Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sun Sep 29 12:24:02 2019 +0200

    bumped versions
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sat Sep 28 21:25:25 2019 +0200

    .gitlab-ci.yml: run pic-check on i686-linux-gnu to catch wrong assembly
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Andreas Metzler <ametzler@debian.org>
Date:   Sat Sep 28 14:28:12 2019 +0200

    Regenerate asm files with -fPIC
    
    CRYPTOGAMS' perl-scripts can produce different output if -fPIC is passed
    as option. Set -fPIC for the same files as openssl does.
    
    Closes #818
    
    Signed-off-by: Andreas Metzler <ametzler@bebt.de>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sat Sep 28 12:42:12 2019 +0200

    certtool: ensure that PKCS#8 file does not contain key description
    
    Resolves: #840
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
Date:   Sat Sep 28 21:23:17 2019 +0300

    NEWS: document previous changes [ci skip]
    
    Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Author: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
Date:   Fri Aug 2 13:55:18 2019 +0300

    tests: add verbose logging to server-kx-neg tests
    
    Add support for verbose logging to tls*-server-kx-neg tests.
    
    Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Author: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
Date:   Fri Sep 27 17:00:29 2019 +0300

    x509: add support for Russian extensions defined for qualified certificate
    
    Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Author: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
Date:   Sun Sep 1 11:05:35 2019 +0300

    crypto-selftests: add CNT and IMIT self tests
    
    Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Author: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
Date:   Thu Jun 14 15:37:20 2018 +0300

    nettle: provide GOST 28147-89 IMIT MAC support
    
    Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Author: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
Date:   Thu Jun 14 15:36:55 2018 +0300

    nettle: provide GOST 28147-89 CNT mode support
    
    Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Author: Daiki Ueno <ueno@gnu.org>
Date:   Thu Sep 26 16:45:25 2019 +0200

    ext/supported_versions: reorder client precedence if necessary
    
    If the client advertises TLS < 1.2 before TLS 1.3 and the server is
    configured with TLS 1.3 enabled, the server should select TLS 1.3;
    otherwise the client will disconnect when seeing downgrade sentinel.
    
    Signed-off-by: Daiki Ueno <dueno@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Wed Sep 25 06:23:22 2019 +0200

    gnutls_session_get_data2: fix operation without a timeout callback
    
    When TLS1.3 was introduced, gnutls_session_get_data2 was modified
    to assume that the callbacks set included the timeout one which was
    not previously necessary except for some special cases. This corrects
    that issue and makes sure that gnutls_session_get_data2() does not
    fail (but not necessarily succeed), if that timeout callback is not
    set.
    
    Resolves: #823
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Wed Sep 25 06:18:48 2019 +0200

    _gnutls_io_check_recv: added newline to error message
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Mon Sep 23 21:42:14 2019 +0200

    tests: cipher-alignment: ensure cipher registration
    
    That is, ensure that the registered cipher is called at least
    once in the program. That is, to make this test fail if the registration
    API ever become deprecated/no-op.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Mon Sep 23 21:11:53 2019 +0200

    tests: mini-alignment moved to modern nettle API
    
    That is, it no longer uses the deprecated API, and it is also
    removed to cipher-alignment for clarity.
    
    Resolves: #835
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Mon Sep 23 21:05:48 2019 +0200

    nettle: use nettle_get_secpp* consistently
    
    We already depend on nettle 3.4.1 which provides that symbol,
    ensure that we use it consistently.
    
    Relates: #835
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Fri Sep 20 22:09:39 2019 +0200

    Updates in OCSP status response related documentation
    
    gnutls_certificate_set_ocsp_status_request_file2: corrected documentation
    
    This corrects the documented return code in gnutls_certificate_set_ocsp_status_request_file2
    and the applicability of gnutls_ocsp_status_request_is_checked.
    
    Resolves: #836
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Fri Sep 20 21:04:09 2019 +0200

    tests: added server side OCSP check
    
    This checks whether gnutls_ocsp_status_request_is_checked() is functional
    on server-side verification.
    
    Relates: #829
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Fri Sep 20 20:57:51 2019 +0200

    tests: added server-side verification test
    
    This tests gnutls_certificate_verify_peers2() operation in server
    side.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Thu Sep 19 21:26:25 2019 +0200

    gnutls_ocsp_status_request_is_checked: added tests in client side
    
    This ensures that this function has functional tests.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Mon Sep 16 15:03:41 2019 +0200

    pkcs11-mock: updated license based on upstream project [ci skip]
    
    Based on the relicense of the original project:
    https://github.com/Pkcs11Interop/pkcs11-mock
    
    Applied in commit: 8751256956e414c1b0a30414831f5083afbf64bf
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Ludovic Courtès <ludo@gnu.org>
Date:   Sat Jun 1 16:54:47 2019 +0200

    guile: Add support for Guile 3.0.
    
    * configure.ac: Add 3.0 to 'GUILE_PKG', as well as the
    previously-supported versions.
    * doc/gnutls-guile.texi (Guile Preparations): Update list of supported
    versions.
    
    Signed-off-by: Ludovic Courtès <ludo@gnu.org>

Author: Ludovic Courtès <ludo@gnu.org>
Date:   Sat Jun 1 16:52:34 2019 +0200

    doc: Run guile with '-q'.
    
    This makes sure we don't load the user's ~/.guile.
    
    * doc/Makefile.am (GUILE_FOR_BUILD): Pass '-q'.
    
    Signed-off-by: Ludovic Courtès <ludo@gnu.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Thu Sep 12 15:21:55 2019 +0200

    tlsfuzzer: enable atypical padding check
    
    The atypical padding check is complementary to the existing
    GnuTLS 2.12.x interop test.
    
    This commit also upgrades to the latest version, and adds new TLS1.3
    tests as well.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Daiki Ueno <ueno@gnu.org>
Date:   Thu Aug 8 18:04:18 2019 +0200

    lib/*: remove unnecessary cast to ssize_t
    
    Signed-off-by: Daiki Ueno <dueno@redhat.com>

Author: Daiki Ueno <ueno@gnu.org>
Date:   Thu Aug 8 18:02:08 2019 +0200

    gnutls_int.h: make DECR_LEN neutral to signedness
    
    DECR_LEN was previously implemented in a way that it first decrements
    the given length and then checks whether the result is negative.  This
    requires the caller to properly coerce the length argument to a signed
    integer, before invoking the macro.
    
    Signed-off-by: Daiki Ueno <dueno@redhat.com>

Author: Daiki Ueno <ueno@gnu.org>
Date:   Wed Sep 11 11:24:17 2019 +0200

    .gitlab-ci.yml: bump configure cache version
    
    Signed-off-by: Daiki Ueno <dueno@redhat.com>

Author: Daiki Ueno <ueno@gnu.org>
Date:   Tue Sep 10 13:50:45 2019 +0200

    .gitlab-ci.yml: export guile related envvars for doc-dist.Fedora
    
    Signed-off-by: Daiki Ueno <dueno@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Fri Sep 6 08:36:04 2019 +0200

    tests: check interoperability testing with gnutls 2.12.x and SHA256
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sat Aug 3 21:51:58 2019 +0200

    _gnutls_epoch_set_keys: do not forbid random padding in TLS1.x CBC ciphersuites
    
    Since some point in 3.6.x we updated the calculation of maximum record size,
    however that did not include the possibility of random record padding available
    for CBC ciphersuites which exceeds the maximum. This commit allows for larger
    sizes for these ciphersuites to account for random padding as applied by
    gnutls 2.12.x.
    
    Resolves: #811
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Ludovic Courtès <ludo@gnu.org>
Date:   Sat Jul 20 16:13:02 2019 +0200

    .gitlab-ci.yml: minimal.Fedora.x86_64: Pass '--disable-guile' the 2nd time as well.
    
    Signed-off-by: Ludovic Courtès <ludo@gnu.org>

Author: Ludovic Courtès <ludo@gnu.org>
Date:   Sat Jul 20 16:08:48 2019 +0200

    .gitlab-ci.yml: doc-dist.Fedora: Pass "GUILE", "GUILD", and "guile_snarf" to 'configure'.
    
    Signed-off-by: Ludovic Courtès <ludo@gnu.org>

Author: Ludovic Courtès <ludo@gnu.org>
Date:   Sat Aug 31 16:38:13 2019 +0200

    maint: Include Guile's M4 macros.
    
    This ensures 'GUILE_PKG' & co. behaves as we want.  Previously we had
    problem in CI when using 'guile.m4' coming from potentially old distro
    packages, as discussed in issue !1020:
    
      https://gitlab.com/gnutls/gnutls/merge_requests/1020#note_194443890
    
    * m4/guile.m4: New file, from Guile's 'stable-2.2' branch,
    commit 9846178c69445142ef0b9432417453d2d4de6635.
    * .x-sc_prohibit_test_minus_ao: New file.
    
    Signed-off-by: Ludovic Courtès <ludo@gnu.org>

Author: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
Date:   Thu Sep 5 11:36:27 2019 +0300

    priority: fix loop which removes systemwide disabled KX algos
    
    Fix c&p error in KX-removal loop.
    
    Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Author: Tom Vrancken <dev@tomvrancken.nl>
Date:   Sun Sep 1 13:50:35 2019 +0200

    Added initial corpora for rawpk client and server fuzzers.
    
    Signed-off-by: Tom Vrancken <dev@tomvrancken.nl>

Author: Tom Vrancken <dev@tomvrancken.nl>
Date:   Sun Sep 1 13:49:59 2019 +0200

    Implemented server rawpk fuzzer.
    
    Signed-off-by: Tom Vrancken <dev@tomvrancken.nl>

Author: Tom Vrancken <dev@tomvrancken.nl>
Date:   Sun Sep 1 13:49:40 2019 +0200

    Implemented client rawpk fuzzer.
    
    Signed-off-by: Tom Vrancken <dev@tomvrancken.nl>

Author: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
Date:   Mon Sep 2 16:34:08 2019 +0300

    gnutls-cli-debug: fix early break for no version supported check
    
    Currently gnutls-cli-debug code hardodes index of tests, after which it
    will check if any known protocols (SSL 3.0/TLS1.[0123]) are supported by
    the server. However this number is hardcoded and thus easy to break.
    This is exactly what happened after adding %ALLOW_SMALL_RECORDS check.
    Two tests were added in front of tests lists without updating this
    index.
    
    So let's make this check robust by adding another test which will return
    fatal error if no known protocols are supported. While we are at it,
    also simplify tests loop by removing internal loop completely and
    controlling opening/closing a socket with a flag.
    
    Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sat Aug 3 21:32:47 2019 +0200

    tests: added interoperability test with gnutls 2.12.x
    
    This enables this test in debian build.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Ludovic Courtès <ludo@gnu.org>
Date:   Sat Aug 31 16:33:33 2019 +0200

    guile: Update the list of certificate status values.
    
    * guile/modules/gnutls/build/enums.scm (%certificate-status-enum): Add
    'gnutls_certificate_status_t' values that were missing.
    * guile/src/core.c (scm_gnutls_peer_certificate_status): Add
    'MATCH_STATUS' clauses to handle them.
    * guile/modules/gnutls.in: Export them.
    
    Signed-off-by: Ludovic Courtès <ludo@gnu.org>

Author: Michael Catanzaro <mcatanzaro@gnome.org>
Date:   Tue Aug 13 14:55:19 2019 -0500

    Fix typo in gnutls_db_set_cache_expiration() docs
    
    21600 seconds is six hours.
    
    Signed-off-by: Michael Catanzaro <mcatanzaro@gnome.org>

Author: Daiki Ueno <ueno@gnu.org>
Date:   Fri Aug 2 07:40:44 2019 +0200

    crypto-api: add gnutls_aead_cipher_{en,de}cryptv2
    
    This adds an in-place equivalent of gnutls_aead_cipher_encrypt() and
    gnutls_aead_cipher_decrypt(), that works on data buffers.
    
    Signed-off-by: Daiki Ueno <dueno@redhat.com>

Author: Daiki Ueno <ueno@gnu.org>
Date:   Thu Aug 1 18:13:38 2019 +0200

    crypto-api: use giovec_t iterator interface for aead_encryptv
    
    This replaces the macros AUTH_UPDATE and ENCRYPT used in
    gnutls_aead_cipher_encryptv() with the iov_iter interface.
    
    Signed-off-by: Daiki Ueno <dueno@redhat.com>

Author: Daiki Ueno <ueno@gnu.org>
Date:   Thu Aug 1 17:41:45 2019 +0200

    iov: add iterator interface for giovec_t
    
    This adds an iterator interface over giovec_t array, extracting a
    fixed sized block.
    
    Signed-off-by: Daiki Ueno <dueno@redhat.com>

Author: Daiki Ueno <ueno@gnu.org>
Date:   Wed Aug 7 15:55:44 2019 +0200

    nettle: prohibit deterministic ECDSA/DSA under FIPS except selftests
    
    Signed-off-by: Daiki Ueno <dueno@redhat.com>

Author: Daiki Ueno <ueno@gnu.org>
Date:   Mon Aug 5 15:21:55 2019 +0200

    nettle: enable deterministic ECDSA/DSA during FIPS selftests
    
    Signed-off-by: Daiki Ueno <dueno@redhat.com>

Author: Daiki Ueno <ueno@gnu.org>
Date:   Mon Jul 29 14:01:11 2019 +0200

    pk: implement deterministic ECDSA/DSA
    
    This exposes the deterministic ECDSA/DSA functionality through the
    GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag.
    
    Signed-off-by: Daiki Ueno <dueno@redhat.com>

Author: Daiki Ueno <ueno@gnu.org>
Date:   Wed Aug 7 14:37:00 2019 +0200

    privkey_sign_prehashed: remove unused argument
    
    Signed-off-by: Daiki Ueno <dueno@redhat.com>

Author: Daiki Ueno <ueno@gnu.org>
Date:   Mon Jul 29 15:10:51 2019 +0200

    privkey_sign_raw_data: remove unnecessary local variable
    
    Signed-off-by: Daiki Ueno <dueno@redhat.com>

Author: Daiki Ueno <ueno@gnu.org>
Date:   Mon Jul 29 14:00:30 2019 +0200

    nettle: add functions for deterministic ECDSA/DSA
    
    This adds functions to perform deterministic ECDSA/DSA, namely
    _gnutls_{ecdsa,dsa}_compute_k(), which computes the k value according
    to RFC 6979.  The retrieved k value can be given to
    nettle_{ecdsa,dsa}_sign() through a wrapper random function.
    
    Signed-off-by: Daiki Ueno <dueno@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Fri Aug 2 21:57:40 2019 +0200

    read_cpuid_vals: use __get_cpuid_count() only when available
    
    This makes the functionality available on gcc 4.8.
    
    Resolves: #812
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Fri Aug 2 22:16:31 2019 +0200

    src/Makefile.am: fix detection of .bak files
    
    This fixes detection in a way to work in builds outside the
    source directory.
    
    Resolves: #810
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Fri Aug 2 21:25:39 2019 +0200

    configure: AS_HELP_STRING cannot print variables; don't try
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Karsten Ohme <k_o_@users.sourceforge.net>
Date:   Tue Jun 18 12:17:14 2019 +0000

    Notes about Ubuntu specific software versions not available.
    
    Signed-off-by: Karsten Ohme <k_o_@users.sourceforge.net>

Author: Andreas Metzler <ametzler@debian.org>
Date:   Mon Jul 29 17:47:42 2019 +0200

    Ship inih/LICENSE.txt in release tarball
    
    inih's license terms requires shipping a copy of the license when
    redistributing the source.
    
    Signed-off-by: Andreas Metzler <ametzler@bebt.de>

Author: Michael Catanzaro <mcatanzaro@igalia.com>
Date:   Fri Jul 26 11:18:07 2019 -0500

    Improve documentation of gnutls_record_send()
    
    It's no longer required to retry this function with the same parameters
    if you want to use gnutls_record_discard_queued().
    
    Fixes #806
    
    Signed-off-by: Michael Catanzaro <mcatanzaro@igalia.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Fri Jul 26 09:57:29 2019 +0200

    certtool: default to yes on signing certificates for CAs
    
    When asking the questions for CA certificate generation, default
    to yes to signing certificates. This is because that's the most
    common type of CAs generated and defaulting to yes eliminates
    the need for restart on error.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Thu Jul 25 20:38:14 2019 +0200

    bumped version for 3.6.9
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Mon Jul 22 12:43:50 2019 +0200

    gnutls.h: mark AEAD ciphers as such in gnutls_cipher_algorithm_t description
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Mon Jul 22 10:00:51 2019 +0200

    abi-check: correctly bail-out on errors
    
    Added suppressions for _MAX enumerator values.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Karsten Ohme <k_o_@users.sourceforge.net>
Date:   Sat Jun 22 00:39:56 2019 +0200

    Support for Generalname registeredID from RFC 5280 in subject alt name
    
    Added test certificates (cert10.der) with registered ID
    
    Updated Makefile for inclusion of test certificates
    
    Updated SAN unknown test certificates (cert5.der)
    
    Signed-off-by: Karsten Ohme <k_o_@users.sourceforge.net>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sun Jul 21 10:18:35 2019 +0200

    libgnutls.abignore: added comment linking to syntax
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sun Jul 21 10:06:22 2019 +0200

    NEWS: updated for upcoming release [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Tim Rühsen <tim.ruehsen@gmx.de>
Date:   Tue Jul 16 14:41:50 2019 +0200

    Fix documented params for gnutls_certificate_retrieve_function3()
    
    Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sun Jul 14 22:27:50 2019 +0200

    Fixed alerts returned on TLS1.3 corner cases
    
    This enables the tls-fuzzer tests 'test-tls13-certificate-verify.py'.
    
    Resolves: #682
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
Date:   Sun Jul 14 12:17:18 2019 +0300

    nettle/backport: fix xts-backport guarding check
    
    Check for nettle_xts_encrypt_message() function rather than just
    xts_encrypt_message(). All functions in nettle are renamed to contain
    `nettle_` prefix.
    
    Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Author: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
Date:   Thu Jul 11 21:37:08 2019 +0300

    nettle/gost: support building with GOST-enabled Nettle
    
    Nettle library starts to gain support for GOST algorithms. Support
    building GnuTLS with GOST-enabled nettle library.
    
    Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Author: Daiki Ueno <ueno@gnu.org>
Date:   Sun Jun 30 08:23:41 2019 +0200

    tests: remove unused destructive/p11-kit-load.sh
    
    This file is replaced with tests/p11-kit-load.sh and
    tests/pkcs11/list-tokens.c.
    
    Signed-off-by: Daiki Ueno <dueno@redhat.com>

Author: Daiki Ueno <ueno@gnu.org>
Date:   Wed Jun 19 17:21:16 2019 +0200

    pkcs11: ignore login error when traversing tokens
    
    If a token is a general access device, it is expected that login
    attempt to that token returns error:
    https://github.com/p11-glue/p11-kit/blob/master/trust/module.c#L852
    
    On the other hand, _pkcs11_traverse_tokens treats the error as fatal
    and stops iteration.  This behavior prevents object search without
    token specifier if such tokens are registered in the system.
    
    Reported by Stanislav Zidek in
    https://bugzilla.redhat.com/show_bug.cgi?id=1705478
    
    Signed-off-by: Daiki Ueno <dueno@redhat.com>

Author: Daiki Ueno <ueno@gnu.org>
Date:   Mon Jul 8 16:54:56 2019 +0200

    ext/session_ticket: avoid calling memcpy on overlapping memory areas
    
    In _gnutls_encrypt_session_ticket, ticket.encrypted_state is allocated
    from ticket_data->data, thus those memory areas may overlap.  Using
    memcpy here leads to undefined behavior.
    
    Spotted by valgrind run on ppc64le.
    
    ==95231== Source and destination overlap in memcpy(0x47ce3a2, 0x47ce3a2, 160)
    ==95231==    at 0x408A840: memcpy (vg_replace_strmem.c:1023)
    ==95231==    by 0x424EE9F: pack_ticket (session_ticket.c:139)
    ==95231==    by 0x424FA4F: _gnutls_encrypt_session_ticket (session_ticket.c:335)
    ==95231==    by 0x4199E3B: generate_session_ticket (session_ticket.c:249)
    ==95231==    by 0x419A333: _gnutls13_send_session_ticket (session_ticket.c:307)
    ==95231==    by 0x40F8817: _gnutls13_handshake_server (handshake-tls13.c:511)
    ==95231==    by 0x4110DEB: handshake_server (handshake.c:3331)
    ==95231==    by 0x410C70B: gnutls_handshake (handshake.c:2727)
    ==95231==    by 0x10009EBF: retry_handshake (serv.c:1306)
    ==95231==    by 0x1000AB67: tcp_server (serv.c:1500)
    ==95231==    by 0x10009E5B: main (serv.c:1297)
    ==95231==
    
    Signed-off-by: Daiki Ueno <dueno@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Tue Jul 9 10:06:47 2019 +0200

    lib: mark infinite loops explicitly
    
    There were few infinite loop constructions which were checking
    for an always true condition. Make sure that this construction
    is marked explicitly as while(1) to assist static analysers, or
    reviewers.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Tue Jul 9 09:56:24 2019 +0200

    tests: improve coverage of CRQ related functions
    
    That adds sanity check of crq-related functions that were not included
    in the testsuite at all.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Mon Jul 8 19:33:50 2019 +0200

    encode_ber_digest_info: added sanity check
    
    Issue found using oss-fuzz:
     https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15665
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Wed Jul 3 21:04:23 2019 +0200

    doc update [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Thu Jun 13 09:13:22 2019 +0200

    testcompat-openssl: added interop test with DTLS 1.2
    
    This tests AES-CBC ciphersuites in isolation, as they are
    prioritized lower than AES-GCM. We want to test them explicitly
    because they have different behavior under EtM.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Fri Jun 7 23:22:52 2019 +0200

    tests: added sanity check for rfc7633 behavior
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Fri Jun 7 16:51:30 2019 +0200

    tests: status-request-missing: renamed to rfc7633-missing
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Fri Jun 7 16:39:53 2019 +0200

    status-request-ext: run under all TLS versions
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Fri Jun 7 16:35:11 2019 +0200

    tests: status-request: cleanup
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Fri Jun 7 16:34:21 2019 +0200

    tests: status-request-missing: run for all TLS versions
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sat Jun 29 21:02:11 2019 +0200

    gnutls-cli-debug: test whether RSA key exchange is supported
    
    Resolves: #449
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Fri Jun 28 21:08:32 2019 +0200

    gnutls_session_get_desc: avoid printing a NULL value
    
    When gnutls_session_set_premaster() is used (under openconnect),
    it is possible that gnutls_session_get_desc will print a string like
    this: "(DTLS1.2)-(ECDHE-(null))-(AES-256-GCM)"
    
    With this change we ensure that we do not print null values.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Daiki Ueno <ueno@gnu.org>
Date:   Fri Jun 21 15:49:26 2019 +0200

    nettle/rnd-fips: add FIPS 140-2 continuous RNG test
    
    This adds a continuous random number generator test as defined in FIPS
    140-2 4.9.2, by iteratively fetching fixed sized block from the system
    and comparing consecutive blocks.
    
    Signed-off-by: Daiki Ueno <dueno@redhat.com>

Author: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
Date:   Fri Jun 28 16:54:30 2019 +0300

    lib: document gnutls_hmac_fast vs nonce relationship
    
    Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Author: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
Date:   Fri Jun 28 00:27:01 2019 +0300

    tests/gnutls_hmac_fast: run test for AES-UMAC-96/-128
    
    Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Author: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
Date:   Tue Jun 25 00:12:29 2019 +0300

    nettle: return true for gnutls_mac_exists(AES-CMAC*)
    
    Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Author: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
Date:   Fri Jun 28 16:28:58 2019 +0300

    NEWS: add an entry for AES-GMAC algorithms
    
    Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Author: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
Date:   Fri Jun 28 00:27:01 2019 +0300

    tests/gnutls_hmac_fast: run test for AES-GMAC-128/-192/-256
    
    Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Author: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
Date:   Fri Jun 28 16:19:15 2019 +0300

    nettle/mac: fail mac calculation if nonce is required but not provided
    
    Fail _wrap_nettle_mac_set_nonce() and _wrap_nettle_mac_fast() if MAC
    requires nonce, but it was not supplied.
    
    Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Author: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
Date:   Fri Jun 28 00:27:04 2019 +0300

    nettle/mac: in mac_fast call set_nonce after set_key
    
    Calling set_nonce before set_key is plain incorrect. For GMAC key is not
    initialized. For UMAC set_key will reset nonce to empty.
    
    Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Author: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
Date:   Mon Jun 24 20:29:31 2019 +0300

    lib: add support for AES-GMAC
    
    Add support for computing AES-GMAC using MAC API, as requested by Samba
    for SMB3 support.
    
    Resolves: #781
    
    Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Fri Jun 28 14:59:19 2019 +0200

    tests: gnutls_x509_crt_list_import: verify that return code is as documented
    
    That checks whether the return code of gnutls_x509_crt_list_import()
    contains the number of loaded certificates.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Fri Jun 28 08:20:31 2019 +0200

    gnutls_x509_crt_list_import2: updated doc to reflect the actual return value options
    
    Resolves: #794
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Mon Apr 29 15:28:28 2019 +0200

    Align _gnutls_x86_cpuid_s as OPENSSL_ia32cap_P would be
    
    We were not setting the third array member correctly, though
    this didn't have any impact to previous implementations as they
    did not rely on it. This also moves away from the custom implementation
    of cpuid (which was limited), and we now rely on the compiler's
    version.
    
    This effectively enables support for SHA_NI.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Fri Apr 26 14:43:19 2019 +0200

    Updated asm files to latest version under cryptogams license
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
Date:   Wed Jun 26 14:24:42 2019 +0300

    NEWS: document gnutls_hash/hmac_copy addition
    
    Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Wed Jun 26 11:27:27 2019 +0200

    gnutls_hash/hmac_copy: check its usability in all cases
    
    During the test suite run we require that all supported
    MAC and hash algorithms implement the copy function.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Wed Jun 26 11:20:25 2019 +0200

    accelerated ciphers: implement hmac and hash copy
    
    This implements the new API to all internal implementations.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
Date:   Wed Jun 26 11:00:39 2019 +0300

    lib: add support for gnutls_hash_copy()
    
    Add gnutls_hash_copy() function for copying message digest context.
    
    Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Author: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
Date:   Mon Jun 24 17:42:10 2019 +0300

    crypto-selftests: add test for gnutls_hmac_copy()
    
    Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Author: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
Date:   Mon Jun 24 17:38:56 2019 +0300

    api: add gnutls_hmac_copy() function
    
    Add gnutls_hmac_copy() API to duplicate MAC handler state, which is
    necessary for SMB3 support.
    
    Resolves: #787
    
    Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Author: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
Date:   Wed Nov 30 01:34:14 2016 +0300

    Add MAC copying support to nettle backend
    
    Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Author: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
Date:   Wed Nov 30 01:32:30 2016 +0300

    Add MAC api to support copying of instances
    
    GOST ciphersuites requires continuously computing MAC of all the
    previously sent or received data. The easies way to support that is to
    add support for copy function, that creates MAC instance with the same
    internal state.
    
    Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
