[pkgsrc/trunk]: pkgsrc/security/gnutls gnutls: update to 3.7.2.

[wiz <wiz%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/63b363bb1528
branches:  trunk
changeset: 453550:63b363bb1528
user:      wiz <wiz%pkgsrc.org@localhost>
date:      Mon May 31 11:08:45 2021 +0000

description:
gnutls: update to 3.7.2.

* Version 3.7.2 (released 2021-05-29)

** libgnutls: The priority string option %DISABLE_TLS13_COMPAT_MODE was added
   to disable TLS 1.3 middlebox compatibility mode

** libgnutls: The Linux kernel AF_ALG based acceleration has been added.
   This can be enabled with --enable-afalg configure option, when libkcapi
   package is installed (#308).

** libgnutls: Fixed timing of early data exchange. Previously, the client was
   sending early data after receiving Server Hello, which not only negates the
   benefit of 0-RTT, but also works under certain assumptions hold (e.g., the
   same ciphersuite is selected in initial and resumption handshake) (#1146).

** certtool: When signing a CSR, CRL distribution point (CDP) is no longer
   copied from the signing CA by default (#1126).

** libgnutls: The GNUTLS_NO_EXPLICIT_INIT envvar has been renamed to
   GNUTLS_NO_IMPLICIT_INIT to reflect the purpose (#1178). The former is now
   deprecated and will be removed in the future releases.

** certtool: When producing certificates and certificate requests, subject DN
   components that are provided individually will now be ordered by
   assumed scale (e.g. Country before State, Organization before
   OrganizationalUnit).  This change also affects the order in which
   certtool prompts interactively.  Please rely on the template
   mechanism for automated use of certtool! (#1243)

** API and ABI modifications:
gnutls_early_cipher_get: Added
gnutls_early_prf_hash_get: Added

diffstat:

 security/gnutls/Makefile |   5 ++---
 security/gnutls/PLIST    |   6 +++++-
 security/gnutls/distinfo |  10 +++++-----
 3 files changed, 12 insertions(+), 9 deletions(-)

diffs (65 lines):

diff -r f19728270c9e -r 63b363bb1528 security/gnutls/Makefile
--- a/security/gnutls/Makefile  Mon May 31 10:43:06 2021 +0000
+++ b/security/gnutls/Makefile  Mon May 31 11:08:45 2021 +0000
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.221 2021/05/24 19:53:52 wiz Exp $
+# $NetBSD: Makefile,v 1.222 2021/05/31 11:08:45 wiz Exp $
 
-DISTNAME=      gnutls-3.7.1
-PKGREVISION=   2
+DISTNAME=      gnutls-3.7.2
 CATEGORIES=    security devel
 MASTER_SITES=  https://www.gnupg.org/ftp/gcrypt/gnutls/v${PKGVERSION_NOREV:R}/
 EXTRACT_SUFX=  .tar.xz
diff -r f19728270c9e -r 63b363bb1528 security/gnutls/PLIST
--- a/security/gnutls/PLIST     Mon May 31 10:43:06 2021 +0000
+++ b/security/gnutls/PLIST     Mon May 31 11:08:45 2021 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.72 2020/12/03 12:27:38 nia Exp $
+@comment $NetBSD: PLIST,v 1.73 2021/05/31 11:08:45 wiz Exp $
 bin/certtool
 bin/gnutls-cli
 bin/gnutls-cli-debug
@@ -26,6 +26,7 @@
 include/gnutls/x509-ext.h
 include/gnutls/x509.h
 info/gnutls-client-server-use-case.png
+info/gnutls-crypto-layers.png
 info/gnutls-guile.info
 info/gnutls-handshake-sequence.png
 info/gnutls-handshake-state.png
@@ -246,6 +247,8 @@
 man/man3/gnutls_dtls_set_data_mtu.3
 man/man3/gnutls_dtls_set_mtu.3
 man/man3/gnutls_dtls_set_timeouts.3
+man/man3/gnutls_early_cipher_get.3
+man/man3/gnutls_early_prf_hash_get.3
 man/man3/gnutls_ecc_curve_get.3
 man/man3/gnutls_ecc_curve_get_id.3
 man/man3/gnutls_ecc_curve_get_name.3
@@ -1205,6 +1208,7 @@
 man/man3/gnutls_x509_trust_list_verify_crt2.3
 man/man3/gnutls_x509_trust_list_verify_named_crt.3
 share/doc/gnutls/gnutls-client-server-use-case.png
+share/doc/gnutls/gnutls-crypto-layers.png
 share/doc/gnutls/gnutls-handshake-sequence.png
 share/doc/gnutls/gnutls-handshake-state.png
 share/doc/gnutls/gnutls-internals.png
diff -r f19728270c9e -r 63b363bb1528 security/gnutls/distinfo
--- a/security/gnutls/distinfo  Mon May 31 10:43:06 2021 +0000
+++ b/security/gnutls/distinfo  Mon May 31 11:08:45 2021 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.147 2021/03/14 07:58:20 wiz Exp $
+$NetBSD: distinfo,v 1.148 2021/05/31 11:08:45 wiz Exp $
 
-SHA1 (gnutls-3.7.1.tar.xz) = 5de5d25534ee5910ea9ee6aaeeb6af1af4350c1e
-RMD160 (gnutls-3.7.1.tar.xz) = 134c7cbe291cb640afa834daa91ba087b9d9966f
-SHA512 (gnutls-3.7.1.tar.xz) = 0fe801f03676c3bd970387f94578c8be7ba6030904989e7d21dffdc726209bab44c8096fbcb6d51fed2de239537bd00df2338ee9c8d984a1c386826b91062a95
-Size (gnutls-3.7.1.tar.xz) = 6038388 bytes
+SHA1 (gnutls-3.7.2.tar.xz) = 02e12259680b6ad3ec973e0df6bf2cf0c5ef1100
+RMD160 (gnutls-3.7.2.tar.xz) = a095231e93c7e4e94d78e442e7f816b9748b24b1
+SHA512 (gnutls-3.7.2.tar.xz) = 5d01d561a05379da71e4847e30ba13c2abe09f7a5c4359fd539d8bd19abad0ce87120f82ee7b6264e787bd3edbc5ae16beffa892983cbc3d59f11a1811c10329
+Size (gnutls-3.7.2.tar.xz) = 6091508 bytes
 SHA1 (patch-configure) = 3653f74914f874aa369f62c8b267a46fd6b78eaa
 SHA1 (patch-lib_system_certs.c) = fba74b2834a36d66bddcd7d3405d0c91c1b14efc
 SHA1 (patch-src_libopts_autoopts_options.h) = ebeeafc834bce3b6b3f938e360b089e165ee4f9e