Content-Transfer-Encoding: 7bit
Content-Type: multipart/mixed; boundary="_----------=_1553063232174200"
MIME-Version: 1.0
Date: Wed, 20 Mar 2019 06:27:12 +0000
From: "Adam Ciarcinski" <adam@netbsd.org>
Subject: CVS commit: pkgsrc/security/gnutls
To: pkgsrc-changes@NetBSD.org
Reply-To: adam@netbsd.org
Message-Id: <20190320062712.0CF3EFB16@cvs.NetBSD.org>
Sender: pkgsrc-changes-owner@NetBSD.org
Precedence: bulk

This is a multi-part message in MIME format.

--_----------=_1553063232174200
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="US-ASCII"

Module Name:	pkgsrc
Committed By:	adam
Date:		Wed Mar 20 06:27:11 UTC 2019

Modified Files:
	pkgsrc/security/gnutls: Makefile PLIST distinfo

Log Message:
gnutls: updated to 3.6.6

Version 3.6.6:
* libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
  on the public key.
* libgnutls: Added support for raw public-key authentication as defined in RFC7250.
  Raw public-keys can be negotiated by enabling the corresponding certificate
  types via the priority strings. The raw public-key mechanism must be explicitly
  enabled via the GNUTLS_ENABLE_RAWPK init flag.
* libgnutls: When on server or client side we are sending no extensions we do
  not set an empty extensions field but we rather remove that field competely.
  This solves a regression since 3.5.x and improves compatibility of the server
  side with certain clients.
* libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
  the CKA_SIGN is not set.
* libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
  disable extensions at all cases, while providing a functional session. This
  also implies that when specified, TLS1.3 is disabled.
* libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
  The previous definition was non-functional.
* API and ABI modifications:
GNUTLS_ENABLE_RAWPK: Added
GNUTLS_ENABLE_CERT_TYPE_NEG: Removed (was no-op; replaced by GNUTLS_ENABLE_RAWPK)
GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION: Deprecated
GNUTLS_PCERT_NO_CERT: Deprecated


To generate a diff of this commit:
cvs rdiff -u -r1.193 -r1.194 pkgsrc/security/gnutls/Makefile
cvs rdiff -u -r1.62 -r1.63 pkgsrc/security/gnutls/PLIST
cvs rdiff -u -r1.132 -r1.133 pkgsrc/security/gnutls/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.


--_----------=_1553063232174200
Content-Disposition: inline
Content-Length: 3200
Content-Transfer-Encoding: binary
Content-Type: text/x-diff; charset=us-ascii

Modified files:

Index: pkgsrc/security/gnutls/Makefile
diff -u pkgsrc/security/gnutls/Makefile:1.193 pkgsrc/security/gnutls/Makefile:1.194
--- pkgsrc/security/gnutls/Makefile:1.193	Thu Dec 13 00:10:12 2018
+++ pkgsrc/security/gnutls/Makefile	Wed Mar 20 06:27:11 2019
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.193 2018/12/13 00:10:12 leot Exp $
+# $NetBSD: Makefile,v 1.194 2019/03/20 06:27:11 adam Exp $
 
-DISTNAME=	gnutls-3.6.5
-PKGREVISION=	1
+DISTNAME=	gnutls-3.6.6
 CATEGORIES=	security devel
 MASTER_SITES=	ftp://ftp.gnutls.org/gcrypt/gnutls/v3.6/
 EXTRACT_SUFX=	.tar.xz

Index: pkgsrc/security/gnutls/PLIST
diff -u pkgsrc/security/gnutls/PLIST:1.62 pkgsrc/security/gnutls/PLIST:1.63
--- pkgsrc/security/gnutls/PLIST:1.62	Sun Dec  9 20:12:41 2018
+++ pkgsrc/security/gnutls/PLIST	Wed Mar 20 06:27:11 2019
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.62 2018/12/09 20:12:41 leot Exp $
+@comment $NetBSD: PLIST,v 1.63 2019/03/20 06:27:11 adam Exp $
 bin/certtool
 bin/gnutls-cli
 bin/gnutls-cli-debug
@@ -131,6 +131,8 @@ man/man3/gnutls_certificate_set_ocsp_sta
 man/man3/gnutls_certificate_set_ocsp_status_request_mem.3
 man/man3/gnutls_certificate_set_params_function.3
 man/man3/gnutls_certificate_set_pin_function.3
+man/man3/gnutls_certificate_set_rawpk_key_file.3
+man/man3/gnutls_certificate_set_rawpk_key_mem.3
 man/man3/gnutls_certificate_set_retrieve_function.3
 man/man3/gnutls_certificate_set_retrieve_function2.3
 man/man3/gnutls_certificate_set_retrieve_function3.3
@@ -382,6 +384,8 @@ man/man3/gnutls_pcert_export_openpgp.3
 man/man3/gnutls_pcert_export_x509.3
 man/man3/gnutls_pcert_import_openpgp.3
 man/man3/gnutls_pcert_import_openpgp_raw.3
+man/man3/gnutls_pcert_import_rawpk.3
+man/man3/gnutls_pcert_import_rawpk_raw.3
 man/man3/gnutls_pcert_import_x509.3
 man/man3/gnutls_pcert_import_x509_list.3
 man/man3/gnutls_pcert_import_x509_raw.3

Index: pkgsrc/security/gnutls/distinfo
diff -u pkgsrc/security/gnutls/distinfo:1.132 pkgsrc/security/gnutls/distinfo:1.133
--- pkgsrc/security/gnutls/distinfo:1.132	Sun Dec  9 20:12:41 2018
+++ pkgsrc/security/gnutls/distinfo	Wed Mar 20 06:27:11 2019
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.132 2018/12/09 20:12:41 leot Exp $
+$NetBSD: distinfo,v 1.133 2019/03/20 06:27:11 adam Exp $
 
-SHA1 (gnutls-3.6.5.tar.xz) = 749fcaba23f63b523ec2ad262caeca6f1e62fc6f
-RMD160 (gnutls-3.6.5.tar.xz) = a7194f821deb3b1cd9efa7be8382bf893e317a8e
-SHA512 (gnutls-3.6.5.tar.xz) = 127f053ce45c63cd745fa5a654a2d8e4fbc322f5e17dcc3740fb2e7b376dd18dad59318d66e6e93e37d6a179fca4b35cf2ae62d13be5645cd2d06badd79d4dce
-Size (gnutls-3.6.5.tar.xz) = 8192888 bytes
+SHA1 (gnutls-3.6.6.tar.xz) = d094f3c554b40d76dac2d2d75a8a141c008dc6c4
+RMD160 (gnutls-3.6.6.tar.xz) = b83342901fc4d0f597d4d97e1d853431a27cc162
+SHA512 (gnutls-3.6.6.tar.xz) = 4ff34f38d7dc543bc5750d8fdfe9be84af60c66e8d41da45f6cffc11d6c6c726784fd2d471b3416604ca1f3f9efb22ff7a290d5c92c96deda38df6ae3e794cc1
+Size (gnutls-3.6.6.tar.xz) = 8257612 bytes
 SHA1 (patch-lib_Makefile.in) = c9a6bbe6238ccd9de41c708012e36b202d2a86e7
 SHA1 (patch-lib_accelerated_x86_x86-common.c) = eaf3c473b1ca83c5b15be26f8c06a82d7961420c
 SHA1 (patch-src_libopts_autoopts_options.h) = 9202c55314fe8764ac82c95bbfabfa1b031e9ba4


--_----------=_1553063232174200--