Pedro Monreal Gonzalez
b97f6df6c5
* libgnutls: New configure option to compile out DSA support
The --disable-dsa configure option has been added to completely
disable DSA algorithm support.
* libgnutls: Experimental support for X25519Kyber768Draft00 key
exchange in TLS. For testing purposes, the hybrid post-quantum
key exchange defined in draft-tls-westerbaan-xyber768d00 has been
implemented using liboqs. Since the algorithm is still not finalized,
the support of this key exchange is disabled by default and can be
enabled with the --with-liboqs configure option.
* Rebase patches:
- gnutls-FIPS-140-3-references.patch
- gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch
OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=113
35 lines
890 B
Diff
35 lines
890 B
Diff
Index: gnutls-3.8.4/lib/state.c
|
|
===================================================================
|
|
--- gnutls-3.8.4.orig/lib/state.c
|
|
+++ gnutls-3.8.4/lib/state.c
|
|
@@ -830,6 +830,12 @@ void gnutls_deinit(gnutls_session_t sess
|
|
gnutls_mutex_deinit(&session->internals.post_negotiation_lock);
|
|
gnutls_mutex_deinit(&session->internals.epoch_lock);
|
|
|
|
+#if defined(__linux__)
|
|
+# if defined(ENABLE_FIPS140)
|
|
+ _rnd_system_entropy_deinit();
|
|
+# endif
|
|
+#endif
|
|
+
|
|
gnutls_free(session);
|
|
}
|
|
|
|
Index: gnutls-3.8.4/lib/nettle/rnd.c
|
|
===================================================================
|
|
--- gnutls-3.8.4.orig/lib/nettle/rnd.c
|
|
+++ gnutls-3.8.4/lib/nettle/rnd.c
|
|
@@ -79,6 +79,12 @@ struct generators_ctx_st {
|
|
|
|
static void wrap_nettle_rnd_deinit(void *_ctx)
|
|
{
|
|
+#if defined(__linux__)
|
|
+# if defined(ENABLE_FIPS140)
|
|
+ _rnd_system_entropy_deinit();
|
|
+# endif
|
|
+#endif
|
|
+
|
|
gnutls_free(_ctx);
|
|
}
|
|
|