GitLab

Change-Id: I4d6c06d8bda6a2bba817108b1f323afaf27766ba

Change-Id: I0cc2e8c870baf703bb5b9a88dc4fd53a3ff692b5
Reviewed-by: Sébastien Blin <sebastien.blin@savoirfairelinux.com>

Change-Id: Iab27a6b5ebe8431faced6fe9869b64c8bbf0a6b9

Bump GNUTls to 3.6.5 and nettle to 3.4.1

Change-Id: I666f5137ad2c495b4c49b838b8ecf281ed523766

Change-Id: Ic2410ea2c4015383a0cff84f9ba0131b0168b61e
Reviewed-by: Philippe Gorley <philippe.gorley@savoirfairelinux.com>

We bump gnutls to 3.5.10 to follow security updates.
This implies to bump nettle as well (v3.3).

Note: we don't use latest available v3.5.11, as this implies
a compatibility breaking change, without available solution yet.

Change-Id: Icba32526641724893120a56af297faa59bdca518
Reviewed-by: Kateryna Kostiuk <kateryna.kostiuk@savoirfairelinux.com>

This reverts commit 3addcc04.

Change-Id: I96551aeeb9ffb89d5668d1b848178e572b038bb5
Reviewed-by: Guillaume Roguez <guillaume.roguez@savoirlinux.com>

GnuTLS 3.5 is now the supported stable version of GnuTLS.
As a security-critical component, it should be kept updated.
GnuTLS 3.5 requires Nettle 3.3, also bumped.

GnuTLS 3.5.11 adds support for the macOS system key chain,
so the related patch is removed.

Change-Id: Ie5eb54e195083dadedde7daabf227f77cca7105e
Reviewed-by: Olivier Soldano <olivier.soldano@savoirfairelinux.com>

gnutls 3.4.14 has just been released.
This release contains our DTLS patch, so this patch
set this version as minimum and removes the DTLS patch.
As gnutls is updated, this patch removes also the build force
on nettle, removes deprecated format-security patch and
disable non-suitb curves to let gnutls link with some system
provided nettle (like on Fedora).

Change-Id: I073b7409138310c1d749e5ef5a9ddd3937dc1d4a
Tuleap: #783

Tuleap: #62
Change-Id: Icb45443231f45970317d56f4b7fdc11d5400e363

* bump from 3.4.2 to 3.4.6
* mostly fixes (including security)

Tuleap: #62
Change-Id: Ibe0e44e91f5cc7d9bb102aa9af9fed03c65f5754

A bugfix version.
Changelog from the mailing list:

* libgnutls: DTLS blocking API is more robust against infinite blocking,
and will notify of more possible timeouts.

* libgnutls: corrected regression with Camellia-256-GCM cipher. Reported
by Manuel Pegourie-Gonnard.

* libgnutls: Introduced the GNUTLS_NO_SIGNAL flag to gnutls_init(). That
allows to disable SIGPIPE for writes done within gnutls.

* libgnutls: Enhanced the PKCS #7 API to allow signing and verification
of structures. API moved to gnutls/pkcs7.h header.

* certtool: Added options to generate PKCS #7 bundles and signed
structures.

Refs #76228

Change-Id: I1d168b2403840b093ed225c817a1b3d9c0b2eea0

Refs #71318

Change-Id: Iff662958d4127ae3267512ec45b35251238c41f2

Refs #68986

Change-Id: Ia95b140e4f4d6625d1df12d52a40414482b2e773

This reverts commit 821b085f.

Change-Id: I5c0239c34f2a9f3bd506ab822184cab724d5f616

Rationale: only daemon uses it and it simplifies packaging, where
daemon is the top-level directory.

Change-Id: Id99bd61f2b0269e0fc594c1782cd7945120acf49

Based on VideoLan code by Rémi Denis-Courmont et al.
Refs: #46617

Change-Id: Ib351b10c4d029d8ee978df13bf31539aff97034e