Commit Graph

308 Commits

Author SHA1 Message Date
Daiki Ueno
46d865d845 hobble-gnutls: Remove SRP removal
The SRP patent expired in May 2015 so this doesn't make any sense.

We actually haven't used this hobble-gnutls script since 3.5.12 update
in 2017:
5651d6db31

OpenSSL also does no longer disable it since:
1ff978b22e
2021-03-28 08:55:38 +02:00
Daiki Ueno
c13cb3cf69 libpkcs11mock1.* is not installed anymore 2021-03-28 08:55:38 +02:00
Daiki Ueno
39ffb6cb21 Remove %defattr invocations which are no longer necessary 2021-03-28 08:55:37 +02:00
Daiki Ueno
9bbca443d6 Temporarily restore fipscheck dependency
This seems to be causing self-test failure in FIPS mode:
https://gitlab.com/gnutls/gnutls/-/issues/1191
2021-03-16 08:13:43 +01:00
Daiki Ueno
8841f0c3cb Update to upstream 3.7.1 release
Also remove fipscheck dependency, as it is now calculated with an
internal tool.
2021-03-13 17:29:17 +01:00
Daiki Ueno
9afae358ed Tolerate duplicate certs in the chain also with PKCS #11 trust store 2021-03-05 12:16:43 +01:00
Daiki Ueno
7e113a5794 Reduce BRs for non-bootstrapping build
Also disable guile tweaks if it's not enabled and remove non-existing
build-time options from configure command-line.

Signed-off-by: Daiki Ueno <dueno@redhat.com>
2021-03-02 10:43:00 +01:00
Daiki Ueno
25ae742c52 Tolerate duplicate certs in the chain 2021-02-10 16:42:27 +01:00
Daiki Ueno
07736fd804 Update to 3.7.0 upstream release 2021-02-10 14:16:17 +01:00
Daiki Ueno
868ffea2e1 Fix broken tests on rawhide (#1908110) 2021-01-26 11:26:20 +01:00
Fedora Release Engineering
2a8763ec3a - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-01-26 08:54:44 +00:00
Tom Stellard
0eb271a9f5 Add BuildRequires: make
https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot
2021-01-05 05:13:32 +00:00
Jeff Law
6b130b528a - Re-enable LTO now that upstream GCC bugs have been fixed 2020-09-28 14:57:38 -06:00
Daiki Ueno
0e56ef2311 Port Gnulib test fixes from upstream 2020-09-04 13:13:24 +02:00
Daiki Ueno
655fab0edb Remove unnecessary patches and bootstrapping process 2020-09-04 12:51:12 +02:00
Daiki Ueno
aa2ff1da12 Update to the upstream 3.6.15 release 2020-09-04 12:47:44 +02:00
Jeff Law
f21c1c5adf Disable LTO on ppc64le 2020-08-17 22:15:19 -06:00
Daiki Ueno
edf183f7fd Fix underlinking of libpthread 2020-08-04 09:48:35 +02:00
Fedora Release Engineering
d3626cfa1e - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-08-01 02:26:43 +00:00
Fedora Release Engineering
1ca10e2bd1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-07-27 20:54:30 +00:00
Anderson Toshiyuki Sasaki
981ebf78f1 Rebuild with autogen built with guile-2.2
Resolves: #1852706
2020-07-02 18:32:46 +02:00
Anderson Toshiyuki Sasaki
62fe4ffb98 Fix automatic libraries soname detection
Previously, the automatic soname detection were failing when the
-Wl,--as-needed option was provided in LDFLAGS, which lead the FIPS
self-tests to fail.
2020-06-10 10:27:57 +02:00
Anderson Toshiyuki Sasaki
7ed5f7db0d Fix memory leak when serializing iovec_t
Resolves: #1845083
2020-06-09 18:09:11 +02:00
Daiki Ueno
79aed5310b Add missing changelog entry 2020-06-04 08:53:10 +02:00
Daiki Ueno
86e1a47129 Update to 3.6.14-1. 2020-06-04 08:11:47 +02:00
Daiki Ueno
230640c591 Update gnutls-3.6.13-superseding-chain.patch 2020-05-31 15:39:54 +02:00
Daiki Ueno
ff6457e1d1 Fix cert chain validation behavior if the last cert has expired (#1842178) 2020-05-31 15:04:20 +02:00
Anderson Toshiyuki Sasaki
bff55b411b Add option to gnutls-cli to wait for resumption under TLS 1.3 2020-05-25 15:05:15 +02:00
Anderson Toshiyuki Sasaki
f2ea860ff5 Disable RSA blinding during FIPS self-tests
Related: rhbz#1835265
2020-05-20 11:04:36 +02:00
Anderson Toshiyuki Sasaki
5de0851cf9 Bump linked libs soname to fix FIPS self-tests
Resolves: rhbz#1835265
2020-05-14 10:59:56 +02:00
Daiki Ueno
39036e4f9a Update to 3.6.13-1
- Update to upstream 3.6.13 release
2020-03-31 09:46:45 +02:00
Anderson Toshiyuki Sasaki
56cb0e447f Fix FIPS-140 power-on self-tests
Backport upstream FIPS-140 power-on self-tests changes.  This addresses
the bug bz#1813384.  This also includes a backport of a small fix to the
gnutls-serv application to address the issue reported in rhbz#1816583.

Resolves: #1813384, #1816583
2020-03-26 15:29:23 +01:00
Nikos Mavrogiannopoulos
ac40af60b7 Update to 3.6.12-1
- Update to upstream 3.6.12 release
2020-02-02 00:15:25 +01:00
Fedora Release Engineering
ecbe15cd95 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-01-28 23:08:31 +00:00
Nikos Mavrogiannopoulos
682cf5e888 Update to 3.6.11-1
- Update to upstream 3.6.11 release
2019-12-02 08:20:01 +01:00
Nikos Mavrogiannopoulos
3bdec56a8d override the system-wide priority file 2019-12-02 08:05:30 +01:00
Nikos Mavrogiannopoulos
4a8901f676 Update to 3.6.10-1
- Update to upstream 3.6.10 release
2019-09-29 21:00:47 +02:00
Nikos Mavrogiannopoulos
2148134f1b Update to 3.6.9-1
- Update to upstream 3.6.9 release
2019-07-26 21:24:23 +02:00
Fedora Release Engineering
064127eab7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-07-25 04:31:20 +00:00
Daiki Ueno
863812f9e4 Fix build with guile22 2019-07-16 14:15:18 +02:00
Daiki Ueno
036bfab64d Bump nettle-devel BR to 3.5.1 2019-07-16 13:06:24 +02:00
Daiki Ueno
74354b86d5 Revert "Temporarily disable gpg key checking for updating nettle"
This reverts commit e17630f891.
It turned out this doesn't help.
2019-07-15 15:06:03 +02:00
Daiki Ueno
e17630f891 Temporarily disable gpg key checking for updating nettle 2019-07-15 14:37:50 +02:00
Nikos Mavrogiannopoulos
e8f6e10f11 Depend on guile 2.2
guile22 seems to be present in all f30 builds, so do not bring
an earlier version just for gnutls.
2019-07-15 14:22:04 +02:00
Nikos Mavrogiannopoulos
81c75ab2a8 updated to 3.6.8
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
2019-05-28 16:38:16 +02:00
Anderson Toshiyuki Sasaki
06571b6b92 Update to 3.6.7
- Fixed CVE-2019-3836 (#1693214)
- Fixed CVE-2019-3829 (#1693210)

Signed-off-by: Anderson Toshiyuki Sasaki <ansasaki@redhat.com>
2019-03-27 13:37:48 +01:00
Nikos Mavrogiannopoulos
35567a4b6a updated to 3.6.6
This brings an additional patch from master to allow compiling with guile 2.0

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
2019-02-01 17:48:30 +01:00
Fedora Release Engineering
59d63485ad - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-01-31 23:30:24 +00:00
Igor Gnatenko
c60309b751 Remove obsolete Group tag
References: https://fedoraproject.org/wiki/Changes/Remove_Group_Tag
2019-01-28 20:24:05 +01:00
Igor Gnatenko
3e17b200c8
Remove obsolete scriptlets
References: https://fedoraproject.org/wiki/Changes/RemoveObsoleteScriptlets
Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2019-01-27 19:01:11 +01:00