From 9913a4bc826d8f918b4416a8bdfc1d5787b044e4 Mon Sep 17 00:00:00 2001 From: Moonchild Date: Thu, 10 Dec 2020 01:14:52 +0000 Subject: Additional configuration for NSS lib update. The Seed and RC2 components are completely obsolete, so we shouldn't build them. AVX2 for Poly1305 would fall outside of our platform sysreqs, and has a build system issue with non-MSVC flags being passed (needs more research, also a recent change around 3.53) --- config/external/nss/Makefile.in | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/config/external/nss/Makefile.in b/config/external/nss/Makefile.in index 7289e57f4c..f94c4d8db6 100644 --- a/config/external/nss/Makefile.in +++ b/config/external/nss/Makefile.in @@ -174,6 +174,13 @@ DEFAULT_GMAKE_FLAGS += NSS_SSL_ENABLE_ZLIB= # Disable building of the test programs in security/nss/lib/zlib DEFAULT_GMAKE_FLAGS += PROGRAMS= +# Disable AVX2 for poly1305 +DEFAULT_GMAKE_FLAGS += NSS_DISABLE_AVX2=1 + +# Disable obsolete ciphers +DEFAULT_GMAKE_FLAGS += NSS_DISABLE_DEPRECATED_SEED=1 +DEFAULT_GMAKE_FLAGS += NSS_DISABLE_DEPRECATED_RC2=1 + # Disable creating .chk files. They will be generated from packager.mk # When bug 681624 lands, we can replace CHECKLOC= with SKIP_SHLIBSIGN=1 DEFAULT_GMAKE_FLAGS += CHECKLOC= -- cgit v1.2.3