Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="US-ASCII"
MIME-Version: 1.0
Date: Thu, 16 Jan 2014 10:14:09 +0000
From: "Thomas Klausner" <wiz@netbsd.org>
Subject: CVS commit: pkgsrc/security/gnutls
To: pkgsrc-changes@NetBSD.org
Reply-To: wiz@netbsd.org
Message-Id: <20140116101409.4115996@cvs.netbsd.org>
Sender: pkgsrc-changes-owner@NetBSD.org
Precedence: bulk

Module Name:	pkgsrc
Committed By:	wiz
Date:		Thu Jan 16 10:14:09 UTC 2014

Modified Files:
	pkgsrc/security/gnutls: Makefile PLIST distinfo libgnutls-config.mk
Added Files:
	pkgsrc/security/gnutls/patches: patch-tests_Makefile.in
	    patch-tests_openpgp-certs_Makefile.in
Removed Files:
	pkgsrc/security/gnutls/patches: patch-configure patch-lib_nettle_egd.c

Log Message:
Update to 3.2.8.1.

Changes in 3.2.8.1:
Note, that I've realized that this release has issues with the
assembly files in win32 and macosx systems. In these systems
use gnutls 3.2.8.1.

3.2.8:

* Version 3.2.8 (released 2013-12-20)

** libgnutls: Updated code for AES-NI. That prevents an uninitialized
variable complaint from valgrind.

** libgnutls: Enforce a maximum size for DH primes.

** libgnutls: Added SSSE3 optimized SHA1, and SHA256, using Andy Polyakov's
code.

** libgnutls: Added SSSE3 optimized AES using Mike Hamburg's code.

** libgnutls: It only links to librt if the required functions are
not present in libc. This also prevents an indirect linking to libpthread.

** libgnutls: Fixed issue with gnulib strerror replacement by adding
the strerror gnulib module.

** libgnutls: The time provided in the TLS random values is only precise
on its first 3 bytes. That prevents leakage of the precise system
time (at least on the client side when only few connections are
done on a single server).

** certtool: The --verify option will use the system CAs if the
load-ca-certificate option is not provided.

** configure: Added option --with-default-blacklist-file to allow
specifying a certificate blacklist file.

** configure: Added --disable-non-suiteb-curves option. This option
restricts the supported curves to SuiteB curves.

** API and ABI modifications:
gnutls_record_check_corked: Added


To generate a diff of this commit:
cvs rdiff -u -r1.136 -r1.137 pkgsrc/security/gnutls/Makefile
cvs rdiff -u -r1.49 -r1.50 pkgsrc/security/gnutls/PLIST
cvs rdiff -u -r1.100 -r1.101 pkgsrc/security/gnutls/distinfo
cvs rdiff -u -r1.2 -r1.3 pkgsrc/security/gnutls/libgnutls-config.mk
cvs rdiff -u -r1.1 -r0 pkgsrc/security/gnutls/patches/patch-configure
cvs rdiff -u -r1.2 -r0 pkgsrc/security/gnutls/patches/patch-lib_nettle_egd.c
cvs rdiff -u -r0 -r1.1 pkgsrc/security/gnutls/patches/patch-tests_Makefile.in \
    pkgsrc/security/gnutls/patches/patch-tests_openpgp-certs_Makefile.in

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.