security/nss 3.131.1 MidnightBSD

Libraries to support development of security-enabled applications

System: MidnightBSD
Repository: mports
Maintainer: [email protected]
Last update: 2026-10-20
Commit: 3366471c63
License: MPL20
Categories: security

Description

Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards.

In the other systems

System

Port

Version

MidnightBSD

security/nss

3.131.1

FreeBSD

security/nss

3.131.1

OpenBSD

security/nss

3.131.1

NetBSD

devel/nss

3.129

DragonFly

security/nss

3.112

Install

Binary package:

mport install nss

From mports:

cd /usr/mports/security/nss && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	nss>0:security/nss
LIB_DEPENDS=	libfreebl3.so:security/nss

Dependencies

As this port's Makefile names them.

Build 1

${LOCALBASE}/bin/sqlite3 : databases/sqlite3

Library 2

libnspr4.so : devel/nspr
libsqlite3.so : databases/sqlite3

Runtime 1

${LOCALBASE}/bin/sqlite3 : databases/sqlite3

Test 1

bash : shells/bash

Build dependencies 2

Run dependencies 2

Configuration

Options name: security_nss

Option

Default

Description

DEBUG

off

USES: cpe gmake perl5
Service scripts: none

Files

pkg-plist 135

bin/certutil
bin/cmsutil
bin/crlutil
bin/derdump
bin/makepqg
bin/mangle
bin/modutil
bin/nss-config
bin/ocspclnt
bin/oidcalc
bin/p7content
bin/p7env
bin/p7sign
bin/p7verify
bin/pk12util
bin/rsaperf
bin/shlibsign
bin/signtool
bin/signver
bin/ssltap
bin/strsclnt
bin/symkeyutil
bin/vfychain
bin/vfyserv
include/nss/base64.h
include/nss/blapit.h
include/nss/cert.h
include/nss/certdb.h
include/nss/certt.h
include/nss/ciferfam.h
include/nss/cms.h
include/nss/cmsreclist.h
include/nss/cmst.h
include/nss/cryptohi.h
include/nss/cryptoht.h
include/nss/eccutil.h
include/nss/ecl-exp.h
include/nss/hasht.h
include/nss/jar-ds.h
include/nss/jar.h
include/nss/jarfile.h
include/nss/key.h
include/nss/keyhi.h
include/nss/keyt.h
include/nss/keythi.h
include/nss/kyber.h
include/nss/lowkeyi.h
include/nss/lowkeyti.h
include/nss/ml_dsat.h
include/nss/nss.h
include/nss/nssb64.h
include/nss/nssb64t.h
include/nss/nssbase.h
include/nss/nssbaset.h
include/nss/nssck.api
include/nss/nssckbi.h
include/nss/nssckepv.h
include/nss/nssckft.h
include/nss/nssckfw.h
include/nss/nssckfwc.h
include/nss/nssckfwt.h
include/nss/nssckg.h
include/nss/nssckmdt.h
include/nss/nssckt.h
include/nss/nsshash.h
include/nss/nssilckt.h
include/nss/nssilock.h
include/nss/nsslocks.h
include/nss/nsslowhash.h
include/nss/nssrwlk.h
include/nss/nssrwlkt.h
include/nss/nssutil.h
include/nss/ocsp.h
include/nss/ocspt.h
include/nss/p12.h
include/nss/p12plcy.h
include/nss/p12t.h
include/nss/pk11func.h
include/nss/pk11hpke.h
include/nss/pk11pqg.h
include/nss/pk11priv.h
include/nss/pk11pub.h
include/nss/pk11sdr.h
include/nss/pkcs11.h
include/nss/pkcs11f.h
include/nss/pkcs11n.h
include/nss/pkcs11p.h
include/nss/pkcs11t.h
include/nss/pkcs11u.h
include/nss/pkcs11uri.h
include/nss/pkcs12.h
include/nss/pkcs12t.h
include/nss/pkcs1sig.h
include/nss/pkcs7t.h
include/nss/portreg.h
include/nss/preenc.h
include/nss/secasn1.h
include/nss/secasn1t.h
include/nss/seccomon.h
include/nss/secder.h

The first 100 are listed.

distinfo 1

File

Size

SHA256

nss-3.131.1.tar.gz

8.8058024e+07

b1dbc1d9e7f3f8455dfb6d58ec8f7229d8a8450c629a9e69ef2ef6081f359056

Master sites 1

MOZILLA/security/nss/releases/${DISTNAME:tu:C/[-.]/_/g}_RTM/src

Commit history 5

Date Commit Credits Log message

2026-10-20

3366471c63

Lucas Holt

security/nss: update to 3.131.1 (#1828)

Security update. Release announcement: https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/vSxZxnOMMvs NSS 3.131.1 removes trust in these root certificates: - emSign Root CA - C1 (bug 2083709) - emSign ECC Root CA - C3 (bug 2083709) - emSign ECC Root CA - G3 (bug 2084101). This removal responds to a recent security incident that affected intermediate certificates. The new version requires NSPR 4.39, which `devel/nspr` is already at. Sonames are unchanged, so dependent ports don't need a PORTREVISION bump. ## Testing (MidnightBSD 4.0.9 amd64) - `makesum`: the SHA256 matches Mozilla's published `SHA256SUMS`. - `patch`, `build`, `fake`, `package` from a clean `work/`: all existing patches apply, and fake-qa reports no plist discrepancies. …

2026-10-05 c85e00aa71 Lucas Holt security/nss: update to 3.129 (#1703)

2026-09-02

b91aaff364

Lucas Holt

security/nss: update to 3.127 (#804)

Update `security/nss` from 3.126 to 3.127. Required by the companion `www/firefox` 155.0 update, which declares a minimum of `nss>=3.127`. ## NSPR compatibility NSS 3.127 declares its minimum NSPR as **4.39** (`automation/release/nspr-version.txt`) — unchanged from 3.126. `devel/nspr` is already at 4.39, so **no nspr change is needed**. ## Validation (amd64, MidnightBSD 4.0.6) - `bmake makesum` — distinfo regenerated - `bmake patch` — all 13 existing patches apply cleanly, no changes required - `bmake` — builds clean - `bmake fake` — stages clean - `bmake package` — `nss-3.127.mport` created - Generated `nss.pc` and `nss-config` both report 3.127 - `portlint` — 0 fatal errors; the 7 warnings are pre-existing …

2026-08-07

e3dc6ce124

Lucas Holt

security/nss: update to 3.126 (#699)

## Summary - update NSS from 3.125 to 3.126 - refresh the distfile checksum and size - retain the existing MidnightBSD portability patches and packaging Depends on #698, which updates `devel/nspr` to the upstream-required NSPR 4.39. ## Validation - `bmake makesum` - `bmake patch` - `bmake` - `bmake fake` - `bmake package` - `bmake check-license` - `portlint -C` (0 fatal errors; 8 pre-existing warnings) - `git diff --check` `bmake test` is a no-op because the existing port sets `NO_TEST=yes`. The package build completed against the locally installed NSPR ABI, but #698 must land first because NSS 3.126 declares NSPR 4.39 as its minimum supported version. ## Summary by Sourcery Update the security/nss port to the 3.126 release and refresh associated distfile metadata. Enhancements: …

2026-07-22

b9b067e093

Lucas Holt

Update Thunderbird to 153.0

Update NSS and ca_root_nss to 3.125 and refresh cbindgen for the Thunderbird build. Preserve MidnightBSD compatibility fixes for protobuf alignment, libproxy, and __XSI_VISIBLE. AI-Assisted-by: Codex GPT-5 <[email protected]> Signed-off-by: Lucas Holt <[email protected]>