From b1e657b45b002cedb1c70c9093d06ffbe333c66a63f31d8986432ed39892497b Mon Sep 17 00:00:00 2001 From: Pedro Monreal Gonzalez Date: Fri, 18 Mar 2022 20:01:46 +0000 Subject: [PATCH] Accepting request 962891 from home:pmonrealgonzalez:branches:security:tls - Update to 3.7.4: * libgnutls: Added support for certificate compression as defined in RFC8879. * certtool: Added option --compress-cert that allows user to specify compression methods for certificate compression. * libgnutls: GnuTLS can now be compiled with --enable-strict-x509 configure option to enforce stricter certificate sanity checks that are compliant with RFC5280. * libgnutls: Removed IA5String type from DirectoryString within issuer and subject name to make DirectoryString RFC5280 compliant. * libgnutls: Added function to retrieve the name of current ciphersuite from session. * Bump libgnutlsxx soname due to ABI break * API and ABI modifications: - GNUTLS_COMP_BROTLI: New gnutls_compression_method_t enum member - GNUTLS_COMP_ZSTD: New gnutls_compression_method_t enum member - gnutls_compress_certificate_get_selected_method: Added - gnutls_compress_certificate_set_methods: Added * Update gnutls.keyring OBS-URL: https://build.opensuse.org/request/show/962891 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=60 --- gnutls-3.7.3.tar.xz | 3 --- gnutls-3.7.3.tar.xz.sig | Bin 566 -> 0 bytes gnutls-3.7.4.tar.xz | 3 +++ gnutls-3.7.4.tar.xz.sig | Bin 0 -> 685 bytes gnutls.changes | 23 +++++++++++++++++++++++ gnutls.keyring | 14 ++++++++++++++ gnutls.spec | 6 ++---- 7 files changed, 42 insertions(+), 7 deletions(-) delete mode 100644 gnutls-3.7.3.tar.xz delete mode 100644 gnutls-3.7.3.tar.xz.sig create mode 100644 gnutls-3.7.4.tar.xz create mode 100644 gnutls-3.7.4.tar.xz.sig diff --git a/gnutls-3.7.3.tar.xz b/gnutls-3.7.3.tar.xz deleted file mode 100644 index f61b132..0000000 --- a/gnutls-3.7.3.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:fc59c43bc31ab20a6977ff083029277a31935b8355ce387b634fa433f8f6c49a -size 6119292 diff --git a/gnutls-3.7.3.tar.xz.sig b/gnutls-3.7.3.tar.xz.sig deleted file mode 100644 index 3c4ea1bc82152b255d538c1f2aaca76a53bf67646ec56a4b903a284ed804009c..0000000000000000000000000000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 566 zcmV-60?GY}0y6{v0SEvc79j*iA|=DLZ#0LW$VqJ01%!^*=9qB>0%7KBq5ujB5Y`2R zj@RaxaSE~z{yP2vaX~Ts@YeYGm8s~jQ3MG(BmbYJVd`vI6^@xZ4fvE9k9%=k#*AmP4V{ z*58_`(-T7C*q59OI(ltVv$@1cew<^O8LA{rIs%?cw-exO)tMxP=rUdSr7oJ4(-HH} zY(^s|TU40x0u3|Ei(NA0Iw&rJe)Rx_qC<>!ZG9!VM5=+*N3%!}G`?xh49J0%sIiX1 zcenm8q3#**ocPw+bGv%B7_{AO+BvLYy};cvF&}6ewsa5o3(Jrr`y_QlL{;!lMw!KD zIjQ+$i)@JjD>@NrSFB>wna!gmh)rzb1O%&U_QhJK;IvWXyKzSC=)>LOi)K=8aQLLc+~sy4$WtrhapJo4T(K0RXwd%q}q}Ybf;b z%vd1>kQOV+LR^s~^WXqaLUuumtqh3*GXwwu2ml=xAp}MuCBw9DG>4zaNo>{ygpSwd zm~jOHVlz7C0162Z)&+!)*XEdUbkz_26y8?IDiWQ~yL{S3<@MyX0J#&?!B!Hmkuqjr zVjSXJp&OyeF&uRa*1-ZjIZQ|HW5c4yp=uLm>WYU-Ib4Irr?CgoL7fZ1l$y6 z!bx4F4Jylhe5XS-;?wZ38V=L4I0Z)%$ zmHdQpnRXGHNa_UoPKj_Kdd5(Pc!UPKU8^0qG>GF{yJD%H&W;gP{`zG7$PG;qSKAr; Ty-KhOFJ<0WcXPu(BNiKNz}7%A literal 0 HcmV?d00001 diff --git a/gnutls.changes b/gnutls.changes index eaf571a..568e233 100644 --- a/gnutls.changes +++ b/gnutls.changes @@ -1,3 +1,26 @@ +------------------------------------------------------------------- +Fri Mar 18 08:59:49 UTC 2022 - Pedro Monreal + +- Update to 3.7.4: + * libgnutls: Added support for certificate compression as defined + in RFC8879. + * certtool: Added option --compress-cert that allows user to + specify compression methods for certificate compression. + * libgnutls: GnuTLS can now be compiled with --enable-strict-x509 + configure option to enforce stricter certificate sanity checks + that are compliant with RFC5280. + * libgnutls: Removed IA5String type from DirectoryString within + issuer and subject name to make DirectoryString RFC5280 compliant. + * libgnutls: Added function to retrieve the name of current + ciphersuite from session. + * Bump libgnutlsxx soname due to ABI break + * API and ABI modifications: + - GNUTLS_COMP_BROTLI: New gnutls_compression_method_t enum member + - GNUTLS_COMP_ZSTD: New gnutls_compression_method_t enum member + - gnutls_compress_certificate_get_selected_method: Added + - gnutls_compress_certificate_set_methods: Added + * Update gnutls.keyring + ------------------------------------------------------------------- Sun Feb 27 07:52:30 UTC 2022 - Dirk Müller diff --git a/gnutls.keyring b/gnutls.keyring index d2a618a..7e498f6 100644 --- a/gnutls.keyring +++ b/gnutls.keyring @@ -1684,3 +1684,17 @@ EIO6onUt+miSB15Qg7DF7/rvFPnDIZYr3t+MkaPlmjpXEUV/psdnytVWFcGxHdY0 NA+R/e4eeyThgRet5M+0+9Duynj/ACpfWq/dxXbWRfY= =Q7yu -----END PGP PUBLIC KEY BLOCK----- +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mDMEYcRaoxYJKwYBBAHaRw8BAQdA5U8Cb4ZMYCjuAa6tqNKbRxXzycS2iLvNzWki +bGD2fe60JVpvbHRhbiBGcmlkcmljaCA8emZyaWRyaWNAcmVkaGF0LmNvbT6ImgQT +FgoAQhYhBF1Gyw92NAWnBTVW9Hp1pkiz+SIMBQJhxFqjAhsDBQkDwmcABQsJCAcC +AyICAQYVCgkICwIEFgIDAQIeBwIXgAAKCRB6daZIs/kiDGnYAQCiU94/eIspZzzx +V17pylayAEv23s5uKvlGo1Ml1ySrZAEA8Q2rACBmdTpUfoW3LG3MJI0l1XP3kMEu +WDBiM84D2gK4OARhxFqjEgorBgEEAZdVAQUBAQdAxKg6y4A69qT7doTni8/zKuKy +QKXEORZTCNxkcnz3dXoDAQgHiH4EGBYKACYWIQRdRssPdjQFpwU1VvR6daZIs/ki +DAUCYcRaowIbDAUJA8JnAAAKCRB6daZIs/kiDM/EAP0VN87WwaMcNwZcyocG/B9f +419IojEx70PzMIBBlPctAgD/R/qamAlnggADzmS1PCF8+2W6Erc+HV2W/u2+wVJu +7w0= +=6FAm +-----END PGP PUBLIC KEY BLOCK----- diff --git a/gnutls.spec b/gnutls.spec index 52ecc6b..72f535a 100644 --- a/gnutls.spec +++ b/gnutls.spec @@ -17,7 +17,7 @@ %define gnutls_sover 30 -%define gnutlsxx_sover 28 +%define gnutlsxx_sover 30 %define gnutls_dane_sover 0 # unbound isn't in SLE (bsc#1086428) %if 0%{?is_opensuse} @@ -34,7 +34,7 @@ %bcond_with tpm %bcond_without guile Name: gnutls -Version: 3.7.3 +Version: 3.7.4 Release: 0 Summary: The GNU Transport Layer Security Library License: GPL-3.0-or-later AND LGPL-2.1-or-later @@ -250,8 +250,6 @@ export BRP_FIPSHMAC_FILES=%{buildroot}%{_libdir}/libgnutls.so.%{gnutls_sover} # install docs mkdir -p %{buildroot}%{_docdir}/libgnutls-devel/ cp doc/gnutls.html doc/*.png %{buildroot}%{_docdir}/libgnutls-devel/ -mkdir -p %{buildroot}%{_docdir}/libgnutls-devel/reference -cp doc/reference/html/* %{buildroot}%{_docdir}/libgnutls-devel/reference/ mkdir -p %{buildroot}%{_docdir}/libgnutls-devel/examples cp doc/examples/*.{c,h} %{buildroot}%{_docdir}/libgnutls-devel/examples/