From 4d1ca438788d1d0ec13b11ff8c880b3eb6e6ae0e2d9dc604e8ab9defb5d74e2c Mon Sep 17 00:00:00 2001
From: Dominique Leuenberger <dleuenberger@suse.com>
Date: Fri, 10 Nov 2017 13:40:23 +0000
Subject: [PATCH] Accepting request 539293 from Base:System

OBS-URL: https://build.opensuse.org/request/show/539293
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=105
---
 gnutls-3.6.0.tar.xz     |   3 ---
 gnutls-3.6.0.tar.xz.sig | Bin 310 -> 0 bytes
 gnutls-3.6.1.tar.xz     |   3 +++
 gnutls-3.6.1.tar.xz.sig | Bin 0 -> 310 bytes
 gnutls.changes          |  25 +++++++++++++++++++++++++
 gnutls.spec             |   2 +-
 6 files changed, 29 insertions(+), 4 deletions(-)
 delete mode 100644 gnutls-3.6.0.tar.xz
 delete mode 100644 gnutls-3.6.0.tar.xz.sig
 create mode 100644 gnutls-3.6.1.tar.xz
 create mode 100644 gnutls-3.6.1.tar.xz.sig

diff --git a/gnutls-3.6.0.tar.xz b/gnutls-3.6.0.tar.xz
deleted file mode 100644
index cf3c1bc..0000000
--- a/gnutls-3.6.0.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:2ab9e3c0131fcd9142382f37ba9c6d20022b76cba83560cbcaa8e4002d71fb72
-size 8024972
diff --git a/gnutls-3.6.0.tar.xz.sig b/gnutls-3.6.0.tar.xz.sig
deleted file mode 100644
index 86b57709493a10c319d36d33cf2fd6754d56b1c2921cd1ca89cc10644d1f54f5..0000000000000000000000000000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 310
zcmV-60m=S}0W$;u0SEvc79j+v63hMk+)WGTppz1vUaIzx6SzVJ0$G}ZIRFX?5S?DC
z_K*{}LNY%G{S~0D-jZ;;&n{Pc#b@zz2!k2;z~F$~$X<MJu}Gcn{wSM)R}$38#;5s>
z-t}=$0L!VQSAO&J+VEEo72i`NeHx%~?1`)px<0(y)0Fv|0f1x+WIShC>;Y9tN9KDV
zuo!Wo=|V<#snuqN30T)hL6W9#3@8xRc?00D&BIt;Dqyd{zgWsMH`wqy3~)i>kByJv
zoKVc*M>zu<U6~Via~@q%c(|Vf8B;+b@!D2w4EwuqcKl`5b2aT<j6?_0qx5RnEpal~
zx_q?keg@}OwL$K8ip;aX?=Qmi^`G*6oCdX<ODsh8#fTUd{5E{jUCW1HSkYR-awHmN
I(pwlOuXu=-&j0`b

diff --git a/gnutls-3.6.1.tar.xz b/gnutls-3.6.1.tar.xz
new file mode 100644
index 0000000..c30efc5
--- /dev/null
+++ b/gnutls-3.6.1.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:20b10d2c9994bc032824314714d0e84c0f19bdb3d715d8ed55beb7364a8ebaed
+size 8064408
diff --git a/gnutls-3.6.1.tar.xz.sig b/gnutls-3.6.1.tar.xz.sig
new file mode 100644
index 0000000000000000000000000000000000000000000000000000000000000000..1b4fd2166698054fb7747ae3322342ae42e0744417e0c6b8c17105a7740b098b
GIT binary patch
literal 310
zcmV-60m=S}0W$;u0SEvc79j+v63hMk+)WGTppz1vUaIzx6SzVJ0$J+&W&jEa5S?DC
z_K*{}LXdI@0F~8boeD0+@6hN5p=EMSsarXY_9a?4VI_H3TW*G4w|bKjC&SyGlMYjd
zQluui#B{`jPVt5D*hUxW4{ull#E2cE&5E8-9%G{n)Eg?=(Wd374;2MA6hfh<3$5Q<
ze>0x};vz%;qaIj*p;wmMDg)kz8p~T=%T(PZ{M(0BiX|j#jrT90V;Uwn4Ri!9oBA=S
z>x;LX_;ioV=ou-+HwyTmFv5Roy!X@<y6x69RN5t7o}%oMb9d-CKAVnzz=TC>$A*Dz
z#YX3sU*546ZaxzVJ)#u(4e`_hG}Ky;+9`yfIZ-+CwCX}Z676Xgg4_GG2v;OP)!E{K
IzUk6BY0W5+aR2}S

literal 0
HcmV?d00001

diff --git a/gnutls.changes b/gnutls.changes
index b306fbe..f548c70 100644
--- a/gnutls.changes
+++ b/gnutls.changes
@@ -1,3 +1,28 @@
+-------------------------------------------------------------------
+Wed Nov  1 15:13:55 UTC 2017 - astieger@suse.com
+
+- GnuTLS 3.6.1:
+  * Fix interoperability issue with openssl when safe renegotiation
+    was used
+  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
+    gnutls_x509_crq_sign, were modified to sign with a better
+    algorithm than SHA1. They will now sign with an algorithm that
+    corresponds to the security level of the signer's key.
+  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
+    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
+    will signal the function to auto-detect an appropriate hash
+    algorithm to use.
+  * Remove support for signature algorithms using SHA2-224 in TLS.
+    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
+    algorithm in TLS 1.2
+  * Refuse to use client certificates containing disallowed
+    algorithms for a session, reverting a change on 3.5.5
+  * Refuse to resume a session which had a different SNI advertised
+    That improves RFC6066 support in server side.
+  * p11tool: Mark all generated objects as sensitive by default.
+  * p11tool: added options --sign-params and --hash. This allows
+    testing signature with multiple algorithms, including RSA-PSS.
+
 -------------------------------------------------------------------
 Wed Sep 20 12:36:16 UTC 2017 - vcizek@suse.com
 
diff --git a/gnutls.spec b/gnutls.spec
index ab73d69..4d1cec5 100644
--- a/gnutls.spec
+++ b/gnutls.spec
@@ -23,7 +23,7 @@
 %bcond_with tpm
 %bcond_without guile
 Name:           gnutls
-Version:        3.6.0
+Version:        3.6.1
 Release:        0
 Summary:        The GNU Transport Layer Security Library
 License:        LGPL-2.1+ AND GPL-3.0+