CVS commit: pkgsrc/security/gnutls

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Thu Nov 16 12:31:11 UTC 2023

Modified Files:
        pkgsrc/security/gnutls: Makefile PLIST distinfo

Log Message:
gnutls: updated to 3.8.2

Version 3.8.2 (released 2023-11-14)

** libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
   [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]

** libgnutls: Add API functions to perform ECDH and DH key agreement
   The functionality has been there for a long time though they were
   not available as part of the public API.  This enables applications
   to implement custom protocols leveraging non-interactive key
   agreement with ECDH and DH.

** libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
   The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
   GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
   the AEAD interface.  Note that, unlike
   GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
   appended to the ciphertext, not prepended.

** libgnutls: transparent KTLS support is extended to FreeBSD kernel
   The kernel TLS feature can now be enabled on FreeBSD as well as
   Linux when compiled with the --enable-ktls configure option.

** gnutls-cli: New option --starttls-name
   Depending on deployment, application protocols such as XMPP may
   require a different origin address than the external address to be
   presented prior to STARTTLS negotiation.  The --starttls-name can
   be used to specify specify the addresses separately.


To generate a diff of this commit:
cvs rdiff -u -r1.244 -r1.245 pkgsrc/security/gnutls/Makefile
cvs rdiff -u -r1.79 -r1.80 pkgsrc/security/gnutls/PLIST
cvs rdiff -u -r1.158 -r1.159 pkgsrc/security/gnutls/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/gnutls/Makefile
diff -u pkgsrc/security/gnutls/Makefile:1.244 pkgsrc/security/gnutls/Makefile:1.245
--- pkgsrc/security/gnutls/Makefile:1.244       Wed Nov  8 13:20:45 2023
+++ pkgsrc/security/gnutls/Makefile     Thu Nov 16 12:31:11 2023
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.244 2023/11/08 13:20:45 wiz Exp $
+# $NetBSD: Makefile,v 1.245 2023/11/16 12:31:11 adam Exp $
 
-DISTNAME=      gnutls-3.8.1
-PKGREVISION=   2
+DISTNAME=      gnutls-3.8.2
 CATEGORIES=    security devel
 MASTER_SITES=  https://www.gnupg.org/ftp/gcrypt/gnutls/v${PKGVERSION_NOREV:R}/
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/security/gnutls/PLIST
diff -u pkgsrc/security/gnutls/PLIST:1.79 pkgsrc/security/gnutls/PLIST:1.80
--- pkgsrc/security/gnutls/PLIST:1.79   Tue Aug  8 09:33:54 2023
+++ pkgsrc/security/gnutls/PLIST        Thu Nov 16 12:31:11 2023
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.79 2023/08/08 09:33:54 adam Exp $
+@comment $NetBSD: PLIST,v 1.80 2023/11/16 12:31:11 adam Exp $
 bin/certtool
 bin/gnutls-cli
 bin/gnutls-cli-debug
@@ -580,6 +580,8 @@ man/man3/gnutls_priority_string_list.3
 man/man3/gnutls_privkey_decrypt_data.3
 man/man3/gnutls_privkey_decrypt_data2.3
 man/man3/gnutls_privkey_deinit.3
+man/man3/gnutls_privkey_derive_secret.3
+man/man3/gnutls_privkey_export_dh_raw.3
 man/man3/gnutls_privkey_export_dsa_raw.3
 man/man3/gnutls_privkey_export_dsa_raw2.3
 man/man3/gnutls_privkey_export_ecc_raw.3
@@ -596,6 +598,7 @@ man/man3/gnutls_privkey_get_pk_algorithm
 man/man3/gnutls_privkey_get_seed.3
 man/man3/gnutls_privkey_get_spki.3
 man/man3/gnutls_privkey_get_type.3
+man/man3/gnutls_privkey_import_dh_raw.3
 man/man3/gnutls_privkey_import_dsa_raw.3
 man/man3/gnutls_privkey_import_ecc_raw.3
 man/man3/gnutls_privkey_import_ext.3
@@ -655,6 +658,7 @@ man/man3/gnutls_pubkey_deinit.3
 man/man3/gnutls_pubkey_encrypt_data.3
 man/man3/gnutls_pubkey_export.3
 man/man3/gnutls_pubkey_export2.3
+man/man3/gnutls_pubkey_export_dh_raw.3
 man/man3/gnutls_pubkey_export_dsa_raw.3
 man/man3/gnutls_pubkey_export_dsa_raw2.3
 man/man3/gnutls_pubkey_export_ecc_raw.3
@@ -670,6 +674,7 @@ man/man3/gnutls_pubkey_get_pk_algorithm.
 man/man3/gnutls_pubkey_get_preferred_hash_algorithm.3
 man/man3/gnutls_pubkey_get_spki.3
 man/man3/gnutls_pubkey_import.3
+man/man3/gnutls_pubkey_import_dh_raw.3
 man/man3/gnutls_pubkey_import_dsa_raw.3
 man/man3/gnutls_pubkey_import_ecc_raw.3
 man/man3/gnutls_pubkey_import_ecc_x962.3
@@ -1181,6 +1186,7 @@ man/man3/gnutls_x509_privkey_get_seed.3
 man/man3/gnutls_x509_privkey_get_spki.3
 man/man3/gnutls_x509_privkey_import.3
 man/man3/gnutls_x509_privkey_import2.3
+man/man3/gnutls_x509_privkey_import_dh_raw.3
 man/man3/gnutls_x509_privkey_import_dsa_raw.3
 man/man3/gnutls_x509_privkey_import_ecc_raw.3
 man/man3/gnutls_x509_privkey_import_gost_raw.3

Index: pkgsrc/security/gnutls/distinfo
diff -u pkgsrc/security/gnutls/distinfo:1.158 pkgsrc/security/gnutls/distinfo:1.159
--- pkgsrc/security/gnutls/distinfo:1.158       Tue Aug  8 09:33:54 2023
+++ pkgsrc/security/gnutls/distinfo     Thu Nov 16 12:31:11 2023
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.158 2023/08/08 09:33:54 adam Exp $
+$NetBSD: distinfo,v 1.159 2023/11/16 12:31:11 adam Exp $
 
-BLAKE2s (gnutls-3.8.1.tar.xz) = 60446b094b25207f8a77a88cc7aac1c6e6a643f6d7a8f50a677a4b5ee25a64c6
-SHA512 (gnutls-3.8.1.tar.xz) = 22e78db86b835843df897d14ad633d8a553c0f9b1389daa0c2f864869c6b9ca889028d434f9552237dc4f1b37c978fbe0cce166e3768e5d4e8850ff69a6fc872
-Size (gnutls-3.8.1.tar.xz) = 6447056 bytes
+BLAKE2s (gnutls-3.8.2.tar.xz) = dcfa9d5ff11b94b54201386d216c3e6f3a9a1fd66c3685401a89bc5b51a96db9
+SHA512 (gnutls-3.8.2.tar.xz) = b3aa6e0fa7272cfca0bb0d364fe5dc9ca70cfd41878631d57271ba0a597cf6020a55a19e97a2c02f13a253455b119d296cf6f701be2b4e6880ebeeb07c93ef38
+Size (gnutls-3.8.2.tar.xz) = 6456540 bytes
 SHA1 (patch-configure) = 866d8a365b8338348230e47518788f494279b139