<div dir="ltr"><div><font size="2">Hello,</font></div><div><font size="2"><br></font></div><div><font size="2">We have just released gnutls-3.7.4. This is a bug fix and enhancement release on the 3.7.x branch.</font></div><div><font size="2"><br></font></div><div><font size="2">We would like to thank everyone who contributed in this release:</font></div><div><font size="2">Alexander
Sosedkin, Andreas Metzler, Craig, Daiki Ueno, Dimitris Apostolou,
ePirat, František Krenželok, Jan Palus, Seppo Yli-Olli, Tobias
Heider and Zoltan Fridrich.</font></div><div><font size="2"><br></font></div><div><font size="2">The detailed list of changes follows:<span style="font-family:arial,sans-serif"><span id="gmail-m_6890929345026607073m_-4122756204696642219gmail-LC8" lang=""><br></span></span></font></div><div><font size="2"><span style="font-family:arial,sans-serif"><span id="gmail-m_6890929345026607073m_-4122756204696642219gmail-LC8" lang=""><br></span></span></font></div><div><font size="2"><span style="font-family:arial,sans-serif"><span id="gmail-m_6890929345026607073m_-4122756204696642219gmail-LC8" lang="">* Version 3.7.4 (released 2022-03-17)</span></span><span style="font-family:arial,sans-serif"><span id="gmail-m_6890929345026607073m_-4122756204696642219gmail-LC10" lang=""><br></span></span></font></div><div><font size="2"><span style="font-family:arial,sans-serif"><span id="gmail-m_6890929345026607073m_-4122756204696642219gmail-LC10" lang=""><br></span></span></font></div><div><font size="2"><span style="font-family:arial,sans-serif"><span id="gmail-m_6890929345026607073m_-4122756204696642219gmail-LC10" lang="">** libgnutls: Added support for certificate compression as defined in RFC8879.</span>
</span></font></div><pre><font size="2"><span style="font-family:arial,sans-serif"><span id="gmail-m_6890929345026607073m_-4122756204696642219gmail-LC11" lang="">** certtool: Added option --compress-cert that allows users to specify compression</span>
<span id="gmail-m_6890929345026607073m_-4122756204696642219gmail-LC12" lang=""> methods for certificate compression.</span>
<span id="gmail-m_6890929345026607073m_-4122756204696642219gmail-LC13" lang="">** libgnutls: GnuTLS can now be compiled with --enable-strict-x509 configure</span>
<span id="gmail-m_6890929345026607073m_-4122756204696642219gmail-LC14" lang=""> option to enforce stricter certificate sanity checks that are compliant</span>
<span id="gmail-m_6890929345026607073m_-4122756204696642219gmail-LC15" lang=""> with RFC5280.</span>
<span id="gmail-m_6890929345026607073m_-4122756204696642219gmail-LC16" lang="">** libgnutls: Removed IA5String type from DirectoryString within issuer</span>
<span id="gmail-m_6890929345026607073m_-4122756204696642219gmail-LC17" lang=""> and subject name to make DirectoryString RFC5280 compliant.</span>
<span id="gmail-m_6890929345026607073m_-4122756204696642219gmail-LC18" lang="">** libgnutls: Added function to retrieve the name of the current ciphersuite</span>
<span id="gmail-m_6890929345026607073m_-4122756204696642219gmail-LC19" lang=""> from session (#1291).</span>
<br><span id="gmail-m_6890929345026607073m_-4122756204696642219gmail-LC22" lang="">** API and ABI modifications:</span>
<span id="gmail-m_6890929345026607073m_-4122756204696642219gmail-LC23" lang="">GNUTLS_COMP_BROTLI: New gnutls_compression_method_t enum member</span>
<span id="gmail-m_6890929345026607073m_-4122756204696642219gmail-LC24" lang="">GNUTLS_COMP_ZSTD: New gnutls_compression_method_t enum member</span>
<span id="gmail-m_6890929345026607073m_-4122756204696642219gmail-LC25" lang="">gnutls_compress_certificate_get_selected_method: Added</span>
<span id="gmail-m_6890929345026607073m_-4122756204696642219gmail-LC26" lang="">gnutls_compress_certificate_set_methods: Added</span><br><br>Getting the Software<br>================
<br>GnuTLS may be downloaded directly from <br><a href="https://www.gnupg.org/ftp/gcrypt/" target="_blank">https://www.gnupg.org/ftp/gcrypt/</a>
A list of GnuTLS mirrors can be found at
<a href="http://www.gnutls.org/download.html" target="_blank">http://www.gnutls.org/download.html</a>
Here are the XZ compressed sources:<br><a href="https://www.gnupg.org/ftp/gcrypt/gnutls/v3.7/gnutls-3.7.4.tar.xz" target="_blank">https://www.gnupg.org/ftp/gcrypt/gnutls/v3.7/gnutls-3.7.4.tar.xz</a>
Here are OpenPGP detached signatures signed using key: 5D46CB0F763405A7053556F47A75A648B3F9220C
<a href="https://www.gnupg.org/ftp/gcrypt/gnutls/v3.7/gnutls-3.7.4.tar.xz.sig" target="_blank">https://www.gnupg.org/ftp/gcrypt/gnutls/v3.7/gnutls-3.7.4.tar.xz.sig</a>
Note that it has been signed with my openpgp key:<br>pub ed25519 2021-12-23 [SC] [expires: 2023-12-23]<br> 5D46CB0F763405A7053556F47A75A648B3F9220C<br>uid [ultimate] Zoltan Fridrich <<a href="mailto:zfridric@redhat.com" target="_blank">zfridric@redhat.com</a>><br>sub cv25519 2021-12-23 [E] [expires: 2023-12-23]<br><br></span></font></pre><pre><font size="2"><span style="font-family:arial,sans-serif">and Daiki Uenos openpgp key:<br>pub rsa4096 2009-07-23 [SC] [expires: 2023-09-25]
462225C3B46F34879FC8496CD605848ED7E69871
uid [ultimate] Daiki Ueno <<a href="http://lists.gnupg.org/mailman/listinfo/gnutls-help">ueno at unixuser.org</a>>
uid [ultimate] Daiki Ueno <<a href="http://lists.gnupg.org/mailman/listinfo/gnutls-help">ueno at gnu.org</a>>
sub rsa4096 2010-02-04 [E]</span></font></pre><pre><font size="2"><span style="font-family:arial,sans-serif"><br>Regards,<br>Zoltan</span></font></pre></div>