Gentoo Archives: gentoo-commits

From: Alon Bar-Lev <alonbl@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] repo/gentoo:master commit in: net-libs/gnutls/files/, net-libs/gnutls/
Date: Mon, 30 Jan 2017 06:48:53
Message-Id: 1485758856.9135da89460847e333410a1a59d8383c9430dcdb.alonbl@gentoo
1 commit: 9135da89460847e333410a1a59d8383c9430dcdb
2 Author: Alon Bar-Lev <alonbl <AT> gentoo <DOT> org>
3 AuthorDate: Mon Jan 30 06:47:01 2017 +0000
4 Commit: Alon Bar-Lev <alonbl <AT> gentoo <DOT> org>
5 CommitDate: Mon Jan 30 06:47:36 2017 +0000
6 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9135da89
7
8 net-libs/gnutls: cleanup
9
10 Bug: 605238
11
12 Package-Manager: portage-2.3.3
13
14 net-libs/gnutls/Manifest | 2 -
15 .../gnutls/files/gnutls-3.3.24-CVE-2016-7444.patch | 28 ----
16 net-libs/gnutls/gnutls-3.3.24-r1.ebuild | 178 --------------------
17 net-libs/gnutls/gnutls-3.3.25.ebuild | 182 ---------------------
18 4 files changed, 390 deletions(-)
19
20 diff --git a/net-libs/gnutls/Manifest b/net-libs/gnutls/Manifest
21 index 48d11d8..50632c6 100644
22 --- a/net-libs/gnutls/Manifest
23 +++ b/net-libs/gnutls/Manifest
24 @@ -1,4 +1,2 @@
25 -DIST gnutls-3.3.24.tar.xz 6294532 SHA256 5b65fe2a91c8dfa32bedc78acffcb152e5426cd3349e2afc43cccc9bdaf18aa5 SHA512 1fbb2e15ade14db15d7acc9ff559ecfc39517fd99e6c784583a7a4f8786daf8053f35f41e39cde0eeb5a1dfd3193ad908b52f62f945fbd43c147dc87e55f192f WHIRLPOOL 0725b35af9bbb4a7ee8f430af95e078066fb455328dd0ee71cca6633d093fe0433c7d869ebf0fabf8983679a32ff8451a2b631aec672810eb7bc55a3de28cc7d
26 -DIST gnutls-3.3.25.tar.xz 6315372 SHA256 189d6c4e43465d2ec84f2cd66f0ef63657225926f56875e182743cfeef9f1f2e SHA512 6f9074f58250517287d183faac27afcc4318293b24b587b00494d40b6b5dae088fef993b5c2adf6842238adc1f694a747262b50bc602037626579b84401207f6 WHIRLPOOL 3d320378cd8e7330e2b399876bb8739dd35fe2dc1204b0ead561f214676583f2b2c1fa4c5a61b720e3af5c72769e804d9bc36f69f8659eb7a1d6e8a1a7012e2c
27 DIST gnutls-3.3.26.tar.xz 6361068 SHA256 6a7d882b6b581d684883fde195abf930dab37dfbe6aaea88ab164252bec720d9 SHA512 41259f760f5ed9b87d4203de567efb1a2087e01a025f2ea0f14167f146ecd640fbddeab390fbae6acc262507229894774db883d0892d448068ee73abb110738f WHIRLPOOL afca5aabebf36064847933662736c7713b837375db2c91c416d43a980407d912edf8fb64f53615c0bed770f46a9d2e0a3eb309f6a66281f5377e50a02863c8e7
28 DIST gnutls-3.5.8.tar.xz 7264448 SHA256 0e97f243ae72b70307d684b84c7fe679385aa7a7a0e37e5be810193dcc17d4ff SHA512 e6cdc4f9f2e41bd10e61b90b6b5ea3882c80a7130de8a0e9c23e373985cdc332128529dad49d6854fe93ee934e1bbde8b34dfd19e354b3a8e11b22d61424292e WHIRLPOOL 8e9c0407d13793b1c2a8a6377588e87502fa0a9dc79fe8b963ceac558538326052620e95772d8cef61d2d4e680bcabd3094adf5cea09cff42dd272d4478e7f7c
29
30 diff --git a/net-libs/gnutls/files/gnutls-3.3.24-CVE-2016-7444.patch b/net-libs/gnutls/files/gnutls-3.3.24-CVE-2016-7444.patch
31 deleted file mode 100644
32 index 82ab36f..00000000
33 --- a/net-libs/gnutls/files/gnutls-3.3.24-CVE-2016-7444.patch
34 +++ /dev/null
35 @@ -1,28 +0,0 @@
36 -From 964632f37dfdfb914ebc5e49db4fa29af35b1de9 Mon Sep 17 00:00:00 2001
37 -From: Nikos Mavrogiannopoulos <nmav@××××××.org>
38 -Date: Sat, 27 Aug 2016 17:00:22 +0200
39 -Subject: [PATCH] ocsp: corrected the comparison of the serial size in OCSP response
40 -
41 -Previously the OCSP certificate check wouldn't verify the serial length
42 -and could succeed in cases it shouldn't.
43 -
44 -Reported by Stefan Buehler.
45 ----
46 - lib/x509/ocsp.c | 1 +
47 - 1 file changed, 1 insertion(+), 0 deletions(-)
48 -
49 -diff --git a/lib/x509/ocsp.c b/lib/x509/ocsp.c
50 -index 92db9b6..8181f2e 100644
51 ---- a/lib/x509/ocsp.c
52 -+++ b/lib/x509/ocsp.c
53 -@@ -1318,6 +1318,7 @@ gnutls_ocsp_resp_check_crt(gnutls_ocsp_resp_t resp,
54 - gnutls_assert();
55 - goto cleanup;
56 - }
57 -+ cserial.size = t;
58 -
59 - if (rserial.size != cserial.size
60 - || memcmp(cserial.data, rserial.data, rserial.size) != 0) {
61 ---
62 -libgit2 0.24.0
63 -
64
65 diff --git a/net-libs/gnutls/gnutls-3.3.24-r1.ebuild b/net-libs/gnutls/gnutls-3.3.24-r1.ebuild
66 deleted file mode 100644
67 index 7dfbd62..00000000
68 --- a/net-libs/gnutls/gnutls-3.3.24-r1.ebuild
69 +++ /dev/null
70 @@ -1,178 +0,0 @@
71 -# Copyright 1999-2017 Gentoo Foundation
72 -# Distributed under the terms of the GNU General Public License v2
73 -# $Id$
74 -
75 -EAPI=6
76 -
77 -inherit autotools libtool eutils multilib-minimal versionator
78 -
79 -DESCRIPTION="A TLS 1.2 and SSL 3.0 implementation for the GNU project"
80 -HOMEPAGE="http://www.gnutls.org/"
81 -SRC_URI="mirror://gnupg/gnutls/v$(get_version_component_range 1-2)/${P}.tar.xz"
82 -
83 -# LGPL-3 for libgnutls library and GPL-3 for libgnutls-extra library.
84 -# soon to be relicensed as LGPL-2.1 unless heartbeat extension enabled.
85 -LICENSE="GPL-3 LGPL-3"
86 -SLOT="0"
87 -KEYWORDS="alpha amd64 arm ~arm64 hppa ia64 ~m68k ~mips ppc ppc64 ~s390 ~sh sparc x86 ~amd64-fbsd ~sparc-fbsd ~x86-fbsd ~amd64-linux ~arm-linux ~x86-linux ~ppc-macos ~x64-macos ~x86-macos ~sparc-solaris ~x86-solaris"
88 -IUSE_LINGUAS=" en cs de fi fr it ms nl pl sv uk vi zh_CN"
89 -IUSE="+cxx +crywrap dane doc examples guile nls +openssl pkcs11 static-libs test zlib ${IUSE_LINGUAS// / linguas_}"
90 -# heartbeat support is not disabled until re-licensing happens fullyf
91 -
92 -# NOTICE: sys-devel/autogen is required at runtime as we
93 -# use system libopts
94 -RDEPEND=">=dev-libs/libtasn1-4.3:=[${MULTILIB_USEDEP}]
95 - >=dev-libs/nettle-2.7:=[gmp,${MULTILIB_USEDEP}]
96 - >=dev-libs/gmp-5.1.3-r1:=[${MULTILIB_USEDEP}]
97 - sys-devel/autogen
98 - crywrap? ( net-dns/libidn )
99 - dane? ( >=net-dns/unbound-1.4.20[${MULTILIB_USEDEP}] )
100 - guile? ( >=dev-scheme/guile-1.8:=[networking] )
101 - nls? ( >=virtual/libintl-0-r1[${MULTILIB_USEDEP}] )
102 - pkcs11? ( >=app-crypt/p11-kit-0.20.7[${MULTILIB_USEDEP}] )
103 - zlib? ( >=sys-libs/zlib-1.2.8-r1[${MULTILIB_USEDEP}] )
104 - abi_x86_32? (
105 - !<=app-emulation/emul-linux-x86-baselibs-20140508
106 - !app-emulation/emul-linux-x86-baselibs[-abi_x86_32(-)]
107 - )"
108 -DEPEND="${RDEPEND}
109 - >=sys-devel/automake-1.11.6
110 - >=virtual/pkgconfig-0-r1[${MULTILIB_USEDEP}]
111 - doc? (
112 - sys-apps/texinfo
113 - dev-util/gtk-doc
114 - )
115 - nls? ( sys-devel/gettext )
116 - test? ( app-misc/datefudge )"
117 -
118 -DOCS=( AUTHORS ChangeLog NEWS README THANKS doc/TODO )
119 -
120 -PATCHES=(
121 - "${FILESDIR}/${PN}-3.3.19-build-allow-installing-man-1-even-with-disable-doc.patch"
122 - "${FILESDIR}/${P}-CVE-2016-7444.patch"
123 -)
124 -
125 -pkg_setup() {
126 - # bug#520818
127 - export TZ=UTC
128 -}
129 -
130 -src_prepare() {
131 - default
132 -
133 - sed -i \
134 - -e 's/imagesdir = $(infodir)/imagesdir = $(htmldir)/' \
135 - doc/Makefile.am || die
136 -
137 - # force regeneration of autogen-ed files
138 - local file
139 - for file in $(grep -l AutoGen-ed src/*.c) ; do
140 - rm src/$(basename ${file} .c).{c,h} || die
141 - done
142 -
143 - # force regeneration of makeinfo files
144 - # have no idea why on some system these files are not
145 - # accepted as-is, see bug#520818
146 - for file in $(grep -l "produced by makeinfo" doc/*.info) ; do
147 - rm "${file}" || die
148 - done
149 -
150 - eautoreconf
151 -
152 - # Use sane .so versioning on FreeBSD.
153 - elibtoolize
154 -
155 - # bug 497472
156 - use cxx || epunt_cxx
157 -}
158 -
159 -multilib_src_configure() {
160 - LINGUAS="${LINGUAS//en/en@boldquot en@quot}"
161 -
162 - # TPM needs to be tested before being enabled
163 - # hardware-accell is disabled on OSX because the asm files force
164 - # GNU-stack (as doesn't support that) and when that's removed ld
165 - # complains about duplicate symbols
166 - ECONF_SOURCE=${S} \
167 - econf \
168 - --disable-valgrind-tests \
169 - --without-included-libtasn1 \
170 - --enable-heartbeat-support \
171 - $(use_enable cxx) \
172 - $(use_enable dane libdane) \
173 - $(multilib_native_enable manpages) \
174 - $(multilib_native_use_enable doc) \
175 - $(multilib_native_use_enable doc gtk-doc) \
176 - $(multilib_native_use_enable guile) \
177 - $(multilib_native_use_enable crywrap) \
178 - $(use_enable nls) \
179 - $(use_enable openssl openssl-compatibility) \
180 - $(use_enable static-libs static) \
181 - $(use_with pkcs11 p11-kit) \
182 - $(use_with zlib) \
183 - --without-tpm \
184 - --with-unbound-root-key-file=/etc/dnssec/root-anchors.txt \
185 - $([[ ${CHOST} == *-darwin* ]] && echo --disable-hardware-acceleration)
186 -
187 - if multilib_is_native_abi; then
188 - ln -s "${S}"/doc/reference/html doc/reference/html || die
189 - fi
190 -}
191 -
192 -multilib_src_compile() {
193 - if multilib_is_native_abi; then
194 - default
195 -
196 - # symlink certtool for use in other ABIs
197 - if use test; then
198 - ln -s "${BUILD_DIR}"/src "${T}"/native-tools || die
199 - fi
200 - else
201 - emake -C gl
202 - emake -C lib
203 - emake -C extra
204 - use dane && emake -C libdane
205 - fi
206 -}
207 -
208 -multilib_src_test() {
209 - if multilib_is_native_abi; then
210 - # parallel testing often fails
211 - emake -j1 check
212 - else
213 - # use native ABI tools
214 - ln -s "${T}"/native-tools/{certtool,gnutls-{serv,cli}} \
215 - "${BUILD_DIR}"/src/ || die
216 -
217 - emake -C gl -j1 check
218 - emake -C tests -j1 check
219 - fi
220 -}
221 -
222 -multilib_src_install() {
223 - if multilib_is_native_abi; then
224 - emake DESTDIR="${D}" install
225 - else
226 - emake -C lib DESTDIR="${D}" install
227 - emake -C extra DESTDIR="${D}" install
228 - use dane && emake -C libdane DESTDIR="${D}" install
229 - fi
230 -}
231 -
232 -multilib_src_install_all() {
233 - einstalldocs
234 - prune_libtool_files --all
235 -
236 - dodoc doc/certtool.cfg
237 -
238 - if use doc; then
239 - dohtml doc/gnutls.html
240 - else
241 - rm -fr "${ED}/usr/share/doc/${PF}/html"
242 - fi
243 -
244 - if use examples; then
245 - docinto examples
246 - dodoc doc/examples/*.c
247 - fi
248 -}
249
250 diff --git a/net-libs/gnutls/gnutls-3.3.25.ebuild b/net-libs/gnutls/gnutls-3.3.25.ebuild
251 deleted file mode 100644
252 index 275c118..00000000
253 --- a/net-libs/gnutls/gnutls-3.3.25.ebuild
254 +++ /dev/null
255 @@ -1,182 +0,0 @@
256 -# Copyright 1999-2017 Gentoo Foundation
257 -# Distributed under the terms of the GNU General Public License v2
258 -# $Id$
259 -
260 -EAPI=6
261 -
262 -inherit autotools libtool eutils multilib-minimal versionator
263 -
264 -DESCRIPTION="A TLS 1.2 and SSL 3.0 implementation for the GNU project"
265 -HOMEPAGE="http://www.gnutls.org/"
266 -SRC_URI="mirror://gnupg/gnutls/v$(get_version_component_range 1-2)/${P}.tar.xz"
267 -
268 -# LGPL-3 for libgnutls library and GPL-3 for libgnutls-extra library.
269 -# soon to be relicensed as LGPL-2.1 unless heartbeat extension enabled.
270 -LICENSE="GPL-3 LGPL-3"
271 -SLOT="0"
272 -KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~amd64-fbsd ~sparc-fbsd ~x86-fbsd ~amd64-linux ~arm-linux ~x86-linux ~ppc-macos ~x64-macos ~x86-macos ~sparc-solaris ~x86-solaris"
273 -IUSE_LINGUAS=" en cs de fi fr it ms nl pl sv uk vi zh_CN"
274 -IUSE="+cxx +crywrap dane doc examples guile nls +openssl pkcs11 static-libs test zlib ${IUSE_LINGUAS// / linguas_}"
275 -# heartbeat support is not disabled until re-licensing happens fullyf
276 -
277 -# NOTICE: sys-devel/autogen is required at runtime as we
278 -# use system libopts
279 -RDEPEND=">=dev-libs/libtasn1-4.3:=[${MULTILIB_USEDEP}]
280 - >=dev-libs/nettle-2.7:=[gmp,${MULTILIB_USEDEP}]
281 - >=dev-libs/gmp-5.1.3-r1:=[${MULTILIB_USEDEP}]
282 - sys-devel/autogen
283 - crywrap? ( net-dns/libidn )
284 - dane? ( >=net-dns/unbound-1.4.20[${MULTILIB_USEDEP}] )
285 - guile? ( >=dev-scheme/guile-1.8:=[networking] )
286 - nls? ( >=virtual/libintl-0-r1[${MULTILIB_USEDEP}] )
287 - pkcs11? ( >=app-crypt/p11-kit-0.20.7[${MULTILIB_USEDEP}] )
288 - zlib? ( >=sys-libs/zlib-1.2.8-r1[${MULTILIB_USEDEP}] )
289 - abi_x86_32? (
290 - !<=app-emulation/emul-linux-x86-baselibs-20140508
291 - !app-emulation/emul-linux-x86-baselibs[-abi_x86_32(-)]
292 - )"
293 -DEPEND="${RDEPEND}
294 - >=sys-devel/automake-1.11.6
295 - >=virtual/pkgconfig-0-r1[${MULTILIB_USEDEP}]
296 - doc? (
297 - sys-apps/texinfo
298 - dev-util/gtk-doc
299 - )
300 - nls? ( sys-devel/gettext )
301 - test? ( app-misc/datefudge )"
302 -
303 -DOCS=( AUTHORS ChangeLog NEWS README THANKS doc/TODO )
304 -
305 -PATCHES=(
306 - "${FILESDIR}/${PN}-3.3.19-build-allow-installing-man-1-even-with-disable-doc.patch"
307 -)
308 -
309 -pkg_setup() {
310 - # bug#520818
311 - export TZ=UTC
312 -}
313 -
314 -src_prepare() {
315 - default
316 -
317 - sed -i \
318 - -e 's/imagesdir = $(infodir)/imagesdir = $(htmldir)/' \
319 - doc/Makefile.am || die
320 -
321 - # force regeneration of autogen-ed files
322 - local file
323 - for file in $(grep -l AutoGen-ed src/*.c) ; do
324 - rm src/$(basename ${file} .c).{c,h} || die
325 - done
326 -
327 - # force regeneration of makeinfo files
328 - # have no idea why on some system these files are not
329 - # accepted as-is, see bug#520818
330 - for file in $(grep -l "produced by makeinfo" doc/*.info) ; do
331 - rm "${file}" || die
332 - done
333 -
334 - eautoreconf
335 -
336 - # Use sane .so versioning on FreeBSD.
337 - elibtoolize
338 -
339 - # bug 497472
340 - use cxx || epunt_cxx
341 -}
342 -
343 -multilib_src_configure() {
344 - LINGUAS="${LINGUAS//en/en@boldquot en@quot}"
345 -
346 - # remove magic of library detection
347 - # bug#438222
348 - libconf=($("${S}/configure" --help | grep -- '--without-.*-prefix' | sed -e 's/^ *\([^ ]*\) .*/\1/g'))
349 -
350 - # TPM needs to be tested before being enabled
351 - # hardware-accell is disabled on OSX because the asm files force
352 - # GNU-stack (as doesn't support that) and when that's removed ld
353 - # complains about duplicate symbols
354 - ECONF_SOURCE=${S} \
355 - econf \
356 - --disable-valgrind-tests \
357 - --without-included-libtasn1 \
358 - --enable-heartbeat-support \
359 - $(use_enable cxx) \
360 - $(use_enable dane libdane) \
361 - $(multilib_native_enable manpages) \
362 - $(multilib_native_use_enable doc) \
363 - $(multilib_native_use_enable doc gtk-doc) \
364 - $(multilib_native_use_enable guile) \
365 - $(multilib_native_use_enable crywrap) \
366 - $(use_enable nls) \
367 - $(use_enable openssl openssl-compatibility) \
368 - $(use_enable static-libs static) \
369 - $(use_with pkcs11 p11-kit) \
370 - $(use_with zlib) \
371 - --without-tpm \
372 - --with-unbound-root-key-file=/etc/dnssec/root-anchors.txt \
373 - "${libconf[@]}" \
374 - $([[ ${CHOST} == *-darwin* ]] && echo --disable-hardware-acceleration)
375 -
376 - if multilib_is_native_abi; then
377 - ln -s "${S}"/doc/reference/html doc/reference/html || die
378 - fi
379 -}
380 -
381 -multilib_src_compile() {
382 - if multilib_is_native_abi; then
383 - default
384 -
385 - # symlink certtool for use in other ABIs
386 - if use test; then
387 - ln -s "${BUILD_DIR}"/src "${T}"/native-tools || die
388 - fi
389 - else
390 - emake -C gl
391 - emake -C lib
392 - emake -C extra
393 - use dane && emake -C libdane
394 - fi
395 -}
396 -
397 -multilib_src_test() {
398 - if multilib_is_native_abi; then
399 - # parallel testing often fails
400 - emake -j1 check
401 - else
402 - # use native ABI tools
403 - ln -s "${T}"/native-tools/{certtool,gnutls-{serv,cli}} \
404 - "${BUILD_DIR}"/src/ || die
405 -
406 - emake -C gl -j1 check
407 - emake -C tests -j1 check
408 - fi
409 -}
410 -
411 -multilib_src_install() {
412 - if multilib_is_native_abi; then
413 - emake DESTDIR="${D}" install
414 - else
415 - emake -C lib DESTDIR="${D}" install
416 - emake -C extra DESTDIR="${D}" install
417 - use dane && emake -C libdane DESTDIR="${D}" install
418 - fi
419 -}
420 -
421 -multilib_src_install_all() {
422 - einstalldocs
423 - prune_libtool_files --all
424 -
425 - dodoc doc/certtool.cfg
426 -
427 - if use doc; then
428 - dohtml doc/gnutls.html
429 - else
430 - rm -fr "${ED}/usr/share/doc/${PF}/html"
431 - fi
432 -
433 - if use examples; then
434 - docinto examples
435 - dodoc doc/examples/*.c
436 - fi
437 -}