summaryrefslogtreecommitdiff
path: root/configure.ac
Commit message (Collapse)AuthorAgeFilesLines
* Release 3.6.14 [ci skip]Daiki Ueno2020-06-031-1/+1
| | | | Signed-off-by: Daiki Ueno <ueno@gnu.org>
* Merge branch 'nowincrypt' into 'master'Dmitry Baryshkov2020-05-311-0/+7
|\ | | | | | | | | use bcrypt for the windows random generator instead of wincrypt See merge request gnutls/gnutls!1255
| * win32: use bcrypt instead of CryptoAPI on Vista+ for random numbersSteve Lhomme2020-05-281-0/+7
| | | | | | | | | | | | | | | | | | | | | | | | CryptoAPI is a deprecated API [1] that is forbidden in UWP builds. Rewrite the CryptoAPI calls in bcrypt. bcrypt is used instead of CryptoAPI when targeting Windows Vista and above. https://docs.microsoft.com/en-us/windows/win32/api/wincrypt/nf-wincrypt-cryptdecrypt Signed-off-by: Steve Lhomme <robux4@ycbcr.xyz>
* | Merge branch 'fix-valgrind' into 'master'Dmitry Baryshkov2020-05-311-0/+4
|\ \ | | | | | | | | | | | | | | | | | | configure.ac: add -fno-builtin-strcmp if valgrind is enabled Closes #944 See merge request gnutls/gnutls!1264
| * | configure.ac: add -fno-builtin-strcmp if valgrind is enabledDmitry Baryshkov2020-05-261-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Recent GCC provides strcmp which makes Valgrind assume that it accesses uninitialized data. Disable this optimization if Valgrind tests are enabled. Fixes #944 Signed-off-by: Dmitry Baryshkov <dbaryshkov@gmail.com>
* | | Merge branch 'tmp-fix-macosx-link' into 'master'Dmitry Baryshkov2020-05-301-1/+1
|\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | configure: check that -no_weak_links works with FD_SET Closes #966 See merge request gnutls/gnutls!1266
| * | | configure: check that -no_weak_links works with FD_SETDmitry Baryshkov2020-05-261-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Several Xcode/SDK versions provide FD_SET implementation that does not work with -no_weak_links. Check that this option does not break FD_SET usage. Fixes #966 Signed-off-by: Dmitry Baryshkov <dbaryshkov@gmail.com>
* | | | Merge branch 'tmp-fileio' into 'master'Daiki Ueno2020-05-301-1/+0
|\ \ \ \ | |_|_|/ |/| | | | | | | | | | | lib: improve external file loading See merge request gnutls/gnutls!1261
| * | | gnulib: update git submoduleDaiki Ueno2020-05-291-1/+0
| | |/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | This brings in the new fopen-gnu module and the RF_SENSITIVE flag for fread_file and read_file. This also adds the following changes to be consistent with the latest changes in Gnulib: - the callers of fread_file and read_file to be adjusted for the FLAGS argument - "attribute.h" needs to be used extensively Signed-off-by: Daiki Ueno <ueno@gnu.org>
* | | configure.ac: determine if the Vista APIs can be linked staticallySteve Lhomme2020-05-271-0/+17
| |/ |/| | | | | | | | | | | | | | | | | | | | | | | If _WIN32_WINNT is higher or equal to 0x0600, Vista API's are allowed during the build. We can assume that the minimum platform the code will run on is Vista [1] In that case there's no need to call API's (ncrypt) dynamically when it can be done statically. [1] https://docs.microsoft.com/en-us/cpp/porting/modifying-winver-and-win32-winnt Signed-off-by: Steve Lhomme <robux4@ycbcr.xyz>
* | win32: link with crypt32Steve Lhomme2020-05-201-0/+2
|/ | | | | | | | | | | Since 5d03564cccd2c10c41252ea468d4a098bd08e9c1 we use CertOpenStore(). To properly link it needs to be linked with the crypt32.dll. https://docs.microsoft.com/en-us/windows/win32/api/wincrypt/nf-wincrypt-certopenstore This library was missing from the pkg-config library. It exists in thirdparty_libadd to link gnutls as a DLL. Signed-off-by: Steve Lhomme <robux4@ycbcr.xyz>
* Merge branch 'tmp-siv' into 'master'Dmitry Baryshkov2020-05-041-3/+17
|\ | | | | | | | | | | | | nettle: expose SIV-CMAC through the AEAD interface Closes #974 and #463 See merge request gnutls/gnutls!1238
| * nettle: vendor in SIV-CMAC implementationDaiki Ueno2020-05-041-0/+7
| | | | | | | | Signed-off-by: Daiki Ueno <ueno@gnu.org>
| * nettle: avoid manual backports of CFB8, CMAC, and XTSDaiki Ueno2020-05-041-0/+8
| | | | | | | | Signed-off-by: Daiki Ueno <ueno@gnu.org>
| * configure.ac: fix broken nettle_cfb8_decrypt detectionDaiki Ueno2020-05-041-3/+2
| | | | | | | | | | | | | | | | | | | | Given the fixed version of the function will be part of Nettle 3.6, use pkg-config --atleast-version instead of a manually comparison of the Nettle version. Fixes #974. Signed-off-by: Daiki Ueno <ueno@gnu.org>
* | Merge branch 'tmp-reproducible-build' into 'master'Tim Rühsen2020-05-041-4/+0
|\ \ | |/ |/| | | | | | | | | New make target 'update-copyright-year' Closes #980 See merge request gnutls/gnutls!1241
| * New make target 'update-copyright-year'tmp-reproducible-buildTim Rühsen2020-05-011-4/+0
| | | | | | | | | | | | | | | | | | | | | | | | We don't want to automatically update the copyright year as this prevents reproducible builds. Instead, 'make update-copyright-year' has to be executed at the start of each new year and the changes have to be pushed. Closes #980 Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* | gost: use gostdsa-vko from nettle 3.6rc3Dmitry Baryshkov2020-04-281-6/+0
|/ | | | | | | Now as we have upgraded Nettle to 3.6rc3 (which includes gostdsa_vko), use this function from imported nettle sources. Signed-off-by: Dmitry Baryshkov <dbaryshkov@gmail.com>
* fips: check library soname during configuretmp-check-sonameDaiki Ueno2020-04-241-0/+43
| | | | | | | | | | | | Previously, we hard-coded the sonames of linked libraries for FIPS integrity checking. That required downstream packagers to manually adjust the relevant code in lib/fips.c, when a new interface version of the dependent libraries (nettle, gmp) becomes available and linked to libgnutls. This patch automates that process with the configure script. Signed-off-by: Daiki Ueno <dueno@redhat.com>
* gost: update gostdsa_vko to follow NettleDmitry Baryshkov2020-04-211-0/+6
| | | | | | Update gostdsa_vko() following changes going to be accepted into Nettle. Signed-off-by: Dmitry Baryshkov <dbaryshkov@gmail.com>
* nettle: use new imported source files for GOST DSADmitry Baryshkov2020-04-141-14/+5
| | | | | | | Provide GOST support using source files copied by script rather than manually crafted by me. Signed-off-by: Dmitry Baryshkov <dbaryshkov@gmail.com>
* Merge branch 'tmp-valgrind-memcheck' into 'master'Nikos Mavrogiannopoulos2020-04-051-0/+2
|\ | | | | | | | | build: use valgrind client request to detect undefined memory use See merge request gnutls/gnutls!1228
| * build: use valgrind client request to detect undefined memory usetmp-valgrind-memcheckDaiki Ueno2020-04-041-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This tightens the check introduced in ac2f71b892d13a7ab4cc39086eef179042c7e23c, by using the valgrind client request to explicitly mark the "uninitialized but initialization is needed before use" regions. With this patch and the fix (c01011c2d8533dbbbe754e49e256c109cb848d0d) reverted, you will see the following error when running dtls_hello_random_value under valgrind: $ valgrind ./dtls_hello_random_value testing: default ==520145== Conditional jump or move depends on uninitialised value(s) ==520145== at 0x4025F5: hello_callback (dtls_hello_random_value.c:90) ==520145== by 0x488BF97: _gnutls_call_hook_func (handshake.c:1215) ==520145== by 0x488C1AA: _gnutls_send_handshake2 (handshake.c:1332) ==520145== by 0x488FC7E: send_client_hello (handshake.c:2290) ==520145== by 0x48902A1: handshake_client (handshake.c:2908) ==520145== by 0x48902A1: gnutls_handshake (handshake.c:2740) ==520145== by 0x402CB3: client (dtls_hello_random_value.c:153) ==520145== by 0x402CB3: start (dtls_hello_random_value.c:317) ==520145== by 0x402EFE: doit (dtls_hello_random_value.c:331) ==520145== by 0x4023D4: main (utils.c:254) ==520145== Signed-off-by: Daiki Ueno <dueno@redhat.com>
* | IDNA: require libidn2 2.0.0Nikos Mavrogiannopoulos2020-03-311-17/+9
|/ | | | | | | | | | | We require private symbols which dissapear at some point in IDN2 releases in order to support old versions of libidn2. Simplify the code by requiring only recent versions and avoid issues such as #832. Resolves: #832 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* bumped versionNikos Mavrogiannopoulos2020-03-301-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* nettle: vendor in ChaCha20 implementation from nettleDaiki Ueno2020-03-191-0/+9
| | | | | | | This enables to use bundled ChaCha20 implementation if the system nettle doesn't have nettle_chacha_set_counter. Signed-off-by: Daiki Ueno <dueno@redhat.com>
* nettle/gost: support use GOST DSA support from master branchDmitry Baryshkov2020-01-301-0/+9
| | | | | | Use GOST DSA and GOST curves provided by Nettle's master branch. Signed-off-by: Dmitry Baryshkov <dbaryshkov@gmail.com>
* nettle: vendor in Curve448 and Ed448 implementationDaiki Ueno2020-01-231-0/+10
| | | | Signed-off-by: Daiki Ueno <dueno@redhat.com>
* ecore cli: updated and rewritten to use libevNikos Mavrogiannopoulos2020-01-031-1/+11
| | | | | | | | | That removes a lot of code that was not necessary in the gnutls test suite. Resolves: #884 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* Merge branch 'wip-arch-independent-scm' into 'master'Nikos Mavrogiannopoulos2020-01-011-0/+10
|\ | | | | | | | | | | | | guile: Arrange to make 'gnutls.scm' architecture-independent. Closes #838 See merge request gnutls/gnutls!1121
| * guile: Arrange to make 'gnutls.scm' architecture-independent.Ludovic Courtès2019-12-261-0/+10
| | | | | | | | | | | | | | | | | | | | | | | | Fixes #838. Reported by Andreas Metzler. * configure.ac: Define and substitute 'maybe_guileextensiondir'. * guile/Makefile.am (.in.scm): Substitute 'maybe_guileextensiondir'. * guile/modules/gnutls.in <top level>: Use @maybe_guileextensiondir@. Check if %LIBDIR is true. Signed-off-by: Ludovic Courtès <ludo@gnu.org>
* | x509: do not tolerate invalid DER timeNikos Mavrogiannopoulos2019-12-261-0/+1
| | | | | | | | | | | | | | | | | | | | | | This effectively reverts !400 and ensures that we no longer tolerate invalid DER time. This complements the previous commit by Lili Quan and ensures we provide the --disable-strict-der-time backwards compatibility option. Resolves: #207 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* | abi: updated to latest const changes and added NEWS entrytmp-more-const-1Nikos Mavrogiannopoulos2019-12-101-1/+1
| | | | | | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* | Revert "Released 3.6.11.1 including missing files"gnutls_3_6_11_1Nikos Mavrogiannopoulos2019-12-021-1/+1
| | | | | | | | | | | | This reverts commit 1e9c9ba0c0798b5566902e6c5ab83418826dd7f5. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* | Released 3.6.11.1 including missing filesNikos Mavrogiannopoulos2019-12-021-1/+1
| | | | | | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* | bumped versionNikos Mavrogiannopoulos2019-11-291-1/+1
|/ | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* guile: Do not attempt to load shared object when cross-compiling.Ludovic Courtès2019-11-111-0/+1
| | | | | | | | | | | | | | Reported by Helmut Grohne <helmut@subdivi.de> and Andreas Metzler <ametzler@bebt.de> at <https://bugs.debian.org/943905>. * configure.ac: Add 'CROSS_COMPILING' conditional. * guile/Makefile.am (CROSS_COMPILING_VARIABLE): New variable. (%.go): Use it. * guile/modules/gnutls.in <top level>: Do not call 'load-extension' when "GNUTLS_GUILE_CROSS_COMPILING" is defined. Signed-off-by: Ludovic Courtès <ludo@gnu.org>
* nettle: use included CFB8 implementation if nettle is 3.5Daiki Ueno2019-11-081-0/+8
| | | | Signed-off-by: Daiki Ueno <dueno@redhat.com>
* nettle: Support sysctl(KERN_ARND) for RNG on NetBSD.nia2019-10-261-0/+17
| | | | | | | | This system call will never block and does not require a file descriptor to be opened. It provides an endless stream of random numbers from the kernel's ChaCha20-based random number generator. Signed-off-by: Nia Alarie <nia@NetBSD.org>
* bumped versionsgnutls_3_6_10Nikos Mavrogiannopoulos2019-09-291-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* nettle: use nettle_get_secpp* consistentlyNikos Mavrogiannopoulos2019-09-231-1/+1
| | | | | | | | | We already depend on nettle 3.4.1 which provides that symbol, ensure that we use it consistently. Relates: #835 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* guile: Add support for Guile 3.0.Ludovic Courtès2019-09-161-2/+2
| | | | | | | | | * configure.ac: Add 3.0 to 'GUILE_PKG', as well as the previously-supported versions. * doc/gnutls-guile.texi (Guile Preparations): Update list of supported versions. Signed-off-by: Ludovic Courtès <ludo@gnu.org>
* tests: added interoperability test with gnutls 2.12.xNikos Mavrogiannopoulos2019-09-011-0/+10
| | | | | | This enables this test in debian build. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* read_cpuid_vals: use __get_cpuid_count() only when availabletmp-fixesNikos Mavrogiannopoulos2019-08-051-0/+11
| | | | | | | | This makes the functionality available on gcc 4.8. Resolves: #812 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* configure: AS_HELP_STRING cannot print variables; don't tryNikos Mavrogiannopoulos2019-08-051-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* bumped version for 3.6.9gnutls_3_6_9Nikos Mavrogiannopoulos2019-07-251-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* nettle/backport: fix xts-backport guarding checkDmitry Eremin-Solenikov2019-07-141-1/+1
| | | | | | | | Check for nettle_xts_encrypt_message() function rather than just xts_encrypt_message(). All functions in nettle are renamed to contain `nettle_` prefix. Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* nettle/gost: support building with GOST-enabled NettleDmitry Eremin-Solenikov2019-07-141-0/+17
| | | | | | | Nettle library starts to gain support for GOST algorithms. Support building GnuTLS with GOST-enabled nettle library. Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* config: added ability to override and mark algorithms as disabledNikos Mavrogiannopoulos2019-06-201-6/+12
| | | | | | | | | | | | | | | | | | | | | | | | | This allows the system administrator or the distributor to use the gnutls configuration file to mark hashes, signature algorithms, TLS versions, curves, groups, ciphers KX, and MAC algorithms as insecure (the last four only in the context of a TLS session). It also allows to set a minimum profile which the applications cannot fall below. The options intentionally do not allow marking algorithms as secure so that the configuration file cannot be used as an attack vector. This change also makes sure that unsupported and disabled protocols during compile time (e.g., SSL3.0), do not get listed by gnutls-cli. The configuration file feature can be disabled at compile time with an empty --with-system-priority-file. This patch it introduces the function gnutls_get_system_config_file() allowing applications to check whether a configuration file was used. Resolves: #587 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* Use inih to parse configuration fileNikos Mavrogiannopoulos2019-06-201-0/+7
| | | | | | | | | This introduces the inih copylib, and makes our configuration file parsing more flexible. Relates: #587 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
View Lorry Controller Status