diff options
| author | adam <adam@pkgsrc.org> | 2019-03-20 06:27:11 +0000 |
|---|---|---|
| committer | adam <adam@pkgsrc.org> | 2019-03-20 06:27:11 +0000 |
| commit | fdfe7505277e6ff40e0631f46c65be34d840890b (patch) | |
| tree | 284bc91b20b0cef40a7ef0b4bc24899a1b3ca724 /security/gnutls/PLIST | |
| parent | 78409c5f67306f15c9d04c5076f39bf235297af2 (diff) | |
| download | pkgsrc-fdfe7505277e6ff40e0631f46c65be34d840890b.tar.gz | |
gnutls: updated to 3.6.6
Version 3.6.6:
* libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
on the public key.
* libgnutls: Added support for raw public-key authentication as defined in RFC7250.
Raw public-keys can be negotiated by enabling the corresponding certificate
types via the priority strings. The raw public-key mechanism must be explicitly
enabled via the GNUTLS_ENABLE_RAWPK init flag.
* libgnutls: When on server or client side we are sending no extensions we do
not set an empty extensions field but we rather remove that field competely.
This solves a regression since 3.5.x and improves compatibility of the server
side with certain clients.
* libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
the CKA_SIGN is not set.
* libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
disable extensions at all cases, while providing a functional session. This
also implies that when specified, TLS1.3 is disabled.
* libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
The previous definition was non-functional.
* API and ABI modifications:
GNUTLS_ENABLE_RAWPK: Added
GNUTLS_ENABLE_CERT_TYPE_NEG: Removed (was no-op; replaced by GNUTLS_ENABLE_RAWPK)
GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION: Deprecated
GNUTLS_PCERT_NO_CERT: Deprecated
Diffstat (limited to 'security/gnutls/PLIST')
| -rw-r--r-- | security/gnutls/PLIST | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/security/gnutls/PLIST b/security/gnutls/PLIST index caae5a2d514..906107e73e6 100644 --- a/security/gnutls/PLIST +++ b/security/gnutls/PLIST @@ -1,4 +1,4 @@ -@comment $NetBSD: PLIST,v 1.62 2018/12/09 20:12:41 leot Exp $ +@comment $NetBSD: PLIST,v 1.63 2019/03/20 06:27:11 adam Exp $ bin/certtool bin/gnutls-cli bin/gnutls-cli-debug @@ -131,6 +131,8 @@ man/man3/gnutls_certificate_set_ocsp_status_request_function2.3 man/man3/gnutls_certificate_set_ocsp_status_request_mem.3 man/man3/gnutls_certificate_set_params_function.3 man/man3/gnutls_certificate_set_pin_function.3 +man/man3/gnutls_certificate_set_rawpk_key_file.3 +man/man3/gnutls_certificate_set_rawpk_key_mem.3 man/man3/gnutls_certificate_set_retrieve_function.3 man/man3/gnutls_certificate_set_retrieve_function2.3 man/man3/gnutls_certificate_set_retrieve_function3.3 @@ -382,6 +384,8 @@ man/man3/gnutls_pcert_export_openpgp.3 man/man3/gnutls_pcert_export_x509.3 man/man3/gnutls_pcert_import_openpgp.3 man/man3/gnutls_pcert_import_openpgp_raw.3 +man/man3/gnutls_pcert_import_rawpk.3 +man/man3/gnutls_pcert_import_rawpk_raw.3 man/man3/gnutls_pcert_import_x509.3 man/man3/gnutls_pcert_import_x509_list.3 man/man3/gnutls_pcert_import_x509_raw.3 |