Commit Graph

329 Commits

Author SHA1 Message Date
Daiki Ueno
46d865d845 hobble-gnutls: Remove SRP removal
The SRP patent expired in May 2015 so this doesn't make any sense.

We actually haven't used this hobble-gnutls script since 3.5.12 update
in 2017:
5651d6db31

OpenSSL also does no longer disable it since:
1ff978b22e
2021-03-28 08:55:38 +02:00
Daiki Ueno
c13cb3cf69 libpkcs11mock1.* is not installed anymore 2021-03-28 08:55:38 +02:00
Daiki Ueno
39ffb6cb21 Remove %defattr invocations which are no longer necessary 2021-03-28 08:55:37 +02:00
Daiki Ueno
9bbca443d6 Temporarily restore fipscheck dependency
This seems to be causing self-test failure in FIPS mode:
https://gitlab.com/gnutls/gnutls/-/issues/1191
2021-03-16 08:13:43 +01:00
Daiki Ueno
8841f0c3cb Update to upstream 3.7.1 release
Also remove fipscheck dependency, as it is now calculated with an
internal tool.
2021-03-13 17:29:17 +01:00
Daiki Ueno
9afae358ed Tolerate duplicate certs in the chain also with PKCS #11 trust store 2021-03-05 12:16:43 +01:00
Daiki Ueno
7e113a5794 Reduce BRs for non-bootstrapping build
Also disable guile tweaks if it's not enabled and remove non-existing
build-time options from configure command-line.

Signed-off-by: Daiki Ueno <dueno@redhat.com>
2021-03-02 10:43:00 +01:00
Daiki Ueno
25ae742c52 Tolerate duplicate certs in the chain 2021-02-10 16:42:27 +01:00
Daiki Ueno
07736fd804 Update to 3.7.0 upstream release 2021-02-10 14:16:17 +01:00
Daiki Ueno
868ffea2e1 Fix broken tests on rawhide (#1908110) 2021-01-26 11:26:20 +01:00
Fedora Release Engineering
2a8763ec3a - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-01-26 08:54:44 +00:00
Tom Stellard
0eb271a9f5 Add BuildRequires: make
https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot
2021-01-05 05:13:32 +00:00
Jeff Law
6b130b528a - Re-enable LTO now that upstream GCC bugs have been fixed 2020-09-28 14:57:38 -06:00
Daiki Ueno
0e56ef2311 Port Gnulib test fixes from upstream 2020-09-04 13:13:24 +02:00
Daiki Ueno
655fab0edb Remove unnecessary patches and bootstrapping process 2020-09-04 12:51:12 +02:00
Daiki Ueno
aa2ff1da12 Update to the upstream 3.6.15 release 2020-09-04 12:47:44 +02:00
Jeff Law
f21c1c5adf Disable LTO on ppc64le 2020-08-17 22:15:19 -06:00
Daiki Ueno
edf183f7fd Fix underlinking of libpthread 2020-08-04 09:48:35 +02:00
Fedora Release Engineering
d3626cfa1e - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-08-01 02:26:43 +00:00
Fedora Release Engineering
1ca10e2bd1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-07-27 20:54:30 +00:00
Anderson Toshiyuki Sasaki
981ebf78f1 Rebuild with autogen built with guile-2.2
Resolves: #1852706
2020-07-02 18:32:46 +02:00
Anderson Toshiyuki Sasaki
62fe4ffb98 Fix automatic libraries soname detection
Previously, the automatic soname detection were failing when the
-Wl,--as-needed option was provided in LDFLAGS, which lead the FIPS
self-tests to fail.
2020-06-10 10:27:57 +02:00
Anderson Toshiyuki Sasaki
7ed5f7db0d Fix memory leak when serializing iovec_t
Resolves: #1845083
2020-06-09 18:09:11 +02:00
Daiki Ueno
79aed5310b Add missing changelog entry 2020-06-04 08:53:10 +02:00
Daiki Ueno
86e1a47129 Update to 3.6.14-1. 2020-06-04 08:11:47 +02:00
Daiki Ueno
230640c591 Update gnutls-3.6.13-superseding-chain.patch 2020-05-31 15:39:54 +02:00
Daiki Ueno
ff6457e1d1 Fix cert chain validation behavior if the last cert has expired (#1842178) 2020-05-31 15:04:20 +02:00
Anderson Toshiyuki Sasaki
bff55b411b Add option to gnutls-cli to wait for resumption under TLS 1.3 2020-05-25 15:05:15 +02:00
Anderson Toshiyuki Sasaki
f2ea860ff5 Disable RSA blinding during FIPS self-tests
Related: rhbz#1835265
2020-05-20 11:04:36 +02:00
Anderson Toshiyuki Sasaki
5de0851cf9 Bump linked libs soname to fix FIPS self-tests
Resolves: rhbz#1835265
2020-05-14 10:59:56 +02:00
Anderson Toshiyuki Sasaki
fbf404e4b2 Remove gpg key from sources 2020-05-13 16:32:58 +02:00
Daiki Ueno
39036e4f9a Update to 3.6.13-1
- Update to upstream 3.6.13 release
2020-03-31 09:46:45 +02:00
Anderson Toshiyuki Sasaki
56cb0e447f Fix FIPS-140 power-on self-tests
Backport upstream FIPS-140 power-on self-tests changes.  This addresses
the bug bz#1813384.  This also includes a backport of a small fix to the
gnutls-serv application to address the issue reported in rhbz#1816583.

Resolves: #1813384, #1816583
2020-03-26 15:29:23 +01:00
Daiki Ueno
68018f33be Remove gpgkey file from sources
The line in the sources file causing conflict with "fedpkg local" as
the gpgkey file is already tracked in the git repository.
2020-03-25 14:08:08 +01:00
Nikos Mavrogiannopoulos
ac40af60b7 Update to 3.6.12-1
- Update to upstream 3.6.12 release
2020-02-02 00:15:25 +01:00
Fedora Release Engineering
ecbe15cd95 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-01-28 23:08:31 +00:00
Nikos Mavrogiannopoulos
682cf5e888 Update to 3.6.11-1
- Update to upstream 3.6.11 release
2019-12-02 08:20:01 +01:00
Nikos Mavrogiannopoulos
3bdec56a8d override the system-wide priority file 2019-12-02 08:05:30 +01:00
Nikos Mavrogiannopoulos
4a8901f676 Update to 3.6.10-1
- Update to upstream 3.6.10 release
2019-09-29 21:00:47 +02:00
Nikos Mavrogiannopoulos
2148134f1b Update to 3.6.9-1
- Update to upstream 3.6.9 release
2019-07-26 21:24:23 +02:00
Fedora Release Engineering
064127eab7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-07-25 04:31:20 +00:00
Daiki Ueno
863812f9e4 Fix build with guile22 2019-07-16 14:15:18 +02:00
Daiki Ueno
036bfab64d Bump nettle-devel BR to 3.5.1 2019-07-16 13:06:24 +02:00
Daiki Ueno
74354b86d5 Revert "Temporarily disable gpg key checking for updating nettle"
This reverts commit e17630f891.
It turned out this doesn't help.
2019-07-15 15:06:03 +02:00
Daiki Ueno
e17630f891 Temporarily disable gpg key checking for updating nettle 2019-07-15 14:37:50 +02:00
Nikos Mavrogiannopoulos
e8f6e10f11 Depend on guile 2.2
guile22 seems to be present in all f30 builds, so do not bring
an earlier version just for gnutls.
2019-07-15 14:22:04 +02:00
Nikos Mavrogiannopoulos
81c75ab2a8 updated to 3.6.8
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
2019-05-28 16:38:16 +02:00
Anderson Toshiyuki Sasaki
06571b6b92 Update to 3.6.7
- Fixed CVE-2019-3836 (#1693214)
- Fixed CVE-2019-3829 (#1693210)

Signed-off-by: Anderson Toshiyuki Sasaki <ansasaki@redhat.com>
2019-03-27 13:37:48 +01:00
Nikos Mavrogiannopoulos
35567a4b6a updated to 3.6.6
This brings an additional patch from master to allow compiling with guile 2.0

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
2019-02-01 17:48:30 +01:00
Fedora Release Engineering
59d63485ad - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-01-31 23:30:24 +00:00