Commit Graph

409 Commits

Author SHA1 Message Date
Zoltan Fridrich
9ba1f58c0f Use make macros
Co-authored-by: Tom Stellard <tstellar@redhat.com>
Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
2022-10-18 15:39:06 +00:00
Zoltan Fridrich
8f2a1d9b48 Merge #59 Update release keyring 2022-10-18 15:34:57 +00:00
Zoltan Fridrich
30a64d9273 Update release keyring
Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
2022-10-18 17:12:26 +02:00
Anderson Toshiyuki Sasaki
b9c750507f Enable gating and add FIPS smoke test 2022-10-18 14:30:24 +00:00
Daiki Ueno
2161d1913b Revert to not ignore errors in gpgverify
Signed-off-by: Daiki Ueno <dueno@redhat.com>
2022-10-18 14:11:46 +00:00
Zoltan Fridrich
2d72c1273b [packit] 3.7.8 upstream release
Upstream tag: 3.7.8
Upstream commit: f527ed0e

Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
2022-10-18 14:25:18 +02:00
Michael Cronenworth
9f78d04c90 Initial MinGW package support
Merge the mingw-gnutls package into the native one.
2022-09-06 15:59:39 -05:00
Daiki Ueno
a64b049712 Port packaging changes from CentOS Stream 9
This adds the following cleanups:
- Conditionalize features with bcond: tpm2, certificate_compression, and tests
- Remove leftover libopts cleanup
- Move autoreconf invocation from %prep to %build, to speed up fedpkg prep
- Switch to using %autosetup -S git
- Ignore errors in gpgverify to work around build under FIPS
- Support FIPS module version

Signed-off-by: Daiki Ueno <dueno@redhat.com>
2022-08-26 21:07:11 +09:00
Zoltan Fridrich
9936110449 [packit] 3.7.7 upstream release
Upstream tag: 3.7.7
Upstream commit: 6231f181

Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
2022-07-29 12:48:05 +02:00
Frantisek Krenzelok
bde9494b1b KTLS supported by default config
KTLS is now supported/included by default.

gnutls-3.7.6-ktls-disabled-by-default.patch:
    KTLS is disabled by default and can be enabled by adding
    `ktls = true` in [global] section of system-wide configuration file.

gnutls-3.7.6-ktls-minor-fixes.patch: minor fixes

Signed-off-by: Frantisek Krenzelok <krenzelok.frantisek@gmail.com>
2022-07-27 14:56:10 +02:00
Fedora Release Engineering
388fbfd381 Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-07-21 07:12:43 +00:00
Daiki Ueno
f9ad674ef4 rebuild with nettle 3.8 for fipshmac 2022-06-22 09:20:12 +09:00
Alexander Sosedkin
eaf4e9d2cd Drop fipscheck build dependency since we use internal tool 2022-06-09 14:15:13 +02:00
Daiki Ueno
4350c1e186 Fix %autorelease usage
The deprecated %autorel has been no-op since rpmautospec 0.2.  Also
put %{?dist} inside the fallback conditional as suggested:
https://packit.dev/docs/faq/#does-packit-work-with-rpmautospec
2022-06-03 16:45:50 +09:00
Zoltan Fridrich
f080bc92ec [packit] 3.7.6 upstream release
Upstream tag: 3.7.6
Upstream commit: 1f8b1ff2

Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
2022-05-27 14:01:14 +02:00
Alexander Sosedkin
960c18ac9e Fix hmac calculation:
* use the new format/location
* do not redefine __spec_install_post which we should not have visibility into,
  instead call it twice, which should be safe
2022-05-18 19:25:53 +02:00
Zoltan Fridrich
b4e5f3f89f [packit] 3.7.5 upstream release
Upstream tag: 3.7.5
Upstream commit: 96ce6ad4

Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
2022-05-17 07:57:16 +02:00
Zoltan Fridrich
c8d9176d27 Add dist tag to release
Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
2022-04-26 11:28:27 +02:00
Zoltan Fridrich
51d4b1440b [packit] 3.7.4 upstream release
Upstream tag: 3.7.4
Upstream commit: c46725bc

Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
2022-04-25 16:54:43 +02:00
Zoltan Fridrich
4ef1497ac4 Adjust macros
Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
2022-04-25 14:04:23 +02:00
Zoltan Fridrich
58cc7dbef0 Use rpmautospec
Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
2022-04-19 15:44:56 +02:00
Zoltan Fridrich
505c517370 Add gpgkey due to packit
Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
2022-04-14 12:20:57 +02:00
Fedora Release Engineering
4b09fb236c - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-01-20 06:53:57 +00:00
Daiki Ueno
2244afa0e8 Update to upstream 3.7.3 release
Signed-off-by: Daiki Ueno <dueno@redhat.com>
2022-01-18 12:09:11 +01:00
Daiki Ueno
beca303c29 Add build-time conditional for GOST cryptography support
Signed-off-by: Daiki Ueno <dueno@redhat.com>
2022-01-18 09:56:26 +01:00
Daiki Ueno
eaa69df8d9 Add build-time conditional for TPM 1.2 support
Signed-off-by: Daiki Ueno <dueno@redhat.com>
2022-01-18 09:56:08 +01:00
Fedora Release Engineering
cb40e7efef - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-07-22 02:30:57 +00:00
Daiki Ueno
64c7d6867d Update to upstream 3.7.2 release 2021-05-29 16:06:11 +02:00
Daiki Ueno
6d9878cbb2 Switch to using %gpgverify macro 2021-03-28 08:59:25 +02:00
Daiki Ueno
0ef0aa89fa Use correct source URL 2021-03-28 08:55:38 +02:00
Daiki Ueno
46d865d845 hobble-gnutls: Remove SRP removal
The SRP patent expired in May 2015 so this doesn't make any sense.

We actually haven't used this hobble-gnutls script since 3.5.12 update
in 2017:
5651d6db31

OpenSSL also does no longer disable it since:
1ff978b22e
2021-03-28 08:55:38 +02:00
Daiki Ueno
c13cb3cf69 libpkcs11mock1.* is not installed anymore 2021-03-28 08:55:38 +02:00
Daiki Ueno
39ffb6cb21 Remove %defattr invocations which are no longer necessary 2021-03-28 08:55:37 +02:00
Daiki Ueno
9bbca443d6 Temporarily restore fipscheck dependency
This seems to be causing self-test failure in FIPS mode:
https://gitlab.com/gnutls/gnutls/-/issues/1191
2021-03-16 08:13:43 +01:00
Daiki Ueno
8841f0c3cb Update to upstream 3.7.1 release
Also remove fipscheck dependency, as it is now calculated with an
internal tool.
2021-03-13 17:29:17 +01:00
Daiki Ueno
9afae358ed Tolerate duplicate certs in the chain also with PKCS #11 trust store 2021-03-05 12:16:43 +01:00
Daiki Ueno
7e113a5794 Reduce BRs for non-bootstrapping build
Also disable guile tweaks if it's not enabled and remove non-existing
build-time options from configure command-line.

Signed-off-by: Daiki Ueno <dueno@redhat.com>
2021-03-02 10:43:00 +01:00
Daiki Ueno
25ae742c52 Tolerate duplicate certs in the chain 2021-02-10 16:42:27 +01:00
Daiki Ueno
07736fd804 Update to 3.7.0 upstream release 2021-02-10 14:16:17 +01:00
Daiki Ueno
868ffea2e1 Fix broken tests on rawhide (#1908110) 2021-01-26 11:26:20 +01:00
Fedora Release Engineering
2a8763ec3a - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-01-26 08:54:44 +00:00
Tom Stellard
0eb271a9f5 Add BuildRequires: make
https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot
2021-01-05 05:13:32 +00:00
Jeff Law
6b130b528a - Re-enable LTO now that upstream GCC bugs have been fixed 2020-09-28 14:57:38 -06:00
Daiki Ueno
0e56ef2311 Port Gnulib test fixes from upstream 2020-09-04 13:13:24 +02:00
Daiki Ueno
655fab0edb Remove unnecessary patches and bootstrapping process 2020-09-04 12:51:12 +02:00
Daiki Ueno
aa2ff1da12 Update to the upstream 3.6.15 release 2020-09-04 12:47:44 +02:00
Jeff Law
f21c1c5adf Disable LTO on ppc64le 2020-08-17 22:15:19 -06:00
Daiki Ueno
edf183f7fd Fix underlinking of libpthread 2020-08-04 09:48:35 +02:00
Fedora Release Engineering
d3626cfa1e - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-08-01 02:26:43 +00:00
Fedora Release Engineering
1ca10e2bd1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-07-27 20:54:30 +00:00