gnutls-3.8.7.1

[Bruce Dubbs]

New minor version.

[Xi Ruoyao]

• libgnutls: New configure option to compile out DSA support

The --disable-dsa configure option has been added to completely disable DSA algorithm support.

• libgnutls: Experimental support for X25519Kyber768Draft00 key exchange in TLS

For testing purposes, the hybrid post-quantum key exchange defined in draft-tls-westerbaan-xyber768d00 has been implemented using liboqs. Since the algorithm is still not finalized, the support of this key exchange is disabled by default and can be enabled with the --with-liboqs configure option.

[Xi Ruoyao]

And there are many minor changes not mentioned by the NEWS file. See the ChangeLog file for details.

The extracted directory is named gnutls-3.8.7 (no .1 part). There are some translation updates from 3.8.7 to 3.8.7.1.

[Xi Ruoyao]

tests/ocsp-tests/ocsp-must-staple-connection.sh is broken: the test wants datefudge (not a BLFS package) and in previous releases it's skipped. But in the upstream commit ​https://gitlab.com/gnutls/gnutls/-/commit/f3e8eac0586a they removed the skip_if_no_datefudge line w/o fully clearing the dependencies on datefudge. Thus the test now fails.

Generally for a test suite bug we just document a failure instead of fixing it, but the problem is this test hangs for minutes before failing, and after the failure a openssl ocsp process will linger in the background. So we can remove this problematic test:

sed '/ocsp-must-staple-connection/d' -i tests/Makefile

[Bruce Dubbs]

Fixed at commits

b0ff7d03f3 Update to gnutls-3.8.7.1.
61c7e618c6 Update to btrfs-progs-6.10.1.
5ac862b215 Update to unbound-1.21.0.