Restore gmp tarball to sources

Drop RHEL10-specific patch
The test was fixed to be FIPS-compliant: https://gitlab.com/gnutls/gnutls/-/merge_requests/1932
2025-11-25 09:54:16 -05:00 · 2025-11-25 14:42:39 +00:00 · 2025-11-25 10:30:27 +01:00 · 2025-11-21 16:14:40 +09:00 · 2025-11-21 16:12:20 +09:00 · 2025-11-21 11:48:31 +09:00
4 changed files with 16 additions and 16 deletions
--- a/.packit.yaml
+++ b/.packit.yaml
@ -28,5 +28,4 @@ actions:
 jobs:
  - job: propose_downstream
    trigger: release
-    metadata:
-      dist_git_branches: fedora-all
+    dist_git_branches: fedora-all
--- a/gmp-6.2.1-c23.patch
+++ b/gmp-6.2.1-c23.patch
@ -0,0 +1,13 @@
+diff --git a/acinclude.m4 b/acinclude.m4
+index 906071c..a466b7c 100644
+--- a/acinclude.m4
+++ b/acinclude.m4
+@@ -609,7 +609,7 @@ GMP_PROG_CC_WORKS_PART([$1], [long long reliability test 1],
+ 
+ #if defined (__GNUC__) && ! defined (__cplusplus)
+ typedef unsigned long long t1;typedef t1*t2;
+-void g(){}
+void g(int, t2, t1, t2, t2, int){}
+ void h(){}
+ static __inline__ t1 e(t2 rp,t2 up,int n,t1 v0)
+ {t1 c,x,r;int i;if(v0){c=1;for(i=1;i<n;i++){x=up[i];r=x+1;rp[i]=r;}}return c;}
--- a/gnutls.spec
+++ b/gnutls.spec
@ -31,7 +31,7 @@ Patch: gnutls-3.8.8-tests-ktls-skip-tls12-chachapoly.patch
 %endif
 %bcond_without certificate_compression
 %bcond_without leancrypto
-%bcond_with crypto_auditing
+%bcond_without crypto_auditing
 %bcond_without tests

 %if 0%{?fedora} && 0%{?fedora} < 38
@ -140,10 +140,6 @@ Source101:	gmp-6.2.1-intel-cet.patch
 Source102:	gmp-6.2.1-c23.patch
 %endif

-%if 0%{?rhel} >= 10
-Source201:	gnutls-3.8.8-tests-rsa-default.patch
-%endif
-
 %if %{with leancrypto}
 Provides:	bundled(leancrypto) = 1.6.0
 Source300:	leancrypto-1.6.0.tar.gz
@ -281,10 +277,6 @@ patch -p1 < %{SOURCE102}
 popd
 %endif

-%if 0%{?rhel} >= 10
-patch -p1 < %{SOURCE201}
-%endif
-
 %build
 %define _lto_cflags %{nil}

@ -360,11 +352,6 @@ eval $(sed -n 's/^\(\(NAME\|VERSION_ID\)=.*\)/OS_\1/p' /etc/os-release)
 export FIPS_MODULE_NAME="$OS_NAME ${OS_VERSION_ID%%.*} %name"
 %endif

-# F42 MinGW only has Nettle 3.7
-%if %{with mingw}
-sed -i 's/NETTLE_MINIMUM=3.10/NETTLE_MINIMUM=3.7/' configure
-%endif
-
 mkdir native_build
 pushd native_build

--- a/1
+++ b/1
@ -1,4 +1,5 @@
 SHA512 (gnutls-3.8.11.tar.xz) = 68f9e5bec3aa6686fd3319cc9c88a5cc44e2a75144049fc9de5fb55fef2241b4e16996af4be5dd48308abbee8cfaed6c862903f6bb89aff5dfa5410075bd7386
 SHA512 (gnutls-3.8.11.tar.xz.sig) = 90883e5736299b103844ca42b85d371969ef66b50b60cb185e814ad9978598796e9ed07a590245ff28ac6ac084b1dee93fae0845576464583a5941835990957d
 SHA512 (gnutls-release-keyring.gpg) = 8c2b39239d1d8c5319757fcf669f28a11de7f8ec4a726f9904c57ba8105bea80240083c0de71b747115907bab46569f10cf58004137cc7884ac5c20f8319ae0a
+SHA512 (gmp-6.2.1.tar.xz) = c99be0950a1d05a0297d65641dd35b75b74466f7bf03c9e8a99895a3b2f9a0856cd17887738fa51cf7499781b65c049769271cbcb77d057d2e9f1ec52e07dd84
 SHA512 (leancrypto-1.6.0.tar.gz) = cb6ace4a1642208dd7656b62a48e99d6261f471aa7967b738057745a4534abfa11d380dd5de98a737c0c13b1e1cb37ce780e02297eefc1cf839581629d34e100
Author	SHA1	Message	Date
Yaakov Selkowitz	cbe66ee3a7	Restore gmp tarball to sources	2025-11-25 09:54:16 -05:00
Yaakov Selkowitz	33160d08cb	Drop RHEL10-specific patch The test was fixed to be FIPS-compliant: https://gitlab.com/gnutls/gnutls/-/merge_requests/1932	2025-11-25 14:42:39 +00:00
Alexander Sosedkin	98206a06fe	Disable native assembly to work around bz2416812	2025-11-25 10:30:27 +01:00
Daniel P. Berrangé	c5fcada2f3	Add missing Provides: bundled(..) for gmp & leancrypto Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>	2025-11-21 16:14:40 +09:00
Daiki Ueno	9f95ff6e69	Remove unnecessary PKG_CONFIG_PATH setting Signed-off-by: Daiki Ueno <dueno@redhat.com>	2025-11-21 16:12:20 +09:00
Daiki Ueno	3078b09e41	Enable crypto-auditing probes Signed-off-by: Daiki Ueno <dueno@redhat.com>	2025-11-21 11:48:31 +09:00
Daiki Ueno	7441432f8c	Minor fixes to spec file and packit configuration Signed-off-by: Daiki Ueno <dueno@redhat.com>	2025-11-21 11:48:21 +09:00
Daiki Ueno	000d285047	Update to 3.8.11 upstream release - Resolves: rhbz#2416041 Upstream tag: 3.8.11 Upstream commit: b841c70e Commit authored by Packit automation (https://packit.dev/)	2025-11-20 19:40:16 +09:00
Krenzelok Frantisek	92cc61b531	Revert "Enable kTLS by default" This reverts commit `330d52f8da`.	2025-08-26 17:33:12 +02:00
Krenzelok Frantisek	330d52f8da	Enable kTLS by default Resolves: rhbz#2130000 - https://fedoraproject.org/wiki/Changes/KTLSSupportForGnuTLS. - kTLS is now enabled by default if all requirements are met. - Modify the docs to reflect the change of defaults. - Picked-up a patch that fixes state transition in the KTLS code path.	2025-08-25 17:39:12 +02:00
Zoltan Fridrich	7be798d940	Rebuild Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>	2025-07-29 15:04:46 +02:00
Fedora Release Engineering	b690a96329	Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild	2025-07-23 22:53:49 +00:00
Daiki Ueno	e45aaed8ab	Update to 3.8.10 upstream release Also update the bundled leancrypto to 1.5.0. Signed-off-by: Daiki Ueno <dueno@redhat.com>	2025-07-10 05:48:08 +09:00
Yaakov Selkowitz	25f7cc5fad	Fix build on kernel 6.14+ kTLS KeyUpdate is supported as of this version, leading to the ktls_keyupdate.sh being able to pass thereon, and therefore the builder's kernel must now be checked here too. https://gitlab.com/gnutls/gnutls/-/merge_requests/1934	2025-07-06 18:20:47 -04:00
Daiki Ueno	5bef1c86aa	Update leancrypto to 1.3.0 Signed-off-by: Daiki Ueno <dueno@redhat.com>	2025-04-02 17:34:52 +09:00
Peter Robinson	c3aaff5c62	Bump for gmp build	2025-03-30 11:46:20 +01:00
Zoltan Fridrich	63494651c6	Rebuild GnuTLS Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>	2025-03-03 11:17:54 +01:00
Daiki Ueno	6ea0d5328d	Bump nettle dependency to 3.10.1 Signed-off-by: Daiki Ueno <dueno@redhat.com>	2025-02-17 10:32:20 +09:00
Daiki Ueno	b5e51ef2d2	Rebuild against nettle 3.10.1 Signed-off-by: Daiki Ueno <dueno@redhat.com>	2025-02-14 14:58:10 +09:00
Daiki Ueno	9c5597be5c	Switch from liboqs to leancrypto Signed-off-by: Daiki Ueno <dueno@redhat.com>	2025-02-10 18:17:05 +09:00
Daiki Ueno	6c3a0c118e	Update to gnutls 3.8.9 release Signed-off-by: Daiki Ueno <dueno@redhat.com>	2025-02-10 11:04:35 +09:00
Yaakov Selkowitz	e026bdad11	Fix ELN build The bundled gmp (for RHEL builds) needs a C23 fix for a configure test: https://src.fedoraproject.org/rpms/gmp/pull-request/8 Also, one test needs to be modified as the DEFAULT crypto policy rejects TLS ciphers with RSA key exchange in RHEL 10: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10-beta/html/considerations_in_adopting_rhel_10/security#security	2025-02-05 11:30:38 -05:00
Daiki Ueno	c25fdb6fa9	Disable GOST in RHEL-9 or later Resolves: RHEL-56919 Signed-off-by: Daiki Ueno <dueno@redhat.com>	2025-01-22 23:17:41 -05:00