From 92dd59291601912940700010729b8ba7996a8ba8 Mon Sep 17 00:00:00 2001
From: Hannes Mehnert <hannes@mehnert.org>
Date: Thu, 22 Apr 2021 17:50:43 +0200
Subject: [PATCH] [new release] tls-mirage and tls (0.13.1)
CHANGES:
* Breaking: use deriving sexp_of instead of sexp. Constructing a state from
a sexp has not been supported (lead to exception), and is now removed
(mirleft/ocaml-tls#430 by @torinnd, continued in mirleft/ocaml-tls#431 by @hannesm)
* Bugfix: TLS 1.3 client authentication with certificate, client side. This
used to work accidentally before 0.13.0 changed the signature algorithms
handling, now the right signature algorithm (as requested by server) is used.
(mirleft/ocaml-tls#431 @hannesm, @talex5 reported https://github.com/mirage/capnp-rpc/pull/228)
* adapt to x509 0.13.0 and mirage-crypto-ec 0.10.0 changes (mirleft/ocaml-tls#431 @hannesm)
---
packages/tls-mirage/tls-mirage.0.13.1/opam | 46 +++++++++++++++
packages/tls/tls.0.13.1/opam | 68 ++++++++++++++++++++++
2 files changed, 114 insertions(+)
create mode 100644 packages/tls-mirage/tls-mirage.0.13.1/opam
create mode 100644 packages/tls/tls.0.13.1/opam
diff --git a/packages/tls-mirage/tls-mirage.0.13.1/opam b/packages/tls-mirage/tls-mirage.0.13.1/opam
new file mode 100644
index 000000000000..c216b92b25ef
--- /dev/null
+++ b/packages/tls-mirage/tls-mirage.0.13.1/opam
@@ -0,0 +1,46 @@
+opam-version: "2.0"
+homepage: "https://github.com/mirleft/ocaml-tls"
+dev-repo: "git+https://github.com/mirleft/ocaml-tls.git"
+bug-reports: "https://github.com/mirleft/ocaml-tls/issues"
+doc: "https://mirleft.github.io/ocaml-tls/doc"
+maintainer: ["Hannes Mehnert <hannes@mehnert.org>" "David Kaloper <david@numm.org>"]
+license: "BSD-2-Clause"
+
+build: [
+ ["dune" "subst"] {dev}
+ ["dune" "build" "-p" name "-j" jobs]
+ ["dune" "runtest" "-p" name "-j" jobs] {with-test}
+]
+
+depends: [
+ "ocaml" {>= "4.08.0"}
+ "dune" {>= "1.0"}
+ "tls" {= version}
+ "x509" {>= "0.13.0"}
+ "fmt"
+ "lwt" {>= "3.0.0"}
+ "mirage-flow" {>= "2.0.0"}
+ "mirage-kv" {>= "3.0.0"}
+ "mirage-clock" {>= "3.0.0"}
+ "ptime" {>= "0.8.1"}
+ "mirage-crypto"
+ "mirage-crypto-pk"
+]
+tags: [ "org:mirage"]
+synopsis: "Transport Layer Security purely in OCaml, MirageOS layer"
+description: """
+Tls-mirage provides an effectful FLOW module to be used in the MirageOS
+ecosystem.
+"""
+x-commit-hash: "ca98b341692b5be9164e25e890f57cc1c7b3ae17"
+authors: [
+ "David Kaloper <david@numm.org>" "Hannes Mehnert <hannes@mehnert.org>"
+]
+url {
+ src:
+ "https://github.com/mirleft/ocaml-tls/releases/download/v0.13.1/tls-v0.13.1.tbz"
+ checksum: [
+ "sha256=47ec8e46363c01ad94c937786c6fb912992304af1cf4d22edc262ddfc58411e4"
+ "sha512=77d735747b274b13a8f66300b69914e6adce21c6b1250acbcbe65cb305183b7e7da8e00d8566d08c8d6f3a95718af638efbf59645cad0eaf162b61722438825d"
+ ]
+}
diff --git a/packages/tls/tls.0.13.1/opam b/packages/tls/tls.0.13.1/opam
new file mode 100644
index 000000000000..c85e7da4dbdc
--- /dev/null
+++ b/packages/tls/tls.0.13.1/opam
@@ -0,0 +1,68 @@
+opam-version: "2.0"
+homepage: "https://github.com/mirleft/ocaml-tls"
+dev-repo: "git+https://github.com/mirleft/ocaml-tls.git"
+bug-reports: "https://github.com/mirleft/ocaml-tls/issues"
+doc: "https://mirleft.github.io/ocaml-tls/doc"
+maintainer: ["Hannes Mehnert <hannes@mehnert.org>" "David Kaloper <david@numm.org>"]
+license: "BSD-2-Clause"
+
+build: [
+ ["dune" "subst"] {dev}
+ ["dune" "build" "-p" name "-j" jobs]
+ ["dune" "runtest" "-p" name "-j" jobs] {with-test}
+]
+
+depends: [
+ "ocaml" {>= "4.08.0"}
+ "dune" {>= "1.0"}
+ "ppx_sexp_conv" {>= "v0.9.0"}
+ "ppx_cstruct" {>= "3.0.0"}
+ "cstruct" {>= "4.0.0"}
+ "cstruct-sexp"
+ "sexplib"
+ "mirage-crypto" {>= "0.8.1"}
+ "mirage-crypto-ec" {>= "0.10.0"}
+ "mirage-crypto-pk"
+ "mirage-crypto-rng" {>= "0.8.0"}
+ "x509" {>= "0.13.0"}
+ "domain-name" {>= "0.3.0"}
+ "fmt"
+ "rresult"
+ "cstruct-unix" {with-test & >= "3.0.0"}
+ "ounit2" {with-test & >= "2.2.0"}
+ "lwt" {>= "3.0.0"}
+ "ptime" {>= "0.8.1"}
+ "hkdf"
+ "logs"
+ "alcotest" {with-test}
+]
+
+tags: [ "org:mirage"]
+synopsis: "Transport Layer Security purely in OCaml"
+description: """
+Transport Layer Security (TLS) is probably the most widely deployed security
+protocol on the Internet. It provides communication privacy to prevent
+eavesdropping, tampering, and message forgery. Furthermore, it optionally
+provides authentication of the involved endpoints. TLS is commonly deployed for
+securing web services ([HTTPS](http://tools.ietf.org/html/rfc2818)), emails,
+virtual private networks, and wireless networks.
+
+TLS uses asymmetric cryptography to exchange a symmetric key, and optionally
+authenticate (using X.509) either or both endpoints. It provides algorithmic
+agility, which means that the key exchange method, symmetric encryption
+algorithm, and hash algorithm are negotiated.
+
+Read [further](https://nqsb.io) and our [Usenix Security 2015 paper](https://usenix15.nqsb.io).
+"""
+x-commit-hash: "ca98b341692b5be9164e25e890f57cc1c7b3ae17"
+authors: [
+ "David Kaloper <david@numm.org>" "Hannes Mehnert <hannes@mehnert.org>"
+]
+url {
+ src:
+ "https://github.com/mirleft/ocaml-tls/releases/download/v0.13.1/tls-v0.13.1.tbz"
+ checksum: [
+ "sha256=47ec8e46363c01ad94c937786c6fb912992304af1cf4d22edc262ddfc58411e4"
+ "sha512=77d735747b274b13a8f66300b69914e6adce21c6b1250acbcbe65cb305183b7e7da8e00d8566d08c8d6f3a95718af638efbf59645cad0eaf162b61722438825d"
+ ]
+}