quictls: 3.0.5+quick_unstable-2022-07.05 -> 3.0.7+quic1

[LeSuisse]

Description of changes

Fixes CVE-2022-3786 and CVE-2022-3602.
See eeca596 and 70ca403.

Things done

• Built on platform(s)
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
• Tested, as applicable:
  • NixOS test(s) (look inside nixos/tests)
  • and/or package tests
  • or, for functions and "core" functionality, tests in lib/tests or pkgs/test
  • made sure NixOS tests are linked to the relevant packages
• Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
• Tested basic functionality of all binary files (usually in ./result/bin/)
• 22.11 Release Notes (or backporting 22.05 Release notes)
  • (Package updates) Added a release notes entry if the change is major or breaking
  • (Module updates) Added a release notes entry if the change is significant
  • (Module addition) Added a release notes entry if adding a new NixOS module
  • (Release notes changes) Ran nixos/doc/manual/md-to-db.sh to update generated release notes
• Fits CONTRIBUTING.md.

[LeSuisse]

For backporting 1ed8ae3, 94ffbb4 and 4f99d8e are also needed.

[Izorkin]

@LeSuisse you have duplicated the enable-ktls option - https://github.com/NixOS/nixpkgs/pull/199184/files#diff-a4de3a6e415b4912c750b0474123253f9b667bb9ebc61d801b33cd16865eacfcL105

[LeSuisse]

Oups,, good catch

[vcunat]

Right, I'm sorry. Fortunately it doesn't seem to break anything?

[LeSuisse]

I'm guessing it's broken on darwin? I do not have a env to test it.

I opened #199190 to fix it, it might be better to have the same behavior between the openssl package and this one anyway I guess.

[vcunat]

Ah yes, probably, but on this branch there are almost no darwin binaries yet, so it's not a practical issue so far.

[Izorkin]

it might be better to have the same behavior between the openssl package and this one anyway I guess.

I could not implement changes for the quictls package in openssl. So i maked a separate package.

[LeSuisse]

Yep sure, my comment was specifically about the enable-ktls flag since it was not defined in the OpenSSL package before 😉

I opened the backport PR: see #199192