summaryrefslogtreecommitdiff
path: root/security/gnupg2
diff options
context:
space:
mode:
authoradam <adam@pkgsrc.org>2019-03-20 06:27:11 +0000
committeradam <adam@pkgsrc.org>2019-03-20 06:27:11 +0000
commitfdfe7505277e6ff40e0631f46c65be34d840890b (patch)
tree284bc91b20b0cef40a7ef0b4bc24899a1b3ca724 /security/gnupg2
parent78409c5f67306f15c9d04c5076f39bf235297af2 (diff)
downloadpkgsrc-fdfe7505277e6ff40e0631f46c65be34d840890b.tar.gz
gnutls: updated to 3.6.6
Version 3.6.6: * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits on the public key. * libgnutls: Added support for raw public-key authentication as defined in RFC7250. Raw public-keys can be negotiated by enabling the corresponding certificate types via the priority strings. The raw public-key mechanism must be explicitly enabled via the GNUTLS_ENABLE_RAWPK init flag. * libgnutls: When on server or client side we are sending no extensions we do not set an empty extensions field but we rather remove that field competely. This solves a regression since 3.5.x and improves compatibility of the server side with certain clients. * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if the CKA_SIGN is not set. * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely disable extensions at all cases, while providing a functional session. This also implies that when specified, TLS1.3 is disabled. * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated. The previous definition was non-functional. * API and ABI modifications: GNUTLS_ENABLE_RAWPK: Added GNUTLS_ENABLE_CERT_TYPE_NEG: Removed (was no-op; replaced by GNUTLS_ENABLE_RAWPK) GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION: Deprecated GNUTLS_PCERT_NO_CERT: Deprecated
Diffstat (limited to 'security/gnupg2')
0 files changed, 0 insertions, 0 deletions