Update NSPR to 4.12 and NSS to 3.23 on iOS

nss.gyp

 # Copyright (c) 2012 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 {
-  'variables': {
-    'conditions': [
-      ['OS=="ios"', {
-        'exclude_nss_root_certs%': 0,
-        'exclude_nss_libpkix%': 0,
-      }, {
-        'exclude_nss_root_certs%': 1,
-        'exclude_nss_libpkix%': 1,
-      }],
-    ],
-  },
   'target_defaults': {
     'configurations': {
       'Debug': {
         'defines': [
           'DEBUG',
           '_DEBUG',
         ],
       },
       'Release': {
         'defines': [
           'NDEBUG',
         ],
       },
     },
-    'conditions': [
-      ['OS=="win"', {
-        'configurations': {
-          'Common_Base': {
-            'msvs_configuration_attributes': {
-              # Do not compile NSPR and NSS with /D _UNICODE /D UNICODE.
-              'CharacterSet': '0'
-            }
-          }
-        },
-        'defines!': [
-          'WIN32_LEAN_AND_MEAN',
-        ],
-      }],
-    ],
   },
   'conditions': [
     # To ensure no dependency on NSS is accidentally added to a BoringSSL port,
     # define the NSS and NSPR targets conditionally.
     ['use_openssl==0', {
       'targets': [
         {
           'target_name': 'nspr',
           'product_name': 'crnspr',
           'type': '<(component)',
@@ skipping 73 matching lines @@
             'nspr/pr/include/prshm.h',
             'nspr/pr/include/prshma.h',
             'nspr/pr/include/prsystem.h',
             'nspr/pr/include/prthread.h',
             'nspr/pr/include/prtime.h',
             'nspr/pr/include/prtpool.h',
             'nspr/pr/include/prtrace.h',
             'nspr/pr/include/prtypes.h',
             'nspr/pr/include/prvrsion.h',
             'nspr/pr/include/prwin16.h',
-            'nspr/pr/src/io/prdir.c',
             'nspr/pr/src/io/prfdcach.c',
-            'nspr/pr/src/io/prfile.c',
-            'nspr/pr/src/io/prio.c',
             'nspr/pr/src/io/priometh.c',
             'nspr/pr/src/io/pripv6.c',
             'nspr/pr/src/io/prlayer.c',
             'nspr/pr/src/io/prlog.c',
             'nspr/pr/src/io/prmapopt.c',
             'nspr/pr/src/io/prmmap.c',
             'nspr/pr/src/io/prmwait.c',
             'nspr/pr/src/io/prpolevt.c',
             'nspr/pr/src/io/prprf.c',
             'nspr/pr/src/io/prscanf.c',
-            'nspr/pr/src/io/prsocket.c',
             'nspr/pr/src/io/prstdio.c',
             'nspr/pr/src/linking/prlink.c',
             'nspr/pr/src/malloc/prmalloc.c',
             'nspr/pr/src/malloc/prmem.c',
             'nspr/pr/src/md/prosdep.c',
             'nspr/pr/src/md/unix/darwin.c',
             'nspr/pr/src/md/unix/os_Darwin.s',
             'nspr/pr/src/md/unix/os_Darwin_x86.s',
             'nspr/pr/src/md/unix/os_Darwin_x86_64.s',
             'nspr/pr/src/md/unix/unix.c',
             'nspr/pr/src/md/unix/unix_errors.c',
             'nspr/pr/src/md/unix/uxproces.c',
             'nspr/pr/src/md/unix/uxrng.c',
             'nspr/pr/src/md/unix/uxshm.c',
             'nspr/pr/src/md/unix/uxwrap.c',
-            'nspr/pr/src/md/windows/ntgc.c',
-            'nspr/pr/src/md/windows/ntinrval.c',
-            'nspr/pr/src/md/windows/ntmisc.c',
-            'nspr/pr/src/md/windows/ntsec.c',
-            'nspr/pr/src/md/windows/ntsem.c',
-            'nspr/pr/src/md/windows/w32ipcsem.c',
-            'nspr/pr/src/md/windows/w32poll.c',
-            'nspr/pr/src/md/windows/w32rng.c',
-            'nspr/pr/src/md/windows/w32shm.c',
-            'nspr/pr/src/md/windows/w95cv.c',
-            'nspr/pr/src/md/windows/w95dllmain.c',
-            'nspr/pr/src/md/windows/w95io.c',
-            'nspr/pr/src/md/windows/w95sock.c',
-            'nspr/pr/src/md/windows/w95thred.c',
-            'nspr/pr/src/md/windows/win32_errors.c',
             'nspr/pr/src/memory/prseg.c',
             'nspr/pr/src/memory/prshm.c',
             'nspr/pr/src/memory/prshma.c',
             'nspr/pr/src/misc/pralarm.c',
             'nspr/pr/src/misc/pratom.c',
             'nspr/pr/src/misc/praton.c',
             'nspr/pr/src/misc/prcountr.c',
             'nspr/pr/src/misc/prdtoa.c',
             'nspr/pr/src/misc/prenv.c',
             'nspr/pr/src/misc/prerr.c',
             'nspr/pr/src/misc/prerror.c',
             'nspr/pr/src/misc/prerrortable.c',
             'nspr/pr/src/misc/prinit.c',
             'nspr/pr/src/misc/prinrval.c',
             'nspr/pr/src/misc/pripc.c',
-            'nspr/pr/src/misc/pripcsem.c',
             'nspr/pr/src/misc/prlog2.c',
             'nspr/pr/src/misc/prlong.c',
             'nspr/pr/src/misc/prnetdb.c',
             'nspr/pr/src/misc/prolock.c',
             'nspr/pr/src/misc/prrng.c',
             'nspr/pr/src/misc/prsystem.c',
             'nspr/pr/src/misc/prthinfo.c',
             'nspr/pr/src/misc/prtime.c',
             'nspr/pr/src/misc/prtpool.c',
             'nspr/pr/src/misc/prtrace.c',
             'nspr/pr/src/pthreads/ptio.c',
             'nspr/pr/src/pthreads/ptmisc.c',
             'nspr/pr/src/pthreads/ptsynch.c',
             'nspr/pr/src/pthreads/ptthread.c',
-            'nspr/pr/src/threads/combined/prucpu.c',
-            'nspr/pr/src/threads/combined/prucv.c',
-            'nspr/pr/src/threads/combined/prulock.c',
-            'nspr/pr/src/threads/combined/prustack.c',
-            'nspr/pr/src/threads/combined/pruthr.c',
             'nspr/pr/src/threads/prcmon.c',
-            'nspr/pr/src/threads/prcthr.c',
-            'nspr/pr/src/threads/prdump.c',
-            'nspr/pr/src/threads/prmon.c',
             'nspr/pr/src/threads/prrwlock.c',
-            'nspr/pr/src/threads/prsem.c',
             'nspr/pr/src/threads/prtpd.c',
           ],
           'defines': [
             '_NSPR_BUILD_',
             'FORCE_PR_LOG',
           ],
           'include_dirs': [
             'nspr/pr/include',
             'nspr/pr/include/private',
             'nspr/lib/ds',
             'nspr/lib/libc/include',
           ],
           'direct_dependent_settings': {
             'defines': [
               'NO_NSPR_10_SUPPORT',
             ],
             'include_dirs': [
               'nspr/pr/include',
               'nspr/lib/ds',
               'nspr/lib/libc/include',
             ],
           },
-          # TODO(wtc): suppress C4244 and C4554 in prdtoa.c.
-          'msvs_disabled_warnings': [4018, 4244, 4554, 4267,],
           'variables': {
             'clang_warning_flags': [
               # nspr passes "const char*" through "void*".
               '-Wno-incompatible-pointer-types',
               # nspr passes "int*" through "unsigned int*".
               '-Wno-pointer-sign',
             ],
             'clang_warning_flags_unset': [
               # nspr uses assert(!"foo") instead of assert(false && "foo").
               '-Wstring-conversion',
             ],
           },
           'conditions': [
-            ['OS=="mac" or OS=="ios"', {
+            ['OS=="ios"', {
               'defines': [
                 'XP_UNIX',
                 'DARWIN',
                 'XP_MACOSX',
                 '_PR_PTHREADS',
                 'HAVE_BSD_FLOCK',
-                'HAVE_CRT_EXTERNS_H',
                 'HAVE_DLADDR',
                 'HAVE_LCHOWN',
                 'HAVE_SOCKLEN_T',
                 'HAVE_STRERROR',
               ],
-              'sources/': [
-                ['exclude', '^nspr/pr/src/md/windows/'],
-                ['exclude', '^nspr/pr/src/threads/combined/'],
-              ],
-              'sources!': [
-                'nspr/pr/src/io/prdir.c',
-                'nspr/pr/src/io/prfile.c',
-                'nspr/pr/src/io/prio.c',
-                'nspr/pr/src/io/prsocket.c',
-                # os_Darwin_x86.s and os_Darwin_x86_64.s are included by
-                # os_Darwin.s.
-                'nspr/pr/src/md/unix/os_Darwin_x86.s',
-                'nspr/pr/src/md/unix/os_Darwin_x86_64.s',
-                'nspr/pr/src/misc/pripcsem.c',
-                'nspr/pr/src/threads/prcthr.c',
-                'nspr/pr/src/threads/prdump.c',
-                'nspr/pr/src/threads/prmon.c',
-                'nspr/pr/src/threads/prsem.c',
-              ],
-            }],
-            ['OS=="mac"', {
-              'link_settings': {
-                'libraries': [
-                  '$(SDKROOT)/System/Library/Frameworks/CoreFoundation.framework',
-                  '$(SDKROOT)/System/Library/Frameworks/CoreServices.framework',
-                ],
-              },
-            }],
-            ['OS=="ios"', {
-              'defines!': [
-                'HAVE_CRT_EXTERNS_H',
-              ],
-            }],
-            ['OS=="win"', {
-              'defines': [
-                'XP_PC',
-                'WIN32',
-                'WIN95',
-                '_PR_GLOBAL_THREADS_ONLY',
-                '_CRT_SECURE_NO_WARNINGS',
-                '_CRT_NONSTDC_NO_WARNINGS',
-              ],
-              'sources/': [
-                ['exclude', '^nspr/pr/src/md/unix/'],
-                ['exclude', '^nspr/pr/src/pthreads/'],
-              ],
-              'conditions': [
-                ['target_arch=="ia32"', {
-                  'defines': [
-                    '_X86_',
-                  ],
-                }],
-              ],
             }],
             ['component == "static_library"', {
               'defines': [
                 'NSPR_STATIC',
               ],
               'direct_dependent_settings': {
                 'defines': [
                   'NSPR_STATIC',
                 ],
               },
             }],
             ['clang==1', {
               'xcode_settings': {
                 'WARNING_CFLAGS': [
                   # nspr uses a bunch of deprecated functions (NSLinkModule etc) in
                   # prlink.c on mac.
                   '-Wno-deprecated-declarations',
                 ],
               },
             }],
           ],
         },
         {
           'target_name': 'nss',
           'product_name': 'crnss',
           'type': '<(component)',
           'dependencies': [
             'nss_static',
+            'nssckbi',
           ],
           'export_dependent_settings': [
             'nss_static',
+            'nssckbi',
           ],
           'sources': [
             # Ensure at least one object file is produced, so that MSVC does not
             # warn when creating the static/shared library. See the note for
             # the 'nssckbi' target for why the 'nss' target was split as such.
             'nss/lib/nss/nssver.c',
           ],
-          'conditions': [
-            ['exclude_nss_root_certs==0', {
-              'dependencies': [
-                'nssckbi',
-              ],
-              'export_dependent_settings': [
-                'nssckbi',
-              ],
-            }],
-            ['OS == "mac" and component == "shared_library"', {
-              'xcode_settings': {
-                'OTHER_LDFLAGS': ['-all_load'],
-              },
-            }],
-            ['OS == "win" and component == "shared_library"', {
-              'sources': [
-                'nss/exports_win.def',
-              ],
-            }],
-          ],
         },
         {
           # This is really more of a pseudo-target to work around the fact that
           # a single static_library target cannot contain two object files of the
           # same name (hash.o / hash.obj). Logically, this is part of the
           # 'nss_static' target. By separating it out, it creates a possible
           # circular dependency between 'nss_static' and 'nssckbi' when
           # 'exclude_nss_root_certs' is not specified, as 'nss_static' depends on
           # the 'builtinsC_GetFunctionList' exported by this target. This is an
           # artifact of how NSS is being statically built, which is not an
@@ skipping 59 matching lines @@
           'include_dirs': [
             'nss/lib/ckfw',
           ],
           'direct_dependent_settings': {
             'include_dirs': [
               'nss/lib/ckfw/builtins',
             ],
           },
         },
         {
-          # This target contains files compiled for AVX. The code calling the
-          # functions in this target has to check if the current CPU supports AVX.
-          'target_name': 'nss_static_avx',
-          'suppress_wildcard': 1,
-          'conditions': [
-            ['OS!="win" or target_arch!="ia32"', {
-              'type': 'none',
-            }, {
-              'type': 'static_library',
-              'sources': [
-                'nss/lib/freebl/intel-gcm-wrap.c',
-                'nss/lib/freebl/intel-gcm-x86-masm.asm',
-                'nss/lib/freebl/intel-gcm.h',
-              ],
-              'defines': [
-                'INTEL_GCM',
-                'NSS_X86_OR_X64',
-                'NSS_X86',
-                'MP_API_COMPATIBLE',
-                'MP_ASSEMBLY_DIV_2DX1D',
-                'MP_ASSEMBLY_MULTIPLY',
-                'MP_ASSEMBLY_SQUARE',
-                'MP_ASSEMBLY_DIV_2DX1D',
-                'MP_USE_UINT_DIGIT',
-                'MP_NO_MP_WORD',
-                'MP_USE_UINT_DIGIT',
-                'NSS_DISABLE_DBM',
-                'NSS_STATIC',
-                'NSS_USE_STATIC_LIBS',
-                'NSS_X86',
-                'NSS_X86_OR_X64',
-                'RIJNDAEL_INCLUDE_TABLES',
-                'SHLIB_PREFIX=\"\"',
-                'SHLIB_SUFFIX=\"dll\"',
-                'SHLIB_VERSION=\"3\"',
-                'SOFTOKEN_LIB_NAME=\"softokn3.dll\"',
-                'SOFTOKEN_SHLIB_VERSION=\"3\"',
-                'USE_HW_AES',
-                'USE_UTIL_DIRECTLY',
-                'WIN32',
-                'WIN95',
-                'XP_PC',
-                '_WINDOWS',
-                '_X86_',
-              ],
-              'include_dirs': [
-                'nspr/pr/include',
-                'nspr/lib/ds',
-                'nspr/lib/libc/include',
-                'nss/lib/freebl/ecl',
-                'nss/lib/util',
-              ],
-              'msvs_disabled_warnings': [4018],
-              'msvs_settings': {
-                'MASM': {
-                  'UseSafeExceptionHandlers': 'true',
-                },
-                'VCCLCompilerTool': {
-                  'EnableEnhancedInstructionSet': '3',  # Enable AVX.
-                },
-              },
-            }],
-          ],
-        },
-        {
           'target_name': 'nss_static',
           'type': 'static_library',
           # This target is an implementation detail - the public dependencies
           # should be on 'nss'.
           'suppress_wildcard': 1,
           'sources': [
             'nss/lib/base/arena.c',
             'nss/lib/base/base.h',
             'nss/lib/base/baset.h',
             'nss/lib/base/error.c',
@@ skipping 67 matching lines @@
             'nss/lib/freebl/alg2268.c',
             'nss/lib/freebl/alghmac.c',
             'nss/lib/freebl/alghmac.h',
             'nss/lib/freebl/arcfive.c',
             'nss/lib/freebl/arcfour.c',
             'nss/lib/freebl/blapi.h',
             'nss/lib/freebl/blapii.h',
             'nss/lib/freebl/blapit.h',
             'nss/lib/freebl/camellia.c',
             'nss/lib/freebl/camellia.h',
-            'nss/lib/freebl/chacha20/chacha20.c',
-            'nss/lib/freebl/chacha20/chacha20.h',
-            'nss/lib/freebl/chacha20/chacha20_vec.c',
+            'nss/lib/freebl/chacha20.c',
+            'nss/lib/freebl/chacha20.h',
+            'nss/lib/freebl/chacha20_vec.c',
             'nss/lib/freebl/chacha20poly1305.c',
             'nss/lib/freebl/chacha20poly1305.h',
             'nss/lib/freebl/ctr.c',
             'nss/lib/freebl/ctr.h',
             'nss/lib/freebl/cts.c',
             'nss/lib/freebl/cts.h',
             'nss/lib/freebl/des.c',
             'nss/lib/freebl/des.h',
             'nss/lib/freebl/desblapi.c',
             'nss/lib/freebl/dh.c',
@@ skipping 16 matching lines @@
             'nss/lib/freebl/ecl/ecp_256_32.c',
             'nss/lib/freebl/ecl/ecp_384.c',
             'nss/lib/freebl/ecl/ecp_521.c',
             'nss/lib/freebl/ecl/ecp_aff.c',
             'nss/lib/freebl/ecl/ecp_jac.c',
             'nss/lib/freebl/ecl/ecp_jm.c',
             'nss/lib/freebl/ecl/ecp_mont.c',
             'nss/lib/freebl/ecl/ec_naf.c',
             'nss/lib/freebl/gcm.c',
             'nss/lib/freebl/gcm.h',
-            'nss/lib/freebl/intel-aes-x86-masm.asm',
             'nss/lib/freebl/intel-aes.h',
             'nss/lib/freebl/hmacct.c',
             'nss/lib/freebl/hmacct.h',
             'nss/lib/freebl/jpake.c',
             'nss/lib/freebl/md2.c',
             'nss/lib/freebl/md5.c',
             'nss/lib/freebl/mpi/logtab.h',
             'nss/lib/freebl/mpi/mpcpucache.c',
             'nss/lib/freebl/mpi/mpi-config.h',
             'nss/lib/freebl/mpi/mpi-priv.h',
             'nss/lib/freebl/mpi/mpi.c',
             'nss/lib/freebl/mpi/mpi.h',
-            'nss/lib/freebl/mpi/mpi_amd64.c',
             'nss/lib/freebl/mpi/mpi_arm.c',
             'nss/lib/freebl/mpi/mpi_arm_mac.c',
-            'nss/lib/freebl/mpi/mpi_x86_asm.c',
             'nss/lib/freebl/mpi/mplogic.c',
             'nss/lib/freebl/mpi/mplogic.h',
             'nss/lib/freebl/mpi/mpmontg.c',
             'nss/lib/freebl/mpi/mpprime.c',
             'nss/lib/freebl/mpi/mpprime.h',
             'nss/lib/freebl/mpi/mp_gf2m-priv.h',
             'nss/lib/freebl/mpi/mp_gf2m.c',
             'nss/lib/freebl/mpi/mp_gf2m.h',
             'nss/lib/freebl/mpi/primes.c',
             'nss/lib/freebl/nss_build_config_mac.h',
-            'nss/lib/freebl/poly1305/poly1305-donna-x64-sse2-incremental-source.c',
-            'nss/lib/freebl/poly1305/poly1305.c',
-            'nss/lib/freebl/poly1305/poly1305.h',
+            'nss/lib/freebl/poly1305-donna-x64-sse2-incremental-source.c',
+            'nss/lib/freebl/poly1305.c',
+            'nss/lib/freebl/poly1305.h',
             'nss/lib/freebl/pqg.c',
             'nss/lib/freebl/pqg.h',
             'nss/lib/freebl/rawhash.c',
             'nss/lib/freebl/rijndael.c',
             'nss/lib/freebl/rijndael.h',
             'nss/lib/freebl/rijndael32.tab',
             'nss/lib/freebl/rsa.c',
             'nss/lib/freebl/rsapkcs.c',
             'nss/lib/freebl/secmpi.h',
             'nss/lib/freebl/secrng.h',
@@ skipping 91 matching lines @@
             'nss/lib/libpkix/pkix/util/pkix_tools.c',
             'nss/lib/libpkix/pkix/util/pkix_tools.h',
             'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_aiamgr.c',
             'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_aiamgr.h',
             'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_colcertstore.c',
             'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_colcertstore.h',
             'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_httpcertstore.c',
             'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_httpcertstore.h',
             'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_httpdefaultclient.c',
             'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_httpdefaultclient.h',
-            'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c',
-            'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.h',
-            'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapdefaultclient.c',
-            'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapdefaultclient.h',
-            'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldaprequest.c',
-            'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldaprequest.h',
-            'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapresponse.c',
-            'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapresponse.h',
-            'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapt.h',
-            'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldaptemplates.c',
             'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_nsscontext.c',
             'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_nsscontext.h',
             'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c',
             'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.h',
             'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_socket.c',
             'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_socket.h',
             'nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_basicconstraints.c',
             'nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_basicconstraints.h',
             'nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_cert.c',
             'nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_cert.h',
@@ skipping 232 matching lines @@
             # primes.c is included by mpprime.c.
             'nss/lib/freebl/mpi/primes.c',
             # unix_rand.c and win_rand.c are included by sysrand.c.
             'nss/lib/freebl/unix_rand.c',
             'nss/lib/freebl/win_rand.c',
             # debug_module.c is included by pk11load.c.
             'nss/lib/pk11wrap/debug_module.c',
           ],
           'dependencies': [
             'nspr',
-            'nss_static_avx',
             '../sqlite/sqlite.gyp:sqlite',
           ],
           'export_dependent_settings': [
             'nspr',
           ],
           'defines': [
             'MP_API_COMPATIBLE',
             'NSS_DISABLE_DBM',
             'NSS_STATIC',
             'NSS_USE_STATIC_LIBS',
             'RIJNDAEL_INCLUDE_TABLES',
             'SHLIB_VERSION=\"3\"',
             'SOFTOKEN_SHLIB_VERSION=\"3\"',
             'USE_UTIL_DIRECTLY',
+            'NSS_PKIX_NO_LDAP',
           ],
           'include_dirs': [
             'nss/lib/base',
             'nss/lib/certdb',
             'nss/lib/certhigh',
             'nss/lib/cryptohi',
             'nss/lib/dev',
             'nss/lib/freebl',
             'nss/lib/freebl/ecl',
             'nss/lib/freebl/mpi',
@@ skipping 37 matching lines @@
               'nss/lib/freebl/ecl',
               'nss/lib/nss',
               'nss/lib/pk11wrap',
               'nss/lib/pkcs7',
               'nss/lib/pki',
               'nss/lib/smime',
               'nss/lib/softoken',
               'nss/lib/util',
             ],
           },
-          'msvs_disabled_warnings': [4018, 4101, 4267, ],
           'variables': {
             'clang_warning_flags': [
               # nss doesn't explicitly cast between different enum types.
               '-Wno-conversion',
               # nss passes "const char*" through "void*".
               '-Wno-incompatible-pointer-types',
               # nss prefers `a && b || c` over `(a && b) || c`.
               '-Wno-logical-op-parentheses',
               # nss doesn't use exhaustive switches on enums
               '-Wno-switch',
               # nss has some `unsigned < 0` checks.
               '-Wno-tautological-compare',
               # nss-urandom-abort.patch removed the only call to
               # rng_systemFromNoise
               '-Wno-unused-function',
             ],
           },
           'conditions': [
-            ['exclude_nss_root_certs==1', {
-              'defines': [
-                'NSS_DISABLE_ROOT_CERTS',
-              ],
-            }],
-            ['exclude_nss_libpkix==1', {
-              'defines': [
-                'NSS_DISABLE_LIBPKIX',
-              ],
-              'sources/': [
-                ['exclude', '^nss/lib/libpkix/'],
-              ],
-              'sources!': [
-                'nss/lib/certhigh/certvfypkix.c',
-                'nss/lib/certhigh/certvfypkixprint.c',
-              ],
-              'include_dirs/': [
-                ['exclude', '^nss/lib/libpkix/'],
-              ],
-            }, { # else: exclude_nss_libpkix==0
-              # Disable the LDAP code in libpkix.
-              'defines': [
-                'NSS_PKIX_NO_LDAP',
-              ],
-              'sources!': [
-                'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c',
-                'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.h',
-                'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapdefaultclient.c',
-                'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapdefaultclient.h',
-                'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldaprequest.c',
-                'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldaprequest.h',
-                'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapresponse.c',
-                'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapresponse.h',
-                'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapt.h',
-                'nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldaptemplates.c',
-              ],
-            }],
-            ['target_arch=="ia32"', {
-              'sources!': [
-                'nss/lib/freebl/mpi/mpi_amd64.c',
-              ],
-            }],
             ['target_arch=="x64" and OS!="win"', {
               'sources!': [
                 'nss/lib/freebl/chacha20/chacha20.c',
                 'nss/lib/freebl/poly1305/poly1305.c',
                 ],
             }, { # else: target_arch!="x64" or OS=="win"
               'sources!': [
                 'nss/lib/freebl/chacha20/chacha20_vec.c',
                 'nss/lib/freebl/poly1305/poly1305-donna-x64-sse2-incremental-source.c',
                 ],
             }],
-            ['OS=="mac" or OS=="ios"', {
+            ['OS=="ios"', {
               'defines': [
                 'XP_UNIX',
                 'DARWIN',
                 'HAVE_STRERROR',
                 'HAVE_BSD_FLOCK',
                 'SHLIB_SUFFIX=\"dylib\"',
                 'SHLIB_PREFIX=\"lib\"',
                 'SOFTOKEN_LIB_NAME=\"libsoftokn3.dylib\"',
               ],
-              'sources!': [
-                'nss/lib/freebl/mpi/mpi_amd64.c',
-              ],
               'variables': {
                 'forced_include_file': 'nss_build_config_mac.h',
               },
               'xcode_settings': {
                 'conditions': [
                   ['component == "shared_library"', {
                     'GCC_SYMBOLS_PRIVATE_EXTERN': 'NO',  # no -fvisibility=hidden
                   }],
                 ],
                 # Define processor architecture specific macros in
                 # <(forced_include_file).
                 'OTHER_CFLAGS': [
                   '-include', '<(forced_include_file)',
                 ],
               },
-            }, { # else: OS!="mac" and OS!="ios"
-              'sources!': [
-                'nss/lib/freebl/mpi/mpi_arm_mac.c',
-              ],
-            }],
-            ['OS=="win"', {
-              'defines': [
-                'SHLIB_SUFFIX=\"dll\"',
-                'SHLIB_PREFIX=\"\"',
-                'SOFTOKEN_LIB_NAME=\"softokn3.dll\"',
-                'XP_PC',
-                'WIN32',
-                'WIN95',
-                '_WINDOWS',
-              ],
-              'direct_dependent_settings': {
-                'defines': [
-                  '_WINDOWS',
-                ],
-              },
-              'conditions': [
-                ['target_arch=="ia32"', {
-                  'defines': [
-                    'NSS_X86_OR_X64',
-                    'NSS_X86',
-                    '_X86_',
-                    'MP_ASSEMBLY_MULTIPLY',
-                    'MP_ASSEMBLY_SQUARE',
-                    'MP_ASSEMBLY_DIV_2DX1D',
-                    'MP_USE_UINT_DIGIT',
-                    'MP_NO_MP_WORD',
-                    'USE_HW_AES',
-                    'INTEL_GCM',
-                  ],
-                  'msvs_settings': {
-                    'MASM': {
-                      'UseSafeExceptionHandlers': 'true',
-                    },
-                  },
-                }],
-                ['target_arch=="x64"', {
-                  'defines': [
-                    'NSS_USE_64',
-                    'NSS_X86_OR_X64',
-                    'NSS_X64',
-                    '_AMD64_',
-                    'MP_CHAR_STORE_SLOW',
-                    'MP_IS_LITTLE_ENDIAN',
-                    'WIN64',
-                  ],
-                  'sources!': [
-                    'nss/lib/freebl/intel-aes-x86-masm.asm',
-                    'nss/lib/freebl/mpi/mpi_amd64.c',
-                    'nss/lib/freebl/mpi/mpi_x86_asm.c',
-                  ],
-                }],
-              ],
-            }, { # else: OS!="win"
-              'sources!': [
-                'nss/lib/freebl/intel-aes-x86-masm.asm',
-                # mpi_x86_asm.c contains MSVC inline assembly code.
-                'nss/lib/freebl/mpi/mpi_x86_asm.c',
-              ],
             }],
           ],
         },
       ],
     }],
   ],
 }