Bump nettle dependency to 3.9.1
Skip KTLS test exercising ChaCha20-Poly1305 in TLS 1.2 (RHEL-18498)

Update to gnutls 3.8.2 (RHEL-14891)

Mark SHA-1 signature verification non-approved in FIPS (#2102751)

Skip KTLS test on old kernel if host and target arches are different

Require use of extended master secret in FIPS mode by default (#2157953)

Fix the previous change (#2175214)

Update gnutls-3.7.8-fips-pct-dh.patch to the upstream version (#2168143)

Fix timing side-channel in TLS RSA key exchange (#2162601)

fips: extend PCT to DH key generation (#2168143)

fips: rename hmac file to its previous name (#2148269)

cipher: add restriction on CCM tag length under FIPS mode (#2137807)
nettle: mark non-compliant RSA-PSS salt length to be not-approved (#2143266)

fips: make XTS key check failure not fatal (#2130971)
enable source archive verification again (#2127094)
clear server's session ticket indication at rehandshake (#2136072)
crypto-api: add block cipher API with automatic padding (#2084161)
fips: remove library path checking from FIPS integrity check (#2140908)

fips: mark PBKDF2 with short key and output sizes non-approved
fips: only mark HMAC as approved in PBKDF2
fips: mark gnutls_key_generate with short key sizes non-approved
fips: fix checking on hash algorithm used in ECDSA
fips: preserve operation context around FIPS selftests API

Supply --with{,out}-{zlib,brotli,zstd} explicitly

Revert nettle version pinning as it doesn't work well in side-tag