[packit] 3.8.1 upstream release

Upstream tag: 3.8.1
Upstream commit: 513570a5

.gitignore

@@ -140,3 +140,9 @@ gnutls-2.10.1-nosrp.tar.bz2
 /gnutls-3.7.5.tar.xz
 /gnutls-3.7.6.tar.xz
 /gnutls-3.7.7.tar.xz
+/gnutls-3.7.8.tar.xz
+/gnutls-3.8.0.tar.xz
+/gnutls-3.8.0.tar.xz.sig
+/gnutls-release-keyring.gpg
+/gnutls-3.8.1.tar.xz
+/gnutls-3.8.1.tar.xz.sig

.packit.yaml

@@ -15,7 +15,6 @@ actions:
   post-upstream-clone:
     - "wget https://src.fedoraproject.org/rpms/gnutls/raw/main/f/gnutls.spec"
     - "wget https://src.fedoraproject.org/rpms/gnutls/raw/main/f/gnutls-3.2.7-rpath.patch"
-    - "wget https://src.fedoraproject.org/rpms/gnutls/raw/main/f/gnutls-3.6.7-no-now-guile.patch"
   get-current-version:
     - "git describe --abbrev=0"
   create-archive:

README.packit

@@ -1,3 +1,3 @@
 This repository is maintained by packit.
 https://packit.dev/
-The file was generated using packit 0.55.0.
+The file was generated using packit 0.78.0.

gnutls-3.6.7-no-now-guile.patch

@@ -1,11 +0,0 @@
---- a/guile/src/Makefile.in	2019-03-27 11:51:55.984398001 +0100
-+++ b/guile/src/Makefile.in	2019-03-27 11:52:27.259626076 +0100
-@@ -1472,7 +1472,7 @@
- # Use '-module' to build a "dlopenable module", in Libtool terms.
- # Use '-undefined' to placate Libtool on Windows; see
- # <https://lists.gnutls.org/pipermail/gnutls-devel/2014-December/007294.html>.
--guile_gnutls_v_2_la_LDFLAGS = -module -no-undefined
-+guile_gnutls_v_2_la_LDFLAGS = -module -no-undefined -Wl,-z,lazy
- 
- # Linking against GnuTLS.
- GNUTLS_CORE_LIBS = $(top_builddir)/lib/libgnutls.la

gnutls-3.7.7-fix-ktls.patch

@@ -1,13 +0,0 @@
-diff --color -rup a/lib/handshake.c b/lib/handshake.c
---- a/lib/handshake.c	2022-07-28 12:44:40.000000000 +0200
-+++ b/lib/handshake.c	2022-07-29 12:30:00.110002282 +0200
-@@ -2861,7 +2861,8 @@ int gnutls_handshake(gnutls_session_t se
- 
- #ifdef ENABLE_KTLS
- 		if (_gnutls_config_is_ktls_enabled()) {
--			if (session->internals.pull_func ||
-+			if ((session->internals.pull_func &&
-+			    session->internals.pull_func != system_read) ||
- 			    session->internals.push_func) {
- 				_gnutls_audit_log(session,
- 						  "Not enabling KTLS with "

gnutls-3.7.8-ktls_disable_keyupdate_test.patch

@@ -0,0 +1,13 @@
+diff --git a/tests/Makefile.am b/tests/Makefile.am
+index 2872cb1aa..247dfd3d8 100644
+--- a/tests/Makefile.am
++++ b/tests/Makefile.am
+@@ -504,8 +504,6 @@ endif
+ if ENABLE_KTLS
+ indirect_tests += gnutls_ktls
+ dist_check_SCRIPTS += ktls.sh
+-indirect_tests += ktls_keyupdate
+-dist_check_SCRIPTS += ktls_keyupdate.sh
+ endif
+ 
+ if !WINDOWS

gnutls-3.7.8-ktls_skip_tls12_chachapoly_test.patch

@@ -0,0 +1,12 @@
+diff --git a/tests/gnutls_ktls.c b/tests/gnutls_ktls.c
+index 919270778..778a2f94a 100644
+--- a/tests/gnutls_ktls.c
++++ b/tests/gnutls_ktls.c
+@@ -351,7 +351,6 @@ void doit(void)
+ 	run("NORMAL:-VERS-ALL:+VERS-TLS1.2:-CIPHER-ALL:+AES-128-GCM");
+ 	run("NORMAL:-VERS-ALL:+VERS-TLS1.2:-CIPHER-ALL:+AES-256-GCM");
+ 	run("NORMAL:-VERS-ALL:+VERS-TLS1.2:-CIPHER-ALL:+AES-128-CCM");
+-	run("NORMAL:-VERS-ALL:+VERS-TLS1.2:-CIPHER-ALL:+CHACHA20-POLY1305");
+ 	run("NORMAL:-VERS-ALL:+VERS-TLS1.3:-CIPHER-ALL:+AES-128-GCM");
+ 	run("NORMAL:-VERS-ALL:+VERS-TLS1.3:-CIPHER-ALL:+AES-256-GCM");
+ 	run("NORMAL:-VERS-ALL:+VERS-TLS1.3:-CIPHER-ALL:+AES-128-CCM");

gnutls-3.8.2-tests-ignore-sigpipe.patch

@@ -0,0 +1,51 @@
+From 6334d0a55ebb077487e922e9936ac42d5ab3ae2a Mon Sep 17 00:00:00 2001
+From: Daiki Ueno <ueno@gnu.org>
+Date: Mon, 28 Aug 2023 15:47:04 +0900
+Subject: [PATCH] tests: ignore SIGPIPE in forking tests if the parent is TLS
+ client
+
+If the tests are forking and the parent process is a client, care must
+be taken to handle SIGPIPE reported by the child process (server) when
+the client closes the connection.
+
+This hadn't been exposed until commit
+dd79ac9bcf90012e090726adf7c1940bcce8333f, thanks to the fact that the
+parent process kept the other pipe end which effectively prevented a
+"broken pipe".
+
+Signed-off-by: Daiki Ueno <ueno@gnu.org>
+---
+ tests/mini-tls-nonblock.c | 2 ++
+ tests/srp.c               | 3 +++
+ 2 files changed, 5 insertions(+)
+
+diff --git a/tests/mini-tls-nonblock.c b/tests/mini-tls-nonblock.c
+index 853f841fbd..fae9b44321 100644
+--- a/tests/mini-tls-nonblock.c
++++ b/tests/mini-tls-nonblock.c
+@@ -287,6 +287,8 @@ static void start(const char *msg, const char *prio, unsigned expl)
+ 
+ 	success("trying %s\n", msg);
+ 
++	signal(SIGPIPE, SIG_IGN);
++
+ 	ret = socketpair(AF_UNIX, SOCK_STREAM, 0, fd);
+ 	if (ret < 0) {
+ 		perror("socketpair");
+diff --git a/tests/srp.c b/tests/srp.c
+index d2b0689553..4a9c00b5b8 100644
+--- a/tests/srp.c
++++ b/tests/srp.c
+@@ -271,6 +271,9 @@ static void start(const char *name, const char *prio, const char *user,
+ 	int ret;
+ 
+ 	success("testing: %s\n", name);
++
++	signal(SIGPIPE, SIG_IGN);
++
+ 	ret = socketpair(AF_UNIX, SOCK_STREAM, 0, fd);
+ 	if (ret < 0) {
+ 		perror("socketpair");
+-- 
+GitLab
+

gnutls.spec

@@ -1,28 +1,60 @@
-# This spec file has been automatically updated
-Version: 3.7.7
+%define srpmhash() %{lua:
+local files = rpm.expand("%_specdir/gnutls.spec")
+for i, p in ipairs(patches) do
+   files = files.." "..p
+end
+for i, p in ipairs(sources) do
+   files = files.." "..p
+end
+local sha256sum = assert(io.popen("cat "..files.."| sha256sum"))
+local hash = sha256sum:read("*a")
+sha256sum:close()
+print(string.sub(hash, 0, 16))
+}
+
+Version: 3.8.1
 Release: %{?autorelease}%{!?autorelease:1%{?dist}}
-Patch1:	gnutls-3.6.7-no-now-guile.patch
-Patch2:	gnutls-3.2.7-rpath.patch
-Patch3: gnutls-3.7.7-fix-ktls.patch
+Patch: gnutls-3.2.7-rpath.patch
+
+# Delete only after the kernel has been patched for thested systems
+Patch: gnutls-3.7.8-ktls_disable_keyupdate_test.patch
+
+# follow https://gitlab.com/gnutls/gnutls/-/issues/1443
+Patch: gnutls-3.7.8-ktls_skip_tls12_chachapoly_test.patch
+
+Patch: gnutls-3.8.2-tests-ignore-sigpipe.patch
 
 %bcond_without bootstrap
 %bcond_without dane
-%if 0%{?rhel}
-%bcond_with guile
 %bcond_without fips
-%else
-%bcond_without guile
-%bcond_without fips
-%endif
 %bcond_with tpm12
+%bcond_without tpm2
 %bcond_without gost
+%bcond_with certificate_compression
+%bcond_without tests
+
+%if 0%{?fedora} < 38
+%bcond_without srp
+%else
+%bcond_with srp
+%endif
+
+%if 0%{?fedora}
+%bcond_without mingw
+%else
+%bcond_with mingw
+%endif
+
 
 Summary: A TLS protocol implementation
 Name: gnutls
 # The libraries are LGPLv2.1+, utilities are GPLv3+
-License: GPLv3+ and LGPLv2+
+License: GPL-3.0-or-later AND LGPL-2.1-or-later
 BuildRequires: p11-kit-devel >= 0.21.3, gettext-devel
-BuildRequires: zlib-devel, readline-devel, libtasn1-devel >= 4.3
+BuildRequires: readline-devel, libtasn1-devel >= 4.3
+%if %{with certificate_compression}
+BuildRequires: zlib-devel, brotli-devel, libzstd-devel
+%endif
 %if %{with bootstrap}
 BuildRequires: automake, autoconf, gperf, libtool, texinfo
 %endif
@@ -30,10 +62,14 @@ BuildRequires: nettle-devel >= 3.5.1
 %if %{with tpm12}
 BuildRequires: trousers-devel >= 0.3.11.2
 %endif
+%if %{with tpm2}
+BuildRequires: tpm2-tss-devel >= 3.0.3
+%endif
 BuildRequires: libidn2-devel
 BuildRequires: libunistring-devel
-BuildRequires: net-tools, datefudge, softhsm, gcc, gcc-c++
+BuildRequires: net-tools, softhsm, gcc, gcc-c++
 BuildRequires: gnupg2
+BuildRequires: git-core
 
 # for a sanity check on cert loading
 BuildRequires: p11-kit-trust, ca-certificates
@@ -48,15 +84,32 @@ Recommends: trousers >= 0.3.11.2
 %if %{with dane}
 BuildRequires: unbound-devel unbound-libs
 %endif
-%if %{with guile}
-BuildRequires: guile22-devel
-%endif
 BuildRequires: make gtk-doc
+
+%if %{with mingw}
+BuildRequires:  mingw32-filesystem >= 95
+BuildRequires:  mingw32-gcc
+BuildRequires:  mingw32-gcc-c++
+BuildRequires:  mingw32-libtasn1 >= 4.3
+BuildRequires:  mingw32-readline
+BuildRequires:  mingw32-zlib
+BuildRequires:  mingw32-p11-kit >= 0.23.1
+BuildRequires:  mingw32-nettle >= 3.6
+BuildRequires:  mingw64-filesystem >= 95
+BuildRequires:  mingw64-gcc
+BuildRequires:  mingw64-gcc-c++
+BuildRequires:  mingw64-libtasn1 >= 4.3
+BuildRequires:  mingw64-readline
+BuildRequires:  mingw64-zlib
+BuildRequires:  mingw64-p11-kit >= 0.23.1
+BuildRequires:  mingw64-nettle >= 3.6
+%endif
+
 URL: http://www.gnutls.org/
 %define short_version %(echo %{version} | grep -m1 -o "[0-9]*\.[0-9]*" | head -1)
 Source0: https://www.gnupg.org/ftp/gcrypt/gnutls/v%{short_version}/%{name}-%{version}.tar.xz
 Source1: https://www.gnupg.org/ftp/gcrypt/gnutls/v%{short_version}/%{name}-%{version}.tar.xz.sig
-Source2: gnutls-release-keyring.gpg
+Source2: https://gnutls.org/gnutls-release-keyring.gpg
 
 # Wildcard bundling exception https://fedorahosted.org/fpc/ticket/174
 Provides: bundled(gnulib) = 20130424
@@ -75,7 +128,7 @@ Requires: %{name}-dane%{?_isa} = %{version}-%{release}
 Requires: pkgconfig
 
 %package utils
-License: GPLv3+
+License: GPL-3.0-or-later
 Summary: Command line tools for TLS protocol
 Requires: %{name}%{?_isa} = %{version}-%{release}
 %if %{with dane}
@@ -88,13 +141,6 @@ Summary: A DANE protocol implementation for GnuTLS
 Requires: %{name}%{?_isa} = %{version}-%{release}
 %endif
 
-%if %{with guile}
-%package guile
-Summary: Guile bindings for the GNUTLS library
-Requires: %{name}%{?_isa} = %{version}-%{release}
-Requires: guile22
-%endif
-
 %description
 GnuTLS is a secure communications library implementing the SSL, TLS and DTLS 
 protocols and technologies around them. It provides a simple C language 
@@ -138,22 +184,39 @@ This package contains library that implements the DANE protocol for verifying
 TLS certificates through DNSSEC.
 %endif
 
-%if %{with guile}
-%description guile
-GnuTLS is a secure communications library implementing the SSL, TLS and DTLS 
-protocols and technologies around them. It provides a simple C language 
-application programming interface (API) to access the secure communications 
-protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and 
-other required structures. 
-This package contains Guile bindings for the library.
+%if %{with mingw}
+%package -n mingw32-%{name}
+Summary:        MinGW GnuTLS TLS/SSL encryption library
+Requires:       pkgconfig
+Requires:       mingw32-libtasn1 >= 4.3
+BuildArch:      noarch
+
+%description -n mingw32-gnutls
+GnuTLS TLS/SSL encryption library.  This library is cross-compiled
+for MinGW.
+
+%package -n mingw64-%{name}
+Summary:        MinGW GnuTLS TLS/SSL encryption library
+Requires:       pkgconfig
+Requires:       mingw64-libtasn1 >= 4.3
+BuildArch:      noarch
+
+%description -n mingw64-gnutls
+GnuTLS TLS/SSL encryption library.  This library is cross-compiled
+for MinGW.
+
+%{?mingw_debug_package}
 %endif
 
 %prep
 %{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}'
 
-%autosetup -p1
+%autosetup -p1 -S git
+
+%build
+%define _lto_cflags %{nil}
+
 %if %{with bootstrap}
-rm -f src/libopts/*.c src/libopts/*.h src/libopts/compat/*.c src/libopts/compat/*.h
 autoreconf -fi
 %endif
 
@@ -162,32 +225,33 @@ rm -f lib/minitasn1/*.c lib/minitasn1/*.h
 
 echo "SYSTEM=NORMAL" >> tests/system.prio
 
-# Note that we explicitly enable SHA1, as SHA1 deprecation is handled
-# via the crypto policies
-
-%build
-%define _lto_cflags %{nil}
-
 CCASFLAGS="$CCASFLAGS -Wa,--generate-missing-build-notes=yes"
 export CCASFLAGS
 
-%if %{with guile}
-# These should be checked by m4/guile.m4 instead of configure.ac
-# taking into account of _guile_suffix
-guile_snarf=%{_bindir}/guile-snarf2.2
-export guile_snarf
-GUILD=%{_bindir}/guild2.2
-export GUILD
+%if %{with fips}
+eval $(sed -n 's/^\(\(NAME\|VERSION_ID\)=.*\)/OS_\1/p' /etc/os-release)
+export FIPS_MODULE_NAME="$OS_NAME ${OS_VERSION_ID%%.*} %name"
 %endif
 
+mkdir native_build
+pushd native_build
+%global _configure ../configure
 %configure \
 %if %{with fips}
            --enable-fips140-mode \
+           --with-fips140-module-name="$FIPS_MODULE_NAME" \
+           --with-fips140-module-version=%{version}-%{srpmhash} \
 %endif
 %if %{with gost}
     	   --enable-gost \
 %else
 	   --disable-gost \
+%endif
+%if %{with srp}
+           --enable-srp-authentication \
+%endif
+%ifarch %{ix86}
+           --disable-year2038 \
 %endif
 	   --enable-sha1-support \
            --disable-static \
@@ -200,32 +264,60 @@ export GUILD
 %else
            --without-tpm \
 %endif
-           --htmldir=%{_docdir}/manual \
-%if %{with guile}
-           --enable-guile \
-           --with-guile-extension-dir=%{_libdir}/guile/2.2 \
+%if %{with tpm2}
+           --with-tpm2 \
 %else
-           --disable-guile \
+           --without-tpm2 \
 %endif
+           --enable-ktls \
+           --htmldir=%{_docdir}/manual \
 %if %{with dane}
            --with-unbound-root-key-file=/var/lib/unbound/root.key \
            --enable-libdane \
 %else
            --disable-libdane \
+%endif
+%if %{with certificate_compression}
+	   --with-zlib --with-brotli --with-zstd \
+%else
+	   --without-zlib --without-brotli --without-zstd \
 %endif
            --disable-rpath \
-           --with-default-priority-string="@SYSTEM" \
-		   --enable-ktls
+           --with-default-priority-string="@SYSTEM"
 
-make %{?_smp_mflags} V=1
+%make_build
+popd
+
+%if %{with mingw}
+# MinGW does not support CCASFLAGS
+export CCASFLAGS=""
+%mingw_configure \
+%if %{with srp}
+    --enable-srp-authentication \
+%endif
+    --enable-sha1-support \
+    --disable-static \
+    --disable-openssl-compatibility \
+    --disable-non-suiteb-curves \
+    --disable-libdane \
+    --disable-rpath \
+    --disable-nls \
+    --disable-cxx \
+    --enable-local-libopts \
+    --enable-shared \
+    --without-tpm \
+    --with-included-unistring \
+    --disable-doc \
+    --with-default-priority-string="@SYSTEM"
+%mingw_make %{?_smp_mflags}
+%endif
 
 %install
-make install DESTDIR=$RPM_BUILD_ROOT
+%make_install -C native_build
+pushd native_build
 make -C doc install-html DESTDIR=$RPM_BUILD_ROOT
 rm -f $RPM_BUILD_ROOT%{_infodir}/dir
 rm -f $RPM_BUILD_ROOT%{_libdir}/*.la
-rm -f $RPM_BUILD_ROOT%{_libdir}/guile/2.2/guile-gnutls*.a
-rm -f $RPM_BUILD_ROOT%{_libdir}/guile/2.2/guile-gnutls*.la
 %if %{without dane}
 rm -f $RPM_BUILD_ROOT%{_libdir}/pkgconfig/gnutls-dane.pc
 %endif
@@ -234,8 +326,10 @@ rm -f $RPM_BUILD_ROOT%{_libdir}/pkgconfig/gnutls-dane.pc
 # doing it twice should be a no-op the second time,
 # and this way we avoid redefining it and missing a future change
 %{__spec_install_post}
-./lib/fipshmac "$RPM_BUILD_ROOT%{_libdir}/libgnutls.so.30" > $RPM_BUILD_ROOT%{_libdir}/.gnutls.hmac
-sed -i "s^$RPM_BUILD_ROOT/usr^^" $RPM_BUILD_ROOT%{_libdir}/.gnutls.hmac
+fname=`basename $RPM_BUILD_ROOT%{_libdir}/libgnutls.so.30.*.*`
+./lib/fipshmac "$RPM_BUILD_ROOT%{_libdir}/libgnutls.so.30" > "$RPM_BUILD_ROOT%{_libdir}/.$fname.hmac"
+sed -i "s^$RPM_BUILD_ROOT/usr^^" "$RPM_BUILD_ROOT%{_libdir}/.$fname.hmac"
+ln -s ".$fname.hmac" "$RPM_BUILD_ROOT%{_libdir}/.libgnutls.so.30.hmac"
 %endif
 
 %if %{with fips}
@@ -247,14 +341,48 @@ sed -i "s^$RPM_BUILD_ROOT/usr^^" $RPM_BUILD_ROOT%{_libdir}/.gnutls.hmac
 %endif
 
 %find_lang gnutls
+popd
+
+%if %{with mingw}
+%mingw_make_install
+
+# Remove .la files
+rm -f $RPM_BUILD_ROOT%{mingw32_libdir}/*.la
+rm -f $RPM_BUILD_ROOT%{mingw64_libdir}/*.la
+
+# The .def files aren't interesting for other binaries
+rm -f $RPM_BUILD_ROOT%{mingw32_bindir}/*.def
+rm -f $RPM_BUILD_ROOT%{mingw64_bindir}/*.def
+
+# Remove info and man pages which duplicate stuff in Fedora already.
+rm -rf $RPM_BUILD_ROOT%{mingw32_infodir}
+rm -rf $RPM_BUILD_ROOT%{mingw32_mandir}
+rm -rf $RPM_BUILD_ROOT%{mingw32_docdir}/gnutls
+
+rm -rf $RPM_BUILD_ROOT%{mingw64_infodir}
+rm -rf $RPM_BUILD_ROOT%{mingw64_mandir}
+rm -rf $RPM_BUILD_ROOT%{mingw64_docdir}/gnutls
+
+# Remove test libraries
+rm -f $RPM_BUILD_ROOT%{mingw32_libdir}/crypt32.dll*
+rm -f $RPM_BUILD_ROOT%{mingw32_libdir}/ncrypt.dll*
+rm -f $RPM_BUILD_ROOT%{mingw64_libdir}/crypt32.dll*
+rm -f $RPM_BUILD_ROOT%{mingw64_libdir}/ncrypt.dll*
+
+%mingw_debug_install_post
+%endif
 
 %check
+%if %{with tests}
+pushd native_build
 make check %{?_smp_mflags} GNUTLS_SYSTEM_PRIORITY_FILE=/dev/null
+popd
+%endif
 
-%files -f gnutls.lang
+%files -f native_build/gnutls.lang
 %{_libdir}/libgnutls.so.30*
 %if %{with fips}
-%{_libdir}/.gnutls.hmac
+%{_libdir}/.libgnutls.so.30*.hmac
 %endif
 %doc README.md AUTHORS NEWS THANKS
 %license LICENSE doc/COPYING doc/COPYING.LESSER
@@ -280,7 +408,9 @@ make check %{?_smp_mflags} GNUTLS_SYSTEM_PRIORITY_FILE=/dev/null
 %{_bindir}/ocsptool
 %{_bindir}/psktool
 %{_bindir}/p11tool
+%if %{with srp}
 %{_bindir}/srptool
+%endif
 %if %{with dane}
 %{_bindir}/danetool
 %endif
@@ -293,13 +423,42 @@ make check %{?_smp_mflags} GNUTLS_SYSTEM_PRIORITY_FILE=/dev/null
 %{_libdir}/libgnutls-dane.so.*
 %endif
 
-%if %{with guile}
-%files guile
-%{_libdir}/guile/2.2/guile-gnutls*.so*
-%{_libdir}/guile/2.2/site-ccache/gnutls.go
-%{_libdir}/guile/2.2/site-ccache/gnutls/extra.go
-%{_datadir}/guile/site/2.2/gnutls.scm
-%{_datadir}/guile/site/2.2/gnutls/extra.scm
+%if %{with mingw}
+%files -n mingw32-%{name}
+%license LICENSE doc/COPYING doc/COPYING.LESSER
+%{mingw32_bindir}/certtool.exe
+%{mingw32_bindir}/gnutls-cli-debug.exe
+%{mingw32_bindir}/gnutls-cli.exe
+%{mingw32_bindir}/gnutls-serv.exe
+%{mingw32_bindir}/libgnutls-30.dll
+%{mingw32_bindir}/ocsptool.exe
+%{mingw32_bindir}/p11tool.exe
+%{mingw32_bindir}/psktool.exe
+%if %{with srp}
+%{mingw32_bindir}/srptool.exe
+%endif
+%{mingw32_libdir}/libgnutls.dll.a
+%{mingw32_libdir}/libgnutls-30.def
+%{mingw32_libdir}/pkgconfig/gnutls.pc
+%{mingw32_includedir}/gnutls/
+
+%files -n mingw64-%{name}
+%license LICENSE doc/COPYING doc/COPYING.LESSER
+%{mingw64_bindir}/certtool.exe
+%{mingw64_bindir}/gnutls-cli-debug.exe
+%{mingw64_bindir}/gnutls-cli.exe
+%{mingw64_bindir}/gnutls-serv.exe
+%{mingw64_bindir}/libgnutls-30.dll
+%{mingw64_bindir}/ocsptool.exe
+%{mingw64_bindir}/p11tool.exe
+%{mingw64_bindir}/psktool.exe
+%if %{with srp}
+%{mingw64_bindir}/srptool.exe
+%endif
+%{mingw64_libdir}/libgnutls.dll.a
+%{mingw64_libdir}/libgnutls-30.def
+%{mingw64_libdir}/pkgconfig/gnutls.pc
+%{mingw64_includedir}/gnutls/
 %endif
 
 %changelog

sources

@@ -1 +1,3 @@
-SHA512 (gnutls-3.7.7.tar.xz) = ba00b20126379ec7e96c6bfa606cfb7bb0d9a5853318b29b5278a42a85ae40d39d8442778938e1f165debcdb1adaf9c63bcec59a4eb3387dd1ac99b08bcc5c08
+SHA512 (gnutls-3.8.1.tar.xz) = 22e78db86b835843df897d14ad633d8a553c0f9b1389daa0c2f864869c6b9ca889028d434f9552237dc4f1b37c978fbe0cce166e3768e5d4e8850ff69a6fc872
+SHA512 (gnutls-3.8.1.tar.xz.sig) = f03fde611927c83f6b57af695d5610ba3cefbb88a261cf5485c94b3fb32c7480a77c68a353a6a28185337195e30011d6b5578c53ea4180a656cf7b175156f7f1
+SHA512 (gnutls-release-keyring.gpg) = 5c14d83f4f37bd319c652db0d76fc5bb04752fb461bbe853e25b20ffe41d6d14faae6c0bdd0193ac6242975bf1205ce606a9d0082261cc4581fd680abfcdbd4d