e21a7d8076
- Use correct nettle .so version when looking for a FIPS checksum
(bsc#1166635)
* add gnutls-fips_correct_nettle_soversion.patch
- Update to 3.6.13
* libgnutls: Fix a DTLS-protocol regression (caused by TLS1.3
support)
The DTLS client would not contribute any randomness to the DTLS negotiation,
breaking the security guarantees of the DTLS protocol (#960)
[GNUTLS-SA-2020-03-31, CVSS: high] (bsc#1168345)
* libgnutls: Added new APIs to access KDF algorithms (#813).
* libgnutls: Added new callback gnutls_keylog_func that enables a custom
logging functionality.
* libgnutls: Added support for non-null terminated usernames in PSK
negotiation (#586).
* gnutls-cli-debug: Improved support for old servers that only support
SSL 3.0.
- Split off FIPS checksums into a separate libgnutls30-hmac
subpackage (bsc#1152692)
OBS-URL: https://build.opensuse.org/request/show/790830
OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=32
14 lines
531 B
Diff
14 lines
531 B
Diff
Index: gnutls-3.6.12/lib/fips.c
|
|
===================================================================
|
|
--- gnutls-3.6.12.orig/lib/fips.c 2019-06-27 06:40:43.000000000 +0200
|
|
+++ gnutls-3.6.12/lib/fips.c 2020-03-16 09:29:39.056332128 +0100
|
|
@@ -136,7 +136,7 @@ void _gnutls_fips_mode_reset_zombie(void
|
|
}
|
|
|
|
#define GNUTLS_LIBRARY_NAME "libgnutls.so.30"
|
|
-#define NETTLE_LIBRARY_NAME "libnettle.so.6"
|
|
+#define NETTLE_LIBRARY_NAME "libnettle.so.7"
|
|
#define HOGWEED_LIBRARY_NAME "libhogweed.so.4"
|
|
#define GMP_LIBRARY_NAME "libgmp.so.10"
|
|
|