Subject: CVS commit: pkgsrc/security/gnutls
From: Nia Alarie
Date: 2019-10-04 19:25:54
Message id: 20191004172554.82CA4FBF4@cvs.NetBSD.org

Log Message:
gnutls: Update to 3.6.10

* Version 3.6.10 (released 2019-09-29)

** libgnutls: Added support for deterministic ECDSA/DSA (RFC6979)
   Deterministic signing can be enabled by setting
   GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE when calling gnutls_privkey_sign_*()
   functions (#94).

** libgnutls: add gnutls_aead_cipher_encryptv2 and gnutls_aead_cipher_decryptv2
   functions that will perform in-place encryption/decryption on data buffers (#718).

** libgnutls: Corrected issue in gnutls_session_get_data2() which could fail under
   TLS1.3, if a timeout callback was not set using \ 
gnutls_transport_set_pull_timeout_function()
   (#823).

** libgnutls: added interoperability tests with gnutls 2.12.x; addressed
   issue with large record handling due to random padding (#811).

** libgnutls: the server now selects the highest TLS protocol version,
   if TLS 1.3 is enabled and the client advertises an older protocol version \ 
first (#837).

** libgnutls: fix non-PIC assembly on i386 (#818).

** libgnutls: added support for GOST 28147-89 cipher in CNT (GOST counter) mode
   and MAC generation based on GOST 28147-89 (IMIT). For description of the
   modes see RFC 5830. S-Box is id-tc26-gost-28147-param-Z (TC26Z) defined in
   RFC 7836.

** certtool: when outputting an encrypted private key do not insert the textual \ 
description
   of it. This fixes a regression since 3.6.5 (#840).

** API and ABI modifications:
gnutls_aead_cipher_encryptv2: Added
gnutls_aead_cipher_decryptv2: Added
GNUTLS_CIPHER_GOST28147_TC26Z_CNT: Added
GNUTLS_MAC_GOST28147_TC26Z_IMIT: Added

Files:
RevisionActionfile
1.203modifypkgsrc/security/gnutls/Makefile
1.68modifypkgsrc/security/gnutls/PLIST
1.140modifypkgsrc/security/gnutls/distinfo
1.2modifypkgsrc/security/gnutls/options.mk
1.1addpkgsrc/security/gnutls/PLIST.dane
1.1removepkgsrc/security/gnutls/patches/patch-cfg.mk
1.1removepkgsrc/security/gnutls/patches/patch-config.h.in
1.3removepkgsrc/security/gnutls/patches/patch-configure
1.1removepkgsrc/security/gnutls/patches/patch-lib_accelerated_x86_elf_aesni-x86.s
1.3removepkgsrc/security/gnutls/patches/patch-lib_accelerated_x86_x86-common.c