[SCM] GNU gnutls branch, master, updated. gnutls_2_99_0-63-gb4fb5cc

[Nikos Mavrogiannopoulos]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU gnutls".

http://git.savannah.gnu.org/cgit/gnutls.git/commit/?id=b4fb5cc26affff88970954b223215edb8df56e84

The branch, master has been updated
       via  b4fb5cc26affff88970954b223215edb8df56e84 (commit)
      from  7a62421e8e162e3f9f660ea08cc19284fb64cd20 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit b4fb5cc26affff88970954b223215edb8df56e84
Author: Nikos Mavrogiannopoulos <address@hidden>
Date:   Sat Apr 16 22:46:56 2011 +0200

    Restored HMAC-MD5 for compatibility. Although considered weak, several 
sites require it for connection. It is enabled for "NORMAL" and "PERFORMANCE" 
priority strings.

-----------------------------------------------------------------------

Summary of changes:
 NEWS                  |    6 ++++++
 lib/gnutls_priority.c |    7 ++++---
 2 files changed, 10 insertions(+), 3 deletions(-)

diff --git a/NEWS b/NEWS
index 2976d3c..a64f086 100644
--- a/NEWS
+++ b/NEWS
@@ -8,6 +8,12 @@ See the end for copying conditions.
 ** libgnutls: Added support for AES-NI if detected. Uses
 Andy Polyakov's AES-NI code.
 
+* libgnutls: Restored HMAC-MD5 for compatibility. Although considered 
+weak, several sites require it for connection. It is enabled for
+"NORMAL" and "PERFORMANCE" priority strings.
+
+* libgnutls: depend on libdl.
+
 ** libgnutls-extra: Dropped support of LZO compression via liblzo.
 
 ** libgnutls: gnutls_transport_set_global_errno() was removed. This
diff --git a/lib/gnutls_priority.c b/lib/gnutls_priority.c
index 505cf9e..ec3dee3 100644
--- a/lib/gnutls_priority.c
+++ b/lib/gnutls_priority.c
@@ -363,10 +363,11 @@ static const int sign_priority_secure256[] = {
   0
 };
 
-static const int mac_priority_performance[] = {
+static const int mac_priority_normal[] = {
   GNUTLS_MAC_SHA1,
   GNUTLS_MAC_SHA256,
   GNUTLS_MAC_AEAD,
+  GNUTLS_MAC_MD5,
   0
 };
 
@@ -583,7 +584,7 @@ gnutls_priority_init (gnutls_priority_t * priority_cache,
           _set_priority (&(*priority_cache)->cipher,
                          cipher_priority_performance);
           _set_priority (&(*priority_cache)->kx, kx_priority_performance);
-          _set_priority (&(*priority_cache)->mac, mac_priority_performance);
+          _set_priority (&(*priority_cache)->mac, mac_priority_normal);
           _set_priority (&(*priority_cache)->sign_algo,
                          sign_priority_default);
         }
@@ -591,7 +592,7 @@ gnutls_priority_init (gnutls_priority_t * priority_cache,
         {
           _set_priority (&(*priority_cache)->cipher, cipher_priority_normal);
           _set_priority (&(*priority_cache)->kx, kx_priority_secure);
-          _set_priority (&(*priority_cache)->mac, mac_priority_secure);
+          _set_priority (&(*priority_cache)->mac, mac_priority_normal);
           _set_priority (&(*priority_cache)->sign_algo,
                          sign_priority_default);
         }


hooks/post-receive
-- 
GNU gnutls