nixpkgs/pkgs/development/libraries/nss
zimbatm 8f2be9ac36
nss: make reproducible (#102156)
According to
c1fad130dc/build.sh (l129)
the FIPS mode is not enabled by default. Yet we generate the .chk files
that are only meant to be used for that mode. I have a sense that those
have been cargo-culted around.

Adding FIPS is still possible but you have to explictily build the lib
with `pkgs.nss.override { enableFIPS = true; }`

More info on what FIPS is:
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_Tech_Notes/nss_tech_note6

Other distros wrangling with the same issue:
https://bugzilla.opensuse.org/show_bug.cgi?id=1081723
2020-10-31 21:17:26 +01:00
..
3.44.nix Re-Revert "Merge #101508: libraw: 0.20.0 -> 0.20.2" 2020-10-26 08:19:17 +01:00
85_security_load-3.44.patch nss_3_44: bring back this older branch for firefox-esr 2020-07-19 12:30:25 +02:00
85_security_load.patch nss: 3.52.1 -> 3.54 2020-07-15 19:08:51 +02:00
ckpem.patch
default.nix nss: make reproducible (#102156) 2020-10-31 21:17:26 +01:00
fix-cross-compilation.patch nss: 3.52.1 -> 3.54 2020-07-15 19:08:51 +02:00