Update gnutls to 2.12.23

Alexander Pyhalov

2016-05-06 e41cf98b163366e7df00735cb35975599a799c6f

Update gnutls to 2.12.23

 components/gnutls/gnutls.license

File was deleted

 components/gnutls/gnutls.p5m

File was deleted

 components/gnutls/patches/gnutls-01-not-build-example.patch

File was deleted

 components/gnutls/patches/gnutls-02-cve-2012-1573.patch

File was deleted

 components/gnutls/patches/gnutls-03-cve-2011-4128.patch

File was deleted

 components/gnutls/patches/gnutls-04-cve-2013-1619.patch

File was deleted

 components/gnutls/patches/gnutls-05-cve-2013-2116.patch

File was deleted

 components/gnutls/patches/gnutls-06-fix_tls_poodle.patch

File was deleted

 components/gnutls/patches/gnutls-cve-2014-0092.patch

File was deleted

 components/gnutls/patches/gnutls-cve-2014-8155.patch

File was deleted

 components/gnutls/patches/gnutls-cve-2015-0282.patch

File was deleted

 components/library/gnutls/Makefile

File was renamed from components/gnutls/Makefile
@@ -10,37 +10,43 @@
#

#
# Copyright 2014 Alexander Pyhalov.  All rights reserved.
# Copyright 2016 Alexander Pyhalov
#

include ../../make-rules/shared-macros.mk
include ../../../make-rules/shared-macros.mk

COMPONENT_NAME= gnutls

COMPONENT_VERSION= 2.8.6
COMPONENT_REVISION= 4
COMPONENT_VERSION= 2.12.23
COMPONENT_SUMMARY= GNU transport layer security library
COMPONENT_SRC= $(COMPONENT_NAME)-$(COMPONENT_VERSION)
COMPONENT_ARCHIVE= $(COMPONENT_SRC).tar.bz2
COMPONENT_ARCHIVE_HASH= \
  sha256:d6f846a7064af3ee2c9aebd65dcee76953b767170cbcd719e990ed6b9688a356
  sha256:dfa67a7e40727eb0913e75f3c44911d5d8cd58d1ead5acfe73dd933fc0d17ed2
COMPONENT_ARCHIVE_URL= \
  ftp://ftp.gnu.org/gnu/gnutls/$(COMPONENT_ARCHIVE)
  ftp://ftp.gnutls.org/gcrypt/gnutls/v2.12/$(COMPONENT_ARCHIVE)
COMPONENT_PROJECT_URL = http://www.gnutls.org
COMPONENT_FMRI = library/gnutls
COMPONENT_CLASSIFICATION = System/Libraries
COMPONENT_LICENSE = GPLv3
COMPONENT_LICENSE_FILE = COPYING

include $(WS_MAKE_RULES)/prep.mk
include $(WS_MAKE_RULES)/configure.mk
include $(WS_MAKE_RULES)/ips.mk

gcc_OPT = -O2
PATH = /usr/gnu/bin:/usr/bin

CPPFLAGS += -I/usr/include/gmp

CONFIGURE_OPTIONS += --sysconfdir=/etc
CONFIGURE_OPTIONS += --enable-guile=no
CONFIGURE_OPTIONS += --disable-camellia
CONFIGURE_OPTIONS += --without-p11-kit

CONFIGURE_ENV += CPPFLAGS="$(CPPFLAGS)"

build: $(BUILD_32_and_64)

install: $(INSTALL_32_and_64)

test: $(NO_TESTS)
test: $(TEST_32_and_64)

 components/library/gnutls/gnutls.p5m

New file
@@ -0,0 +1,750 @@
#
# This file and its contents are supplied under the terms of the
# Common Development and Distribution License ("CDDL"), version 1.0.
# You may only use this file in accordance with the terms of version
# 1.0 of the CDDL.
#
# A full copy of the text of the CDDL should have accompanied this
# source.  A copy of the CDDL is also available via the Internet at
# http://www.illumos.org/license/CDDL.
#

#
# Copyright 2016 Alexander Pyhalov
#

set name=pkg.fmri value=pkg:/$(COMPONENT_FMRI)@$(IPS_COMPONENT_VERSION),$(BUILD_VERSION)
set name=pkg.summary value="$(COMPONENT_SUMMARY)"
set name=info.classification value="$(COMPONENT_CLASSIFICATION)"
set name=info.upstream-url value=$(COMPONENT_PROJECT_URL)
set name=info.source-url value=$(COMPONENT_ARCHIVE_URL)
set name=org.opensolaris.consolidation value=$(CONSOLIDATION)

license $(COMPONENT_LICENSE_FILE) license='$(COMPONENT_LICENSE)'

<transform dir path=usr/share/locale/([^/]+)(\..+){0,1}(/.+){0,1} -> default facet.locale.%<\1> true>

# grep -v ^dir build/manifest-i386-generated.p5m | grep -v usr/share/info | grep -v '\.la$'| grep -v '\.a$' > gnutls.p5m

file path=usr/bin/$(MACH64)/certtool
file path=usr/bin/$(MACH64)/gnutls-cli
file path=usr/bin/$(MACH64)/gnutls-cli-debug
file path=usr/bin/$(MACH64)/gnutls-serv
file path=usr/bin/$(MACH64)/psktool
file path=usr/bin/$(MACH64)/srptool
file path=usr/bin/certtool
file path=usr/bin/gnutls-cli
file path=usr/bin/gnutls-cli-debug
file path=usr/bin/gnutls-serv
file path=usr/bin/psktool
file path=usr/bin/srptool
file path=usr/include/gnutls/abstract.h
file path=usr/include/gnutls/compat.h
file path=usr/include/gnutls/crypto.h
file path=usr/include/gnutls/extra.h
file path=usr/include/gnutls/gnutls.h
file path=usr/include/gnutls/gnutlsxx.h
file path=usr/include/gnutls/openpgp.h
file path=usr/include/gnutls/openssl.h
file path=usr/include/gnutls/pkcs11.h
file path=usr/include/gnutls/pkcs12.h
file path=usr/include/gnutls/x509.h
link path=usr/lib/$(MACH64)/libgnutls-extra.so target=libgnutls-extra.so.26.22.6
link path=usr/lib/$(MACH64)/libgnutls-extra.so.26 \
    target=libgnutls-extra.so.26.22.6
file path=usr/lib/$(MACH64)/libgnutls-extra.so.26.22.6
link path=usr/lib/$(MACH64)/libgnutls-openssl.so \
    target=libgnutls-openssl.so.27.0.0
link path=usr/lib/$(MACH64)/libgnutls-openssl.so.27 \
    target=libgnutls-openssl.so.27.0.0
file path=usr/lib/$(MACH64)/libgnutls-openssl.so.27.0.0
link path=usr/lib/$(MACH64)/libgnutls.so target=libgnutls.so.26.22.6
link path=usr/lib/$(MACH64)/libgnutls.so.26 target=libgnutls.so.26.22.6
file path=usr/lib/$(MACH64)/libgnutls.so.26.22.6
link path=usr/lib/$(MACH64)/libgnutlsxx.so target=libgnutlsxx.so.27.0.0
link path=usr/lib/$(MACH64)/libgnutlsxx.so.27 target=libgnutlsxx.so.27.0.0
file path=usr/lib/$(MACH64)/libgnutlsxx.so.27.0.0
file path=usr/lib/$(MACH64)/pkgconfig/gnutls-extra.pc
file path=usr/lib/$(MACH64)/pkgconfig/gnutls.pc
link path=usr/lib/libgnutls-extra.so target=libgnutls-extra.so.26.22.6
link path=usr/lib/libgnutls-extra.so.26 target=libgnutls-extra.so.26.22.6
file path=usr/lib/libgnutls-extra.so.26.22.6
link path=usr/lib/libgnutls-openssl.so target=libgnutls-openssl.so.27.0.0
link path=usr/lib/libgnutls-openssl.so.27 target=libgnutls-openssl.so.27.0.0
file path=usr/lib/libgnutls-openssl.so.27.0.0
link path=usr/lib/libgnutls.so target=libgnutls.so.26.22.6
link path=usr/lib/libgnutls.so.26 target=libgnutls.so.26.22.6
file path=usr/lib/libgnutls.so.26.22.6
link path=usr/lib/libgnutlsxx.so target=libgnutlsxx.so.27.0.0
link path=usr/lib/libgnutlsxx.so.27 target=libgnutlsxx.so.27.0.0
file path=usr/lib/libgnutlsxx.so.27.0.0
file path=usr/lib/pkgconfig/gnutls-extra.pc
file path=usr/lib/pkgconfig/gnutls.pc
file path=usr/share/locale/cs/LC_MESSAGES/libgnutls.mo
file path=usr/share/locale/de/LC_MESSAGES/libgnutls.mo
file path=usr/share/locale/en@boldquot/LC_MESSAGES/libgnutls.mo
file path=usr/share/locale/en@quot/LC_MESSAGES/libgnutls.mo
file path=usr/share/locale/fr/LC_MESSAGES/libgnutls.mo
file path=usr/share/locale/it/LC_MESSAGES/libgnutls.mo
file path=usr/share/locale/ms/LC_MESSAGES/libgnutls.mo
file path=usr/share/locale/nl/LC_MESSAGES/libgnutls.mo
file path=usr/share/locale/pl/LC_MESSAGES/libgnutls.mo
file path=usr/share/locale/sv/LC_MESSAGES/libgnutls.mo
file path=usr/share/locale/vi/LC_MESSAGES/libgnutls.mo
file path=usr/share/locale/zh_CN/LC_MESSAGES/libgnutls.mo
file path=usr/share/man/man1/certtool.1
file path=usr/share/man/man1/gnutls-cli-debug.1
file path=usr/share/man/man1/gnutls-cli.1
file path=usr/share/man/man1/gnutls-serv.1
file path=usr/share/man/man1/p11tool.1
file path=usr/share/man/man1/psktool.1
file path=usr/share/man/man1/srptool.1
file path=usr/share/man/man3/gnutls_alert_get.3
file path=usr/share/man/man3/gnutls_alert_get_name.3
file path=usr/share/man/man3/gnutls_alert_send.3
file path=usr/share/man/man3/gnutls_alert_send_appropriate.3
file path=usr/share/man/man3/gnutls_anon_allocate_client_credentials.3
file path=usr/share/man/man3/gnutls_anon_allocate_server_credentials.3
file path=usr/share/man/man3/gnutls_anon_free_client_credentials.3
file path=usr/share/man/man3/gnutls_anon_free_server_credentials.3
file path=usr/share/man/man3/gnutls_anon_set_params_function.3
file path=usr/share/man/man3/gnutls_anon_set_server_dh_params.3
file path=usr/share/man/man3/gnutls_anon_set_server_params_function.3
file path=usr/share/man/man3/gnutls_auth_client_get_type.3
file path=usr/share/man/man3/gnutls_auth_get_type.3
file path=usr/share/man/man3/gnutls_auth_server_get_type.3
file path=usr/share/man/man3/gnutls_bye.3
file path=usr/share/man/man3/gnutls_certificate_activation_time_peers.3
file path=usr/share/man/man3/gnutls_certificate_allocate_credentials.3
file path=usr/share/man/man3/gnutls_certificate_client_get_request_status.3
file path=usr/share/man/man3/gnutls_certificate_client_set_retrieve_function.3
file path=usr/share/man/man3/gnutls_certificate_expiration_time_peers.3
file path=usr/share/man/man3/gnutls_certificate_free_ca_names.3
file path=usr/share/man/man3/gnutls_certificate_free_cas.3
file path=usr/share/man/man3/gnutls_certificate_free_credentials.3
file path=usr/share/man/man3/gnutls_certificate_free_crls.3
file path=usr/share/man/man3/gnutls_certificate_free_keys.3
file path=usr/share/man/man3/gnutls_certificate_get_issuer.3
file path=usr/share/man/man3/gnutls_certificate_get_openpgp_keyring.3
file path=usr/share/man/man3/gnutls_certificate_get_ours.3
file path=usr/share/man/man3/gnutls_certificate_get_peers.3
file path=usr/share/man/man3/gnutls_certificate_get_x509_cas.3
file path=usr/share/man/man3/gnutls_certificate_get_x509_crls.3
file path=usr/share/man/man3/gnutls_certificate_send_x509_rdn_sequence.3
file path=usr/share/man/man3/gnutls_certificate_server_set_request.3
file path=usr/share/man/man3/gnutls_certificate_server_set_retrieve_function.3
file path=usr/share/man/man3/gnutls_certificate_set_dh_params.3
file path=usr/share/man/man3/gnutls_certificate_set_openpgp_key.3
file path=usr/share/man/man3/gnutls_certificate_set_openpgp_key_file.3
file path=usr/share/man/man3/gnutls_certificate_set_openpgp_key_file2.3
file path=usr/share/man/man3/gnutls_certificate_set_openpgp_key_mem.3
file path=usr/share/man/man3/gnutls_certificate_set_openpgp_key_mem2.3
file path=usr/share/man/man3/gnutls_certificate_set_openpgp_keyring_file.3
file path=usr/share/man/man3/gnutls_certificate_set_openpgp_keyring_mem.3
file path=usr/share/man/man3/gnutls_certificate_set_params_function.3
file path=usr/share/man/man3/gnutls_certificate_set_retrieve_function.3
file path=usr/share/man/man3/gnutls_certificate_set_rsa_export_params.3
file path=usr/share/man/man3/gnutls_certificate_set_verify_flags.3
file path=usr/share/man/man3/gnutls_certificate_set_verify_function.3
file path=usr/share/man/man3/gnutls_certificate_set_verify_limits.3
file path=usr/share/man/man3/gnutls_certificate_set_x509_crl.3
file path=usr/share/man/man3/gnutls_certificate_set_x509_crl_file.3
file path=usr/share/man/man3/gnutls_certificate_set_x509_crl_mem.3
file path=usr/share/man/man3/gnutls_certificate_set_x509_key.3
file path=usr/share/man/man3/gnutls_certificate_set_x509_key_file.3
file path=usr/share/man/man3/gnutls_certificate_set_x509_key_mem.3
file path=usr/share/man/man3/gnutls_certificate_set_x509_simple_pkcs12_file.3
file path=usr/share/man/man3/gnutls_certificate_set_x509_simple_pkcs12_mem.3
file path=usr/share/man/man3/gnutls_certificate_set_x509_trust.3
file path=usr/share/man/man3/gnutls_certificate_set_x509_trust_file.3
file path=usr/share/man/man3/gnutls_certificate_set_x509_trust_mem.3
file path=usr/share/man/man3/gnutls_certificate_type_get.3
file path=usr/share/man/man3/gnutls_certificate_type_get_id.3
file path=usr/share/man/man3/gnutls_certificate_type_get_name.3
file path=usr/share/man/man3/gnutls_certificate_type_list.3
file path=usr/share/man/man3/gnutls_certificate_type_set_priority.3
file path=usr/share/man/man3/gnutls_certificate_verify_peers.3
file path=usr/share/man/man3/gnutls_certificate_verify_peers2.3
file path=usr/share/man/man3/gnutls_check_version.3
file path=usr/share/man/man3/gnutls_cipher_decrypt.3
file path=usr/share/man/man3/gnutls_cipher_decrypt2.3
file path=usr/share/man/man3/gnutls_cipher_deinit.3
file path=usr/share/man/man3/gnutls_cipher_encrypt.3
file path=usr/share/man/man3/gnutls_cipher_encrypt2.3
file path=usr/share/man/man3/gnutls_cipher_get.3
file path=usr/share/man/man3/gnutls_cipher_get_block_size.3
file path=usr/share/man/man3/gnutls_cipher_get_id.3
file path=usr/share/man/man3/gnutls_cipher_get_key_size.3
file path=usr/share/man/man3/gnutls_cipher_get_name.3
file path=usr/share/man/man3/gnutls_cipher_init.3
file path=usr/share/man/man3/gnutls_cipher_list.3
file path=usr/share/man/man3/gnutls_cipher_set_priority.3
file path=usr/share/man/man3/gnutls_cipher_suite_get_name.3
file path=usr/share/man/man3/gnutls_cipher_suite_info.3
file path=usr/share/man/man3/gnutls_compression_get.3
file path=usr/share/man/man3/gnutls_compression_get_id.3
file path=usr/share/man/man3/gnutls_compression_get_name.3
file path=usr/share/man/man3/gnutls_compression_list.3
file path=usr/share/man/man3/gnutls_compression_set_priority.3
file path=usr/share/man/man3/gnutls_credentials_clear.3
file path=usr/share/man/man3/gnutls_credentials_set.3
file path=usr/share/man/man3/gnutls_crypto_bigint_register2.3
file path=usr/share/man/man3/gnutls_crypto_cipher_register2.3
file path=usr/share/man/man3/gnutls_crypto_digest_register2.3
file path=usr/share/man/man3/gnutls_crypto_mac_register2.3
file path=usr/share/man/man3/gnutls_crypto_pk_register2.3
file path=usr/share/man/man3/gnutls_crypto_rnd_register2.3
file path=usr/share/man/man3/gnutls_crypto_single_cipher_register2.3
file path=usr/share/man/man3/gnutls_crypto_single_digest_register2.3
file path=usr/share/man/man3/gnutls_crypto_single_mac_register2.3
file path=usr/share/man/man3/gnutls_db_check_entry.3
file path=usr/share/man/man3/gnutls_db_get_ptr.3
file path=usr/share/man/man3/gnutls_db_remove_session.3
file path=usr/share/man/man3/gnutls_db_set_cache_expiration.3
file path=usr/share/man/man3/gnutls_db_set_ptr.3
file path=usr/share/man/man3/gnutls_db_set_remove_function.3
file path=usr/share/man/man3/gnutls_db_set_retrieve_function.3
file path=usr/share/man/man3/gnutls_db_set_store_function.3
file path=usr/share/man/man3/gnutls_deinit.3
file path=usr/share/man/man3/gnutls_dh_get_group.3
file path=usr/share/man/man3/gnutls_dh_get_peers_public_bits.3
file path=usr/share/man/man3/gnutls_dh_get_prime_bits.3
file path=usr/share/man/man3/gnutls_dh_get_pubkey.3
file path=usr/share/man/man3/gnutls_dh_get_secret_bits.3
file path=usr/share/man/man3/gnutls_dh_params_cpy.3
file path=usr/share/man/man3/gnutls_dh_params_deinit.3
file path=usr/share/man/man3/gnutls_dh_params_export_pkcs3.3
file path=usr/share/man/man3/gnutls_dh_params_export_raw.3
file path=usr/share/man/man3/gnutls_dh_params_generate2.3
file path=usr/share/man/man3/gnutls_dh_params_import_pkcs3.3
file path=usr/share/man/man3/gnutls_dh_params_import_raw.3
file path=usr/share/man/man3/gnutls_dh_params_init.3
file path=usr/share/man/man3/gnutls_dh_set_prime_bits.3
file path=usr/share/man/man3/gnutls_error_is_fatal.3
file path=usr/share/man/man3/gnutls_error_to_alert.3
file path=usr/share/man/man3/gnutls_ext_register.3
file path=usr/share/man/man3/gnutls_extra_check_version.3
file path=usr/share/man/man3/gnutls_fingerprint.3
file path=usr/share/man/man3/gnutls_free.3
file path=usr/share/man/man3/gnutls_global_deinit.3
file path=usr/share/man/man3/gnutls_global_init.3
file path=usr/share/man/man3/gnutls_global_init_extra.3
file path=usr/share/man/man3/gnutls_global_set_log_function.3
file path=usr/share/man/man3/gnutls_global_set_log_level.3
file path=usr/share/man/man3/gnutls_global_set_mem_functions.3
file path=usr/share/man/man3/gnutls_global_set_mutex.3
file path=usr/share/man/man3/gnutls_global_set_time_function.3
file path=usr/share/man/man3/gnutls_handshake.3
file path=usr/share/man/man3/gnutls_handshake_get_last_in.3
file path=usr/share/man/man3/gnutls_handshake_get_last_out.3
file path=usr/share/man/man3/gnutls_handshake_set_max_packet_length.3
file path=usr/share/man/man3/gnutls_handshake_set_post_client_hello_function.3
file path=usr/share/man/man3/gnutls_handshake_set_private_extensions.3
file path=usr/share/man/man3/gnutls_hash.3
file path=usr/share/man/man3/gnutls_hash_deinit.3
file path=usr/share/man/man3/gnutls_hash_fast.3
file path=usr/share/man/man3/gnutls_hash_get_len.3
file path=usr/share/man/man3/gnutls_hash_init.3
file path=usr/share/man/man3/gnutls_hash_output.3
file path=usr/share/man/man3/gnutls_hex2bin.3
file path=usr/share/man/man3/gnutls_hex_decode.3
file path=usr/share/man/man3/gnutls_hex_encode.3
file path=usr/share/man/man3/gnutls_hmac.3
file path=usr/share/man/man3/gnutls_hmac_deinit.3
file path=usr/share/man/man3/gnutls_hmac_fast.3
file path=usr/share/man/man3/gnutls_hmac_get_len.3
file path=usr/share/man/man3/gnutls_hmac_init.3
file path=usr/share/man/man3/gnutls_hmac_output.3
file path=usr/share/man/man3/gnutls_ia_allocate_client_credentials.3
file path=usr/share/man/man3/gnutls_ia_allocate_server_credentials.3
file path=usr/share/man/man3/gnutls_ia_enable.3
file path=usr/share/man/man3/gnutls_ia_endphase_send.3
file path=usr/share/man/man3/gnutls_ia_extract_inner_secret.3
file path=usr/share/man/man3/gnutls_ia_free_client_credentials.3
file path=usr/share/man/man3/gnutls_ia_free_server_credentials.3
file path=usr/share/man/man3/gnutls_ia_generate_challenge.3
file path=usr/share/man/man3/gnutls_ia_get_client_avp_ptr.3
file path=usr/share/man/man3/gnutls_ia_get_server_avp_ptr.3
file path=usr/share/man/man3/gnutls_ia_handshake.3
file path=usr/share/man/man3/gnutls_ia_handshake_p.3
file path=usr/share/man/man3/gnutls_ia_permute_inner_secret.3
file path=usr/share/man/man3/gnutls_ia_recv.3
file path=usr/share/man/man3/gnutls_ia_send.3
file path=usr/share/man/man3/gnutls_ia_set_client_avp_function.3
file path=usr/share/man/man3/gnutls_ia_set_client_avp_ptr.3
file path=usr/share/man/man3/gnutls_ia_set_server_avp_function.3
file path=usr/share/man/man3/gnutls_ia_set_server_avp_ptr.3
file path=usr/share/man/man3/gnutls_ia_verify_endphase.3
file path=usr/share/man/man3/gnutls_init.3
file path=usr/share/man/man3/gnutls_kx_get.3
file path=usr/share/man/man3/gnutls_kx_get_id.3
file path=usr/share/man/man3/gnutls_kx_get_name.3
file path=usr/share/man/man3/gnutls_kx_list.3
file path=usr/share/man/man3/gnutls_kx_set_priority.3
file path=usr/share/man/man3/gnutls_mac_get.3
file path=usr/share/man/man3/gnutls_mac_get_id.3
file path=usr/share/man/man3/gnutls_mac_get_key_size.3
file path=usr/share/man/man3/gnutls_mac_get_name.3
file path=usr/share/man/man3/gnutls_mac_list.3
file path=usr/share/man/man3/gnutls_mac_set_priority.3
file path=usr/share/man/man3/gnutls_malloc.3
file path=usr/share/man/man3/gnutls_openpgp_crt_check_hostname.3
file path=usr/share/man/man3/gnutls_openpgp_crt_deinit.3
file path=usr/share/man/man3/gnutls_openpgp_crt_export.3
file path=usr/share/man/man3/gnutls_openpgp_crt_get_auth_subkey.3
file path=usr/share/man/man3/gnutls_openpgp_crt_get_creation_time.3
file path=usr/share/man/man3/gnutls_openpgp_crt_get_expiration_time.3
file path=usr/share/man/man3/gnutls_openpgp_crt_get_fingerprint.3
file path=usr/share/man/man3/gnutls_openpgp_crt_get_key_id.3
file path=usr/share/man/man3/gnutls_openpgp_crt_get_key_usage.3
file path=usr/share/man/man3/gnutls_openpgp_crt_get_name.3
file path=usr/share/man/man3/gnutls_openpgp_crt_get_pk_algorithm.3
file path=usr/share/man/man3/gnutls_openpgp_crt_get_pk_dsa_raw.3
file path=usr/share/man/man3/gnutls_openpgp_crt_get_pk_rsa_raw.3
file path=usr/share/man/man3/gnutls_openpgp_crt_get_preferred_key_id.3
file path=usr/share/man/man3/gnutls_openpgp_crt_get_revoked_status.3
file path=usr/share/man/man3/gnutls_openpgp_crt_get_subkey_count.3
file path=usr/share/man/man3/gnutls_openpgp_crt_get_subkey_creation_time.3
file path=usr/share/man/man3/gnutls_openpgp_crt_get_subkey_expiration_time.3
file path=usr/share/man/man3/gnutls_openpgp_crt_get_subkey_fingerprint.3
file path=usr/share/man/man3/gnutls_openpgp_crt_get_subkey_id.3
file path=usr/share/man/man3/gnutls_openpgp_crt_get_subkey_idx.3
file path=usr/share/man/man3/gnutls_openpgp_crt_get_subkey_pk_algorithm.3
file path=usr/share/man/man3/gnutls_openpgp_crt_get_subkey_pk_dsa_raw.3
file path=usr/share/man/man3/gnutls_openpgp_crt_get_subkey_pk_rsa_raw.3
file path=usr/share/man/man3/gnutls_openpgp_crt_get_subkey_revoked_status.3
file path=usr/share/man/man3/gnutls_openpgp_crt_get_subkey_usage.3
file path=usr/share/man/man3/gnutls_openpgp_crt_get_version.3
file path=usr/share/man/man3/gnutls_openpgp_crt_import.3
file path=usr/share/man/man3/gnutls_openpgp_crt_init.3
file path=usr/share/man/man3/gnutls_openpgp_crt_print.3
file path=usr/share/man/man3/gnutls_openpgp_crt_set_preferred_key_id.3
file path=usr/share/man/man3/gnutls_openpgp_crt_verify_ring.3
file path=usr/share/man/man3/gnutls_openpgp_crt_verify_self.3
file path=usr/share/man/man3/gnutls_openpgp_keyring_check_id.3
file path=usr/share/man/man3/gnutls_openpgp_keyring_deinit.3
file path=usr/share/man/man3/gnutls_openpgp_keyring_get_crt.3
file path=usr/share/man/man3/gnutls_openpgp_keyring_get_crt_count.3
file path=usr/share/man/man3/gnutls_openpgp_keyring_import.3
file path=usr/share/man/man3/gnutls_openpgp_keyring_init.3
file path=usr/share/man/man3/gnutls_openpgp_privkey_deinit.3
file path=usr/share/man/man3/gnutls_openpgp_privkey_export.3
file path=usr/share/man/man3/gnutls_openpgp_privkey_export_dsa_raw.3
file path=usr/share/man/man3/gnutls_openpgp_privkey_export_rsa_raw.3
file path=usr/share/man/man3/gnutls_openpgp_privkey_export_subkey_dsa_raw.3
file path=usr/share/man/man3/gnutls_openpgp_privkey_export_subkey_rsa_raw.3
file path=usr/share/man/man3/gnutls_openpgp_privkey_get_fingerprint.3
file path=usr/share/man/man3/gnutls_openpgp_privkey_get_key_id.3
file path=usr/share/man/man3/gnutls_openpgp_privkey_get_pk_algorithm.3
file path=usr/share/man/man3/gnutls_openpgp_privkey_get_preferred_key_id.3
file path=usr/share/man/man3/gnutls_openpgp_privkey_get_revoked_status.3
file path=usr/share/man/man3/gnutls_openpgp_privkey_get_subkey_count.3
file path=usr/share/man/man3/gnutls_openpgp_privkey_get_subkey_creation_time.3
file path=usr/share/man/man3/gnutls_openpgp_privkey_get_subkey_expiration_time.3
file path=usr/share/man/man3/gnutls_openpgp_privkey_get_subkey_fingerprint.3
file path=usr/share/man/man3/gnutls_openpgp_privkey_get_subkey_id.3
file path=usr/share/man/man3/gnutls_openpgp_privkey_get_subkey_idx.3
file path=usr/share/man/man3/gnutls_openpgp_privkey_get_subkey_pk_algorithm.3
file path=usr/share/man/man3/gnutls_openpgp_privkey_get_subkey_revoked_status.3
file path=usr/share/man/man3/gnutls_openpgp_privkey_import.3
file path=usr/share/man/man3/gnutls_openpgp_privkey_init.3
file path=usr/share/man/man3/gnutls_openpgp_privkey_sec_param.3
file path=usr/share/man/man3/gnutls_openpgp_privkey_set_preferred_key_id.3
file path=usr/share/man/man3/gnutls_openpgp_privkey_sign_hash.3
file path=usr/share/man/man3/gnutls_openpgp_send_cert.3
file path=usr/share/man/man3/gnutls_openpgp_set_recv_key_function.3
file path=usr/share/man/man3/gnutls_pem_base64_decode.3
file path=usr/share/man/man3/gnutls_pem_base64_decode_alloc.3
file path=usr/share/man/man3/gnutls_pem_base64_encode.3
file path=usr/share/man/man3/gnutls_pem_base64_encode_alloc.3
file path=usr/share/man/man3/gnutls_perror.3
file path=usr/share/man/man3/gnutls_pk_algorithm_get_name.3
file path=usr/share/man/man3/gnutls_pk_bits_to_sec_param.3
file path=usr/share/man/man3/gnutls_pk_get_id.3
file path=usr/share/man/man3/gnutls_pk_get_name.3
file path=usr/share/man/man3/gnutls_pk_list.3
file path=usr/share/man/man3/gnutls_pkcs11_add_provider.3
file path=usr/share/man/man3/gnutls_pkcs11_copy_secret_key.3
file path=usr/share/man/man3/gnutls_pkcs11_copy_x509_crt.3
file path=usr/share/man/man3/gnutls_pkcs11_copy_x509_privkey.3
file path=usr/share/man/man3/gnutls_pkcs11_deinit.3
file path=usr/share/man/man3/gnutls_pkcs11_delete_url.3
file path=usr/share/man/man3/gnutls_pkcs11_init.3
file path=usr/share/man/man3/gnutls_pkcs11_obj_deinit.3
file path=usr/share/man/man3/gnutls_pkcs11_obj_export.3
file path=usr/share/man/man3/gnutls_pkcs11_obj_export_url.3
file path=usr/share/man/man3/gnutls_pkcs11_obj_get_info.3
file path=usr/share/man/man3/gnutls_pkcs11_obj_get_type.3
file path=usr/share/man/man3/gnutls_pkcs11_obj_import_url.3
file path=usr/share/man/man3/gnutls_pkcs11_obj_init.3
file path=usr/share/man/man3/gnutls_pkcs11_obj_list_import_url.3
file path=usr/share/man/man3/gnutls_pkcs11_privkey_deinit.3
file path=usr/share/man/man3/gnutls_pkcs11_privkey_export_url.3
file path=usr/share/man/man3/gnutls_pkcs11_privkey_get_info.3
file path=usr/share/man/man3/gnutls_pkcs11_privkey_get_pk_algorithm.3
file path=usr/share/man/man3/gnutls_pkcs11_privkey_import_url.3
file path=usr/share/man/man3/gnutls_pkcs11_privkey_init.3
file path=usr/share/man/man3/gnutls_pkcs11_set_pin_function.3
file path=usr/share/man/man3/gnutls_pkcs11_set_token_function.3
file path=usr/share/man/man3/gnutls_pkcs11_token_get_flags.3
file path=usr/share/man/man3/gnutls_pkcs11_token_get_info.3
file path=usr/share/man/man3/gnutls_pkcs11_token_get_mechanism.3
file path=usr/share/man/man3/gnutls_pkcs11_token_get_url.3
file path=usr/share/man/man3/gnutls_pkcs11_token_init.3
file path=usr/share/man/man3/gnutls_pkcs11_token_set_pin.3
file path=usr/share/man/man3/gnutls_pkcs12_bag_decrypt.3
file path=usr/share/man/man3/gnutls_pkcs12_bag_deinit.3
file path=usr/share/man/man3/gnutls_pkcs12_bag_encrypt.3
file path=usr/share/man/man3/gnutls_pkcs12_bag_get_count.3
file path=usr/share/man/man3/gnutls_pkcs12_bag_get_data.3
file path=usr/share/man/man3/gnutls_pkcs12_bag_get_friendly_name.3
file path=usr/share/man/man3/gnutls_pkcs12_bag_get_key_id.3
file path=usr/share/man/man3/gnutls_pkcs12_bag_get_type.3
file path=usr/share/man/man3/gnutls_pkcs12_bag_init.3
file path=usr/share/man/man3/gnutls_pkcs12_bag_set_crl.3
file path=usr/share/man/man3/gnutls_pkcs12_bag_set_crt.3
file path=usr/share/man/man3/gnutls_pkcs12_bag_set_data.3
file path=usr/share/man/man3/gnutls_pkcs12_bag_set_friendly_name.3
file path=usr/share/man/man3/gnutls_pkcs12_bag_set_key_id.3
file path=usr/share/man/man3/gnutls_pkcs12_deinit.3
file path=usr/share/man/man3/gnutls_pkcs12_export.3
file path=usr/share/man/man3/gnutls_pkcs12_generate_mac.3
file path=usr/share/man/man3/gnutls_pkcs12_get_bag.3
file path=usr/share/man/man3/gnutls_pkcs12_import.3
file path=usr/share/man/man3/gnutls_pkcs12_init.3
file path=usr/share/man/man3/gnutls_pkcs12_set_bag.3
file path=usr/share/man/man3/gnutls_pkcs12_verify_mac.3
file path=usr/share/man/man3/gnutls_pkcs7_deinit.3
file path=usr/share/man/man3/gnutls_pkcs7_delete_crl.3
file path=usr/share/man/man3/gnutls_pkcs7_delete_crt.3
file path=usr/share/man/man3/gnutls_pkcs7_export.3
file path=usr/share/man/man3/gnutls_pkcs7_get_crl_count.3
file path=usr/share/man/man3/gnutls_pkcs7_get_crl_raw.3
file path=usr/share/man/man3/gnutls_pkcs7_get_crt_count.3
file path=usr/share/man/man3/gnutls_pkcs7_get_crt_raw.3
file path=usr/share/man/man3/gnutls_pkcs7_import.3
file path=usr/share/man/man3/gnutls_pkcs7_init.3
file path=usr/share/man/man3/gnutls_pkcs7_set_crl.3
file path=usr/share/man/man3/gnutls_pkcs7_set_crl_raw.3
file path=usr/share/man/man3/gnutls_pkcs7_set_crt.3
file path=usr/share/man/man3/gnutls_pkcs7_set_crt_raw.3
file path=usr/share/man/man3/gnutls_prf.3
file path=usr/share/man/man3/gnutls_prf_raw.3
file path=usr/share/man/man3/gnutls_priority_deinit.3
file path=usr/share/man/man3/gnutls_priority_init.3
file path=usr/share/man/man3/gnutls_priority_set.3
file path=usr/share/man/man3/gnutls_priority_set_direct.3
file path=usr/share/man/man3/gnutls_privkey_decrypt_data.3
file path=usr/share/man/man3/gnutls_privkey_deinit.3
file path=usr/share/man/man3/gnutls_privkey_get_pk_algorithm.3
file path=usr/share/man/man3/gnutls_privkey_get_type.3
file path=usr/share/man/man3/gnutls_privkey_import_openpgp.3
file path=usr/share/man/man3/gnutls_privkey_import_pkcs11.3
file path=usr/share/man/man3/gnutls_privkey_import_x509.3
file path=usr/share/man/man3/gnutls_privkey_init.3
file path=usr/share/man/man3/gnutls_privkey_sign_data.3
file path=usr/share/man/man3/gnutls_privkey_sign_hash.3
file path=usr/share/man/man3/gnutls_protocol_get_id.3
file path=usr/share/man/man3/gnutls_protocol_get_name.3
file path=usr/share/man/man3/gnutls_protocol_get_version.3
file path=usr/share/man/man3/gnutls_protocol_list.3
file path=usr/share/man/man3/gnutls_protocol_set_priority.3
file path=usr/share/man/man3/gnutls_psk_allocate_client_credentials.3
file path=usr/share/man/man3/gnutls_psk_allocate_server_credentials.3
file path=usr/share/man/man3/gnutls_psk_client_get_hint.3
file path=usr/share/man/man3/gnutls_psk_free_client_credentials.3
file path=usr/share/man/man3/gnutls_psk_free_server_credentials.3
file path=usr/share/man/man3/gnutls_psk_netconf_derive_key.3
file path=usr/share/man/man3/gnutls_psk_server_get_username.3
file path=usr/share/man/man3/gnutls_psk_set_client_credentials.3
file path=usr/share/man/man3/gnutls_psk_set_client_credentials_function.3
file path=usr/share/man/man3/gnutls_psk_set_params_function.3
file path=usr/share/man/man3/gnutls_psk_set_server_credentials_file.3
file path=usr/share/man/man3/gnutls_psk_set_server_credentials_function.3
file path=usr/share/man/man3/gnutls_psk_set_server_credentials_hint.3
file path=usr/share/man/man3/gnutls_psk_set_server_dh_params.3
file path=usr/share/man/man3/gnutls_psk_set_server_params_function.3
file path=usr/share/man/man3/gnutls_pubkey_deinit.3
file path=usr/share/man/man3/gnutls_pubkey_export.3
file path=usr/share/man/man3/gnutls_pubkey_get_key_id.3
file path=usr/share/man/man3/gnutls_pubkey_get_key_usage.3
file path=usr/share/man/man3/gnutls_pubkey_get_pk_algorithm.3
file path=usr/share/man/man3/gnutls_pubkey_get_pk_dsa_raw.3
file path=usr/share/man/man3/gnutls_pubkey_get_pk_rsa_raw.3
file path=usr/share/man/man3/gnutls_pubkey_get_preferred_hash_algorithm.3
file path=usr/share/man/man3/gnutls_pubkey_get_verify_algorithm.3
file path=usr/share/man/man3/gnutls_pubkey_import.3
file path=usr/share/man/man3/gnutls_pubkey_import_dsa_raw.3
file path=usr/share/man/man3/gnutls_pubkey_import_openpgp.3
file path=usr/share/man/man3/gnutls_pubkey_import_pkcs11.3
file path=usr/share/man/man3/gnutls_pubkey_import_pkcs11_url.3
file path=usr/share/man/man3/gnutls_pubkey_import_privkey.3
file path=usr/share/man/man3/gnutls_pubkey_import_rsa_raw.3
file path=usr/share/man/man3/gnutls_pubkey_import_x509.3
file path=usr/share/man/man3/gnutls_pubkey_init.3
file path=usr/share/man/man3/gnutls_pubkey_set_key_usage.3
file path=usr/share/man/man3/gnutls_pubkey_verify_data.3
file path=usr/share/man/man3/gnutls_pubkey_verify_hash.3
file path=usr/share/man/man3/gnutls_record_check_pending.3
file path=usr/share/man/man3/gnutls_record_disable_padding.3
file path=usr/share/man/man3/gnutls_record_get_direction.3
file path=usr/share/man/man3/gnutls_record_get_max_size.3
file path=usr/share/man/man3/gnutls_record_recv.3
file path=usr/share/man/man3/gnutls_record_send.3
file path=usr/share/man/man3/gnutls_record_set_max_size.3
file path=usr/share/man/man3/gnutls_register_md5_handler.3
file path=usr/share/man/man3/gnutls_rehandshake.3
file path=usr/share/man/man3/gnutls_rnd.3
file path=usr/share/man/man3/gnutls_rsa_export_get_modulus_bits.3
file path=usr/share/man/man3/gnutls_rsa_export_get_pubkey.3
file path=usr/share/man/man3/gnutls_rsa_params_cpy.3
file path=usr/share/man/man3/gnutls_rsa_params_deinit.3
file path=usr/share/man/man3/gnutls_rsa_params_export_pkcs1.3
file path=usr/share/man/man3/gnutls_rsa_params_export_raw.3
file path=usr/share/man/man3/gnutls_rsa_params_generate2.3
file path=usr/share/man/man3/gnutls_rsa_params_import_pkcs1.3
file path=usr/share/man/man3/gnutls_rsa_params_import_raw.3
file path=usr/share/man/man3/gnutls_rsa_params_init.3
file path=usr/share/man/man3/gnutls_safe_renegotiation_status.3
file path=usr/share/man/man3/gnutls_sec_param_get_name.3
file path=usr/share/man/man3/gnutls_sec_param_to_pk_bits.3
file path=usr/share/man/man3/gnutls_server_name_get.3
file path=usr/share/man/man3/gnutls_server_name_set.3
file path=usr/share/man/man3/gnutls_session_channel_binding.3
file path=usr/share/man/man3/gnutls_session_enable_compatibility_mode.3
file path=usr/share/man/man3/gnutls_session_get_data.3
file path=usr/share/man/man3/gnutls_session_get_data2.3
file path=usr/share/man/man3/gnutls_session_get_id.3
file path=usr/share/man/man3/gnutls_session_get_ptr.3
file path=usr/share/man/man3/gnutls_session_is_resumed.3
file path=usr/share/man/man3/gnutls_session_set_data.3
file path=usr/share/man/man3/gnutls_session_set_ptr.3
file path=usr/share/man/man3/gnutls_session_ticket_enable_client.3
file path=usr/share/man/man3/gnutls_session_ticket_enable_server.3
file path=usr/share/man/man3/gnutls_session_ticket_key_generate.3
file path=usr/share/man/man3/gnutls_set_default_export_priority.3
file path=usr/share/man/man3/gnutls_set_default_priority.3
file path=usr/share/man/man3/gnutls_sign_algorithm_get_name.3
file path=usr/share/man/man3/gnutls_sign_algorithm_get_requested.3
file path=usr/share/man/man3/gnutls_sign_callback_get.3
file path=usr/share/man/man3/gnutls_sign_callback_set.3
file path=usr/share/man/man3/gnutls_sign_get_id.3
file path=usr/share/man/man3/gnutls_sign_get_name.3
file path=usr/share/man/man3/gnutls_sign_list.3
file path=usr/share/man/man3/gnutls_srp_allocate_client_credentials.3
file path=usr/share/man/man3/gnutls_srp_allocate_server_credentials.3
file path=usr/share/man/man3/gnutls_srp_base64_decode.3
file path=usr/share/man/man3/gnutls_srp_base64_decode_alloc.3
file path=usr/share/man/man3/gnutls_srp_base64_encode.3
file path=usr/share/man/man3/gnutls_srp_base64_encode_alloc.3
file path=usr/share/man/man3/gnutls_srp_free_client_credentials.3
file path=usr/share/man/man3/gnutls_srp_free_server_credentials.3
file path=usr/share/man/man3/gnutls_srp_server_get_username.3
file path=usr/share/man/man3/gnutls_srp_set_client_credentials.3
file path=usr/share/man/man3/gnutls_srp_set_client_credentials_function.3
file path=usr/share/man/man3/gnutls_srp_set_prime_bits.3
file path=usr/share/man/man3/gnutls_srp_set_server_credentials_file.3
file path=usr/share/man/man3/gnutls_srp_set_server_credentials_function.3
file path=usr/share/man/man3/gnutls_srp_verifier.3
file path=usr/share/man/man3/gnutls_strerror.3
file path=usr/share/man/man3/gnutls_strerror_name.3
file path=usr/share/man/man3/gnutls_supplemental_get_name.3
file path=usr/share/man/man3/gnutls_transport_get_ptr.3
file path=usr/share/man/man3/gnutls_transport_get_ptr2.3
file path=usr/share/man/man3/gnutls_transport_set_errno.3
file path=usr/share/man/man3/gnutls_transport_set_errno_function.3
file path=usr/share/man/man3/gnutls_transport_set_global_errno.3
file path=usr/share/man/man3/gnutls_transport_set_lowat.3
file path=usr/share/man/man3/gnutls_transport_set_ptr.3
file path=usr/share/man/man3/gnutls_transport_set_ptr2.3
file path=usr/share/man/man3/gnutls_transport_set_pull_function.3
file path=usr/share/man/man3/gnutls_transport_set_push_function.3
file path=usr/share/man/man3/gnutls_transport_set_vec_push_function.3
file path=usr/share/man/man3/gnutls_x509_crl_check_issuer.3
file path=usr/share/man/man3/gnutls_x509_crl_deinit.3
file path=usr/share/man/man3/gnutls_x509_crl_export.3
file path=usr/share/man/man3/gnutls_x509_crl_get_authority_key_id.3
file path=usr/share/man/man3/gnutls_x509_crl_get_crt_count.3
file path=usr/share/man/man3/gnutls_x509_crl_get_crt_serial.3
file path=usr/share/man/man3/gnutls_x509_crl_get_dn_oid.3
file path=usr/share/man/man3/gnutls_x509_crl_get_extension_data.3
file path=usr/share/man/man3/gnutls_x509_crl_get_extension_info.3
file path=usr/share/man/man3/gnutls_x509_crl_get_extension_oid.3
file path=usr/share/man/man3/gnutls_x509_crl_get_issuer_dn.3
file path=usr/share/man/man3/gnutls_x509_crl_get_issuer_dn_by_oid.3
file path=usr/share/man/man3/gnutls_x509_crl_get_next_update.3
file path=usr/share/man/man3/gnutls_x509_crl_get_number.3
file path=usr/share/man/man3/gnutls_x509_crl_get_raw_issuer_dn.3
file path=usr/share/man/man3/gnutls_x509_crl_get_signature.3
file path=usr/share/man/man3/gnutls_x509_crl_get_signature_algorithm.3
file path=usr/share/man/man3/gnutls_x509_crl_get_this_update.3
file path=usr/share/man/man3/gnutls_x509_crl_get_version.3
file path=usr/share/man/man3/gnutls_x509_crl_import.3
file path=usr/share/man/man3/gnutls_x509_crl_init.3
file path=usr/share/man/man3/gnutls_x509_crl_print.3
file path=usr/share/man/man3/gnutls_x509_crl_privkey_sign.3
file path=usr/share/man/man3/gnutls_x509_crl_set_authority_key_id.3
file path=usr/share/man/man3/gnutls_x509_crl_set_crt.3
file path=usr/share/man/man3/gnutls_x509_crl_set_crt_serial.3
file path=usr/share/man/man3/gnutls_x509_crl_set_next_update.3
file path=usr/share/man/man3/gnutls_x509_crl_set_number.3
file path=usr/share/man/man3/gnutls_x509_crl_set_this_update.3
file path=usr/share/man/man3/gnutls_x509_crl_set_version.3
file path=usr/share/man/man3/gnutls_x509_crl_sign.3
file path=usr/share/man/man3/gnutls_x509_crl_sign2.3
file path=usr/share/man/man3/gnutls_x509_crl_verify.3
file path=usr/share/man/man3/gnutls_x509_crq_deinit.3
file path=usr/share/man/man3/gnutls_x509_crq_export.3
file path=usr/share/man/man3/gnutls_x509_crq_get_attribute_by_oid.3
file path=usr/share/man/man3/gnutls_x509_crq_get_attribute_data.3
file path=usr/share/man/man3/gnutls_x509_crq_get_attribute_info.3
file path=usr/share/man/man3/gnutls_x509_crq_get_basic_constraints.3
file path=usr/share/man/man3/gnutls_x509_crq_get_challenge_password.3
file path=usr/share/man/man3/gnutls_x509_crq_get_dn.3
file path=usr/share/man/man3/gnutls_x509_crq_get_dn_by_oid.3
file path=usr/share/man/man3/gnutls_x509_crq_get_dn_oid.3
file path=usr/share/man/man3/gnutls_x509_crq_get_extension_by_oid.3
file path=usr/share/man/man3/gnutls_x509_crq_get_extension_data.3
file path=usr/share/man/man3/gnutls_x509_crq_get_extension_info.3
file path=usr/share/man/man3/gnutls_x509_crq_get_key_id.3
file path=usr/share/man/man3/gnutls_x509_crq_get_key_purpose_oid.3
file path=usr/share/man/man3/gnutls_x509_crq_get_key_rsa_raw.3
file path=usr/share/man/man3/gnutls_x509_crq_get_key_usage.3
file path=usr/share/man/man3/gnutls_x509_crq_get_pk_algorithm.3
file path=usr/share/man/man3/gnutls_x509_crq_get_subject_alt_name.3
file path=usr/share/man/man3/gnutls_x509_crq_get_subject_alt_othername_oid.3
file path=usr/share/man/man3/gnutls_x509_crq_get_version.3
file path=usr/share/man/man3/gnutls_x509_crq_import.3
file path=usr/share/man/man3/gnutls_x509_crq_init.3
file path=usr/share/man/man3/gnutls_x509_crq_print.3
file path=usr/share/man/man3/gnutls_x509_crq_privkey_sign.3
file path=usr/share/man/man3/gnutls_x509_crq_set_attribute_by_oid.3
file path=usr/share/man/man3/gnutls_x509_crq_set_basic_constraints.3
file path=usr/share/man/man3/gnutls_x509_crq_set_challenge_password.3
file path=usr/share/man/man3/gnutls_x509_crq_set_dn_by_oid.3
file path=usr/share/man/man3/gnutls_x509_crq_set_key.3
file path=usr/share/man/man3/gnutls_x509_crq_set_key_purpose_oid.3
file path=usr/share/man/man3/gnutls_x509_crq_set_key_rsa_raw.3
file path=usr/share/man/man3/gnutls_x509_crq_set_key_usage.3
file path=usr/share/man/man3/gnutls_x509_crq_set_pubkey.3
file path=usr/share/man/man3/gnutls_x509_crq_set_subject_alt_name.3
file path=usr/share/man/man3/gnutls_x509_crq_set_version.3
file path=usr/share/man/man3/gnutls_x509_crq_sign.3
file path=usr/share/man/man3/gnutls_x509_crq_sign2.3
file path=usr/share/man/man3/gnutls_x509_crq_verify.3
file path=usr/share/man/man3/gnutls_x509_crt_check_hostname.3
file path=usr/share/man/man3/gnutls_x509_crt_check_issuer.3
file path=usr/share/man/man3/gnutls_x509_crt_check_revocation.3
file path=usr/share/man/man3/gnutls_x509_crt_cpy_crl_dist_points.3
file path=usr/share/man/man3/gnutls_x509_crt_deinit.3
file path=usr/share/man/man3/gnutls_x509_crt_export.3
file path=usr/share/man/man3/gnutls_x509_crt_get_activation_time.3
file path=usr/share/man/man3/gnutls_x509_crt_get_authority_key_id.3
file path=usr/share/man/man3/gnutls_x509_crt_get_basic_constraints.3
file path=usr/share/man/man3/gnutls_x509_crt_get_ca_status.3
file path=usr/share/man/man3/gnutls_x509_crt_get_crl_dist_points.3
file path=usr/share/man/man3/gnutls_x509_crt_get_dn.3
file path=usr/share/man/man3/gnutls_x509_crt_get_dn_by_oid.3
file path=usr/share/man/man3/gnutls_x509_crt_get_dn_oid.3
file path=usr/share/man/man3/gnutls_x509_crt_get_expiration_time.3
file path=usr/share/man/man3/gnutls_x509_crt_get_extension_by_oid.3
file path=usr/share/man/man3/gnutls_x509_crt_get_extension_data.3
file path=usr/share/man/man3/gnutls_x509_crt_get_extension_info.3
file path=usr/share/man/man3/gnutls_x509_crt_get_extension_oid.3
file path=usr/share/man/man3/gnutls_x509_crt_get_fingerprint.3
file path=usr/share/man/man3/gnutls_x509_crt_get_issuer.3
file path=usr/share/man/man3/gnutls_x509_crt_get_issuer_alt_name.3
file path=usr/share/man/man3/gnutls_x509_crt_get_issuer_alt_name2.3
file path=usr/share/man/man3/gnutls_x509_crt_get_issuer_alt_othername_oid.3
file path=usr/share/man/man3/gnutls_x509_crt_get_issuer_dn.3
file path=usr/share/man/man3/gnutls_x509_crt_get_issuer_dn_by_oid.3
file path=usr/share/man/man3/gnutls_x509_crt_get_issuer_dn_oid.3
file path=usr/share/man/man3/gnutls_x509_crt_get_issuer_unique_id.3
file path=usr/share/man/man3/gnutls_x509_crt_get_key_id.3
file path=usr/share/man/man3/gnutls_x509_crt_get_key_purpose_oid.3
file path=usr/share/man/man3/gnutls_x509_crt_get_key_usage.3
file path=usr/share/man/man3/gnutls_x509_crt_get_pk_algorithm.3
file path=usr/share/man/man3/gnutls_x509_crt_get_pk_dsa_raw.3
file path=usr/share/man/man3/gnutls_x509_crt_get_pk_rsa_raw.3
file path=usr/share/man/man3/gnutls_x509_crt_get_preferred_hash_algorithm.3
file path=usr/share/man/man3/gnutls_x509_crt_get_proxy.3
file path=usr/share/man/man3/gnutls_x509_crt_get_raw_dn.3
file path=usr/share/man/man3/gnutls_x509_crt_get_raw_issuer_dn.3
file path=usr/share/man/man3/gnutls_x509_crt_get_serial.3
file path=usr/share/man/man3/gnutls_x509_crt_get_signature.3
file path=usr/share/man/man3/gnutls_x509_crt_get_signature_algorithm.3
file path=usr/share/man/man3/gnutls_x509_crt_get_subject.3
file path=usr/share/man/man3/gnutls_x509_crt_get_subject_alt_name.3
file path=usr/share/man/man3/gnutls_x509_crt_get_subject_alt_name2.3
file path=usr/share/man/man3/gnutls_x509_crt_get_subject_alt_othername_oid.3
file path=usr/share/man/man3/gnutls_x509_crt_get_subject_key_id.3
file path=usr/share/man/man3/gnutls_x509_crt_get_subject_unique_id.3
file path=usr/share/man/man3/gnutls_x509_crt_get_verify_algorithm.3
file path=usr/share/man/man3/gnutls_x509_crt_get_version.3
file path=usr/share/man/man3/gnutls_x509_crt_import.3
file path=usr/share/man/man3/gnutls_x509_crt_import_pkcs11.3
file path=usr/share/man/man3/gnutls_x509_crt_import_pkcs11_url.3
file path=usr/share/man/man3/gnutls_x509_crt_init.3
file path=usr/share/man/man3/gnutls_x509_crt_list_import.3
file path=usr/share/man/man3/gnutls_x509_crt_list_import_pkcs11.3
file path=usr/share/man/man3/gnutls_x509_crt_list_verify.3
file path=usr/share/man/man3/gnutls_x509_crt_print.3
file path=usr/share/man/man3/gnutls_x509_crt_privkey_sign.3
file path=usr/share/man/man3/gnutls_x509_crt_set_activation_time.3
file path=usr/share/man/man3/gnutls_x509_crt_set_authority_key_id.3
file path=usr/share/man/man3/gnutls_x509_crt_set_basic_constraints.3
file path=usr/share/man/man3/gnutls_x509_crt_set_ca_status.3
file path=usr/share/man/man3/gnutls_x509_crt_set_crl_dist_points.3
file path=usr/share/man/man3/gnutls_x509_crt_set_crl_dist_points2.3
file path=usr/share/man/man3/gnutls_x509_crt_set_crq.3
file path=usr/share/man/man3/gnutls_x509_crt_set_crq_extensions.3
file path=usr/share/man/man3/gnutls_x509_crt_set_dn_by_oid.3
file path=usr/share/man/man3/gnutls_x509_crt_set_expiration_time.3
file path=usr/share/man/man3/gnutls_x509_crt_set_extension_by_oid.3
file path=usr/share/man/man3/gnutls_x509_crt_set_issuer_dn_by_oid.3
file path=usr/share/man/man3/gnutls_x509_crt_set_key.3
file path=usr/share/man/man3/gnutls_x509_crt_set_key_purpose_oid.3
file path=usr/share/man/man3/gnutls_x509_crt_set_key_usage.3
file path=usr/share/man/man3/gnutls_x509_crt_set_proxy.3
file path=usr/share/man/man3/gnutls_x509_crt_set_proxy_dn.3
file path=usr/share/man/man3/gnutls_x509_crt_set_pubkey.3
file path=usr/share/man/man3/gnutls_x509_crt_set_serial.3
file path=usr/share/man/man3/gnutls_x509_crt_set_subject_alt_name.3
file path=usr/share/man/man3/gnutls_x509_crt_set_subject_alternative_name.3
file path=usr/share/man/man3/gnutls_x509_crt_set_subject_key_id.3
file path=usr/share/man/man3/gnutls_x509_crt_set_version.3
file path=usr/share/man/man3/gnutls_x509_crt_sign.3
file path=usr/share/man/man3/gnutls_x509_crt_sign2.3
file path=usr/share/man/man3/gnutls_x509_crt_verify.3
file path=usr/share/man/man3/gnutls_x509_crt_verify_data.3
file path=usr/share/man/man3/gnutls_x509_crt_verify_hash.3
file path=usr/share/man/man3/gnutls_x509_dn_deinit.3
file path=usr/share/man/man3/gnutls_x509_dn_export.3
file path=usr/share/man/man3/gnutls_x509_dn_get_rdn_ava.3
file path=usr/share/man/man3/gnutls_x509_dn_import.3
file path=usr/share/man/man3/gnutls_x509_dn_init.3
file path=usr/share/man/man3/gnutls_x509_dn_oid_known.3
file path=usr/share/man/man3/gnutls_x509_privkey_cpy.3
file path=usr/share/man/man3/gnutls_x509_privkey_deinit.3
file path=usr/share/man/man3/gnutls_x509_privkey_export.3
file path=usr/share/man/man3/gnutls_x509_privkey_export_dsa_raw.3
file path=usr/share/man/man3/gnutls_x509_privkey_export_pkcs8.3
file path=usr/share/man/man3/gnutls_x509_privkey_export_rsa_raw.3
file path=usr/share/man/man3/gnutls_x509_privkey_export_rsa_raw2.3
file path=usr/share/man/man3/gnutls_x509_privkey_fix.3
file path=usr/share/man/man3/gnutls_x509_privkey_generate.3
file path=usr/share/man/man3/gnutls_x509_privkey_get_key_id.3
file path=usr/share/man/man3/gnutls_x509_privkey_get_pk_algorithm.3
file path=usr/share/man/man3/gnutls_x509_privkey_import.3
file path=usr/share/man/man3/gnutls_x509_privkey_import_dsa_raw.3
file path=usr/share/man/man3/gnutls_x509_privkey_import_pkcs8.3
file path=usr/share/man/man3/gnutls_x509_privkey_import_rsa_raw.3
file path=usr/share/man/man3/gnutls_x509_privkey_import_rsa_raw2.3
file path=usr/share/man/man3/gnutls_x509_privkey_init.3
file path=usr/share/man/man3/gnutls_x509_privkey_sec_param.3
file path=usr/share/man/man3/gnutls_x509_privkey_sign_data.3
file path=usr/share/man/man3/gnutls_x509_privkey_sign_hash.3
file path=usr/share/man/man3/gnutls_x509_privkey_verify_data.3
file path=usr/share/man/man3/gnutls_x509_rdn_get.3
file path=usr/share/man/man3/gnutls_x509_rdn_get_by_oid.3
file path=usr/share/man/man3/gnutls_x509_rdn_get_oid.3

 components/library/gnutls/patches/01-not-build-example.patch

New file
@@ -0,0 +1,20 @@
--- gnutls-2.12.21/doc/Makefile.in.~1~    2012-11-09 02:43:20.000000000 +0400
+++ gnutls-2.12.21/doc/Makefile.in    2016-05-06 15:37:51.063922134 +0300
@@ -268,7 +268,7 @@
     distdir
 ETAGS = etags
 CTAGS = ctags
-DIST_SUBDIRS = examples cyclo scripts manpages credentials reference
+DIST_SUBDIRS = cyclo scripts manpages credentials reference
 DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST)
 am__relativize = \
   dir0=`pwd`; \
@@ -1192,7 +1192,7 @@
 EXTRA_DIST = TODO certtool.cfg gnutls.ps gnutls.pdf gnutls.html \
     doxygen/Doxyfile.in doxygen/Doxyfile.orig texinfo.css \
     $(guile_texi) extract-guile-c-doc.scm
-SUBDIRS = examples cyclo scripts manpages credentials $(am__append_1)
+SUBDIRS = cyclo scripts manpages credentials $(am__append_1)
 info_TEXINFOS = gnutls.texi
 
 # Examples.

 components/library/gnutls/patches/02-CVE-2014-0092.patch

New file
@@ -0,0 +1,102 @@
From 6aa26f78150ccbdf0aec1878a41c17c41d358a3b Mon Sep 17 00:00:00 2001
From: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date: Thu, 27 Feb 2014 19:42:26 +0100
Subject: [PATCH] corrected return codes

---
 lib/x509/verify.c |   16 ++++++++++------
 1 files changed, 10 insertions(+), 6 deletions(-)

diff --git a/lib/x509/verify.c b/lib/x509/verify.c
index c9a6b0d..eef85a8 100644
--- a/lib/x509/verify.c
+++ b/lib/x509/verify.c
@@ -141,7 +141,7 @@ check_if_ca (gnutls_x509_crt_t cert, gnutls_x509_crt_t issuer,
   if (result < 0)
     {
       gnutls_assert ();
-      goto cleanup;
+      goto fail;
     }
 
   result =
@@ -150,7 +150,7 @@ check_if_ca (gnutls_x509_crt_t cert, gnutls_x509_crt_t issuer,
   if (result < 0)
     {
       gnutls_assert ();
-      goto cleanup;
+      goto fail;
     }
 
   result =
@@ -158,7 +158,7 @@ check_if_ca (gnutls_x509_crt_t cert, gnutls_x509_crt_t issuer,
   if (result < 0)
     {
       gnutls_assert ();
-      goto cleanup;
+      goto fail;
     }
 
   result =
@@ -166,7 +166,7 @@ check_if_ca (gnutls_x509_crt_t cert, gnutls_x509_crt_t issuer,
   if (result < 0)
     {
       gnutls_assert ();
-      goto cleanup;
+      goto fail;
     }
 
   /* If the subject certificate is the same as the issuer
@@ -206,6 +206,7 @@ check_if_ca (gnutls_x509_crt_t cert, gnutls_x509_crt_t issuer,
   else
     gnutls_assert ();
 
+fail:
   result = 0;
 
 cleanup:
@@ -330,7 +331,7 @@ _gnutls_verify_certificate2 (gnutls_x509_crt_t cert,
   gnutls_datum_t cert_signed_data = { NULL, 0 };
   gnutls_datum_t cert_signature = { NULL, 0 };
   gnutls_x509_crt_t issuer = NULL;
-  int issuer_version, result;
+  int issuer_version, result = 0;
 
   if (output)
     *output = 0;
@@ -363,7 +364,7 @@ _gnutls_verify_certificate2 (gnutls_x509_crt_t cert,
   if (issuer_version < 0)
     {
       gnutls_assert ();
-      return issuer_version;
+      return 0;
     }
 
   if (!(flags & GNUTLS_VERIFY_DISABLE_CA_SIGN) &&
@@ -385,6 +386,7 @@ _gnutls_verify_certificate2 (gnutls_x509_crt_t cert,
   if (result < 0)
     {
       gnutls_assert ();
+      result = 0;
       goto cleanup;
     }
 
@@ -393,6 +395,7 @@ _gnutls_verify_certificate2 (gnutls_x509_crt_t cert,
   if (result < 0)
     {
       gnutls_assert ();
+      result = 0;
       goto cleanup;
     }
 
@@ -410,6 +413,7 @@ _gnutls_verify_certificate2 (gnutls_x509_crt_t cert,
   else if (result < 0)
     {
       gnutls_assert();
+      result = 0;
       goto cleanup;
     }
 
-- 
1.7.1


 components/library/gnutls/patches/03-CVE-2014-3466.patch

File was renamed from components/gnutls/patches/gnutls-cve-2014-3466.patch
@@ -8,11 +8,11 @@
 lib/gnutls_handshake.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

Index: gnutls26-2.8.5/lib/gnutls_handshake.c
===================================================================
--- gnutls26-2.8.5.orig/lib/gnutls_handshake.c    2014-06-01 11:05:17.100976740 -0400
+++ gnutls26-2.8.5/lib/gnutls_handshake.c    2014-06-01 11:05:17.088976740 -0400
@@ -1518,7 +1518,7 @@
diff --git a/lib/gnutls_handshake.c b/lib/gnutls_handshake.c
index e4a63e4..e652528 100644
--- a/lib/gnutls_handshake.c
+++ b/lib/gnutls_handshake.c
@@ -1797,7 +1797,7 @@ _gnutls_read_server_hello (gnutls_session_t session,
   DECR_LEN (len, 1);
   session_id_len = data[pos++];
 
@@ -21,3 +21,6 @@
     {
       gnutls_assert ();
       return GNUTLS_E_UNSUPPORTED_VERSION_PACKET;
-- 
1.7.1


 components/library/gnutls/patches/04-CVE-2015-0294.patch

File was renamed from components/gnutls/patches/gnutls-cve-2015-0294.patch
@@ -7,12 +7,12 @@
 lib/x509/x509.c | 34 +++++++++++++++++++++++++++++++++-
 1 file changed, 33 insertions(+), 1 deletion(-)

Index: gnutls26-2.8.5/lib/x509/x509.c
===================================================================
--- gnutls26-2.8.5.orig/lib/x509/x509.c    2015-03-20 09:49:44.607185404 -0400
+++ gnutls26-2.8.5/lib/x509/x509.c    2015-03-20 09:49:44.603185373 -0400
@@ -168,7 +168,7 @@
             gnutls_x509_crt_fmt_t format)
diff --git a/lib/x509/x509.c b/lib/x509/x509.c
index 6db574c..f51ba3b 100644
--- a/lib/x509/x509.c
+++ b/lib/x509/x509.c
@@ -165,7 +165,7 @@ gnutls_x509_crt_import (gnutls_x509_crt_t cert,
                         gnutls_x509_crt_fmt_t format)
 {
   int result = 0, need_free = 0;
-  gnutls_datum_t _data;
@@ -20,7 +20,7 @@
 
   if (cert == NULL)
     {
@@ -236,6 +236,36 @@
@@ -233,6 +233,36 @@ gnutls_x509_crt_import (gnutls_x509_crt_t cert,
       goto cleanup;
     }
 
@@ -57,7 +57,7 @@
   /* Since we do not want to disable any extension
    */
   cert->use_extensions = 1;
@@ -245,6 +275,8 @@
@@ -242,6 +272,8 @@ gnutls_x509_crt_import (gnutls_x509_crt_t cert,
   return 0;
 
 cleanup:
@@ -66,3 +66,6 @@
   if (need_free)
     _gnutls_free_datum (&_data);
   return result;
--
libgit2 0.21.4


 components/library/gnutls/patches/05-CVE-2015-0282.patch

New file
@@ -0,0 +1,480 @@
From d326f81daed5a1a06476d66a81584f8c7b71141d Mon Sep 17 00:00:00 2001
From: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date: Mon, 23 Feb 2015 10:03:47 +0100
Subject: [PATCH] Added fix for GNUTLS-SA-2015-1

---
 lib/gnutls_algorithms.c |  8 ++++++++
 lib/gnutls_algorithms.h |  1 +
 lib/gnutls_pubkey.c     |  4 ++--
 lib/gnutls_sig.c        | 14 ++++++++------
 lib/x509/common.h       |  2 +-
 lib/x509/crq.c          | 49 ++++++++++++++++++++++++++++++++++++++++++++++++-
 lib/x509/privkey.c      |  3 ++-
 lib/x509/verify.c       | 77 +++++++++++++++++++++++++++++++++++++++++++++++++++--------------------------
 lib/x509/x509.c         |  4 ++--
 lib/x509/x509_int.h     |  7 ++++---
 10 files changed, 127 insertions(+), 42 deletions(-)

Index: gnutls26-2.12.23/lib/gnutls_algorithms.c
===================================================================
--- gnutls26-2.12.23.orig/lib/gnutls_algorithms.c    2015-03-20 09:07:52.587827857 -0400
+++ gnutls26-2.12.23/lib/gnutls_algorithms.c    2015-03-20 09:07:52.579827744 -0400
@@ -2056,6 +2056,14 @@
   return ret;
 }
 
+int
+_gnutls_sign_get_hash (gnutls_sign_algorithm_t algorithm)
+{
+  GNUTLS_SIGN_LOOP (if (p->id == algorithm) return p->mac);
+
+  return GNUTLS_MAC_UNKNOWN;
+}
+
 gnutls_sign_algorithm_t
 _gnutls_x509_oid2sign_algorithm (const char *oid)
 {
Index: gnutls26-2.12.23/lib/gnutls_algorithms.h
===================================================================
--- gnutls26-2.12.23.orig/lib/gnutls_algorithms.h    2015-03-20 09:07:52.587827857 -0400
+++ gnutls26-2.12.23/lib/gnutls_algorithms.h    2015-03-20 09:07:52.583827801 -0400
@@ -105,6 +105,7 @@
 enum encipher_type _gnutls_kx_encipher_type (gnutls_kx_algorithm_t algorithm);
 
 /* Functions for sign algorithms. */
+int _gnutls_sign_get_hash (gnutls_sign_algorithm_t algorithm);
 gnutls_sign_algorithm_t _gnutls_x509_oid2sign_algorithm (const char *oid);
 gnutls_sign_algorithm_t _gnutls_x509_pk_to_sign (gnutls_pk_algorithm_t pk,
                                                  gnutls_mac_algorithm_t mac);
Index: gnutls26-2.12.23/lib/gnutls_pubkey.c
===================================================================
--- gnutls26-2.12.23.orig/lib/gnutls_pubkey.c    2015-03-20 09:07:52.587827857 -0400
+++ gnutls26-2.12.23/lib/gnutls_pubkey.c    2015-03-20 09:07:52.583827801 -0400
@@ -1048,7 +1048,7 @@
       return GNUTLS_E_INVALID_REQUEST;
     }
 
-  ret = pubkey_verify_sig( data, NULL, signature, pubkey->pk_algorithm, 
+  ret = pubkey_verify_sig(GNUTLS_MAC_UNKNOWN, data, NULL, signature, pubkey->pk_algorithm, 
     pubkey->params, pubkey->params_size);
   if (ret < 0)
     {
@@ -1086,7 +1086,7 @@
     }
 
   ret =
-    pubkey_verify_sig (NULL, hash, signature, key->pk_algorithm,
+    pubkey_verify_sig (GNUTLS_MAC_UNKNOWN, NULL, hash, signature, key->pk_algorithm,
                        key->params, key->params_size);
 
   return ret;
Index: gnutls26-2.12.23/lib/gnutls_sig.c
===================================================================
--- gnutls26-2.12.23.orig/lib/gnutls_sig.c    2015-03-20 09:07:52.587827857 -0400
+++ gnutls26-2.12.23/lib/gnutls_sig.c    2015-03-20 09:07:52.583827801 -0400
@@ -273,7 +273,8 @@
 verify_tls_hash (gnutls_session_t session, gnutls_protocol_t ver, gnutls_cert * cert,
                     const gnutls_datum_t * hash_concat,
                     gnutls_datum_t * signature, size_t sha1pos,
-                    gnutls_pk_algorithm_t pk_algo)
+                    gnutls_pk_algorithm_t pk_algo,
+                    int hashalg)
 {
   int ret;
   gnutls_datum_t vdata;
@@ -309,7 +310,7 @@
         ret = _gnutls_rsa_verify (&vdata, signature, cert->params,
                                      cert->params_size, 1);
       else
-        ret = pubkey_verify_sig( NULL, &vdata, signature, pk_algo, 
+        ret = pubkey_verify_sig(hashalg, NULL, &vdata, signature, pk_algo, 
           cert->params, cert->params_size);
 
       if (ret < 0)
@@ -324,7 +325,7 @@
       vdata.data = &hash_concat->data[sha1pos];
       vdata.size = hash_concat->size - sha1pos;
 
-      ret = pubkey_verify_sig( NULL, &vdata, signature, pk_algo, 
+      ret = pubkey_verify_sig(hashalg, NULL, &vdata, signature, pk_algo, 
         cert->params, cert->params_size);
       /* verify signature */
       if (ret < 0)
@@ -428,7 +429,8 @@
   ret = verify_tls_hash (session, ver, cert, &dconcat, signature,
                             dconcat.size -
                             _gnutls_hash_get_algo_len (hash_algo),
-                            _gnutls_sign_get_pk_algorithm (algo));
+                            _gnutls_sign_get_pk_algorithm (algo),
+                            hash_algo);
   if (ret < 0)
     {
       gnutls_assert ();
@@ -491,7 +493,7 @@
 
   ret =
     verify_tls_hash (session, ver, cert, &dconcat, signature, 0,
-                        cert->subject_pk_algorithm);
+                        cert->subject_pk_algorithm, hash_algo);
   if (ret < 0)
     {
       gnutls_assert ();
@@ -582,7 +584,7 @@
 
   ret =
     verify_tls_hash (session, ver, cert, &dconcat, signature, 16,
-                        cert->subject_pk_algorithm);
+                        cert->subject_pk_algorithm, GNUTLS_MAC_UNKNOWN);
   if (ret < 0)
     {
       gnutls_assert ();
Index: gnutls26-2.12.23/lib/x509/common.h
===================================================================
--- gnutls26-2.12.23.orig/lib/x509/common.h    2015-03-20 09:07:52.587827857 -0400
+++ gnutls26-2.12.23/lib/x509/common.h    2015-03-20 09:07:52.583827801 -0400
@@ -151,7 +151,7 @@
 void _asnstr_append_name (char *name, size_t name_size, const char *part1,
                           const char *part2);
 
-int pubkey_verify_sig (const gnutls_datum_t * tbs,
+int pubkey_verify_sig (int hashalg, const gnutls_datum_t * tbs,
                        const gnutls_datum_t * hash,
                        const gnutls_datum_t * signature,
                        gnutls_pk_algorithm_t pk, bigint_t * issuer_params,
Index: gnutls26-2.12.23/lib/x509/crq.c
===================================================================
--- gnutls26-2.12.23.orig/lib/x509/crq.c    2015-03-20 09:07:52.587827857 -0400
+++ gnutls26-2.12.23/lib/x509/crq.c    2015-03-20 09:07:52.583827801 -0400
@@ -2540,6 +2540,7 @@
 gnutls_datum signature = { NULL, 0 };
 bigint_t params[MAX_PUBLIC_PARAMS_SIZE];
 int ret, params_size = 0, i;
+int hashalg, sigalg;
 
   ret =
     _gnutls_x509_get_signed_data (crq->crq, "certificationRequestInfo", &data);
@@ -2565,7 +2566,10 @@
       goto cleanup;
     }
 
-  ret = pubkey_verify_sig(&data, NULL, &signature,
+  sigalg = gnutls_x509_crq_get_signature_algorithm (crq);
+  hashalg = _gnutls_sign_get_hash(sigalg);
+
+  ret = pubkey_verify_sig(hashalg, &data, NULL, &signature,
                           gnutls_x509_crq_get_pk_algorithm (crq, NULL),
     params, params_size);
   if (ret < 0)
@@ -2588,5 +2592,48 @@
   return ret;
 }
 
+/**
+ * gnutls_x509_crq_get_signature_algorithm:
+ * @crl: should contain a #gnutls_x509_crl_t structure
+ *
+ * This function will return a value of the #gnutls_sign_algorithm_t
+ * enumeration that is the signature algorithm.
+ *
+ * Returns: On success, %GNUTLS_E_SUCCESS is returned, otherwise a
+ *   negative error value.
+ **/
+int
+gnutls_x509_crq_get_signature_algorithm (gnutls_x509_crq_t crq)
+{
+  int result;
+  gnutls_datum_t sa;
+
+  if (crq == NULL)
+    {
+      gnutls_assert ();
+      return GNUTLS_E_INVALID_REQUEST;
+    }
+
+  /* Read the signature algorithm. Note that parameters are not
+   * read. They will be read from the issuer's certificate if needed.
+   */
+
+  result =
+    _gnutls_x509_read_value (crq->crq, "signatureAlgorithm.algorithm",
+                             &sa, 0);
+
+  if (result < 0)
+    {
+      gnutls_assert ();
+      return result;
+    }
+
+  result = _gnutls_x509_oid2sign_algorithm ((const char *) sa.data);
+
+  _gnutls_free_datum (&sa);
+
+  return result;
+}
+
 #endif /* ENABLE_PKI */
 
Index: gnutls26-2.12.23/lib/x509/privkey.c
===================================================================
--- gnutls26-2.12.23.orig/lib/x509/privkey.c    2015-03-20 09:07:52.587827857 -0400
+++ gnutls26-2.12.23/lib/x509/privkey.c    2015-03-20 09:07:52.583827801 -0400
@@ -1828,7 +1828,8 @@
       return GNUTLS_E_INVALID_REQUEST;
     }
 
-  result = _gnutls_x509_privkey_verify_signature (data, signature, key);
+  result = _gnutls_x509_privkey_verify_signature (GNUTLS_MAC_UNKNOWN, data, signature, key);
+
   if (result < 0)
     {
       gnutls_assert ();
Index: gnutls26-2.12.23/lib/x509/verify.c
===================================================================
--- gnutls26-2.12.23.orig/lib/x509/verify.c    2015-03-20 09:07:52.587827857 -0400
+++ gnutls26-2.12.23/lib/x509/verify.c    2015-03-20 09:07:52.587827857 -0400
@@ -332,6 +332,7 @@
   gnutls_datum_t cert_signature = { NULL, 0 };
   gnutls_x509_crt_t issuer = NULL;
   int issuer_version, result = 0;
+  int sigalg, hashalg;
 
   if (output)
     *output = 0;
@@ -399,8 +400,18 @@
       goto cleanup;
     }
 
+  sigalg = gnutls_x509_crt_get_signature_algorithm (cert);
+  hashalg = _gnutls_sign_get_hash(sigalg);
+
+  if (hashalg == GNUTLS_MAC_UNKNOWN)
+    {
+      gnutls_assert();
+      result = 0;
+      goto cleanup;
+    }
+
   result =
-    _gnutls_x509_verify_signature (&cert_signed_data, NULL, &cert_signature,
+    _gnutls_x509_verify_signature (hashalg, &cert_signed_data, NULL, &cert_signature,
                                    issuer);
   if (result == GNUTLS_E_PK_SIG_VERIFY_FAILED)
     {
@@ -423,10 +434,6 @@
    */
   if (is_issuer (cert, cert) == 0)
     {
-      int sigalg;
-
-      sigalg = gnutls_x509_crt_get_signature_algorithm (cert);
-
       if (((sigalg == GNUTLS_SIGN_RSA_MD2) &&
            !(flags & GNUTLS_VERIFY_ALLOW_SIGN_RSA_MD2)) ||
           ((sigalg == GNUTLS_SIGN_RSA_MD5) &&
@@ -749,12 +756,12 @@
  * params[1] is public key
  */
 static int
-_pkcs1_rsa_verify_sig (const gnutls_datum_t * text,
-                       const gnutls_datum_t * prehash,
-                       const gnutls_datum_t * signature, bigint_t * params,
-                       int params_len)
+_pkcs1_rsa_verify_sig (gnutls_mac_algorithm_t hash, const gnutls_datum_t * text,
+               const gnutls_datum_t * prehash,
+               const gnutls_datum_t * signature, bigint_t * params,
+               int params_len)
 {
-  gnutls_mac_algorithm_t hash = GNUTLS_MAC_UNKNOWN;
+  gnutls_mac_algorithm_t phash = GNUTLS_MAC_UNKNOWN;
   int ret;
   opaque digest[MAX_HASH_SIZE], md[MAX_HASH_SIZE], *cmp;
   int digest_size;
@@ -774,7 +781,7 @@
 
   digest_size = sizeof (digest);
   if ((ret =
-       decode_ber_digest_info (&decrypted, &hash, digest, &digest_size)) != 0)
+       decode_ber_digest_info (&decrypted, &phash, digest, &digest_size)) != 0)
     {
       gnutls_assert ();
       _gnutls_free_datum (&decrypted);
@@ -783,6 +790,15 @@
 
   _gnutls_free_datum (&decrypted);
 
+  if (hash != GNUTLS_MAC_UNKNOWN && hash != phash)
+    {
+      gnutls_assert();
+      return GNUTLS_E_PK_SIG_VERIFY_FAILED;
+    }
+  else
+    hash = phash;
+  
+
   if (digest_size != _gnutls_hash_get_algo_len (hash))
     {
       gnutls_assert ();
@@ -878,11 +894,11 @@
  * not verified, or 1 otherwise.
  */
 int
-pubkey_verify_sig (const gnutls_datum_t * tbs,
-                   const gnutls_datum_t * hash,
-                   const gnutls_datum_t * signature,
-                   gnutls_pk_algorithm_t pk, bigint_t * issuer_params,
-                   int issuer_params_size)
+pubkey_verify_sig (int hashalg, const gnutls_datum_t * tbs,
+        const gnutls_datum_t * hash,
+        const gnutls_datum_t * signature,
+        gnutls_pk_algorithm_t pk, bigint_t * issuer_params,
+        int issuer_params_size)
 {
 
   switch (pk)
@@ -890,7 +906,7 @@
     case GNUTLS_PK_RSA:
 
       if (_pkcs1_rsa_verify_sig
-          (tbs, hash, signature, issuer_params, issuer_params_size) != 0)
+          (hashalg, tbs, hash, signature, issuer_params, issuer_params_size) != 0)
         {
           gnutls_assert ();
           return GNUTLS_E_PK_SIG_VERIFY_FAILED;
@@ -1021,7 +1037,7 @@
  * 'signature' is the signature!
  */
 int
-_gnutls_x509_verify_signature (const gnutls_datum_t * tbs,
+_gnutls_x509_verify_signature (int hashalg, const gnutls_datum_t * tbs,
                                const gnutls_datum_t * hash,
                                const gnutls_datum_t * signature,
                                gnutls_x509_crt_t issuer)
@@ -1041,7 +1057,7 @@
     }
 
   ret =
-    pubkey_verify_sig (tbs, hash, signature,
+    pubkey_verify_sig (hashalg, tbs, hash, signature,
                        gnutls_x509_crt_get_pk_algorithm (issuer, NULL),
                        issuer_params, issuer_params_size);
   if (ret < 0)
@@ -1066,13 +1082,13 @@
  * 'signature' is the signature!
  */
 int
-_gnutls_x509_privkey_verify_signature (const gnutls_datum_t * tbs,
+_gnutls_x509_privkey_verify_signature (int hashalg, const gnutls_datum_t * tbs,
                                        const gnutls_datum_t * signature,
                                        gnutls_x509_privkey_t issuer)
 {
   int ret;
 
-  ret = pubkey_verify_sig (tbs, NULL, signature, issuer->pk_algorithm,
+  ret = pubkey_verify_sig (hashalg, tbs, NULL, signature, issuer->pk_algorithm,
                            issuer->params, issuer->params_size);
   if (ret < 0)
     {
@@ -1293,6 +1309,7 @@
   gnutls_datum_t crl_signature = { NULL, 0 };
   gnutls_x509_crt_t issuer;
   int result;
+  int sigalg, hashalg;
 
   if (output)
     *output = 0;
@@ -1334,6 +1351,7 @@
   if (result < 0)
     {
       gnutls_assert ();
+      result = 0;
       goto cleanup;
     }
 
@@ -1341,11 +1359,21 @@
   if (result < 0)
     {
       gnutls_assert ();
+      result = 0;
+      goto cleanup;
+    }
+
+  sigalg = gnutls_x509_crl_get_signature_algorithm (crl);
+  hashalg = _gnutls_sign_get_hash(sigalg);
+  if (hashalg == GNUTLS_MAC_UNKNOWN)
+    {
+      gnutls_assert();
+      result = 0;
       goto cleanup;
     }
 
   result =
-    _gnutls_x509_verify_signature (&crl_signed_data, NULL, &crl_signature,
+    _gnutls_x509_verify_signature (hashalg, &crl_signed_data, NULL, &crl_signature,
                                    issuer);
   if (result == GNUTLS_E_PK_SIG_VERIFY_FAILED)
     {
@@ -1358,14 +1386,11 @@
   else if (result < 0)
     {
       gnutls_assert ();
+      result = 0;
       goto cleanup;
     }
 
   {
-    int sigalg;
-
-    sigalg = gnutls_x509_crl_get_signature_algorithm (crl);
-
     if (((sigalg == GNUTLS_SIGN_RSA_MD2) &&
          !(flags & GNUTLS_VERIFY_ALLOW_SIGN_RSA_MD2)) ||
         ((sigalg == GNUTLS_SIGN_RSA_MD5) &&
Index: gnutls26-2.12.23/lib/x509/x509.c
===================================================================
--- gnutls26-2.12.23.orig/lib/x509/x509.c    2015-03-20 09:07:52.587827857 -0400
+++ gnutls26-2.12.23/lib/x509/x509.c    2015-03-20 09:07:52.587827857 -0400
@@ -2714,7 +2714,7 @@
       return GNUTLS_E_INVALID_REQUEST;
     }
 
-  result = _gnutls_x509_verify_signature (data, NULL, signature, crt);
+  result = _gnutls_x509_verify_signature (GNUTLS_MAC_UNKNOWN, data, NULL, signature, crt);
   if (result < 0)
     {
       gnutls_assert ();
@@ -2752,7 +2752,7 @@
       return GNUTLS_E_INVALID_REQUEST;
     }
 
-  result = _gnutls_x509_verify_signature (NULL, hash, signature, crt);
+  result = _gnutls_x509_verify_signature (GNUTLS_MAC_UNKNOWN, NULL, hash, signature, crt);
   if (result < 0)
     {
       gnutls_assert ();
Index: gnutls26-2.12.23/lib/x509/x509_int.h
===================================================================
--- gnutls26-2.12.23.orig/lib/x509/x509_int.h    2015-03-20 09:07:52.587827857 -0400
+++ gnutls26-2.12.23/lib/x509/x509_int.h    2015-03-20 09:07:52.587827857 -0400
@@ -187,11 +187,11 @@
                                bigint_t * issuer_params,
                                unsigned int issuer_params_size);
 
-int _gnutls_x509_verify_signature (const gnutls_datum_t * tbs,
+int _gnutls_x509_verify_signature (int sigalg, const gnutls_datum_t * tbs,
                                    const gnutls_datum_t * hash,
                                    const gnutls_datum_t * signature,
                                    gnutls_x509_crt_t issuer);
-int _gnutls_x509_privkey_verify_signature (const gnutls_datum_t * tbs,
+int _gnutls_x509_privkey_verify_signature (int sigalg, const gnutls_datum_t * tbs,
                                            const gnutls_datum_t * signature,
                                            gnutls_x509_privkey_t issuer);
 
@@ -390,5 +390,6 @@
                                     const char *ext_id,
                                     const gnutls_datum_t * ext_data,
                                     unsigned int critical);
-
+int
+gnutls_x509_crq_get_signature_algorithm (gnutls_x509_crq_t crq);
 #endif

 components/library/gnutls/patches/06-fix_tls_poodle.patch

New file
@@ -0,0 +1,19 @@
Description: Fix TLS Poodle
 Fix TLS Poodle so it checks the entire padding length.  
 This was caused by an off by one error.
 Patch created by Hanno Boeck (https://hboeck.de/).

---
Bug-Ubuntu: https://launchpad.net/bugs/1510163

--- gnutls26-2.12.23.orig/lib/gnutls_cipher.c
+++ gnutls26-2.12.23/lib/gnutls_cipher.c
@@ -569,7 +569,7 @@ _gnutls_ciphertext2compressed (gnutls_se
        * because there is a timing channel in that memory access (in certain CPUs).
        */
       if (_gnutls_version_has_variable_padding (ver) && pad_failed == 0)
-        for (i = 2; i <= pad; i++)
+        for (i = 2; i <= pad+1; i++)
           {
             if (ciphertext.data[ciphertext.size - i] != pad)
               pad_failed = GNUTLS_E_DECRYPTION_FAILED;

 components/library/gnutls/patches/07-CVE-2015-7575.patch

New file
@@ -0,0 +1,42 @@
From 778b4825c4e9fbd087f6fd5e3c94e547b93ae10e Mon Sep 17 00:00:00 2001
From: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date: Sat, 25 Apr 2015 20:46:15 +0200
Subject: [PATCH] _gnutls_session_sign_algo_enabled: do not consider any values from the extension data to decide acceptable algorithms

---
 lib/ext_signature.c | 17 +----------------
 1 file changed, 1 insertion(+), 16 deletions(-)

diff --git a/lib/ext_signature.c b/lib/ext_signature.c
index dca222f..008b026 100644
--- a/lib/ext_signature.c
+++ b/lib/ext_signature.c
@@ -379,24 +379,9 @@ _gnutls_session_sign_algo_enabled (gnutls_session_t session,
                                    gnutls_sign_algorithm_t sig)
 {
   unsigned i;
-  int ret;
   gnutls_protocol_t ver = gnutls_protocol_get_version (session);
-  sig_ext_st *priv;
-  extension_priv_data_t epriv;
 
-  ret =
-    _gnutls_ext_get_session_data (session,
-                                  GNUTLS_EXTENSION_SIGNATURE_ALGORITHMS,
-                                  &epriv);
-  if (ret < 0)
-    {
-      gnutls_assert ();
-      return 0;
-    }
-  priv = epriv.ptr;
-
-  if (!_gnutls_version_has_selectable_sighash (ver)
-      || priv->sign_algorithms_size == 0)
+  if (!_gnutls_version_has_selectable_sighash (ver))
     /* none set, allow all */
     {
       return 0;
--
libgit2 0.23.4


 components/library/gnutls/patches/08-not-build-docs.patch

New file
@@ -0,0 +1,11 @@
--- gnutls-2.12.21/doc/Makefile.in.1    2016-05-06 19:01:59.898970739 +0300
+++ gnutls-2.12.21/doc/Makefile.in    2016-05-06 19:03:18.581109789 +0300
@@ -209,7 +209,7 @@
 am__v_GEN_0 = @echo "  GEN   " $@;
 SOURCES = $(errcodes_SOURCES) $(printlist_SOURCES)
 DIST_SOURCES = $(errcodes_SOURCES) $(printlist_SOURCES)
-INFO_DEPS = $(srcdir)/gnutls.info
+INFO_DEPS = 
 TEXINFO_TEX = $(top_srcdir)/build-aux/texinfo.tex
 am__TEXINFO_TEX_DIR = $(top_srcdir)/build-aux
 DVIS = gnutls.dvi

 components/library/gnutls/patches/09-test-update-copyright.sh.patch

New file
@@ -0,0 +1,11 @@
--- a/build-aux/update-copyright    2013-09-22 06:15:20.000000000 +0000
+++ b/build-aux/update-copyright    2015-11-22 08:30:37.968983827 +0000
@@ -124,7 +124,7 @@
 use warnings;
 
 my $copyright_re = 'Copyright';
-my $circle_c_re = '(?:\([cC]\)|@copyright{}|&copy;)';
+my $circle_c_re = '(?:\([cC]\)|@copyright\{}|\\\\\(co|&copy;)';
 my $holder = $ENV{UPDATE_COPYRIGHT_HOLDER};
 $holder ||= 'Free Software Foundation, Inc.';
 my $prefix_max = 5;

 components/library/gnutls/patches/10-use_gnutls_global_set_time.patch

New file
@@ -0,0 +1,31 @@
Description: Make use of gnutls_global_set_time_function()
 2.12.x has gnutls_global_set_time_function(), but does not use
 it in chainverify test. Add the missing piece from GIT mater branch
 6a125fea8d4ddb545a6c88dbab04b6ac26c183ab.
 .
 This caused a testsuite failure on amd64 (but not on i386).
Origin: upstream
Bug-Debian: http://bugs.debian.org/746018
Forwarded: http://lists.gnutls.org/pipermail/gnutls-devel/2014-April/006925.html
Last-Update: 2014-04-27

--- gnutls26-2.12.23.orig/tests/chainverify.c
+++ gnutls26-2.12.23/tests/chainverify.c
@@ -38,8 +38,7 @@
    verifying certificates.  To avoid a time bomb, we hard code the
    current time.  This should work fine on systems where the library
    call to time is resolved at run-time.  */
-time_t
-time (time_t * t)
+static time_t mytime (time_t * t)
 {
   time_t then = 1256803113;
 
@@ -775,6 +774,7 @@ doit (void)
       exit (EXIT_FAILURE);
     }
 
+  gnutls_global_set_time_function (mytime);
   gnutls_global_set_log_function (tls_log_func);
   if (debug)
     gnutls_global_set_log_level (4711);