Fix upstream testsuite in fips mode (#2051637)

Specify FIPS140-3 module name and version
fips: allow a few more primes in RSA key generation
fips: tighten PKCS#12 algorithm checks
Correct return value of KTLS stub API

Disable config reload in order to not break allowlisting (#2042532)

Build with TPM2 support, patch from Alexander Sosedkin (#2033220)

Update to gnutls 3.7.3 (#2033220)

Update gnutls_{hash,hmac}_copy man-pages as well (#1999639)

Drop support for GNUTLS_NO_EXPLICIT_INIT envvar in favor of
Expand documentation of gnutls_{hash,hmac}_copy, mentioning that

Fix race condition when resolving SYSTEM priority in allowlisting mode (#2012249)

Fix issues in bundled libopts, spotted by covscan (#1938730)

Enable Intel CET
Remove unnecessary CCASFLAGS setting for annocheck

Temporarily disable LTO for aarch64 and ppc64le

Rebuilt for IMA sigs, glibc 2.34, aarch64 flags

Disable GOST cryptography by default (#1945292)
Tighten timestamp adjustment when not bootstrapping (#1975482)
Re-enable LTO (#1986143)

Enable allowlisting configuration mode (#1975421)

Remove %defattr invocations which are no longer necessary
hobble-gnutls: Remove SRP removal
Use correct source URL
Switch to using %gpgverify macro

Update to upstream 3.7.2 release (#1966479)