Commit Graph

83 Commits

Author SHA1 Message Date
Daiki Ueno
3651adc006 Switch from hobbling to patching to disable algorithms
Previously, certain algorithms, such as smaller ECC curves, were
"hobbled" using the hobble-nettle script. It is now allowed to include
the algorithm implementation in the source package, though we still
want to disable them at build time.

This patch switches to using a patch-based approach to disable
them. That way, the packaging process is simplified as well as the
integrity of upstream release can be checked using %gpgverify.

Related: RHEL-42424
Signed-off-by: Daiki Ueno <dueno@redhat.com>
2024-08-22 19:40:30 +09:00
Daiki Ueno
1df6156b68 Update to nettle 3.10
Resolves: RHEL-42424
Signed-off-by: Daiki Ueno <dueno@redhat.com>
2024-07-26 13:55:55 +09:00
Daiki Ueno
c88b4d7a62 Split "fips" bcond into "fipshmac" and "bundle_gmp"
Related: RHEL-39951
Signed-off-by: Daiki Ueno <dueno@redhat.com>
2024-06-20 09:26:11 +09:00
Daiki Ueno
bf3557e73c Bundle GMP to privatize memory functions
Also zeroize stack allocated intermediate data.

Resolves: RHEL-39951
Signed-off-by: Daiki Ueno <dueno@redhat.com>
2024-06-07 15:55:16 +09:00
Yaakov Selkowitz
c407dead8c Disable HMAC in RHEL 9+
RHEL 9 and later include nettle in the gnutls module boundary, and HMAC
is calculated there with its own tool.
2024-02-15 12:46:26 -05:00
Daiki Ueno
a4b8c02bfb Migrate License field to SPDX license identifier
Signed-off-by: Daiki Ueno <dueno@redhat.com>
2023-08-24 10:33:37 +09:00
Daiki Ueno
4dcf1f5c18 Opt-in to using rpmautospec
Signed-off-by: Daiki Ueno <dueno@redhat.com>
2023-08-24 10:32:08 +09:00
Fedora Release Engineering
0d3086cfc8 Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-07-20 16:34:57 +00:00
Daiki Ueno
126bc3c15d Update to nettle 3.9.1
Signed-off-by: Daiki Ueno <dueno@redhat.com>
2023-06-05 10:21:18 +02:00
Fedora Release Engineering
c14539180e Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-01-19 21:30:07 +00:00
Fedora Release Engineering
da9593eb38 Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-07-22 00:29:15 +00:00
Daiki Ueno
16e46ef89c Update to 3.8 release 2022-06-03 17:24:40 +09:00
Fedora Release Engineering
e2e54589cb - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-01-20 21:07:15 +00:00
Fedora Release Engineering
24064f9d5b - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-07-22 16:03:13 +00:00
Daiki Ueno
16adbe8079 Update to nettle 3.7.3 2021-06-07 10:07:53 +02:00
Daiki Ueno
bf42c97115 Update to nettle 3.7.2 2021-03-21 11:27:34 +01:00
Daiki Ueno
2cf2f262cf Update to nettle 3.7.1 2021-03-09 16:50:15 +01:00
Daiki Ueno
b460f49614 Port a fix for chacha counter issue on ppc64le 2021-02-10 13:32:28 +01:00
Daiki Ueno
39392331f6 Revert "Temporarily disable chacha_core4 optimization on ppc64le"
This reverts commit 6b7c094bc9, as it
turned out to be incomplete.
2021-02-09 18:42:16 +01:00
Daiki Ueno
6b7c094bc9 Temporarily disable chacha_core4 optimization on ppc64le 2021-02-09 16:24:17 +01:00
Fedora Release Engineering
fb35e87ace - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-01-26 21:26:38 +00:00
Daiki Ueno
7f625e1b8d Update to nettle 3.7 2021-01-11 15:28:12 +01:00
Tom Stellard
f1a57b72c6 Add BuildRequires: make
https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot
2021-01-07 05:43:32 +00:00
Fedora Release Engineering
4e9d4b9dcf - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-07-28 09:04:40 +00:00
Tom Stellard
00bbe8f8d5 Use make macros
https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
2020-07-14 02:06:27 +00:00
Daiki Ueno
5c8a113445 Revert unnecessary filename changes 2020-05-04 08:52:43 +02:00
Daiki Ueno
46b3af2d87 Remove temporary use of quilt 2020-05-04 08:35:05 +02:00
Daiki Ueno
e58cabfb04 Update to nettle 3.6 2020-05-04 08:28:50 +02:00
Fedora Release Engineering
dfd7da3ee3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-01-29 14:52:57 +00:00
Nikos Mavrogiannopoulos
131d280c67 Build without bootstrap option
It is no longer necessary, as f31 was already bootstrapped.
2019-10-31 14:46:23 +01:00
Fedora Release Engineering
d3766f2a51 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-07-25 18:34:28 +00:00
Daiki Ueno
1d839d6a1e Rebuild with bootstrap enabled 2019-07-16 12:47:51 +02:00
Daiki Ueno
522051e4a3 Implement bootstrap logic for so-name bumps 2019-07-16 11:08:24 +02:00
Daiki Ueno
825ca61332 Factor out fipshmac as a macro 2019-07-16 10:43:37 +02:00
Daiki Ueno
e0682aa6e2 Reduce the number of hard-coded so-versions 2019-07-15 17:30:21 +02:00
Nikos Mavrogiannopoulos
a634a64b65 nettle: updated to 3.5.1 2019-07-15 12:51:54 +02:00
Björn Esser
fb2b558d70
Remove hardcoded gzip suffix from GNU info pages 2019-04-24 14:56:37 +02:00
Fedora Release Engineering
261edd63b4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-02-01 12:15:44 +00:00
Nikos Mavrogiannopoulos
a7b73eadab updated to 3.4.1rc1 2018-11-30 16:32:18 +01:00
Tomas Mraz
cf301b748b Generate the .hmac checksums unless --without fips is used 2018-10-16 16:59:32 +02:00
Tomas Mraz
5b3470bb56 Cover the gaps in annotation coverage for assembler sources 2018-10-16 15:47:18 +02:00
leigh123linux
c1b29e1184 update libary versions used for fips 2018-08-31 11:22:32 +01:00
Igor Gnatenko
201c3be05b
Replace obsolete scriptlets
Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-07-28 10:22:44 +02:00
Peter Robinson
233a840780 Require gcc, drop groups 2018-07-23 13:33:43 +01:00
Fedora Release Engineering
70fcc3c1f8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-07-13 11:32:55 +00:00
Nikos Mavrogiannopoulos
0ea54a27fc introduced hmac files used in gnutls' fips mode 2018-03-09 09:59:26 +01:00
Fedora Release Engineering
14a769ddf3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-02-08 04:06:47 +00:00
Nikos Mavrogiannopoulos
2fb41d1329 updated to nettle 3.4 2017-11-20 09:09:13 +01:00
Nikos Mavrogiannopoulos
2ec204e2de Removed executables from the library to allow parallel lib installation
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
2017-08-09 15:25:04 +02:00
Fedora Release Engineering
ee36886bc2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild 2017-08-03 03:55:47 +00:00