Compare commits
94 Commits
Author | SHA1 | Date |
---|---|---|
Zoltan Fridrich | 9936110449 | |
Frantisek Krenzelok | bde9494b1b | |
Fedora Release Engineering | 388fbfd381 | |
Daiki Ueno | f9ad674ef4 | |
Alexander Sosedkin | eaf4e9d2cd | |
Daiki Ueno | 4350c1e186 | |
Zoltan Fridrich | f080bc92ec | |
Alexander Sosedkin | 960c18ac9e | |
Zoltan Fridrich | b4e5f3f89f | |
Zoltan Fridrich | c8d9176d27 | |
Zoltan Fridrich | 51d4b1440b | |
Zoltan Fridrich | 4ef1497ac4 | |
Zoltan Fridrich | 58cc7dbef0 | |
Zoltan Fridrich | 505c517370 | |
Fedora Release Engineering | 4b09fb236c | |
Daiki Ueno | 2244afa0e8 | |
Daiki Ueno | beca303c29 | |
Daiki Ueno | eaa69df8d9 | |
Fedora Release Engineering | cb40e7efef | |
Daiki Ueno | 64c7d6867d | |
Daiki Ueno | 6d9878cbb2 | |
Daiki Ueno | 0ef0aa89fa | |
Daiki Ueno | 46d865d845 | |
Daiki Ueno | c13cb3cf69 | |
Daiki Ueno | 39ffb6cb21 | |
Daiki Ueno | 9bbca443d6 | |
Daiki Ueno | 8841f0c3cb | |
Daiki Ueno | 9afae358ed | |
Daiki Ueno | 7e113a5794 | |
Daiki Ueno | 25ae742c52 | |
Daiki Ueno | 07736fd804 | |
Daiki Ueno | 868ffea2e1 | |
Fedora Release Engineering | 2a8763ec3a | |
Tom Stellard | 0eb271a9f5 | |
Jeff Law | 6b130b528a | |
Daiki Ueno | 0e56ef2311 | |
Daiki Ueno | 655fab0edb | |
Daiki Ueno | aa2ff1da12 | |
Jeff Law | f21c1c5adf | |
Daiki Ueno | edf183f7fd | |
Fedora Release Engineering | d3626cfa1e | |
Fedora Release Engineering | 1ca10e2bd1 | |
Anderson Toshiyuki Sasaki | 981ebf78f1 | |
Anderson Toshiyuki Sasaki | 62fe4ffb98 | |
Anderson Toshiyuki Sasaki | 7ed5f7db0d | |
Daiki Ueno | 79aed5310b | |
Daiki Ueno | 86e1a47129 | |
Daiki Ueno | 230640c591 | |
Daiki Ueno | ff6457e1d1 | |
Anderson Toshiyuki Sasaki | bff55b411b | |
Anderson Toshiyuki Sasaki | f2ea860ff5 | |
Anderson Toshiyuki Sasaki | 5de0851cf9 | |
Anderson Toshiyuki Sasaki | fbf404e4b2 | |
Daiki Ueno | 39036e4f9a | |
Anderson Toshiyuki Sasaki | 56cb0e447f | |
Daiki Ueno | 68018f33be | |
Nikos Mavrogiannopoulos | ac40af60b7 | |
Fedora Release Engineering | ecbe15cd95 | |
Nikos Mavrogiannopoulos | 682cf5e888 | |
Nikos Mavrogiannopoulos | 3bdec56a8d | |
Nikos Mavrogiannopoulos | 4a8901f676 | |
Nikos Mavrogiannopoulos | 2148134f1b | |
Fedora Release Engineering | 064127eab7 | |
Daiki Ueno | 863812f9e4 | |
Daiki Ueno | 036bfab64d | |
Daiki Ueno | 74354b86d5 | |
Daiki Ueno | e17630f891 | |
Nikos Mavrogiannopoulos | e8f6e10f11 | |
Nikos Mavrogiannopoulos | 81c75ab2a8 | |
Anderson Toshiyuki Sasaki | 06571b6b92 | |
Nikos Mavrogiannopoulos | 35567a4b6a | |
Fedora Release Engineering | 59d63485ad | |
Igor Gnatenko | c60309b751 | |
Igor Gnatenko | 3e17b200c8 | |
Anderson Toshiyuki Sasaki | 9bdb11f892 | |
Anderson Toshiyuki Sasaki | 2858908ede | |
Nikos Mavrogiannopoulos | 78a8f2e60e | |
Nikos Mavrogiannopoulos | 906f58d1f1 | |
Nikos Mavrogiannopoulos | f2315c5ac9 | |
Nikos Mavrogiannopoulos | ba25b06f42 | |
Tomas Mraz | 9d0f5cc6e3 | |
Petr Menšík | 23dda1cd4b | |
Nikos Mavrogiannopoulos | 1d95a2eb84 | |
Nikos Mavrogiannopoulos | bb2c5903d1 | |
Nikos Mavrogiannopoulos | 08085a1894 | |
Nikos Mavrogiannopoulos | abd1baafcc | |
Nikos Mavrogiannopoulos | fbb0a84717 | |
Fedora Release Engineering | bd9bff0a9e | |
Jason Tibbitts | 2ed903e5e9 | |
Nikos Mavrogiannopoulos | c3056098ef | |
Nikos Mavrogiannopoulos | 739e836712 | |
Nikos Mavrogiannopoulos | d1439b69da | |
Nikos Mavrogiannopoulos | 137cdb9336 | |
David Abdurachmanov | a6e110c7fa |
|
@ -92,3 +92,51 @@ gnutls-2.10.1-nosrp.tar.bz2
|
|||
/gpgkey-1F42418905D8206AA754CCDC29EE58B996865171.gpg
|
||||
/gnutls-3.6.2.tar.xz.sig
|
||||
/gnutls-3.6.2.tar.xz
|
||||
/gpgkey-1F42418905D8206AA754CCDC29EE58B996865171.gpg
|
||||
/gnutls-3.6.2.tar.xz.sig
|
||||
/gnutls-3.6.2.tar.xz
|
||||
/gpgkey-1F42418905D8206AA754CCDC29EE58B996865171.gpg
|
||||
/gnutls-3.6.3.tar.xz.sig
|
||||
/gnutls-3.6.3.tar.xz
|
||||
/gnutls-3.6.4.tar.xz
|
||||
/gnutls-3.6.4.tar.xz.sig
|
||||
/gpgkey-1F42418905D8206AA754CCDC29EE58B996865171.gpg
|
||||
/gnutls-3.6.5.tar.xz.sig
|
||||
/gnutls-3.6.5.tar.xz
|
||||
/gnutls-3.6.6.tar.xz
|
||||
/gnutls-3.6.6.tar.xz.sig
|
||||
/gnutls-3.6.7.tar.xz
|
||||
/gnutls-3.6.7.tar.xz.sig
|
||||
/gnutls-3.6.8.tar.xz.sig
|
||||
/gnutls-3.6.8.tar.xz
|
||||
/gpgkey-1F42418905D8206AA754CCDC29EE58B996865171.gpg
|
||||
/gnutls-3.6.9.tar.xz.sig
|
||||
/gnutls-3.6.9.tar.xz
|
||||
/gpgkey-1F42418905D8206AA754CCDC29EE58B996865171.gpg
|
||||
/gnutls-3.6.10.tar.xz.sig
|
||||
/gnutls-3.6.10.tar.xz
|
||||
/gpgkey-1F42418905D8206AA754CCDC29EE58B996865171.gpg
|
||||
/gnutls-3.6.11.tar.xz.sig
|
||||
/gnutls-3.6.11.tar.xz
|
||||
/gpgkey-1F42418905D8206AA754CCDC29EE58B996865171.gpg
|
||||
/gnutls-3.6.12.tar.xz.sig
|
||||
/gnutls-3.6.12.tar.xz
|
||||
/gpgkey-1F42418905D8206AA754CCDC29EE58B996865171.gpg
|
||||
/gnutls-3.6.13.tar.xz.sig
|
||||
/gnutls-3.6.13.tar.xz
|
||||
/gnutls-3.6.14.tar.xz
|
||||
/gnutls-3.6.14.tar.xz.sig
|
||||
/gnutls-3.6.15.tar.xz
|
||||
/gnutls-3.6.15.tar.xz.sig
|
||||
/gnutls-3.7.0.tar.xz
|
||||
/gnutls-3.7.0.tar.xz.sig
|
||||
/gnutls-3.7.1.tar.xz
|
||||
/gnutls-3.7.1.tar.xz.sig
|
||||
/gnutls-3.7.2.tar.xz
|
||||
/gnutls-3.7.2.tar.xz.sig
|
||||
/gnutls-3.7.3.tar.xz
|
||||
/gnutls-3.7.3.tar.xz.sig
|
||||
/gnutls-3.7.4.tar.xz
|
||||
/gnutls-3.7.5.tar.xz
|
||||
/gnutls-3.7.6.tar.xz
|
||||
/gnutls-3.7.7.tar.xz
|
||||
|
|
|
@ -0,0 +1,33 @@
|
|||
# See the documentation for more information:
|
||||
# https://packit.dev/docs/configuration/
|
||||
|
||||
specfile_path: gnutls.spec
|
||||
|
||||
files_to_sync:
|
||||
- .packit.yaml
|
||||
- gnutls.spec
|
||||
|
||||
upstream_project_url: https://gitlab.com/gnutls/gnutls
|
||||
upstream_package_name: gnutls
|
||||
downstream_package_name: gnutls
|
||||
|
||||
actions:
|
||||
post-upstream-clone:
|
||||
- "wget https://src.fedoraproject.org/rpms/gnutls/raw/main/f/gnutls.spec"
|
||||
- "wget https://src.fedoraproject.org/rpms/gnutls/raw/main/f/gnutls-3.2.7-rpath.patch"
|
||||
- "wget https://src.fedoraproject.org/rpms/gnutls/raw/main/f/gnutls-3.6.7-no-now-guile.patch"
|
||||
get-current-version:
|
||||
- "git describe --abbrev=0"
|
||||
create-archive:
|
||||
- |
|
||||
bash -c "wget https://www.gnupg.org/ftp/gcrypt/gnutls/v$(expr $PACKIT_PROJECT_VERSION : '^\([0-9]*\.[0-9]*\)')/gnutls-${PACKIT_PROJECT_VERSION}.tar.xz"
|
||||
- |
|
||||
bash -c "wget https://www.gnupg.org/ftp/gcrypt/gnutls/v$(expr $PACKIT_PROJECT_VERSION : '^\([0-9]*\.[0-9]*\)')/gnutls-${PACKIT_PROJECT_VERSION}.tar.xz.sig"
|
||||
- bash -c "echo gnutls-${PACKIT_PROJECT_VERSION}.tar.xz"
|
||||
- bash -c "echo gnutls-${PACKIT_PROJECT_VERSION}.tar.xz.sig"
|
||||
|
||||
jobs:
|
||||
- job: propose_downstream
|
||||
trigger: release
|
||||
metadata:
|
||||
dist_git_branches: fedora-all
|
|
@ -0,0 +1,3 @@
|
|||
This repository is maintained by packit.
|
||||
https://packit.dev/
|
||||
The file was generated using packit 0.55.0.
|
|
@ -0,0 +1,815 @@
|
|||
* Thu Jan 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 3.7.3-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
|
||||
|
||||
* Tue Jan 18 2022 Daiki Ueno <dueno@redhat.com> - 3.7.3-1
|
||||
- Update to upstream 3.7.3 release
|
||||
- Remove dependency on autogen
|
||||
- Add build-time conditionals for TPM 1.2 and GOST cryptography
|
||||
|
||||
* Thu Jul 22 2021 Fedora Release Engineering <releng@fedoraproject.org> - 3.7.2-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
|
||||
|
||||
* Sat May 29 2021 Daiki Ueno <dueno@redhat.com> - 3.7.2-1
|
||||
- Update to upstream 3.7.2 release
|
||||
|
||||
* Sun Mar 28 2021 Daiki Ueno <dueno@redhat.com> - 3.7.1-3
|
||||
- Remove %%defattr invocations which are no longer necessary
|
||||
- libpkcs11mock1.* is not installed anymore
|
||||
- hobble-gnutls: Remove SRP removal
|
||||
- Use correct source URL
|
||||
- Switch to using %%gpgverify macro
|
||||
|
||||
* Tue Mar 16 2021 Daiki Ueno <dueno@redhat.com> - 3.7.1-2
|
||||
- Restore fipscheck dependency
|
||||
|
||||
* Sat Mar 13 2021 Daiki Ueno <dueno@redhat.com> - 3.7.1-1
|
||||
- Update to upstream 3.7.1 release
|
||||
- Remove fipscheck dependency, as it is now calculated with an
|
||||
internal tool
|
||||
|
||||
* Fri Mar 5 2021 Daiki Ueno <dueno@redhat.com> - 3.7.0-4
|
||||
- Tolerate duplicate certs in the chain also with PKCS #11 trust store
|
||||
|
||||
* Tue Mar 2 2021 Daiki Ueno <dueno@redhat.com> - 3.7.0-3
|
||||
- Reduce BRs for non-bootstrapping build
|
||||
|
||||
* Wed Feb 10 2021 Daiki Ueno <dueno@redhat.com> - 3.7.0-2
|
||||
- Tolerate duplicate certs in the chain
|
||||
|
||||
* Mon Feb 8 2021 Daiki Ueno <dueno@redhat.com> - 3.7.0-1
|
||||
- Update to upstream 3.7.0 release
|
||||
- Temporarily disable LTO
|
||||
|
||||
* Tue Jan 26 2021 Daiki Ueno <dueno@redhat.com> - 3.6.15-4
|
||||
- Fix broken tests on rawhide (#1908110)
|
||||
- Add BuildRequires: make (by Tom Stellard)
|
||||
|
||||
* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 3.6.15-3
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
|
||||
|
||||
* Mon Sep 28 2020 Jeff Law <law@redhat.com> - 3.6.15-2
|
||||
- Re-enable LTO now that upstream GCC bugs have been fixed
|
||||
|
||||
* Fri Sep 4 2020 Daiki Ueno <dueno@redhat.com> - 3.6.15-1
|
||||
- Update to upstream 3.6.15 release
|
||||
|
||||
* Mon Aug 17 2020 Jeff Law <law@redhat.com> - 3.6.14-7
|
||||
- Disable LTO on ppc64le
|
||||
|
||||
* Tue Aug 4 2020 Daiki Ueno <dueno@redhat.com> - 3.6.14-6
|
||||
- Fix underlinking of libpthread
|
||||
|
||||
* Sat Aug 01 2020 Fedora Release Engineering <releng@fedoraproject.org> - 3.6.14-5
|
||||
- Second attempt - Rebuilt for
|
||||
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
|
||||
|
||||
* Mon Jul 27 2020 Fedora Release Engineering <releng@fedoraproject.org> - 3.6.14-4
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
|
||||
|
||||
* Thu Jul 02 2020 Anderson Sasaki <ansasaki@redhat.com> - 3.6.14-3
|
||||
- Rebuild with autogen built with guile-2.2 (#1852706)
|
||||
|
||||
* Tue Jun 09 2020 Anderson Sasaki <ansasaki@redhat.com> - 3.6.14-2
|
||||
- Fix memory leak when serializing iovec_t (#1845083)
|
||||
- Fix automatic libraries sonames detection (#1845806)
|
||||
|
||||
* Thu Jun 4 2020 Daiki Ueno <dueno@redhat.com> - 3.6.14-1
|
||||
- Update to upstream 3.6.14 release
|
||||
|
||||
* Sun May 31 2020 Daiki Ueno <dueno@redhat.com> - 3.6.13-6
|
||||
- Update gnutls-3.6.13-superseding-chain.patch
|
||||
|
||||
* Sun May 31 2020 Daiki Ueno <dueno@redhat.com> - 3.6.13-5
|
||||
- Fix cert chain validation behavior if the last cert has expired (#1842178)
|
||||
|
||||
* Mon May 25 2020 Anderson Sasaki <ansasaki@redhat.com> - 3.6.13-4
|
||||
- Add option to gnutls-cli to wait for resumption under TLS 1.3
|
||||
|
||||
* Tue May 19 2020 Anderson Sasaki <ansasaki@redhat.com> - 3.6.13-3
|
||||
- Disable RSA blinding during FIPS self-tests
|
||||
|
||||
* Thu May 14 2020 Anderson Sasaki <ansasaki@redhat.com> - 3.6.13-2
|
||||
- Bump linked libraries soname to fix FIPS selftests (#1835265)
|
||||
|
||||
* Tue Mar 31 2020 Daiki Ueno <dueno@redhat.com> - 3.6.13-1
|
||||
- Update to upstream 3.6.13 release
|
||||
|
||||
* Thu Mar 26 2020 Anderson Sasaki <ansasaki@redhat.com> - 3.6.12-2
|
||||
- Fix FIPS POST (#1813384)
|
||||
- Fix gnutls-serv --echo to not exit when a message is received (#1816583)
|
||||
|
||||
* Sun Feb 02 2020 Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com> - 3.6.12-1
|
||||
- Update to upstream 3.6.12 release
|
||||
|
||||
* Tue Jan 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 3.6.11-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
|
||||
|
||||
* Mon Dec 02 2019 Nikos Mavrogiannopoulos <nmav@gnutls.org> - 3.6.11-1
|
||||
- Update to upstream 3.6.11 release
|
||||
|
||||
* Sun Sep 29 2019 Nikos Mavrogiannopoulos <nmav@gnutls.org> - 3.6.10-1
|
||||
- Update to upstream 3.6.10 release
|
||||
|
||||
* Fri Jul 26 2019 Nikos Mavrogiannopoulos <nmav@gnutls.org> - 3.6.9-1
|
||||
- Update to upstream 3.6.9 release
|
||||
|
||||
* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 3.6.8-3
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
|
||||
|
||||
* Mon Jul 15 2019 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.8-2
|
||||
- Rebuilt with guile-2.2
|
||||
|
||||
* Tue May 28 2019 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.8-1
|
||||
- Update to upstream 3.6.8 release
|
||||
|
||||
* Wed Mar 27 2019 Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 3.6.7-1
|
||||
- Update to upstream 3.6.7 release
|
||||
- Fixed CVE-2019-3836 (#1693214)
|
||||
- Fixed CVE-2019-3829 (#1693210)
|
||||
|
||||
* Fri Feb 1 2019 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.6-1
|
||||
- Update to upstream 3.6.6 release
|
||||
|
||||
* Thu Jan 31 2019 Fedora Release Engineering <releng@fedoraproject.org> - 3.6.5-3
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
|
||||
|
||||
* Fri Jan 11 2019 Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 3.6.5-2
|
||||
- Added explicit Requires for nettle >= 3.4.1
|
||||
|
||||
* Tue Dec 11 2018 Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 3.6.5-1
|
||||
- Update to upstream 3.6.5 release
|
||||
|
||||
* Mon Oct 29 2018 James Antill <james.antill@redhat.com> - 3.6.4-5
|
||||
- Remove ldconfig scriptlet, now done via. transfiletrigger in glibc.
|
||||
|
||||
* Wed Oct 17 2018 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.4-4
|
||||
- Fix issue with rehandshake affecting glib-networking (#1634736)
|
||||
|
||||
* Tue Oct 16 2018 Tomáš Mráz <tmraz@redhat.com> - 3.6.4-3
|
||||
- Add missing annobin notes for assembler sources
|
||||
|
||||
* Tue Oct 09 2018 Petr Menšík <pemensik@redhat.com> - 3.6.4-2
|
||||
- Rebuilt for unbound 1.8
|
||||
|
||||
* Tue Sep 25 2018 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.4-1
|
||||
- Updated to upstream 3.6.4 release
|
||||
- Added support for the latest version of the TLS1.3 protocol
|
||||
- Enabled SHA1 support as SHA1 deprecation is handled via the
|
||||
fedora crypto policies.
|
||||
|
||||
* Thu Aug 16 2018 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.3-4
|
||||
- Fixed gnutls-cli input reading
|
||||
- Ensure that we do not cause issues with version rollback detection
|
||||
and TLS1.3.
|
||||
|
||||
* Tue Aug 07 2018 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.3-3
|
||||
- Fixed ECDSA public key import (#1612803)
|
||||
|
||||
* Thu Jul 26 2018 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.3-2
|
||||
- Backported regression fixes from 3.6.2
|
||||
|
||||
* Mon Jul 16 2018 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.3-1
|
||||
- Update to upstream 3.6.3 release
|
||||
|
||||
* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 3.6.2-5
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
|
||||
|
||||
* Wed Jun 13 2018 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.2-4
|
||||
- Enable FIPS140-2 mode in Fedora
|
||||
|
||||
* Wed Jun 06 2018 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.2-3
|
||||
- Update to upstream 3.6.2 release
|
||||
|
||||
* Fri May 25 2018 David Abdurachmanov <david.abdurachmanov@gmail.com> - 3.6.2-2
|
||||
- Add missing BuildRequires: gnupg2 for gpgv2 in %%prep
|
||||
|
||||
* Fri Feb 16 2018 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.2-1
|
||||
- Update to upstream 3.6.2 release
|
||||
|
||||
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 3.6.1-5
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
||||
|
||||
* Fri Feb 2 2018 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.1-4
|
||||
- Rebuilt to address incompatibility with new nettle
|
||||
|
||||
* Thu Nov 30 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.1-3
|
||||
- Corrected regression from 3.6.1-2 which prevented the loading of
|
||||
arbitrary p11-kit modules (#1507402)
|
||||
|
||||
* Mon Nov 6 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.1-2
|
||||
- Prevent the loading of all PKCS#11 modules on certificate verification
|
||||
but only restrict to p11-kit trust module (#1507402)
|
||||
|
||||
* Sat Oct 21 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.1-1
|
||||
- Update to upstream 3.6.1 release
|
||||
|
||||
* Mon Aug 21 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.0-1
|
||||
- Update to upstream 3.6.0 release
|
||||
|
||||
* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.5.14-3
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
|
||||
|
||||
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.5.14-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
||||
|
||||
* Tue Jul 04 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.5.14-1
|
||||
- Update to upstream 3.5.14 release
|
||||
|
||||
* Wed Jun 07 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.5.13-1
|
||||
- Update to upstream 3.5.13 release
|
||||
|
||||
* Thu May 11 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.5.12-2
|
||||
- Fix issue with p11-kit-trust arch dependency
|
||||
|
||||
* Thu May 11 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.5.12-1
|
||||
- Update to upstream 3.5.12 release
|
||||
|
||||
* Fri Apr 07 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.5.11-1
|
||||
- Update to upstream 3.5.11 release
|
||||
|
||||
* Mon Mar 06 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.5.10-1
|
||||
- Update to upstream 3.5.10 release
|
||||
|
||||
* Wed Feb 15 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.5.9-2
|
||||
- Work around missing pkg-config file (#1422256)
|
||||
|
||||
* Tue Feb 14 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.5.9-1
|
||||
- Update to upstream 3.5.9 release
|
||||
|
||||
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.5.8-3
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
||||
|
||||
* Sat Feb 4 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.5.8-2
|
||||
- Added patch fix initialization issue in gnutls_pkcs11_obj_list_import_url4
|
||||
|
||||
* Mon Jan 9 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.5.8-1
|
||||
- New upstream release
|
||||
|
||||
* Tue Dec 13 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.5.7-3
|
||||
- Fix PKCS#8 file loading (#1404084)
|
||||
|
||||
* Thu Dec 8 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.5.7-1
|
||||
- New upstream release
|
||||
|
||||
* Fri Nov 4 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.5.6-1
|
||||
- New upstream release
|
||||
|
||||
* Tue Oct 11 2016 walters@redhat.com - 3.5.5-2
|
||||
- Apply patch to fix compatibility with ostree (#1383708)
|
||||
|
||||
* Mon Oct 10 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.5.5-1
|
||||
- New upstream release
|
||||
|
||||
* Thu Sep 8 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.5.4-1
|
||||
- New upstream release
|
||||
|
||||
* Mon Aug 29 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.5.3-2
|
||||
- Work around #1371082 for x86
|
||||
- Fixed issue with DTLS sliding window implementation (#1370881)
|
||||
|
||||
* Tue Aug 9 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.5.3-1
|
||||
- New upstream release
|
||||
|
||||
* Wed Jul 6 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.5.2-1
|
||||
- New upstream release
|
||||
|
||||
* Wed Jun 15 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.5.1-1
|
||||
- New upstream release
|
||||
|
||||
* Tue Jun 7 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.13-1
|
||||
- New upstream release (#1343258)
|
||||
- Addresses issue with setuid programs introduced in 3.4.12 (#1343342)
|
||||
|
||||
* Fri May 20 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.12-1
|
||||
- New upstream release
|
||||
|
||||
* Mon Apr 11 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.11-1
|
||||
- New upstream release
|
||||
|
||||
* Fri Mar 4 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.10-1
|
||||
- New upstream release (#1314576)
|
||||
|
||||
* Wed Feb 3 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.9-1
|
||||
- Fix broken key usage flags introduced in 3.4.8 (#1303355)
|
||||
|
||||
* Mon Jan 11 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.8-1
|
||||
- New upstream release (#1297079)
|
||||
|
||||
* Mon Nov 23 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.7-1
|
||||
- New upstream release (#1284300)
|
||||
- Documentation updates (#1282864)
|
||||
- Adds interface to set unique IDs in certificates (#1281343)
|
||||
- Allow arbitrary key sizes with ARCFOUR (#1284401)
|
||||
|
||||
* Wed Oct 21 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.6-1
|
||||
- New upstream release (#1273672)
|
||||
- Enhances p11tool to write CKA_ISSUER and CKA_SERIAL_NUMBER (#1272178)
|
||||
|
||||
* Tue Oct 20 2015 Adam Williamson <awilliam@redhat.com> - 3.4.5-2
|
||||
- fix interaction with Chrome 45+ (master secret extension) (#1273102)
|
||||
|
||||
* Mon Sep 14 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.5-1
|
||||
- New upstream release (#1252192)
|
||||
- Eliminates hard limits on CRL parsing of certtool.
|
||||
|
||||
* Mon Aug 10 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.4-1
|
||||
- new upstream release
|
||||
- no longer requires trousers patch
|
||||
- fixes issue in gnutls_x509_privkey_import (#1250020)
|
||||
|
||||
* Mon Jul 13 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.3-2
|
||||
- Don't link against trousers but rather dlopen() it when available.
|
||||
That avoids a dependency on openssl by the main library.
|
||||
|
||||
* Mon Jul 13 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.3-1
|
||||
- new upstream release
|
||||
|
||||
* Thu Jul 02 2015 Adam Jackson <ajax@redhat.com> 3.4.2-3
|
||||
- Only disable -z now for the guile modules
|
||||
|
||||
* Thu Jun 18 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.2-2
|
||||
- rename the symbol version for internal symbols to avoid clashes
|
||||
with 3.3.x.
|
||||
|
||||
* Wed Jun 17 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.2-1
|
||||
- new upstream release
|
||||
|
||||
* Tue May 5 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.1-2
|
||||
- Provide missing GNUTLS_SUPPLEMENTAL_USER_MAPPING_DATA definition
|
||||
|
||||
* Mon May 4 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.1-1
|
||||
- new upstream release
|
||||
|
||||
* Sat May 02 2015 Kalev Lember <kalevlember@gmail.com> - 3.3.14-2
|
||||
- Rebuilt for GCC 5 C++11 ABI change
|
||||
|
||||
* Mon Mar 30 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.14-1
|
||||
- new upstream release
|
||||
- improved BER decoding of PKCS #12 structures (#1131461)
|
||||
|
||||
* Fri Mar 6 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.13-3
|
||||
- Build with hardened flags
|
||||
- Removed -Wl,--no-add-needed linker flag
|
||||
|
||||
* Fri Feb 27 2015 Till Maas <opensource@till.name> - 3.3.13-2
|
||||
- Do not build with hardened flags
|
||||
|
||||
* Thu Feb 26 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.13-1
|
||||
- new upstream release
|
||||
|
||||
* Sat Feb 21 2015 Till Maas <opensource@till.name> - 3.3.12-3
|
||||
- Make build verbose
|
||||
- Use %%license
|
||||
|
||||
* Sat Feb 21 2015 Till Maas <opensource@till.name> - 3.3.12-2
|
||||
- Rebuilt for Fedora 23 Change
|
||||
https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code
|
||||
|
||||
* Mon Jan 19 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.12-1
|
||||
- new upstream release
|
||||
|
||||
* Mon Jan 5 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.11-2
|
||||
- enabled guile bindings (#1177847)
|
||||
|
||||
* Thu Dec 11 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.11-1
|
||||
- new upstream release
|
||||
|
||||
* Mon Nov 10 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.10-1
|
||||
- new upstream release
|
||||
|
||||
* Thu Oct 23 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.9-2
|
||||
- applied fix for issue in get-issuer (#1155901)
|
||||
|
||||
* Mon Oct 13 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.9-1
|
||||
- new upstream release
|
||||
|
||||
* Fri Sep 19 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-2
|
||||
- strip rpath from library
|
||||
|
||||
* Thu Sep 18 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-1
|
||||
- new upstream release
|
||||
|
||||
* Mon Aug 25 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.7-1
|
||||
- new upstream release
|
||||
|
||||
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.3.6-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
|
||||
|
||||
* Wed Jul 23 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.6-1
|
||||
- new upstream release
|
||||
|
||||
* Tue Jul 01 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.5-2
|
||||
- Added work-around for s390 builds with gcc 4.9 (#1102324)
|
||||
|
||||
* Mon Jun 30 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.5-1
|
||||
- new upstream release
|
||||
|
||||
* Tue Jun 17 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.4-3
|
||||
- explicitly depend on p11-kit-trust
|
||||
|
||||
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.3.4-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
||||
|
||||
* Mon Jun 02 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.4-1
|
||||
- new upstream release
|
||||
|
||||
* Fri May 30 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.3-1
|
||||
- new upstream release
|
||||
|
||||
* Wed May 21 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.2-2
|
||||
- Require crypto-policies
|
||||
|
||||
* Fri May 09 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.2-1
|
||||
- new upstream release
|
||||
|
||||
* Mon May 05 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.1-4
|
||||
- Replaced /etc/crypto-profiles/apps with /etc/crypto-policies/back-ends.
|
||||
- Added support for "very weak" profile.
|
||||
|
||||
* Mon Apr 28 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.1-2
|
||||
- gnutls_global_deinit() will not do anything if the previous
|
||||
initialization has failed (#1091053)
|
||||
|
||||
* Mon Apr 28 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.1-1
|
||||
- new upstream release
|
||||
|
||||
* Mon Apr 14 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.0-1
|
||||
- new upstream release
|
||||
|
||||
* Tue Apr 08 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.2.13-1
|
||||
- new upstream release
|
||||
|
||||
* Wed Mar 05 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.2.12.1-1
|
||||
- new upstream release
|
||||
|
||||
* Mon Mar 03 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.2.12-1
|
||||
- new upstream release
|
||||
|
||||
* Mon Feb 03 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.2.10-2
|
||||
- use p11-kit trust store for certificate verification
|
||||
|
||||
* Mon Feb 03 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.2.10-1
|
||||
- new upstream release
|
||||
|
||||
* Tue Jan 14 2014 Tomáš Mráz <tmraz@redhat.com> 3.2.8-2
|
||||
- build the crywrap tool
|
||||
|
||||
* Mon Dec 23 2013 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.2.8-1
|
||||
- new upstream release
|
||||
|
||||
* Wed Dec 4 2013 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.2.7-2
|
||||
- Use the correct root key for unbound /var/lib/unbound/root.key (#1012494)
|
||||
- Pull asm fixes from upstream (#973210)
|
||||
|
||||
* Mon Nov 25 2013 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.2.7-1
|
||||
- new upstream release
|
||||
- added dependency to autogen-libopts-devel to use the system's
|
||||
libopts library
|
||||
- added dependency to trousers-devel to enable TPM support
|
||||
|
||||
* Mon Nov 4 2013 Tomáš Mráz <tmraz@redhat.com> 3.1.16-1
|
||||
- new upstream release
|
||||
- fixes CVE-2013-4466 off-by-one in dane_query_tlsa()
|
||||
|
||||
* Fri Oct 25 2013 Tomáš Mráz <tmraz@redhat.com> 3.1.15-1
|
||||
- new upstream release
|
||||
- fixes CVE-2013-4466 buffer overflow in handling DANE entries
|
||||
|
||||
* Wed Oct 16 2013 Tomáš Mráz <tmraz@redhat.com> 3.1.13-3
|
||||
- enable ECC NIST Suite B curves
|
||||
|
||||
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.1.13-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
|
||||
|
||||
* Mon Jul 15 2013 Tomáš Mráz <tmraz@redhat.com> 3.1.13-1
|
||||
- new upstream release
|
||||
|
||||
* Mon May 13 2013 Tomáš Mráz <tmraz@redhat.com> 3.1.11-1
|
||||
- new upstream release
|
||||
|
||||
* Mon Mar 25 2013 Tomas Mraz <tmraz@redhat.com> 3.1.10-1
|
||||
- new upstream release
|
||||
- license of the library is back to LGPLv2.1+
|
||||
|
||||
* Fri Mar 15 2013 Tomas Mraz <tmraz@redhat.com> 3.1.9-1
|
||||
- new upstream release
|
||||
|
||||
* Thu Mar 7 2013 Tomas Mraz <tmraz@redhat.com> 3.1.8-3
|
||||
- drop the temporary old library
|
||||
|
||||
* Tue Feb 26 2013 Tomas Mraz <tmraz@redhat.com> 3.1.8-2
|
||||
- don't send ECC algos as supported (#913797)
|
||||
|
||||
* Thu Feb 21 2013 Tomas Mraz <tmraz@redhat.com> 3.1.8-1
|
||||
- new upstream version
|
||||
|
||||
* Wed Feb 6 2013 Tomas Mraz <tmraz@redhat.com> 3.1.7-1
|
||||
- new upstream version, requires rebuild of dependencies
|
||||
- this release temporarily includes old compatibility .so
|
||||
|
||||
* Tue Feb 5 2013 Tomas Mraz <tmraz@redhat.com> 2.12.22-2
|
||||
- rebuilt with new libtasn1
|
||||
- make guile bindings optional - breaks i686 build and there is
|
||||
no dependent package
|
||||
|
||||
* Tue Jan 8 2013 Tomas Mraz <tmraz@redhat.com> 2.12.22-1
|
||||
- new upstream version
|
||||
|
||||
* Wed Nov 28 2012 Tomas Mraz <tmraz@redhat.com> 2.12.21-2
|
||||
- use RSA bit sizes supported by libgcrypt in FIPS mode for security
|
||||
levels (#879643)
|
||||
|
||||
* Fri Nov 9 2012 Tomas Mraz <tmraz@redhat.com> 2.12.21-1
|
||||
- new upstream version
|
||||
|
||||
* Thu Nov 1 2012 Tomas Mraz <tmraz@redhat.com> 2.12.20-4
|
||||
- negotiate only FIPS approved algorithms in the FIPS mode (#871826)
|
||||
|
||||
* Wed Aug 8 2012 Tomas Mraz <tmraz@redhat.com> 2.12.20-3
|
||||
- fix the gnutls-cli-debug manpage - patch by Peter Schiffer
|
||||
|
||||
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.12.20-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
|
||||
|
||||
* Mon Jun 18 2012 Tomas Mraz <tmraz@redhat.com> 2.12.20-1
|
||||
- new upstream version
|
||||
|
||||
* Fri May 18 2012 Tomas Mraz <tmraz@redhat.com> 2.12.19-1
|
||||
- new upstream version
|
||||
|
||||
* Thu Mar 29 2012 Tomas Mraz <tmraz@redhat.com> 2.12.18-1
|
||||
- new upstream version
|
||||
|
||||
* Thu Mar 8 2012 Tomas Mraz <tmraz@redhat.com> 2.12.17-1
|
||||
- new upstream version
|
||||
- fix leaks in key generation (#796302)
|
||||
|
||||
* Fri Feb 03 2012 Kevin Fenzi <kevin@scrye.com> - 2.12.14-3
|
||||
- Disable largefile on arm arch. (#787287)
|
||||
|
||||
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.12.14-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
|
||||
|
||||
* Tue Nov 8 2011 Tomas Mraz <tmraz@redhat.com> 2.12.14-1
|
||||
- new upstream version
|
||||
|
||||
* Mon Oct 24 2011 Tomas Mraz <tmraz@redhat.com> 2.12.12-1
|
||||
- new upstream version
|
||||
|
||||
* Thu Sep 29 2011 Tomas Mraz <tmraz@redhat.com> 2.12.11-1
|
||||
- new upstream version
|
||||
|
||||
* Fri Aug 26 2011 Tomas Mraz <tmraz@redhat.com> 2.12.9-1
|
||||
- new upstream version
|
||||
|
||||
* Tue Aug 16 2011 Tomas Mraz <tmraz@redhat.com> 2.12.8-1
|
||||
- new upstream version
|
||||
|
||||
* Mon Jul 25 2011 Tomas Mraz <tmraz@redhat.com> 2.12.7-2
|
||||
- fix problem when using new libgcrypt
|
||||
- split libgnutlsxx to a subpackage (#455146)
|
||||
- drop libgnutls-openssl (#460310)
|
||||
|
||||
* Tue Jun 21 2011 Tomas Mraz <tmraz@redhat.com> 2.12.7-1
|
||||
- new upstream version
|
||||
|
||||
* Mon May 9 2011 Tomas Mraz <tmraz@redhat.com> 2.12.4-1
|
||||
- new upstream version
|
||||
|
||||
* Tue Apr 26 2011 Tomas Mraz <tmraz@redhat.com> 2.12.3-1
|
||||
- new upstream version
|
||||
|
||||
* Mon Apr 18 2011 Tomas Mraz <tmraz@redhat.com> 2.12.2-1
|
||||
- new upstream version
|
||||
|
||||
* Thu Mar 3 2011 Tomas Mraz <tmraz@redhat.com> 2.10.5-1
|
||||
- new upstream version
|
||||
|
||||
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.10.4-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
|
||||
|
||||
* Wed Dec 8 2010 Tomas Mraz <tmraz@redhat.com> 2.10.4-1
|
||||
- new upstream version
|
||||
|
||||
* Thu Dec 2 2010 Tomas Mraz <tmraz@redhat.com> 2.10.3-2
|
||||
- fix buffer overflow in gnutls-serv (#659259)
|
||||
|
||||
* Fri Nov 19 2010 Tomas Mraz <tmraz@redhat.com> 2.10.3-1
|
||||
- new upstream version
|
||||
|
||||
* Thu Sep 30 2010 Tomas Mraz <tmraz@redhat.com> 2.10.2-1
|
||||
- new upstream version
|
||||
|
||||
* Wed Sep 29 2010 jkeating - 2.10.1-4
|
||||
- Rebuilt for gcc bug 634757
|
||||
|
||||
* Thu Sep 23 2010 Tomas Mraz <tmraz@redhat.com> 2.10.1-3
|
||||
- more patching for internal errors regression (#629858)
|
||||
patch by Vivek Dasmohapatra
|
||||
|
||||
* Tue Sep 21 2010 Tomas Mraz <tmraz@redhat.com> 2.10.1-2
|
||||
- backported patch from upstream git hopefully fixing internal errors
|
||||
(#629858)
|
||||
|
||||
* Wed Aug 4 2010 Tomas Mraz <tmraz@redhat.com> 2.10.1-1
|
||||
- new upstream version
|
||||
|
||||
* Wed Jun 2 2010 Tomas Mraz <tmraz@redhat.com> 2.8.6-2
|
||||
- add support for safe renegotiation CVE-2009-3555 (#533125)
|
||||
|
||||
* Wed May 12 2010 Tomas Mraz <tmraz@redhat.com> 2.8.6-1
|
||||
- upgrade to a new upstream version
|
||||
|
||||
* Mon Feb 15 2010 Rex Dieter <rdieter@fedoraproject.org> 2.8.5-4
|
||||
- FTBFS gnutls-2.8.5-3.fc13: ImplicitDSOLinking (#564624)
|
||||
|
||||
* Thu Jan 28 2010 Tomas Mraz <tmraz@redhat.com> 2.8.5-3
|
||||
- drop superfluous rpath from binaries
|
||||
- do not call autoreconf during build
|
||||
- specify the license on utils subpackage
|
||||
|
||||
* Mon Jan 18 2010 Tomas Mraz <tmraz@redhat.com> 2.8.5-2
|
||||
- do not create static libraries (#556052)
|
||||
|
||||
* Mon Nov 2 2009 Tomas Mraz <tmraz@redhat.com> 2.8.5-1
|
||||
- upgrade to a new upstream version
|
||||
|
||||
* Wed Sep 23 2009 Tomas Mraz <tmraz@redhat.com> 2.8.4-1
|
||||
- upgrade to a new upstream version
|
||||
|
||||
* Fri Aug 14 2009 Tomas Mraz <tmraz@redhat.com> 2.8.3-1
|
||||
- upgrade to a new upstream version
|
||||
|
||||
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.8.1-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
|
||||
|
||||
* Wed Jun 10 2009 Tomas Mraz <tmraz@redhat.com> 2.8.1-1
|
||||
- upgrade to a new upstream version
|
||||
|
||||
* Wed Jun 3 2009 Tomas Mraz <tmraz@redhat.com> 2.8.0-1
|
||||
- upgrade to a new upstream version
|
||||
|
||||
* Mon May 4 2009 Tomas Mraz <tmraz@redhat.com> 2.6.6-1
|
||||
- upgrade to a new upstream version - security fixes
|
||||
|
||||
* Tue Apr 14 2009 Tomas Mraz <tmraz@redhat.com> 2.6.5-1
|
||||
- upgrade to a new upstream version, minor bugfixes only
|
||||
|
||||
* Fri Mar 6 2009 Tomas Mraz <tmraz@redhat.com> 2.6.4-1
|
||||
- upgrade to a new upstream version
|
||||
|
||||
* Tue Feb 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.6.3-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
|
||||
|
||||
* Mon Dec 15 2008 Tomas Mraz <tmraz@redhat.com> 2.6.3-1
|
||||
- upgrade to a new upstream version
|
||||
|
||||
* Thu Dec 4 2008 Tomas Mraz <tmraz@redhat.com> 2.6.2-1
|
||||
- upgrade to a new upstream version
|
||||
|
||||
* Tue Nov 11 2008 Tomas Mraz <tmraz@redhat.com> 2.4.2-3
|
||||
- fix chain verification issue CVE-2008-4989 (#470079)
|
||||
|
||||
* Thu Sep 25 2008 Tomas Mraz <tmraz@redhat.com> 2.4.2-2
|
||||
- add guile subpackage (#463735)
|
||||
- force new libtool through autoreconf to drop unnecessary rpaths
|
||||
|
||||
* Tue Sep 23 2008 Tomas Mraz <tmraz@redhat.com> 2.4.2-1
|
||||
- new upstream version
|
||||
|
||||
* Tue Jul 1 2008 Tomas Mraz <tmraz@redhat.com> 2.4.1-1
|
||||
- new upstream version
|
||||
- correct the license tag
|
||||
- explicit --with-included-opencdk not needed
|
||||
- use external lzo library, internal not included anymore
|
||||
|
||||
* Tue Jun 24 2008 Tomas Mraz <tmraz@redhat.com> 2.4.0-1
|
||||
- upgrade to latest upstream
|
||||
|
||||
* Tue May 20 2008 Tomas Mraz <tmraz@redhat.com> 2.0.4-3
|
||||
- fix three security issues in gnutls handshake - GNUTLS-SA-2008-1
|
||||
(#447461, #447462, #447463)
|
||||
|
||||
* Mon Feb 4 2008 Joe Orton <jorton@redhat.com> 2.0.4-2
|
||||
- use system libtasn1
|
||||
|
||||
* Tue Dec 4 2007 Tomas Mraz <tmraz@redhat.com> 2.0.4-1
|
||||
- upgrade to latest upstream
|
||||
|
||||
* Tue Aug 21 2007 Tomas Mraz <tmraz@redhat.com> 1.6.3-2
|
||||
- license tag fix
|
||||
|
||||
* Wed Jun 6 2007 Tomas Mraz <tmraz@redhat.com> 1.6.3-1
|
||||
- upgrade to latest upstream (#232445)
|
||||
|
||||
* Tue Apr 10 2007 Tomas Mraz <tmraz@redhat.com> 1.4.5-2
|
||||
- properly require install-info (patch by Ville Skyttä)
|
||||
- standard buildroot and use dist tag
|
||||
- add COPYING and README to doc
|
||||
|
||||
* Wed Feb 7 2007 Tomas Mraz <tmraz@redhat.com> 1.4.5-1
|
||||
- new upstream version
|
||||
- drop libtermcap-devel from buildrequires
|
||||
|
||||
* Thu Sep 14 2006 Tomas Mraz <tmraz@redhat.com> 1.4.1-2
|
||||
- detect forged signatures - CVE-2006-4790 (#206411), patch
|
||||
from upstream
|
||||
|
||||
* Tue Jul 18 2006 Tomas Mraz <tmraz@redhat.com> - 1.4.1-1
|
||||
- upgrade to new upstream version, only minor changes
|
||||
|
||||
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 1.4.0-1.1
|
||||
- rebuild
|
||||
|
||||
* Wed Jun 14 2006 Tomas Mraz <tmraz@redhat.com> - 1.4.0-1
|
||||
- upgrade to new upstream version (#192070), rebuild
|
||||
of dependent packages required
|
||||
|
||||
* Tue May 16 2006 Tomas Mraz <tmraz@redhat.com> - 1.2.10-2
|
||||
- added missing buildrequires
|
||||
|
||||
* Mon Feb 13 2006 Tomas Mraz <tmraz@redhat.com> - 1.2.10-1
|
||||
- updated to new version (fixes CVE-2006-0645)
|
||||
|
||||
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.2.9-3.2
|
||||
- bump again for double-long bug on ppc(64)
|
||||
|
||||
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.2.9-3.1
|
||||
- rebuilt for new gcc4.1 snapshot and glibc changes
|
||||
|
||||
* Tue Jan 3 2006 Jesse Keating <jkeating@redhat.com> 1.2.9-3
|
||||
- rebuilt
|
||||
|
||||
* Fri Dec 9 2005 Tomas Mraz <tmraz@redhat.com> 1.2.9-2
|
||||
- replaced *-config scripts with calls to pkg-config to
|
||||
solve multilib conflicts
|
||||
|
||||
* Wed Nov 23 2005 Tomas Mraz <tmraz@redhat.com> 1.2.9-1
|
||||
- upgrade to newest upstream
|
||||
- removed .la files (#172635)
|
||||
|
||||
* Sun Aug 7 2005 Tomas Mraz <tmraz@redhat.com> 1.2.6-1
|
||||
- upgrade to newest upstream (rebuild of dependencies necessary)
|
||||
|
||||
* Mon Jul 4 2005 Tomas Mraz <tmraz@redhat.com> 1.0.25-2
|
||||
- split the command line tools to utils subpackage
|
||||
|
||||
* Sat Apr 30 2005 Tomas Mraz <tmraz@redhat.com> 1.0.25-1
|
||||
- new upstream version fixes potential DOS attack
|
||||
|
||||
* Sat Apr 23 2005 Tomas Mraz <tmraz@redhat.com> 1.0.24-2
|
||||
- readd the version script dropped by upstream
|
||||
|
||||
* Fri Apr 22 2005 Tomas Mraz <tmraz@redhat.com> 1.0.24-1
|
||||
- update to the latest upstream version on the 1.0 branch
|
||||
|
||||
* Wed Mar 2 2005 Warren Togami <wtogami@redhat.com> 1.0.20-6
|
||||
- gcc4 rebuild
|
||||
|
||||
* Tue Jan 4 2005 Ivana Varekova <varekova@redhat.com> 1.0.20-5
|
||||
- add gnutls Requires zlib-devel (#144069)
|
||||
|
||||
* Mon Nov 08 2004 Colin Walters <walters@redhat.com> 1.0.20-4
|
||||
- Make gnutls-devel Require libgcrypt-devel
|
||||
|
||||
* Tue Sep 21 2004 Jeff Johnson <jbj@redhat.com> 1.0.20-3
|
||||
- rebuild with release++, otherwise unchanged.
|
||||
|
||||
* Tue Sep 7 2004 Jeff Johnson <jbj@redhat.com> 1.0.20-2
|
||||
- patent tainted SRP code removed.
|
||||
|
||||
* Sun Sep 5 2004 Jeff Johnson <jbj@redhat.com> 1.0.20-1
|
||||
- update to 1.0.20.
|
||||
- add --with-included-opencdk --with-included-libtasn1
|
||||
- add --with-included-libcfg --with-included-lzo
|
||||
- add --disable-srp-authentication.
|
||||
- do "make check" after build.
|
||||
|
||||
* Fri Mar 21 2003 Jeff Johnson <jbj@redhat.com> 0.9.2-1
|
||||
- upgrade to 0.9.2
|
||||
|
||||
* Tue Jun 25 2002 Jeff Johnson <jbj@redhat.com> 0.4.4-1
|
||||
- update to 0.4.4.
|
||||
|
||||
* Fri Jun 21 2002 Tim Powers <timp@redhat.com>
|
||||
- automated rebuild
|
||||
|
||||
* Sat May 25 2002 Jeff Johnson <jbj@redhat.com> 0.4.3-1
|
||||
- update to 0.4.3.
|
||||
|
||||
* Tue May 21 2002 Jeff Johnson <jbj@redhat.com> 0.4.2-1
|
||||
- update to 0.4.2.
|
||||
- change license to LGPL.
|
||||
- include splint annotations patch.
|
||||
|
||||
* Tue Apr 2 2002 Nalin Dahyabhai <nalin@redhat.com> 0.4.0-1
|
||||
- update to 0.4.0
|
||||
|
||||
* Thu Jan 17 2002 Nalin Dahyabhai <nalin@redhat.com> 0.3.2-1
|
||||
- update to 0.3.2
|
||||
|
||||
* Thu Jan 10 2002 Nalin Dahyabhai <nalin@redhat.com> 0.3.0-1
|
||||
- add a URL
|
||||
|
||||
* Thu Dec 20 2001 Nalin Dahyabhai <nalin@redhat.com>
|
||||
- initial package
|
|
@ -1,12 +0,0 @@
|
|||
diff -up gnutls-3.4.2/guile/src/Makefile.in.jx gnutls-3.4.2/guile/src/Makefile.in
|
||||
--- gnutls-3.4.2/guile/src/Makefile.in.jx 2015-06-16 12:23:31.000000000 -0400
|
||||
+++ gnutls-3.4.2/guile/src/Makefile.in 2015-07-02 14:01:19.415060204 -0400
|
||||
@@ -1316,7 +1316,7 @@ guileextension_LTLIBRARIES = guile-gnutl
|
||||
# Use '-module' to build a "dlopenable module", in Libtool terms.
|
||||
# Use '-undefined' to placate Libtool on Windows; see
|
||||
# <http://lists.gnutls.org/pipermail/gnutls-devel/2014-December/007294.html>.
|
||||
-guile_gnutls_v_2_la_LDFLAGS = -module -no-undefined
|
||||
+guile_gnutls_v_2_la_LDFLAGS = -module -no-undefined -Wl,-z,lazy
|
||||
|
||||
# Linking against GnuTLS.
|
||||
GNUTLS_CORE_LIBS = $(top_builddir)/lib/libgnutls.la
|
|
@ -1,20 +0,0 @@
|
|||
diff --git a/tests/pkcs11/tls-neg-pkcs11-key.c b/tests/pkcs11/tls-neg-pkcs11-key.c
|
||||
index c85d878..614fcea 100644
|
||||
--- a/tests/pkcs11/tls-neg-pkcs11-key.c
|
||||
+++ b/tests/pkcs11/tls-neg-pkcs11-key.c
|
||||
@@ -261,6 +261,7 @@ static const test_st tests[] = {
|
||||
.key = &server_ca3_key,
|
||||
.exp_kx = GNUTLS_KX_ECDHE_RSA
|
||||
},
|
||||
+#if 0
|
||||
{.name = "tls1.2: rsa-sign key with rsa-pss sigs prioritized",
|
||||
.pk = GNUTLS_PK_RSA,
|
||||
.prio = "NORMAL:+ECDHE-RSA:+ECDHE-ECDSA:-SIGN-ALL:+SIGN-RSA-PSS-SHA256:+SIGN-RSA-PSS-SHA384:+SIGN-RSA-PSS-SHA512:+SIGN-RSA-SHA256:+SIGN-RSA-SHA384:+SIGN-RSA-SHA512:-VERS-TLS-ALL:+VERS-TLS1.2",
|
||||
@@ -292,6 +293,7 @@ static const test_st tests[] = {
|
||||
.exp_kx = GNUTLS_KX_ECDHE_RSA,
|
||||
.exp_serv_err = GNUTLS_E_NO_CIPHER_SUITES
|
||||
},
|
||||
+#endif
|
||||
{.name = "tls1.2: ed25519 cert, ed25519 key", /* we cannot import that key */
|
||||
.pk = GNUTLS_PK_EDDSA_ED25519,
|
||||
.prio = "NORMAL:+ECDHE-RSA:+ECDHE-ECDSA",
|
|
@ -0,0 +1,11 @@
|
|||
--- a/guile/src/Makefile.in 2019-03-27 11:51:55.984398001 +0100
|
||||
+++ b/guile/src/Makefile.in 2019-03-27 11:52:27.259626076 +0100
|
||||
@@ -1472,7 +1472,7 @@
|
||||
# Use '-module' to build a "dlopenable module", in Libtool terms.
|
||||
# Use '-undefined' to placate Libtool on Windows; see
|
||||
# <https://lists.gnutls.org/pipermail/gnutls-devel/2014-December/007294.html>.
|
||||
-guile_gnutls_v_2_la_LDFLAGS = -module -no-undefined
|
||||
+guile_gnutls_v_2_la_LDFLAGS = -module -no-undefined -Wl,-z,lazy
|
||||
|
||||
# Linking against GnuTLS.
|
||||
GNUTLS_CORE_LIBS = $(top_builddir)/lib/libgnutls.la
|
Binary file not shown.
Binary file not shown.
Binary file not shown.
|
@ -0,0 +1,13 @@
|
|||
diff --color -rup a/lib/handshake.c b/lib/handshake.c
|
||||
--- a/lib/handshake.c 2022-07-28 12:44:40.000000000 +0200
|
||||
+++ b/lib/handshake.c 2022-07-29 12:30:00.110002282 +0200
|
||||
@@ -2861,7 +2861,8 @@ int gnutls_handshake(gnutls_session_t se
|
||||
|
||||
#ifdef ENABLE_KTLS
|
||||
if (_gnutls_config_is_ktls_enabled()) {
|
||||
- if (session->internals.pull_func ||
|
||||
+ if ((session->internals.pull_func &&
|
||||
+ session->internals.pull_func != system_read) ||
|
||||
session->internals.push_func) {
|
||||
_gnutls_audit_log(session,
|
||||
"Not enabling KTLS with "
|
Binary file not shown.
Binary file not shown.
812
gnutls.spec
812
gnutls.spec
|
@ -1,42 +1,62 @@
|
|||
# This spec file has been automatically updated
|
||||
Version: 3.6.2
|
||||
Release: 1%{?dist}
|
||||
Patch1: gnutls-3.2.7-rpath.patch
|
||||
Patch2: gnutls-3.4.2-no-now-guile.patch
|
||||
Patch3: gnutls-3.6.1-disable-pss-tests.patch
|
||||
Version: 3.7.7
|
||||
Release: %{?autorelease}%{!?autorelease:1%{?dist}}
|
||||
Patch1: gnutls-3.6.7-no-now-guile.patch
|
||||
Patch2: gnutls-3.2.7-rpath.patch
|
||||
Patch3: gnutls-3.7.7-fix-ktls.patch
|
||||
|
||||
%bcond_without bootstrap
|
||||
%bcond_without dane
|
||||
%if 0%{?rhel}
|
||||
%bcond_with guile
|
||||
%bcond_without fips
|
||||
%else
|
||||
%bcond_without guile
|
||||
%bcond_without fips
|
||||
%endif
|
||||
%bcond_with tpm12
|
||||
%bcond_without gost
|
||||
|
||||
Summary: A TLS protocol implementation
|
||||
Name: gnutls
|
||||
# The libraries are LGPLv2.1+, utilities are GPLv3+
|
||||
License: GPLv3+ and LGPLv2+
|
||||
Group: System Environment/Libraries
|
||||
BuildRequires: p11-kit-devel >= 0.21.3, gettext-devel
|
||||
BuildRequires: zlib-devel, readline-devel, libtasn1-devel >= 4.3
|
||||
BuildRequires: libtool, automake, autoconf, texinfo
|
||||
BuildRequires: autogen-libopts-devel >= 5.18 autogen
|
||||
BuildRequires: nettle-devel >= 3.1.1
|
||||
%if %{with bootstrap}
|
||||
BuildRequires: automake, autoconf, gperf, libtool, texinfo
|
||||
%endif
|
||||
BuildRequires: nettle-devel >= 3.5.1
|
||||
%if %{with tpm12}
|
||||
BuildRequires: trousers-devel >= 0.3.11.2
|
||||
%endif
|
||||
BuildRequires: libidn2-devel
|
||||
BuildRequires: libunistring-devel
|
||||
BuildRequires: gperf, net-tools, datefudge, softhsm
|
||||
BuildRequires: net-tools, datefudge, softhsm, gcc, gcc-c++
|
||||
BuildRequires: gnupg2
|
||||
|
||||
# for a sanity check on cert loading
|
||||
BuildRequires: p11-kit-trust, ca-certificates
|
||||
Requires: crypto-policies
|
||||
Requires: p11-kit-trust
|
||||
Requires: libtasn1 >= 4.3
|
||||
Requires: nettle >= 3.4.1
|
||||
%if %{with tpm12}
|
||||
Recommends: trousers >= 0.3.11.2
|
||||
%endif
|
||||
|
||||
%if %{with dane}
|
||||
BuildRequires: unbound-devel unbound-libs
|
||||
%endif
|
||||
%if %{with guile}
|
||||
BuildRequires: guile-devel
|
||||
BuildRequires: guile22-devel
|
||||
%endif
|
||||
BuildRequires: make gtk-doc
|
||||
URL: http://www.gnutls.org/
|
||||
Source0: ftp://ftp.gnutls.org/gcrypt/gnutls/%{name}-%{version}.tar.xz
|
||||
Source1: ftp://ftp.gnutls.org/gcrypt/gnutls/%{name}-%{version}.tar.xz.sig
|
||||
Source2: gpgkey-1F42418905D8206AA754CCDC29EE58B996865171.gpg
|
||||
%define short_version %(echo %{version} | grep -m1 -o "[0-9]*\.[0-9]*" | head -1)
|
||||
Source0: https://www.gnupg.org/ftp/gcrypt/gnutls/v%{short_version}/%{name}-%{version}.tar.xz
|
||||
Source1: https://www.gnupg.org/ftp/gcrypt/gnutls/v%{short_version}/%{name}-%{version}.tar.xz.sig
|
||||
Source2: gnutls-release-keyring.gpg
|
||||
|
||||
# Wildcard bundling exception https://fedorahosted.org/fpc/ticket/174
|
||||
Provides: bundled(gnulib) = 20130424
|
||||
|
@ -47,20 +67,16 @@ Requires: %{name}%{?_isa} = %{version}-%{release}
|
|||
|
||||
%package devel
|
||||
Summary: Development files for the %{name} package
|
||||
Group: Development/Libraries
|
||||
Requires: %{name}%{?_isa} = %{version}-%{release}
|
||||
Requires: %{name}-c++%{?_isa} = %{version}-%{release}
|
||||
%if %{with dane}
|
||||
Requires: %{name}-dane%{?_isa} = %{version}-%{release}
|
||||
%endif
|
||||
Requires: pkgconfig
|
||||
Requires(post): /sbin/install-info
|
||||
Requires(preun): /sbin/install-info
|
||||
|
||||
%package utils
|
||||
License: GPLv3+
|
||||
Summary: Command line tools for TLS protocol
|
||||
Group: Applications/System
|
||||
Requires: %{name}%{?_isa} = %{version}-%{release}
|
||||
%if %{with dane}
|
||||
Requires: %{name}-dane%{?_isa} = %{version}-%{release}
|
||||
|
@ -75,9 +91,8 @@ Requires: %{name}%{?_isa} = %{version}-%{release}
|
|||
%if %{with guile}
|
||||
%package guile
|
||||
Summary: Guile bindings for the GNUTLS library
|
||||
Group: Development/Libraries
|
||||
Requires: %{name}%{?_isa} = %{version}-%{release}
|
||||
Requires: guile
|
||||
Requires: guile22
|
||||
%endif
|
||||
|
||||
%description
|
||||
|
@ -134,41 +149,73 @@ This package contains Guile bindings for the library.
|
|||
%endif
|
||||
|
||||
%prep
|
||||
gpgv2 --keyring %{SOURCE2} %{SOURCE1} %{SOURCE0}
|
||||
%{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}'
|
||||
|
||||
%setup -q
|
||||
%patch1 -p1
|
||||
%patch2 -p1
|
||||
%patch3 -p1
|
||||
%autosetup -p1
|
||||
%if %{with bootstrap}
|
||||
rm -f src/libopts/*.c src/libopts/*.h src/libopts/compat/*.c src/libopts/compat/*.h
|
||||
autoreconf -fi
|
||||
%endif
|
||||
|
||||
sed -i -e 's|sys_lib_dlsearch_path_spec="/lib /usr/lib|sys_lib_dlsearch_path_spec="/lib /usr/lib %{_libdir}|g' configure
|
||||
rm -f lib/minitasn1/*.c lib/minitasn1/*.h
|
||||
rm -f src/libopts/*.c src/libopts/*.h src/libopts/compat/*.c src/libopts/compat/*.h
|
||||
|
||||
echo "SYSTEM=NORMAL" >> tests/system.prio
|
||||
|
||||
# Note that we explicitly enable SHA1, as SHA1 deprecation is handled
|
||||
# via the crypto policies
|
||||
|
||||
%build
|
||||
%configure --with-libtasn1-prefix=%{_prefix} \
|
||||
%define _lto_cflags %{nil}
|
||||
|
||||
CCASFLAGS="$CCASFLAGS -Wa,--generate-missing-build-notes=yes"
|
||||
export CCASFLAGS
|
||||
|
||||
%if %{with guile}
|
||||
# These should be checked by m4/guile.m4 instead of configure.ac
|
||||
# taking into account of _guile_suffix
|
||||
guile_snarf=%{_bindir}/guile-snarf2.2
|
||||
export guile_snarf
|
||||
GUILD=%{_bindir}/guild2.2
|
||||
export GUILD
|
||||
%endif
|
||||
|
||||
%configure \
|
||||
%if %{with fips}
|
||||
--enable-fips140-mode \
|
||||
%endif
|
||||
%if %{with gost}
|
||||
--enable-gost \
|
||||
%else
|
||||
--disable-gost \
|
||||
%endif
|
||||
--enable-sha1-support \
|
||||
--disable-static \
|
||||
--disable-openssl-compatibility \
|
||||
--disable-non-suiteb-curves \
|
||||
--with-system-priority-file=%{_sysconfdir}/crypto-policies/back-ends/gnutls.config \
|
||||
--with-default-trust-store-pkcs11="pkcs11:" \
|
||||
%if %{with tpm12}
|
||||
--with-trousers-lib=%{_libdir}/libtspi.so.1 \
|
||||
%else
|
||||
--without-tpm \
|
||||
%endif
|
||||
--htmldir=%{_docdir}/manual \
|
||||
%if %{with guile}
|
||||
--enable-guile \
|
||||
--with-guile-extension-dir=%{_libdir}/guile/2.2 \
|
||||
%else
|
||||
--disable-guile \
|
||||
%endif
|
||||
%if %{with dane}
|
||||
--with-unbound-root-key-file=/var/lib/unbound/root.key \
|
||||
--enable-dane \
|
||||
--enable-libdane \
|
||||
%else
|
||||
--disable-dane \
|
||||
--disable-libdane \
|
||||
%endif
|
||||
--disable-rpath \
|
||||
--with-default-priority-string="@SYSTEM"
|
||||
--with-default-priority-string="@SYSTEM" \
|
||||
--enable-ktls
|
||||
|
||||
make %{?_smp_mflags} V=1
|
||||
|
||||
|
@ -177,51 +224,38 @@ make install DESTDIR=$RPM_BUILD_ROOT
|
|||
make -C doc install-html DESTDIR=$RPM_BUILD_ROOT
|
||||
rm -f $RPM_BUILD_ROOT%{_infodir}/dir
|
||||
rm -f $RPM_BUILD_ROOT%{_libdir}/*.la
|
||||
rm -f $RPM_BUILD_ROOT%{_libdir}/guile/2.0/guile-gnutls*.a
|
||||
rm -f $RPM_BUILD_ROOT%{_libdir}/guile/2.0/guile-gnutls*.la
|
||||
rm -f $RPM_BUILD_ROOT%{_libdir}/gnutls/libpkcs11mock1.*
|
||||
rm -f $RPM_BUILD_ROOT%{_libdir}/guile/2.2/guile-gnutls*.a
|
||||
rm -f $RPM_BUILD_ROOT%{_libdir}/guile/2.2/guile-gnutls*.la
|
||||
%if %{without dane}
|
||||
rm -f $RPM_BUILD_ROOT%{_libdir}/pkgconfig/gnutls-dane.pc
|
||||
%endif
|
||||
|
||||
%if %{with fips}
|
||||
# doing it twice should be a no-op the second time,
|
||||
# and this way we avoid redefining it and missing a future change
|
||||
%{__spec_install_post}
|
||||
./lib/fipshmac "$RPM_BUILD_ROOT%{_libdir}/libgnutls.so.30" > $RPM_BUILD_ROOT%{_libdir}/.gnutls.hmac
|
||||
sed -i "s^$RPM_BUILD_ROOT/usr^^" $RPM_BUILD_ROOT%{_libdir}/.gnutls.hmac
|
||||
%endif
|
||||
|
||||
%if %{with fips}
|
||||
%define __spec_install_post \
|
||||
%{?__debug_package:%{__debug_install_post}} \
|
||||
%{__arch_install_post} \
|
||||
%{__os_install_post} \
|
||||
%{nil}
|
||||
%endif
|
||||
|
||||
%find_lang gnutls
|
||||
|
||||
%check
|
||||
make check %{?_smp_mflags}
|
||||
|
||||
%post -p /sbin/ldconfig
|
||||
|
||||
%postun -p /sbin/ldconfig
|
||||
|
||||
%post c++ -p /sbin/ldconfig
|
||||
|
||||
%postun c++ -p /sbin/ldconfig
|
||||
|
||||
%post devel
|
||||
if [ -f %{_infodir}/gnutls.info.gz ]; then
|
||||
/sbin/install-info %{_infodir}/gnutls.info.gz %{_infodir}/dir || :
|
||||
fi
|
||||
|
||||
%preun devel
|
||||
if [ $1 = 0 -a -f %{_infodir}/gnutls.info.gz ]; then
|
||||
/sbin/install-info --delete %{_infodir}/gnutls.info.gz %{_infodir}/dir || :
|
||||
fi
|
||||
|
||||
%if %{with dane}
|
||||
%post dane -p /sbin/ldconfig
|
||||
|
||||
%postun dane -p /sbin/ldconfig
|
||||
%endif
|
||||
|
||||
%if %{with guile}
|
||||
%post guile -p /sbin/ldconfig
|
||||
|
||||
%postun guile -p /sbin/ldconfig
|
||||
%endif
|
||||
make check %{?_smp_mflags} GNUTLS_SYSTEM_PRIORITY_FILE=/dev/null
|
||||
|
||||
%files -f gnutls.lang
|
||||
%defattr(-,root,root,-)
|
||||
%{_libdir}/libgnutls.so.30*
|
||||
%if %{with fips}
|
||||
%{_libdir}/.gnutls.hmac
|
||||
%endif
|
||||
%doc README.md AUTHORS NEWS THANKS
|
||||
%license LICENSE doc/COPYING doc/COPYING.LESSER
|
||||
|
||||
|
@ -229,9 +263,9 @@ fi
|
|||
%{_libdir}/libgnutlsxx.so.*
|
||||
|
||||
%files devel
|
||||
%defattr(-,root,root,-)
|
||||
%{_includedir}/*
|
||||
%{_libdir}/libgnutls*.so
|
||||
|
||||
%{_libdir}/pkgconfig/*.pc
|
||||
%{_mandir}/man3/*
|
||||
%{_infodir}/gnutls*
|
||||
|
@ -239,9 +273,10 @@ fi
|
|||
%{_docdir}/manual/*
|
||||
|
||||
%files utils
|
||||
%defattr(-,root,root,-)
|
||||
%{_bindir}/certtool
|
||||
%if %{with tpm12}
|
||||
%{_bindir}/tpmtool
|
||||
%endif
|
||||
%{_bindir}/ocsptool
|
||||
%{_bindir}/psktool
|
||||
%{_bindir}/p11tool
|
||||
|
@ -255,648 +290,17 @@ fi
|
|||
|
||||
%if %{with dane}
|
||||
%files dane
|
||||
%defattr(-,root,root,-)
|
||||
%{_libdir}/libgnutls-dane.so.*
|
||||
%endif
|
||||
|
||||
%if %{with guile}
|
||||
%files guile
|
||||
%defattr(-,root,root,-)
|
||||
%{_libdir}/guile/2.0/guile-gnutls*.so*
|
||||
%{_libdir}/guile/2.0/site-ccache/gnutls.go
|
||||
%{_libdir}/guile/2.0/site-ccache/gnutls/extra.go
|
||||
%{_datadir}/guile/site/2.0/gnutls.scm
|
||||
%{_datadir}/guile/site/2.0/gnutls/extra.scm
|
||||
%{_libdir}/guile/2.2/guile-gnutls*.so*
|
||||
%{_libdir}/guile/2.2/site-ccache/gnutls.go
|
||||
%{_libdir}/guile/2.2/site-ccache/gnutls/extra.go
|
||||
%{_datadir}/guile/site/2.2/gnutls.scm
|
||||
%{_datadir}/guile/site/2.2/gnutls/extra.scm
|
||||
%endif
|
||||
|
||||
%changelog
|
||||
* Fri Feb 16 2018 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.2-1
|
||||
- Update to upstream 3.6.2 release
|
||||
|
||||
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 3.6.1-5
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
||||
|
||||
* Fri Feb 2 2018 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.1-4
|
||||
- Rebuilt to address incompatibility with new nettle
|
||||
|
||||
* Thu Nov 30 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.1-3
|
||||
- Corrected regression from 3.6.1-2 which prevented the loading of
|
||||
arbitrary p11-kit modules (#1507402)
|
||||
|
||||
* Mon Nov 6 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.1-2
|
||||
- Prevent the loading of all PKCS#11 modules on certificate verification
|
||||
but only restrict to p11-kit trust module (#1507402)
|
||||
|
||||
* Sat Oct 21 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.1-1
|
||||
- Update to upstream 3.6.1 release
|
||||
|
||||
* Mon Aug 21 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.0-1
|
||||
- Update to upstream 3.6.0 release
|
||||
|
||||
* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.5.14-3
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
|
||||
|
||||
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.5.14-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
||||
|
||||
* Tue Jul 04 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.5.14-1
|
||||
- Update to upstream 3.5.14 release
|
||||
|
||||
* Wed Jun 07 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.5.13-1
|
||||
- Update to upstream 3.5.13 release
|
||||
|
||||
* Thu May 11 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.5.12-2
|
||||
- Fix issue with p11-kit-trust arch dependency
|
||||
|
||||
* Thu May 11 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.5.12-1
|
||||
- Update to upstream 3.5.12 release
|
||||
|
||||
* Fri Apr 07 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.5.11-1
|
||||
- Update to upstream 3.5.11 release
|
||||
|
||||
* Mon Mar 06 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.5.10-1
|
||||
- Update to upstream 3.5.10 release
|
||||
|
||||
* Wed Feb 15 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.5.9-2
|
||||
- Work around missing pkg-config file (#1422256)
|
||||
|
||||
* Tue Feb 14 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.5.9-1
|
||||
- Update to upstream 3.5.9 release
|
||||
|
||||
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.5.8-3
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
||||
|
||||
* Sat Feb 4 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.5.8-2
|
||||
- Added patch fix initialization issue in gnutls_pkcs11_obj_list_import_url4
|
||||
|
||||
* Mon Jan 9 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.5.8-1
|
||||
- New upstream release
|
||||
|
||||
* Tue Dec 13 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.5.7-3
|
||||
- Fix PKCS#8 file loading (#1404084)
|
||||
|
||||
* Thu Dec 8 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.5.7-1
|
||||
- New upstream release
|
||||
|
||||
* Fri Nov 4 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.5.6-1
|
||||
- New upstream release
|
||||
|
||||
* Tue Oct 11 2016 walters@redhat.com - 3.5.5-2
|
||||
- Apply patch to fix compatibility with ostree (#1383708)
|
||||
|
||||
* Mon Oct 10 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.5.5-1
|
||||
- New upstream release
|
||||
|
||||
* Thu Sep 8 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.5.4-1
|
||||
- New upstream release
|
||||
|
||||
* Mon Aug 29 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.5.3-2
|
||||
- Work around #1371082 for x86
|
||||
- Fixed issue with DTLS sliding window implementation (#1370881)
|
||||
|
||||
* Tue Aug 9 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.5.3-1
|
||||
- New upstream release
|
||||
|
||||
* Wed Jul 6 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.5.2-1
|
||||
- New upstream release
|
||||
|
||||
* Wed Jun 15 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.5.1-1
|
||||
- New upstream release
|
||||
|
||||
* Tue Jun 7 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.13-1
|
||||
- New upstream release (#1343258)
|
||||
- Addresses issue with setuid programs introduced in 3.4.12 (#1343342)
|
||||
|
||||
* Fri May 20 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.12-1
|
||||
- New upstream release
|
||||
|
||||
* Mon Apr 11 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.11-1
|
||||
- New upstream release
|
||||
|
||||
* Fri Mar 4 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.10-1
|
||||
- New upstream release (#1314576)
|
||||
|
||||
* Wed Feb 3 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.9-1
|
||||
- Fix broken key usage flags introduced in 3.4.8 (#1303355)
|
||||
|
||||
* Mon Jan 11 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.8-1
|
||||
- New upstream release (#1297079)
|
||||
|
||||
* Mon Nov 23 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.7-1
|
||||
- New upstream release (#1284300)
|
||||
- Documentation updates (#1282864)
|
||||
- Adds interface to set unique IDs in certificates (#1281343)
|
||||
- Allow arbitrary key sizes with ARCFOUR (#1284401)
|
||||
|
||||
* Wed Oct 21 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.6-1
|
||||
- New upstream release (#1273672)
|
||||
- Enhances p11tool to write CKA_ISSUER and CKA_SERIAL_NUMBER (#1272178)
|
||||
|
||||
* Tue Oct 20 2015 Adam Williamson <awilliam@redhat.com> - 3.4.5-2
|
||||
- fix interaction with Chrome 45+ (master secret extension) (#1273102)
|
||||
|
||||
* Mon Sep 14 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.5-1
|
||||
- New upstream release (#1252192)
|
||||
- Eliminates hard limits on CRL parsing of certtool.
|
||||
|
||||
* Mon Aug 10 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.4-1
|
||||
- new upstream release
|
||||
- no longer requires trousers patch
|
||||
- fixes issue in gnutls_x509_privkey_import (#1250020)
|
||||
|
||||
* Mon Jul 13 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.3-2
|
||||
- Don't link against trousers but rather dlopen() it when available.
|
||||
That avoids a dependency on openssl by the main library.
|
||||
|
||||
* Mon Jul 13 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.3-1
|
||||
- new upstream release
|
||||
|
||||
* Thu Jul 02 2015 Adam Jackson <ajax@redhat.com> 3.4.2-3
|
||||
- Only disable -z now for the guile modules
|
||||
|
||||
* Thu Jun 18 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.2-2
|
||||
- rename the symbol version for internal symbols to avoid clashes
|
||||
with 3.3.x.
|
||||
|
||||
* Wed Jun 17 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.2-1
|
||||
- new upstream release
|
||||
|
||||
* Tue May 5 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.1-2
|
||||
- Provide missing GNUTLS_SUPPLEMENTAL_USER_MAPPING_DATA definition
|
||||
|
||||
* Mon May 4 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.1-1
|
||||
- new upstream release
|
||||
|
||||
* Sat May 02 2015 Kalev Lember <kalevlember@gmail.com> - 3.3.14-2
|
||||
- Rebuilt for GCC 5 C++11 ABI change
|
||||
|
||||
* Mon Mar 30 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.14-1
|
||||
- new upstream release
|
||||
- improved BER decoding of PKCS #12 structures (#1131461)
|
||||
|
||||
* Fri Mar 6 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.13-3
|
||||
- Build with hardened flags
|
||||
- Removed -Wl,--no-add-needed linker flag
|
||||
|
||||
* Fri Feb 27 2015 Till Maas <opensource@till.name> - 3.3.13-2
|
||||
- Do not build with hardened flags
|
||||
|
||||
* Thu Feb 26 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.13-1
|
||||
- new upstream release
|
||||
|
||||
* Sat Feb 21 2015 Till Maas <opensource@till.name> - 3.3.12-3
|
||||
- Make build verbose
|
||||
- Use %%license
|
||||
|
||||
* Sat Feb 21 2015 Till Maas <opensource@till.name> - 3.3.12-2
|
||||
- Rebuilt for Fedora 23 Change
|
||||
https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code
|
||||
|
||||
* Mon Jan 19 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.12-1
|
||||
- new upstream release
|
||||
|
||||
* Mon Jan 5 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.11-2
|
||||
- enabled guile bindings (#1177847)
|
||||
|
||||
* Thu Dec 11 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.11-1
|
||||
- new upstream release
|
||||
|
||||
* Mon Nov 10 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.10-1
|
||||
- new upstream release
|
||||
|
||||
* Thu Oct 23 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.9-2
|
||||
- applied fix for issue in get-issuer (#1155901)
|
||||
|
||||
* Mon Oct 13 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.9-1
|
||||
- new upstream release
|
||||
|
||||
* Fri Sep 19 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-2
|
||||
- strip rpath from library
|
||||
|
||||
* Thu Sep 18 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-1
|
||||
- new upstream release
|
||||
|
||||
* Mon Aug 25 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.7-1
|
||||
- new upstream release
|
||||
|
||||
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.3.6-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
|
||||
|
||||
* Wed Jul 23 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.6-1
|
||||
- new upstream release
|
||||
|
||||
* Tue Jul 01 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.5-2
|
||||
- Added work-around for s390 builds with gcc 4.9 (#1102324)
|
||||
|
||||
* Mon Jun 30 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.5-1
|
||||
- new upstream release
|
||||
|
||||
* Tue Jun 17 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.4-3
|
||||
- explicitly depend on p11-kit-trust
|
||||
|
||||
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.3.4-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
||||
|
||||
* Mon Jun 02 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.4-1
|
||||
- new upstream release
|
||||
|
||||
* Fri May 30 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.3-1
|
||||
- new upstream release
|
||||
|
||||
* Wed May 21 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.2-2
|
||||
- Require crypto-policies
|
||||
|
||||
* Fri May 09 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.2-1
|
||||
- new upstream release
|
||||
|
||||
* Mon May 05 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.1-4
|
||||
- Replaced /etc/crypto-profiles/apps with /etc/crypto-policies/back-ends.
|
||||
- Added support for "very weak" profile.
|
||||
|
||||
* Mon Apr 28 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.1-2
|
||||
- gnutls_global_deinit() will not do anything if the previous
|
||||
initialization has failed (#1091053)
|
||||
|
||||
* Mon Apr 28 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.1-1
|
||||
- new upstream release
|
||||
|
||||
* Mon Apr 14 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.0-1
|
||||
- new upstream release
|
||||
|
||||
* Tue Apr 08 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.2.13-1
|
||||
- new upstream release
|
||||
|
||||
* Wed Mar 05 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.2.12.1-1
|
||||
- new upstream release
|
||||
|
||||
* Mon Mar 03 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.2.12-1
|
||||
- new upstream release
|
||||
|
||||
* Mon Feb 03 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.2.10-2
|
||||
- use p11-kit trust store for certificate verification
|
||||
|
||||
* Mon Feb 03 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.2.10-1
|
||||
- new upstream release
|
||||
|
||||
* Tue Jan 14 2014 Tomáš Mráz <tmraz@redhat.com> 3.2.8-2
|
||||
- build the crywrap tool
|
||||
|
||||
* Mon Dec 23 2013 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.2.8-1
|
||||
- new upstream release
|
||||
|
||||
* Wed Dec 4 2013 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.2.7-2
|
||||
- Use the correct root key for unbound /var/lib/unbound/root.key (#1012494)
|
||||
- Pull asm fixes from upstream (#973210)
|
||||
|
||||
* Mon Nov 25 2013 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.2.7-1
|
||||
- new upstream release
|
||||
- added dependency to autogen-libopts-devel to use the system's
|
||||
libopts library
|
||||
- added dependency to trousers-devel to enable TPM support
|
||||
|
||||
* Mon Nov 4 2013 Tomáš Mráz <tmraz@redhat.com> 3.1.16-1
|
||||
- new upstream release
|
||||
- fixes CVE-2013-4466 off-by-one in dane_query_tlsa()
|
||||
|
||||
* Fri Oct 25 2013 Tomáš Mráz <tmraz@redhat.com> 3.1.15-1
|
||||
- new upstream release
|
||||
- fixes CVE-2013-4466 buffer overflow in handling DANE entries
|
||||
|
||||
* Wed Oct 16 2013 Tomáš Mráz <tmraz@redhat.com> 3.1.13-3
|
||||
- enable ECC NIST Suite B curves
|
||||
|
||||
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.1.13-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
|
||||
|
||||
* Mon Jul 15 2013 Tomáš Mráz <tmraz@redhat.com> 3.1.13-1
|
||||
- new upstream release
|
||||
|
||||
* Mon May 13 2013 Tomáš Mráz <tmraz@redhat.com> 3.1.11-1
|
||||
- new upstream release
|
||||
|
||||
* Mon Mar 25 2013 Tomas Mraz <tmraz@redhat.com> 3.1.10-1
|
||||
- new upstream release
|
||||
- license of the library is back to LGPLv2.1+
|
||||
|
||||
* Fri Mar 15 2013 Tomas Mraz <tmraz@redhat.com> 3.1.9-1
|
||||
- new upstream release
|
||||
|
||||
* Thu Mar 7 2013 Tomas Mraz <tmraz@redhat.com> 3.1.8-3
|
||||
- drop the temporary old library
|
||||
|
||||
* Tue Feb 26 2013 Tomas Mraz <tmraz@redhat.com> 3.1.8-2
|
||||
- don't send ECC algos as supported (#913797)
|
||||
|
||||
* Thu Feb 21 2013 Tomas Mraz <tmraz@redhat.com> 3.1.8-1
|
||||
- new upstream version
|
||||
|
||||
* Wed Feb 6 2013 Tomas Mraz <tmraz@redhat.com> 3.1.7-1
|
||||
- new upstream version, requires rebuild of dependencies
|
||||
- this release temporarily includes old compatibility .so
|
||||
|
||||
* Tue Feb 5 2013 Tomas Mraz <tmraz@redhat.com> 2.12.22-2
|
||||
- rebuilt with new libtasn1
|
||||
- make guile bindings optional - breaks i686 build and there is
|
||||
no dependent package
|
||||
|
||||
* Tue Jan 8 2013 Tomas Mraz <tmraz@redhat.com> 2.12.22-1
|
||||
- new upstream version
|
||||
|
||||
* Wed Nov 28 2012 Tomas Mraz <tmraz@redhat.com> 2.12.21-2
|
||||
- use RSA bit sizes supported by libgcrypt in FIPS mode for security
|
||||
levels (#879643)
|
||||
|
||||
* Fri Nov 9 2012 Tomas Mraz <tmraz@redhat.com> 2.12.21-1
|
||||
- new upstream version
|
||||
|
||||
* Thu Nov 1 2012 Tomas Mraz <tmraz@redhat.com> 2.12.20-4
|
||||
- negotiate only FIPS approved algorithms in the FIPS mode (#871826)
|
||||
|
||||
* Wed Aug 8 2012 Tomas Mraz <tmraz@redhat.com> 2.12.20-3
|
||||
- fix the gnutls-cli-debug manpage - patch by Peter Schiffer
|
||||
|
||||
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.12.20-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
|
||||
|
||||
* Mon Jun 18 2012 Tomas Mraz <tmraz@redhat.com> 2.12.20-1
|
||||
- new upstream version
|
||||
|
||||
* Fri May 18 2012 Tomas Mraz <tmraz@redhat.com> 2.12.19-1
|
||||
- new upstream version
|
||||
|
||||
* Thu Mar 29 2012 Tomas Mraz <tmraz@redhat.com> 2.12.18-1
|
||||
- new upstream version
|
||||
|
||||
* Thu Mar 8 2012 Tomas Mraz <tmraz@redhat.com> 2.12.17-1
|
||||
- new upstream version
|
||||
- fix leaks in key generation (#796302)
|
||||
|
||||
* Fri Feb 03 2012 Kevin Fenzi <kevin@scrye.com> - 2.12.14-3
|
||||
- Disable largefile on arm arch. (#787287)
|
||||
|
||||
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.12.14-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
|
||||
|
||||
* Tue Nov 8 2011 Tomas Mraz <tmraz@redhat.com> 2.12.14-1
|
||||
- new upstream version
|
||||
|
||||
* Mon Oct 24 2011 Tomas Mraz <tmraz@redhat.com> 2.12.12-1
|
||||
- new upstream version
|
||||
|
||||
* Thu Sep 29 2011 Tomas Mraz <tmraz@redhat.com> 2.12.11-1
|
||||
- new upstream version
|
||||
|
||||
* Fri Aug 26 2011 Tomas Mraz <tmraz@redhat.com> 2.12.9-1
|
||||
- new upstream version
|
||||
|
||||
* Tue Aug 16 2011 Tomas Mraz <tmraz@redhat.com> 2.12.8-1
|
||||
- new upstream version
|
||||
|
||||
* Mon Jul 25 2011 Tomas Mraz <tmraz@redhat.com> 2.12.7-2
|
||||
- fix problem when using new libgcrypt
|
||||
- split libgnutlsxx to a subpackage (#455146)
|
||||
- drop libgnutls-openssl (#460310)
|
||||
|
||||
* Tue Jun 21 2011 Tomas Mraz <tmraz@redhat.com> 2.12.7-1
|
||||
- new upstream version
|
||||
|
||||
* Mon May 9 2011 Tomas Mraz <tmraz@redhat.com> 2.12.4-1
|
||||
- new upstream version
|
||||
|
||||
* Tue Apr 26 2011 Tomas Mraz <tmraz@redhat.com> 2.12.3-1
|
||||
- new upstream version
|
||||
|
||||
* Mon Apr 18 2011 Tomas Mraz <tmraz@redhat.com> 2.12.2-1
|
||||
- new upstream version
|
||||
|
||||
* Thu Mar 3 2011 Tomas Mraz <tmraz@redhat.com> 2.10.5-1
|
||||
- new upstream version
|
||||
|
||||
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.10.4-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
|
||||
|
||||
* Wed Dec 8 2010 Tomas Mraz <tmraz@redhat.com> 2.10.4-1
|
||||
- new upstream version
|
||||
|
||||
* Thu Dec 2 2010 Tomas Mraz <tmraz@redhat.com> 2.10.3-2
|
||||
- fix buffer overflow in gnutls-serv (#659259)
|
||||
|
||||
* Fri Nov 19 2010 Tomas Mraz <tmraz@redhat.com> 2.10.3-1
|
||||
- new upstream version
|
||||
|
||||
* Thu Sep 30 2010 Tomas Mraz <tmraz@redhat.com> 2.10.2-1
|
||||
- new upstream version
|
||||
|
||||
* Wed Sep 29 2010 jkeating - 2.10.1-4
|
||||
- Rebuilt for gcc bug 634757
|
||||
|
||||
* Thu Sep 23 2010 Tomas Mraz <tmraz@redhat.com> 2.10.1-3
|
||||
- more patching for internal errors regression (#629858)
|
||||
patch by Vivek Dasmohapatra
|
||||
|
||||
* Tue Sep 21 2010 Tomas Mraz <tmraz@redhat.com> 2.10.1-2
|
||||
- backported patch from upstream git hopefully fixing internal errors
|
||||
(#629858)
|
||||
|
||||
* Wed Aug 4 2010 Tomas Mraz <tmraz@redhat.com> 2.10.1-1
|
||||
- new upstream version
|
||||
|
||||
* Wed Jun 2 2010 Tomas Mraz <tmraz@redhat.com> 2.8.6-2
|
||||
- add support for safe renegotiation CVE-2009-3555 (#533125)
|
||||
|
||||
* Wed May 12 2010 Tomas Mraz <tmraz@redhat.com> 2.8.6-1
|
||||
- upgrade to a new upstream version
|
||||
|
||||
* Mon Feb 15 2010 Rex Dieter <rdieter@fedoraproject.org> 2.8.5-4
|
||||
- FTBFS gnutls-2.8.5-3.fc13: ImplicitDSOLinking (#564624)
|
||||
|
||||
* Thu Jan 28 2010 Tomas Mraz <tmraz@redhat.com> 2.8.5-3
|
||||
- drop superfluous rpath from binaries
|
||||
- do not call autoreconf during build
|
||||
- specify the license on utils subpackage
|
||||
|
||||
* Mon Jan 18 2010 Tomas Mraz <tmraz@redhat.com> 2.8.5-2
|
||||
- do not create static libraries (#556052)
|
||||
|
||||
* Mon Nov 2 2009 Tomas Mraz <tmraz@redhat.com> 2.8.5-1
|
||||
- upgrade to a new upstream version
|
||||
|
||||
* Wed Sep 23 2009 Tomas Mraz <tmraz@redhat.com> 2.8.4-1
|
||||
- upgrade to a new upstream version
|
||||
|
||||
* Fri Aug 14 2009 Tomas Mraz <tmraz@redhat.com> 2.8.3-1
|
||||
- upgrade to a new upstream version
|
||||
|
||||
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.8.1-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
|
||||
|
||||
* Wed Jun 10 2009 Tomas Mraz <tmraz@redhat.com> 2.8.1-1
|
||||
- upgrade to a new upstream version
|
||||
|
||||
* Wed Jun 3 2009 Tomas Mraz <tmraz@redhat.com> 2.8.0-1
|
||||
- upgrade to a new upstream version
|
||||
|
||||
* Mon May 4 2009 Tomas Mraz <tmraz@redhat.com> 2.6.6-1
|
||||
- upgrade to a new upstream version - security fixes
|
||||
|
||||
* Tue Apr 14 2009 Tomas Mraz <tmraz@redhat.com> 2.6.5-1
|
||||
- upgrade to a new upstream version, minor bugfixes only
|
||||
|
||||
* Fri Mar 6 2009 Tomas Mraz <tmraz@redhat.com> 2.6.4-1
|
||||
- upgrade to a new upstream version
|
||||
|
||||
* Tue Feb 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.6.3-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
|
||||
|
||||
* Mon Dec 15 2008 Tomas Mraz <tmraz@redhat.com> 2.6.3-1
|
||||
- upgrade to a new upstream version
|
||||
|
||||
* Thu Dec 4 2008 Tomas Mraz <tmraz@redhat.com> 2.6.2-1
|
||||
- upgrade to a new upstream version
|
||||
|
||||
* Tue Nov 11 2008 Tomas Mraz <tmraz@redhat.com> 2.4.2-3
|
||||
- fix chain verification issue CVE-2008-4989 (#470079)
|
||||
|
||||
* Thu Sep 25 2008 Tomas Mraz <tmraz@redhat.com> 2.4.2-2
|
||||
- add guile subpackage (#463735)
|
||||
- force new libtool through autoreconf to drop unnecessary rpaths
|
||||
|
||||
* Tue Sep 23 2008 Tomas Mraz <tmraz@redhat.com> 2.4.2-1
|
||||
- new upstream version
|
||||
|
||||
* Tue Jul 1 2008 Tomas Mraz <tmraz@redhat.com> 2.4.1-1
|
||||
- new upstream version
|
||||
- correct the license tag
|
||||
- explicit --with-included-opencdk not needed
|
||||
- use external lzo library, internal not included anymore
|
||||
|
||||
* Tue Jun 24 2008 Tomas Mraz <tmraz@redhat.com> 2.4.0-1
|
||||
- upgrade to latest upstream
|
||||
|
||||
* Tue May 20 2008 Tomas Mraz <tmraz@redhat.com> 2.0.4-3
|
||||
- fix three security issues in gnutls handshake - GNUTLS-SA-2008-1
|
||||
(#447461, #447462, #447463)
|
||||
|
||||
* Mon Feb 4 2008 Joe Orton <jorton@redhat.com> 2.0.4-2
|
||||
- use system libtasn1
|
||||
|
||||
* Tue Dec 4 2007 Tomas Mraz <tmraz@redhat.com> 2.0.4-1
|
||||
- upgrade to latest upstream
|
||||
|
||||
* Tue Aug 21 2007 Tomas Mraz <tmraz@redhat.com> 1.6.3-2
|
||||
- license tag fix
|
||||
|
||||
* Wed Jun 6 2007 Tomas Mraz <tmraz@redhat.com> 1.6.3-1
|
||||
- upgrade to latest upstream (#232445)
|
||||
|
||||
* Tue Apr 10 2007 Tomas Mraz <tmraz@redhat.com> 1.4.5-2
|
||||
- properly require install-info (patch by Ville Skyttä)
|
||||
- standard buildroot and use dist tag
|
||||
- add COPYING and README to doc
|
||||
|
||||
* Wed Feb 7 2007 Tomas Mraz <tmraz@redhat.com> 1.4.5-1
|
||||
- new upstream version
|
||||
- drop libtermcap-devel from buildrequires
|
||||
|
||||
* Thu Sep 14 2006 Tomas Mraz <tmraz@redhat.com> 1.4.1-2
|
||||
- detect forged signatures - CVE-2006-4790 (#206411), patch
|
||||
from upstream
|
||||
|
||||
* Tue Jul 18 2006 Tomas Mraz <tmraz@redhat.com> - 1.4.1-1
|
||||
- upgrade to new upstream version, only minor changes
|
||||
|
||||
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 1.4.0-1.1
|
||||
- rebuild
|
||||
|
||||
* Wed Jun 14 2006 Tomas Mraz <tmraz@redhat.com> - 1.4.0-1
|
||||
- upgrade to new upstream version (#192070), rebuild
|
||||
of dependent packages required
|
||||
|
||||
* Tue May 16 2006 Tomas Mraz <tmraz@redhat.com> - 1.2.10-2
|
||||
- added missing buildrequires
|
||||
|
||||
* Mon Feb 13 2006 Tomas Mraz <tmraz@redhat.com> - 1.2.10-1
|
||||
- updated to new version (fixes CVE-2006-0645)
|
||||
|
||||
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.2.9-3.2
|
||||
- bump again for double-long bug on ppc(64)
|
||||
|
||||
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.2.9-3.1
|
||||
- rebuilt for new gcc4.1 snapshot and glibc changes
|
||||
|
||||
* Tue Jan 3 2006 Jesse Keating <jkeating@redhat.com> 1.2.9-3
|
||||
- rebuilt
|
||||
|
||||
* Fri Dec 9 2005 Tomas Mraz <tmraz@redhat.com> 1.2.9-2
|
||||
- replaced *-config scripts with calls to pkg-config to
|
||||
solve multilib conflicts
|
||||
|
||||
* Wed Nov 23 2005 Tomas Mraz <tmraz@redhat.com> 1.2.9-1
|
||||
- upgrade to newest upstream
|
||||
- removed .la files (#172635)
|
||||
|
||||
* Sun Aug 7 2005 Tomas Mraz <tmraz@redhat.com> 1.2.6-1
|
||||
- upgrade to newest upstream (rebuild of dependencies necessary)
|
||||
|
||||
* Mon Jul 4 2005 Tomas Mraz <tmraz@redhat.com> 1.0.25-2
|
||||
- split the command line tools to utils subpackage
|
||||
|
||||
* Sat Apr 30 2005 Tomas Mraz <tmraz@redhat.com> 1.0.25-1
|
||||
- new upstream version fixes potential DOS attack
|
||||
|
||||
* Sat Apr 23 2005 Tomas Mraz <tmraz@redhat.com> 1.0.24-2
|
||||
- readd the version script dropped by upstream
|
||||
|
||||
* Fri Apr 22 2005 Tomas Mraz <tmraz@redhat.com> 1.0.24-1
|
||||
- update to the latest upstream version on the 1.0 branch
|
||||
|
||||
* Wed Mar 2 2005 Warren Togami <wtogami@redhat.com> 1.0.20-6
|
||||
- gcc4 rebuild
|
||||
|
||||
* Tue Jan 4 2005 Ivana Varekova <varekova@redhat.com> 1.0.20-5
|
||||
- add gnutls Requires zlib-devel (#144069)
|
||||
|
||||
* Mon Nov 08 2004 Colin Walters <walters@redhat.com> 1.0.20-4
|
||||
- Make gnutls-devel Require libgcrypt-devel
|
||||
|
||||
* Tue Sep 21 2004 Jeff Johnson <jbj@redhat.com> 1.0.20-3
|
||||
- rebuild with release++, otherwise unchanged.
|
||||
|
||||
* Tue Sep 7 2004 Jeff Johnson <jbj@redhat.com> 1.0.20-2
|
||||
- patent tainted SRP code removed.
|
||||
|
||||
* Sun Sep 5 2004 Jeff Johnson <jbj@redhat.com> 1.0.20-1
|
||||
- update to 1.0.20.
|
||||
- add --with-included-opencdk --with-included-libtasn1
|
||||
- add --with-included-libcfg --with-included-lzo
|
||||
- add --disable-srp-authentication.
|
||||
- do "make check" after build.
|
||||
|
||||
* Fri Mar 21 2003 Jeff Johnson <jbj@redhat.com> 0.9.2-1
|
||||
- upgrade to 0.9.2
|
||||
|
||||
* Tue Jun 25 2002 Jeff Johnson <jbj@redhat.com> 0.4.4-1
|
||||
- update to 0.4.4.
|
||||
|
||||
* Fri Jun 21 2002 Tim Powers <timp@redhat.com>
|
||||
- automated rebuild
|
||||
|
||||
* Sat May 25 2002 Jeff Johnson <jbj@redhat.com> 0.4.3-1
|
||||
- update to 0.4.3.
|
||||
|
||||
* Tue May 21 2002 Jeff Johnson <jbj@redhat.com> 0.4.2-1
|
||||
- update to 0.4.2.
|
||||
- change license to LGPL.
|
||||
- include splint annotations patch.
|
||||
|
||||
* Tue Apr 2 2002 Nalin Dahyabhai <nalin@redhat.com> 0.4.0-1
|
||||
- update to 0.4.0
|
||||
|
||||
* Thu Jan 17 2002 Nalin Dahyabhai <nalin@redhat.com> 0.3.2-1
|
||||
- update to 0.3.2
|
||||
|
||||
* Thu Jan 10 2002 Nalin Dahyabhai <nalin@redhat.com> 0.3.0-1
|
||||
- add a URL
|
||||
|
||||
* Thu Dec 20 2001 Nalin Dahyabhai <nalin@redhat.com>
|
||||
- initial package
|
||||
%autochangelog
|
||||
|
|
Binary file not shown.
|
@ -6,10 +6,3 @@ if [ "$1" = "-e" ] ; then
|
|||
else
|
||||
CMD="rm -f"
|
||||
fi
|
||||
|
||||
# SRP
|
||||
for f in auth/srp_sb64.c auth/srp_passwd.c auth/srp_rsa.c \
|
||||
srp.c auth/srp.c ext/srp.c ; do
|
||||
eval "$CMD lib/$f"
|
||||
done
|
||||
|
||||
|
|
4
sources
4
sources
|
@ -1,3 +1 @@
|
|||
SHA512 (gpgkey-1F42418905D8206AA754CCDC29EE58B996865171.gpg) = 3b1989dc6a64d1140f83a2af0773da2adb03c50d97b6da7357cf09525050651aafa21131f1e3180baa540a8af922119a256f5ff5bcd6602996a806e8e1816bad
|
||||
SHA512 (gnutls-3.6.2.tar.xz.sig) = a1fc8acd0b48d046eda505b774e5e1a85dce8c8b2122069e6d257a50436e989cfdbc68aa294d14f98e3fec1ade129e8bd9b67b1d02f93a7a3fde5f5acb4b70d3
|
||||
SHA512 (gnutls-3.6.2.tar.xz) = 6a574d355226bdff6198ab3f70633ff2a3cff4b5d06793bdaf19d007063bd4dd515d1bd3f331a9eb1a9ad01f83007801cfa55e5fd16c1cd3461ac33d1813fb06
|
||||
SHA512 (gnutls-3.7.7.tar.xz) = ba00b20126379ec7e96c6bfa606cfb7bb0d9a5853318b29b5278a42a85ae40d39d8442778938e1f165debcdb1adaf9c63bcec59a4eb3387dd1ac99b08bcc5c08
|
||||
|
|
Loading…
Reference in New Issue