diff options
| author | Florian Brandes <florian.brandes@posteo.de> | 2024-05-14 22:03:13 +0200 |
|---|---|---|
| committer | Vladimír Čunát <v@cunat.cz> | 2024-05-15 07:33:04 +0200 |
| commit | cb4678361a0cf41a886153ae23075bf6ba902071 (patch) | |
| tree | 9e0c5afd2da80c481086558c7e75508cb4f55c99 /pkgs/development/python-modules/python-mapnik/python-mapnik_std_optional.patch | |
| parent | 935cdc9f966633196febf18c6108b8adde666fa6 (diff) | |
gnutls: fix an upstream regression in RSA certificates
The update to 3.8.5 involved adding a feature to conditionally
disable RSAES-PKCS1-v1.5 [1]. It was intended to be turned on
by default [2], but failed [3].
Therefore it is disabled, which in turn throws a new error:
"Fatal error: The encryption algorithm is not supported". (error 113).
This can have severe implications, as for example Lets Encrypt
signed RSA certificates aren't trusted anymore.
This commit fetches the upstream patch, which hasn't been included
in 3.8.5
[1]: https://gitlab.com/gnutls/gnutls/-/merge_requests/1828
[2]: https://gitlab.com/gnutls/gnutls/-/merge_requests/1828/diffs#cd5a2ba3b145c1bd292e027ef84c618b6b7fb895_267_274
[3]: https://gitlab.com/gnutls/gnutls/-/issues/1540
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
Diffstat (limited to 'pkgs/development/python-modules/python-mapnik/python-mapnik_std_optional.patch')
0 files changed, 0 insertions, 0 deletions