rpms/gnutls
7
0
Fork 0
Code Issues Pull Requests Releases Activity
381 Commits 7 Branches 47 Tags 1.1 MiB
7543c5d148
Commit Graph

381 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Daiki Ueno
7543c5d148 [packit] 3.8.2 upstream release 
Upstream tag: 3.8.2
Upstream commit: e840a07f
 2023-11-22 15:23:57 +09:00
Daiki Ueno
5e97cebf83 Remove patches no longer needed in 3.8.2 
Also use XFAIL_TESTS envvar to skip ktls_keyupdate.sh, instead of
patching the source code.

Signed-off-by: Daiki Ueno <dueno@redhat.com>
 2023-11-22 14:41:15 +09:00
Daiki Ueno
d7d09eb023 Skip KTLS test if the host kernel is older than 5.11 
The ktls.sh test currently only supports kernel 5.11+.  This needs to
be checked at run time, as the koji builder might be using a different
version of kernel on the host than the one indicated by the
kernel-devel package.

Resolves: #2247135
Signed-off-by: Daiki Ueno <dueno@redhat.com>
 2023-11-10 05:39:53 +09:00
Stephen Gallagher
a4ef955090 Don't build with SRP on RHEL 
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
 2023-08-29 09:39:14 -04:00
Zoltan Fridrich
a0ef9addb1 [packit] 3.8.1 upstream release 
Upstream tag: 3.8.1
Upstream commit: 513570a5
 2023-08-25 14:06:59 +02:00
Daiki Ueno
44afab5191 Migrate License field to SPDX license identifier 
Signed-off-by: Daiki Ueno <dueno@redhat.com>
 2023-08-24 10:19:38 +09:00
Fedora Release Engineering
e4e388800c Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2023-07-19 23:57:26 +00:00
Peter Leitmann
2f8c73c631 Add TMT interop tests 2023-05-23 14:27:14 +00:00
Daiki Ueno
6a9f55ef66 Fix leftover of the previous %bcond change 
Signed-off-by: Daiki Ueno <dueno@redhat.com>
 2023-04-13 20:09:49 +09:00
Daiki Ueno
82e473e933 Use %bcond instead of %global for srp and mingw support 
This makes it possible to build the package with/without those
features, through rpmbuild --with/--without.

Signed-off-by: Daiki Ueno <dueno@redhat.com>
 2023-04-11 19:38:39 +09:00
Richard W.M. Jones
e99bcaff78 Fix desychronisation with kTLS: 
https://gitlab.com/gnutls/gnutls/-/issues/1470
 2023-03-11 07:32:46 +00:00
Daniel P. Berrangé
e361bb292d Disable GNULIB's year2038 support for 64-bit time_t 
GNUTLS exposes time_t in its public API and thus the size of time_t
is ABI relevant. It can't be changed in size without breaking
ABI compatibility with applications built against GNUTLS that use
the default time_t size.

https://gitlab.com/gnutls/gnutls/-/issues/1466
https://bugzilla.redhat.com/show_bug.cgi?id=2174758
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
 2023-03-02 11:53:34 +00:00
Zoltan Fridrich
b08c1d3cb5 [packit] 3.8.0 upstream release 
Upstream tag: 3.8.0
Upstream commit: 516e466b

Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
 2023-02-16 11:14:30 +01:00
Zoltan Fridrich
9df43c9df7 Prepare for release 
Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
 2023-02-14 15:01:58 +01:00
Frantisek Krenzelok
a9d1c50f1a
KTLS: disable ktls_keyupdate & tls1.2 chachapoly tests 
There seems to be a kernel specific issues with CHACHA20-POLY1305 for
TLS 1.2 [1]

The test fails without a needed kernel patch

[1] https://gitlab.com/gnutls/gnutls/-/issues/1443

Signed-off-by: Frantisek Krenzelok <krenzelok.frantisek@gmail.com>
 2023-01-20 21:55:56 +01:00
Frantisek Krenzelok
c1f8e66db2
KTLS additional ciphersuites 
Key update supported for patched kernels [1]

Configuration option `ktls = false` [2]

following ciphersuites are now supported: [3]
* TLS_AES_128_CCM_SHA256
* TLS_CHACHA20_POLY1305_SHA256

Ivalidate session on KTLS error as there is no way to recover and new
sockets as well as session have to be created. [4]

[1] https://gitlab.com/gnutls/gnutls/-/merge_requests/1625
[2] https://gitlab.com/gnutls/gnutls/-/merge_requests/1673/diffs?commit_id=aefd7319c0b7b2410d06238246b7755b289e4837
[3] https://gitlab.com/gnutls/gnutls/-/merge_requests/1676
[4] https://gitlab.com/gnutls/gnutls/-/merge_requests/1664

Signed-off-by: Frantisek Krenzelok <krenzelok.frantisek@gmail.com>
 2023-01-20 19:17:15 +01:00
Fedora Release Engineering
d401f95817 Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2023-01-19 05:48:39 +00:00
Frantisek Krenzelok
0596993205
gcc-analyzer: suppress warnings 
gcc analyzer causes issues in CI, this commit from upstream should fix it

Signed-off-by: Frantisek Krenzelok <krenzelok.frantisek@gmail.com>
 2022-12-14 14:15:49 +01:00
Daniel P. Berrangé
5aa020da73 Cross-compiled mingw sub-RPMs should be 'noarch' 
Their contents should be identical (bar timestamps) regardless of which
host build arch is used, since we're cross compiling.

Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
 2022-10-27 16:52:20 +01:00
Zoltan Fridrich
ccfb815fcf Add conditions for mingw 
Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
 2022-10-19 10:23:40 +02:00
Michael Cronenworth
cbaa7ad9b2 Merge branch 'mingw-merge' of ssh://pkgs.fedoraproject.org/forks/mooninite/rpms/gnutls into mingw-merge 
# Conflicts:
#	gnutls.spec
 2022-10-18 11:18:34 -05:00
Michael Cronenworth
86c02ce9dc Initial MinGW package support 
Merge the mingw-gnutls package into the native one.
 2022-10-18 11:16:48 -05:00
Zoltan Fridrich
9ba1f58c0f Use make macros 
Co-authored-by: Tom Stellard <tstellar@redhat.com>
Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
 2022-10-18 15:39:06 +00:00
Zoltan Fridrich
8f2a1d9b48 Merge #59 Update release keyring 2022-10-18 15:34:57 +00:00
Zoltan Fridrich
30a64d9273 Update release keyring 
Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
 2022-10-18 17:12:26 +02:00
Anderson Toshiyuki Sasaki
b9c750507f Enable gating and add FIPS smoke test 2022-10-18 14:30:24 +00:00
Daiki Ueno
2161d1913b Revert to not ignore errors in gpgverify 
Signed-off-by: Daiki Ueno <dueno@redhat.com>
 2022-10-18 14:11:46 +00:00
Zoltan Fridrich
2d72c1273b [packit] 3.7.8 upstream release 
Upstream tag: 3.7.8
Upstream commit: f527ed0e

Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
 2022-10-18 14:25:18 +02:00
Michael Cronenworth
9f78d04c90 Initial MinGW package support 
Merge the mingw-gnutls package into the native one.
 2022-09-06 15:59:39 -05:00
Daiki Ueno
a64b049712 Port packaging changes from CentOS Stream 9 
This adds the following cleanups:
- Conditionalize features with bcond: tpm2, certificate_compression, and tests
- Remove leftover libopts cleanup
- Move autoreconf invocation from %prep to %build, to speed up fedpkg prep
- Switch to using %autosetup -S git
- Ignore errors in gpgverify to work around build under FIPS
- Support FIPS module version

Signed-off-by: Daiki Ueno <dueno@redhat.com>
 2022-08-26 21:07:11 +09:00
Zoltan Fridrich
9936110449 [packit] 3.7.7 upstream release 
Upstream tag: 3.7.7
Upstream commit: 6231f181

Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
 2022-07-29 12:48:05 +02:00
Frantisek Krenzelok
bde9494b1b KTLS supported by default config 
KTLS is now supported/included by default.

gnutls-3.7.6-ktls-disabled-by-default.patch:
    KTLS is disabled by default and can be enabled by adding
    `ktls = true` in [global] section of system-wide configuration file.

gnutls-3.7.6-ktls-minor-fixes.patch: minor fixes

Signed-off-by: Frantisek Krenzelok <krenzelok.frantisek@gmail.com>
 2022-07-27 14:56:10 +02:00
Fedora Release Engineering
388fbfd381 Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2022-07-21 07:12:43 +00:00
Daiki Ueno
f9ad674ef4 rebuild with nettle 3.8 for fipshmac 2022-06-22 09:20:12 +09:00
Alexander Sosedkin
eaf4e9d2cd Drop fipscheck build dependency since we use internal tool 2022-06-09 14:15:13 +02:00
Daiki Ueno
4350c1e186 Fix %autorelease usage 
The deprecated %autorel has been no-op since rpmautospec 0.2.  Also
put %{?dist} inside the fallback conditional as suggested:
https://packit.dev/docs/faq/#does-packit-work-with-rpmautospec
 2022-06-03 16:45:50 +09:00
Zoltan Fridrich
f080bc92ec [packit] 3.7.6 upstream release 
Upstream tag: 3.7.6
Upstream commit: 1f8b1ff2

Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
 2022-05-27 14:01:14 +02:00
Alexander Sosedkin
960c18ac9e Fix hmac calculation: 
* use the new format/location
* do not redefine __spec_install_post which we should not have visibility into,
  instead call it twice, which should be safe
 2022-05-18 19:25:53 +02:00
Zoltan Fridrich
b4e5f3f89f [packit] 3.7.5 upstream release 
Upstream tag: 3.7.5
Upstream commit: 96ce6ad4

Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
 2022-05-17 07:57:16 +02:00
Zoltan Fridrich
c8d9176d27 Add dist tag to release 
Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
 2022-04-26 11:28:27 +02:00
Zoltan Fridrich
51d4b1440b [packit] 3.7.4 upstream release 
Upstream tag: 3.7.4
Upstream commit: c46725bc

Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
 2022-04-25 16:54:43 +02:00
Zoltan Fridrich
4ef1497ac4 Adjust macros 
Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
 2022-04-25 14:04:23 +02:00
Zoltan Fridrich
58cc7dbef0 Use rpmautospec 
Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
 2022-04-19 15:44:56 +02:00
Zoltan Fridrich
505c517370 Add gpgkey due to packit 
Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
 2022-04-14 12:20:57 +02:00
Fedora Release Engineering
4b09fb236c - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2022-01-20 06:53:57 +00:00
Daiki Ueno
2244afa0e8 Update to upstream 3.7.3 release 
Signed-off-by: Daiki Ueno <dueno@redhat.com>
 2022-01-18 12:09:11 +01:00
Daiki Ueno
beca303c29 Add build-time conditional for GOST cryptography support 
Signed-off-by: Daiki Ueno <dueno@redhat.com>
 2022-01-18 09:56:26 +01:00
Daiki Ueno
eaa69df8d9 Add build-time conditional for TPM 1.2 support 
Signed-off-by: Daiki Ueno <dueno@redhat.com>
 2022-01-18 09:56:08 +01:00
Fedora Release Engineering
cb40e7efef - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2021-07-22 02:30:57 +00:00
Daiki Ueno
64c7d6867d Update to upstream 3.7.2 release 2021-05-29 16:06:11 +02:00