gnutls: Update to 3.7.0

* Version 3.7.0 (released 2020-12-02)

** libgnutls: Depend on nettle 3.6 (!1322).

** libgnutls: Added a new API that provides a callback function to
   retrieve missing certificates from incomplete certificate chains
   (#202, #968, #1100).

** libgnutls: Added a new API that provides a callback function to
   output the complete path to the trusted root during certificate
   chain verification (#1012).

** libgnutls: OIDs exposed as gnutls_datum_t no longer account for the
   terminating null bytes, while the data field is null terminated.
   The affected API functions are: gnutls_ocsp_req_get_extension,
   gnutls_ocsp_resp_get_response, and gnutls_ocsp_resp_get_extension
   (#805).

** libgnutls: Added a new set of API to enable QUIC implementation (#826, #849,
   #850).

** libgnutls: The crypto implementation override APIs deprecated in 3.6.9 are
   now no-op (#790).

** libgnutls: Added MAGMA/KUZNYECHIK CTR-ACPKM and CMAC support (!1161).

** libgnutls: Support for padlock has been fixed to make it work with Zhaoxin
   CPU (#1079).

** libgnutls: The maximum PIN length for PKCS #11 has been increased from 31
   bytes to 255 bytes (#932).

** API and ABI modifications:
gnutls_x509_trust_list_set_getissuer_function: Added
gnutls_x509_trust_list_get_ptr: Added
gnutls_x509_trust_list_set_ptr: Added
gnutls_session_set_verify_output_function: Added
gnutls_record_encryption_level_t: New enum
gnutls_handshake_read_func: New callback type
gnutls_handshake_set_read_function: New function
gnutls_handshake_write: New function
gnutls_handshake_secret_func: New callback type
gnutls_handshake_set_secret_function: New function
gnutls_alert_read_func: New callback type
gnutls_alert_set_read_function: New function
gnutls_crypto_register_cipher: Deprecated; no-op
gnutls_crypto_register_aead_cipher: Deprecated; no-op
gnutls_crypto_register_mac: Deprecated; no-op
gnutls_crypto_register_digest: Deprecated; no-op

3 files changed, 18 insertions, 10 deletions

diff --git a/security/gnutls/Makefile b/security/gnutls/Makefile
index 28b4ee84283..416c11614a3 100644
--- a/security/gnutls/Makefile
+++ b/security/gnutls/Makefile
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.217 2020/09/07 15:47:15 leot Exp $
+# $NetBSD: Makefile,v 1.218 2020/12/03 12:27:38 nia Exp $
 
-DISTNAME=	gnutls-3.6.15
+DISTNAME=	gnutls-3.7.0
 CATEGORIES=	security devel
-MASTER_SITES=	https://www.gnupg.org/ftp/gcrypt/gnutls/v3.6/
+MASTER_SITES=	https://www.gnupg.org/ftp/gcrypt/gnutls/v${PKGVERSION_NOREV:R}/
 EXTRACT_SUFX=	.tar.xz
 
 MAINTAINER=	pkgsrc-users@NetBSD.org
@@ -109,7 +109,7 @@ CHECK_BUILTIN.zlib:=yes
 #.include "../../lang/guile20/buildlink3.mk"
 BUILDLINK_API_DEPENDS.libtasn1+=	libtasn1>=4.9
 .include "../../security/libtasn1/buildlink3.mk"
-BUILDLINK_API_DEPENDS.nettle+=		nettle>=3.4.1
+BUILDLINK_API_DEPENDS.nettle+=		nettle>=3.6
 .include "../../security/nettle/buildlink3.mk"
 BUILDLINK_API_DEPENDS.p11-kit+=	p11-kit>=0.23.1
 .include "../../security/p11-kit/buildlink3.mk"
diff --git a/security/gnutls/PLIST b/security/gnutls/PLIST
index d7b316eb2b4..960faf59cfa 100644
--- a/security/gnutls/PLIST
+++ b/security/gnutls/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.71 2020/06/08 19:48:14 leot Exp $
+@comment $NetBSD: PLIST,v 1.72 2020/12/03 12:27:38 nia Exp $
 bin/certtool
 bin/gnutls-cli
 bin/gnutls-cli-debug
@@ -78,6 +78,7 @@ man/man3/gnutls_alert_get_name.3
 man/man3/gnutls_alert_get_strname.3
 man/man3/gnutls_alert_send.3
 man/man3/gnutls_alert_send_appropriate.3
+man/man3/gnutls_alert_set_read_function.3
 man/man3/gnutls_alpn_get_selected_protocol.3
 man/man3/gnutls_alpn_set_protocols.3
 man/man3/gnutls_anon_allocate_client_credentials.3
@@ -292,7 +293,10 @@ man/man3/gnutls_handshake_set_max_packet_length.3
 man/man3/gnutls_handshake_set_post_client_hello_function.3
 man/man3/gnutls_handshake_set_private_extensions.3
 man/man3/gnutls_handshake_set_random.3
+man/man3/gnutls_handshake_set_read_function.3
+man/man3/gnutls_handshake_set_secret_function.3
 man/man3/gnutls_handshake_set_timeout.3
+man/man3/gnutls_handshake_write.3
 man/man3/gnutls_hash.3
 man/man3/gnutls_hash_copy.3
 man/man3/gnutls_hash_deinit.3
@@ -737,6 +741,7 @@ man/man3/gnutls_session_set_ptr.3
 man/man3/gnutls_session_set_verify_cert.3
 man/man3/gnutls_session_set_verify_cert2.3
 man/man3/gnutls_session_set_verify_function.3
+man/man3/gnutls_session_set_verify_output_function.3
 man/man3/gnutls_session_supplemental_register.3
 man/man3/gnutls_session_ticket_enable_client.3
 man/man3/gnutls_session_ticket_enable_server.3
@@ -1187,12 +1192,15 @@ man/man3/gnutls_x509_trust_list_deinit.3
 man/man3/gnutls_x509_trust_list_get_issuer.3
 man/man3/gnutls_x509_trust_list_get_issuer_by_dn.3
 man/man3/gnutls_x509_trust_list_get_issuer_by_subject_key_id.3
+man/man3/gnutls_x509_trust_list_get_ptr.3
 man/man3/gnutls_x509_trust_list_init.3
 man/man3/gnutls_x509_trust_list_iter_deinit.3
 man/man3/gnutls_x509_trust_list_iter_get_ca.3
 man/man3/gnutls_x509_trust_list_remove_cas.3
 man/man3/gnutls_x509_trust_list_remove_trust_file.3
 man/man3/gnutls_x509_trust_list_remove_trust_mem.3
+man/man3/gnutls_x509_trust_list_set_getissuer_function.3
+man/man3/gnutls_x509_trust_list_set_ptr.3
 man/man3/gnutls_x509_trust_list_verify_crt.3
 man/man3/gnutls_x509_trust_list_verify_crt2.3
 man/man3/gnutls_x509_trust_list_verify_named_crt.3
diff --git a/security/gnutls/distinfo b/security/gnutls/distinfo
index 1a17df26dfe..d5012de5430 100644
--- a/security/gnutls/distinfo
+++ b/security/gnutls/distinfo
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.145 2020/09/07 15:47:15 leot Exp $
+$NetBSD: distinfo,v 1.146 2020/12/03 12:27:38 nia Exp $
 
-SHA1 (gnutls-3.6.15.tar.xz) = 00ef7d93347df586c3d1a00f13c326706c0c59ba
-RMD160 (gnutls-3.6.15.tar.xz) = 870c338ae8c2b6acd7000eb7daa287082ab04609
-SHA512 (gnutls-3.6.15.tar.xz) = f757d1532198f44bcad7b73856ce6a05bab43f6fb77fcc81c59607f146202f73023d0796d3e1e7471709cf792c8ee7d436e19407e0601bc0bda2f21512b3b01c
-Size (gnutls-3.6.15.tar.xz) = 6081656 bytes
+SHA1 (gnutls-3.7.0.tar.xz) = d535ebe4ae157fb79dbc34a2cf17b5173906ea0e
+RMD160 (gnutls-3.7.0.tar.xz) = 764391c259d604a0267bb673649738bc3a495507
+SHA512 (gnutls-3.7.0.tar.xz) = 5cf1025f2d0a0cbf5a83dd7f3b22dafd1769f7c3349096c0272d08573bb5ff87f510e0e69b4bbb47dad1b64476aa5479804b2f4ceb2216cd747bbc53bf42d885
+Size (gnutls-3.7.0.tar.xz) = 6129176 bytes
 SHA1 (patch-configure) = 3653f74914f874aa369f62c8b267a46fd6b78eaa
 SHA1 (patch-lib_system_certs.c) = fba74b2834a36d66bddcd7d3405d0c91c1b14efc
 SHA1 (patch-src_libopts_autoopts_options.h) = ebeeafc834bce3b6b3f938e360b089e165ee4f9e