[pkgsrc/trunk]: pkgsrc/security/gnutls Update to 3.2.9 based on patch from Ri...

[wiz <wiz%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/e38bf1b90fcf
branches:  trunk
changeset: 629670:e38bf1b90fcf
user:      wiz <wiz%pkgsrc.org@localhost>
date:      Sat Jan 25 10:59:22 2014 +0000

description:
Update to 3.2.9 based on patch from Richard Palo.
Assembler issues still seem to be there at least on SunOS.

* Version 3.2.9 (released 2014-01-24)

** libgnutls: The %DUMBFW option in priority string only
appends data to client hello if the expected size is in the
"black hole" range.

** libgnutls: %COMPAT implies %DUMBFW.

** libgnutls: gnutls_session_get_desc() returns a more compact
ciphersuite description.

* libgnutls: In PKCS #11 allow deleting multiple non-certificate data.

** libgnutls: When a PKCS #11 trust store is specified (e.g. using the
configure option --with-default-trust-store-pkcs11), then the PKCS #11
token is used on demand to obtain the trusted anchors, rather than
preloading all trusted certificates. That delegates CA certificate management
and blacklist checking to the PKCS #11 module.

** libgnutls: When a PKCS #11 trust store is specified in configure option
or in gnutls_x509_trust_list_add_trust_file(), then the module is used
to obtain the verification anchors and any required blacklists as in
http://p11-glue.freedesktop.org/doc/storing-trust-policy/storing-trust-pkcs11.html

** libgnutls: Fix in OCSP certificate status extension handling
in non-blocking servers. Patch by Nils Maier.

** p11tool: Added --so-login option to force login as security
officer (admin).

** API and ABI modifications:
No changes since last version.

diffstat:

 security/gnutls/Makefile |  8 +++-----
 security/gnutls/distinfo |  8 ++++----
 2 files changed, 7 insertions(+), 9 deletions(-)

diffs (42 lines):

diff -r fae2317f6bfa -r e38bf1b90fcf security/gnutls/Makefile
--- a/security/gnutls/Makefile  Sat Jan 25 10:56:58 2014 +0000
+++ b/security/gnutls/Makefile  Sat Jan 25 10:59:22 2014 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.139 2014/01/21 12:13:16 jperkin Exp $
+# $NetBSD: Makefile,v 1.140 2014/01/25 10:59:22 wiz Exp $
 
-DISTNAME=      gnutls-3.2.8.1
+DISTNAME=      gnutls-3.2.9
 CATEGORIES=    security devel
 MASTER_SITES=  ftp://ftp.gnutls.org/gcrypt/gnutls/v3.2/
 EXTRACT_SUFX=  .tar.xz
@@ -21,12 +21,10 @@
 # this library duplicates (and conflicts with) openssl
 CONFIGURE_ARGS+=       --disable-openssl-compatibility
 CONFIGURE_ARGS+=       --disable-guile
+CONFIGURE_ARGS+=       --disable-libdane
 CONFIGURE_ARGS+=       --without-tpm
 CONFIGURE_ARGS+=       AUTOGEN=/bin/true
 
-# 3.2.8.1 didn't get a new directory name
-WRKSRC=        ${WRKDIR}/gnutls-3.2.8
-
 TEST_TARGET=           check
 INFO_FILES=            yes
 
diff -r fae2317f6bfa -r e38bf1b90fcf security/gnutls/distinfo
--- a/security/gnutls/distinfo  Sat Jan 25 10:56:58 2014 +0000
+++ b/security/gnutls/distinfo  Sat Jan 25 10:59:22 2014 +0000
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.101 2014/01/16 10:14:09 wiz Exp $
+$NetBSD: distinfo,v 1.102 2014/01/25 10:59:22 wiz Exp $
 
-SHA1 (gnutls-3.2.8.1.tar.xz) = 0003d68285949cb4af7f2a1707c41d9860af650e
-RMD160 (gnutls-3.2.8.1.tar.xz) = b8bfd6e36e9a15e2eedb226dd3867df197c0d414
-Size (gnutls-3.2.8.1.tar.xz) = 5135260 bytes
+SHA1 (gnutls-3.2.9.tar.xz) = 6644d1034c3880c3a52d4e1da344f2423a02dd6c
+RMD160 (gnutls-3.2.9.tar.xz) = fa434a751735a9c4a6af65d512c0bbab9245344b
+Size (gnutls-3.2.9.tar.xz) = 5134196 bytes
 SHA1 (patch-ae) = 71fbbeb43ac1689fca6fec7f8348d8534c1dc38a
 SHA1 (patch-gl_stdio.in.h) = b5802da2cccddd6fab73bd39c49f7d62bef58464
 SHA1 (patch-lib_Makefile.in) = 00cbff0bfaf8f5b8ec6db8dbe12d14a1cb3ffb9b