- Build with leancrypto. The liboqs support for post-quantum

cryptography (PQC) has been removed and is only provided through
  leancrypto.

- Build with TPM 2.0 support via tpm2-0-tss.

- Update to 3.8.9:

OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=130

gnutls.changes

@@ -1,3 +1,15 @@
+-------------------------------------------------------------------
+Tue Jul 15 08:12:29 UTC 2025 - Pedro Monreal <pmonreal@suse.com>
+
+- Build with leancrypto. The liboqs support for post-quantum
+  cryptography (PQC) has been removed and is only provided through
+  leancrypto.
+
+-------------------------------------------------------------------
+Tue Jul 15 07:40:21 UTC 2025 - Pedro Monreal <pmonreal@suse.com>
+
+- Build with TPM 2.0 support via tpm2-0-tss.
+
 -------------------------------------------------------------------
 Mon Jul 14 17:00:21 UTC 2025 - Lucas Mulling <lucas.mulling@suse.com>
 
@@ -86,7 +98,7 @@ Tue Mar 18 07:56:18 UTC 2025 - Angel Yankov <angel.yankov@suse.com>
 -------------------------------------------------------------------
 Mon Feb 24 11:15:52 UTC 2025 - Angel Yankov <angel.yankov@suse.com>
 
-- Update to 3.8.9
+- Update to 3.8.9:
   - libgnutls: leancrypto was added as an interim option for PQC
     The library can now be built with leancrypto instead of liboqs for
     post-quantum cryptography (PQC), when configured with

gnutls.spec

@@ -36,16 +36,12 @@
 # disable for now, as our OBS builds do not work with it. Marcus 20220511
 #bcond_without kcapi
 %bcond_with kcapi
-%ifarch armv6l armv6hl
-%bcond_with liboqs
-%else
-%bcond_without liboqs
-%endif
 %else
 %bcond_with kcapi
-%bcond_with liboqs
 %endif
 %bcond_with tpm
+%bcond_without tpm2
+%bcond_without leancrypto
 Name:           gnutls
 Version:        3.8.10
 Release:        0
@@ -110,8 +106,8 @@ BuildRequires:  pkgconfig(zlib)
 %if %{with kcapi}
 BuildRequires:  pkgconfig(libkcapi)
 %endif
-%if %{with liboqs}
-BuildRequires:  pkgconfig(liboqs)
+%if %{with leancrypto}
+BuildRequires:  pkgconfig(leancrypto)
 %endif
 %if 0%{?suse_version} <= 1320
 BuildRequires:  net-tools
@@ -121,6 +117,9 @@ BuildRequires:  net-tools-deprecated
 %if %{with tpm}
 BuildRequires:  trousers-devel
 %endif
+%if %{with tpm2}
+BuildRequires:  tpm2-0-tss-devel >= 3.0.3
+%endif
 %if %{with dane}
 Requires:       libgnutls-dane%{gnutls_dane_sover} = %{version}
 %if 0%{?suse_version} <= 1320
@@ -135,6 +134,9 @@ BuildRequires:  jitterentropy-devel >= 3.4.0
 Requires:       crypto-policies
 Requires:       libjitterentropy3 >= 3.4.0
 %endif
+%if %{with tpm}
+Recommends:     trousers
+%endif
 
 %description
 The GnuTLS library provides a secure layer over a reliable transport
@@ -249,6 +251,11 @@ autoreconf -fiv
 %if %{without tpm}
         --without-tpm \
 %endif
+%if %{with tpm2}
+        --with-tpm2 \
+%else
+        --without-tpm2 \
+%endif
 %if %{with dane}
         --with-unbound-root-key-file=%{_localstatedir}/lib/unbound/root.key \
 %else
@@ -257,8 +264,10 @@ autoreconf -fiv
 %if %{with srp}
         --enable-srp-authentication \
 %endif
-%if %{with liboqs}
-        --with-liboqs \
+%if %{with leancrypto}
+        --with-leancrypto \
+%else
+        --without-leancrypto \
 %endif
 %ifarch %{ix86} %{arm}
         --disable-year2038 \