From: Andrew Bartlett Date: Mon, 17 Jul 2023 22:29:50 +0000 (+1200) Subject: WHATSNEW: Update minimum GnuTLS version X-Git-Tag: talloc-2.4.1~7 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=5f69220f0afc578a49e7049d6ffba1ef12bc2fe5;p=thirdparty%2Fsamba.git WHATSNEW: Update minimum GnuTLS version Signed-off-by: Andrew Bartlett Reviewed-by: Douglas Bagnall --- diff --git a/WHATSNEW.txt b/WHATSNEW.txt index b348217e995..7cdb9f32f08 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -90,6 +90,24 @@ samba-tool domain schemaupgrade --schema=2019 samba-tool domain functionalprep --function-level=2016 samba-tool domain level raise --domain-level=2016 --forest-level=2016 +Updated GnuTLS requirement / in-tree cryptography removal +---------------------------------------------------------- + +Samba requires GnuTLS 3.6.13 and prefers GnuTLS 3.6.14 or later. + +This has allowed Samba to remove all of our in-tree cryptography, +except that found in our Heimdal import. Samba's runtime cryptography +needs are now all provided by GnuTLS. + +(The GnuTLS vesion requirement is raised to 3.7.2 on systems without +the Linux getrandom()) + +We also use Python's cryptography module for our testing. + +The use of well known cryptography libraries makes Samba easier for +end-users to validate and deploy, and for distributors to ship. This +is the end of a very long journey for Samba. + REMOVED FEATURES ================