doc: mention the RFC7613 normalization and the libunistring dependency

2 files changed, 12 insertions, 2 deletions

diff --git a/NEWS b/NEWS
index 28c9e5554f..a7c73af113 100644
--- a/NEWS
+++ b/NEWS
@@ -20,10 +20,19 @@ See the end for copying conditions.
    output the strict format by default, and can revert to the old one using
    a flag.
 
+** libgnutls: In all functions accepting UTF-8 passwords, ensure that
+   passwords are normalized according to RFC7613. When invalid UTF-8
+   passwords are detected, they are only tolerated for decryption.
+   This introduces a libunistring dependency on GnuTLS. A version of
+   libunistring is included in the library for the platforms that do
+   not ship it; it can be used with the '--with-included-unistring'
+   option to configure script.
+
 ** p11tool: Introduced the --initialize-pin and --initialize-so-pin
    options.
 
 ** API and ABI modifications:
+gnutls_utf8_password_normalize: Added
 gnutls_ocsp_resp_get_responder2: Added
 gnutls_x509_crt_get_issuer_dn3: Added
 gnutls_x509_crt_get_dn3: Added
diff --git a/README.md b/README.md
index abb7f8789e..d782f61f81 100644
--- a/README.md
+++ b/README.md
@@ -37,6 +37,7 @@ We require several tools to check out and build the software, including:
 * [gperf](http://www.gnu.org/software/gperf/)
 * [libtasn1](https://www.gnu.org/software/libtasn1/) (optional)
 * [Libidn](http://www.gnu.org/software/libidn/) (optional, for internationalization of DNS)
+* [Libunistring](http://www.gnu.org/software/libunistring/) (optional, for internationalization)
 * [AWK](http://www.gnu.org/software/awk/) (for make dist, pmccabe2html)
 * [git2cl](http://savannah.nongnu.org/projects/git2cl/) (for make dist, ChangeLog)
 * [bison](http://www.gnu.org/software/bison) (for datetime parser in certtool)
@@ -50,7 +51,7 @@ some hints:
 Debian/Ubuntu:
 ```
 apt-get install -y git-core autoconf libtool gettext autopoint
-apt-get install -y automake autogen nettle-dev libp11-kit-dev libtspi-dev
+apt-get install -y automake autogen nettle-dev libp11-kit-dev libtspi-dev libunistring-dev
 apt-get install -y guile-2.0-dev libtasn1-6-dev libidn11-dev gawk gperf git2cl
 apt-get install -y libunbound-dev dns-root-data bison help2man gtk-doc-tools
 apt-get install -y texinfo texlive texlive-generic-recommended texlive-extra-utils
@@ -59,7 +60,7 @@ apt-get install -y texinfo texlive texlive-generic-recommended texlive-extra-uti
 Fedora/RHEL:
 ```
 yum install -y git autoconf libtool gettext-devel automake autogen
-yum install -y nettle-devel p11-kit-devel autogen-libopts-devel
+yum install -y nettle-devel p11-kit-devel autogen-libopts-devel libunistring-devel
 yum install -y trousers-devel guile-devel libtasn1-devel libidn-devel gawk gperf git2cl
 yum install -y libtasn1-tools unbound-devel bison help2man gtk-doc texinfo texlive
 ```