nixpkgs/pkgs/development/libraries/gnutls
Florian Brandes cb4678361a
gnutls: fix an upstream regression in RSA certificates
The update to 3.8.5 involved adding a feature to conditionally
disable RSAES-PKCS1-v1.5 [1]. It was intended to be turned on
by default [2], but failed [3].
Therefore it is disabled, which in turn throws a new error:
"Fatal error: The encryption algorithm is not supported". (error 113).

This can have severe implications, as for example Lets Encrypt
signed RSA certificates aren't trusted anymore.

This commit fetches the upstream patch, which hasn't been included
in 3.8.5

[1]: https://gitlab.com/gnutls/gnutls/-/merge_requests/1828
[2]: https://gitlab.com/gnutls/gnutls/-/merge_requests/1828/diffs#cd5a2ba3b145c1bd292e027ef84c618b6b7fb895_267_274
[3]: https://gitlab.com/gnutls/gnutls/-/issues/1540

Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2024-05-15 07:33:04 +02:00
..
default.nix gnutls: fix an upstream regression in RSA certificates 2024-05-15 07:33:04 +02:00
dummy.crt
nix-ssl-cert-file.patch