We previously had checks of enum values with '#if', such as below:

 #define GNUTLS_EXTENSION_MAX_VALUE 31

 typedef enum extensions_t {
         ...
         GNUTLS_EXTENSION_MAX /* not real extension - used for iterators */
 } extensions_t;

 /* we must provide at least 16 extensions for users to register */
 #if GNUTLS_EXTENSION_MAX_VALUE - GNUTLS_EXTENSION_MAX < 16
 # error not enough extension types
 #endif

This doesn't work as expected; because GNUTLS_EXTENSION_MAX is not
defined as a preprocessor macro, it always expands to 0.  To properly
do this check, we need to use static assert as provided as the
'verify' macro in gnulib.

Signed-off-by: Daiki Ueno <dueno@redhat.com>

We currently have 26 predefined extensions, allowing the user to
define 5 extra as tested in tests/handshake-large-packet.c.  However,
if we introduce one more, session->internals.used_exts exceeds.

Signed-off-by: Daiki Ueno <dueno@redhat.com>

keylogfile: simplify the callback mechanism

See merge request gnutls/gnutls!1196

Adding missing macosx directory for aarch64 acceleration

See merge request gnutls/gnutls!1198

Signed-off-by: Ross Nicholson <phunkyfish@gmail.com>

This partially reverts commit 97117556 with a simpler interface.  The
original intention of having the callback mechanism was to reuse it
for monitoring QUIC encryption changes.  However, it turned out to be
insufficient because such changes must be emitted after a new epoch is
ready.

Signed-off-by: Daiki Ueno <dueno@redhat.com>

lib: drop unused pbkdf2 helpers

See merge request gnutls/gnutls!1194

Updated pbkdf2 API in GnuTLS removed the need for PBKDF2 helpers, drop
them now.

Signed-off-by: Dmitry Baryshkov <dbaryshkov@gmail.com>

TravisCI: Add bison

See merge request gnutls/gnutls!1192

Add option to store all stapled OCSP responses to gnutls-cli

See merge request gnutls/gnutls!1189