|
 |
b6b438 |
From 50d864024d5f165e3a649371c811cefd695fc2db Mon Sep 17 00:00:00 2001
|
|
|
b6b438 |
From: Andrew Bartlett <abartlet@samba.org>
|
|
|
b6b438 |
Date: Thu, 15 Aug 2019 14:25:41 +1200
|
|
|
b6b438 |
Subject: [PATCH 104/187] build: Set minimum GnuTLS version at 3.4.7
|
|
|
b6b438 |
|
|
|
b6b438 |
This will soon be required for encrypted_secrets in the AD DC, the BackupKey server
|
|
|
b6b438 |
and SMB2 as we remove use of the internal AES code.
|
|
|
b6b438 |
|
|
|
b6b438 |
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
|
|
|
b6b438 |
Reviewed-by: Andreas Schneider <asn@samba.org>
|
|
|
b6b438 |
(cherry picked from commit 974cebdf953259f41ecfc7375bc31d72af53f51e)
|
|
|
b6b438 |
---
|
|
|
b6b438 |
wscript_configure_system_gnutls | 11 +----------
|
|
|
b6b438 |
1 file changed, 1 insertion(+), 10 deletions(-)
|
|
|
b6b438 |
|
|
|
b6b438 |
diff --git a/wscript_configure_system_gnutls b/wscript_configure_system_gnutls
|
|
|
b6b438 |
index 85824aad4ed..8ff0529e10c 100644
|
|
|
b6b438 |
--- a/wscript_configure_system_gnutls
|
|
|
b6b438 |
+++ b/wscript_configure_system_gnutls
|
|
|
b6b438 |
@@ -1,17 +1,9 @@
|
|
|
b6b438 |
from waflib import Options
|
|
|
b6b438 |
|
|
|
b6b438 |
-gnutls_min_required_version = "3.2.0"
|
|
|
b6b438 |
+gnutls_min_required_version = "3.4.7"
|
|
|
b6b438 |
|
|
|
b6b438 |
gnutls_required_version = gnutls_min_required_version
|
|
|
b6b438 |
|
|
|
b6b438 |
-#
|
|
|
b6b438 |
-# If we build with MIT Kerberos we need at least GnuTLS 3.4.7 for the backupkey
|
|
|
b6b438 |
-# protocol.
|
|
|
b6b438 |
-#
|
|
|
b6b438 |
-if Options.options.with_system_mitkrb5 and conf.env.AD_DC_BUILD_IS_ENABLED:
|
|
|
b6b438 |
- gnutls_required_version = "3.4.7"
|
|
|
b6b438 |
- conf.DEFINE('HAVE_GNUTLS_3_4_7', 1)
|
|
|
b6b438 |
-
|
|
|
b6b438 |
conf.CHECK_CFG(package='gnutls',
|
|
|
b6b438 |
args=('"gnutls >= %s" --cflags --libs' % gnutls_required_version),
|
|
|
b6b438 |
msg='Checking for GnuTLS >= %s' % gnutls_required_version,
|
|
|
b6b438 |
@@ -39,6 +31,5 @@ else:
|
|
|
b6b438 |
|
|
|
b6b438 |
if conf.CHECK_VALUEOF('GNUTLS_CIPHER_AES_128_CFB8', headers='gnutls/gnutls.h'):
|
|
|
b6b438 |
conf.DEFINE('HAVE_GNUTLS_AES_CFB8', 1)
|
|
|
b6b438 |
- conf.DEFINE('HAVE_GNUTLS_3_4_7', 1)
|
|
|
b6b438 |
else:
|
|
|
b6b438 |
Logs.warn('No gnutls support for AES CFB8')
|
|
|
b6b438 |
--
|
|
|
b6b438 |
2.23.0
|
|
|
b6b438 |
|