pool/gnutls
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5fcfc4e55e
gnutls/gnutls.spec

384 lines
12 KiB
RPMSpec
Raw Normal View History

OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-16 00:15:20 +01:00
#
Autobuild autoformatter for 73777 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=29
2011-06-16 09:57:04 +02:00
# spec file for package gnutls
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-16 00:15:20 +01:00
#
Accepting request 947389 from home:pmonrealgonzalez:branches:security:tls - Update to 3.7.3: [bsc#1190698, bsc#1190796] * libgnutls: The allowlisting configuration mode has been added to the system-wide settings. In this mode, all the algorithms are initially marked as insecure or disabled, while the applications can re-enable them either through the [overrides] section of the configuration file or the new API (#1172). * The build infrastructure no longer depends on GNU AutoGen for generating command-line option handling, template file parsing in certtool, and documentation generation (#773, #774). This change also removes run-time or bundled dependency on the libopts library, and requires Python 3.6 or later to regenerate the distribution tarball. Note that this brings in known backward incompatibility in command-line tools, such as long options are now case sensitive, while previously they were treated in a case insensitive manner: for example --RSA is no longer a valid option of certtool. The existing scripts using GnuTLS tools may need adjustment for this change. * libgnutls: The tpm2-tss-engine compatible private blobs can be loaded and used as a gnutls_privkey_t (#594). The code was originally written for the OpenConnect VPN project by David Woodhouse. To generate such blobs, use the tpm2tss-genkey tool from tpm2-tss-engine: https://github.com/tpm2-software/tpm2-tss-engine/#rsa-operations or the tpm2_encodeobject tool from unreleased tpm2-tools. * libgnutls: The library now transparently enables Linux KTLS (kernel TLS) when the feature is compiled in with --enable-ktls configuration option (#1113). If the KTLS initialization fails it automatically falls back to the user space implementation. * certtool: The certtool command can now read the Certificate Transparency (RFC 6962) SCT extension (#232). New API functions are also provided to access and manipulate the extension values. OBS-URL: https://build.opensuse.org/request/show/947389 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=57
2022-01-19 12:47:02 +01:00
# Copyright (c) 2022 SUSE LLC
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-16 00:15:20 +01:00
#
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=16
2008-11-02 15:41:35 +01:00
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
- Version update to 3.6.4: ** libgnutls: Added the final (RFC8446) version numbering of the TLS1.3 protocol. ** libgnutls: Corrected regression since 3.6.3 in the callbacks set with gnutls_certificate_set_retrieve_function() which could not handle the case where no certificates were returned, or the callbacks were set to NULL (see #528). ** libgnutls: gnutls_handshake() on server returns early on handshake when no certificate is presented by client and the gnutls_init() flag GNUTLS_ENABLE_EARLY_START is specified. ** libgnutls: Added session ticket key rotation on server side with TOTP. The key set with gnutls_session_ticket_enable_server() is used as a master key to generate time-based keys for tickets. The rotation relates to the gnutls_db_set_cache_expiration() period. ** libgnutls: The 'record size limit' extension is added and preferred to the 'max record size' extension when possible. ** libgnutls: Provide a more flexible PKCS#11 search of trust store certificates. This addresses the problem where the CA certificate doesn't have a subject key identifier whereas the end certificates have an authority key identifier (#569) ** libgnutls: gnutls_privkey_export_gost_raw2(), gnutls_privkey_import_gost_raw(), gnutls_pubkey_export_gost_raw2(), gnutls_pubkey_import_gost_raw() import and export GOST parameters in the "native" little endian format used for these curves. This is an intentional incompatible change with 3.6.3. ** libgnutls: Added support for seperately negotiating client and server certificate types as defined in RFC7250. This mechanism must be explicitly enabled via the GNUTLS_ENABLE_CERT_TYPE_NEG flag in gnutls_init(). OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=10
2018-10-15 10:27:49 +02:00
# Please submit bugfixes or comments via https://bugs.opensuse.org/
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-16 00:15:20 +01:00
#
Autobuild autoformatter for 79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=32
2011-08-24 13:44:23 +02:00
Accepting request 295655 from Base:System - updated to 3.4.0 (released 2015-04-08) ** libgnutls: Added support for AES-CCM and AES-CCM-8 (RFC6655 and RFC7251) ciphersuites. The former are enabled by default, the latter need to be explicitly enabled, since they reduce the overall security level. ** libgnutls: Added support for Chacha20-Poly1305 ciphersuites following draft-mavrogiannopoulos-chacha-tls-05 and draft-irtf-cfrg-chacha20-poly1305-10. That is currently provided as technology preview and is not enabled by default, since there are no assigned ciphersuite points by IETF and there is no guarrantee of compatibility between draft versions. The ciphersuite priority string to enable it is "+CHACHA20-POLY1305". ** libgnutls: Added support for encrypt-then-authenticate in CBC ciphersuites (RFC7366 -taking into account its errata text). This is enabled by default and can be disabled using the %NO_ETM priority string. ** libgnutls: Added support for the extended master secret (triple-handshake fix) following draft-ietf-tls-session-hash-02. ** libgnutls: Added a new simple and hard to misuse AEAD API (crypto.h). ** libgnutls: SSL 3.0 is no longer included in the default priorities list. It has to be explicitly enabled, e.g., with a string like "NORMAL:+VERS-SSL3.0". ** libgnutls: ARCFOUR (RC4) is no longer included in the default priorities list. It has to be explicitly enabled, e.g., with a string like "NORMAL:+ARCFOUR-128". ** libgnutls: DSA signatures and DHE-DSS are no longer included in the default priorities list. They have to be explicitly enabled, e.g., with a string like "NORMAL:+DHE-DSS:+SIGN-DSA-SHA256:+SIGN-DSA-SHA1". The DSA ciphersuites were dropped because they had no deployment at all on the internet, to justify their inclusion. ** libgnutls: The priority string EXPORT was completely removed. The string OBS-URL: https://build.opensuse.org/request/show/295655 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=83
2015-04-18 10:38:18 +02:00
%define gnutls_sover 30
Accepting request 962891 from home:pmonrealgonzalez:branches:security:tls - Update to 3.7.4: * libgnutls: Added support for certificate compression as defined in RFC8879. * certtool: Added option --compress-cert that allows user to specify compression methods for certificate compression. * libgnutls: GnuTLS can now be compiled with --enable-strict-x509 configure option to enforce stricter certificate sanity checks that are compliant with RFC5280. * libgnutls: Removed IA5String type from DirectoryString within issuer and subject name to make DirectoryString RFC5280 compliant. * libgnutls: Added function to retrieve the name of current ciphersuite from session. * Bump libgnutlsxx soname due to ABI break * API and ABI modifications: - GNUTLS_COMP_BROTLI: New gnutls_compression_method_t enum member - GNUTLS_COMP_ZSTD: New gnutls_compression_method_t enum member - gnutls_compress_certificate_get_selected_method: Added - gnutls_compress_certificate_set_methods: Added * Update gnutls.keyring OBS-URL: https://build.opensuse.org/request/show/962891 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=60
2022-03-18 21:01:46 +01:00
%define gnutlsxx_sover 30
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 11:40:38 +02:00
%define gnutls_dane_sover 0
Accepting request 691550 from home:jsikes:branches:security:tls Forgot changelog entry. OBS-URL: https://build.opensuse.org/request/show/691550 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=19
2019-04-04 16:11:38 +02:00
# unbound isn't in SLE (bsc#1086428)
%if 0%{?is_opensuse}
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 22:41:21 +01:00
%bcond_without dane
Accepting request 593004 from Base:System OBS-URL: https://build.opensuse.org/request/show/593004 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=110
2018-04-10 09:48:38 +02:00
%else
%bcond_with dane
Accepting request 591143 from Base:System OBS-URL: https://build.opensuse.org/request/show/591143 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=109
2018-03-30 11:56:05 +02:00
%endif
Accepting request 896474 from home:susnux:branches:security:tls Update to version 3.7.2 OBS-URL: https://build.opensuse.org/request/show/896474 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=54
2021-06-01 14:42:43 +02:00
# Enable Linux kernel AF_ALG based acceleration
%if 0%{?suse_version} >= 1550
Accepting request 976267 from home:msmeissn:branches:security:tls - disable kcapi usage for now, as kernel-obs-build not adjusted to contain the algorithms. bsc#1189283 OBS-URL: https://build.opensuse.org/request/show/976267 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=63
2022-05-16 10:07:25 +02:00
# disable for now, as our OBS builds do not work with it. Marcus 20220511
#bcond_without kcapi
%bcond_with kcapi
Accepting request 896474 from home:susnux:branches:security:tls Update to version 3.7.2 OBS-URL: https://build.opensuse.org/request/show/896474 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=54
2021-06-01 14:42:43 +02:00
%else
%bcond_with kcapi
%endif
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 22:41:21 +01:00
%bcond_with tpm
%bcond_without guile
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-16 00:15:20 +01:00
Name: gnutls
Accepting request 991873 from home:pmonrealgonzalez:branches:security:tls - Update to 3.7.7: * libgnutls: Fixed double free during verification of pkcs7 signatures. CVE-2022-2509 * libgnutls: gnutls_hkdf_expand now only accepts LENGTH argument less than or equal to 255 times hash digest size, to comply with RFC 5869 2.3. * libgnutls: Length limit for TLS PSK usernames has been increased from 128 to 65535 characters * libgnutls: AES-GCM encryption function now limits plaintext length to 2^39-256 bits, according to SP800-38D 5.2.1.1. * libgnutls: New block cipher functions have been added to transparently handle padding. gnutls_cipher_encrypt3 and gnutls_cipher_decrypt3 can be used in combination of GNUTLS_CIPHER_PADDING_PKCS7 flag to automatically add/remove padding if the length of the original plaintext is not a multiple of the block size. * libgnutls: New function for manual FIPS self-testing. * API and ABI modifications: - gnutls_fips140_run_self_tests: New function - gnutls_cipher_encrypt3: New function - gnutls_cipher_decrypt3: New function - gnutls_cipher_padding_flags_t: New enum * guile: Guile 1.8 is no longer supported * guile: Session record port treats premature termination as EOF Previously, a 'gnutls-error' exception with the 'error/premature-termination' value would be thrown while reading from a session record port when the underlying session was terminated prematurely. This was inconvenient since users of the port may not be prepared to handle such an exception. Reading from the session record port now returns the end-of-file object instead of throwing an exception, just like it would for a proper OBS-URL: https://build.opensuse.org/request/show/991873 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=69
2022-08-01 10:36:39 +02:00
Version: 3.7.7
Accepting request 121255 from Base:System - Update to version 3.0.19: + libgnutls: - When decoding a PKCS #11 URL the pin-source field is assumed to be a file that stores the pin. Based on patch by David Smith. - gnutls_record_check_pending() no longer returns unprocessed data, and thus ensure the non-blocking of the next call to gnutls_record_recv(). - Added strict tests in Diffie-Hellman and SRP key exchange public keys. - in ECDSA and DSA TLS 1.2 authentication be less strict in hash selection, and allow a stronger hash to be used than the appropriate, to improve interoperability with openssl. + tests: - Disabled floating point test, and corrections in pkcs12 decoding tests. + API and ABI modifications: - No changes since last version. - Changes from version 3.0.18: + certtool: - Avoid a Y2K38 bug when generating certificates. Patch by Robert Millan. + libgnutls: - Make sure that GNUTLS_E_PREMATURE_TERMINATION - is returned on premature termination (and added unit test). - Fixes for W64 API. Patch by B. Scott Michel. - Corrected VIA padlock detection for old VIA processors. Reported by Kris Karas. - Updated assembler files. OBS-URL: https://build.opensuse.org/request/show/121255 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=44
2012-05-21 10:25:22 +02:00
Release: 0
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-16 00:15:20 +01:00
Summary: The GNU Transport Layer Security Library
Accepting request 892936 from home:pmonrealgonzalez:branches:security:tls - Compute the FIPS hmac file without re-defining the __os_install_post macro, use the brp-50-generate-fips-hmac script instead. [bsc#1184555] - Require the main package in devel and lib packages as the default priorities are now set via crypto-policies. [bsc#1183082] OBS-URL: https://build.opensuse.org/request/show/892936 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=51
2021-05-14 16:01:30 +02:00
License: GPL-3.0-or-later AND LGPL-2.1-or-later
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-16 00:15:20 +01:00
Group: Productivity/Networking/Security
Accepting request 720091 from home:AndreasStieger:branches:security:tls gnutls 3.6.9 OBS-URL: https://build.opensuse.org/request/show/720091 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=22
2019-07-31 19:35:10 +02:00
URL: https://www.gnutls.org/
Accepting request 868673 from home:pmonrealgonzalez:branches:security:tls - Update to 3.7.0 * Depend on nettle 3.6 * Added a new API that provides a callback function to retrieve missing certificates from incomplete certificate chains * Added a new API that provides a callback function to output the complete path to the trusted root during certificate chain verification * OIDs exposed as gnutls_datum_t no longer account for the terminating null bytes, while the data field is null terminated. The affected API functions are: gnutls_ocsp_req_get_extension, gnutls_ocsp_resp_get_response, and gnutls_ocsp_resp_get_extension * Added a new set of API to enable QUIC implementation * The crypto implementation override APIs deprecated in 3.6.9 are now no-op * Added MAGMA/KUZNYECHIK CTR-ACPKM and CMAC support * Support for padlock has been fixed to make it work with Zhaoxin CPU * The maximum PIN length for PKCS #11 has been increased from 31 bytes to 255 bytes - Remove patch fixed upstream: * gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch - Add version guards for the crypto-policies package OBS-URL: https://build.opensuse.org/request/show/868673 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=45
2021-02-02 18:34:55 +01:00
Source0: https://www.gnupg.org/ftp/gcrypt/gnutls/v3.7/%{name}-%{version}.tar.xz
Source1: https://www.gnupg.org/ftp/gcrypt/gnutls/v3.7/%{name}-%{version}.tar.xz.sig
Source2: gnutls.keyring
Accepting request 181378 from Base:System - Disable all ECC algorithms. - gnutls-32bit.patch: upstream patch to make test work with 32bit time_t. - gnutls-implement-trust-store-dir.diff currently not yet forward ported. - Updated to GnuTLS 3.2.1 ** libgnutls: Allow ECC when in SSL 3.0 to work-around a bug in certain openssl versions. ** libgnutls: Fixes in interrupted function resumption. Report and patch by Tim Kosse. ** libgnutls: Corrected issue when receiving client hello verify requests in DTLS. ** libgnutls: Fixes in DTLS record overhead size calculations. ** libgnutls: gnutls_handshake_get_last_in() was fixed. Reported by Mann Ern Kang. - Updated to GnuTLS 3.2.0 ** libgnutls: Use nettle's elliptic curve implementation. ** libgnutls: Added Salsa20 cipher ** libgnutls: Added UMAC-96 and UMAC-128 ** libgnutls: Added ciphersuites involving Salsa20 and UMAC-96. As they are not standardized they are defined using private ciphersuite numbers. ** libgnutls: Added support for DTLS 1.2. ** libgnutls: Added support for the Application Layer Protocol Negotiation (ALPN) extension. ** libgnutls: Removed support for the RSA-EXPORT ciphersuites. ** libgnutls: Avoid linking to librt (that also avoids unnecessary linking to pthreads if p11-kit isn't used). - Updated to GnuTLS 3.1.10 (released 2013-03-22) ** certtool: When generating PKCS #12 files use by default the ARCFOUR (RC4) cipher to be compatible with devices that don't OBS-URL: https://build.opensuse.org/request/show/181378 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=58
2013-07-01 15:54:42 +02:00
Source3: baselibs.conf
Accepting request 850542 from home:vitezslav_cizek:branches:security:tls - Don't forward to Factory yet, the policy needs more testing. - Use the centralized crypto policy profile (jsc#SLE-15832) - FIPS: Use 2048 bit prime in DH selftest (bsc#1176086) * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch - FIPS: Add TLS KDF selftest (bsc#1176671) * add gnutls-FIPS-TLS_KDF_selftest.patch OBS-URL: https://build.opensuse.org/request/show/850542 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=43
2020-12-05 18:16:13 +01:00
Patch0: gnutls-3.5.11-skip-trust-store-tests.patch
Patch1: gnutls-3.6.6-set_guile_site_dir.patch
Accepting request 947389 from home:pmonrealgonzalez:branches:security:tls - Update to 3.7.3: [bsc#1190698, bsc#1190796] * libgnutls: The allowlisting configuration mode has been added to the system-wide settings. In this mode, all the algorithms are initially marked as insecure or disabled, while the applications can re-enable them either through the [overrides] section of the configuration file or the new API (#1172). * The build infrastructure no longer depends on GNU AutoGen for generating command-line option handling, template file parsing in certtool, and documentation generation (#773, #774). This change also removes run-time or bundled dependency on the libopts library, and requires Python 3.6 or later to regenerate the distribution tarball. Note that this brings in known backward incompatibility in command-line tools, such as long options are now case sensitive, while previously they were treated in a case insensitive manner: for example --RSA is no longer a valid option of certtool. The existing scripts using GnuTLS tools may need adjustment for this change. * libgnutls: The tpm2-tss-engine compatible private blobs can be loaded and used as a gnutls_privkey_t (#594). The code was originally written for the OpenConnect VPN project by David Woodhouse. To generate such blobs, use the tpm2tss-genkey tool from tpm2-tss-engine: https://github.com/tpm2-software/tpm2-tss-engine/#rsa-operations or the tpm2_encodeobject tool from unreleased tpm2-tools. * libgnutls: The library now transparently enables Linux KTLS (kernel TLS) when the feature is compiled in with --enable-ktls configuration option (#1113). If the KTLS initialization fails it automatically falls back to the user space implementation. * certtool: The certtool command can now read the Certificate Transparency (RFC 6962) SCT extension (#232). New API functions are also provided to access and manipulate the extension values. OBS-URL: https://build.opensuse.org/request/show/947389 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=57
2022-01-19 12:47:02 +01:00
Patch2: gnutls-FIPS-TLS_KDF_selftest.patch
Accepting request 964661 from home:pmonrealgonzalez:branches:security:tls - FIPS: Additional PBKDF2 requirements for KAT [bsc#1184669] * The IG 10.3.A and SP800-132 require some minimum parameters for the salt length, password length and iteration count. These parameters should be also used in the KAT. * Add gnutls-FIPS-PBKDF2-KAT-requirements.patch - Enable to run the regression tests also in FIPS mode. * Add gnutls-FIPS-disable-failing-tests.patch OBS-URL: https://build.opensuse.org/request/show/964661 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=61
2022-03-24 13:48:13 +01:00
Patch3: gnutls-FIPS-disable-failing-tests.patch
Accepting request 1003480 from home:pmonrealgonzalez:branches:security:tls - FIPS: Additional modifications to the SLI. [bsc#1190698] * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2(). * Mark HMAC keylength less than 112 bits as non-approved in gnutls_pbkfd2(). * Adapt the pbkdf2 selftest and the regression tests accordingly. * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch - FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941] * Add new dependency on jitterentropy * Add gnutls-FIPS-jitterentropy.patch - FIPS: * Add gnutls_ECDSA_signing.patch [bsc#1190698] - Check minimum keylength for symmetric key generation - Only allows ECDSA signature with valid set of hashes (SHA2 and SHA3) OBS-URL: https://build.opensuse.org/request/show/1003480 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=73
2022-09-14 10:41:21 +02:00
Patch4: gnutls_ECDSA_signing.patch
%if 0%{?suse_version} >= 1550 || 0%{?sle_version} >= 150400
#PATCH-FIX-SUSE bsc#1202146 FIPS: Port gnutls to use jitterentropy
Patch5: gnutls-FIPS-jitterentropy.patch
%endif
#PATCH-FIX-SUSE bsc#1190698 FIPS: SLI gnutls_pbkdf2: verify keylengths and allow SHA only
Patch6: gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch
Accepting request 324612 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/324612 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=87
2015-08-25 07:17:02 +02:00
BuildRequires: autogen
Accepting request 94864 from Base:System Fix licenses (forwarded request 94646 from vuntz) OBS-URL: https://build.opensuse.org/request/show/94864 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=40
2011-12-02 16:25:49 +01:00
BuildRequires: automake
Accepting request 405821 from Base:System - Fix a problem with expired test certificate by using datefudge (boo#987139) * add 0001-tests-use-datefudge-in-name-constraints-test.patch (forwarded request 405618 from vitezslav_cizek) OBS-URL: https://build.opensuse.org/request/show/405821 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=92
2016-07-09 09:21:14 +02:00
BuildRequires: datefudge
Accepting request 391813 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/391813 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=91
2016-05-04 08:17:29 +02:00
BuildRequires: fdupes
Accepting request 734378 from home:vitezslav_cizek:branches:security:tls - Install checksums for binary integrity verification which are required when running in FIPS mode (bsc#1152692, jsc#SLE-9518) OBS-URL: https://build.opensuse.org/request/show/734378 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=24
2019-10-01 17:18:43 +02:00
BuildRequires: fipscheck
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
BuildRequires: gcc-c++
Accepting request 523074 from Base:System - Buildrequire iproute2: the test suite calls /usr/bin/ss and as such we have to ensure to pull it in. (forwarded request 523062 from dimstar) OBS-URL: https://build.opensuse.org/request/show/523074 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=103
2017-09-12 19:38:08 +02:00
# The test suite calls /usr/bin/ss from iproute2. It's our own duty to ensure we have it present
BuildRequires: iproute2
Accepting request 459188 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/459188 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=97
2017-02-22 13:50:20 +01:00
BuildRequires: libidn2-devel
Accepting request 868673 from home:pmonrealgonzalez:branches:security:tls - Update to 3.7.0 * Depend on nettle 3.6 * Added a new API that provides a callback function to retrieve missing certificates from incomplete certificate chains * Added a new API that provides a callback function to output the complete path to the trusted root during certificate chain verification * OIDs exposed as gnutls_datum_t no longer account for the terminating null bytes, while the data field is null terminated. The affected API functions are: gnutls_ocsp_req_get_extension, gnutls_ocsp_resp_get_response, and gnutls_ocsp_resp_get_extension * Added a new set of API to enable QUIC implementation * The crypto implementation override APIs deprecated in 3.6.9 are now no-op * Added MAGMA/KUZNYECHIK CTR-ACPKM and CMAC support * Support for padlock has been fixed to make it work with Zhaoxin CPU * The maximum PIN length for PKCS #11 has been increased from 31 bytes to 255 bytes - Remove patch fixed upstream: * gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch - Add version guards for the crypto-policies package OBS-URL: https://build.opensuse.org/request/show/868673 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=45
2021-02-02 18:34:55 +01:00
BuildRequires: libnettle-devel >= 3.6
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 22:41:21 +01:00
BuildRequires: libtasn1-devel >= 4.9
Accepting request 122844 from Base:System - fix build with automake-1.12 - add: automake-1.12.patch (forwarded request 122744 from puzel) OBS-URL: https://build.opensuse.org/request/show/122844 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=48
2012-05-31 17:04:51 +02:00
BuildRequires: libtool
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 22:41:21 +01:00
BuildRequires: libunistring-devel
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 11:40:38 +02:00
BuildRequires: makeinfo
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 22:41:21 +01:00
BuildRequires: p11-kit-devel >= 0.23.1
BuildRequires: pkgconfig
BuildRequires: xz
BuildRequires: zlib-devel
Accepting request 720091 from home:AndreasStieger:branches:security:tls gnutls 3.6.9 OBS-URL: https://build.opensuse.org/request/show/720091 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=22
2019-07-31 19:35:10 +02:00
BuildRequires: pkgconfig(autoopts)
Accepting request 896474 from home:susnux:branches:security:tls Update to version 3.7.2 OBS-URL: https://build.opensuse.org/request/show/896474 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=54
2021-06-01 14:42:43 +02:00
%if %{with kcapi}
BuildRequires: pkgconfig(libkcapi)
%endif
Accepting request 433003 from Base:System update to 3.4.15 (forwarded request 432668 from ecsos) OBS-URL: https://build.opensuse.org/request/show/433003 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=94
2016-10-10 16:16:31 +02:00
%if 0%{?suse_version} <= 1320
BuildRequires: net-tools
%else
Accepting request 405821 from Base:System - Fix a problem with expired test certificate by using datefudge (boo#987139) * add 0001-tests-use-datefudge-in-name-constraints-test.patch (forwarded request 405618 from vitezslav_cizek) OBS-URL: https://build.opensuse.org/request/show/405821 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=92
2016-07-09 09:21:14 +02:00
BuildRequires: net-tools-deprecated
Accepting request 433003 from Base:System update to 3.4.15 (forwarded request 432668 from ecsos) OBS-URL: https://build.opensuse.org/request/show/433003 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=94
2016-10-10 16:16:31 +02:00
%endif
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 19:32:11 +02:00
%if %{with tpm}
BuildRequires: trousers-devel
%endif
%if %{with dane}
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 22:41:21 +01:00
Requires: libgnutls-dane%{gnutls_dane_sover} = %{version}
Accepting request 433003 from Base:System update to 3.4.15 (forwarded request 432668 from ecsos) OBS-URL: https://build.opensuse.org/request/show/433003 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=94
2016-10-10 16:16:31 +02:00
%if 0%{?suse_version} <= 1320
BuildRequires: unbound-devel
%else
Accepting request 360180 from Base:System - follow the work in the unbound package and use the libunbound-devel symbol for the buildrequires. we override it for the distro build with libunbound-devel-mini to avoid build loops. (forwarded request 360179 from darix) OBS-URL: https://build.opensuse.org/request/show/360180 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=89
2016-02-24 14:25:15 +01:00
BuildRequires: libunbound-devel
Accepting request 433003 from Base:System update to 3.4.15 (forwarded request 432668 from ecsos) OBS-URL: https://build.opensuse.org/request/show/433003 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=94
2016-10-10 16:16:31 +02:00
%endif
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 19:32:11 +02:00
%endif
Accepting request 391813 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/391813 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=91
2016-05-04 08:17:29 +02:00
%if %{with guile}
Accepting request 991873 from home:pmonrealgonzalez:branches:security:tls - Update to 3.7.7: * libgnutls: Fixed double free during verification of pkcs7 signatures. CVE-2022-2509 * libgnutls: gnutls_hkdf_expand now only accepts LENGTH argument less than or equal to 255 times hash digest size, to comply with RFC 5869 2.3. * libgnutls: Length limit for TLS PSK usernames has been increased from 128 to 65535 characters * libgnutls: AES-GCM encryption function now limits plaintext length to 2^39-256 bits, according to SP800-38D 5.2.1.1. * libgnutls: New block cipher functions have been added to transparently handle padding. gnutls_cipher_encrypt3 and gnutls_cipher_decrypt3 can be used in combination of GNUTLS_CIPHER_PADDING_PKCS7 flag to automatically add/remove padding if the length of the original plaintext is not a multiple of the block size. * libgnutls: New function for manual FIPS self-testing. * API and ABI modifications: - gnutls_fips140_run_self_tests: New function - gnutls_cipher_encrypt3: New function - gnutls_cipher_decrypt3: New function - gnutls_cipher_padding_flags_t: New enum * guile: Guile 1.8 is no longer supported * guile: Session record port treats premature termination as EOF Previously, a 'gnutls-error' exception with the 'error/premature-termination' value would be thrown while reading from a session record port when the underlying session was terminated prematurely. This was inconvenient since users of the port may not be prepared to handle such an exception. Reading from the session record port now returns the end-of-file object instead of throwing an exception, just like it would for a proper OBS-URL: https://build.opensuse.org/request/show/991873 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=69
2022-08-01 10:36:39 +02:00
BuildRequires: guile-devel > 1.8
Accepting request 391813 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/391813 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=91
2016-05-04 08:17:29 +02:00
%endif
Accepting request 947389 from home:pmonrealgonzalez:branches:security:tls - Update to 3.7.3: [bsc#1190698, bsc#1190796] * libgnutls: The allowlisting configuration mode has been added to the system-wide settings. In this mode, all the algorithms are initially marked as insecure or disabled, while the applications can re-enable them either through the [overrides] section of the configuration file or the new API (#1172). * The build infrastructure no longer depends on GNU AutoGen for generating command-line option handling, template file parsing in certtool, and documentation generation (#773, #774). This change also removes run-time or bundled dependency on the libopts library, and requires Python 3.6 or later to regenerate the distribution tarball. Note that this brings in known backward incompatibility in command-line tools, such as long options are now case sensitive, while previously they were treated in a case insensitive manner: for example --RSA is no longer a valid option of certtool. The existing scripts using GnuTLS tools may need adjustment for this change. * libgnutls: The tpm2-tss-engine compatible private blobs can be loaded and used as a gnutls_privkey_t (#594). The code was originally written for the OpenConnect VPN project by David Woodhouse. To generate such blobs, use the tpm2tss-genkey tool from tpm2-tss-engine: https://github.com/tpm2-software/tpm2-tss-engine/#rsa-operations or the tpm2_encodeobject tool from unreleased tpm2-tools. * libgnutls: The library now transparently enables Linux KTLS (kernel TLS) when the feature is compiled in with --enable-ktls configuration option (#1113). If the KTLS initialization fails it automatically falls back to the user space implementation. * certtool: The certtool command can now read the Certificate Transparency (RFC 6962) SCT extension (#232). New API functions are also provided to access and manipulate the extension values. OBS-URL: https://build.opensuse.org/request/show/947389 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=57
2022-01-19 12:47:02 +01:00
%if 0%{?suse_version} >= 1550 || 0%{?sle_version} >= 150400
BuildRequires: crypto-policies
Accepting request 858088 from home:pmonrealgonzalez:branches:security:tls Don't forward to Factory yet, the policy needs more testing OBS-URL: https://build.opensuse.org/request/show/858088 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=44
2020-12-22 10:48:35 +01:00
Requires: crypto-policies
Accepting request 1003480 from home:pmonrealgonzalez:branches:security:tls - FIPS: Additional modifications to the SLI. [bsc#1190698] * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2(). * Mark HMAC keylength less than 112 bits as non-approved in gnutls_pbkfd2(). * Adapt the pbkdf2 selftest and the regression tests accordingly. * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch - FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941] * Add new dependency on jitterentropy * Add gnutls-FIPS-jitterentropy.patch - FIPS: * Add gnutls_ECDSA_signing.patch [bsc#1190698] - Check minimum keylength for symmetric key generation - Only allows ECDSA signature with valid set of hashes (SHA2 and SHA3) OBS-URL: https://build.opensuse.org/request/show/1003480 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=73
2022-09-14 10:41:21 +02:00
BuildRequires: jitterentropy-devel >= 3.4.0
Requires: libjitterentropy3 >= 3.4.0
Accepting request 868673 from home:pmonrealgonzalez:branches:security:tls - Update to 3.7.0 * Depend on nettle 3.6 * Added a new API that provides a callback function to retrieve missing certificates from incomplete certificate chains * Added a new API that provides a callback function to output the complete path to the trusted root during certificate chain verification * OIDs exposed as gnutls_datum_t no longer account for the terminating null bytes, while the data field is null terminated. The affected API functions are: gnutls_ocsp_req_get_extension, gnutls_ocsp_resp_get_response, and gnutls_ocsp_resp_get_extension * Added a new set of API to enable QUIC implementation * The crypto implementation override APIs deprecated in 3.6.9 are now no-op * Added MAGMA/KUZNYECHIK CTR-ACPKM and CMAC support * Support for padlock has been fixed to make it work with Zhaoxin CPU * The maximum PIN length for PKCS #11 has been increased from 31 bytes to 255 bytes - Remove patch fixed upstream: * gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch - Add version guards for the crypto-policies package OBS-URL: https://build.opensuse.org/request/show/868673 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=45
2021-02-02 18:34:55 +01:00
%endif
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-16 00:15:20 +01:00
%description
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 11:40:38 +02:00
The GnuTLS library provides a secure layer over a reliable transport
layer. Currently the GnuTLS library implements the proposed standards
Accepting request 691610 from home:jengelh:branches:security:tls - Trim useless %if..%endif guards that do not affect the build. - Fix language errors in description again. OBS-URL: https://build.opensuse.org/request/show/691610 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=20
2019-04-08 11:25:11 +02:00
of the IETF's TLS working group.
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-16 00:15:20 +01:00
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
%package -n libgnutls%{gnutls_sover}
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=7
2008-02-28 01:56:17 +01:00
Summary: The GNU Transport Layer Security Library
Accepting request 976267 from home:msmeissn:branches:security:tls - disable kcapi usage for now, as kernel-obs-build not adjusted to contain the algorithms. bsc#1189283 OBS-URL: https://build.opensuse.org/request/show/976267 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=63
2022-05-16 10:07:25 +02:00
# install libgnutls and libgnutls-hmac close together (bsc#1090765)
Accepting request 591143 from Base:System OBS-URL: https://build.opensuse.org/request/show/591143 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=109
2018-03-30 11:56:05 +02:00
License: LGPL-2.1-or-later
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 11:40:38 +02:00
Group: System/Libraries
Accepting request 947389 from home:pmonrealgonzalez:branches:security:tls - Update to 3.7.3: [bsc#1190698, bsc#1190796] * libgnutls: The allowlisting configuration mode has been added to the system-wide settings. In this mode, all the algorithms are initially marked as insecure or disabled, while the applications can re-enable them either through the [overrides] section of the configuration file or the new API (#1172). * The build infrastructure no longer depends on GNU AutoGen for generating command-line option handling, template file parsing in certtool, and documentation generation (#773, #774). This change also removes run-time or bundled dependency on the libopts library, and requires Python 3.6 or later to regenerate the distribution tarball. Note that this brings in known backward incompatibility in command-line tools, such as long options are now case sensitive, while previously they were treated in a case insensitive manner: for example --RSA is no longer a valid option of certtool. The existing scripts using GnuTLS tools may need adjustment for this change. * libgnutls: The tpm2-tss-engine compatible private blobs can be loaded and used as a gnutls_privkey_t (#594). The code was originally written for the OpenConnect VPN project by David Woodhouse. To generate such blobs, use the tpm2tss-genkey tool from tpm2-tss-engine: https://github.com/tpm2-software/tpm2-tss-engine/#rsa-operations or the tpm2_encodeobject tool from unreleased tpm2-tools. * libgnutls: The library now transparently enables Linux KTLS (kernel TLS) when the feature is compiled in with --enable-ktls configuration option (#1113). If the KTLS initialization fails it automatically falls back to the user space implementation. * certtool: The certtool command can now read the Certificate Transparency (RFC 6962) SCT extension (#232). New API functions are also provided to access and manipulate the extension values. OBS-URL: https://build.opensuse.org/request/show/947389 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=57
2022-01-19 12:47:02 +01:00
Suggests: libgnutls%{gnutls_sover}-hmac = %{version}-%{release}
%if 0%{?suse_version} >= 1550 || 0%{?sle_version} >= 150400
Accepting request 895665 from home:pmonrealgonzalez:branches:security:tls - Rework the crypto-policies dependencies in libraries [bsc#1186385] OBS-URL: https://build.opensuse.org/request/show/895665 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=53
2021-05-31 11:16:21 +02:00
Requires: crypto-policies
%endif
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=7
2008-02-28 01:56:17 +01:00
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
%description -n libgnutls%{gnutls_sover}
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 11:40:38 +02:00
The GnuTLS library provides a secure layer over a reliable transport
layer. Currently the GnuTLS library implements the proposed standards
Accepting request 691610 from home:jengelh:branches:security:tls - Trim useless %if..%endif guards that do not affect the build. - Fix language errors in description again. OBS-URL: https://build.opensuse.org/request/show/691610 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=20
2019-04-08 11:25:11 +02:00
of the IETF's TLS working group.
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=7
2008-02-28 01:56:17 +01:00
Accepting request 790830 from home:vitezslav_cizek:branches:security:tls - Use correct nettle .so version when looking for a FIPS checksum (bsc#1166635) * add gnutls-fips_correct_nettle_soversion.patch - Update to 3.6.13 * libgnutls: Fix a DTLS-protocol regression (caused by TLS1.3 support) The DTLS client would not contribute any randomness to the DTLS negotiation, breaking the security guarantees of the DTLS protocol (#960) [GNUTLS-SA-2020-03-31, CVSS: high] (bsc#1168345) * libgnutls: Added new APIs to access KDF algorithms (#813). * libgnutls: Added new callback gnutls_keylog_func that enables a custom logging functionality. * libgnutls: Added support for non-null terminated usernames in PSK negotiation (#586). * gnutls-cli-debug: Improved support for old servers that only support SSL 3.0. - Split off FIPS checksums into a separate libgnutls30-hmac subpackage (bsc#1152692) OBS-URL: https://build.opensuse.org/request/show/790830 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=32
2020-04-02 12:58:27 +02:00
%package -n libgnutls%{gnutls_sover}-hmac
Summary: Checksums of the GNU Transport Layer Security Library
License: LGPL-2.1-or-later
Group: System/Libraries
Requires: libgnutls%{gnutls_sover} = %{version}-%{release}
%description -n libgnutls%{gnutls_sover}-hmac
FIPS SHA256 checksums of the libgnutls library.
Accepting request 947389 from home:pmonrealgonzalez:branches:security:tls - Update to 3.7.3: [bsc#1190698, bsc#1190796] * libgnutls: The allowlisting configuration mode has been added to the system-wide settings. In this mode, all the algorithms are initially marked as insecure or disabled, while the applications can re-enable them either through the [overrides] section of the configuration file or the new API (#1172). * The build infrastructure no longer depends on GNU AutoGen for generating command-line option handling, template file parsing in certtool, and documentation generation (#773, #774). This change also removes run-time or bundled dependency on the libopts library, and requires Python 3.6 or later to regenerate the distribution tarball. Note that this brings in known backward incompatibility in command-line tools, such as long options are now case sensitive, while previously they were treated in a case insensitive manner: for example --RSA is no longer a valid option of certtool. The existing scripts using GnuTLS tools may need adjustment for this change. * libgnutls: The tpm2-tss-engine compatible private blobs can be loaded and used as a gnutls_privkey_t (#594). The code was originally written for the OpenConnect VPN project by David Woodhouse. To generate such blobs, use the tpm2tss-genkey tool from tpm2-tss-engine: https://github.com/tpm2-software/tpm2-tss-engine/#rsa-operations or the tpm2_encodeobject tool from unreleased tpm2-tools. * libgnutls: The library now transparently enables Linux KTLS (kernel TLS) when the feature is compiled in with --enable-ktls configuration option (#1113). If the KTLS initialization fails it automatically falls back to the user space implementation. * certtool: The certtool command can now read the Certificate Transparency (RFC 6962) SCT extension (#232). New API functions are also provided to access and manipulate the extension values. OBS-URL: https://build.opensuse.org/request/show/947389 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=57
2022-01-19 12:47:02 +01:00
%if %{with dane}
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 19:32:11 +02:00
%package -n libgnutls-dane%{gnutls_dane_sover}
Accepting request 593004 from Base:System OBS-URL: https://build.opensuse.org/request/show/593004 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=110
2018-04-10 09:48:38 +02:00
Summary: DANE support for the GNU Transport Layer Security Library
Accepting request 591143 from Base:System OBS-URL: https://build.opensuse.org/request/show/591143 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=109
2018-03-30 11:56:05 +02:00
License: LGPL-2.1-or-later
Accepting request 593004 from Base:System OBS-URL: https://build.opensuse.org/request/show/593004 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=110
2018-04-10 09:48:38 +02:00
Group: System/Libraries
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 19:32:11 +02:00
%description -n libgnutls-dane%{gnutls_dane_sover}
The GnuTLS project aims to develop a library that provides a secure
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 22:41:21 +01:00
layer over a reliable transport layer.
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 19:32:11 +02:00
This package contains the "DANE" part of gnutls.
Accepting request 947389 from home:pmonrealgonzalez:branches:security:tls - Update to 3.7.3: [bsc#1190698, bsc#1190796] * libgnutls: The allowlisting configuration mode has been added to the system-wide settings. In this mode, all the algorithms are initially marked as insecure or disabled, while the applications can re-enable them either through the [overrides] section of the configuration file or the new API (#1172). * The build infrastructure no longer depends on GNU AutoGen for generating command-line option handling, template file parsing in certtool, and documentation generation (#773, #774). This change also removes run-time or bundled dependency on the libopts library, and requires Python 3.6 or later to regenerate the distribution tarball. Note that this brings in known backward incompatibility in command-line tools, such as long options are now case sensitive, while previously they were treated in a case insensitive manner: for example --RSA is no longer a valid option of certtool. The existing scripts using GnuTLS tools may need adjustment for this change. * libgnutls: The tpm2-tss-engine compatible private blobs can be loaded and used as a gnutls_privkey_t (#594). The code was originally written for the OpenConnect VPN project by David Woodhouse. To generate such blobs, use the tpm2tss-genkey tool from tpm2-tss-engine: https://github.com/tpm2-software/tpm2-tss-engine/#rsa-operations or the tpm2_encodeobject tool from unreleased tpm2-tools. * libgnutls: The library now transparently enables Linux KTLS (kernel TLS) when the feature is compiled in with --enable-ktls configuration option (#1113). If the KTLS initialization fails it automatically falls back to the user space implementation. * certtool: The certtool command can now read the Certificate Transparency (RFC 6962) SCT extension (#232). New API functions are also provided to access and manipulate the extension values. OBS-URL: https://build.opensuse.org/request/show/947389 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=57
2022-01-19 12:47:02 +01:00
%endif
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 19:32:11 +02:00
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
%package -n libgnutlsxx%{gnutlsxx_sover}
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 11:40:38 +02:00
Summary: C++ API for the GNU Transport Layer Security Library
Accepting request 591143 from Base:System OBS-URL: https://build.opensuse.org/request/show/591143 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=109
2018-03-30 11:56:05 +02:00
License: LGPL-2.1-or-later
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 11:40:38 +02:00
Group: System/Libraries
Accepting request 947389 from home:pmonrealgonzalez:branches:security:tls - Update to 3.7.3: [bsc#1190698, bsc#1190796] * libgnutls: The allowlisting configuration mode has been added to the system-wide settings. In this mode, all the algorithms are initially marked as insecure or disabled, while the applications can re-enable them either through the [overrides] section of the configuration file or the new API (#1172). * The build infrastructure no longer depends on GNU AutoGen for generating command-line option handling, template file parsing in certtool, and documentation generation (#773, #774). This change also removes run-time or bundled dependency on the libopts library, and requires Python 3.6 or later to regenerate the distribution tarball. Note that this brings in known backward incompatibility in command-line tools, such as long options are now case sensitive, while previously they were treated in a case insensitive manner: for example --RSA is no longer a valid option of certtool. The existing scripts using GnuTLS tools may need adjustment for this change. * libgnutls: The tpm2-tss-engine compatible private blobs can be loaded and used as a gnutls_privkey_t (#594). The code was originally written for the OpenConnect VPN project by David Woodhouse. To generate such blobs, use the tpm2tss-genkey tool from tpm2-tss-engine: https://github.com/tpm2-software/tpm2-tss-engine/#rsa-operations or the tpm2_encodeobject tool from unreleased tpm2-tools. * libgnutls: The library now transparently enables Linux KTLS (kernel TLS) when the feature is compiled in with --enable-ktls configuration option (#1113). If the KTLS initialization fails it automatically falls back to the user space implementation. * certtool: The certtool command can now read the Certificate Transparency (RFC 6962) SCT extension (#232). New API functions are also provided to access and manipulate the extension values. OBS-URL: https://build.opensuse.org/request/show/947389 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=57
2022-01-19 12:47:02 +01:00
%if 0%{?suse_version} >= 1550 || 0%{?sle_version} >= 150400
Accepting request 895665 from home:pmonrealgonzalez:branches:security:tls - Rework the crypto-policies dependencies in libraries [bsc#1186385] OBS-URL: https://build.opensuse.org/request/show/895665 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=53
2021-05-31 11:16:21 +02:00
Requires: crypto-policies
%endif
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=7
2008-02-28 01:56:17 +01:00
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
%description -n libgnutlsxx%{gnutlsxx_sover}
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 11:40:38 +02:00
The GnuTLS library provides a secure layer over a reliable transport
Accepting request 691610 from home:jengelh:branches:security:tls - Trim useless %if..%endif guards that do not affect the build. - Fix language errors in description again. OBS-URL: https://build.opensuse.org/request/show/691610 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=20
2019-04-08 11:25:11 +02:00
layer. Currently the GnuTLS library implements the proposed standards
of the IETF's TLS working group.
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=6
2007-10-25 18:10:26 +02:00
%package -n libgnutls-devel
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 11:40:38 +02:00
Summary: Development package for the GnuTLS C API
Accepting request 591143 from Base:System OBS-URL: https://build.opensuse.org/request/show/591143 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=109
2018-03-30 11:56:05 +02:00
License: LGPL-2.1-or-later
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=4
2007-08-03 16:29:06 +02:00
Group: Development/Libraries/C and C++
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
Requires: glibc-devel
Accepting request 895665 from home:pmonrealgonzalez:branches:security:tls - Rework the crypto-policies dependencies in libraries [bsc#1186385] OBS-URL: https://build.opensuse.org/request/show/895665 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=53
2021-05-31 11:16:21 +02:00
Requires: gnutls = %{version}
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
Requires: libgnutls%{gnutls_sover} = %{version}
Accepting request 121683 from Base:System - add version and release to gnutls-devel provides OBS-URL: https://build.opensuse.org/request/show/121683 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=46
2012-05-22 10:11:29 +02:00
Provides: gnutls-devel = %{version}-%{release}
Accepting request 957881 from home:dirkmueller:Factory - build with lto - build with -Wl,-z,now -Wl,-z,relro - build without -fanalyzer, which cuts build time in ~ half OBS-URL: https://build.opensuse.org/request/show/957881 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=58
2022-03-09 11:49:43 +01:00
%if 0%{?suse_version} >= 1550 || 0%{?sle_version} >= 150400
Requires: crypto-policies
%endif
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=7
2008-02-28 01:56:17 +01:00
%description -n libgnutls-devel
Files needed for software development using gnutls.
Accepting request 947389 from home:pmonrealgonzalez:branches:security:tls - Update to 3.7.3: [bsc#1190698, bsc#1190796] * libgnutls: The allowlisting configuration mode has been added to the system-wide settings. In this mode, all the algorithms are initially marked as insecure or disabled, while the applications can re-enable them either through the [overrides] section of the configuration file or the new API (#1172). * The build infrastructure no longer depends on GNU AutoGen for generating command-line option handling, template file parsing in certtool, and documentation generation (#773, #774). This change also removes run-time or bundled dependency on the libopts library, and requires Python 3.6 or later to regenerate the distribution tarball. Note that this brings in known backward incompatibility in command-line tools, such as long options are now case sensitive, while previously they were treated in a case insensitive manner: for example --RSA is no longer a valid option of certtool. The existing scripts using GnuTLS tools may need adjustment for this change. * libgnutls: The tpm2-tss-engine compatible private blobs can be loaded and used as a gnutls_privkey_t (#594). The code was originally written for the OpenConnect VPN project by David Woodhouse. To generate such blobs, use the tpm2tss-genkey tool from tpm2-tss-engine: https://github.com/tpm2-software/tpm2-tss-engine/#rsa-operations or the tpm2_encodeobject tool from unreleased tpm2-tools. * libgnutls: The library now transparently enables Linux KTLS (kernel TLS) when the feature is compiled in with --enable-ktls configuration option (#1113). If the KTLS initialization fails it automatically falls back to the user space implementation. * certtool: The certtool command can now read the Certificate Transparency (RFC 6962) SCT extension (#232). New API functions are also provided to access and manipulate the extension values. OBS-URL: https://build.opensuse.org/request/show/947389 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=57
2022-01-19 12:47:02 +01:00
%if %{with dane}
Accepting request 360180 from Base:System - follow the work in the unbound package and use the libunbound-devel symbol for the buildrequires. we override it for the distro build with libunbound-devel-mini to avoid build loops. (forwarded request 360179 from darix) OBS-URL: https://build.opensuse.org/request/show/360180 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=89
2016-02-24 14:25:15 +01:00
%package -n libgnutls-dane-devel
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 11:40:38 +02:00
Summary: Development package for GnuTLS DANE component
Accepting request 591143 from Base:System OBS-URL: https://build.opensuse.org/request/show/591143 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=109
2018-03-30 11:56:05 +02:00
License: LGPL-2.1-or-later
Accepting request 360180 from Base:System - follow the work in the unbound package and use the libunbound-devel symbol for the buildrequires. we override it for the distro build with libunbound-devel-mini to avoid build loops. (forwarded request 360179 from darix) OBS-URL: https://build.opensuse.org/request/show/360180 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=89
2016-02-24 14:25:15 +01:00
Group: Development/Libraries/C and C++
Requires: libgnutls-dane%{gnutls_dane_sover} = %{version}
%description -n libgnutls-dane-devel
Files needed for software development using gnutls.
Accepting request 947389 from home:pmonrealgonzalez:branches:security:tls - Update to 3.7.3: [bsc#1190698, bsc#1190796] * libgnutls: The allowlisting configuration mode has been added to the system-wide settings. In this mode, all the algorithms are initially marked as insecure or disabled, while the applications can re-enable them either through the [overrides] section of the configuration file or the new API (#1172). * The build infrastructure no longer depends on GNU AutoGen for generating command-line option handling, template file parsing in certtool, and documentation generation (#773, #774). This change also removes run-time or bundled dependency on the libopts library, and requires Python 3.6 or later to regenerate the distribution tarball. Note that this brings in known backward incompatibility in command-line tools, such as long options are now case sensitive, while previously they were treated in a case insensitive manner: for example --RSA is no longer a valid option of certtool. The existing scripts using GnuTLS tools may need adjustment for this change. * libgnutls: The tpm2-tss-engine compatible private blobs can be loaded and used as a gnutls_privkey_t (#594). The code was originally written for the OpenConnect VPN project by David Woodhouse. To generate such blobs, use the tpm2tss-genkey tool from tpm2-tss-engine: https://github.com/tpm2-software/tpm2-tss-engine/#rsa-operations or the tpm2_encodeobject tool from unreleased tpm2-tools. * libgnutls: The library now transparently enables Linux KTLS (kernel TLS) when the feature is compiled in with --enable-ktls configuration option (#1113). If the KTLS initialization fails it automatically falls back to the user space implementation. * certtool: The certtool command can now read the Certificate Transparency (RFC 6962) SCT extension (#232). New API functions are also provided to access and manipulate the extension values. OBS-URL: https://build.opensuse.org/request/show/947389 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=57
2022-01-19 12:47:02 +01:00
%endif
Accepting request 360180 from Base:System - follow the work in the unbound package and use the libunbound-devel symbol for the buildrequires. we override it for the distro build with libunbound-devel-mini to avoid build loops. (forwarded request 360179 from darix) OBS-URL: https://build.opensuse.org/request/show/360180 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=89
2016-02-24 14:25:15 +01:00
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
%package -n libgnutlsxx-devel
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 11:40:38 +02:00
Summary: Development package for the GnuTLS C++ API
Accepting request 591143 from Base:System OBS-URL: https://build.opensuse.org/request/show/591143 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=109
2018-03-30 11:56:05 +02:00
License: LGPL-2.1-or-later
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
Group: Development/Libraries/C and C++
Requires: libgnutls-devel = %{version}
Accepting request 121255 from Base:System - Update to version 3.0.19: + libgnutls: - When decoding a PKCS #11 URL the pin-source field is assumed to be a file that stores the pin. Based on patch by David Smith. - gnutls_record_check_pending() no longer returns unprocessed data, and thus ensure the non-blocking of the next call to gnutls_record_recv(). - Added strict tests in Diffie-Hellman and SRP key exchange public keys. - in ECDSA and DSA TLS 1.2 authentication be less strict in hash selection, and allow a stronger hash to be used than the appropriate, to improve interoperability with openssl. + tests: - Disabled floating point test, and corrections in pkcs12 decoding tests. + API and ABI modifications: - No changes since last version. - Changes from version 3.0.18: + certtool: - Avoid a Y2K38 bug when generating certificates. Patch by Robert Millan. + libgnutls: - Make sure that GNUTLS_E_PREMATURE_TERMINATION - is returned on premature termination (and added unit test). - Fixes for W64 API. Patch by B. Scott Michel. - Corrected VIA padlock detection for old VIA processors. Reported by Kris Karas. - Updated assembler files. OBS-URL: https://build.opensuse.org/request/show/121255 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=44
2012-05-21 10:25:22 +02:00
Requires: libgnutlsxx%{gnutlsxx_sover} = %{version}
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
Requires: libstdc++-devel
%description -n libgnutlsxx-devel
Files needed for software development using gnutls.
Accepting request 868673 from home:pmonrealgonzalez:branches:security:tls - Update to 3.7.0 * Depend on nettle 3.6 * Added a new API that provides a callback function to retrieve missing certificates from incomplete certificate chains * Added a new API that provides a callback function to output the complete path to the trusted root during certificate chain verification * OIDs exposed as gnutls_datum_t no longer account for the terminating null bytes, while the data field is null terminated. The affected API functions are: gnutls_ocsp_req_get_extension, gnutls_ocsp_resp_get_response, and gnutls_ocsp_resp_get_extension * Added a new set of API to enable QUIC implementation * The crypto implementation override APIs deprecated in 3.6.9 are now no-op * Added MAGMA/KUZNYECHIK CTR-ACPKM and CMAC support * Support for padlock has been fixed to make it work with Zhaoxin CPU * The maximum PIN length for PKCS #11 has been increased from 31 bytes to 255 bytes - Remove patch fixed upstream: * gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch - Add version guards for the crypto-policies package OBS-URL: https://build.opensuse.org/request/show/868673 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=45
2021-02-02 18:34:55 +01:00
%if %{with guile}
Accepting request 391813 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/391813 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=91
2016-05-04 08:17:29 +02:00
%package guile
Summary: Guile wrappers for gnutls
Accepting request 591143 from Base:System OBS-URL: https://build.opensuse.org/request/show/591143 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=109
2018-03-30 11:56:05 +02:00
License: LGPL-2.1-or-later
Accepting request 391813 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/391813 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=91
2016-05-04 08:17:29 +02:00
Group: Development/Libraries/Other
Accepting request 991873 from home:pmonrealgonzalez:branches:security:tls - Update to 3.7.7: * libgnutls: Fixed double free during verification of pkcs7 signatures. CVE-2022-2509 * libgnutls: gnutls_hkdf_expand now only accepts LENGTH argument less than or equal to 255 times hash digest size, to comply with RFC 5869 2.3. * libgnutls: Length limit for TLS PSK usernames has been increased from 128 to 65535 characters * libgnutls: AES-GCM encryption function now limits plaintext length to 2^39-256 bits, according to SP800-38D 5.2.1.1. * libgnutls: New block cipher functions have been added to transparently handle padding. gnutls_cipher_encrypt3 and gnutls_cipher_decrypt3 can be used in combination of GNUTLS_CIPHER_PADDING_PKCS7 flag to automatically add/remove padding if the length of the original plaintext is not a multiple of the block size. * libgnutls: New function for manual FIPS self-testing. * API and ABI modifications: - gnutls_fips140_run_self_tests: New function - gnutls_cipher_encrypt3: New function - gnutls_cipher_decrypt3: New function - gnutls_cipher_padding_flags_t: New enum * guile: Guile 1.8 is no longer supported * guile: Session record port treats premature termination as EOF Previously, a 'gnutls-error' exception with the 'error/premature-termination' value would be thrown while reading from a session record port when the underlying session was terminated prematurely. This was inconvenient since users of the port may not be prepared to handle such an exception. Reading from the session record port now returns the end-of-file object instead of throwing an exception, just like it would for a proper OBS-URL: https://build.opensuse.org/request/show/991873 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=69
2022-08-01 10:36:39 +02:00
Requires: guile > 1.8
Accepting request 391813 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/391813 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=91
2016-05-04 08:17:29 +02:00
%description guile
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 11:40:38 +02:00
GnuTLS Wrappers for GNU Guile, a dialect of Scheme.
Accepting request 868673 from home:pmonrealgonzalez:branches:security:tls - Update to 3.7.0 * Depend on nettle 3.6 * Added a new API that provides a callback function to retrieve missing certificates from incomplete certificate chains * Added a new API that provides a callback function to output the complete path to the trusted root during certificate chain verification * OIDs exposed as gnutls_datum_t no longer account for the terminating null bytes, while the data field is null terminated. The affected API functions are: gnutls_ocsp_req_get_extension, gnutls_ocsp_resp_get_response, and gnutls_ocsp_resp_get_extension * Added a new set of API to enable QUIC implementation * The crypto implementation override APIs deprecated in 3.6.9 are now no-op * Added MAGMA/KUZNYECHIK CTR-ACPKM and CMAC support * Support for padlock has been fixed to make it work with Zhaoxin CPU * The maximum PIN length for PKCS #11 has been increased from 31 bytes to 255 bytes - Remove patch fixed upstream: * gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch - Add version guards for the crypto-policies package OBS-URL: https://build.opensuse.org/request/show/868673 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=45
2021-02-02 18:34:55 +01:00
%endif
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=7
2008-02-28 01:56:17 +01:00
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-16 00:15:20 +01:00
%prep
Accepting request 790830 from home:vitezslav_cizek:branches:security:tls - Use correct nettle .so version when looking for a FIPS checksum (bsc#1166635) * add gnutls-fips_correct_nettle_soversion.patch - Update to 3.6.13 * libgnutls: Fix a DTLS-protocol regression (caused by TLS1.3 support) The DTLS client would not contribute any randomness to the DTLS negotiation, breaking the security guarantees of the DTLS protocol (#960) [GNUTLS-SA-2020-03-31, CVSS: high] (bsc#1168345) * libgnutls: Added new APIs to access KDF algorithms (#813). * libgnutls: Added new callback gnutls_keylog_func that enables a custom logging functionality. * libgnutls: Added support for non-null terminated usernames in PSK negotiation (#586). * gnutls-cli-debug: Improved support for old servers that only support SSL 3.0. - Split off FIPS checksums into a separate libgnutls30-hmac subpackage (bsc#1152692) OBS-URL: https://build.opensuse.org/request/show/790830 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=32
2020-04-02 12:58:27 +02:00
%autosetup -p1
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-16 00:15:20 +01:00
Accepting request 868673 from home:pmonrealgonzalez:branches:security:tls - Update to 3.7.0 * Depend on nettle 3.6 * Added a new API that provides a callback function to retrieve missing certificates from incomplete certificate chains * Added a new API that provides a callback function to output the complete path to the trusted root during certificate chain verification * OIDs exposed as gnutls_datum_t no longer account for the terminating null bytes, while the data field is null terminated. The affected API functions are: gnutls_ocsp_req_get_extension, gnutls_ocsp_resp_get_response, and gnutls_ocsp_resp_get_extension * Added a new set of API to enable QUIC implementation * The crypto implementation override APIs deprecated in 3.6.9 are now no-op * Added MAGMA/KUZNYECHIK CTR-ACPKM and CMAC support * Support for padlock has been fixed to make it work with Zhaoxin CPU * The maximum PIN length for PKCS #11 has been increased from 31 bytes to 255 bytes - Remove patch fixed upstream: * gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch - Add version guards for the crypto-policies package OBS-URL: https://build.opensuse.org/request/show/868673 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=45
2021-02-02 18:34:55 +01:00
echo "SYSTEM=NORMAL" >> tests/system.prio
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-16 00:15:20 +01:00
%build
Accepting request 957881 from home:dirkmueller:Factory - build with lto - build with -Wl,-z,now -Wl,-z,relro - build without -fanalyzer, which cuts build time in ~ half OBS-URL: https://build.opensuse.org/request/show/957881 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=58
2022-03-09 11:49:43 +01:00
export LDFLAGS="-pie -Wl,-z,now -Wl,-z,relro"
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 22:41:21 +01:00
export CFLAGS="%{optflags} -fPIE"
export CXXFLAGS="%{optflags} -fPIE"
Accepting request 630992 from home:vitezslav_cizek:branches:security:tls - Update to 3.6.3 Fixes security issues: CVE-2018-10846, CVE-2018-10845, CVE-2018-10844, CVE-2017-10790 (bsc#1105437, bsc#1105460, bsc#1105459, bsc#1047002) Other Changes: ** libgnutls: Introduced support for draft-ietf-tls-tls13-28 ** libgnutls: Apply compatibility settings for existing applications running with TLS1.2 or earlier and TLS 1.3. ** Added support for Russian Public Key Infrastructure according to RFCs 4491/4357/7836. ** Provide a uniform cipher list across supported TLS protocols ** The SSL 3.0 protocol is disabled on compile-time by default. ** libgnutls: Introduced function to switch the current FIPS140-2 operational mode ** libgnutls: Introduced low-level function to assist applications attempting client hello extension parsing, prior to GnuTLS' parsing of the message. ** libgnutls: When exporting an X.509 certificate avoid re-encoding if there are no modifications to the certificate. ** libgnutls: on group exchange honor the %SERVER_PRECEDENCE and select the groups which are preferred by the server. ** Improved counter-measures for TLS CBC record padding. ** Introduced the %FORCE_ETM priority string option. This option prevents the negotiation of legacy CBC ciphersuites unless encrypt-then-mac is negotiated. ** libgnutls: gnutls_privkey_import_ext4() was enhanced with the GNUTLS_PRIVKEY_INFO_PK_ALGO_BITS flag. ** libgnutls: gnutls_pkcs11_copy_secret_key, gnutls_pkcs11_copy_x509_privkey2, gnutls_pkcs11_privkey_generate3 will mark objects as sensitive by default unless GNUTLS_PKCS11_OBJ_FLAG_MARK_NOT_SENSITIVE is specified. This is an API change for these functions which make them err towards safety. ** libgnutls: improved aarch64 cpu features detection by using getauxval(). ** certtool: It is now possible to specify certificate and serial CRL numbers greater OBS-URL: https://build.opensuse.org/request/show/630992 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=4
2018-08-23 09:10:46 +02:00
#autoreconf -fiv
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
%configure \
Accepting request 182656 from Base:System - Override broken configure checks (forwarded request 182594 from Andreas_Schwab) OBS-URL: https://build.opensuse.org/request/show/182656 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=60
2013-07-09 20:49:54 +02:00
gl_cv_func_printf_directive_n=yes \
gl_cv_func_printf_infinite_long_double=yes \
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
--disable-static \
Accepting request 87383 from Base:System - cross-build fix: configure with sysroot (forwarded request 86388 from uli_suse) OBS-URL: https://build.opensuse.org/request/show/87383 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=37
2011-10-11 17:16:18 +02:00
--disable-rpath \
Accepting request 957881 from home:dirkmueller:Factory - build with lto - build with -Wl,-z,now -Wl,-z,relro - build without -fanalyzer, which cuts build time in ~ half OBS-URL: https://build.opensuse.org/request/show/957881 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=58
2022-03-09 11:49:43 +01:00
--disable-gcc-warnings \
Accepting request 87383 from Base:System - cross-build fix: configure with sysroot (forwarded request 86388 from uli_suse) OBS-URL: https://build.opensuse.org/request/show/87383 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=37
2011-10-11 17:16:18 +02:00
--disable-silent-rules \
Accepting request 896474 from home:susnux:branches:security:tls Update to version 3.7.2 OBS-URL: https://build.opensuse.org/request/show/896474 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=54
2021-06-01 14:42:43 +02:00
%{?with_kcapi:--enable-afalg} \
Accepting request 858088 from home:pmonrealgonzalez:branches:security:tls Don't forward to Factory yet, the policy needs more testing OBS-URL: https://build.opensuse.org/request/show/858088 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=44
2020-12-22 10:48:35 +01:00
--with-default-trust-store-dir=%{_localstatedir}/lib/ca-certificates/pem \
Accepting request 850542 from home:vitezslav_cizek:branches:security:tls - Don't forward to Factory yet, the policy needs more testing. - Use the centralized crypto policy profile (jsc#SLE-15832) - FIPS: Use 2048 bit prime in DH selftest (bsc#1176086) * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch - FIPS: Add TLS KDF selftest (bsc#1176671) * add gnutls-FIPS-TLS_KDF_selftest.patch OBS-URL: https://build.opensuse.org/request/show/850542 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=43
2020-12-05 18:16:13 +01:00
--with-system-priority-file=%{_sysconfdir}/crypto-policies/back-ends/gnutls.config \
--with-default-priority-string="@SYSTEM" \
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 19:32:11 +02:00
--with-sysroot=/%{?_sysroot} \
%if %{without tpm}
--without-tpm \
%endif
%if %{with dane}
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 22:41:21 +01:00
--with-unbound-root-key-file=%{_localstatedir}/lib/unbound/root.key \
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 19:32:11 +02:00
%else
--disable-libdane \
Accepting request 947389 from home:pmonrealgonzalez:branches:security:tls - Update to 3.7.3: [bsc#1190698, bsc#1190796] * libgnutls: The allowlisting configuration mode has been added to the system-wide settings. In this mode, all the algorithms are initially marked as insecure or disabled, while the applications can re-enable them either through the [overrides] section of the configuration file or the new API (#1172). * The build infrastructure no longer depends on GNU AutoGen for generating command-line option handling, template file parsing in certtool, and documentation generation (#773, #774). This change also removes run-time or bundled dependency on the libopts library, and requires Python 3.6 or later to regenerate the distribution tarball. Note that this brings in known backward incompatibility in command-line tools, such as long options are now case sensitive, while previously they were treated in a case insensitive manner: for example --RSA is no longer a valid option of certtool. The existing scripts using GnuTLS tools may need adjustment for this change. * libgnutls: The tpm2-tss-engine compatible private blobs can be loaded and used as a gnutls_privkey_t (#594). The code was originally written for the OpenConnect VPN project by David Woodhouse. To generate such blobs, use the tpm2tss-genkey tool from tpm2-tss-engine: https://github.com/tpm2-software/tpm2-tss-engine/#rsa-operations or the tpm2_encodeobject tool from unreleased tpm2-tools. * libgnutls: The library now transparently enables Linux KTLS (kernel TLS) when the feature is compiled in with --enable-ktls configuration option (#1113). If the KTLS initialization fails it automatically falls back to the user space implementation. * certtool: The certtool command can now read the Certificate Transparency (RFC 6962) SCT extension (#232). New API functions are also provided to access and manipulate the extension values. OBS-URL: https://build.opensuse.org/request/show/947389 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=57
2022-01-19 12:47:02 +01:00
%endif
%if %{with guile}
--enable-guile \
%else
--disable-guile \
Accepting request 295655 from Base:System - updated to 3.4.0 (released 2015-04-08) ** libgnutls: Added support for AES-CCM and AES-CCM-8 (RFC6655 and RFC7251) ciphersuites. The former are enabled by default, the latter need to be explicitly enabled, since they reduce the overall security level. ** libgnutls: Added support for Chacha20-Poly1305 ciphersuites following draft-mavrogiannopoulos-chacha-tls-05 and draft-irtf-cfrg-chacha20-poly1305-10. That is currently provided as technology preview and is not enabled by default, since there are no assigned ciphersuite points by IETF and there is no guarrantee of compatibility between draft versions. The ciphersuite priority string to enable it is "+CHACHA20-POLY1305". ** libgnutls: Added support for encrypt-then-authenticate in CBC ciphersuites (RFC7366 -taking into account its errata text). This is enabled by default and can be disabled using the %NO_ETM priority string. ** libgnutls: Added support for the extended master secret (triple-handshake fix) following draft-ietf-tls-session-hash-02. ** libgnutls: Added a new simple and hard to misuse AEAD API (crypto.h). ** libgnutls: SSL 3.0 is no longer included in the default priorities list. It has to be explicitly enabled, e.g., with a string like "NORMAL:+VERS-SSL3.0". ** libgnutls: ARCFOUR (RC4) is no longer included in the default priorities list. It has to be explicitly enabled, e.g., with a string like "NORMAL:+ARCFOUR-128". ** libgnutls: DSA signatures and DHE-DSS are no longer included in the default priorities list. They have to be explicitly enabled, e.g., with a string like "NORMAL:+DHE-DSS:+SIGN-DSA-SHA256:+SIGN-DSA-SHA1". The DSA ciphersuites were dropped because they had no deployment at all on the internet, to justify their inclusion. ** libgnutls: The priority string EXPORT was completely removed. The string OBS-URL: https://build.opensuse.org/request/show/295655 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=83
2015-04-18 10:38:18 +02:00
%endif
Accepting request 528289 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/528289 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=104
2017-09-25 13:50:29 +02:00
--enable-fips140-mode \
Accepting request 947389 from home:pmonrealgonzalez:branches:security:tls - Update to 3.7.3: [bsc#1190698, bsc#1190796] * libgnutls: The allowlisting configuration mode has been added to the system-wide settings. In this mode, all the algorithms are initially marked as insecure or disabled, while the applications can re-enable them either through the [overrides] section of the configuration file or the new API (#1172). * The build infrastructure no longer depends on GNU AutoGen for generating command-line option handling, template file parsing in certtool, and documentation generation (#773, #774). This change also removes run-time or bundled dependency on the libopts library, and requires Python 3.6 or later to regenerate the distribution tarball. Note that this brings in known backward incompatibility in command-line tools, such as long options are now case sensitive, while previously they were treated in a case insensitive manner: for example --RSA is no longer a valid option of certtool. The existing scripts using GnuTLS tools may need adjustment for this change. * libgnutls: The tpm2-tss-engine compatible private blobs can be loaded and used as a gnutls_privkey_t (#594). The code was originally written for the OpenConnect VPN project by David Woodhouse. To generate such blobs, use the tpm2tss-genkey tool from tpm2-tss-engine: https://github.com/tpm2-software/tpm2-tss-engine/#rsa-operations or the tpm2_encodeobject tool from unreleased tpm2-tools. * libgnutls: The library now transparently enables Linux KTLS (kernel TLS) when the feature is compiled in with --enable-ktls configuration option (#1113). If the KTLS initialization fails it automatically falls back to the user space implementation. * certtool: The certtool command can now read the Certificate Transparency (RFC 6962) SCT extension (#232). New API functions are also provided to access and manipulate the extension values. OBS-URL: https://build.opensuse.org/request/show/947389 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=57
2022-01-19 12:47:02 +01:00
--with-fips140-module-name="GnuTLS version" \
--with-fips140-module-version="%{version}-%{release}" \
Accepting request 858088 from home:pmonrealgonzalez:branches:security:tls Don't forward to Factory yet, the policy needs more testing OBS-URL: https://build.opensuse.org/request/show/858088 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=44
2020-12-22 10:48:35 +01:00
%{nil}
Accepting request 979523 from home:1Antoine1:branches:security:tls - Update to version 3.7.6: * libgnutls: Fixed invalid write when gnutls_realloc_zero() is called with new_size < old_size. This bug caused heap corruption when gnutls_realloc_zero() has been set as gmp reallocfunc. * Remove gnutls-3.7.5-fix-gnutls_realloc_zero.patch: Fixed upstream. - Add gnutls-3.7.5-fix-gnutls_realloc_zero.patch: Fix memory corruption in gnutls_realloc_zero (gl#gnutls/gnutls#1367, boo#1199929). - update to 3.7.5: * add options disable session ticket usage in TLS 1.2 because it does not provide forward secrecy * For TLS 1.3 where session tickets do provide forward secrecy, the PFS priority string now only disables session tickets in TLS 1.2. * Future backward incompatibility: in the next major release of GnuTLS those flag and modifier are planned to be removed * gnutls-cli, gnutls-serv: Channel binding for printing information has been changed from tls-unique to tls-exporter as tls-unique is not supported in TLS 1.3. * Certificate sanity checks has been enhanced to make gnutls more RFC 5280 compliant: * Removed 3DES from FIPS approved algorithms * Optimized support for AES-SIV-CMAC algorithms * libgnutls: HKDF and AES-GCM algorithms are now approved in FIPS-140 mode when used in TLS OBS-URL: https://build.opensuse.org/request/show/979523 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=67
2022-05-30 10:08:31 +02:00
%make_build
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-16 00:15:20 +01:00
%install
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
%make_install
rm -rf %{buildroot}%{_datadir}/locale/en@{,bold}quot
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=6
2007-10-25 18:10:26 +02:00
# Do not package static libs and libtool files
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 22:41:21 +01:00
find %{buildroot} -type f -name "*.la" -delete -print
Accepting request 142850 from Base:System - include LGPL-3.0+ text in COPYING.LESSER - run regression tests, but move "make check" to %check section - add gnutls-3.0.26-skip-test-fwrite.patch to skip a failing test - no longer manipulate doc/examples tree in %install section, the deletion of Makefiles breaks "make check" in %check - install documentation, reference and examples in %install section to fetch them for the package without unneccessary files (forwarded request 142825 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/142850 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=53
2012-11-28 10:29:35 +01:00
Accepting request 892936 from home:pmonrealgonzalez:branches:security:tls - Compute the FIPS hmac file without re-defining the __os_install_post macro, use the brp-50-generate-fips-hmac script instead. [bsc#1184555] - Require the main package in devel and lib packages as the default priorities are now set via crypto-policies. [bsc#1183082] OBS-URL: https://build.opensuse.org/request/show/892936 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=51
2021-05-14 16:01:30 +02:00
# Compute FIPS hmac using the brp-50-generate-fips-hmac script
export BRP_FIPSHMAC_FILES=%{buildroot}%{_libdir}/libgnutls.so.%{gnutls_sover}
Accepting request 142850 from Base:System - include LGPL-3.0+ text in COPYING.LESSER - run regression tests, but move "make check" to %check section - add gnutls-3.0.26-skip-test-fwrite.patch to skip a failing test - no longer manipulate doc/examples tree in %install section, the deletion of Makefiles breaks "make check" in %check - install documentation, reference and examples in %install section to fetch them for the package without unneccessary files (forwarded request 142825 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/142850 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=53
2012-11-28 10:29:35 +01:00
# install docs
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 22:41:21 +01:00
mkdir -p %{buildroot}%{_docdir}/libgnutls-devel/
Accepting request 720091 from home:AndreasStieger:branches:security:tls gnutls 3.6.9 OBS-URL: https://build.opensuse.org/request/show/720091 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=22
2019-07-31 19:35:10 +02:00
cp doc/gnutls.html doc/*.png %{buildroot}%{_docdir}/libgnutls-devel/
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 22:41:21 +01:00
mkdir -p %{buildroot}%{_docdir}/libgnutls-devel/examples
cp doc/examples/*.{c,h} %{buildroot}%{_docdir}/libgnutls-devel/examples/
Accepting request 142850 from Base:System - include LGPL-3.0+ text in COPYING.LESSER - run regression tests, but move "make check" to %check section - add gnutls-3.0.26-skip-test-fwrite.patch to skip a failing test - no longer manipulate doc/examples tree in %install section, the deletion of Makefiles breaks "make check" in %check - install documentation, reference and examples in %install section to fetch them for the package without unneccessary files (forwarded request 142825 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/142850 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=53
2012-11-28 10:29:35 +01:00
Accepting request 391813 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/391813 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=91
2016-05-04 08:17:29 +02:00
# PNG files are replaced with the compressed files and that breaks
# deduplication, this is workaround
Accepting request 492632 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/492632 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=98
2017-05-06 18:25:05 +02:00
find %{buildroot}%{_datadir} -name '*.png' -exec gzip -n -9 {} +
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 11:40:38 +02:00
rm -rf %{buildroot}%{_datadir}/doc/gnutls
Accepting request 391813 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/391813 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=91
2016-05-04 08:17:29 +02:00
%fdupes -s %{buildroot}%{_datadir}
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
%find_lang libgnutls --all-name
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-16 00:15:20 +01:00
Accepting request 142850 from Base:System - include LGPL-3.0+ text in COPYING.LESSER - run regression tests, but move "make check" to %check section - add gnutls-3.0.26-skip-test-fwrite.patch to skip a failing test - no longer manipulate doc/examples tree in %install section, the deletion of Makefiles breaks "make check" in %check - install documentation, reference and examples in %install section to fetch them for the package without unneccessary files (forwarded request 142825 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/142850 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=53
2012-11-28 10:29:35 +01:00
%check
Accepting request 143744 from Base:System - Test suite breaks on qemu-arm some calls not implemented. (forwarded request 143321 from elvigia) OBS-URL: https://build.opensuse.org/request/show/143744 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=54
2012-12-03 09:36:19 +01:00
%if ! 0%{?qemu_user_space_build}
Accepting request 979523 from home:1Antoine1:branches:security:tls - Update to version 3.7.6: * libgnutls: Fixed invalid write when gnutls_realloc_zero() is called with new_size < old_size. This bug caused heap corruption when gnutls_realloc_zero() has been set as gmp reallocfunc. * Remove gnutls-3.7.5-fix-gnutls_realloc_zero.patch: Fixed upstream. - Add gnutls-3.7.5-fix-gnutls_realloc_zero.patch: Fix memory corruption in gnutls_realloc_zero (gl#gnutls/gnutls#1367, boo#1199929). - update to 3.7.5: * add options disable session ticket usage in TLS 1.2 because it does not provide forward secrecy * For TLS 1.3 where session tickets do provide forward secrecy, the PFS priority string now only disables session tickets in TLS 1.2. * Future backward incompatibility: in the next major release of GnuTLS those flag and modifier are planned to be removed * gnutls-cli, gnutls-serv: Channel binding for printing information has been changed from tls-unique to tls-exporter as tls-unique is not supported in TLS 1.3. * Certificate sanity checks has been enhanced to make gnutls more RFC 5280 compliant: * Removed 3DES from FIPS approved algorithms * Optimized support for AES-SIV-CMAC algorithms * libgnutls: HKDF and AES-GCM algorithms are now approved in FIPS-140 mode when used in TLS OBS-URL: https://build.opensuse.org/request/show/979523 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=67
2022-05-30 10:08:31 +02:00
%make_build check GNUTLS_SYSTEM_PRIORITY_FILE=/dev/null || {
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 11:40:38 +02:00
find -name test-suite.log -print -exec cat {} +
Accepting request 304179 from Base:System - Disable buggy valgrind on armv7l (forwarded request 304053 from AndreasSchwab) OBS-URL: https://build.opensuse.org/request/show/304179 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=84
2015-04-28 20:42:20 +02:00
exit 1
}
Accepting request 964661 from home:pmonrealgonzalez:branches:security:tls - FIPS: Additional PBKDF2 requirements for KAT [bsc#1184669] * The IG 10.3.A and SP800-132 require some minimum parameters for the salt length, password length and iteration count. These parameters should be also used in the KAT. * Add gnutls-FIPS-PBKDF2-KAT-requirements.patch - Enable to run the regression tests also in FIPS mode. * Add gnutls-FIPS-disable-failing-tests.patch OBS-URL: https://build.opensuse.org/request/show/964661 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=61
2022-03-24 13:48:13 +01:00
#Run the regression tests also in FIPS mode
GNUTLS_FORCE_FIPS_MODE=1 make check %{?_smp_mflags} GNUTLS_SYSTEM_PRIORITY_FILE=/dev/null || {
find -name test-suite.log -print -exec cat {} +
exit 1
}
Accepting request 143744 from Base:System - Test suite breaks on qemu-arm some calls not implemented. (forwarded request 143321 from elvigia) OBS-URL: https://build.opensuse.org/request/show/143744 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=54
2012-12-03 09:36:19 +01:00
%endif
Accepting request 142850 from Base:System - include LGPL-3.0+ text in COPYING.LESSER - run regression tests, but move "make check" to %check section - add gnutls-3.0.26-skip-test-fwrite.patch to skip a failing test - no longer manipulate doc/examples tree in %install section, the deletion of Makefiles breaks "make check" in %check - install documentation, reference and examples in %install section to fetch them for the package without unneccessary files (forwarded request 142825 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/142850 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=53
2012-11-28 10:29:35 +01:00
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
%post -n libgnutls%{gnutls_sover} -p /sbin/ldconfig
%postun -n libgnutls%{gnutls_sover} -p /sbin/ldconfig
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 19:32:11 +02:00
%if %{with dane}
%post -n libgnutls-dane%{gnutls_dane_sover} -p /sbin/ldconfig
%postun -n libgnutls-dane%{gnutls_dane_sover} -p /sbin/ldconfig
%endif
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
%post -n libgnutlsxx%{gnutlsxx_sover} -p /sbin/ldconfig
%postun -n libgnutlsxx%{gnutlsxx_sover} -p /sbin/ldconfig
Accepting request 892936 from home:pmonrealgonzalez:branches:security:tls - Compute the FIPS hmac file without re-defining the __os_install_post macro, use the brp-50-generate-fips-hmac script instead. [bsc#1184555] - Require the main package in devel and lib packages as the default priorities are now set via crypto-policies. [bsc#1183082] OBS-URL: https://build.opensuse.org/request/show/892936 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=51
2021-05-14 16:01:30 +02:00
Accepting request 31574 from Base:System Copy from Base:System/gnutls based on submit request 31574 from user msmeissn OBS-URL: https://build.opensuse.org/request/show/31574 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=21
2010-02-05 14:05:07 +01:00
%files -f libgnutls.lang
Accepting request 580155 from Base:System OBS-URL: https://build.opensuse.org/request/show/580155 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=107
2018-02-28 19:55:27 +01:00
%license LICENSE
%doc THANKS README.md NEWS ChangeLog AUTHORS doc/TODO
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
%{_bindir}/certtool
%{_bindir}/gnutls-cli
%{_bindir}/gnutls-cli-debug
%{_bindir}/gnutls-serv
Accepting request 121255 from Base:System - Update to version 3.0.19: + libgnutls: - When decoding a PKCS #11 URL the pin-source field is assumed to be a file that stores the pin. Based on patch by David Smith. - gnutls_record_check_pending() no longer returns unprocessed data, and thus ensure the non-blocking of the next call to gnutls_record_recv(). - Added strict tests in Diffie-Hellman and SRP key exchange public keys. - in ECDSA and DSA TLS 1.2 authentication be less strict in hash selection, and allow a stronger hash to be used than the appropriate, to improve interoperability with openssl. + tests: - Disabled floating point test, and corrections in pkcs12 decoding tests. + API and ABI modifications: - No changes since last version. - Changes from version 3.0.18: + certtool: - Avoid a Y2K38 bug when generating certificates. Patch by Robert Millan. + libgnutls: - Make sure that GNUTLS_E_PREMATURE_TERMINATION - is returned on premature termination (and added unit test). - Fixes for W64 API. Patch by B. Scott Michel. - Corrected VIA padlock detection for old VIA processors. Reported by Kris Karas. - Updated assembler files. OBS-URL: https://build.opensuse.org/request/show/121255 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=44
2012-05-21 10:25:22 +02:00
%{_bindir}/ocsptool
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
%{_bindir}/psktool
%{_bindir}/p11tool
%{_bindir}/srptool
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 19:32:11 +02:00
%if %{with dane}
Accepting request 181378 from Base:System - Disable all ECC algorithms. - gnutls-32bit.patch: upstream patch to make test work with 32bit time_t. - gnutls-implement-trust-store-dir.diff currently not yet forward ported. - Updated to GnuTLS 3.2.1 ** libgnutls: Allow ECC when in SSL 3.0 to work-around a bug in certain openssl versions. ** libgnutls: Fixes in interrupted function resumption. Report and patch by Tim Kosse. ** libgnutls: Corrected issue when receiving client hello verify requests in DTLS. ** libgnutls: Fixes in DTLS record overhead size calculations. ** libgnutls: gnutls_handshake_get_last_in() was fixed. Reported by Mann Ern Kang. - Updated to GnuTLS 3.2.0 ** libgnutls: Use nettle's elliptic curve implementation. ** libgnutls: Added Salsa20 cipher ** libgnutls: Added UMAC-96 and UMAC-128 ** libgnutls: Added ciphersuites involving Salsa20 and UMAC-96. As they are not standardized they are defined using private ciphersuite numbers. ** libgnutls: Added support for DTLS 1.2. ** libgnutls: Added support for the Application Layer Protocol Negotiation (ALPN) extension. ** libgnutls: Removed support for the RSA-EXPORT ciphersuites. ** libgnutls: Avoid linking to librt (that also avoids unnecessary linking to pthreads if p11-kit isn't used). - Updated to GnuTLS 3.1.10 (released 2013-03-22) ** certtool: When generating PKCS #12 files use by default the ARCFOUR (RC4) cipher to be compatible with devices that don't OBS-URL: https://build.opensuse.org/request/show/181378 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=58
2013-07-01 15:54:42 +02:00
%{_bindir}/danetool
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 19:32:11 +02:00
%endif
%if %{with tpm}
%{_bindir}/tpmtool
%endif
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
%{_mandir}/man1/*
%files -n libgnutls%{gnutls_sover}
Accepting request 979523 from home:1Antoine1:branches:security:tls - Update to version 3.7.6: * libgnutls: Fixed invalid write when gnutls_realloc_zero() is called with new_size < old_size. This bug caused heap corruption when gnutls_realloc_zero() has been set as gmp reallocfunc. * Remove gnutls-3.7.5-fix-gnutls_realloc_zero.patch: Fixed upstream. - Add gnutls-3.7.5-fix-gnutls_realloc_zero.patch: Fix memory corruption in gnutls_realloc_zero (gl#gnutls/gnutls#1367, boo#1199929). - update to 3.7.5: * add options disable session ticket usage in TLS 1.2 because it does not provide forward secrecy * For TLS 1.3 where session tickets do provide forward secrecy, the PFS priority string now only disables session tickets in TLS 1.2. * Future backward incompatibility: in the next major release of GnuTLS those flag and modifier are planned to be removed * gnutls-cli, gnutls-serv: Channel binding for printing information has been changed from tls-unique to tls-exporter as tls-unique is not supported in TLS 1.3. * Certificate sanity checks has been enhanced to make gnutls more RFC 5280 compliant: * Removed 3DES from FIPS approved algorithms * Optimized support for AES-SIV-CMAC algorithms * libgnutls: HKDF and AES-GCM algorithms are now approved in FIPS-140 mode when used in TLS OBS-URL: https://build.opensuse.org/request/show/979523 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=67
2022-05-30 10:08:31 +02:00
%license LICENSE
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
%{_libdir}/libgnutls.so.%{gnutls_sover}*
Accepting request 790830 from home:vitezslav_cizek:branches:security:tls - Use correct nettle .so version when looking for a FIPS checksum (bsc#1166635) * add gnutls-fips_correct_nettle_soversion.patch - Update to 3.6.13 * libgnutls: Fix a DTLS-protocol regression (caused by TLS1.3 support) The DTLS client would not contribute any randomness to the DTLS negotiation, breaking the security guarantees of the DTLS protocol (#960) [GNUTLS-SA-2020-03-31, CVSS: high] (bsc#1168345) * libgnutls: Added new APIs to access KDF algorithms (#813). * libgnutls: Added new callback gnutls_keylog_func that enables a custom logging functionality. * libgnutls: Added support for non-null terminated usernames in PSK negotiation (#586). * gnutls-cli-debug: Improved support for old servers that only support SSL 3.0. - Split off FIPS checksums into a separate libgnutls30-hmac subpackage (bsc#1152692) OBS-URL: https://build.opensuse.org/request/show/790830 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=32
2020-04-02 12:58:27 +02:00
%files -n libgnutls%{gnutls_sover}-hmac
Accepting request 979523 from home:1Antoine1:branches:security:tls - Update to version 3.7.6: * libgnutls: Fixed invalid write when gnutls_realloc_zero() is called with new_size < old_size. This bug caused heap corruption when gnutls_realloc_zero() has been set as gmp reallocfunc. * Remove gnutls-3.7.5-fix-gnutls_realloc_zero.patch: Fixed upstream. - Add gnutls-3.7.5-fix-gnutls_realloc_zero.patch: Fix memory corruption in gnutls_realloc_zero (gl#gnutls/gnutls#1367, boo#1199929). - update to 3.7.5: * add options disable session ticket usage in TLS 1.2 because it does not provide forward secrecy * For TLS 1.3 where session tickets do provide forward secrecy, the PFS priority string now only disables session tickets in TLS 1.2. * Future backward incompatibility: in the next major release of GnuTLS those flag and modifier are planned to be removed * gnutls-cli, gnutls-serv: Channel binding for printing information has been changed from tls-unique to tls-exporter as tls-unique is not supported in TLS 1.3. * Certificate sanity checks has been enhanced to make gnutls more RFC 5280 compliant: * Removed 3DES from FIPS approved algorithms * Optimized support for AES-SIV-CMAC algorithms * libgnutls: HKDF and AES-GCM algorithms are now approved in FIPS-140 mode when used in TLS OBS-URL: https://build.opensuse.org/request/show/979523 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=67
2022-05-30 10:08:31 +02:00
%license LICENSE
Accepting request 734378 from home:vitezslav_cizek:branches:security:tls - Install checksums for binary integrity verification which are required when running in FIPS mode (bsc#1152692, jsc#SLE-9518) OBS-URL: https://build.opensuse.org/request/show/734378 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=24
2019-10-01 17:18:43 +02:00
%{_libdir}/.libgnutls.so.%{gnutls_sover}*.hmac
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 19:32:11 +02:00
%if %{with dane}
%files -n libgnutls-dane%{gnutls_dane_sover}
Accepting request 979523 from home:1Antoine1:branches:security:tls - Update to version 3.7.6: * libgnutls: Fixed invalid write when gnutls_realloc_zero() is called with new_size < old_size. This bug caused heap corruption when gnutls_realloc_zero() has been set as gmp reallocfunc. * Remove gnutls-3.7.5-fix-gnutls_realloc_zero.patch: Fixed upstream. - Add gnutls-3.7.5-fix-gnutls_realloc_zero.patch: Fix memory corruption in gnutls_realloc_zero (gl#gnutls/gnutls#1367, boo#1199929). - update to 3.7.5: * add options disable session ticket usage in TLS 1.2 because it does not provide forward secrecy * For TLS 1.3 where session tickets do provide forward secrecy, the PFS priority string now only disables session tickets in TLS 1.2. * Future backward incompatibility: in the next major release of GnuTLS those flag and modifier are planned to be removed * gnutls-cli, gnutls-serv: Channel binding for printing information has been changed from tls-unique to tls-exporter as tls-unique is not supported in TLS 1.3. * Certificate sanity checks has been enhanced to make gnutls more RFC 5280 compliant: * Removed 3DES from FIPS approved algorithms * Optimized support for AES-SIV-CMAC algorithms * libgnutls: HKDF and AES-GCM algorithms are now approved in FIPS-140 mode when used in TLS OBS-URL: https://build.opensuse.org/request/show/979523 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=67
2022-05-30 10:08:31 +02:00
%license LICENSE
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 19:32:11 +02:00
%{_libdir}/libgnutls-dane.so.%{gnutls_dane_sover}*
%endif
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
%files -n libgnutlsxx%{gnutlsxx_sover}
Accepting request 979523 from home:1Antoine1:branches:security:tls - Update to version 3.7.6: * libgnutls: Fixed invalid write when gnutls_realloc_zero() is called with new_size < old_size. This bug caused heap corruption when gnutls_realloc_zero() has been set as gmp reallocfunc. * Remove gnutls-3.7.5-fix-gnutls_realloc_zero.patch: Fixed upstream. - Add gnutls-3.7.5-fix-gnutls_realloc_zero.patch: Fix memory corruption in gnutls_realloc_zero (gl#gnutls/gnutls#1367, boo#1199929). - update to 3.7.5: * add options disable session ticket usage in TLS 1.2 because it does not provide forward secrecy * For TLS 1.3 where session tickets do provide forward secrecy, the PFS priority string now only disables session tickets in TLS 1.2. * Future backward incompatibility: in the next major release of GnuTLS those flag and modifier are planned to be removed * gnutls-cli, gnutls-serv: Channel binding for printing information has been changed from tls-unique to tls-exporter as tls-unique is not supported in TLS 1.3. * Certificate sanity checks has been enhanced to make gnutls more RFC 5280 compliant: * Removed 3DES from FIPS approved algorithms * Optimized support for AES-SIV-CMAC algorithms * libgnutls: HKDF and AES-GCM algorithms are now approved in FIPS-140 mode when used in TLS OBS-URL: https://build.opensuse.org/request/show/979523 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=67
2022-05-30 10:08:31 +02:00
%license LICENSE
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
%{_libdir}/libgnutlsxx.so.%{gnutlsxx_sover}*
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=6
2007-10-25 18:10:26 +02:00
%files -n libgnutls-devel
Accepting request 979523 from home:1Antoine1:branches:security:tls - Update to version 3.7.6: * libgnutls: Fixed invalid write when gnutls_realloc_zero() is called with new_size < old_size. This bug caused heap corruption when gnutls_realloc_zero() has been set as gmp reallocfunc. * Remove gnutls-3.7.5-fix-gnutls_realloc_zero.patch: Fixed upstream. - Add gnutls-3.7.5-fix-gnutls_realloc_zero.patch: Fix memory corruption in gnutls_realloc_zero (gl#gnutls/gnutls#1367, boo#1199929). - update to 3.7.5: * add options disable session ticket usage in TLS 1.2 because it does not provide forward secrecy * For TLS 1.3 where session tickets do provide forward secrecy, the PFS priority string now only disables session tickets in TLS 1.2. * Future backward incompatibility: in the next major release of GnuTLS those flag and modifier are planned to be removed * gnutls-cli, gnutls-serv: Channel binding for printing information has been changed from tls-unique to tls-exporter as tls-unique is not supported in TLS 1.3. * Certificate sanity checks has been enhanced to make gnutls more RFC 5280 compliant: * Removed 3DES from FIPS approved algorithms * Optimized support for AES-SIV-CMAC algorithms * libgnutls: HKDF and AES-GCM algorithms are now approved in FIPS-140 mode when used in TLS OBS-URL: https://build.opensuse.org/request/show/979523 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=67
2022-05-30 10:08:31 +02:00
%license LICENSE
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
%dir %{_includedir}/%{name}
%{_includedir}/%{name}/abstract.h
%{_includedir}/%{name}/crypto.h
%{_includedir}/%{name}/compat.h
%{_includedir}/%{name}/dtls.h
%{_includedir}/%{name}/gnutls.h
%{_includedir}/%{name}/openpgp.h
Accepting request 121255 from Base:System - Update to version 3.0.19: + libgnutls: - When decoding a PKCS #11 URL the pin-source field is assumed to be a file that stores the pin. Based on patch by David Smith. - gnutls_record_check_pending() no longer returns unprocessed data, and thus ensure the non-blocking of the next call to gnutls_record_recv(). - Added strict tests in Diffie-Hellman and SRP key exchange public keys. - in ECDSA and DSA TLS 1.2 authentication be less strict in hash selection, and allow a stronger hash to be used than the appropriate, to improve interoperability with openssl. + tests: - Disabled floating point test, and corrections in pkcs12 decoding tests. + API and ABI modifications: - No changes since last version. - Changes from version 3.0.18: + certtool: - Avoid a Y2K38 bug when generating certificates. Patch by Robert Millan. + libgnutls: - Make sure that GNUTLS_E_PREMATURE_TERMINATION - is returned on premature termination (and added unit test). - Fixes for W64 API. Patch by B. Scott Michel. - Corrected VIA padlock detection for old VIA processors. Reported by Kris Karas. - Updated assembler files. OBS-URL: https://build.opensuse.org/request/show/121255 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=44
2012-05-21 10:25:22 +02:00
%{_includedir}/%{name}/ocsp.h
Accepting request 324612 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/324612 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=87
2015-08-25 07:17:02 +02:00
%{_includedir}/%{name}/pkcs7.h
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
%{_includedir}/%{name}/pkcs11.h
%{_includedir}/%{name}/pkcs12.h
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 19:32:11 +02:00
%{_includedir}/%{name}/self-test.h
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 22:41:21 +01:00
%{_includedir}/%{name}/socket.h
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
%{_includedir}/%{name}/x509.h
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 19:32:11 +02:00
%{_includedir}/%{name}/x509-ext.h
Accepting request 181378 from Base:System - Disable all ECC algorithms. - gnutls-32bit.patch: upstream patch to make test work with 32bit time_t. - gnutls-implement-trust-store-dir.diff currently not yet forward ported. - Updated to GnuTLS 3.2.1 ** libgnutls: Allow ECC when in SSL 3.0 to work-around a bug in certain openssl versions. ** libgnutls: Fixes in interrupted function resumption. Report and patch by Tim Kosse. ** libgnutls: Corrected issue when receiving client hello verify requests in DTLS. ** libgnutls: Fixes in DTLS record overhead size calculations. ** libgnutls: gnutls_handshake_get_last_in() was fixed. Reported by Mann Ern Kang. - Updated to GnuTLS 3.2.0 ** libgnutls: Use nettle's elliptic curve implementation. ** libgnutls: Added Salsa20 cipher ** libgnutls: Added UMAC-96 and UMAC-128 ** libgnutls: Added ciphersuites involving Salsa20 and UMAC-96. As they are not standardized they are defined using private ciphersuite numbers. ** libgnutls: Added support for DTLS 1.2. ** libgnutls: Added support for the Application Layer Protocol Negotiation (ALPN) extension. ** libgnutls: Removed support for the RSA-EXPORT ciphersuites. ** libgnutls: Avoid linking to librt (that also avoids unnecessary linking to pthreads if p11-kit isn't used). - Updated to GnuTLS 3.1.10 (released 2013-03-22) ** certtool: When generating PKCS #12 files use by default the ARCFOUR (RC4) cipher to be compatible with devices that don't OBS-URL: https://build.opensuse.org/request/show/181378 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=58
2013-07-01 15:54:42 +02:00
%{_includedir}/%{name}/tpm.h
Accepting request 295655 from Base:System - updated to 3.4.0 (released 2015-04-08) ** libgnutls: Added support for AES-CCM and AES-CCM-8 (RFC6655 and RFC7251) ciphersuites. The former are enabled by default, the latter need to be explicitly enabled, since they reduce the overall security level. ** libgnutls: Added support for Chacha20-Poly1305 ciphersuites following draft-mavrogiannopoulos-chacha-tls-05 and draft-irtf-cfrg-chacha20-poly1305-10. That is currently provided as technology preview and is not enabled by default, since there are no assigned ciphersuite points by IETF and there is no guarrantee of compatibility between draft versions. The ciphersuite priority string to enable it is "+CHACHA20-POLY1305". ** libgnutls: Added support for encrypt-then-authenticate in CBC ciphersuites (RFC7366 -taking into account its errata text). This is enabled by default and can be disabled using the %NO_ETM priority string. ** libgnutls: Added support for the extended master secret (triple-handshake fix) following draft-ietf-tls-session-hash-02. ** libgnutls: Added a new simple and hard to misuse AEAD API (crypto.h). ** libgnutls: SSL 3.0 is no longer included in the default priorities list. It has to be explicitly enabled, e.g., with a string like "NORMAL:+VERS-SSL3.0". ** libgnutls: ARCFOUR (RC4) is no longer included in the default priorities list. It has to be explicitly enabled, e.g., with a string like "NORMAL:+ARCFOUR-128". ** libgnutls: DSA signatures and DHE-DSS are no longer included in the default priorities list. They have to be explicitly enabled, e.g., with a string like "NORMAL:+DHE-DSS:+SIGN-DSA-SHA256:+SIGN-DSA-SHA1". The DSA ciphersuites were dropped because they had no deployment at all on the internet, to justify their inclusion. ** libgnutls: The priority string EXPORT was completely removed. The string OBS-URL: https://build.opensuse.org/request/show/295655 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=83
2015-04-18 10:38:18 +02:00
%{_includedir}/%{name}/system-keys.h
%{_includedir}/%{name}/urls.h
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
%{_libdir}/libgnutls.so
%{_libdir}/pkgconfig/gnutls.pc
%{_mandir}/man3/*
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 22:41:21 +01:00
%{_infodir}/*%{ext_info}
Accepting request 142850 from Base:System - include LGPL-3.0+ text in COPYING.LESSER - run regression tests, but move "make check" to %check section - add gnutls-3.0.26-skip-test-fwrite.patch to skip a failing test - no longer manipulate doc/examples tree in %install section, the deletion of Makefiles breaks "make check" in %check - install documentation, reference and examples in %install section to fetch them for the package without unneccessary files (forwarded request 142825 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/142850 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=53
2012-11-28 10:29:35 +01:00
%doc %{_docdir}/libgnutls-devel
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=7
2008-02-28 01:56:17 +01:00
Accepting request 360180 from Base:System - follow the work in the unbound package and use the libunbound-devel symbol for the buildrequires. we override it for the distro build with libunbound-devel-mini to avoid build loops. (forwarded request 360179 from darix) OBS-URL: https://build.opensuse.org/request/show/360180 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=89
2016-02-24 14:25:15 +01:00
%if %{with dane}
%files -n libgnutls-dane-devel
Accepting request 979523 from home:1Antoine1:branches:security:tls - Update to version 3.7.6: * libgnutls: Fixed invalid write when gnutls_realloc_zero() is called with new_size < old_size. This bug caused heap corruption when gnutls_realloc_zero() has been set as gmp reallocfunc. * Remove gnutls-3.7.5-fix-gnutls_realloc_zero.patch: Fixed upstream. - Add gnutls-3.7.5-fix-gnutls_realloc_zero.patch: Fix memory corruption in gnutls_realloc_zero (gl#gnutls/gnutls#1367, boo#1199929). - update to 3.7.5: * add options disable session ticket usage in TLS 1.2 because it does not provide forward secrecy * For TLS 1.3 where session tickets do provide forward secrecy, the PFS priority string now only disables session tickets in TLS 1.2. * Future backward incompatibility: in the next major release of GnuTLS those flag and modifier are planned to be removed * gnutls-cli, gnutls-serv: Channel binding for printing information has been changed from tls-unique to tls-exporter as tls-unique is not supported in TLS 1.3. * Certificate sanity checks has been enhanced to make gnutls more RFC 5280 compliant: * Removed 3DES from FIPS approved algorithms * Optimized support for AES-SIV-CMAC algorithms * libgnutls: HKDF and AES-GCM algorithms are now approved in FIPS-140 mode when used in TLS OBS-URL: https://build.opensuse.org/request/show/979523 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=67
2022-05-30 10:08:31 +02:00
%license LICENSE
Accepting request 360180 from Base:System - follow the work in the unbound package and use the libunbound-devel symbol for the buildrequires. we override it for the distro build with libunbound-devel-mini to avoid build loops. (forwarded request 360179 from darix) OBS-URL: https://build.opensuse.org/request/show/360180 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=89
2016-02-24 14:25:15 +01:00
%dir %{_includedir}/%{name}
%{_includedir}/%{name}/dane.h
%{_libdir}/pkgconfig/gnutls-dane.pc
%{_libdir}/libgnutls-dane.so
%endif
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
%files -n libgnutlsxx-devel
Accepting request 979523 from home:1Antoine1:branches:security:tls - Update to version 3.7.6: * libgnutls: Fixed invalid write when gnutls_realloc_zero() is called with new_size < old_size. This bug caused heap corruption when gnutls_realloc_zero() has been set as gmp reallocfunc. * Remove gnutls-3.7.5-fix-gnutls_realloc_zero.patch: Fixed upstream. - Add gnutls-3.7.5-fix-gnutls_realloc_zero.patch: Fix memory corruption in gnutls_realloc_zero (gl#gnutls/gnutls#1367, boo#1199929). - update to 3.7.5: * add options disable session ticket usage in TLS 1.2 because it does not provide forward secrecy * For TLS 1.3 where session tickets do provide forward secrecy, the PFS priority string now only disables session tickets in TLS 1.2. * Future backward incompatibility: in the next major release of GnuTLS those flag and modifier are planned to be removed * gnutls-cli, gnutls-serv: Channel binding for printing information has been changed from tls-unique to tls-exporter as tls-unique is not supported in TLS 1.3. * Certificate sanity checks has been enhanced to make gnutls more RFC 5280 compliant: * Removed 3DES from FIPS approved algorithms * Optimized support for AES-SIV-CMAC algorithms * libgnutls: HKDF and AES-GCM algorithms are now approved in FIPS-140 mode when used in TLS OBS-URL: https://build.opensuse.org/request/show/979523 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=67
2022-05-30 10:08:31 +02:00
%license LICENSE
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 13:44:12 +02:00
%{_libdir}/libgnutlsxx.so
%dir %{_includedir}/%{name}
%{_includedir}/%{name}/gnutlsxx.h
Accepting request 391813 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/391813 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=91
2016-05-04 08:17:29 +02:00
%if %{with guile}
%files guile
Accepting request 979523 from home:1Antoine1:branches:security:tls - Update to version 3.7.6: * libgnutls: Fixed invalid write when gnutls_realloc_zero() is called with new_size < old_size. This bug caused heap corruption when gnutls_realloc_zero() has been set as gmp reallocfunc. * Remove gnutls-3.7.5-fix-gnutls_realloc_zero.patch: Fixed upstream. - Add gnutls-3.7.5-fix-gnutls_realloc_zero.patch: Fix memory corruption in gnutls_realloc_zero (gl#gnutls/gnutls#1367, boo#1199929). - update to 3.7.5: * add options disable session ticket usage in TLS 1.2 because it does not provide forward secrecy * For TLS 1.3 where session tickets do provide forward secrecy, the PFS priority string now only disables session tickets in TLS 1.2. * Future backward incompatibility: in the next major release of GnuTLS those flag and modifier are planned to be removed * gnutls-cli, gnutls-serv: Channel binding for printing information has been changed from tls-unique to tls-exporter as tls-unique is not supported in TLS 1.3. * Certificate sanity checks has been enhanced to make gnutls more RFC 5280 compliant: * Removed 3DES from FIPS approved algorithms * Optimized support for AES-SIV-CMAC algorithms * libgnutls: HKDF and AES-GCM algorithms are now approved in FIPS-140 mode when used in TLS OBS-URL: https://build.opensuse.org/request/show/979523 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=67
2022-05-30 10:08:31 +02:00
%license LICENSE
Accepting request 870946 from home:pmonrealgonzalez:branches:security:tls Fix multiple build problems OBS-URL: https://build.opensuse.org/request/show/870946 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=46
2021-02-10 17:11:35 +01:00
%{_libdir}/guile/*
%{_datadir}/guile/gnutls*
%endif
Accepting request 391813 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/391813 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=91
2016-05-04 08:17:29 +02:00
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=2
2007-04-17 00:33:13 +02:00
%changelog
Reference in New Issue Copy Permalink