Bug#848905: 3.5.7-2 breaks reading password-protected PKCS#8 files for openvpn

[Russ Allbery]

Package: libgnutls30
Version: 3.5.7-2
Severity: important

When I upgraded from libgnutls30 3.5.6-7 to 3.5.7-2, certificate
authentication with openvpn broke with the error:

Failed to load private key as PKCS#8: An illegal parameter was found.

Downgrading fixed this.  This appears to be the same bug as:

https://bugzilla.redhat.com/show_bug.cgi?id=1404084
https://gitlab.com/gnutls/gnutls/merge_requests/185

which appears (if I read the diff properly) to be a bug that prevents
loading of password-protected PKCS#8 files.  Could you get this fixed
in Debian as well?  For severity, I'm not sure how broad the impact is,
but for me it made VPN unusable, which was pretty distruptive.

Thanks!

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.8.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libgnutls30 depends on:
ii  libc6        2.24-8
ii  libgmp10     2:6.1.1+dfsg-1
ii  libhogweed4  3.3-1
ii  libidn11     1.33-1
ii  libnettle6   3.3-1
ii  libp11-kit0  0.23.2-5
ii  libtasn1-6   4.9-4
ii  zlib1g       1:1.2.8.dfsg-4

libgnutls30 recommends no packages.

Versions of packages libgnutls30 suggests:
pn  gnutls-bin  <none>

-- no debconf information