rpm/gnutls
SHA256
1
0
Fork 0
forked from pool/gnutls
Code Pull Requests Activity
gnutls/gnutls.spec

340 lines
10 KiB
RPMSpec
Raw Normal View History

OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-15 23:15:20 +00:00
#
Autobuild autoformatter for 73777 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=29
2011-06-16 07:57:04 +00:00
# spec file for package gnutls
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-15 23:15:20 +00:00
#
Accepting request 769920 from home:mimi_vx:branches:security:tls - gnutls 3.6.12 * libgnutls: Introduced TLS session flag (gnutls_session_get_flags()) to identify sessions that client request OCSP status request (#829). * libgnutls: Added support for X448 key exchange (RFC 7748) and Ed448 signature algorithm (RFC 8032) under TLS (#86). * libgnutls: Added the default-priority-string option to system configuration; it allows overriding the compiled-in default-priority-string. * libgnutls: Added support for GOST CNT_IMIT ciphersuite (as defined by draft-smyshlyaev-tls12-gost-suites-07). By default this ciphersuite is disabled. It can be enabled by adding +GOST to priority string. In the future this priority string may enable other GOST ciphersuites as well. Note, that server will fail to negotiate GOST ciphersuites if TLS 1.3 is enabled both on a server and a client. It is recommended for now to disable TLS 1.3 in setups where GOST ciphersuites are enabled on GnuTLS-based servers. * libgnutls: added priority shortcuts for different GOST categories like CIPHER-GOST-ALL, MAC-GOST-ALL, KX-GOST-ALL, SIGN-GOST-ALL, GROUP-GOST-ALL. * libgnutls: Reject certificates with invalid time fields. That is we reject certificates with invalid characters in Time fields, or invalid time formatting To continue accepting the invalid form compile with --disable-strict-der-time * libgnutls: Reject certificates which contain duplicate extensions. We were previously printing warnings when printing such a certificate, but that is not always sufficient to flag such certificates as invalid. Instead we now refuse to import them (#887). * libgnutls: If a CA is found in the trusted list, check in addition to time validity, whether the algorithms comply to the expected level prior to accepting it. This addresses the problem of accepting CAs which would have been marked as insecure otherwise (#877). * libgnutls: The min-verification-profile from system configuration applies for all certificate verifications, not only under TLS. The configuration can OBS-URL: https://build.opensuse.org/request/show/769920 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=30
2020-02-04 10:06:09 +00:00
# Copyright (c) 2020 SUSE LLC
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-15 23:15:20 +00:00
#
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=16
2008-11-02 14:41:35 +00:00
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
- Version update to 3.6.4: ** libgnutls: Added the final (RFC8446) version numbering of the TLS1.3 protocol. ** libgnutls: Corrected regression since 3.6.3 in the callbacks set with gnutls_certificate_set_retrieve_function() which could not handle the case where no certificates were returned, or the callbacks were set to NULL (see #528). ** libgnutls: gnutls_handshake() on server returns early on handshake when no certificate is presented by client and the gnutls_init() flag GNUTLS_ENABLE_EARLY_START is specified. ** libgnutls: Added session ticket key rotation on server side with TOTP. The key set with gnutls_session_ticket_enable_server() is used as a master key to generate time-based keys for tickets. The rotation relates to the gnutls_db_set_cache_expiration() period. ** libgnutls: The 'record size limit' extension is added and preferred to the 'max record size' extension when possible. ** libgnutls: Provide a more flexible PKCS#11 search of trust store certificates. This addresses the problem where the CA certificate doesn't have a subject key identifier whereas the end certificates have an authority key identifier (#569) ** libgnutls: gnutls_privkey_export_gost_raw2(), gnutls_privkey_import_gost_raw(), gnutls_pubkey_export_gost_raw2(), gnutls_pubkey_import_gost_raw() import and export GOST parameters in the "native" little endian format used for these curves. This is an intentional incompatible change with 3.6.3. ** libgnutls: Added support for seperately negotiating client and server certificate types as defined in RFC7250. This mechanism must be explicitly enabled via the GNUTLS_ENABLE_CERT_TYPE_NEG flag in gnutls_init(). OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=10
2018-10-15 08:27:49 +00:00
# Please submit bugfixes or comments via https://bugs.opensuse.org/
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-15 23:15:20 +00:00
#
Autobuild autoformatter for 79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=32
2011-08-24 11:44:23 +00:00
Accepting request 295655 from Base:System - updated to 3.4.0 (released 2015-04-08) ** libgnutls: Added support for AES-CCM and AES-CCM-8 (RFC6655 and RFC7251) ciphersuites. The former are enabled by default, the latter need to be explicitly enabled, since they reduce the overall security level. ** libgnutls: Added support for Chacha20-Poly1305 ciphersuites following draft-mavrogiannopoulos-chacha-tls-05 and draft-irtf-cfrg-chacha20-poly1305-10. That is currently provided as technology preview and is not enabled by default, since there are no assigned ciphersuite points by IETF and there is no guarrantee of compatibility between draft versions. The ciphersuite priority string to enable it is "+CHACHA20-POLY1305". ** libgnutls: Added support for encrypt-then-authenticate in CBC ciphersuites (RFC7366 -taking into account its errata text). This is enabled by default and can be disabled using the %NO_ETM priority string. ** libgnutls: Added support for the extended master secret (triple-handshake fix) following draft-ietf-tls-session-hash-02. ** libgnutls: Added a new simple and hard to misuse AEAD API (crypto.h). ** libgnutls: SSL 3.0 is no longer included in the default priorities list. It has to be explicitly enabled, e.g., with a string like "NORMAL:+VERS-SSL3.0". ** libgnutls: ARCFOUR (RC4) is no longer included in the default priorities list. It has to be explicitly enabled, e.g., with a string like "NORMAL:+ARCFOUR-128". ** libgnutls: DSA signatures and DHE-DSS are no longer included in the default priorities list. They have to be explicitly enabled, e.g., with a string like "NORMAL:+DHE-DSS:+SIGN-DSA-SHA256:+SIGN-DSA-SHA1". The DSA ciphersuites were dropped because they had no deployment at all on the internet, to justify their inclusion. ** libgnutls: The priority string EXPORT was completely removed. The string OBS-URL: https://build.opensuse.org/request/show/295655 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=83
2015-04-18 08:38:18 +00:00
%define gnutls_sover 30
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 11:44:12 +00:00
%define gnutlsxx_sover 28
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 09:40:38 +00:00
%define gnutls_dane_sover 0
Accepting request 691550 from home:jsikes:branches:security:tls Forgot changelog entry. OBS-URL: https://build.opensuse.org/request/show/691550 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=19
2019-04-04 14:11:38 +00:00
# unbound isn't in SLE (bsc#1086428)
%if 0%{?is_opensuse}
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 21:41:21 +00:00
%bcond_without dane
Accepting request 593004 from Base:System OBS-URL: https://build.opensuse.org/request/show/593004 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=110
2018-04-10 07:48:38 +00:00
%else
%bcond_with dane
Accepting request 591143 from Base:System OBS-URL: https://build.opensuse.org/request/show/591143 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=109
2018-03-30 09:56:05 +00:00
%endif
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 21:41:21 +00:00
%bcond_with tpm
%bcond_without guile
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-15 23:15:20 +00:00
Name: gnutls
Accepting request 811391 from home:vitezslav_cizek:branches:security:tls - Update to 3.6.14 * libgnutls: Fixed insecure session ticket key construction, since 3.6.4. The TLS server would not bind the session ticket encryption key with a value supplied by the application until the initial key rotation, allowing attacker to bypass authentication in TLS 1.3 and recover previous conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777) [GNUTLS-SA-2020-06-03, CVSS: high] * libgnutls: Fixed handling of certificate chain with cross-signed intermediate CA certificates (#1008). (bsc#1172461) * libgnutls: Fixed reception of empty session ticket under TLS 1.2 (#997). * libgnutls: gnutls_x509_crt_print() is enhanced to recognizes commonName (2.5.4.3), decodes certificate policy OIDs (!1245), and prints Authority Key Identifier (AKI) properly (#989, #991). * certtool: PKCS #7 attributes are now printed with symbolic names (!1246). * libgnutls: Use accelerated AES-XTS implementation if possible (!1244). Also both accelerated and non-accelerated implementations check key block according to FIPS-140-2 IG A.9 (!1233). * libgnutls: Added support for AES-SIV ciphers (#463). * libgnutls: Added support for 192-bit AES-GCM cipher (!1267). * libgnutls: No longer use internal symbols exported from Nettle (!1235) * API and ABI modifications: GNUTLS_CIPHER_AES_128_SIV: Added GNUTLS_CIPHER_AES_256_SIV: Added GNUTLS_CIPHER_AES_192_GCM: Added gnutls_pkcs7_print_signature_info: Added - Add key D605848ED7E69871: public key "Daiki Ueno <ueno@unixuser.org>" to the keyring - Drop gnutls-fips_correct_nettle_soversion.patch (upstream) OBS-URL: https://build.opensuse.org/request/show/811391 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=34
2020-06-04 11:03:13 +00:00
Version: 3.6.14
Accepting request 121255 from Base:System - Update to version 3.0.19: + libgnutls: - When decoding a PKCS #11 URL the pin-source field is assumed to be a file that stores the pin. Based on patch by David Smith. - gnutls_record_check_pending() no longer returns unprocessed data, and thus ensure the non-blocking of the next call to gnutls_record_recv(). - Added strict tests in Diffie-Hellman and SRP key exchange public keys. - in ECDSA and DSA TLS 1.2 authentication be less strict in hash selection, and allow a stronger hash to be used than the appropriate, to improve interoperability with openssl. + tests: - Disabled floating point test, and corrections in pkcs12 decoding tests. + API and ABI modifications: - No changes since last version. - Changes from version 3.0.18: + certtool: - Avoid a Y2K38 bug when generating certificates. Patch by Robert Millan. + libgnutls: - Make sure that GNUTLS_E_PREMATURE_TERMINATION - is returned on premature termination (and added unit test). - Fixes for W64 API. Patch by B. Scott Michel. - Corrected VIA padlock detection for old VIA processors. Reported by Kris Karas. - Updated assembler files. OBS-URL: https://build.opensuse.org/request/show/121255 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=44
2012-05-21 08:25:22 +00:00
Release: 0
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-15 23:15:20 +00:00
Summary: The GNU Transport Layer Security Library
Accepting request 591143 from Base:System OBS-URL: https://build.opensuse.org/request/show/591143 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=109
2018-03-30 09:56:05 +00:00
License: LGPL-2.1-or-later AND GPL-3.0-or-later
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-15 23:15:20 +00:00
Group: Productivity/Networking/Security
Accepting request 720091 from home:AndreasStieger:branches:security:tls gnutls 3.6.9 OBS-URL: https://build.opensuse.org/request/show/720091 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=22
2019-07-31 17:35:10 +00:00
URL: https://www.gnutls.org/
Accepting request 528289 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/528289 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=104
2017-09-25 11:50:29 +00:00
Source0: ftp://ftp.gnutls.org/gcrypt/gnutls/v3.6/%{name}-%{version}.tar.xz
Source1: ftp://ftp.gnutls.org/gcrypt/gnutls/v3.6/%{name}-%{version}.tar.xz.sig
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 21:41:21 +00:00
Source2: %{name}.keyring
Accepting request 181378 from Base:System - Disable all ECC algorithms. - gnutls-32bit.patch: upstream patch to make test work with 32bit time_t. - gnutls-implement-trust-store-dir.diff currently not yet forward ported. - Updated to GnuTLS 3.2.1 ** libgnutls: Allow ECC when in SSL 3.0 to work-around a bug in certain openssl versions. ** libgnutls: Fixes in interrupted function resumption. Report and patch by Tim Kosse. ** libgnutls: Corrected issue when receiving client hello verify requests in DTLS. ** libgnutls: Fixes in DTLS record overhead size calculations. ** libgnutls: gnutls_handshake_get_last_in() was fixed. Reported by Mann Ern Kang. - Updated to GnuTLS 3.2.0 ** libgnutls: Use nettle's elliptic curve implementation. ** libgnutls: Added Salsa20 cipher ** libgnutls: Added UMAC-96 and UMAC-128 ** libgnutls: Added ciphersuites involving Salsa20 and UMAC-96. As they are not standardized they are defined using private ciphersuite numbers. ** libgnutls: Added support for DTLS 1.2. ** libgnutls: Added support for the Application Layer Protocol Negotiation (ALPN) extension. ** libgnutls: Removed support for the RSA-EXPORT ciphersuites. ** libgnutls: Avoid linking to librt (that also avoids unnecessary linking to pthreads if p11-kit isn't used). - Updated to GnuTLS 3.1.10 (released 2013-03-22) ** certtool: When generating PKCS #12 files use by default the ARCFOUR (RC4) cipher to be compatible with devices that don't OBS-URL: https://build.opensuse.org/request/show/181378 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=58
2013-07-01 13:54:42 +00:00
Source3: baselibs.conf
Accepting request 496936 from Base:System - skip trust-store tests to avoid build cycle with ca-certificates-mozilla, add gnutls-3.5.11-skip-trust-store-tests.patch (forwarded request 495815 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/496936 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=100
2017-05-20 12:31:57 +00:00
Patch1: gnutls-3.5.11-skip-trust-store-tests.patch
Accepting request 691550 from home:jsikes:branches:security:tls Forgot changelog entry. OBS-URL: https://build.opensuse.org/request/show/691550 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=19
2019-04-04 14:11:38 +00:00
Patch4: gnutls-3.6.6-set_guile_site_dir.patch
Accepting request 812788 from home:vitezslav_cizek:branches:security:tls - Fix a memory leak that could lead to a DoS attack against Samba servers (bsc#1172663) * add 0001-crypto-api-always-allocate-memory-when-serializing-i.patch - Temporarily disable broken guile reauth test (bsc#1171565) * add gnutls-temporarily_disable_broken_guile_reauth_test OBS-URL: https://build.opensuse.org/request/show/812788 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=35
2020-06-09 07:20:47 +00:00
Patch5: 0001-crypto-api-always-allocate-memory-when-serializing-i.patch
Accepting request 821490 from home:vitezslav_cizek:branches:security:tls - Correctly detect gmp, nettle, and hogweed libraries (bsc#1172666) * add gnutls-detect_nettle_so.patch * add gnutls-temporarily_disable_broken_guile_reauth_test.patch OBS-URL: https://build.opensuse.org/request/show/821490 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=37
2020-07-17 11:26:29 +00:00
Patch6: gnutls-temporarily_disable_broken_guile_reauth_test.patch
Patch7: gnutls-detect_nettle_so.patch
Accepting request 324612 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/324612 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=87
2015-08-25 05:17:02 +00:00
BuildRequires: autogen
Accepting request 94864 from Base:System Fix licenses (forwarded request 94646 from vuntz) OBS-URL: https://build.opensuse.org/request/show/94864 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=40
2011-12-02 15:25:49 +00:00
BuildRequires: automake
Accepting request 405821 from Base:System - Fix a problem with expired test certificate by using datefudge (boo#987139) * add 0001-tests-use-datefudge-in-name-constraints-test.patch (forwarded request 405618 from vitezslav_cizek) OBS-URL: https://build.opensuse.org/request/show/405821 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=92
2016-07-09 07:21:14 +00:00
BuildRequires: datefudge
Accepting request 391813 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/391813 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=91
2016-05-04 06:17:29 +00:00
BuildRequires: fdupes
Accepting request 734378 from home:vitezslav_cizek:branches:security:tls - Install checksums for binary integrity verification which are required when running in FIPS mode (bsc#1152692, jsc#SLE-9518) OBS-URL: https://build.opensuse.org/request/show/734378 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=24
2019-10-01 15:18:43 +00:00
BuildRequires: fipscheck
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 11:44:12 +00:00
BuildRequires: gcc-c++
Accepting request 523074 from Base:System - Buildrequire iproute2: the test suite calls /usr/bin/ss and as such we have to ensure to pull it in. (forwarded request 523062 from dimstar) OBS-URL: https://build.opensuse.org/request/show/523074 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=103
2017-09-12 17:38:08 +00:00
# The test suite calls /usr/bin/ss from iproute2. It's our own duty to ensure we have it present
BuildRequires: iproute2
Accepting request 459188 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/459188 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=97
2017-02-22 12:50:20 +00:00
BuildRequires: libidn2-devel
Accepting request 662795 from home:vitezslav_cizek:branches:security:tls - Update to 3.6.5 ** libgnutls: Provide the option of transparent re-handshake/reauthentication when the GNUTLS_AUTO_REAUTH flag is specified in gnutls_init() (#571). ** libgnutls: Added support for TLS 1.3 zero round-trip (0-RTT) mode (#127) ** libgnutls: The priority functions will ignore and not enable TLS1.3 if requested with legacy TLS versions enabled but not TLS1.2. That is because if such a priority string is used in the client side (e.g., TLS1.3+TLS1.0 enabled) servers which do not support TLS1.3 will negotiate TLS1.2 which will be rejected by the client as disabled (#621). ** libgnutls: Change RSA decryption to use a new side-channel silent function. This addresses a security issue where memory access patterns as well as timing on the underlying Nettle rsa-decrypt function could lead to new Bleichenbacher attacks. Side-channel resistant code is slower due to the need to mask access and timings. When used in TLS the new functions cause RSA based handshakes to be between 13% and 28% slower on average (Numbers are indicative, the tests where performed on a relatively modern Intel CPU, results vary depending on the CPU and architecture used). This change makes nettle 3.4.1 the minimum requirement of gnutls (#630). [CVSS: medium] ** libgnutls: gnutls_priority_init() and friends, allow the CTYPE-OPENPGP keyword in the priority string. It is only accepted as legacy option and is ignored. ** libgnutls: Added support for EdDSA under PKCS#11 (#417) ** libgnutls: Added support for AES-CFB8 cipher (#357) ** libgnutls: Added support for AES-CMAC MAC (#351) ** libgnutls: In two previous versions GNUTLS_CIPHER_GOST28147_CPB/CPC/CPD_CFB ciphers have incorrectly used CryptoPro-A S-BOX instead of proper (CryptoPro-B/-C/-D S-BOXes). They are fixed now. ** libgnutls: Added support for GOST key unmasking and unwrapped GOST private keys parsing, as specified in R 50.1.112-2016. ** gnutls-serv: It applies the default settings when no --priority option is given, using gnutls_set_default_priority(). OBS-URL: https://build.opensuse.org/request/show/662795 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=16
2019-01-04 13:39:42 +00:00
BuildRequires: libnettle-devel >= 3.4.1
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 21:41:21 +00:00
BuildRequires: libtasn1-devel >= 4.9
Accepting request 122844 from Base:System - fix build with automake-1.12 - add: automake-1.12.patch (forwarded request 122744 from puzel) OBS-URL: https://build.opensuse.org/request/show/122844 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=48
2012-05-31 15:04:51 +00:00
BuildRequires: libtool
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 21:41:21 +00:00
BuildRequires: libunistring-devel
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 09:40:38 +00:00
BuildRequires: makeinfo
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 21:41:21 +00:00
BuildRequires: p11-kit-devel >= 0.23.1
BuildRequires: pkgconfig
BuildRequires: xz
BuildRequires: zlib-devel
Accepting request 720091 from home:AndreasStieger:branches:security:tls gnutls 3.6.9 OBS-URL: https://build.opensuse.org/request/show/720091 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=22
2019-07-31 17:35:10 +00:00
BuildRequires: pkgconfig(autoopts)
Accepting request 433003 from Base:System update to 3.4.15 (forwarded request 432668 from ecsos) OBS-URL: https://build.opensuse.org/request/show/433003 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=94
2016-10-10 14:16:31 +00:00
%if 0%{?suse_version} <= 1320
BuildRequires: net-tools
%else
Accepting request 405821 from Base:System - Fix a problem with expired test certificate by using datefudge (boo#987139) * add 0001-tests-use-datefudge-in-name-constraints-test.patch (forwarded request 405618 from vitezslav_cizek) OBS-URL: https://build.opensuse.org/request/show/405821 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=92
2016-07-09 07:21:14 +00:00
BuildRequires: net-tools-deprecated
Accepting request 433003 from Base:System update to 3.4.15 (forwarded request 432668 from ecsos) OBS-URL: https://build.opensuse.org/request/show/433003 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=94
2016-10-10 14:16:31 +00:00
%endif
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 17:32:11 +00:00
%if %{with tpm}
BuildRequires: trousers-devel
%endif
%if %{with dane}
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 21:41:21 +00:00
Requires: libgnutls-dane%{gnutls_dane_sover} = %{version}
Accepting request 433003 from Base:System update to 3.4.15 (forwarded request 432668 from ecsos) OBS-URL: https://build.opensuse.org/request/show/433003 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=94
2016-10-10 14:16:31 +00:00
%if 0%{?suse_version} <= 1320
BuildRequires: unbound-devel
%else
Accepting request 360180 from Base:System - follow the work in the unbound package and use the libunbound-devel symbol for the buildrequires. we override it for the distro build with libunbound-devel-mini to avoid build loops. (forwarded request 360179 from darix) OBS-URL: https://build.opensuse.org/request/show/360180 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=89
2016-02-24 13:25:15 +00:00
BuildRequires: libunbound-devel
Accepting request 433003 from Base:System update to 3.4.15 (forwarded request 432668 from ecsos) OBS-URL: https://build.opensuse.org/request/show/433003 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=94
2016-10-10 14:16:31 +00:00
%endif
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 17:32:11 +00:00
%endif
Accepting request 391813 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/391813 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=91
2016-05-04 06:17:29 +00:00
%if %{with guile}
BuildRequires: guile-devel
%endif
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-15 23:15:20 +00:00
%description
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 09:40:38 +00:00
The GnuTLS library provides a secure layer over a reliable transport
layer. Currently the GnuTLS library implements the proposed standards
Accepting request 691610 from home:jengelh:branches:security:tls - Trim useless %if..%endif guards that do not affect the build. - Fix language errors in description again. OBS-URL: https://build.opensuse.org/request/show/691610 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=20
2019-04-08 09:25:11 +00:00
of the IETF's TLS working group.
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-15 23:15:20 +00:00
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 11:44:12 +00:00
%package -n libgnutls%{gnutls_sover}
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=7
2008-02-28 00:56:17 +00:00
Summary: The GNU Transport Layer Security Library
Accepting request 790830 from home:vitezslav_cizek:branches:security:tls - Use correct nettle .so version when looking for a FIPS checksum (bsc#1166635) * add gnutls-fips_correct_nettle_soversion.patch - Update to 3.6.13 * libgnutls: Fix a DTLS-protocol regression (caused by TLS1.3 support) The DTLS client would not contribute any randomness to the DTLS negotiation, breaking the security guarantees of the DTLS protocol (#960) [GNUTLS-SA-2020-03-31, CVSS: high] (bsc#1168345) * libgnutls: Added new APIs to access KDF algorithms (#813). * libgnutls: Added new callback gnutls_keylog_func that enables a custom logging functionality. * libgnutls: Added support for non-null terminated usernames in PSK negotiation (#586). * gnutls-cli-debug: Improved support for old servers that only support SSL 3.0. - Split off FIPS checksums into a separate libgnutls30-hmac subpackage (bsc#1152692) OBS-URL: https://build.opensuse.org/request/show/790830 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=32
2020-04-02 10:58:27 +00:00
# install libopenssl and libopenssl-hmac close together (bsc#1090765)
Accepting request 591143 from Base:System OBS-URL: https://build.opensuse.org/request/show/591143 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=109
2018-03-30 09:56:05 +00:00
License: LGPL-2.1-or-later
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 09:40:38 +00:00
Group: System/Libraries
Accepting request 790830 from home:vitezslav_cizek:branches:security:tls - Use correct nettle .so version when looking for a FIPS checksum (bsc#1166635) * add gnutls-fips_correct_nettle_soversion.patch - Update to 3.6.13 * libgnutls: Fix a DTLS-protocol regression (caused by TLS1.3 support) The DTLS client would not contribute any randomness to the DTLS negotiation, breaking the security guarantees of the DTLS protocol (#960) [GNUTLS-SA-2020-03-31, CVSS: high] (bsc#1168345) * libgnutls: Added new APIs to access KDF algorithms (#813). * libgnutls: Added new callback gnutls_keylog_func that enables a custom logging functionality. * libgnutls: Added support for non-null terminated usernames in PSK negotiation (#586). * gnutls-cli-debug: Improved support for old servers that only support SSL 3.0. - Split off FIPS checksums into a separate libgnutls30-hmac subpackage (bsc#1152692) OBS-URL: https://build.opensuse.org/request/show/790830 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=32
2020-04-02 10:58:27 +00:00
Suggests: libgnutls%{gnutls_sover}-hmac = %{version}-%{release}
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=7
2008-02-28 00:56:17 +00:00
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 11:44:12 +00:00
%description -n libgnutls%{gnutls_sover}
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 09:40:38 +00:00
The GnuTLS library provides a secure layer over a reliable transport
layer. Currently the GnuTLS library implements the proposed standards
Accepting request 691610 from home:jengelh:branches:security:tls - Trim useless %if..%endif guards that do not affect the build. - Fix language errors in description again. OBS-URL: https://build.opensuse.org/request/show/691610 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=20
2019-04-08 09:25:11 +00:00
of the IETF's TLS working group.
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=7
2008-02-28 00:56:17 +00:00
Accepting request 790830 from home:vitezslav_cizek:branches:security:tls - Use correct nettle .so version when looking for a FIPS checksum (bsc#1166635) * add gnutls-fips_correct_nettle_soversion.patch - Update to 3.6.13 * libgnutls: Fix a DTLS-protocol regression (caused by TLS1.3 support) The DTLS client would not contribute any randomness to the DTLS negotiation, breaking the security guarantees of the DTLS protocol (#960) [GNUTLS-SA-2020-03-31, CVSS: high] (bsc#1168345) * libgnutls: Added new APIs to access KDF algorithms (#813). * libgnutls: Added new callback gnutls_keylog_func that enables a custom logging functionality. * libgnutls: Added support for non-null terminated usernames in PSK negotiation (#586). * gnutls-cli-debug: Improved support for old servers that only support SSL 3.0. - Split off FIPS checksums into a separate libgnutls30-hmac subpackage (bsc#1152692) OBS-URL: https://build.opensuse.org/request/show/790830 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=32
2020-04-02 10:58:27 +00:00
%package -n libgnutls%{gnutls_sover}-hmac
Summary: Checksums of the GNU Transport Layer Security Library
License: LGPL-2.1-or-later
Group: System/Libraries
Requires: libgnutls%{gnutls_sover} = %{version}-%{release}
%description -n libgnutls%{gnutls_sover}-hmac
FIPS SHA256 checksums of the libgnutls library.
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 17:32:11 +00:00
%package -n libgnutls-dane%{gnutls_dane_sover}
Accepting request 593004 from Base:System OBS-URL: https://build.opensuse.org/request/show/593004 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=110
2018-04-10 07:48:38 +00:00
Summary: DANE support for the GNU Transport Layer Security Library
Accepting request 591143 from Base:System OBS-URL: https://build.opensuse.org/request/show/591143 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=109
2018-03-30 09:56:05 +00:00
License: LGPL-2.1-or-later
Accepting request 593004 from Base:System OBS-URL: https://build.opensuse.org/request/show/593004 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=110
2018-04-10 07:48:38 +00:00
Group: System/Libraries
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 17:32:11 +00:00
%description -n libgnutls-dane%{gnutls_dane_sover}
The GnuTLS project aims to develop a library that provides a secure
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 21:41:21 +00:00
layer over a reliable transport layer.
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 17:32:11 +00:00
This package contains the "DANE" part of gnutls.
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 11:44:12 +00:00
%package -n libgnutlsxx%{gnutlsxx_sover}
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 09:40:38 +00:00
Summary: C++ API for the GNU Transport Layer Security Library
Accepting request 591143 from Base:System OBS-URL: https://build.opensuse.org/request/show/591143 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=109
2018-03-30 09:56:05 +00:00
License: LGPL-2.1-or-later
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 09:40:38 +00:00
Group: System/Libraries
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=7
2008-02-28 00:56:17 +00:00
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 11:44:12 +00:00
%description -n libgnutlsxx%{gnutlsxx_sover}
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 09:40:38 +00:00
The GnuTLS library provides a secure layer over a reliable transport
Accepting request 691610 from home:jengelh:branches:security:tls - Trim useless %if..%endif guards that do not affect the build. - Fix language errors in description again. OBS-URL: https://build.opensuse.org/request/show/691610 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=20
2019-04-08 09:25:11 +00:00
layer. Currently the GnuTLS library implements the proposed standards
of the IETF's TLS working group.
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=6
2007-10-25 16:10:26 +00:00
%package -n libgnutls-devel
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 09:40:38 +00:00
Summary: Development package for the GnuTLS C API
Accepting request 591143 from Base:System OBS-URL: https://build.opensuse.org/request/show/591143 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=109
2018-03-30 09:56:05 +00:00
License: LGPL-2.1-or-later
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=4
2007-08-03 14:29:06 +00:00
Group: Development/Libraries/C and C++
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 11:44:12 +00:00
Requires: glibc-devel
Requires: libgnutls%{gnutls_sover} = %{version}
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 09:40:38 +00:00
Requires(pre): %{install_info_prereq}
Accepting request 121683 from Base:System - add version and release to gnutls-devel provides OBS-URL: https://build.opensuse.org/request/show/121683 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=46
2012-05-22 08:11:29 +00:00
Provides: gnutls-devel = %{version}-%{release}
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=7
2008-02-28 00:56:17 +00:00
%description -n libgnutls-devel
Files needed for software development using gnutls.
Accepting request 360180 from Base:System - follow the work in the unbound package and use the libunbound-devel symbol for the buildrequires. we override it for the distro build with libunbound-devel-mini to avoid build loops. (forwarded request 360179 from darix) OBS-URL: https://build.opensuse.org/request/show/360180 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=89
2016-02-24 13:25:15 +00:00
%package -n libgnutls-dane-devel
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 09:40:38 +00:00
Summary: Development package for GnuTLS DANE component
Accepting request 591143 from Base:System OBS-URL: https://build.opensuse.org/request/show/591143 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=109
2018-03-30 09:56:05 +00:00
License: LGPL-2.1-or-later
Accepting request 360180 from Base:System - follow the work in the unbound package and use the libunbound-devel symbol for the buildrequires. we override it for the distro build with libunbound-devel-mini to avoid build loops. (forwarded request 360179 from darix) OBS-URL: https://build.opensuse.org/request/show/360180 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=89
2016-02-24 13:25:15 +00:00
Group: Development/Libraries/C and C++
Requires: libgnutls-dane%{gnutls_dane_sover} = %{version}
%description -n libgnutls-dane-devel
Files needed for software development using gnutls.
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 11:44:12 +00:00
%package -n libgnutlsxx-devel
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 09:40:38 +00:00
Summary: Development package for the GnuTLS C++ API
Accepting request 591143 from Base:System OBS-URL: https://build.opensuse.org/request/show/591143 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=109
2018-03-30 09:56:05 +00:00
License: LGPL-2.1-or-later
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 11:44:12 +00:00
Group: Development/Libraries/C and C++
Requires: libgnutls-devel = %{version}
Accepting request 121255 from Base:System - Update to version 3.0.19: + libgnutls: - When decoding a PKCS #11 URL the pin-source field is assumed to be a file that stores the pin. Based on patch by David Smith. - gnutls_record_check_pending() no longer returns unprocessed data, and thus ensure the non-blocking of the next call to gnutls_record_recv(). - Added strict tests in Diffie-Hellman and SRP key exchange public keys. - in ECDSA and DSA TLS 1.2 authentication be less strict in hash selection, and allow a stronger hash to be used than the appropriate, to improve interoperability with openssl. + tests: - Disabled floating point test, and corrections in pkcs12 decoding tests. + API and ABI modifications: - No changes since last version. - Changes from version 3.0.18: + certtool: - Avoid a Y2K38 bug when generating certificates. Patch by Robert Millan. + libgnutls: - Make sure that GNUTLS_E_PREMATURE_TERMINATION - is returned on premature termination (and added unit test). - Fixes for W64 API. Patch by B. Scott Michel. - Corrected VIA padlock detection for old VIA processors. Reported by Kris Karas. - Updated assembler files. OBS-URL: https://build.opensuse.org/request/show/121255 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=44
2012-05-21 08:25:22 +00:00
Requires: libgnutlsxx%{gnutlsxx_sover} = %{version}
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 11:44:12 +00:00
Requires: libstdc++-devel
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 09:40:38 +00:00
Requires(pre): %{install_info_prereq}
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 11:44:12 +00:00
%description -n libgnutlsxx-devel
Files needed for software development using gnutls.
Accepting request 391813 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/391813 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=91
2016-05-04 06:17:29 +00:00
%package guile
Summary: Guile wrappers for gnutls
Accepting request 591143 from Base:System OBS-URL: https://build.opensuse.org/request/show/591143 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=109
2018-03-30 09:56:05 +00:00
License: LGPL-2.1-or-later
Accepting request 391813 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/391813 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=91
2016-05-04 06:17:29 +00:00
Group: Development/Libraries/Other
Requires: guile
%description guile
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 09:40:38 +00:00
GnuTLS Wrappers for GNU Guile, a dialect of Scheme.
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=7
2008-02-28 00:56:17 +00:00
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-15 23:15:20 +00:00
%prep
Accepting request 790830 from home:vitezslav_cizek:branches:security:tls - Use correct nettle .so version when looking for a FIPS checksum (bsc#1166635) * add gnutls-fips_correct_nettle_soversion.patch - Update to 3.6.13 * libgnutls: Fix a DTLS-protocol regression (caused by TLS1.3 support) The DTLS client would not contribute any randomness to the DTLS negotiation, breaking the security guarantees of the DTLS protocol (#960) [GNUTLS-SA-2020-03-31, CVSS: high] (bsc#1168345) * libgnutls: Added new APIs to access KDF algorithms (#813). * libgnutls: Added new callback gnutls_keylog_func that enables a custom logging functionality. * libgnutls: Added support for non-null terminated usernames in PSK negotiation (#586). * gnutls-cli-debug: Improved support for old servers that only support SSL 3.0. - Split off FIPS checksums into a separate libgnutls30-hmac subpackage (bsc#1152692) OBS-URL: https://build.opensuse.org/request/show/790830 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=32
2020-04-02 10:58:27 +00:00
%autosetup -p1
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-15 23:15:20 +00:00
%build
Accepting request 266910 from Base:System - build with PIE for commandline tools - Updated to 3.2.21 (released 2014-12-11) - libgnutls: Corrected regression introduced in 3.2.19 related to session renegotiation. Reported by Dan Winship. - libgnutls: Corrected parsing issue with OCSP responses. (forwarded request 266909 from msmeissn) OBS-URL: https://build.opensuse.org/request/show/266910 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=80
2015-01-03 21:03:04 +00:00
export LDFLAGS="-pie"
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 21:41:21 +00:00
export CFLAGS="%{optflags} -fPIE"
export CXXFLAGS="%{optflags} -fPIE"
Accepting request 630992 from home:vitezslav_cizek:branches:security:tls - Update to 3.6.3 Fixes security issues: CVE-2018-10846, CVE-2018-10845, CVE-2018-10844, CVE-2017-10790 (bsc#1105437, bsc#1105460, bsc#1105459, bsc#1047002) Other Changes: ** libgnutls: Introduced support for draft-ietf-tls-tls13-28 ** libgnutls: Apply compatibility settings for existing applications running with TLS1.2 or earlier and TLS 1.3. ** Added support for Russian Public Key Infrastructure according to RFCs 4491/4357/7836. ** Provide a uniform cipher list across supported TLS protocols ** The SSL 3.0 protocol is disabled on compile-time by default. ** libgnutls: Introduced function to switch the current FIPS140-2 operational mode ** libgnutls: Introduced low-level function to assist applications attempting client hello extension parsing, prior to GnuTLS' parsing of the message. ** libgnutls: When exporting an X.509 certificate avoid re-encoding if there are no modifications to the certificate. ** libgnutls: on group exchange honor the %SERVER_PRECEDENCE and select the groups which are preferred by the server. ** Improved counter-measures for TLS CBC record padding. ** Introduced the %FORCE_ETM priority string option. This option prevents the negotiation of legacy CBC ciphersuites unless encrypt-then-mac is negotiated. ** libgnutls: gnutls_privkey_import_ext4() was enhanced with the GNUTLS_PRIVKEY_INFO_PK_ALGO_BITS flag. ** libgnutls: gnutls_pkcs11_copy_secret_key, gnutls_pkcs11_copy_x509_privkey2, gnutls_pkcs11_privkey_generate3 will mark objects as sensitive by default unless GNUTLS_PKCS11_OBJ_FLAG_MARK_NOT_SENSITIVE is specified. This is an API change for these functions which make them err towards safety. ** libgnutls: improved aarch64 cpu features detection by using getauxval(). ** certtool: It is now possible to specify certificate and serial CRL numbers greater OBS-URL: https://build.opensuse.org/request/show/630992 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=4
2018-08-23 07:10:46 +00:00
#autoreconf -fiv
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 11:44:12 +00:00
%configure \
Accepting request 182656 from Base:System - Override broken configure checks (forwarded request 182594 from Andreas_Schwab) OBS-URL: https://build.opensuse.org/request/show/182656 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=60
2013-07-09 18:49:54 +00:00
gl_cv_func_printf_directive_n=yes \
gl_cv_func_printf_infinite_long_double=yes \
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 11:44:12 +00:00
--disable-static \
Accepting request 87383 from Base:System - cross-build fix: configure with sysroot (forwarded request 86388 from uli_suse) OBS-URL: https://build.opensuse.org/request/show/87383 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=37
2011-10-11 15:16:18 +00:00
--disable-rpath \
--disable-silent-rules \
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 21:41:21 +00:00
--with-default-trust-store-dir=%{_localstatedir}/lib/ca-certificates/pem \
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 17:32:11 +00:00
--with-sysroot=/%{?_sysroot} \
%if %{without tpm}
--without-tpm \
%endif
%if %{with dane}
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 21:41:21 +00:00
--with-unbound-root-key-file=%{_localstatedir}/lib/unbound/root.key \
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 17:32:11 +00:00
%else
--disable-libdane \
Accepting request 295655 from Base:System - updated to 3.4.0 (released 2015-04-08) ** libgnutls: Added support for AES-CCM and AES-CCM-8 (RFC6655 and RFC7251) ciphersuites. The former are enabled by default, the latter need to be explicitly enabled, since they reduce the overall security level. ** libgnutls: Added support for Chacha20-Poly1305 ciphersuites following draft-mavrogiannopoulos-chacha-tls-05 and draft-irtf-cfrg-chacha20-poly1305-10. That is currently provided as technology preview and is not enabled by default, since there are no assigned ciphersuite points by IETF and there is no guarrantee of compatibility between draft versions. The ciphersuite priority string to enable it is "+CHACHA20-POLY1305". ** libgnutls: Added support for encrypt-then-authenticate in CBC ciphersuites (RFC7366 -taking into account its errata text). This is enabled by default and can be disabled using the %NO_ETM priority string. ** libgnutls: Added support for the extended master secret (triple-handshake fix) following draft-ietf-tls-session-hash-02. ** libgnutls: Added a new simple and hard to misuse AEAD API (crypto.h). ** libgnutls: SSL 3.0 is no longer included in the default priorities list. It has to be explicitly enabled, e.g., with a string like "NORMAL:+VERS-SSL3.0". ** libgnutls: ARCFOUR (RC4) is no longer included in the default priorities list. It has to be explicitly enabled, e.g., with a string like "NORMAL:+ARCFOUR-128". ** libgnutls: DSA signatures and DHE-DSS are no longer included in the default priorities list. They have to be explicitly enabled, e.g., with a string like "NORMAL:+DHE-DSS:+SIGN-DSA-SHA256:+SIGN-DSA-SHA1". The DSA ciphersuites were dropped because they had no deployment at all on the internet, to justify their inclusion. ** libgnutls: The priority string EXPORT was completely removed. The string OBS-URL: https://build.opensuse.org/request/show/295655 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=83
2015-04-18 08:38:18 +00:00
%endif
Accepting request 528289 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/528289 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=104
2017-09-25 11:50:29 +00:00
--enable-fips140-mode \
Accepting request 304179 from Base:System - Disable buggy valgrind on armv7l (forwarded request 304053 from AndreasSchwab) OBS-URL: https://build.opensuse.org/request/show/304179 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=84
2015-04-28 18:42:20 +00:00
%{nil}
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 21:41:21 +00:00
make %{?_smp_mflags}
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-15 23:15:20 +00:00
Accepting request 734378 from home:vitezslav_cizek:branches:security:tls - Install checksums for binary integrity verification which are required when running in FIPS mode (bsc#1152692, jsc#SLE-9518) OBS-URL: https://build.opensuse.org/request/show/734378 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=24
2019-10-01 15:18:43 +00:00
# the hmac hashes:
#
# this is a hack that re-defines the __os_install_post macro
# for a simple reason: the macro strips the binaries and thereby
# invalidates a HMAC that may have been created earlier.
# solution: create the hashes _after_ the macro runs.
#
# this shows up earlier because otherwise the %expand of
# the macro is too late.
# remark: This is the same as running
# openssl dgst -sha256 -hmac 'orboDeJITITejsirpADONivirpUkvarP'
%{expand:%%global __os_install_post {%__os_install_post
%{_bindir}/fipshmac %{buildroot}%{_libdir}/libgnutls.so.%{gnutls_sover}
}}
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-15 23:15:20 +00:00
%install
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 11:44:12 +00:00
%make_install
rm -rf %{buildroot}%{_datadir}/locale/en@{,bold}quot
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=6
2007-10-25 16:10:26 +00:00
# Do not package static libs and libtool files
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 21:41:21 +00:00
find %{buildroot} -type f -name "*.la" -delete -print
Accepting request 142850 from Base:System - include LGPL-3.0+ text in COPYING.LESSER - run regression tests, but move "make check" to %check section - add gnutls-3.0.26-skip-test-fwrite.patch to skip a failing test - no longer manipulate doc/examples tree in %install section, the deletion of Makefiles breaks "make check" in %check - install documentation, reference and examples in %install section to fetch them for the package without unneccessary files (forwarded request 142825 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/142850 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=53
2012-11-28 09:29:35 +00:00
# install docs
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 21:41:21 +00:00
mkdir -p %{buildroot}%{_docdir}/libgnutls-devel/
Accepting request 720091 from home:AndreasStieger:branches:security:tls gnutls 3.6.9 OBS-URL: https://build.opensuse.org/request/show/720091 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=22
2019-07-31 17:35:10 +00:00
cp doc/gnutls.html doc/*.png %{buildroot}%{_docdir}/libgnutls-devel/
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 21:41:21 +00:00
mkdir -p %{buildroot}%{_docdir}/libgnutls-devel/reference
cp doc/reference/html/* %{buildroot}%{_docdir}/libgnutls-devel/reference/
mkdir -p %{buildroot}%{_docdir}/libgnutls-devel/examples
cp doc/examples/*.{c,h} %{buildroot}%{_docdir}/libgnutls-devel/examples/
Accepting request 142850 from Base:System - include LGPL-3.0+ text in COPYING.LESSER - run regression tests, but move "make check" to %check section - add gnutls-3.0.26-skip-test-fwrite.patch to skip a failing test - no longer manipulate doc/examples tree in %install section, the deletion of Makefiles breaks "make check" in %check - install documentation, reference and examples in %install section to fetch them for the package without unneccessary files (forwarded request 142825 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/142850 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=53
2012-11-28 09:29:35 +00:00
Accepting request 391813 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/391813 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=91
2016-05-04 06:17:29 +00:00
# PNG files are replaced with the compressed files and that breaks
# deduplication, this is workaround
Accepting request 492632 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/492632 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=98
2017-05-06 16:25:05 +00:00
find %{buildroot}%{_datadir} -name '*.png' -exec gzip -n -9 {} +
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 09:40:38 +00:00
rm -rf %{buildroot}%{_datadir}/doc/gnutls
Accepting request 391813 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/391813 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=91
2016-05-04 06:17:29 +00:00
%fdupes -s %{buildroot}%{_datadir}
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 11:44:12 +00:00
%find_lang libgnutls --all-name
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-15 23:15:20 +00:00
Accepting request 142850 from Base:System - include LGPL-3.0+ text in COPYING.LESSER - run regression tests, but move "make check" to %check section - add gnutls-3.0.26-skip-test-fwrite.patch to skip a failing test - no longer manipulate doc/examples tree in %install section, the deletion of Makefiles breaks "make check" in %check - install documentation, reference and examples in %install section to fetch them for the package without unneccessary files (forwarded request 142825 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/142850 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=53
2012-11-28 09:29:35 +00:00
%check
Accepting request 143744 from Base:System - Test suite breaks on qemu-arm some calls not implemented. (forwarded request 143321 from elvigia) OBS-URL: https://build.opensuse.org/request/show/143744 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=54
2012-12-03 08:36:19 +00:00
%if ! 0%{?qemu_user_space_build}
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 21:41:21 +00:00
make %{?_smp_mflags} check || {
Accepting request 518750 from Base:System GnuTLS 3.5.15 (forwarded request 518746 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/518750 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=102
2017-08-29 09:40:38 +00:00
find -name test-suite.log -print -exec cat {} +
Accepting request 304179 from Base:System - Disable buggy valgrind on armv7l (forwarded request 304053 from AndreasSchwab) OBS-URL: https://build.opensuse.org/request/show/304179 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=84
2015-04-28 18:42:20 +00:00
exit 1
}
Accepting request 143744 from Base:System - Test suite breaks on qemu-arm some calls not implemented. (forwarded request 143321 from elvigia) OBS-URL: https://build.opensuse.org/request/show/143744 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=54
2012-12-03 08:36:19 +00:00
%endif
Accepting request 142850 from Base:System - include LGPL-3.0+ text in COPYING.LESSER - run regression tests, but move "make check" to %check section - add gnutls-3.0.26-skip-test-fwrite.patch to skip a failing test - no longer manipulate doc/examples tree in %install section, the deletion of Makefiles breaks "make check" in %check - install documentation, reference and examples in %install section to fetch them for the package without unneccessary files (forwarded request 142825 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/142850 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=53
2012-11-28 09:29:35 +00:00
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 11:44:12 +00:00
%post -n libgnutls%{gnutls_sover} -p /sbin/ldconfig
%postun -n libgnutls%{gnutls_sover} -p /sbin/ldconfig
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 17:32:11 +00:00
%if %{with dane}
%post -n libgnutls-dane%{gnutls_dane_sover} -p /sbin/ldconfig
%postun -n libgnutls-dane%{gnutls_dane_sover} -p /sbin/ldconfig
%endif
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 11:44:12 +00:00
%post -n libgnutlsxx%{gnutlsxx_sover} -p /sbin/ldconfig
%postun -n libgnutlsxx%{gnutlsxx_sover} -p /sbin/ldconfig
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=6
2007-10-25 16:10:26 +00:00
%post -n libgnutls-devel
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-15 23:15:20 +00:00
%install_info --info-dir=%{_infodir} %{_infodir}/gnutls.info.gz
Accepting request 295655 from Base:System - updated to 3.4.0 (released 2015-04-08) ** libgnutls: Added support for AES-CCM and AES-CCM-8 (RFC6655 and RFC7251) ciphersuites. The former are enabled by default, the latter need to be explicitly enabled, since they reduce the overall security level. ** libgnutls: Added support for Chacha20-Poly1305 ciphersuites following draft-mavrogiannopoulos-chacha-tls-05 and draft-irtf-cfrg-chacha20-poly1305-10. That is currently provided as technology preview and is not enabled by default, since there are no assigned ciphersuite points by IETF and there is no guarrantee of compatibility between draft versions. The ciphersuite priority string to enable it is "+CHACHA20-POLY1305". ** libgnutls: Added support for encrypt-then-authenticate in CBC ciphersuites (RFC7366 -taking into account its errata text). This is enabled by default and can be disabled using the %NO_ETM priority string. ** libgnutls: Added support for the extended master secret (triple-handshake fix) following draft-ietf-tls-session-hash-02. ** libgnutls: Added a new simple and hard to misuse AEAD API (crypto.h). ** libgnutls: SSL 3.0 is no longer included in the default priorities list. It has to be explicitly enabled, e.g., with a string like "NORMAL:+VERS-SSL3.0". ** libgnutls: ARCFOUR (RC4) is no longer included in the default priorities list. It has to be explicitly enabled, e.g., with a string like "NORMAL:+ARCFOUR-128". ** libgnutls: DSA signatures and DHE-DSS are no longer included in the default priorities list. They have to be explicitly enabled, e.g., with a string like "NORMAL:+DHE-DSS:+SIGN-DSA-SHA256:+SIGN-DSA-SHA1". The DSA ciphersuites were dropped because they had no deployment at all on the internet, to justify their inclusion. ** libgnutls: The priority string EXPORT was completely removed. The string OBS-URL: https://build.opensuse.org/request/show/295655 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=83
2015-04-18 08:38:18 +00:00
%preun -n libgnutls-devel
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=1
2007-01-15 23:15:20 +00:00
%install_info_delete --info-dir=%{_infodir} %{_infodir}/gnutls.info.gz
Accepting request 31574 from Base:System Copy from Base:System/gnutls based on submit request 31574 from user msmeissn OBS-URL: https://build.opensuse.org/request/show/31574 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=21
2010-02-05 13:05:07 +00:00
%files -f libgnutls.lang
Accepting request 580155 from Base:System OBS-URL: https://build.opensuse.org/request/show/580155 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=107
2018-02-28 18:55:27 +00:00
%license LICENSE
%doc THANKS README.md NEWS ChangeLog AUTHORS doc/TODO
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 11:44:12 +00:00
%{_bindir}/certtool
%{_bindir}/gnutls-cli
%{_bindir}/gnutls-cli-debug
%{_bindir}/gnutls-serv
Accepting request 121255 from Base:System - Update to version 3.0.19: + libgnutls: - When decoding a PKCS #11 URL the pin-source field is assumed to be a file that stores the pin. Based on patch by David Smith. - gnutls_record_check_pending() no longer returns unprocessed data, and thus ensure the non-blocking of the next call to gnutls_record_recv(). - Added strict tests in Diffie-Hellman and SRP key exchange public keys. - in ECDSA and DSA TLS 1.2 authentication be less strict in hash selection, and allow a stronger hash to be used than the appropriate, to improve interoperability with openssl. + tests: - Disabled floating point test, and corrections in pkcs12 decoding tests. + API and ABI modifications: - No changes since last version. - Changes from version 3.0.18: + certtool: - Avoid a Y2K38 bug when generating certificates. Patch by Robert Millan. + libgnutls: - Make sure that GNUTLS_E_PREMATURE_TERMINATION - is returned on premature termination (and added unit test). - Fixes for W64 API. Patch by B. Scott Michel. - Corrected VIA padlock detection for old VIA processors. Reported by Kris Karas. - Updated assembler files. OBS-URL: https://build.opensuse.org/request/show/121255 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=44
2012-05-21 08:25:22 +00:00
%{_bindir}/ocsptool
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 11:44:12 +00:00
%{_bindir}/psktool
%{_bindir}/p11tool
%{_bindir}/srptool
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 17:32:11 +00:00
%if %{with dane}
Accepting request 181378 from Base:System - Disable all ECC algorithms. - gnutls-32bit.patch: upstream patch to make test work with 32bit time_t. - gnutls-implement-trust-store-dir.diff currently not yet forward ported. - Updated to GnuTLS 3.2.1 ** libgnutls: Allow ECC when in SSL 3.0 to work-around a bug in certain openssl versions. ** libgnutls: Fixes in interrupted function resumption. Report and patch by Tim Kosse. ** libgnutls: Corrected issue when receiving client hello verify requests in DTLS. ** libgnutls: Fixes in DTLS record overhead size calculations. ** libgnutls: gnutls_handshake_get_last_in() was fixed. Reported by Mann Ern Kang. - Updated to GnuTLS 3.2.0 ** libgnutls: Use nettle's elliptic curve implementation. ** libgnutls: Added Salsa20 cipher ** libgnutls: Added UMAC-96 and UMAC-128 ** libgnutls: Added ciphersuites involving Salsa20 and UMAC-96. As they are not standardized they are defined using private ciphersuite numbers. ** libgnutls: Added support for DTLS 1.2. ** libgnutls: Added support for the Application Layer Protocol Negotiation (ALPN) extension. ** libgnutls: Removed support for the RSA-EXPORT ciphersuites. ** libgnutls: Avoid linking to librt (that also avoids unnecessary linking to pthreads if p11-kit isn't used). - Updated to GnuTLS 3.1.10 (released 2013-03-22) ** certtool: When generating PKCS #12 files use by default the ARCFOUR (RC4) cipher to be compatible with devices that don't OBS-URL: https://build.opensuse.org/request/show/181378 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=58
2013-07-01 13:54:42 +00:00
%{_bindir}/danetool
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 17:32:11 +00:00
%endif
%if %{with tpm}
%{_bindir}/tpmtool
%endif
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 11:44:12 +00:00
%{_mandir}/man1/*
%files -n libgnutls%{gnutls_sover}
%{_libdir}/libgnutls.so.%{gnutls_sover}*
Accepting request 790830 from home:vitezslav_cizek:branches:security:tls - Use correct nettle .so version when looking for a FIPS checksum (bsc#1166635) * add gnutls-fips_correct_nettle_soversion.patch - Update to 3.6.13 * libgnutls: Fix a DTLS-protocol regression (caused by TLS1.3 support) The DTLS client would not contribute any randomness to the DTLS negotiation, breaking the security guarantees of the DTLS protocol (#960) [GNUTLS-SA-2020-03-31, CVSS: high] (bsc#1168345) * libgnutls: Added new APIs to access KDF algorithms (#813). * libgnutls: Added new callback gnutls_keylog_func that enables a custom logging functionality. * libgnutls: Added support for non-null terminated usernames in PSK negotiation (#586). * gnutls-cli-debug: Improved support for old servers that only support SSL 3.0. - Split off FIPS checksums into a separate libgnutls30-hmac subpackage (bsc#1152692) OBS-URL: https://build.opensuse.org/request/show/790830 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=32
2020-04-02 10:58:27 +00:00
%files -n libgnutls%{gnutls_sover}-hmac
Accepting request 734378 from home:vitezslav_cizek:branches:security:tls - Install checksums for binary integrity verification which are required when running in FIPS mode (bsc#1152692, jsc#SLE-9518) OBS-URL: https://build.opensuse.org/request/show/734378 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=24
2019-10-01 15:18:43 +00:00
%{_libdir}/.libgnutls.so.%{gnutls_sover}*.hmac
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 17:32:11 +00:00
%if %{with dane}
%files -n libgnutls-dane%{gnutls_dane_sover}
%{_libdir}/libgnutls-dane.so.%{gnutls_dane_sover}*
%endif
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 11:44:12 +00:00
%files -n libgnutlsxx%{gnutlsxx_sover}
%{_libdir}/libgnutlsxx.so.%{gnutlsxx_sover}*
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=6
2007-10-25 16:10:26 +00:00
%files -n libgnutls-devel
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 11:44:12 +00:00
%dir %{_includedir}/%{name}
%{_includedir}/%{name}/abstract.h
%{_includedir}/%{name}/crypto.h
%{_includedir}/%{name}/compat.h
%{_includedir}/%{name}/dtls.h
%{_includedir}/%{name}/gnutls.h
%{_includedir}/%{name}/openpgp.h
Accepting request 121255 from Base:System - Update to version 3.0.19: + libgnutls: - When decoding a PKCS #11 URL the pin-source field is assumed to be a file that stores the pin. Based on patch by David Smith. - gnutls_record_check_pending() no longer returns unprocessed data, and thus ensure the non-blocking of the next call to gnutls_record_recv(). - Added strict tests in Diffie-Hellman and SRP key exchange public keys. - in ECDSA and DSA TLS 1.2 authentication be less strict in hash selection, and allow a stronger hash to be used than the appropriate, to improve interoperability with openssl. + tests: - Disabled floating point test, and corrections in pkcs12 decoding tests. + API and ABI modifications: - No changes since last version. - Changes from version 3.0.18: + certtool: - Avoid a Y2K38 bug when generating certificates. Patch by Robert Millan. + libgnutls: - Make sure that GNUTLS_E_PREMATURE_TERMINATION - is returned on premature termination (and added unit test). - Fixes for W64 API. Patch by B. Scott Michel. - Corrected VIA padlock detection for old VIA processors. Reported by Kris Karas. - Updated assembler files. OBS-URL: https://build.opensuse.org/request/show/121255 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=44
2012-05-21 08:25:22 +00:00
%{_includedir}/%{name}/ocsp.h
Accepting request 324612 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/324612 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=87
2015-08-25 05:17:02 +00:00
%{_includedir}/%{name}/pkcs7.h
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 11:44:12 +00:00
%{_includedir}/%{name}/pkcs11.h
%{_includedir}/%{name}/pkcs12.h
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 17:32:11 +00:00
%{_includedir}/%{name}/self-test.h
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 21:41:21 +00:00
%{_includedir}/%{name}/socket.h
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 11:44:12 +00:00
%{_includedir}/%{name}/x509.h
Accepting request 293173 from Base:System some tweaks for your perusal (forwarded request 293171 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/293173 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=81
2015-03-30 17:32:11 +00:00
%{_includedir}/%{name}/x509-ext.h
Accepting request 181378 from Base:System - Disable all ECC algorithms. - gnutls-32bit.patch: upstream patch to make test work with 32bit time_t. - gnutls-implement-trust-store-dir.diff currently not yet forward ported. - Updated to GnuTLS 3.2.1 ** libgnutls: Allow ECC when in SSL 3.0 to work-around a bug in certain openssl versions. ** libgnutls: Fixes in interrupted function resumption. Report and patch by Tim Kosse. ** libgnutls: Corrected issue when receiving client hello verify requests in DTLS. ** libgnutls: Fixes in DTLS record overhead size calculations. ** libgnutls: gnutls_handshake_get_last_in() was fixed. Reported by Mann Ern Kang. - Updated to GnuTLS 3.2.0 ** libgnutls: Use nettle's elliptic curve implementation. ** libgnutls: Added Salsa20 cipher ** libgnutls: Added UMAC-96 and UMAC-128 ** libgnutls: Added ciphersuites involving Salsa20 and UMAC-96. As they are not standardized they are defined using private ciphersuite numbers. ** libgnutls: Added support for DTLS 1.2. ** libgnutls: Added support for the Application Layer Protocol Negotiation (ALPN) extension. ** libgnutls: Removed support for the RSA-EXPORT ciphersuites. ** libgnutls: Avoid linking to librt (that also avoids unnecessary linking to pthreads if p11-kit isn't used). - Updated to GnuTLS 3.1.10 (released 2013-03-22) ** certtool: When generating PKCS #12 files use by default the ARCFOUR (RC4) cipher to be compatible with devices that don't OBS-URL: https://build.opensuse.org/request/show/181378 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=58
2013-07-01 13:54:42 +00:00
%{_includedir}/%{name}/tpm.h
Accepting request 295655 from Base:System - updated to 3.4.0 (released 2015-04-08) ** libgnutls: Added support for AES-CCM and AES-CCM-8 (RFC6655 and RFC7251) ciphersuites. The former are enabled by default, the latter need to be explicitly enabled, since they reduce the overall security level. ** libgnutls: Added support for Chacha20-Poly1305 ciphersuites following draft-mavrogiannopoulos-chacha-tls-05 and draft-irtf-cfrg-chacha20-poly1305-10. That is currently provided as technology preview and is not enabled by default, since there are no assigned ciphersuite points by IETF and there is no guarrantee of compatibility between draft versions. The ciphersuite priority string to enable it is "+CHACHA20-POLY1305". ** libgnutls: Added support for encrypt-then-authenticate in CBC ciphersuites (RFC7366 -taking into account its errata text). This is enabled by default and can be disabled using the %NO_ETM priority string. ** libgnutls: Added support for the extended master secret (triple-handshake fix) following draft-ietf-tls-session-hash-02. ** libgnutls: Added a new simple and hard to misuse AEAD API (crypto.h). ** libgnutls: SSL 3.0 is no longer included in the default priorities list. It has to be explicitly enabled, e.g., with a string like "NORMAL:+VERS-SSL3.0". ** libgnutls: ARCFOUR (RC4) is no longer included in the default priorities list. It has to be explicitly enabled, e.g., with a string like "NORMAL:+ARCFOUR-128". ** libgnutls: DSA signatures and DHE-DSS are no longer included in the default priorities list. They have to be explicitly enabled, e.g., with a string like "NORMAL:+DHE-DSS:+SIGN-DSA-SHA256:+SIGN-DSA-SHA1". The DSA ciphersuites were dropped because they had no deployment at all on the internet, to justify their inclusion. ** libgnutls: The priority string EXPORT was completely removed. The string OBS-URL: https://build.opensuse.org/request/show/295655 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=83
2015-04-18 08:38:18 +00:00
%{_includedir}/%{name}/system-keys.h
%{_includedir}/%{name}/urls.h
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 11:44:12 +00:00
%{_libdir}/libgnutls.so
%{_libdir}/pkgconfig/gnutls.pc
%{_mandir}/man3/*
Accepting request 447177 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/447177 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=95
2016-12-29 21:41:21 +00:00
%{_infodir}/*%{ext_info}
Accepting request 142850 from Base:System - include LGPL-3.0+ text in COPYING.LESSER - run regression tests, but move "make check" to %check section - add gnutls-3.0.26-skip-test-fwrite.patch to skip a failing test - no longer manipulate doc/examples tree in %install section, the deletion of Makefiles breaks "make check" in %check - install documentation, reference and examples in %install section to fetch them for the package without unneccessary files (forwarded request 142825 from AndreasStieger) OBS-URL: https://build.opensuse.org/request/show/142850 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=53
2012-11-28 09:29:35 +00:00
%doc %{_docdir}/libgnutls-devel
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=7
2008-02-28 00:56:17 +00:00
Accepting request 360180 from Base:System - follow the work in the unbound package and use the libunbound-devel symbol for the buildrequires. we override it for the distro build with libunbound-devel-mini to avoid build loops. (forwarded request 360179 from darix) OBS-URL: https://build.opensuse.org/request/show/360180 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=89
2016-02-24 13:25:15 +00:00
%if %{with dane}
%files -n libgnutls-dane-devel
%dir %{_includedir}/%{name}
%{_includedir}/%{name}/dane.h
%{_libdir}/pkgconfig/gnutls-dane.pc
%{_libdir}/libgnutls-dane.so
%endif
Accepting request 79281 from Base:System - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. (forwarded request 79252 from elvigia) OBS-URL: https://build.opensuse.org/request/show/79281 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=31
2011-08-24 11:44:12 +00:00
%files -n libgnutlsxx-devel
%{_libdir}/libgnutlsxx.so
%dir %{_includedir}/%{name}
%{_includedir}/%{name}/gnutlsxx.h
Accepting request 391813 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/391813 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=91
2016-05-04 06:17:29 +00:00
%if %{with guile}
%files guile
%{_libdir}/guile/*
Accepting request 630992 from home:vitezslav_cizek:branches:security:tls - Update to 3.6.3 Fixes security issues: CVE-2018-10846, CVE-2018-10845, CVE-2018-10844, CVE-2017-10790 (bsc#1105437, bsc#1105460, bsc#1105459, bsc#1047002) Other Changes: ** libgnutls: Introduced support for draft-ietf-tls-tls13-28 ** libgnutls: Apply compatibility settings for existing applications running with TLS1.2 or earlier and TLS 1.3. ** Added support for Russian Public Key Infrastructure according to RFCs 4491/4357/7836. ** Provide a uniform cipher list across supported TLS protocols ** The SSL 3.0 protocol is disabled on compile-time by default. ** libgnutls: Introduced function to switch the current FIPS140-2 operational mode ** libgnutls: Introduced low-level function to assist applications attempting client hello extension parsing, prior to GnuTLS' parsing of the message. ** libgnutls: When exporting an X.509 certificate avoid re-encoding if there are no modifications to the certificate. ** libgnutls: on group exchange honor the %SERVER_PRECEDENCE and select the groups which are preferred by the server. ** Improved counter-measures for TLS CBC record padding. ** Introduced the %FORCE_ETM priority string option. This option prevents the negotiation of legacy CBC ciphersuites unless encrypt-then-mac is negotiated. ** libgnutls: gnutls_privkey_import_ext4() was enhanced with the GNUTLS_PRIVKEY_INFO_PK_ALGO_BITS flag. ** libgnutls: gnutls_pkcs11_copy_secret_key, gnutls_pkcs11_copy_x509_privkey2, gnutls_pkcs11_privkey_generate3 will mark objects as sensitive by default unless GNUTLS_PKCS11_OBJ_FLAG_MARK_NOT_SENSITIVE is specified. This is an API change for these functions which make them err towards safety. ** libgnutls: improved aarch64 cpu features detection by using getauxval(). ** certtool: It is now possible to specify certificate and serial CRL numbers greater OBS-URL: https://build.opensuse.org/request/show/630992 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=4
2018-08-23 07:10:46 +00:00
%{_datadir}/guile/gnutls*
Accepting request 391813 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/391813 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=91
2016-05-04 06:17:29 +00:00
%endif
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=2
2007-04-16 22:33:13 +00:00
%changelog
Copy Permalink