forked from pool/gnutls
Marcus Meissner
e793cfa4ab
- Update to 3.6.6
** libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
on the public key (#640).
** libgnutls: Added support for raw public-key authentication as defined in RFC7250.
Raw public-keys can be negotiated by enabling the corresponding certificate
types via the priority strings. The raw public-key mechanism must be explicitly
enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
** libgnutls: When on server or client side we are sending no extensions we do
not set an empty extensions field but we rather remove that field competely.
This solves a regression since 3.5.x and improves compatibility of the server
side with certain clients.
** libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
the CKA_SIGN is not set (#667).
** libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
disable extensions at all cases, while providing a functional session. This
also implies that when specified, TLS1.3 is disabled.
** libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
The previous definition was non-functional (#609).
- drop no longer needed gnutls-enbale-guile-2.2.patch
- refresh disable-psk-file-test.patch
OBS-URL: https://build.opensuse.org/request/show/671127
OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=17
108 lines
5.7 KiB
Diff
108 lines
5.7 KiB
Diff
Index: gnutls-3.6.6/tests/Makefile.in
|
|
===================================================================
|
|
--- gnutls-3.6.6.orig/tests/Makefile.in 2019-01-25 08:26:36.000000000 +0100
|
|
+++ gnutls-3.6.6/tests/Makefile.in 2019-02-04 09:02:38.627539105 +0100
|
|
@@ -480,7 +480,7 @@ am__EXEEXT_12 = tls13/supported_versions
|
|
pkcs7-gen$(EXEEXT) dtls-etm$(EXEEXT) \
|
|
x509sign-verify-rsa$(EXEEXT) x509sign-verify-ecdsa$(EXEEXT) \
|
|
x509sign-verify-gost$(EXEEXT) mini-alignment$(EXEEXT) \
|
|
- oids$(EXEEXT) atfork$(EXEEXT) prf$(EXEEXT) psk-file$(EXEEXT) \
|
|
+ oids$(EXEEXT) atfork$(EXEEXT) prf$(EXEEXT) \
|
|
priority-init2$(EXEEXT) post-client-hello-change-prio$(EXEEXT) \
|
|
status-request$(EXEEXT) status-request-ok$(EXEEXT) \
|
|
status-request-missing$(EXEEXT) sign-verify-ext$(EXEEXT) \
|
|
@@ -1652,8 +1652,6 @@ privkey_verify_broken_OBJECTS = privkey-
|
|
privkey_verify_broken_LDADD = $(LDADD)
|
|
privkey_verify_broken_DEPENDENCIES = $(COMMON_GNUTLS_LDADD) \
|
|
libutils.la $(am__DEPENDENCIES_2)
|
|
-psk_file_SOURCES = psk-file.c
|
|
-psk_file_OBJECTS = psk-file.$(OBJEXT)
|
|
psk_file_LDADD = $(LDADD)
|
|
psk_file_DEPENDENCIES = $(COMMON_GNUTLS_LDADD) libutils.la \
|
|
$(am__DEPENDENCIES_2)
|
|
@@ -2841,7 +2839,7 @@ am__depfiles_remade = ./$(DEPDIR)/alerts
|
|
./$(DEPDIR)/priorities.Po ./$(DEPDIR)/priority-init2.Po \
|
|
./$(DEPDIR)/priority-mix.Po ./$(DEPDIR)/priority-set.Po \
|
|
./$(DEPDIR)/priority-set2.Po ./$(DEPDIR)/privkey-keygen.Po \
|
|
- ./$(DEPDIR)/privkey-verify-broken.Po ./$(DEPDIR)/psk-file.Po \
|
|
+ ./$(DEPDIR)/privkey-verify-broken.Po \
|
|
./$(DEPDIR)/pskself.Po ./$(DEPDIR)/pubkey-import-export.Po \
|
|
./$(DEPDIR)/random-art.Po ./$(DEPDIR)/rawpk-api.Po \
|
|
./$(DEPDIR)/record-pad.Po ./$(DEPDIR)/record-retvals.Po \
|
|
@@ -3153,7 +3151,7 @@ SOURCES = $(libpkcs11mock1_la_SOURCES) $
|
|
post-client-hello-change-prio.c prf.c priorities.c \
|
|
priorities-groups.c priority-init2.c priority-mix.c \
|
|
priority-set.c priority-set2.c privkey-keygen.c \
|
|
- privkey-verify-broken.c psk-file.c pskself.c \
|
|
+ privkey-verify-broken.c pskself.c \
|
|
pubkey-import-export.c random-art.c rawpk-api.c record-pad.c \
|
|
record-retvals.c record-sizes.c record-sizes-range.c \
|
|
record-timeouts.c recv-data-before-handshake.c \
|
|
@@ -3323,7 +3321,7 @@ DIST_SOURCES = $(am__libpkcs11mock1_la_S
|
|
post-client-hello-change-prio.c prf.c priorities.c \
|
|
priorities-groups.c priority-init2.c priority-mix.c \
|
|
priority-set.c priority-set2.c privkey-keygen.c \
|
|
- privkey-verify-broken.c psk-file.c pskself.c \
|
|
+ privkey-verify-broken.c pskself.c \
|
|
pubkey-import-export.c random-art.c rawpk-api.c record-pad.c \
|
|
record-retvals.c record-sizes.c record-sizes-range.c \
|
|
record-timeouts.c recv-data-before-handshake.c \
|
|
@@ -4915,7 +4913,7 @@ ctests = tls13/supported_versions tls13/
|
|
gnutls_ocsp_resp_list_import2 server-sign-md5-rep \
|
|
privkey-keygen mini-tls-nonblock no-signal pkcs7-gen dtls-etm \
|
|
x509sign-verify-rsa x509sign-verify-ecdsa x509sign-verify-gost \
|
|
- mini-alignment oids atfork prf psk-file priority-init2 \
|
|
+ mini-alignment oids atfork prf priority-init2 \
|
|
post-client-hello-change-prio status-request status-request-ok \
|
|
status-request-missing sign-verify-ext fallback-scsv \
|
|
pkcs8-key-decode urls dtls-rehandshake-cert key-usage-rsa \
|
|
@@ -6099,10 +6097,6 @@ privkey-verify-broken$(EXEEXT): $(privke
|
|
@rm -f privkey-verify-broken$(EXEEXT)
|
|
$(AM_V_CCLD)$(LINK) $(privkey_verify_broken_OBJECTS) $(privkey_verify_broken_LDADD) $(LIBS)
|
|
|
|
-psk-file$(EXEEXT): $(psk_file_OBJECTS) $(psk_file_DEPENDENCIES) $(EXTRA_psk_file_DEPENDENCIES)
|
|
- @rm -f psk-file$(EXEEXT)
|
|
- $(AM_V_CCLD)$(LINK) $(psk_file_OBJECTS) $(psk_file_LDADD) $(LIBS)
|
|
-
|
|
pskself$(EXEEXT): $(pskself_OBJECTS) $(pskself_DEPENDENCIES) $(EXTRA_pskself_DEPENDENCIES)
|
|
@rm -f pskself$(EXEEXT)
|
|
$(AM_V_CCLD)$(LINK) $(pskself_OBJECTS) $(pskself_LDADD) $(LIBS)
|
|
@@ -7133,7 +7127,6 @@ distclean-compile:
|
|
@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/priority-set2.Po@am__quote@ # am--include-marker
|
|
@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/privkey-keygen.Po@am__quote@ # am--include-marker
|
|
@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/privkey-verify-broken.Po@am__quote@ # am--include-marker
|
|
-@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/psk-file.Po@am__quote@ # am--include-marker
|
|
@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/pskself.Po@am__quote@ # am--include-marker
|
|
@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/pubkey-import-export.Po@am__quote@ # am--include-marker
|
|
@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/random-art.Po@am__quote@ # am--include-marker
|
|
@@ -9258,13 +9251,6 @@ prf.log: prf$(EXEEXT)
|
|
--log-file $$b.log --trs-file $$b.trs \
|
|
$(am__common_driver_flags) $(AM_LOG_DRIVER_FLAGS) $(LOG_DRIVER_FLAGS) -- $(LOG_COMPILE) \
|
|
"$$tst" $(AM_TESTS_FD_REDIRECT)
|
|
-psk-file.log: psk-file$(EXEEXT)
|
|
- @p='psk-file$(EXEEXT)'; \
|
|
- b='psk-file'; \
|
|
- $(am__check_pre) $(LOG_DRIVER) --test-name "$$f" \
|
|
- --log-file $$b.log --trs-file $$b.trs \
|
|
- $(am__common_driver_flags) $(AM_LOG_DRIVER_FLAGS) $(LOG_DRIVER_FLAGS) -- $(LOG_COMPILE) \
|
|
- "$$tst" $(AM_TESTS_FD_REDIRECT)
|
|
priority-init2.log: priority-init2$(EXEEXT)
|
|
@p='priority-init2$(EXEEXT)'; \
|
|
b='priority-init2'; \
|
|
@@ -11316,7 +11302,6 @@ distclean: distclean-recursive
|
|
-rm -f ./$(DEPDIR)/priority-set2.Po
|
|
-rm -f ./$(DEPDIR)/privkey-keygen.Po
|
|
-rm -f ./$(DEPDIR)/privkey-verify-broken.Po
|
|
- -rm -f ./$(DEPDIR)/psk-file.Po
|
|
-rm -f ./$(DEPDIR)/pskself.Po
|
|
-rm -f ./$(DEPDIR)/pubkey-import-export.Po
|
|
-rm -f ./$(DEPDIR)/random-art.Po
|
|
@@ -11766,7 +11751,6 @@ maintainer-clean: maintainer-clean-recur
|
|
-rm -f ./$(DEPDIR)/priority-set2.Po
|
|
-rm -f ./$(DEPDIR)/privkey-keygen.Po
|
|
-rm -f ./$(DEPDIR)/privkey-verify-broken.Po
|
|
- -rm -f ./$(DEPDIR)/psk-file.Po
|
|
-rm -f ./$(DEPDIR)/pskself.Po
|
|
-rm -f ./$(DEPDIR)/pubkey-import-export.Po
|
|
-rm -f ./$(DEPDIR)/random-art.Po
|