diff --git a/gnutls-3.7.8-ktls_disable_keyupdate_test.patch b/gnutls-3.7.8-ktls_disable_keyupdate_test.patch new file mode 100644 index 0000000..cab7547 --- /dev/null +++ b/gnutls-3.7.8-ktls_disable_keyupdate_test.patch @@ -0,0 +1,13 @@ +diff --git a/tests/Makefile.am b/tests/Makefile.am +index 2872cb1aa..247dfd3d8 100644 +--- a/tests/Makefile.am ++++ b/tests/Makefile.am +@@ -504,8 +504,6 @@ endif + if ENABLE_KTLS + indirect_tests += gnutls_ktls + dist_check_SCRIPTS += ktls.sh +-indirect_tests += ktls_keyupdate +-dist_check_SCRIPTS += ktls_keyupdate.sh + endif + + if !WINDOWS diff --git a/gnutls-3.7.8-ktls_skip_tls12_chachapoly_test.patch b/gnutls-3.7.8-ktls_skip_tls12_chachapoly_test.patch new file mode 100644 index 0000000..d986a36 --- /dev/null +++ b/gnutls-3.7.8-ktls_skip_tls12_chachapoly_test.patch @@ -0,0 +1,12 @@ +diff --git a/tests/gnutls_ktls.c b/tests/gnutls_ktls.c +index 919270778..778a2f94a 100644 +--- a/tests/gnutls_ktls.c ++++ b/tests/gnutls_ktls.c +@@ -351,7 +351,6 @@ void doit(void) + run("NORMAL:-VERS-ALL:+VERS-TLS1.2:-CIPHER-ALL:+AES-128-GCM"); + run("NORMAL:-VERS-ALL:+VERS-TLS1.2:-CIPHER-ALL:+AES-256-GCM"); + run("NORMAL:-VERS-ALL:+VERS-TLS1.2:-CIPHER-ALL:+AES-128-CCM"); +- run("NORMAL:-VERS-ALL:+VERS-TLS1.2:-CIPHER-ALL:+CHACHA20-POLY1305"); + run("NORMAL:-VERS-ALL:+VERS-TLS1.3:-CIPHER-ALL:+AES-128-GCM"); + run("NORMAL:-VERS-ALL:+VERS-TLS1.3:-CIPHER-ALL:+AES-256-GCM"); + run("NORMAL:-VERS-ALL:+VERS-TLS1.3:-CIPHER-ALL:+AES-128-CCM"); diff --git a/gnutls.spec b/gnutls.spec index 22040f8..f264ae2 100644 --- a/gnutls.spec +++ b/gnutls.spec @@ -28,6 +28,12 @@ Patch: gnutls-3.7.8-ktls_add_ciphersuites.patch Patch: gnutls-3.7.8-ktls_minor_fixes.patch Patch: gnutls-3.7.8-ktls_invalidate_session.patch +# Delete only after the kernel has been patched for thested systems +Patch: gnutls-3.7.8-ktls_disable_keyupdate_test.patch + +# follow https://gitlab.com/gnutls/gnutls/-/issues/1443 +Patch: gnutls-3.7.8-ktls_skip_tls12_chachapoly_test.patch + %bcond_without bootstrap %bcond_without dane %if 0%{?rhel}