From f27233e9843b0e8d510cb8b79622238ba853befe Mon Sep 17 00:00:00 2001
From: Stefan Eissing <stefan@eissing.org>
Date: Tue, 26 May 2026 11:25:01 +0200
Subject: [PATCH] GnuTLS: require 3.7.2 for earlydata

Since all API features we need for TLSv1.3 earlydata support do exist
only from version 3.7.2 onwards, make that the minimal version required.

Fixes #21750
Reported-by: Johannes Schlatow
Closes #21751
---
 lib/vtls/gtls.c           | 2 +-
 tests/http/testenv/env.py | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/lib/vtls/gtls.c b/lib/vtls/gtls.c
index a8ffc28e8c..22001c3391 100644
--- a/lib/vtls/gtls.c
+++ b/lib/vtls/gtls.c
@@ -72,7 +72,7 @@ static void tls_log_func(int level, const char *str)
 #endif
 
 #undef CURL_GNUTLS_EARLY_DATA
-#if GNUTLS_VERSION_NUMBER >= 0x03060d
+#if GNUTLS_VERSION_NUMBER >= 0x030702
 #define CURL_GNUTLS_EARLY_DATA
 #endif
 
diff --git a/tests/http/testenv/env.py b/tests/http/testenv/env.py
index 30fc0d0a73..c7bbfc4c54 100644
--- a/tests/http/testenv/env.py
+++ b/tests/http/testenv/env.py
@@ -523,7 +523,7 @@ class Env:
     @staticmethod
     def curl_can_early_data() -> bool:
         if Env.curl_uses_lib('gnutls'):
-            return Env.curl_lib_version_at_least('gnutls', '3.6.13')
+            return Env.curl_lib_version_at_least('gnutls', '3.7.2')
         return Env.curl_uses_any_libs(['wolfssl', 'quictls', 'openssl'])
 
     @staticmethod