Overview
Request 295655 accepted
- updated to 3.4.0 (released 2015-04-08)
** libgnutls: Added support for AES-CCM and AES-CCM-8 (RFC6655 and RFC7251)
ciphersuites. The former are enabled by default, the latter need to be
explicitly enabled, since they reduce the overall security level.
** libgnutls: Added support for Chacha20-Poly1305 ciphersuites following
draft-mavrogiannopoulos-chacha-tls-05 and draft-irtf-cfrg-chacha20-poly1305-10.
That is currently provided as technology preview and is not enabled by
default, since there are no assigned ciphersuite points by IETF and there
is no guarrantee of compatibility between draft versions. The ciphersuite
priority string to enable it is "+CHACHA20-POLY1305".
** libgnutls: Added support for encrypt-then-authenticate in CBC
ciphersuites (RFC7366 -taking into account its errata text). This is
enabled by default and can be disabled using the %NO_ETM priority
string.
** libgnutls: Added support for the extended master secret
(triple-handshake fix) following draft-ietf-tls-session-hash-02.
** libgnutls: Added a new simple and hard to misuse AEAD API (crypto.h).
** libgnutls: SSL 3.0 is no longer included in the default priorities
list. It has to be explicitly enabled, e.g., with a string like
"NORMAL:+VERS-SSL3.0".
** libgnutls: ARCFOUR (RC4) is no longer included in the default priorities
list. It has to be explicitly enabled, e.g., with a string like
"NORMAL:+ARCFOUR-128".
** libgnutls: DSA signatures and DHE-DSS are no longer included in the
default priorities list. They have to be explicitly enabled, e.g., with
a string like "NORMAL:+DHE-DSS:+SIGN-DSA-SHA256:+SIGN-DSA-SHA1". The
DSA ciphersuites were dropped because they had no deployment at all
on the internet, to justify their inclusion.
** libgnutls: The priority string EXPORT was completely removed. The string
Request History
msmeissn created request
- updated to 3.4.0 (released 2015-04-08)
** libgnutls: Added support for AES-CCM and AES-CCM-8 (RFC6655 and RFC7251)
ciphersuites. The former are enabled by default, the latter need to be
explicitly enabled, since they reduce the overall security level.
** libgnutls: Added support for Chacha20-Poly1305 ciphersuites following
draft-mavrogiannopoulos-chacha-tls-05 and draft-irtf-cfrg-chacha20-poly1305-10.
That is currently provided as technology preview and is not enabled by
default, since there are no assigned ciphersuite points by IETF and there
is no guarrantee of compatibility between draft versions. The ciphersuite
priority string to enable it is "+CHACHA20-POLY1305".
** libgnutls: Added support for encrypt-then-authenticate in CBC
ciphersuites (RFC7366 -taking into account its errata text). This is
enabled by default and can be disabled using the %NO_ETM priority
string.
** libgnutls: Added support for the extended master secret
(triple-handshake fix) following draft-ietf-tls-session-hash-02.
** libgnutls: Added a new simple and hard to misuse AEAD API (crypto.h).
** libgnutls: SSL 3.0 is no longer included in the default priorities
list. It has to be explicitly enabled, e.g., with a string like
"NORMAL:+VERS-SSL3.0".
** libgnutls: ARCFOUR (RC4) is no longer included in the default priorities
list. It has to be explicitly enabled, e.g., with a string like
"NORMAL:+ARCFOUR-128".
** libgnutls: DSA signatures and DHE-DSS are no longer included in the
default priorities list. They have to be explicitly enabled, e.g., with
a string like "NORMAL:+DHE-DSS:+SIGN-DSA-SHA256:+SIGN-DSA-SHA1". The
DSA ciphersuites were dropped because they had no deployment at all
on the internet, to justify their inclusion.
** libgnutls: The priority string EXPORT was completely removed. The string
factory-auto added opensuse-review-team as a reviewer
Please review sources
factory-auto added factory-repo-checker as a reviewer
Please review build success
factory-auto accepted review
Check script succeeded
licensedigger accepted review
mlin7442 set openSUSE:Factory:Staging:F as a staging project
Being evaluated by staging project "openSUSE:Factory:Staging:F"
mlin7442 accepted review
Picked openSUSE:Factory:Staging:F
factory-repo-checker reopened review
gnutls is still building for repository openSUSE_Factory
tittiatcoke accepted review
factory-repo-checker reopened review
can't install vlc-2.2.0-142.1.x86_64:
package vlc-2.2.0-142.1.x86_64 requires vlc-noX = 2.2.0-142.1, but none of the providers can be installed
package vlc-2.2.0-142.1.x86_64 requires vlc-noX, but none of the providers can be installed
nothing provides libgnutls.so.28()(64bit) needed by vlc-noX-2.2.0-142.1.x86_64
nothing provides libgnutls.so.28(GNUTLS_1_4)(64bit) needed by vlc-noX-2.2.0-142.1.x86_64
nothing provides libgnutls.so.28(GNUTLS_3_0_0)(64bit) needed by vlc-noX-2.2.0-142.1.x86_64
factory-repo-checker reopened review
can't install vlc-2.2.0-143.1.x86_64:
package vlc-2.2.0-143.1.x86_64 requires libgtk-x11-2.0.so.0()(64bit), but none of the providers can be installed
package libgtk-2_0-0-2.24.27-1.1.x86_64 requires libcups.so.2()(64bit), but none of the providers can be installed
nothing provides libgnutls.so.28()(64bit) needed by cups-libs-2.0.2-2.1.x86_64
nothing provides libgnutls.so.28(GNUTLS_1_4)(64bit) needed by cups-libs-2.0.2-2.1.x86_64
nothing provides libgnutls.so.28(GNUTLS_3_0_0)(64bit) needed by cups-libs-2.0.2-2.1.x86_64
factory-repo-checker reopened review
can't install vlc-2.2.1-144.1.x86_64:
package vlc-2.2.1-144.1.x86_64 requires libgtk-x11-2.0.so.0()(64bit), but none of the providers can be installed
package libgtk-2_0-0-2.24.27-1.1.x86_64 requires libcups.so.2()(64bit), but none of the providers can be installed
nothing provides libgnutls.so.28()(64bit) needed by cups-libs-2.0.2-2.1.x86_64
nothing provides libgnutls.so.28(GNUTLS_1_4)(64bit) needed by cups-libs-2.0.2-2.1.x86_64
nothing provides libgnutls.so.28(GNUTLS_3_0_0)(64bit) needed by cups-libs-2.0.2-2.1.x86_64
factory-repo-checker reopened review
Execution plan: devel:libraries:c_c++/openSUSE_Factory
can't install libmicrohttpd-devel-0.9.40-32.1.x86_64:
package libmicrohttpd-devel-0.9.40-32.1.x86_64 requires libmicrohttpd10 = 0.9.40, but none of the providers can be installed
nothing provides libgnutls.so.28()(64bit) needed by libmicrohttpd10-0.9.40-32.1.x86_64
nothing provides libgnutls.so.28(GNUTLS_1_4)(64bit) needed by libmicrohttpd10-0.9.40-32.1.x86_64
nothing provides libgnutls.so.28(GNUTLS_3_0_0)(64bit) needed by libmicrohttpd10-0.9.40-32.1.x86_64
nothing provides libgnutls.so.28(GNUTLS_3_1_0)(64bit) needed by libmicrohttpd10-0.9.40-32.1.x86_64
Execution plan: Base:System/openSUSE_Factory
can't install libmicrohttpd-devel-0.9.40-32.1.x86_64:
package libmicrohttpd-devel-0.9.40-32.1.x86_64 requires libmicrohttpd10 = 0.9.40, but none of the providers can be installed
nothing provides libgnutls.so.28()(64bit) needed by libmicrohttpd10-0.9.40-32.1.x86_64
nothing provides libgnutls.so.28(GNUTLS_1_4)(64bit) needed by libmicrohttpd10-0.9.40-32.1.x86_64
nothing provides libgnutls.so.28(GNUTLS_3_0_0)(64bit) needed by libmicrohttpd10-0.9.40-32.1.x86_64
nothing provides libgnutls.so.28(GNUTLS_3_1_0)(64bit) needed by libmicrohttpd10-0.9.40-32.1.x86_64
Execution plan: devel:libraries:c_c++/pure_factory
can't install libmicrohttpd-devel-0.9.40-32.1.x86_64:
package libmicrohttpd-devel-0.9.40-32.1.x86_64 requires libmicrohttpd10 = 0.9.40, but none of the providers can be installed
nothing provides libgnutls.so.28()(64bit) needed by libmicrohttpd10-0.9.40-32.1.x86_64
nothing provides libgnutls.so.28(GNUTLS_1_4)(64bit) needed by libmicrohttpd10-0.9.40-32.1.x86_64
nothing provides libgnutls.so.28(GNUTLS_3_0_0)(64bit) needed by libmicrohttpd10-0.9.40-32.1.x86_64
nothing provides libgnutls.so.28(GNUTLS_3_1_0)(64bit) needed by libmicrohttpd10-0.9.40-32.1.x86_64
factory-repo-checker accepted review
Builds for repo openSUSE:Factory:Staging:F/standard
dimstar_suse accepted review
ready to accept
dimstar_suse approved review
ready to accept
dimstar_suse accepted request
Accept to openSUSE:Factory
