsd do the same... that's just FYI.

Noticed by: hashing library detection failure (due to missing nsslowhash.h) in
net/chrony's configure stage that causes the secure hash feature to be turned
off.


QA:
 - portlint: pass
 - stage-qa: pass
 - testport: pass (9-stable i386)

-- 
You are receiving this mail because:
You are the assignee for the bug.