gnutls: updated to 3.6.6

Version 3.6.6:
* libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
  on the public key.
* libgnutls: Added support for raw public-key authentication as defined in RFC7250.
  Raw public-keys can be negotiated by enabling the corresponding certificate
  types via the priority strings. The raw public-key mechanism must be explicitly
  enabled via the GNUTLS_ENABLE_RAWPK init flag.
* libgnutls: When on server or client side we are sending no extensions we do
  not set an empty extensions field but we rather remove that field competely.
  This solves a regression since 3.5.x and improves compatibility of the server
  side with certain clients.
* libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
  the CKA_SIGN is not set.
* libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
  disable extensions at all cases, while providing a functional session. This
  also implies that when specified, TLS1.3 is disabled.
* libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
  The previous definition was non-functional.
* API and ABI modifications:
GNUTLS_ENABLE_RAWPK: Added
GNUTLS_ENABLE_CERT_TYPE_NEG: Removed (was no-op; replaced by GNUTLS_ENABLE_RAWPK)
GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION: Deprecated
GNUTLS_PCERT_NO_CERT: Deprecated

3 files changed, 12 insertions, 9 deletions

diff --git a/security/gnutls/Makefile b/security/gnutls/Makefile
index fc1910f3aec..6a96ab3eaf5 100644
--- a/security/gnutls/Makefile
+++ b/security/gnutls/Makefile
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.193 2018/12/13 00:10:12 leot Exp $
+# $NetBSD: Makefile,v 1.194 2019/03/20 06:27:11 adam Exp $
 
-DISTNAME=	gnutls-3.6.5
-PKGREVISION=	1
+DISTNAME=	gnutls-3.6.6
 CATEGORIES=	security devel
 MASTER_SITES=	ftp://ftp.gnutls.org/gcrypt/gnutls/v3.6/
 EXTRACT_SUFX=	.tar.xz
diff --git a/security/gnutls/PLIST b/security/gnutls/PLIST
index caae5a2d514..906107e73e6 100644
--- a/security/gnutls/PLIST
+++ b/security/gnutls/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.62 2018/12/09 20:12:41 leot Exp $
+@comment $NetBSD: PLIST,v 1.63 2019/03/20 06:27:11 adam Exp $
 bin/certtool
 bin/gnutls-cli
 bin/gnutls-cli-debug
@@ -131,6 +131,8 @@ man/man3/gnutls_certificate_set_ocsp_status_request_function2.3
 man/man3/gnutls_certificate_set_ocsp_status_request_mem.3
 man/man3/gnutls_certificate_set_params_function.3
 man/man3/gnutls_certificate_set_pin_function.3
+man/man3/gnutls_certificate_set_rawpk_key_file.3
+man/man3/gnutls_certificate_set_rawpk_key_mem.3
 man/man3/gnutls_certificate_set_retrieve_function.3
 man/man3/gnutls_certificate_set_retrieve_function2.3
 man/man3/gnutls_certificate_set_retrieve_function3.3
@@ -382,6 +384,8 @@ man/man3/gnutls_pcert_export_openpgp.3
 man/man3/gnutls_pcert_export_x509.3
 man/man3/gnutls_pcert_import_openpgp.3
 man/man3/gnutls_pcert_import_openpgp_raw.3
+man/man3/gnutls_pcert_import_rawpk.3
+man/man3/gnutls_pcert_import_rawpk_raw.3
 man/man3/gnutls_pcert_import_x509.3
 man/man3/gnutls_pcert_import_x509_list.3
 man/man3/gnutls_pcert_import_x509_raw.3
diff --git a/security/gnutls/distinfo b/security/gnutls/distinfo
index ea4d6662c29..50e6590889d 100644
--- a/security/gnutls/distinfo
+++ b/security/gnutls/distinfo
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.132 2018/12/09 20:12:41 leot Exp $
+$NetBSD: distinfo,v 1.133 2019/03/20 06:27:11 adam Exp $
 
-SHA1 (gnutls-3.6.5.tar.xz) = 749fcaba23f63b523ec2ad262caeca6f1e62fc6f
-RMD160 (gnutls-3.6.5.tar.xz) = a7194f821deb3b1cd9efa7be8382bf893e317a8e
-SHA512 (gnutls-3.6.5.tar.xz) = 127f053ce45c63cd745fa5a654a2d8e4fbc322f5e17dcc3740fb2e7b376dd18dad59318d66e6e93e37d6a179fca4b35cf2ae62d13be5645cd2d06badd79d4dce
-Size (gnutls-3.6.5.tar.xz) = 8192888 bytes
+SHA1 (gnutls-3.6.6.tar.xz) = d094f3c554b40d76dac2d2d75a8a141c008dc6c4
+RMD160 (gnutls-3.6.6.tar.xz) = b83342901fc4d0f597d4d97e1d853431a27cc162
+SHA512 (gnutls-3.6.6.tar.xz) = 4ff34f38d7dc543bc5750d8fdfe9be84af60c66e8d41da45f6cffc11d6c6c726784fd2d471b3416604ca1f3f9efb22ff7a290d5c92c96deda38df6ae3e794cc1
+Size (gnutls-3.6.6.tar.xz) = 8257612 bytes
 SHA1 (patch-lib_Makefile.in) = c9a6bbe6238ccd9de41c708012e36b202d2a86e7
 SHA1 (patch-lib_accelerated_x86_x86-common.c) = eaf3c473b1ca83c5b15be26f8c06a82d7961420c
 SHA1 (patch-src_libopts_autoopts_options.h) = 9202c55314fe8764ac82c95bbfabfa1b031e9ba4