]> git.ipfire.org Git - people/mfischer/ipfire-2.x.git/commit
gnutls: Update to version 3.8.7
authorAdolf Belka <adolf.belka@ipfire.org>
Wed, 21 Aug 2024 18:45:13 +0000 (20:45 +0200)
committerMichael Tremer <michael.tremer@ipfire.org>
Fri, 23 Aug 2024 09:57:36 +0000 (09:57 +0000)
commitc5fe41d3f9a2d8a973c567180451119f9c8ff6b0
treedaa059a17a2cdd55a9a46a1bf08d7fce351fa74e
parentf093cb3fbe18d56cd9906dbad2354013825e980f
gnutls: Update to version 3.8.7

- Update from version 3.8.5 to 3.8.7
- Update of rootfile
- Changelog
    3.8.7
** libgnutls: New configure option to compile out DSA support
   The --disable-dsa configure option has been added to completely disable DSA
   algorithm support.
** libgnutls: Experimental support for X25519Kyber768Draft00 key exchange in TLS
   For testing purposes, the hybrid post-quantum key exchange defined
   in draft-tls-westerbaan-xyber768d00 has been implemented using
   liboqs. Since the algorithm is still not finalized, the support of
   this key exchange is disabled by default and can be enabled with
   the --with-liboqs configure option.
    3.8.6
** libgnutls: PBMAC1 is now supported as a MAC mechanism for PKCS#12
   To be compliant with FIPS 140-3, PKCS#12 files with MAC based on
   PBKDF2 (PBMAC1) is now supported, according to the specification
   proposed in draft-ietf-lamps-pkcs12-pbmac1.
** libgnutls: SHA3 extendable output functions (XOF) are now supported
   SHA3 XOF, SHAKE128 and SHAKE256, are now usable through a new
   public API gnutls_hash_squeeze.
** API and ABI modifications:
gnutls_pkcs12_generate_mac3: New function
gnutls_pkcs12_flags_t: New enum
gnutls_hash_squeeze: New function

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
config/rootfiles/common/gnutls
lfs/gnutls