%bcond_without dane

%bcond_with guile

Summary: A TLS protocol implementation

Name: gnutls

Version: 3.1.20

Release: 5%{?dist}

# The libraries are LGPLv2.1+, utilities are GPLv3+, however

# the bundled gnulib is LGPLv3+

License: GPLv3+ and LGPLv2+ and LGPLv3+

Group: System Environment/Libraries

BuildRequires: p11-kit-devel >= 0.11, gettext

BuildRequires: zlib-devel, readline-devel, libtasn1-devel >= 3.1

BuildRequires: libtool, automake, autoconf, texinfo

BuildRequires: nettle-devel >= 2.5

# Not suitable autogen is present in this release

# BuildRequires: autogen-libopts-devel >= 5.18 autogen

# Do not link against trousers in F19. The installed trousers

# package isn't sufficient.

#BuildRequires: trousers-devel >= 0.3.11.2

%if %{with dane}

BuildRequires: unbound-devel unbound-libs

%endif

%if %{with guile}

BuildRequires: guile-devel

%endif

URL: http://www.gnutls.org/

#Source0: ftp://ftp.gnutls.org/gcrypt/gnutls/%{name}-%{version}.tar.xz

#Source1: ftp://ftp.gnutls.org/gcrypt/gnutls/%{name}-%{version}.tar.xz.sig

# XXX patent tainted code removed.

Source0: %{name}-%{version}-hobbled.tar.xz

Source1: libgnutls-config

Source2: hobble-gnutls

Source3: ecc.c

Patch1: gnutls-3.1.17-rpath.patch

Patch2: gnutls-3.1.20-init-keyword.patch

Patch3: gnutls-3.1.20-supported-ecc.patch

# Use only FIPS approved ciphers in the FIPS mode

Patch7: gnutls-2.12.21-fips-algorithms.patch

Patch8: gnutls-3.1.11-nosrp.patch

# Use random port in some tests to avoid conflicts during simultaneous builds on the same machine

Patch9: gnutls-3.1.10-tests-rndport.patch

Patch10: gnutls-3.1.18-suiteb.patch

Patch11: gnutls-3.1.20-v1-fix.patch

Patch12: gnutls-3.1.18-cve-2014-0092.patch

Patch13: gnutls-3.1.18-cve-2014-3466.patch

# Wildcard bundling exception https://fedorahosted.org/fpc/ticket/174

Provides: bundled(gnulib) = 20130424

%package c++

Summary: The C++ interface to GnuTLS

Requires: %{name}%{?_isa} = %{version}-%{release}

%package devel

Summary: Development files for the %{name} package

Group: Development/Libraries

Requires: %{name}%{?_isa} = %{version}-%{release}

Requires: %{name}-c++%{?_isa} = %{version}-%{release}

%if %{with dane}

Requires: %{name}-dane%{?_isa} = %{version}-%{release}

%endif

Requires: pkgconfig

Requires(post): /sbin/install-info

Requires(preun): /sbin/install-info

%package utils

License: GPLv3+

Summary: Command line tools for TLS protocol

Group: Applications/System

Requires: %{name}%{?_isa} = %{version}-%{release}

%if %{with dane}

Requires: %{name}-dane%{?_isa} = %{version}-%{release}

%endif

%if %{with dane}

%package dane

Summary: A DANE protocol implementation for GnuTLS

Requires: %{name}%{?_isa} = %{version}-%{release}

%endif

%if %{with guile}

%package guile

Summary: Guile bindings for the GNUTLS library

Group: Development/Libraries

Requires: %{name}%{?_isa} = %{version}-%{release}

Requires: guile

%endif

%description

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS 

protocols and technologies around them. It provides a simple C language 

application programming interface (API) to access the secure communications 

protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and 

other required structures. 

%description c++

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS 

protocols and technologies around them. It provides a simple C language 

application programming interface (API) to access the secure communications 

protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and 

other required structures. 

This package contains the C++ interface for the GnuTLS library.

%description devel

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS 

protocols and technologies around them. It provides a simple C language 

application programming interface (API) to access the secure communications 

protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and 

other required structures. 

This package contains files needed for developing applications with

the GnuTLS library.

%description utils

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS 

protocols and technologies around them. It provides a simple C language 

application programming interface (API) to access the secure communications 

protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and 

other required structures. 

This package contains command line TLS client and server and certificate

manipulation tools.

%if %{with dane}

%description dane

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS 

protocols and technologies around them. It provides a simple C language 

application programming interface (API) to access the secure communications 

protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and 

other required structures. 

This package contains library that implements the DANE protocol for verifying

TLS certificates through DNSSEC.

%endif

%if %{with guile}

%description guile

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS 

protocols and technologies around them. It provides a simple C language 

application programming interface (API) to access the secure communications 

protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and 

other required structures. 

This package contains Guile bindings for the library.

%endif

%prep

%setup -q

%patch1 -p1 -b .rpath

%patch2 -p1 -b .ikeyword

%patch3 -p1 -b .supported-ecc

# This patch is not applicable as we use nettle now but some parts will be

# later reused.

#%patch7 -p1 -b .fips

%patch8 -p1 -b .nosrp

%patch9 -p1 -b .rndport

%patch10 -p1 -b .suiteb

%patch11 -p1 -b .v1-fix

%patch12 -p1 -b .cve-2014-0092

%patch13 -p1 -b .cve-2014-3466

%{SOURCE2} -e

cp -f %{SOURCE3} lib/algorithms

rm -f doc/gnutls.info*

%build

export LDFLAGS="-Wl,--no-add-needed"

%configure --with-libtasn1-prefix=%{_prefix} \

           --with-included-libcfg \

           --disable-static \

           --disable-openssl-compatibility \

           --disable-srp-authentication \

	   --without-tpm \

	   --enable-local-libopts \

%if %{with guile}

           --enable-guile \

%ifarch %{arm}

           --disable-largefile \

%endif

%else

           --disable-guile \

%endif

%if %{with dane}

	   --with-unbound-root-key-file=/var/lib/unbound/root.key \

           --enable-dane \

%else

           --disable-dane \

%endif

           --disable-rpath

# Note that the arm hack above is not quite right and the proper thing would

# be to compile guile with largefile support.

make

%install

make install DESTDIR=$RPM_BUILD_ROOT

rm -f $RPM_BUILD_ROOT%{_bindir}/srptool

rm -f $RPM_BUILD_ROOT%{_bindir}/gnutls-srpcrypt

cp -f %{SOURCE1} $RPM_BUILD_ROOT%{_bindir}/libgnutls-config

cp -f %{SOURCE1} $RPM_BUILD_ROOT%{_bindir}/libgnutls-extra-config

rm -f $RPM_BUILD_ROOT%{_mandir}/man1/srptool.1

rm -f $RPM_BUILD_ROOT%{_mandir}/man1/tpmtool.1

rm -f $RPM_BUILD_ROOT%{_mandir}/man3/*srp*

rm -f $RPM_BUILD_ROOT%{_infodir}/dir

rm -f $RPM_BUILD_ROOT%{_libdir}/*.la

rm -f $RPM_BUILD_ROOT%{_libdir}/libguile*.a

%if %{without dane}

rm -f $RPM_BUILD_ROOT%{_libdir}/pkgconfig/gnutls-dane.pc

%endif

%find_lang gnutls

%check

make check

%post -p /sbin/ldconfig

%postun -p /sbin/ldconfig

%post c++ -p /sbin/ldconfig

%postun c++ -p /sbin/ldconfig

%post devel

if [ -f %{_infodir}/gnutls.info.gz ]; then

    /sbin/install-info %{_infodir}/gnutls.info.gz %{_infodir}/dir || :

fi

%preun devel

if [ $1 = 0 -a -f %{_infodir}/gnutls.info.gz ]; then

   /sbin/install-info --delete %{_infodir}/gnutls.info.gz %{_infodir}/dir || :

fi

%if %{with dane}

%post dane -p /sbin/ldconfig

%postun dane -p /sbin/ldconfig

%endif

%if %{with guile}

%post guile -p /sbin/ldconfig

%postun guile -p /sbin/ldconfig

%endif

%files -f gnutls.lang

%defattr(-,root,root,-)

%{_libdir}/libgnutls.so.28*

%{_libdir}/libgnutls-xssl.so.0*

%doc COPYING COPYING.LESSER README AUTHORS NEWS THANKS

%files c++

%{_libdir}/libgnutlsxx.so.*

%files devel

%defattr(-,root,root,-)

%{_bindir}/libgnutls*-config

%{_includedir}/*

%{_libdir}/libgnutls*.so

%{_libdir}/pkgconfig/*.pc

%{_mandir}/man3/*

%{_infodir}/gnutls*

%{_infodir}/pkcs11-vision*

%files utils

%defattr(-,root,root,-)

%{_bindir}/certtool

%{_bindir}/ocsptool

%{_bindir}/psktool

#%{_bindir}/tpmtool

%{_bindir}/p11tool

%if %{with dane}

%{_bindir}/danetool

%endif

%{_bindir}/gnutls*

%{_mandir}/man1/*

%doc doc/certtool.cfg

%if %{with dane}

%files dane

%defattr(-,root,root,-)

%{_libdir}/libgnutls-dane.so.*

%endif

%if %{with guile}

%files guile

%defattr(-,root,root,-)

%{_libdir}/libguile*.so*

%{_datadir}/guile/site/gnutls

%{_datadir}/guile/site/gnutls.scm

%endif

%changelog

* Fri May 30 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.20-5

- fixes CVE-2014-3466 (#1103046)

* Thu Feb 27 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.20-4

- fixes CVE-2014-0092

* Fri Feb 14 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.1.20-3

- Fix CVE-2014-1959 (#1065094)

* Mon Feb 03 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.1.20-1

- new upstream release

- Fixed issue with gnutls.info not being available

- Compile with trousers

- Pulled fix from upstream for illegal supported-ecc extension (#1060411)

* Thu Jan 02 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.1.18-3

- Applied fix in suiteb patch to prevent crash in multiple 

  deinitializations (#1046672)

- new upstream release

* Thu Dec  5 2013 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.1.17-2

- Use the correct root key for unbound (#1012494)

- Pull asm fixes from upstream (#973210)

- tpmtool manpage is no longer installed (#1036363)

* Tue Nov 26 2013 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.1.17-2

- Avoid linking with trousers to prevent introducing new features in f20

* Tue Nov 26 2013 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.1.17-1

- new upstream release

- links against the system libopts

* Mon Nov  4 2013 Tomáš Mráz <tmraz@redhat.com> 3.1.16-1

- new upstream release

- fixes CVE-2013-4466 off-by-one in dane_query_tlsa()

* Fri Oct 25 2013 Tomáš Mráz <tmraz@redhat.com> 3.1.15-1

- new upstream release

- fixes CVE-2013-4466 buffer overflow in handling DANE entries

* Wed Oct 16 2013 Tomáš Mráz <tmraz@redhat.com> 3.1.13-3

- enable ECC NIST Suite B curves

* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.1.13-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

* Mon Jul 15 2013 Tomáš Mráz <tmraz@redhat.com> 3.1.13-1

- new upstream release

* Mon May 13 2013 Tomáš Mráz <tmraz@redhat.com> 3.1.11-1

- new upstream release

* Mon Mar 25 2013 Tomas Mraz <tmraz@redhat.com> 3.1.10-1

- new upstream release

- license of the library is back to LGPLv2.1+

* Fri Mar 15 2013 Tomas Mraz <tmraz@redhat.com> 3.1.9-1

- new upstream release

* Thu Mar  7 2013 Tomas Mraz <tmraz@redhat.com> 3.1.8-3

- drop the temporary old library

* Tue Feb 26 2013 Tomas Mraz <tmraz@redhat.com> 3.1.8-2

- don't send ECC algos as supported (#913797)

* Thu Feb 21 2013 Tomas Mraz <tmraz@redhat.com> 3.1.8-1

- new upstream version

* Wed Feb  6 2013 Tomas Mraz <tmraz@redhat.com> 3.1.7-1

- new upstream version, requires rebuild of dependencies

- this release temporarily includes old compatibility .so

* Tue Feb  5 2013 Tomas Mraz <tmraz@redhat.com> 2.12.22-2

- rebuilt with new libtasn1

- make guile bindings optional - breaks i686 build and there is

  no dependent package

* Tue Jan  8 2013 Tomas Mraz <tmraz@redhat.com> 2.12.22-1

- new upstream version

* Wed Nov 28 2012 Tomas Mraz <tmraz@redhat.com> 2.12.21-2

- use RSA bit sizes supported by libgcrypt in FIPS mode for security

  levels (#879643)

* Fri Nov  9 2012 Tomas Mraz <tmraz@redhat.com> 2.12.21-1

- new upstream version

* Thu Nov  1 2012 Tomas Mraz <tmraz@redhat.com> 2.12.20-4

- negotiate only FIPS approved algorithms in the FIPS mode (#871826)

* Wed Aug  8 2012 Tomas Mraz <tmraz@redhat.com> 2.12.20-3

- fix the gnutls-cli-debug manpage - patch by Peter Schiffer

* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.12.20-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

* Mon Jun 18 2012 Tomas Mraz <tmraz@redhat.com> 2.12.20-1

- new upstream version

* Fri May 18 2012 Tomas Mraz <tmraz@redhat.com> 2.12.19-1

- new upstream version

* Thu Mar 29 2012 Tomas Mraz <tmraz@redhat.com> 2.12.18-1

- new upstream version

* Thu Mar  8 2012 Tomas Mraz <tmraz@redhat.com> 2.12.17-1

- new upstream version

- fix leaks in key generation (#796302)

* Fri Feb 03 2012 Kevin Fenzi <kevin@scrye.com> - 2.12.14-3

- Disable largefile on arm arch. (#787287)

* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.12.14-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

* Tue Nov  8 2011 Tomas Mraz <tmraz@redhat.com> 2.12.14-1

- new upstream version

* Mon Oct 24 2011 Tomas Mraz <tmraz@redhat.com> 2.12.12-1

- new upstream version

* Thu Sep 29 2011 Tomas Mraz <tmraz@redhat.com> 2.12.11-1

- new upstream version

* Fri Aug 26 2011 Tomas Mraz <tmraz@redhat.com> 2.12.9-1

- new upstream version

* Tue Aug 16 2011 Tomas Mraz <tmraz@redhat.com> 2.12.8-1

- new upstream version

* Mon Jul 25 2011 Tomas Mraz <tmraz@redhat.com> 2.12.7-2

- fix problem when using new libgcrypt

- split libgnutlsxx to a subpackage (#455146)

- drop libgnutls-openssl (#460310)

* Tue Jun 21 2011 Tomas Mraz <tmraz@redhat.com> 2.12.7-1

- new upstream version

* Mon May  9 2011 Tomas Mraz <tmraz@redhat.com> 2.12.4-1

- new upstream version

* Tue Apr 26 2011 Tomas Mraz <tmraz@redhat.com> 2.12.3-1

- new upstream version

* Mon Apr 18 2011 Tomas Mraz <tmraz@redhat.com> 2.12.2-1

- new upstream version

* Thu Mar  3 2011 Tomas Mraz <tmraz@redhat.com> 2.10.5-1

- new upstream version

* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.10.4-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

* Wed Dec  8 2010 Tomas Mraz <tmraz@redhat.com> 2.10.4-1

- new upstream version

* Thu Dec  2 2010 Tomas Mraz <tmraz@redhat.com> 2.10.3-2

- fix buffer overflow in gnutls-serv (#659259)

* Fri Nov 19 2010 Tomas Mraz <tmraz@redhat.com> 2.10.3-1

- new upstream version

* Thu Sep 30 2010 Tomas Mraz <tmraz@redhat.com> 2.10.2-1

- new upstream version

* Wed Sep 29 2010 jkeating - 2.10.1-4

- Rebuilt for gcc bug 634757

* Thu Sep 23 2010 Tomas Mraz <tmraz@redhat.com> 2.10.1-3

- more patching for internal errors regression (#629858)

  patch by Vivek Dasmohapatra

* Tue Sep 21 2010 Tomas Mraz <tmraz@redhat.com> 2.10.1-2

- backported patch from upstream git hopefully fixing internal errors

  (#629858)

* Wed Aug  4 2010 Tomas Mraz <tmraz@redhat.com> 2.10.1-1

- new upstream version

* Wed Jun  2 2010 Tomas Mraz <tmraz@redhat.com> 2.8.6-2

- add support for safe renegotiation CVE-2009-3555 (#533125)

* Wed May 12 2010 Tomas Mraz <tmraz@redhat.com> 2.8.6-1

- upgrade to a new upstream version

* Mon Feb 15 2010 Rex Dieter <rdieter@fedoraproject.org> 2.8.5-4

- FTBFS gnutls-2.8.5-3.fc13: ImplicitDSOLinking (#564624)

* Thu Jan 28 2010 Tomas Mraz <tmraz@redhat.com> 2.8.5-3

- drop superfluous rpath from binaries

- do not call autoreconf during build

- specify the license on utils subpackage

* Mon Jan 18 2010 Tomas Mraz <tmraz@redhat.com> 2.8.5-2

- do not create static libraries (#556052)

* Mon Nov  2 2009 Tomas Mraz <tmraz@redhat.com> 2.8.5-1

- upgrade to a new upstream version

* Wed Sep 23 2009 Tomas Mraz <tmraz@redhat.com> 2.8.4-1

- upgrade to a new upstream version

* Fri Aug 14 2009 Tomas Mraz <tmraz@redhat.com> 2.8.3-1

- upgrade to a new upstream version

* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.8.1-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

* Wed Jun 10 2009 Tomas Mraz <tmraz@redhat.com> 2.8.1-1

- upgrade to a new upstream version

* Wed Jun  3 2009 Tomas Mraz <tmraz@redhat.com> 2.8.0-1

- upgrade to a new upstream version

* Mon May  4 2009 Tomas Mraz <tmraz@redhat.com> 2.6.6-1

- upgrade to a new upstream version - security fixes

* Tue Apr 14 2009 Tomas Mraz <tmraz@redhat.com> 2.6.5-1

- upgrade to a new upstream version, minor bugfixes only

* Fri Mar  6 2009 Tomas Mraz <tmraz@redhat.com> 2.6.4-1

- upgrade to a new upstream version

* Tue Feb 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.6.3-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

* Mon Dec 15 2008 Tomas Mraz <tmraz@redhat.com> 2.6.3-1

- upgrade to a new upstream version

* Thu Dec  4 2008 Tomas Mraz <tmraz@redhat.com> 2.6.2-1

- upgrade to a new upstream version

* Tue Nov 11 2008 Tomas Mraz <tmraz@redhat.com> 2.4.2-3

- fix chain verification issue CVE-2008-4989 (#470079)

* Thu Sep 25 2008 Tomas Mraz <tmraz@redhat.com> 2.4.2-2

- add guile subpackage (#463735)

- force new libtool through autoreconf to drop unnecessary rpaths

* Tue Sep 23 2008 Tomas Mraz <tmraz@redhat.com> 2.4.2-1

- new upstream version

* Tue Jul  1 2008 Tomas Mraz <tmraz@redhat.com> 2.4.1-1

- new upstream version

- correct the license tag

- explicit --with-included-opencdk not needed

- use external lzo library, internal not included anymore

* Tue Jun 24 2008 Tomas Mraz <tmraz@redhat.com> 2.4.0-1

- upgrade to latest upstream

* Tue May 20 2008 Tomas Mraz <tmraz@redhat.com> 2.0.4-3

- fix three security issues in gnutls handshake - GNUTLS-SA-2008-1

  (#447461, #447462, #447463)

* Mon Feb  4 2008 Joe Orton <jorton@redhat.com> 2.0.4-2

- use system libtasn1

* Tue Dec  4 2007 Tomas Mraz <tmraz@redhat.com> 2.0.4-1

- upgrade to latest upstream

* Tue Aug 21 2007 Tomas Mraz <tmraz@redhat.com> 1.6.3-2

- license tag fix

* Wed Jun  6 2007 Tomas Mraz <tmraz@redhat.com> 1.6.3-1

- upgrade to latest upstream (#232445)

* Tue Apr 10 2007 Tomas Mraz <tmraz@redhat.com> 1.4.5-2

- properly require install-info (patch by Ville Skyttä)

- standard buildroot and use dist tag

- add COPYING and README to doc

* Wed Feb  7 2007 Tomas Mraz <tmraz@redhat.com> 1.4.5-1

- new upstream version

- drop libtermcap-devel from buildrequires

* Thu Sep 14 2006 Tomas Mraz <tmraz@redhat.com> 1.4.1-2

- detect forged signatures - CVE-2006-4790 (#206411), patch

  from upstream

* Tue Jul 18 2006 Tomas Mraz <tmraz@redhat.com> - 1.4.1-1

- upgrade to new upstream version, only minor changes

* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 1.4.0-1.1

- rebuild

* Wed Jun 14 2006 Tomas Mraz <tmraz@redhat.com> - 1.4.0-1

- upgrade to new upstream version (#192070), rebuild

  of dependent packages required

* Tue May 16 2006 Tomas Mraz <tmraz@redhat.com> - 1.2.10-2

- added missing buildrequires

* Mon Feb 13 2006 Tomas Mraz <tmraz@redhat.com> - 1.2.10-1

- updated to new version (fixes CVE-2006-0645)

* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.2.9-3.2

- bump again for double-long bug on ppc(64)

* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.2.9-3.1

- rebuilt for new gcc4.1 snapshot and glibc changes

* Tue Jan  3 2006 Jesse Keating <jkeating@redhat.com> 1.2.9-3

- rebuilt

* Fri Dec  9 2005 Tomas Mraz <tmraz@redhat.com> 1.2.9-2

- replaced *-config scripts with calls to pkg-config to

  solve multilib conflicts

* Wed Nov 23 2005 Tomas Mraz <tmraz@redhat.com> 1.2.9-1

- upgrade to newest upstream

- removed .la files (#172635)

* Sun Aug  7 2005 Tomas Mraz <tmraz@redhat.com> 1.2.6-1

- upgrade to newest upstream (rebuild of dependencies necessary)

* Mon Jul  4 2005 Tomas Mraz <tmraz@redhat.com> 1.0.25-2

- split the command line tools to utils subpackage

* Sat Apr 30 2005 Tomas Mraz <tmraz@redhat.com> 1.0.25-1

- new upstream version fixes potential DOS attack

* Sat Apr 23 2005 Tomas Mraz <tmraz@redhat.com> 1.0.24-2

- readd the version script dropped by upstream

* Fri Apr 22 2005 Tomas Mraz <tmraz@redhat.com> 1.0.24-1

- update to the latest upstream version on the 1.0 branch

* Wed Mar  2 2005 Warren Togami <wtogami@redhat.com> 1.0.20-6

- gcc4 rebuild

* Tue Jan  4 2005 Ivana Varekova <varekova@redhat.com> 1.0.20-5

- add gnutls Requires zlib-devel (#144069)

* Mon Nov 08 2004 Colin Walters <walters@redhat.com> 1.0.20-4

- Make gnutls-devel Require libgcrypt-devel

* Tue Sep 21 2004 Jeff Johnson <jbj@redhat.com> 1.0.20-3

- rebuild with release++, otherwise unchanged.

* Tue Sep  7 2004 Jeff Johnson <jbj@redhat.com> 1.0.20-2

- patent tainted SRP code removed.

* Sun Sep  5 2004 Jeff Johnson <jbj@redhat.com> 1.0.20-1

- update to 1.0.20.

- add --with-included-opencdk --with-included-libtasn1

- add --with-included-libcfg --with-included-lzo

- add --disable-srp-authentication.

- do "make check" after build.

* Fri Mar 21 2003 Jeff Johnson <jbj@redhat.com> 0.9.2-1

- upgrade to 0.9.2

* Tue Jun 25 2002 Jeff Johnson <jbj@redhat.com> 0.4.4-1

- update to 0.4.4.

* Fri Jun 21 2002 Tim Powers <timp@redhat.com>

- automated rebuild

* Sat May 25 2002 Jeff Johnson <jbj@redhat.com> 0.4.3-1

- update to 0.4.3.

* Tue May 21 2002 Jeff Johnson <jbj@redhat.com> 0.4.2-1

- update to 0.4.2.

- change license to LGPL.

- include splint annotations patch.

* Tue Apr  2 2002 Nalin Dahyabhai <nalin@redhat.com> 0.4.0-1

- update to 0.4.0

* Thu Jan 17 2002 Nalin Dahyabhai <nalin@redhat.com> 0.3.2-1

- update to 0.3.2

* Thu Jan 10 2002 Nalin Dahyabhai <nalin@redhat.com> 0.3.0-1

- add a URL

* Thu Dec 20 2001 Nalin Dahyabhai <nalin@redhat.com>

- initial package