update to gnutls-2.4.1

Changes:

** libgnutls: Fix local crash in gnutls_handshake. [GNUTLS-SA-2008-2]
** libgnutls: Fix memory leaks when doing a re-handshake.
** Fix compiler warnings.
** Fix ordering of -I's to avoid opencdk.h conflict with system headers.
** srptool: Fix a problem where --verify check does not succeed.

1 files changed, 61 insertions, 2 deletions

diff --git a/security/gnutls/PLIST b/security/gnutls/PLIST
index 4f51fced41f..03af878c121 100644
--- a/security/gnutls/PLIST
+++ b/security/gnutls/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.31 2008/03/06 14:52:12 wiz Exp $
+@comment $NetBSD: PLIST,v 1.32 2008/07/30 17:17:21 kefren Exp $
 bin/certtool
 bin/gnutls-cli
 bin/gnutls-cli-debug
@@ -8,6 +8,7 @@ bin/libgnutls-extra-config
 bin/psktool
 bin/srptool
 include/gnutls/compat.h
+include/gnutls/crypto.h
 include/gnutls/extra.h
 include/gnutls/gnutls.h
 include/gnutls/gnutlsxx.h
@@ -65,15 +66,20 @@ man/man3/gnutls_certificate_free_cas.3
 man/man3/gnutls_certificate_free_credentials.3
 man/man3/gnutls_certificate_free_crls.3
 man/man3/gnutls_certificate_free_keys.3
+man/man3/gnutls_certificate_get_openpgp_keyring.3
 man/man3/gnutls_certificate_get_ours.3
 man/man3/gnutls_certificate_get_peers.3
+man/man3/gnutls_certificate_get_x509_cas.3
+man/man3/gnutls_certificate_get_x509_crls.3
 man/man3/gnutls_certificate_send_x509_rdn_sequence.3
 man/man3/gnutls_certificate_server_set_request.3
 man/man3/gnutls_certificate_server_set_retrieve_function.3
 man/man3/gnutls_certificate_set_dh_params.3
 man/man3/gnutls_certificate_set_openpgp_key.3
 man/man3/gnutls_certificate_set_openpgp_key_file.3
+man/man3/gnutls_certificate_set_openpgp_key_file2.3
 man/man3/gnutls_certificate_set_openpgp_key_mem.3
+man/man3/gnutls_certificate_set_openpgp_key_mem2.3
 man/man3/gnutls_certificate_set_openpgp_keyring_file.3
 man/man3/gnutls_certificate_set_openpgp_keyring_mem.3
 man/man3/gnutls_certificate_set_params_function.3
@@ -113,6 +119,10 @@ man/man3/gnutls_compression_list.3
 man/man3/gnutls_compression_set_priority.3
 man/man3/gnutls_credentials_clear.3
 man/man3/gnutls_credentials_set.3
+man/man3/gnutls_crypto_cipher_register.3
+man/man3/gnutls_crypto_digest_register.3
+man/man3/gnutls_crypto_mac_register.3
+man/man3/gnutls_crypto_rnd_register.3
 man/man3/gnutls_db_check_entry.3
 man/man3/gnutls_db_get_ptr.3
 man/man3/gnutls_db_remove_session.3
@@ -153,6 +163,7 @@ man/man3/gnutls_handshake_get_last_out.3
 man/man3/gnutls_handshake_set_max_packet_length.3
 man/man3/gnutls_handshake_set_post_client_hello_function.3
 man/man3/gnutls_handshake_set_private_extensions.3
+man/man3/gnutls_hex2bin.3
 man/man3/gnutls_hex_decode.3
 man/man3/gnutls_hex_encode.3
 man/man3/gnutls_ia_allocate_client_credentials.3
@@ -191,26 +202,64 @@ man/man3/gnutls_malloc.3
 man/man3/gnutls_openpgp_crt_check_hostname.3
 man/man3/gnutls_openpgp_crt_deinit.3
 man/man3/gnutls_openpgp_crt_export.3
+man/man3/gnutls_openpgp_crt_get_auth_subkey.3
 man/man3/gnutls_openpgp_crt_get_creation_time.3
 man/man3/gnutls_openpgp_crt_get_expiration_time.3
 man/man3/gnutls_openpgp_crt_get_fingerprint.3
-man/man3/gnutls_openpgp_crt_get_id.3
+man/man3/gnutls_openpgp_crt_get_key_id.3
 man/man3/gnutls_openpgp_crt_get_key_usage.3
 man/man3/gnutls_openpgp_crt_get_name.3
 man/man3/gnutls_openpgp_crt_get_pk_algorithm.3
+man/man3/gnutls_openpgp_crt_get_pk_dsa_raw.3
+man/man3/gnutls_openpgp_crt_get_pk_rsa_raw.3
+man/man3/gnutls_openpgp_crt_get_preferred_key_id.3
+man/man3/gnutls_openpgp_crt_get_revoked_status.3
+man/man3/gnutls_openpgp_crt_get_subkey_count.3
+man/man3/gnutls_openpgp_crt_get_subkey_creation_time.3
+man/man3/gnutls_openpgp_crt_get_subkey_expiration_time.3
+man/man3/gnutls_openpgp_crt_get_subkey_fingerprint.3
+man/man3/gnutls_openpgp_crt_get_subkey_id.3
+man/man3/gnutls_openpgp_crt_get_subkey_idx.3
+man/man3/gnutls_openpgp_crt_get_subkey_pk_algorithm.3
+man/man3/gnutls_openpgp_crt_get_subkey_pk_dsa_raw.3
+man/man3/gnutls_openpgp_crt_get_subkey_pk_rsa_raw.3
+man/man3/gnutls_openpgp_crt_get_subkey_revoked_status.3
+man/man3/gnutls_openpgp_crt_get_subkey_usage.3
 man/man3/gnutls_openpgp_crt_get_version.3
 man/man3/gnutls_openpgp_crt_import.3
 man/man3/gnutls_openpgp_crt_init.3
+man/man3/gnutls_openpgp_crt_print.3
+man/man3/gnutls_openpgp_crt_set_preferred_key_id.3
 man/man3/gnutls_openpgp_crt_verify_ring.3
 man/man3/gnutls_openpgp_crt_verify_self.3
 man/man3/gnutls_openpgp_keyring_check_id.3
 man/man3/gnutls_openpgp_keyring_deinit.3
+man/man3/gnutls_openpgp_keyring_get_crt.3
+man/man3/gnutls_openpgp_keyring_get_crt_count.3
 man/man3/gnutls_openpgp_keyring_import.3
 man/man3/gnutls_openpgp_keyring_init.3
 man/man3/gnutls_openpgp_privkey_deinit.3
+man/man3/gnutls_openpgp_privkey_export.3
+man/man3/gnutls_openpgp_privkey_export_dsa_raw.3
+man/man3/gnutls_openpgp_privkey_export_rsa_raw.3
+man/man3/gnutls_openpgp_privkey_export_subkey_dsa_raw.3
+man/man3/gnutls_openpgp_privkey_export_subkey_rsa_raw.3
+man/man3/gnutls_openpgp_privkey_get_fingerprint.3
+man/man3/gnutls_openpgp_privkey_get_key_id.3
 man/man3/gnutls_openpgp_privkey_get_pk_algorithm.3
+man/man3/gnutls_openpgp_privkey_get_preferred_key_id.3
+man/man3/gnutls_openpgp_privkey_get_revoked_status.3
+man/man3/gnutls_openpgp_privkey_get_subkey_count.3
+man/man3/gnutls_openpgp_privkey_get_subkey_creation_time.3
+man/man3/gnutls_openpgp_privkey_get_subkey_expiration_time.3
+man/man3/gnutls_openpgp_privkey_get_subkey_fingerprint.3
+man/man3/gnutls_openpgp_privkey_get_subkey_id.3
+man/man3/gnutls_openpgp_privkey_get_subkey_idx.3
+man/man3/gnutls_openpgp_privkey_get_subkey_pk_algorithm.3
+man/man3/gnutls_openpgp_privkey_get_subkey_revoked_status.3
 man/man3/gnutls_openpgp_privkey_import.3
 man/man3/gnutls_openpgp_privkey_init.3
+man/man3/gnutls_openpgp_privkey_set_preferred_key_id.3
 man/man3/gnutls_openpgp_privkey_sign_hash.3
 man/man3/gnutls_openpgp_send_cert.3
 man/man3/gnutls_openpgp_set_recv_key_function.3
@@ -271,14 +320,17 @@ man/man3/gnutls_protocol_list.3
 man/man3/gnutls_protocol_set_priority.3
 man/man3/gnutls_psk_allocate_client_credentials.3
 man/man3/gnutls_psk_allocate_server_credentials.3
+man/man3/gnutls_psk_client_get_hint.3
 man/man3/gnutls_psk_free_client_credentials.3
 man/man3/gnutls_psk_free_server_credentials.3
+man/man3/gnutls_psk_netconf_derive_key.3
 man/man3/gnutls_psk_server_get_username.3
 man/man3/gnutls_psk_set_client_credentials.3
 man/man3/gnutls_psk_set_client_credentials_function.3
 man/man3/gnutls_psk_set_params_function.3
 man/man3/gnutls_psk_set_server_credentials_file.3
 man/man3/gnutls_psk_set_server_credentials_function.3
+man/man3/gnutls_psk_set_server_credentials_hint.3
 man/man3/gnutls_psk_set_server_dh_params.3
 man/man3/gnutls_psk_set_server_params_function.3
 man/man3/gnutls_record_check_pending.3
@@ -453,7 +505,11 @@ man/man3/gnutls_x509_crt_sign.3
 man/man3/gnutls_x509_crt_sign2.3
 man/man3/gnutls_x509_crt_verify.3
 man/man3/gnutls_x509_crt_verify_data.3
+man/man3/gnutls_x509_dn_deinit.3
+man/man3/gnutls_x509_dn_export.3
 man/man3/gnutls_x509_dn_get_rdn_ava.3
+man/man3/gnutls_x509_dn_import.3
+man/man3/gnutls_x509_dn_init.3
 man/man3/gnutls_x509_dn_oid_known.3
 man/man3/gnutls_x509_privkey_cpy.3
 man/man3/gnutls_x509_privkey_deinit.3
@@ -482,6 +538,7 @@ share/doc/gnutls/TODO
 share/doc/gnutls/gnutls.ps
 share/examples/gnutls/ex-alert.c
 share/examples/gnutls/ex-cert-select.c
+share/examples/gnutls/ex-client-psk.c
 share/examples/gnutls/ex-client-resume.c
 share/examples/gnutls/ex-client-srp.c
 share/examples/gnutls/ex-client-tlsia.c
@@ -493,6 +550,7 @@ share/examples/gnutls/ex-rfc2818.c
 share/examples/gnutls/ex-serv-anon.c
 share/examples/gnutls/ex-serv-export.c
 share/examples/gnutls/ex-serv-pgp.c
+share/examples/gnutls/ex-serv-psk.c
 share/examples/gnutls/ex-serv-srp.c
 share/examples/gnutls/ex-serv1.c
 share/examples/gnutls/ex-session-info.c
@@ -506,6 +564,7 @@ share/locale/ms/LC_MESSAGES/gnutls.mo
 share/locale/nl/LC_MESSAGES/gnutls.mo
 share/locale/pl/LC_MESSAGES/gnutls.mo
 share/locale/sv/LC_MESSAGES/gnutls.mo
+share/locale/vi/LC_MESSAGES/gnutls.mo
 @dirrm share/examples/gnutls
 @dirrm share/doc/gnutls
 @dirrm include/gnutls