tls-1.7.22-bp155.3.8

- Add certs-tests.patch, cipher-tests.patch, fall-through.patch,
    hostname-tests.patch, openssl3.patch
  (according to see https://src.fedoraproject.org/rpms/tcltls
    and https://salsa.debian.org/tcltk-team/tcltls)
- Remove tls-test-certs.tar.gz (replaced by certs-tests.patch)
- Clean up spec file

- Update to version 1.7.22
  * Allow loading certificates and keys as values instead of files.
  * add "version" element with SSL/TLS protocol version to tls::status
  * Obsoletes tls-fix-channel-state.patch
- Add 2048 bit keys for testing, because recent openssl versions
  don't accept 1024 bits anymore (tls-test-certs.tar.gz).
- Update upstream URLs.

- Fix the logic to fail on unexpected testsuite failures.

- Update to version 1.7.14 for compatibility with OpenSSL 1.1.
- Add tls-fix-channel-state.patch to prevent implicit changes of
  encoding, translation and blocking mode when importing a socket.
  https://core.tcl.tk/tcltls/info/f798e2ea12

- Update to version 1.6.7 to incorporate the latest upstream fixes.
  This obsoletes tls-ciphers.patch and tls-enable-tls1.patch.

- update to version 1.6.3 (from CVS):
  * tls.c (MiscObjCmd): Fixed non-static string array used in call
    of Tcl_GetIndexFromObj(). Memory smash waiting to happen.
    Thanks to Brian Griffin for alerting us all to the problem.
  * tls.c: Applied Jeff's patch from
    http://www.mail-archive.com/aolserver@listserv.aol.com/msg12356.html
  * tls.c (StatusObjCmd): memleak: free peer if loaded.
    [Bug 3041925]
  * tls.tcl (tls::socket): some socket implementations have a -type
    support (e.g. for inet6).
- rebased tls-fix-ciphers.patch
- modified tls-enable-tls1.patch to only enable tls1 by default
  and to update the documentation

- disable test tlsIO-2.10, reading from a closed socket raises an
  exception with tcl >= 8.6.2 resulting in a timeout and failed
  test

- Enable TLS1 by default to avoid problems with servers that
  reject anything else (tls-enable-tls1.patch).

- Query openssl for the ciphers it supports instead of comparing
  against a hardcoded list to make the test independent of the
  openssl version.
- Remove tls.h from the package.

- Ignore test tlsIO-12.3, because it fails on loaded machines.

- New version: 1.6
  * Fix a memleak in tls.c
  * Use better Eval APIs, cleaner Tcl_Obj-handling
  * fix handshake on non-blocking sockets
- Adjust to the new Tcl file system layout.

- Patched cipher tests to match cipher list of openssl-0.98d.

- converted neededforbuild to BuildRequires

- Update to CVS snapshot of version 1.5.1.

- Moved the sctipt library to /usr/share/tcl .

- Temporarily disabled test tlsIO-12.3, because it sometimes fails
  in a way that is hard to track down.
  This needs further inspection.

- fixed file list

- New version: 1.5.0

- building as non-root (# norootforbuild)

- New package: tls-1.4.1
- Tcl bindings to SSL