CVS commit: pkgsrc/security/gnutls

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Mon May 31 11:08:45 UTC 2021

Modified Files:
        pkgsrc/security/gnutls: Makefile PLIST distinfo

Log Message:
gnutls: update to 3.7.2.

* Version 3.7.2 (released 2021-05-29)

** libgnutls: The priority string option %DISABLE_TLS13_COMPAT_MODE was added
   to disable TLS 1.3 middlebox compatibility mode

** libgnutls: The Linux kernel AF_ALG based acceleration has been added.
   This can be enabled with --enable-afalg configure option, when libkcapi
   package is installed (#308).

** libgnutls: Fixed timing of early data exchange. Previously, the client was
   sending early data after receiving Server Hello, which not only negates the
   benefit of 0-RTT, but also works under certain assumptions hold (e.g., the
   same ciphersuite is selected in initial and resumption handshake) (#1146).

** certtool: When signing a CSR, CRL distribution point (CDP) is no longer
   copied from the signing CA by default (#1126).

** libgnutls: The GNUTLS_NO_EXPLICIT_INIT envvar has been renamed to
   GNUTLS_NO_IMPLICIT_INIT to reflect the purpose (#1178). The former is now
   deprecated and will be removed in the future releases.

** certtool: When producing certificates and certificate requests, subject DN
   components that are provided individually will now be ordered by
   assumed scale (e.g. Country before State, Organization before
   OrganizationalUnit).  This change also affects the order in which
   certtool prompts interactively.  Please rely on the template
   mechanism for automated use of certtool! (#1243)

** API and ABI modifications:
gnutls_early_cipher_get: Added
gnutls_early_prf_hash_get: Added


To generate a diff of this commit:
cvs rdiff -u -r1.221 -r1.222 pkgsrc/security/gnutls/Makefile
cvs rdiff -u -r1.72 -r1.73 pkgsrc/security/gnutls/PLIST
cvs rdiff -u -r1.147 -r1.148 pkgsrc/security/gnutls/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/gnutls/Makefile
diff -u pkgsrc/security/gnutls/Makefile:1.221 pkgsrc/security/gnutls/Makefile:1.222
--- pkgsrc/security/gnutls/Makefile:1.221       Mon May 24 19:53:52 2021
+++ pkgsrc/security/gnutls/Makefile     Mon May 31 11:08:45 2021
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.221 2021/05/24 19:53:52 wiz Exp $
+# $NetBSD: Makefile,v 1.222 2021/05/31 11:08:45 wiz Exp $
 
-DISTNAME=      gnutls-3.7.1
-PKGREVISION=   2
+DISTNAME=      gnutls-3.7.2
 CATEGORIES=    security devel
 MASTER_SITES=  https://www.gnupg.org/ftp/gcrypt/gnutls/v${PKGVERSION_NOREV:R}/
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/security/gnutls/PLIST
diff -u pkgsrc/security/gnutls/PLIST:1.72 pkgsrc/security/gnutls/PLIST:1.73
--- pkgsrc/security/gnutls/PLIST:1.72   Thu Dec  3 12:27:38 2020
+++ pkgsrc/security/gnutls/PLIST        Mon May 31 11:08:45 2021
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.72 2020/12/03 12:27:38 nia Exp $
+@comment $NetBSD: PLIST,v 1.73 2021/05/31 11:08:45 wiz Exp $
 bin/certtool
 bin/gnutls-cli
 bin/gnutls-cli-debug
@@ -26,6 +26,7 @@ include/gnutls/urls.h
 include/gnutls/x509-ext.h
 include/gnutls/x509.h
 info/gnutls-client-server-use-case.png
+info/gnutls-crypto-layers.png
 info/gnutls-guile.info
 info/gnutls-handshake-sequence.png
 info/gnutls-handshake-state.png
@@ -246,6 +247,8 @@ man/man3/gnutls_dtls_prestate_set.3
 man/man3/gnutls_dtls_set_data_mtu.3
 man/man3/gnutls_dtls_set_mtu.3
 man/man3/gnutls_dtls_set_timeouts.3
+man/man3/gnutls_early_cipher_get.3
+man/man3/gnutls_early_prf_hash_get.3
 man/man3/gnutls_ecc_curve_get.3
 man/man3/gnutls_ecc_curve_get_id.3
 man/man3/gnutls_ecc_curve_get_name.3
@@ -1205,6 +1208,7 @@ man/man3/gnutls_x509_trust_list_verify_c
 man/man3/gnutls_x509_trust_list_verify_crt2.3
 man/man3/gnutls_x509_trust_list_verify_named_crt.3
 share/doc/gnutls/gnutls-client-server-use-case.png
+share/doc/gnutls/gnutls-crypto-layers.png
 share/doc/gnutls/gnutls-handshake-sequence.png
 share/doc/gnutls/gnutls-handshake-state.png
 share/doc/gnutls/gnutls-internals.png

Index: pkgsrc/security/gnutls/distinfo
diff -u pkgsrc/security/gnutls/distinfo:1.147 pkgsrc/security/gnutls/distinfo:1.148
--- pkgsrc/security/gnutls/distinfo:1.147       Sun Mar 14 07:58:20 2021
+++ pkgsrc/security/gnutls/distinfo     Mon May 31 11:08:45 2021
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.147 2021/03/14 07:58:20 wiz Exp $
+$NetBSD: distinfo,v 1.148 2021/05/31 11:08:45 wiz Exp $
 
-SHA1 (gnutls-3.7.1.tar.xz) = 5de5d25534ee5910ea9ee6aaeeb6af1af4350c1e
-RMD160 (gnutls-3.7.1.tar.xz) = 134c7cbe291cb640afa834daa91ba087b9d9966f
-SHA512 (gnutls-3.7.1.tar.xz) = 0fe801f03676c3bd970387f94578c8be7ba6030904989e7d21dffdc726209bab44c8096fbcb6d51fed2de239537bd00df2338ee9c8d984a1c386826b91062a95
-Size (gnutls-3.7.1.tar.xz) = 6038388 bytes
+SHA1 (gnutls-3.7.2.tar.xz) = 02e12259680b6ad3ec973e0df6bf2cf0c5ef1100
+RMD160 (gnutls-3.7.2.tar.xz) = a095231e93c7e4e94d78e442e7f816b9748b24b1
+SHA512 (gnutls-3.7.2.tar.xz) = 5d01d561a05379da71e4847e30ba13c2abe09f7a5c4359fd539d8bd19abad0ce87120f82ee7b6264e787bd3edbc5ae16beffa892983cbc3d59f11a1811c10329
+Size (gnutls-3.7.2.tar.xz) = 6091508 bytes
 SHA1 (patch-configure) = 3653f74914f874aa369f62c8b267a46fd6b78eaa
 SHA1 (patch-lib_system_certs.c) = fba74b2834a36d66bddcd7d3405d0c91c1b14efc
 SHA1 (patch-src_libopts_autoopts_options.h) = ebeeafc834bce3b6b3f938e360b089e165ee4f9e