1Contains the Network Security Services (NSS) libraries from Mozilla 2 3== ESR versions == 4 5Upstream releases both regular and "ESR" versions, the latter go into Firefox 6ESR and Thunderbird. 7 8There is a new ESR version about once a year, and a ESR version gets micro 9updates only when there are security issues to fix, and it's not always obvious 10from the release notes of a regular release if there are security issues that 11are relevant to LibreOffice, hence it's probably best to bundle only the ESR 12versions and upgrade for every micro release (as recommended by upstream). 13 14== Fips 140 and signed libraries == 15 16Fips 140 mode is not supported. That is, the *.chk files containing the 17checksums for the cryptographic module are not delivered into instdir and will 18not be part of the OOo installation sets. 19 20Signing has been turned off because 21- we change the rpath (install names) after signing which breaks the signatures 22(Mac) 23- sqlite conflicts with the system sqlite when signing which breaks the build 24 25See also 26[https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_Tech_Notes/nss_tech_note6] 27 28== libsqlite3 == 29 30With all supported macOS SDK we use 31NSS_USE_SYSTEM_SQLITE=1 32to build using the system sqlite. 33 34
