%global nspr_version 4.20.0

%global nss_name nss

%global nss_util_version 3.39.0

%global nss_softokn_version 3.39.0

%global unsupported_tools_directory %{_libdir}/nss/unsupported-tools

%global saved_files_dir %{_libdir}/nss/saved

%global prelink_conf_dir %{_sysconfdir}/prelink.conf.d/

%define dracutlibdir %{_prefix}/lib/dracut

%global dracut_modules_dir %{dracutlibdir}/modules.d/05nss-softokn/

%global dracut_conf_dir %{dracutlibdir}/dracut.conf.d

# The upstream omits the trailing ".0", while we need it for

# consistency with the pkg-config version:

# https://bugzilla.redhat.com/show_bug.cgi?id=1578106

%{lua:

rpm.define(string.format("nss_softokn_archive_version %s",

           string.gsub(rpm.expand("%nss_softokn_version"), "(.*)%.0$", "%1")))

}

# Produce .chk files for the final stripped binaries

#

# NOTE: The LD_LIBRARY_PATH line guarantees shlibsign links

# against the freebl that we just built. This is necessary

# because the signing algorithm changed on 3.14 to DSA2 with SHA256

# whereas we previously signed with DSA and SHA1. We must Keep this line

# until all mock platforms have been updated.

# After %%{__os_install_post} we would add

# export LD_LIBRARY_PATH=$RPM_BUILD_ROOT/%%{_libdir}

%define __spec_install_post \

    %{?__debug_package:%{__debug_install_post}} \

    %{__arch_install_post} \

    %{__os_install_post} \

    $RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign -i $RPM_BUILD_ROOT/%{_libdir}/libsoftokn3.so \

    $RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign -i $RPM_BUILD_ROOT/%{_libdir}/libfreeblpriv3.so \

    $RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign -i $RPM_BUILD_ROOT/%{_libdir}/libfreebl3.so \

    $RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign -i $RPM_BUILD_ROOT/%{_libdir}/libnssdbm3.so \

%{nil}

Summary:          Network Security Services Softoken Module

Name:             nss-softokn

Version:          %{nss_softokn_version}

# for Rawhide, please always use release >= 2

# for Fedora release branches, please use release < 2 (1.0, 1.1, ...)

Release:          1.3%{?dist}

License:          MPLv2.0

URL:              http://www.mozilla.org/projects/security/pki/nss/

Group:            System Environment/Libraries

Requires:         nspr >= %{nspr_version}

Requires:         nss-util >= %{nss_util_version}

Requires:         nss-softokn-freebl%{_isa} >= %{version}-%{release}

BuildRequires:    nspr-devel >= %{nspr_version}

BuildRequires:    nss-util-devel >= %{nss_util_version}

# for shlibsign

BuildRequires:    nss-softokn

BuildRequires:    sqlite-devel

BuildRequires:    zlib-devel

BuildRequires:    pkgconfig

BuildRequires:    gawk

BuildRequires:    psmisc

BuildRequires:    perl-interpreter

BuildRequires:    gcc

Source0:          %{name}-%{nss_softokn_archive_version}.tar.gz

# The nss-softokn tar ball is a subset of nss-{version}.tar.gz.

# We use the nss-split-softokn.sh script to keep only what we need

# via via nss-split-softokn.sh ${version}

# Detailed Steps:

# fedpkg clone nss-softokn

# cd nss-softokn

# Split off nss-softokn out of the full nss source tar ball:

# sh ./nss-split-softokn.sh ${version}

# A file named {name}-{version}.tar.gz should appear

# which is ready for uploading to the lookaside cache.

Source1:          nss-split-softokn.sh

Source2:          nss-softokn.pc.in

Source3:          nss-softokn-config.in

Source4:          nss-softokn-prelink.conf

Source5:          nss-softokn-dracut-module-setup.sh

Source6:          nss-softokn-dracut.conf

# This patch uses the GCC -iquote option documented at

# http://gcc.gnu.org/onlinedocs/gcc/Directory-Options.html#Directory-Options

# to give the in-tree headers a higher priority over the system headers,

# when they are included through the quote form (#include "file.h").

#

# This ensures a build even when system freebl headers are older. Such

# is the case when we are starting a major update.

#

# NSSUTIL_INCLUDE_DIR, after all, contains both util and freebl

# headers.  Once has been bootstapped the patch may be removed, but it

# doesn't hurt to keep it.

Patch10:           iquote.patch

# To inject hardening flags

Patch11:           nss-softokn-dso-ldflags.patch

# Upstream: https://bugzilla.mozilla.org/show_bug.cgi?id=1236720

# Although the greater part of the patch has been upstreamed, we still

# need a downstream patch to keep the single DES mechanisms we had

# provided in a downstream patch for compatibility reasons.

Patch97:	   nss-softokn-3.16-add_encrypt_derive.patch

# Upstream: https://bugzilla.mozilla.org/show_bug.cgi?id=1496124

# once we rebase with this bug, this patch can be dropped.

Patch100:          nss-softokn-3.39-allow-derencoded-params-on-input.patch

Patch102:          nss-softokn-tls-abi-fix.patch

# Not upstreamed: https://bugzilla.redhat.com/show_bug.cgi?id=1555108

Patch105:	   nss-softokn-aes-zeroize.patch

%description

Network Security Services Softoken Cryptographic Module

%package freebl

Summary:          Freebl library for the Network Security Services

Group:            System Environment/Base

# For PR_GetEnvSecure() from nspr >= 4.12

Requires:         nspr >= 4.12

# For NSS_SecureMemcmpZero() from nss-util >= 3.33

Requires:         nss-util >= 3.33

Conflicts:        nss < 3.12.2.99.3-5

Conflicts:        prelink < 0.4.3

Conflicts:        filesystem < 3

%description freebl

NSS Softoken Cryptographic Module Freebl Library

Install the nss-softokn-freebl package if you need the freebl 

library.

%package freebl-devel

Summary:          Header and Library files for doing development with the Freebl library for NSS

Group:            System Environment/Base

Provides:         nss-softokn-freebl-static = %{version}-%{release}

Requires:         nss-softokn-freebl%{?_isa} = %{version}-%{release}

%description freebl-devel

NSS Softoken Cryptographic Module Freebl Library Development Tools

This package supports special needs of some PKCS #11 module developers and

is otherwise considered private to NSS. As such, the programming interfaces

may change and the usual NSS binary compatibility commitments do not apply.

Developers should rely only on the officially supported NSS public API.

%package devel

Summary:          Development libraries for Network Security Services

Group:            Development/Libraries

Requires:         nss-softokn%{?_isa} = %{version}-%{release}

Requires:         nss-softokn-freebl-devel%{?_isa} = %{version}-%{release}

Requires:         nspr-devel >= %{nspr_version}

Requires:         nss-util-devel >= %{nss_util_version}

Requires:         pkgconfig

BuildRequires:    nspr-devel >= %{nspr_version}

BuildRequires:    nss-util-devel >= %{nss_util_version}

# require nss at least the version when we split via subpackages

%description devel

Header and library files for doing development with Network Security Services.

%prep

%setup -q -n %{name}-%{nss_softokn_archive_version}

pushd nss

# activate if needed when doing a major update with new apis

%patch10 -p1 -b .iquote

%patch11 -p1 -b .dso-ldflags

%patch97 -p1 -b .add_encrypt_derive

%patch100 -p1 -b .ecc-fix

%patch105 -p1 -b .aes-zeroize

popd

%patch102 -p1 -b .tls-abi-fix

%build

%set_build_flags

LDFLAGS=$RPM_LD_FLAGS

export LDFLAGS

DSO_LDFLAGS=$RPM_LD_FLAGS

export DSO_LDFLAGS

FREEBL_NO_DEPEND=1

export FREEBL_NO_DEPEND

# Must export FREEBL_LOWHASH=1 for nsslowhash.h so that it gets

# copied to dist and the rpm install phase can find it

# This due of the upstream changes to fix

# https://bugzilla.mozilla.org/show_bug.cgi?id=717906

FREEBL_LOWHASH=1

export FREEBL_LOWHASH

# Enable FIPS startup test

export NSS_FORCE_FIPS=1

# Enable compiler optimizations and disable debugging code

export BUILD_OPT=1

# Uncomment to disable optimizations

#RPM_OPT_FLAGS=`echo $RPM_OPT_FLAGS | sed -e 's/-O2/-O0/g'`

#export RPM_OPT_FLAGS

# Generate symbolic info for debuggers

XCFLAGS=$RPM_OPT_FLAGS

export XCFLAGS

PKG_CONFIG_ALLOW_SYSTEM_LIBS=1

PKG_CONFIG_ALLOW_SYSTEM_CFLAGS=1

export PKG_CONFIG_ALLOW_SYSTEM_LIBS

export PKG_CONFIG_ALLOW_SYSTEM_CFLAGS

NSPR_INCLUDE_DIR=`/usr/bin/pkg-config --cflags-only-I nspr | sed 's/-I//'`

NSPR_LIB_DIR=`/usr/bin/pkg-config --libs-only-L nspr | sed 's/-L//'`

export NSPR_INCLUDE_DIR

export NSPR_LIB_DIR

export NSSUTIL_INCLUDE_DIR=`/usr/bin/pkg-config --cflags-only-I nss-util | sed 's/-I//'`

export NSSUTIL_LIB_DIR=%{_libdir}

NSS_USE_SYSTEM_SQLITE=1

export NSS_USE_SYSTEM_SQLITE

export NSS_DISABLE_GTESTS=1

%ifnarch noarch

%if 0%{__isa_bits} == 64

USE_64=1

export USE_64

%endif

%endif

# uncomment if the iquote patch is activated

export IN_TREE_FREEBL_HEADERS_FIRST=1

# Use only the basicutil subset for sectools.a

export NSS_BUILD_SOFTOKEN_ONLY=1

# display processor information

CPU_INFO=`cat /proc/cpuinfo`

echo "############## CPU INFO ##################"

echo "${CPU_INFO}"

echo "##########################################"

# Compile softokn plus needed support

%{__make} -C ./nss/coreconf

%{__make} -C ./nss/lib/dbm

# ldvector.c, pkcs11.c, and lginit.c include nss/lib/util/verref.h, 

# which is private export, move it to where it can be found.

%{__mkdir_p} ./dist/private/nss

%{__mv} ./nss/lib/util/verref.h ./dist/private/nss/verref.h

%{__make} -C ./nss

# Set up our package file

# The nspr_version and nss_util_version globals used here

# must match the ones nss-softokn has for its Requires. 

%{__mkdir_p} ./dist/pkgconfig

%{__cat} %{SOURCE2} | sed -e "s,%%libdir%%,%{_libdir},g" \

                          -e "s,%%prefix%%,%{_prefix},g" \

                          -e "s,%%exec_prefix%%,%{_prefix},g" \

                          -e "s,%%includedir%%,%{_includedir}/nss3,g" \

                          -e "s,%%NSPR_VERSION%%,%{nspr_version},g" \

                          -e "s,%%NSSUTIL_VERSION%%,%{nss_util_version},g" \

                          -e "s,%%SOFTOKEN_VERSION%%,%{version},g" > \

                          ./dist/pkgconfig/nss-softokn.pc

SOFTOKEN_VMAJOR=`cat nss/lib/softoken/softkver.h | grep "#define.*SOFTOKEN_VMAJOR" | awk '{print $3}'`

SOFTOKEN_VMINOR=`cat nss/lib/softoken/softkver.h | grep "#define.*SOFTOKEN_VMINOR" | awk '{print $3}'`

SOFTOKEN_VPATCH=`cat nss/lib/softoken/softkver.h | grep "#define.*SOFTOKEN_VPATCH" | awk '{print $3}'`

export SOFTOKEN_VMAJOR

export SOFTOKEN_VMINOR

export SOFTOKEN_VPATCH

%{__cat} %{SOURCE3} | sed -e "s,@libdir@,%{_libdir},g" \

                          -e "s,@prefix@,%{_prefix},g" \

                          -e "s,@exec_prefix@,%{_prefix},g" \

                          -e "s,@includedir@,%{_includedir}/nss3,g" \

                          -e "s,@MOD_MAJOR_VERSION@,$SOFTOKEN_VMAJOR,g" \

                          -e "s,@MOD_MINOR_VERSION@,$SOFTOKEN_VMINOR,g" \

                          -e "s,@MOD_PATCH_VERSION@,$SOFTOKEN_VPATCH,g" \

                          > ./dist/pkgconfig/nss-softokn-config

chmod 755 ./dist/pkgconfig/nss-softokn-config

%check

# Begin -- copied from the build section

FREEBL_NO_DEPEND=1

export FREEBL_NO_DEPEND

export BUILD_OPT=1

%ifnarch noarch

%if 0%{__isa_bits} == 64

USE_64=1

export USE_64

%endif

%endif

# to test for the last tool built correctly

export NSS_BUILD_SOFTOKEN_ONLY=1

# End -- copied from the build section

# enable the following line to force a test failure

# find . -name \*.chk | xargs rm -f

# Run test suite.

SPACEISBAD=`find ./nss/tests | grep -c ' '` ||:

if [ $SPACEISBAD -ne 0 ]; then

  echo "error: filenames containing space are not supported (xargs)"

  exit 1

fi

rm -rf ./tests_results

pushd ./nss/tests/

# all.sh is the test suite script

# only run cipher tests for nss-softokn

%global nss_cycles "standard"

%global nss_tests "cipher ec lowhash"

%global nss_ssl_tests " "

%global nss_ssl_run " "

SKIP_NSS_TEST_SUITE=`echo $SKIP_NSS_TEST_SUITE`

if [ "x$SKIP_NSS_TEST_SUITE" == "x" ]; then

  HOST=localhost DOMSUF=localdomain PORT=$MYRAND NSS_CYCLES=%{?nss_cycles} NSS_TESTS=%{?nss_tests} NSS_SSL_TESTS=%{?nss_ssl_tests} NSS_SSL_RUN=%{?nss_ssl_run} ./all.sh

fi

popd

if [ "x$SKIP_NSS_TEST_SUITE" == "x" ]; then

  TEST_FAILURES=`grep -c FAILED ./tests_results/security/localhost.1/output.log` || :

else

  TEST_FAILURES=0

fi

if [ $TEST_FAILURES -ne 0 ]; then

  echo "error: test suite returned failure(s)"

  exit 1

fi

echo "test suite completed"

%install

%{__rm} -rf $RPM_BUILD_ROOT

# There is no make install target so we'll do it ourselves.

%{__mkdir_p} $RPM_BUILD_ROOT/%{_includedir}/nss3

%{__mkdir_p} $RPM_BUILD_ROOT/%{_bindir}

%{__mkdir_p} $RPM_BUILD_ROOT/%{_libdir}

%{__mkdir_p} $RPM_BUILD_ROOT/%{unsupported_tools_directory}

%{__mkdir_p} $RPM_BUILD_ROOT/%{_libdir}/pkgconfig

%{__mkdir_p} $RPM_BUILD_ROOT/%{saved_files_dir}

%{__mkdir_p} $RPM_BUILD_ROOT/%{prelink_conf_dir}

%{__mkdir_p} $RPM_BUILD_ROOT/%{dracut_modules_dir}

%{__mkdir_p} $RPM_BUILD_ROOT/%{dracut_conf_dir}

%{__install} -m 644 %{SOURCE4} $RPM_BUILD_ROOT/%{prelink_conf_dir}

%{__install} -m 755 %{SOURCE5} $RPM_BUILD_ROOT/%{dracut_modules_dir}/module-setup.sh

%{__install} -m 644 %{SOURCE6} $RPM_BUILD_ROOT/%{dracut_conf_dir}/50-nss-softokn.conf

# Copy the binary libraries we want

for file in libsoftokn3.so libnssdbm3.so libfreebl3.so libfreeblpriv3.so

do

  %{__install} -p -m 755 dist/*.OBJ/lib/$file $RPM_BUILD_ROOT/%{_libdir}

done

# Copy the binaries we ship as unsupported

for file in bltest ecperf fbectest fipstest shlibsign

do

  %{__install} -p -m 755 dist/*.OBJ/bin/$file $RPM_BUILD_ROOT/%{unsupported_tools_directory}

done

# Copy the include files we want

for file in dist/public/nss/*.h

do

  %{__install} -p -m 644 $file $RPM_BUILD_ROOT/%{_includedir}/nss3

done

# Copy some freebl include files we also want

for file in blapi.h alghmac.h

do

  %{__install} -p -m 644 dist/private/nss/$file $RPM_BUILD_ROOT/%{_includedir}/nss3

done

# Copy the static freebl library

for file in libfreebl.a

do

%{__install} -p -m 644 dist/*.OBJ/lib/$file $RPM_BUILD_ROOT/%{_libdir}

done

# Copy the package configuration files

%{__install} -p -m 644 ./dist/pkgconfig/nss-softokn.pc $RPM_BUILD_ROOT/%{_libdir}/pkgconfig/nss-softokn.pc

%{__install} -p -m 755 ./dist/pkgconfig/nss-softokn-config $RPM_BUILD_ROOT/%{_bindir}/nss-softokn-config

%post -p /sbin/ldconfig

%postun -p /sbin/ldconfig

%files

%{_libdir}/libnssdbm3.so

%{_libdir}/libnssdbm3.chk

%{_libdir}/libsoftokn3.so

%{_libdir}/libsoftokn3.chk

# shared with nss-tools

%dir %{_libdir}/nss

%dir %{saved_files_dir}

%dir %{unsupported_tools_directory}

%{unsupported_tools_directory}/bltest

%{unsupported_tools_directory}/ecperf

%{unsupported_tools_directory}/fbectest

%{unsupported_tools_directory}/fipstest

%{unsupported_tools_directory}/shlibsign

%files freebl

%{!?_licensedir:%global license %%doc}

%license nss/COPYING

%{_libdir}/libfreebl3.so

%{_libdir}/libfreebl3.chk

%{_libdir}/libfreeblpriv3.so

%{_libdir}/libfreeblpriv3.chk

#shared

%dir %{prelink_conf_dir}

%{prelink_conf_dir}/nss-softokn-prelink.conf

%dir %{dracut_modules_dir}

%{dracut_modules_dir}/module-setup.sh

%{dracut_conf_dir}/50-nss-softokn.conf

%files freebl-devel

%{_libdir}/libfreebl.a

%{_includedir}/nss3/blapi.h

%{_includedir}/nss3/blapit.h

%{_includedir}/nss3/alghmac.h

%{_includedir}/nss3/lowkeyi.h

%{_includedir}/nss3/lowkeyti.h

%files devel

%{_libdir}/pkgconfig/nss-softokn.pc

%{_bindir}/nss-softokn-config

# co-owned with nss

%dir %{_includedir}/nss3

#

# The following headers are those exported public in

# nss/lib/freebl/manifest.mn and

# nss/lib/softoken/manifest.mn

#

# The following list is short because many headers, such as

# the pkcs #11 ones, have been provided by nss-util-devel

# which installed them before us.

#

%{_includedir}/nss3/ecl-exp.h

%{_includedir}/nss3/nsslowhash.h

%{_includedir}/nss3/shsign.h

%changelog

* Fri Dec 14 2018 Bob Relyea <rrelyea@redhat.com> - 3.39.0-1.3

- Allow DER encoded ECC points on input, matching the PCKS #11 spec.

* Tue Oct 16 2018 Daiki Ueno <dueno@redhat.com> - 3.39.0-1.2

- Use %%set_build_flags

* Tue Sep 25 2018 Daiki Ueno <dueno@redhat.com> - 3.39.0-1.1

- Rebuild

* Tue Sep 25 2018 Daiki Ueno <dueno@redhat.com> - 3.39.0-1.0

- Update to NSS 3.39

* Fri Sep 14 2018 Daiki Ueno <dueno@redhat.com> - 3.38.0-1.3

- Apply missing patch

* Fri Sep 14 2018 Daiki Ueno <dueno@redhat.com> - 3.38.0-1.2

- Fix LDFLAGS injection when linking DSO

* Fri Sep  7 2018 Daiki Ueno <dueno@redhat.com> - 3.38.0-1.1

- Fix LDFLAGS injection

* Wed Jul 18 2018 Daiki Ueno <dueno@redhat.com> - 3.38.0-1.0

- Update to NSS 3.38

* Wed Apr 11 2018 Daiki Ueno <dueno@redhat.com> - 3.36.1-1.0

- Update to NSS 3.36.1

* Fri Mar  9 2018 Daiki Ueno <dueno@redhat.com> - 3.36.0-1.0

- Update to NSS 3.36.0

* Thu Feb 08 2018 Fedora Release Engineering <releng@fedoraproject.org> - 3.35.0-4

- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

* Tue Jan 30 2018 Kai Engert <kaie@redhat.com> - 3.35.0-3

- Rebuild

* Tue Jan 23 2018 Daiki Ueno <dueno@redhat.com> - 3.35.0-2

- Update to NSS 3.35.0

* Tue Nov 14 2017 Daiki Ueno <dueno@redhat.com> - 3.34.0-2

- Update to NSS 3.34.0

* Tue Oct 24 2017 Kai Engert <kaie@redhat.com> - 3.33.0-4

- rhbz#1505493, backport upstream fixes required for rhbz#1496560

* Wed Oct 18 2017 Daiki Ueno <dueno@redhat.com> - 3.33.0-3

- Add explicit version dependency from -freebl, on nspr and nss-util

* Tue Oct  3 2017 Daiki Ueno <dueno@redhat.com> - 3.33.0-2

- Update to NSS 3.33.0

- Revert the SSE2 changes, as we postopone it until the 3.34 rebase

* Fri Sep 22 2017 Daiki Ueno <dueno@redhat.com> - 3.32.0-9

- Replace disable-sse2 patch with upstreamed solution

* Fri Sep 15 2017 Daiki Ueno <dueno@redhat.com> - 3.32.0-8

- Disable SSE2 completely

* Tue Sep 12 2017 Daiki Ueno <dueno@redhat.com> - 3.32.0-7

- Temporarily enable SSE2 in AES and GCM code, to avoid test failures

* Mon Sep 11 2017 Daiki Ueno <dueno@redhat.com> - 3.32.0-6

- Disable SSE2 when building freebl on i686

* Wed Aug 30 2017 Daiki Ueno <dueno@redhat.com> - 3.32.0-5

- Update iquote.patch to really prefer in-tree headers over system headers

* Fri Aug 11 2017 Elio Maldonado <elio.maldonado.batiz@gmail.com> - 3.32.0-4

- Restore missing portions of add encrypt derive patch

* Fri Aug 11 2017 Daiki Ueno <dueno@redhat.com> - 3.32.0-3

- Fix memory leak in AES-GCM on i686

* Mon Aug  7 2017 Daiki Ueno <dueno@redhat.com> - 3.32.0-2

- Update to NSS 3.32.0

* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.31.0-4

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.31.0-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

* Wed Jun 21 2017 Daiki Ueno <dueno@redhat.com> - 3.31.0-2

- Update to NSS 3.31.0

* Fri Apr 21 2017 Daiki Ueno <dueno@redhat.com> - 3.30.2-2

- Update to NSS 3.30.2

* Tue Mar 21 2017 Daiki Ueno <dueno@redhat.com> - 3.30.0-2

- Update to NSS 3.30.0

- Remove upstreamed build fixes

* Fri Feb 17 2017 Daiki Ueno <dueno@redhat.com> - 3.29.1-2

- Update to NSS 3.29.1

* Wed Feb  8 2017 Daiki Ueno <dueno@redhat.com> - 3.29.0-2

- Update to NSS 3.29.0

* Fri Jan  6 2017 Daiki Ueno <dueno@redhat.com> - 3.28.1-2

- Update to NSS 3.28.1

- Adjust to the ectest splitting

- Temporarily fix build-dependency issue

* Thu Sep 29 2016 Daiki Ueno <dueno@redhat.com> - 3.27.0-2

- Update to NSS 3.27.0

- Remove upstreamed ectest patch

* Thu Aug 11 2016 Daiki Ueno <dueno@redhat.com> - 3.26.0-4

- Adjust ecperf patch according to code review

* Thu Aug 11 2016 Daiki Ueno <dueno@redhat.com> - 3.26.0-3

- Fix RNG intialization in ecperf pointed out by upstream

* Mon Aug  8 2016 Daiki Ueno <dueno@redhat.com> - 3.26.0-2

- Update to NSS 3.26.0

- Remove unused directories from split tarball

- Run EC tests here instead of in the nss package

* Fri Jun 24 2016 Elio Maldonado <emaldona@redhat.com> - 3.25.0-3

- Enable the add encrypt derive patch

* Fri Jun 24 2016 Elio Maldonado <emaldona@redhat.com> - 3.25.0-2

- Update to NSS 3.25.0

* Tue May 24 2016 Elio Maldonado <emaldona@redhat.com> - 3.24.0-2.0

- Update to NSS 3.24.0

* Sat Mar 12 2016 Elio Maldonado <emaldona@redhat.com> - 3.23.0-3

- Wait for upstream to solve the readdir_r deprecation issue

* Sat Mar 05 2016 Elio Maldonado <emaldona@redhat.com> - 3.23.0-2

- Update to NSS 3.23.0

* Sun Feb 28 2016 Elio Maldonado <emaldona@redhat.com> - 3.22.2-2

- Update to NSS 3.22.2

- Change unix_rand to not use readdir_r which is deprecated

* Sun Feb 21 2016 Elio Maldonado <emaldona@redhat.com> - 3.22.1-2

- Update to NSS 3.22.1

* Sat Feb 06 2016 Elio Maldonado <emaldona@redhat.com> - 3.22.0-2

- Update to NSS 3.22

* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 3.21.0-6

- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

* Sat Jan 02 2016 Elio Maldonado <emaldona@redhat.com> - 3.21.0-5

- Restore patch that had been mistakenly removed in a prior update

- Resolves: Bug 1155306 - Provide sym key derive mechanism as result of encryption of message

* Wed Dec 30 2015 Michal Toman <mtoman@fedoraproject.org> - 3.21.0-4

- Use __isa_bits macro even in %%check

* Sat Nov 21 2015 Elio Maldonado <emaldona@redhat.com> - 3.21.0-3

- Update %%{nss_util_version} to 3.21.0

* Thu Nov 12 2015 Elio Maldonado <emaldona@redhat.com> - 3.21.0-2

- Update to NSS 3.21

- Resolves: Bug 1279912 - nss-3.21 is available

- Resolves: Bug 1258425 - Use __isa_bits macro instead of list of 64-bit

* Fri Oct 30 2015 Elio Maldonado <emaldona@redhat.com> - 3.20.1-1

- Update to NSS 3.20.1

* Thu Aug 20 2015 Elio Maldonado <emaldona@redhat.com> - 3.20.0-1

- Update to NSS 3.20

* Sat Aug 08 2015 Elio Maldonado <emaldona@redhat.com> - 3.19.3-2

- Update to NSS 3.19.3

* Wed Jun 17 2015 Kai Engert <kaie@redhat.com> - 3.19.2-2

- Update to NSS 3.19.2

* Thu May 28 2015 Kai Engert <kaie@redhat.com> - 3.19.1-2

- Update to NSS 3.19.1

* Tue May 19 2015 Kai Engert <kaie@redhat.com> - 3.19.0-2

- Update to NSS 3.19

* Thu Mar 19 2015 Elio Maldonado <emaldona@redhat.com> - 3.18.0-1

- Update to nss-3.18.0

* Wed Jan 28 2015 Elio Maldonado <emaldona@redhat.com> - 3.17.4-1

- Update to nss-3.17.4

- fix dependencies so nss-softokn pulls in nss-softokn-freebl of the same version and release

* Fri Dec 05 2014 Elio Maldonado <emaldona@redhat.com> - 3.17.3-1

- Update to nss-3.17.3

* Sat Nov 08 2014 Elio Maldonado <emaldona@redhat.com> - 3.17.2-2

- Resolves: Bug 1155306 - Provide sym key derive mechansm as result of encryption of message

* Sun Oct 12 2014 Elio Maldonado <emaldona@redhat.com> - 3.17.2-1

- Update to nss-3.17.2

* Wed Sep 24 2014 Kai Engert <kaie@redhat.com> - 3.17.1-2

- Update nss-util build dependency

- Fix check of test suite result

* Wed Sep 24 2014 Kai Engert <kaie@redhat.com> - 3.17.1-1

- Update to nss-3.17.1

- Add a mechanism to skip test suite execution during development work

* Tue Aug 19 2014 Elio Maldonado <emaldona@redhat.com> - 3.17.0-1

- Update to nss-3.17.0

* Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.16.2-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

* Fri Jul 18 2014 Tom Callaway <spot@fedoraproject.org> - 3.16.2-2

- fix license handling

* Sun Jun 29 2014 Elio Maldonado <emaldona@redhat.com> - 3.16.2-1

- Update to nss-3.16.2

* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.16.1-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

* Mon May 12 2014 Jaromir Capik <jcapik@redhat.com> - 3.16.1-2

- Replacing ppc64 and ppc64le with the power64 macro

- Related: Bug 1052546 - Trivial change for ppc64le in nss-softokn spec

* Tue May 06 2014 Elio Maldonado <emaldona@redhat.com> - 3.16.1-1

- Update to nss-3.16.1

- Remove patch no longer needed due to the rebase

- Resolves: Bug 1094702 - nss-3.16.1 is available

* Mon Apr 14 2014 Elio Maldonado <emaldona@redhat.com> - 3.16.0-2

- Refactor ecdecode support from softoken to freebl

- Resolves: Bug 1075702 - ECC decode refactoring needed to build OpenJDK SunEC provider for ECC support

* Tue Mar 18 2014 Elio Maldonado <emaldona@redhat.com> - 3.16.0-0

- Update to nss-3.16.0

* Sun Mar 02 2014 Elio Maldonado <emaldona@redhat.com> - 3.15.5-2

- Fix a segmentation fault when signing on i686 that occurs in Rawhide

- Patch contributed by Stephan Bergmann 

- Resolves: Bug 1071679 - Define -DMP_USE_UINT_DIGIT in lib/freebl/Makefile for Linux x86

* Wed Feb 19 2014 Elio Maldonado <emaldona@redhat.com> - 3.15.5-1

- Update to nss-3.15.1 - Resolves: Bug 1066877

* Sat Jan 25 2014 Elio Maldonado <emaldona@redhat.com> - 3.15.4-3

- Add support for ppc64le, Resolves: Bug 1052546 

* Mon Jan 20 2014 Peter Robinson <pbrobinson@fedoraproject.org> 3.15.4-2

- ARM tests pass so remove ARM conditional

* Tue Jan 07 2014 Elio Maldonado <emaldona@redhat.com> - 3.15.3-2

- Update to NSS_3_15_4_RTM