Issues require labels
The following issues require labels:
- gnutls server should not negotiate TLS 1.3 if the private key from PKCS#11 does not support RSA-PSS nor raw-RSA
- certtool --generate-self-signed interactive mode spews infinite text when confronted with EOF
- gnutls_idna_map() hostname conversion vulnerability
Please take care of them.