meta-openembedded: subtree update:164a6030b0..f623d8b574

Adrian Freihofer (1):
      paho-mqtt-c: upgrade 1.3.6 -> 1.3.7

Alexander Kamensky (2):
      makedumpfile: add PACKAGECONFIG options for lzo and snappy compression
      makedumpfile: upgrade 1.6.7 -> 1.6.8

Alexander Kanavin (4):
      collect: do not build with -Werror
      libsigrokdecode: add python 3.9 support
      python3-mprpc: remove the recipe
      gnome-calendar: update to 3.38.1, add libhandy 1.x support

Anatol Belski (1):
      chrony: Patch CVE-2020-14367

Bartosz Golaszewski (1):
      libgpiod: update v1.4.4 -> v1.4.5

Beni (1):
      unbound: upgrade to 1.12.0

Gregory Anders (5):
      Add suitesparse
      Add python3-transitions
      Add python3-dill
      Add python3-cerberus
      Add python3-cvxopt

Hongxu Jia (1):
      lvm2.inc: switch branch master to main

Jasper Orschulko (1):
      upgrade and de-blacklist nanopb recipe

Jose Quaresma (3):
      spirv-tools: moved into OE-core, delete from meta-oe
      srt: add receipe
      opencv: Update 4.4.0 -> 4.5.0

Kai Kang (4):
      xfce4-cpufreq-plugin: 1.2.1 -> 1.2.2
      xfce4-weather-plugin: 0.10.1 -> 0.10.2
      xfce4-mailwatch-plugin: 1.2.0 -> 1.3.0
      tumbler: 0.2.9 -> 0.3.1

Khem Raj (71):
      nodejs: Fix arm32/thumb builds with clang
      nodejs: Update to 12.19.0
      redis: Fix build on 32bit targets and clang
      gperftools: Fix build with new musl updates
      minifi-cpp: Fix build with riscv64/clang
      graphviz: Upgrade to 2.44.1 release
      musl-nscd: Update to latest
      remmina: Update to 1.4.8
      mdbus2: Fix build with vala 0.50
      ibus: Update to 1.5.3 plus fix for vala 0.50
      networkd-dispatcher: Upgrade to 2.1
      geoclue: Use git fetcher
      kernel-selftest: Disable vm packageconfig for riscv
      layer.conf: Add hardknott to LAYERSERIES_COMPAT
      fmt: Upgrade to 7.1.2
      lksctp-tools: Update to latest master
      fuse3: Upgrade to 3.10.0
      rdma-core: Upgrade to 31.1
      opengl-es-cts: Disable LTO
      fluentbit: Disable LTO
      traceroute: Fix build with LTO
      cmocka: Fix buils with LTO
      dovecot: Disable LTO
      redis-plus-plus: Upgrade to 1.2.1
      suitesparse: Exclude from world
      python3-icu: Update to 2.6
      meta-python: Drop RDEPEND'ing on python3-typing
      python3-cvxopt: Exclude from world builds
      packagegroup-meta-multimedia: Add srt
      gedit: Inherit python3targetconfig
      gmime: Fix append to do_configure
      dconf: Add leading whitespace for append operator
      kexec-tools-klibc: Add leading whitespace for append operator
      spice: Add leading whitespace for append operator
      meta-oe: Add leading whitespace for append operator
      libgusb: Update to 0.3.5
      botan: Mark incompatible with riscv32
      projucer: Link with libatomic on rv32
      mariadb: Fix build on 32bit arches with 64bit time_t
      liburing: Fix build on 32-bit arches with 64-bit time_t
      librtorrent: Disable instrumentation on rv32
      ntopng: Link with libatomic on rv32
      poco: Add riscv32 support
      capnproto: Fix build on 32bit arches with 64bit time_t defaults
      directfb: Fix build on riscv32
      opensaf: Fix build on 32bit arches with 64bit time_t e.g. RISCV-32
      rocksdb: Update to 6.12.7
      qpdf: Link with libatomic on rv32
      libkcapi: Fix build on riscv32
      jack: Upgrade to 1.19.16
      vlc: Fix build on riscv32
      fluentbit: Link with libatomic on riscv32
      openipmi: Inherit python3targetconfig
      libplist: Inherit python3targetconfig
      postgresql: Inherit python3targetconfig
      python-grpcio-tools: Add missing space for append
      python3-pykwalify: Do not unset _PYTHON_SYSCONFIGDATA_NAME
      thingsboard-gateway: Move under dynamic layers
      musl-nscd: Replace -fcommon with code patch
      musl-nscd: Add missing deps on flex and bison during build
      python3-pytest: Upgrade to 6.1.2
      python3-hypothesis: Add recipe
      python3-sortedcontainers: Add recipe
      heaptrack: Fix build on musl
      heaptrack: Mark RISCV host incompatible
      packagegroup-meta-oe: Exclude heaptrack for rv32/rv64
      chrony: Upgrade to 4.0
      canutils,can-utils: Add cansequence to u-a as well
      packagegroup-meta-python: Add newly added recipes to packagegroup-meta-python3
      pipewire: Link with libatomic for riscv32
      python3-matplotlib: Disable LTO for clang/riscv

Kory Maincent (1):
      libftdi: add swig-native to dependencies

Leon Anavi (37):
      python3-luma-oled: Upgrade 3.6.0 -> 3.7.0
      python3-cryptography-vectors: Upgrade 3.1.1 -> 3.2
      python3-pyexpect: Upgrade 1.0.20 -> 1.0.21
      python3-markdown: Upgrade 3.3.2 -> 3.3.3
      python3-sh: Upgrade 1.14.0 -> 1.14.1
      python3-kiwisolver: Upgrade 1.2.0 -> 1.3.0
      python3-aiohttp: Upgrade 3.7.1 -> 3.7.2
      python3-aiofiles: Upgrade 0.5.0 -> 0.6.0
      python3-regex: Upgrade 2020.10.23 -> 2020.10.28
      python3-dateparser: Upgrade 0.7.6 -> 1.0.0
      python3-langtable: Upgrade 0.0.53 -> 0.0.54
      python3-kiwisolver: Upgrade 1.3.0 -> 1.3.1
      python3-tornado: Upgrade 6.0.4 -> 6.1
      python3-ipython: Upgrade 7.18.1 -> 7.19.0
      python3-cmd2: Upgrade 1.3.11 -> 1.4.0
      python3-dill: Upgrade 0.3.2 -> 0.3.3
      python3-colorlog: Upgrade 4.4.0 -> 4.6.2
      python3-pandas: Upgrade 1.1.3 -> 1.1.4
      python3-attrs: 20.2.0 -> 20.3.0
      python3-gmqtt: Upgrade 0.6.7 -> 0.6.8
      python3-diskcache: Upgrade 5.0.3 -> 5.1.0
      python3-croniter: Upgrade 0.3.35 -> 0.3.36
      python3-bitarray: Upgrade 1.6.0 -> 1.6.1
      python3-certifi: Upgrade 2020.6.20 -> 2020.11.8
      python3-cantools: Upgrade 35.3.0 -> 35.5.0
      python3-arpeggio: Upgrade 1.9.2 -> 1.10.1
      python3-toml: Upgrade 0.10.1 -> 0.10.2
      python3-pyrad: Upgrade 2.3 -> 2.4
      python3-bitstruct: Upgrade 8.11.0 -> 8.11.1
      python3-yarl: Upgrade 1.6.2 -> 1.6.3
      python3-luma-core: Upgrade 1.17.3 -> 2.0.1
      python3-luma-oled: Upgrade 3.7.0 -> 3.8.1
      python3-fastnumbers: Upgrade 3.0.0 -> 3.1.0
      python3-ansi2html: Upgrade 1.5.2 -> 1.6.0
      python3-prettytable: Upgrade 1.0.1 -> 2.0.0
      python3-urllib3: Upgrade 1.25.11 -> 1.26.2
      python3-transitions: Upgrade 0.8.4 -> 0.8.5

Li Zhou (1):
      ptpd: Solve memory leak for function NTPDCrequest

Maciej Pijanowski (2):
      cdrkit: add native to BBCLASSEXTEND
      cdrkit: split into more packages

Mark Jonas (5):
      mbedtls: Fix typo in PACKAGECONFIG
      python3-pyinotify: Add missing ctypes dependency
      libsocketcan: Add PACKAGECONFIG options
      libsocketcan: Update to 0.0.12
      imagemagick: Add NOTICE to collected license texts

Max Kellermann (1):
      php: remove the failing ${D}/${TMPDIR} code

Mingli Yu (6):
      ndpi: add new recipe
      libmaxminddb: add new recipe
      ntopng: add new recipe
      ntop: remove the recipe
      packagegroup-meta-networking.bb: add ntopng related recipes
      traceroute: set VPATH

Nick Rosbrook (3):
      strongswan: add some PACKAGECONFIG options for EAP
      strongswan: do not use deprecated stroke and starter by default
      strongswan: remove ldap from default PACKAGECONFIG

Pierre-Jean Texier (1):
      inotify-tools: upgrade 3.20.2.2 -> 3.20.11.0

Randy Witt (1):
      numactl: Remove the recipe

Ricardo Salveti (3):
      wireguard-module: upgrade 1.0.20200712 -> 1.0.20200908
      wireguard-tools: upgrade 1.0.20200513 -> 1.0.20200827
      wireguard-module: upgrade 1.0.20200908 -> 1.0.20201112

Sakib Sajal (1):
      libssh2: fix ptest

Sinan Kaya (3):
      collectd: fix the test condition for dash compatibility
      heaptrack: add bitbake recipe
      cpp-netlib: add bitbake recipe

Tim Orling (16):
      python3-atomicwrites: drop (moved to oe-core)
      python3-attrs: drop (moved to oe-core)
      python3-iniconfig: drop (moved to oe-core)
      python3-more-itertools: drop (moved to oe-core)
      python3-pathlib2: drop (moved to oe-core)
      python3-toml: drop (moved to oe-core)
      python3-py: drop (moved to oe-core)
      python3-setuptools-scm: drop (moved to oe-core)
      python3-packaging: drop (moved to oe-core)
      python3-wcwidth: drop (moved to oe-core)
      python3-zipp: drop (moved to oe-core)
      python3-importlib-metadata: drop (moved to oe-core)
      python3-pluggy: drop (moved to oe-core)
      python3-pytest: drop (moved to oe-core)
      python3-hypothesis: drop (moved to oe-core)
      python3-sortedcontainers: drop (moved to oe-core)

Trevor Gamblin (2):
      python3-jinja2: Fix ptest RDEPENDS and file installation
      python3-markupsafe: Fix ptest RDEPENDS and installation

William A. Kennington III (1):
      span-lite: Bump e03d116..0.8.1

Yi Zhao (5):
      minifi-cpp: specify GCC_AR and GCC_RANLIB
      quagga: unify volatiles file name
      minifi-cpp: depend on nettle and lz4
      nss: upgrade 3.57 -> 3.59
      krb5: upgrade 1.17.1 -> 1.17.2

Zang Ruochen (19):
      libnftnl: upgrade 1.1.7 -> 1.1.8
      xfsprogs: upgrade 5.8.0 -> 5.9.0
      radvd: upgrade 2.18 -> 2.19
      fmt: upgrade 7.0.3 -> 7.1.0
      hidapi: upgrade 0.9.0 -> 0.10.0
      libkcapi: upgrade 1.2.0 -> 1.2.1
      modemmanager: upgrade 1.14.2 -> 1.14.6
      nvme-cli: upgrade 1.12 -> 1.13
      ostree: upgrade 2020.6 -> 2020.7
      poppler-data: upgrade 0.4.9 -> 0.4.10
      nftables: upgrade 0.9.6 -> 0.9.7
      toybox: upgrade 0.8.3 -> 0.8.4
      fbgrab: upgrade 1.3.3 -> 1.4
      mraa: upgrade 2.1.0 -> 2.2.0
      opensaf: upgrade 5.20.05 -> 5.20.08
      openvpn: upgrade 2.4.9 -> 2.5.0
      poppler: upgrade 20.10.0 -> 20.11.0
      tmux: upgrade 3.1b -> 3.1c
      xmlsec1: upgrade 1.2.30 -> 1.2.31

changqing.li@windriver.com (1):
      thin-provisioning-tools: switch branch from master to main

hasan.men (2):
      thingsboard-gateway: Add recipe for v2.5.2
      python3-jsonpath-rw: Add recipe for v1.4.0

richard (1):
      poco: Upgrade 1.9.4 -> 1.10.1

viatsk (1):
      tcpdump: Patch for CVE-2020-8037

zangrc (27):
      sshfs-fuse: upgrade 3.7.0 -> 3.7.1
      can-utils: upgrade 2020.02.04 -> 2020.11.0
      hwdata: upgrade 0.340 -> 0.341
      libio-pty-perl: upgrade 1.14 -> 1.15
      live555: upgrade 20200819 -> 20201105
      zile: upgrade 2.4.14 -> 2.4.15
      rdma-core: upgrade 31.1 -> 32.0
      strongswan: upgrade 5.8.4 -> 5.9.1
      fio: upgrade 3.22 -> 3.24
      libharu: Fix the packaging bug
      modemmanager: upgrade 1.14.6 -> 1.14.8
      openldap: upgrade 2.4.51 -> 2.4.56
      protobuf: upgrade 3.13.0.1 -> 3.14.0
      nghttp2: upgrade 2.41.0 -> 2.42.0
      nngpp: upgrade 1.2.4 -> 1.3.0
      snort: upgrade 2.9.16.1 -> 2.9.17
      weechat: upgrade 2.9 -> 3.0
      cjson: upgrade 1.7.13 -> 1.7.14
      cloc: upgrade 1.84 -> 1.88
      jpnevulator: upgrade 2.3.5 -> 2.3.6
      libjcat: upgrade 0.1.3 -> 0.1.4
      libsigc++-3: upgrade 3.0.3 -> 3.0.6
      ocl-icd: upgrade 2.2.12 -> 2.2.13
      opencl-clhpp: upgrade 2.0.11 -> 2.0.12
      ostree: upgrade 2020.7 -> 2020.8
      pkcs11-helper: upgrade 1.26 -> 1.27
      netplan: upgrade 0.99 -> 0.100

zhengruoqin (1):
      dnf-plugin-tui: Update to the latest version

Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
Change-Id: I286bb6d58bf30588516b35ec06ddfd0bedee2e64

1 files changed, 271 insertions, 0 deletions

diff --git a/meta-openembedded/meta-oe/recipes-support/nss/nss_3.59.bb b/meta-openembedded/meta-oe/recipes-support/nss/nss_3.59.bb
new file mode 100644
index 000000000..eb9162bea
--- /dev/null
+++ b/meta-openembedded/meta-oe/recipes-support/nss/nss_3.59.bb
@@ -0,0 +1,271 @@
+SUMMARY = "Mozilla's SSL and TLS implementation"
+DESCRIPTION = "Network Security Services (NSS) is a set of libraries \
+designed to support cross-platform development of \
+security-enabled client and server applications. \
+Applications built with NSS can support SSL v2 and v3, \
+TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 \
+v3 certificates, and other security standards."
+HOMEPAGE = "http://www.mozilla.org/projects/security/pki/nss/"
+SECTION = "libs"
+
+DEPENDS = "sqlite3 nspr zlib nss-native"
+DEPENDS_class-native = "sqlite3-native nspr-native zlib-native"
+
+LICENSE = "MPL-2.0 | (MPL-2.0 & GPL-2.0+) | (MPL-2.0 & LGPL-2.1+)"
+
+LIC_FILES_CHKSUM = "file://nss/COPYING;md5=3b1e88e1b9c0b5a4b2881d46cce06a18 \
+                    file://nss/lib/freebl/mpi/doc/LICENSE;md5=491f158d09d948466afce85d6f1fe18f \
+                    file://nss/lib/freebl/mpi/doc/LICENSE-MPL;md5=5d425c8f3157dbf212db2ec53d9e5132"
+
+VERSION_DIR = "${@d.getVar('BP').upper().replace('-', '_').replace('.', '_') + '_RTM'}"
+
+SRC_URI = "http://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/${VERSION_DIR}/src/${BP}.tar.gz \
+           file://nss.pc.in \
+           file://0001-nss-fix-support-cross-compiling.patch \
+           file://nss-no-rpath-for-cross-compiling.patch \
+           file://nss-fix-incorrect-shebang-of-perl.patch \
+           file://disable-Wvarargs-with-clang.patch \
+           file://pqg.c-ULL_addend.patch \
+           file://blank-cert9.db \
+           file://blank-key4.db \
+           file://system-pkcs11.txt \
+           file://nss-fix-nsinstall-build.patch \
+           file://0001-freebl-add-a-configure-option-to-disable-ARM-HW-cryp.patch \
+           "
+SRC_URI[sha256sum] = "e6298174caa8527beacdc2858f77ed098d7047c1792846040e27e420fed0ce24"
+
+UPSTREAM_CHECK_URI = "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_Releases"
+UPSTREAM_CHECK_REGEX = "NSS_(?P<pver>.+)_release_notes"
+
+inherit siteinfo
+
+TD = "${S}/tentative-dist"
+TDS = "${S}/tentative-dist-staging"
+
+# cortex-a55 is ARMv8.2-a based but libatomic explicitly asks for -march=armv8.1-a
+# which caused -march conflicts in gcc
+TUNE_CCARGS_remove = "-mcpu=cortex-a55+crc -mcpu=cortex-a55 -mcpu=cortex-a55+crc+crypto"
+
+TARGET_CC_ARCH += "${LDFLAGS}"
+
+do_configure_prepend_libc-musl () {
+    sed -i -e '/-DHAVE_SYS_CDEFS_H/d' ${S}/nss/lib/dbm/config/config.mk
+}
+
+do_compile_prepend_class-native() {
+    export NSPR_INCLUDE_DIR=${STAGING_INCDIR_NATIVE}/nspr
+    export NSPR_LIB_DIR=${STAGING_LIBDIR_NATIVE}
+}
+
+do_compile_prepend_class-nativesdk() {
+    export LDFLAGS=""
+}
+
+do_compile_prepend_class-native() {
+    # Need to set RPATH so that chrpath will do its job correctly
+    RPATH="-Wl,-rpath-link,${STAGING_LIBDIR_NATIVE} -Wl,-rpath-link,${STAGING_BASE_LIBDIR_NATIVE} -Wl,-rpath,${STAGING_LIBDIR_NATIVE} -Wl,-rpath,${STAGING_BASE_LIBDIR_NATIVE}"
+}
+
+do_compile() {
+    export NSPR_INCLUDE_DIR=${STAGING_INCDIR}/nspr
+    export NSS_ENABLE_WERROR=0
+
+    export CROSS_COMPILE=1
+    export NATIVE_CC="${BUILD_CC}"
+    # Additional defines needed on Centos 7
+    export NATIVE_FLAGS="${BUILD_CFLAGS} -DLINUX -Dlinux"
+    export BUILD_OPT=1
+
+    export FREEBL_NO_DEPEND=1
+    export FREEBL_LOWHASH=1
+
+    export LIBDIR=${libdir}
+    export MOZILLA_CLIENT=1
+    export NS_USE_GCC=1
+    export NSS_USE_SYSTEM_SQLITE=1
+    export NSS_ENABLE_ECC=1
+
+    ${@bb.utils.contains("TUNE_FEATURES", "crypto", "export NSS_USE_ARM_HW_CRYPTO=1", "", d)}
+
+    export OS_RELEASE=3.4
+    export OS_TARGET=Linux
+    export OS_ARCH=Linux
+
+    if [ "${TARGET_ARCH}" = "powerpc" ]; then
+        OS_TEST=ppc
+    elif [ "${TARGET_ARCH}" = "powerpc64" ]; then
+        OS_TEST=ppc64
+    elif [ "${TARGET_ARCH}" = "mips" -o "${TARGET_ARCH}" = "mipsel" -o "${TARGET_ARCH}" = "mips64" -o "${TARGET_ARCH}" = "mips64el" ]; then
+        OS_TEST=mips
+    elif [ "${TARGET_ARCH}" = "aarch64_be" ]; then
+        OS_TEST="aarch64"
+    else
+        OS_TEST="${TARGET_ARCH}"
+    fi
+
+    if [ "${SITEINFO_BITS}" = "64" ]; then
+        export USE_64=1
+    elif [ "${TARGET_ARCH}" = "x86_64" -a "${SITEINFO_BITS}" = "32" ]; then
+        export USE_X32=1
+    fi
+
+    export NSS_DISABLE_GTESTS=1
+
+    # We can modify CC in the environment, but if we set it via an
+    # argument to make, nsinstall, a host program, will also build with it!
+    #
+    # nss pretty much does its own thing with CFLAGS, so we put them into CC.
+    # Optimization will get clobbered, but most of the stuff will survive.
+    # The motivation for this is to point to the correct place for debug
+    # source files and CFLAGS does that.  Nothing uses CCC.
+    #
+    export CC="${CC} ${CFLAGS}"
+    make -C ./nss CCC="${CXX} -g" \
+        OS_TEST=${OS_TEST} \
+        RPATH="${RPATH}" \
+        autobuild
+}
+
+do_compile[vardepsexclude] += "SITEINFO_BITS"
+
+do_install_prepend_class-nativesdk() {
+    export LDFLAGS=""
+}
+
+do_install() {
+    export CROSS_COMPILE=1
+    export NATIVE_CC="${BUILD_CC}"
+    export BUILD_OPT=1
+
+    export FREEBL_NO_DEPEND=1
+
+    export LIBDIR=${libdir}
+    export MOZILLA_CLIENT=1
+    export NS_USE_GCC=1
+    export NSS_USE_SYSTEM_SQLITE=1
+    export NSS_ENABLE_ECC=1
+
+    export OS_RELEASE=3.4
+    export OS_TARGET=Linux
+    export OS_ARCH=Linux
+
+    if [ "${TARGET_ARCH}" = "powerpc" ]; then
+        OS_TEST=ppc
+    elif [ "${TARGET_ARCH}" = "powerpc64" ]; then
+        OS_TEST=ppc64
+    elif [ "${TARGET_ARCH}" = "mips" -o "${TARGET_ARCH}" = "mipsel" -o "${TARGET_ARCH}" = "mips64" -o "${TARGET_ARCH}" = "mips64el" ]; then
+        OS_TEST=mips
+    elif [ "${TARGET_ARCH}" = "aarch64_be" ]; then
+        CPU_ARCH=aarch64
+        OS_TEST="aarch64"
+    else
+        OS_TEST="${TARGET_ARCH}"
+    fi
+    if [ "${SITEINFO_BITS}" = "64" ]; then
+        export USE_64=1
+    elif [ "${TARGET_ARCH}" = "x86_64" -a "${SITEINFO_BITS}" = "32" ]; then
+        export USE_X32=1
+    fi
+
+    export NSS_DISABLE_GTESTS=1
+
+    make -C ./nss \
+        CCC="${CXX}" \
+        OS_TEST=${OS_TEST} \
+        SOURCE_LIB_DIR="${TD}/${libdir}" \
+        SOURCE_BIN_DIR="${TD}/${bindir}" \
+        install
+
+    install -d ${D}/${libdir}/
+    for file in ${S}/dist/*.OBJ/lib/*.so; do
+        echo "Installing `basename $file`..."
+        cp $file  ${D}/${libdir}/
+    done
+
+    for shared_lib in ${TD}/${libdir}/*.so.*; do
+        if [ -f $shared_lib ]; then
+            cp $shared_lib ${D}/${libdir}
+            ln -sf $(basename $shared_lib) ${D}/${libdir}/$(basename $shared_lib .1oe)
+        fi
+    done
+    for shared_lib in ${TD}/${libdir}/*.so; do
+        if [ -f $shared_lib -a ! -e ${D}/${libdir}/$shared_lib ]; then
+            cp $shared_lib ${D}/${libdir}
+        fi
+    done
+
+    install -d ${D}/${includedir}/nss3
+    install -m 644 -t ${D}/${includedir}/nss3 dist/public/nss/*
+
+    install -d ${D}/${bindir}
+    for binary in ${TD}/${bindir}/*; do
+        install -m 755 -t ${D}/${bindir} $binary
+    done
+}
+
+do_install[vardepsexclude] += "SITEINFO_BITS"
+
+do_install_append() {
+    # Create empty .chk files for the NSS libraries at build time. They could
+    # be regenerated at target's boot time.
+    for file in libsoftokn3.chk libfreebl3.chk libnssdbm3.chk; do
+        touch ${D}/${libdir}/$file
+        chmod 755 ${D}/${libdir}/$file
+    done
+
+    install -d ${D}${libdir}/pkgconfig/
+    sed 's/%NSS_VERSION%/${PV}/' ${WORKDIR}/nss.pc.in | sed 's/%NSPR_VERSION%/4.9.2/' > ${D}${libdir}/pkgconfig/nss.pc
+    sed -i s:OEPREFIX:${prefix}:g ${D}${libdir}/pkgconfig/nss.pc
+    sed -i s:OEEXECPREFIX:${exec_prefix}:g ${D}${libdir}/pkgconfig/nss.pc
+    sed -i s:OELIBDIR:${libdir}:g ${D}${libdir}/pkgconfig/nss.pc
+    sed -i s:OEINCDIR:${includedir}/nss3:g ${D}${libdir}/pkgconfig/nss.pc
+}
+
+do_install_append_class-target() {
+    # It used to call certutil to create a blank certificate with empty password at
+    # build time, but the checksum of key4.db changes every time when certutil is called.
+    # It causes non-determinism issue, so provide databases with a blank certificate
+    # which are originally from output of nss in qemux86-64 build. You can get these
+    # databases by:
+    # certutil -N -d sql:/database/path/ --empty-password
+    install -d ${D}${sysconfdir}/pki/nssdb/
+    install -m 0644 ${WORKDIR}/blank-cert9.db ${D}${sysconfdir}/pki/nssdb/cert9.db
+    install -m 0644 ${WORKDIR}/blank-key4.db ${D}${sysconfdir}/pki/nssdb/key4.db
+    install -m 0644 ${WORKDIR}/system-pkcs11.txt ${D}${sysconfdir}/pki/nssdb/pkcs11.txt
+}
+
+PACKAGE_WRITE_DEPS += "nss-native"
+
+pkg_postinst_${PN} () {
+    for I in $D${libdir}/lib*.chk; do
+        DN=`dirname $I`
+        BN=`basename $I .chk`
+        FN=$DN/$BN.so
+        shlibsign -i $FN
+        if [ $? -ne 0 ]; then
+            echo "shlibsign -i $FN failed"
+        fi
+    done
+}
+
+PACKAGES =+ "${PN}-smime"
+FILES_${PN}-smime = "\
+    ${bindir}/smime \
+"
+
+FILES_${PN} = "\
+    ${sysconfdir} \
+    ${bindir} \
+    ${libdir}/lib*.chk \
+    ${libdir}/lib*.so \
+    "
+
+FILES_${PN}-dev = "\
+    ${libdir}/nss \
+    ${libdir}/pkgconfig/* \
+    ${includedir}/* \
+    "
+
+RDEPENDS_${PN}-smime = "perl"
+
+BBCLASSEXTEND = "native nativesdk"