summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMoonchild <moonchild@palemoon.org>2020-12-10 01:14:52 +0000
committerMoonchild <moonchild@palemoon.org>2020-12-10 01:14:52 +0000
commit9913a4bc826d8f918b4416a8bdfc1d5787b044e4 (patch)
treefd81a10ed4157927834d9a98b2be3a973a60cfee
parent660ff83a9a20d5a4f73318385dd4d7db0a0b51fd (diff)
downloaduxp-nss-update-work.tar.gz
Additional configuration for NSS lib update.nss-update-work
The Seed and RC2 components are completely obsolete, so we shouldn't build them. AVX2 for Poly1305 would fall outside of our platform sysreqs, and has a build system issue with non-MSVC flags being passed (needs more research, also a recent change around 3.53)
-rw-r--r--config/external/nss/Makefile.in7
1 files changed, 7 insertions, 0 deletions
diff --git a/config/external/nss/Makefile.in b/config/external/nss/Makefile.in
index 7289e57f4c..f94c4d8db6 100644
--- a/config/external/nss/Makefile.in
+++ b/config/external/nss/Makefile.in
@@ -174,6 +174,13 @@ DEFAULT_GMAKE_FLAGS += NSS_SSL_ENABLE_ZLIB=
# Disable building of the test programs in security/nss/lib/zlib
DEFAULT_GMAKE_FLAGS += PROGRAMS=
+# Disable AVX2 for poly1305
+DEFAULT_GMAKE_FLAGS += NSS_DISABLE_AVX2=1
+
+# Disable obsolete ciphers
+DEFAULT_GMAKE_FLAGS += NSS_DISABLE_DEPRECATED_SEED=1
+DEFAULT_GMAKE_FLAGS += NSS_DISABLE_DEPRECATED_RC2=1
+
# Disable creating .chk files. They will be generated from packager.mk
# When bug 681624 lands, we can replace CHECKLOC= with SKIP_SHLIBSIGN=1
DEFAULT_GMAKE_FLAGS += CHECKLOC=