From a11fa3fadd9064fafa9ce80a8a679ebdfdd91dfed98ecc61fba674cc0b93c1c4 Mon Sep 17 00:00:00 2001 From: Stephan Kulow Date: Thu, 1 Aug 2013 15:15:14 +0000 Subject: [PATCH] Accepting request 185475 from Base:System - Updated to 3.2.3 ** libgnutls: Fixes in parsing of priority strings. Patch by Stefan Buehler. ** libgnutls: Solve issue with received TLS packets that exceed 2^14. (this fixes a bug that was accidentally introduced in 3.2.2) ** libgnutls: Removed gnulib modules under LGPLv3 that could possibly be used by the library. ** libgnutls: Fixes in gnutls_record_send_range(). Report and initial fix by Alfredo Pironti. - Updated to 3.2.2 ** libgnutls: Several optimizations in the related to packet processing subsystems. ** libgnutls: DTLS replay detection can now be disabled (to be used in certain transport layers like SCTP). ** libgnutls: Fixes in SRTP extension generation when MKI is being used. ** libgnutls: Added ability to set hooks before or after sending or receiving any handshake message with gnutls_handshake_set_hook_function(). - gnutls-3.2.3-noecc.patch: updated to disable ECC. - automake-1.12.patch: upstream, dropped - gnutls-32bit.patch: upstream, dropped - gnutls-3.2.1-pkcs11.diff: upstream, dropped OBS-URL: https://build.opensuse.org/request/show/185475 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnutls?expand=0&rev=62 --- automake-1.12.patch | 52 --- gnutls-3.2.1-pkcs11.diff | 28 -- gnutls-3.2.1.tar.xz | 3 - gnutls-3.2.1.tar.xz.sig | Bin 287 -> 0 bytes ....1-noecc.patch => gnutls-3.2.3-noecc.patch | 323 ++++++++++++------ gnutls-3.2.3.tar.xz | 3 + gnutls-3.2.3.tar.xz.sig | Bin 0 -> 286 bytes gnutls-32bit.patch | 35 -- gnutls-implement-trust-store-dir.diff | 18 +- gnutls.changes | 34 ++ gnutls.spec | 15 +- 11 files changed, 258 insertions(+), 253 deletions(-) delete mode 100644 automake-1.12.patch delete mode 100644 gnutls-3.2.1-pkcs11.diff delete mode 100644 gnutls-3.2.1.tar.xz delete mode 100644 gnutls-3.2.1.tar.xz.sig rename gnutls-3.2.1-noecc.patch => gnutls-3.2.3-noecc.patch (65%) create mode 100644 gnutls-3.2.3.tar.xz create mode 100644 gnutls-3.2.3.tar.xz.sig delete mode 100644 gnutls-32bit.patch diff --git a/automake-1.12.patch b/automake-1.12.patch deleted file mode 100644 index 02f1160..0000000 --- a/automake-1.12.patch +++ /dev/null @@ -1,52 +0,0 @@ -Index: gnutls-3.2.1/aclocal.m4 -=================================================================== ---- gnutls-3.2.1.orig/aclocal.m4 -+++ gnutls-3.2.1/aclocal.m4 -@@ -517,7 +517,7 @@ AM_MISSING_PROG(AUTOHEADER, autoheader) - AM_MISSING_PROG(MAKEINFO, makeinfo) - AC_REQUIRE([AM_PROG_INSTALL_SH])dnl - AC_REQUIRE([AM_PROG_INSTALL_STRIP])dnl --AC_REQUIRE([AM_PROG_MKDIR_P])dnl -+AC_REQUIRE([AC_PROG_MKDIR_P])dnl - # We need awk for the "check" target. The system "awk" is bad on - # some platforms. - AC_REQUIRE([AC_PROG_AWK])dnl -@@ -761,10 +761,10 @@ fi - - # serial 1 - --# AM_PROG_MKDIR_P -+# AC_PROG_MKDIR_P - # --------------- - # Check for `mkdir -p'. --AC_DEFUN([AM_PROG_MKDIR_P], -+AC_DEFUN([AC_PROG_MKDIR_P], - [AC_PREREQ([2.60])dnl - AC_REQUIRE([AC_PROG_MKDIR_P])dnl - dnl Automake 1.8 to 1.9.6 used to define mkdir_p. We now use MKDIR_P, -Index: gnutls-3.2.1/gl/m4/gnulib-common.m4 -=================================================================== ---- gnutls-3.2.1.orig/gl/m4/gnulib-common.m4 -+++ gnutls-3.2.1/gl/m4/gnulib-common.m4 -@@ -303,7 +303,7 @@ m4_ifdef([AC_PROG_MKDIR_P], [ - AC_SUBST([MKDIR_P])])], [ - dnl For autoconf < 2.60: Backport of AC_PROG_MKDIR_P. - AC_DEFUN_ONCE([AC_PROG_MKDIR_P], -- [AC_REQUIRE([AM_PROG_MKDIR_P])dnl defined by automake -+ [AC_REQUIRE([AC_PROG_MKDIR_P])dnl defined by automake - MKDIR_P='$(mkdir_p)' - AC_SUBST([MKDIR_P])])]) - ]) -Index: gnutls-3.2.1/m4/po.m4 -=================================================================== ---- gnutls-3.2.1.orig/m4/po.m4 -+++ gnutls-3.2.1/m4/po.m4 -@@ -24,7 +24,7 @@ AC_DEFUN([AM_PO_SUBDIRS], - [ - AC_REQUIRE([AC_PROG_MAKE_SET])dnl - AC_REQUIRE([AC_PROG_INSTALL])dnl -- AC_REQUIRE([AM_PROG_MKDIR_P])dnl defined by automake -+ AC_REQUIRE([AC_PROG_MKDIR_P])dnl defined by automake - AC_REQUIRE([AM_NLS])dnl - - dnl Release version of the gettext macros. This is used to ensure that diff --git a/gnutls-3.2.1-pkcs11.diff b/gnutls-3.2.1-pkcs11.diff deleted file mode 100644 index 8b2d063..0000000 --- a/gnutls-3.2.1-pkcs11.diff +++ /dev/null @@ -1,28 +0,0 @@ -From 9008620a9c452fb33942f0f8ee03a44fdf277475 Mon Sep 17 00:00:00 2001 -From: Stef Walter -Date: Thu, 4 Jul 2013 16:15:03 +0200 -Subject: [PATCH] pkcs11: Use the correct attribute length for CKA_TRUSTED - -CKA_TRUSTED is a CK_BBOOL value in PKCS#11. Since object searches -are done with the attribute byte values, we need to get the length -exactly right. ---- - lib/pkcs11.c | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/lib/pkcs11.c b/lib/pkcs11.c -index 27ea3f4..3da3b92 100644 ---- a/lib/pkcs11.c -+++ b/lib/pkcs11.c -@@ -2201,7 +2201,7 @@ find_objs (struct pkcs11_session_info* sinfo, - struct ck_attribute *attr; - ck_object_class_t class = (ck_object_class_t)-1; - ck_certificate_type_t type = (ck_certificate_type_t)-1; -- unsigned int trusted; -+ unsigned char trusted; - unsigned long category; - ck_rv_t rv; - ck_object_handle_t obj; --- -1.8.3.1 - diff --git a/gnutls-3.2.1.tar.xz b/gnutls-3.2.1.tar.xz deleted file mode 100644 index fb3f89b..0000000 --- a/gnutls-3.2.1.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:abfa8165947837ada2363355ada25d913f48e6bb261f0a67f20d2fb6079e22fe -size 5127332 diff --git a/gnutls-3.2.1.tar.xz.sig b/gnutls-3.2.1.tar.xz.sig deleted file mode 100644 index c8ebaca8ceb8e423a957f4ca39c96f20d23489a3a362677c94989d9c404ef066..0000000000000000000000000000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 287 zcmV+)0pR|L0UQJX0RjL91p-m2*f0PJ2@suLs`ii*xIz}b2meSMakAO8GA7S+i+E`B zNjhzROERVrBV(dO7TZ<#C4!KC?k-X47b zANFK1t;G?gE?SA#aAn`@6{%^E*cZ>MBzmPLsUzW);|t|Kvg=?UoFLZ;#P4t;yq}03 z19CE%H}bX#(1S6Fa#HQMp2xi3{O3TLe zL~YB8;j`IU#!}zm)o)OIf_7z0wK2P!eSVy+e+pyHe7;ciI@~g2Twef|I-b4L!$fkj lQq2l6KB>r!!T*5|5=YJmN`@C)M8Ke97x4nWf=o~y&vHhsgU #include @@ -509,11 +497,11 @@ Index: gnutls-3.2.1/tests/mini-dtls-heartbeat.c int main () -Index: gnutls-3.2.1/tests/mini-dtls-record.c +Index: gnutls-3.2.3/tests/mini-dtls-record.c =================================================================== ---- gnutls-3.2.1.orig/tests/mini-dtls-record.c -+++ gnutls-3.2.1/tests/mini-dtls-record.c -@@ -27,7 +27,7 @@ +--- gnutls-3.2.3.orig/tests/mini-dtls-record.c ++++ gnutls-3.2.3/tests/mini-dtls-record.c +@@ -29,7 +29,7 @@ #include #include @@ -522,10 +510,10 @@ Index: gnutls-3.2.1/tests/mini-dtls-record.c int main () -Index: gnutls-3.2.1/tests/mini-dtls-rehandshake.c +Index: gnutls-3.2.3/tests/mini-dtls-rehandshake.c =================================================================== ---- gnutls-3.2.1.orig/tests/mini-dtls-rehandshake.c -+++ gnutls-3.2.1/tests/mini-dtls-rehandshake.c +--- gnutls-3.2.3.orig/tests/mini-dtls-rehandshake.c ++++ gnutls-3.2.3/tests/mini-dtls-rehandshake.c @@ -27,7 +27,7 @@ #include #include @@ -535,10 +523,10 @@ Index: gnutls-3.2.1/tests/mini-dtls-rehandshake.c int main() { -Index: gnutls-3.2.1/tests/mini-dtls-srtp.c +Index: gnutls-3.2.3/tests/mini-dtls-srtp.c =================================================================== ---- gnutls-3.2.1.orig/tests/mini-dtls-srtp.c -+++ gnutls-3.2.1/tests/mini-dtls-srtp.c +--- gnutls-3.2.3.orig/tests/mini-dtls-srtp.c ++++ gnutls-3.2.3/tests/mini-dtls-srtp.c @@ -27,7 +27,7 @@ #include #include @@ -548,10 +536,10 @@ Index: gnutls-3.2.1/tests/mini-dtls-srtp.c int main (int argc, char** argv) -Index: gnutls-3.2.1/tests/mini-handshake-timeout.c +Index: gnutls-3.2.3/tests/mini-handshake-timeout.c =================================================================== ---- gnutls-3.2.1.orig/tests/mini-handshake-timeout.c -+++ gnutls-3.2.1/tests/mini-handshake-timeout.c +--- gnutls-3.2.3.orig/tests/mini-handshake-timeout.c ++++ gnutls-3.2.3/tests/mini-handshake-timeout.c @@ -28,7 +28,7 @@ #include #include @@ -574,10 +562,10 @@ Index: gnutls-3.2.1/tests/mini-handshake-timeout.c } static void -Index: gnutls-3.2.1/tests/mini-loss-time.c +Index: gnutls-3.2.3/tests/mini-loss-time.c =================================================================== ---- gnutls-3.2.1.orig/tests/mini-loss-time.c -+++ gnutls-3.2.1/tests/mini-loss-time.c +--- gnutls-3.2.3.orig/tests/mini-loss-time.c ++++ gnutls-3.2.3/tests/mini-loss-time.c @@ -28,7 +28,7 @@ #include #include @@ -587,10 +575,10 @@ Index: gnutls-3.2.1/tests/mini-loss-time.c int main() { -Index: gnutls-3.2.1/tests/mini-record.c +Index: gnutls-3.2.3/tests/mini-record.c =================================================================== ---- gnutls-3.2.1.orig/tests/mini-record.c -+++ gnutls-3.2.1/tests/mini-record.c +--- gnutls-3.2.3.orig/tests/mini-record.c ++++ gnutls-3.2.3/tests/mini-record.c @@ -27,7 +27,7 @@ #include #include @@ -600,10 +588,10 @@ Index: gnutls-3.2.1/tests/mini-record.c int main() { -Index: gnutls-3.2.1/tests/mini-record-range.c +Index: gnutls-3.2.3/tests/mini-record-range.c =================================================================== ---- gnutls-3.2.1.orig/tests/mini-record-range.c -+++ gnutls-3.2.1/tests/mini-record-range.c +--- gnutls-3.2.3.orig/tests/mini-record-range.c ++++ gnutls-3.2.3/tests/mini-record-range.c @@ -27,7 +27,7 @@ #include #include @@ -613,10 +601,10 @@ Index: gnutls-3.2.1/tests/mini-record-range.c int main() { -Index: gnutls-3.2.1/tests/mini-xssl.c +Index: gnutls-3.2.3/tests/mini-xssl.c =================================================================== ---- gnutls-3.2.1.orig/tests/mini-xssl.c -+++ gnutls-3.2.1/tests/mini-xssl.c +--- gnutls-3.2.3.orig/tests/mini-xssl.c ++++ gnutls-3.2.3/tests/mini-xssl.c @@ -27,7 +27,7 @@ #include #include @@ -626,10 +614,10 @@ Index: gnutls-3.2.1/tests/mini-xssl.c int main() { -Index: gnutls-3.2.1/tests/pkcs12_simple.c +Index: gnutls-3.2.3/tests/pkcs12_simple.c =================================================================== ---- gnutls-3.2.1.orig/tests/pkcs12_simple.c -+++ gnutls-3.2.1/tests/pkcs12_simple.c +--- gnutls-3.2.3.orig/tests/pkcs12_simple.c ++++ gnutls-3.2.3/tests/pkcs12_simple.c @@ -50,6 +50,10 @@ doit (void) gnutls_x509_privkey_t pkey; int ret; @@ -641,10 +629,10 @@ Index: gnutls-3.2.1/tests/pkcs12_simple.c ret = global_init (); if (ret < 0) fail ("global_init failed %d\n", ret); -Index: gnutls-3.2.1/tests/slow/keygen.c +Index: gnutls-3.2.3/tests/slow/keygen.c =================================================================== ---- gnutls-3.2.1.orig/tests/slow/keygen.c -+++ gnutls-3.2.1/tests/slow/keygen.c +--- gnutls-3.2.3.orig/tests/slow/keygen.c ++++ gnutls-3.2.3/tests/slow/keygen.c @@ -65,6 +65,11 @@ doit (void) if (algorithm == GNUTLS_PK_DH) continue; @@ -657,10 +645,10 @@ Index: gnutls-3.2.1/tests/slow/keygen.c ret = gnutls_x509_privkey_init (&pkey); if (ret < 0) { -Index: gnutls-3.2.1/tests/srp/mini-srp.c +Index: gnutls-3.2.3/tests/srp/mini-srp.c =================================================================== ---- gnutls-3.2.1.orig/tests/srp/mini-srp.c -+++ gnutls-3.2.1/tests/srp/mini-srp.c +--- gnutls-3.2.3.orig/tests/srp/mini-srp.c ++++ gnutls-3.2.3/tests/srp/mini-srp.c @@ -27,7 +27,7 @@ #include #include @@ -670,10 +658,10 @@ Index: gnutls-3.2.1/tests/srp/mini-srp.c int main() { -Index: gnutls-3.2.1/lib/auth/ecdhe.c +Index: gnutls-3.2.3/lib/auth/ecdhe.c =================================================================== ---- gnutls-3.2.1.orig/lib/auth/ecdhe.c -+++ gnutls-3.2.1/lib/auth/ecdhe.c +--- gnutls-3.2.3.orig/lib/auth/ecdhe.c ++++ gnutls-3.2.3/lib/auth/ecdhe.c @@ -50,7 +50,7 @@ static int proc_ecdhe_client_kx (gnutls_session_t session, uint8_t * data, size_t _data_size); @@ -683,10 +671,10 @@ Index: gnutls-3.2.1/lib/auth/ecdhe.c const mod_auth_st ecdhe_ecdsa_auth_struct = { "ECDHE_ECDSA", _gnutls_gen_cert_server_crt, -Index: gnutls-3.2.1/tests/mini-dtls-hello-verify.c +Index: gnutls-3.2.3/tests/mini-dtls-hello-verify.c =================================================================== ---- gnutls-3.2.1.orig/tests/mini-dtls-hello-verify.c -+++ gnutls-3.2.1/tests/mini-dtls-hello-verify.c +--- gnutls-3.2.3.orig/tests/mini-dtls-hello-verify.c ++++ gnutls-3.2.3/tests/mini-dtls-hello-verify.c @@ -27,7 +27,7 @@ #include #include @@ -696,10 +684,10 @@ Index: gnutls-3.2.1/tests/mini-dtls-hello-verify.c int main() { -Index: gnutls-3.2.1/tests/mini-alpn.c +Index: gnutls-3.2.3/tests/mini-alpn.c =================================================================== ---- gnutls-3.2.1.orig/tests/mini-alpn.c -+++ gnutls-3.2.1/tests/mini-alpn.c +--- gnutls-3.2.3.orig/tests/mini-alpn.c ++++ gnutls-3.2.3/tests/mini-alpn.c @@ -25,7 +25,7 @@ #include #include @@ -709,3 +697,112 @@ Index: gnutls-3.2.1/tests/mini-alpn.c int main (int argc, char** argv) +Index: gnutls-3.2.3/tests/mini-dtls-large.c +=================================================================== +--- gnutls-3.2.3.orig/tests/mini-dtls-large.c ++++ gnutls-3.2.3/tests/mini-dtls-large.c +@@ -25,7 +25,7 @@ + #include + #include + +-#if defined(_WIN32) || !defined(ENABLE_HEARTBEAT) ++#if defined(_WIN32) || !defined(ENABLE_HEARTBEAT) || !defined(ENABLE_ECC) + + int + main () +@@ -194,7 +194,11 @@ server (int fd) + * are adequate. + */ + gnutls_priority_set_direct (session, ++#ifdef ENABLE_ECDH + "NONE:+VERS-DTLS1.0:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+COMP-ALL:+ANON-ECDH:+CURVE-ALL", ++#else ++ "NONE:+VERS-DTLS1.0:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+COMP-ALL:+ANON-DH", ++#endif + NULL); + + gnutls_credentials_set (session, GNUTLS_CRD_ANON, anoncred); +Index: gnutls-3.2.3/tests/priorities.c +=================================================================== +--- gnutls-3.2.3.orig/tests/priorities.c ++++ gnutls-3.2.3/tests/priorities.c +@@ -73,7 +73,7 @@ unsigned i, si, count = 0; + for (i=0;i)5rzQLY*6S7jL$gJ8ae~1w^TWz#aAH)@$VJ5pxO~THqnO0FS8*;tA%Giz$`h#u~ z4|!D;i5Umt)f^uw_f576!+r<&uPdb0%EnI(>Ew@q#oWQ&|0x#l$nXGsgp3oN?-;{A zr8wt#O%ROrRdj*z?$+Z?Ky4I*1^%fw;WYDA_5o)U8gGp>$g^kXs9W+VAVOC@$$teo z94?2PjN_2RZFqM>fi!uuxGqCeVkRsp$nfAA4`73@m{!=td}F0WZ+8sowphP1@e4ZA kN_91G;9lnFC;qPdv1ABE(kD5Z1|9UzSAJdoL(Twcpc37N>;M1& literal 0 HcmV?d00001 diff --git a/gnutls-32bit.patch b/gnutls-32bit.patch deleted file mode 100644 index 19070c5..0000000 --- a/gnutls-32bit.patch +++ /dev/null @@ -1,35 +0,0 @@ -From b12040aeab5fbaf02677571db1d8bf1995bd5ee0 Mon Sep 17 00:00:00 2001 -From: Nikos Mavrogiannopoulos -Date: Sun, 2 Jun 2013 12:10:06 +0200 -Subject: [PATCH] Avoid comparing the expiration date to prevent false positive error in 32-bit systems. - ---- - tests/cert-tests/pem-decoding | 6 ++++-- - 1 files changed, 4 insertions(+), 2 deletions(-) - -diff --git a/tests/cert-tests/pem-decoding b/tests/cert-tests/pem-decoding -index fe769ec..f8c6372 100755 ---- a/tests/cert-tests/pem-decoding -+++ b/tests/cert-tests/pem-decoding -@@ -61,7 +61,9 @@ if test "$rc" != "0"; then - exit $rc - fi - --diff $srcdir/complex-cert.pem tmp-pem.pem -+cat $srcdir/complex-cert.pem |grep -v "Not After:" >tmp1 -+cat $srcdir/tmp-pem.pem |grep -v "Not After:" >tmp2 -+diff tmp1 tmp2 - rc=$? - - if test "$rc" != "0"; then -@@ -69,6 +71,6 @@ if test "$rc" != "0"; then - exit $rc - fi - --rm -f tmp-pem.pem -+rm -f tmp-pem.pem tmp1 tmp2 - - exit 0 --- -1.7.1 - diff --git a/gnutls-implement-trust-store-dir.diff b/gnutls-implement-trust-store-dir.diff index e7fb953..97e8339 100644 --- a/gnutls-implement-trust-store-dir.diff +++ b/gnutls-implement-trust-store-dir.diff @@ -1,8 +1,8 @@ -Index: gnutls-3.2.1/configure.ac +Index: gnutls-3.2.3/configure.ac =================================================================== ---- gnutls-3.2.1.orig/configure.ac -+++ gnutls-3.2.1/configure.ac -@@ -398,6 +398,25 @@ if test "$with_default_trust_store_file" +--- gnutls-3.2.3.orig/configure.ac ++++ gnutls-3.2.3/configure.ac +@@ -418,6 +418,25 @@ if test "$with_default_trust_store_file" with_default_trust_store_file="" fi @@ -28,7 +28,7 @@ Index: gnutls-3.2.1/configure.ac AC_ARG_WITH([default-crl-file], [AS_HELP_STRING([--with-default-crl-file=FILE], [use the given CRL file as default])]) -@@ -407,6 +426,11 @@ if test "x$with_default_trust_store_file +@@ -427,6 +446,11 @@ if test "x$with_default_trust_store_file ["$with_default_trust_store_file"], [use the given file default trust store]) fi @@ -40,7 +40,7 @@ Index: gnutls-3.2.1/configure.ac if test "x$with_default_crl_file" != x; then AC_DEFINE_UNQUOTED([DEFAULT_CRL_FILE], ["$with_default_crl_file"], [use the given CRL file]) -@@ -683,6 +707,7 @@ AC_MSG_NOTICE([System files: +@@ -704,6 +728,7 @@ AC_MSG_NOTICE([System files: Trust store pkcs: $with_default_trust_store_pkcs11 Trust store file: $with_default_trust_store_file @@ -48,10 +48,10 @@ Index: gnutls-3.2.1/configure.ac CRL file: $with_default_crl_file DNSSEC root key file: $unbound_root_key_file ]) -Index: gnutls-3.2.1/lib/system.c +Index: gnutls-3.2.3/lib/system.c =================================================================== ---- gnutls-3.2.1.orig/lib/system.c -+++ gnutls-3.2.1/lib/system.c +--- gnutls-3.2.3.orig/lib/system.c ++++ gnutls-3.2.3/lib/system.c @@ -385,7 +385,45 @@ const char *home_dir = getenv ("HOME"); return 0; } diff --git a/gnutls.changes b/gnutls.changes index 4f23ab5..869762e 100644 --- a/gnutls.changes +++ b/gnutls.changes @@ -1,3 +1,37 @@ +------------------------------------------------------------------- +Thu Aug 1 13:42:11 UTC 2013 - meissner@suse.com + +- Updated to 3.2.3 + ** libgnutls: Fixes in parsing of priority strings. Patch by Stefan + Buehler. + + ** libgnutls: Solve issue with received TLS packets that exceed 2^14. + (this fixes a bug that was accidentally introduced in 3.2.2) + + ** libgnutls: Removed gnulib modules under LGPLv3 that could possibly + be used by the library. + + ** libgnutls: Fixes in gnutls_record_send_range(). Report and initial + fix by Alfredo Pironti. + +- Updated to 3.2.2 + ** libgnutls: Several optimizations in the related to packet processing + subsystems. + + ** libgnutls: DTLS replay detection can now be disabled (to be used + in certain transport layers like SCTP). + + ** libgnutls: Fixes in SRTP extension generation when MKI is being used. + + ** libgnutls: Added ability to set hooks before or + after sending or receiving any handshake message with + gnutls_handshake_set_hook_function(). + +- gnutls-3.2.3-noecc.patch: updated to disable ECC. +- automake-1.12.patch: upstream, dropped +- gnutls-32bit.patch: upstream, dropped +- gnutls-3.2.1-pkcs11.diff: upstream, dropped + ------------------------------------------------------------------- Fri Jul 26 12:45:45 UTC 2013 - lnussel@suse.de diff --git a/gnutls.spec b/gnutls.spec index 29b1d75..23c66d5 100644 --- a/gnutls.spec +++ b/gnutls.spec @@ -21,7 +21,7 @@ %define gnutls_ossl_sover 27 Name: gnutls -Version: 3.2.1 +Version: 3.2.3 Release: 0 Summary: The GNU Transport Layer Security Library License: LGPL-2.1+ and GPL-3.0+ @@ -32,20 +32,12 @@ Source0: ftp://ftp.gnutls.org/gcrypt/gnutls/v3.2/%{name}-%{version}.tar.x Source1: ftp://ftp.gnutls.org/gcrypt/gnutls/v3.2/%{name}-%{version}.tar.xz.sig Source2: %name.keyring Source3: baselibs.conf -# https://gitorious.org/gnutls/gnutls/commit/7613c3251430a212fe5d6001863045f20eca7563 -# PATCH-UPSTREAM lnussel@suse.de -- fix reading ca-certificates # via pkcs11 interface -Patch1: gnutls-3.2.1-pkcs11.diff -Patch2: automake-1.12.patch # PATCH-FIX-OPENSUSE gnutls-3.0.26-skip-test-fwrite.patch andreas.stieger@gmx.de -- skip a failing test Patch3: gnutls-3.0.26-skip-test-fwrite.patch -# https://gitorious.org/gnutls/gnutls/commit/b12040aeab5fbaf02677571db1d8bf1995bd5ee0?format=patch -# PATCH-UPSTREAM gnutls-32bit.patch meissner@suse.de -- avoid dates after 2037 with 32bit time_t -Patch4: gnutls-32bit.patch - # Disable elliptic curves for reasons. - meissner&cfarrell -Patch5: gnutls-3.2.1-noecc.patch +Patch5: gnutls-3.2.3-noecc.patch Patch6: gnutls-implement-trust-store-dir.diff BuildRequires: automake @@ -143,10 +135,7 @@ Files needed for software development using gnutls. %prep %setup -q -%patch1 -p1 -%patch2 -p1 %patch3 -%patch4 -p1 %patch5 -p1 %patch6 -p1