Commit Graph

94 Commits

Author SHA1 Message Date
Daiki Ueno
3651adc006 Switch from hobbling to patching to disable algorithms
Previously, certain algorithms, such as smaller ECC curves, were
"hobbled" using the hobble-nettle script. It is now allowed to include
the algorithm implementation in the source package, though we still
want to disable them at build time.

This patch switches to using a patch-based approach to disable
them. That way, the packaging process is simplified as well as the
integrity of upstream release can be checked using %gpgverify.

Related: RHEL-42424
Signed-off-by: Daiki Ueno <dueno@redhat.com>
2024-08-22 19:40:30 +09:00
Daiki Ueno
1df6156b68 Update to nettle 3.10
Resolves: RHEL-42424
Signed-off-by: Daiki Ueno <dueno@redhat.com>
2024-07-26 13:55:55 +09:00
Troy Dawson
98695c3783 Bump release for June 2024 mass rebuild 2024-06-24 09:04:35 -07:00
Daiki Ueno
c88b4d7a62 Split "fips" bcond into "fipshmac" and "bundle_gmp"
Related: RHEL-39951
Signed-off-by: Daiki Ueno <dueno@redhat.com>
2024-06-20 09:26:11 +09:00
Daiki Ueno
c826d23e28 Update hobble-nettle to disable SM4 again
Related: RHEL-39951
Signed-off-by: Daiki Ueno <dueno@redhat.com>
2024-06-18 10:50:43 +09:00
Daiki Ueno
bf3557e73c Bundle GMP to privatize memory functions
Also zeroize stack allocated intermediate data.

Resolves: RHEL-39951
Signed-off-by: Daiki Ueno <dueno@redhat.com>
2024-06-07 15:55:16 +09:00
Yaakov Selkowitz
c407dead8c Disable HMAC in RHEL 9+
RHEL 9 and later include nettle in the gnutls module boundary, and HMAC
is calculated there with its own tool.
2024-02-15 12:46:26 -05:00
Fedora Release Engineering
551953a4af Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-25 08:53:33 +00:00
Fedora Release Engineering
d8e75e7109 Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-21 09:37:17 +00:00
Daiki Ueno
a4b8c02bfb Migrate License field to SPDX license identifier
Signed-off-by: Daiki Ueno <dueno@redhat.com>
2023-08-24 10:33:37 +09:00
Daiki Ueno
4dcf1f5c18 Opt-in to using rpmautospec
Signed-off-by: Daiki Ueno <dueno@redhat.com>
2023-08-24 10:32:08 +09:00
Fedora Release Engineering
0d3086cfc8 Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-07-20 16:34:57 +00:00
Daiki Ueno
126bc3c15d Update to nettle 3.9.1
Signed-off-by: Daiki Ueno <dueno@redhat.com>
2023-06-05 10:21:18 +02:00
Fedora Release Engineering
c14539180e Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-01-19 21:30:07 +00:00
Alexander Sosedkin
ac4fc51cd0 Enable a gating test to ensure gnutls is rebuilt as part of the update 2022-10-18 14:35:15 +00:00
Fedora Release Engineering
da9593eb38 Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-07-22 00:29:15 +00:00
Daiki Ueno
16e46ef89c Update to 3.8 release 2022-06-03 17:24:40 +09:00
Fedora Release Engineering
e2e54589cb - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-01-20 21:07:15 +00:00
Fedora Release Engineering
24064f9d5b - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-07-22 16:03:13 +00:00
Daiki Ueno
16adbe8079 Update to nettle 3.7.3 2021-06-07 10:07:53 +02:00
Daiki Ueno
bf42c97115 Update to nettle 3.7.2 2021-03-21 11:27:34 +01:00
Daiki Ueno
2cf2f262cf Update to nettle 3.7.1 2021-03-09 16:50:15 +01:00
Daiki Ueno
62e923b52c Update hobble-nettle to match the 3.7.x code base 2021-03-09 16:47:10 +01:00
Daiki Ueno
b460f49614 Port a fix for chacha counter issue on ppc64le 2021-02-10 13:32:28 +01:00
Daiki Ueno
39392331f6 Revert "Temporarily disable chacha_core4 optimization on ppc64le"
This reverts commit 6b7c094bc9, as it
turned out to be incomplete.
2021-02-09 18:42:16 +01:00
Daiki Ueno
6b7c094bc9 Temporarily disable chacha_core4 optimization on ppc64le 2021-02-09 16:24:17 +01:00
Fedora Release Engineering
fb35e87ace - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-01-26 21:26:38 +00:00
Daiki Ueno
7f625e1b8d Update to nettle 3.7 2021-01-11 15:28:12 +01:00
Tom Stellard
f1a57b72c6 Add BuildRequires: make
https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot
2021-01-07 05:43:32 +00:00
Fedora Release Engineering
4e9d4b9dcf - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-07-28 09:04:40 +00:00
Tom Stellard
00bbe8f8d5 Use make macros
https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
2020-07-14 02:06:27 +00:00
Daiki Ueno
5c8a113445 Revert unnecessary filename changes 2020-05-04 08:52:43 +02:00
Daiki Ueno
46b3af2d87 Remove temporary use of quilt 2020-05-04 08:35:05 +02:00
Daiki Ueno
e58cabfb04 Update to nettle 3.6 2020-05-04 08:28:50 +02:00
Fedora Release Engineering
dfd7da3ee3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-01-29 14:52:57 +00:00
Nikos Mavrogiannopoulos
131d280c67 Build without bootstrap option
It is no longer necessary, as f31 was already bootstrapped.
2019-10-31 14:46:23 +01:00
Fedora Release Engineering
d3766f2a51 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-07-25 18:34:28 +00:00
Daiki Ueno
1d839d6a1e Rebuild with bootstrap enabled 2019-07-16 12:47:51 +02:00
Daiki Ueno
522051e4a3 Implement bootstrap logic for so-name bumps 2019-07-16 11:08:24 +02:00
Daiki Ueno
825ca61332 Factor out fipshmac as a macro 2019-07-16 10:43:37 +02:00
Daiki Ueno
e0682aa6e2 Reduce the number of hard-coded so-versions 2019-07-15 17:30:21 +02:00
Nikos Mavrogiannopoulos
9bc33e7913 updated files 2019-07-15 12:56:52 +02:00
Nikos Mavrogiannopoulos
a634a64b65 nettle: updated to 3.5.1 2019-07-15 12:51:54 +02:00
Björn Esser
fb2b558d70
Remove hardcoded gzip suffix from GNU info pages 2019-04-24 14:56:37 +02:00
Fedora Release Engineering
261edd63b4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-02-01 12:15:44 +00:00
Nikos Mavrogiannopoulos
ee57514db6 corrected source 2018-11-30 16:36:34 +01:00
Nikos Mavrogiannopoulos
a7b73eadab updated to 3.4.1rc1 2018-11-30 16:32:18 +01:00
Tomas Mraz
cf301b748b Generate the .hmac checksums unless --without fips is used 2018-10-16 16:59:32 +02:00
Tomas Mraz
5b3470bb56 Cover the gaps in annotation coverage for assembler sources 2018-10-16 15:47:18 +02:00
leigh123linux
c1b29e1184 update libary versions used for fips 2018-08-31 11:22:32 +01:00