2017-01-24 15:56:00 +01:00
|
|
|
{ stdenv, fetchurl, nspr, perl, zlib, sqlite }:
|
2005-08-24 11:54:42 +02:00
|
|
|
|
2009-07-06 13:42:21 +02:00
|
|
|
let
|
|
|
|
|
2013-08-07 16:17:58 +02:00
|
|
|
nssPEM = fetchurl {
|
2014-02-06 21:15:43 +01:00
|
|
|
url = http://dev.gentoo.org/~polynomial-c/mozilla/nss-3.15.4-pem-support-20140109.patch.xz;
|
|
|
|
sha256 = "10ibz6y0hknac15zr6dw4gv9nb5r5z9ym6gq18j3xqx7v7n3vpdw";
|
2012-08-21 06:10:33 +02:00
|
|
|
};
|
|
|
|
|
2012-08-22 02:46:48 +02:00
|
|
|
in stdenv.mkDerivation rec {
|
2012-08-20 05:41:58 +02:00
|
|
|
name = "nss-${version}";
|
2017-11-13 14:59:16 +01:00
|
|
|
version = "3.33";
|
2012-10-31 14:04:58 +01:00
|
|
|
|
|
|
|
src = fetchurl {
|
2017-11-13 14:59:16 +01:00
|
|
|
url = "mirror://mozilla/security/nss/releases/NSS_3_33_RTM/src/${name}.tar.gz";
|
|
|
|
sha256 = "1r44qa4j7sri50mxxbnrpm6fxprwrhv76whi7bfq73j06syxmw4q";
|
2005-08-24 11:54:42 +02:00
|
|
|
};
|
|
|
|
|
2017-03-22 19:47:51 +01:00
|
|
|
buildInputs = [ perl zlib sqlite ];
|
|
|
|
|
|
|
|
propagatedBuildInputs = [ nspr ];
|
2009-07-06 11:12:44 +02:00
|
|
|
|
2013-08-07 16:17:58 +02:00
|
|
|
prePatch = ''
|
|
|
|
xz -d < ${nssPEM} | patch -p1
|
2012-08-21 06:10:33 +02:00
|
|
|
'';
|
|
|
|
|
2013-08-07 16:17:58 +02:00
|
|
|
patches =
|
2017-09-29 01:52:45 +02:00
|
|
|
[
|
2014-04-22 14:54:36 +02:00
|
|
|
# Based on http://patch-tracker.debian.org/patch/series/dl/nss/2:3.15.4-1/85_security_load.patch
|
2014-01-22 10:46:29 +01:00
|
|
|
./85_security_load.patch
|
2013-08-07 16:17:58 +02:00
|
|
|
];
|
2011-01-03 18:02:58 +01:00
|
|
|
|
2017-01-24 14:49:14 +01:00
|
|
|
patchFlags = "-p0";
|
|
|
|
|
2016-08-29 02:30:01 +02:00
|
|
|
outputs = [ "out" "dev" "tools" ];
|
2015-10-05 17:45:54 +02:00
|
|
|
|
2013-08-07 16:17:58 +02:00
|
|
|
preConfigure = "cd nss";
|
2009-07-06 11:12:44 +02:00
|
|
|
|
nss: Clean up build/make flags.
First of all, let's remove that redundant BUILD_OPT variable.
This variable already is in makeFlags, so we really don't want it to be lurking
around in the attribute set of the derivation, and it annoys me for being there
for days.
We now state build targets explicitly rather than relying on "nss_build_all".
This makes NSPR_CONFIG_STATUS and the touch of build_nspr stamp obsolete, as
only nss_build_all includes build_nspr.
In addition, we don't need the -lz hack anymore, as this has been fixed in
recent NSS versions, so we can completly remove the postBuild hook.
And while we're at it, we're removing those outdated build instructions as well,
especially because we don't and can't follow official building guidelines
anymore, as those are difficult to apply to Nix.
2012-08-21 10:47:29 +02:00
|
|
|
makeFlags = [
|
2015-10-05 17:45:54 +02:00
|
|
|
"NSPR_INCLUDE_DIR=${nspr.dev}/include/nspr"
|
|
|
|
"NSPR_LIB_DIR=${nspr.out}/lib"
|
nss: Clean up build/make flags.
First of all, let's remove that redundant BUILD_OPT variable.
This variable already is in makeFlags, so we really don't want it to be lurking
around in the attribute set of the derivation, and it annoys me for being there
for days.
We now state build targets explicitly rather than relying on "nss_build_all".
This makes NSPR_CONFIG_STATUS and the touch of build_nspr stamp obsolete, as
only nss_build_all includes build_nspr.
In addition, we don't need the -lz hack anymore, as this has been fixed in
recent NSS versions, so we can completly remove the postBuild hook.
And while we're at it, we're removing those outdated build instructions as well,
especially because we don't and can't follow official building guidelines
anymore, as those are difficult to apply to Nix.
2012-08-21 10:47:29 +02:00
|
|
|
"NSDISTMODE=copy"
|
|
|
|
"BUILD_OPT=1"
|
|
|
|
"SOURCE_PREFIX=\$(out)"
|
|
|
|
"NSS_ENABLE_ECC=1"
|
2015-10-05 17:45:54 +02:00
|
|
|
"USE_SYSTEM_ZLIB=1"
|
nss: Clean up build/make flags.
First of all, let's remove that redundant BUILD_OPT variable.
This variable already is in makeFlags, so we really don't want it to be lurking
around in the attribute set of the derivation, and it annoys me for being there
for days.
We now state build targets explicitly rather than relying on "nss_build_all".
This makes NSPR_CONFIG_STATUS and the touch of build_nspr stamp obsolete, as
only nss_build_all includes build_nspr.
In addition, we don't need the -lz hack anymore, as this has been fixed in
recent NSS versions, so we can completly remove the postBuild hook.
And while we're at it, we're removing those outdated build instructions as well,
especially because we don't and can't follow official building guidelines
anymore, as those are difficult to apply to Nix.
2012-08-21 10:47:29 +02:00
|
|
|
"NSS_USE_SYSTEM_SQLITE=1"
|
|
|
|
] ++ stdenv.lib.optional stdenv.is64bit "USE_64=1";
|
|
|
|
|
2015-12-16 16:18:42 +01:00
|
|
|
NIX_CFLAGS_COMPILE = "-Wno-error";
|
|
|
|
|
2012-08-22 04:22:43 +02:00
|
|
|
postInstall = ''
|
|
|
|
rm -rf $out/private
|
|
|
|
mv $out/public $out/include
|
|
|
|
mv $out/*.OBJ/* $out/
|
|
|
|
rmdir $out/*.OBJ
|
2012-03-06 21:57:39 +01:00
|
|
|
|
2013-08-07 16:17:58 +02:00
|
|
|
ln -s lib $out/lib64
|
2017-09-29 01:52:45 +02:00
|
|
|
|
|
|
|
# Upstream issue: https://bugzilla.mozilla.org/show_bug.cgi?id=530672
|
|
|
|
# https://gitweb.gentoo.org/repo/gentoo.git/plain/dev-libs/nss/files/nss-3.32-gentoo-fixups.patch?id=af1acce6c6d2c3adb17689261dfe2c2b6771ab8a
|
|
|
|
NSS_MAJOR_VERSION=`grep "NSS_VMAJOR" lib/nss/nss.h | awk '{print $3}'`
|
|
|
|
NSS_MINOR_VERSION=`grep "NSS_VMINOR" lib/nss/nss.h | awk '{print $3}'`
|
|
|
|
NSS_PATCH_VERSION=`grep "NSS_VPATCH" lib/nss/nss.h | awk '{print $3}'`
|
|
|
|
PREFIX="$out"
|
|
|
|
|
|
|
|
mkdir -p $out/lib/pkgconfig
|
|
|
|
sed -e "s,%prefix%,$PREFIX," \
|
|
|
|
-e "s,%exec_prefix%,$PREFIX," \
|
|
|
|
-e "s,%libdir%,$PREFIX/lib64," \
|
2017-10-09 20:49:11 +02:00
|
|
|
-e "s,%includedir%,$dev/include/nss," \
|
2017-09-29 01:52:45 +02:00
|
|
|
-e "s,%NSS_VERSION%,$NSS_MAJOR_VERSION.$NSS_MINOR_VERSION.$NSS_PATCH_VERSION,g" \
|
|
|
|
-e "s,%NSPR_VERSION%,4.16,g" \
|
|
|
|
pkg/pkg-config/nss.pc.in > $out/lib/pkgconfig/nss.pc
|
|
|
|
chmod 0644 $out/lib/pkgconfig/nss.pc
|
|
|
|
|
|
|
|
sed -e "s,@prefix@,$PREFIX," \
|
|
|
|
-e "s,@MOD_MAJOR_VERSION@,$NSS_MAJOR_VERSION," \
|
|
|
|
-e "s,@MOD_MINOR_VERSION@,$NSS_MINOR_VERSION," \
|
|
|
|
-e "s,@MOD_PATCH_VERSION@,$NSS_PATCH_VERSION," \
|
|
|
|
pkg/pkg-config/nss-config.in > $out/bin/nss-config
|
|
|
|
chmod 0755 $out/bin/nss-config
|
2012-08-22 04:22:43 +02:00
|
|
|
'';
|
2012-08-21 21:35:46 +02:00
|
|
|
|
|
|
|
postFixup = ''
|
|
|
|
for libname in freebl3 nssdbm3 softokn3
|
|
|
|
do
|
|
|
|
libfile="$out/lib/lib$libname.so"
|
|
|
|
LD_LIBRARY_PATH=$out/lib $out/bin/shlibsign -v -i "$libfile"
|
|
|
|
done
|
2015-10-05 17:45:54 +02:00
|
|
|
|
2015-12-02 10:03:23 +01:00
|
|
|
moveToOutput bin "$tools"
|
|
|
|
moveToOutput bin/nss-config "$dev"
|
|
|
|
moveToOutput lib/libcrmf.a "$dev" # needed by firefox, for example
|
2015-10-05 17:45:54 +02:00
|
|
|
rm "$out"/lib/*.a
|
2012-08-21 21:35:46 +02:00
|
|
|
'';
|
2013-08-07 16:17:58 +02:00
|
|
|
|
2015-06-01 20:55:53 +02:00
|
|
|
meta = {
|
2013-08-07 16:17:58 +02:00
|
|
|
homepage = https://developer.mozilla.org/en-US/docs/NSS;
|
|
|
|
description = "A set of libraries for development of security-enabled client and server applications";
|
2015-09-18 22:41:47 +02:00
|
|
|
platforms = stdenv.lib.platforms.all;
|
2013-08-07 16:17:58 +02:00
|
|
|
};
|
2005-08-24 11:54:42 +02:00
|
|
|
}
|