GitLab

Change-Id: I4d6c06d8bda6a2bba817108b1f323afaf27766ba

Change-Id: I0cc2e8c870baf703bb5b9a88dc4fd53a3ff692b5
Reviewed-by: Sébastien Blin <sebastien.blin@savoirfairelinux.com>

Change-Id: Iab27a6b5ebe8431faced6fe9869b64c8bbf0a6b9

Bump GNUTls to 3.6.5 and nettle to 3.4.1

Change-Id: I666f5137ad2c495b4c49b838b8ecf281ed523766

Change-Id: Ic2410ea2c4015383a0cff84f9ba0131b0168b61e
Reviewed-by: Philippe Gorley <philippe.gorley@savoirfairelinux.com>

Let's say we're building gnutls (since the system version is too new).
gnutls depends on nettle.
Let's say we're using the system nettle (naturally in FOUND_PKGS).
nettle depends on gmp.

With the old (non-recursive) dependency tracking, we would end up building
gmp just for nettle, even though we aren't even building nettle!

Change-Id: I24e6f59416839ea202e0aceafe101432fe9c2646
Reviewed-by: Guillaume Roguez <guillaume.roguez@savoirfairelinux.com>

For gnutls, gcrypt, gpgerror and pcre this uses the canonical download
URL from their respective homepage.
For gmp we continue to use the GNU mirror but switch to https.
The tarball hashes are the same as before.

Not using ftp is also more friendly for people behind corporate
firewalls.

Change-Id: Iaf02a03549803a9374b1e35d8aa8234dd0895508

We bump gnutls to 3.5.10 to follow security updates.
This implies to bump nettle as well (v3.3).

Note: we don't use latest available v3.5.11, as this implies
a compatibility breaking change, without available solution yet.

Change-Id: Icba32526641724893120a56af297faa59bdca518
Reviewed-by: Kateryna Kostiuk <kateryna.kostiuk@savoirfairelinux.com>

This reverts commit 3addcc04.

Change-Id: I96551aeeb9ffb89d5668d1b848178e572b038bb5
Reviewed-by: Guillaume Roguez <guillaume.roguez@savoirlinux.com>

GnuTLS 3.5 is now the supported stable version of GnuTLS.
As a security-critical component, it should be kept updated.
GnuTLS 3.5 requires Nettle 3.3, also bumped.

GnuTLS 3.5.11 adds support for the macOS system key chain,
so the related patch is removed.

Change-Id: Ie5eb54e195083dadedde7daabf227f77cca7105e
Reviewed-by: Olivier Soldano <olivier.soldano@savoirfairelinux.com>

getentropy function as been added to MacOS 10.12 and iOS 10.
During GnuTLS compilation, the function can be detected in the new
10.12 SDK, but at runtime it fails to find the appropriate method on
the system.

It means that we can produce packages that won't work on some OS
versions. For precaution this commit patches GnuTLS to stop trying to
enable this function on all macOS versions.

It also removes another patch in GnuTLS for OSX that wasn't used anymore

Change-Id: I3af8b111f65e38d2d01da600c899d5717e82d8e9
Tuleap: #911

clock_gettime function as been added to MacOS 10.12 and iOS 10
so launching the Ring App would result in symbol not found on OS
before 10

Change-Id: Ifcd841379483ef9b8d17f54ee5b99f0a2526f94a
Tuleap: #911

gnutls 3.4.14 has just been released.
This release contains our DTLS patch, so this patch
set this version as minimum and removes the DTLS patch.
As gnutls is updated, this patch removes also the build force
on nettle, removes deprecated format-security patch and
disable non-suitb curves to let gnutls link with some system
provided nettle (like on Fedora).

Change-Id: I073b7409138310c1d749e5ef5a9ddd3937dc1d4a
Tuleap: #783

This patch imports a gnutls upstream patch to fix the DTLS packet
re-ordering and re-enable our anonymous call feature.

We bump gnutls at least on 3.4.14, even if not published yet,
as the upstream patch will not be available since this version.
We continue to use the 3.4.10 release to apply our local patch.

We force also our contrib nettle to be build as some distributions
do not compile this library as we need to.

Change-Id: I3238993d56b41258f214cfaba7230dcd0538c5d2
Tuleap: #788

Keychain patch is not iOS compatible.
See here:
https://mailman.videolan.org/pipermail/vlc-commits/2013-November/022795.html

Tuleap: #313
Change-Id: I9dfb7a385bb4e2ecafdd58ce675c14c251302738

3.3.19 of gnutls is the one containing a patch to be able
to make a anon to RSA re-negotiation.
This is needed by commit fbdc7b24.

Change-Id: Ie63657031b0f8f3f50d98eda14e6dd47e64ac559
Tuleap: #526

Tuleap: #62
Change-Id: Icb45443231f45970317d56f4b7fdc11d5400e363

This patch fixes a link issue with GnuTLS when building for x86.

Tuleap: #102
Change-Id: Ic46824d95cbf568fedd2a6601a9359acc2672e83

* use previous gettext version 0.18.3
* should fix build on Ubuntu Trusty 14.04
* keep gettext 0.19 on windows for mingw compilation

Tuleap: #62
Change-Id: I39f3d5b4938f7b2926f730a3b7822c19e05d9d1e

* bump from 3.4.2 to 3.4.6
* mostly fixes (including security)

Tuleap: #62
Change-Id: Ibe0e44e91f5cc7d9bb102aa9af9fed03c65f5754

This is a temporary fix that removes a osx-specific patch non-applicable in
gnutls 3.4.2

Refs #76228

Change-Id: I68f4cc585d3ae4db031dd68a628a968a7556e9f3

A bugfix version.
Changelog from the mailing list:

* libgnutls: DTLS blocking API is more robust against infinite blocking,
and will notify of more possible timeouts.

* libgnutls: corrected regression with Camellia-256-GCM cipher. Reported
by Manuel Pegourie-Gonnard.

* libgnutls: Introduced the GNUTLS_NO_SIGNAL flag to gnutls_init(). That
allows to disable SIGPIPE for writes done within gnutls.

* libgnutls: Enhanced the PKCS #7 API to allow signing and verification
of structures. API moved to gnutls/pkcs7.h header.

* certtool: Added options to generate PKCS #7 bundles and signed
structures.

Refs #76228

Change-Id: I1d168b2403840b093ed225c817a1b3d9c0b2eea0

Refs #72274
Change-Id: Ib97d53f0134697a9c83b64c96c5dd2deb79bdf30

3.2 and below are 2.8 ABI, not compatible anymore with our
requirements.

Refs #72156

Change-Id: I9bc5ca418b28885318032493d66230d2f6baa5b6

Refs #72184

Change-Id: I8b6d822a4180b12027d0031780f8159d0ecc9172

Fix compilation of GnuTLS and Pjproject broke by bump
Fix libvideo compilation (enforcing static, activating opus and speex)

Refs #68888

Change-Id: I29bfb30ec2c7327b022857f851f57b019f9cb6a0

Refs #71318

Change-Id: Iff662958d4127ae3267512ec45b35251238c41f2

Refs #68986

Change-Id: Ia95b140e4f4d6625d1df12d52a40414482b2e773

Change-Id: I9869522bfb841682b8326fca05b72f312157da55

This reverts commit 821b085f.

Change-Id: I5c0239c34f2a9f3bd506ab822184cab724d5f616

This reverts commit 84080f8f.

Change-Id: I1915717bec3b03f293b8bae1ea50a0de5f5e2180

Change-Id: I384f4988f0e80d4c92dcf343418cbc8cc7b1e03f

Refs #56801

Change-Id: I8efd48b882dadc41fede1d7804fdd8189d0b70b1

Rationale: only daemon uses it and it simplifies packaging, where
daemon is the top-level directory.

Change-Id: Id99bd61f2b0269e0fc594c1782cd7945120acf49

Refs: #46617

Based on VideoLan code by Rémi Denis-Courmont et al.
Refs: #46617

Change-Id: Ib351b10c4d029d8ee978df13bf31539aff97034e