commit a1a59e0232a4b1bbe16953ec1793cc28fe438ca2
Merge: 8f368b0 69402b9
Author: Ben Hutchings <benh@debian.org>
Date: Mon Apr 20 17:57:51 2026 +0200
Merge branch 'enable-gnutls-feature' into 'debian/latest'
Revert "configure: Disable use of GnuTLS API not yet accepted upstream"
See merge request kernel-team/ktls-utils!4
commit 69402b94ba1ba5a6f53768ebdef19dd26e306c30
Author: Ben Hutchings <benh@debian.org>
Date: Mon Apr 20 17:45:23 2026 +0200
Revert "configure: Disable use of GnuTLS API not yet accepted upstream"
The gnutls_psk_allocate_{client,server}_credentials2() functions
were added in GnuTLS 3.8.11 as proposed.
commit 8f368b0696e0c42c4eb1b9dafa89efc9d8fcfc6a
Merge: 7e6d972 efd588d
Author: Ben Hutchings <benh@debian.org>
Date: Sat Feb 21 19:42:08 2026 +0100
Merge branch 'cert-generation-for-autopkgtest' into 'debian/latest'
d/t/test-common: Move inclusion of extensions when signing the certificate
See merge request kernel-team/ktls-utils!3
commit efd588d3ad981d3ff12955e390e1e7b1c3a47b17
Author: Salvatore Bonaccorso <carnil@debian.org>
Date: Fri Feb 20 07:49:21 2026 +0100
d/t/test-common: Add inclusion of extensions when signing the certificates
When generating the certificate requests the req_extensions sections are
relevant, when creating and signing the certificate with the CA using
-x509 then x509_extensions is relevant. Add the passing of config to the
signing step as we want the certificate to contain the basicConstraints
with CA:false and extendedKeyUsage as well.
As per README.Debian the name(s) and purposes are ignore, but the
intention was to include them as set in the role specific openssl.cnf
configuration.
Among the 2 debian patches available in version 1.3.0-2 of the package, we noticed the following issues:
![[bug history graph]](https://qa.debian.org/data/bts/graphs/k/ktls-utils.png){kind=link}