--- nss-3.14.ebuild	2012-11-15 21:42:53.244606579 +0100
+++ nss-3.14-r1.ebuild	2012-11-15 22:32:10.940630291 +0100
@@ -65,6 +65,10 @@
 		lib/ssl/config.mk || die
 	sed -i -e "/CRYPTOLIB/s:\$(SOFTOKEN_LIB_DIR):../../lib/freebl/\$(OBJDIR):" \
 		cmd/platlibs.mk || die
+
+	# fix AR called directly
+	cd "${S}"/mozilla/security/coreconf || die
+	sed -i -e "s:ar cr:$(tc-getAR) cr:" UNIX.mk || die
 }
 
 src_compile() {
@@ -90,11 +94,11 @@
 	export ASFLAGS=""
 
 	cd "${S}"/mozilla/security/coreconf || die
-	emake -j1 CC="$(tc-getCC)" || die "coreconf make failed"
+	emake -j1 CC=$(tc-getCC) RANLIB=$(tc-getRANLIB) || die "coreconf make failed"
 	cd "${S}"/mozilla/security/dbm || die
-	emake -j1 CC="$(tc-getCC)" || die "dbm make failed"
+	emake -j1 CC=$(tc-getCC) RANLIB=$(tc-getRANLIB) || die "dbm make failed"
 	cd "${S}"/mozilla/security/nss || die
-	emake -j1 CC="$(tc-getCC)" || die "nss make failed"
+	emake -j1 CC=$(tc-getCC) RANLIB=$(tc-getRANLIB) || die "nss make failed"
 }
 
 # Altering these 3 libraries breaks the CHK verification.