diff --git a/.gitignore b/.gitignore index ea6a2e0..28bf8cc 100644 --- a/.gitignore +++ b/.gitignore @@ -126,6 +126,16 @@ gnutls-2.10.1-nosrp.tar.bz2 /gnutls-3.6.13.tar.xz /gnutls-3.6.14.tar.xz /gnutls-3.6.14.tar.xz.sig -/gpgkey-462225C3B46F34879FC8496CD605848ED7E69871.gpg /gnutls-3.6.15.tar.xz /gnutls-3.6.15.tar.xz.sig +/gnutls-3.7.0.tar.xz +/gnutls-3.7.0.tar.xz.sig +/gnutls-3.7.1.tar.xz +/gnutls-3.7.1.tar.xz.sig +/gnutls-3.7.2.tar.xz +/gnutls-3.7.2.tar.xz.sig +/gnutls-3.7.3.tar.xz +/gnutls-3.7.3.tar.xz.sig +/gnutls-3.7.4.tar.xz +/gnutls-3.7.5.tar.xz +/gnutls-3.7.6.tar.xz diff --git a/.packit.yaml b/.packit.yaml new file mode 100644 index 0000000..a27df63 --- /dev/null +++ b/.packit.yaml @@ -0,0 +1,33 @@ +# See the documentation for more information: +# https://packit.dev/docs/configuration/ + +specfile_path: gnutls.spec + +files_to_sync: + - .packit.yaml + - gnutls.spec + +upstream_project_url: https://gitlab.com/gnutls/gnutls +upstream_package_name: gnutls +downstream_package_name: gnutls + +actions: + post-upstream-clone: + - "wget https://src.fedoraproject.org/rpms/gnutls/raw/main/f/gnutls.spec" + - "wget https://src.fedoraproject.org/rpms/gnutls/raw/main/f/gnutls-3.2.7-rpath.patch" + - "wget https://src.fedoraproject.org/rpms/gnutls/raw/main/f/gnutls-3.6.7-no-now-guile.patch" + get-current-version: + - "git describe --abbrev=0" + create-archive: + - | + bash -c "wget https://www.gnupg.org/ftp/gcrypt/gnutls/v$(expr $PACKIT_PROJECT_VERSION : '^\([0-9]*\.[0-9]*\)')/gnutls-${PACKIT_PROJECT_VERSION}.tar.xz" + - | + bash -c "wget https://www.gnupg.org/ftp/gcrypt/gnutls/v$(expr $PACKIT_PROJECT_VERSION : '^\([0-9]*\.[0-9]*\)')/gnutls-${PACKIT_PROJECT_VERSION}.tar.xz.sig" + - bash -c "echo gnutls-${PACKIT_PROJECT_VERSION}.tar.xz" + - bash -c "echo gnutls-${PACKIT_PROJECT_VERSION}.tar.xz.sig" + +jobs: + - job: propose_downstream + trigger: release + metadata: + dist_git_branches: fedora-all diff --git a/README.packit b/README.packit new file mode 100644 index 0000000..c242324 --- /dev/null +++ b/README.packit @@ -0,0 +1,3 @@ +This repository is maintained by packit. +https://packit.dev/ +The file was generated using packit 0.51.0. diff --git a/changelog b/changelog new file mode 100644 index 0000000..cf000fe --- /dev/null +++ b/changelog @@ -0,0 +1,807 @@ +* Thu Feb 24 2022 Zoltan Fridrich - 3.7.2-2 +- Fix race condition in gnutls_x509_trust_list_verify_crt2 (#2050164) + +* Sat May 29 2021 Daiki Ueno - 3.7.2-1 +- Update to upstream 3.7.2 release + +* Sun Mar 28 2021 Daiki Ueno - 3.7.1-3 +- Remove %%defattr invocations which are no longer necessary +- libpkcs11mock1.* is not installed anymore +- hobble-gnutls: Remove SRP removal +- Use correct source URL +- Switch to using %%gpgverify macro + +* Tue Mar 16 2021 Daiki Ueno - 3.7.1-2 +- Restore fipscheck dependency + +* Sat Mar 13 2021 Daiki Ueno - 3.7.1-1 +- Update to upstream 3.7.1 release +- Remove fipscheck dependency, as it is now calculated with an + internal tool + +* Fri Mar 5 2021 Daiki Ueno - 3.7.0-4 +- Tolerate duplicate certs in the chain also with PKCS #11 trust store + +* Tue Mar 2 2021 Daiki Ueno - 3.7.0-3 +- Reduce BRs for non-bootstrapping build + +* Wed Feb 10 2021 Daiki Ueno - 3.7.0-2 +- Tolerate duplicate certs in the chain + +* Mon Feb 8 2021 Daiki Ueno - 3.7.0-1 +- Update to upstream 3.7.0 release +- Temporarily disable LTO + +* Tue Jan 26 2021 Daiki Ueno - 3.6.15-4 +- Fix broken tests on rawhide (#1908110) +- Add BuildRequires: make (by Tom Stellard) + +* Tue Jan 26 2021 Fedora Release Engineering - 3.6.15-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + +* Mon Sep 28 2020 Jeff Law - 3.6.15-2 +- Re-enable LTO now that upstream GCC bugs have been fixed + +* Fri Sep 4 2020 Daiki Ueno - 3.6.15-1 +- Update to upstream 3.6.15 release + +* Mon Aug 17 2020 Jeff Law - 3.6.14-7 +- Disable LTO on ppc64le + +* Tue Aug 4 2020 Daiki Ueno - 3.6.14-6 +- Fix underlinking of libpthread + +* Sat Aug 01 2020 Fedora Release Engineering - 3.6.14-5 +- Second attempt - Rebuilt for + https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + +* Mon Jul 27 2020 Fedora Release Engineering - 3.6.14-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + +* Thu Jul 02 2020 Anderson Sasaki - 3.6.14-3 +- Rebuild with autogen built with guile-2.2 (#1852706) + +* Tue Jun 09 2020 Anderson Sasaki - 3.6.14-2 +- Fix memory leak when serializing iovec_t (#1845083) +- Fix automatic libraries sonames detection (#1845806) + +* Thu Jun 4 2020 Daiki Ueno - 3.6.14-1 +- Update to upstream 3.6.14 release + +* Sun May 31 2020 Daiki Ueno - 3.6.13-6 +- Update gnutls-3.6.13-superseding-chain.patch + +* Sun May 31 2020 Daiki Ueno - 3.6.13-5 +- Fix cert chain validation behavior if the last cert has expired (#1842178) + +* Mon May 25 2020 Anderson Sasaki - 3.6.13-4 +- Add option to gnutls-cli to wait for resumption under TLS 1.3 + +* Tue May 19 2020 Anderson Sasaki - 3.6.13-3 +- Disable RSA blinding during FIPS self-tests + +* Thu May 14 2020 Anderson Sasaki - 3.6.13-2 +- Bump linked libraries soname to fix FIPS selftests (#1835265) + +* Tue Mar 31 2020 Daiki Ueno - 3.6.13-1 +- Update to upstream 3.6.13 release + +* Thu Mar 26 2020 Anderson Sasaki - 3.6.12-2 +- Fix FIPS POST (#1813384) +- Fix gnutls-serv --echo to not exit when a message is received (#1816583) + +* Sun Feb 02 2020 Nikos Mavrogiannopoulos - 3.6.12-1 +- Update to upstream 3.6.12 release + +* Tue Jan 28 2020 Fedora Release Engineering - 3.6.11-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild + +* Mon Dec 02 2019 Nikos Mavrogiannopoulos - 3.6.11-1 +- Update to upstream 3.6.11 release + +* Sun Sep 29 2019 Nikos Mavrogiannopoulos - 3.6.10-1 +- Update to upstream 3.6.10 release + +* Fri Jul 26 2019 Nikos Mavrogiannopoulos - 3.6.9-1 +- Update to upstream 3.6.9 release + +* Thu Jul 25 2019 Fedora Release Engineering - 3.6.8-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild + +* Mon Jul 15 2019 Nikos Mavrogiannopoulos - 3.6.8-2 +- Rebuilt with guile-2.2 + +* Tue May 28 2019 Nikos Mavrogiannopoulos - 3.6.8-1 +- Update to upstream 3.6.8 release + +* Wed Mar 27 2019 Anderson Toshiyuki Sasaki - 3.6.7-1 +- Update to upstream 3.6.7 release +- Fixed CVE-2019-3836 (#1693214) +- Fixed CVE-2019-3829 (#1693210) + +* Fri Feb 1 2019 Nikos Mavrogiannopoulos - 3.6.6-1 +- Update to upstream 3.6.6 release + +* Thu Jan 31 2019 Fedora Release Engineering - 3.6.5-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild + +* Fri Jan 11 2019 Anderson Toshiyuki Sasaki - 3.6.5-2 +- Added explicit Requires for nettle >= 3.4.1 + +* Tue Dec 11 2018 Anderson Toshiyuki Sasaki - 3.6.5-1 +- Update to upstream 3.6.5 release + +* Mon Oct 29 2018 James Antill - 3.6.4-5 +- Remove ldconfig scriptlet, now done via. transfiletrigger in glibc. + +* Wed Oct 17 2018 Nikos Mavrogiannopoulos - 3.6.4-4 +- Fix issue with rehandshake affecting glib-networking (#1634736) + +* Tue Oct 16 2018 Tomáš Mráz - 3.6.4-3 +- Add missing annobin notes for assembler sources + +* Tue Oct 09 2018 Petr Menšík - 3.6.4-2 +- Rebuilt for unbound 1.8 + +* Tue Sep 25 2018 Nikos Mavrogiannopoulos - 3.6.4-1 +- Updated to upstream 3.6.4 release +- Added support for the latest version of the TLS1.3 protocol +- Enabled SHA1 support as SHA1 deprecation is handled via the + fedora crypto policies. + +* Thu Aug 16 2018 Nikos Mavrogiannopoulos - 3.6.3-4 +- Fixed gnutls-cli input reading +- Ensure that we do not cause issues with version rollback detection + and TLS1.3. + +* Tue Aug 07 2018 Nikos Mavrogiannopoulos - 3.6.3-3 +- Fixed ECDSA public key import (#1612803) + +* Thu Jul 26 2018 Nikos Mavrogiannopoulos - 3.6.3-2 +- Backported regression fixes from 3.6.2 + +* Mon Jul 16 2018 Nikos Mavrogiannopoulos - 3.6.3-1 +- Update to upstream 3.6.3 release + +* Fri Jul 13 2018 Fedora Release Engineering - 3.6.2-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild + +* Wed Jun 13 2018 Nikos Mavrogiannopoulos - 3.6.2-4 +- Enable FIPS140-2 mode in Fedora + +* Wed Jun 06 2018 Nikos Mavrogiannopoulos - 3.6.2-3 +- Update to upstream 3.6.2 release + +* Fri May 25 2018 David Abdurachmanov - 3.6.2-2 +- Add missing BuildRequires: gnupg2 for gpgv2 in %%prep + +* Fri Feb 16 2018 Nikos Mavrogiannopoulos - 3.6.2-1 +- Update to upstream 3.6.2 release + +* Wed Feb 07 2018 Fedora Release Engineering - 3.6.1-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild + +* Fri Feb 2 2018 Nikos Mavrogiannopoulos - 3.6.1-4 +- Rebuilt to address incompatibility with new nettle + +* Thu Nov 30 2017 Nikos Mavrogiannopoulos - 3.6.1-3 +- Corrected regression from 3.6.1-2 which prevented the loading of + arbitrary p11-kit modules (#1507402) + +* Mon Nov 6 2017 Nikos Mavrogiannopoulos - 3.6.1-2 +- Prevent the loading of all PKCS#11 modules on certificate verification + but only restrict to p11-kit trust module (#1507402) + +* Sat Oct 21 2017 Nikos Mavrogiannopoulos - 3.6.1-1 +- Update to upstream 3.6.1 release + +* Mon Aug 21 2017 Nikos Mavrogiannopoulos - 3.6.0-1 +- Update to upstream 3.6.0 release + +* Wed Aug 02 2017 Fedora Release Engineering - 3.5.14-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild + +* Wed Jul 26 2017 Fedora Release Engineering - 3.5.14-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild + +* Tue Jul 04 2017 Nikos Mavrogiannopoulos - 3.5.14-1 +- Update to upstream 3.5.14 release + +* Wed Jun 07 2017 Nikos Mavrogiannopoulos - 3.5.13-1 +- Update to upstream 3.5.13 release + +* Thu May 11 2017 Nikos Mavrogiannopoulos - 3.5.12-2 +- Fix issue with p11-kit-trust arch dependency + +* Thu May 11 2017 Nikos Mavrogiannopoulos - 3.5.12-1 +- Update to upstream 3.5.12 release + +* Fri Apr 07 2017 Nikos Mavrogiannopoulos - 3.5.11-1 +- Update to upstream 3.5.11 release + +* Mon Mar 06 2017 Nikos Mavrogiannopoulos - 3.5.10-1 +- Update to upstream 3.5.10 release + +* Wed Feb 15 2017 Nikos Mavrogiannopoulos - 3.5.9-2 +- Work around missing pkg-config file (#1422256) + +* Tue Feb 14 2017 Nikos Mavrogiannopoulos - 3.5.9-1 +- Update to upstream 3.5.9 release + +* Fri Feb 10 2017 Fedora Release Engineering - 3.5.8-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild + +* Sat Feb 4 2017 Nikos Mavrogiannopoulos 3.5.8-2 +- Added patch fix initialization issue in gnutls_pkcs11_obj_list_import_url4 + +* Mon Jan 9 2017 Nikos Mavrogiannopoulos 3.5.8-1 +- New upstream release + +* Tue Dec 13 2016 Nikos Mavrogiannopoulos 3.5.7-3 +- Fix PKCS#8 file loading (#1404084) + +* Thu Dec 8 2016 Nikos Mavrogiannopoulos 3.5.7-1 +- New upstream release + +* Fri Nov 4 2016 Nikos Mavrogiannopoulos 3.5.6-1 +- New upstream release + +* Tue Oct 11 2016 walters@redhat.com - 3.5.5-2 +- Apply patch to fix compatibility with ostree (#1383708) + +* Mon Oct 10 2016 Nikos Mavrogiannopoulos 3.5.5-1 +- New upstream release + +* Thu Sep 8 2016 Nikos Mavrogiannopoulos 3.5.4-1 +- New upstream release + +* Mon Aug 29 2016 Nikos Mavrogiannopoulos 3.5.3-2 +- Work around #1371082 for x86 +- Fixed issue with DTLS sliding window implementation (#1370881) + +* Tue Aug 9 2016 Nikos Mavrogiannopoulos 3.5.3-1 +- New upstream release + +* Wed Jul 6 2016 Nikos Mavrogiannopoulos 3.5.2-1 +- New upstream release + +* Wed Jun 15 2016 Nikos Mavrogiannopoulos 3.5.1-1 +- New upstream release + +* Tue Jun 7 2016 Nikos Mavrogiannopoulos 3.4.13-1 +- New upstream release (#1343258) +- Addresses issue with setuid programs introduced in 3.4.12 (#1343342) + +* Fri May 20 2016 Nikos Mavrogiannopoulos 3.4.12-1 +- New upstream release + +* Mon Apr 11 2016 Nikos Mavrogiannopoulos 3.4.11-1 +- New upstream release + +* Fri Mar 4 2016 Nikos Mavrogiannopoulos 3.4.10-1 +- New upstream release (#1314576) + +* Wed Feb 3 2016 Nikos Mavrogiannopoulos 3.4.9-1 +- Fix broken key usage flags introduced in 3.4.8 (#1303355) + +* Mon Jan 11 2016 Nikos Mavrogiannopoulos 3.4.8-1 +- New upstream release (#1297079) + +* Mon Nov 23 2015 Nikos Mavrogiannopoulos 3.4.7-1 +- New upstream release (#1284300) +- Documentation updates (#1282864) +- Adds interface to set unique IDs in certificates (#1281343) +- Allow arbitrary key sizes with ARCFOUR (#1284401) + +* Wed Oct 21 2015 Nikos Mavrogiannopoulos 3.4.6-1 +- New upstream release (#1273672) +- Enhances p11tool to write CKA_ISSUER and CKA_SERIAL_NUMBER (#1272178) + +* Tue Oct 20 2015 Adam Williamson - 3.4.5-2 +- fix interaction with Chrome 45+ (master secret extension) (#1273102) + +* Mon Sep 14 2015 Nikos Mavrogiannopoulos 3.4.5-1 +- New upstream release (#1252192) +- Eliminates hard limits on CRL parsing of certtool. + +* Mon Aug 10 2015 Nikos Mavrogiannopoulos 3.4.4-1 +- new upstream release +- no longer requires trousers patch +- fixes issue in gnutls_x509_privkey_import (#1250020) + +* Mon Jul 13 2015 Nikos Mavrogiannopoulos 3.4.3-2 +- Don't link against trousers but rather dlopen() it when available. + That avoids a dependency on openssl by the main library. + +* Mon Jul 13 2015 Nikos Mavrogiannopoulos 3.4.3-1 +- new upstream release + +* Thu Jul 02 2015 Adam Jackson 3.4.2-3 +- Only disable -z now for the guile modules + +* Thu Jun 18 2015 Nikos Mavrogiannopoulos 3.4.2-2 +- rename the symbol version for internal symbols to avoid clashes + with 3.3.x. + +* Wed Jun 17 2015 Nikos Mavrogiannopoulos 3.4.2-1 +- new upstream release + +* Tue May 5 2015 Nikos Mavrogiannopoulos 3.4.1-2 +- Provide missing GNUTLS_SUPPLEMENTAL_USER_MAPPING_DATA definition + +* Mon May 4 2015 Nikos Mavrogiannopoulos 3.4.1-1 +- new upstream release + +* Sat May 02 2015 Kalev Lember - 3.3.14-2 +- Rebuilt for GCC 5 C++11 ABI change + +* Mon Mar 30 2015 Nikos Mavrogiannopoulos 3.3.14-1 +- new upstream release +- improved BER decoding of PKCS #12 structures (#1131461) + +* Fri Mar 6 2015 Nikos Mavrogiannopoulos 3.3.13-3 +- Build with hardened flags +- Removed -Wl,--no-add-needed linker flag + +* Fri Feb 27 2015 Till Maas - 3.3.13-2 +- Do not build with hardened flags + +* Thu Feb 26 2015 Nikos Mavrogiannopoulos 3.3.13-1 +- new upstream release + +* Sat Feb 21 2015 Till Maas - 3.3.12-3 +- Make build verbose +- Use %%license + +* Sat Feb 21 2015 Till Maas - 3.3.12-2 +- Rebuilt for Fedora 23 Change + https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code + +* Mon Jan 19 2015 Nikos Mavrogiannopoulos 3.3.12-1 +- new upstream release + +* Mon Jan 5 2015 Nikos Mavrogiannopoulos 3.3.11-2 +- enabled guile bindings (#1177847) + +* Thu Dec 11 2014 Nikos Mavrogiannopoulos 3.3.11-1 +- new upstream release + +* Mon Nov 10 2014 Nikos Mavrogiannopoulos 3.3.10-1 +- new upstream release + +* Thu Oct 23 2014 Nikos Mavrogiannopoulos 3.3.9-2 +- applied fix for issue in get-issuer (#1155901) + +* Mon Oct 13 2014 Nikos Mavrogiannopoulos 3.3.9-1 +- new upstream release + +* Fri Sep 19 2014 Nikos Mavrogiannopoulos 3.3.8-2 +- strip rpath from library + +* Thu Sep 18 2014 Nikos Mavrogiannopoulos 3.3.8-1 +- new upstream release + +* Mon Aug 25 2014 Nikos Mavrogiannopoulos 3.3.7-1 +- new upstream release + +* Sat Aug 16 2014 Fedora Release Engineering - 3.3.6-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild + +* Wed Jul 23 2014 Nikos Mavrogiannopoulos 3.3.6-1 +- new upstream release + +* Tue Jul 01 2014 Nikos Mavrogiannopoulos 3.3.5-2 +- Added work-around for s390 builds with gcc 4.9 (#1102324) + +* Mon Jun 30 2014 Nikos Mavrogiannopoulos 3.3.5-1 +- new upstream release + +* Tue Jun 17 2014 Nikos Mavrogiannopoulos 3.3.4-3 +- explicitly depend on p11-kit-trust + +* Sat Jun 07 2014 Fedora Release Engineering - 3.3.4-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild + +* Mon Jun 02 2014 Nikos Mavrogiannopoulos 3.3.4-1 +- new upstream release + +* Fri May 30 2014 Nikos Mavrogiannopoulos 3.3.3-1 +- new upstream release + +* Wed May 21 2014 Nikos Mavrogiannopoulos 3.3.2-2 +- Require crypto-policies + +* Fri May 09 2014 Nikos Mavrogiannopoulos 3.3.2-1 +- new upstream release + +* Mon May 05 2014 Nikos Mavrogiannopoulos 3.3.1-4 +- Replaced /etc/crypto-profiles/apps with /etc/crypto-policies/back-ends. +- Added support for "very weak" profile. + +* Mon Apr 28 2014 Nikos Mavrogiannopoulos 3.3.1-2 +- gnutls_global_deinit() will not do anything if the previous + initialization has failed (#1091053) + +* Mon Apr 28 2014 Nikos Mavrogiannopoulos 3.3.1-1 +- new upstream release + +* Mon Apr 14 2014 Nikos Mavrogiannopoulos 3.3.0-1 +- new upstream release + +* Tue Apr 08 2014 Nikos Mavrogiannopoulos 3.2.13-1 +- new upstream release + +* Wed Mar 05 2014 Nikos Mavrogiannopoulos 3.2.12.1-1 +- new upstream release + +* Mon Mar 03 2014 Nikos Mavrogiannopoulos 3.2.12-1 +- new upstream release + +* Mon Feb 03 2014 Nikos Mavrogiannopoulos 3.2.10-2 +- use p11-kit trust store for certificate verification + +* Mon Feb 03 2014 Nikos Mavrogiannopoulos 3.2.10-1 +- new upstream release + +* Tue Jan 14 2014 Tomáš Mráz 3.2.8-2 +- build the crywrap tool + +* Mon Dec 23 2013 Nikos Mavrogiannopoulos 3.2.8-1 +- new upstream release + +* Wed Dec 4 2013 Nikos Mavrogiannopoulos 3.2.7-2 +- Use the correct root key for unbound /var/lib/unbound/root.key (#1012494) +- Pull asm fixes from upstream (#973210) + +* Mon Nov 25 2013 Nikos Mavrogiannopoulos 3.2.7-1 +- new upstream release +- added dependency to autogen-libopts-devel to use the system's + libopts library +- added dependency to trousers-devel to enable TPM support + +* Mon Nov 4 2013 Tomáš Mráz 3.1.16-1 +- new upstream release +- fixes CVE-2013-4466 off-by-one in dane_query_tlsa() + +* Fri Oct 25 2013 Tomáš Mráz 3.1.15-1 +- new upstream release +- fixes CVE-2013-4466 buffer overflow in handling DANE entries + +* Wed Oct 16 2013 Tomáš Mráz 3.1.13-3 +- enable ECC NIST Suite B curves + +* Sat Aug 03 2013 Fedora Release Engineering - 3.1.13-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild + +* Mon Jul 15 2013 Tomáš Mráz 3.1.13-1 +- new upstream release + +* Mon May 13 2013 Tomáš Mráz 3.1.11-1 +- new upstream release + +* Mon Mar 25 2013 Tomas Mraz 3.1.10-1 +- new upstream release +- license of the library is back to LGPLv2.1+ + +* Fri Mar 15 2013 Tomas Mraz 3.1.9-1 +- new upstream release + +* Thu Mar 7 2013 Tomas Mraz 3.1.8-3 +- drop the temporary old library + +* Tue Feb 26 2013 Tomas Mraz 3.1.8-2 +- don't send ECC algos as supported (#913797) + +* Thu Feb 21 2013 Tomas Mraz 3.1.8-1 +- new upstream version + +* Wed Feb 6 2013 Tomas Mraz 3.1.7-1 +- new upstream version, requires rebuild of dependencies +- this release temporarily includes old compatibility .so + +* Tue Feb 5 2013 Tomas Mraz 2.12.22-2 +- rebuilt with new libtasn1 +- make guile bindings optional - breaks i686 build and there is + no dependent package + +* Tue Jan 8 2013 Tomas Mraz 2.12.22-1 +- new upstream version + +* Wed Nov 28 2012 Tomas Mraz 2.12.21-2 +- use RSA bit sizes supported by libgcrypt in FIPS mode for security + levels (#879643) + +* Fri Nov 9 2012 Tomas Mraz 2.12.21-1 +- new upstream version + +* Thu Nov 1 2012 Tomas Mraz 2.12.20-4 +- negotiate only FIPS approved algorithms in the FIPS mode (#871826) + +* Wed Aug 8 2012 Tomas Mraz 2.12.20-3 +- fix the gnutls-cli-debug manpage - patch by Peter Schiffer + +* Thu Jul 19 2012 Fedora Release Engineering - 2.12.20-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild + +* Mon Jun 18 2012 Tomas Mraz 2.12.20-1 +- new upstream version + +* Fri May 18 2012 Tomas Mraz 2.12.19-1 +- new upstream version + +* Thu Mar 29 2012 Tomas Mraz 2.12.18-1 +- new upstream version + +* Thu Mar 8 2012 Tomas Mraz 2.12.17-1 +- new upstream version +- fix leaks in key generation (#796302) + +* Fri Feb 03 2012 Kevin Fenzi - 2.12.14-3 +- Disable largefile on arm arch. (#787287) + +* Fri Jan 13 2012 Fedora Release Engineering - 2.12.14-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild + +* Tue Nov 8 2011 Tomas Mraz 2.12.14-1 +- new upstream version + +* Mon Oct 24 2011 Tomas Mraz 2.12.12-1 +- new upstream version + +* Thu Sep 29 2011 Tomas Mraz 2.12.11-1 +- new upstream version + +* Fri Aug 26 2011 Tomas Mraz 2.12.9-1 +- new upstream version + +* Tue Aug 16 2011 Tomas Mraz 2.12.8-1 +- new upstream version + +* Mon Jul 25 2011 Tomas Mraz 2.12.7-2 +- fix problem when using new libgcrypt +- split libgnutlsxx to a subpackage (#455146) +- drop libgnutls-openssl (#460310) + +* Tue Jun 21 2011 Tomas Mraz 2.12.7-1 +- new upstream version + +* Mon May 9 2011 Tomas Mraz 2.12.4-1 +- new upstream version + +* Tue Apr 26 2011 Tomas Mraz 2.12.3-1 +- new upstream version + +* Mon Apr 18 2011 Tomas Mraz 2.12.2-1 +- new upstream version + +* Thu Mar 3 2011 Tomas Mraz 2.10.5-1 +- new upstream version + +* Tue Feb 08 2011 Fedora Release Engineering - 2.10.4-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild + +* Wed Dec 8 2010 Tomas Mraz 2.10.4-1 +- new upstream version + +* Thu Dec 2 2010 Tomas Mraz 2.10.3-2 +- fix buffer overflow in gnutls-serv (#659259) + +* Fri Nov 19 2010 Tomas Mraz 2.10.3-1 +- new upstream version + +* Thu Sep 30 2010 Tomas Mraz 2.10.2-1 +- new upstream version + +* Wed Sep 29 2010 jkeating - 2.10.1-4 +- Rebuilt for gcc bug 634757 + +* Thu Sep 23 2010 Tomas Mraz 2.10.1-3 +- more patching for internal errors regression (#629858) + patch by Vivek Dasmohapatra + +* Tue Sep 21 2010 Tomas Mraz 2.10.1-2 +- backported patch from upstream git hopefully fixing internal errors + (#629858) + +* Wed Aug 4 2010 Tomas Mraz 2.10.1-1 +- new upstream version + +* Wed Jun 2 2010 Tomas Mraz 2.8.6-2 +- add support for safe renegotiation CVE-2009-3555 (#533125) + +* Wed May 12 2010 Tomas Mraz 2.8.6-1 +- upgrade to a new upstream version + +* Mon Feb 15 2010 Rex Dieter 2.8.5-4 +- FTBFS gnutls-2.8.5-3.fc13: ImplicitDSOLinking (#564624) + +* Thu Jan 28 2010 Tomas Mraz 2.8.5-3 +- drop superfluous rpath from binaries +- do not call autoreconf during build +- specify the license on utils subpackage + +* Mon Jan 18 2010 Tomas Mraz 2.8.5-2 +- do not create static libraries (#556052) + +* Mon Nov 2 2009 Tomas Mraz 2.8.5-1 +- upgrade to a new upstream version + +* Wed Sep 23 2009 Tomas Mraz 2.8.4-1 +- upgrade to a new upstream version + +* Fri Aug 14 2009 Tomas Mraz 2.8.3-1 +- upgrade to a new upstream version + +* Fri Jul 24 2009 Fedora Release Engineering - 2.8.1-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild + +* Wed Jun 10 2009 Tomas Mraz 2.8.1-1 +- upgrade to a new upstream version + +* Wed Jun 3 2009 Tomas Mraz 2.8.0-1 +- upgrade to a new upstream version + +* Mon May 4 2009 Tomas Mraz 2.6.6-1 +- upgrade to a new upstream version - security fixes + +* Tue Apr 14 2009 Tomas Mraz 2.6.5-1 +- upgrade to a new upstream version, minor bugfixes only + +* Fri Mar 6 2009 Tomas Mraz 2.6.4-1 +- upgrade to a new upstream version + +* Tue Feb 24 2009 Fedora Release Engineering - 2.6.3-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild + +* Mon Dec 15 2008 Tomas Mraz 2.6.3-1 +- upgrade to a new upstream version + +* Thu Dec 4 2008 Tomas Mraz 2.6.2-1 +- upgrade to a new upstream version + +* Tue Nov 11 2008 Tomas Mraz 2.4.2-3 +- fix chain verification issue CVE-2008-4989 (#470079) + +* Thu Sep 25 2008 Tomas Mraz 2.4.2-2 +- add guile subpackage (#463735) +- force new libtool through autoreconf to drop unnecessary rpaths + +* Tue Sep 23 2008 Tomas Mraz 2.4.2-1 +- new upstream version + +* Tue Jul 1 2008 Tomas Mraz 2.4.1-1 +- new upstream version +- correct the license tag +- explicit --with-included-opencdk not needed +- use external lzo library, internal not included anymore + +* Tue Jun 24 2008 Tomas Mraz 2.4.0-1 +- upgrade to latest upstream + +* Tue May 20 2008 Tomas Mraz 2.0.4-3 +- fix three security issues in gnutls handshake - GNUTLS-SA-2008-1 + (#447461, #447462, #447463) + +* Mon Feb 4 2008 Joe Orton 2.0.4-2 +- use system libtasn1 + +* Tue Dec 4 2007 Tomas Mraz 2.0.4-1 +- upgrade to latest upstream + +* Tue Aug 21 2007 Tomas Mraz 1.6.3-2 +- license tag fix + +* Wed Jun 6 2007 Tomas Mraz 1.6.3-1 +- upgrade to latest upstream (#232445) + +* Tue Apr 10 2007 Tomas Mraz 1.4.5-2 +- properly require install-info (patch by Ville Skyttä) +- standard buildroot and use dist tag +- add COPYING and README to doc + +* Wed Feb 7 2007 Tomas Mraz 1.4.5-1 +- new upstream version +- drop libtermcap-devel from buildrequires + +* Thu Sep 14 2006 Tomas Mraz 1.4.1-2 +- detect forged signatures - CVE-2006-4790 (#206411), patch + from upstream + +* Tue Jul 18 2006 Tomas Mraz - 1.4.1-1 +- upgrade to new upstream version, only minor changes + +* Wed Jul 12 2006 Jesse Keating - 1.4.0-1.1 +- rebuild + +* Wed Jun 14 2006 Tomas Mraz - 1.4.0-1 +- upgrade to new upstream version (#192070), rebuild + of dependent packages required + +* Tue May 16 2006 Tomas Mraz - 1.2.10-2 +- added missing buildrequires + +* Mon Feb 13 2006 Tomas Mraz - 1.2.10-1 +- updated to new version (fixes CVE-2006-0645) + +* Fri Feb 10 2006 Jesse Keating - 1.2.9-3.2 +- bump again for double-long bug on ppc(64) + +* Tue Feb 07 2006 Jesse Keating - 1.2.9-3.1 +- rebuilt for new gcc4.1 snapshot and glibc changes + +* Tue Jan 3 2006 Jesse Keating 1.2.9-3 +- rebuilt + +* Fri Dec 9 2005 Tomas Mraz 1.2.9-2 +- replaced *-config scripts with calls to pkg-config to + solve multilib conflicts + +* Wed Nov 23 2005 Tomas Mraz 1.2.9-1 +- upgrade to newest upstream +- removed .la files (#172635) + +* Sun Aug 7 2005 Tomas Mraz 1.2.6-1 +- upgrade to newest upstream (rebuild of dependencies necessary) + +* Mon Jul 4 2005 Tomas Mraz 1.0.25-2 +- split the command line tools to utils subpackage + +* Sat Apr 30 2005 Tomas Mraz 1.0.25-1 +- new upstream version fixes potential DOS attack + +* Sat Apr 23 2005 Tomas Mraz 1.0.24-2 +- readd the version script dropped by upstream + +* Fri Apr 22 2005 Tomas Mraz 1.0.24-1 +- update to the latest upstream version on the 1.0 branch + +* Wed Mar 2 2005 Warren Togami 1.0.20-6 +- gcc4 rebuild + +* Tue Jan 4 2005 Ivana Varekova 1.0.20-5 +- add gnutls Requires zlib-devel (#144069) + +* Mon Nov 08 2004 Colin Walters 1.0.20-4 +- Make gnutls-devel Require libgcrypt-devel + +* Tue Sep 21 2004 Jeff Johnson 1.0.20-3 +- rebuild with release++, otherwise unchanged. + +* Tue Sep 7 2004 Jeff Johnson 1.0.20-2 +- patent tainted SRP code removed. + +* Sun Sep 5 2004 Jeff Johnson 1.0.20-1 +- update to 1.0.20. +- add --with-included-opencdk --with-included-libtasn1 +- add --with-included-libcfg --with-included-lzo +- add --disable-srp-authentication. +- do "make check" after build. + +* Fri Mar 21 2003 Jeff Johnson 0.9.2-1 +- upgrade to 0.9.2 + +* Tue Jun 25 2002 Jeff Johnson 0.4.4-1 +- update to 0.4.4. + +* Fri Jun 21 2002 Tim Powers +- automated rebuild + +* Sat May 25 2002 Jeff Johnson 0.4.3-1 +- update to 0.4.3. + +* Tue May 21 2002 Jeff Johnson 0.4.2-1 +- update to 0.4.2. +- change license to LGPL. +- include splint annotations patch. + +* Tue Apr 2 2002 Nalin Dahyabhai 0.4.0-1 +- update to 0.4.0 + +* Thu Jan 17 2002 Nalin Dahyabhai 0.3.2-1 +- update to 0.3.2 + +* Thu Jan 10 2002 Nalin Dahyabhai 0.3.0-1 +- add a URL + +* Thu Dec 20 2001 Nalin Dahyabhai +- initial package diff --git a/gnutls-3.6.15-gnulib-perror-tests.patch b/gnutls-3.6.15-gnulib-perror-tests.patch deleted file mode 100644 index 5de2e14..0000000 --- a/gnutls-3.6.15-gnulib-perror-tests.patch +++ /dev/null @@ -1,46 +0,0 @@ -From 175e0bc72808d564074c4adcc72aeadb74adfcc6 Mon Sep 17 00:00:00 2001 -From: Paul Eggert -Date: Thu, 27 Aug 2020 17:52:58 -0700 -Subject: [PATCH] perror, strerror_r: remove unportable tests - -Problem reported by Florian Weimer in: -https://lists.gnu.org/r/bug-gnulib/2020-08/msg00220.html -* tests/test-perror2.c (main): -* tests/test-strerror_r.c (main): Omit unportable tests. ---- - ChangeLog | 8 ++++++++ - tests/test-perror2.c | 3 --- - tests/test-strerror_r.c | 3 --- - 3 files changed, 8 insertions(+), 6 deletions(-) - -diff --git a/gl/tests/test-perror2.c b/gl/tests/test-perror2.c -index 1d14eda7b..c6214dd25 100644 ---- a/gl/tests/test-perror2.c -+++ b/gl/tests/test-perror2.c -@@ -79,9 +79,6 @@ main (void) - errno = -5; - perror (""); - ASSERT (!ferror (stderr)); -- ASSERT (msg1 == msg2 || msg1 == msg4 || STREQ (msg1, str1)); -- ASSERT (msg2 == msg4 || STREQ (msg2, str2)); -- ASSERT (msg3 == msg4 || STREQ (msg3, str3)); - ASSERT (STREQ (msg4, str4)); - - free (str1); -diff --git a/gl/tests/test-strerror_r.c b/gl/tests/test-strerror_r.c -index b11d6fd9f..c1dbcf837 100644 ---- a/gl/tests/test-strerror_r.c -+++ b/gl/tests/test-strerror_r.c -@@ -165,9 +165,6 @@ main (void) - - strerror_r (EACCES, buf, sizeof buf); - strerror_r (-5, buf, sizeof buf); -- ASSERT (msg1 == msg2 || msg1 == msg4 || STREQ (msg1, str1)); -- ASSERT (msg2 == msg4 || STREQ (msg2, str2)); -- ASSERT (msg3 == msg4 || STREQ (msg3, str3)); - ASSERT (STREQ (msg4, str4)); - - free (str1); --- -2.26.2 - diff --git a/gnutls-3.6.15-test-fixes.patch b/gnutls-3.6.15-test-fixes.patch deleted file mode 100644 index 7bf84c5..0000000 --- a/gnutls-3.6.15-test-fixes.patch +++ /dev/null @@ -1,173 +0,0 @@ -From c2e39386e5df376620264b820fde2994b12d035d Mon Sep 17 00:00:00 2001 -From: Stefan Berger -Date: Mon, 21 Dec 2020 09:36:47 -0500 -Subject: [PATCH 1/2] tests: Fix tpmtool_test due to changes in trousers - -Recent changes to trousers now require an ownership of root:tss for -the tcsd config file, older ones requires tss:tss. So, start tcsd -using trial and error with either one of these ownership configurations -until one works. - -Signed-off-by: Stefan Berger ---- - tests/tpmtool_test.sh | 37 +++++++++++++++++++++++++++---------- - 1 file changed, 27 insertions(+), 10 deletions(-) - -diff --git a/tests/tpmtool_test.sh b/tests/tpmtool_test.sh -index c6e4bc42e..137552d62 100755 ---- a/tests/tpmtool_test.sh -+++ b/tests/tpmtool_test.sh -@@ -138,6 +138,7 @@ start_tcsd() - local tcsd_conf=$workdir/tcsd.conf - local tcsd_system_ps_file=$workdir/system_ps_file - local tcsd_pidfile=$workdir/tcsd.pid -+ local owner - - start_swtpm "$workdir" - [ $? -ne 0 ] && return 1 -@@ -146,20 +147,36 @@ start_tcsd() - port = $TCSD_LISTEN_PORT - system_ps_file = $tcsd_system_ps_file - _EOF_ -+ # older versions of trousers require tss:tss ownership of the -+ # config file, later ones root:tss -+ for owner in tss root; do -+ if [ "$owner" = "tss" ]; then -+ chmod 0600 $tcsd_conf -+ else -+ chmod 0640 $tcsd_conf -+ fi -+ chown $owner:tss $tcsd_conf - -- chown tss:tss $tcsd_conf -- chmod 0600 $tcsd_conf -+ bash -c "TCSD_USE_TCP_DEVICE=1 TCSD_TCP_DEVICE_PORT=$SWTPM_SERVER_PORT tcsd -c $tcsd_conf -e -f &>/dev/null & echo \$! > $tcsd_pidfile; wait" & -+ BASH_PID=$! - -- bash -c "TCSD_USE_TCP_DEVICE=1 TCSD_TCP_DEVICE_PORT=$SWTPM_SERVER_PORT tcsd -c $tcsd_conf -e -f &>/dev/null & echo \$! > $tcsd_pidfile; wait" & -- BASH_PID=$! -+ if wait_for_file $tcsd_pidfile 3; then -+ echo "Could not get TCSD's PID file" -+ return 1 -+ fi - -- if wait_for_file $tcsd_pidfile 3; then -- echo "Could not get TCSD's PID file" -- return 1 -- fi -+ sleep 0.5 -+ TCSD_PID=$(cat $tcsd_pidfile) -+ kill -0 "${TCSD_PID}" -+ if [ $? -ne 0 ]; then -+ # Try again with other owner -+ continue -+ fi -+ return 0 -+ done - -- TCSD_PID=$(cat $tcsd_pidfile) -- return 0 -+ echo "TCSD could not be started" -+ return 1 - } - - stop_tcsd() --- -2.29.2 - - -From 40203390a48b8fa01d72c6a9739d963cf24556b8 Mon Sep 17 00:00:00 2001 -From: Daiki Ueno -Date: Mon, 28 Dec 2020 16:16:53 +0100 -Subject: [PATCH 2/2] testpkcs11: use datefudge to trick certificate expiry - -The certificates stored in tests/testpkcs11-certs expired on -2020-12-13. To avoid verification failure due to that, use datefudge -to set custom date when calling gnutls-cli, gnutls-serv, and certtool. - -Based on the patch by Andreas Metzler: -https://gitlab.com/gnutls/gnutls/-/issues/1135#note_469682121 - -Signed-off-by: Daiki Ueno ---- - tests/scripts/common.sh | 5 +++++ - tests/testpkcs11.sh | 12 +++++++++++- - 2 files changed, 16 insertions(+), 1 deletion(-) - -diff --git a/tests/scripts/common.sh b/tests/scripts/common.sh -index 6ae19fa58..69b5fd612 100644 ---- a/tests/scripts/common.sh -+++ b/tests/scripts/common.sh -@@ -187,6 +187,11 @@ launch_bare_server() { - ${SERV} $* >${LOGFILE-/dev/null} & - } - -+launch_bare_server2() { -+ wait_for_free_port "$PORT" -+ "$@" >${LOGFILE-/dev/null} & -+} -+ - wait_server() { - local PID=$1 - trap "test -n \"${PID}\" && kill ${PID};exit 1" 1 15 2 -diff --git a/tests/testpkcs11.sh b/tests/testpkcs11.sh -index 9458af238..3d74bfea6 100755 ---- a/tests/testpkcs11.sh -+++ b/tests/testpkcs11.sh -@@ -67,6 +67,8 @@ have_ed25519=0 - P11TOOL="${VALGRIND} ${P11TOOL} --batch" - SERV="${SERV} -q" - -+TESTDATE=2020-12-01 -+ - . ${srcdir}/scripts/common.sh - - rm -f "${LOGFILE}" -@@ -79,6 +81,8 @@ exit_error () { - exit 1 - } - -+skip_if_no_datefudge -+ - # $1: token - # $2: PIN - # $3: filename -@@ -523,6 +527,7 @@ write_certificate_test () { - pubkey="$5" - - echo -n "* Generating client certificate... " -+ datefudge -s "$TESTDATE" \ - "${CERTTOOL}" ${CERTTOOL_PARAM} ${ADDITIONAL_PARAM} --generate-certificate --load-ca-privkey "${cakey}" --load-ca-certificate "${cacert}" \ - --template ${srcdir}/testpkcs11-certs/client-tmpl --load-privkey "${token};object=gnutls-client;object-type=private" \ - --load-pubkey "$pubkey" --outfile tmp-client.crt >>"${LOGFILE}" 2>&1 -@@ -900,7 +905,9 @@ use_certificate_test () { - echo -n "* Using PKCS #11 with gnutls-cli (${txt})... " - # start server - eval "${GETPORT}" -- launch_pkcs11_server $$ "${ADDITIONAL_PARAM}" --echo --priority NORMAL --x509certfile="${certfile}" \ -+ launch_bare_server2 datefudge -s "$TESTDATE" \ -+ $VALGRIND $SERV $DEBUG -p "$PORT" \ -+ ${ADDITIONAL_PARAM} --debug 10 --echo --priority NORMAL --x509certfile="${certfile}" \ - --x509keyfile="$keyfile" --x509cafile="${cafile}" \ - --verify-client-cert --require-client-cert >>"${LOGFILE}" 2>&1 - -@@ -908,13 +915,16 @@ use_certificate_test () { - wait_server ${PID} - - # connect to server using SC -+ datefudge -s "$TESTDATE" \ - ${VALGRIND} "${CLI}" ${ADDITIONAL_PARAM} -p "${PORT}" localhost --priority NORMAL --x509cafile="${cafile}" >"${LOGFILE}" 2>&1 && \ - fail ${PID} "Connection should have failed!" - -+ datefudge -s "$TESTDATE" \ - ${VALGRIND} "${CLI}" ${ADDITIONAL_PARAM} -p "${PORT}" localhost --priority NORMAL --x509certfile="${certfile}" \ - --x509keyfile="$keyfile" --x509cafile="${cafile}" >"${LOGFILE}" 2>&1 || \ - fail ${PID} "Connection (with files) should have succeeded!" - -+ datefudge -s "$TESTDATE" \ - ${VALGRIND} "${CLI}" ${ADDITIONAL_PARAM} -p "${PORT}" localhost --priority NORMAL --x509certfile="${token};object=gnutls-client;object-type=cert" \ - --x509keyfile="${token};object=gnutls-client;object-type=private" \ - --x509cafile="${cafile}" >"${LOGFILE}" 2>&1 || \ --- -2.29.2 - diff --git a/gnutls-3.7.3-fix-race-condition.patch b/gnutls-3.7.3-fix-race-condition.patch new file mode 100644 index 0000000..00b8b38 --- /dev/null +++ b/gnutls-3.7.3-fix-race-condition.patch @@ -0,0 +1,45 @@ +From 22f837ba0bc7d13c3d738a8583566368fc12aee1 Mon Sep 17 00:00:00 2001 +From: Daiki Ueno +Date: Sat, 30 Oct 2021 08:56:07 +0200 +Subject: [PATCH] x509: fix thread-safety in gnutls_x509_trust_list_verify_crt2 + +This function previously used gnutls_x509_trust_list_get_issuer +without GNUTLS_TL_GET_COPY flag, which is required when the function +is called from multi-threaded application and PKCS #11 trust store is +in use. + +Reported and the change suggested by Remi Gacogne in: +https://gitlab.com/gnutls/gnutls/-/issues/1277 + +Signed-off-by: Daiki Ueno +--- + lib/x509/verify-high.c | 6 ++++-- + 1 file changed, 4 insertions(+), 2 deletions(-) + +diff --git a/lib/x509/verify-high.c b/lib/x509/verify-high.c +index ab8e006ca7..5698d4f372 100644 +--- a/lib/x509/verify-high.c ++++ b/lib/x509/verify-high.c +@@ -1102,7 +1102,8 @@ int trust_list_get_issuer_by_dn(gnutls_x509_trust_list_t list, + * gnutls_x509_trust_list_get_issuer: + * @list: The list + * @cert: is the certificate to find issuer for +- * @issuer: Will hold the issuer if any. Should be treated as constant. ++ * @issuer: Will hold the issuer if any. Should be treated as constant ++ * unless %GNUTLS_TL_GET_COPY is set in @flags. + * @flags: flags from %gnutls_trust_list_flags_t (%GNUTLS_TL_GET_COPY is applicable) + * + * This function will find the issuer of the given certificate. +@@ -1521,7 +1522,8 @@ gnutls_x509_trust_list_verify_crt2(gnutls_x509_trust_list_t list, + if (gnutls_x509_trust_list_get_issuer(list, + cert_list[i - 1], + &issuer, +- 0) == 0) { ++ GNUTLS_TL_GET_COPY) == 0) { ++ gnutls_x509_crt_deinit(issuer); + cert_list_size = i; + break; + } +-- +GitLab + diff --git a/gnutls-3.7.4.tar.xz.sig b/gnutls-3.7.4.tar.xz.sig new file mode 100644 index 0000000..b9c03b6 Binary files /dev/null and b/gnutls-3.7.4.tar.xz.sig differ diff --git a/gnutls-3.7.5.tar.xz.sig b/gnutls-3.7.5.tar.xz.sig new file mode 100644 index 0000000..b1e591f Binary files /dev/null and b/gnutls-3.7.5.tar.xz.sig differ diff --git a/gnutls-3.7.6.tar.xz.sig b/gnutls-3.7.6.tar.xz.sig new file mode 100644 index 0000000..70cb359 Binary files /dev/null and b/gnutls-3.7.6.tar.xz.sig differ diff --git a/gnutls-release-keyring.gpg b/gnutls-release-keyring.gpg new file mode 100644 index 0000000..e33ee43 Binary files /dev/null and b/gnutls-release-keyring.gpg differ diff --git a/gnutls.spec b/gnutls.spec index e2bf429..f00f43f 100644 --- a/gnutls.spec +++ b/gnutls.spec @@ -1,10 +1,9 @@ # This spec file has been automatically updated -Version: 3.6.15 -Release: 4%{?dist} +Version: 3.7.6 +Release: %{?autorel}%{!?autorel:1}%{?dist} Patch1: gnutls-3.6.7-no-now-guile.patch Patch2: gnutls-3.2.7-rpath.patch -Patch3: gnutls-3.6.15-gnulib-perror-tests.patch -Patch4: gnutls-3.6.15-test-fixes.patch +%bcond_with bootstrap %bcond_without dane %if 0%{?rhel} %bcond_with guile @@ -13,6 +12,8 @@ Patch4: gnutls-3.6.15-test-fixes.patch %bcond_without guile %bcond_without fips %endif +%bcond_with tpm12 +%bcond_without gost Summary: A TLS protocol implementation Name: gnutls @@ -20,13 +21,16 @@ Name: gnutls License: GPLv3+ and LGPLv2+ BuildRequires: p11-kit-devel >= 0.21.3, gettext-devel BuildRequires: zlib-devel, readline-devel, libtasn1-devel >= 4.3 -BuildRequires: libtool, automake, autoconf, texinfo -BuildRequires: autogen-libopts-devel >= 5.18 autogen +%if %{with bootstrap} +BuildRequires: automake, autoconf, gperf, libtool, texinfo +%endif BuildRequires: nettle-devel >= 3.5.1 +%if %{with tpm12} BuildRequires: trousers-devel >= 0.3.11.2 +%endif BuildRequires: libidn2-devel BuildRequires: libunistring-devel -BuildRequires: gperf, net-tools, datefudge, softhsm, gcc, gcc-c++ +BuildRequires: net-tools, datefudge, softhsm, gcc, gcc-c++ BuildRequires: gnupg2 %if %{with fips} BuildRequires: fipscheck @@ -38,7 +42,9 @@ Requires: crypto-policies Requires: p11-kit-trust Requires: libtasn1 >= 4.3 Requires: nettle >= 3.4.1 +%if %{with tpm12} Recommends: trousers >= 0.3.11.2 +%endif %if %{with dane} BuildRequires: unbound-devel unbound-libs @@ -48,9 +54,10 @@ BuildRequires: guile22-devel %endif BuildRequires: make URL: http://www.gnutls.org/ -Source0: ftp://ftp.gnutls.org/gcrypt/gnutls/v3.6/%{name}-%{version}.tar.xz -Source1: ftp://ftp.gnutls.org/gcrypt/gnutls/v3.6/%{name}-%{version}.tar.xz.sig -Source2: gpgkey-462225C3B46F34879FC8496CD605848ED7E69871.gpg +%define short_version %(echo %{version} | grep -m1 -o "[0-9]*\.[0-9]*" | head -1) +Source0: https://www.gnupg.org/ftp/gcrypt/gnutls/v%{short_version}/%{name}-%{version}.tar.xz +Source1: https://www.gnupg.org/ftp/gcrypt/gnutls/v%{short_version}/%{name}-%{version}.tar.xz.sig +Source2: gnutls-release-keyring.gpg # Wildcard bundling exception https://fedorahosted.org/fpc/ticket/174 Provides: bundled(gnulib) = 20130424 @@ -143,14 +150,16 @@ This package contains Guile bindings for the library. %endif %prep -gpgv2 --keyring %{SOURCE2} %{SOURCE1} %{SOURCE0} +%{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}' %autosetup -p1 -#autoreconf -fi +%if %{with bootstrap} +rm -f src/libopts/*.c src/libopts/*.h src/libopts/compat/*.c src/libopts/compat/*.h +autoreconf -fi +%endif sed -i -e 's|sys_lib_dlsearch_path_spec="/lib /usr/lib|sys_lib_dlsearch_path_spec="/lib /usr/lib %{_libdir}|g' configure rm -f lib/minitasn1/*.c lib/minitasn1/*.h -rm -f src/libopts/*.c src/libopts/*.h src/libopts/compat/*.c src/libopts/compat/*.h echo "SYSTEM=NORMAL" >> tests/system.prio @@ -158,19 +167,28 @@ echo "SYSTEM=NORMAL" >> tests/system.prio # via the crypto policies %build +%define _lto_cflags %{nil} + CCASFLAGS="$CCASFLAGS -Wa,--generate-missing-build-notes=yes" export CCASFLAGS +%if %{with guile} # These should be checked by m4/guile.m4 instead of configure.ac # taking into account of _guile_suffix guile_snarf=%{_bindir}/guile-snarf2.2 export guile_snarf GUILD=%{_bindir}/guild2.2 export GUILD +%endif -%configure --with-libtasn1-prefix=%{_prefix} \ +%configure \ %if %{with fips} --enable-fips140-mode \ +%endif +%if %{with gost} + --enable-gost \ +%else + --disable-gost \ %endif --enable-sha1-support \ --disable-static \ @@ -178,7 +196,11 @@ export GUILD --disable-non-suiteb-curves \ --with-system-priority-file=%{_sysconfdir}/crypto-policies/back-ends/gnutls.config \ --with-default-trust-store-pkcs11="pkcs11:" \ +%if %{with tpm12} --with-trousers-lib=%{_libdir}/libtspi.so.1 \ +%else + --without-tpm \ +%endif --htmldir=%{_docdir}/manual \ %if %{with guile} --enable-guile \ @@ -188,25 +210,15 @@ export GUILD %endif %if %{with dane} --with-unbound-root-key-file=/var/lib/unbound/root.key \ - --enable-dane \ + --enable-libdane \ %else - --disable-dane \ + --disable-libdane \ %endif --disable-rpath \ --with-default-priority-string="@SYSTEM" make %{?_smp_mflags} V=1 -%if %{with fips} -%define __spec_install_post \ - %{?__debug_package:%{__debug_install_post}} \ - %{__arch_install_post} \ - %{__os_install_post} \ - fipshmac -d $RPM_BUILD_ROOT%{_libdir} $RPM_BUILD_ROOT%{_libdir}/libgnutls.so.30.*.* \ - file=`basename $RPM_BUILD_ROOT%{_libdir}/libgnutls.so.30.*.hmac` && mv $RPM_BUILD_ROOT%{_libdir}/$file $RPM_BUILD_ROOT%{_libdir}/.$file && ln -s .$file $RPM_BUILD_ROOT%{_libdir}/.libgnutls.so.30.hmac \ -%{nil} -%endif - %install make install DESTDIR=$RPM_BUILD_ROOT make -C doc install-html DESTDIR=$RPM_BUILD_ROOT @@ -214,21 +226,35 @@ rm -f $RPM_BUILD_ROOT%{_infodir}/dir rm -f $RPM_BUILD_ROOT%{_libdir}/*.la rm -f $RPM_BUILD_ROOT%{_libdir}/guile/2.2/guile-gnutls*.a rm -f $RPM_BUILD_ROOT%{_libdir}/guile/2.2/guile-gnutls*.la -rm -f $RPM_BUILD_ROOT%{_libdir}/gnutls/libpkcs11mock1.* %if %{without dane} rm -f $RPM_BUILD_ROOT%{_libdir}/pkgconfig/gnutls-dane.pc %endif +%if %{with fips} +# doing it twice should be a no-op the second time, +# and this way we avoid redefining it and missing a future change +%{__spec_install_post} +./lib/fipshmac "$RPM_BUILD_ROOT%{_libdir}/libgnutls.so.30" > $RPM_BUILD_ROOT%{_libdir}/.gnutls.hmac +sed -i "s^$RPM_BUILD_ROOT/usr^^" $RPM_BUILD_ROOT%{_libdir}/.gnutls.hmac +%endif + +%if %{with fips} +%define __spec_install_post \ + %{?__debug_package:%{__debug_install_post}} \ + %{__arch_install_post} \ + %{__os_install_post} \ +%{nil} +%endif + %find_lang gnutls %check make check %{?_smp_mflags} GNUTLS_SYSTEM_PRIORITY_FILE=/dev/null %files -f gnutls.lang -%defattr(-,root,root,-) %{_libdir}/libgnutls.so.30* %if %{with fips} -%{_libdir}/.libgnutls.so.30*.hmac +%{_libdir}/.gnutls.hmac %endif %doc README.md AUTHORS NEWS THANKS %license LICENSE doc/COPYING doc/COPYING.LESSER @@ -237,12 +263,8 @@ make check %{?_smp_mflags} GNUTLS_SYSTEM_PRIORITY_FILE=/dev/null %{_libdir}/libgnutlsxx.so.* %files devel -%defattr(-,root,root,-) %{_includedir}/* %{_libdir}/libgnutls*.so -%if %{with fips} -%{_libdir}/.libgnutls.so.*.hmac -%endif %{_libdir}/pkgconfig/*.pc %{_mandir}/man3/* @@ -251,9 +273,10 @@ make check %{?_smp_mflags} GNUTLS_SYSTEM_PRIORITY_FILE=/dev/null %{_docdir}/manual/* %files utils -%defattr(-,root,root,-) %{_bindir}/certtool +%if %{with tpm12} %{_bindir}/tpmtool +%endif %{_bindir}/ocsptool %{_bindir}/psktool %{_bindir}/p11tool @@ -267,13 +290,11 @@ make check %{?_smp_mflags} GNUTLS_SYSTEM_PRIORITY_FILE=/dev/null %if %{with dane} %files dane -%defattr(-,root,root,-) %{_libdir}/libgnutls-dane.so.* %endif %if %{with guile} %files guile -%defattr(-,root,root,-) %{_libdir}/guile/2.2/guile-gnutls*.so* %{_libdir}/guile/2.2/site-ccache/gnutls.go %{_libdir}/guile/2.2/site-ccache/gnutls/extra.go @@ -282,776 +303,4 @@ make check %{?_smp_mflags} GNUTLS_SYSTEM_PRIORITY_FILE=/dev/null %endif %changelog -* Tue Jan 26 2021 Daiki Ueno - 3.6.15-4 -- Fix broken tests on rawhide (#1908110) -- Add BuildRequires: make (by Tom Stellard) - -* Tue Jan 26 2021 Fedora Release Engineering - 3.6.15-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - -* Mon Sep 28 2020 Jeff Law - 3.6.15-2 -- Re-enable LTO now that upstream GCC bugs have been fixed - -* Fri Sep 4 2020 Daiki Ueno - 3.6.15-1 -- Update to upstream 3.6.15 release - -* Mon Aug 17 2020 Jeff Law - 3.6.14-7 -- Disable LTO on ppc64le - -* Tue Aug 4 2020 Daiki Ueno - 3.6.14-6 -- Fix underlinking of libpthread - -* Sat Aug 01 2020 Fedora Release Engineering - 3.6.14-5 -- Second attempt - Rebuilt for - https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - -* Mon Jul 27 2020 Fedora Release Engineering - 3.6.14-4 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - -* Thu Jul 02 2020 Anderson Sasaki - 3.6.14-3 -- Rebuild with autogen built with guile-2.2 (#1852706) - -* Tue Jun 09 2020 Anderson Sasaki - 3.6.14-2 -- Fix memory leak when serializing iovec_t (#1845083) -- Fix automatic libraries sonames detection (#1845806) - -* Thu Jun 4 2020 Daiki Ueno - 3.6.14-1 -- Update to upstream 3.6.14 release - -* Sun May 31 2020 Daiki Ueno - 3.6.13-6 -- Update gnutls-3.6.13-superseding-chain.patch - -* Sun May 31 2020 Daiki Ueno - 3.6.13-5 -- Fix cert chain validation behavior if the last cert has expired (#1842178) - -* Mon May 25 2020 Anderson Sasaki - 3.6.13-4 -- Add option to gnutls-cli to wait for resumption under TLS 1.3 - -* Tue May 19 2020 Anderson Sasaki - 3.6.13-3 -- Disable RSA blinding during FIPS self-tests - -* Thu May 14 2020 Anderson Sasaki - 3.6.13-2 -- Bump linked libraries soname to fix FIPS selftests (#1835265) - -* Tue Mar 31 2020 Daiki Ueno - 3.6.13-1 -- Update to upstream 3.6.13 release - -* Thu Mar 26 2020 Anderson Sasaki - 3.6.12-2 -- Fix FIPS POST (#1813384) -- Fix gnutls-serv --echo to not exit when a message is received (#1816583) - -* Sun Feb 02 2020 Nikos Mavrogiannopoulos - 3.6.12-1 -- Update to upstream 3.6.12 release - -* Tue Jan 28 2020 Fedora Release Engineering - 3.6.11-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - -* Mon Dec 02 2019 Nikos Mavrogiannopoulos - 3.6.11-1 -- Update to upstream 3.6.11 release - -* Sun Sep 29 2019 Nikos Mavrogiannopoulos - 3.6.10-1 -- Update to upstream 3.6.10 release - -* Fri Jul 26 2019 Nikos Mavrogiannopoulos - 3.6.9-1 -- Update to upstream 3.6.9 release - -* Thu Jul 25 2019 Fedora Release Engineering - 3.6.8-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild - -* Mon Jul 15 2019 Nikos Mavrogiannopoulos - 3.6.8-2 -- Rebuilt with guile-2.2 - -* Tue May 28 2019 Nikos Mavrogiannopoulos - 3.6.8-1 -- Update to upstream 3.6.8 release - -* Wed Mar 27 2019 Anderson Toshiyuki Sasaki - 3.6.7-1 -- Update to upstream 3.6.7 release -- Fixed CVE-2019-3836 (#1693214) -- Fixed CVE-2019-3829 (#1693210) - -* Fri Feb 1 2019 Nikos Mavrogiannopoulos - 3.6.6-1 -- Update to upstream 3.6.6 release - -* Thu Jan 31 2019 Fedora Release Engineering - 3.6.5-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild - -* Fri Jan 11 2019 Anderson Toshiyuki Sasaki - 3.6.5-2 -- Added explicit Requires for nettle >= 3.4.1 - -* Tue Dec 11 2018 Anderson Toshiyuki Sasaki - 3.6.5-1 -- Update to upstream 3.6.5 release - -* Mon Oct 29 2018 James Antill - 3.6.4-5 -- Remove ldconfig scriptlet, now done via. transfiletrigger in glibc. - -* Wed Oct 17 2018 Nikos Mavrogiannopoulos - 3.6.4-4 -- Fix issue with rehandshake affecting glib-networking (#1634736) - -* Tue Oct 16 2018 Tomáš Mráz - 3.6.4-3 -- Add missing annobin notes for assembler sources - -* Tue Oct 09 2018 Petr Menšík - 3.6.4-2 -- Rebuilt for unbound 1.8 - -* Tue Sep 25 2018 Nikos Mavrogiannopoulos - 3.6.4-1 -- Updated to upstream 3.6.4 release -- Added support for the latest version of the TLS1.3 protocol -- Enabled SHA1 support as SHA1 deprecation is handled via the - fedora crypto policies. - -* Thu Aug 16 2018 Nikos Mavrogiannopoulos - 3.6.3-4 -- Fixed gnutls-cli input reading -- Ensure that we do not cause issues with version rollback detection - and TLS1.3. - -* Tue Aug 07 2018 Nikos Mavrogiannopoulos - 3.6.3-3 -- Fixed ECDSA public key import (#1612803) - -* Thu Jul 26 2018 Nikos Mavrogiannopoulos - 3.6.3-2 -- Backported regression fixes from 3.6.2 - -* Mon Jul 16 2018 Nikos Mavrogiannopoulos - 3.6.3-1 -- Update to upstream 3.6.3 release - -* Fri Jul 13 2018 Fedora Release Engineering - 3.6.2-5 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - -* Wed Jun 13 2018 Nikos Mavrogiannopoulos - 3.6.2-4 -- Enable FIPS140-2 mode in Fedora - -* Wed Jun 06 2018 Nikos Mavrogiannopoulos - 3.6.2-3 -- Update to upstream 3.6.2 release - -* Fri May 25 2018 David Abdurachmanov - 3.6.2-2 -- Add missing BuildRequires: gnupg2 for gpgv2 in %%prep - -* Fri Feb 16 2018 Nikos Mavrogiannopoulos - 3.6.2-1 -- Update to upstream 3.6.2 release - -* Wed Feb 07 2018 Fedora Release Engineering - 3.6.1-5 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - -* Fri Feb 2 2018 Nikos Mavrogiannopoulos - 3.6.1-4 -- Rebuilt to address incompatibility with new nettle - -* Thu Nov 30 2017 Nikos Mavrogiannopoulos - 3.6.1-3 -- Corrected regression from 3.6.1-2 which prevented the loading of - arbitrary p11-kit modules (#1507402) - -* Mon Nov 6 2017 Nikos Mavrogiannopoulos - 3.6.1-2 -- Prevent the loading of all PKCS#11 modules on certificate verification - but only restrict to p11-kit trust module (#1507402) - -* Sat Oct 21 2017 Nikos Mavrogiannopoulos - 3.6.1-1 -- Update to upstream 3.6.1 release - -* Mon Aug 21 2017 Nikos Mavrogiannopoulos - 3.6.0-1 -- Update to upstream 3.6.0 release - -* Wed Aug 02 2017 Fedora Release Engineering - 3.5.14-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - -* Wed Jul 26 2017 Fedora Release Engineering - 3.5.14-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - -* Tue Jul 04 2017 Nikos Mavrogiannopoulos - 3.5.14-1 -- Update to upstream 3.5.14 release - -* Wed Jun 07 2017 Nikos Mavrogiannopoulos - 3.5.13-1 -- Update to upstream 3.5.13 release - -* Thu May 11 2017 Nikos Mavrogiannopoulos - 3.5.12-2 -- Fix issue with p11-kit-trust arch dependency - -* Thu May 11 2017 Nikos Mavrogiannopoulos - 3.5.12-1 -- Update to upstream 3.5.12 release - -* Fri Apr 07 2017 Nikos Mavrogiannopoulos - 3.5.11-1 -- Update to upstream 3.5.11 release - -* Mon Mar 06 2017 Nikos Mavrogiannopoulos - 3.5.10-1 -- Update to upstream 3.5.10 release - -* Wed Feb 15 2017 Nikos Mavrogiannopoulos - 3.5.9-2 -- Work around missing pkg-config file (#1422256) - -* Tue Feb 14 2017 Nikos Mavrogiannopoulos - 3.5.9-1 -- Update to upstream 3.5.9 release - -* Fri Feb 10 2017 Fedora Release Engineering - 3.5.8-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - -* Sat Feb 4 2017 Nikos Mavrogiannopoulos 3.5.8-2 -- Added patch fix initialization issue in gnutls_pkcs11_obj_list_import_url4 - -* Mon Jan 9 2017 Nikos Mavrogiannopoulos 3.5.8-1 -- New upstream release - -* Tue Dec 13 2016 Nikos Mavrogiannopoulos 3.5.7-3 -- Fix PKCS#8 file loading (#1404084) - -* Thu Dec 8 2016 Nikos Mavrogiannopoulos 3.5.7-1 -- New upstream release - -* Fri Nov 4 2016 Nikos Mavrogiannopoulos 3.5.6-1 -- New upstream release - -* Tue Oct 11 2016 walters@redhat.com - 3.5.5-2 -- Apply patch to fix compatibility with ostree (#1383708) - -* Mon Oct 10 2016 Nikos Mavrogiannopoulos 3.5.5-1 -- New upstream release - -* Thu Sep 8 2016 Nikos Mavrogiannopoulos 3.5.4-1 -- New upstream release - -* Mon Aug 29 2016 Nikos Mavrogiannopoulos 3.5.3-2 -- Work around #1371082 for x86 -- Fixed issue with DTLS sliding window implementation (#1370881) - -* Tue Aug 9 2016 Nikos Mavrogiannopoulos 3.5.3-1 -- New upstream release - -* Wed Jul 6 2016 Nikos Mavrogiannopoulos 3.5.2-1 -- New upstream release - -* Wed Jun 15 2016 Nikos Mavrogiannopoulos 3.5.1-1 -- New upstream release - -* Tue Jun 7 2016 Nikos Mavrogiannopoulos 3.4.13-1 -- New upstream release (#1343258) -- Addresses issue with setuid programs introduced in 3.4.12 (#1343342) - -* Fri May 20 2016 Nikos Mavrogiannopoulos 3.4.12-1 -- New upstream release - -* Mon Apr 11 2016 Nikos Mavrogiannopoulos 3.4.11-1 -- New upstream release - -* Fri Mar 4 2016 Nikos Mavrogiannopoulos 3.4.10-1 -- New upstream release (#1314576) - -* Wed Feb 3 2016 Nikos Mavrogiannopoulos 3.4.9-1 -- Fix broken key usage flags introduced in 3.4.8 (#1303355) - -* Mon Jan 11 2016 Nikos Mavrogiannopoulos 3.4.8-1 -- New upstream release (#1297079) - -* Mon Nov 23 2015 Nikos Mavrogiannopoulos 3.4.7-1 -- New upstream release (#1284300) -- Documentation updates (#1282864) -- Adds interface to set unique IDs in certificates (#1281343) -- Allow arbitrary key sizes with ARCFOUR (#1284401) - -* Wed Oct 21 2015 Nikos Mavrogiannopoulos 3.4.6-1 -- New upstream release (#1273672) -- Enhances p11tool to write CKA_ISSUER and CKA_SERIAL_NUMBER (#1272178) - -* Tue Oct 20 2015 Adam Williamson - 3.4.5-2 -- fix interaction with Chrome 45+ (master secret extension) (#1273102) - -* Mon Sep 14 2015 Nikos Mavrogiannopoulos 3.4.5-1 -- New upstream release (#1252192) -- Eliminates hard limits on CRL parsing of certtool. - -* Mon Aug 10 2015 Nikos Mavrogiannopoulos 3.4.4-1 -- new upstream release -- no longer requires trousers patch -- fixes issue in gnutls_x509_privkey_import (#1250020) - -* Mon Jul 13 2015 Nikos Mavrogiannopoulos 3.4.3-2 -- Don't link against trousers but rather dlopen() it when available. - That avoids a dependency on openssl by the main library. - -* Mon Jul 13 2015 Nikos Mavrogiannopoulos 3.4.3-1 -- new upstream release - -* Thu Jul 02 2015 Adam Jackson 3.4.2-3 -- Only disable -z now for the guile modules - -* Thu Jun 18 2015 Nikos Mavrogiannopoulos 3.4.2-2 -- rename the symbol version for internal symbols to avoid clashes - with 3.3.x. - -* Wed Jun 17 2015 Nikos Mavrogiannopoulos 3.4.2-1 -- new upstream release - -* Tue May 5 2015 Nikos Mavrogiannopoulos 3.4.1-2 -- Provide missing GNUTLS_SUPPLEMENTAL_USER_MAPPING_DATA definition - -* Mon May 4 2015 Nikos Mavrogiannopoulos 3.4.1-1 -- new upstream release - -* Sat May 02 2015 Kalev Lember - 3.3.14-2 -- Rebuilt for GCC 5 C++11 ABI change - -* Mon Mar 30 2015 Nikos Mavrogiannopoulos 3.3.14-1 -- new upstream release -- improved BER decoding of PKCS #12 structures (#1131461) - -* Fri Mar 6 2015 Nikos Mavrogiannopoulos 3.3.13-3 -- Build with hardened flags -- Removed -Wl,--no-add-needed linker flag - -* Fri Feb 27 2015 Till Maas - 3.3.13-2 -- Do not build with hardened flags - -* Thu Feb 26 2015 Nikos Mavrogiannopoulos 3.3.13-1 -- new upstream release - -* Sat Feb 21 2015 Till Maas - 3.3.12-3 -- Make build verbose -- Use %%license - -* Sat Feb 21 2015 Till Maas - 3.3.12-2 -- Rebuilt for Fedora 23 Change - https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code - -* Mon Jan 19 2015 Nikos Mavrogiannopoulos 3.3.12-1 -- new upstream release - -* Mon Jan 5 2015 Nikos Mavrogiannopoulos 3.3.11-2 -- enabled guile bindings (#1177847) - -* Thu Dec 11 2014 Nikos Mavrogiannopoulos 3.3.11-1 -- new upstream release - -* Mon Nov 10 2014 Nikos Mavrogiannopoulos 3.3.10-1 -- new upstream release - -* Thu Oct 23 2014 Nikos Mavrogiannopoulos 3.3.9-2 -- applied fix for issue in get-issuer (#1155901) - -* Mon Oct 13 2014 Nikos Mavrogiannopoulos 3.3.9-1 -- new upstream release - -* Fri Sep 19 2014 Nikos Mavrogiannopoulos 3.3.8-2 -- strip rpath from library - -* Thu Sep 18 2014 Nikos Mavrogiannopoulos 3.3.8-1 -- new upstream release - -* Mon Aug 25 2014 Nikos Mavrogiannopoulos 3.3.7-1 -- new upstream release - -* Sat Aug 16 2014 Fedora Release Engineering - 3.3.6-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - -* Wed Jul 23 2014 Nikos Mavrogiannopoulos 3.3.6-1 -- new upstream release - -* Tue Jul 01 2014 Nikos Mavrogiannopoulos 3.3.5-2 -- Added work-around for s390 builds with gcc 4.9 (#1102324) - -* Mon Jun 30 2014 Nikos Mavrogiannopoulos 3.3.5-1 -- new upstream release - -* Tue Jun 17 2014 Nikos Mavrogiannopoulos 3.3.4-3 -- explicitly depend on p11-kit-trust - -* Sat Jun 07 2014 Fedora Release Engineering - 3.3.4-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - -* Mon Jun 02 2014 Nikos Mavrogiannopoulos 3.3.4-1 -- new upstream release - -* Fri May 30 2014 Nikos Mavrogiannopoulos 3.3.3-1 -- new upstream release - -* Wed May 21 2014 Nikos Mavrogiannopoulos 3.3.2-2 -- Require crypto-policies - -* Fri May 09 2014 Nikos Mavrogiannopoulos 3.3.2-1 -- new upstream release - -* Mon May 05 2014 Nikos Mavrogiannopoulos 3.3.1-4 -- Replaced /etc/crypto-profiles/apps with /etc/crypto-policies/back-ends. -- Added support for "very weak" profile. - -* Mon Apr 28 2014 Nikos Mavrogiannopoulos 3.3.1-2 -- gnutls_global_deinit() will not do anything if the previous - initialization has failed (#1091053) - -* Mon Apr 28 2014 Nikos Mavrogiannopoulos 3.3.1-1 -- new upstream release - -* Mon Apr 14 2014 Nikos Mavrogiannopoulos 3.3.0-1 -- new upstream release - -* Tue Apr 08 2014 Nikos Mavrogiannopoulos 3.2.13-1 -- new upstream release - -* Wed Mar 05 2014 Nikos Mavrogiannopoulos 3.2.12.1-1 -- new upstream release - -* Mon Mar 03 2014 Nikos Mavrogiannopoulos 3.2.12-1 -- new upstream release - -* Mon Feb 03 2014 Nikos Mavrogiannopoulos 3.2.10-2 -- use p11-kit trust store for certificate verification - -* Mon Feb 03 2014 Nikos Mavrogiannopoulos 3.2.10-1 -- new upstream release - -* Tue Jan 14 2014 Tomáš Mráz 3.2.8-2 -- build the crywrap tool - -* Mon Dec 23 2013 Nikos Mavrogiannopoulos 3.2.8-1 -- new upstream release - -* Wed Dec 4 2013 Nikos Mavrogiannopoulos 3.2.7-2 -- Use the correct root key for unbound /var/lib/unbound/root.key (#1012494) -- Pull asm fixes from upstream (#973210) - -* Mon Nov 25 2013 Nikos Mavrogiannopoulos 3.2.7-1 -- new upstream release -- added dependency to autogen-libopts-devel to use the system's - libopts library -- added dependency to trousers-devel to enable TPM support - -* Mon Nov 4 2013 Tomáš Mráz 3.1.16-1 -- new upstream release -- fixes CVE-2013-4466 off-by-one in dane_query_tlsa() - -* Fri Oct 25 2013 Tomáš Mráz 3.1.15-1 -- new upstream release -- fixes CVE-2013-4466 buffer overflow in handling DANE entries - -* Wed Oct 16 2013 Tomáš Mráz 3.1.13-3 -- enable ECC NIST Suite B curves - -* Sat Aug 03 2013 Fedora Release Engineering - 3.1.13-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild - -* Mon Jul 15 2013 Tomáš Mráz 3.1.13-1 -- new upstream release - -* Mon May 13 2013 Tomáš Mráz 3.1.11-1 -- new upstream release - -* Mon Mar 25 2013 Tomas Mraz 3.1.10-1 -- new upstream release -- license of the library is back to LGPLv2.1+ - -* Fri Mar 15 2013 Tomas Mraz 3.1.9-1 -- new upstream release - -* Thu Mar 7 2013 Tomas Mraz 3.1.8-3 -- drop the temporary old library - -* Tue Feb 26 2013 Tomas Mraz 3.1.8-2 -- don't send ECC algos as supported (#913797) - -* Thu Feb 21 2013 Tomas Mraz 3.1.8-1 -- new upstream version - -* Wed Feb 6 2013 Tomas Mraz 3.1.7-1 -- new upstream version, requires rebuild of dependencies -- this release temporarily includes old compatibility .so - -* Tue Feb 5 2013 Tomas Mraz 2.12.22-2 -- rebuilt with new libtasn1 -- make guile bindings optional - breaks i686 build and there is - no dependent package - -* Tue Jan 8 2013 Tomas Mraz 2.12.22-1 -- new upstream version - -* Wed Nov 28 2012 Tomas Mraz 2.12.21-2 -- use RSA bit sizes supported by libgcrypt in FIPS mode for security - levels (#879643) - -* Fri Nov 9 2012 Tomas Mraz 2.12.21-1 -- new upstream version - -* Thu Nov 1 2012 Tomas Mraz 2.12.20-4 -- negotiate only FIPS approved algorithms in the FIPS mode (#871826) - -* Wed Aug 8 2012 Tomas Mraz 2.12.20-3 -- fix the gnutls-cli-debug manpage - patch by Peter Schiffer - -* Thu Jul 19 2012 Fedora Release Engineering - 2.12.20-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild - -* Mon Jun 18 2012 Tomas Mraz 2.12.20-1 -- new upstream version - -* Fri May 18 2012 Tomas Mraz 2.12.19-1 -- new upstream version - -* Thu Mar 29 2012 Tomas Mraz 2.12.18-1 -- new upstream version - -* Thu Mar 8 2012 Tomas Mraz 2.12.17-1 -- new upstream version -- fix leaks in key generation (#796302) - -* Fri Feb 03 2012 Kevin Fenzi - 2.12.14-3 -- Disable largefile on arm arch. (#787287) - -* Fri Jan 13 2012 Fedora Release Engineering - 2.12.14-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild - -* Tue Nov 8 2011 Tomas Mraz 2.12.14-1 -- new upstream version - -* Mon Oct 24 2011 Tomas Mraz 2.12.12-1 -- new upstream version - -* Thu Sep 29 2011 Tomas Mraz 2.12.11-1 -- new upstream version - -* Fri Aug 26 2011 Tomas Mraz 2.12.9-1 -- new upstream version - -* Tue Aug 16 2011 Tomas Mraz 2.12.8-1 -- new upstream version - -* Mon Jul 25 2011 Tomas Mraz 2.12.7-2 -- fix problem when using new libgcrypt -- split libgnutlsxx to a subpackage (#455146) -- drop libgnutls-openssl (#460310) - -* Tue Jun 21 2011 Tomas Mraz 2.12.7-1 -- new upstream version - -* Mon May 9 2011 Tomas Mraz 2.12.4-1 -- new upstream version - -* Tue Apr 26 2011 Tomas Mraz 2.12.3-1 -- new upstream version - -* Mon Apr 18 2011 Tomas Mraz 2.12.2-1 -- new upstream version - -* Thu Mar 3 2011 Tomas Mraz 2.10.5-1 -- new upstream version - -* Tue Feb 08 2011 Fedora Release Engineering - 2.10.4-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild - -* Wed Dec 8 2010 Tomas Mraz 2.10.4-1 -- new upstream version - -* Thu Dec 2 2010 Tomas Mraz 2.10.3-2 -- fix buffer overflow in gnutls-serv (#659259) - -* Fri Nov 19 2010 Tomas Mraz 2.10.3-1 -- new upstream version - -* Thu Sep 30 2010 Tomas Mraz 2.10.2-1 -- new upstream version - -* Wed Sep 29 2010 jkeating - 2.10.1-4 -- Rebuilt for gcc bug 634757 - -* Thu Sep 23 2010 Tomas Mraz 2.10.1-3 -- more patching for internal errors regression (#629858) - patch by Vivek Dasmohapatra - -* Tue Sep 21 2010 Tomas Mraz 2.10.1-2 -- backported patch from upstream git hopefully fixing internal errors - (#629858) - -* Wed Aug 4 2010 Tomas Mraz 2.10.1-1 -- new upstream version - -* Wed Jun 2 2010 Tomas Mraz 2.8.6-2 -- add support for safe renegotiation CVE-2009-3555 (#533125) - -* Wed May 12 2010 Tomas Mraz 2.8.6-1 -- upgrade to a new upstream version - -* Mon Feb 15 2010 Rex Dieter 2.8.5-4 -- FTBFS gnutls-2.8.5-3.fc13: ImplicitDSOLinking (#564624) - -* Thu Jan 28 2010 Tomas Mraz 2.8.5-3 -- drop superfluous rpath from binaries -- do not call autoreconf during build -- specify the license on utils subpackage - -* Mon Jan 18 2010 Tomas Mraz 2.8.5-2 -- do not create static libraries (#556052) - -* Mon Nov 2 2009 Tomas Mraz 2.8.5-1 -- upgrade to a new upstream version - -* Wed Sep 23 2009 Tomas Mraz 2.8.4-1 -- upgrade to a new upstream version - -* Fri Aug 14 2009 Tomas Mraz 2.8.3-1 -- upgrade to a new upstream version - -* Fri Jul 24 2009 Fedora Release Engineering - 2.8.1-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild - -* Wed Jun 10 2009 Tomas Mraz 2.8.1-1 -- upgrade to a new upstream version - -* Wed Jun 3 2009 Tomas Mraz 2.8.0-1 -- upgrade to a new upstream version - -* Mon May 4 2009 Tomas Mraz 2.6.6-1 -- upgrade to a new upstream version - security fixes - -* Tue Apr 14 2009 Tomas Mraz 2.6.5-1 -- upgrade to a new upstream version, minor bugfixes only - -* Fri Mar 6 2009 Tomas Mraz 2.6.4-1 -- upgrade to a new upstream version - -* Tue Feb 24 2009 Fedora Release Engineering - 2.6.3-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild - -* Mon Dec 15 2008 Tomas Mraz 2.6.3-1 -- upgrade to a new upstream version - -* Thu Dec 4 2008 Tomas Mraz 2.6.2-1 -- upgrade to a new upstream version - -* Tue Nov 11 2008 Tomas Mraz 2.4.2-3 -- fix chain verification issue CVE-2008-4989 (#470079) - -* Thu Sep 25 2008 Tomas Mraz 2.4.2-2 -- add guile subpackage (#463735) -- force new libtool through autoreconf to drop unnecessary rpaths - -* Tue Sep 23 2008 Tomas Mraz 2.4.2-1 -- new upstream version - -* Tue Jul 1 2008 Tomas Mraz 2.4.1-1 -- new upstream version -- correct the license tag -- explicit --with-included-opencdk not needed -- use external lzo library, internal not included anymore - -* Tue Jun 24 2008 Tomas Mraz 2.4.0-1 -- upgrade to latest upstream - -* Tue May 20 2008 Tomas Mraz 2.0.4-3 -- fix three security issues in gnutls handshake - GNUTLS-SA-2008-1 - (#447461, #447462, #447463) - -* Mon Feb 4 2008 Joe Orton 2.0.4-2 -- use system libtasn1 - -* Tue Dec 4 2007 Tomas Mraz 2.0.4-1 -- upgrade to latest upstream - -* Tue Aug 21 2007 Tomas Mraz 1.6.3-2 -- license tag fix - -* Wed Jun 6 2007 Tomas Mraz 1.6.3-1 -- upgrade to latest upstream (#232445) - -* Tue Apr 10 2007 Tomas Mraz 1.4.5-2 -- properly require install-info (patch by Ville Skyttä) -- standard buildroot and use dist tag -- add COPYING and README to doc - -* Wed Feb 7 2007 Tomas Mraz 1.4.5-1 -- new upstream version -- drop libtermcap-devel from buildrequires - -* Thu Sep 14 2006 Tomas Mraz 1.4.1-2 -- detect forged signatures - CVE-2006-4790 (#206411), patch - from upstream - -* Tue Jul 18 2006 Tomas Mraz - 1.4.1-1 -- upgrade to new upstream version, only minor changes - -* Wed Jul 12 2006 Jesse Keating - 1.4.0-1.1 -- rebuild - -* Wed Jun 14 2006 Tomas Mraz - 1.4.0-1 -- upgrade to new upstream version (#192070), rebuild - of dependent packages required - -* Tue May 16 2006 Tomas Mraz - 1.2.10-2 -- added missing buildrequires - -* Mon Feb 13 2006 Tomas Mraz - 1.2.10-1 -- updated to new version (fixes CVE-2006-0645) - -* Fri Feb 10 2006 Jesse Keating - 1.2.9-3.2 -- bump again for double-long bug on ppc(64) - -* Tue Feb 07 2006 Jesse Keating - 1.2.9-3.1 -- rebuilt for new gcc4.1 snapshot and glibc changes - -* Tue Jan 3 2006 Jesse Keating 1.2.9-3 -- rebuilt - -* Fri Dec 9 2005 Tomas Mraz 1.2.9-2 -- replaced *-config scripts with calls to pkg-config to - solve multilib conflicts - -* Wed Nov 23 2005 Tomas Mraz 1.2.9-1 -- upgrade to newest upstream -- removed .la files (#172635) - -* Sun Aug 7 2005 Tomas Mraz 1.2.6-1 -- upgrade to newest upstream (rebuild of dependencies necessary) - -* Mon Jul 4 2005 Tomas Mraz 1.0.25-2 -- split the command line tools to utils subpackage - -* Sat Apr 30 2005 Tomas Mraz 1.0.25-1 -- new upstream version fixes potential DOS attack - -* Sat Apr 23 2005 Tomas Mraz 1.0.24-2 -- readd the version script dropped by upstream - -* Fri Apr 22 2005 Tomas Mraz 1.0.24-1 -- update to the latest upstream version on the 1.0 branch - -* Wed Mar 2 2005 Warren Togami 1.0.20-6 -- gcc4 rebuild - -* Tue Jan 4 2005 Ivana Varekova 1.0.20-5 -- add gnutls Requires zlib-devel (#144069) - -* Mon Nov 08 2004 Colin Walters 1.0.20-4 -- Make gnutls-devel Require libgcrypt-devel - -* Tue Sep 21 2004 Jeff Johnson 1.0.20-3 -- rebuild with release++, otherwise unchanged. - -* Tue Sep 7 2004 Jeff Johnson 1.0.20-2 -- patent tainted SRP code removed. - -* Sun Sep 5 2004 Jeff Johnson 1.0.20-1 -- update to 1.0.20. -- add --with-included-opencdk --with-included-libtasn1 -- add --with-included-libcfg --with-included-lzo -- add --disable-srp-authentication. -- do "make check" after build. - -* Fri Mar 21 2003 Jeff Johnson 0.9.2-1 -- upgrade to 0.9.2 - -* Tue Jun 25 2002 Jeff Johnson 0.4.4-1 -- update to 0.4.4. - -* Fri Jun 21 2002 Tim Powers -- automated rebuild - -* Sat May 25 2002 Jeff Johnson 0.4.3-1 -- update to 0.4.3. - -* Tue May 21 2002 Jeff Johnson 0.4.2-1 -- update to 0.4.2. -- change license to LGPL. -- include splint annotations patch. - -* Tue Apr 2 2002 Nalin Dahyabhai 0.4.0-1 -- update to 0.4.0 - -* Thu Jan 17 2002 Nalin Dahyabhai 0.3.2-1 -- update to 0.3.2 - -* Thu Jan 10 2002 Nalin Dahyabhai 0.3.0-1 -- add a URL - -* Thu Dec 20 2001 Nalin Dahyabhai -- initial package +%autochangelog diff --git a/hobble-gnutls b/hobble-gnutls index 0989b6c..dd914a5 100755 --- a/hobble-gnutls +++ b/hobble-gnutls @@ -6,10 +6,3 @@ if [ "$1" = "-e" ] ; then else CMD="rm -f" fi - -# SRP -for f in auth/srp_sb64.c auth/srp_passwd.c auth/srp_rsa.c \ - srp.c auth/srp.c ext/srp.c ; do - eval "$CMD lib/$f" -done - diff --git a/sources b/sources index b005a4a..f8d02bd 100644 --- a/sources +++ b/sources @@ -1,3 +1 @@ -SHA512 (gnutls-3.6.15.tar.xz) = f757d1532198f44bcad7b73856ce6a05bab43f6fb77fcc81c59607f146202f73023d0796d3e1e7471709cf792c8ee7d436e19407e0601bc0bda2f21512b3b01c -SHA512 (gnutls-3.6.15.tar.xz.sig) = a6dbb6093fefddce4c76ce0015d1e0ff7bb712985007c5c6bd5ed6a8cd7529ab250bcbc98b70beeb9dc1b43dcfc65495c77b9abb43e690f24eb7bf0042af1f68 -SHA512 (gpgkey-462225C3B46F34879FC8496CD605848ED7E69871.gpg) = a74b92826fd0e5388c9f6d9231959e38b26aeef83138648fab66df951d8e1a4db5302b569d08515d4d6443e5e4f6c466f98319f330c820790260d22a9b9f7173 +SHA512 (gnutls-3.7.6.tar.xz) = f872339df80ec31d292821ff00eaafbe50e0bd4cdbb86e21e4f78541cd0a26d843596d5e69c91de4db8ce7d027fc639ae6462b57d89fb116162ae63c5a97486a