Update to 1.4.0:

Noteworthy changes in version 1.4.0 (2007-12-10)
------------------------------------------------

 * New configure option --disable-padlock-support which is mostly
   useful in case of build problems.


Noteworthy changes in version 1.3.2 (2007-12-03)
------------------------------------------------

 * The visibility attribute is now used if supported by the toolchain.

 * The ACE engine of VIA processors is now used for AES-128.

 * The ASN.1 DER template for SHA-224 has been fixed.


Noteworthy changes in version 1.3.1 (2007-10-26)
------------------------------------------------

 * The entire library is now under the LGPL. The helper programs and
   the manual are under the GPL.  Kudos to Peter Gutmann for giving
   permissions to relicense the rndw32 and rndunix modules.

 * The Camellia cipher is now under the LGPL and included by default.

 * Fixed a bug in the detection of symbol prefixes which inhibited the
   build of optimzied assembler code on certain systems.

 * Updated the entropy gatherer for W32.


Noteworthy changes in version 1.3.0 (2007-05-04)
------------------------------------------------

 * Changed the way the RNG gets initialized. This allows to keep it
   uninitialized as long as no random numbers are used.  To override
   this, the new macro gcry_fast_random_poll may be used.  It is in
   general a good idea to spread this macro into the application code
   to make sure that these polls happen often enough.

 * Made the RNG immune against fork without exec.

 * Reading and writing the random seed file is now protected by a
   fcntl style file lock on systems that provide this function.

 * Support for SHA-224 and HMAC using SHA-384 and SHA-512.

 * Support for the SEED cipher.

 * Support for the Camellia cipher.  Note that Camellia is disabled by
   default, and that enabling it changes the license of libgcrypt from
   LGPL to GPL.

 * Support for OFB encryption mode.

 * gcry_mpi_rshift does not anymore truncate the shift count.

 * Reserved algorithm ranges for use by applications.

 * Support for DSA2.

 * The new function gcry_md_debug should be used instead of the
   gcry_md_start_debug and gcry_md_stop_debug macros.

 * New configure option --enable-random-daemon to support a system
   wide random daemon.  The daemon code is experimental and not yet
   very well working.  It will eventually allow to keep a global
   random pool for the sake of short living processes.

 * Non executable stack support is now used by default on systems
   supporting it.

 * Support for Microsoft Windows.

 * Assembler support for the AMD64 architecture.

 * New configure option --enable-mpi-path for optimized builds.

 * Experimental support for ECDSA; should only be used for testing.

 * New control code GCRYCTL_PRINT_CONFIG to print the build
   configuration.

 * Minor changes to some function declarations.  Buffer arguments are
   now typed as void pointer.  This should not affect any compilation.
   Fixed two bugs in return values and clarified documentation.

 * Interface changes relative to the 1.2.0 release:
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 gcry_fast_random_poll	 NEW
 gcry_md_debug           NEW
 gcry_sexp_nth_string    NEW
 GCRY_MD_SHA224          NEW
 GCRY_PK_USAGE_CERT      NEW
 GCRY_PK_USAGE_AUTH      NEW
 GCRY_PK_USAGE_UNKN      NEW
 GCRY_PK_ECDSA           NEW
 GCRY_CIPHER_SEED        NEW
 GCRY_CIPHER_CAMELLIA128 NEW
 GCRY_CIPHER_CAMELLIA192 NEW
 GCRY_CIPHER_CAMELLIA256 NEW
 GCRYCTL_FAKED_RANDOM_P  NEW
 GCRYCTL_PRINT_CONFIG    NEW
 GCRYCTL_SET_RNDEGD_SOCKET  NEW.
 gcry_mpi_scan           CHANGED: Argument BUFFER is now void*.
 gcry_pk_algo_name       CHANGED: Returns "?" instead of NULL.
 gcry_cipher_algo_name   CHANGED: Returns "?" instead of "".
 gcry_pk_spec_t          CHANGED: Element ALIASES is now const ptr.
 gcry_md_write_t         CHANGED: Argument BUF is now a const void*.
 gcry_md_ctl             CHANGED: Argument BUFFER is now void*.
 gcry_cipher_encrypt     CHANGED: Arguments IN and OUT are now void*.
 gcry_cipher_decrypt     CHANGED: Arguments IN and OUT are now void*.
 gcry_sexp_sprint        CHANGED: Argument BUFFER is now void*.
 gcry_create_nonce       CHANGED: Argument BUFFER is now void*.
 gcry_randomize          CHANGED: Argument BUFFER is now void*.
 gcry_cipher_register    CHANGED: Argument ALGORITHM_ID is now int*.

3 files changed, 12 insertions, 25 deletions

diff --git a/security/libgcrypt/patches/patch-ac b/security/libgcrypt/patches/patch-ac
index fcf92badd38..39070b9ced0 100644
--- a/security/libgcrypt/patches/patch-ac
+++ b/security/libgcrypt/patches/patch-ac
@@ -1,16 +1,16 @@
-$NetBSD: patch-ac,v 1.5 2007/02/03 00:08:51 wiz Exp $
+$NetBSD: patch-ac,v 1.6 2008/03/07 16:16:22 wiz Exp $
 
---- src/gcrypt.h.orig	2007-02-01 18:43:13.000000000 +0000
+--- src/gcrypt.h.orig	2007-12-10 09:05:46.000000000 +0000
 +++ src/gcrypt.h
-@@ -171,6 +171,11 @@ enum gcry_thread_option
- #define _GCRY_PTH_SOCKADDR  void
- #define _GCRY_PTH_SOCKLEN_T int
- #define _GCRY_PTH_MSGHDR    void
+@@ -171,6 +171,11 @@ gcry_err_code_t gcry_error_from_errno (i
+ 
+ 
+ enum gcry_thread_option
 +#elif defined(__INTERIX)
 +#define _GCRY_PTH_FD_SET    fd_set
 +#define _GCRY_PTH_SOCKADDR  struct sockaddr
 +#define _GCRY_PTH_SOCKLEN_T int
 +#define _GCRY_PTH_MSGHDR    void
- #else
- #define _GCRY_PTH_FD_SET    fd_set
- #define _GCRY_PTH_SOCKADDR  struct sockaddr
+   {
+     GCRY_THREAD_OPTION_DEFAULT = 0,
+     GCRY_THREAD_OPTION_USER = 1,
diff --git a/security/libgcrypt/patches/patch-ae b/security/libgcrypt/patches/patch-ae
index 001a11c3100..2551cadc880 100644
--- a/security/libgcrypt/patches/patch-ae
+++ b/security/libgcrypt/patches/patch-ae
@@ -1,6 +1,6 @@
-$NetBSD: patch-ae,v 1.3 2005/10/06 12:20:41 wiz Exp $
+$NetBSD: patch-ae,v 1.4 2008/03/07 16:16:22 wiz Exp $
 
---- src/ath.h.orig	2005-07-29 15:45:42.000000000 +0200
+--- src/ath.h.orig	2007-02-22 11:15:20.000000000 +0000
 +++ src/ath.h
 @@ -31,6 +31,12 @@
  
@@ -16,7 +16,7 @@ $NetBSD: patch-ae,v 1.3 2005/10/06 12:20:41 wiz Exp $
  /* Define _ATH_EXT_SYM_PREFIX if you want to give all external symbols
     a prefix.  */
 @@ -83,6 +89,14 @@ struct ath_ops
-   int (*connect) (int s, void *addr, socklen_t length);
+   int (*connect) (int s, void *addr, int length);
    int (*sendmsg) (int s, const void *msg, int flags);
    int (*recvmsg) (int s, void *msg, int flags);
 +#elif defined(__INTERIX)
diff --git a/security/libgcrypt/patches/patch-ai b/security/libgcrypt/patches/patch-ai
deleted file mode 100644
index 0ac98317752..00000000000
--- a/security/libgcrypt/patches/patch-ai
+++ /dev/null
@@ -1,13 +0,0 @@
-$NetBSD: patch-ai,v 1.1 2007/02/03 00:08:51 wiz Exp $
-
---- autogen.sh.orig	2007-02-01 15:45:43.000000000 +0000
-+++ autogen.sh
-@@ -30,7 +30,7 @@ check_version () {
- 
- DIE=no
- FORCE=
--if test "$1" == "--force"; then
-+if test "$1" = "--force"; then
-   FORCE=" --force"
-   shift
- fi