kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Update to 3.2.9 based on patch from Richard Palo.

Browse source 
Assembler issues still seem to be there at least on SunOS.

* Version 3.2.9 (released 2014-01-24)

** libgnutls: The %DUMBFW option in priority string only
appends data to client hello if the expected size is in the
"black hole" range.

** libgnutls: %COMPAT implies %DUMBFW.

** libgnutls: gnutls_session_get_desc() returns a more compact
ciphersuite description.

* libgnutls: In PKCS #11 allow deleting multiple non-certificate data.

** libgnutls: When a PKCS #11 trust store is specified (e.g. using the
configure option --with-default-trust-store-pkcs11), then the PKCS #11
token is used on demand to obtain the trusted anchors, rather than
preloading all trusted certificates. That delegates CA certificate management
and blacklist checking to the PKCS #11 module.

** libgnutls: When a PKCS #11 trust store is specified in configure option
or in gnutls_x509_trust_list_add_trust_file(), then the module is used
to obtain the verification anchors and any required blacklists as in
http://p11-glue.freedesktop.org/doc/storing-trust-policy/storing-trust-pkcs11.html

** libgnutls: Fix in OCSP certificate status extension handling
in non-blocking servers. Patch by Nils Maier.

** p11tool: Added --so-login option to force login as security
officer (admin).

** API and ABI modifications:
No changes since last version.
This commit is contained in:
wiz 2014-01-25 10:59:22 +00:00
parent 7a02cdc860
commit 34bc3e3caa
2 changed files with 7 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
security/gnutls/Makefile
View file

@ -1,6 +1,6 @@
# $NetBSD: Makefile,v 1.139 2014/01/21 12:13:16 jperkin Exp $
# $NetBSD: Makefile,v 1.140 2014/01/25 10:59:22 wiz Exp $
DISTNAME= gnutls-3.2.8.1
DISTNAME= gnutls-3.2.9
CATEGORIES= security devel
MASTER_SITES= ftp://ftp.gnutls.org/gcrypt/gnutls/v3.2/
EXTRACT_SUFX= .tar.xz
@ -21,12 +21,10 @@ CONFIGURE_ARGS+= --without-p11-kit
# this library duplicates (and conflicts with) openssl
CONFIGURE_ARGS+= --disable-openssl-compatibility
CONFIGURE_ARGS+= --disable-guile
CONFIGURE_ARGS+= --disable-libdane
CONFIGURE_ARGS+= --without-tpm
CONFIGURE_ARGS+= AUTOGEN=/bin/true
# 3.2.8.1 didn't get a new directory name
WRKSRC= ${WRKDIR}/gnutls-3.2.8
TEST_TARGET= check
INFO_FILES= yes

8
security/gnutls/distinfo
View file

@ -1,8 +1,8 @@
$NetBSD: distinfo,v 1.101 2014/01/16 10:14:09 wiz Exp $
$NetBSD: distinfo,v 1.102 2014/01/25 10:59:22 wiz Exp $
SHA1 (gnutls-3.2.8.1.tar.xz) = 0003d68285949cb4af7f2a1707c41d9860af650e
RMD160 (gnutls-3.2.8.1.tar.xz) = b8bfd6e36e9a15e2eedb226dd3867df197c0d414
Size (gnutls-3.2.8.1.tar.xz) = 5135260 bytes
SHA1 (gnutls-3.2.9.tar.xz) = 6644d1034c3880c3a52d4e1da344f2423a02dd6c
RMD160 (gnutls-3.2.9.tar.xz) = fa434a751735a9c4a6af65d512c0bbab9245344b
Size (gnutls-3.2.9.tar.xz) = 5134196 bytes
SHA1 (patch-ae) = 71fbbeb43ac1689fca6fec7f8348d8534c1dc38a
SHA1 (patch-gl_stdio.in.h) = b5802da2cccddd6fab73bd39c49f7d62bef58464
SHA1 (patch-lib_Makefile.in) = 00cbff0bfaf8f5b8ec6db8dbe12d14a1cb3ffb9b