Dear Maintainer,

About one year ago, OpenJDK fixed handling of signature scheme
constraints in TLS by differentiating between handshake signatures and
certificate signatures (https://bugs.openjdk.org/browse/JDK-8349583).
The corresponding packages for OpenJDK were updated in Debian and we
immediately experienced a regression in Debian packages that relied on
GnuTLS for mutual TLS: connection failed to establish with spurious
error messages.

More recently, I could find the root cause and fix the issue causing
this regression in GnuTLS, and this fix was part of GnuTLS 3.8.13:
https://gitlab.com/gnutls/gnutls/-/merge_requests/2095/

The version of GnuTLS in Debian testing is now working correctly, but I
would like the fix to be backported to Debian 12 and 13 where the issue
still exists today.

I opened two merge requests to include this patch on what I think are
the correct branches in the salsa project:
  - https://salsa.debian.org/gnutls-team/gnutls/-/merge_requests/6
  - https://salsa.debian.org/gnutls-team/gnutls/-/merge_requests/7

I was not able to find the correct commands I should run to build
packages from this repository, and would appreciate some guidance to
help me improve these merge requests.  In-line comments in gitlab are
probably the most convenient for me.

Thank you!