From: Nikos Mavrogiannopoulos Date: Sat, 23 Jul 2011 15:08:36 +0000 (+0200) Subject: updated changelog. X-Git-Tag: gnutls_2_99_4^0 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d96df1d90985543558d87097c50a55d7be00c28f;p=thirdparty%2Fgnutls.git updated changelog. --- diff --git a/ChangeLog b/ChangeLog index 1ec8d74cd1..3914e2ed9f 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,26703 +1,9546 @@ -2011-04-09 Nikos Mavrogiannopoulos - - * .gitignore, doc/cha-gtls-app.texi, doc/cha-intro-tls.texi, - doc/examples/Makefile.am, doc/examples/ex-client-udp.c, - doc/examples/udp.c, lib/gnutls_state.c: Added documentation for - Datagram TLS. - -2011-04-09 Nikos Mavrogiannopoulos - - * cfg.mk: updated - -2011-04-08 Nikos Mavrogiannopoulos - - * tests/chainverify.c: disable test in windows. - -2011-04-08 Nikos Mavrogiannopoulos - - * tests/mini-x509-rehandshake.c, tests/openpgp-auth.c, - tests/openpgp-auth2.c: corrected leaks in tests. - -2011-04-08 Nikos Mavrogiannopoulos - - * lib/auth_cert.c, lib/gnutls_pk.c: corrected memory leak on RSA - signatures. - -2011-04-08 Nikos Mavrogiannopoulos - - * lib/x509/common.c: more leaks fixed in common.c - -2011-04-08 Nikos Mavrogiannopoulos - - * lib/gnutls_pubkey.c: Corrected leaks in gnutls_pubkey_t - deinitialization. - -2011-04-08 Nikos Mavrogiannopoulos - - * lib/x509/verify-high.c: fix in trusted_list certificate - deinitialization. - -2011-04-08 Nikos Mavrogiannopoulos - - * lib/gnutls_privkey.c: correction in deinitialization of privkey. - -2011-04-08 Nikos Mavrogiannopoulos - - * tests/mini-x509-rehandshake.c, tests/mini-x509.c: combined more - tests with eagain-common.h. - -2011-04-08 Nikos Mavrogiannopoulos - - * lib/auth_dh_common.c, lib/gnutls_privkey.c, lib/gnutls_x509.c, - lib/nettle/pk.c, lib/pakchois/pakchois.c, lib/pakchois/pakchois.h, - lib/pkcs11.c, lib/x509/verify-high.c, tests/mini-x509.c: Corrected - memory leaks. - -2011-04-08 Nikos Mavrogiannopoulos - - * build-aux/arg-nonnull.h, build-aux/c++defs.h, - build-aux/config.rpath, build-aux/warn-on-use.h, cfg.mk, - gl/Makefile.am, gl/m4/.gitignore, gl/m4/gnulib-cache.m4, - gl/m4/gnulib-comp.m4: added valgrind from gnulib. - -2011-04-08 Nikos Mavrogiannopoulos - - * tests/dsa/testdsa, tests/openpgp-certs/testcerts: Do not run the - test scripts in win32 environment. - -2011-04-08 Nikos Mavrogiannopoulos - - * cfg.mk: use the system wide gnulib-tool. - -2011-04-08 Nikos Mavrogiannopoulos - - * .gitignore: updated - -2011-04-08 Nikos Mavrogiannopoulos - - * NEWS: updated - -2011-04-08 Nikos Mavrogiannopoulos - - * tests/suite/ecore/src/lib/ecore_exe.c: include priority headers - unconditionally. - -2011-04-08 Nikos Mavrogiannopoulos - - * configure.ac, tests/Makefile.am, tests/suite/Makefile.am, - tests/suite/Makefile.in: Better way of not including the tests/suite - directory. Based on discussion with LRN and Vincent Torri. - -2011-04-08 Nikos Mavrogiannopoulos - - * .gitignore, Makefile.am, cfg.mk, configure.ac, - doc/examples/Makefile.am, doc/gendocs_template, gl/.gitignore, - gl/Makefile.am, gl/accept.c, gl/alignof.h, gl/alloca.c, - gl/alloca.in.h, gl/arpa_inet.in.h, gl/asnprintf.c, gl/bind.c, - gl/c-ctype.c, gl/c-ctype.h, gl/close-hook.c, gl/close-hook.h, - gl/close.c, gl/connect.c, gl/errno.in.h, gl/error.c, gl/error.h, - gl/fclose.c, gl/float+.h, gl/float.in.h, gl/fseeko.c, gl/ftello.c, - gl/gai_strerror.c, gl/getaddrinfo.c, gl/getdelim.c, gl/getline.c, - gl/getpass.c, gl/getpass.h, gl/gettext.h, gl/gettime.c, - gl/gettimeofday.c, gl/inet_ntop.c, gl/inet_pton.c, gl/intprops.h, - gl/listen.c, gl/lseek.c, gl/m4/.gitignore, gl/m4/00gnulib.m4, - gl/m4/alloca.m4, gl/m4/arpa_inet_h.m4, gl/m4/asm-underscore.m4, - gl/m4/autobuild.m4, gl/m4/clock_time.m4, gl/m4/close.m4, - gl/m4/errno_h.m4, gl/m4/error.m4, gl/m4/extensions.m4, - gl/m4/fclose.m4, gl/m4/float_h.m4, gl/m4/fseeko.m4, - gl/m4/ftello.m4, gl/m4/getaddrinfo.m4, gl/m4/getdelim.m4, - gl/m4/getline.m4, gl/m4/getpagesize.m4, gl/m4/getpass.m4, - gl/m4/gettime.m4, gl/m4/gettimeofday.m4, gl/m4/gnulib-cache.m4, - gl/m4/gnulib-common.m4, gl/m4/gnulib-comp.m4, gl/m4/gnulib-tool.m4, - gl/m4/hostent.m4, gl/m4/include_next.m4, gl/m4/inet_ntop.m4, - gl/m4/inet_pton.m4, gl/m4/intmax_t.m4, gl/m4/inttypes_h.m4, - gl/m4/ioctl.m4, gl/m4/lib-ld.m4, gl/m4/lib-link.m4, - gl/m4/lib-prefix.m4, gl/m4/longlong.m4, gl/m4/lseek.m4, - gl/m4/malloc.m4, gl/m4/manywarnings.m4, gl/m4/memchr.m4, - gl/m4/minmax.m4, gl/m4/mmap-anon.m4, gl/m4/multiarch.m4, - gl/m4/netdb_h.m4, gl/m4/netinet_in_h.m4, gl/m4/perror.m4, - gl/m4/printf.m4, gl/m4/read-file.m4, gl/m4/readline.m4, - gl/m4/realloc.m4, gl/m4/select.m4, gl/m4/servent.m4, - gl/m4/size_max.m4, gl/m4/snprintf.m4, gl/m4/socketlib.m4, - gl/m4/sockets.m4, gl/m4/socklen.m4, gl/m4/sockpfaf.m4, - gl/m4/stdarg.m4, gl/m4/stdbool.m4, gl/m4/stddef_h.m4, - gl/m4/stdint.m4, gl/m4/stdint_h.m4, gl/m4/stdio_h.m4, - gl/m4/stdlib_h.m4, gl/m4/strerror.m4, gl/m4/string_h.m4, - gl/m4/sys_ioctl_h.m4, gl/m4/sys_select_h.m4, gl/m4/sys_socket_h.m4, - gl/m4/sys_stat_h.m4, gl/m4/sys_time_h.m4, gl/m4/time_h.m4, - gl/m4/timespec.m4, gl/m4/ungetc.m4, gl/m4/unistd_h.m4, - gl/m4/valgrind-tests.m4, gl/m4/vasnprintf.m4, gl/m4/version-etc.m4, - gl/m4/warn-on-use.m4, gl/m4/warnings.m4, gl/m4/wchar_h.m4, - gl/m4/wchar_t.m4, gl/m4/wint_t.m4, gl/m4/xsize.m4, gl/malloc.c, - gl/memchr.c, gl/minmax.h, gl/netdb.in.h, gl/netinet_in.in.h, - gl/perror.c, gl/printf-args.c, gl/printf-args.h, gl/printf-parse.c, - gl/printf-parse.h, gl/progname.c, gl/progname.h, gl/read-file.c, - gl/read-file.h, gl/readline.c, gl/readline.h, gl/realloc.c, - gl/recv.c, gl/select.c, gl/send.c, gl/setsockopt.c, gl/shutdown.c, - gl/size_max.h, gl/snprintf.c, gl/socket.c, gl/sockets.c, - gl/sockets.h, gl/stdarg.in.h, gl/stdbool.in.h, gl/stddef.in.h, - gl/stdint.in.h, gl/stdio-impl.h, gl/stdio-write.c, gl/stdio.in.h, - gl/stdlib.in.h, gl/strerror.c, gl/string.in.h, gl/sys_select.in.h, - gl/sys_socket.in.h, gl/sys_stat.in.h, gl/sys_time.in.h, - gl/tests/.gitignore, gl/tests/Makefile.am, gl/tests/binary-io.h, - gl/tests/dummy.c, gl/tests/fcntl.in.h, gl/tests/getpagesize.c, - gl/tests/init.sh, gl/tests/ioctl.c, gl/tests/macros.h, - gl/tests/signature.h, gl/tests/sys_ioctl.in.h, - gl/tests/test-alignof.c, gl/tests/test-alloca-opt.c, - gl/tests/test-arpa_inet.c, gl/tests/test-binary-io.c, - gl/tests/test-c-ctype.c, gl/tests/test-errno.c, - gl/tests/test-fcntl-h.c, gl/tests/test-fseeko.c, - gl/tests/test-ftello.c, gl/tests/test-ftello3.c, - gl/tests/test-getaddrinfo.c, gl/tests/test-getdelim.c, - gl/tests/test-getline.c, gl/tests/test-gettimeofday.c, - gl/tests/test-inet_ntop.c, gl/tests/test-inet_pton.c, - gl/tests/test-lseek.c, gl/tests/test-lseek.sh, - gl/tests/test-memchr.c, gl/tests/test-netdb.c, - gl/tests/test-netinet_in.c, gl/tests/test-perror.c, - gl/tests/test-perror.sh, gl/tests/test-read-file.c, - gl/tests/test-select-fd.c, gl/tests/test-select-in.sh, - gl/tests/test-select-out.sh, gl/tests/test-select-stdin.c, - gl/tests/test-select.c, gl/tests/test-snprintf.c, - gl/tests/test-sockets.c, gl/tests/test-stdbool.c, - gl/tests/test-stddef.c, gl/tests/test-stdint.c, - gl/tests/test-stdio.c, gl/tests/test-stdlib.c, - gl/tests/test-strerror.c, gl/tests/test-string.c, - gl/tests/test-sys_ioctl.c, gl/tests/test-sys_select.c, - gl/tests/test-sys_socket.c, gl/tests/test-sys_stat.c, - gl/tests/test-sys_time.c, gl/tests/test-sys_wait.h, - gl/tests/test-time.c, gl/tests/test-unistd.c, - gl/tests/test-update-copyright.sh, gl/tests/test-vasnprintf.c, - gl/tests/test-vc-list-files-cvs.sh, - gl/tests/test-vc-list-files-git.sh, gl/tests/test-verify.c, - gl/tests/test-version-etc.c, gl/tests/test-version-etc.sh, - gl/tests/test-wchar.c, gl/tests/w32sock.h, gl/tests/zerosize-ptr.h, - gl/time.in.h, gl/timespec.h, gl/unistd.in.h, gl/vasnprintf.c, - gl/vasnprintf.h, gl/verify.h, gl/version-etc-fsf.c, - gl/version-etc.c, gl/version-etc.h, gl/w32sock.h, gl/wchar.in.h, - gl/xsize.h, guile/src/Makefile.am, lib/Makefile.am, - lib/configure.ac, lib/gcrypt/Makefile.am, lib/gl/Makefile.am, - lib/gl/alignof.h, lib/gl/alloca.in.h, lib/gl/asnprintf.c, - lib/gl/asprintf.c, lib/gl/byteswap.in.h, lib/gl/c-ctype.c, - lib/gl/c-ctype.h, lib/gl/close-hook.c, lib/gl/close-hook.h, - lib/gl/errno.in.h, lib/gl/float+.h, lib/gl/float.in.h, - lib/gl/fseeko.c, lib/gl/ftello.c, lib/gl/gettext.h, lib/gl/lseek.c, - lib/gl/m4/00gnulib.m4, lib/gl/m4/alloca.m4, - lib/gl/m4/asm-underscore.m4, lib/gl/m4/byteswap.m4, - lib/gl/m4/codeset.m4, lib/gl/m4/errno_h.m4, - lib/gl/m4/extensions.m4, lib/gl/m4/fcntl-o.m4, - lib/gl/m4/float_h.m4, lib/gl/m4/fseeko.m4, lib/gl/m4/ftello.m4, - lib/gl/m4/func.m4, lib/gl/m4/getpagesize.m4, lib/gl/m4/gettext.m4, - lib/gl/m4/glibc2.m4, lib/gl/m4/glibc21.m4, - lib/gl/m4/gnulib-cache.m4, lib/gl/m4/gnulib-common.m4, - lib/gl/m4/gnulib-comp.m4, lib/gl/m4/gnulib-tool.m4, - lib/gl/m4/iconv.m4, lib/gl/m4/include_next.m4, - lib/gl/m4/intdiv0.m4, lib/gl/m4/intl.m4, lib/gl/m4/intldir.m4, - lib/gl/m4/intlmacosx.m4, lib/gl/m4/intmax.m4, - lib/gl/m4/intmax_t.m4, lib/gl/m4/inttypes-pri.m4, - lib/gl/m4/inttypes_h.m4, lib/gl/m4/lcmessage.m4, - lib/gl/m4/ld-output-def.m4, lib/gl/m4/ld-version-script.m4, - lib/gl/m4/lib-ld.m4, lib/gl/m4/lib-link.m4, - lib/gl/m4/lib-prefix.m4, lib/gl/m4/lock.m4, lib/gl/m4/longlong.m4, - lib/gl/m4/lseek.m4, lib/gl/m4/malloc.m4, lib/gl/m4/memchr.m4, - lib/gl/m4/memmem.m4, lib/gl/m4/minmax.m4, lib/gl/m4/mmap-anon.m4, - lib/gl/m4/multiarch.m4, lib/gl/m4/netdb_h.m4, lib/gl/m4/nls.m4, - lib/gl/m4/po.m4, lib/gl/m4/printf-posix.m4, lib/gl/m4/printf.m4, - lib/gl/m4/progtest.m4, lib/gl/m4/read-file.m4, - lib/gl/m4/realloc.m4, lib/gl/m4/size_max.m4, lib/gl/m4/snprintf.m4, - lib/gl/m4/socketlib.m4, lib/gl/m4/sockets.m4, lib/gl/m4/socklen.m4, - lib/gl/m4/sockpfaf.m4, lib/gl/m4/stdbool.m4, lib/gl/m4/stddef_h.m4, - lib/gl/m4/stdint.m4, lib/gl/m4/stdint_h.m4, lib/gl/m4/stdio_h.m4, - lib/gl/m4/stdlib_h.m4, lib/gl/m4/strcase.m4, lib/gl/m4/string_h.m4, - lib/gl/m4/strings_h.m4, lib/gl/m4/strverscmp.m4, - lib/gl/m4/sys_socket_h.m4, lib/gl/m4/sys_stat_h.m4, - lib/gl/m4/threadlib.m4, lib/gl/m4/time_h.m4, lib/gl/m4/time_r.m4, - lib/gl/m4/uintmax_t.m4, lib/gl/m4/ungetc.m4, lib/gl/m4/unistd_h.m4, - lib/gl/m4/vasnprintf.m4, lib/gl/m4/vasprintf.m4, - lib/gl/m4/visibility.m4, lib/gl/m4/vsnprintf.m4, - lib/gl/m4/warn-on-use.m4, lib/gl/m4/wchar_h.m4, - lib/gl/m4/wchar_t.m4, lib/gl/m4/wint_t.m4, lib/gl/m4/xsize.m4, - lib/gl/malloc.c, lib/gl/memchr.c, lib/gl/memchr.valgrind, - lib/gl/memmem.c, lib/gl/minmax.h, lib/gl/netdb.in.h, - lib/gl/override/lib/gc-libgcrypt.c.diff, - lib/gl/override/lib/gettext.h.diff, lib/gl/printf-args.c, - lib/gl/printf-args.h, lib/gl/printf-parse.c, lib/gl/printf-parse.h, - lib/gl/read-file.c, lib/gl/read-file.h, lib/gl/realloc.c, - lib/gl/size_max.h, lib/gl/snprintf.c, lib/gl/sockets.c, - lib/gl/sockets.h, lib/gl/stdbool.in.h, lib/gl/stddef.in.h, - lib/gl/stdint.in.h, lib/gl/stdio-impl.h, lib/gl/stdio-write.c, - lib/gl/stdio.in.h, lib/gl/stdlib.in.h, lib/gl/str-two-way.h, - lib/gl/strcasecmp.c, lib/gl/string.in.h, lib/gl/strings.in.h, - lib/gl/strncasecmp.c, lib/gl/strverscmp.c, lib/gl/sys_socket.in.h, - lib/gl/sys_stat.in.h, lib/gl/tests/Makefile.am, - lib/gl/tests/binary-io.h, lib/gl/tests/dummy.c, - lib/gl/tests/getpagesize.c, lib/gl/tests/init.sh, - lib/gl/tests/intprops.h, lib/gl/tests/macros.h, - lib/gl/tests/signature.h, lib/gl/tests/test-alloca-opt.c, - lib/gl/tests/test-binary-io.c, lib/gl/tests/test-binary-io.sh, - lib/gl/tests/test-byteswap.c, lib/gl/tests/test-c-ctype.c, - lib/gl/tests/test-errno.c, lib/gl/tests/test-fseeko.c, - lib/gl/tests/test-fseeko.sh, lib/gl/tests/test-fseeko2.sh, - lib/gl/tests/test-ftello.c, lib/gl/tests/test-ftello.sh, - lib/gl/tests/test-ftello2.sh, lib/gl/tests/test-ftello3.c, - lib/gl/tests/test-func.c, lib/gl/tests/test-memchr.c, - lib/gl/tests/test-netdb.c, lib/gl/tests/test-read-file.c, - lib/gl/tests/test-snprintf.c, lib/gl/tests/test-sockets.c, - lib/gl/tests/test-stdbool.c, lib/gl/tests/test-stddef.c, - lib/gl/tests/test-stdint.c, lib/gl/tests/test-stdio.c, - lib/gl/tests/test-stdlib.c, lib/gl/tests/test-string.c, - lib/gl/tests/test-strings.c, lib/gl/tests/test-strverscmp.c, - lib/gl/tests/test-sys_socket.c, lib/gl/tests/test-sys_stat.c, - lib/gl/tests/test-sys_wait.h, lib/gl/tests/test-time.c, - lib/gl/tests/test-unistd.c, lib/gl/tests/test-vasnprintf.c, - lib/gl/tests/test-vasprintf.c, lib/gl/tests/test-verify.c, - lib/gl/tests/test-verify.sh, lib/gl/tests/test-vsnprintf.c, - lib/gl/tests/test-wchar.c, lib/gl/tests/zerosize-ptr.h, - lib/gl/time.in.h, lib/gl/time_r.c, lib/gl/unistd.in.h, - lib/gl/vasnprintf.c, lib/gl/vasnprintf.h, lib/gl/vasprintf.c, - lib/gl/verify.h, lib/gl/vsnprintf.c, lib/gl/w32sock.h, - lib/gl/wchar.in.h, lib/gl/xsize.h, lib/gnutls_int.h, - lib/m4/hooks.m4, lib/minitasn1/Makefile.am, lib/nettle/Makefile.am, - lib/opencdk/Makefile.am, lib/openpgp/Makefile.am, lib/po/LINGUAS, - lib/po/Makevars, lib/po/POTFILES.in, lib/po/cs.po.in, - lib/po/de.po.in, lib/po/fr.po.in, lib/po/it.po.in, lib/po/ms.po.in, - lib/po/nl.po.in, lib/po/pl.po.in, lib/po/sv.po.in, lib/po/vi.po.in, - lib/po/zh_CN.po.in, lib/x509/Makefile.am, libextra/Makefile.am, - libextra/configure.ac, libextra/gl/Makefile.am, - libextra/gl/gnulib.mk, libextra/gl/hmac-md5.c, libextra/gl/hmac.h, - libextra/gl/m4/00gnulib.m4, libextra/gl/m4/extensions.m4, - libextra/gl/m4/gnulib-cache.m4, libextra/gl/m4/gnulib-common.m4, - libextra/gl/m4/gnulib-comp.m4, libextra/gl/m4/gnulib-tool.m4, - libextra/gl/m4/hmac-md5.m4, libextra/gl/m4/ld-output-def.m4, - libextra/gl/m4/ld-version-script.m4, libextra/gl/m4/lib-ld.m4, - libextra/gl/m4/lib-link.m4, libextra/gl/m4/lib-prefix.m4, - libextra/gl/m4/md5.m4, libextra/gl/m4/memxor.m4, libextra/gl/md5.c, - libextra/gl/md5.h, libextra/gl/memxor.c, libextra/gl/memxor.h, - libextra/gl/override/lib/md5.c.diff, libextra/m4/hooks.m4, - m4/hooks.m4, po/LINGUAS, po/Makevars, po/POTFILES.in, po/cs.po.in, - po/de.po.in, po/fr.po.in, po/it.po.in, po/ms.po.in, po/nl.po.in, - po/pl.po.in, po/sv.po.in, po/vi.po.in, po/zh_CN.po.in, - src/Makefile.am, tests/suite/Makefile.in: Use a single configure.ac. - This speed ups compilation and reduces duplication of code (multiple - gl/ libraries etc.). This saves about 2mb in distributed size - (compressed). - -2011-04-08 Nikos Mavrogiannopoulos - - * src/certtool-cfg.c: Avoid using readline. - -2011-04-08 Nikos Mavrogiannopoulos - - * lib/gnutls_buffers.c: initialized ret in _gnutls_writev_emu(). - -2011-04-08 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/x509.h: doc fix - -2011-04-08 Nikos Mavrogiannopoulos - - * lib/system.c: removed unneeded variable. - -2011-04-08 Nikos Mavrogiannopoulos - - * lib/auth_cert.c: Corrected check for an unknown sign algorithm. - Patch by LRN. - -2011-04-08 Nikos Mavrogiannopoulos - - * lib/openpgp/output.c: Do not use %e in strftime. Use %d instead - which is identically available in windows as well. Based on patch - by LRN. - -2011-04-08 Nikos Mavrogiannopoulos - - * lib/x509/output.c, tests/certuniqueid.c: Fixed mismatch in size_t - size. Patch by LRN. - -2011-04-07 Nikos Mavrogiannopoulos - - * lib/system.c, lib/system_override.c: Correctly set errno in win32 - using gnutls_transport_set_global_errno(). Based on patch by LRN. - -2011-04-07 Nikos Mavrogiannopoulos - - * tests/eagain-common.h, tests/mini-eagain-dtls.c, - tests/mini-eagain.c, tests/mini.c: Avoid using - gnutls_transport_set_global_errno() and use - gnutls_transport_set_errno() instead. - -2011-04-07 Nikos Mavrogiannopoulos - - * lib/system_override.c: win32 fixes for set_global_errno(). - Suggested by LRN. - -2011-04-07 Nikos Mavrogiannopoulos - - * src/benchmark.c: Win32 changes for benchmark. Patch by LRN. - -2011-04-07 Nikos Mavrogiannopoulos - - * tests/anonself.c, tests/dhepskself.c, tests/openpgpself.c, - tests/pskself.c, tests/resume.c, tests/rng-fork.c, tests/x509dn.c, - tests/x509self.c: win32 fixes. Patch by LRN. - -2011-04-07 Nikos Mavrogiannopoulos - - * lib/gnutls_buffers.c: minor modification in write_emu(). - -2011-04-07 Nikos Mavrogiannopoulos - - * lib/opencdk/literal.c, lib/opencdk/main.h, lib/opencdk/misc.c: - simplified cdk_trim_string() to make it safer to use. - -2011-04-07 Nikos Mavrogiannopoulos - - * lib/x509/privkey_pkcs8.c: correctly reset params. - -2011-04-07 Nikos Mavrogiannopoulos - - * lib/x509/crl.c, lib/x509/x509.c: use correct pointer size. - -2011-04-07 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.c: correctly compare sign algorithm_st. - -2011-04-07 Nikos Mavrogiannopoulos - - * lib/opencdk/Makefile.am, lib/opencdk/context.h, - lib/opencdk/main.c, lib/opencdk/main.h, lib/opencdk/opencdk.h, - lib/opencdk/verify.c: removed unused code - -2011-04-07 Nikos Mavrogiannopoulos - - * lib/opencdk/armor.c: null terminate the armored string - -2011-04-07 Nikos Mavrogiannopoulos - - * src/cli.c: properly null terminate string. - -2011-04-07 Nikos Mavrogiannopoulos - - * src/common.c, src/pkcs11.c: check PIN size. - -2011-04-07 Nikos Mavrogiannopoulos - - * src/srptool.c: check salt size. - -2011-04-07 Nikos Mavrogiannopoulos - - * lib/opencdk/read-packet.c: more clear bounds checking - -2011-04-06 Nikos Mavrogiannopoulos - - * lib/x509/privkey.c: initialize e and d. - -2011-04-06 Nikos Mavrogiannopoulos - - * lib/pkcs11_write.c: deinitialize pks variable only when needed. - -2011-04-06 Nikos Mavrogiannopoulos - - * lib/openpgp/pgpverify.c: Initialize verify. - -2011-04-06 Nikos Mavrogiannopoulos - - * src/cli.c: initialize session_id_size. - -2011-04-06 Nikos Mavrogiannopoulos - - * lib/opencdk/misc.c, lib/opencdk/opencdk.h: removed unneeded - function. - -2011-04-06 Nikos Mavrogiannopoulos - - * lib/pakchois/pakchois.c: correctly traverse slots - -2011-04-05 Nikos Mavrogiannopoulos - - * guile/src/core.c: avoid using a freed pointer. - -2011-04-05 Nikos Mavrogiannopoulos - - * lib/pkcs11.c: Initialize tinfo using the initially available - information. - -2011-04-05 Nikos Mavrogiannopoulos - - * lib/gnutls_dtls.c: corrected debugging info. - -2011-04-04 Nikos Mavrogiannopoulos - - * tests/eagain-common.h, tests/mini-eagain-dtls.c, - tests/mini-eagain.c, tests/mini.c: The mini-* programs were - combined. - -2011-04-04 Nikos Mavrogiannopoulos - - * lib/gnutls_record.c: Do not cleanup bufel after it has been - inserted into buffer. - -2011-04-04 Nikos Mavrogiannopoulos - - * lib/gnutls_mbuffers.c: Combined dequeue with remove_front() and - pop_first(). - -2011-04-03 Nikos Mavrogiannopoulos - - * doc/examples/Makefile.am: Compile ex-cert-select-pkcs11 as a - separate program. - -2011-04-03 Nikos Mavrogiannopoulos - - * .gitignore, lib/gnutls_buffers.c, lib/gnutls_dtls.c, - lib/gnutls_int.h, lib/gnutls_state.c, - lib/includes/gnutls/gnutls.h.in, lib/system.h, tests/Makefile.am, - tests/eagain-common.h, tests/mini-eagain-dtls.c, - tests/mini-eagain.c, tests/utils.c: Added support for non-blocking - DTLS. Added mini-eagain-dtls to test its operation. Improved - mini-eagain. - -2011-04-03 Nikos Mavrogiannopoulos - - * lib/nettle/init.c: gcrypt.h is not really needed. Reported by - David Reiser. - -2011-04-03 Nikos Mavrogiannopoulos - - * src/srptool.c: corrected header inclusion. - -2011-04-03 Nikos Mavrogiannopoulos - - * src/Makefile.am, src/crypt-gaa.c, src/crypt-gaa.h, src/crypt.c, - src/crypt.gaa, src/srptool-gaa.c, src/srptool-gaa.h, src/srptool.c, - src/srptool.gaa: crypt.* renamed to srptool.*. - -2011-04-03 Nikos Mavrogiannopoulos - - * lib/gnutls_srp.c: Corrected bug in gnutls_srp_verifier() that - prevented the allocation of a verifier. Reported by Andrew Wiseman. - -2011-04-03 Nikos Mavrogiannopoulos - - * src/crypt-gaa.c, src/crypt-gaa.h, src/crypt.c, src/crypt.gaa: - Added debug option to srptool. - -2011-04-03 Nikos Mavrogiannopoulos - - * doc/cha-cert-auth.texi: Documented p11-kit. - -2011-04-02 Nikos Mavrogiannopoulos - - * doc/cha-library.texi: corrected typo - -2011-03-30 Nikos Mavrogiannopoulos - - * tests/scripts/common.sh: Added copyright. - -2011-03-30 Nikos Mavrogiannopoulos - - * configure.ac, tests/Makefile.am, tests/dsa/testdsa, - tests/openpgp-certs/testcerts, tests/scripts/Makefile.am, - tests/scripts/common.sh: Reorganized scripts that use test servers, - based on patch by Cedric Arbogast. - -2011-03-30 Nikos Mavrogiannopoulos - - * src/certtool-gaa.c, src/certtool.gaa: Create certificate request - with stricter permissions. Reported by Luca Capello. - -2011-03-28 Nikos Mavrogiannopoulos - - * tests/openpgp-certs/Makefile.am: enabled testcerts. - -2011-03-28 Nikos Mavrogiannopoulos - - * tests/openpgp-certs/testcerts: made more silent. - -2011-03-28 Nikos Mavrogiannopoulos - - * tests/dsa/testdsa, tests/openpgp-certs/testcerts: Made scripts - bourne shell compliant and not bash. - -2011-03-26 Nikos Mavrogiannopoulos - - * THANKS: e-mail addresses are not directly recognizable. - -2011-03-26 Nikos Mavrogiannopoulos - - * lib/opencdk/stream.c: Corrected access to freed memory location. - Reported by Vitaly Kruglikov. - -2011-03-26 Nikos Mavrogiannopoulos - - * THANKS: added Mark and Vitaly to THANKS. - -2011-03-26 Nikos Mavrogiannopoulos - - * lib/system.c: Corrected windows system_errno() function. Reported - and patch by Mark Brand. - -2011-03-26 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/compat.h: C++ compatibility fix for compat.h. - Suggested by Mark Brand. - -2011-03-25 Nikos Mavrogiannopoulos - - * lib/opencdk/verify.c: Corrected uninitialized var deinitiation. - Reported by Vitaly Kruglikov. - -2011-03-25 Nikos Mavrogiannopoulos - - * lib/gnutls_sig.c: eliminate compiler warning. Reported by Andreas - Metzler. - -2011-03-25 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/openpgp.h, lib/openpgp/gnutls_openpgp.c, - lib/openpgp/pgp.c, lib/openpgp/privkey.c: Fix size of - gnutls_openpgp_keyid_t by using the GNUTLS_OPENPGP_KEYID_SIZE - definition. Reported by Andreas Metzler. - -2011-03-24 Nikos Mavrogiannopoulos - - * NEWS: included news of 2.12.0 - -2011-03-24 Nikos Mavrogiannopoulos - - * guile/tests/Makefile.am: added missing files. - -2011-03-23 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/abstract.h, lib/includes/gnutls/gnutls.h.in, - lib/includes/gnutls/pkcs11.h, lib/includes/gnutls/x509.h, - lib/pkcs11.c, lib/x509/crl.c: documentation fixes. - -2011-03-23 Nikos Mavrogiannopoulos - - * tests/dsa/testdsa: Added DSA tests for client certificates as - well. - -2011-03-23 Nikos Mavrogiannopoulos - - * lib/ext_signature.c, lib/ext_signature.h, lib/gnutls_handshake.c, - lib/gnutls_sig.c, lib/includes/gnutls/abstract.h, lib/x509/verify.c: - Simplified signature algorithm selection. - -2011-03-23 Nikos Mavrogiannopoulos - - * src/cli.c: The processed messages go to stdout. - -2011-03-23 Nikos Mavrogiannopoulos - - * lib/gnutls_privkey.c: updated documentation - -2011-03-23 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.c, lib/gnutls_int.h, - lib/includes/gnutls/gnutls.h.in: Increased GNUTLS_MAX_ALGORITHM_NUM - to 32. The gnutls_*_list() functions generate the list of algorithm - on the spot and no longer require a static duplicate list of - algorithms. This comes at a cost of not being thread safe (which is - not significant since those functions are only used for special - purposes). - -2011-03-21 Nikos Mavrogiannopoulos - - * lib/gnutls_privkey.c: corrected parameter. - -2011-03-21 Nikos Mavrogiannopoulos - - * lib/gnutls_pubkey.c, lib/includes/gnutls/pkcs11.h, lib/pkcs11.c, - lib/pkcs11_privkey.c, lib/pkcs11_secret.c, lib/x509/privkey.c: - Documentation fixes and cleanups. - -2011-03-20 Nikos Mavrogiannopoulos - - * src/cli.c: define variable locally - -2011-03-20 Nikos Mavrogiannopoulos - - * src/cli.c, src/serv.c: use IP_DONTFRAG if it is defined. - -2011-03-20 Nikos Mavrogiannopoulos - - * lib/gnutls_buffers.c, lib/gnutls_buffers.h, lib/gnutls_dtls.c, - lib/gnutls_dtls.h, lib/gnutls_handshake.c, lib/gnutls_handshake.h, - lib/gnutls_int.h, lib/gnutls_record.c, - lib/includes/gnutls/gnutls.h.in, lib/system.c, lib/system.h, - src/cli.c, src/common.h, src/serv.c, src/udp-serv.c: Avoided waiting - for peer's retransmission to ensure receipt of finished messages, - and used a 'timer'-like to retransmit packets. - -2011-03-20 Nikos Mavrogiannopoulos - - * lib/gnutls_dtls.c, lib/includes/gnutls/dtls.h, lib/libgnutls.map: - added gnutls_dtls_get_data_mtu(). - -2011-03-19 Nikos Mavrogiannopoulos - - * tests/dsa/testdsa: make gnutls-cli more quiet. - -2011-03-19 Nikos Mavrogiannopoulos - - * configure.ac, tests/Makefile.am, tests/dsa/Makefile.am, - tests/dsa/cert.dsa.1024.pem, tests/dsa/cert.dsa.2048.pem, - tests/dsa/cert.dsa.3072.pem, tests/dsa/dsa.1024.pem, - tests/dsa/dsa.2048.pem, tests/dsa/dsa.3072.pem, tests/dsa/testdsa, - tests/suite/Makefile.in: Added test to verify connections with DSA - keys of various sizes. - -2011-03-19 Nikos Mavrogiannopoulos - - * src/certtool.c: warn on generation of DSA keys of over 1024 bits. - -2011-03-19 Nikos Mavrogiannopoulos - - * lib/gnutls_alert.c, lib/gnutls_errors.c, lib/gnutls_sig.c, - lib/includes/gnutls/gnutls.h.in: Return a special error code if DSA - keys with over 1024 are being used with TLS 1.x, x<2. - -2011-03-19 Nikos Mavrogiannopoulos - - * lib/nettle/pk.c: truncate hash size when asking to sign or verify - DSA with a longer hash. - -2011-03-18 Nikos Mavrogiannopoulos - - * lib/gnutls_buffers.c, lib/system.c: Check for rejected connections - in system_recv_timeout(). - -2011-03-18 Nikos Mavrogiannopoulos - - * lib/system_override.c: quickly discuss callback format. - -2011-03-16 Nikos Mavrogiannopoulos - - * lib/gnutls_dtls.c: When sending multiple cookies due to - verification errors do not increase the handshake sequence number - only the record sequence. - -2011-03-16 Nikos Mavrogiannopoulos - - * AUTHORS: updated Jonathan - -2011-03-16 Nikos Mavrogiannopoulos - - * tests/openpgp-auth.c: Added check for RSA ciphersuite in openpgp - keys. - -2011-03-16 Nikos Mavrogiannopoulos - - * lib/openpgp/privkey.c: read correct algorithm when decrypting data - and use correct number of private parameters. - -2011-03-16 Nikos Mavrogiannopoulos - - * libextra/gnutls_extra.c: added missing ret. - -2011-03-16 Nikos Mavrogiannopoulos - - * lib/auth_cert.c: Set type when sending empty openpgp key. - -2011-03-16 Nikos Mavrogiannopoulos - - * lib/nettle/rnd.c, tests/Makefile.am, tests/rng-fork.c: Corrected - nettle's RNG behavior on fork and added a test case. - -2011-03-16 Nikos Mavrogiannopoulos - - * guile/tests/openpgp-auth.scm: enabled RSA and removed debugging. - -2011-03-16 Nikos Mavrogiannopoulos - - * lib/gnutls_privkey.c, lib/gnutls_pubkey.c, - lib/includes/gnutls/abstract.h, lib/openpgp/gnutls_openpgp.c, - tests/openpgp-auth.c, tests/openpgp-auth2.c: gnutls_pubkey_t and - gnutls_privkey_t can import either an openpgp subkey or a master - key. - -2011-03-16 Nikos Mavrogiannopoulos - - * guile/tests/openpgp-auth.scm, guile/tests/openpgp-elg-pub.asc, - guile/tests/openpgp-elg-sec.asc, guile/tests/openpgp-keys.scm, - guile/tests/openpgp-pub.asc, guile/tests/openpgp-sec.asc: split the - pgp keys to elgamal and dsa. - -2011-03-16 Nikos Mavrogiannopoulos - - * lib/gnutls_errors.c, lib/includes/gnutls/gnutls.h.in, - lib/openpgp/pgp.c, lib/openpgp/privkey.c: introduced - GNUTLS_E_OPENPGP_PREFERRED_KEY_ERROR - -2011-03-16 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.c: On unknown public key algorithms return - Unknown name. - -2011-03-16 Nikos Mavrogiannopoulos - - * lib/gnutls_privkey.c: Read the public key algorithm from the - selected subkey and not the master key when importing to a - gnutls_privkey. - -2011-03-16 Nikos Mavrogiannopoulos - - * lib/openpgp/gnutls_openpgp.c, tests/openpgpself.c: Documentation - fixed. Added fresh keys to test. - -2011-03-15 Nikos Mavrogiannopoulos - - * tests/openpgpself.c: Test openpgp authentication with DSA-2048 bit - keys as well. - -2011-03-15 Nikos Mavrogiannopoulos - - * lib/openpgp/pgp.c: gnutls_openpgp_crt_get_auth_subkey() will no - longer return an unsupported subkey. - -2011-03-15 Nikos Mavrogiannopoulos - - * lib/x509/verify.c: Corrected verification of DSA-2048 keys. - Reported by teddy@fukt.bsnet.se. - -2011-03-14 Nikos Mavrogiannopoulos - - * doc/cha-intro-tls.texi: Added - gnutls_transport_set_vec_push_function(). - -2011-03-13 Nikos Mavrogiannopoulos - - * lib/gnutls_dtls.c, lib/includes/gnutls/dtls.h, lib/libgnutls.map, - src/udp-serv.c: updated cookie negotiation to use only a prestate - structure and avoids setting data to cookie. - -2011-03-13 Nikos Mavrogiannopoulos - - * lib/gnutls_handshake.c: Use DTLS 1.0 instead of SSL 3.0 headers on - client hello in DTLS. - -2011-03-13 Nikos Mavrogiannopoulos - - * lib/gnutls_dtls.c, lib/gnutls_errors.c, - lib/includes/gnutls/dtls.h, lib/libgnutls.map, src/udp-serv.c: Added - photuris-like resource protection on the server. Added - gnutls_dtls_cookie_send(), gnutls_dtls_cookie_verify() and - gnutls_dtls_cookie_set() to avoid initializing a session before - cookie is verified. - -2011-03-13 Nikos Mavrogiannopoulos - - * lib/crypto-api.c, lib/ext_session_ticket.c, - lib/includes/gnutls/gnutls.h.in: added gnutls_key_generate() to API. - -2011-03-13 Nikos Mavrogiannopoulos - - * lib/ext_session_ticket.c: Avoid the usage of structures where the - attribute packed is assumed. - -2011-03-13 Nikos Mavrogiannopoulos - - * lib/gnutls_buffers.c, lib/gnutls_buffers.h, - lib/gnutls_handshake.c: renamed gnutls_handshake_buffer_* functions - to gnutls_handshake_hash_buffer_* to separate from new API functions - and corrected its usage. - -2011-03-13 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.c: Added DSA-SHA256, DSA-SHA224 and - RSA-SHA224 to the supported signature algorithms list. Suggested by - teddy@fukt.bsnet.se - -2011-03-13 Nikos Mavrogiannopoulos - - * lib/gnutls_constate.c, lib/gnutls_constate.h, - lib/gnutls_handshake.c, lib/gnutls_int.h, lib/gnutls_v2_compat.c: - session->internals.compression_method was removed. It was no longer - required since the new compression algorithm was stored to next - epoch as well. - -2011-03-12 Nikos Mavrogiannopoulos - - * lib/gnutls_buffers.c, lib/gnutls_cipher.c, lib/gnutls_constate.c, - lib/gnutls_handshake.c, lib/gnutls_record.c, lib/gnutls_state.h: - _gnutls_is_dtls() is no more. IS_DTLS() is being used instead. - -2011-03-12 Nikos Mavrogiannopoulos - - * lib/ext_session_ticket.c: do not print debugging output on - non-fatal errors. - -2011-03-12 Nikos Mavrogiannopoulos - - * lib/ext_session_ticket.c, lib/gnutls_cipher.c, - lib/gnutls_cipher_int.c, lib/gnutls_constate.c, - lib/gnutls_hash_int.c, lib/gnutls_hash_int.h, lib/gnutls_record.c: - Properly reset the SSL 3.0 MAC algorithm. - -2011-03-12 Nikos Mavrogiannopoulos - - * lib/gnutls_buffers.c, lib/gnutls_errors.h, - lib/gnutls_handshake.c, lib/x509/verify-high.c: cleanups. Introduced - gnutls_assert_val_fatal() that only prints debugging messages on - non-fatal errors. - -2011-03-12 Nikos Mavrogiannopoulos - - * lib/gnutls_alert.c: Added string for GNUTLS_A_SSL3_NO_CERTIFICATE. - -2011-03-12 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.c, lib/gnutls_algorithms.h: - gnutls_version_has_variable_padding is not really needed. A check - for SSL3.0 is more clear. - -2011-03-12 Nikos Mavrogiannopoulos - - * lib/debug.c, lib/gnutls_buffers.c, lib/gnutls_constate.c, - lib/gnutls_handshake.c, lib/gnutls_record.c, lib/gnutls_v2_compat.c: - Corrected SSL2 client hello handling. - -2011-03-12 Nikos Mavrogiannopoulos - - * lib/gnutls_record.c: do not set default record version (i.e. SSL - 3.0) during a re-handshake. - -2011-03-12 Nikos Mavrogiannopoulos - - * lib/gnutls_priority.c: default behavior is to send SSL3.0 client - hellos. - -2011-03-12 Nikos Mavrogiannopoulos - - * lib/gnutls_handshake.c, lib/gnutls_int.h, lib/gnutls_priority.c: - corrected ssl3 record version sending in client hello. - -2011-03-12 Nikos Mavrogiannopoulos - - * NEWS, doc/cha-intro-tls.texi, lib/gnutls_buffers.c, - lib/gnutls_int.h, lib/gnutls_record.c, lib/gnutls_state.c, - lib/includes/gnutls/compat.h, lib/includes/gnutls/gnutls.h.in, - lib/libgnutls.map: gnutls_transport_set_lowat() is no more. - -2011-03-12 Nikos Mavrogiannopoulos - - * lib/gnutls_buffers.c, lib/gnutls_record.c: some cleanups - -2011-03-12 Nikos Mavrogiannopoulos - - * lib/x509/common.h, lib/x509/verify-high.c, lib/x509/verify.c: - gnutls_x509_trust_list_verify_crt shortens the provided certificate - list based on the existing trusted CAs. - -2011-03-12 Nikos Mavrogiannopoulos - - * lib/gnutls_int.h, lib/gnutls_state.c, lib/gnutlsxx.cpp, - lib/includes/gnutls/compat.h, lib/includes/gnutls/dtls.h, - lib/includes/gnutls/gnutls.h.in, lib/includes/gnutls/gnutlsxx.h, - lib/libgnutls.map, libextra/includes/gnutls/openssl.h, src/cli.c, - src/serv.c: gnutls_init_dtls() was made redundant. The same for - gnutls_end_connection_t which was replaced by a flags integer.. - -2011-03-12 Nikos Mavrogiannopoulos - - * lib/auth_psk.c, lib/auth_psk.h, lib/ext_session_ticket.c, - lib/ext_srp.c, lib/gnutls_sig.c, lib/gnutls_x509.c, - lib/pkcs11_int.h, lib/system.c, lib/system.h, lib/x509/mpi.c, - lib/x509/verify.c, src/certtool-common.h, src/certtool.c, - src/common.c, src/pkcs11.c, src/udp-serv.c: Corrected types. - -2011-03-11 Nikos Mavrogiannopoulos - - * src/cli-gaa.c, src/cli-gaa.h, src/cli.c, src/cli.gaa, - src/serv-gaa.c, src/serv-gaa.h, src/serv.c, src/serv.gaa, - src/udp-serv.c, src/udp-serv.h: Added --mtu option. - -2011-03-11 Nikos Mavrogiannopoulos - - * lib/gnutls_buffers.c: properly re-generate headers of fragmented - packets. - -2011-03-11 Nikos Mavrogiannopoulos - - * lib/gnutls_state.c: increased initial retransmission time to 1 - sec. - -2011-03-11 Nikos Mavrogiannopoulos - - * lib/gnutls_handshake.c: In DTLS do not hash messages that - shouldn't be hashed (i.e. hello verify request). - -2011-03-11 Nikos Mavrogiannopoulos - - * lib/gnutls_cipher.c: Corrected size check in block encrypted - records. - -2011-03-10 Nikos Mavrogiannopoulos - - * lib/gnutls_buffers.c, lib/gnutls_handshake.c: Corrected behavior - in normal TLS handshake. - -2011-03-10 Nikos Mavrogiannopoulos - - * libextra/Makefile.am: link libgnutls-extra against libgcrypt if - required. Based on patch by Andreas Metzler - - -2011-03-10 Nikos Mavrogiannopoulos - - * NEWS, lib/m4/hooks.m4, libextra/Makefile.am: increased the so - version of libgnutls-openssl. - -2011-03-05 Nikos Mavrogiannopoulos - - * lib/ext_session_ticket.c, lib/gnutls_buffers.c, - lib/gnutls_buffers.h, lib/gnutls_cipher.c, lib/gnutls_dtls.c, - lib/gnutls_errors.c, lib/gnutls_handshake.c, - lib/gnutls_handshake.h, lib/gnutls_int.h, lib/gnutls_kx.c, - lib/gnutls_mbuffers.c, lib/gnutls_mbuffers.h, lib/gnutls_record.c, - lib/gnutls_state.c, lib/gnutls_str.c, lib/gnutls_v2_compat.c, - lib/includes/gnutls/gnutls.h.in: Added intermediate handshake layer - that will order handshake packets and drop duplicates. - -2011-03-05 Nikos Mavrogiannopoulos - - * lib/gnutls_record.c: handle non fatal errors when receiving record - headers. - -2011-03-05 Nikos Mavrogiannopoulos - - * lib/gnutls_cipher.c: memcpy -> memmove. - -2011-03-05 Nikos Mavrogiannopoulos - - * lib/gnutls_buffers.c, lib/gnutls_int.h: removed GMAX - -2011-03-02 Nikos Mavrogiannopoulos - - * src/certtool.c: Allow providing no password for PKCS #12 structure - generation. Reported by Daniel Kahn Gillmor. - -2011-03-02 Nikos Mavrogiannopoulos - - * src/certtool-cfg.c: consistently print all interactive questions - to stderr. Reported by Daniel Kahn Gillmor. - -2011-02-26 Nikos Mavrogiannopoulos - - * lib/gnutls_buffers.c, lib/gnutls_buffers.h, lib/gnutls_dtls.c, - lib/gnutls_int.h, lib/gnutls_mbuffers.c, lib/gnutls_mbuffers.h, - lib/gnutls_record.c, lib/gnutls_state.c: combined all the record - buffers in one. - -2011-02-26 Nikos Mavrogiannopoulos - - * lib/gnutls_buffers.c, lib/gnutls_buffers.h, lib/gnutls_dtls.c, - lib/gnutls_int.h, lib/gnutls_mbuffers.c, lib/gnutls_mbuffers.h, - lib/gnutls_record.c, lib/gnutls_record.h, lib/gnutls_state.c: - internal buffering for record and handshake data changed from - gnutls_buffers to gnutls_mbuffers. - -2011-02-26 Nikos Mavrogiannopoulos - - * lib/debug.c, lib/gnutls_buffers.c, lib/gnutls_int.h, - lib/gnutls_record.c, lib/gnutls_state.c, - lib/includes/gnutls/gnutls.h.in: Removed last pieces of inner - application. - -2011-02-26 Nikos Mavrogiannopoulos - - * lib/gnutls_record.c: some cleanups - -2011-03-01 Ludovic Courtès - - * guile/tests/anonymous-auth.scm, guile/tests/openpgp-auth.scm, - guile/tests/x509-auth.scm: guile: Change tests to use priority - strings. - -2011-03-01 Ludovic Courtès - - * src/Makefile.am: Add `udp-serv.h' to the distribution. - -2011-02-28 Andreas Metzler - - * lib/libgnutls.map: fix duplicate symbols in version script These three symbols are listed both in the GNUTLS_2_8 and the - GNUTLS_2_10 section. binutils uses the first occurence, drop the - second one. Signed-off-by: Nikos Mavrogiannopoulos - -2011-02-28 Nikos Mavrogiannopoulos - - * doc/cha-intro-tls.texi: updates on -ALL priorities. - -2011-02-28 Nikos Mavrogiannopoulos - - * lib/ext_signature.c: Restrict the signature algorithms we - advertize to SHA1 and SHA256. - -2011-02-28 Ludovic Courtès - - * lib/includes/Makefile.am: Add `gnutls/dtls.h' to the distribution. - -2011-02-27 Ludovic Courtès - - * guile/modules/system/documentation/c-snarf.scm: guile: Fix - docstring extraction with CPP 4.5+. - -2011-02-27 Ludovic Courtès - - * doc/Makefile.am: Pass the right CPPFLAGS when building Guile doc. - -2011-02-27 Ludovic Courtès - - * doc/cha-intro-tls.texi, guile/src/core.c: Add nodes for the - subsections of "The TLS Handshake Protocol". - -2011-02-27 Ludovic Courtès - - * lib/Makefile.am: Add `lib/gnutls_dtls.h' to the distribution. - -2011-02-27 Ludovic Courtès - - * guile/modules/gnutls.scm, guile/modules/gnutls/build/enums.scm, - guile/modules/gnutls/build/priorities.scm, guile/src/core.c, - guile/src/errors.c, guile/src/errors.h, guile/tests/Makefile.am, - guile/tests/priorities.scm: guile: Wrap - `gnutls_priority_set_direct'; deprecate the old method. - -2011-02-27 Ludovic Courtès - - * doc/scripts/gdoc, doc/scripts/sort2.pl: Avoid hard-coded - /usr/bin/perl (trick taken from Gnulib.) - -2011-02-27 Ludovic Courtès - - * libextra/gnutls_extra.c: Fix LZO-enabled builds. - -2011-02-24 Nikos Mavrogiannopoulos - - * lib/nettle/rnd.c: Detect fork() in the random number generator and - reseed. - -2011-02-23 Nikos Mavrogiannopoulos - - * lib/gnutls_dtls.c, lib/gnutls_state.c: use timeouts closer to DTLS - RFC. - -2011-02-23 Nikos Mavrogiannopoulos - - * lib/gnutls_state.c, lib/includes/gnutls/gnutls.h.in, - lib/libgnutls.map, lib/system_override.c: Renamed - gnutls_transport_set_push_function2() to - gnutls_transport_set_vec_push_function(). - -2011-02-20 Simon Josefsson - - * NEWS, doc/manpages/Makefile.am, lib/includes/gnutls/compat.h, - lib/libgnutls.map, lib/x509/crq.c: Remove - gnutls_x509_crq_get_preferred_hash_algorithm. - -2011-02-20 Simon Josefsson - - * lib/libgnutls.map: Remove dropped functions. - -2011-02-20 Simon Josefsson - - * lib/x509/crl_write.c: Add deprecated docstring. - -2011-02-20 Simon Josefsson - - * lib/x509/crq.c: Fix deprecated docstring. - -2011-02-20 Simon Josefsson - - * lib/x509/privkey.c: Fix docstring. - -2011-02-20 Simon Josefsson - - * lib/gnutls_pubkey.c: Fix docstring of new function. - -2011-02-20 Simon Josefsson - - * lib/gnutls_cert.c: Fix docstring for deprecated functions. - -2011-02-20 Simon Josefsson - - * lib/gnutls_sig.c: Make it build. - -2011-02-20 Simon Josefsson - - * lib/openpgp/privkey.c: Fix docstring of deprecated function. - -2011-02-20 Simon Josefsson - - * lib/gnutls_pubkey.c: Fix docstrinf of new function. - -2011-02-20 Simon Josefsson - - * doc/reference/gnutls-docs.sgml: Fix typo. - -2011-02-20 Simon Josefsson - - * doc/reference/gnutls-docs.sgml: Improve text. - -2011-02-20 Simon Josefsson - - * lib/x509/crl.c: Doc fix of new function. - -2011-02-20 Simon Josefsson - - * lib/gnutls_cert.c, lib/gnutls_privkey.c, lib/x509/privkey.c: Fix - docstring of deprecated functions. - -2011-02-20 Simon Josefsson - - * NEWS, lib/gnutls_privkey.c, lib/includes/gnutls/abstract.h, - lib/includes/gnutls/compat.h, lib/libgnutls.map, lib/x509/crq.c, - lib/x509/sign.c, tests/x509sign-verify.c: Rename - gnutls_privkey_sign_data2 to gnutls_privkey_sign_data and - gnutls_privkey_sign_hash2 to gnutls_privkey_sign_hash. These were added during the 2.11 cycle where we don't promise ABI - compatibility. - -2011-02-20 Simon Josefsson - - * doc/gnutls-crypto-layers.eps: Add doc/gnutls-crypto-layers.eps. - -2011-02-20 Simon Josefsson - - * doc/Makefile.am: Dist gnutls-crypto-layers.*. - -2011-02-20 Simon Josefsson - - * lib/Makefile.am: Add abstract_int.h. - -2011-02-20 Simon Josefsson - - * .gitignore: Ignore more. - -2011-02-20 Simon Josefsson - - * lib/Makefile.am: Link with -lnettle too. - -2011-02-20 Simon Josefsson - - * doc/Makefile.am, doc/cha-programs.texi, lib/gnutls_privkey.c, - lib/includes/gnutls/compat.h, lib/includes/gnutls/x509.h, - lib/openpgp/pgp.c: Fix syntax-check warnings. - -2011-02-22 Ludovic Courtès - - * guile/modules/gnutls/build/enums.scm: guile: Remove - GNUTLS_A_INNER_APPLICATION_FAILURE and - GNUTLS_A_INNER_APPLICATION_VERIFICATION. - -2011-02-22 Nikos Mavrogiannopoulos - - * lib/gnutls_session_pack.c: store entities as numbers to avoid - issues in big-little endian machines. - -2011-02-22 Nikos Mavrogiannopoulos - - * lib/gnutls_record.c: documented the DTLS sequence particularities. - -2011-02-22 Nikos Mavrogiannopoulos - - * lib/gnutls_buffers.c, lib/gnutls_handshake.c, - lib/gnutls_record.c, lib/gnutls_record.h, - lib/includes/gnutls/gnutls.h.in, lib/libgnutls.map, src/udp-serv.c: - Added gnutls_record_recv_seq() that can return the sequence number - of the record packet, in addition to data. - -2011-02-21 Nikos Mavrogiannopoulos - - * lib/gnutls_record.c: reorganized and simplified gnutls_recv_int(). - It will discard invalid DTLS packets. - -2011-02-20 Nikos Mavrogiannopoulos - - * lib/gnutls_constate.h, lib/gnutls_record.c: Discard messages that - contain a different epoch than the current one. - -2011-02-20 Nikos Mavrogiannopoulos - - * lib/gnutls_record.c: renamed internal function to reflect - functionality. - -2011-02-20 Nikos Mavrogiannopoulos - - * lib/gnutls_buffers.c, lib/gnutls_dtls.c, lib/gnutls_dtls.h, - lib/gnutls_int.h, lib/gnutls_record.c, lib/gnutls_state.c: - Implemented a sliding window-like thing to discard replayed packets. - -2011-02-20 Nikos Mavrogiannopoulos - - * src/cli.c: gnutls-cli shouldn't print errors on EAGAIN and - INTERRUPTED. - -2011-02-20 Nikos Mavrogiannopoulos - - * lib/gnutls_num.c: corrected uint48pp. - -2011-02-20 Nikos Mavrogiannopoulos - - * lib/gnutls_constate.c, lib/gnutls_mbuffers.c, lib/gnutls_state.c: - Epoch garbage collector is being run when handshake is being cleaned - up. - -2011-02-20 Nikos Mavrogiannopoulos - - * lib/gnutls_buffers.c, lib/gnutls_buffers.h, lib/gnutls_dtls.c, - lib/gnutls_handshake.c, lib/gnutls_int.h, lib/gnutls_num.c, - lib/gnutls_state.c: skip replays in handshake packets. - -2011-02-20 Nikos Mavrogiannopoulos - - * lib/gnutls_record.c: Forbid SSL v.2 client hello in DTLS. - -2011-02-20 Nikos Mavrogiannopoulos - - * lib/gnutls_buffers.c, lib/gnutls_int.h: removed unneeded - variables. - -2011-02-20 Nikos Mavrogiannopoulos - - * lib/gnutls_buffers.c, lib/gnutls_constate.h, lib/gnutls_dtls.c, - lib/gnutls_handshake.c, lib/gnutls_int.h, lib/gnutls_mbuffers.c: - Cleanups in combination of DTLS and TLS buffers. - -2011-02-20 Nikos Mavrogiannopoulos - - * lib/auth_dhe.c, lib/auth_rsa.c, lib/auth_rsa_export.c, - lib/auth_srp.c, lib/gnutls_algorithms.c, lib/gnutls_dh_primes.c, - lib/gnutls_errors.h, lib/gnutls_handshake.c, lib/gnutls_sig.c, - lib/opencdk/main.h, lib/openpgp/pgp.c, lib/openpgp/pgpverify.c, - lib/openpgp/privkey.c, lib/x509/common.c, lib/x509/dn.c, - lib/x509/pkcs12.c, lib/x509/pkcs7.c, lib/x509/privkey_pkcs8.c, - lib/x509/verify.c, lib/x509/x509_write.c, lib/x509_b64.c: - gnutls_x509_log replaced with gnutls_audit_log. - -2011-02-20 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.h, lib/gnutls_cipher.c, lib/gnutls_dtls.c, - lib/gnutls_int.h, lib/gnutls_state.c, lib/gnutls_state.h: Return a - more precise mtu unit to applications. - -2011-02-20 Nikos Mavrogiannopoulos - - * src/udp-serv.c: restart handshake on signals. - -2011-02-20 Nikos Mavrogiannopoulos - - * lib/gnutls_buffers.c, lib/gnutls_constate.h, lib/gnutls_dtls.c: - reference counting in epochs is being done using functions. - -2011-02-20 Nikos Mavrogiannopoulos - - * lib/gnutls_cipher.c, lib/gnutls_compress.c, lib/gnutls_dtls.c, - lib/gnutls_int.h, lib/gnutls_record.c, lib/gnutls_state.c, - lib/includes/gnutls/dtls.h, lib/libgnutls.map: Added - gnutls_dtls_g/set_mtu() to allow setting and getting the DTLS mtu - from application. - -2011-02-20 Nikos Mavrogiannopoulos - - * lib/gnutls_buffers.c, lib/gnutls_dtls.c, lib/gnutls_dtls.h, - lib/gnutls_int.h, lib/gnutls_state.c: Combined DTLS buffers and - normal TLS buffers. - -2011-02-19 Nikos Mavrogiannopoulos - - * lib/Makefile.am, lib/ext_session_ticket.c, lib/gnutls_buffers.c, - lib/gnutls_buffers.h, lib/gnutls_constate.c, lib/gnutls_dtls.c, - lib/gnutls_handshake.c, lib/gnutls_int.h, lib/gnutls_state.c, - lib/includes/gnutls/gnutls.h.in, lib/libgnutls.map, lib/system.c, - lib/system.h, lib/system_override.c, src/Makefile.am, - src/serv-gaa.c, src/serv-gaa.h, src/serv.c, src/serv.gaa, - src/udp-serv.c, src/udp-serv.h: Changes to allow DTLS server side to - operate. Added a simple UDP server on gnutls-serv. Server other - cleanups. - -2011-02-19 Nikos Mavrogiannopoulos - - * lib/gnutls_dtls.c, lib/gnutls_errors.c, lib/gnutls_int.h, - lib/gnutls_state.c, lib/includes/gnutls/dtls.h, - lib/includes/gnutls/gnutls.h.in, lib/libgnutls.map, src/cli.c: Allow - setting the DTLS timeouts explicitly. - -2011-02-19 Nikos Mavrogiannopoulos - - * doc/TODO: updated. - -2011-02-18 Nikos Mavrogiannopoulos - - * lib/auth_cert.c, lib/debug.c, lib/gnutls_algorithms.c, - lib/gnutls_buffers.c, lib/gnutls_buffers.h, lib/gnutls_cipher.c, - lib/gnutls_cipher.h, lib/gnutls_dtls.c, lib/gnutls_dtls.h, - lib/gnutls_errors.h, lib/gnutls_handshake.c, lib/gnutls_int.h, - lib/gnutls_mbuffers.h, lib/gnutls_num.c, lib/gnutls_num.h, - lib/gnutls_record.c, lib/gnutls_record.h, lib/gnutls_state.c, - lib/includes/gnutls/gnutls.h.in, lib/system.c, lib/system.h, - src/cli-gaa.c, src/cli-gaa.h, src/cli.c, src/cli.gaa: Several - updates for DTLS (client side only) to work. - -2011-02-18 Nikos Mavrogiannopoulos - - * lib/opencdk/main.h: Increased level of opencdk debug messages. - -2011-02-18 Nikos Mavrogiannopoulos - - * lib/gnutls_sig.c: DSA keys in TLS 1.x, x<2 and SSL 3.0 use SHA-1 - as hash. That is we reverted to previous gnutls behavior. That - violates DSS but all implementations handle it like that. - -2011-02-18 Nikos Mavrogiannopoulos - - * lib/gnutls_buffers.c, lib/gnutls_buffers.h, lib/gnutls_dtls.c, - lib/gnutls_dtls.h, lib/gnutls_handshake.c, lib/gnutls_int.h: use - similar API when caching messages in DTLS or TLS. - -2011-02-18 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.c: corrected is_version_supported(). - -2011-02-18 Nikos Mavrogiannopoulos - - * lib/gnutls_handshake.c, lib/gnutls_handshake.h, lib/gnutls_kx.c: - Simplified _gnutls_recv_handshake(). - -2011-02-18 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.c, lib/gnutls_algorithms.h, - lib/gnutls_dtls.c, lib/gnutls_handshake.c: ciphersuites have a bit - that indicates whether they are usable with DTLS or not. - -2011-02-17 Nikos Mavrogiannopoulos - - * lib/auth_dhe.c, lib/gnutls_algorithms.c, lib/gnutls_cipher.c: fix - for dtls. - -2010-10-02 Jonathan Bastien-Filiatrault - - * lib/gnutls_dtls.c, lib/gnutls_dtls.h, lib/gnutls_num.c, - lib/gnutls_num.h: dtls: Add uint48 handling functions. Signed-off-by: Nikos Mavrogiannopoulos - -2010-10-02 Jonathan Bastien-Filiatrault - - * lib/gnutls_record.c: dtls: Bring epoch choice on receive closer to - the first usage. Signed-off-by: Nikos Mavrogiannopoulos - -2010-09-24 Jonathan Bastien-Filiatrault - - * src/cli-gaa.c, src/cli-gaa.h, src/cli.c, src/cli.gaa: Add DTLS - support to command-line client. Signed-off-by: Nikos Mavrogiannopoulos - -2010-09-17 Jonathan Bastien-Filiatrault - - * lib/gnutls_constate.c: dtls: Write epoch to sequence number. Signed-off-by: Nikos Mavrogiannopoulos - -2010-09-06 Jonathan Bastien-Filiatrault - - * lib/gnutls_handshake.c: dtls: Send consistent a client_random. This is necessary when challenged by HelloVerifiyRequest as we MUST - send the same client parameters. Signed-off-by: Nikos Mavrogiannopoulos - -2010-09-05 Jonathan Bastien-Filiatrault - - * lib/gnutls_handshake.c, lib/gnutls_int.h: dtls: Limit the number - of HelloVerifyRequest round trips. Signed-off-by: Nikos Mavrogiannopoulos - -2010-09-05 Jonathan Bastien-Filiatrault - - * lib/gnutls_dtls.c, lib/gnutls_handshake.c: dtls: TEMP: Sprinkle - transmits. Signed-off-by: Nikos Mavrogiannopoulos - -2010-09-05 Jonathan Bastien-Filiatrault - - * lib/gnutls_handshake.c, lib/gnutls_int.h: dtls: Do - HANDSHAKE_HELLO_VERIFY_REQUEST processing. Signed-off-by: Nikos Mavrogiannopoulos - -2010-09-05 Jonathan Bastien-Filiatrault - - * lib/gnutls_handshake.c: dtls: Add - _gnutls_recv_hello_verify_request. Signed-off-by: Nikos Mavrogiannopoulos - -2010-09-05 Jonathan Bastien-Filiatrault - - * lib/gnutls_record.c: Decrypt using the proper sequence number. Signed-off-by: Nikos Mavrogiannopoulos - -2010-09-05 Jonathan Bastien-Filiatrault - - * lib/gnutls_cipher.c, lib/gnutls_cipher.h: dtls: Use proper record - sequence for DTLS decrypt. Signed-off-by: Nikos Mavrogiannopoulos - -2011-02-17 Nikos Mavrogiannopoulos - - * lib/gnutls_handshake.c: corrected extdatalen - -2010-09-05 Jonathan Bastien-Filiatrault - - * lib/gnutls_buffers.c: dtls: Read whole datagrams. Signed-off-by: Nikos Mavrogiannopoulos - -2009-08-03 Jonathan Bastien-Filiatrault - - * lib/gnutls_handshake.c: dtls: Queue outgoing handshake messages in - the retransmission layer. Signed-off-by: Nikos Mavrogiannopoulos - -2009-08-03 Jonathan Bastien-Filiatrault - - * lib/gnutls_dtls.c, lib/gnutls_dtls.h: Add outgoing flight buffer - handling code. Signed-off-by: Nikos Mavrogiannopoulos - -2009-08-03 Jonathan Bastien-Filiatrault - - * lib/gnutls_errors.h: Define _gnutls_dtls_log for DTLS. Signed-off-by: Nikos Mavrogiannopoulos - -2009-08-03 Jonathan Bastien-Filiatrault - - * lib/gnutls_int.h, lib/gnutls_state.c: Add structures for the - buffered outgoing flight. Signed-off-by: Nikos Mavrogiannopoulos - -2009-08-03 Jonathan Bastien-Filiatrault - - * lib/gnutls_int.h, lib/gnutls_state.c: Add state for handshake mtu. Signed-off-by: Nikos Mavrogiannopoulos - -2009-08-03 Jonathan Bastien-Filiatrault - - * lib/gnutls_handshake.c: dtls: Fixup outgoing ClientHello hashing. Signed-off-by: Nikos Mavrogiannopoulos - -2009-08-03 Jonathan Bastien-Filiatrault - - * lib/gnutls_handshake.c, lib/gnutls_int.h: Add proper handshake - outgoing sequence number. Signed-off-by: Nikos Mavrogiannopoulos - -2009-08-03 Jonathan Bastien-Filiatrault - - * lib/Makefile.am, lib/gnutls_dtls.c, lib/gnutls_dtls.h: Add - gnutls_dtls.{c,h}. Signed-off-by: Nikos Mavrogiannopoulos - -2009-08-02 Jonathan Bastien-Filiatrault - - * lib/gnutls_handshake.c: dtls: Remove unsuitable ciphers. Signed-off-by: Nikos Mavrogiannopoulos - -2009-07-28 Jonathan Bastien-Filiatrault - - * lib/debug.c, lib/gnutls_handshake.c, - lib/includes/gnutls/gnutls.h.in: dtls: Add hanshake fragment headers - when sending handshake. Signed-off-by: Nikos Mavrogiannopoulos - -2009-07-28 Jonathan Bastien-Filiatrault - - * lib/gnutls_cipher.c, lib/gnutls_int.h, lib/gnutls_record.c: dtls: - Add epoch and sequence number to DTLS packets. Signed-off-by: Nikos Mavrogiannopoulos - -2009-07-28 Jonathan Bastien-Filiatrault - - * lib/gnutls_record.c: Use increment functions for sequence number. Signed-off-by: Nikos Mavrogiannopoulos - -2009-07-27 Jonathan Bastien-Filiatrault - - * lib/gnutls_int.h, lib/gnutls_num.c, lib/gnutls_num.h, - lib/gnutls_record.c: dtls: Add types and operations required for the - DTLS epoch and sequence. Signed-off-by: Nikos Mavrogiannopoulos - -2009-07-29 Jonathan Bastien-Filiatrault - - * lib/gnutls_algorithms.c, lib/gnutls_priority.c: Make version - lookup transport dependent. Signed-off-by: Nikos Mavrogiannopoulos - -2009-08-03 Jonathan Bastien-Filiatrault - - * lib/gnutls_state.h: dtls: Add _gnutls_is_dtls to check if a - session uses DTLS. Signed-off-by: Nikos Mavrogiannopoulos - -2009-07-25 Jonathan Bastien-Filiatrault - - * lib/gnutls_int.h, lib/gnutls_state.c, - lib/includes/gnutls/gnutls.h.in, lib/libgnutls.map: Add - gnutls_init_dtls function. Signed-off-by: Nikos Mavrogiannopoulos - -2009-07-25 Jonathan Bastien-Filiatrault - - * lib/gnutls_int.h: Add DTLS state. Signed-off-by: Nikos Mavrogiannopoulos - -2009-07-15 Jonathan Bastien-Filiatrault - - * lib/gnutls_algorithms.c, lib/includes/gnutls/gnutls.h.in: Add - DTLS1.0 protocol entry. Signed-off-by: Nikos Mavrogiannopoulos - -2010-09-17 Jonathan Bastien-Filiatrault - - * lib/ext_session_ticket.c, lib/gnutls_handshake.c, - lib/gnutls_kx.c, lib/gnutls_mbuffers.h: Allocate session buffers of - size, depending on type of session. Signed-off-by: Nikos Mavrogiannopoulos - -2010-09-25 Jonathan Bastien-Filiatrault - - * lib/gnutls_constate.c: Harmonize "d" argument between constate.c - and compress.c. Signed-off-by: Nikos Mavrogiannopoulos - -2010-09-24 Jonathan Bastien-Filiatrault - - * src/cli-gaa.c, src/cli.gaa: Fix typo. Signed-off-by: Nikos Mavrogiannopoulos - -2010-09-21 Jonathan Bastien-Filiatrault - - * lib/gnutls_num.h: Parenthesize UINT64DATA again. Signed-off-by: Nikos Mavrogiannopoulos - -2011-02-16 Nikos Mavrogiannopoulos - - * doc/cha-intro-tls.texi: reorganization of ciphersuite discussion. - -2011-02-15 Nikos Mavrogiannopoulos - - * lib/gnutls_priority.c: Allow using the minus "-" in the -ALL - priority strings. - -2011-02-15 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.c: Added fixme note on TLS 1.2 PRF per - ciphersuite. - -2011-02-15 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.c: The safe renegotiation ciphersuite is not - required to be registered. - -2011-02-15 Nikos Mavrogiannopoulos - - * lib/auth_dhe_psk.c: Corrected bug in DHE-PSK in freeing - username/key. - -2011-02-15 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.c: Added ciphersuites (from RFC5487): - TLS_PSK_WITH_AES_128_GCM_SHA256 TLS_DHE_PSK_WITH_AES_128_GCM_SHA256 - TLS_PSK_WITH_AES_128_CBC_SHA256 TLS_DHE_PSK_WITH_AES_128_CBC_SHA256 - TLS_PSK_WITH_NULL_SHA256 TLS_DHE_PSK_WITH_NULL_SHA256 - -2011-02-12 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_extensions.c, lib/gnutls_sig.c: Corrected - signature generation and verification in the Certificate Verify - message when in TLS 1.2. Reported by Todd A. Ouska. - -2011-02-11 Nikos Mavrogiannopoulos - - * lib/gnutls_state.c: removed duplicate assignments. - -2011-02-10 Nikos Mavrogiannopoulos - - * lib/nettle/cipher.c: upgraded to nettle's new GCM API. - -2011-02-10 Nikos Mavrogiannopoulos - - * lib/m4/hooks.m4: increased the C++ library current version. - -2011-02-10 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutlsxx.cpp: The C++ interface returns exception on - every error and not only on fatal ones. This allows easier handling - of errors. - -2011-02-10 Nikos Mavrogiannopoulos - - * lib/gnutlsxx.cpp, lib/includes/gnutls/gnutlsxx.h: removed the old - set_priority functions. - -2011-02-10 Nikos Mavrogiannopoulos - - * src/cli.c, src/serv.c: removed more deprecated stuff. - -2011-02-09 Nikos Mavrogiannopoulos - - * libextra/gnutls_openssl.c, libextra/includes/gnutls/openssl.h: - updated openssl layer to new priority functions (untested). - -2011-02-09 Nikos Mavrogiannopoulos - - * lib/gnutls_sig.c: removed unused variable. - -2011-02-09 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_sig.c: Allow DSA2 even in protocols before TLS - 1.2. - -2011-02-09 Nikos Mavrogiannopoulos - - * src/cli.c: set the psk callback only if username/key were not - supplied at command line. - -2011-02-09 Nikos Mavrogiannopoulos - - * lib/ext_signature.c, lib/ext_signature.h, lib/gnutls_pk.c, - lib/gnutls_sig.c: In TLS 1.2 under DSS use the hash algorithm - required by DSS. - -2011-02-09 Nikos Mavrogiannopoulos - - * tests/Makefile.am, tests/openpgp-auth.c, tests/openpgp-auth2.c: - Added new test openpgp-auth2.c that tests openpgp under TLS1.2 and - DSS as well. - -2011-02-09 Nikos Mavrogiannopoulos - - * tests/anonself.c, tests/dhepskself.c, tests/mini-eagain.c, - tests/mini.c, tests/openpgp-auth.c, tests/pskself.c, tests/resume.c: - Modernized the test applications that now use the - gnutls_priority_set_direct(). - -2011-02-09 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/compat.h, lib/includes/gnutls/gnutls.h.in: - deprecated gnutls_*_set_priority(). - -2011-02-09 Nikos Mavrogiannopoulos - - * lib/auth_cert.c, lib/ext_cert_type.c, lib/ext_max_record.c, - lib/ext_safe_renegotiation.c, lib/ext_server_name.c, - lib/ext_session_ticket.c, lib/ext_signature.c, lib/ext_srp.c, - lib/gnutls_extensions.c, lib/gnutls_extensions.h, - lib/gnutls_handshake.c, lib/gnutls_int.h, lib/gnutls_pk.c, - lib/gnutls_sig.c, lib/gnutls_state.c, - lib/includes/gnutls/gnutls.h.in, lib/nettle/pk.c: The extensions - code is now using the gnutls_buffer_st. - -2011-02-09 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.c, lib/x509/x509_int.h: Added sha224 to the - list of MACs. - -2011-02-09 Nikos Mavrogiannopoulos - - * lib/gnutls_priority.c: The PSK and SRP key exchange algorithms are - not included in the preset priority strings. - -2011-02-09 Nikos Mavrogiannopoulos - - * lib/auth_dh_common.c, lib/auth_dh_common.h, lib/auth_dhe_psk.c, - lib/auth_psk.c, lib/auth_psk.h: Callback function is being called in - both PSK-DHE and PSK. Using the callback function will not - overwrite the credentials, which were wrongly being overwritten - using the retrieved username/key. The credentials structure is now - accessed for reading only, as it should have been. - -2011-02-09 Nikos Mavrogiannopoulos - - * configure.ac: bumped version. - -2011-02-08 Nikos Mavrogiannopoulos - - * doc/cha-programs.texi: Added documentation on p11tool. - -2011-02-08 Nikos Mavrogiannopoulos - - * doc/cha-intro-tls.texi, doc/cha-library.texi, - doc/manpages/gnutls-cli.1, doc/manpages/gnutls-serv.1, - lib/gnutls_priority.c, src/common.c: Moved documentation of priority - strings to manual and removed information from manpages and function - pages that now reference the manual section. - -2011-02-08 Nikos Mavrogiannopoulos - - * lib/auth_anon.c, lib/auth_cert.c, lib/auth_cert.h, - lib/auth_dh_common.c, lib/auth_dh_common.h, lib/auth_dhe.c, - lib/auth_dhe_psk.c, lib/auth_psk.c, lib/auth_rsa.c, - lib/auth_rsa_export.c, lib/auth_srp.c, lib/auth_srp.h, - lib/auth_srp_rsa.c, lib/gnutls_auth.h, lib/gnutls_kx.c, - lib/gnutls_str.c, lib/gnutls_str.h: Simplified code in - authentication methods by using gnutls_buffer_st instead of - malloc/realloc. - -2011-02-08 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.c, lib/includes/gnutls/gnutls.h.in: Combined - same functions. - -2011-02-08 Nikos Mavrogiannopoulos - - * lib/auth_cert.c, lib/auth_dhe.c, lib/ext_signature.c, - lib/gnutls_algorithms.c, lib/gnutls_algorithms.h: Several updates in - signature algorithms parsing and sending to avoid sending invalid - signature algorithms. - -2011-02-08 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.c: Removed unused debugging code. - -2011-02-07 Nikos Mavrogiannopoulos - - * lib/nettle/cipher.c: Removed unneeded initialization. - -2011-02-07 Nikos Mavrogiannopoulos - - * NEWS, doc/cha-auth.texi, doc/cha-programs.texi, lib/Makefile.am, - lib/gnutls_psk_netconf.c, lib/includes/gnutls/compat.h: Removed - gnutls_psk_netconf_derive_key. - -2011-02-07 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_cert.c, lib/includes/gnutls/compat.h: Removed - gnutls_certificate_verify_peers. - -2011-02-07 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_handshake.c, lib/gnutls_int.h, - lib/gnutls_state.c, lib/includes/gnutls/compat.h: Removed - gnutls_session_set_finished_function(). - -2011-02-07 Nikos Mavrogiannopoulos - - * lib/gnutls_alert.c, lib/includes/gnutls/gnutls.h.in: Removed - remaining TLS/IA stuff. - -2011-02-07 Nikos Mavrogiannopoulos - - * src/cli-gaa.c, src/cli-gaa.h, src/cli.gaa, src/serv-gaa.c, - src/serv-gaa.h, src/serv.gaa: Removed more leftovers from opaque PRF - output. - -2011-02-07 Nikos Mavrogiannopoulos - - * lib/gnutls_record.c: Corrected return message from - check_recv_type(). - -2011-02-07 Nikos Mavrogiannopoulos - - * lib/nettle/mac.c: Removed upper limit on MAC algorithm key. - -2011-02-07 Nikos Mavrogiannopoulos - - * lib/gnutls_errors.c: improved premature_termination error message - -2011-02-07 Nikos Mavrogiannopoulos - - * doc/reference/Makefile.am, lib/libgnutls.map: Removed leftovers - from OPRFI extension. - -2011-02-07 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_errors.c, lib/gnutls_record.c, - lib/includes/gnutls/gnutls.h.in: gnutls_recv() returns - GNUTLS_E_PREMATURE_TERMINATION on EOF. - -2011-02-07 Nikos Mavrogiannopoulos - - * src/cli-gaa.c, src/cli-gaa.h, src/cli.c, src/cli.gaa, - src/common.c, src/common.h, src/serv-gaa.c, src/serv-gaa.h, - src/serv.c, src/serv.gaa: Removed deprecated option such as - --protocols, ciphers etc. - -2011-02-07 Nikos Mavrogiannopoulos - - * NEWS: not untested. - -2011-02-07 Nikos Mavrogiannopoulos - - * src/benchmark.c: Set correct iv in GCM. - -2011-02-07 Nikos Mavrogiannopoulos - - * lib/gnutls_cipher.c, lib/gnutls_int.h: Cleanups and moved - definitions to gnutls_int.h. AEAD modes now use the record packet - counter as nonce. - -2011-02-07 Nikos Mavrogiannopoulos - - * lib/nettle/cipher.c: Reset GCM mode when setting IV. - -2011-02-07 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.c: Added more GCM ciphersuites (DHE-* and - anonymous). - -2011-02-07 Nikos Mavrogiannopoulos - - * lib/gnutls_priority.c: updated priorities. Removed ARCFOUR from - the secure ciphersuites and moved GCM to bottom of the ciphers in - performance. - -2011-02-07 Nikos Mavrogiannopoulos - - * NEWS, lib/crypto-api.c, lib/gnutls_algorithms.c, - lib/gnutls_algorithms.h, lib/gnutls_cipher_int.c, - lib/gnutls_cipher_int.h, lib/includes/gnutls/crypto.h, - lib/libgnutls.map, src/benchmark.c: Added gnutls_cipher_add_auth() - gnutls_cipher_tag() to export the GCM interface. Updated the - benchmark. - -2011-02-07 Nikos Mavrogiannopoulos - - * lib/gnutls_cert.c: removed - gnutls_certificate_get_openpgp_keyring(). - -2011-02-07 Nikos Mavrogiannopoulos - - * lib/gnutls_hash_int.c: minor optimizations. - -2011-02-07 Nikos Mavrogiannopoulos - - * lib/gnutls_cipher_int.c, lib/gnutls_cipher_int.h, - lib/gnutls_hash_int.c, lib/gnutls_hash_int.h: inlined several small - functions. - -2011-02-07 Nikos Mavrogiannopoulos - - * lib/gnutls_cipher.c, lib/gnutls_cipher_int.c, - lib/gnutls_cipher_int.h, lib/gnutls_handshake.c, - lib/gnutls_hash_int.c, lib/gnutls_hash_int.h, lib/gnutls_sig.c: - Better error checking on SSL3. - -2011-02-07 Nikos Mavrogiannopoulos - - * lib/gnutls_cipher.c: calculation for c_length occurs in a single - place. - -2011-02-06 Nikos Mavrogiannopoulos - - * NEWS: unstable -> untested. - -2011-02-06 Nikos Mavrogiannopoulos - - * lib/nettle/mac.c: Increase the maximum HMAC key to account for - anonymous ciphersuites. - -2011-02-06 Nikos Mavrogiannopoulos - - * lib/gnutls_hash_int.c: check the error of hash set_key. - -2011-02-06 Nikos Mavrogiannopoulos - - * lib/gnutls_kx.c: do not use strlen for fixed string. - -2011-02-06 Nikos Mavrogiannopoulos - - * NEWS: updated NEWS on GCM mode. - -2011-02-06 Nikos Mavrogiannopoulos - - * lib/nettle/cipher.c: Use nettle's new API for GCM. - -2011-02-06 Nikos Mavrogiannopoulos - - * src/cli.c: removed old comment - -2011-02-06 Nikos Mavrogiannopoulos - - * NEWS, doc/Makefile.am, doc/cha-functions.texi, - doc/cha-gtls-app.texi, doc/examples/Makefile.am, - doc/examples/ex-client-tlsia.c, lib/gnutls_kx.c, - libextra/Makefile.am, libextra/ext_inner_application.c, - libextra/ext_inner_application.h, libextra/gnutls_extra.c, - libextra/gnutls_ia.c, libextra/libgnutls-extra.map, - tests/Makefile.am, tests/tlsia.c: Removed inner application - extension. - -2011-02-06 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/compat.h, lib/includes/gnutls/gnutls.h.in: - gnutls_certificate_verify_peers is deprecated. - -2011-02-04 Nikos Mavrogiannopoulos - - * lib/gcrypt/mac.c, lib/gnutls_algorithms.c, - lib/gnutls_algorithms.h, lib/gnutls_cipher.c, lib/gnutls_cipher.h, - lib/gnutls_cipher_int.c, lib/gnutls_cipher_int.h, - lib/gnutls_constate.c, lib/gnutls_hash_int.c, - lib/gnutls_hash_int.h, lib/gnutls_int.h, lib/gnutls_priority.c, - lib/includes/gnutls/crypto.h, lib/includes/gnutls/gnutls.h.in, - lib/m4/hooks.m4, lib/nettle/cipher.c, lib/nettle/mac.c: Added - support for GCM ciphersuites (not tested with other implementation). - -2011-02-05 Nikos Mavrogiannopoulos - - * lib/gnutls_int.h: Added missing definitions (GNUTLS_MASTER_SIZE - etc). - -2011-02-05 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_state.c, lib/includes/gnutls/compat.h: Removed: - gnutls_session_get_server_random, gnutls_session_get_client_random, - gnutls_session_get_master_secret - -2011-02-05 Nikos Mavrogiannopoulos - - * lib/build-aux/config.rpath, tests/suite/Makefile.in: updated. - -2011-02-05 Nikos Mavrogiannopoulos - - * lib/Makefile.am, lib/gnutls.pc.in, lib/m4/hooks.m4: Add the nettle - libs into gnutls.pc. - -2011-02-05 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_cert.c, lib/gnutls_extensions.c, - lib/includes/gnutls/compat.h, lib/m4/hooks.m4: Removed functions: - gnutls_ext_register, gnutls_certificate_get_x509_crls, - gnutls_certificate_get_x509_cas and bumped library version number. - -2011-02-05 Andreas Metzler - - * lib/configure.ac, lib/gnutls.pc.in, lib/m4/hooks.m4: [PATCH 1/4] - adapt pkg-config file for switch from AM_PATH_LIBGCRYPT to - AC_LIB_HAVE_LINKFLAGS [PATCH 2/4] pkg-config: Move libtasn1 from - Libs.private to Requires.private since libtasn1 provides a .pc file. - [PATCH 3/4] pkg-config: drop @LIBGNUTLS_LIBS@ from Libs.private. - This library only contains gnutls itself nowadays, which is in Libs - already. [PATCH 4/4] pkg-config: If gnutls is built with zlib - support list zlib in Requires.private. - -2011-02-04 Simon Josefsson - - * doc/cha-ciphersuites.texi, doc/signatures.texi: Fix MD2 - documentation. Suggested by "brian m. carlson" in - debian bug #464625. - -2011-02-02 Nikos Mavrogiannopoulos - - * doc/README.CODING_STYLE: updated coding style. - -2011-02-02 Nikos Mavrogiannopoulos - - * NEWS: documented gnutls_session_get_* deprecated functions. - -2011-02-02 Nikos Mavrogiannopoulos - - * tests/x509paths/README: updated README on certificate - verifications that fail. - -2011-02-02 Nikos Mavrogiannopoulos - - * NEWS, src/certtool-common.h, src/certtool-gaa.c, - src/certtool-gaa.h, src/certtool.c, src/certtool.gaa: Added new - functionality to certtool, and can verify certificates against a - list of CAs using the --verify option. - -2011-02-02 Nikos Mavrogiannopoulos - - * lib/x509/verify.c, tests/chainverify.c: Time checks were moved to - _gnutls_verify_certificate2(). This allows for straightforward - chain verification, and thus better printing of the chain output, - although some checks might be performed in duplicate. As a - side-effect better errors are returned (or precisely more - combinations of verification errors), thus chainverify test was - affected. - -2011-02-02 Nikos Mavrogiannopoulos - - * lib/x509/verify-high.c: Set memory to zero on allocation. - -2011-02-02 Nikos Mavrogiannopoulos - - * doc/cha-gtls-app.texi: fix in contents. - -2011-02-02 Nikos Mavrogiannopoulos - - * doc/examples/examples.h: prototype fix. - -2011-02-02 Nikos Mavrogiannopoulos - - * doc/examples/ex-verify.c, lib/gnutls_cert.c, - lib/includes/gnutls/x509.h, lib/x509/verify-high.c, src/certtool.c: - gnutls_x509_trust_list_init() has an extra argument that allows - fine-tuning of the used memory. - -2011-02-01 Nikos Mavrogiannopoulos - - * doc/cha-bib.texi: Updated references of rfc5081 to rfc6091. - -2011-02-01 Nikos Mavrogiannopoulos - - * doc/cha-cert-auth.texi, doc/cha-gtls-app.texi, - doc/examples/ex-verify.c: Documented the new verification functions. - -2011-01-31 Nikos Mavrogiannopoulos - - * src/certtool.c, tests/sha2/sha2: Modified output to not confuse - earlier scripts. - -2011-01-31 Nikos Mavrogiannopoulos - - * lib/x509/verify.c: Better output when removing certificates from - list. - -2011-01-31 Nikos Mavrogiannopoulos - - * tests/pkcs1-padding/pkcs1-pad: Modified to work on new certtool -e - output. - -2011-01-31 Nikos Mavrogiannopoulos - - * NEWS, doc/examples/ex-verify.c, lib/auth_cert.h, - lib/gnutls_cert.c, lib/gnutls_x509.c, lib/includes/gnutls/compat.h, - lib/includes/gnutls/gnutls.h.in, lib/includes/gnutls/x509.h, - lib/libgnutls.map, lib/x509/crl.c, lib/x509/x509.c, src/certtool.c, - tests/certificate_set_x509_crl.c: The internal subsystem uses the - new certificate verification functions. This has the side effect of - deprecating gnutls_certificate_get_x509_crls() and - gnutls_certificate_get_x509_cas() that can no longer operation since - they relied on internal structures. - -2011-01-31 Nikos Mavrogiannopoulos - - * NEWS, doc/cha-gtls-app.texi, doc/examples/ex-verify.c, - lib/Makefile.am, lib/hash.c, lib/hash.h, - lib/includes/gnutls/x509.h, lib/libgnutls.map, - lib/x509/Makefile.am, lib/x509/crl.c, lib/x509/verify-high.c, - lib/x509/verify.c, lib/x509/x509.c, lib/x509/x509_int.h, - src/certtool.c: Added a new API to verify certificates. It is more - efficient and can be used to get details about the verification - procedure. - -2011-01-31 Nikos Mavrogiannopoulos - - * tests/x509paths/chain: better output in chain output. - -2011-01-30 Nikos Mavrogiannopoulos - - * NEWS, lib/includes/gnutls/x509.h, lib/x509/crl.c, - lib/x509/verify.c, lib/x509/x509.c: exported - gnutls_x509_crl_get_raw_issuer_dn() - -2011-01-30 Nikos Mavrogiannopoulos - - * lib/x509/x509.c: corrected typos - -2011-01-19 Nikos Mavrogiannopoulos - - * lib/pakchois/pakchois.c: CKR_CRYPTOKI_ALREADY_INITIALIZED is not - treated as an error, and Finalize is not called in that case. - -2011-01-16 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_privkey.c, lib/includes/gnutls/compat.h, - lib/openpgp/privkey.c: Reverted removal of - gnutls_openpgp_privkey_sign_hash() to retain compatibility with - 2.10.x. That function is now deprecated instead. - -2011-01-16 Nikos Mavrogiannopoulos - - * lib/gnutls_privkey.c: Added checks before importing keys and - updated documentation. - -2011-01-15 Nikos Mavrogiannopoulos - - * tests/suite/Makefile.in: updated Makefile.in - -2011-01-15 Nikos Mavrogiannopoulos - - * doc/examples/ex-crq.c, lib/configure.ac, - lib/includes/gnutls/compat.h, lib/includes/gnutls/gnutls.h.in, - lib/includes/gnutls/x509.h, src/certtool.c, tests/crq_key_id.c: - fixes in internal build with the new deprecated functions. We allow - them to be used since they are inter-dependent. - -2011-01-15 Nikos Mavrogiannopoulos - - * lib/x509/x509_int.h: replaced old gnutls_pk_algorithm. - -2011-01-15 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/compat.h: depends on gnutls/x509.h to compile. - -2011-01-15 Nikos Mavrogiannopoulos - - * NEWS, lib/includes/gnutls/compat.h, lib/includes/gnutls/x509.h, - lib/x509/crl_write.c: deprecated gnutls_x509_crl_sign(), - gnutls_x509_crl_sign2() and - gnutls_x509_crq_get_preferred_hash_algorithm(). - -2011-01-15 Nikos Mavrogiannopoulos - - * NEWS, lib/includes/gnutls/compat.h, lib/includes/gnutls/x509.h, - lib/x509/crq.c: Deprecated gnutls_x509_crq_sign2() and - gnutls_x509_crq_sign() in favor for gnutls_x509_crq_privkey_sign(). - -2011-01-15 Nikos Mavrogiannopoulos - - * NEWS, lib/libgnutls.map: minor fixes. - -2011-01-15 Nikos Mavrogiannopoulos - - * NEWS, lib/includes/gnutls/compat.h, lib/includes/gnutls/x509.h, - lib/libgnutls.map, lib/x509/privkey.c, lib/x509/x509.c, - src/certtool.c, tests/cve-2009-1415.c, tests/x509sign-verify.c: - gnutls_x509_crt_verify_hash: DEPRECATED gnutls_x509_crt_verify_data: - DEPRECATED gnutls_x509_crt_get_verify_algorithm: DEPRECATED - gnutls_x509_crt_get_preferred_hash_algorithm: DEPRECATED Removed the - new gnutls_x509_privkey_sign_data2() and - gnutls_x509_privkey_sign_hash2(). That functionality will be only in the abstract.h pubkey and privkey - structures, to avoid duplication for every certificate type. - -2011-01-15 Nikos Mavrogiannopoulos - - * src/serv.c: Simplified macro to snprintf() in order to prevent - issues caused when snprintf() is a macro itself. Reported and - initial patch by Camillo Lugaresi. - -2011-01-11 Nikos Mavrogiannopoulos - - * tests/suite/Makefile.in: Revert "Remove, it is generated." This reverts commit de3a601e502b24f047412a161085f7fbd898b3f3 because - this file is not automatically generated (not included in top - Makefile.am). - -2011-01-02 Simon Josefsson - - * lib/m4/hooks.m4: Specify minimum libgcrypt version. - -2010-12-23 Nikos Mavrogiannopoulos - - * doc/cha-internals.texi: Added discussion on crypto backend for - crypto libraries and /dev/crypto. - -2010-12-21 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_privkey.c, lib/includes/gnutls/abstract.h, - lib/includes/gnutls/compat.h, lib/includes/gnutls/x509.h, - lib/x509/crq.c, lib/x509/privkey.c, lib/x509/sign.c: Renamed - gnutls_privkey_sign_data() to gnutls_privkey_sign_data2() to match - the similar function gnutls_x509_privkey_sign_data2(). - gnutls_x509_privkey_sign_data() was deprecated. - -2010-12-19 Nikos Mavrogiannopoulos - - * lib/gnutls_str.c: Extra sanity check. - -2010-12-19 Nikos Mavrogiannopoulos - - * lib/auth_srp_passwd.c: Use snprintf() to print an integer. - -2010-12-19 Nikos Mavrogiannopoulos - - * lib/x509/output.c: Use snprintf() to print IPs. There was a check - just before that, but be safe, just in case. - -2010-12-19 Nikos Mavrogiannopoulos - - * doc/cha-auth.texi: Use SRP for password authentication. - -2010-12-19 Nikos Mavrogiannopoulos - - * doc/cha-auth.texi, lib/gnutls_cert.c, lib/gnutls_extensions.c, - lib/gnutls_psk_netconf.c, lib/gnutls_state.c, - lib/includes/gnutls/compat.h, lib/x509/privkey.c: Do not include - deprecated functions to library documentation. - -2010-12-19 Nikos Mavrogiannopoulos - - * NEWS, lib/includes/gnutls/compat.h, lib/includes/gnutls/x509.h, - lib/x509/privkey.c: gnutls_x509_privkey_verify_data() was - deprecated. - -2010-12-19 Nikos Mavrogiannopoulos - - * lib/gnutls_pubkey.c: Documented key usage of pubkey. - -2010-12-19 Nikos Mavrogiannopoulos - - * lib/gnutls_pubkey.c: Set public key bits on all import functions. - Issue reported by Murray Kucheawy. - -2010-12-19 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_privkey.c, lib/includes/gnutls/pkcs11.h, - lib/pkcs11_int.h, lib/pkcs11_privkey.c: - gnutls_pkcs11_privkey_sign_data(), - gnutls_pkcs11_privkey_sign_hash2() and - gnutls_pkcs11_privkey_decrypt_data() were removed. The abstract.h - functions should be used instead. - -2010-12-19 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_privkey.c, lib/includes/gnutls/openpgp.h, - lib/openpgp/gnutls_openpgp.h, lib/openpgp/pgp.c, - lib/openpgp/privkey.c: Removed the newly added functions: - gnutls_openpgp_privkey_sign_hash2(), - gnutls_openpgp_privkey_sign_data2(), - gnutls_openpgp_crt_verify_hash() That way the operations in - abstract.h should be used to get the same functionality, and API - will be kept simple and easier to maintain. The corresponding - gnutls_x509_* are kept for backwards compatibility. - -2010-12-18 Nikos Mavrogiannopoulos - - * lib/gnutls_sig.c: Do not be strict on RSA hash algorithm selection - for signatures. - -2010-12-18 Nikos Mavrogiannopoulos - - * lib/gnutls_cert.h, lib/gnutls_sig.c, lib/gnutls_x509.c: Removed - unneeded definitions, and more careful deinitializations in - parse_der_cert_mem(). - -2010-12-18 Nikos Mavrogiannopoulos - - * tests/pathlen/ca-no-pathlen.pem, - tests/pathlen/no-ca-or-pathlen.pem: updated certificates to account - for extra null byte added in negative numbers. - -2010-12-18 Nikos Mavrogiannopoulos - - * tests/cve-2009-1415.c: Account for GNUTLS_E_PK_SIG_VERIFY_FAILED. - -2010-12-18 Nikos Mavrogiannopoulos - - * lib/gnutls_privkey.c: Corrected bug in gnutls_privkey_sign_data(). - -2010-12-18 Nikos Mavrogiannopoulos - - * lib/gnutls_sig.c: some fixes in pk_prepare_hash(). - -2010-12-18 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_pubkey.c, lib/openpgp/pgp.c, lib/x509/privkey.c, - lib/x509/verify.c, lib/x509/x509.c, tests/x509sign-verify.c: The - verification functions now return a GNUTLS_E_PK_SIG_VERIFY_FAILED on - signature verification error. - -2010-12-18 Nikos Mavrogiannopoulos - - * src/p11tool-gaa.c, src/p11tool.gaa: The default input format for - p11tool is PEM. - -2010-12-16 Nikos Mavrogiannopoulos - - * lib/gnutls_pubkey.c: importing a pubkey from raw params will set - the bits field correctly. - -2010-12-16 Nikos Mavrogiannopoulos - - * NEWS: Documented the addtion of gnutls_pubkey_import_privkey() and - gnutls_pubkey_verify_data() - -2010-12-16 Nikos Mavrogiannopoulos - - * lib/gnutls_pubkey.c, lib/includes/gnutls/abstract.h, - lib/libgnutls.map, lib/x509/verify.c, tests/x509sign-verify.c: Added - gnutls_pubkey_verify_data and test vectors. - -2010-12-16 Nikos Mavrogiannopoulos - - * doc/errcodes.c, doc/examples/ex-alert.c, - doc/examples/ex-cert-select-pkcs11.c, - doc/examples/ex-cert-select.c, doc/examples/ex-client-psk.c, - doc/examples/ex-client-resume.c, doc/examples/ex-client-srp.c, - doc/examples/ex-client-tlsia.c, doc/examples/ex-client1.c, - doc/examples/ex-client2.c, doc/examples/ex-crq.c, - doc/examples/ex-pkcs12.c, doc/examples/ex-rfc2818.c, - doc/examples/ex-serv-anon.c, doc/examples/ex-serv-pgp.c, - doc/examples/ex-serv-psk.c, doc/examples/ex-serv-srp.c, - doc/examples/ex-serv1.c, doc/examples/ex-session-info.c, - doc/examples/ex-verify.c, doc/examples/ex-x509-info.c, - doc/examples/examples.h, doc/examples/tcp.c, doc/printlist.c, - guile/src/core.c, guile/src/extra.c, guile/src/utils.h, - lib/abstract_int.h, lib/auth_anon.c, lib/auth_cert.c, - lib/auth_cert.h, lib/auth_dh_common.c, lib/auth_dh_common.h, - lib/auth_dhe.c, lib/auth_dhe_psk.c, lib/auth_psk.c, - lib/auth_psk_passwd.c, lib/auth_psk_passwd.h, lib/auth_rsa.c, - lib/auth_rsa_export.c, lib/auth_srp.c, lib/auth_srp.h, - lib/auth_srp_passwd.c, lib/auth_srp_passwd.h, lib/auth_srp_rsa.c, - lib/auth_srp_sb64.c, lib/crypto-api.c, lib/crypto.c, lib/crypto.h, - lib/cryptodev.c, lib/debug.c, lib/ext_cert_type.c, - lib/ext_max_record.c, lib/ext_safe_renegotiation.c, - lib/ext_safe_renegotiation.h, lib/ext_server_name.c, - lib/ext_session_ticket.c, lib/ext_signature.c, lib/ext_signature.h, - lib/ext_srp.c, lib/gcrypt/cipher.c, lib/gcrypt/init.c, - lib/gcrypt/mac.c, lib/gcrypt/mpi.c, lib/gcrypt/pk.c, - lib/gnutls_alert.c, lib/gnutls_algorithms.c, - lib/gnutls_algorithms.h, lib/gnutls_anon_cred.c, lib/gnutls_auth.c, - lib/gnutls_auth.h, lib/gnutls_buffers.c, lib/gnutls_buffers.h, - lib/gnutls_cert.c, lib/gnutls_cert.h, lib/gnutls_cipher.c, - lib/gnutls_cipher.h, lib/gnutls_cipher_int.c, - lib/gnutls_cipher_int.h, lib/gnutls_compress.c, - lib/gnutls_compress.h, lib/gnutls_constate.c, - lib/gnutls_constate.h, lib/gnutls_datum.c, lib/gnutls_datum.h, - lib/gnutls_db.c, lib/gnutls_db.h, lib/gnutls_dh.c, lib/gnutls_dh.h, - lib/gnutls_dh_primes.c, lib/gnutls_errors.c, - lib/gnutls_extensions.c, lib/gnutls_extensions.h, - lib/gnutls_global.c, lib/gnutls_handshake.c, - lib/gnutls_handshake.h, lib/gnutls_hash_int.c, - lib/gnutls_hash_int.h, lib/gnutls_int.h, lib/gnutls_kx.c, - lib/gnutls_kx.h, lib/gnutls_mbuffers.c, lib/gnutls_mbuffers.h, - lib/gnutls_mem.h, lib/gnutls_mpi.c, lib/gnutls_mpi.h, - lib/gnutls_num.c, lib/gnutls_pk.c, lib/gnutls_pk.h, - lib/gnutls_priority.c, lib/gnutls_privkey.c, lib/gnutls_psk.c, - lib/gnutls_psk_netconf.c, lib/gnutls_pubkey.c, lib/gnutls_record.c, - lib/gnutls_record.h, lib/gnutls_rsa_export.c, lib/gnutls_session.c, - lib/gnutls_session_pack.c, lib/gnutls_session_pack.h, - lib/gnutls_sig.c, lib/gnutls_sig.h, lib/gnutls_srp.c, - lib/gnutls_srp.h, lib/gnutls_state.c, lib/gnutls_state.h, - lib/gnutls_str.c, lib/gnutls_str.h, lib/gnutls_supplemental.c, - lib/gnutls_supplemental.h, lib/gnutls_ui.c, lib/gnutls_v2_compat.c, - lib/gnutls_v2_compat.h, lib/gnutls_x509.c, lib/gnutls_x509.h, - lib/includes/gnutls/abstract.h, lib/includes/gnutls/compat.h, - lib/includes/gnutls/crypto.h, lib/includes/gnutls/gnutls.h.in, - lib/includes/gnutls/gnutlsxx.h, lib/includes/gnutls/openpgp.h, - lib/includes/gnutls/pkcs11.h, lib/includes/gnutls/pkcs12.h, - lib/includes/gnutls/x509.h, lib/locks.c, lib/nettle/cipher.c, - lib/nettle/egd.c, lib/nettle/mpi.c, lib/nettle/pk.c, - lib/nettle/rnd.c, lib/opencdk/armor.c, lib/opencdk/context.h, - lib/opencdk/dummy.c, lib/opencdk/filters.h, lib/opencdk/hash.c, - lib/opencdk/kbnode.c, lib/opencdk/keydb.c, lib/opencdk/keydb.h, - lib/opencdk/literal.c, lib/opencdk/main.c, lib/opencdk/main.h, - lib/opencdk/misc.c, lib/opencdk/new-packet.c, - lib/opencdk/opencdk.h, lib/opencdk/packet.h, lib/opencdk/pubkey.c, - lib/opencdk/read-packet.c, lib/opencdk/seskey.c, - lib/opencdk/sig-check.c, lib/opencdk/stream.c, - lib/opencdk/stream.h, lib/opencdk/verify.c, - lib/opencdk/write-packet.c, lib/openpgp/compat.c, - lib/openpgp/extras.c, lib/openpgp/gnutls_openpgp.c, - lib/openpgp/gnutls_openpgp.h, lib/openpgp/openpgp_int.h, - lib/openpgp/output.c, lib/openpgp/pgp.c, lib/openpgp/pgpverify.c, - lib/openpgp/privkey.c, lib/pakchois/pakchois.c, - lib/pakchois/pakchois.h, lib/pakchois/pakchois11.h, lib/pkcs11.c, - lib/pkcs11_int.h, lib/pkcs11_privkey.c, lib/pkcs11_secret.c, - lib/pkcs11_write.c, lib/random.c, lib/system.c, lib/system.h, - lib/x509/common.c, lib/x509/common.h, lib/x509/crl.c, - lib/x509/crl_write.c, lib/x509/crq.c, lib/x509/dn.c, - lib/x509/extensions.c, lib/x509/mpi.c, lib/x509/output.c, - lib/x509/pbkdf2-sha1.c, lib/x509/pbkdf2-sha1.h, lib/x509/pkcs12.c, - lib/x509/pkcs12_bag.c, lib/x509/pkcs12_encr.c, lib/x509/pkcs7.c, - lib/x509/privkey.c, lib/x509/privkey_pkcs8.c, - lib/x509/rfc2818_hostname.c, lib/x509/sign.c, lib/x509/verify.c, - lib/x509/x509.c, lib/x509/x509_int.h, lib/x509/x509_write.c, - lib/x509_b64.c, lib/x509_b64.h, libextra/ext_inner_application.c, - libextra/ext_inner_application.h, libextra/gnutls_extra.c, - libextra/gnutls_ia.c, libextra/gnutls_openssl.c, - libextra/includes/gnutls/extra.h, - libextra/includes/gnutls/openssl.h, libextra/openssl_compat.c, - libextra/openssl_compat.h, maint.mk, src/benchmark.c, - src/certtool-cfg.c, src/certtool-cfg.h, src/certtool-common.c, - src/certtool-common.h, src/certtool.c, src/cli.c, src/common.c, - src/common.h, src/crypt.c, src/p11tool.c, src/p11tool.h, - src/pkcs11.c, src/prime.c, src/psk.c, src/serv.c, src/tests.c, - src/tests.h, src/tls_test.c, tests/anonself.c, - tests/certificate_set_x509_crl.c, tests/chainverify.c, - tests/crq_apis.c, tests/crq_key_id.c, tests/cve-2008-4989.c, - tests/dhepskself.c, tests/dn.c, tests/dn2.c, tests/gc.c, - tests/mini-eagain.c, tests/mini-x509-rehandshake.c, - tests/mini-x509.c, tests/mini.c, tests/mpi.c, - tests/nul-in-x509-names.c, tests/openpgp-auth.c, - tests/openpgp-keyring.c, tests/openpgp_test.c, tests/openpgpself.c, - tests/openssl.c, tests/pgps2kgnu.c, tests/pkcs12_encode.c, - tests/pkcs12_s2k.c, tests/pkcs12_s2k_pem.c, tests/pskself.c, - tests/resume.c, tests/safe-renegotiation/srn0.c, - tests/safe-renegotiation/srn1.c, tests/safe-renegotiation/srn2.c, - tests/safe-renegotiation/srn3.c, tests/safe-renegotiation/srn4.c, - tests/safe-renegotiation/srn5.c, tests/set_pkcs12_cred.c, - tests/simple.c, tests/tlsia.c, tests/utils.c, tests/utils.h, - tests/x509_altname.c, tests/x509_test.c, tests/x509dn.c, - tests/x509self.c, tests/x509sign-verify.c: Indented code. Use same - indentation but with -nut to avoid usage of tabs. In several editors - tabs can be configured not to be 8 spaces and this produces - artifacts with the current indentation that is a mixture of tabs and - spaces. - -2010-12-16 Nikos Mavrogiannopoulos - - * lib/gnutls_privkey.c: _gnutls_privkey_get_public_mpis() handles - openpgp keys. - -2010-12-16 Nikos Mavrogiannopoulos - - * lib/abstract_int.h, lib/gnutls_privkey.c, lib/gnutls_pubkey.c, - lib/includes/gnutls/abstract.h, lib/libgnutls.map: Added - gnutls_pubkey_import_privkey(), that will copy the public key from a - gnutls_privkey_t structure. - -2010-12-15 Nikos Mavrogiannopoulos - - * NEWS, lib/libgnutls.map: Do not export the non-existant symbols - gnutls_pkcs11_privkey_sign_hash and gnutls_privkey_sign_hash. - -2010-12-13 Nikos Mavrogiannopoulos - - * NEWS: documented new functions - -2010-12-13 Nikos Mavrogiannopoulos - - * NEWS: Added new functions. - -2010-12-13 Nikos Mavrogiannopoulos - - * lib/libgnutls.map: Added new functions. - -2010-12-13 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/compat.h, lib/includes/gnutls/x509.h: - de-deprecated gnutls_x509_crt_verify_hash() - -2010-12-13 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/openpgp.h, lib/libgnutls.map, - lib/openpgp/pgp.c, tests/x509sign-verify.c: Added - gnutls_openpgp_crt_verify_hash(). - -2010-12-13 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/pkcs11.h, lib/pkcs11_privkey.c: added - gnutls_privkey_sign_hash2() - -2010-12-13 Nikos Mavrogiannopoulos - - * lib/gnutls_privkey.c, lib/gnutls_sig.c, lib/gnutls_sig.h, - lib/openpgp/privkey.c, lib/pkcs11_privkey.c, lib/x509/privkey.c: - Simplified preparation of signing code. - -2010-12-12 Nikos Mavrogiannopoulos - - * lib/gnutls_privkey.c, lib/gnutls_pubkey.c, lib/gnutls_sig.c, - lib/gnutls_sig.h, lib/openpgp/gnutls_openpgp.h, - lib/openpgp/privkey.c, lib/pkcs11_int.h, lib/pkcs11_privkey.c, - lib/x509/Makefile.am, lib/x509/privkey.c, lib/x509/sign.c, - lib/x509/sign.h: deprecated x509/sign.h and moved functionality of - it in gnutls_sig.h. - -2010-12-12 Nikos Mavrogiannopoulos - - * lib/x509/sign.c: pk_hash_data() will fail unless DSA or RSA are - specified. - -2010-12-12 Nikos Mavrogiannopoulos - - * lib/x509/privkey.c: better comments - -2010-12-12 Nikos Mavrogiannopoulos - - * lib/openpgp/gnutls_openpgp.c, lib/openpgp/privkey.c: - reorganization of the privkey_ functions(). - -2010-12-11 Nikos Mavrogiannopoulos - - * lib/gnutls_privkey.c, lib/includes/gnutls/abstract.h, - lib/includes/gnutls/compat.h, lib/includes/gnutls/openpgp.h, - lib/includes/gnutls/x509.h, lib/libgnutls.map, - lib/openpgp/gnutls_openpgp.c, lib/x509/privkey.c: Introduced - gnutls_*_privkey_sign_hash2() that is a high level function to - produce signatures. - -2010-12-11 Nikos Mavrogiannopoulos - - * lib/gnutls_privkey.c, lib/pkcs11_privkey.c, lib/x509/privkey.c, - lib/x509/sign.c, lib/x509/sign.h: Separated the sign_data functions - to a hashing phase, a preparing phase, and the actual signing. - -2010-12-11 Nikos Mavrogiannopoulos - - * NEWS: documented deprecated functions. - -2010-12-09 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/compat.h, lib/includes/gnutls/openpgp.h, - lib/includes/gnutls/pkcs11.h: All the sign hash functions were - deprecated. - -2010-12-09 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/compat.h, lib/includes/gnutls/x509.h: - gnutls_x509_privkey_sign_hash() is dangerous and was deprecated. - Added some text explaining why some functions were deprecated. - -2010-12-08 Nikos Mavrogiannopoulos - - * NEWS: documented previous update. - -2010-12-08 Nikos Mavrogiannopoulos - - * lib/x509/privkey.c, lib/x509/x509.c: export_raw() functions now - add leading zero in mpis. - -2010-12-07 Simon Josefsson - - * NEWS: Add. - -2010-12-07 Simon Josefsson - - * lib/includes/gnutls/crypto.h: C++ fixes, tiny patch from "Brendan - Doherty" . - -2010-12-07 Simon Josefsson - - * gl/m4/getdelim.m4, gl/m4/getline.m4, gl/m4/memchr.m4, - gl/m4/printf.m4, gl/m4/stdint.m4, lib/gl/m4/fcntl-o.m4, - lib/gl/m4/iconv.m4, lib/gl/m4/intdiv0.m4, lib/gl/m4/memchr.m4, - lib/gl/m4/memmem.m4, lib/gl/m4/printf.m4, lib/gl/m4/stdint.m4: - Update gnulib files. - -2010-12-07 Simon Josefsson - - * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump versions. - -2010-12-07 Simon Josefsson - - * ChangeLog: Generated. - -2010-12-07 Simon Josefsson - - * configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump versions. - -2010-12-06 Simon Josefsson - - * ChangeLog: Generated. - -2010-12-06 Simon Josefsson - - * tests/Makefile.am: Don't fail on 'make distcheck'. - -2010-12-06 Simon Josefsson - - * NEWS: Version 2.11.6. - -2010-12-06 Simon Josefsson - - * lib/gnutls_str.c: Indent. - -2010-12-06 Nikos Mavrogiannopoulos - - * NEWS: documented SSL 3.0 record version change. - -2010-12-06 Nikos Mavrogiannopoulos - - * lib/gnutls_handshake.c, lib/gnutls_int.h, lib/gnutls_priority.c: - SSL3_RECORD_VERSION priority option is now the default. That is in - order to not confuse non TLS 1.2 compliant implementations that - don't like a TLS 1.2 record. - -2010-12-06 Nikos Mavrogiannopoulos - - * lib/gnutls_str.c: simplified escape and unescape. - -2010-12-05 Nikos Mavrogiannopoulos - - * THANKS: Added Michael. - -2010-12-06 Simon Josefsson - - * cfg.mk, lib/gnutls_priority.c, lib/gnutls_state.c, - lib/includes/gnutls/compat.h, lib/includes/gnutls/gnutls.h.in, - lib/includes/gnutls/pkcs11.h, lib/nettle/rnd.c, lib/pkcs11.c, - lib/pkcs11_int.h, lib/pkcs11_secret.c, lib/pkcs11_write.c, - lib/x509/verify.c, src/certtool-common.c, src/certtool-common.h, - src/certtool.c, src/cli.c, src/common.c, src/p11tool.c, - src/p11tool.h, src/pkcs11.c, src/serv.c, tests/chainverify.c, - tests/openpgp-auth.c: Indent code. - -2010-12-06 Simon Josefsson - - * maint.mk: Update gnulib files. - -2010-12-06 Simon Josefsson - - * gl/override/top/maint.mk.diff: Remove. - -2010-12-06 Simon Josefsson - - * .gitignore: Update. - -2010-12-06 Simon Josefsson - - * lib/gnutls_priority.c, lib/pkcs11_secret.c, src/p11tool.c, - src/p11tool.gaa: Fix syntax-check nits. - -2010-12-06 Simon Josefsson - - * .x-sc_bindtextdomain: Ignore more. - -2010-12-06 Simon Josefsson - - * GNUmakefile, build-aux/gendocs.sh, build-aux/pmccabe.css, - build-aux/pmccabe2html, gl/Makefile.am, gl/arpa_inet.in.h, - gl/float+.h, gl/gettext.h, gl/inet_ntop.c, gl/intprops.h, - gl/m4/alloca.m4, gl/m4/arpa_inet_h.m4, gl/m4/getdelim.m4, - gl/m4/getline.m4, gl/m4/getpass.m4, gl/m4/gnulib-common.m4, - gl/m4/gnulib-comp.m4, gl/m4/mmap-anon.m4, gl/m4/printf.m4, - gl/m4/readline.m4, gl/m4/string_h.m4, gl/m4/sys_ioctl_h.m4, - gl/m4/sys_select_h.m4, gl/m4/sys_socket_h.m4, gl/m4/unistd_h.m4, - gl/m4/vasnprintf.m4, gl/m4/wchar_h.m4, gl/printf-parse.c, - gl/printf-parse.h, gl/stdint.in.h, gl/stdio.in.h, gl/stdlib.in.h, - gl/string.in.h, gl/sys_select.in.h, gl/sys_socket.in.h, - gl/tests/Makefile.am, gl/tests/init.sh, - gl/tests/test-select-stdin.c, gl/tests/test-select.c, - gl/tests/test-update-copyright.sh, gl/tests/verify.h, gl/time.in.h, - gl/unistd.in.h, gl/vasnprintf.c, gl/verify.h, gl/wchar.in.h, - lib/gl/Makefile.am, lib/gl/float+.h, lib/gl/gettext.h, - lib/gl/m4/alloca.m4, lib/gl/m4/glibc2.m4, lib/gl/m4/glibc21.m4, - lib/gl/m4/gnulib-common.m4, lib/gl/m4/gnulib-comp.m4, - lib/gl/m4/iconv.m4, lib/gl/m4/memmem.m4, lib/gl/m4/mmap-anon.m4, - lib/gl/m4/printf.m4, lib/gl/m4/string_h.m4, - lib/gl/m4/sys_socket_h.m4, lib/gl/m4/unistd_h.m4, - lib/gl/m4/vasnprintf.m4, lib/gl/m4/wchar_h.m4, - lib/gl/printf-parse.c, lib/gl/printf-parse.h, lib/gl/stdint.in.h, - lib/gl/stdio.in.h, lib/gl/stdlib.in.h, lib/gl/string.in.h, - lib/gl/sys_socket.in.h, lib/gl/tests/Makefile.am, - lib/gl/tests/init.sh, lib/gl/tests/intprops.h, - lib/gl/tests/verify.h, lib/gl/time.in.h, lib/gl/unistd.in.h, - lib/gl/vasnprintf.c, lib/gl/verify.h, lib/gl/wchar.in.h, - libextra/gl/m4/gnulib-common.m4, maint.mk: Update gnulib files. - -2010-12-05 Nikos Mavrogiannopoulos - - * tests/Makefile.am: Temporarily remove gendh test. It takes - extremely long time under valgrind. - -2010-12-05 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_sig.c, lib/x509/common.c, lib/x509/common.h, - lib/x509/mpi.c, lib/x509/sign.c, lib/x509/verify.c: Use ASN1_NULL - when writing parameters for RSA signatures. This makes us comply - with RFC3279. Reported by Michael Rommel. - -2010-12-05 Nikos Mavrogiannopoulos - - * NEWS, src/serv.c: Corrected buffer overflow in gnutls-serv by - Tomas Mraz. The gnutls-serv uses fixed allocated buffer for the response which - can be pretty long if a client certificate is presented to it and - the http header is large. This causes buffer overflow and heap - corruption which then leads to random segfaults or aborts. It was reported originally here: - https://bugzilla.redhat.com/show_bug.cgi?id=659259 The attached patch changes sprintf calls in peer_print_info() to - snprintf so the buffer is never overflowed. - -2010-12-01 Nikos Mavrogiannopoulos - - * lib/m4/hooks.m4: increased revision - -2010-12-01 Nikos Mavrogiannopoulos - - * src/Makefile.am: Added p11tool.h - -2010-12-01 Nikos Mavrogiannopoulos - - * NEWS: released 2.11.5 - -2010-12-01 Nikos Mavrogiannopoulos - - * doc/cha-internals.texi: escaped chars. - -2010-12-01 Nikos Mavrogiannopoulos - - * doc/cha-internals.texi: Updated extension writing code. Still not - clear enough. - -2010-12-01 Nikos Mavrogiannopoulos - - * doc/cha-cert-auth.texi: PKCS #11 fixes - -2010-12-01 Nikos Mavrogiannopoulos - - * doc/examples/ex-cert-select-pkcs11.c: Corrected pkcs11 example - URLs - -2010-11-30 Nikos Mavrogiannopoulos - - * src/pkcs11.c: Prefix mechanism number with 0x. - -2010-11-30 Nikos Mavrogiannopoulos - - * lib/pakchois/pakchois11.h, src/pkcs11.c: Added camellia and - SHA224. - -2010-11-27 Nikos Mavrogiannopoulos - - * configure.ac, lib/configure.ac, lib/nettle/rnd.c: Use rusage if - present. Moved check to correct config and included resource.h - header. - -2010-11-27 Nikos Mavrogiannopoulos - - * lib/nettle/rnd.c: More details on the text - -2010-11-27 Nikos Mavrogiannopoulos - - * lib/pkcs11.c: Corrected copyright statement - -2010-11-27 Nikos Mavrogiannopoulos - - * lib/nettle/rnd.c: Corrected copyright header. Added Niels. - -2010-11-26 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_cert.c, lib/includes/gnutls/x509.h, - lib/x509/verify.c, src/certtool.c, src/cli.c, tests/chainverify.c: - Reverted default behavior for verification and introduced - GNUTLS_VERIFY_DO_NOT_ALLOW_X509_V1_CA_CRT. Thus by default V1 - trusted CAs are allowed, unless the new flag is specified. - -2010-11-25 Simon Josefsson - - * NEWS: Typo. - -2010-11-25 Simon Josefsson - - * tests/suite/Makefile.in: Remove, it is generated. - -2010-11-25 Simon Josefsson - - * README: No space at eol. - -2010-11-25 Simon Josefsson - - * tests/safe-renegotiation/Makefile.am: Fix syntax-check warning. - -2010-11-25 Simon Josefsson - - * cfg.mk: Ignore tests/suite for syntax-checks, not our code. - -2010-11-25 Simon Josefsson - - * README: Recommend git format-patch rather than git diff. - -2010-11-24 Jeffrey Walton - - * README: Attached is a proposed modification to the README file, - including recent comments by Simon. - -2010-11-23 Simon Josefsson - - * guile/src/Makefile.am: Fix dependencies, fixes parallel builds. Tiny patch from Graham Gower . - -2010-11-19 Simon Josefsson - - * doc/Makefile.am: Remove file. - -2010-11-19 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2010-11-19 Nikos Mavrogiannopoulos - - * configure.ac, tests/suite/Makefile.in: Create Makefile in - tests/suite/ - -2010-11-19 Nikos Mavrogiannopoulos - - * src/cli.c, src/psk-gaa.c, src/psk-gaa.h, src/psk.c, src/psk.gaa, - tests/Makefile.am, tests/netconf-psk.c: Deprecate the netconf - password and use a key only. - -2010-11-19 Nikos Mavrogiannopoulos - - * doc/credentials/gnutls-http-serv: correctly set psk params. - -2010-11-16 Nikos Mavrogiannopoulos - - * NEWS: added info - -2010-11-16 Nikos Mavrogiannopoulos - - * lib/x509/privkey_pkcs8.c: Correctly write DSA public key in ASN.1 - (add leading zero). Reported by Jeffrey Walton. - -2010-11-16 Nikos Mavrogiannopoulos - - * lib/x509/mpi.c: cleanups - -2010-11-16 Nikos Mavrogiannopoulos - - * doc/cha-auth.texi, lib/includes/gnutls/compat.h, - lib/includes/gnutls/gnutls.h.in: Deprecated the key derivation - method from netconf. The published RFC does not include this method - and it is not known whether it has been used at all in practice. No - need to support it. - -2010-11-16 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_priority.c: Added SIGN-ALL, CTYPE-ALL, COMP-ALL, - and VERS-TLS-ALL priority strings. - -2010-11-11 Nikos Mavrogiannopoulos - - * lib/gnutls_x509.c: Removed redundant error check. Reported by - Nicolas Kaiser. - -2010-11-11 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/pkcs11.h, lib/libgnutls.map, lib/pkcs11.c, - src/p11tool-gaa.c, src/p11tool-gaa.h, src/p11tool.c, - src/p11tool.gaa, src/p11tool.h, src/pkcs11.c: Added - --list-mechanisms option to p11tool. Lists all mechanisms supported - by a token. - -2010-11-11 Nikos Mavrogiannopoulos - - * doc/manpages/Makefile.am, doc/manpages/p11tool.1: Added manpage - for p11tool. - -2010-11-11 Nikos Mavrogiannopoulos - - * doc/manpages/certtool.1, doc/manpages/gnutls-cli.1, - doc/manpages/gnutls-serv.1, doc/manpages/srptool.1: Corrected my - name. - -2010-11-11 Nikos Mavrogiannopoulos - - * src/p11tool-gaa.c, src/p11tool.gaa: In p11tool --url was renamed - to --export. - -2010-11-11 Nikos Mavrogiannopoulos - - * src/p11tool-gaa.c, src/p11tool-gaa.h, src/p11tool.gaa, - src/pkcs11.c: Corrected bug in secret key copy. Rationalized the - --help of p11tool. - -2010-11-11 Nikos Mavrogiannopoulos - - * lib/pkcs11.c, lib/pkcs11_secret.c: * Corrected flag conversion to internal representation. * When generating secret keys include a generic key type and a - random ID. - -2010-11-11 Nikos Mavrogiannopoulos - - * src/p11tool-gaa.c, src/p11tool-gaa.h, src/p11tool.gaa: Added - option --no-detailed-url to p11tool. More detailed url is the - default now. - -2010-11-07 Nikos Mavrogiannopoulos - - * NEWS, lib/Makefile.am, lib/includes/gnutls/pkcs11.h, - lib/libgnutls.map, lib/pkcs11.c, lib/pkcs11_int.h, - lib/pkcs11_secret.c, lib/pkcs11_write.c, src/pkcs11.c: Added - gnutls_pkcs11_token_set_pin() and gnutls_pkcs11_token_init() to - enable manipulating tokens purely from PKCS #11. - -2010-11-07 Nikos Mavrogiannopoulos - - * doc/README.gaa: Removed README.gaa. - -2010-11-07 Nikos Mavrogiannopoulos - - * .gitignore, src/Makefile.am, src/certtool-common.c, - src/certtool-common.h, src/certtool-gaa.c, src/certtool-gaa.h, - src/certtool.c, src/certtool.gaa, src/p11tool-gaa.c, - src/p11tool-gaa.h, src/p11tool.c, src/p11tool.gaa, src/p11tool.h, - src/pkcs11.c: Introduced p11tool to separate PKCS #11 functionality - from certtool. - -2010-11-07 Nikos Mavrogiannopoulos - - * tests/Makefile.am, tests/finished.c: Removed check on deprecated - feature (finished). - -2010-11-04 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/compat.h, lib/includes/gnutls/gnutls.h.in: - Deprecated old functions. - -2010-11-01 Nikos Mavrogiannopoulos - - * doc/cha-intro-tls.texi: use @code for SAFE_RENEGOTIATION string. - -2010-06-07 Simon Josefsson - - * lib/gnutls_priority.c: Doc fix. - -2010-10-16 Simon Josefsson - - * .gitignore: Add. - -2010-10-16 Nikos Mavrogiannopoulos - - * tests/Makefile.am, tests/safe-renegotiation/Makefile.am, - tests/safe-renegotiation/params.dh, - tests/safe-renegotiation/testsrn, tests/suite/Makefile.am, - tests/suite/README, tests/suite/eagain, - tests/suite/ecore/eina_config.h, - tests/suite/ecore/src/include/Eina.h, - tests/suite/ecore/src/include/eina_accessor.h, - tests/suite/ecore/src/include/eina_array.h, - tests/suite/ecore/src/include/eina_benchmark.h, - tests/suite/ecore/src/include/eina_binshare.h, - tests/suite/ecore/src/include/eina_config.h, - tests/suite/ecore/src/include/eina_convert.h, - tests/suite/ecore/src/include/eina_counter.h, - tests/suite/ecore/src/include/eina_cpu.h, - tests/suite/ecore/src/include/eina_error.h, - tests/suite/ecore/src/include/eina_file.h, - tests/suite/ecore/src/include/eina_fp.h, - tests/suite/ecore/src/include/eina_hamster.h, - tests/suite/ecore/src/include/eina_hash.h, - tests/suite/ecore/src/include/eina_inline_array.x, - tests/suite/ecore/src/include/eina_inline_f16p16.x, - tests/suite/ecore/src/include/eina_inline_f32p32.x, - tests/suite/ecore/src/include/eina_inline_f8p24.x, - tests/suite/ecore/src/include/eina_inline_fp.x, - tests/suite/ecore/src/include/eina_inline_hash.x, - tests/suite/ecore/src/include/eina_inline_list.x, - tests/suite/ecore/src/include/eina_inline_log.x, - tests/suite/ecore/src/include/eina_inline_mempool.x, - tests/suite/ecore/src/include/eina_inline_rbtree.x, - tests/suite/ecore/src/include/eina_inline_rectangle.x, - tests/suite/ecore/src/include/eina_inline_str.x, - tests/suite/ecore/src/include/eina_inline_stringshare.x, - tests/suite/ecore/src/include/eina_inline_tiler.x, - tests/suite/ecore/src/include/eina_inline_trash.x, - tests/suite/ecore/src/include/eina_inline_ustringshare.x, - tests/suite/ecore/src/include/eina_inlist.h, - tests/suite/ecore/src/include/eina_iterator.h, - tests/suite/ecore/src/include/eina_lalloc.h, - tests/suite/ecore/src/include/eina_list.h, - tests/suite/ecore/src/include/eina_log.h, - tests/suite/ecore/src/include/eina_magic.h, - tests/suite/ecore/src/include/eina_main.h, - tests/suite/ecore/src/include/eina_matrixsparse.h, - tests/suite/ecore/src/include/eina_mempool.h, - tests/suite/ecore/src/include/eina_module.h, - tests/suite/ecore/src/include/eina_quadtree.h, - tests/suite/ecore/src/include/eina_rbtree.h, - tests/suite/ecore/src/include/eina_rectangle.h, - tests/suite/ecore/src/include/eina_safety_checks.h, - tests/suite/ecore/src/include/eina_sched.h, - tests/suite/ecore/src/include/eina_str.h, - tests/suite/ecore/src/include/eina_strbuf.h, - tests/suite/ecore/src/include/eina_stringshare.h, - tests/suite/ecore/src/include/eina_tiler.h, - tests/suite/ecore/src/include/eina_trash.h, - tests/suite/ecore/src/include/eina_types.h, - tests/suite/ecore/src/include/eina_unicode.h, - tests/suite/ecore/src/include/eina_ustrbuf.h, - tests/suite/ecore/src/include/eina_ustringshare.h, - tests/suite/ecore/src/lib/Ecore.h, - tests/suite/ecore/src/lib/Ecore_Getopt.h, - tests/suite/ecore/src/lib/ecore.c, - tests/suite/ecore/src/lib/ecore_anim.c, - tests/suite/ecore/src/lib/ecore_app.c, - tests/suite/ecore/src/lib/ecore_events.c, - tests/suite/ecore/src/lib/ecore_exe.c, - tests/suite/ecore/src/lib/ecore_getopt.c, - tests/suite/ecore/src/lib/ecore_glib.c, - tests/suite/ecore/src/lib/ecore_idle_enterer.c, - tests/suite/ecore/src/lib/ecore_idle_exiter.c, - tests/suite/ecore/src/lib/ecore_idler.c, - tests/suite/ecore/src/lib/ecore_job.c, - tests/suite/ecore/src/lib/ecore_main.c, - tests/suite/ecore/src/lib/ecore_pipe.c, - tests/suite/ecore/src/lib/ecore_poll.c, - tests/suite/ecore/src/lib/ecore_private.h, - tests/suite/ecore/src/lib/ecore_signal.c, - tests/suite/ecore/src/lib/ecore_thread.c, - tests/suite/ecore/src/lib/ecore_time.c, - tests/suite/ecore/src/lib/ecore_timer.c, - tests/suite/ecore/src/lib/eina_accessor.c, - tests/suite/ecore/src/lib/eina_array.c, - tests/suite/ecore/src/lib/eina_benchmark.c, - tests/suite/ecore/src/lib/eina_binshare.c, - tests/suite/ecore/src/lib/eina_chained_mempool.c, - tests/suite/ecore/src/lib/eina_convert.c, - tests/suite/ecore/src/lib/eina_counter.c, - tests/suite/ecore/src/lib/eina_cpu.c, - tests/suite/ecore/src/lib/eina_error.c, - tests/suite/ecore/src/lib/eina_file.c, - tests/suite/ecore/src/lib/eina_fp.c, - tests/suite/ecore/src/lib/eina_hamster.c, - tests/suite/ecore/src/lib/eina_hash.c, - tests/suite/ecore/src/lib/eina_inlist.c, - tests/suite/ecore/src/lib/eina_iterator.c, - tests/suite/ecore/src/lib/eina_lalloc.c, - tests/suite/ecore/src/lib/eina_list.c, - tests/suite/ecore/src/lib/eina_log.c, - tests/suite/ecore/src/lib/eina_magic.c, - tests/suite/ecore/src/lib/eina_main.c, - tests/suite/ecore/src/lib/eina_matrixsparse.c, - tests/suite/ecore/src/lib/eina_mempool.c, - tests/suite/ecore/src/lib/eina_module.c, - tests/suite/ecore/src/lib/eina_private.h, - tests/suite/ecore/src/lib/eina_quadtree.c, - tests/suite/ecore/src/lib/eina_rbtree.c, - tests/suite/ecore/src/lib/eina_rectangle.c, - tests/suite/ecore/src/lib/eina_safety_checks.c, - tests/suite/ecore/src/lib/eina_sched.c, - tests/suite/ecore/src/lib/eina_share_common.c, - tests/suite/ecore/src/lib/eina_share_common.h, - tests/suite/ecore/src/lib/eina_str.c, - tests/suite/ecore/src/lib/eina_strbuf.c, - tests/suite/ecore/src/lib/eina_strbuf_common.c, - tests/suite/ecore/src/lib/eina_strbuf_common.h, - tests/suite/ecore/src/lib/eina_strbuf_template_c.x, - tests/suite/ecore/src/lib/eina_stringshare.c, - tests/suite/ecore/src/lib/eina_tiler.c, - tests/suite/ecore/src/lib/eina_unicode.c, - tests/suite/ecore/src/lib/eina_ustrbuf.c, - tests/suite/ecore/src/lib/eina_ustringshare.c, - tests/suite/ecore/src/lib/eina_value.c, tests/suite/mini-eagain2.c, - tests/suite/params.dh, tests/suite/testsrn: Added tests/suite which - contains tests to be executed during development time and will not - be distributed (not included in make dist). Added "ecore" and a new - mini-eagain to test EAGAIN behavior. - -2010-10-16 Nikos Mavrogiannopoulos - - * .gitignore: updated .gitignore. - -2010-10-16 Simon Josefsson - - * NEWS, src/common.c: gnutls-cli: Print channel binding only in - verbose mode. Before it printed it after the 'Compression:' output, thus breaking - Emacs starttls.el string searches. - -2010-10-15 Simon Josefsson - - * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump versions. - -2010-10-15 Simon Josefsson - - * ChangeLog: Generated. - -2010-10-15 Simon Josefsson - - * NEWS: Version 2.11.4. - -2010-10-15 Simon Josefsson - - * lib/libgnutls.map: Rename new symbol prefix after next stable - branch instead of development branch. - -2010-10-15 Simon Josefsson - - * NEWS: Add. - -2010-10-15 Simon Josefsson - - * NEWS, doc/cha-bib.texi, doc/cha-gtls-app.texi: Document channel - binding API. - -2010-10-15 Simon Josefsson - - * lib/gnutls_handshake.c, lib/gnutls_int.h, lib/gnutls_state.c, - src/common.c: Implement RFC 5929 tls-unique channel binding. - -2010-10-14 Simon Josefsson - - * NEWS, doc/manpages/Makefile.am, lib/gnutls_errors.c, - lib/gnutls_state.c, lib/includes/gnutls/gnutls.h.in, - lib/libgnutls.map: Add gnutls_session_channel_binding API. - -2010-10-14 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2010-10-14 Simon Josefsson - - * NEWS: Add. - -2010-10-14 Simon Josefsson - - * tests/Makefile.am, tests/gendh.c: Add self test gendh to check DH - generation. - -2010-10-14 Simon Josefsson - - * tests/openpgp-auth.c: Fix compiler warnings. - -2010-10-14 Simon Josefsson - - * guile/tests/Makefile.am, guile/tests/anonymous-auth.scm, - guile/tests/dh-parameters.pem, guile/tests/openpgp-auth.scm, - guile/tests/pkcs-import-export.scm, - guile/tests/session-record-port.scm, guile/tests/x509-auth.scm: - Don't generate DH primes in Guile self checks (for speed). - -2010-10-14 Simon Josefsson - - * tests/userid/userid: Cleanup, fixing distcheck. - -2010-10-14 Simon Josefsson - - * tests/openpgp-auth.c: Make it work with srcdir != objdir. - -2010-10-14 Simon Josefsson - - * doc/reference/gnutls-docs.sgml: Improve GTK-DOC manual. - -2010-10-14 Simon Josefsson - - * NEWS: Add. - -2010-10-14 Simon Josefsson - - * .x-sc_two_space_separator_in_usage, lib/cryptodev.c, - lib/m4/hooks.m4, lib/pakchois/pakchois11.h: Fix syntax-check - warning. - -2010-10-14 Simon Josefsson - - * build-aux/gendocs.sh, build-aux/pmccabe2html, doc/fdl-1.3.texi, - gl/Makefile.am, gl/arpa_inet.in.h, gl/errno.in.h, gl/float.in.h, - gl/ftello.c, gl/getaddrinfo.c, gl/m4/errno_h.m4, gl/m4/error.m4, - gl/m4/float_h.m4, gl/m4/ftello.m4, gl/m4/getpagesize.m4, - gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, gl/m4/hostent.m4, - gl/m4/include_next.m4, gl/m4/intmax_t.m4, gl/m4/inttypes_h.m4, - gl/m4/lib-ld.m4, gl/m4/lib-link.m4, gl/m4/lseek.m4, - gl/m4/malloc.m4, gl/m4/memchr.m4, gl/m4/minmax.m4, gl/m4/printf.m4, - gl/m4/realloc.m4, gl/m4/servent.m4, gl/m4/size_max.m4, - gl/m4/socketlib.m4, gl/m4/sockets.m4, gl/m4/socklen.m4, - gl/m4/sockpfaf.m4, gl/m4/stdarg.m4, gl/m4/stdbool.m4, - gl/m4/stdint.m4, gl/m4/stdint_h.m4, gl/m4/stdlib_h.m4, - gl/m4/time_h.m4, gl/m4/wchar_t.m4, gl/m4/wint_t.m4, gl/malloc.c, - gl/netdb.in.h, gl/netinet_in.in.h, gl/read-file.c, gl/realloc.c, - gl/select.c, gl/stdarg.in.h, gl/stddef.in.h, gl/stdint.in.h, - gl/stdio.in.h, gl/stdlib.in.h, gl/strerror.c, gl/string.in.h, - gl/sys_select.in.h, gl/sys_socket.in.h, gl/sys_stat.in.h, - gl/sys_time.in.h, gl/tests/Makefile.am, gl/tests/binary-io.h, - gl/tests/getpagesize.c, gl/tests/init.sh, gl/tests/sys_ioctl.in.h, - gl/tests/test-binary-io.c, gl/tests/test-binary-io.sh, - gl/tests/test-ftello.c, gl/tests/test-ftello.sh, - gl/tests/test-ftello2.sh, gl/tests/test-ftello3.c, - gl/tests/test-getaddrinfo.c, gl/tests/test-memchr.c, - gl/tests/test-netdb.c, gl/tests/test-read-file.c, - gl/tests/test-stdbool.c, gl/tests/test-stddef.c, - gl/tests/test-stdlib.c, gl/tests/test-sys_socket.c, - gl/tests/test-sys_wait.h, gl/tests/test-update-copyright.sh, - gl/tests/test-vc-list-files-cvs.sh, - gl/tests/test-vc-list-files-git.sh, gl/tests/test-verify.c, - gl/time.in.h, gl/timespec.h, gl/unistd.in.h, gl/wchar.in.h, - lib/build-aux/config.rpath, lib/gl/Makefile.am, lib/gl/errno.in.h, - lib/gl/float.in.h, lib/gl/ftello.c, lib/gl/m4/codeset.m4, - lib/gl/m4/errno_h.m4, lib/gl/m4/fcntl-o.m4, lib/gl/m4/float_h.m4, - lib/gl/m4/ftello.m4, lib/gl/m4/getpagesize.m4, - lib/gl/m4/gettext.m4, lib/gl/m4/gnulib-cache.m4, - lib/gl/m4/gnulib-comp.m4, lib/gl/m4/iconv.m4, - lib/gl/m4/include_next.m4, lib/gl/m4/intdiv0.m4, lib/gl/m4/intl.m4, - lib/gl/m4/intlmacosx.m4, lib/gl/m4/intmax.m4, - lib/gl/m4/intmax_t.m4, lib/gl/m4/inttypes-pri.m4, - lib/gl/m4/inttypes_h.m4, lib/gl/m4/lcmessage.m4, - lib/gl/m4/ld-version-script.m4, lib/gl/m4/lib-ld.m4, - lib/gl/m4/lib-link.m4, lib/gl/m4/lock.m4, lib/gl/m4/lseek.m4, - lib/gl/m4/malloc.m4, lib/gl/m4/memchr.m4, lib/gl/m4/memmem.m4, - lib/gl/m4/minmax.m4, lib/gl/m4/printf-posix.m4, - lib/gl/m4/printf.m4, lib/gl/m4/progtest.m4, lib/gl/m4/realloc.m4, - lib/gl/m4/size_max.m4, lib/gl/m4/socketlib.m4, - lib/gl/m4/sockets.m4, lib/gl/m4/socklen.m4, lib/gl/m4/sockpfaf.m4, - lib/gl/m4/stdbool.m4, lib/gl/m4/stdint.m4, lib/gl/m4/stdint_h.m4, - lib/gl/m4/stdlib_h.m4, lib/gl/m4/threadlib.m4, lib/gl/m4/time_h.m4, - lib/gl/m4/visibility.m4, lib/gl/m4/wchar_t.m4, lib/gl/m4/wint_t.m4, - lib/gl/malloc.c, lib/gl/netdb.in.h, lib/gl/read-file.c, - lib/gl/realloc.c, lib/gl/stddef.in.h, lib/gl/stdint.in.h, - lib/gl/stdio.in.h, lib/gl/stdlib.in.h, lib/gl/str-two-way.h, - lib/gl/string.in.h, lib/gl/strings.in.h, lib/gl/sys_socket.in.h, - lib/gl/sys_stat.in.h, lib/gl/tests/Makefile.am, - lib/gl/tests/binary-io.h, lib/gl/tests/getpagesize.c, - lib/gl/tests/init.sh, lib/gl/tests/test-binary-io.c, - lib/gl/tests/test-binary-io.sh, lib/gl/tests/test-ftello.c, - lib/gl/tests/test-ftello.sh, lib/gl/tests/test-ftello2.sh, - lib/gl/tests/test-ftello3.c, lib/gl/tests/test-memchr.c, - lib/gl/tests/test-netdb.c, lib/gl/tests/test-read-file.c, - lib/gl/tests/test-stdbool.c, lib/gl/tests/test-stddef.c, - lib/gl/tests/test-stdlib.c, lib/gl/tests/test-sys_socket.c, - lib/gl/tests/test-sys_wait.h, lib/gl/tests/test-verify.c, - lib/gl/time.in.h, lib/gl/unistd.in.h, lib/gl/wchar.in.h, - libextra/gl/gnulib.mk, libextra/gl/m4/gnulib-cache.m4, - libextra/gl/m4/gnulib-comp.m4, libextra/gl/m4/ld-version-script.m4, - libextra/gl/m4/lib-ld.m4, libextra/gl/m4/lib-link.m4, maint.mk: - Update gnulib files. - -2010-10-14 Simon Josefsson - - * cfg.mk: Don't assume chmod +x on gendocs.sh. - -2010-10-14 Simon Josefsson - - * cfg.mk: Use gnulib --add-import. - -2010-10-14 Simon Josefsson - - * .gitignore: Sort and update. - -2010-10-14 Simon Josefsson - - * lib/po/nl.po.in: Sync with TP. - -2010-10-14 Simon Josefsson - - * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump versions. - -2010-10-14 Simon Josefsson - - * ChangeLog: Generated. - -2010-10-14 Simon Josefsson - - * NEWS: Version 2.11.3. - -2010-10-14 Simon Josefsson - - * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump versions. - -2010-10-14 Simon Josefsson - - * doc/errcodes.c, doc/examples/ex-alert.c, - doc/examples/ex-cert-select-pkcs11.c, - doc/examples/ex-cert-select.c, doc/examples/ex-client-psk.c, - doc/examples/ex-client-resume.c, doc/examples/ex-client-srp.c, - doc/examples/ex-client-tlsia.c, doc/examples/ex-client1.c, - doc/examples/ex-client2.c, doc/examples/ex-crq.c, - doc/examples/ex-pkcs12.c, doc/examples/ex-rfc2818.c, - doc/examples/ex-serv-anon.c, doc/examples/ex-serv-pgp.c, - doc/examples/ex-serv-psk.c, doc/examples/ex-serv-srp.c, - doc/examples/ex-serv1.c, doc/examples/ex-session-info.c, - doc/examples/ex-verify.c, doc/examples/ex-x509-info.c, - doc/examples/examples.h, doc/examples/tcp.c, guile/src/core.c, - guile/src/errors.c, guile/src/extra.c, guile/src/utils.c, - guile/src/utils.h, lib/auth_cert.c, lib/auth_cert.h, - lib/auth_dh_common.c, lib/auth_dh_common.h, lib/auth_psk.h, - lib/auth_rsa.c, lib/auth_rsa_export.c, lib/auth_srp.c, - lib/auth_srp.h, lib/crypto-api.c, lib/crypto.h, lib/cryptodev.c, - lib/debug.c, lib/debug.h, lib/ext_cert_type.c, - lib/ext_max_record.c, lib/ext_safe_renegotiation.c, - lib/ext_safe_renegotiation.h, lib/ext_server_name.c, - lib/ext_server_name.h, lib/ext_session_ticket.c, - lib/ext_session_ticket.h, lib/ext_signature.c, lib/ext_signature.h, - lib/ext_srp.c, lib/ext_srp.h, lib/gcrypt/init.c, lib/gcrypt/mpi.c, - lib/gcrypt/pk.c, lib/gnutls_alert.c, lib/gnutls_algorithms.c, - lib/gnutls_algorithms.h, lib/gnutls_auth.h, lib/gnutls_buffers.c, - lib/gnutls_buffers.h, lib/gnutls_cert.c, lib/gnutls_cert.h, - lib/gnutls_cipher.c, lib/gnutls_cipher.h, lib/gnutls_cipher_int.c, - lib/gnutls_cipher_int.h, lib/gnutls_compress.c, - lib/gnutls_compress.h, lib/gnutls_constate.c, - lib/gnutls_constate.h, lib/gnutls_datum.h, lib/gnutls_dh.h, - lib/gnutls_errors.c, lib/gnutls_errors.h, lib/gnutls_extensions.c, - lib/gnutls_extensions.h, lib/gnutls_global.c, lib/gnutls_global.h, - lib/gnutls_handshake.c, lib/gnutls_handshake.h, - lib/gnutls_hash_int.c, lib/gnutls_hash_int.h, lib/gnutls_int.h, - lib/gnutls_kx.c, lib/gnutls_mbuffers.c, lib/gnutls_mbuffers.h, - lib/gnutls_mem.h, lib/gnutls_mpi.h, lib/gnutls_num.h, - lib/gnutls_pk.c, lib/gnutls_pk.h, lib/gnutls_priority.c, - lib/gnutls_privkey.c, lib/gnutls_pubkey.c, lib/gnutls_record.c, - lib/gnutls_record.h, lib/gnutls_session_pack.c, lib/gnutls_sig.c, - lib/gnutls_sig.h, lib/gnutls_srp.c, lib/gnutls_state.c, - lib/gnutls_state.h, lib/gnutls_str.c, lib/gnutls_str.h, - lib/gnutls_supplemental.c, lib/gnutls_supplemental.h, - lib/gnutls_x509.c, lib/includes/gnutls/abstract.h, - lib/includes/gnutls/compat.h, lib/includes/gnutls/crypto.h, - lib/includes/gnutls/gnutls.h.in, lib/includes/gnutls/gnutlsxx.h, - lib/includes/gnutls/openpgp.h, lib/includes/gnutls/pkcs11.h, - lib/includes/gnutls/pkcs12.h, lib/includes/gnutls/x509.h, - lib/locks.c, lib/locks.h, lib/nettle/cipher.c, lib/nettle/egd.c, - lib/nettle/egd.h, lib/nettle/init.c, lib/nettle/mac.c, - lib/nettle/mpi.c, lib/nettle/pk.c, lib/nettle/rnd.c, - lib/opencdk/armor.c, lib/opencdk/hash.c, lib/opencdk/kbnode.c, - lib/opencdk/keydb.c, lib/opencdk/literal.c, lib/opencdk/main.c, - lib/opencdk/misc.c, lib/opencdk/new-packet.c, lib/opencdk/pubkey.c, - lib/opencdk/read-packet.c, lib/opencdk/seskey.c, - lib/opencdk/sig-check.c, lib/opencdk/stream.c, lib/opencdk/types.h, - lib/opencdk/verify.c, lib/openpgp/gnutls_openpgp.c, - lib/openpgp/openpgp_int.h, lib/openpgp/output.c, lib/openpgp/pgp.c, - lib/openpgp/privkey.c, lib/pakchois/dlopen.c, - lib/pakchois/dlopen.h, lib/pakchois/errors.c, - lib/pakchois/pakchois.c, lib/pakchois/pakchois.h, - lib/pakchois/pakchois11.h, lib/pkcs11.c, lib/pkcs11_int.h, - lib/pkcs11_privkey.c, lib/pkcs11_write.c, lib/random.c, - lib/random.h, lib/system.c, lib/system.h, lib/x509/common.c, - lib/x509/common.h, lib/x509/crl_write.c, lib/x509/crq.c, - lib/x509/dn.c, lib/x509/mpi.c, lib/x509/output.c, - lib/x509/privkey.c, lib/x509/sign.c, lib/x509/sign.h, - lib/x509/verify.c, lib/x509/x509.c, lib/x509/x509_int.h, - lib/x509/x509_write.c, lib/x509_b64.c, - libextra/ext_inner_application.c, libextra/ext_inner_application.h, - libextra/gnutls_extra.c, libextra/gnutls_ia.c, - libextra/includes/gnutls/extra.h, libextra/openssl_compat.h, - src/benchmark.c, src/certtool-cfg.h, src/certtool-common.h, - src/certtool.c, src/cli.c, src/common.c, src/common.h, src/crypt.c, - src/pkcs11.c, src/prime.c, src/psk.c, src/serv.c, src/tests.c, - tests/anonself.c, tests/certder.c, - tests/certificate_set_x509_crl.c, tests/certuniqueid.c, - tests/chainverify.c, tests/crq_apis.c, tests/crq_key_id.c, - tests/crypto_rng.c, tests/cve-2008-4989.c, tests/cve-2009-1415.c, - tests/cve-2009-1416.c, tests/dhepskself.c, tests/dn.c, tests/dn2.c, - tests/finished.c, tests/gc.c, tests/hostname-check.c, - tests/init_roundtrip.c, tests/mini-eagain.c, - tests/mini-x509-rehandshake.c, tests/mini-x509.c, tests/mini.c, - tests/moredn.c, tests/mpi.c, tests/netconf-psk.c, - tests/nul-in-x509-names.c, tests/openpgp-auth.c, - tests/openpgp-keyring.c, tests/openpgpself.c, tests/openssl.c, - tests/parse_ca.c, tests/pgps2kgnu.c, tests/pkcs12_encode.c, - tests/pkcs12_s2k.c, tests/pkcs12_s2k_pem.c, tests/pskself.c, - tests/resume.c, tests/safe-renegotiation/srn0.c, - tests/safe-renegotiation/srn1.c, tests/safe-renegotiation/srn2.c, - tests/safe-renegotiation/srn3.c, tests/safe-renegotiation/srn4.c, - tests/safe-renegotiation/srn5.c, tests/set_pkcs12_cred.c, - tests/setcredcrash.c, tests/simple.c, tests/tlsia.c, tests/utils.c, - tests/utils.h, tests/x509_altname.c, tests/x509dn.c, - tests/x509self.c, tests/x509sign-verify.c: Indent (using GNU indent - 2.2.11). - -2010-10-08 Nikos Mavrogiannopoulos - - * NEWS, configure.ac, lib/m4/hooks.m4: bumped version - -2010-10-08 Nikos Mavrogiannopoulos - - * src/certtool.c: Revert "Applied last patch of Micah Anderson on - IKE status." This reverts commit a6b2f5ce7316b4774649ee9b421da2ee7fef461f. - -2010-10-08 Nikos Mavrogiannopoulos - - * libextra/fipsmd5.c: removed unneeded code. - -2010-10-08 Nikos Mavrogiannopoulos - - * src/certtool.c: Applied last patch of Micah Anderson on IKE - status. - -2010-10-02 Nikos Mavrogiannopoulos - - * src/certtool.c: Applied patch on IKE extension by Micah Anderson - -2010-10-02 Nikos Mavrogiannopoulos - - * lib/cryptodev.c, lib/gcrypt/mac.c, lib/gnutls_hash_int.c, - lib/includes/gnutls/crypto.h, lib/nettle/mac.c: Updated cryptodev - code to support the linux cryptodev extensions. Removed the clone() - capability from HMAC. It was never used and having it prevents using - it with hardware accelerators that might not have this capability. - -2010-09-29 Nikos Mavrogiannopoulos - - * THANKS: Added Micah - -2010-10-01 Simon Josefsson - - * doc/cha-cert-auth.texi, doc/cha-internals.texi, - doc/cha-library.texi, lib/ext_safe_renegotiation.c, - lib/ext_server_name.c, lib/gcrypt/init.c, lib/gnutls_record.c, - lib/gnutls_str.c, lib/locks.c, lib/nettle/egd.c, lib/nettle/init.c, - lib/system.c, lib/system.h, libextra/ext_inner_application.c, - src/certtool-common.h, src/common.c, src/pkcs11.c: Fix some - syntax-check errors. - -2010-10-01 Simon Josefsson - - * lib/gnutls_int.h, lib/includes/gnutls/gnutls.h.in, - lib/includes/gnutls/pkcs11.h: Fix compiler warnings. - -2010-10-01 Simon Josefsson - - * NEWS, doc/manpages/Makefile.am: Mention new APIs. - -2010-09-30 Simon Josefsson - - * tests/openpgp-certs/testselfsigs: Avoid bashism. Reported by m.drochner@fz-juelich.de in - . - -2010-09-30 Simon Josefsson - - * lib/crypto-api.c: Don't return from void functions. Reported by Dagobert Michelsen in - - . - -2010-09-30 Simon Josefsson - - * lib/includes/gnutls/gnutls.h.in: Remove spurious comma. - -2010-09-30 Simon Josefsson - - * lib/includes/gnutls/x509.h: Remove spurious comma. - -2010-09-30 Simon Josefsson - - * tests/pkcs8-decode/Makefile.am, tests/pkcs8-decode/pkcs8: Make - pkcs8-decode test work on Windows. - -2010-09-29 Nikos Mavrogiannopoulos - - * NEWS: updated - -2010-09-29 Nikos Mavrogiannopoulos - - * lib/ext_session_ticket.c: treat absence of parameters the same as - having them disabled. - -2010-09-29 Nikos Mavrogiannopoulos - - * tests/resume.c: Corrected behavior on failure (don't crash). - -2010-09-29 Nikos Mavrogiannopoulos - - * lib/ext_session_ticket.c, lib/gnutls_extensions.c: Corrected bugs - when restoring extensions during session resumtion. - -2010-09-29 Nikos Mavrogiannopoulos - - * lib/gnutls_extensions.c: Use more informative logging for - extensions. - -2010-09-29 Micah Anderson - - * NEWS, doc/certtool.cfg, doc/cha-programs.texi, - lib/includes/gnutls/x509.h, lib/x509/output.c, src/certtool-cfg.c, - src/certtool-cfg.h, src/certtool.c: Add new extended key usage - ipsecIKE According to RFC 4945 § 5.1.3.12 section title - "ExtendedKeyUsage"[0] the following extended key usage has been - added: ... this document defines an ExtendedKeyUsage keyPurposeID that MAY - be used to limit a certificate's use: id-kp-ipsecIKE OBJECT IDENTIFIER ::= { id-kp 17 } where id-kp is defined in RFC 3280 [5]. If a certificate is - intended to be used with both IKE and other applications, and one - of the other applications requires use of an EKU value, then such - certificates MUST contain either the keyPurposeID id-kp-ipsecIKE or anyExtendedKeyUsage [5], as well as the keyPurposeID values associated with the other applications. Similarly, if a CA - issues multiple otherwise-similar certificates for multiple - applications including IKE, and it is intended that the IKE - certificate NOT be used with another application, the IKE - certificate MAY contain an EKU extension listing a keyPurposeID of - id-kp-ipsecIKE to discourage its use with the other application. - Recall, however, that EKU extensions in certificates meant for use - in IKE are NOT RECOMMENDED. Conforming IKE implementations are not required to support EKU. - If a critical EKU extension appears in a certificate and EKU is - not supported by the implementation, then RFC 3280 requires that the certificate be rejected. Implementations that do support EKU - MUST support the following logic for certificate validation: o If no EKU extension, continue. o If EKU present AND contains either id-kp-ipsecIKE or anyExtendedKeyUsage, continue. o Otherwise, reject cert. Signed-off-by: Nikos Mavrogiannopoulos - -2010-09-27 Nikos Mavrogiannopoulos - - * NEWS, src/certtool-gaa.c, src/certtool.gaa: --pkcs11-* in certtool - was renamed to --p11-*. - -2010-09-25 Nikos Mavrogiannopoulos - - * lib/ext_session_ticket.c: Added some comments and removed unused - code. - -2010-09-25 Nikos Mavrogiannopoulos - - * NEWS, lib/ext_session_ticket.c: Corrected advertizing issue for - session tickets. - -2010-09-24 Nikos Mavrogiannopoulos - - * doc/TODO: cleanup of TODO list. Removed very old entries, entries - already fixed and added new ones. - -2010-09-24 Nikos Mavrogiannopoulos - - * lib/gnutls_handshake.c: IMED_RET parameters are easier to grasp. - -2010-09-24 Nikos Mavrogiannopoulos - - * lib/crypto.c, lib/gcrypt/cipher.c, lib/gcrypt/mac.c, - lib/nettle/cipher.c, lib/nettle/mac.c: cipher,mac and digest - priorities moved to crypto.c - -2010-09-23 Nikos Mavrogiannopoulos - - * lib/gnutls_errors.c: changed the fatality level of some errors. - -2010-09-23 Nikos Mavrogiannopoulos - - * lib/gnutls_handshake.c: No longer use is_fatal() during handshake. - Explicitely treat EAGAIN and INTERRUPTED as non-fatal during - handshake. If the check_fatal flag is set then - GNUTLS_E_WARNING_ALERT_RECEIVED could interrupt a handshake as well. - -2010-09-23 Nikos Mavrogiannopoulos - - * src/cli.c: fflush stdout and stderr before the call to setbuf. - This fixes issue in solaris where lines dissappeared from output. - Reported and suggested fix by Knut Anders Hatlen. - -2010-09-20 Nikos Mavrogiannopoulos - - * NEWS: documented change - -2010-09-19 Nikos Mavrogiannopoulos - - * lib/nettle/pk.c: Corrected bug in wrap_nettle_pk_fixup that was - importing DSA keys are RSA ones. - -2010-09-19 Nikos Mavrogiannopoulos - - * lib/nettle/pk.c, lib/openpgp/privkey.c: indented some code - -2010-09-19 Nikos Mavrogiannopoulos - - * lib/m4/hooks.m4: updated revision - -2010-09-18 Ludovic Courtès - - * .gitignore, tests/Makefile.am, tests/openpgp-auth.c: Add an - OpenPGP authentication unit test. * tests/Makefile.am (ctests)[ENABLE_OPENPGP]: Add `openpgp-auth'. (TESTS_ENVIRONMENT): Add `srcdir'. * tests/openpgp-auth.c: New file. Signed-off-by: Nikos Mavrogiannopoulos - -2010-09-16 Jonathan Bastien-Filiatrault - - * lib/ext_session_ticket.c, lib/gnutls_alert.c, - lib/gnutls_buffers.c, lib/gnutls_cipher.c, lib/gnutls_cipher.h, - lib/gnutls_compress.c, lib/gnutls_compress.h, - lib/gnutls_constate.c, lib/gnutls_constate.h, - lib/gnutls_handshake.c, lib/gnutls_int.h, lib/gnutls_num.h, - lib/gnutls_record.c, lib/gnutls_record.h, - lib/gnutls_session_pack.c, lib/gnutls_state.c, libextra/gnutls_ia.c: - Explicit symmetric cipher state versionning. This introduces the concept of a "cipher epoch". The epoch number is - the number of successful handshakes and is incremented by one each - time. This concept is native to DTLS and this patch makes the - symmetric cipher state explicit for TLS in preparation for DTLS. - This concept was implicit in plain TLS and ChangeCipherSpec messages - triggered a "pending state copy". Now, we the current epoch number - is simply incremented to the parameters negotiated by the handshake. The main side effects of this patch is a slightly more abstract - internal API and, in some cases, simpler code. The session blob - format is also changed a bit since this patch avoids storing - information that is now redundant. If this breaks library users' - expectations, this side effect can be negated. The cipher_specs structure has been removed. The conn_state has - become record_state_st. Only symmetric cipher information is - versioned. Things such as key exchange algorithm and the master - secret are not versioned and their handling is unchanged. I have tested this patch as much as I could. It introduces no test - suite regressions on my x64 Debian GNU/Linux system. Do not hesitate to point out shortcomings or suggest changes. Since - this is a big diff, I am expecting this to be an iterative process. Signed-off-by: Jonathan Bastien-Filiatrault - Signed-off-by: Nikos Mavrogiannopoulos - -2010-09-16 Jonathan Bastien-Filiatrault - - * lib/gnutls_errors.h: Add gnutls_assert_val idiom. This warrants being made in an inline function or macro since it is used throughout the code. This converts 4 line repetitive blocks - into 1 line. Signed-off-by: Jonathan Bastien-Filiatrault - Signed-off-by: Nikos Mavrogiannopoulos - -2010-09-14 Nikos Mavrogiannopoulos - - * AUTHORS, NEWS, configure.ac: updated for 2.11.1 - -2010-09-10 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/pkcs11.h, lib/pkcs11.c, lib/pkcs11_int.h, - lib/pkcs11_privkey.c, src/certtool-gaa.c, src/certtool-gaa.h, - src/certtool.gaa, src/pkcs11.c: Added 3 levels of details in PKCS - #11 URLs. 1st level: Token level. Object is unique up to token. - 2nd level: Object is unique up to token and module used to access - it. 3rd level: Object is unique up to token and module and version - of module used to access it. - -2010-09-10 Nikos Mavrogiannopoulos - - * NEWS: Documented changes. - -2010-09-10 Nikos Mavrogiannopoulos - - * lib/x509_b64.c: Be liberal in the PEM decoding. That is spaces and - tabs are being skipped. - -2010-09-08 Jonathan Bastien-Filiatrault - - * lib/gnutls_buffers.c: Fully mbufferize _gnutls_read and - _gnutls_read_buffered. Signed-off-by: Jonathan Bastien-Filiatrault - Signed-off-by: Nikos Mavrogiannopoulos - -2010-09-08 Jonathan Bastien-Filiatrault - - * lib/gnutls_mbuffers.h: mbuffers: Add _mbuffer_xfree operation. Signed-off-by: Jonathan Bastien-Filiatrault - Signed-off-by: Nikos Mavrogiannopoulos - -2010-09-08 Jonathan Bastien-Filiatrault - - * lib/gnutls_buffers.c, lib/gnutls_buffers.h, lib/gnutls_int.h, - lib/gnutls_record.c, lib/gnutls_state.c: mbuffers: make - _gnutls_io_read_buffered use mbuffers. This will be needed by the DTLS code to make sure reads are stored - in segments that correspond to datagram boundaries. Signed-off-by: Jonathan Bastien-Filiatrault - Signed-off-by: Nikos Mavrogiannopoulos - -2010-09-08 Jonathan Bastien-Filiatrault - - * lib/gnutls_int.h: Parenthesize size calculations. This is standard practice and the DTLS code got bit by this. Signed-off-by: Jonathan Bastien-Filiatrault - Signed-off-by: Nikos Mavrogiannopoulos - -2010-09-08 Jonathan Bastien-Filiatrault - - * lib/gnutls_mbuffers.c, lib/gnutls_mbuffers.h: mbuffers: Add - mbuffer_linearize. Signed-off-by: Jonathan Bastien-Filiatrault - Signed-off-by: Nikos Mavrogiannopoulos - -2010-09-08 Jonathan Bastien-Filiatrault - - * lib/gnutls_mbuffers.c: mbuffers: fix wrong size calculation. maximum_size is the maximum size of the payload, not including - overhead. Signed-off-by: Jonathan Bastien-Filiatrault - Signed-off-by: Nikos Mavrogiannopoulos - -2010-09-08 Jonathan Bastien-Filiatrault - - * lib/gnutls_mbuffers.c: mbuffers: Make _mbuffer_remove_bytes return - a meaningful error code. Signed-off-by: Jonathan Bastien-Filiatrault - Signed-off-by: Nikos Mavrogiannopoulos - -2010-09-08 Jonathan Bastien-Filiatrault - - * lib/gnutls_mbuffers.c: mbuffers: Document the internal mbuffer - API. After a year of not hacking GnuTLS, I needed to look at the code to - know how mbuffers work. This will make it much easier for anybody - not familiar with this code. Signed-off-by: Jonathan Bastien-Filiatrault - Signed-off-by: Nikos Mavrogiannopoulos - -2010-09-08 Nikos Mavrogiannopoulos - - * NEWS: updated NEWS. - -2010-09-08 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/pkcs11.h, lib/pkcs11.c, lib/pkcs11_int.h, - lib/pkcs11_privkey.c, lib/pkcs11_write.c, src/certtool-common.h, - src/certtool-gaa.c, src/certtool-gaa.h, src/certtool.c, - src/certtool.gaa, src/pkcs11.c: PKCS#11 URL support updated to - conform to draft-pechanec-pkcs11uri-02. Now in the URL the pkcs11 - provider library (module) can be specified thus restricting objects - within a single provider. - -2010-09-01 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_int.h, lib/gnutls_priority.c, - lib/gnutls_record.c: When the %COMPAT flag is specified, larger - records that would otherwise violate the TLS spec, are accepted. - -2010-08-28 Brad Hards - - * src/certtool.c, src/pkcs11.c: Show which option is the default for - command line tools. We use "y/N" is most places - this just adapts two places that use - "Y/N" to match the behavior of read_yesno(). Signed-off-by: Nikos Mavrogiannopoulos - -2010-08-20 Nikos Mavrogiannopoulos - - * lib/x509/x509.c: prevent a memory leak in the unique_id functions. - -2010-08-20 Brad Hards - - * lib/includes/gnutls/x509.h, lib/libgnutls.map, lib/x509/output.c, - lib/x509/x509.c, tests/Makefile.am, tests/certuniqueid.c: As - identified in a previous mail, I've added support for accessing / - displaying the subjectUniqueID and issuerUniqueID fields within an - X.509 certificate. This is provided (along with a test case) in the - attached patch. Signed-off-by: Nikos Mavrogiannopoulos - -2010-08-20 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_int.h: By default lowat is set to zero. - -2010-08-19 Nikos Mavrogiannopoulos - - * lib/pkcs11.c: Revert "When scanning for terminator character for - PKCS #11 URLs ignore escaped \;." This reverts commit 583fad076506421c9007a3349784496e2927dcd1. - -2010-08-18 Nikos Mavrogiannopoulos - - * THANKS: Added Sjoerd. - -2010-08-18 Nikos Mavrogiannopoulos - - * NEWS, lib/m4/hooks.m4: libnettle is the default crypto library. - -2010-08-18 Nikos Mavrogiannopoulos - - * lib/gnutls_handshake.c: oldstate var removed. - -2010-08-17 Nikos Mavrogiannopoulos - - * tests/mini-eagain.c: mini-eagain will fail with EAGAIN error one - every two attempts. That is to remove probabilities. - -2010-08-11 Sjoerd Simons - - * lib/gnutls_int.h, lib/gnutls_record.c: Remember the amount of user - data we're sending out Partially reverts 3ef62950845f551ebc629e50d5ddf75f71b84294. - gnutls_record_send needs to return the amount of user-data we sent, - so we need to keep this information somewhere to return it when we - succeed in sending that data. Signed-off-by: Nikos Mavrogiannopoulos - -2010-08-11 Sjoerd Simons - - * lib/gnutls_handshake.c: Check whether the error is fatal in more - cases When stressing the async API of gnutls a lot of internal errors are - hit as IMED_RET clears the handshake hash buffers as a result of - -EAGAIN even though it would never be re-initialized at that point, - but is still needed in later stages. Signed-off-by: Nikos Mavrogiannopoulos - -2010-08-11 Sjoerd Simons - - * lib/gnutls_handshake.c, lib/gnutls_int.h: Add state for flushing - the handshake buffer A seperate state is needed between flushing the handshake buffers - and sending the chipher spec change otherwise it's impossible to - determine whether _gnutls_send_change_cipher_spec is called for the - first time or again. Signed-off-by: Nikos Mavrogiannopoulos - -2010-08-01 Simon Josefsson - - * lib/nettle/mpi.c: Fix warning. - -2010-07-29 Nikos Mavrogiannopoulos - - * lib/m4/hooks.m4: Define HAVE_GCRYPT when using gcrypt. nettle is - no longer marked as unsupported. - -2010-07-29 Nikos Mavrogiannopoulos - - * NEWS, doc/manpages/Makefile.am, lib/gnutls_extensions.c, - lib/m4/hooks.m4, lib/nettle/cipher.c, lib/nettle/mac.c, - lib/nettle/pk.c, libextra/gnutls_extra.c: Added Camellia-128/256, - SHA-224/384/512 and support for DSA2 when using nettle. - -2010-07-28 Nikos Mavrogiannopoulos - - * lib/pkcs11.c: When scanning for terminator character for PKCS #11 - URLs ignore escaped \;. - -2010-07-26 Nikos Mavrogiannopoulos - - * lib/gnutls_priority.c: Modified the example to work in TLS 1.2. - -2010-07-26 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_algorithms.c: Added RSA_NULL_SHA1 and SHA256 - ciphersuites. - -2010-07-26 Nikos Mavrogiannopoulos - - * lib/ext_signature.c: When signature algorithms extension is not - received allow SHA1 and SHA256. - -2010-07-26 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.c: NULL MAC renamed to MAC-NULL - -2010-07-25 Simon Josefsson - - * src/common.c: Avoid fixed size buffers (now handles the big >100 - SAN cert). - -2010-07-25 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2010-07-25 Simon Josefsson - - * NEWS: Re-add old NEWS entries. - -2010-07-25 Simon Josefsson - - * lib/gnutls_buffers.c: Doc fix. - -2010-07-24 Nikos Mavrogiannopoulos - - * lib/x509/privkey.c: Do not trust fbase64_decode to return 0 on - success. - -2010-07-24 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_x509.c, lib/x509/privkey.c, src/certtool.c: - gnutls_x509_privkey_import() will fallback to - gnutls_x509_privkey_import_pkcs8() without a password, if it is - unable to decode the key. - -2010-07-24 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.c, lib/gnutls_algorithms.h, - lib/includes/gnutls/gnutls.h.in, lib/nettle/mpi.c, src/prime.c: - Added GNUTLS_PK_DH to differentiate in the generation of parameters - with PK_DSA that requires special treatment. - -2010-07-24 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.c: Corrected wrong descriptions of security - levels. - -2010-07-24 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.c: use RSA-SHA1 as an indicator of RSA - certificates. - -2010-07-24 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.c: Fix DSA key values to avoid generating - normal and reporting them as low. - -2010-07-23 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_algorithms.c, lib/gnutls_algorithms.h, - lib/includes/gnutls/openpgp.h, lib/includes/gnutls/x509.h, - lib/libgnutls.map, lib/nettle/mpi.c, lib/openpgp/privkey.c, - lib/x509/privkey.c, src/certtool.c, - tests/pathlen/no-ca-or-pathlen.pem: Better handling of security - parameters to key sizes matching (via a single table). Added - functions to return the security parameter of a private key. - -2010-07-23 Nikos Mavrogiannopoulos - - * doc/cha-intro-tls.texi: Simplified documentation. - -2010-07-23 Nikos Mavrogiannopoulos - - * lib/nettle/mpi.c: Follow ECRYPT II recommendations. - -2010-07-23 Nikos Mavrogiannopoulos - - * NEWS, doc/cha-bib.texi, doc/cha-intro-tls.texi, - lib/gnutls_algorithms.c: Updated documentation and - gnutls_pk_params_t mappings to ECRYPT II recommendations. - -2010-07-23 Nikos Mavrogiannopoulos - - * lib/gnutls_priority.c: HMAC-MD5 deprecated according to ECRYPT II - yearly report (2009-2010) recommendations. - -2010-07-23 Nikos Mavrogiannopoulos - - * tests/sha2/Makefile.am: added missing file key-subca-dsa.pem - -2010-07-22 Nikos Mavrogiannopoulos - - * gtk-doc.make: ignore html errors otherwise make dist doesn't work. - -2010-07-22 Nikos Mavrogiannopoulos - - * NEWS: updated NEWS - -2010-07-22 Nikos Mavrogiannopoulos - - * src/certtool-common.h, src/certtool-gaa.c, src/certtool-gaa.h, - src/certtool.c, src/certtool.gaa: Added option for certtool to print - certificate public key. - -2010-07-21 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.c: Added SIG_RSA_MD5_OID as an indicator of - RSA. Some microsoft products were using it. Reported by Mads - Kiilerich. - -2010-07-19 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.c, lib/x509/common.h: Added RSA with SHA224. - -2010-07-17 Nikos Mavrogiannopoulos - - * lib/nettle/pk.c: Added blinding to RSA decryption AND signing. - Will stay there until it is moved to nettle itself. - -2010-07-11 Nikos Mavrogiannopoulos - - * lib/system.h: fixed - -2010-07-11 Nikos Mavrogiannopoulos - - * NEWS, lib/nettle/Makefile.am, lib/nettle/egd.c, lib/nettle/egd.h, - lib/nettle/rnd.c: Added support for EGD daemon in nettle's RNG. It - is used if /dev/urandom is not present. - -2010-07-11 Nikos Mavrogiannopoulos - - * lib/gnutls_buffers.c, lib/system.c, lib/system.h: Corrected the - lowat behavior. Documented that it will be deprecated in later - versions. - -2010-07-11 Nikos Mavrogiannopoulos - - * src/serv.c: gnutls-serv: Do not print CR/LF if received, but - instead print LF only. - -2010-07-10 Nikos Mavrogiannopoulos - - * lib/Makefile.am, lib/gnutls_buffers.c, lib/gnutls_state.c, - lib/locks.c, lib/locks.h, lib/pakchois/pakchois.c, lib/system.c, - lib/system.h: system specific functions were moved to system.c - -2010-07-10 Nikos Mavrogiannopoulos - - * NEWS, configure.ac, lib/gnutls_alert.c, lib/gnutls_buffers.c, - lib/gnutls_buffers.h, lib/gnutls_global.c, lib/gnutls_handshake.c, - lib/gnutls_handshake.h, lib/gnutls_int.h, lib/gnutls_mbuffers.c, - lib/gnutls_mbuffers.h, lib/gnutls_record.c, lib/gnutls_record.h, - lib/gnutls_state.c, lib/includes/gnutls/gnutls.h.in, - lib/libgnutls.map, libextra/gnutls_ia.c: Support scattered write - using writev(). This takes advantage of the new buffering layer and - allows queuing of packets and flushing them. This is currently used - for handshake messages only. Performance-wise the difference of - packing several TLS records in a single write doesn't seem to offer - anything over ethernet (that my tests were on). Probably on links - with higher latency there would be a benefit. - -2010-07-08 Nikos Mavrogiannopoulos - - * doc/cha-gtls-app.texi: Removed old reference. - -2010-07-08 Nikos Mavrogiannopoulos - - * doc/cha-gtls-app.texi, doc/examples/Makefile.am, - doc/examples/ex-rfc2818.c: ex-rfc2818 is now a functional program - demonstrating the verification procedure. - -2010-07-08 Nikos Mavrogiannopoulos - - * doc/Makefile.am, doc/cha-gtls-app.texi, doc/examples/Makefile.am, - doc/examples/ex-serv-export.c: Example with export ciphersuites was - removed. - -2010-07-08 Nikos Mavrogiannopoulos - - * lib/gnutls_pubkey.c: corrected typo - -2010-07-07 Nikos Mavrogiannopoulos - - * lib/nettle/pk.c: Use the same "e" for RSA as libgcrypt. It's the - fastest choice. - -2010-07-05 Nikos Mavrogiannopoulos - - * src/certtool-cfg.c: Do not crash if input is redirected from - /dev/null. - -2010-07-05 Nikos Mavrogiannopoulos - - * NEWS, src/certtool-gaa.c, src/certtool.c, src/certtool.gaa: - Changed the default pkcs-cipher to AES-128. Allowed specifying the - 3des-pkcs12 cipher with the --pkcs-cipher option. - -2010-07-04 Nikos Mavrogiannopoulos - - * src/benchmark.c: Use double to count bytes. - -2010-07-04 Nikos Mavrogiannopoulos - - * lib/nettle/rnd.c: Added a windows version of the RNG. - -2010-07-04 Nikos Mavrogiannopoulos - - * lib/nettle/rnd.c: Corrected locking usage in nettle's random - subsystem. - -2010-07-03 Nikos Mavrogiannopoulos - - * lib/gcrypt/Makefile.am, lib/gnutls_privkey.c, - lib/gnutls_pubkey.c, lib/nettle/Makefile.am, lib/pakchois/dlopen.h: - Fixed to compile under mingw32. - -2010-07-03 Nikos Mavrogiannopoulos - - * lib/m4/hooks.m4: only warn if dlopen or pthreads are not found. - -2010-07-03 Nikos Mavrogiannopoulos - - * lib/gcrypt/init.c, lib/includes/gnutls/gnutls.h.in, lib/locks.c, - lib/pakchois/pakchois.c: Locks were converted to be in align with - posix locks to easier wrap around them. - -2010-07-03 Nikos Mavrogiannopoulos - - * lib/Makefile.am, lib/locks.c, lib/locks.h, lib/pakchois/dlopen.c, - lib/pakchois/dlopen.h, lib/pakchois/pakchois.c: The included - pakchois will use gnutls locks and will use a portable dlopen() to - allow compilation in win32 (untested). - -2010-07-03 Nikos Mavrogiannopoulos - - * lib/nettle/rnd.c: Read from /dev/urandom every 20 minutes. - -2010-07-03 Nikos Mavrogiannopoulos - - * lib/Makefile.am, lib/x509/Makefile.am: Added missing files - -2010-07-03 Nikos Mavrogiannopoulos - - * lib/crypto-api.c, lib/gnutls_cipher_int.c, - lib/gnutls_cipher_int.h, lib/includes/gnutls/crypto.h, - lib/libgnutls.map: Allow encryption and decryption that are not - in-place only. - -2010-07-03 Nikos Mavrogiannopoulos - - * src/benchmark.c: Print values in a human-readable format and do - the calculations in fixed time to prevent stalling in slow systems. - -2010-07-02 Nikos Mavrogiannopoulos - - * lib/m4/hooks.m4: corrected library version - -2010-07-02 Nikos Mavrogiannopoulos - - * doc/examples/ex-cert-select-pkcs11.c, - lib/includes/gnutls/pkcs11.h, lib/pkcs11.c, lib/pkcs11_int.h, - src/common.c, src/pkcs11.c: PIN callback supplies the token URL. The - callback function in common.c will cache PIN if requested for second - time. - -2010-07-02 Nikos Mavrogiannopoulos - - * lib/gnutls_errors.c, lib/includes/gnutls/gnutls.h.in, - lib/pkcs11.c, lib/pkcs11_int.h, lib/pkcs11_privkey.c, - lib/pkcs11_write.c, src/common.c: Reverted the SAVE_PIN approach in - PIN callback. The new approach will be to provide enough information - for the callback to save the PIN itself. - -2010-07-02 Nikos Mavrogiannopoulos - - * lib/gcrypt/init.c: removed unneeded function. - -2010-07-02 Nikos Mavrogiannopoulos - - * lib/gnutls_cert.c: More uses of gnutls_certificate_free_ca_names - -2010-07-02 Nikos Mavrogiannopoulos - - * lib/locks.c: Do not allow setting NULL lock functions - -2010-07-02 Nikos Mavrogiannopoulos - - * lib/nettle/rnd.c: corrected lock usage. - -2010-07-02 Nikos Mavrogiannopoulos - - * lib/m4/hooks.m4: bumped library version - -2010-07-01 Nikos Mavrogiannopoulos - - * lib/includes/Makefile.am: Include abstract.h in releases. - -2010-06-30 Nikos Mavrogiannopoulos - - * lib/crypto-api.c: Correctly deinitialize crypto API handles. - -2010-06-29 Nikos Mavrogiannopoulos - - * lib/gnutls_int.h: commented obscure HANDSHAKE_MAC_TYPE_10 and - HANDSHAKE_MAC_TYPE_12. - -2010-06-29 Nikos Mavrogiannopoulos - - * lib/locks.c, lib/locks.h, lib/nettle/rnd.c: simplified locking - code. Locking functions always exist but are dummies if no locks - have been set. - -2010-06-29 Nikos Mavrogiannopoulos - - * lib/gcrypt/Makefile.am, lib/gcrypt/init.c, lib/gnutls_errors.c, - lib/gnutls_global.c, lib/gnutls_global.h, - lib/includes/gnutls/gnutls.h.in, lib/locks.c, lib/locks.h, - lib/nettle/Makefile.am, lib/nettle/init.c, lib/nettle/rnd.c: - Initialization of crypto libraries moved outside main gnutls code. - -2010-06-29 Nikos Mavrogiannopoulos - - * lib/Makefile.am, lib/gnutls_global.c, lib/gnutls_global.h, - lib/locks.c, lib/locks.h: Moved locking code to special file. - -2010-06-29 Simon Josefsson - - * doc/Makefile.am, doc/pkcs11-vision.eps: Add pkcs11-vision rules. - -2010-06-29 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2010-06-28 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/pkcs11.h, lib/pkcs11_write.c, src/pkcs11.c: - When copying a private key the sensitive flag can be set or not. - This allows copying private keys that can be exported. - -2010-06-28 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/pkcs11.h, lib/pkcs11.c, lib/pkcs11_int.h, - lib/pkcs11_write.c, src/certtool-common.h, src/certtool.c, - src/pkcs11.c: Combined object flags. No implicit login any more. - Login has to be specified with a flag on every call that could use - it. - -2010-06-28 Nikos Mavrogiannopoulos - - * lib/gnutls_privkey.c, lib/gnutls_pubkey.c, lib/pkcs11.c, - lib/pkcs11_int.h, lib/pkcs11_privkey.c, lib/pkcs11_write.c: Indented - code. - -2010-06-28 Nikos Mavrogiannopoulos - - * doc/examples/ex-cert-select-pkcs11.c, lib/gnutls_pubkey.c, - lib/gnutls_x509.c, lib/includes/gnutls/abstract.h, - lib/includes/gnutls/pkcs11.h, lib/pkcs11.c, lib/pkcs11_write.c, - src/certtool-common.h, src/certtool-gaa.c, src/certtool-gaa.h, - src/certtool.c, src/certtool.gaa, src/cli.c, src/pkcs11.c: Allow - flags when importing objects from PKCS11 URLs. The only flag - supported now is the PKCS11_OBJ_FLAG_LOGIN, which forces login - before accessing object on a token. The reason is that some tokens - do not allow access of any data without login. - -2010-06-27 Nikos Mavrogiannopoulos - - * src/tests.c: Added AES-128 to block ciphers. - -2010-06-27 Nikos Mavrogiannopoulos - - * lib/gnutls_session_pack.c: Corrected writing and reading order of - security parameters. - -2010-06-27 Nikos Mavrogiannopoulos - - * lib/configure.ac, libextra/configure.ac: use 2.11.0 everywhere - -2010-06-27 Nikos Mavrogiannopoulos - - * NEWS, doc/cha-gtls-app.texi, lib/configure.ac, - lib/gnutls_errors.c, lib/gnutls_global.c, lib/gnutls_global.h, - lib/includes/gnutls/gnutls.h.in, lib/libgnutls.map, - lib/nettle/rnd.c, lib/pkcs11.c: Added gnutls_global_set_mutex() to - allow setting alternative locking procedures. By default the system - available locking is used. In *NIX pthreads are used and in windows - the critical section API. As a side effect this change avoids any API dependance on libgcrypt - even if threads are used. - -2010-06-27 Nikos Mavrogiannopoulos - - * tests/chainverify.c: Modified the cacertrsamd5 short-cut. The test - was checking whether verification using a trusted insecurely signed - self signed certificate will fail against a chain that has this as - intermediate. However this test should have succeeded since the - insecure certificate is trusted. This isn't the purpose of this test however. It should have checked - whether using the same certificate as trusted and to be verified and - the GNUTLS_VERIFY_DO_NOT_ALLOW_SAME flag should return an error. - -2010-06-27 Nikos Mavrogiannopoulos - - * tests/chainverify.c: Fail on error. - -2010-06-26 Nikos Mavrogiannopoulos - - * src/certtool.c: When generating private key allow usage of - --pkcs-cipher flag. - -2010-06-22 Nikos Mavrogiannopoulos - - * lib/auth_dhe_psk.c, lib/auth_psk.c, lib/auth_psk.h, - lib/auth_srp.c, lib/auth_srp.h, lib/ext_srp.c, lib/gnutls_int.h: - MAX_SRP_USERNAME -> MAX_USERNAME_SIZE - -2010-06-24 Simon Josefsson - - * README-alpha: We also require GNU make. - -2010-06-24 Simon Josefsson - - * THANKS, configure.ac, lib/configure.ac, libextra/configure.ac: Use - silent build rules. Suggested by Vincent Torri in - - . - -2010-06-22 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/gnutls.h.in: removed OPRFI extension - functions. - -2010-06-22 Nikos Mavrogiannopoulos - - * lib/Makefile.am: removed OPRFI from makefile. - -2010-06-21 Nikos Mavrogiannopoulos - - * lib/x509/verify.c: When verifying certificates use the same - algorithm whether the DO_NOT_ALLOW_SAME flag is set or not. Before - we were shortening certificate list if the flag was not set by the - size of the first certificate found in the trusted list, and keep - the list intact otherwise. Now we shorten the list in the latter - case as well, except for the first certificate. - -2010-06-19 Nikos Mavrogiannopoulos - - * NEWS: Added news entry for EV-certificates. - -2010-06-19 Nikos Mavrogiannopoulos - - * src/tests.c, src/tests.h, src/tls_test.c: Corrected some tests. - Added test to check whether the %COMPAT option is required for this - server. - -2010-06-19 Nikos Mavrogiannopoulos - - * lib/gnutls_extensions.c, lib/gnutls_session_pack.c: Corrections in - the new session packing code. Saving absolute positions in buffers - is no longer done. Now we store only and offset to allow - reallocating the buffer and still do the correct reference. - -2010-06-19 Nikos Mavrogiannopoulos - - * lib/ext_safe_renegotiation.c, lib/ext_safe_renegotiation.h, - lib/ext_signature.c, lib/gnutls_handshake.c: Fixes in new extensions - code that relate to SSL 3.0. - -2010-06-19 Nikos Mavrogiannopoulos - - * configure.ac: version is 2.11.0 - -2010-06-19 Nikos Mavrogiannopoulos - - * doc/cha-cert-auth.texi: Some updates in the PKCS11 text. - -2010-06-19 Nikos Mavrogiannopoulos - - * doc/cha-intro-tls.texi: Some updates on renegotiation text - -2010-06-19 Nikos Mavrogiannopoulos - - * doc/cha-intro-tls.texi: Removed links for discussion of the COMPAT - topic. I don't think they should be in the documentation. - -2010-06-19 Nikos Mavrogiannopoulos - - * doc/cha-intro-tls.texi: Corrected example with %COMPAT. - -2010-06-19 Nikos Mavrogiannopoulos - - * doc/cha-intro-tls.texi: Added gnutls_sec_param_to_pk_bits() - discussion. - -2010-06-19 Nikos Mavrogiannopoulos - - * doc/cha-intro-tls.texi: corrected text on AES - -2010-06-19 Nikos Mavrogiannopoulos - - * lib/pkcs11.c: Only save PIN if login was successful. - -2010-06-19 Nikos Mavrogiannopoulos - - * doc/cha-auth.texi, lib/ext_signature.c: Applied patch by Andreas - Metzler - -2010-06-19 Nikos Mavrogiannopoulos - - * src/benchmark.c: Allow setting debug level via cmd. - -2010-06-19 Nikos Mavrogiannopoulos - - * lib/cryptodev.c: Explicitely terminate cryptodev sessions. - -2010-06-19 Nikos Mavrogiannopoulos - - * lib/gnutls_hash_int.c, lib/gnutls_hash_int.h: Removed the no - longer needed "active" variable. - -2010-06-18 Nikos Mavrogiannopoulos - - * NEWS: documented some of the changes - -2010-06-18 Nikos Mavrogiannopoulos - - * lib/gnutls_cipher_int.c, lib/gnutls_cipher_int.h, - lib/gnutls_hash_int.c, lib/gnutls_hash_int.h: Greatly simplified the - internal hash/hmac and cipher functions. - -2010-06-18 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/pkcs11.h, lib/pkcs11.c, - src/certtool-common.h, src/certtool-gaa.c, src/certtool-gaa.h, - src/certtool.gaa, src/pkcs11.c: Allow listing of private keys only. - Certtool has now the --pkcs11-list-privkeya option. - -2010-06-18 Nikos Mavrogiannopoulos - - * lib/pkcs11_privkey.c: Send correct token name to callback. - -2010-06-18 Nikos Mavrogiannopoulos - - * lib/gnutls_errors.c, lib/includes/gnutls/gnutls.h.in, - lib/pkcs11.c, lib/pkcs11_int.h, lib/pkcs11_privkey.c, - lib/pkcs11_write.c: Added more gnutls errors to map closer to PKCS11 - actual errors. - -2010-06-17 Nikos Mavrogiannopoulos - - * lib/gnutls_errors.c, lib/includes/gnutls/gnutls.h.in, - lib/includes/gnutls/pkcs11.h, lib/pkcs11.c, lib/pkcs11_int.h, - lib/pkcs11_privkey.c, lib/pkcs11_write.c, src/cli.c, src/common.c: - Added option to the PKCS11 PIN callback to save PIN if the token is - being used with a single pkcs11_privkey structure. - -2010-06-17 Nikos Mavrogiannopoulos - - * lib/pkcs11_privkey.c: For Private key operations new sessions are - opened when are needed. This makes the usage of the PKCS11 API - thread safe. The only drawback is the requirement to enter PIN on - every operation. - -2010-06-15 Simon Josefsson - - * src/cli.c: gnutls-cli: Make --starttls work again. Problem introduced in patch to use read() instead of fgets() - committed on 2010-01-27. - -2010-06-14 Nikos Mavrogiannopoulos - - * src/certtool.c, tests/sha2/key-ca-dsa.pem, - tests/sha2/key-subca-dsa.pem, tests/sha2/sha2, tests/sha2/sha2-dsa: - Allow SHA224 hash in certtool. Added tests for SHA-256 and SHA-224 - for DSA. - -2010-06-14 Nikos Mavrogiannopoulos - - * src/certtool.c: Do not warn multiple times for the deprecation of - --bits. - -2010-06-14 Nikos Mavrogiannopoulos - - * lib/ext_session_ticket.c, lib/gnutls_handshake.c, - lib/gnutls_int.h, lib/gnutls_kx.c, lib/gnutls_mbuffers.c, - lib/gnutls_mbuffers.h, lib/gnutls_record.c: Appending data in - mbuffers is now cheaper by avoiding realloc, at the cost of - requiring to specify a maximum mbuffer size at creation. - -2010-06-13 Nikos Mavrogiannopoulos - - * lib/ext_safe_renegotiation.c: Removed unused functions. - -2010-06-13 Nikos Mavrogiannopoulos - - * lib/gnutls_handshake.c, lib/gnutls_int.h: Combined the max ticket - length with the maximum extension data length. - -2010-06-11 Nikos Mavrogiannopoulos - - * NEWS, doc/cha-gtls-app.texi, lib/auth_srp.c, lib/ext_cert_type.c, - lib/ext_cert_type.h, lib/ext_max_record.c, lib/ext_max_record.h, - lib/ext_oprfi.c, lib/ext_oprfi.h, lib/ext_safe_renegotiation.c, - lib/ext_safe_renegotiation.h, lib/ext_server_name.c, - lib/ext_server_name.h, lib/ext_session_ticket.c, - lib/ext_session_ticket.h, lib/ext_signature.c, lib/ext_signature.h, - lib/ext_srp.c, lib/ext_srp.h, lib/gnutls_buffers.c, - lib/gnutls_constate.c, lib/gnutls_extensions.c, - lib/gnutls_extensions.h, lib/gnutls_handshake.c, lib/gnutls_int.h, - lib/gnutls_kx.c, lib/gnutls_mbuffers.c, lib/gnutls_mbuffers.h, - lib/gnutls_record.c, lib/gnutls_session_pack.c, lib/gnutls_state.c, - lib/gnutls_str.c, lib/gnutls_str.h, lib/includes/gnutls/compat.h, - lib/includes/gnutls/gnutls.h.in, lib/libgnutls.map, lib/pkcs11.c, - lib/x509/dn.c, libextra/ext_inner_application.c, - libextra/ext_inner_application.h, libextra/gnutls_extra.c, - libextra/gnutls_ia.c, src/cli.c, src/serv.c, tests/Makefile.am, - tests/oprfi.c, tests/tlsia.c: Simplified and made more safe the - packing of data for session storage. Extensions use the internal API - to store/retrieve during resumption. Removed OPRFI since it was never standardized and was never actually - included in gnutls since it was in inactive ifdef. This was instead - of rewriting it to use the new API. - -2010-06-11 Nikos Mavrogiannopoulos - - * lib/gnutls_buffers.c, lib/gnutls_handshake.c, lib/gnutls_int.h, - lib/gnutls_str.c, lib/gnutls_str.h, lib/gnutls_supplemental.c, - lib/gnutls_supplemental.h, lib/openpgp/output.c, lib/pkcs11.c, - lib/x509/dn.c, lib/x509/output.c: The gnutls_string code was - simplified and integrated with the buffer to avoid having two named - for the same thing. - -2010-06-11 Nikos Mavrogiannopoulos - - * lib/pakchois/pakchois.c: Properly handle fork() case. - -2010-06-09 Nikos Mavrogiannopoulos - - * libextra/gnutls_extra.c: Register the md5 handler if gcrypt is in - fips mode once gnutls_global_init_extra() is called. - -2010-06-09 Nikos Mavrogiannopoulos - - * src/tests.c: corrected tests. - -2010-06-09 Nikos Mavrogiannopoulos - - * lib/pakchois/pakchois.c, lib/pakchois/pakchois.h, lib/pkcs11.c: - Added new calls to pakchois to open an absolute filename. - -2010-06-07 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/pkcs11.h: Removed several comments that - pointed to Alon's implementation comments. We use inline C comments - to generate documentation (not doxygen). - -2010-06-04 Nikos Mavrogiannopoulos - - * lib/Makefile.am, lib/ext_session_ticket.c, - lib/gnutls_algorithms.c, lib/gnutls_buffers.c, - lib/gnutls_buffers.h, lib/gnutls_handshake.c, - lib/gnutls_handshake.h, lib/gnutls_int.h, lib/gnutls_kx.c, - lib/gnutls_mbuffers.c, lib/gnutls_record.c, lib/gnutls_state.c: More - fixes for the rebase. - -2010-06-04 Nikos Mavrogiannopoulos - - * AUTHORS: Added Jonathan. - -2010-06-04 Nikos Mavrogiannopoulos - - * lib/pakchois/pakchois.c: Provider unref must be done after all - sessions have been closed. - -2010-06-03 Nikos Mavrogiannopoulos - - * lib/Makefile.am: Several fixes for the broken rebase. - -2010-06-03 Nikos Mavrogiannopoulos - - * doc/cha-intro-tls.texi: Merged with master. - -2010-06-03 Nikos Mavrogiannopoulos - - * lib/gnutls_handshake.c, lib/gnutls_mbuffers.h, - lib/gnutls_record.c: Some other changes to mbuffers to make gnutls - (a bit more) agnostic on their internal structure. - -2010-06-03 Nikos Mavrogiannopoulos - - * lib/x509/verify.c: Corrected prefered hash algorithm return value - on RSA. - -2010-06-03 Nikos Mavrogiannopoulos - - * lib/gnutls_global.c: Use GCRYCTL_ENABLE_QUICK_RANDOM when using - libgcrypt. - -2010-05-31 Nikos Mavrogiannopoulos - - * .gitignore: Ignore more files. - -2010-05-31 Nikos Mavrogiannopoulos - - * tests/sha2/sha2-dsa: Remove the correct file - -2010-05-31 Nikos Mavrogiannopoulos - - * tests/sha2/key-ca-dsa.pem, tests/sha2/key-dsa.pem: Added missing - files. - -2010-05-31 Nikos Mavrogiannopoulos - - * lib/gnutls_pk.c, lib/gnutls_pk.h, lib/gnutls_pubkey.c, - lib/includes/gnutls/abstract.h, lib/includes/gnutls/x509.h, - lib/x509/crq.c, lib/x509/x509.c, src/certtool.c: The - get_preferred_hash_algorithm() functions have now an extra argument - to indicate whether it is mandatory to use this algorithm. - -2010-05-31 Nikos Mavrogiannopoulos - - * doc/examples/ex-crq.c, lib/includes/gnutls/x509.h, - lib/libgnutls.map, lib/x509/crq.c: Added - gnutls_x509_crq_get_preferred_hash_algorithm(). - -2010-05-31 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_pubkey.c, lib/includes/gnutls/abstract.h, - lib/includes/gnutls/x509.h, lib/libgnutls.map, lib/x509/privkey.c, - lib/x509/verify.c, lib/x509/x509.c, src/certtool.c: Added - gnutls_pubkey_get_preferred_hash_algorithm() and - gnutls_x509_crt_get_preferred_hash_algorithm() to allow determining - the hash algorithm to use during signing. This is needed in the case - of DSA that uses specific versions of SHA depending on the size of - the parameters. - -2010-05-31 Nikos Mavrogiannopoulos - - * doc/gnutls.texi, lib/Makefile.am, lib/build-aux/config.rpath, - lib/gcrypt/pk.c, lib/gnutls_privkey.c, lib/pkcs11.c, - lib/pkcs11_privkey.c, lib/x509/privkey.c, lib/x509/sign.c, - lib/x509/sign.h, lib/x509/verify.c, lib/x509/x509.c, src/pkcs11.c: - Several fixes after big rebase. - -2010-05-30 Nikos Mavrogiannopoulos - - * tests/sha2/Makefile.am, tests/sha2/sha2-dsa: Test the DSA with - SHA256 as well. - -2010-05-30 Nikos Mavrogiannopoulos - - * lib/x509/mpi.c: Print debugging information on error. - -2010-05-30 Nikos Mavrogiannopoulos - - * NEWS, lib/gcrypt/pk.c, lib/gnutls_pk.c, lib/gnutls_sig.c, - lib/nettle/mpi.c, lib/nettle/pk.c, lib/opencdk/pubkey.c, - lib/opencdk/sig-check.c, lib/opencdk/verify.c, - lib/openpgp/gnutls_openpgp.c, lib/openpgp/pgp.c, - lib/openpgp/privkey.c, lib/pkcs11_privkey.c, lib/x509/privkey.c, - lib/x509/x509_int.h: Nettle library can now parse the PGP integers. - Except for SHA-224/384/512 nettle seems to be fully working now. - -2010-05-30 Nikos Mavrogiannopoulos - - * src/certtool.c: use --sec-param to generate privkey. - -2010-05-30 Nikos Mavrogiannopoulos - - * tests/openpgpself.c: reduced log level to a sane one - -2010-05-30 Nikos Mavrogiannopoulos - - * tests/pathlen/ca-no-pathlen.pem, - tests/pathlen/no-ca-or-pathlen.pem: Corrected for new output of - --print-certificate-info - -2010-05-30 Nikos Mavrogiannopoulos - - * tests/sha2/sha2: Print information on failure. - -2010-05-30 Nikos Mavrogiannopoulos - - * lib/libgnutls.map, src/certtool.c: Print exp1 and exp2 if they are - available. - -2010-05-30 Nikos Mavrogiannopoulos - - * tests/pkcs1-padding/pkcs1-pad, tests/pkcs12-decode/pkcs12, - tests/pkcs8-decode/pkcs8, tests/userid/userid: Only print output if - something fails - -2010-05-30 Nikos Mavrogiannopoulos - - * lib/m4/hooks.m4, lib/pakchois/pakchois.c: Some pakchois fixes. - -2010-05-30 Nikos Mavrogiannopoulos - - * lib/gnutls_global.c: Fixup to compile with nettle - -2010-05-29 Nikos Mavrogiannopoulos - - * lib/m4/hooks.m4: Do not bother with MODPATH. We don't use it. - -2010-05-29 Nikos Mavrogiannopoulos - - * lib/debug.c, lib/debug.h: Added again _gnutls_dump_mpi() to assist - in debugging. - -2010-05-29 Nikos Mavrogiannopoulos - - * tests/pkcs12_encode.c: Added debugging - -2010-05-29 Nikos Mavrogiannopoulos - - * lib/gnutls_sig.c: Allow DSA with other than SHA1 algorithms in - TLS. - -2010-05-29 Nikos Mavrogiannopoulos - - * lib/pkix_asn1_tab.c: removed more stuff. - -2010-05-29 Nikos Mavrogiannopoulos - - * lib/pkix.asn, lib/x509/common.c: LocalKeyId and XmppAddr were - incorporated. - -2010-05-29 Nikos Mavrogiannopoulos - - * lib/pkix.asn, lib/pkix_asn1_tab.c: No need for those OIDs any - more. - -2010-05-29 Nikos Mavrogiannopoulos - - * tests/dn2.c: Corrected to support new EV_ values. - -2010-05-29 Nikos Mavrogiannopoulos - - * tests/crq_key_id.c, tests/cve-2009-1416.c, tests/pkcs12_s2k_pem.c: - avoid calling gcrypt directly. - -2010-05-29 Nikos Mavrogiannopoulos - - * NEWS, lib/includes/gnutls/crypto.h, lib/libgnutls.map, - lib/random.c, lib/random.h, src/crypt.c, src/psk.c, - tests/mini-eagain.c: exported gnutls_rnd(). - -2010-05-29 Nikos Mavrogiannopoulos - - * lib/x509/common.c, lib/x509/common.h, lib/x509/dn.c: The - recognition of DN elements is now self contained. It does not need - entries in pkix.asn. - -2010-05-29 Nikos Mavrogiannopoulos - - * lib/pkix.asn, lib/pkix_asn1_tab.c, lib/x509/common.c: Added - support for EV certificate attributes. - -2010-05-29 Nikos Mavrogiannopoulos - - * lib/m4/hooks.m4, lib/nettle/cipher.c: Fixed nettle detection and - AES. - -2010-05-29 Nikos Mavrogiannopoulos - - * lib/gnutls_dh_primes.c: documentation updates - -2010-05-29 Nikos Mavrogiannopoulos - - * src/certtool-common.h, src/certtool.c, src/prime.c: Generate - dh-params also used --sec-param. - -2010-05-29 Nikos Mavrogiannopoulos - - * lib/nettle/mpi.c: Document that the generator is the generator of - the subgroup and not the group. - -2010-05-29 Nikos Mavrogiannopoulos - - * src/cli.c: Corrected certificate callback. - -2010-05-28 Nikos Mavrogiannopoulos - - * lib/gcrypt/Makefile.am, lib/nettle/Makefile.am, - lib/nettle/cipher.c: More AES stuff (still doesn't work). - -2010-05-28 Nikos Mavrogiannopoulos - - * lib/nettle/pk.c: Correction in RSA encryption. - -2010-05-28 Nikos Mavrogiannopoulos - - * lib/nettle/cipher.c: Fixed issue with AES. - -2010-05-28 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_algorithms.c, lib/includes/gnutls/gnutls.h.in, - lib/libgnutls.map, lib/openpgp/output.c, lib/x509/output.c, - lib/x509/privkey.c, src/certtool-gaa.c, src/certtool-gaa.h, - src/certtool.c, src/certtool.gaa: Added - gnutls_sec_param_to_pk_bits() et al. to allow select bit sizes for - private keys using a human understandable scale. - -2010-05-28 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_algorithms.c, lib/includes/gnutls/gnutls.h.in, - lib/x509/common.h: Added support for SHA224 and SHA256 in DSA. - -2010-05-28 Nikos Mavrogiannopoulos - - * lib/m4/hooks.m4: Always use included pakchois. - -2010-05-27 Nikos Mavrogiannopoulos - - * doc/examples/ex-cert-select-pkcs11.c: make sure all lines fit in - page. - -2010-05-26 Nikos Mavrogiannopoulos - - * doc/cha-cert-auth.texi: make example more compact by removing - error checking. - -2010-05-26 Nikos Mavrogiannopoulos - - * doc/cha-bib.texi, doc/cha-cert-auth.texi: Added bibliographic - reference to PKCS #11. - -2010-05-26 Nikos Mavrogiannopoulos - - * doc/cha-cert-auth.texi: Added sketch for PKCS #11 usage. - -2010-05-26 Nikos Mavrogiannopoulos - - * doc/credentials/x509-server-dsa.pem, - doc/credentials/x509-server-key-dsa.pem: Added 2048 bit DSA key - -2010-05-26 Nikos Mavrogiannopoulos - - * lib/opencdk/armor.c, lib/opencdk/read-packet.c, - lib/opencdk/stream.c, lib/opencdk/write-packet.c: Increased log - level of several messages. - -2010-05-25 Nikos Mavrogiannopoulos - - * doc/credentials/x509/key.pem: Corrected coefficient and exp[12] - values in key. - -2010-05-25 Nikos Mavrogiannopoulos - - * lib/nettle/pk.c: Added blinding in RSA. Correct broken private - keys on import. Nettle uses more values than gcrypt does from RSA - decryption and it seemed that some values in our stored private keys - were messy (generated by very old gnutls). - -2010-05-24 Nikos Mavrogiannopoulos - - * doc/examples/ex-cert-select-pkcs11.c, lib/gnutls_x509.c, - lib/includes/gnutls/pkcs11.h, lib/pkcs11.c, lib/pkcs11_int.h, - lib/pkcs11_privkey.c, lib/pkcs11_write.c, src/cli.c: Simplified - internal API. The only question that remains now is how to handle - the gnutls_pkcs11_privkey_t. Currently it opens a session and - maintains a handle to the object. This will require locks to be - added on operations. Alternatively new sessions may be opened for - each operation performed. This is guarranteed by PKCS #11 to be - thread safe but will of course require to ask for the PIN again. - -2010-05-24 Nikos Mavrogiannopoulos - - * lib/pakchois/pakchois.c: Removed debugging print. - -2010-05-24 Nikos Mavrogiannopoulos - - * lib/Makefile.am, lib/configure.ac, lib/m4/hooks.m4, - lib/pakchois/errors.c, lib/pakchois/pakchois.c, - lib/pakchois/pakchois.h, lib/pakchois/pakchois11.h: Added a modified - pakchois library (to open arbitrary pkcs11 modules). Current gnutls - works only with this one. - -2010-05-24 Nikos Mavrogiannopoulos - - * doc/cha-gtls-app.texi: Added missing file. - -2010-05-24 Nikos Mavrogiannopoulos - - * doc/TODO: Removed finished items. - -2010-05-24 Nikos Mavrogiannopoulos - - * lib/pkcs11_write.c: Noted that there things to be done. - -2010-05-24 Nikos Mavrogiannopoulos - - * doc/Makefile.am, doc/cha-cert-auth.texi: Added documentation on - abstract types. - -2010-05-23 Nikos Mavrogiannopoulos - - * lib/gcrypt/pk.c, lib/gnutls_pk.c, lib/gnutls_pk.h, - lib/opencdk/pubkey.c, lib/openpgp/privkey.c, lib/x509/privkey.c: - Common code for calculation of RSA exp1 and exp2. Also update the - openpgp code to calculate those values. - -2010-05-23 Nikos Mavrogiannopoulos - - * lib/auth_dh_common.c, lib/gnutls_dh_primes.c, lib/x509/privkey.c: - More fixes. - -2010-05-23 Nikos Mavrogiannopoulos - - * lib/auth_dh_common.c, lib/gcrypt/mpi.c, lib/gnutls_mpi.c: - Corrected nicely hidden bug that caused accesses to uninitialized - variables if the gcry_mpi_print() functions were pessimists and - returned more size than actually needed for the print. - -2010-05-23 Nikos Mavrogiannopoulos - - * lib/gcrypt/pk.c: Added some sanity checks. - -2010-05-23 Nikos Mavrogiannopoulos - - * NEWS, doc/cha-auth.texi, doc/cha-bib.texi, - doc/cha-cert-auth.texi, doc/cha-ciphersuites.texi, - doc/cha-copying.texi, doc/cha-functions.texi, - doc/cha-internals.texi, doc/cha-intro-tls.texi, - doc/cha-library.texi, doc/cha-preface.texi, doc/cha-programs.texi, - doc/cha-tls-app.texi, doc/gnutls.texi, - lib/includes/gnutls/pkcs11.h, lib/libgnutls.map, lib/pkcs11.c: - Documentation updates. Separated big gnutls.texi to chapter to allow - easier maintainance. - -2010-05-23 Nikos Mavrogiannopoulos - - * lib/Makefile.am, lib/gcrypt/mpi.c, lib/gcrypt/pk.c, - lib/includes/gnutls/crypto.h, lib/includes/gnutls/pkcs11.h, - lib/includes/gnutls/x509.h, lib/libgnutls.map, lib/nettle/pk.c, - lib/pkcs11.c, lib/pkcs11_int.h, lib/pkcs11_privkey.c, - lib/pkcs11_write.c, lib/x509/privkey.c, lib/x509/x509_int.h, - src/certtool-common.h, src/certtool-gaa.c, src/certtool-gaa.h, - src/certtool.c, src/certtool.gaa, src/crypt-gaa.c, src/pkcs11.c: - Added support to copy certificates and private keys to tokens. New - functions: gnutls_pkcs11_copy_x509_crt() - gnutls_pkcs11_copy_x509_privkey() gnutls_pkcs11_delete_url() Certtool was updated to allow copying certificates and private keys - to tokens. Deleting an object has issues (segfault) but it seems to - be related with libopensc and its pkcs11 API. - -2010-05-22 Nikos Mavrogiannopoulos - - * lib/x509/verify.c: Added gnutls_pubkey_verify_hash(), - gnutls_pubkey_get_verify_algorithm(). - -2010-05-22 Nikos Mavrogiannopoulos - - * lib/pkcs11.c, src/pkcs11.c: Added gnutls_pubkey_import_pkcs11(), - gnutls_pubkey_import_rsa_raw(), gnutls_pubkey_import_dsa_raw(), - gnutls_pkcs11_obj_export(). - -2010-05-22 Nikos Mavrogiannopoulos - - * NEWS: Tried to document recent changes. - -2010-05-22 Nikos Mavrogiannopoulos - - * lib/gnutls_x509.c, lib/pkcs11.c, lib/pkcs11_int.h, - src/certtool-gaa.c, src/certtool.gaa, src/pkcs11.c: Added - gnutls_pubkey_t abstract type to handle public keys. It can - currently import/export public keys from existing certificate types - as well as from PKCS #11 URL. This allows generating a certificate - or certificate request from a given public key (currently one could - only generate them from a given private key). PKCS#11 API augmented to allow reading arbitrary objects instead of - just certificates. Certtool updated to list those objects. - -2010-05-22 Nikos Mavrogiannopoulos - - * lib/pkcs11.c: Added gnutls_pkcs11_token_get_flags() to distinguish - between hardware and soft tokens. - -2010-05-21 Nikos Mavrogiannopoulos - - * lib/Makefile.am: Added support for libnettle backend. This uses - gmp for big number operations. It is not currently completed. It - lacks RSA blinding as well as optimizations. - -2010-05-18 Nikos Mavrogiannopoulos - - * lib/x509/sign.c: Corrected bug in DSA signature generation. - -2010-05-18 Nikos Mavrogiannopoulos - - * lib/x509/x509_int.h: Added operations to sign CRLs, certificates - and requests with an abstract key and thus with a PKCS #11 key as - well. - -2010-05-18 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/privkey.h: privkey.h -> abstract.h - -2010-05-18 Nikos Mavrogiannopoulos - - * lib/gnutls_x509.c: The gnutls-cli --x509cafile can now be a PKCS - #11 URL. It can read gnome-keyring's certificates and use them in - the trusted list. - -2010-05-16 Nikos Mavrogiannopoulos - - * lib/gnutls_x509.c: Corrections in openpgp private key usage. - -2010-05-16 Nikos Mavrogiannopoulos - - * tests/x509self.c: Updated self tests and examples to avoid using - deprecated functions such as - gnutls_certificate_server_set_retrieve_function and the sign - callback. - -2010-05-16 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/privkey.h, lib/pkcs11_int.h: Added - documentation for most of the new functions. - -2010-05-16 Nikos Mavrogiannopoulos - - * lib/pkcs11.c: Documented that it was initially based on neon - pkcs11 and got ideas from pkcs11-helper library. - -2010-05-15 Nikos Mavrogiannopoulos - - * lib/pkcs11.c: Corrections to properly handle token removal and - insert. - -2010-05-15 Nikos Mavrogiannopoulos - - * lib/Makefile.am, lib/gnutls_x509.c, lib/includes/gnutls/pkcs11.h, - lib/includes/gnutls/privkey.h, lib/pkcs11.c, lib/x509/sign.c: Added - gnutls_pkcs11_privkey_t and gnutls_privkey_t types. Those are an - abstract private key type that can be used to sign/encrypt any - private key of pkcs11,x509 or openpgp types. Added support for - PKCS11 in gnutls-cli/gnutls-serv. - -2010-05-10 Nikos Mavrogiannopoulos - - * src/certtool.c, src/pkcs11.c: Added several helper functions, to - allow printing of tokens. - -2010-05-10 Nikos Mavrogiannopoulos - - * lib/pkcs11.c, src/certtool-gaa.c, src/certtool.c, - src/certtool.gaa, src/pkcs11.c: Added ability to export certificates - from PKCS #11 tokens. Added ability to list trusted certificates, - or only certificates with a corresponding private key or just all. - -2010-05-09 Nikos Mavrogiannopoulos - - * lib/Makefile.am, lib/configure.ac, lib/includes/gnutls/pkcs11.h, - lib/pkcs11.c, src/certtool-gaa.c, src/certtool-gaa.h, - src/certtool.gaa, src/pkcs11.c: Added initial PKCS #11 support. - Certtool can now print lists of certificates available in system. - -2010-05-22 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_pubkey.c, lib/includes/gnutls/abstract.h, - lib/libgnutls.map, lib/x509/common.h, lib/x509/verify.c, - lib/x509/x509.c, lib/x509/x509_int.h: Added - gnutls_pubkey_verify_hash(), gnutls_pubkey_get_verify_algorithm(). - -2010-05-22 Nikos Mavrogiannopoulos - - * NEWS, configure.ac, lib/gnutls_pubkey.c, - lib/includes/gnutls/abstract.h, lib/includes/gnutls/pkcs11.h, - lib/libgnutls.map, lib/pkcs11.c, lib/pkcs11_int.h, lib/x509/x509.c, - src/pkcs11.c: Added gnutls_pubkey_import_pkcs11(), - gnutls_pubkey_import_rsa_raw(), gnutls_pubkey_import_dsa_raw(), - gnutls_pkcs11_obj_export(). - -2010-05-22 Nikos Mavrogiannopoulos - - * .gitignore: Ignore files that should be ignored. - -2010-05-22 Nikos Mavrogiannopoulos - - * NEWS, src/certtool-gaa.c, src/certtool.gaa: Tried to document - recent changes. - -2010-05-22 Nikos Mavrogiannopoulos - - * lib/Makefile.am, lib/gnutls_pubkey.c, lib/gnutls_x509.c, - lib/includes/gnutls/abstract.h, lib/includes/gnutls/pkcs11.h, - lib/libgnutls.map, lib/pkcs11.c, lib/pkcs11_int.h, - lib/pkcs11_privkey.c, lib/x509/common.c, lib/x509/common.h, - lib/x509/mpi.c, lib/x509/x509.c, lib/x509/x509_int.h, - src/certtool-common.h, src/certtool-gaa.c, src/certtool-gaa.h, - src/certtool.c, src/certtool.gaa, src/pkcs11.c: Added - gnutls_pubkey_t abstract type to handle public keys. It can - currently import/export public keys from existing certificate types - as well as from PKCS #11 URL. This allows generating a certificate - or certificate request from a given public key (currently one could - only generate them from a given private key). PKCS#11 API augmented to allow reading arbitrary objects instead of - just certificates. Certtool updated to list those objects. - -2010-05-22 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/pkcs11.h, lib/pkcs11.c: Added - gnutls_pkcs11_token_get_flags() to distinguish between hardware and - soft tokens. - -2010-05-22 Nikos Mavrogiannopoulos - - * lib/Makefile.am, lib/libgnutlsxx.map, lib/m4/hooks.m4: Export all - symbols from C++ library. This library doesn't contain any internal - symbols anyway and there is no reason to mess with the C++ ABI that - hasn't got the problems of C. - -2010-05-21 Nikos Mavrogiannopoulos - - * configure.ac, doc/examples/ex-serv-export.c, - doc/examples/ex-serv-psk.c, doc/examples/ex-serv1.c, - lib/Makefile.am, lib/auth_srp.c, lib/cipher-libgcrypt.c, - lib/configure.ac, lib/gcrypt/Makefile.am, lib/gcrypt/cipher.c, - lib/gcrypt/mac.c, lib/gcrypt/mpi.c, lib/gcrypt/pk.c, - lib/gcrypt/rnd.c, lib/gnutls_global.c, lib/gnutls_mpi.c, - lib/gnutls_srp.c, lib/m4/hooks.m4, lib/mac-libgcrypt.c, - lib/mpi-libgcrypt.c, lib/nettle/Makefile.am, lib/nettle/cipher.c, - lib/nettle/mac.c, lib/nettle/mpi.c, lib/nettle/pk.c, - lib/nettle/rnd.c, lib/pk-libgcrypt.c, lib/rnd-libgcrypt.c, - src/certtool.c, src/cli.c, src/serv.c, tests/chainverify.c: Added - support for libnettle backend. This uses gmp for big number - operations. It is not currently completed. It lacks RSA blinding as - well as optimizations. - -2010-05-18 Nikos Mavrogiannopoulos - - * doc/manpages/gnutls-cli.1, src/cli-gaa.c, src/cli.gaa, - src/serv-gaa.c, src/serv.gaa: Documented that the --file options in - gnutls-cli and gnutls-serv can accept a PKCS #11 URL. - -2010-05-18 Nikos Mavrogiannopoulos - - * lib/x509/sign.c: Corrected bug in DSA signature generation. - -2010-05-18 Nikos Mavrogiannopoulos - - * lib/gnutls_privkey.c, lib/includes/gnutls/abstract.h, - lib/libgnutls.map, lib/x509/crl_write.c, lib/x509/crq.c, - lib/x509/mpi.c, lib/x509/sign.c, lib/x509/x509_int.h, - lib/x509/x509_write.c: Added operations to sign CRLs, certificates - and requests with an abstract key and thus with a PKCS #11 key as - well. - -2010-05-18 Nikos Mavrogiannopoulos - - * lib/auth_cert.c, lib/auth_cert.h, lib/gnutls_privkey.c, - lib/gnutls_sig.h, lib/gnutls_x509.h, - lib/includes/gnutls/abstract.h, lib/includes/gnutls/privkey.h, - lib/openpgp/gnutls_openpgp.h: privkey.h -> abstract.h - -2010-05-18 Nikos Mavrogiannopoulos - - * lib/Makefile.am, lib/configure.ac, lib/gnutls_x509.c, src/cli.c: - The gnutls-cli --x509cafile can now be a PKCS #11 URL. It can read - gnome-keyring's certificates and use them in the trusted list. - -2010-05-16 Nikos Mavrogiannopoulos - - * lib/pkcs11.c: Documented that gnutls_global_init calls - gnutls_pkcs11_init. - -2010-05-16 Nikos Mavrogiannopoulos - - * src/cli.c: Only send termination request to avoid stalling on - servers that do not reply. - -2010-05-16 Nikos Mavrogiannopoulos - - * lib/gnutls_handshake.c, lib/gnutls_state.c, lib/gnutls_state.h: - Corrected issue on the %SSL3_RECORD_VERSION priority string. It now - works even when resuming a session. - -2010-05-16 Nikos Mavrogiannopoulos - - * doc/examples/Makefile.am, doc/examples/ex-cert-select-pkcs11.c, - doc/gnutls.texi: Added initial example. - -2010-05-16 Nikos Mavrogiannopoulos - - * lib/auth_cert.h, lib/gnutls_x509.c, lib/openpgp/gnutls_openpgp.c: - Corrections in openpgp private key usage. - -2010-05-16 Nikos Mavrogiannopoulos - - * doc/examples/ex-cert-select.c, tests/Makefile.am, - tests/pkcs12_s2k.c, tests/x509dn.c, tests/x509signself.c: Updated - self tests and examples to avoid using deprecated functions such as - gnutls_certificate_server_set_retrieve_function and the sign - callback. - -2010-05-16 Nikos Mavrogiannopoulos - - * lib/gnutlsxx.cpp, lib/includes/gnutls/gnutlsxx.h, src/tests.c: Use - the new callback function. - -2010-05-16 Nikos Mavrogiannopoulos - - * lib/gnutls_privkey.c, lib/includes/gnutls/pkcs11.h, - lib/includes/gnutls/privkey.h, lib/libgnutls.map, lib/pkcs11.c, - lib/pkcs11_int.h, lib/pkcs11_privkey.c, lib/x509/privkey.c: Added - documentation for most of the new functions. - -2010-05-16 Nikos Mavrogiannopoulos - - * lib/pkcs11.c: Documented that it was initially based on neon - pkcs11 and got ideas from pkcs11-helper library. - -2010-05-15 Nikos Mavrogiannopoulos - - * lib/gnutls_x509.c, lib/libgnutls.map, lib/pkcs11.c, - lib/pkcs11_int.h, lib/pkcs11_privkey.c, src/common.c: Corrections to - properly handle token removal and insert. - -2010-05-15 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/compat.h, lib/includes/gnutls/gnutls.h.in: - Deprecated the sign callback. - -2010-05-15 Nikos Mavrogiannopoulos - - * doc/manpages/Makefile.am, lib/Makefile.am, lib/auth_cert.c, - lib/auth_cert.h, lib/auth_dhe.c, lib/auth_rsa.c, - lib/auth_rsa_export.c, lib/auth_srp_rsa.c, lib/gnutls_cert.c, - lib/gnutls_cert.h, lib/gnutls_global.c, lib/gnutls_int.h, - lib/gnutls_privkey.c, lib/gnutls_sig.c, lib/gnutls_sig.h, - lib/gnutls_state.c, lib/gnutls_str.c, lib/gnutls_x509.c, - lib/gnutls_x509.h, lib/includes/gnutls/compat.h, - lib/includes/gnutls/gnutls.h.in, lib/includes/gnutls/openpgp.h, - lib/includes/gnutls/pkcs11.h, lib/includes/gnutls/privkey.h, - lib/includes/gnutls/x509.h, lib/libgnutls.map, - lib/openpgp/gnutls_openpgp.c, lib/openpgp/gnutls_openpgp.h, - lib/openpgp/openpgp_int.h, lib/pkcs11.c, lib/pkcs11_int.h, - lib/pkcs11_privkey.c, lib/x509/privkey.c, lib/x509/sign.c, - lib/x509/sign.h, lib/x509/x509_int.h, src/cli.c, src/common.c, - src/common.h, src/pkcs11.c, src/serv.c: Added - gnutls_pkcs11_privkey_t and gnutls_privkey_t types. Those are an - abstract private key type that can be used to sign/encrypt any - private key of pkcs11,x509 or openpgp types. Added support for - PKCS11 in gnutls-cli/gnutls-serv. - -2010-05-15 Nikos Mavrogiannopoulos - - * .gitignore: ignore unrelated to gnutls files. - -2010-05-10 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/pkcs11.h, lib/libgnutls.map, lib/pkcs11.c, - src/certtool-common.h, src/certtool-gaa.c, src/certtool-gaa.h, - src/certtool.c, src/certtool.gaa, src/pkcs11.c: Added several helper - functions, to allow printing of tokens. - -2010-05-10 Nikos Mavrogiannopoulos - - * lib/gnutls_errors.c, lib/gnutls_str.c, - lib/includes/gnutls/gnutls.h.in, lib/includes/gnutls/pkcs11.h, - lib/pkcs11.c, src/certtool-common.h, src/certtool-gaa.c, - src/certtool-gaa.h, src/certtool.c, src/certtool.gaa, src/pkcs11.c: - Added ability to export certificates from PKCS #11 tokens. Added - ability to list trusted certificates, or only certificates with a - corresponding private key or just all. - -2010-05-09 Nikos Mavrogiannopoulos - - * lib/Makefile.am, lib/auth_srp.c, lib/configure.ac, - lib/gnutls.pc.in, lib/gnutls_constate.c, lib/gnutls_errors.c, - lib/gnutls_handshake.c, lib/gnutls_kx.c, lib/gnutls_psk.c, - lib/gnutls_str.c, lib/gnutls_str.h, lib/includes/Makefile.am, - lib/includes/gnutls/pkcs11.h, lib/libgnutls.map, - lib/openpgp/gnutls_openpgp.c, lib/pkcs11.c, lib/x509/common.c, - lib/x509/dn.c, src/Makefile.am, src/certtool-common.h, - src/certtool-gaa.c, src/certtool-gaa.h, src/certtool.c, - src/certtool.gaa, src/pkcs11.c: Added initial PKCS #11 support. - Certtool can now print lists of certificates available in system. - -2010-03-07 Nikos Mavrogiannopoulos - - * lib/x509/verify.c: Optimized the check_if_same(). - -2010-02-24 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.c, lib/x509/common.c, lib/x509/common.h: - Added a forgoten by god OID for RSA. Warn using the actual OID on - unknown public key algorithms. - -2009-12-09 Jonathan Bastien-Filiatrault - - * lib/ext_session_ticket.c: Adapt session ticket support to mbuffer - API. - -2009-08-16 Jonathan Bastien-Filiatrault - - * lib/gnutls_handshake.c, lib/gnutls_handshake.h, lib/gnutls_kx.c, - lib/gnutls_mbuffers.c, lib/gnutls_mbuffers.h: Use mbuffers for - handshake synthesis. - -2009-08-15 Jonathan Bastien-Filiatrault - - * lib/gnutls_buffers.c, lib/gnutls_buffers.h, - lib/gnutls_handshake.c: Make _gnutls_handshake_io_send_int accept a - mbuffer_st. - -2009-08-15 Jonathan Bastien-Filiatrault - - * lib/gnutls_buffers.c, lib/gnutls_buffers.h, - lib/gnutls_handshake.c, lib/gnutls_int.h, lib/gnutls_state.c: - Simplify handshake send buffer logic. - -2009-08-15 Jonathan Bastien-Filiatrault - - * lib/gnutls_buffers.c: Fix interrupted write braino. - -2009-08-15 Jonathan Bastien-Filiatrault - - * lib/gnutls_mbuffers.c: Avoid pointer warning. - -2009-08-15 Jonathan Bastien-Filiatrault - - * lib/gnutls_buffers.c, lib/gnutls_mbuffers.c, - lib/gnutls_mbuffers.h: Remove now useless - _gnutls_mbuffer_enqueue{,copy} functions. - -2009-08-15 Jonathan Bastien-Filiatrault - - * lib/gnutls_buffers.c, lib/gnutls_buffers.h, - lib/gnutls_mbuffers.c, lib/gnutls_record.c: Allocate data buffer - with mbuffer_st structure as suggested by Nikos. - -2009-08-15 Jonathan Bastien-Filiatrault - - * lib/gnutls_mbuffers.c, lib/gnutls_mbuffers.h: Prepare for mbuffer - allocation by the caller. - -2009-08-15 Jonathan Bastien-Filiatrault - - * lib/gnutls_buffers.c: GNUify some missed GNUification. - -2009-08-15 Jonathan Bastien-Filiatrault - - * lib/gnutls_buffers.c: Harmonize read and write function names. - -2009-08-15 Jonathan Bastien-Filiatrault - - * lib/gnutls_buffers.c: Now that LEVEL and LEVEL_EQ are fixed, use - less lines. - -2009-08-15 Jonathan Bastien-Filiatrault - - * lib/gnutls_errors.h: Make LEVEL and LEVEL_EQ macros safer. Once again, I got bit by this pretty hard. - -2009-08-09 Jonathan Bastien-Filiatrault - - * lib/gnutls_record.c: Use a datum for ciphered data in - _gnutls_send_int. - -2009-08-09 Jonathan Bastien-Filiatrault - - * lib/gnutls_buffers.h: Remove the prototype for the non-existant - function _gnutls_io_write_buffered2. - -2009-08-09 Jonathan Bastien-Filiatrault - - * lib/gnutls_int.h, lib/gnutls_record.c: Cleanup of the remaining - internals.record_send_buffer mess. - -2009-08-09 Jonathan Bastien-Filiatrault - - * lib/gnutls_buffers.c: Remove yet another !@#$% instance of - redundant hexadecimal dumping. - -2009-08-09 Jonathan Bastien-Filiatrault - - * lib/gnutls_buffers.c, lib/gnutls_buffers.h, lib/gnutls_record.c: - Modify slightly the contract of _gnutls_io_write_buffered as - suggested by Nikos Mavrogiannopoulos. - -2009-08-09 Jonathan Bastien-Filiatrault - - * lib/gnutls_buffers.c, lib/gnutls_mbuffers.c, - lib/gnutls_mbuffers.h: Pass datums to mbuffers by address instead of - by value. - -2009-08-08 Nikos Mavrogiannopoulos - - * lib/gnutls_handshake.c, lib/gnutls_record.c: Corrected case where - handshake data were received during a session. It now stores them - for future use by a gnutls_handshake(). Reported by Peter - Hendrickson . - -2009-08-06 Jonathan Bastien-Filiatrault - - * lib/gnutls_buffers.c: Simplify _gnutls_io_write_buffered and - _gnutls_io_write_flush with mbuffers. - -2009-08-06 Jonathan Bastien-Filiatrault - - * lib/gnutls_int.h, lib/gnutls_state.c: Change type of - internals.record_send_buffer to a mbuffer. - -2009-08-06 Jonathan Bastien-Filiatrault - - * lib/gnutls_buffers.c: Extract a simple_write function from - _gnutls_io_write_buffered. - -2009-08-06 Jonathan Bastien-Filiatrault - - * lib/gnutls_buffers.c: Add dump_bytes function. - -2009-08-06 Jonathan Bastien-Filiatrault - - * lib/Makefile.am, lib/gnutls_int.h, lib/gnutls_mbuffers.c, - lib/gnutls_mbuffers.h: Add gnutls_mbuffers.{c,h} with some basic - mbuffer operations. - -2009-08-01 Jonathan Bastien-Filiatrault - - * lib/gnutls_algorithms.c: Do not rely on version ordering; use - switch..case instead. - -2009-08-01 Jonathan Bastien-Filiatrault - - * lib/auth_cert.c: Remove hardcoded version checks in auth_cert.c. - -2009-08-01 Jonathan Bastien-Filiatrault - - * lib/gnutls_state.c: Remove hardcoded version check in - gnutls_state.c. - -2009-08-01 Jonathan Bastien-Filiatrault - - * lib/gnutls_cipher.c: Remove hardcoded version checks in - gnutls_cipher.c. - -2009-08-01 Jonathan Bastien-Filiatrault - - * lib/gnutls_sig.c: Remove hardcoded version checks in gnutls_sig.c. - -2009-08-01 Jonathan Bastien-Filiatrault - - * lib/gnutls_handshake.c: Remove hardcoded version checks in - gnutls_handshake.c. - -2009-08-01 Jonathan Bastien-Filiatrault - - * lib/gnutls_algorithms.c: Add version check function for selectable - signature/hash certificate algorithms. - -2009-08-01 Jonathan Bastien-Filiatrault - - * lib/gnutls_algorithms.c: Add version check functions for - non-minimal padding. - -2009-08-01 Jonathan Bastien-Filiatrault - - * lib/gnutls_algorithms.c, lib/gnutls_algorithms.h: Add version - check function for explicit IV. - -2009-08-01 Jonathan Bastien-Filiatrault - - * lib/gnutls_algorithms.h: Add version check functions for - selectable PRF and extension handling. - -2010-06-01 Nikos Mavrogiannopoulos - - * doc/announce.txt, doc/gnutls.texi, doc/manpages/gnutls-cli.1, - doc/manpages/gnutls-serv.1, lib/ext_safe_renegotiation.c, - lib/gnutls_handshake.c, lib/gnutls_int.h, lib/gnutls_priority.c, - lib/gnutls_state.c, tests/safe-renegotiation/srn1.c, - tests/safe-renegotiation/srn5.c, tests/safe-renegotiation/testsrn: - Splitted safe renegotiation capabilities to %SAFE_RENEGOTIATION: will enable safe renegotiation. This is the - most secure and recommended option for clients. However this will - prevent from connecting to legacy servers. %PARTIAL_RENEGOTIATION: Prevents renegotiation with clients and - servers not supporting the safe renegotiation extension. (this is - the default) %UNSAFE_RENEGOTIATION: Permits (re-)handshakes even unsafe ones. - -2010-05-31 Simon Josefsson - - * doc/gnutls.texi: Minor fix. - -2010-05-31 Simon Josefsson - - * GNUmakefile, maint.mk: Update gnulib files. - -2010-05-29 Nikos Mavrogiannopoulos - - * doc/gnutls.texi: Documented the defaults. - -2010-05-28 Nikos Mavrogiannopoulos - - * doc/gnutls.texi: Added INITIAL_SAFE_RENEGOTIATION and other small - updates. - -2010-05-28 Simon Josefsson - - * doc/gnutls.texi: Update. - -2010-05-28 Simon Josefsson - - * tests/safe-renegotiation/README: Add. - -2010-05-28 Simon Josefsson - - * .x-sc_prohibit_strings_without_use, build-aux/c++defs.h, - build-aux/gendocs.sh, build-aux/gnupload, build-aux/vc-list-files, - configure.ac, doc/gendocs_template, gl/Makefile.am, gl/error.c, - gl/m4/asm-underscore.m4, gl/m4/gnulib-cache.m4, - gl/m4/gnulib-common.m4, gl/m4/gnulib-comp.m4, gl/m4/netdb_h.m4, - gl/m4/stdio_h.m4, gl/m4/unistd_h.m4, gl/m4/valgrind-tests.m4, - gl/netdb.in.h, gl/stdio-write.c, gl/stdio.in.h, - gl/tests/Makefile.am, gl/tests/init.sh, gl/tests/test-lseek.sh, - gl/tests/test-vc-list-files-cvs.sh, - gl/tests/test-vc-list-files-git.sh, gl/tests/test-verify.c, - gl/tests/test-verify.sh, gl/tests/verify.h, gl/unistd.in.h, - gl/vasnprintf.c, gl/wchar.in.h, gtk-doc.make, - lib/build-aux/c++defs.h, lib/gl/Makefile.am, - lib/gl/m4/asm-underscore.m4, lib/gl/m4/fcntl-o.m4, - lib/gl/m4/gettext.m4, lib/gl/m4/gnulib-common.m4, - lib/gl/m4/gnulib-comp.m4, lib/gl/m4/iconv.m4, lib/gl/m4/intl.m4, - lib/gl/m4/netdb_h.m4, lib/gl/m4/po.m4, lib/gl/m4/stdio_h.m4, - lib/gl/m4/unistd_h.m4, lib/gl/netdb.in.h, lib/gl/stdio-write.c, - lib/gl/stdio.in.h, lib/gl/tests/Makefile.am, lib/gl/tests/init.sh, - lib/gl/tests/test-vasprintf.c, lib/gl/tests/test-verify.c, - lib/gl/tests/test-verify.sh, lib/gl/tests/verify.h, - lib/gl/unistd.in.h, lib/gl/vasnprintf.c, lib/gl/wchar.in.h, - libextra/gl/m4/gnulib-common.m4, m4/valgrind.m4, maint.mk: Update - gnulib files, use valgrind-tests module, fix syntax-check problems. - -2010-05-28 Simon Josefsson - - * doc/announce.txt: Doc fix. - -2010-05-25 Nikos Mavrogiannopoulos - - * lib/x509/common.h, lib/x509/privkey.c, lib/x509/sign.c, - lib/x509/verify.c: Use correct hashing algorithms for DSA with q - over 160 bits. - -2010-05-24 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.c: Better checks in loops. - -2010-05-22 Simon Josefsson - - * lib/x509/crl.c: Doc fix. - -2010-05-22 Simon Josefsson - - * NEWS: Add. - -2010-05-22 Simon Josefsson - - * NEWS: Add. - -2010-05-22 Simon Josefsson - - * doc/reference/Makefile.am, gtk-doc.make, m4/gtk-doc.m4: Support - GTK-DOC PDF file. - -2010-05-22 Simon Josefsson - - * cfg.mk: Also build PDF manual. - -2010-05-22 Simon Josefsson - - * doc/gnutls.texi: Fix node/section usage. - -2010-05-22 Simon Josefsson - - * tests/safe-renegotiation/srn5.c: Fix self test. - -2010-05-22 Simon Josefsson - - * lib/gnutls_handshake.c: Readd lost fix from Nikos. - -2010-05-22 Simon Josefsson - - * lib/ext_safe_renegotiation.c: Readd lost fix from Nikos. - -2010-05-22 Simon Josefsson - - * NEWS: Add. - -2010-05-22 Simon Josefsson - - * lib/gnutls_errors.c, libextra/includes/gnutls/openssl.h, - libextra/openssl_compat.c: Doc fixes. - -2010-05-22 Simon Josefsson - - * lib/x509/x509.c: Doc fix. - -2010-05-22 Simon Josefsson - - * Makefile.am, NEWS, README, cfg.mk, configure.ac, doc/Makefile.am, - doc/credentials/Makefile.am, doc/cyclo/Makefile.am, doc/errcodes.c, - doc/examples/Makefile.am, doc/examples/ex-client-srp.c, - doc/examples/ex-serv-anon.c, doc/examples/ex-serv-pgp.c, - doc/examples/ex-serv-psk.c, doc/examples/ex-serv-srp.c, - doc/examples/ex-serv1.c, doc/gnutls.texi, doc/manpages/Makefile.am, - doc/printlist.c, guile/Makefile.am, guile/modules/Makefile.am, - guile/modules/gnutls.scm, guile/modules/gnutls/build/enums.scm, - guile/modules/gnutls/build/priorities.scm, - guile/modules/gnutls/build/smobs.scm, - guile/modules/gnutls/build/utils.scm, - guile/modules/gnutls/extra.scm, guile/src/Makefile.am, - guile/src/core.c, guile/src/errors.c, guile/src/errors.h, - guile/src/extra.c, guile/src/make-enum-header.scm, - guile/src/make-enum-map.scm, guile/src/make-session-priorities.scm, - guile/src/make-smob-header.scm, guile/src/make-smob-types.scm, - guile/src/utils.c, guile/src/utils.h, guile/tests/Makefile.am, - guile/tests/anonymous-auth.scm, guile/tests/errors.scm, - guile/tests/openpgp-auth.scm, guile/tests/openpgp-keyring.scm, - guile/tests/openpgp-keys.scm, guile/tests/pkcs-import-export.scm, - guile/tests/session-record-port.scm, guile/tests/srp-base64.scm, - guile/tests/x509-auth.scm, guile/tests/x509-certificates.scm, - lib/Makefile.am, lib/auth_anon.c, lib/auth_anon.h, lib/auth_cert.c, - lib/auth_cert.h, lib/auth_dh_common.c, lib/auth_dh_common.h, - lib/auth_dhe.c, lib/auth_dhe_psk.c, lib/auth_psk.c, lib/auth_psk.h, - lib/auth_psk_passwd.c, lib/auth_psk_passwd.h, lib/auth_rsa.c, - lib/auth_rsa_export.c, lib/auth_srp.c, lib/auth_srp.h, - lib/auth_srp_passwd.c, lib/auth_srp_passwd.h, lib/auth_srp_rsa.c, - lib/auth_srp_sb64.c, lib/cipher-libgcrypt.c, lib/configure.ac, - lib/crypto-api.c, lib/crypto.c, lib/crypto.h, lib/cryptodev.c, - lib/debug.c, lib/debug.h, lib/ext_cert_type.c, lib/ext_cert_type.h, - lib/ext_max_record.c, lib/ext_max_record.h, lib/ext_oprfi.c, - lib/ext_oprfi.h, lib/ext_safe_renegotiation.c, - lib/ext_safe_renegotiation.h, lib/ext_server_name.c, - lib/ext_server_name.h, lib/ext_session_ticket.c, - lib/ext_session_ticket.h, lib/ext_signature.c, lib/ext_signature.h, - lib/ext_srp.c, lib/ext_srp.h, lib/gnutls_alert.c, - lib/gnutls_algorithms.c, lib/gnutls_algorithms.h, - lib/gnutls_anon_cred.c, lib/gnutls_auth.c, lib/gnutls_auth.h, - lib/gnutls_buffers.c, lib/gnutls_buffers.h, lib/gnutls_cert.c, - lib/gnutls_cert.h, lib/gnutls_cipher.c, lib/gnutls_cipher.h, - lib/gnutls_cipher_int.c, lib/gnutls_cipher_int.h, - lib/gnutls_compress.c, lib/gnutls_compress.h, - lib/gnutls_constate.c, lib/gnutls_constate.h, lib/gnutls_datum.c, - lib/gnutls_datum.h, lib/gnutls_db.c, lib/gnutls_db.h, - lib/gnutls_dh.c, lib/gnutls_dh.h, lib/gnutls_dh_primes.c, - lib/gnutls_errors.c, lib/gnutls_errors.h, lib/gnutls_extensions.c, - lib/gnutls_extensions.h, lib/gnutls_global.c, lib/gnutls_global.h, - lib/gnutls_handshake.c, lib/gnutls_handshake.h, - lib/gnutls_hash_int.c, lib/gnutls_hash_int.h, lib/gnutls_helper.c, - lib/gnutls_int.h, lib/gnutls_kx.c, lib/gnutls_kx.h, - lib/gnutls_mem.c, lib/gnutls_mem.h, lib/gnutls_mpi.c, - lib/gnutls_mpi.h, lib/gnutls_num.c, lib/gnutls_num.h, - lib/gnutls_pk.c, lib/gnutls_pk.h, lib/gnutls_priority.c, - lib/gnutls_psk.c, lib/gnutls_psk_netconf.c, lib/gnutls_record.c, - lib/gnutls_record.h, lib/gnutls_rsa_export.c, - lib/gnutls_rsa_export.h, lib/gnutls_session.c, - lib/gnutls_session_pack.c, lib/gnutls_session_pack.h, - lib/gnutls_sig.c, lib/gnutls_sig.h, lib/gnutls_srp.c, - lib/gnutls_srp.h, lib/gnutls_state.c, lib/gnutls_state.h, - lib/gnutls_str.c, lib/gnutls_str.h, lib/gnutls_supplemental.c, - lib/gnutls_supplemental.h, lib/gnutls_ui.c, lib/gnutls_v2_compat.c, - lib/gnutls_v2_compat.h, lib/gnutls_x509.c, lib/gnutls_x509.h, - lib/includes/Makefile.am, lib/includes/gnutls/crypto.h, - lib/includes/gnutls/gnutls.h.in, lib/includes/gnutls/openpgp.h, - lib/includes/gnutls/pkcs12.h, lib/includes/gnutls/x509.h, - lib/libgnutls.map, lib/libgnutlsxx.map, lib/m4/hooks.m4, - lib/mac-libgcrypt.c, lib/minitasn1/Makefile.am, - lib/mpi-libgcrypt.c, lib/opencdk/Makefile.am, - lib/openpgp/Makefile.am, lib/openpgp/compat.c, - lib/openpgp/extras.c, lib/openpgp/gnutls_openpgp.c, - lib/openpgp/output.c, lib/openpgp/pgp.c, lib/openpgp/pgpverify.c, - lib/openpgp/privkey.c, lib/pk-libgcrypt.c, lib/random.c, - lib/random.h, lib/rnd-libgcrypt.c, lib/x509/Makefile.am, - lib/x509/common.c, lib/x509/common.h, lib/x509/crl.c, - lib/x509/crl_write.c, lib/x509/crq.c, lib/x509/dn.c, - lib/x509/extensions.c, lib/x509/mpi.c, lib/x509/output.c, - lib/x509/pkcs12.c, lib/x509/pkcs12_bag.c, lib/x509/pkcs12_encr.c, - lib/x509/pkcs7.c, lib/x509/privkey.c, lib/x509/privkey_pkcs8.c, - lib/x509/rfc2818_hostname.c, lib/x509/sign.c, lib/x509/verify.c, - lib/x509/x509.c, lib/x509/x509_int.h, lib/x509/x509_write.c, - lib/x509_b64.c, lib/x509_b64.h, libextra/Makefile.am, - libextra/configure.ac, libextra/ext_inner_application.c, - libextra/ext_inner_application.h, libextra/fipsmd5.c, - libextra/gl/Makefile.am, libextra/gnutls_extra.c, - libextra/gnutls_ia.c, libextra/gnutls_openssl.c, - libextra/includes/Makefile.am, libextra/includes/gnutls/extra.h, - libextra/includes/gnutls/openssl.h, libextra/libgnutls-extra.map, - libextra/m4/hooks.m4, libextra/openssl_compat.c, - libextra/openssl_compat.h, src/Makefile.am, src/benchmark.c, - src/certtool-cfg.c, src/certtool.c, src/cli.c, src/common.c, - src/crypt.c, src/list.h, src/prime.c, src/psk.c, src/serv.c, - src/tests.c, src/tls_test.c, tests/Makefile.am, tests/anonself.c, - tests/certder.c, tests/certificate_set_x509_crl.c, - tests/chainverify.c, tests/crq_apis.c, tests/crq_key_id.c, - tests/crypto_rng.c, tests/cve-2008-4989.c, tests/cve-2009-1415.c, - tests/cve-2009-1416.c, tests/dhepskself.c, tests/dn.c, tests/dn2.c, - tests/finished.c, tests/gc.c, tests/hostname-check.c, - tests/init_roundtrip.c, tests/key-id/Makefile.am, - tests/key-id/key-id, tests/mini-eagain.c, - tests/mini-x509-rehandshake.c, tests/mini-x509.c, tests/mini.c, - tests/moredn.c, tests/mpi.c, tests/netconf-psk.c, - tests/nist-pkits/pkits, tests/nist-pkits/pkits_crl, - tests/nist-pkits/pkits_crt, tests/nist-pkits/pkits_pkcs12, - tests/nist-pkits/pkits_smime, tests/nul-in-x509-names.c, - tests/openpgp-certs/Makefile.am, tests/openpgp-certs/testcerts, - tests/openpgp-certs/testselfsigs, tests/openpgp-keyring.c, - tests/openpgpself.c, tests/openssl.c, tests/oprfi.c, - tests/parse_ca.c, tests/pathlen/Makefile.am, tests/pathlen/pathlen, - tests/pgps2kgnu.c, tests/pkcs1-padding/Makefile.am, - tests/pkcs1-padding/pkcs1-pad, tests/pkcs12-decode/Makefile.am, - tests/pkcs12-decode/pkcs12, tests/pkcs12_encode.c, - tests/pkcs12_s2k.c, tests/pkcs12_s2k_pem.c, - tests/pkcs8-decode/Makefile.am, tests/pkcs8-decode/pkcs8, - tests/pskself.c, tests/resume.c, tests/rfc2253-escape-test, - tests/rsa-md5-collision/Makefile.am, - tests/rsa-md5-collision/rsa-md5-collision, - tests/safe-renegotiation/Makefile.am, - tests/safe-renegotiation/srn0.c, tests/safe-renegotiation/srn1.c, - tests/safe-renegotiation/srn2.c, tests/safe-renegotiation/srn3.c, - tests/safe-renegotiation/srn4.c, tests/safe-renegotiation/srn5.c, - tests/safe-renegotiation/testsrn, tests/set_pkcs12_cred.c, - tests/setcredcrash.c, tests/sha2/Makefile.am, tests/sha2/sha2, - tests/simple.c, tests/tlsia.c, tests/userid/Makefile.am, - tests/userid/userid, tests/utils.c, tests/utils.h, - tests/x509_altname.c, tests/x509dn.c, tests/x509paths/chain, - tests/x509self.c, tests/x509sign-verify.c, tests/x509signself.c: - Change GNUTLS into GnuTLS. - -2010-05-22 Simon Josefsson - - * AUTHORS, ChangeLog.1, NEWS, README, README-alpha, THANKS, - doc/gnutls.texi, doc/manpages/gnutls-cli-debug.1, - doc/manpages/gnutls-cli.1, doc/manpages/gnutls-serv.1, - doc/manpages/srptool.1, doc/reference/gnutls-docs.sgml, - lib/ext_safe_renegotiation.c, lib/gnutls_handshake.c, - src/cli-gaa.c, src/cli.gaa, src/serv-gaa.c, src/serv.gaa, - src/tls_test-gaa.c, src/tls_test.gaa: Change GNU TLS into GnuTLS. - -2010-05-22 Nikos Mavrogiannopoulos - - * lib/ext_safe_renegotiation.c, lib/gnutls_handshake.c: Ignore - parsing of ciphersuite or extensions when safe renegotiation is - disabled. - -2010-05-22 Simon Josefsson - - * tests/safe-renegotiation/Makefile.am, - tests/safe-renegotiation/srn5.c: Add test of self renegotiation - APIs. - -2010-05-22 Simon Josefsson - - * tests/safe-renegotiation/Makefile.am, - tests/safe-renegotiation/README, tests/safe-renegotiation/srn4.c: - Add more rengotiation self tests. - -2010-05-22 Simon Josefsson - - * tests/safe-renegotiation/Makefile.am, - tests/safe-renegotiation/README, tests/safe-renegotiation/srn0.c: - Add more safe renegotiation self test. - -2010-05-21 Simon Josefsson - - * NEWS, doc/announce.txt, doc/gnutls.texi, - doc/manpages/Makefile.am, lib/ext_safe_renegotiation.c, - lib/includes/gnutls/gnutls.h.in, lib/libgnutls.map, - tests/safe-renegotiation/srn2.c: Remove - gnutls_safe_negotiation_set_initial and - gnutls_safe_renegotiation_set. - -2010-05-18 Nikos Mavrogiannopoulos - - * lib/gnutls_priority.c: Documented behavioral change. - -2010-05-18 Nikos Mavrogiannopoulos - - * lib/gnutls_int.h, lib/gnutls_priority.c: Because we want to - differentiate the behavior of server and client with regards to safe - renegotiation. If a server didn't have either SAFE_RENEGOTIATION or - UNSAFE_RENEGOTIATION set the safe renegotiation will be the default. - This (as well as the safe_renegotiation_set flag) has to be removed - once safe renegotiation is default in both server and client side. - -2010-05-18 Nikos Mavrogiannopoulos - - * lib/gnutls_state.c: Emulate old gnutls behavior regarding safe - renegotiation if the priority_* functions are not called. - -2010-05-11 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/x509.h: Corrected typo. Reported by Clint - Adams. - -2010-05-03 Simon Josefsson - - * tests/safe-renegotiation/Makefile.am, - tests/safe-renegotiation/srn1.c, tests/safe-renegotiation/srn3.c: - tests: Add srn3 to test inverse of what srn1 is testing. - -2010-05-03 Simon Josefsson - - * tests/safe-renegotiation/Makefile.am, - tests/safe-renegotiation/srn2.c: tests: Add another safe - renegotiation self tests. - -2010-05-03 Simon Josefsson - - * tests/safe-renegotiation/srn1.c: Also test - gnutls_safe_renegotiation_status API. - -2010-05-03 Simon Josefsson - - * tests/safe-renegotiation/Makefile.am, - tests/safe-renegotiation/srn1.c: tests: Add first self-test of safe - renegotiation extension. - -2010-05-03 Simon Josefsson - - * tests/Makefile.am, tests/mini-x509-rehandshake.c: tests: Add small - X.509 rehandshake test. - -2010-05-03 Simon Josefsson - - * tests/mini-x509.c: Protect against infloops. - -2010-05-03 Simon Josefsson - - * tests/Makefile.am, tests/mini-x509.c: tests: Add mini-x509 - self-test. - -2010-04-30 Simon Josefsson - - * doc/gnutls.texi: Improve text, based on suggestions from Tomas - Hoger . - -2010-04-29 Simon Josefsson - - * lib/gnutls_handshake.c: Fix typo. - -2010-04-29 Simon Josefsson - - * lib/gnutls_handshake.c: Improve renegotiation debug messages. - -2010-04-29 Simon Josefsson - - * doc/announce.txt: Add. - -2010-04-29 Simon Josefsson - - * .gitignore: Add. - -2010-04-29 Simon Josefsson - - * doc/gnutls.texi: Add section on safe renegotiation. - -2010-04-29 Simon Josefsson - - * lib/gnutls_record.c: Remove debug code. - -2010-04-25 Simon Josefsson - - * doc/gnutls.texi: Mention shared library map file and GTK-DOC - guidelines. - -2010-04-22 Simon Josefsson - - * doc/announce.txt: Update URL. - -2010-04-22 Simon Josefsson - - * AUTHORS: Update my OpenPGP key. - -2010-04-22 Simon Josefsson - - * doc/announce.txt: Update my key. - -2010-04-22 Simon Josefsson - - * doc/announcement-template.txt: Remove. - -2010-04-22 Simon Josefsson - - * doc/ANNOUNCE, doc/announce.txt: Prepare 2.10.0 release notes. - -2010-04-22 Simon Josefsson - - * NEWS: Add 2.8.x NEWS entries. - -2010-04-22 Simon Josefsson - - * libextra/configure.ac: Also bump libgnutls-extra version. - -2010-04-22 Simon Josefsson - - * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4: Bump - versions. - -2010-04-22 Simon Josefsson - - * build-aux/gendocs.sh: Chmod +x. - -2010-04-22 Simon Josefsson - - * ChangeLog: Generated. - -2010-04-22 Simon Josefsson - - * NEWS: Version 2.9.10. - -2010-04-21 Simon Josefsson - - * NEWS, lib/minitasn1/Makefile.am, lib/minitasn1/coding.c, - lib/minitasn1/decoding.c, lib/minitasn1/element.h, - lib/minitasn1/gstr.h, lib/minitasn1/libtasn1.h, - lib/minitasn1/parser_aux.c, lib/minitasn1/parser_aux.h, - lib/minitasn1/structure.h, lib/minitasn1/version.c: Upgrade to - libtasn1 version 2.6. - -2010-04-21 Simon Josefsson - - * gl/Makefile.am, gl/m4/gnulib-comp.m4, gl/m4/ioctl.m4, - gl/m4/netdb_h.m4, gl/stdbool.in.h, gl/tests/test-lseek.sh, - gl/tests/test-select-in.sh, gl/tests/test-stdbool.c, - gl/tests/test-stdint.c, lib/gl/Makefile.am, lib/gl/m4/netdb_h.m4, - lib/gl/m4/visibility.m4, lib/gl/stdbool.in.h, - lib/gl/tests/test-stdbool.c, lib/gl/tests/test-stdint.c, - lib/gl/tests/test-vasprintf.c, maint.mk: Update gnulib files. - -2010-04-21 Simon Josefsson - - * configure.ac: Structure fork check together. - -2010-04-15 Simon Josefsson - - * lib/gnutls_priority.c: Fix compiler warning. - -2010-04-15 Simon Josefsson - - * gl/override/top/maint.mk.diff, libextra/gl/hmac-md5.c, - libextra/gl/md5.c, maint.mk: Update gnulib files. - -2010-04-15 Simon Josefsson - - * lib/crypto-api.c, lib/gnutls_priority.c: Indent code. - -2010-04-14 Nikos Mavrogiannopoulos - - * lib/crypto-api.c, lib/includes/gnutls/crypto.h: Use size_t instead - of int for input variables that represent sizes. - -2010-04-02 Nikos Mavrogiannopoulos - - * lib/gnutls_priority.c: Free the priority structure on error. - Reported by Paul Aurich. - -2010-04-02 Nikos Mavrogiannopoulos - - * lib/gnutls_priority.c: The string is colon separated. Reported by - Paul Aurich. - -2010-04-14 Simon Josefsson - - * lib/includes/gnutls/gnutls.h.in: Fix indent bug. - -2010-04-14 Simon Josefsson - - * cfg.mk, doc/examples/examples.h, guile/src/errors.h, - guile/src/utils.h, lib/auth_cert.h, lib/auth_dh_common.h, - lib/crypto.h, lib/ext_oprfi.h, lib/ext_safe_renegotiation.h, - lib/ext_session_ticket.h, lib/ext_signature.h, - lib/gnutls_algorithms.h, lib/gnutls_cipher_int.h, - lib/gnutls_compress.h, lib/gnutls_cryptodev.h, lib/gnutls_errors.h, - lib/gnutls_extensions.h, lib/gnutls_hash_int.h, lib/gnutls_int.h, - lib/gnutls_mpi.h, lib/gnutls_pk.h, lib/gnutls_sig.h, - lib/gnutls_srp.h, lib/gnutls_state.h, lib/gnutls_str.h, - lib/gnutls_supplemental.h, lib/includes/gnutls/crypto.h, - lib/includes/gnutls/gnutls.h.in, lib/includes/gnutls/openpgp.h, - lib/includes/gnutls/pkcs12.h, lib/includes/gnutls/x509.h, - lib/opencdk/context.h, lib/opencdk/filters.h, lib/opencdk/keydb.h, - lib/opencdk/main.h, lib/opencdk/opencdk.h, lib/opencdk/packet.h, - lib/opencdk/stream.h, lib/opencdk/types.h, - lib/openpgp/gnutls_openpgp.h, lib/openpgp/openpgp_int.h, - lib/x509/pbkdf2-sha1.h, lib/x509/x509_int.h, - libextra/includes/gnutls/extra.h, - libextra/includes/gnutls/openssl.h, src/certtool-cfg.h, - src/certtool-common.h, src/common.h: More indentation. - -2010-04-14 Simon Josefsson - - * NEWS: Add. - -2010-04-14 Simon Josefsson - - * NEWS: Add. - -2010-04-14 Simon Josefsson - - * NEWS: Add. - -2010-04-14 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2010-04-14 Simon Josefsson - - * doc/examples/ex-client-tlsia.c, doc/examples/ex-verify.c, - doc/examples/ex-x509-info.c, lib/auth_cert.c, lib/auth_rsa.c, - lib/ext_cert_type.c, lib/ext_max_record.c, lib/ext_oprfi.c, - lib/ext_safe_renegotiation.c, lib/ext_server_name.c, - lib/ext_session_ticket.c, lib/ext_signature.c, - lib/gnutls_algorithms.c, lib/gnutls_auth.c, lib/gnutls_buffers.c, - lib/gnutls_cert.c, lib/gnutls_cipher.c, lib/gnutls_compress.c, - lib/gnutls_constate.c, lib/gnutls_extensions.c, - lib/gnutls_global.c, lib/gnutls_handshake.c, lib/gnutls_kx.c, - lib/gnutls_priority.c, lib/gnutls_record.c, - lib/gnutls_session_pack.c, lib/gnutls_sig.c, lib/gnutls_state.c, - lib/gnutls_v2_compat.c, lib/gnutls_x509.c, - lib/minitasn1/decoding.c, lib/opencdk/read-packet.c, - lib/opencdk/sig-check.c, lib/x509/pkcs12.c, lib/x509/verify.c, - libextra/gl/hmac-md5.c, libextra/gl/md5.c, src/benchmark.c, - src/certtool.c, src/cli.c, src/serv.c, src/tests.c, src/tls_test.c, - tests/anonself.c, tests/certder.c, tests/chainverify.c, - tests/crq_apis.c, tests/crq_key_id.c, tests/cve-2008-4989.c, - tests/dhepskself.c, tests/dn.c, tests/dn2.c, tests/finished.c, - tests/gc.c, tests/hostname-check.c, tests/init_roundtrip.c, - tests/mini-eagain.c, tests/mini.c, tests/netconf-psk.c, - tests/nul-in-x509-names.c, tests/openpgp-keyring.c, - tests/openpgpself.c, tests/parse_ca.c, tests/pkcs12_encode.c, - tests/pkcs12_s2k.c, tests/pkcs12_s2k_pem.c, tests/pskself.c, - tests/resume.c, tests/set_pkcs12_cred.c, tests/simple.c, - tests/tlsia.c, tests/utils.c, tests/x509_altname.c, tests/x509dn.c, - tests/x509self.c, tests/x509sign-verify.c, tests/x509signself.c: - Indent code. - -2010-04-14 Simon Josefsson - - * NEWS, lib/crypto-api.c, lib/ext_safe_renegotiation.c, - lib/gnutls_algorithms.c, lib/gnutls_cert.c, lib/libgnutls.map, - lib/x509/x509.c: Export new ABIs. Doc fixes for new APIs. - -2010-04-14 Simon Josefsson - - * tests/safe-renegotiation/Makefile.am: Disable self-test - temporarily until we make it work cross-platform. - -2010-04-13 Simon Josefsson - - * NEWS, lib/ext_safe_renegotiation.c, lib/gnutls_algorithms.c, - lib/includes/gnutls/gnutls.h.in: Doc fixes. - -2010-04-13 Simon Josefsson - - * doc/manpages/Makefile.am, src/certtool-gaa.c: Generated. - -2010-04-13 Simon Josefsson - - * doc/reference/Makefile.am: Ignore c++defs.h. - -2010-04-13 Simon Josefsson - - * .x-sc_prohibit_empty_lines_at_EOF, GNUmakefile, - build-aux/c++defs.h, build-aux/warn-on-use.h, doc/certtool.cfg, - doc/credentials/gnutls-http-serv, doc/credentials/params.pem, - doc/credentials/x509/Makefile.am, doc/credentials/x509/cert.pem, - doc/credentials/x509/clicert-dsa.pem, gl/Makefile.am, gl/fseeko.c, - gl/m4/fseeko.m4, gl/m4/gnulib-common.m4, gl/m4/gnulib-comp.m4, - gl/m4/lib-link.m4, gl/m4/memchr.m4, gl/m4/stdio_h.m4, - gl/m4/stdlib_h.m4, gl/m4/string_h.m4, gl/m4/time_h.m4, - gl/m4/unistd_h.m4, gl/m4/vasnprintf.m4, gl/stdio-impl.h, - gl/stdio.in.h, gl/stdlib.in.h, gl/string.in.h, gl/sys_socket.in.h, - gl/sys_stat.in.h, gl/sys_time.in.h, gl/tests/Makefile.am, - gl/tests/ioctl.c, gl/tests/sys_ioctl.in.h, - gl/tests/test-vasnprintf.c, gl/time.in.h, gl/unistd.in.h, - gl/vasnprintf.c, gl/wchar.in.h, guile/modules/gnutls/extra.scm, - guile/tests/x509-auth.scm, guile/tests/x509-certificate.pem, - lib/build-aux/c++defs.h, lib/build-aux/warn-on-use.h, - lib/ext_cert_type.h, lib/gl/Makefile.am, lib/gl/fseeko.c, - lib/gl/m4/fseeko.m4, lib/gl/m4/gnulib-common.m4, - lib/gl/m4/gnulib-comp.m4, lib/gl/m4/lib-link.m4, - lib/gl/m4/memchr.m4, lib/gl/m4/stdio_h.m4, lib/gl/m4/stdlib_h.m4, - lib/gl/m4/string_h.m4, lib/gl/m4/threadlib.m4, lib/gl/m4/time_h.m4, - lib/gl/m4/time_r.m4, lib/gl/m4/unistd_h.m4, - lib/gl/m4/vasnprintf.m4, lib/gl/stdio-impl.h, lib/gl/stdio.in.h, - lib/gl/stdlib.in.h, lib/gl/string.in.h, lib/gl/sys_socket.in.h, - lib/gl/sys_stat.in.h, lib/gl/tests/Makefile.am, - lib/gl/tests/test-vasnprintf.c, lib/gl/time.in.h, lib/gl/time_r.c, - lib/gl/unistd.in.h, lib/gl/vasnprintf.c, lib/gl/wchar.in.h, - lib/minitasn1/Makefile.am, lib/minitasn1/README, - lib/opencdk/keydb.h, lib/opencdk/packet.h, - libextra/gl/m4/gnulib-common.m4, libextra/gl/m4/gnulib-comp.m4, - libextra/gl/m4/lib-link.m4, maint.mk, src/certtool.gaa, - src/cfg/Makefile.am, src/crypt.gaa, src/tls_test.gaa, - tests/key-id/ca-gnutls-keyid.pem, tests/key-id/ca-no-keyid.pem, - tests/key-id/ca-weird-keyid.pem, - tests/pkcs1-padding/pkcs1-pad-broken.pem, - tests/pkcs1-padding/pkcs1-pad-broken2.pem, - tests/pkcs1-padding/pkcs1-pad-broken3.pem, - tests/pkcs1-padding/pkcs1-pad-ok.pem, - tests/pkcs1-padding/pkcs1-pad-ok2.pem, - tests/safe-renegotiation/Makefile.am, tests/test25.pem: Update - gnulib files, fix syntax-check warnings. - -2010-03-31 Simon Josefsson - - * .gitignore, gl/m4/wchar_h.m4, lib/gl/m4/wchar_h.m4: Add forgotten - gnulib files, and fix .gitignore. - -2010-03-31 Simon Josefsson - - * NEWS: Add. - -2010-03-31 Simon Josefsson - - * lib/po/LINGUAS, lib/po/it.po.in, lib/po/nl.po.in: Sync with TP. - -2010-03-31 Simon Josefsson - - * .x-sc_program_name, .x-sc_the_the, cfg.mk, - lib/ext_safe_renegotiation.c, lib/gnutls_handshake.c, - lib/m4/hooks.m4, lib/opencdk/sig-check.c, src/certtool.c, - src/serv.c, tests/dn.c, tests/mini.c: Update gnulib files. Fix - syntax-check warnings. - -2010-03-31 Simon Josefsson - - * build-aux/c++defs.h, build-aux/vc-list-files, - build-aux/warn-on-use.h, gl/Makefile.am, gl/accept.c, - gl/arpa_inet.in.h, gl/bind.c, gl/connect.c, gl/getaddrinfo.c, - gl/gettext.h, gl/gettimeofday.c, gl/m4/arpa_inet_h.m4, - gl/m4/getaddrinfo.m4, gl/m4/gettimeofday.m4, - gl/m4/gnulib-common.m4, gl/m4/gnulib-comp.m4, gl/m4/inet_ntop.m4, - gl/m4/inet_pton.m4, gl/m4/lseek.m4, gl/m4/netdb_h.m4, - gl/m4/stddef_h.m4, gl/m4/stdio_h.m4, gl/m4/stdlib_h.m4, - gl/m4/string_h.m4, gl/m4/sys_ioctl_h.m4, gl/m4/sys_select_h.m4, - gl/m4/sys_socket_h.m4, gl/m4/sys_stat_h.m4, gl/m4/sys_time_h.m4, - gl/m4/time_h.m4, gl/m4/unistd_h.m4, gl/m4/warn-on-use.m4, - gl/m4/wchar.m4, gl/netdb.in.h, gl/netinet_in.in.h, gl/recv.c, - gl/select.c, gl/send.c, gl/stdint.in.h, gl/stdio.in.h, - gl/stdlib.in.h, gl/string.in.h, gl/sys_select.in.h, - gl/sys_socket.in.h, gl/sys_stat.in.h, gl/sys_time.in.h, - gl/tests/Makefile.am, gl/tests/ioctl.c, gl/tests/sys_ioctl.in.h, - gl/tests/test-vc-list-files-git.sh, gl/time.in.h, gl/unistd.in.h, - gl/wchar.in.h, lib/build-aux/c++defs.h, - lib/build-aux/warn-on-use.h, lib/gl/Makefile.am, lib/gl/gettext.h, - lib/gl/m4/gnulib-common.m4, lib/gl/m4/gnulib-comp.m4, - lib/gl/m4/intldir.m4, lib/gl/m4/lseek.m4, lib/gl/m4/netdb_h.m4, - lib/gl/m4/printf-posix.m4, lib/gl/m4/stddef_h.m4, - lib/gl/m4/stdio_h.m4, lib/gl/m4/stdlib_h.m4, lib/gl/m4/string_h.m4, - lib/gl/m4/strings_h.m4, lib/gl/m4/sys_socket_h.m4, - lib/gl/m4/sys_stat_h.m4, lib/gl/m4/time_h.m4, - lib/gl/m4/unistd_h.m4, lib/gl/m4/visibility.m4, - lib/gl/m4/warn-on-use.m4, lib/gl/m4/wchar.m4, lib/gl/netdb.in.h, - lib/gl/stdint.in.h, lib/gl/stdio.in.h, lib/gl/stdlib.in.h, - lib/gl/string.in.h, lib/gl/sys_socket.in.h, lib/gl/sys_stat.in.h, - lib/gl/tests/Makefile.am, lib/gl/time.in.h, lib/gl/unistd.in.h, - lib/gl/wchar.in.h, libextra/gl/m4/gnulib-common.m4, - libextra/gl/m4/gnulib-comp.m4, maint.mk: Update gnulib files. - -2010-03-30 Simon Josefsson - - * m4/valgrind.m4: Check for what we use. Bump serial. - -2010-03-30 Nikos Mavrogiannopoulos - - * m4/valgrind.m4, tests/Makefile.am: Valgrind -q is now set by the - valgrind detection script to avoid issue when running tests without - valgrind. - -2010-03-27 Nikos Mavrogiannopoulos - - * lib/gnutls_cert.c: increased small value for certificates. Typical - certificates are much longer than that. - -2010-03-20 Nikos Mavrogiannopoulos - - * configure.ac, tests/Makefile.am, tests/anonself.c, - tests/certder.c, tests/chainverify.c, tests/crq_apis.c, - tests/crq_key_id.c, tests/cve-2009-1415.c, tests/dhepskself.c, - tests/dn.c, tests/dn2.c, tests/finished.c, tests/gc.c, - tests/hostname-check.c, tests/init_roundtrip.c, - tests/mini-eagain.c, tests/mini.c, tests/moredn.c, tests/mpi.c, - tests/netconf-psk.c, tests/nul-in-x509-names.c, - tests/openpgp-keyring.c, tests/openpgpself.c, tests/openssl.c, - tests/parse_ca.c, tests/pkcs12_encode.c, tests/pkcs12_s2k.c, - tests/pskself.c, tests/resume.c, tests/set_pkcs12_cred.c, - tests/sha2/sha2, tests/simple.c, tests/tlsia.c, - tests/x509_altname.c, tests/x509dn.c, tests/x509self.c, - tests/x509sign-verify.c, tests/x509signself.c: Reduced several - unneeded messages during the make check procedure. Verbose messages - can be obtained with --verbose. - -2010-03-20 Nikos Mavrogiannopoulos - - * doc/Makefile.am: use mv -f to avoid interactiveness. - -2010-03-20 Nikos Mavrogiannopoulos - - * tests/dn2.c: Modified to account for postalcode. - -2010-03-20 Nikos Mavrogiannopoulos - - * NEWS: added news entry for postalcode. - -2010-03-20 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/x509.h, lib/pkix.asn, lib/pkix_asn1_tab.c, - lib/x509/common.c: Display postalCode and Name X.509 DN attributes - correctly. Based on patch by Pavan Konjarla. - -2010-03-20 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.c, lib/gnutls_algorithms.h, - lib/includes/gnutls/gnutls.h.in, src/serv-gaa.c, src/serv.gaa: Each - ciphersuite is now tight with a minimum TLS version and a maximum - one. It is valid if it is between (and including) those. This was - added to deprecate TLS_RSA_EXPORT_WITH_RC4_40_MD5 which is not - available with TLS 1.1. Reported by Adrian F. Dimcev. - -2010-03-20 Nikos Mavrogiannopoulos - - * .gitignore: Ignore more files. - -2010-03-17 Nikos Mavrogiannopoulos - - * NEWS, lib/auth_cert.c, lib/auth_cert.h, lib/gnutls_alert.c, - lib/gnutls_cert.c, lib/includes/gnutls/gnutls.h.in, - lib/libgnutls.map, src/cli.c: Added - gnutls_certificate_set_verify_function() to allow checking - (verifying) certificate before the handshake is completed. - -2010-03-17 Nikos Mavrogiannopoulos - - * doc/examples/ex-rfc2818.c, doc/examples/ex-verify.c: Use the flags - for expiration instead of getting the time of each certificate. - -2010-03-17 Simon Josefsson - - * README-alpha: Mention datefudge. - -2010-03-17 Simon Josefsson - - * tests/pkcs1-padding/pkcs1-pad: Skip test if datefudge is not - available. - -2010-03-17 Nikos Mavrogiannopoulos - - * lib/gnutls_priority.c: INITIAL_SAFE_RENEGOTIATION implies - SAFE_RENEGOTIATION. - -2010-03-16 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/gnutls.h.in: Added missing prototype. - -2010-03-16 Nikos Mavrogiannopoulos - - * tests/safe-renegotiation/testsrn: made SAFE_RENEGOTIATION flags - explicit. - -2010-03-16 Nikos Mavrogiannopoulos - - * lib/x509/verify.c, src/certtool.c: gnutls_x509_crt_verify() and - gnutls_x509_crt_list_verify() behave identically. That means that - gnutls_x509_crt_verify() will now check dates as well. Certool --verify-chain will use the GNUTLS_VERIFY_DO_NOT_ALLOW_SAME - flag to gnutls_x509_crt_verify() to force verification even if - certificates are the same. The only exception is at the final - certificate (self-checking) where the extra flag - GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT is specified to allow for v1 CA - certificates. - -2010-03-16 Nikos Mavrogiannopoulos - - * lib/x509/common.c: Handle dates before 1-1-1970 (handle as being - equal to 1-1-1970). - -2010-03-16 Nikos Mavrogiannopoulos - - * tests/pkcs1-padding/pkcs1-pad: Fail if required programs are not - found. - -2010-03-15 Nikos Mavrogiannopoulos - - * NEWS, doc/manpages/gnutls-cli.1, doc/manpages/gnutls-serv.1, - lib/ext_safe_renegotiation.c, lib/gnutls_priority.c, - lib/gnutls_record.c: Safe renegotiation is not enabled by default in - client side. - -2010-03-15 Nikos Mavrogiannopoulos - - * doc/manpages/gnutls-cli.1, lib/gnutls_priority.c: better - documentation for %INITIAL_SAFE_RENEGOTIATION - -2010-03-15 Simon Josefsson - - * NEWS: Fix. - -2010-03-15 Simon Josefsson - - * tests/openpgp-certs/Makefile.am, tests/openpgp-certs/testselfsigs: - Rewrite tests/openpgp-certs/testselfsigs portably for Solaris. Fix - EXTRA_DIST. - -2010-03-15 Nikos Mavrogiannopoulos - - * tests/safe-renegotiation/testsrn: localhost -> 127.0.0.1 to work - in places where localhost does not resolve. - -2010-03-14 Nikos Mavrogiannopoulos - - * NEWS, lib/includes/gnutls/x509.h, lib/x509/verify.c: Extended time - verification to trusted certificate list as well. Introduced the - flag GNUTLS_VERIFY_DISABLE_TRUSTED_TIME_CHECKS that will prevent the - trusted certificate list verification. - -2010-03-11 Nikos Mavrogiannopoulos - - * src/tests.c, src/tests.h, src/tls_test.c: Added tests for safe - renegotiation. Removed old tests for obsolete features (lzo) and - tests that were not actually working (srp). - -2010-03-11 Nikos Mavrogiannopoulos - - * lib/gnutls_extensions.c, lib/gnutls_extensions.h, - lib/gnutls_handshake.c, lib/includes/gnutls/gnutls.h.in, - tests/safe-renegotiation/testsrn: Extension generation in SSL 3.0 - (as a reply to SCSV) is not using common code with normal extension - generation. Solve issue reported by Tomas Mraz that caused SSL 3.0 - renegotiation fail. - -2010-03-07 Nikos Mavrogiannopoulos - - * lib/x509/verify.c: Removed artificial constrained that prevented - end-user certificates, being added to the trusted list, treated as - trusted. Suggestion and patch by Tomas Mraz. - -2010-03-07 Nikos Mavrogiannopoulos - - * doc/manpages/gnutls-cli.1: Documented that - initial_safe_renegotiation is the default. - -2010-03-03 Nikos Mavrogiannopoulos - - * src/serv.c: gnutls-serv will terminate connection on rehandshake - errors. - -2010-03-03 Nikos Mavrogiannopoulos - - * lib/gnutls_alert.c, lib/gnutls_errors.c, lib/gnutls_handshake.c, - lib/includes/gnutls/gnutls.h.in: Avoid sending alerts during - handshake. Alerts might be interrupted and return a non-fatal error - which will propagate and in many cases it shouldn't. Avoid sending no renegotiation alert when a client connects to an - unsafe server. Thanks to Tomas Hoger for the report. - -2010-02-26 Nikos Mavrogiannopoulos - - * src/cli.c: On handshake error send appropriate alert and terminate - stream. - -2010-02-18 Simon Josefsson - - * doc/reference/gnutls-docs.sgml: Add id's to chapters. - -2010-02-18 Simon Josefsson - - * .gitignore: Update. - -2010-02-18 Simon Josefsson - - * lib/po/zh_CN.po: Remove. - -2010-02-18 Simon Josefsson - - * src/Makefile.am: Fix -lrt usage. - -2010-02-18 Simon Josefsson - - * src/benchmark.c: Use gnulib gettime module. Indent. - -2010-02-18 Simon Josefsson - - * lib/po/zh_CN.po: Add. - -2010-02-18 Simon Josefsson - - * lib/gl/netdb.in.h: Update gnulib files. - -2010-02-18 Simon Josefsson - - * gl/Makefile.am, gl/gettime.c, gl/gettimeofday.c, - gl/m4/clock_time.m4, gl/m4/gettime.m4, gl/m4/gnulib-cache.m4, - gl/m4/gnulib-comp.m4, gl/m4/timespec.m4, gl/netdb.in.h, - gl/tests/Makefile.am, gl/tests/gettimeofday.c, gl/timespec.h: Update - gnulib files. - -2010-02-17 Simon Josefsson - - * lib/cryptodev.c: Indent. Don't include fcntl.h and sys/ioctl.h on - (for example) Windows. - -2010-02-17 Simon Josefsson - - * tests/safe-renegotiation/testsrn: Fix objdir != srcdir. - -2010-02-17 Simon Josefsson - - * tests/safe-renegotiation/testsrn: Drop bashism. Make it work on - Windows. - -2010-02-17 Simon Josefsson - - * NEWS: Fix. - -2010-02-17 Simon Josefsson - - * NEWS: Add. - -2010-02-17 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2010-02-17 Simon Josefsson - - * doc/reference/Makefile.am, doc/reference/gnutls-docs.sgml, - lib/ext_safe_renegotiation.c, lib/ext_signature.c, - lib/gnutls_supplemental.c: More GTK-DOC fixes. - -2010-02-17 Simon Josefsson - - * lib/gnutls_db.c: Doc fix. - -2010-02-17 Simon Josefsson - - * lib/openpgp/gnutls_openpgp.c: Doc fix. - -2010-02-17 Simon Josefsson - - * lib/includes/gnutls/gnutls.h.in: Doc fix. - -2010-02-17 Simon Josefsson - - * lib/includes/gnutls/gnutls.h.in: Fix enum doc. - -2010-02-17 Simon Josefsson - - * lib/includes/gnutls/gnutls.h.in: More enum docs. - -2010-02-17 Simon Josefsson - - * lib/includes/gnutls/crypto.h: More enum documentation. - -2010-02-17 Simon Josefsson - - * libextra/gnutls_ia.c: Doc fix. - -2010-02-17 Simon Josefsson - - * lib/includes/gnutls/x509.h: More enum documentation. - -2010-02-17 Simon Josefsson - - * libextra/includes/gnutls/extra.h: Document more. - -2010-02-17 Simon Josefsson - - * lib/includes/gnutls/openpgp.h: Document more. - -2010-02-17 Simon Josefsson - - * lib/includes/gnutls/pkcs12.h: Document enum. - -2010-02-17 Simon Josefsson - - * lib/includes/gnutls/gnutls.h.in: More enum. - -2010-02-17 Simon Josefsson - - * lib/includes/gnutls/gnutls.h.in: Fix typo. - -2010-02-17 Simon Josefsson - - * lib/includes/gnutls/gnutls.h.in: More GTK-DOC documentation. - -2010-02-17 Simon Josefsson - - * lib/includes/gnutls/gnutls.h.in: Improve GTK-DOC coverage. - -2010-02-17 Simon Josefsson - - * lib/includes/gnutls/crypto.h: Fix comments, for GTK-DOC. - -2010-02-17 Simon Josefsson - - * doc/reference/Makefile.am: Ignore more headers. - -2010-02-17 Simon Josefsson - - * lib/x509/crl.c: Doc fix. - -2010-02-17 Simon Josefsson - - * lib/includes/gnutls/crypto.h: Fix for GTK-DOC parse breakage. - -2010-02-17 Simon Josefsson - - * doc/reference/Makefile.am: Ignore gnutlsxx.h too, GTK-DOC doesn't - handle C++. - -2010-02-17 Simon Josefsson - - * doc/reference/Makefile.am: Need crypto.h too. - -2010-02-17 Simon Josefsson - - * doc/reference/Makefile.am: Improve header ignores. - -2010-02-17 Simon Josefsson - - * lib/minitasn1/coding.c, lib/minitasn1/decoding.c, - lib/minitasn1/element.c, lib/minitasn1/errors.c, - lib/minitasn1/libtasn1.h, lib/minitasn1/parser_aux.c, - lib/minitasn1/structure.c: Upgrade to libtasn1 2.5 snapshot, for - GTK-DOC comments. - -2010-02-17 Simon Josefsson - - * lib/includes/gnutls/openpgp.h: Another GTK-DOC fix. - -2010-02-17 Simon Josefsson - - * lib/auth_srp_sb64.c, lib/crypto-api.c, lib/crypto.c, - lib/ext_safe_renegotiation.c, lib/ext_server_name.c, - lib/ext_signature.c, lib/gnutls_alert.c, lib/gnutls_algorithms.c, - lib/gnutls_anon_cred.c, lib/gnutls_auth.c, lib/gnutls_buffers.c, - lib/gnutls_cert.c, lib/gnutls_compress.c, lib/gnutls_db.c, - lib/gnutls_dh_primes.c, lib/gnutls_errors.c, - lib/gnutls_extensions.c, lib/gnutls_global.c, - lib/gnutls_handshake.c, lib/gnutls_mem.c, lib/gnutls_priority.c, - lib/gnutls_psk.c, lib/gnutls_psk_netconf.c, lib/gnutls_record.c, - lib/gnutls_rsa_export.c, lib/gnutls_session.c, lib/gnutls_srp.c, - lib/gnutls_state.c, lib/gnutls_str.c, lib/gnutls_ui.c, - lib/gnutls_x509.c, lib/includes/gnutls/crypto.h, - lib/opencdk/stream.c, lib/openpgp/compat.c, lib/openpgp/extras.c, - lib/openpgp/gnutls_openpgp.c, lib/openpgp/output.c, - lib/openpgp/pgp.c, lib/openpgp/pgpverify.c, lib/openpgp/privkey.c, - lib/x509/common.c, lib/x509/crl.c, lib/x509/crl_write.c, - lib/x509/crq.c, lib/x509/dn.c, lib/x509/output.c, - lib/x509/pkcs12.c, lib/x509/pkcs12_bag.c, lib/x509/pkcs7.c, - lib/x509/privkey.c, lib/x509/privkey_pkcs8.c, - lib/x509/rfc2818_hostname.c, lib/x509/verify.c, lib/x509/x509.c, - lib/x509/x509_write.c, lib/x509_b64.c, libextra/gnutls_extra.c, - libextra/gnutls_ia.c, libextra/openssl_compat.c: Fix GTK-DOC syntax. - Unfortunately this looses some information. - -2010-02-17 Simon Josefsson - - * lib/auth_srp_sb64.c, lib/crypto-api.c, - lib/ext_safe_renegotiation.c, lib/gnutls_anon_cred.c, - lib/gnutls_auth.c, lib/gnutls_cert.c, lib/gnutls_db.c, - lib/gnutls_dh.c, lib/gnutls_handshake.c, lib/gnutls_mem.c, - lib/gnutls_priority.c, lib/gnutls_psk.c, lib/gnutls_record.c, - lib/gnutls_session.c, lib/gnutls_srp.c, lib/gnutls_state.c, - lib/gnutls_x509.c, lib/x509/crl.c, lib/x509/crl_write.c, - lib/x509/pkcs12.c, lib/x509/pkcs12_bag.c, lib/x509/pkcs7.c, - lib/x509/privkey.c, lib/x509/privkey_pkcs8.c, lib/x509/sign.c, - lib/x509/verify.c, lib/x509/x509.c, lib/x509/x509_write.c, - libextra/openssl_compat.c: Align indentation of GTK-DOC comments. - -2010-02-17 Simon Josefsson - - * lib/po/vi.po.in: Sync with TP. - -2010-02-17 Simon Josefsson - - * doc/examples/Makefile.am: Silence gnulib warning about fseek. - -2010-02-17 Simon Josefsson - - * build-aux/gendocs.sh, build-aux/gnupload, gl/Makefile.am, - gl/m4/getdelim.m4, gl/m4/getline.m4, gl/m4/gettimeofday.m4, - gl/m4/gnulib-comp.m4, gl/m4/stdio_h.m4, gl/m4/sys_time_h.m4, - gl/netdb.in.h, gl/stdio.in.h, gl/sys_time.in.h, - gl/tests/test-getdelim.c, gl/tests/test-getline.c, - gl/tests/test-gettimeofday.c, lib/gl/Makefile.am, - lib/gl/m4/stdio_h.m4, lib/gl/netdb.in.h, lib/gl/stdio.in.h, - maint.mk: Update gnulib files. - -2010-02-05 Nikos Mavrogiannopoulos - - * lib/gnutls_session_pack.c: Corrected calculation of session data - for PSK ciphersuites. Solves issue #107256 reported by Wolfgang - Glas. - -2010-02-03 Simon Josefsson - - * doc/ANNOUNCE: Add announcement message. - -2010-01-27 Simon Josefsson - - * NEWS: Fix. - -2010-01-27 Simon Josefsson - - * NEWS: Add. - -2010-01-27 Simon Josefsson - - * lib/po/LINGUAS, lib/po/cs.po.in, lib/po/de.po.in, - lib/po/fr.po.in, lib/po/ms.po.in, lib/po/nl.po.in, lib/po/pl.po.in, - lib/po/sv.po.in, lib/po/zh_CN.po.in: Sync with TP. - -2010-01-27 Simon Josefsson - - * build-aux/gnupload, doc/gendocs_template, - gl/tests/test-gettimeofday.c, gl/tests/test-memchr.c, - gl/tests/test-read-file.c, gl/tests/test-sockets.c, - lib/gl/tests/test-memchr.c, lib/gl/tests/test-read-file.c, - lib/gl/tests/test-sockets.c: Update gnulib files. - -2010-01-27 Simon Josefsson - - * AUTHORS: Add. - -2010-01-27 Simon Josefsson - - * NEWS, lib/minitasn1/coding.c, lib/minitasn1/decoding.c, - lib/minitasn1/element.c, lib/minitasn1/errors.c, - lib/minitasn1/gstr.c, lib/minitasn1/int.h, - lib/minitasn1/libtasn1.h, lib/minitasn1/parser_aux.c, - lib/minitasn1/structure.c: Use libtasn1 v2.4. - -2010-01-27 Simon Josefsson - - * lib/gnutls.pc.in: Fix license. - -2010-01-27 Simon Josefsson - - * .clcopying: Fix license. - -2010-01-27 Simon Josefsson - - * AUTHORS: Fix license. - -2010-01-27 Simon Josefsson - - * tests/key-id/README, tests/libgcrypt.supp, - tests/rsa-md5-collision/Makefile.am, - tests/rsa-md5-collision/README, tests/rsa-md5-collision/mbox, - tests/userid/userid.pem: License fix. - -2010-01-27 Simon Josefsson - - * ChangeLog, cfg.mk, configure.ac, doc/Makefile.am, - doc/credentials/Makefile.am, doc/cyclo/Makefile.am, doc/errcodes.c, - doc/examples/Makefile.am, doc/extract-guile-c-doc.scm, - doc/gendocs_template, doc/manpages/Makefile.am, doc/printlist.c, - gl/gnulib.mk, gl/m4/onceonly_2_57.m4, gl/tests/gnulib.mk, - guile/Makefile.am, guile/modules/Makefile.am, - guile/modules/gnutls.scm, guile/modules/gnutls/build/enums.scm, - guile/modules/gnutls/build/priorities.scm, - guile/modules/gnutls/build/smobs.scm, - guile/modules/gnutls/build/utils.scm, - guile/modules/gnutls/extra.scm, - guile/modules/system/documentation/c-snarf.scm, - guile/modules/system/documentation/output.scm, - guile/pre-inst-guile.in, guile/src/Makefile.am, guile/src/core.c, - guile/src/errors.c, guile/src/errors.h, guile/src/extra.c, - guile/src/make-enum-header.scm, guile/src/make-enum-map.scm, - guile/src/make-session-priorities.scm, - guile/src/make-smob-header.scm, guile/src/make-smob-types.scm, - guile/src/utils.c, guile/src/utils.h, guile/tests/Makefile.am, - guile/tests/anonymous-auth.scm, guile/tests/errors.scm, - guile/tests/openpgp-auth.scm, guile/tests/openpgp-keyring.scm, - guile/tests/openpgp-keys.scm, guile/tests/pkcs-import-export.scm, - guile/tests/session-record-port.scm, guile/tests/srp-base64.scm, - guile/tests/x509-auth.scm, guile/tests/x509-certificates.scm, - lib/Makefile.am, lib/auth_anon.c, lib/auth_anon.h, lib/auth_cert.c, - lib/auth_cert.h, lib/auth_dh_common.c, lib/auth_dh_common.h, - lib/auth_dhe.c, lib/auth_dhe_psk.c, lib/auth_psk.c, lib/auth_psk.h, - lib/auth_psk_passwd.c, lib/auth_psk_passwd.h, lib/auth_rsa.c, - lib/auth_rsa_export.c, lib/auth_srp.c, lib/auth_srp.h, - lib/auth_srp_passwd.c, lib/auth_srp_passwd.h, lib/auth_srp_rsa.c, - lib/auth_srp_sb64.c, lib/cipher-libgcrypt.c, lib/configure.ac, - lib/crypto-api.c, lib/crypto.c, lib/crypto.h, lib/cryptodev.c, - lib/debug.c, lib/debug.h, lib/ext_cert_type.c, lib/ext_cert_type.h, - lib/ext_max_record.c, lib/ext_max_record.h, lib/ext_oprfi.c, - lib/ext_oprfi.h, lib/ext_safe_renegotiation.c, - lib/ext_safe_renegotiation.h, lib/ext_server_name.c, - lib/ext_server_name.h, lib/ext_session_ticket.c, - lib/ext_session_ticket.h, lib/ext_signature.c, lib/ext_signature.h, - lib/ext_srp.c, lib/ext_srp.h, lib/gnutls_alert.c, - lib/gnutls_algorithms.c, lib/gnutls_algorithms.h, - lib/gnutls_anon_cred.c, lib/gnutls_auth.c, lib/gnutls_auth.h, - lib/gnutls_buffers.c, lib/gnutls_buffers.h, lib/gnutls_cert.c, - lib/gnutls_cert.h, lib/gnutls_cipher.c, lib/gnutls_cipher.h, - lib/gnutls_cipher_int.h, lib/gnutls_compress.c, - lib/gnutls_compress.h, lib/gnutls_constate.c, - lib/gnutls_constate.h, lib/gnutls_datum.c, lib/gnutls_datum.h, - lib/gnutls_db.c, lib/gnutls_db.h, lib/gnutls_dh.c, lib/gnutls_dh.h, - lib/gnutls_dh_primes.c, lib/gnutls_errors.c, lib/gnutls_errors.h, - lib/gnutls_extensions.c, lib/gnutls_extensions.h, - lib/gnutls_global.c, lib/gnutls_global.h, lib/gnutls_handshake.c, - lib/gnutls_handshake.h, lib/gnutls_hash_int.c, - lib/gnutls_hash_int.h, lib/gnutls_helper.c, lib/gnutls_int.h, - lib/gnutls_kx.c, lib/gnutls_kx.h, lib/gnutls_mem.c, - lib/gnutls_mem.h, lib/gnutls_mpi.c, lib/gnutls_mpi.h, - lib/gnutls_num.c, lib/gnutls_num.h, lib/gnutls_pk.c, - lib/gnutls_pk.h, lib/gnutls_priority.c, lib/gnutls_psk.c, - lib/gnutls_psk_netconf.c, lib/gnutls_record.c, lib/gnutls_record.h, - lib/gnutls_rsa_export.c, lib/gnutls_rsa_export.h, - lib/gnutls_session.c, lib/gnutls_session_pack.c, - lib/gnutls_session_pack.h, lib/gnutls_sig.c, lib/gnutls_sig.h, - lib/gnutls_srp.c, lib/gnutls_srp.h, lib/gnutls_state.c, - lib/gnutls_state.h, lib/gnutls_str.c, lib/gnutls_str.h, - lib/gnutls_supplemental.c, lib/gnutls_supplemental.h, - lib/gnutls_ui.c, lib/gnutls_v2_compat.c, lib/gnutls_v2_compat.h, - lib/gnutls_x509.c, lib/gnutls_x509.h, lib/includes/Makefile.am, - lib/includes/gnutls/crypto.h, lib/includes/gnutls/gnutls.h.in, - lib/includes/gnutls/openpgp.h, lib/includes/gnutls/pkcs12.h, - lib/includes/gnutls/x509.h, lib/libgnutls.map, lib/libgnutlsxx.map, - lib/m4/hooks.m4, lib/mac-libgcrypt.c, lib/minitasn1/Makefile.am, - lib/minitasn1/gstr.c, lib/minitasn1/int.h, - lib/minitasn1/libtasn1.h, lib/minitasn1/parser_aux.c, - lib/minitasn1/structure.c, lib/mpi-libgcrypt.c, - lib/opencdk/Makefile.am, lib/opencdk/armor.c, - lib/opencdk/context.h, lib/opencdk/filters.h, lib/opencdk/hash.c, - lib/opencdk/kbnode.c, lib/opencdk/keydb.c, lib/opencdk/literal.c, - lib/opencdk/main.c, lib/opencdk/main.h, lib/opencdk/misc.c, - lib/opencdk/new-packet.c, lib/opencdk/opencdk.h, - lib/opencdk/packet.h, lib/opencdk/pubkey.c, - lib/opencdk/read-packet.c, lib/opencdk/seskey.c, - lib/opencdk/sig-check.c, lib/opencdk/stream.c, - lib/opencdk/stream.h, lib/opencdk/types.h, lib/opencdk/verify.c, - lib/opencdk/write-packet.c, lib/openpgp/Makefile.am, - lib/openpgp/compat.c, lib/openpgp/extras.c, - lib/openpgp/gnutls_openpgp.c, lib/openpgp/output.c, - lib/openpgp/pgp.c, lib/openpgp/pgpverify.c, lib/openpgp/privkey.c, - lib/pk-libgcrypt.c, lib/po/cs.po.in, lib/po/de.po.in, - lib/po/fr.po.in, lib/po/ms.po.in, lib/po/nl.po.in, lib/po/pl.po.in, - lib/po/sv.po.in, lib/random.c, lib/random.h, lib/rnd-libgcrypt.c, - lib/x509/Makefile.am, lib/x509/common.c, lib/x509/common.h, - lib/x509/crl.c, lib/x509/crl_write.c, lib/x509/crq.c, - lib/x509/dn.c, lib/x509/extensions.c, lib/x509/mpi.c, - lib/x509/output.c, lib/x509/pbkdf2-sha1.c, lib/x509/pkcs12.c, - lib/x509/pkcs12_bag.c, lib/x509/pkcs12_encr.c, lib/x509/pkcs7.c, - lib/x509/privkey.c, lib/x509/privkey_pkcs8.c, - lib/x509/rfc2818_hostname.c, lib/x509/sign.c, lib/x509/verify.c, - lib/x509/x509.c, lib/x509/x509_int.h, lib/x509/x509_write.c, - lib/x509_b64.c, lib/x509_b64.h, libextra/Makefile.am, - libextra/configure.ac, libextra/ext_inner_application.c, - libextra/ext_inner_application.h, libextra/fipsmd5.c, - libextra/gl/Makefile.am, libextra/gnutls-extra.pc.in, - libextra/gnutls_extra.c, libextra/gnutls_ia.c, - libextra/gnutls_openssl.c, libextra/includes/Makefile.am, - libextra/includes/gnutls/extra.h, - libextra/includes/gnutls/openssl.h, libextra/libgnutls-extra.map, - libextra/m4/hooks.m4, libextra/openssl_compat.c, - libextra/openssl_compat.h, m4/guile.m4, m4/valgrind.m4, - src/Makefile.am, src/common.c, src/serv.c, tests/Makefile.am, - tests/anonself.c, tests/certder.c, - tests/certificate_set_x509_crl.c, tests/chainverify.c, - tests/crq_apis.c, tests/crq_key_id.c, tests/crypto_rng.c, - tests/cve-2008-4989.c, tests/cve-2009-1415.c, - tests/cve-2009-1416.c, tests/dhepskself.c, tests/dn.c, tests/dn2.c, - tests/finished.c, tests/gc.c, tests/hostname-check.c, - tests/init_roundtrip.c, tests/key-id/Makefile.am, - tests/key-id/key-id, tests/mini-eagain.c, tests/mini.c, - tests/moredn.c, tests/mpi.c, tests/netconf-psk.c, - tests/nist-pkits/pkits, tests/nist-pkits/pkits_crl, - tests/nist-pkits/pkits_crt, tests/nist-pkits/pkits_pkcs12, - tests/nist-pkits/pkits_smime, tests/nul-in-x509-names.c, - tests/openpgp-certs/Makefile.am, tests/openpgp-keyring.c, - tests/openpgpself.c, tests/openssl.c, tests/oprfi.c, - tests/parse_ca.c, tests/pathlen/Makefile.am, tests/pathlen/pathlen, - tests/pgps2kgnu.c, tests/pkcs1-padding/Makefile.am, - tests/pkcs1-padding/pkcs1-pad, tests/pkcs12-decode/Makefile.am, - tests/pkcs12-decode/pkcs12, tests/pkcs12_encode.c, - tests/pkcs12_s2k.c, tests/pkcs12_s2k_pem.c, - tests/pkcs8-decode/Makefile.am, tests/pkcs8-decode/pkcs8, - tests/pskself.c, tests/resume.c, tests/rfc2253-escape-test, - tests/rsa-md5-collision/Makefile.am, - tests/rsa-md5-collision/rsa-md5-collision, tests/set_pkcs12_cred.c, - tests/setcredcrash.c, tests/sha2/Makefile.am, tests/sha2/sha2, - tests/simple.c, tests/tlsia.c, tests/userid/Makefile.am, - tests/userid/userid, tests/utils.c, tests/utils.h, - tests/x509_altname.c, tests/x509dn.c, tests/x509paths/chain, - tests/x509self.c, tests/x509sign-verify.c, tests/x509signself.c: - Update copyright years. - -2010-01-27 Simon Josefsson - - * Makefile.am: Fix license. - -2010-01-27 Simon Josefsson - - * README: Fix license. - -2010-01-27 Simon Josefsson - - * README-alpha: Fix license. - -2010-01-27 Simon Josefsson - - * src/cli.c: Fix license. - -2010-01-27 Simon Josefsson - - * src/crypt.c: Fix license. - -2010-01-27 Simon Josefsson - - * src/tls_test.c: Fix license. - -2010-01-27 Simon Josefsson - - * src/tests.c: Fix license. - -2010-01-27 Simon Josefsson - - * src/psk.c: Fix license. - -2010-01-27 Simon Josefsson - - * src/prime.c: Fix license. - -2010-01-27 Simon Josefsson - - * src/certtool.c: Fix license. - -2010-01-27 Simon Josefsson - - * src/certtool-cfg.c: Fix copyright/license. - -2010-01-27 Simon Josefsson - - * src/benchmark.c: Indent and fix copyright notices. - -2010-01-27 Simon Josefsson - - * build-aux/gnupload, gl/tests/test-gettimeofday.c, - gl/tests/test-memchr.c, gl/tests/test-read-file.c, - gl/tests/test-sockets.c, lib/gl/tests/test-memchr.c, - lib/gl/tests/test-read-file.c, lib/gl/tests/test-sockets.c: Update - gnulib files. - -2010-01-27 Simon Josefsson - - * ChangeLog, ChangeLog.1, THANKS, build-aux/gnupload, cfg.mk, - doc/Makefile.am, doc/credentials/Makefile.am, - doc/cyclo/Makefile.am, doc/errcodes.c, doc/examples/Makefile.am, - doc/extract-guile-c-doc.scm, doc/manpages/Makefile.am, - doc/printlist.c, gl/tests/test-gettimeofday.c, - gl/tests/test-memchr.c, gl/tests/test-read-file.c, - gl/tests/test-sockets.c, guile/Makefile.am, - guile/modules/Makefile.am, guile/modules/gnutls.scm, - guile/modules/gnutls/build/enums.scm, - guile/modules/gnutls/build/priorities.scm, - guile/modules/gnutls/build/smobs.scm, - guile/modules/gnutls/build/utils.scm, - guile/modules/gnutls/extra.scm, - guile/modules/system/documentation/c-snarf.scm, - guile/modules/system/documentation/output.scm, - guile/pre-inst-guile.in, guile/src/errors.h, - guile/src/make-enum-header.scm, guile/src/make-enum-map.scm, - guile/src/make-session-priorities.scm, - guile/src/make-smob-header.scm, guile/src/make-smob-types.scm, - guile/src/utils.h, guile/tests/anonymous-auth.scm, - guile/tests/errors.scm, guile/tests/openpgp-auth.scm, - guile/tests/openpgp-keyring.scm, guile/tests/openpgp-keys.scm, - guile/tests/pkcs-import-export.scm, - guile/tests/session-record-port.scm, guile/tests/srp-base64.scm, - guile/tests/x509-auth.scm, guile/tests/x509-certificates.scm, - lib/Makefile.am, lib/auth_anon.c, lib/auth_anon.h, lib/auth_cert.c, - lib/auth_cert.h, lib/auth_dh_common.c, lib/auth_dh_common.h, - lib/auth_dhe.c, lib/auth_dhe_psk.c, lib/auth_psk.c, lib/auth_psk.h, - lib/auth_psk_passwd.c, lib/auth_psk_passwd.h, lib/auth_rsa.c, - lib/auth_rsa_export.c, lib/auth_srp.c, lib/auth_srp.h, - lib/auth_srp_passwd.c, lib/auth_srp_passwd.h, lib/auth_srp_rsa.c, - lib/auth_srp_sb64.c, lib/cipher-libgcrypt.c, lib/crypto-api.c, - lib/crypto.c, lib/crypto.h, lib/cryptodev.c, lib/debug.c, - lib/debug.h, lib/ext_cert_type.c, lib/ext_cert_type.h, - lib/ext_max_record.c, lib/ext_max_record.h, lib/ext_oprfi.c, - lib/ext_oprfi.h, lib/ext_safe_renegotiation.c, - lib/ext_safe_renegotiation.h, lib/ext_server_name.c, - lib/ext_server_name.h, lib/ext_session_ticket.c, - lib/ext_session_ticket.h, lib/ext_signature.c, lib/ext_signature.h, - lib/ext_srp.c, lib/ext_srp.h, lib/gl/tests/test-memchr.c, - lib/gl/tests/test-read-file.c, lib/gl/tests/test-sockets.c, - lib/gnutls_alert.c, lib/gnutls_algorithms.c, - lib/gnutls_algorithms.h, lib/gnutls_anon_cred.c, lib/gnutls_auth.c, - lib/gnutls_auth.h, lib/gnutls_buffers.c, lib/gnutls_buffers.h, - lib/gnutls_cert.c, lib/gnutls_cert.h, lib/gnutls_cipher.c, - lib/gnutls_cipher.h, lib/gnutls_cipher_int.c, - lib/gnutls_cipher_int.h, lib/gnutls_compress.c, - lib/gnutls_compress.h, lib/gnutls_constate.c, - lib/gnutls_constate.h, lib/gnutls_datum.c, lib/gnutls_datum.h, - lib/gnutls_db.c, lib/gnutls_db.h, lib/gnutls_dh.c, lib/gnutls_dh.h, - lib/gnutls_dh_primes.c, lib/gnutls_errors.c, lib/gnutls_errors.h, - lib/gnutls_extensions.c, lib/gnutls_extensions.h, - lib/gnutls_global.c, lib/gnutls_global.h, lib/gnutls_handshake.c, - lib/gnutls_handshake.h, lib/gnutls_hash_int.c, - lib/gnutls_hash_int.h, lib/gnutls_helper.c, lib/gnutls_int.h, - lib/gnutls_kx.c, lib/gnutls_kx.h, lib/gnutls_mem.c, - lib/gnutls_mem.h, lib/gnutls_mpi.c, lib/gnutls_mpi.h, - lib/gnutls_num.c, lib/gnutls_num.h, lib/gnutls_pk.c, - lib/gnutls_pk.h, lib/gnutls_priority.c, lib/gnutls_psk.c, - lib/gnutls_psk_netconf.c, lib/gnutls_record.c, lib/gnutls_record.h, - lib/gnutls_rsa_export.c, lib/gnutls_rsa_export.h, - lib/gnutls_session.c, lib/gnutls_session_pack.c, - lib/gnutls_session_pack.h, lib/gnutls_sig.c, lib/gnutls_sig.h, - lib/gnutls_srp.c, lib/gnutls_srp.h, lib/gnutls_state.c, - lib/gnutls_state.h, lib/gnutls_str.c, lib/gnutls_str.h, - lib/gnutls_supplemental.c, lib/gnutls_supplemental.h, - lib/gnutls_ui.c, lib/gnutls_v2_compat.c, lib/gnutls_v2_compat.h, - lib/gnutls_x509.c, lib/gnutls_x509.h, lib/includes/Makefile.am, - lib/includes/gnutls/crypto.h, lib/includes/gnutls/gnutls.h.in, - lib/includes/gnutls/openpgp.h, lib/includes/gnutls/pkcs12.h, - lib/includes/gnutls/x509.h, lib/libgnutls.map, lib/libgnutlsxx.map, - lib/mac-libgcrypt.c, lib/minitasn1/Makefile.am, - lib/minitasn1/coding.c, lib/minitasn1/decoding.c, - lib/minitasn1/element.c, lib/minitasn1/gstr.c, - lib/minitasn1/libtasn1.h, lib/minitasn1/parser_aux.c, - lib/minitasn1/structure.c, lib/mpi-libgcrypt.c, - lib/opencdk/Makefile.am, lib/opencdk/hash.c, - lib/openpgp/Makefile.am, lib/openpgp/compat.c, - lib/openpgp/extras.c, lib/openpgp/gnutls_openpgp.c, - lib/openpgp/output.c, lib/openpgp/pgp.c, lib/openpgp/pgpverify.c, - lib/openpgp/privkey.c, lib/pk-libgcrypt.c, lib/random.c, - lib/random.h, lib/rnd-libgcrypt.c, lib/x509/Makefile.am, - lib/x509/common.c, lib/x509/common.h, lib/x509/crl.c, - lib/x509/crl_write.c, lib/x509/crq.c, lib/x509/dn.c, - lib/x509/extensions.c, lib/x509/mpi.c, lib/x509/output.c, - lib/x509/pkcs12.c, lib/x509/pkcs12_bag.c, lib/x509/pkcs7.c, - lib/x509/privkey.c, lib/x509/privkey_pkcs8.c, - lib/x509/rfc2818_hostname.c, lib/x509/sign.c, lib/x509/verify.c, - lib/x509/x509.c, lib/x509/x509_int.h, lib/x509/x509_write.c, - lib/x509_b64.c, lib/x509_b64.h, libextra/Makefile.am, - libextra/ext_inner_application.c, libextra/ext_inner_application.h, - libextra/fipsmd5.c, libextra/gl/Makefile.am, - libextra/gnutls-extra.pc.in, libextra/gnutls_extra.c, - libextra/gnutls_ia.c, libextra/gnutls_openssl.c, - libextra/includes/Makefile.am, libextra/includes/gnutls/extra.h, - libextra/includes/gnutls/openssl.h, libextra/libgnutls-extra.map, - libextra/openssl_compat.c, libextra/openssl_compat.h, - src/Makefile.am, src/benchmark.c, src/certtool-cfg.c, - src/certtool.c, src/common.c, src/crypt.c, src/prime.c, src/psk.c, - src/serv.c, src/tests.c, src/tls_test.c, tests/Makefile.am, - tests/anonself.c, tests/certder.c, tests/chainverify.c, - tests/crq_apis.c, tests/crq_key_id.c, tests/crypto_rng.c, - tests/cve-2008-4989.c, tests/cve-2009-1415.c, - tests/cve-2009-1416.c, tests/dhepskself.c, tests/dn.c, tests/dn2.c, - tests/finished.c, tests/gc.c, tests/hostname-check.c, - tests/init_roundtrip.c, tests/key-id/Makefile.am, - tests/key-id/key-id, tests/mini-eagain.c, tests/mini.c, - tests/moredn.c, tests/mpi.c, tests/netconf-psk.c, - tests/nist-pkits/pkits, tests/nist-pkits/pkits_crl, - tests/nist-pkits/pkits_crt, tests/nist-pkits/pkits_pkcs12, - tests/nist-pkits/pkits_smime, tests/nul-in-x509-names.c, - tests/openpgp-certs/Makefile.am, tests/openpgp-certs/testcerts, - tests/openpgp-certs/testselfsigs, tests/openpgp-keyring.c, - tests/openpgpself.c, tests/openssl.c, tests/oprfi.c, - tests/parse_ca.c, tests/pathlen/Makefile.am, tests/pathlen/pathlen, - tests/pkcs1-padding/Makefile.am, tests/pkcs1-padding/pkcs1-pad, - tests/pkcs12-decode/Makefile.am, tests/pkcs12-decode/pkcs12, - tests/pkcs12_encode.c, tests/pkcs12_s2k.c, tests/pkcs12_s2k_pem.c, - tests/pkcs8-decode/Makefile.am, tests/pkcs8-decode/pkcs8, - tests/pskself.c, tests/resume.c, tests/rfc2253-escape-test, - tests/rsa-md5-collision/Makefile.am, - tests/rsa-md5-collision/rsa-md5-collision, - tests/safe-renegotiation/Makefile.am, - tests/safe-renegotiation/testsrn, tests/set_pkcs12_cred.c, - tests/setcredcrash.c, tests/sha2/Makefile.am, tests/sha2/sha2, - tests/simple.c, tests/tlsia.c, tests/userid/Makefile.am, - tests/userid/userid, tests/utils.c, tests/utils.h, - tests/x509_altname.c, tests/x509dn.c, tests/x509paths/chain, - tests/x509self.c, tests/x509sign-verify.c, tests/x509signself.c: Fix - FSF copyright notices. - -2010-01-27 Simon Josefsson - - * THANKS, doc/gnutls.texi: doc: Fix pkg-config recommendation. Reported by Claudio Saavedra in - - . - -2010-01-27 Simon Josefsson - - * NEWS, THANKS, src/cli.c: gnutls-cli: Handle reading binary data - from server. Reported by and tiny patch from Vitaly Mayatskikh - in - - . - -2010-01-26 Simon Josefsson - - * build-aux/update-copyright, gl/Makefile.am, - gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, gl/tests/Makefile.am, - gl/tests/test-update-copyright.sh: Update gnulib files. - -2010-01-26 Nikos Mavrogiannopoulos - - * tests/openpgp-certs/testcerts, tests/openpgp-certs/testselfsigs, - tests/safe-renegotiation/testsrn: Added copyright notices! - -2010-01-26 Simon Josefsson - - * NEWS, doc/manpages/Makefile.am: Generated. - -2010-01-26 Simon Josefsson - - * .gitignore: Improve. - -2010-01-26 Simon Josefsson - - * doc/reference/Makefile.am: Ignore more. - -2010-01-26 Simon Josefsson - - * .gitignore, lib/gl/m4/warn-on-use.m4: Update gnulib files. - -2010-01-26 Simon Josefsson - - * gl/m4/warn-on-use.m4, lib/build-aux/arg-nonnull.h, - lib/build-aux/warn-on-use.h: Update gnulib files. - -2010-01-26 Simon Josefsson - - * .gitignore: Fix. - -2010-01-26 Simon Josefsson - - * lib/gl/tests/macros.h, lib/gl/tests/signature.h: Update gnulib - files. - -2010-01-26 Simon Josefsson - - * .gitignore: Fix - -2010-01-26 Simon Josefsson - - * gl/tests/macros.h, gl/tests/signature.h, - gl/tests/test-sys_ioctl.c: Update gnulib files. - -2010-01-26 Simon Josefsson - - * GNUmakefile, build-aux/arg-nonnull.h, build-aux/config.rpath, - build-aux/gendocs.sh, build-aux/gnupload, build-aux/link-warning.h, - build-aux/pmccabe2html, build-aux/useless-if-before-free, - build-aux/vc-list-files, build-aux/warn-on-use.h, gl/Makefile.am, - gl/accept.c, gl/alignof.h, gl/alloca.c, gl/alloca.in.h, - gl/arpa_inet.in.h, gl/asnprintf.c, gl/bind.c, gl/c-ctype.c, - gl/c-ctype.h, gl/close-hook.c, gl/close-hook.h, gl/close.c, - gl/connect.c, gl/errno.in.h, gl/error.c, gl/error.h, gl/fclose.c, - gl/float+.h, gl/float.in.h, gl/fseeko.c, gl/gai_strerror.c, - gl/getaddrinfo.c, gl/getdelim.c, gl/getline.c, gl/getpass.c, - gl/getpass.h, gl/gettext.h, gl/inet_ntop.c, gl/inet_pton.c, - gl/intprops.h, gl/listen.c, gl/lseek.c, gl/m4/00gnulib.m4, - gl/m4/alloca.m4, gl/m4/arpa_inet_h.m4, gl/m4/autobuild.m4, - gl/m4/close.m4, gl/m4/errno_h.m4, gl/m4/error.m4, - gl/m4/extensions.m4, gl/m4/fclose.m4, gl/m4/float_h.m4, - gl/m4/fseeko.m4, gl/m4/getaddrinfo.m4, gl/m4/getdelim.m4, - gl/m4/getline.m4, gl/m4/getpass.m4, gl/m4/gettimeofday.m4, - gl/m4/gnulib-cache.m4, gl/m4/gnulib-common.m4, - gl/m4/gnulib-comp.m4, gl/m4/gnulib-tool.m4, gl/m4/hostent.m4, - gl/m4/include_next.m4, gl/m4/inet_ntop.m4, gl/m4/inet_pton.m4, - gl/m4/intmax_t.m4, gl/m4/inttypes_h.m4, gl/m4/lib-ld.m4, - gl/m4/lib-link.m4, gl/m4/lib-prefix.m4, gl/m4/longlong.m4, - gl/m4/lseek.m4, gl/m4/malloc.m4, gl/m4/manywarnings.m4, - gl/m4/memchr.m4, gl/m4/minmax.m4, gl/m4/mmap-anon.m4, - gl/m4/multiarch.m4, gl/m4/netdb_h.m4, gl/m4/netinet_in_h.m4, - gl/m4/perror.m4, gl/m4/printf.m4, gl/m4/read-file.m4, - gl/m4/readline.m4, gl/m4/realloc.m4, gl/m4/select.m4, - gl/m4/servent.m4, gl/m4/size_max.m4, gl/m4/snprintf.m4, - gl/m4/sockets.m4, gl/m4/socklen.m4, gl/m4/sockpfaf.m4, - gl/m4/stdarg.m4, gl/m4/stdbool.m4, gl/m4/stddef_h.m4, - gl/m4/stdint.m4, gl/m4/stdint_h.m4, gl/m4/stdio_h.m4, - gl/m4/stdlib_h.m4, gl/m4/strerror.m4, gl/m4/string_h.m4, - gl/m4/sys_ioctl_h.m4, gl/m4/sys_select_h.m4, gl/m4/sys_socket_h.m4, - gl/m4/sys_stat_h.m4, gl/m4/sys_time_h.m4, gl/m4/time_h.m4, - gl/m4/ungetc.m4, gl/m4/unistd_h.m4, gl/m4/vasnprintf.m4, - gl/m4/version-etc.m4, gl/m4/warnings.m4, gl/m4/wchar.m4, - gl/m4/wchar_t.m4, gl/m4/wint_t.m4, gl/m4/xsize.m4, gl/memchr.c, - gl/minmax.h, gl/netdb.in.h, gl/netinet_in.in.h, - gl/override/lib/gettext.h.diff, gl/perror.c, gl/printf-args.c, - gl/printf-args.h, gl/printf-parse.c, gl/printf-parse.h, - gl/progname.c, gl/progname.h, gl/read-file.c, gl/read-file.h, - gl/readline.c, gl/readline.h, gl/realloc.c, gl/recv.c, gl/select.c, - gl/send.c, gl/setsockopt.c, gl/shutdown.c, gl/size_max.h, - gl/snprintf.c, gl/socket.c, gl/sockets.c, gl/sockets.h, - gl/stdarg.in.h, gl/stdbool.in.h, gl/stddef.in.h, gl/stdint.in.h, - gl/stdio-impl.h, gl/stdio-write.c, gl/stdio.in.h, gl/stdlib.in.h, - gl/strerror.c, gl/string.in.h, gl/sys_select.in.h, - gl/sys_socket.in.h, gl/sys_stat.in.h, gl/sys_time.in.h, - gl/tests/Makefile.am, gl/tests/dummy.c, gl/tests/gettimeofday.c, - gl/tests/ioctl.c, gl/tests/sys_ioctl.in.h, gl/tests/test-alignof.c, - gl/tests/test-alloca-opt.c, gl/tests/test-arpa_inet.c, - gl/tests/test-c-ctype.c, gl/tests/test-errno.c, - gl/tests/test-fseeko.c, gl/tests/test-getaddrinfo.c, - gl/tests/test-getdelim.c, gl/tests/test-getline.c, - gl/tests/test-gettimeofday.c, gl/tests/test-inet_ntop.c, - gl/tests/test-inet_pton.c, gl/tests/test-lseek.c, - gl/tests/test-memchr.c, gl/tests/test-netdb.c, - gl/tests/test-netinet_in.c, gl/tests/test-perror.c, - gl/tests/test-read-file.c, gl/tests/test-select-fd.c, - gl/tests/test-select-stdin.c, gl/tests/test-select.c, - gl/tests/test-snprintf.c, gl/tests/test-stdbool.c, - gl/tests/test-stddef.c, gl/tests/test-stdint.c, - gl/tests/test-stdio.c, gl/tests/test-stdlib.c, - gl/tests/test-strerror.c, gl/tests/test-string.c, - gl/tests/test-sys_select.c, gl/tests/test-sys_socket.c, - gl/tests/test-sys_stat.c, gl/tests/test-sys_time.c, - gl/tests/test-time.c, gl/tests/test-unistd.c, - gl/tests/test-vasnprintf.c, gl/tests/test-vc-list-files-cvs.sh, - gl/tests/test-vc-list-files-git.sh, gl/tests/test-version-etc.c, - gl/tests/test-version-etc.sh, gl/tests/test-wchar.c, - gl/tests/verify.h, gl/tests/w32sock.h, gl/tests/zerosize-ptr.h, - gl/time.in.h, gl/unistd.in.h, gl/vasnprintf.c, gl/vasnprintf.h, - gl/version-etc-fsf.c, gl/version-etc.c, gl/version-etc.h, - gl/w32sock.h, gl/wchar.in.h, gl/xsize.h, - lib/build-aux/config.rpath, lib/build-aux/link-warning.h, - lib/gl/Makefile.am, lib/gl/alignof.h, lib/gl/alloca.in.h, - lib/gl/asnprintf.c, lib/gl/asprintf.c, lib/gl/byteswap.in.h, - lib/gl/c-ctype.c, lib/gl/c-ctype.h, lib/gl/close-hook.c, - lib/gl/close-hook.h, lib/gl/errno.in.h, lib/gl/float+.h, - lib/gl/float.in.h, lib/gl/fseeko.c, lib/gl/gettext.h, - lib/gl/lseek.c, lib/gl/m4/00gnulib.m4, lib/gl/m4/alloca.m4, - lib/gl/m4/byteswap.m4, lib/gl/m4/codeset.m4, lib/gl/m4/errno_h.m4, - lib/gl/m4/extensions.m4, lib/gl/m4/float_h.m4, lib/gl/m4/fseeko.m4, - lib/gl/m4/func.m4, lib/gl/m4/gettext.m4, lib/gl/m4/glibc2.m4, - lib/gl/m4/glibc21.m4, lib/gl/m4/gnulib-cache.m4, - lib/gl/m4/gnulib-common.m4, lib/gl/m4/gnulib-comp.m4, - lib/gl/m4/gnulib-tool.m4, lib/gl/m4/iconv.m4, - lib/gl/m4/include_next.m4, lib/gl/m4/intdiv0.m4, lib/gl/m4/intl.m4, - lib/gl/m4/intldir.m4, lib/gl/m4/intlmacosx.m4, lib/gl/m4/intmax.m4, - lib/gl/m4/intmax_t.m4, lib/gl/m4/inttypes-pri.m4, - lib/gl/m4/inttypes_h.m4, lib/gl/m4/lcmessage.m4, - lib/gl/m4/ld-output-def.m4, lib/gl/m4/ld-version-script.m4, - lib/gl/m4/lib-ld.m4, lib/gl/m4/lib-link.m4, - lib/gl/m4/lib-prefix.m4, lib/gl/m4/lock.m4, lib/gl/m4/longlong.m4, - lib/gl/m4/lseek.m4, lib/gl/m4/malloc.m4, lib/gl/m4/memchr.m4, - lib/gl/m4/memmem.m4, lib/gl/m4/minmax.m4, lib/gl/m4/mmap-anon.m4, - lib/gl/m4/multiarch.m4, lib/gl/m4/netdb_h.m4, lib/gl/m4/nls.m4, - lib/gl/m4/po.m4, lib/gl/m4/printf-posix.m4, lib/gl/m4/printf.m4, - lib/gl/m4/progtest.m4, lib/gl/m4/read-file.m4, - lib/gl/m4/realloc.m4, lib/gl/m4/size_max.m4, lib/gl/m4/snprintf.m4, - lib/gl/m4/sockets.m4, lib/gl/m4/socklen.m4, lib/gl/m4/sockpfaf.m4, - lib/gl/m4/stdbool.m4, lib/gl/m4/stddef_h.m4, lib/gl/m4/stdint.m4, - lib/gl/m4/stdint_h.m4, lib/gl/m4/stdio_h.m4, lib/gl/m4/stdlib_h.m4, - lib/gl/m4/strcase.m4, lib/gl/m4/string_h.m4, - lib/gl/m4/strings_h.m4, lib/gl/m4/strverscmp.m4, - lib/gl/m4/sys_socket_h.m4, lib/gl/m4/sys_stat_h.m4, - lib/gl/m4/threadlib.m4, lib/gl/m4/time_h.m4, lib/gl/m4/time_r.m4, - lib/gl/m4/uintmax_t.m4, lib/gl/m4/ungetc.m4, lib/gl/m4/unistd_h.m4, - lib/gl/m4/vasnprintf.m4, lib/gl/m4/vasprintf.m4, - lib/gl/m4/visibility.m4, lib/gl/m4/vsnprintf.m4, - lib/gl/m4/wchar.m4, lib/gl/m4/wchar_t.m4, lib/gl/m4/wint_t.m4, - lib/gl/m4/xsize.m4, lib/gl/memchr.c, lib/gl/memmem.c, - lib/gl/minmax.h, lib/gl/netdb.in.h, - lib/gl/override/lib/gettext.h.diff, lib/gl/printf-args.c, - lib/gl/printf-args.h, lib/gl/printf-parse.c, lib/gl/printf-parse.h, - lib/gl/read-file.c, lib/gl/read-file.h, lib/gl/realloc.c, - lib/gl/size_max.h, lib/gl/snprintf.c, lib/gl/sockets.c, - lib/gl/sockets.h, lib/gl/stdbool.in.h, lib/gl/stddef.in.h, - lib/gl/stdint.in.h, lib/gl/stdio-impl.h, lib/gl/stdio-write.c, - lib/gl/stdio.in.h, lib/gl/stdlib.in.h, lib/gl/str-two-way.h, - lib/gl/strcasecmp.c, lib/gl/string.in.h, lib/gl/strings.in.h, - lib/gl/strncasecmp.c, lib/gl/strverscmp.c, lib/gl/sys_socket.in.h, - lib/gl/sys_stat.in.h, lib/gl/tests/Makefile.am, - lib/gl/tests/dummy.c, lib/gl/tests/intprops.h, - lib/gl/tests/test-alloca-opt.c, lib/gl/tests/test-byteswap.c, - lib/gl/tests/test-c-ctype.c, lib/gl/tests/test-errno.c, - lib/gl/tests/test-fseeko.c, lib/gl/tests/test-func.c, - lib/gl/tests/test-memchr.c, lib/gl/tests/test-netdb.c, - lib/gl/tests/test-read-file.c, lib/gl/tests/test-snprintf.c, - lib/gl/tests/test-stdbool.c, lib/gl/tests/test-stddef.c, - lib/gl/tests/test-stdint.c, lib/gl/tests/test-stdio.c, - lib/gl/tests/test-stdlib.c, lib/gl/tests/test-string.c, - lib/gl/tests/test-strings.c, lib/gl/tests/test-strverscmp.c, - lib/gl/tests/test-sys_socket.c, lib/gl/tests/test-sys_stat.c, - lib/gl/tests/test-time.c, lib/gl/tests/test-unistd.c, - lib/gl/tests/test-vasnprintf.c, lib/gl/tests/test-vasprintf.c, - lib/gl/tests/test-vsnprintf.c, lib/gl/tests/test-wchar.c, - lib/gl/tests/verify.h, lib/gl/tests/zerosize-ptr.h, - lib/gl/time.in.h, lib/gl/time_r.c, lib/gl/unistd.in.h, - lib/gl/vasnprintf.c, lib/gl/vasnprintf.h, lib/gl/vasprintf.c, - lib/gl/vsnprintf.c, lib/gl/w32sock.h, lib/gl/wchar.in.h, - lib/gl/xsize.h, libextra/build-aux/config.rpath, - libextra/gl/gnulib.mk, libextra/gl/hmac-md5.c, libextra/gl/hmac.h, - libextra/gl/m4/00gnulib.m4, libextra/gl/m4/extensions.m4, - libextra/gl/m4/gnulib-cache.m4, libextra/gl/m4/gnulib-common.m4, - libextra/gl/m4/gnulib-comp.m4, libextra/gl/m4/gnulib-tool.m4, - libextra/gl/m4/hmac-md5.m4, libextra/gl/m4/ld-output-def.m4, - libextra/gl/m4/ld-version-script.m4, libextra/gl/m4/lib-ld.m4, - libextra/gl/m4/lib-link.m4, libextra/gl/m4/lib-prefix.m4, - libextra/gl/m4/md5.m4, libextra/gl/m4/memxor.m4, libextra/gl/md5.c, - libextra/gl/md5.h, libextra/gl/memxor.c, libextra/gl/memxor.h, - maint.mk: Update gnulib files. - -2010-01-22 Nikos Mavrogiannopoulos - - * NEWS: Documented addition of new priority strings. - -2010-01-22 Nikos Mavrogiannopoulos - - * NEWS: Documented Steve Dispensa's patch addition. - -2010-01-22 Nikos Mavrogiannopoulos - - * tests/safe-renegotiation/testsrn: Added tests for new behaviour of - client. - -2010-01-22 Nikos Mavrogiannopoulos - - * lib/gnutls_handshake.c: Revert "Always allow initial negotiation. - Disable subsequent unsafe renegotiations." This reverts commit - 1e4981cfbec360a19cfb7470ce96093aaa95b32e. Ah, this was to twart the attack (description by Daniel Kahn - Gilmor): The problem, as i understand it, is that the client is - incapable of telling whether the plaintext prefix injection attack - has already happened. I don't think disabling renegotiation for the - session resolves the problem. For a server which does not announce and enforce safe renegotiation, - what the client sees as an initial connection may unknowingly - actually be renegotiating an existing session that was started by an - attacker. The concern isn't that the (legitimate) client will have their - session re-negotiated by an attacker; it's that the MITM attacker - can trick the server into viewing the client's initial - authentication as a re-negotiation of a TLS session already - underway. for servers which do odd things like apply the credentials of the - post-renegotiation client to the traffic that happened before the - renegotiation (e.g. HTTPS, with client-side certificates required - only for certain subdirectories), a safe-renegotiation-aware client - *should* refuse to connect to servers which do not announce safe - renegotiation if they want to resist this attack. - -2010-01-21 Nikos Mavrogiannopoulos - - * configure.ac: Added safe-renegotiation subdir. - -2010-01-21 Nikos Mavrogiannopoulos - - * lib/ext_safe_renegotiation.c, lib/gnutls_handshake.c, - lib/gnutls_int.h, lib/gnutls_priority.c, tests/Makefile.am, - tests/safe-renegotiation/Makefile.am, - tests/safe-renegotiation/params.dh, - tests/safe-renegotiation/testsrn: Added safe renegotiation test - cases. Added priority string option to completely disable - renegotiation to assist in testing more cases. - -2010-01-21 Nikos Mavrogiannopoulos - - * src/cli-gaa.c, src/cli-gaa.h, src/cli.c, src/cli.gaa: Added the - --rehandshake option to gnutls-cli to allow connection and immediate - rehandshake. - -2010-01-21 Nikos Mavrogiannopoulos - - * lib/ext_safe_renegotiation.c: More carefull copying of data. Check - for the malicious case where a server does initial unsafe - negotiation and proceeds with a safe renegotiation. - -2010-01-21 Nikos Mavrogiannopoulos - - * lib/gnutls_handshake.c: Always allow initial negotiation. Disable - subsequent unsafe renegotiations. Signed-off-by: Nikos Mavrogiannopoulos - -2010-01-21 Nikos Mavrogiannopoulos - - * lib/ext_safe_renegotiation.c, lib/gnutls_handshake.c, - lib/gnutls_int.h, lib/gnutls_state.c: Safe renegotiation variable - cleanup. No longer clear variables that should stay across - rehandshakes. - -2010-01-21 Nikos Mavrogiannopoulos - - * lib/crypto-api.c, lib/gnutls_cipher_int.c: Documented the - crypto-api functions and made the API tolerant to NULL IV. - -2010-01-21 Nikos Mavrogiannopoulos - - * lib/gnutls_handshake.c: Added documentation of rehandshake usage - in gnutls if full-duplex capability is required. - -2010-01-21 Nikos Mavrogiannopoulos - - * lib/gnutls_buffers.c: Reduced asserts to reduce unneeded - printings. - -2010-01-21 Nikos Mavrogiannopoulos - - * src/cli.c, src/serv.c: Removed rehandshake initiation capability - from client and transferred it to the echo server. Once the server - receives a string **REHANDSHAKE** will request a rehandshake. - -2010-01-19 Steve Dispensa - - * lib/gnutls_handshake.c: Here is another patch that fixes an - interoperability problem with safe renegotiation and resumption. In - copying forward the safe renegotiation state across resumptions, I - got a little carried away and copied too much data (new connections - should start with empty RI data). Signed-off-by: Nikos Mavrogiannopoulos - -2010-01-15 Nikos Mavrogiannopoulos - - * lib/ext_oprfi.c, lib/ext_session_ticket.c, lib/gnutls_constate.c, - lib/gnutls_handshake.c, lib/gnutls_int.h: Modified extensions - (session ticket, oprfi) to store internal data in gnutls internal - structure and input data only in the security_parameters extension - structure. Session ticket extension will call the user supplied hello function - on resumption. (the current API to handle that is inexistant. To be revised) - -2010-01-14 Nikos Mavrogiannopoulos - - * lib/ext_session_ticket.c, lib/gnutls_constate.c, - lib/gnutls_int.h, lib/gnutls_session_pack.c: Further cleanup the - extension internal structure. Now if values are not saved and - restored when resumming they will be initialized to zero. - -2010-01-13 Nikos Mavrogiannopoulos - - * tests/chainverify.c, tests/crq_apis.c, tests/crq_key_id.c, - tests/cve-2008-4989.c, tests/dn2.c, tests/finished.c, tests/mini.c, - tests/pkcs12_s2k_pem.c, tests/tlsia.c, tests/x509sign-verify.c: - Tests compile with --enable-gcc-warnings. - -2010-01-13 Nikos Mavrogiannopoulos - - * lib/ext_safe_renegotiation.h, lib/gnutls_constate.c, - lib/gnutls_extensions.c, lib/gnutls_handshake.c, lib/gnutls_int.h, - lib/gnutls_state.c, tests/resume.c, tests/simple.c: Specify in - detail what to be copied when resuming. It seems there are - extensions (like safe renegotiation) that do not need to read the - stored values. Moreover this might overcome any bugs by the - extensions that used to store pointers in the extension structure. - -2010-01-13 Nikos Mavrogiannopoulos - - * lib/ext_safe_renegotiation.c: Initialize the default value to 0. - It seemed to have default value of 0 when non resuming :) - -2010-01-13 Nikos Mavrogiannopoulos - - * doc/examples/ex-client-tlsia.c, tests/utils.c: Removed warnings. - -2010-01-13 Nikos Mavrogiannopoulos - - * configure.ac: Added -Wno-int-to-pointer-cast to enable compilation - when enable-gcc-warnings is given. - -2010-01-13 Steve Dispensa - - * lib/gnutls_handshake.c: Here are two more patches. The first adds - support for renegotiation of resumption. Also, I found a bug in my initial implementation - I was incorrectly - sending the SCSV on all connections, not only those using SSLv3, as - should have been the case. Signed-off-by: Nikos Mavrogiannopoulos - -2010-01-12 Nikos Mavrogiannopoulos - - * NEWS, doc/manpages/gnutls-cli.1, doc/manpages/gnutls-serv.1: - Documentation updates. - -2010-01-12 Nikos Mavrogiannopoulos - - * lib/gnutls_handshake.c: When denying an initial negotiation due to - missing safe renegotiation extension reply with NO_RENEGOTIATION - alert. - -2010-01-12 Nikos Mavrogiannopoulos - - * lib/gnutls_extensions.c, lib/gnutls_handshake.c, - lib/includes/gnutls/gnutls.h.in, tests/resume.c: When resuming no - extensions were parsed thus the safe renegotiation extension was - ignored as well causing a false detection of unsafe session. - Corrected by making a special class of extensions called RESUMED. - Those are parsed even when resuming (normally we don't do it to - prevent clients overwriting capabilities and credentials). - -2010-01-12 Nikos Mavrogiannopoulos - - * lib/ext_safe_renegotiation.c, lib/ext_safe_renegotiation.h, - lib/gnutls_alert.c, lib/gnutls_algorithms.c, - lib/gnutls_algorithms.h, lib/gnutls_extensions.c, - lib/gnutls_extensions.h, lib/gnutls_handshake.c, lib/gnutls_int.h, - lib/gnutls_priority.c, lib/includes/gnutls/gnutls.h.in: Added Steve - Dispensa's patch for safe renegotiation (with artistic changes). - Effectively reverted my previous patch - 1a338cbaaeec11d958de8da4d1ae036979fccf3e. - -2010-01-12 Nikos Mavrogiannopoulos - - * THANKS: Updated thanks file. - -2010-01-12 Nikos Mavrogiannopoulos - - * NEWS, lib/opencdk/sig-check.c, src/certtool.c, - tests/openpgp-certs/Makefile.am, tests/openpgp-certs/testselfsigs: - When checking self signature also check the signatures of all - subkeys. Ilari Liusvaara noticed and reported the issue and - provided test vectors as well. certtool --pgp-certificate-info will check self signatures. Added self tests for self-sigs. - -2010-01-11 Nikos Mavrogiannopoulos - - * tests/gc.c: hash_fast -> hmac_fast - -2010-01-10 Nikos Mavrogiannopoulos - - * doc/manpages/gnutls-cli.1, doc/manpages/gnutls-serv.1, - lib/Makefile.am, lib/ext_safe_renegotiation.c, - lib/ext_safe_renegotiation.h, lib/gnutls_errors.c, - lib/gnutls_extensions.c, lib/gnutls_handshake.c, lib/gnutls_int.h, - lib/gnutls_priority.c, lib/includes/gnutls/gnutls.h.in, src/cli.c, - src/serv.c: Added safe renegotiation patch from Steve Dispensa, - modified to suit gnutls code style and error checking. Modified to - conform to draft-ietf-tls-renegotiation-03.txt. gnutls-cli will search input for **RENEGOTIATION** to perform a - renegotiation and gnutls-serv will perform one if requested. - -2010-01-10 Nikos Mavrogiannopoulos - - * lib/x509/mpi.c: Corrections for --disable-extra-pki configure flag - to work. Patch by Bill Randle. - -2010-01-04 Andreas Metzler - - * ChangeLog, doc/certtool.cfg, doc/gnutls.texi, lib/gnutls_auth.c, - lib/gnutls_priority.c, lib/gnutls_session.c, lib/openpgp/pgp.c, - lib/openpgp/privkey.c: Typo fixes: successful, precedence, preferred - -2009-12-18 Nikos Mavrogiannopoulos - - * lib/cryptodev.c: define EALG_MAX_BLOCK_LEN if not there. - -2009-12-05 Nikos Mavrogiannopoulos - - * libextra/fipsmd5.c: use C99 initializations - -2009-12-05 Nikos Mavrogiannopoulos - - * NEWS, lib/Makefile.am, lib/compat.c, lib/crypto-api.c, - lib/crypto.c, lib/crypto.h, lib/gnutls_cipher.c, - lib/gnutls_cipher_int.c, lib/gnutls_cipher_int.h, - lib/gnutls_hash_int.c, lib/gnutls_hash_int.h, - lib/includes/gnutls/crypto.h, lib/includes/gnutls/gnutls.h.in, - lib/libgnutls.map, libextra/fipsmd5.c, src/benchmark.c: Reverted all - previous changes to combine hashes with MAC algorithms. It is now - permissible to register a hash algorithm separately from a MAC. - -2009-12-05 Nikos Mavrogiannopoulos - - * lib/crypto-api.c, lib/crypto.c, lib/crypto.h, - lib/ext_session_ticket.c, lib/gnutls_algorithms.c, - lib/gnutls_algorithms.h, lib/gnutls_cipher.c, - lib/gnutls_cipher_int.c, lib/gnutls_cipher_int.h, - lib/gnutls_constate.c, lib/gnutls_constate.h, - lib/gnutls_handshake.c, lib/gnutls_hash_int.c, - lib/gnutls_hash_int.h, lib/gnutls_int.h, lib/gnutls_priority.c, - lib/gnutls_psk_netconf.c, lib/gnutls_sig.c, lib/gnutls_srp.c, - lib/gnutls_state.c, lib/gnutls_ui.c, lib/includes/gnutls/crypto.h, - lib/includes/gnutls/gnutls.h.in, lib/mac-libgcrypt.c, - lib/opencdk/dummy.c, lib/opencdk/filters.h, lib/opencdk/hash.c, - lib/opencdk/kbnode.c, lib/opencdk/main.h, lib/opencdk/opencdk.h, - lib/opencdk/pubkey.c, lib/opencdk/sig-check.c, - lib/opencdk/verify.c, lib/x509/crq.c, lib/x509/pbkdf2-sha1.c, - lib/x509/pkcs12.c, lib/x509/pkcs12_encr.c, lib/x509/privkey.c, - lib/x509/sign.c, lib/x509/verify.c, lib/x509/x509.c, - lib/x509/x509_int.h, libextra/fipsmd5.c, libextra/gnutls_openssl.c: - Revert "Merged the two internal hash API functions, to simplify and - reduce code." This reverts commit bc3e43d5f121e404aa32212dcfcc5027de807056. Conflicts: lib/crypto.c lib/gnutls_cipher.c lib/gnutls_hash_int.c lib/gnutls_hash_int.h lib/includes/gnutls/crypto.h lib/mac-libgcrypt.c - -2009-12-05 Nikos Mavrogiannopoulos - - * lib/gnutls_hash_int.c, lib/includes/gnutls/crypto.h, - lib/mac-libgcrypt.c, libextra/gnutls_openssl.c, tests/gc.c: Revert - "Added plain MD5 hash check and corrected gnutls_hash_fast() usage - in openssl.c" This reverts commit 54486afbfcf3398846d5c20d3094bdb7d0a43ff2. - -2009-12-04 Simon Josefsson - - * doc/examples/ex-x509-info.c: Improve example of printing cert - info. - -2009-12-04 Simon Josefsson - - * doc/gnutls.texi: Typo fix. Reported by Laurence in - - . - -2009-12-04 Nikos Mavrogiannopoulos - - * lib/compat.c, lib/gnutls_algorithms.h: fixes for compilation. - -2009-12-03 Simon Josefsson - - * lib/gnutls_cert.c: Check return value from - gnutls_x509_crt_get_key_usage. - -2009-12-02 Nikos Mavrogiannopoulos - - * NEWS, tests/pathlen/ca-no-pathlen.pem, - tests/pathlen/no-ca-or-pathlen.pem: This is a follow-up to commit - 3d8da5765133c6ced37bf29b5a07f950b8c26cd7, that fixes some issues - with DSA and RSA certificate encoding. Due to that the shown public - key IDs are different than the ones in previous gnutls versions. - -2009-12-02 Nikos Mavrogiannopoulos - - * lib/gnutls_cipher.c: reduced calls to gnutls_hash on - encryption/decryption. Only initialize MAC when needed. - -2009-12-02 Nikos Mavrogiannopoulos - - * lib/gnutls_hash_int.c, lib/includes/gnutls/crypto.h, - lib/mac-libgcrypt.c, libextra/gnutls_openssl.c, tests/gc.c: Added - plain MD5 hash check and corrected gnutls_hash_fast() usage in - openssl.c Corrected new hash API bug that prevented usage of plain - hash functions. - -2009-12-02 Nikos Mavrogiannopoulos - - * NEWS, doc/gnutls.texi, lib/Makefile.am, lib/compat.c, - lib/crypto.c, lib/ext_session_ticket.c, lib/gnutls_algorithms.c, - lib/gnutls_algorithms.h, lib/gnutls_cipher.c, - lib/includes/gnutls/crypto.h, lib/libgnutls.map, - lib/opencdk/read-packet.c, lib/x509/privkey_pkcs8.c, - src/benchmark.c, tests/gc.c: Exported gnutls_cipher_get_block_size() - and all hash functions added to libgnutls.map. Expanded benchmark - with 3DES and ARCFOUR. Corrected test that used non-existing symbol. - -2009-12-02 Nikos Mavrogiannopoulos - - * lib/m4/hooks.m4: Corrected check for cryptodev. Only enable it if - --enable-cryptodev is specified. - -2009-12-01 Nikos Mavrogiannopoulos - - * lib/cryptodev.c, lib/gnutls_cryptodev.h, lib/gnutls_hash_int.c, - lib/gnutls_hash_int.h, lib/mac-libgcrypt.c, lib/x509/mpi.c: - Corrected compilation issues. - -2009-11-30 Nikos Mavrogiannopoulos - - * configure.ac, lib/m4/hooks.m4: Moved cryptodev check to - lib/m4/hooks.m4 and now --enable-cryptodev actually works. - -2009-11-30 Simon Josefsson - - * lib/gnutls_x509.c: Doc fix. - -2009-11-30 Nikos Mavrogiannopoulos - - * lib/cryptodev.c: corrected old type. - -2009-11-30 Nikos Mavrogiannopoulos - - * lib/cryptodev.c: Only include cryptodev.h if cryptodev is there. - -2009-11-29 Nikos Mavrogiannopoulos - - * lib/crypto-api.c, lib/crypto.c, lib/crypto.h, - lib/ext_session_ticket.c, lib/gnutls_algorithms.c, - lib/gnutls_algorithms.h, lib/gnutls_cipher.c, - lib/gnutls_cipher_int.c, lib/gnutls_cipher_int.h, - lib/gnutls_constate.c, lib/gnutls_constate.h, - lib/gnutls_handshake.c, lib/gnutls_hash_int.c, - lib/gnutls_hash_int.h, lib/gnutls_int.h, lib/gnutls_priority.c, - lib/gnutls_psk_netconf.c, lib/gnutls_sig.c, lib/gnutls_srp.c, - lib/gnutls_state.c, lib/gnutls_ui.c, lib/includes/gnutls/crypto.h, - lib/includes/gnutls/gnutls.h.in, lib/mac-libgcrypt.c, - lib/opencdk/dummy.c, lib/opencdk/filters.h, lib/opencdk/hash.c, - lib/opencdk/kbnode.c, lib/opencdk/main.h, lib/opencdk/opencdk.h, - lib/opencdk/pubkey.c, lib/opencdk/sig-check.c, - lib/opencdk/verify.c, lib/x509/crq.c, lib/x509/pbkdf2-sha1.c, - lib/x509/pkcs12.c, lib/x509/pkcs12_encr.c, lib/x509/privkey.c, - lib/x509/sign.c, lib/x509/verify.c, lib/x509/x509.c, - lib/x509/x509_int.h, libextra/fipsmd5.c, libextra/gnutls_openssl.c: - Merged the two internal hash API functions, to simplify and reduce - code. gnutls_hmac* and gnutls_hash* were merged to gnutls_hash API. - -2009-11-29 Nikos Mavrogiannopoulos - - * .gitignore, configure.ac, lib/Makefile.am, lib/crypto-api.c, - lib/crypto.c, lib/cryptodev.c, lib/gnutls_cipher_int.c, - lib/gnutls_cryptodev.h, lib/gnutls_errors.c, lib/gnutls_global.c, - lib/gnutls_hash_int.c, lib/gnutls_hash_int.h, - lib/includes/gnutls/crypto.h, lib/includes/gnutls/gnutls.h.in, - lib/libgnutls.map, src/Makefile.am, src/benchmark.c: Added cryptodev - support (/dev/crypto). Tested with - http://www.logix.cz/michal/devel/cryptodev/. Added benchmark - utility for AES. Exported API to access encryption algorithms. - -2009-11-28 Nikos Mavrogiannopoulos - - * NEWS: Documented certtool's certificate request generation fix. - -2009-11-28 Nikos Mavrogiannopoulos - - * lib/x509/mpi.c: Corrected two issues that affected certificate - request generation. 1. Null padding is added on integers (found thanks to Wilankar - Trupti ) 2. In optional SignatureAlgorithm parameters field for DSA keys the - DSA parameters were added. Those were rejected by verisign. Gnutls - no longer adds those parameters there since other implementations - don't do either and having them does not seem to offer anything - (anyway you need the signer's certificate to verify thus public key - will be available). - -2009-11-27 Simon Josefsson - - * doc/manpages/Makefile.am, tests/key-id/key-id, - tests/nist-pkits/gnutls_test_entry, tests/x509paths/chain: More - fixes of grep -q problem. - -2009-11-27 Simon Josefsson - - * NEWS: Add. - -2009-11-24 Nikos Mavrogiannopoulos - - * src/certtool-gaa.c, src/certtool-gaa.h, src/certtool.c, - src/certtool.gaa: Allow exporting of Certificate requests to DER - format. Added option --no-crq-extensions to avoid adding extensions - to a request. - -2009-11-23 Simon Josefsson - - * tests/rfc2253-escape-test: Don't use 'grep -q', to fix portability - to OpenSolaris. Reported by "Dr. David Kirkby" in - - . - -2009-11-16 Simon Josefsson - - * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump versions. - -2009-11-15 Simon Josefsson - - * doc/guile.texi: Doc fix. - -2009-11-15 Simon Josefsson - - * gl/Makefile.am, gl/intprops.h, gl/m4/sys_stat_h.m4, - gl/m4/unistd_h.m4, gl/sys_stat.in.h, gl/unistd.in.h, - gl/version-etc.c, lib/gl/Makefile.am, lib/gl/m4/sys_stat_h.m4, - lib/gl/m4/unistd_h.m4, lib/gl/sys_stat.in.h, - lib/gl/tests/intprops.h, lib/gl/unistd.in.h, maint.mk: Update gnulib - files. - -2009-11-09 Simon Josefsson - - * ChangeLog: Generated. - -2009-11-09 Simon Josefsson - - * NEWS: Version 2.9.9. - -2009-11-09 Simon Josefsson - - * build-aux/pmccabe2html, gl/Makefile.am, gl/getpagesize.c, - gl/m4/getpagesize.m4, gl/m4/gnulib-comp.m4, gl/tests/test-fseeko.c, - lib/gl/Makefile.am, lib/gl/getpagesize.c, lib/gl/m4/getpagesize.m4, - lib/gl/m4/gnulib-comp.m4, lib/gl/tests/test-fseeko.c: Update gnulib - files. - -2009-11-09 Simon Josefsson - - * NEWS: Add. - -2009-11-09 Simon Josefsson - - * src/certtool.c: Cleanup header inclusion. - -2009-11-09 Simon Josefsson - - * NEWS: Fix. - -2009-11-06 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.c: More dead code removed. Based on - suggestions by Steve Grubb and Tomaz Mraz - -2009-11-06 Simon Josefsson - - * NEWS: Add. - -2009-11-06 Simon Josefsson - - * configure.ac, m4/valgrind.m4: Fix --disable-valgrind-tests. - -2009-11-06 Simon Josefsson - - * gl/tests/Makefile.am: Update gnulib files. - -2009-11-06 Simon Josefsson - - * gl/m4/getaddrinfo.m4, gl/m4/gnulib-comp.m4, maint.mk: Update - gnulib files. - -2009-11-06 Simon Josefsson - - * src/Makefile.am: Link to libgcrypt explicitly when libgcrypt - functions are used. - -2009-11-06 Simon Josefsson - - * src/certtool.c, src/serv.c: Fix libgcrypt usage. - -2009-11-05 Nikos Mavrogiannopoulos - - * lib/gnutls_handshake.c: Simplified code which was based on older - version of internal structures. Based on observations by Steve - Grubb and Tomas Mraz. - -2009-11-05 Nikos Mavrogiannopoulos - - * NEWS: Corrected bug fix author. - -2009-11-05 Nikos Mavrogiannopoulos - - * NEWS: Documented previous commit. - -2009-11-05 Nikos Mavrogiannopoulos - - * lib/auth_cert.c, lib/gnutls_constate.c, lib/gnutls_sig.c, - libextra/gnutls_openssl.c, src/certtool.c, src/cfg/cfg+.c, - src/cfg/platon/str/strdyn.c, src/serv.c: Cleanups and several bug - fixes found by Tomas Mraz. "I've patched the following problems in the code found by review of - gnutls-2.8.5 code done by Steve Grubb. See the patch attached. The gnutls_constate.c bug might be potentially serious so I've - decided to mail it to you directly, not to the public mailing list. The auth_cert.c change is just cleanup of the code. In gnutls_openssl.c I've just fixed the potential crasher, correct - fix would require using asprintf or precomputed length of the buffer - to allocate a memory. The certtool.c change is again just a cleanup." - -2009-11-05 Simon Josefsson - - * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump versions. - -2009-11-05 Simon Josefsson - - * ChangeLog: Generated. - -2009-11-05 Simon Josefsson - - * NEWS: Version 2.9.8. - -2009-11-05 Simon Josefsson - - * lib/gl/tests/test-func.c: Update gnulib files. - -2009-11-05 Simon Josefsson - - * gl/m4/gnulib-comp.m4, gl/m4/inet_ntop.m4, gl/m4/inet_pton.m4, - gl/tests/Makefile.am, gl/tests/test-inet_ntop.c, - gl/tests/test-inet_pton.c, gl/tests/test-sys_socket.c, - lib/gl/tests/test-func.c, lib/gl/tests/test-sys_socket.c, - libextra/gl/md5.c: Update gnulib files. - -2009-11-05 Simon Josefsson - - * lib/m4/hooks.m4: Make sure libgcrypt's dependency on libgpg-error - is known. - -2009-11-05 Simon Josefsson - - * doc/manpages/Makefile.am: Fix API name change. - -2009-11-05 Simon Josefsson - - * doc/gnutls.texi: Fix API name change. - -2009-11-05 Simon Josefsson - - * doc/examples/ex-cert-select.c, doc/examples/ex-client-psk.c, - doc/examples/ex-pkcs12.c, doc/examples/ex-serv-anon.c, - doc/examples/ex-serv-export.c, doc/examples/ex-serv-pgp.c, - doc/examples/ex-serv-psk.c, doc/examples/ex-serv-srp.c, - doc/examples/ex-serv1.c, guile/src/core.c, lib/auth_cert.c, - lib/auth_dhe.c, lib/auth_rsa_export.c, lib/auth_srp.c, - lib/auth_srp_passwd.c, lib/auth_srp_rsa.c, lib/ext_cert_type.c, - lib/ext_server_name.c, lib/ext_session_ticket.c, - lib/ext_signature.c, lib/gnutls_algorithms.c, lib/gnutls_buffers.c, - lib/gnutls_cert.c, lib/gnutls_cipher.c, lib/gnutls_errors.c, - lib/gnutls_extensions.c, lib/gnutls_handshake.c, - lib/gnutls_hash_int.c, lib/gnutls_mpi.c, lib/gnutls_priority.c, - lib/gnutls_psk.c, lib/gnutls_record.c, lib/gnutls_session_pack.c, - lib/gnutls_sig.c, lib/gnutls_state.c, lib/gnutls_str.c, - lib/gnutls_supplemental.c, lib/gnutls_ui.c, lib/gnutls_x509.c, - lib/minitasn1/decoding.c, lib/opencdk/armor.c, lib/opencdk/keydb.c, - lib/opencdk/literal.c, lib/opencdk/misc.c, - lib/opencdk/new-packet.c, lib/opencdk/read-packet.c, - lib/opencdk/sig-check.c, lib/opencdk/stream.c, - lib/opencdk/verify.c, lib/openpgp/gnutls_openpgp.c, - lib/openpgp/output.c, lib/openpgp/pgp.c, lib/x509/crq.c, - lib/x509/dn.c, lib/x509/pkcs12.c, lib/x509/pkcs12_bag.c, - lib/x509/privkey_pkcs8.c, lib/x509/verify.c, lib/x509/x509_write.c, - libextra/gl/md5.c, libextra/gnutls_openssl.c, src/certtool-cfg.c, - src/cli.c, src/common.c, src/crypt.c, src/psk.c, src/serv.c, - tests/anonself.c, tests/chainverify.c, tests/crq_apis.c, - tests/cve-2008-4989.c, tests/cve-2009-1415.c, tests/dhepskself.c, - tests/dn2.c, tests/finished.c, tests/hostname-check.c, - tests/mini-eagain.c, tests/mini.c, tests/nul-in-x509-names.c, - tests/openpgpself.c, tests/oprfi.c, tests/pkcs12_encode.c, - tests/pkcs12_s2k.c, tests/pkcs12_s2k_pem.c, tests/pskself.c, - tests/resume.c, tests/tlsia.c, tests/x509_altname.c, - tests/x509dn.c, tests/x509self.c, tests/x509sign-verify.c, - tests/x509signself.c: Indent code. - -2009-11-05 Simon Josefsson - - * doc/examples/ex-cert-select.c, src/cli.c: Fix API name change. - -2009-11-05 Simon Josefsson - - * NEWS, doc/manpages/Makefile.am, lib/ext_signature.c, - lib/includes/gnutls/gnutls.h.in, lib/libgnutls.map: Fix NEWS blurb. - Shorten new API name. - -2009-11-05 Simon Josefsson - - * lib/ext_signature.c: Doc fix, add Since tag. - -2009-11-05 Simon Josefsson - - * lib/ext_signature.c: Indent code. - -2009-11-05 Simon Josefsson - - * gl/m4/inet_ntop.m4, gl/m4/inet_pton.m4: Fix compile error. Tiny patch by Brad Hards in - - . - -2009-11-05 Simon Josefsson - - * lib/ext_signature.c: Fix compile errors. Tiny patch from Brad Hards in - - . - -2009-11-05 Simon Josefsson - - * lib/auth_cert.c: Fix compile errors. Tiny patch from Brad Hards in - - . - -2009-11-05 Simon Josefsson - - * gl/Makefile.am, gl/m4/stdlib_h.m4, gl/stdlib.in.h, - gl/tests/test-getaddrinfo.c, lib/gl/Makefile.am, - lib/gl/m4/stdlib_h.m4, lib/gl/stdlib.in.h: Update gnulib files. - -2009-11-05 Simon Josefsson - - * NEWS: Add. - -2009-11-05 Simon Josefsson - - * lib/po/vi.po.in: Sync with TP. - -2009-11-03 Simon Josefsson - - * doc/examples/Makefile.am, src/Makefile.am, tests/Makefile.am: Use - INET_NTOP_LIB and INET_PTON_LIB. - -2009-11-03 Simon Josefsson - - * build-aux/pmccabe2html, build-aux/useless-if-before-free, - gl/m4/fseeko.m4, gl/m4/gnulib-comp.m4, gl/m4/inet_ntop.m4, - gl/m4/inet_pton.m4, gl/m4/pmccabe2html.m4, gl/m4/ungetc.m4, - gl/sockets.c, gl/stdio.in.h, gl/sys_stat.in.h, - gl/tests/test-arpa_inet.c, gl/tests/test-getaddrinfo.c, - gl/tests/test-getdelim.c, gl/tests/test-getline.c, - gl/tests/test-gettimeofday.c, gl/tests/test-memchr.c, - gl/tests/test-netinet_in.c, gl/tests/test-select-stdin.c, - gl/tests/test-select.c, gl/tests/test-sockets.c, - gl/tests/test-stddef.c, gl/tests/test-stdint.c, - gl/tests/test-stdio.c, gl/tests/test-stdlib.c, - gl/tests/test-strerror.c, gl/tests/test-string.c, - gl/tests/test-sys_select.c, gl/tests/test-sys_socket.c, - gl/tests/test-sys_stat.c, gl/tests/test-sys_time.c, - gl/tests/test-time.c, gl/tests/test-unistd.c, - gl/tests/test-version-etc.c, gl/tests/test-wchar.c, - lib/gl/m4/fseeko.m4, lib/gl/m4/ungetc.m4, lib/gl/sockets.c, - lib/gl/stdio.in.h, lib/gl/sys_stat.in.h, - lib/gl/tests/test-memchr.c, lib/gl/tests/test-sockets.c, - lib/gl/tests/test-stddef.c, lib/gl/tests/test-stdint.c, - lib/gl/tests/test-stdio.c, lib/gl/tests/test-stdlib.c, - lib/gl/tests/test-string.c, lib/gl/tests/test-strverscmp.c, - lib/gl/tests/test-sys_socket.c, lib/gl/tests/test-sys_stat.c, - lib/gl/tests/test-time.c, lib/gl/tests/test-unistd.c, - lib/gl/tests/test-wchar.c, libextra/gl/md5.c, maint.mk: Update - gnulib files. - -2009-11-02 Simon Josefsson - - * NEWS: Fix. - -2009-11-02 Simon Josefsson - - * tests/chainverify.c: Fix time bomb in chainverify self-test. Reported by Andreas Metzler in - - . - -2009-11-01 Nikos Mavrogiannopoulos - - * NEWS: Documented change for certificate retrieval callbacks. - -2009-11-01 Nikos Mavrogiannopoulos - - * src/cli.c: do not use gnutls_x509_crt_get_signature_algorithm() on - null certificates. - -2009-11-01 Nikos Mavrogiannopoulos - - * lib/auth_cert.c: Do not check signature algorithms for certificate - selection when using openpgp certificates. - -2009-11-01 Nikos Mavrogiannopoulos - - * doc/manpages/gnutls-cli.1: Avoid code duplication by using all the - functions defined in gnutls_algorithms to map from TLS 1.2 signature - algorithm numbers to gnutls signature algorithms. Added minimal documentation for SIGN-* in gnutls-cli priority - strings. Corrected bug in signature algorithm extension generation. - -2009-11-01 Nikos Mavrogiannopoulos - - * lib/auth_cert.c, lib/auth_dhe.c, lib/ext_signature.c, - lib/ext_signature.h, lib/gnutls_algorithms.c, - lib/gnutls_algorithms.h, lib/gnutls_int.h, lib/gnutls_sig.c: Avoid - code duplication by using all the functions defined in - gnutls_algorithms to map from TLS 1.2 signature algorithm numbers to - gnutls signature algorithms. Added minimal documentation for SIGN-* in gnutls-cli priority - strings. Corrected bug in signature algorithm extension generation. - -2009-11-01 Nikos Mavrogiannopoulos - - * lib/auth_cert.c, lib/auth_dhe.c, lib/auth_rsa_export.c, - lib/auth_srp_rsa.c, lib/gnutls_sig.c, lib/gnutls_sig.h: Rationalized - function names for signature generation and verification during - handshake. _gnutls_tls_sign_hdata -> - _gnutls_handshake_sign_cert_vrfy _gnutls_verify_sig_hdata -> - _gnutls_handshake_verify_cert_vrfy _gnutls_tls_sign_params -> - _gnutls_handshake_sign_data _gnutls_verify_sig_params -> - _gnutls_handshake_verify_data - -2009-11-01 Nikos Mavrogiannopoulos - - * lib/ext_signature.c: Do not output error if a server replies with - a SignatureAlgorithms extension. - -2009-11-01 Nikos Mavrogiannopoulos - - * tests/dn2.c, tests/pathlen/ca-no-pathlen.pem: RSA_SHA -> RSA_SHA1 - -2009-11-01 Nikos Mavrogiannopoulos - - * NEWS: Documented memory leak fix. - -2009-11-01 Nikos Mavrogiannopoulos - - * NEWS, doc/examples/ex-cert-select.c, doc/gnutls.texi, - lib/auth_cert.c, lib/ext_cert_type.c, lib/ext_cert_type.h, - lib/ext_signature.c, lib/ext_signature.h, lib/gnutls_alert.c, - lib/gnutls_sig.c, lib/gnutls_state.c, lib/gnutls_state.h, - lib/includes/gnutls/gnutls.h.in, lib/libgnutls.map, src/cli.c: Final - touch on signature algorithms in TLS 1.2 support. Added function - gnutls_session_sign_algorithm_get_requested() for callbacks to be - able to verify they return a correct certificate as well as - documentation for its usage. - -2009-11-01 Nikos Mavrogiannopoulos - - * lib/Makefile.am, lib/auth_cert.c, lib/auth_cert.h, - lib/ext_signature.c, lib/ext_signature.h, lib/gnutls_algorithms.c, - lib/gnutls_algorithms.h, lib/gnutls_cert.c, lib/gnutls_cert.h, - lib/gnutls_errors.c, lib/gnutls_extensions.c, - lib/gnutls_handshake.c, lib/gnutls_int.h, lib/gnutls_priority.c, - lib/gnutls_sig.c, lib/gnutls_sig.h, lib/gnutls_state.c, - lib/gnutls_state.h, lib/gnutls_x509.c, - lib/includes/gnutls/gnutls.h.in, lib/openpgp/gnutls_openpgp.c: - Improved TLS 1.2 support. Added support for the SignatureAlgorithm - extension as well for the SignatureAlgorithm in certificate request. Limitation for TLS 1.2 clients: Only SHA1 or SHA256 are supported for generating signatures in - certificate verify message. That is to avoid storing all handshake - messages in memory. To be reconsidered in the future. - -2009-11-01 Nikos Mavrogiannopoulos - - * lib/gnutls_global.c: fixes in order to compile with -Werror - -2009-10-31 Nikos Mavrogiannopoulos - - * lib/ext_cert_type.c, lib/gnutls_cipher.c: remove unnessesary - warning. - -2009-10-31 Nikos Mavrogiannopoulos - - * lib/ext_cert_type.c: correctly check extension size. - -2009-10-28 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_handshake.c: When resuming a session do not - overwrite the initial session data with resumed session data. - Discovered on discussion at help-gnutls with Sebastien Decugis. - -2009-10-26 Simon Josefsson - - * lib/gnutls_cipher.c, lib/gnutls_handshake.c, src/certtool.c: Fix - code style so it compiles with gcc 4.4 with warnings. - -2009-10-26 Simon Josefsson - - * gl/Makefile.am, gl/m4/sys_stat_h.m4, gl/sys_stat.in.h, - lib/gl/Makefile.am, lib/gl/m4/sys_stat_h.m4, lib/gl/sys_stat.in.h: - Update gnulib files. - -2009-10-26 Simon Josefsson - - * .gitignore: Drop unknown mini-hfail. - -2009-10-26 Simon Josefsson - - * NEWS: Add. - -2009-10-25 Daiki Ueno - - * lib/gnutls_handshake.c: Enable ClientHello to carry arbitrary - length extension data. - -2009-10-25 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/pkcs12.h, lib/pkix.asn, lib/pkix_asn1_tab.c, - lib/x509/pkcs12.c, lib/x509/pkcs12_bag.c, lib/x509/x509_int.h, - src/certtool.c: Added GNUTLS_BAG_SECRET that adds support for - storing a randomly generated key into a PKCS-12 structure. This is a - gnutls extension, since PKCS-12 does not specify what should be in - the secret bag. What we do is store the key as OCTET string and - specify an OID of the PKCS-9 random nonce. - -2009-10-25 Nikos Mavrogiannopoulos - - * NEWS, lib/x509/privkey_pkcs8.c: Corrected warnings in picky - compilers and rearanged code. - -2009-10-24 Nikos Mavrogiannopoulos - - * doc/manpages/certtool.1, lib/cipher-libgcrypt.c, - lib/gnutls_algorithms.c, lib/includes/gnutls/gnutls.h.in, - lib/includes/gnutls/x509.h, lib/pkix.asn, lib/pkix_asn1_tab.c, - lib/x509/pkcs12_bag.c, lib/x509/privkey_pkcs8.c, - lib/x509/x509_int.h, src/certtool-gaa.c, src/certtool-gaa.h, - src/certtool.c, src/certtool.gaa: Added support for the AES family - of ciphers in the PKCS8 and 12 encryption options. - -2009-10-24 Nikos Mavrogiannopoulos - - * .gitignore: Do not print auto-generated files. - -2009-10-23 Simon Josefsson - - * THANKS: Add. - -2009-10-23 Simon Josefsson - - * lib/gnutlsxx.cpp: Fix forgotten braces. Reported by Jason Pettiss . - -2009-10-23 Simon Josefsson - - * lib/gnutlsxx.cpp: Indent code. - -2009-10-22 Nikos Mavrogiannopoulos - - * lib/gnutls_buffers.c, lib/gnutls_buffers.h, lib/gnutls_cipher.c, - lib/gnutls_handshake.c, lib/gnutls_handshake.h, - lib/gnutls_hash_int.c, lib/gnutls_hash_int.h, lib/gnutls_int.h, - lib/gnutls_sig.c, lib/gnutls_state.c: 1. Fix for memory leaks on interrupted handshake. 2. Fixes issue where a TLS 1.2 client will wrongly calculate hashes - if the server will select a different than 1.2 protocol. 3. In TLS 1.2 when a certificate request is sent, support is not - complete. In that case abort the handshake. By checking TLS 1.2 it - seems that the algorithms to be used for the signature in the - certificate verify message are negotiated not at the client/server - hello messages but rather selected by the server at the certificate - request. This might not look as bad, but since in this message we - have to sign all previous handshake messages, it forces us to keep - all the handshake messages into a buffer until this point... I don't - know who proposed this change to the TLS WG, but it seems it wasn't - really thought of. - -2009-10-20 Simon Josefsson - - * tests/chainverify.c: Fix expired cert. - -2009-10-16 Simon Josefsson - - * src/cli.c: Make sure we use libgcrypt correctly. - -2009-10-15 Simon Josefsson - - * gl/m4/time_h.m4: Update gnulib files. - -2009-10-15 Simon Josefsson - - * gl/Makefile.am, gl/m4/gnulib-comp.m4, gl/m4/sys_stat_h.m4, - gl/sys_stat.in.h, gl/tests/Makefile.am, gl/tests/test-sys_stat.c, - gl/tests/test-time.c, gl/time.in.h, gl/unistd.in.h, - lib/gl/Makefile.am, lib/gl/m4/gnulib-comp.m4, - lib/gl/m4/sys_stat_h.m4, lib/gl/sys_stat.in.h, - lib/gl/tests/test-sys_stat.c, lib/gl/unistd.in.h: Update gnulib - files. - -2009-10-15 Simon Josefsson - - * lib/libgnutlsxx.map: Export C++ symbol visibility. Tiny patch from Boyan Kasarov . - -2009-10-14 Simon Josefsson - - * lib/pkix_asn1_tab.c: Regenerate. - -2009-10-14 Simon Josefsson - - * NEWS: Add. - -2009-10-14 Simon Josefsson - - * tests/pkcs12_encode.c: Fix MAC password. - -2009-10-14 Simon Josefsson - - * tests/pkcs12_encode.c: Use better friendly names. - -2009-10-14 Simon Josefsson - - * tests/Makefile.am, tests/pkcs12_encode.c: Add self test to test - PKCS#12 functions. - -2009-10-14 Simon Josefsson - - * lib/pkix.asn: Work around 'Cannot find OID: 1.2.840.113549.1.9.21' - PKCS#12 problem. Reported by Michael Welsh Duggan in - . - -2009-10-14 Simon Josefsson - - * doc/gnutls.texi: Mention that sometimes CA certs needs to be - included in PKCS#12 files. Reported by Ivars Suba . - -2009-10-07 Simon Josefsson - - * lib/gnutls_priority.c: After setting priorities using new API, - update current TLS version. - -2009-10-06 Simon Josefsson - - * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump versions. - -2009-10-06 Simon Josefsson - - * ChangeLog: Generated. - -2009-10-06 Simon Josefsson - - * NEWS: Version 2.9.7. - -2009-10-06 Simon Josefsson - - * gl/Makefile.am, gl/m4/gnulib-comp.m4, gl/m4/stdio_h.m4, - gl/m4/unistd_h.m4, gl/progname.c, gl/stdio.in.h, gl/unistd.in.h, - lib/gl/Makefile.am, lib/gl/m4/stdio_h.m4, lib/gl/m4/unistd_h.m4, - lib/gl/stdio.in.h, lib/gl/unistd.in.h, maint.mk: Update gnulib - files. - -2009-10-06 Simon Josefsson - - * NEWS: Add. - -2009-10-06 Simon Josefsson - - * lib/libgnutlsxx.map: Fix symbol export rules. Tiny patch by Boyan Kasarov . - -2009-10-06 Simon Josefsson - - * lib/gnutlsxx.cpp: Include config.h. Tiny patch from Boyan Kasarov . - -2009-10-01 Daiki Ueno - - * lib/gnutls_sig.c: Reserve enough room for hash buffers. This fixes x509self self-test. - -2009-09-30 Simon Josefsson - - * gl/Makefile.am, gl/m4/sys_stat_h.m4, gl/m4/unistd_h.m4, - gl/tests/Makefile.am, gl/unistd.in.h, lib/gl/Makefile.am, - lib/gl/m4/sys_stat_h.m4, lib/gl/m4/unistd_h.m4, - lib/gl/tests/Makefile.am, lib/gl/unistd.in.h: Update gnulib files. - -2009-09-30 Simon Josefsson - - * NEWS: Add. - -2009-09-30 Simon Josefsson - - * lib/gnutls_priority.c: Attempt to negotiate TLS 1.2 by default. - -2009-09-30 Simon Josefsson - - * NEWS: Add. - -2009-09-30 Simon Josefsson - - * lib/auth_cert.c: Fix comment. - -2009-09-30 Daiki Ueno - - * lib/auth_cert.c, lib/auth_dhe.c, lib/auth_rsa_export.c, - lib/auth_srp_rsa.c, lib/gnutls_sig.c, lib/gnutls_sig.h: Fix - server-side TLS 1.2 support. - -2009-09-30 Daiki Ueno - - * lib/gnutls_sig.c: Calculate DER-encoded DigestInfo on-the-fly - rather than hard code it. - -2009-09-28 Ludovic Courtès - - * configure.ac, guile/src/core.c: guile: Adjust for Guile 1.9.3+. * guile/src/core.c (mark_session_record_port, - free_session_record_port): Conditionalize on `SCM_MAJOR_VERSION == 1 - && SCM_MINOR_VERSION <= 8'. (scm_init_gnutls_session_record_port_type): Adjust accordingly. (make_session_record_port): Use `scm_gc_malloc_pointerless ()' - when available. - -2009-09-28 Ludovic Courtès - - * guile/src/core.c: guile: Syntactic nitpicking. * guile/src/core.c (SCM_GNUTLS_MAKE_SESSION_DATA, SCM_GNUTLS_SET_SESSION_RECORD_PORT): Remove extraneous semicolon. - -2009-09-28 Ludovic Courtès - - * guile/src/core.c: guile: Use Guile's malloc routines. * guile/src/core.c (scm_init_gnutls): Use Guile's malloc routines. - -2009-09-23 Simon Josefsson - - * lib/ext_server_name.c: Clarify gnutls_server_name_set usage. Reported by Daniel Black in - - . - -2009-09-23 Ludovic Courtès - - * guile/src/core.c: Fix integer/pointer cast warnings in the Guile - bindings on x86_64. * guile/src/core.c (do_fill_port, fill_session_record_port_input, scm_gnutls_set_session_transport_fd_x): Make sure pointer/integer - casts use integers of the right size. - -2009-09-23 Ludovic Courtès - - * guile/src/extra.c: Update Guile bindings to the current OpenPGP - API. * guile/src/extra.c (scm_gnutls_openpgp_certificate_id, scm_gnutls_openpgp_certificate_id_x): Use the newer `gnutls_openpgp_crt_get_key_id ()'. - -2009-09-23 Ludovic Courtès - - * doc/Makefile.am, guile/src/Makefile.am, guile/tests/Makefile.am: - Turn off auto-compilation when using Guile 1.9+. * guile/src/Makefile.am (GUILE_FOR_BUILD): Turn off auto-compilation with Guile 1.9+. * guile/tests/Makefile.am (TESTS_ENVIRONMENT): Likewise. * doc/Makefile.am (GUILE_FOR_BUILD): Likewise. - -2009-09-23 Ludovic Courtès - - * guile/src/core.c, guile/src/errors.c, guile/src/extra.c, - guile/src/utils.c, guile/src/utils.h: Fix inclusion of in - Guile bindings. * guile/src/core.c, guile/src/errors.c, guile/src/extra.c, guile/src/utils.c: Include first, as suggested by Simon Josefsson. * guile/src/utils.h: Don't include . - -2009-09-22 Simon Josefsson - - * gl/unistd.in.h, lib/gl/unistd.in.h: Update gnulib files. - -2009-09-22 Simon Josefsson - - * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump versions. - -2009-09-22 Simon Josefsson - - * build-aux/gendocs.sh: Chmod. - -2009-09-22 Simon Josefsson - - * ChangeLog: Generated. - -2009-09-22 Simon Josefsson - - * NEWS: Version 2.9.6. - -2009-09-22 Simon Josefsson - - * gl/Makefile.am, gl/m4/getdelim.m4, gl/m4/stdio_h.m4, - gl/m4/stdlib_h.m4, gl/m4/sys_stat_h.m4, gl/m4/unistd_h.m4, - gl/stdio.in.h, gl/stdlib.in.h, gl/sys_stat.in.h, gl/unistd.in.h, - lib/gl/Makefile.am, lib/gl/m4/stdio_h.m4, lib/gl/m4/stdlib_h.m4, - lib/gl/m4/sys_stat_h.m4, lib/gl/m4/unistd_h.m4, lib/gl/stdio.in.h, - lib/gl/stdlib.in.h, lib/gl/sys_stat.in.h, lib/gl/unistd.in.h, - maint.mk: Update gnulib files. - -2009-09-13 Brad Hards - - * lib/x509/x509.c: Add forgotten documentation bits for issuer - altname Signed-off-by: Simon Josefsson - -2009-09-11 Simon Josefsson - - * build-aux/gendocs.sh, gl/m4/getaddrinfo.m4, gl/m4/getline.m4, - gl/m4/readline.m4, gl/m4/select.m4, gl/m4/sockets.m4, - gl/m4/socklen.m4, gl/m4/sockpfaf.m4, lib/gl/m4/sockets.m4, - lib/gl/m4/socklen.m4, lib/gl/m4/sockpfaf.m4, lib/gl/m4/time_r.m4: - Update gnulib files. - -2009-09-11 Simon Josefsson - - * lib/gnutls_cipher.c: Add debug message. Tiny patch from Miroslav - Kratochvil in - . - -2009-09-11 Daiki Ueno - - * lib/Makefile.am: Fix out-of-tree build. Fix out-of-tree build; gnutls.h is generated in the build tree. - -2009-09-10 Simon Josefsson - - * NEWS, lib/m4/hooks.m4: Enable Camellia by default. - -2009-09-10 Simon Josefsson - - * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump versions. - -2009-09-10 Simon Josefsson - - * ChangeLog: Generated. - -2009-09-10 Simon Josefsson - - * NEWS: Version 2.9.5. - -2009-09-10 Simon Josefsson - - * configure.ac: Bump version. - -2009-09-10 Simon Josefsson - - * gl/Makefile.am, gl/m4/stdio_h.m4, gl/m4/string_h.m4, - gl/m4/sys_stat_h.m4, gl/m4/unistd_h.m4, gl/stdio.in.h, - gl/string.in.h, gl/sys_stat.in.h, gl/unistd.in.h, - lib/gl/Makefile.am, lib/gl/m4/stdio_h.m4, lib/gl/m4/string_h.m4, - lib/gl/m4/sys_stat_h.m4, lib/gl/m4/unistd_h.m4, lib/gl/stdio.in.h, - lib/gl/string.in.h, lib/gl/sys_stat.in.h, lib/gl/unistd.in.h, - maint.mk: Update gnulib files. - -2009-09-10 Simon Josefsson - - * NEWS: Add. - -2009-09-10 Simon Josefsson - - * AUTHORS: Add. - -2009-09-10 Simon Josefsson - - * lib/m4/hooks.m4: Bump library version for new APIs. - -2009-09-10 Simon Josefsson - - * lib/x509/output.c, lib/x509/x509.c: Indent. - -2009-09-10 Simon Josefsson - - * lib/libgnutls.map: Move the new ABIs to the GNUTLS_2_10 section. - -2009-09-09 Brad Hards - - * doc/manpages/Makefile.am, lib/includes/gnutls/x509.h, - lib/libgnutls.map, lib/x509/output.c, lib/x509/x509.c, - tests/Makefile.am, tests/x509_altname.c: Add X509 Issuer Altname - functions Signed-off-by: Simon Josefsson - -2009-09-07 Simon Josefsson - - * tests/key-id/key-id: Don't use ! to negate exit status. Reported - by "Tom G. Christensen" in - - . - -2009-09-03 Simon Josefsson - - * gl/Makefile.am, gl/close.c, gl/inet_ntop.c, gl/inet_pton.c, - gl/m4/sys_stat_h.m4, gl/sys_stat.in.h, gl/tests/Makefile.am, - gl/unistd.in.h, lib/gl/Makefile.am, lib/gl/m4/sys_stat_h.m4, - lib/gl/sys_stat.in.h, lib/gl/unistd.in.h, maint.mk: Update gnulib - files. - -2009-09-03 Simon Josefsson - - * NEWS, lib/configure.ac, lib/m4/hooks.m4, libextra/configure.ac: - Bump versions. - -2009-09-03 Simon Josefsson - - * cfg.mk: Commit cyclo/ dir too. - -2009-09-03 Simon Josefsson - - * ChangeLog: Generated. - -2009-09-03 Simon Josefsson - - * NEWS: Version 2.9.4. - -2009-09-03 Simon Josefsson - - * tests/hostname-check.c: Build when OpenPGP is disabled. - -2009-09-03 Simon Josefsson - - * cfg.mk: Fix! - -2009-09-03 Simon Josefsson - - * cfg.mk: Typo. - -2009-09-03 Simon Josefsson - - * cfg.mk: Ugly hack for autobuilder. - -2009-09-01 Simon Josefsson - - * NEWS: Add. - -2009-09-01 Simon Josefsson - - * lib/gnutls_priority.c: Use SHA256 as MAC by default. - -2009-09-01 Simon Josefsson - - * NEWS: Add. - -2009-09-01 Daiki Ueno - - * lib/gnutls_algorithms.c: Add SHA-2 cipher suites. Signed-off-by: Simon Josefsson - -2009-09-01 Daiki Ueno - - * lib/debug.c: Print NewSessionTicket handshake. Signed-off-by: Simon Josefsson - -2009-08-31 Simon Josefsson - - * NEWS: Add. - -2009-08-31 Simon Josefsson - - * lib/x509/x509.c: Handle XMPP SANs properly. Reported by Howard - Chu in . - -2009-08-31 Simon Josefsson - - * lib/auth_dhe.c: Need another header. - -2009-08-31 Simon Josefsson - - * AUTHORS, NEWS: Add. - -2009-08-31 Simon Josefsson - - * lib/gnutls_algorithms.c: Add comment explaining where magic values - come from. - -2009-08-31 Daiki Ueno - - * lib/auth_cert.c: Fix parsing Certificate Request for TLS 1.2. Fix the logic to skip supported_signature_algorithms in Certificate - Request. Signed-off-by: Simon Josefsson - -2009-08-31 Daiki Ueno - - * lib/gnutls_handshake.c, lib/gnutls_pk.c, lib/gnutls_state.c: Use - SHA256 for PRF if TLS 1.2. Use SHA256 for the basis of PRF, and for the hash over handshake - messages. Signed-off-by: Simon Josefsson - -2009-08-31 Daiki Ueno - - * lib/auth_dhe.c, lib/auth_rsa_export.c, lib/auth_srp_rsa.c, - lib/gnutls_sig.c, lib/gnutls_sig.h: Respect TLS signature algorithm - in server KX. Verify signature of DH parameters in Server Key Exchange with the - embedded signature algorithm. Signed-off-by: Simon Josefsson - -2009-08-31 Daiki Ueno - - * lib/gnutls_algorithms.c, lib/gnutls_algorithms.h, - lib/gnutls_int.h: Add functions for TLS signature algorithm. Add functions to convert TLS signature algorithm from/to constants - defined by GnuTLS. Signed-off-by: Simon Josefsson - -2009-08-31 Simon Josefsson - - * NEWS: Add. - -2009-08-31 Simon Josefsson - - * maint.mk: Update gnulib files. - -2009-08-31 Simon Josefsson - - * THANKS: Add. - -2009-08-25 Fabian Keil - - * src/serv.c: Remove dead store in listen_socket(). Signed-off-by: Simon Josefsson - -2009-08-25 Fabian Keil - - * lib/gnutls_buffers.c: Remove dead store in - _gnutls_io_write_buffered(). Signed-off-by: Simon Josefsson - -2009-08-24 Fabian Keil - - * lib/x509/x509.c: Remove dead store in - gnutls_x509_crt_list_import(). Signed-off-by: Simon Josefsson - -2009-08-24 Fabian Keil - - * lib/auth_srp_passwd.c: Remove dead store in pwd_put_values(). Signed-off-by: Simon Josefsson - -2009-08-24 Fabian Keil - - * src/certtool.c: Remove dead store in pkcs12_info(). Signed-off-by: Simon Josefsson - -2009-08-25 Fabian Keil - - * lib/auth_cert.c: Remove write-only variable info in - _gnutls_proc_cert_cert_req(). Signed-off-by: Simon Josefsson - -2009-08-25 Fabian Keil - - * lib/auth_rsa_export.c: Remove write-only variable info in - gen_rsa_export_server_kx(). Signed-off-by: Simon Josefsson - -2009-08-25 Fabian Keil - - * src/cfg/shared.c: Remove write-only variable sep_ar_idx in - split_multi_arg(). Signed-off-by: Simon Josefsson - -2009-08-24 Fabian Keil - - * lib/x509/pkcs12.c: Remove write-only variable tmp_size in - _pkcs12_decode_safe_content(). Signed-off-by: Simon Josefsson - -2009-08-29 Fabian Keil - - * THANKS: Remove duplicates. Two exact ones and a pretty close one. Signed-off-by: Simon Josefsson - -2009-08-25 Fabian Keil - - * lib/auth_srp_passwd.c: Mark what looks like a bug in in - _gnutls_srp_pwd_read_entry() Signed-off-by: Simon Josefsson - -2009-08-24 Fabian Keil - - * src/crypt.c: In main(), rename salt to salt_size and don't bother - reading info.salt which we don't use anyway. Signed-off-by: Simon Josefsson - -2009-08-31 Simon Josefsson - - * lib/opencdk/misc.c: (cdk_strlist_next): Handle NULL root value better. Based on report - by Fabian Keil . - -2009-08-24 Fabian Keil - - * lib/x509/output.c: In print_extensions(), declare the *_idx - variables as int instead of size_t. While it shouldn't make a difference, it makes more sense to me. - It's also consistent with (at least) print_crl(). Signed-off-by: Simon Josefsson - -2009-08-24 Fabian Keil - - * lib/x509/output.c: In print_extensions(), initialize *_idx - variables once before entering the for loop instead of each run. Otherwise checking them is pointless as they always will be zero. Signed-off-by: Simon Josefsson - -2009-08-24 Fabian Keil - - * lib/x509/output.c: In print_crq(), initialize challenge and - extensions once before entering the for loop instead of each run. Signed-off-by: Simon Josefsson - -2009-08-24 Fabian Keil - - * lib/x509/output.c: In print_crl(), initialize aki_idx and crl_nr - once before entering the for loop instead of each run. Otherwise the "error: more than one AKI extension\n" and "error: - more than one CRL number\n" checks want work. Signed-off-by: Simon Josefsson - -2009-08-28 Simon Josefsson - - * tests/x509dn.c: Likewise. - -2009-08-28 Simon Josefsson - - * tests/x509dn.c: Don't use deprecated type. - -2009-08-28 Simon Josefsson - - * cfg.mk: Overwrite gettext's size_max.m4 to make sure we use one - that works. - -2009-08-28 Simon Josefsson - - * gl/Makefile.am, gl/m4/gnulib-comp.m4, gl/m4/stdlib_h.m4, - gl/m4/sys_socket_h.m4, gl/m4/unistd_h.m4, gl/progname.c, - gl/stdlib.in.h, gl/sys_socket.in.h, gl/tests/Makefile.am, - gl/unistd.in.h, gl/vasnprintf.c, lib/gl/Makefile.am, - lib/gl/m4/stdlib_h.m4, lib/gl/m4/sys_socket_h.m4, - lib/gl/m4/unistd_h.m4, lib/gl/stdlib.in.h, lib/gl/sys_socket.in.h, - lib/gl/tests/test-func.c, lib/gl/unistd.in.h, lib/gl/vasnprintf.c, - libextra/gl/override/lib/md5.c.diff: Update gnulib files. - -2009-08-28 Simon Josefsson - - * configure.ac, lib/configure.ac, lib/gnutls_handshake.c, - lib/gnutls_handshake.h, lib/gnutls_str.h, lib/opencdk/Makefile.am, - lib/x509/privkey_pkcs8.c, libextra/configure.ac: Fix use of - deprecated types, for now and the future. - -2009-08-28 Simon Josefsson - - * NEWS: Add. - -2009-08-28 Simon Josefsson - - * lib/x509/crq.c: Fix gnutls_datum usage. - -2009-08-28 Simon Josefsson - - * lib/gnutls_buffers.c, lib/gnutls_pk.c, lib/gnutls_str.c, - lib/gnutls_x509.c, lib/includes/gnutls/gnutls.h.in, - lib/opencdk/pubkey.c, lib/openpgp/gnutls_openpgp.c, - lib/x509/common.c, lib/x509/extensions.c, lib/x509/mpi.c, - lib/x509/privkey_pkcs8.c, lib/x509/x509_write.c, src/certtool.c, - tests/openpgp_test.c, tests/resume.c, tests/x509_test.c, - tests/x509dn.c, tests/x509sign-verify.c: Fix deprecated usage of - gnutls_datum. - -2009-08-27 Dan Fandrich - - * lib/opencdk/new-packet.c, lib/opencdk/packet.h, - lib/opencdk/pubkey.c, lib/opencdk/read-packet.c, - lib/opencdk/stream.c, lib/opencdk/stream.h, lib/opencdk/verify.c, - lib/x509/crq.c: Fix compiler warning bugs for OpenWatcom. Signed-off-by: Simon Josefsson - -2009-08-25 Daiki Ueno - - * tests/resume.c: Fix double-free Signed-off-by: Simon Josefsson - -2009-08-24 Simon Josefsson - - * .gitattributes: Disable whitespace for file that need it. - -2009-08-20 Simon Josefsson - - * tests/hostname-check.c: Add check of OpenPGP cert too. - -2009-08-20 Simon Josefsson - - * THANKS: Add. - -2009-08-20 Simon Josefsson - - * libextra/gl/override/lib/md5.c.diff: Work around whitespace commit - hook. - -2009-08-20 Simon Josefsson - - * gl/Makefile.am, gl/m4/stdio_h.m4, gl/select.c, gl/stdio.in.h, - lib/gl/Makefile.am, lib/gl/m4/stdio_h.m4, lib/gl/stdio.in.h, - maint.mk: Update gnulib files. - -2009-08-20 Simon Josefsson - - * libextra/gl/gnulib.mk, libextra/gl/m4/gnulib-cache.m4, - libextra/gl/md5.c, libextra/gl/override/lib/md5.c.diff: Reduce stack - usage and remove code. - -2009-08-20 Simon Josefsson - - * lib/gnutls_int.h: Remove unused constant. - -2009-08-20 Simon Josefsson - - * lib/gnutls_errors.c: Reduce stack usage. - -2009-08-20 Simon Josefsson - - * lib/openpgp/pgp.c: Fix OpenPGP hostname comparison. - -2009-08-20 Simon Josefsson - - * lib/openpgp/output.c, lib/openpgp/pgp.c: Reduce stack usage. - -2009-08-20 Simon Josefsson - - * lib/x509/output.c: Reduce stack usage. - -2009-08-20 Simon Josefsson - - * .x-sc_m4_quote_check, lib/gnutls_sig.c, - lib/opencdk/write-packet.c: Fix syntax-check nits. - -2009-08-20 Daiki Ueno - - * lib/libgnutls.map, lib/opencdk/keydb.c, tests/dn2.c, tests/mpi.c, - tests/resume.c: Fix memleaks. Signed-off-by: Simon Josefsson - -2009-08-19 Simon Josefsson - - * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump versions. - -2009-08-19 Simon Josefsson - - * doc/gnutls.texi: Fix references. - -2009-08-19 Simon Josefsson - - * cfg.mk: Also commit devel/ web pages. - -2009-08-19 Simon Josefsson - - * ChangeLog: Fix ChangeLog. - -2009-08-19 Simon Josefsson - - * ChangeLog: Generated. - -2009-08-19 Simon Josefsson - - * NEWS: Version 2.9.3. - -2009-08-19 Simon Josefsson - - * lib/ext_session_ticket.c: Typo. - -2009-08-19 Simon Josefsson - - * lib/gnutls_sig.c: Need gnutls_algorithms.h for prototypes. - -2009-08-19 Simon Josefsson - - * AUTHORS: Add. - -2009-08-18 Jonathan Bastien-Filiatrault - - * lib/auth_cert.c, lib/gnutls_algorithms.c, - lib/gnutls_algorithms.h, lib/gnutls_cipher.c, - lib/gnutls_handshake.c, lib/gnutls_sig.c, lib/gnutls_state.c: - Replace explicit version checks with feature checks Signed-off-by: Simon Josefsson - -2009-08-19 Simon Josefsson - - * doc/gnutls.texi: Reformat paragraphs. - -2009-08-19 Simon Josefsson - - * doc/manpages/Makefile.am, src/cli-gaa.c, src/cli-gaa.h, - src/serv-gaa.c, src/serv-gaa.h: Generated. - -2009-08-19 Simon Josefsson - - * doc/gnutls.texi: Typo. - -2009-08-19 Simon Josefsson - - * doc/gnutls.texi: Add cross reference. - -2009-08-19 Simon Josefsson - - * doc/gnutls.texi: Add. - -2009-08-19 Simon Josefsson - - * doc/reference/gnutls-docs.sgml, lib/ext_session_ticket.c: Fix - GTK-DOC output. - -2009-08-19 Simon Josefsson - - * NEWS: Add. - -2009-08-19 Simon Josefsson - - * lib/libgnutls.map: Fix namespace of new APIs. - -2009-08-19 Simon Josefsson - - * lib/ext_session_ticket.c, lib/gnutls_extensions.c, - lib/gnutls_session_pack.c: Fix whitespace. - -2009-08-19 Daiki Ueno - - * doc/TODO, lib/Makefile.am, lib/ext_session_ticket.c, - lib/ext_session_ticket.h, lib/gnutls_constate.c, - lib/gnutls_extensions.c, lib/gnutls_handshake.c, lib/gnutls_int.h, - lib/gnutls_session_pack.c, lib/gnutls_state.c, - lib/includes/gnutls/gnutls.h.in, lib/libgnutls.map, - lib/m4/hooks.m4, src/cli.c, src/cli.gaa, src/serv.c, src/serv.gaa, - tests/resume.c: session ticket support Signed-off-by: Simon Josefsson - -2009-08-19 Simon Josefsson - - * cfg.mk: Fix indent rule. - -2009-08-19 Daiki Ueno - - * doc/gnutls.texi: internals doc update Hi, When I wrote SessionTicket extension I referred to the manual node - "Adding a New TLS Extension", and noticed that it is not up to date. - So, here is a patch. Signed-off-by: Simon Josefsson - -2009-08-18 Simon Josefsson - - * gl/stdio.in.h, lib/gl/Makefile.am, lib/gl/m4/gnulib-cache.m4, - lib/gl/m4/gnulib-comp.m4, lib/gl/m4/memmove.m4, lib/gl/memmove.c, - lib/gl/stdio.in.h, maint.mk: Update gnulib files. - -2009-08-15 Simon Josefsson - - * gl/m4/stddef_h.m4, lib/gl/m4/stddef_h.m4: Update gnulib files. - -2009-08-15 Simon Josefsson - - * .gitignore: Don't ignore gl/ files! - -2009-08-15 Simon Josefsson - - * gl/tests/test-stddef.c, lib/gl/tests/test-stddef.c: Update gnulib - files. - -2009-08-15 Simon Josefsson - - * gl/Makefile.am, gl/m4/gnulib-comp.m4, gl/m4/wchar.m4, - gl/stddef.in.h, gl/stdlib.in.h, gl/string.in.h, - gl/tests/Makefile.am, gl/tests/test-stdio.c, - gl/tests/test-stdlib.c, gl/tests/test-string.c, - gl/tests/test-unistd.c, gl/tests/test-wchar.c, gl/unistd.in.h, - lib/gl/Makefile.am, lib/gl/m4/gnulib-comp.m4, lib/gl/m4/wchar.m4, - lib/gl/stddef.in.h, lib/gl/stdlib.in.h, lib/gl/string.in.h, - lib/gl/tests/Makefile.am, lib/gl/tests/test-stdio.c, - lib/gl/tests/test-stdlib.c, lib/gl/tests/test-string.c, - lib/gl/tests/test-time.c, lib/gl/tests/test-unistd.c, - lib/gl/tests/test-wchar.c, lib/gl/time.in.h, lib/gl/unistd.in.h, - maint.mk: Update gnulib files. - -2009-08-14 Simon Josefsson - - * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump versions. - -2009-08-14 Simon Josefsson - - * ChangeLog: Generated. - -2009-08-14 Simon Josefsson - - * NEWS: Version 2.9.2. - -2009-08-14 Simon Josefsson - - * NEWS: Add 2.8.3 entry. - -2009-08-14 Simon Josefsson - - * gl/Makefile.am, gl/m4/close.m4, gl/m4/fclose.m4, - gl/m4/gnulib-comp.m4, gl/m4/sys_ioctl_h.m4, gl/m4/sys_socket_h.m4, - gl/m4/unistd_h.m4, gl/tests/Makefile.am, gl/tests/sys_ioctl.in.h, - gl/tests/test-stdio.c, gl/tests/test-stdlib.c, - gl/tests/test-string.c, gl/tests/test-unistd.c, - gl/tests/test-version-etc.sh, gl/unistd.in.h, gl/vasnprintf.c, - lib/gl/Makefile.am, lib/gl/m4/sys_socket_h.m4, - lib/gl/m4/threadlib.m4, lib/gl/m4/unistd_h.m4, - lib/gl/tests/test-stdio.c, lib/gl/tests/test-stdlib.c, - lib/gl/tests/test-string.c, lib/gl/tests/test-unistd.c, - lib/gl/unistd.in.h, lib/gl/vasnprintf.c: Update gnulib files. - -2009-08-13 Simon Josefsson - - * gl/tests/test-version-etc.sh: Update gnulib files. - -2009-08-13 Simon Josefsson - - * gl/tests/test-version-etc.sh: Update gnulib files. - -2009-08-13 Simon Josefsson - - * configure.ac: Don't generate gzip archives. - -2009-08-13 Simon Josefsson - - * lib/Makefile.am, lib/gnutls_buffers.c, lib/gnutls_int.h, - lib/io_debug.h: Remove io_debug.h stuff, it is superseded by - self-tests like mini-eagain.c. - -2009-08-13 Simon Josefsson - - * NEWS: Fix. - -2009-08-13 Simon Josefsson - - * NEWS: Add. - -2009-08-13 Simon Josefsson - - * lib/x509/x509.c: (gnutls_x509_crt_import): Re-initialize the ASN.1 structure. If this is not done here, the next certificate loading may fail - because asn1_der_decoding modified the ASN.1 structure. Triggered - by the hostname-check self-test. - -2009-08-13 Simon Josefsson - - * cfg.mk: Revert "Always build vc checkouts with debugging." This reverts commit b68235be4d1ff7739456e0c5d8c28c6e96e15a14. It - breaks because -Wdisabled-optimizations will cause an error when - optimizations are disabled. - -2009-08-13 Simon Josefsson - - * cfg.mk: Always build vc checkouts with debugging. - -2009-08-13 Simon Josefsson - - * tests/hostname-check.c: Fix. - -2009-08-13 Simon Josefsson - - * tests/hostname-check.c: Add another SAN/CN collision test. - Reported by Daniel Stenberg in - . - -2009-08-12 Simon Josefsson - - * tests/hostname-check.c: Fix logic. - -2009-08-12 Simon Josefsson - - * tests/hostname-check.c: Test when SAN and CN differs. Inspired by - report by Daniel Stenberg in - . - -2009-08-12 Simon Josefsson - - * libextra/Makefile.am, libextra/gl/m4/sockets.m4: Use include - instead of copy. - -2009-08-12 Simon Josefsson - - * libextra/gl/m4/sockets.m4: Add, needed for -lws2_32 in libextra. - -2009-08-12 Simon Josefsson - - * libextra/m4/hooks.m4: Add. - -2009-08-11 Simon Josefsson - - * lib/gnutls_algorithms.c: Doc fix. - -2009-08-11 Simon Josefsson - - * lib/gnutls_algorithms.c, lib/gnutls_anon_cred.c, - lib/gnutls_auth.c, lib/gnutls_cert.c, lib/gnutls_psk.c, - lib/gnutls_srp.c, lib/gnutls_state.c, lib/gnutls_x509.c, - lib/openpgp/gnutls_openpgp.c, lib/openpgp/pgp.c, - libextra/gnutls_ia.c: Fix typos in documentation. Reported by Daiki - Ueno in . - -2009-08-10 Simon Josefsson - - * gl/m4/gnulib-comp.m4, gl/m4/sys_select_h.m4, gl/stdio-write.c, - gl/sys_select.in.h, gl/tests/gettimeofday.c, - gl/tests/test-sys_select.c, gl/tests/test-version-etc.sh, - lib/gl/m4/gnulib-comp.m4, lib/gl/stdio-write.c, maint.mk: Update - gnulib files. - -2009-08-10 Simon Josefsson - - * libextra/Makefile.am: Need to add LIBSOCKET because we link to - ../lib's gnulib library, for mingw. - -2009-08-10 Simon Josefsson - - * lib/po/cs.po.in, lib/po/fr.po.in, lib/po/nl.po.in, - lib/po/pl.po.in, lib/po/sv.po.in: Sync with TP. - -2009-08-10 Simon Josefsson - - * NEWS: Add 2.8.x news entries. - -2009-08-10 Simon Josefsson - - * cfg.mk: Fix usage. - -2009-08-10 Simon Josefsson - - * cfg.mk: Copy cyclomatic code complexity charts too. - -2009-08-10 Simon Josefsson - - * NEWS: Add. - -2009-08-10 Simon Josefsson - - * lib/gnutls_global.c: Look only for latest _required_ - libgcrypt/libtasn1 version. Reported by Marco d'Itri via Andreas Metzler - as Debian BTS #540449. - -2009-08-10 Simon Josefsson - - * NEWS: Add. - -2009-08-08 Nikos Mavrogiannopoulos - - * : commit c529f792e4c899080eb1f6e104c8552fa0770356 Author: Nikos - Mavrogiannopoulos Date: Sat Aug 8 09:06:57 2009 - +0300 - -2009-08-07 Simon Josefsson - - * NEWS: Fix. - -2009-08-07 Simon Josefsson - - * NEWS: Fix. - -2009-08-07 Simon Josefsson - - * NEWS: Add. - -2009-08-07 Simon Josefsson - - * lib/x509/output.c: Check for NUL in SANs and replace accordingly. - -2009-08-07 Simon Josefsson - - * tests/Makefile.am, tests/hostname-check.README, - tests/hostname-check.c: Move comment into source. - -2009-08-07 Simon Josefsson - - * lib/x509/common.c: Refuse to return DNs with embedded NULs which - breaks other code. Problem published by Dan Kaminsky and Moxie Marlinspike at - BlackHat09. - -2009-08-07 Simon Josefsson - - * lib/x509/common.c: Revert everything since last release, to allow - minimal patch to be applied. - -2009-08-06 Simon Josefsson - - * tests/Makefile.am: Fix invocation of rfc2253-escape-test. Reported by Brad Hards in - - . - -2009-08-06 Simon Josefsson - - * build-aux/vc-list-files, gl/Makefile.am, gl/error.c, gl/fseeko.c, - gl/m4/gnulib-comp.m4, gl/m4/lib-link.m4, gl/m4/stdio_h.m4, - gl/m4/unistd_h.m4, gl/socket.c, gl/sockets.c, gl/stdio.in.h, - gl/tests/Makefile.am, gl/tests/test-select.c, - gl/tests/test-stdio.c, gl/tests/test-stdlib.c, - gl/tests/test-string.c, gl/tests/test-unistd.c, - gl/tests/test-version-etc.c, gl/tests/test-version-etc.sh, - gl/unistd.in.h, gl/version-etc.c, gl/version-etc.h, - lib/gl/Makefile.am, lib/gl/fseeko.c, lib/gl/m4/iconv.m4, - lib/gl/m4/lib-link.m4, lib/gl/m4/stdio_h.m4, lib/gl/m4/time_h.m4, - lib/gl/m4/unistd_h.m4, lib/gl/sockets.c, lib/gl/stdio.in.h, - lib/gl/tests/test-stdio.c, lib/gl/tests/test-stdlib.c, - lib/gl/tests/test-string.c, lib/gl/tests/test-unistd.c, - lib/gl/time.in.h, lib/gl/unistd.in.h, libextra/gl/m4/lib-link.m4, - libextra/gl/md5.h, maint.mk: Update gnulib files. - -2009-08-05 Simon Josefsson - - * tests/Makefile.am, tests/rfc2253-escape-test: Add self-test of RFC - 2253 escaping. - -2009-08-04 Simon Josefsson - - * lib/x509/common.c: Simplify and fix mem leak. - -2009-08-04 Simon Josefsson - - * lib/x509/common.c: Don't use fixed size buffer for strings. - -2009-08-04 Simon Josefsson - - * tests/nul-in-x509-names.c: Exit with failure on failure. - -2009-08-04 Simon Josefsson - - * tests/nul-in-x509-names.c: Fix output. - -2009-08-04 Simon Josefsson - - * lib/gnutls_str.c: Cleanup code. - -2009-08-04 Tomas Hoger - - * lib/gnutls_str.c, lib/gnutls_str.h, lib/openpgp/pgp.c, - lib/x509/rfc2818_hostname.c: GnuTLS vs. NULL chars in CNs Check cert name size in _gnutls_hostname_compare() This is needed to protect against NULL (\0) characters embedded - in X509 certificates' CNs or subjectAltNames, that can be used - to fool SSL certificate verification as was demonstrated by Moxie - Marlinspike on BH USA 2009: - http://www.blackhat.com/html/bh-usa-09/bh-usa-09-archives.html#MarlinspikeSigned-off-by: Simon Josefsson - -2009-08-04 Simon Josefsson - - * tests/Makefile.am, tests/nul-in-x509-names.c: Add self-test for - NUL in X.509 CN/SAN problem. - -2009-08-03 Simon Josefsson - - * lib/x509/common.c: Fix typo. - -2009-08-03 Simon Josefsson - - * tests/chainverify.c: Fix expected output, a cert have expired. - -2009-08-03 Simon Josefsson - - * lib/x509/common.c: Fix crash. - -2009-08-03 Simon Josefsson - - * tests/mini-eagain.c: Make it build. - -2009-07-29 Simon Josefsson - - * .gitignore: Drop .c and sort. - -2009-07-29 Simon Josefsson - - * NEWS, lib/minitasn1/errors.c, lib/minitasn1/libtasn1.h: Use - libtasn1 v2.3. - -2009-07-29 Simon Josefsson - - * NEWS: Add. - -2009-07-26 Nikos Mavrogiannopoulos - - * : commit c02e9f1459330119d2947a4e46fb60c0e12fa32d Author: Nikos - Mavrogiannopoulos Date: Sun Jul 26 15:22:06 2009 - +0300 - -2009-07-26 Nikos Mavrogiannopoulos - - * lib/x509/common.c: do not allow null character in DN. - -2009-07-16 Nikos Mavrogiannopoulos - - * .gitignore: updated files to be ignored. - -2009-07-16 Nikos Mavrogiannopoulos - - * tests/dn.c: Typo fix in test output. Patch by Brad Hards - - -2009-07-15 Nikos Mavrogiannopoulos - - * THANKS: Removed duplicate entry of Daniel and added Fabian, Brad - and Daiki. - -2009-07-15 Nikos Mavrogiannopoulos - - * doc/examples/ex-serv-anon.c, doc/examples/ex-serv-export.c, - doc/examples/ex-serv-pgp.c, doc/examples/ex-serv-psk.c, - doc/examples/ex-serv-srp.c, doc/examples/ex-serv1.c, - lib/auth_cert.c, lib/gnutls_buffers.c, lib/gnutls_mpi.c, - lib/gnutls_pk.c, lib/gnutls_sig.c, lib/opencdk/stream.c, - lib/opencdk/write-packet.c, lib/openpgp/pgp.c, - lib/openpgp/privkey.c, lib/x509/privkey_pkcs8.c, src/certtool.c, - src/psk.c: Several bug fixes by Fabian Keil (some were modified by - me). - -2009-07-15 Nikos Mavrogiannopoulos - - * tests/mini-eagain.c: reduced transferred data size. - -2009-07-13 Nikos Mavrogiannopoulos - - * lib/auth_srp.c, lib/gnutls_buffers.c, lib/gnutls_errors.c, - lib/gnutls_record.c, lib/gnutls_supplemental.c, - lib/opencdk/armor.c, lib/opencdk/keydb.c, lib/opencdk/literal.c, - lib/opencdk/read-packet.c, lib/opencdk/sig-check.c, - lib/opencdk/stream.c, src/certtool-cfg.c, tests/chainverify.c: Added - casts to reduce warnings (based on report by Brad Hards). - -2009-07-13 Nikos Mavrogiannopoulos - - * .gitignore: Added more stuff to have a clean status. - -2009-07-13 Nikos Mavrogiannopoulos - - * README-alpha: Documentation corrections by Brad Hards. - -2009-07-13 Nikos Mavrogiannopoulos - - * lib/x509/crq.c: size_t and unsigned int fixes. - -2009-07-01 Nikos Mavrogiannopoulos - - * lib/gnutls_str.c: There are cases where those buffers might - overlap - -2009-07-01 Nikos Mavrogiannopoulos - - * lib/gnutls_handshake.c: Patch by Tim Kosse: "If - _gnutls_send_finished fails with GNUTLS_E_AGAIN or GNUTLS_E_AGAIN it - eventually gets called a second time. It however does not call _gnutls_send_handshake with a NULL pointer - on repeated calls, ultimately leading to an internal error in - _gnutls_handshake_io_send_int." - -2009-07-01 Nikos Mavrogiannopoulos - - * lib/auth_cert.h, lib/gnutls_ui.c: Corrected - gnutls_certificate_client_get_request_status(). Based on observation - by Peter Hendrickson . - -2009-07-01 Nikos Mavrogiannopoulos - - * lib/gnutls_buffers.c, tests/Makefile.am, tests/mini-eagain.c: - Added bug fix that allows gnutls_record_recv/send resuming from - previously interrupted actions. Patch by from Tim Kosse - . Added a self test to check those functions in handling interrupted - states. - -2009-06-30 Nikos Mavrogiannopoulos - - * : commit 21a7186bf83084a2bc85bbb7ddb600ccd070f1c2 Author: Simon - Josefsson Date: Tue Jun 23 23:04:51 2009 - +0200 - -2009-06-23 Simon Josefsson - - * lib/gnutls_errors.c: Doc fix. - -2009-06-22 Simon Josefsson - - * NEWS: Fix. - -2009-06-22 Simon Josefsson - - * tests/Makefile.am, tests/dn2.c: Add self-test of off-by-one size - error. - -2009-06-22 Simon Josefsson - - * THANKS: Add. - -2009-06-22 Simon Josefsson - - * NEWS: Add. - -2009-06-22 Simon Josefsson - - * lib/x509/dn.c: Fix off-by-one size computation that leads to - truncated strings. Reported by Tim Kosse - in - - . - -2009-06-18 Simon Josefsson - - * gl/Makefile.am, gl/errno.in.h, gl/getpagesize.c, - gl/m4/errno_h.m4, gl/m4/gnulib-comp.m4, gl/m4/memchr.m4, - gl/m4/string_h.m4, gl/memchr.valgrind, gl/strerror.c, - gl/string.in.h, gl/tests/Makefile.am, gl/tests/getpagesize.c, - lib/gl/Makefile.am, lib/gl/errno.in.h, lib/gl/getpagesize.c, - lib/gl/m4/errno_h.m4, lib/gl/m4/gnulib-comp.m4, - lib/gl/m4/memchr.m4, lib/gl/m4/string_h.m4, lib/gl/memchr.valgrind, - lib/gl/string.in.h, lib/gl/tests/Makefile.am, - lib/gl/tests/getpagesize.c: Update gnulib files. - -2009-06-18 Simon Josefsson - - * libextra/m4/hooks.m4: Fix --disable-openssl-compatibility - parameter. Reported by Matthias Drochner - in - - . - -2009-06-17 Simon Josefsson - - * doc/gnutls.texi: Typo. - -2009-06-17 Simon Josefsson - - * tests/mpi.c: Fix build error. - -2009-06-17 Simon Josefsson - - * NEWS: Add. - -2009-06-17 Simon Josefsson - - * lib/gnutls_ui.c: Return proper MPI lengths in bits. Reported by - Peter Hendrickson in - - . - -2009-06-13 Nikos Mavrogiannopoulos - - * : commit fad0d9b3289087dbd56176e7a1ccb498cf5ef099 Author: Simon - Josefsson Date: Wed Jun 10 17:55:05 2009 - +0200 - -2009-06-10 Simon Josefsson - - * NEWS: Add. - -2009-06-10 Simon Josefsson - - * tests/pkcs12_s2k.c: Improve test vectors. - -2009-06-10 Simon Josefsson - - * NEWS, tests/Makefile.am, tests/pkcs12_s2k_pem.c: Added new - self-test pkcs12_s2k_pem. - -2009-06-10 Simon Josefsson - - * NEWS: Fix. - -2009-06-10 Simon Josefsson - - * NEWS: Add. - -2009-06-10 Simon Josefsson - - * lib/x509/pkcs12_encr.c: Fix PKCS#12 string to key function for - 1/128 inputs. Reported by "Kukosa, Tomas" - in - . - -2009-06-09 Simon Josefsson - - * gl/Makefile.am, gl/m4/getpagesize.m4, gl/m4/gnulib-comp.m4, - gl/m4/memchr.m4, gl/m4/mmap-anon.m4, gl/memchr.c, - gl/tests/Makefile.am, gl/tests/getpagesize.c, - gl/tests/test-memchr.c, gl/tests/zerosize-ptr.h, - lib/gl/Makefile.am, lib/gl/m4/getpagesize.m4, - lib/gl/m4/gnulib-comp.m4, lib/gl/m4/memchr.m4, - lib/gl/m4/mmap-anon.m4, lib/gl/memchr.c, lib/gl/tests/Makefile.am, - lib/gl/tests/getpagesize.c, lib/gl/tests/test-memchr.c, - lib/gl/tests/zerosize-ptr.h: Update gnulib files. - -2009-06-09 Simon Josefsson - - * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump versions. - -2009-06-09 Simon Josefsson - - * ChangeLog: Generated. - -2009-06-09 Simon Josefsson - - * gl/m4/gnulib-comp.m4, gl/m4/version-etc.m4, - gl/tests/test-alignof.c, gl/version-etc.c: Update gnulib files. - -2009-06-08 Simon Josefsson - - * NEWS: Version 2.9.1. - -2009-06-08 Simon Josefsson - - * lib/gnutls_extensions.c: Mark global extfunc_size as having static - scope. - -2009-06-08 Simon Josefsson - - * NEWS: Add. - -2009-06-08 Simon Josefsson - - * tests/Makefile.am, tests/init_roundtrip.c: Add self-test to detect - extension init/deinit problem. - -2009-06-08 Simon Josefsson - - * lib/gnutls_extensions.c: Deinitalize extension global variable - properly. See . - -2009-06-03 Simon Josefsson - - * gl/Makefile.am, gl/alignof.h, gl/m4/gnulib-cache.m4, - gl/m4/gnulib-comp.m4, gl/tests/Makefile.am, - gl/tests/test-alignof.c, lib/gl/alignof.h: Update gnulib files. - -2009-06-03 Simon Josefsson - - * lib/auth_srp.c, lib/debug.c, lib/debug.h, lib/gnutls_errors.c, - lib/gnutls_errors.h, lib/libgnutls.map, lib/pk-libgcrypt.c, - tests/mpi.c: Rename _gnutls_dump_mpi to _gnutls_mpi_log. Rewrite to - use less stack space. - -2009-06-03 Simon Josefsson - - * configure.ac: Reduce stack size limit check. - -2009-06-03 Simon Josefsson - - * lib/x509/output.c: Reduce stack size. - -2009-06-03 Simon Josefsson - - * lib/x509/output.c: Fix malloc failure error strings. - -2009-06-03 Simon Josefsson - - * tests/crq_apis.c: Test more. - -2009-06-03 Simon Josefsson - - * lib/x509/common.c: (_gnutls_x509_oid_data2string): Return proper @res_size for NULL - res. - -2009-06-03 Simon Josefsson - - * lib/x509/crq.c: Indent. - -2009-06-03 Simon Josefsson - - * lib/x509/crq.c: Doc fix. - -2009-06-03 Simon Josefsson - - * lib/x509/crq.c: Reduce stack usage. - -2009-06-03 Simon Josefsson - - * lib/x509/crq.c: Doc fix. - -2009-06-03 Simon Josefsson - - * lib/x509/crq.c: Simplify. - -2009-06-03 Simon Josefsson - - * tests/crq_apis.c: Test more. - -2009-06-03 Simon Josefsson - - * lib/x509/crq.c: Reduce stack usage. - -2009-06-03 Simon Josefsson - - * tests/crq_apis.c: Test more. - -2009-06-03 Simon Josefsson - - * lib/x509/crq.c: Reduce stack usage. - -2009-06-03 Simon Josefsson - - * lib/x509/crq.c: Fix uninitialized variable access. - -2009-06-03 Simon Josefsson - - * lib/x509/crq.c: Reduce stack frame usage. - -2009-06-03 Simon Josefsson - - * lib/x509/x509_write.c: Reduce stack usage. - -2009-06-02 Simon Josefsson - - * gl/m4/manywarnings.m4: Update gnulib files. - -2009-06-02 Simon Josefsson - - * tests/crq_apis.c: Add. - -2009-06-02 Simon Josefsson - - * lib/x509/crq.c: Don't assert on expected errors. - -2009-06-01 Simon Josefsson - - * NEWS: Add. - -2009-06-01 Simon Josefsson - - * tests/Makefile.am: Add crq self-test. - -2009-06-01 Simon Josefsson - - * lib/x509/extensions.c: Reduce stack usage. - -2009-06-01 Simon Josefsson - - * lib/x509/crq.c: Reduce stack usage. Fix build failure wrt - variable names. - -2009-06-01 Simon Josefsson - - * lib/includes/gnutls/x509.h: Doc fix. - -2009-06-01 Simon Josefsson - - * lib/x509/crq.c: Doc fix. - -2009-06-01 Simon Josefsson - - * lib/x509/crq.c: Return buffer size for NULL/0 inputs. Fix output - buffer size computation. - -2009-06-01 Simon Josefsson - - * lib/x509/extensions.c: Fix mem leak. - -2009-06-01 Simon Josefsson - - * lib/x509/crq.c: Don't assert for expected errors. - -2009-06-01 Simon Josefsson - - * configure.ac: Export wstack. - -2009-06-01 Simon Josefsson - - * lib/configure.ac, libextra/configure.ac: Fix WSTACK_CFLAGS. - -2009-06-01 Simon Josefsson - - * src/serv.c: Improve logging and fix warnings. - -2009-06-01 Simon Josefsson - - * configure.ac, lib/Makefile.am, lib/openpgp/Makefile.am, - lib/x509/Makefile.am, libextra/Makefile.am: Check stack size. - -2009-06-01 Simon Josefsson - - * gl/m4/manywarnings.m4: Update gnulib files. - -2009-05-31 Nikos Mavrogiannopoulos - - * doc/TODO: Added gnutls_dh_get_prime_bits limitation. - -2009-05-28 Simon Josefsson - - * lib/x509/pkcs12_bag.c, lib/x509/verify.c, lib/x509/x509.c, - lib/x509/x509_write.c: Doc fix. Reported by Peter Hendrickson - . - -2009-05-28 Simon Josefsson - - * NEWS: Add. - -2009-05-28 Simon Josefsson - - * configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump versions. - -2009-05-28 Simon Josefsson - - * cfg.mk: Fix paths. - -2009-05-28 Simon Josefsson - - * ChangeLog: Generated. - -2009-05-28 Simon Josefsson - - * NEWS: Version 2.9.0. - -2009-05-28 Simon Josefsson - - * cfg.mk: Fix paths for alpha release. - -2009-05-28 Simon Josefsson - - * lib/gnutls_ui.c: Doc fix. - -2009-05-28 Simon Josefsson - - * build-aux/gnupload: Update gnulib files. - -2009-05-27 Simon Josefsson - - * doc/manpages/srptool.1: Fix. - -2009-05-27 Simon Josefsson - - * NEWS: Add. - -2009-05-27 Simon Josefsson - - * doc/manpages/gnutls-serv.1: Doc fix. - -2009-05-27 Simon Josefsson - - * lib/gnutls_psk.c: Doc fix. - -2009-05-27 Simon Josefsson - - * lib/x509/pkcs7.c: Doc fix. - -2009-05-27 Simon Josefsson - - * doc/Makefile.am: Cleanup rules. - -2009-05-27 Simon Josefsson - - * doc/Makefile.am, doc/gnutls.texi, lib/Makefile.am, - lib/openpgp/Makefile.am, lib/x509/Makefile.am, libextra/Makefile.am: - Move API texinfo generation into doc/. - -2009-05-27 Simon Josefsson - - * gl/m4/include_next.m4, gl/m4/size_max.m4, - lib/gl/m4/include_next.m4, lib/gl/m4/size_max.m4: Update gnulib - files. - -2009-05-27 Simon Josefsson - - * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump versions. - -2009-05-27 Simon Josefsson - - * ChangeLog: Generated. - -2009-05-27 Simon Josefsson - - * NEWS: Version 2.8.0. - -2009-05-27 Simon Josefsson - - * NEWS: Add. - -2009-05-27 Simon Josefsson - - * doc/announcement-template.txt: Typo. - -2009-05-27 Simon Josefsson - - * NEWS: Fix. - -2009-05-27 Simon Josefsson - - * NEWS, cfg.mk, configure.ac, lib/configure.ac, - libextra/configure.ac: Prepare for stable release. - -2009-05-27 Simon Josefsson - - * configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump versions. - -2009-05-27 Simon Josefsson - - * NEWS: Add. - -2009-05-27 Simon Josefsson - - * lib/gnutls_ui.c: Doc fix. Reported by Peter Hendrickson - . - -2009-05-26 Simon Josefsson - - * src/select.c: Remove unused file, replaced by poll from gnulib. - -2009-05-26 Simon Josefsson - - * doc/Makefile.am: Fix generation of error_codes.texi and - algorithms.texi. - -2009-05-26 Simon Josefsson - - * ChangeLog: Generated. - -2009-05-26 Simon Josefsson - - * doc/announcement-template.txt: Fix. - -2009-05-26 Simon Josefsson - - * NEWS: Version 2.7.14. - -2009-05-26 Simon Josefsson - - * src/certtool-gaa.c, src/serv-gaa.c: Regenerate. - -2009-05-26 Simon Josefsson - - * NEWS: Add. - -2009-05-26 Simon Josefsson - - * NEWS: Add. - -2009-05-26 Simon Josefsson - - * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump versions. - -2009-05-26 Simon Josefsson - - * lib/gnutls_global.c, lib/includes/gnutls/compat.h, - libextra/gnutls_extra.c, libextra/includes/gnutls/extra.h, - libextra/includes/gnutls/openssl.h, tests/openssl.c, tests/simple.c: - Fix version symbol namespace. - -2009-05-26 Simon Josefsson - - * doc/examples/ex-serv-anon.c, doc/examples/ex-serv-export.c, - doc/examples/ex-serv-pgp.c, doc/examples/ex-serv-psk.c, - doc/examples/ex-serv1.c, doc/examples/ex-session-info.c, - doc/gnutls.texi, doc/manpages/certtool.1, - doc/manpages/gnutls-serv.1, lib/auth_anon.c, lib/auth_dh_common.c, - lib/auth_dhe.c, lib/auth_dhe_psk.c, lib/gnutls_anon_cred.c, - lib/gnutls_errors.c, lib/gnutls_handshake.c, lib/gnutls_psk.c, - lib/gnutls_record.c, lib/gnutls_ui.c, - lib/includes/gnutls/gnutls.h.in, libextra/gnutls_ia.c, - src/certtool.gaa, src/prime.c, src/serv.c, src/serv.gaa, - src/tls_test.c, tests/anonself.c, tests/dhepskself.c, - tests/openpgpself.c, tests/oprfi.c, tests/resume.c, tests/tlsia.c, - tests/x509dn.c, tests/x509self.c, tests/x509signself.c: Doc fixes. - Suggested by Peter Hendrickson . - -2009-05-26 Simon Josefsson - - * lib/gnutls_auth.c: Doc fix. Reported by Peter Hendrickson - . - -2009-05-25 Simon Josefsson - - * ChangeLog: Generated. - -2009-05-25 Simon Josefsson - - * NEWS: Version 2.7.13. - -2009-05-25 Simon Josefsson - - * doc/announcement-template.txt: Fix. - -2009-05-25 Simon Josefsson - - * NEWS: Fix. - -2009-05-25 Simon Josefsson - - * NEWS: Add. - -2009-05-25 Simon Josefsson - - * doc/announcement-template.txt: Improve. - -2009-05-25 Simon Josefsson - - * lib/libgnutls.map: Sort symbols. - -2009-05-25 Simon Josefsson - - * lib/libgnutls.map: Auto-generate from GnuTLS 2.6.x list of - exported symbols. No substantial change. - -2009-05-25 Simon Josefsson - - * lib/libgnutls.map: Move functions. Reported by Andreas Metzler - in - - . - -2009-05-25 Simon Josefsson - - * lib/libgnutls.map: Move gnutls_x509_crq_set_key back to old ABI - namespace. Reported by Andreas Metzler - in - - . - -2009-05-25 Simon Josefsson - - * NEWS: Add. - -2009-05-25 Simon Josefsson - - * tests/chainverify.c: Fix expired certs. Exit early to make it - easier to find failing test. Reported by Andreas Metzler - in - - . - -2009-05-20 Simon Josefsson - - * .clcopying: Fix. - -2009-05-20 Simon Josefsson - - * AUTHORS: Fix PGP key. - -2009-05-20 Simon Josefsson - - * doc/gnutls.texi, src/Makefile.am, src/README, src/README.srptool: - Removed duplicated documentation. - -2009-05-20 Simon Josefsson - - * THANKS: Add. - -2009-05-20 Simon Josefsson - - * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump versions. - -2009-05-20 Simon Josefsson - - * ChangeLog: Generated. - -2009-05-20 Simon Josefsson - - * NEWS: Version 2.7.12. - -2009-05-20 Simon Josefsson - - * NEWS, src/serv.c, src/tls_test.c: Fix gnutls-serv and - gnutls-cli-debug on Windows. - -2009-05-20 Simon Josefsson - - * gl/getdelim.c: Update gnulib files. - -2009-05-20 Simon Josefsson - - * NEWS, doc/reference/Makefile.am, lib/minitasn1/libtasn1.h, - lib/minitasn1/parser_aux.c: Use libtasn1 2.2. - -2009-05-20 Simon Josefsson - - * NEWS: Add. - -2009-05-20 Simon Josefsson - - * build-aux/gnupload, gl/Makefile.am, gl/m4/sys_socket_h.m4, - gl/sys_socket.in.h, gl/tests/test-sys_socket.c, lib/gl/Makefile.am, - lib/gl/m4/sys_socket_h.m4, lib/gl/sys_socket.in.h, - lib/gl/tests/test-sys_socket.c, maint.mk: Update gnulib files. - -2009-05-20 Simon Josefsson - - * lib/gl/Makefile.am, lib/gl/m4/gnulib-cache.m4, - lib/gl/m4/gnulib-comp.m4, lib/gl/m4/vsnprintf.m4, - lib/gl/tests/Makefile.am, lib/gl/tests/test-vsnprintf.c, - lib/gl/vsnprintf.c: Replace vsnprintf if needed. - -2009-05-20 Simon Josefsson - - * NEWS: Add. - -2009-05-20 Simon Josefsson - - * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump versions. - -2009-05-20 Simon Josefsson - - * tests/crq_key_id.c: Reorder gcry quick random to make it - effective. Reported by Andreas Metzler - in - - . - -2009-05-18 Simon Josefsson - - * ChangeLog: Generated. - -2009-05-18 Simon Josefsson - - * NEWS: Version 2.7.11. - -2009-05-18 Simon Josefsson - - * NEWS, cfg.mk, configure.ac, doc/examples/Makefile.am, - lib/Makefile.am, lib/configure.ac, lib/openpgp/Makefile.am, - lib/x509/Makefile.am, libextra/Makefile.am, libextra/configure.ac, - src/Makefile.am, tests/Makefile.am: Don't build with warnings all - the time. Use a WERROR_CFLAGS. - -2009-05-18 Simon Josefsson - - * maint.mk: Update gnulib files. - -2009-05-18 Simon Josefsson - - * NEWS: Add. - -2009-05-18 Simon Josefsson - - * src/serv.c: Don't use unportable NI_MAXHOST/NI_MAXSERV. - -2009-05-17 Simon Josefsson - - * src/Makefile.am: Link getaddrinfo libraries. Reported by "Tom G. - Christensen" in - - . - -2009-05-17 Simon Josefsson - - * NEWS, configure.ac, lib/configure.ac: Need to run AC_PROG_CXX - unconditionally. - -2009-05-16 Simon Josefsson - - * doc/doxygen/Doxyfile.in, libextra/gl/Makefile.am: Fix old gnulib - lgpl/ paths. Reported by "Tom G. Christensen" - in - - . - -2009-05-14 Simon Josefsson - - * NEWS: Fix. - -2009-05-14 Simon Josefsson - - * lib/minitasn1/Makefile.am: Need -DASN1_BUILDING for libtasn1. - -2009-05-14 Simon Josefsson - - * doc/announcement-template.txt: Add. - -2009-05-14 Simon Josefsson - - * NEWS: Add. - -2009-05-14 Simon Josefsson - - * lib/minitasn1/Makefile.am: Fix -I's after gnulib changes. - Reported by "Tom G. Christensen" in - - . - -2009-05-14 Simon Josefsson - - * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump versions. - -2009-05-13 Simon Josefsson - - * ChangeLog: Generated. - -2009-05-13 Simon Josefsson - - * NEWS: Version 2.7.10. - -2009-05-13 Simon Josefsson - - * gl/Makefile.am, gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, - gl/tests/Makefile.am, gl/tests/test-alignof.c, lib/gl/Makefile.am, - lib/gl/m4/gnulib-cache.m4, lib/gl/m4/gnulib-comp.m4, - lib/gl/tests/Makefile.am, lib/gl/tests/test-alignof.c: Avoid failing - tests. - -2009-05-13 Simon Josefsson - - * lib/gnutls_algorithms.c, lib/gnutls_auth.c, lib/gnutls_buffers.c, - lib/gnutls_cert.c, lib/gnutls_global.c, lib/gnutls_priority.c, - lib/gnutls_psk.c, lib/gnutls_session.c, lib/gnutls_state.c, - lib/includes/gnutls/gnutls.h.in, lib/includes/gnutls/openpgp.h, - lib/includes/gnutls/pkcs12.h, lib/includes/gnutls/x509.h, - lib/openpgp/extras.c, lib/openpgp/gnutls_openpgp.c, - lib/openpgp/pgp.c, lib/openpgp/privkey.c, lib/x509/crq.c, - lib/x509/dn.c, lib/x509/pkcs12_bag.c, lib/x509/x509.c, - lib/x509/x509_write.c, libextra/gnutls_ia.c: Doc fixes for GTK-DOC. - -2009-05-13 Simon Josefsson - - * lib/ext_server_name.c, lib/gnutls_priority.c, - lib/gnutls_record.c, lib/gnutls_srp.c, lib/gnutls_state.c, - lib/gnutls_ui.c, lib/gnutls_x509.c, - lib/includes/gnutls/gnutls.h.in, lib/includes/gnutls/x509.h, - lib/x509/crq.c, lib/x509/dn.c, lib/x509/pkcs7.c, - lib/x509/privkey.c, lib/x509/verify.c, lib/x509/x509.c, - lib/x509/x509_write.c: Doc fixes for GTK-DOC. - -2009-05-13 Simon Josefsson - - * lib/includes/gnutls/crypto.h, lib/includes/gnutls/openpgp.h, - lib/includes/gnutls/x509.h, lib/openpgp/gnutls_openpgp.c, - lib/x509/dn.c, lib/x509/output.c, lib/x509/pkcs7.c, - lib/x509/verify.c, lib/x509/x509.c: Doc fixes for GTK-DOC. - -2009-05-13 Simon Josefsson - - * NEWS: Add. - -2009-05-13 Simon Josefsson - - * doc/examples/ex-alert.c, doc/examples/ex-cert-select.c, - doc/examples/ex-client-psk.c, doc/examples/ex-client-resume.c, - doc/examples/ex-client-srp.c, doc/examples/ex-client-tlsia.c, - doc/examples/ex-client1.c, doc/examples/ex-client2.c, - doc/examples/ex-crq.c, doc/examples/ex-pkcs12.c, - doc/examples/ex-rfc2818.c, doc/examples/ex-serv-anon.c, - doc/examples/ex-serv-export.c, doc/examples/ex-serv-pgp.c, - doc/examples/ex-serv-psk.c, doc/examples/ex-serv-srp.c, - doc/examples/ex-serv1.c, doc/examples/ex-session-info.c, - doc/examples/ex-verify.c, doc/examples/ex-x509-info.c, - doc/examples/tcp.c: Place examples in public domain. After - discussion with Karl. - -2009-05-13 Simon Josefsson - - * gl/alignof.h, gl/m4/gnulib-comp.m4, gl/tests/Makefile.am, - gl/tests/test-alignof.c, lib/gl/alignof.h, - lib/gl/m4/gnulib-comp.m4, lib/gl/tests/Makefile.am, - lib/gl/tests/test-alignof.c, maint.mk: Update gnulib files. - -2009-05-13 Simon Josefsson - - * lib/opencdk/keydb.c: Avoid sprintf. - -2009-05-13 Simon Josefsson - - * doc/examples/ex-client-tlsia.c, lib/opencdk/literal.c, - lib/opencdk/misc.c, src/common.c, tests/chainverify.c, - tests/tlsia.c: Fix warnings. - -2009-05-13 Simon Josefsson - - * NEWS: Fix. - -2009-05-13 Simon Josefsson - - * doc/gnutls.texi: Fix. - -2009-05-13 Simon Josefsson - - * NEWS: Add. - -2009-05-13 Simon Josefsson - - * lib/pk-libgcrypt.c: Fix crash. - -2009-05-12 Simon Josefsson - - * lib/gnutls_cert.c: Doc fix. - -2009-05-12 Simon Josefsson - - * lib/gnutls_dh_primes.c: Doc fix. - -2009-05-12 Simon Josefsson - - * lib/minitasn1/Makefile.am, lib/minitasn1/errors.h: Drop removed - libtasn1 file. - -2009-05-12 Simon Josefsson - - * NEWS, lib/minitasn1/coding.c, lib/minitasn1/decoding.c, - lib/minitasn1/element.c, lib/minitasn1/element.h, - lib/minitasn1/errors.c, lib/minitasn1/gstr.c, lib/minitasn1/gstr.h, - lib/minitasn1/int.h, lib/minitasn1/libtasn1.h, - lib/minitasn1/parser_aux.c, lib/minitasn1/parser_aux.h, - lib/minitasn1/structure.c, lib/minitasn1/structure.h: Upgrade - libtasn1 to v2.1. - -2009-05-12 Simon Josefsson - - * lib/gnutls_global.c, libextra/gnutls_extra.c: Doc fixes. Remove - debugging code. - -2009-05-12 Simon Josefsson - - * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump versions. - -2009-05-11 Simon Josefsson - - * ChangeLog: Generated. - -2009-05-11 Simon Josefsson - - * NEWS: Version 2.7.9. - -2009-05-11 Simon Josefsson - - * lib/configure.ac, libextra/configure.ac: Drop obsolete stuff. - -2009-05-11 Simon Josefsson - - * configure.ac: Drop obsolete stuff. - -2009-05-11 Simon Josefsson - - * gl/Makefile.am, gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, - gl/m4/ld-output-def.m4, gl/m4/ld-version-script.m4, - lib/gl/Makefile.am, lib/gl/m4/gnulib-cache.m4, - lib/gl/m4/gnulib-comp.m4, lib/gl/m4/ld-output-def.m4, - lib/gl/m4/ld-version-script.m4, libextra/gl/gnulib.mk, - libextra/gl/m4/gnulib-cache.m4, libextra/gl/m4/gnulib-comp.m4, - libextra/gl/m4/ld-output-def.m4, - libextra/gl/m4/ld-version-script.m4: Move gnulib tests into proper - directory. - -2009-05-11 Simon Josefsson - - * NEWS: Fix. - -2009-05-11 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2009-05-11 Simon Josefsson - - * doc/scripts/gdoc: Fix gnutls_priority_init documentation. - -2009-05-11 Simon Josefsson - - * doc/scripts/gdoc: Revert "Fix man output for "%COMPAT" in - docstrings." This reverts commit d10f1872bcbf7eb63632a8ce2e50728f42bd03fa. - -2009-05-11 Simon Josefsson - - * doc/scripts/gdoc: Fix man output for "%COMPAT" in docstrings. - -2009-05-11 Simon Josefsson - - * doc/manpages/Makefile.am: When writing man pages, don't append to - any existing file. - -2009-05-11 Simon Josefsson - - * lib/gnutls_priority.c: Doc fix. - -2009-05-11 Simon Josefsson - - * NEWS, doc/examples/Makefile.am, lib/gl/Makefile.am, - lib/gl/m4/gnulib-cache.m4, lib/gl/m4/gnulib-comp.m4, - lib/gl/tests/Makefile.am, lib/gl/tests/test-lseek.c, - lib/gl/tests/test-lseek.sh, src/Makefile.am, tests/Makefile.am: Fix - MinGW build failures. - -2009-05-11 Simon Josefsson - - * lib/autogen.sh: Add. - -2009-05-11 Simon Josefsson - - * maint.mk: Update gnulib files. - -2009-05-11 Simon Josefsson - - * gtk-doc.make: Fix syntax-check. - -2009-05-11 Simon Josefsson - - * gtk-doc.make, m4/gtk-doc.m4: Upgrade gtk-doc files. - -2009-05-11 Simon Josefsson - - * cfg.mk, gl/sys_socket.in.h, gl/tests/test-vc-list-files-git.sh, - lib/gl/Makefile.am, lib/gl/m4/gnulib-cache.m4, - lib/gl/m4/gnulib-comp.m4, lib/gl/sys_socket.in.h, - lib/gl/tests/Makefile.am, lib/gl/tests/test-lseek.c, - lib/gl/tests/test-lseek.sh, libextra/gl/gnulib.mk, - libextra/gl/m4/gnulib-cache.m4, libextra/gl/m4/gnulib-comp.m4: - Update gnulib files. - -2009-05-10 Simon Josefsson - - * tests/chainverify.c: Verisign CA v1 cert has expired! Change - expected results. Also test expiration code more. - -2009-05-08 Simon Josefsson - - * doc/Makefile.am: Don't always rebuild manual. - -2009-05-08 Simon Josefsson - - * gl/m4/sys_socket_h.m4, lib/gl/m4/sys_socket_h.m4: Update gnulib - files. - -2009-05-08 Simon Josefsson - - * gl/Makefile.am, lib/gl/Makefile.am: Update gnulib files. - -2009-05-08 Simon Josefsson - - * gl/Makefile.am, gl/alignof.h, lib/gl/Makefile.am: Update gnulib - files. - -2009-05-08 Simon Josefsson - - * cfg.mk: Fix. - -2009-05-08 Simon Josefsson - - * cfg.mk: Fix. - -2009-05-08 Simon Josefsson - - * build-aux/gnupload, gl/Makefile.am, gl/m4/errno_h.m4, - gl/m4/gnulib-comp.m4, gl/m4/multiarch.m4, gl/m4/sys_socket_h.m4, - gl/m4/vasnprintf.m4, gl/sys_socket.in.h, - gl/tests/test-sys_socket.c, lib/gl/Makefile.am, lib/gl/alignof.h, - lib/gl/m4/errno_h.m4, lib/gl/m4/gnulib-comp.m4, - lib/gl/m4/multiarch.m4, lib/gl/m4/sys_socket_h.m4, - lib/gl/m4/vasnprintf.m4, lib/gl/sys_socket.in.h, - lib/gl/tests/test-sys_socket.c, maint.mk: Update gnulib files. - -2009-05-08 Simon Josefsson - - * cfg.mk: Fix -Werror handling. - -2009-05-08 Simon Josefsson - - * lib/x509/output.c: Fix warnings. - -2009-05-07 Simon Josefsson - - * doc/examples/ex-serv-anon.c, doc/examples/ex-serv-export.c, - doc/examples/ex-serv-pgp.c, doc/examples/ex-serv-psk.c, - doc/examples/ex-serv-srp.c, doc/examples/ex-serv1.c, - tests/anonself.c, tests/dhepskself.c, tests/openpgpself.c, - tests/oprfi.c, tests/pskself.c, tests/resume.c, tests/tlsia.c, - tests/x509dn.c, tests/x509self.c, tests/x509signself.c: Fix - warnings. - -2009-05-07 Simon Josefsson - - * NEWS: Fix. - -2009-05-07 Simon Josefsson - - * tests/anonself.c, tests/dhepskself.c, tests/openpgpself.c, - tests/oprfi.c, tests/pskself.c, tests/resume.c, tests/tlsia.c, - tests/x509dn.c, tests/x509self.c, tests/x509signself.c: Use memset - instead of deprecated bzero. - -2009-05-07 Simon Josefsson - - * NEWS, src/certtool-cfg.c, src/serv.c: Fix build failure on systems - without AF_INET6, e.g., Solaris 2.6. Reported by "Tom G. - Christensen" in - - . - -2009-05-06 Simon Josefsson - - * doc/Makefile.am: Drop README.GIT. - -2009-05-06 Simon Josefsson - - * tests/Makefile.am: Need to link directly to libgcrypt here. - -2009-05-06 Simon Josefsson - - * lib/mpi-libgcrypt.c: Don't use casts that break strict-aliasing - rules. - -2009-05-06 Simon Josefsson - - * README-alpha: Fix. - -2009-05-06 Simon Josefsson - - * configure.ac: Fix. - -2009-05-05 Simon Josefsson - - * README-alpha, doc/README.GIT: Replace doc/README.GIT with - README-alpha. - -2009-05-05 Simon Josefsson - - * README-alpha: Fix. - -2009-05-05 Simon Josefsson - - * README-alpha: Add. - -2009-05-03 Simon Josefsson - - * NEWS, lib/libgnutls.map: Fix build failure when LZO is enabled. - -2009-05-03 Simon Josefsson - - * lib/includes/gnutls/gnutls.h.in, lib/includes/gnutls/openpgp.h, - libextra/includes/gnutls/extra.h: Fix gtk-doc warnings. - -2009-05-03 Simon Josefsson - - * NEWS: Fix. - -2009-05-03 Simon Josefsson - - * lib/gnutls_asn1_tab.c, lib/pkix_asn1_tab.c: Regenerated libtasn1 - files. - -2009-05-03 Simon Josefsson - - * doc/Makefile.am: Build tools before using them. - -2009-05-03 Simon Josefsson - - * .x-sc_GPL_version, .x-sc_avoid_if_before_free, - .x-sc_cast_of_alloca_return_value, .x-sc_cast_of_argument_to_free, - .x-sc_file_system, .x-sc_m4_quote_check, .x-sc_makefile_check, - .x-sc_program_name, .x-sc_prohibit_HAVE_MBRTOWC, - .x-sc_prohibit_S_IS_definition, .x-sc_space_tab, .x-sc_the_the, - .x-sc_two_space_separator_in_usage, .x-sc_useless_cpp_parens, NEWS, - cfg.mk, doc/examples/ex-serv-export.c, doc/gnutls.texi, - gtk-doc.make, lib/gnutls.asn, lib/m4/hooks.m4, - lib/openpgp/Makefile.am, lib/pkix.asn, lib/x509/Makefile.am, - libextra/m4/hooks.m4, m4/valgrind.m4, src/Makefile.am, - src/certtool-cfg.c, src/certtool.c, src/crypt.c, src/psk.c, - src/serv.c, src/tls_test.c, tests/Makefile.am, tests/resume.c, - tests/x509dn.c: Fix syntax-check warnings. - -2009-05-03 Simon Josefsson - - * doc/reference/Makefile.am, gtk-doc.make: Upgrade gtk-doc files. - -2009-05-03 Simon Josefsson - - * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump versions. - -2009-05-03 Simon Josefsson - - * ChangeLog: Generated. - -2009-05-03 Simon Josefsson - - * NEWS: Version 2.7.8. - -2009-05-03 Simon Josefsson - - * gl/Makefile.am, gl/gettext.h, gl/m4/wchar.m4, gl/wchar.in.h, - lib/gl/Makefile.am, lib/gl/gettext.h, lib/gl/m4/wchar.m4, - lib/gl/wchar.in.h: Update gnulib files. - -2009-05-03 Simon Josefsson - - * tests/pkcs1-padding/pkcs1-pad: Fix self test fails because of - expired certs using datefudge. - -2009-05-01 Simon Josefsson - - * tests/chainverify.c: Print cert details. Fix verifying expired - cert. - -2009-05-01 Simon Josefsson - - * tests/cve-2008-4989.c: Avoid time checks. - -2009-04-30 Simon Josefsson - - * tests/Makefile.am, tests/cve-2009-1415.c, tests/cve-2009-1416.c: - Add self-tests for security problems. - -2009-04-30 Simon Josefsson - - * NEWS: Add. - -2009-04-30 Simon Josefsson - - * lib/gnutls_cert.c, lib/includes/gnutls/gnutls.h.in, - lib/includes/gnutls/x509.h, lib/x509/verify.c, src/common.c: - libgnutls: Check activation/expiration times on untrusted - certificates. Reported by Romain Francoise. - -2009-04-30 Simon Josefsson - - * lib/gnutls_pk.c: Fix DSA key generation. - -2009-04-30 Simon Josefsson - - * cfg.mk: Use modern git names. - -2009-04-30 Simon Josefsson - - * NEWS: Add old NEWS entries. - -2009-04-30 Simon Josefsson - - * doc/gnutls.texi: Document how to use TLS exporters. - -2009-04-30 Simon Josefsson - - * src/serv.c: Fix getaddrinfo/bind loop. - -2009-04-28 Simon Josefsson - - * maint.mk: Update gnulib files. - -2009-04-27 Simon Josefsson - - * : Replace PDF with official ZIP file. The PDFs have the same - SHA-1. The file was downloaded from: - - http://csrc.nist.gov/groups/ST/crypto_apps_infra/documents/PKI%20Testing%20Page.htmUsing the direct link: - - http://csrc.nist.gov/groups/ST/crypto_apps_infra/documents/certpath1.07.zip - -2009-04-27 Simon Josefsson - - * cfg.mk: Fix. - -2009-04-27 Simon Josefsson - - * build-aux/useless-if-before-free, build-aux/vc-list-files, - gl/Makefile.am, gl/m4/gnulib-comp.m4, gl/tests/Makefile.am, - gl/tests/test-vc-list-files-cvs.sh, - gl/tests/test-vc-list-files-git.sh, maint.mk: Update gnulib files. - -2009-04-27 Simon Josefsson - - * src/certtool.c: Fix some error messages. - -2009-04-27 Simon Josefsson - - * gl/m4/lib-link.m4, gl/m4/lib-prefix.m4, gl/vasnprintf.c, - lib/gl/m4/lib-link.m4, lib/gl/m4/lib-prefix.m4, - lib/gl/vasnprintf.c, libextra/gl/m4/lib-link.m4, - libextra/gl/m4/lib-prefix.m4, maint.mk: Update gnulib files. - -2009-04-27 Simon Josefsson - - * NEWS: Fix. - -2009-04-27 Simon Josefsson - - * NEWS: Fix. - -2009-04-27 Simon Josefsson - - * lib/libgnutls.map: Move symbols new with gnutls 2.8.x under - GNUTLS_2_8 version. - -2009-04-24 Simon Josefsson - - * NEWS, src/serv.c: gnutls-serv: Listen on all interfaces. - -2009-04-24 Simon Josefsson - - * maint.mk: Update gnulib files. - -2009-04-24 Simon Josefsson - - * lib/pk-libgcrypt.c: Cleanup code and fix memory leaks. - -2009-04-23 Simon Josefsson - - * doc/gendocs_template: Update gnulib files. - -2009-04-23 Simon Josefsson - - * NEWS, doc/gnutls.texi: Improve texinfo section names. - -2009-04-23 Simon Josefsson - - * tests/x509sign-verify.c: Also test DSA keys. - -2009-04-21 Nikos Mavrogiannopoulos - - * lib/x509/verify.c: release allocated mpis in - _gnutls_x509_verify_algorithm(). - -2009-04-21 Simon Josefsson - - * tests/libgcrypt.supp: Suppress more for modern libgcrypt. - -2009-04-21 Simon Josefsson - - * tests/x509sign-verify.c: Cleanup code. - -2009-04-21 Simon Josefsson - - * src/cli.c: Pass proper socket to libgnutls on Windows. - -2009-04-21 Simon Josefsson - - * gl/Makefile.am, gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, - gl/sockets.c, gl/sockets.h, gl/tests/Makefile.am, gl/tests/dummy.c, - gl/tests/sockets.c, gl/tests/sockets.h: Need sockets module. - -2009-04-20 Simon Josefsson - - * lib/libgnutls.map: Make check needs more symbols. - -2009-04-20 Simon Josefsson - - * NEWS, lib/Makefile.am, lib/libgnutls.map, libextra/Makefile.am, - libextra/libgnutls-extra.map, libextra/libgnutls-extra.vers: Improve - version scripts. Limit exported symbols on systems without linker - script. - -2009-04-20 Simon Josefsson - - * NEWS: Add. - -2009-04-20 Simon Josefsson - - * NEWS, build-aux/gendocs.sh, configure.ac, lib/configure.ac, - lib/m4/hooks.m4, libextra/configure.ac: Bump version. - -2009-04-20 Simon Josefsson - - * ChangeLog: Generated. - -2009-04-20 Simon Josefsson - - * NEWS: Version 2.7.7. - -2009-04-20 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2009-04-20 Simon Josefsson - - * doc/gnutls.texi: Really generate DSA key in example. - -2009-04-20 Simon Josefsson - - * lib/x509/x509.c: Fix return value. Doc fix. - -2009-04-20 Simon Josefsson - - * doc/gnutls.texi: Explain how to generate DSA key. - -2009-04-20 Simon Josefsson - - * lib/gnutls_x509.c, lib/x509/x509.c: Doc fix for new APIs. - -2009-04-20 Nikos Mavrogiannopoulos - - * NEWS, lib/pk-libgcrypt.c: Corrected possible memory corruption on - signature verification failure. Reported by Miroslav Kratochvil - - -2009-04-18 Nikos Mavrogiannopoulos - - * doc/printlist.c: Added small patch from Romain Francoise to remove - unneeded include. - -2009-04-18 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/x509.h, lib/x509/privkey.c, lib/x509/x509.c, - tests/Makefile.am, tests/x509sign-verify.c: Added self test for - gnutls_x509_crt_verify_hash() and - gnutls_x509_crt_get_verify_algorithm(). Added some notes in - gnutls_x509_privkey_sign_hash(). - -2009-04-17 Nikos Mavrogiannopoulos - - * NEWS, lib/includes/gnutls/x509.h, lib/x509/verify.c, - lib/x509/x509.c: gnutls_x509_crt_get_sig_algorithm was renamed to - gnutls_x509_crt_get_verify_algorithm. Corrected some issues with - the code. - -2009-04-17 Simon Josefsson - - * NEWS: Reorder. - -2009-04-17 Simon Josefsson - - * NEWS, lib/gnutls.pc.in: Add -ltasn1 to pkg-config file. Reported - by Andreas Metzler in - - . - -2009-04-17 Simon Josefsson - - * NEWS: Add. - -2009-04-17 Simon Josefsson - - * cfg.mk: Use new po domain. - -2009-04-17 Simon Josefsson - - * lib/po/de.po.in: Sync with TP. - -2009-04-17 Simon Josefsson - - * lib/po/de.po.in: Sync with TP. - -2009-04-17 Simon Josefsson - - * maint.mk: Update gnulib files. - -2009-04-17 Simon Josefsson - - * lib/po/de.po.in: Sync with TP. - -2009-04-16 Simon Josefsson - - * : commit 934102c33ac89ace9a1e1d02047d54f2fea6b59b Merge: bc279f4 - d720f3f Author: Nikos Mavrogiannopoulos Date: - Wed Apr 15 22:43:03 2009 +0300 - -2009-04-14 Simon Josefsson - - * build-aux/gendocs.sh, doc/gendocs_template, doc/lgpl-2.1.texi: - Update gnulib files. - -2009-04-11 Simon Josefsson - - * gl/Makefile.am, gl/m4/inet_ntop.m4, maint.mk: Update gnulib files. - -2009-04-03 Nikos Mavrogiannopoulos - - * NEWS: documented Cedric Bail's function addition - -2009-04-03 Nikos Mavrogiannopoulos - - * : commit 258d2e873f61d5543c674f46a6247b4a379d2cca Author: Simon - Josefsson Date: Fri Apr 3 15:20:09 2009 - +0200 - -2009-04-03 Simon Josefsson - - * lib/po/POTFILES.in: Fix filenames. - -2009-04-03 Simon Josefsson - - * cfg.mk: Fix PODIR. - -2009-04-03 Simon Josefsson - - * Makefile.am, configure.ac, lib/Makefile.am, lib/configure.ac, - lib/po/LINGUAS, lib/po/Makevars, lib/po/POTFILES.in, - lib/po/cs.po.in, lib/po/de.po.in, lib/po/fr.po.in, lib/po/ms.po.in, - lib/po/nl.po.in, lib/po/pl.po.in, lib/po/sv.po.in, lib/po/vi.po.in, - po/LINGUAS, po/Makevars, po/POTFILES.in, po/cs.po.in, po/de.po.in, - po/fr.po.in, po/ms.po.in, po/nl.po.in, po/pl.po.in, po/sv.po.in, - po/vi.po.in: Move i18n dir back to lib/, after discussion with - Bruno. - -2009-04-03 Simon Josefsson - - * configure.ac, gl/Makefile.am, gl/m4/gnulib-cache.m4, - gl/m4/gnulib-comp.m4, gl/m4/ld-version-script.m4, - m4/linker-script.m4: Use linker-script from gnulib. - -2009-04-03 Simon Josefsson - - * configure.ac, gl/Makefile.am, gl/m4/gnulib-cache.m4, - gl/m4/gnulib-comp.m4, gl/m4/ld-output-def.m4, lib/configure.ac, - libextra/configure.ac, m4/output-def.m4: Use output-def test from - gnulib. - -2009-04-03 Simon Josefsson - - * configure.ac, lib/Makefile.am, lib/libgnutls.map, - lib/libgnutls.vers, lib/libgnutlsxx.map, lib/libgnutlsxx.vers: - Rename linker script. - -2009-04-03 Simon Josefsson - - * lib/Makefile.am, lib/m4/hooks.m4, libextra/Makefile.am: Use - DLL_VERSION variable name. - -2009-03-30 Simon Josefsson - - * po/LINGUAS, po/cs.po.in: Sync with TP. - -2009-03-30 Simon Josefsson - - * lib/gnutls_global.c, lib/openpgp/output.c, lib/x509/output.c: Fix - warnings. - -2009-03-30 Simon Josefsson - - * configure.ac: Only add warnings when using gcc. Don't use - -Wformat-nonliteral. - -2009-03-30 Simon Josefsson - - * GNUmakefile, build-aux/gnupload, gl/Makefile.am, gl/close-hook.c, - gl/close-hook.h, gl/close.c, gl/fseeko.c, gl/gai_strerror.c, - gl/m4/close.m4, gl/m4/gnulib-common.m4, gl/m4/gnulib-comp.m4, - gl/m4/printf.m4, gl/m4/select.m4, gl/m4/stdarg.m4, - gl/m4/sys_select_h.m4, gl/readline.c, gl/select.c, gl/setsockopt.c, - gl/stdint.in.h, gl/sys_select.in.h, gl/sys_socket.in.h, - gl/tests/Makefile.am, gl/tests/sockets.c, gl/tests/sockets.h, - gl/tests/test-getaddrinfo.c, gl/tests/test-sockets.c, - gl/unistd.in.h, gl/vasnprintf.c, gl/winsock-select.c, - lib/gl/Makefile.am, lib/gl/close-hook.c, lib/gl/close-hook.h, - lib/gl/fseeko.c, lib/gl/m4/gnulib-common.m4, - lib/gl/m4/gnulib-comp.m4, lib/gl/m4/printf.m4, lib/gl/sockets.c, - lib/gl/sockets.h, lib/gl/stdint.in.h, lib/gl/sys_socket.in.h, - lib/gl/tests/test-sockets.c, lib/gl/unistd.in.h, - lib/gl/vasnprintf.c, lib/gl/w32sock.h, - libextra/gl/m4/gnulib-common.m4, maint.mk: Update gnulib files. - -2009-03-26 Nikos Mavrogiannopoulos - - * lib/includes/gnutls/x509.h, lib/x509/verify.c, lib/x509/x509.c, - lib/x509/x509_int.h: Applied patch by Cedric Bail to add functions - gnutls_x509_crt_verify_hash() and - gnutls_x509_crt_get_sig_algorithm(). - -2009-03-23 Simon Josefsson - - * cfg.mk: Fix bootstrap. - -2009-03-23 Simon Josefsson - - * Makefile.am, cfg.mk, configure.ac, lib/Makefile.am, - lib/configure.ac: Fix po paths. - -2009-03-23 Simon Josefsson - - * lib/po/LINGUAS, lib/po/Makevars, lib/po/POTFILES.in, - lib/po/de.po.in, lib/po/fr.po.in, lib/po/ms.po.in, lib/po/nl.po.in, - lib/po/pl.po.in, lib/po/sv.po.in, lib/po/vi.po.in, po/LINGUAS, - po/Makevars, po/POTFILES.in, po/de.po.in, po/fr.po.in, po/ms.po.in, - po/nl.po.in, po/pl.po.in, po/sv.po.in, po/vi.po.in: Move lib/po to - po/ since the gettext domain is global for gnutls. - -2009-03-04 Simon Josefsson - - * lib/x509/Makefile.am: Cosmetic fix. - -2009-03-04 Simon Josefsson - - * lib/gnutls_global.c, lib/x509/x509_int.h: Be compatible with - libtasn1 before v1.6. - -2009-03-04 Simon Josefsson - - * NEWS: Add. - -2009-03-04 Simon Josefsson - - * NEWS, lib/minitasn1/coding.c, lib/minitasn1/decoding.c, - lib/minitasn1/element.c, lib/minitasn1/errors.c, - lib/minitasn1/errors.h, lib/minitasn1/gstr.c, lib/minitasn1/int.h, - lib/minitasn1/libtasn1.h, lib/minitasn1/parser_aux.c, - lib/minitasn1/structure.c: Update to minitasn1 v1.8. - -2009-03-04 Simon Josefsson - - * lib/gnutls_global.c, lib/gnutls_global.h, lib/x509/common.c, - lib/x509/crl.c, lib/x509/crq.c, lib/x509/dn.c, - lib/x509/extensions.c, lib/x509/pkcs12.c, lib/x509/pkcs7.c, - lib/x509/x509.c: Use modern libtasn1 interfaces. - -2009-03-02 Simon Josefsson - - * NEWS: Add. - -2009-03-02 Simon Josefsson - - * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump version. - -2009-03-02 Simon Josefsson - - * doc/Makefile.am: Add -I's for errcodes/printlist. Reported by - Roman Bogorodskiy in - - . - -2009-02-27 Simon Josefsson - - * ChangeLog: Generated. - -2009-02-27 Simon Josefsson - - * doc/Makefile.am: Fix distcheck. - -2009-02-27 Simon Josefsson - - * doc/Makefile.am: Fix. - -2009-02-27 Simon Josefsson - - * doc/Makefile.am: Remove error_codes.texi and algorithms.texi to - fix make distcheck. - -2009-02-27 Simon Josefsson - - * doc/Makefile.am: Update --css-include path to fix distcheck. - -2009-02-27 Simon Josefsson - - * NEWS: Version 2.7.6. - -2009-02-27 Simon Josefsson - - * .gitignore: Fix. - -2009-02-27 Simon Josefsson - - * gl/tests/test-fseeko2.sh, lib/gl/tests/test-fseeko2.sh: Update - gnulib files. - -2009-02-27 Simon Josefsson - - * gl/m4/gnulib-comp.m4, gl/m4/printf.m4, gl/m4/stdint.m4, - gl/m4/stdlib_h.m4, gl/m4/vasnprintf.m4, gl/tests/Makefile.am, - gl/tests/test-fseeko.c, gl/tests/test-getaddrinfo.c, - gl/vasnprintf.c, lib/gl/m4/gnulib-comp.m4, lib/gl/m4/printf.m4, - lib/gl/m4/stdint.m4, lib/gl/m4/stdlib_h.m4, - lib/gl/m4/vasnprintf.m4, lib/gl/tests/Makefile.am, - lib/gl/tests/test-fseeko.c, lib/gl/vasnprintf.c: Update gnulib - files. - -2009-02-27 Simon Josefsson - - * gl/m4/ungetc.m4, lib/gl/m4/ungetc.m4: Update gnulib files. - -2009-02-27 Simon Josefsson - - * doc/scripts/gdoc: Revert %-hack that lead to syntax errors in - texinfo output. - -2009-02-24 Simon Josefsson - - * src/certtool.c: Minor cleanup. - -2009-02-24 Simon Josefsson - - * NEWS, src/certtool-cfg.c: certtool: Query for multiple dnsName - subjectAltName in interactive mode. - -2009-02-23 Simon Josefsson - - * gl/m4/include_next.m4, lib/gl/m4/include_next.m4: Update gnulib - files. - -2009-02-22 Nikos Mavrogiannopoulos - - * NEWS: documented pkix.asn change - -2009-02-22 Nikos Mavrogiannopoulos - - * lib/pkix.asn: Removed several unneeded parameters from pkix tree. - This reduces initial memory usage after gnutls_global_init() from - 140kb (in amd64) to 50kb. - -2009-02-22 Nikos Mavrogiannopoulos - - * lib/x509/dn.c, tests/crq_key_id.c: Added more verbose information. - -2009-02-22 Nikos Mavrogiannopoulos - - * lib/pkix.asn, lib/pkix_asn1_tab.c, lib/x509/dn.c, - tests/crq_key_id.c: Revert "Added more verbose debugging info" This reverts commit c2d3596cddbb54ac4f19c44b15a03ee1fcceab12. - -2009-02-22 Nikos Mavrogiannopoulos - - * lib/pkix.asn, lib/pkix_asn1_tab.c, lib/x509/dn.c, - tests/crq_key_id.c: Added more verbose debugging info - -2009-02-22 Nikos Mavrogiannopoulos - - * doc/TODO: removed items that have already been done or solved. - -2009-02-22 Nikos Mavrogiannopoulos - - * NEWS: documented the SSL3_RECORD_VERSION priority string - -2009-02-22 Nikos Mavrogiannopoulos - - * doc/scripts/gdoc, lib/gnutls_priority.c: Applied patch by Martin - von Gagern: The attached patch fixes gnutls_priority_init(3), but in - a very hackish way, treating a percent sign as indicating a constant - only if it is not immediately preceded by a double quote. - -2009-02-21 Nikos Mavrogiannopoulos - - * doc/manpages/gnutls-cli.1: Corrected listing of special keywords. - Reported by Martin von Gagern. - -2009-02-21 Nikos Mavrogiannopoulos - - * doc/manpages/gnutls-cli.1, lib/gnutls_handshake.c, - lib/gnutls_int.h, lib/gnutls_priority.c: Added %SSL3_RECORD_VERSION - priority option that allows to specify the client hello message - record version. Used to overcome buggy TLS servers. Report by Martin - von Gagern. - -2009-02-15 Nikos Mavrogiannopoulos - - * lib/x509/verify.c: Corrected bit disable (was flipping instead). - Initialy reported by Daniel Kahn Gillmor on 9/1/2008. Many thanks to - moog@sysdev.oucs.ox.ac.uk for bringing this into my attention. - -2009-02-11 Simon Josefsson - - * NEWS: Fix. - -2009-02-11 Simon Josefsson - - * NEWS, src/serv.c: gnutls-serv: No longer disable MAC padding by - default. - -2009-02-11 Simon Josefsson - - * src/serv.c: More gnulib usage. - -2009-02-11 Simon Josefsson - - * src/cli.c: Use more gnulib interfaces. - -2009-02-11 Simon Josefsson - - * NEWS: Add. - -2009-02-11 Simon Josefsson - - * doc/gnutls.texi: Update gnutls-serv --help output. - -2009-02-11 Simon Josefsson - - * doc/gnutls.texi: Update gnutls-cli --help output. - -2009-02-11 Simon Josefsson - - * NEWS, lib/gnutls_int.h, lib/gnutls_priority.c, lib/gnutls_x509.c: - libgnutls: Add new priority strings for allowing RSA-MD5 and V1-CA. - -2009-02-11 Simon Josefsson - - * NEWS, src/cli.c: gnutls-cli: Don't permit V1 CAs by default. - -2009-02-11 Simon Josefsson - - * doc/Makefile.am, doc/errcodes.c, doc/printlist.c, - src/Makefile.am, src/errcodes.c, src/printlist.c: Move doc related - tools from src/ to doc/. - -2009-02-11 Simon Josefsson - - * src/common.c: Typo. - -2009-02-11 Simon Josefsson - - * src/common.c: Typo. - -2009-02-11 Simon Josefsson - - * src/common.c: Print OpenPGP cert info using libgnutls. - -2009-02-11 Simon Josefsson - - * NEWS, lib/openpgp/output.c: libgnutls: gnutls_openpgp_crt_print - supports oneline mode. - -2009-02-11 Simon Josefsson - - * tests/pathlen/ca-no-pathlen.pem, - tests/pathlen/no-ca-or-pathlen.pem: Fix expected test vectors. - -2009-02-11 Simon Josefsson - - * NEWS, lib/x509/output.c: libgnutls: gnutls_x509_crt_print prints - signature algorithm in oneline mode. - -2009-02-11 Simon Josefsson - - * gl/m4/close.m4, gl/m4/sockets.m4, gl/tests/sockets.h, - gl/tests/test-sockets.c, lib/gl/m4/sockets.m4, lib/gl/sockets.h, - lib/gl/tests/test-sockets.c: Update gnulib files. - -2009-02-11 Simon Josefsson - - * NEWS, src/common.c: gnutls-cli: Print certificate info using - libgnutls. - -2009-02-11 Simon Josefsson - - * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump versions. - -2009-02-11 Simon Josefsson - - * lib/x509/output.c: Print bit size of RSA exponents. - -2009-02-06 Simon Josefsson - - * ChangeLog: Generated. - -2009-02-06 Simon Josefsson - - * src/Makefile.am: Need -lgnutls etc for certtool-cfg.c. - -2009-02-06 Simon Josefsson - - * NEWS: Version 2.7.5. - -2009-02-06 Simon Josefsson - - * NEWS: Merge in old NEWS entries. - -2009-02-06 Simon Josefsson - - * lib/x509/verify.c: Move down revocation check to revert code to - how it looked before. The idea is that if you have marked a cert as - trusted, you may want to trust it even though some authority has - revoked it. This changes back how this code used to work. - -2009-02-02 Simon Josefsson - - * NEWS, doc/TODO, lib/x509/verify.c, tests/chainverify.c: Make it - possible to trust intermediary certificates. Based on tiny patch - from "Douglas E. Engert" in - - . - -2009-02-02 Simon Josefsson - - * tests/chainverify.c: Add another chain from bug reports. - -2009-02-02 Simon Josefsson - - * src/common.c: Print more certificate status values. - -2009-02-02 Simon Josefsson - - * lib/x509/x509.c: Assert less for expected errors. - -2009-02-02 Simon Josefsson - - * lib/x509/output.c: Simplify keyid printing to avoid allocation and - asserts. - -2009-02-01 Simon Josefsson - - * doc/manpages/Makefile.am, doc/scripts/gdoc: Update gdoc and use - -pkg-name. - -2009-02-01 Simon Josefsson - - * build-aux/gnupload, gl/Makefile.am, gl/m4/00gnulib.m4, - gl/m4/errno_h.m4, gl/m4/extensions.m4, gl/m4/gnulib-common.m4, - gl/m4/gnulib-comp.m4, gl/m4/multiarch.m4, gl/m4/pmccabe2html.m4, - gl/m4/stdlib_h.m4, gl/stdlib.in.h, gl/tests/test-getaddrinfo.c, - gl/version-etc.c, gl/version-etc.h, lib/gl/Makefile.am, - lib/gl/m4/00gnulib.m4, lib/gl/m4/errno_h.m4, - lib/gl/m4/extensions.m4, lib/gl/m4/gnulib-common.m4, - lib/gl/m4/gnulib-comp.m4, lib/gl/m4/multiarch.m4, - lib/gl/m4/stdlib_h.m4, lib/gl/stdlib.in.h, - libextra/gl/m4/00gnulib.m4, libextra/gl/m4/extensions.m4, - libextra/gl/m4/gnulib-common.m4, libextra/gl/m4/gnulib-comp.m4: - Update gnulib files. - -2009-01-27 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_handshake.c: gnutls_handshake when sending client - hello during a rehandshake, will not offer a version number larger - than the current. Reported by Tristan Hill . - -2009-01-27 Nikos Mavrogiannopoulos - - * lib/gnutls_psk.c: result_size in gnutls_hex_encode behaves as - documented. It now holds the size of the result. Reported by John - Brooks. - -2009-01-21 Simon Josefsson - - * gl/Makefile.am, gl/arpa_inet.in.h, gl/fseeko.c, gl/m4/alloca.m4, - gl/m4/errno_h.m4, gl/m4/getaddrinfo.m4, gl/m4/getline.m4, - gl/m4/getpass.m4, gl/m4/gettimeofday.m4, gl/m4/gnulib-common.m4, - gl/m4/inet_ntop.m4, gl/m4/inet_pton.m4, gl/m4/intmax_t.m4, - gl/m4/inttypes_h.m4, gl/m4/lib-ld.m4, gl/m4/lib-link.m4, - gl/m4/longlong.m4, gl/m4/malloc.m4, gl/m4/minmax.m4, - gl/m4/printf.m4, gl/m4/readline.m4, gl/m4/realloc.m4, - gl/m4/sockets.m4, gl/m4/sockpfaf.m4, gl/m4/stdbool.m4, - gl/m4/stdint.m4, gl/m4/stdint_h.m4, gl/m4/stdio_h.m4, - gl/m4/unistd_h.m4, gl/m4/vasnprintf.m4, gl/m4/wchar_t.m4, - gl/m4/wint_t.m4, gl/progname.c, gl/stdint.in.h, gl/stdio.in.h, - gl/strerror.c, gl/sys_stat.in.h, gl/tests/gettimeofday.c, - gl/tests/ioctl.c, gl/tests/test-unistd.c, gl/unistd.in.h, - gl/wchar.in.h, lib/gl/Makefile.am, lib/gl/fseeko.c, - lib/gl/m4/alloca.m4, lib/gl/m4/byteswap.m4, lib/gl/m4/codeset.m4, - lib/gl/m4/errno_h.m4, lib/gl/m4/gettext.m4, - lib/gl/m4/gnulib-common.m4, lib/gl/m4/iconv.m4, - lib/gl/m4/intldir.m4, lib/gl/m4/intlmacosx.m4, lib/gl/m4/intmax.m4, - lib/gl/m4/intmax_t.m4, lib/gl/m4/inttypes-pri.m4, - lib/gl/m4/inttypes_h.m4, lib/gl/m4/lcmessage.m4, - lib/gl/m4/lib-ld.m4, lib/gl/m4/lib-link.m4, lib/gl/m4/lock.m4, - lib/gl/m4/longlong.m4, lib/gl/m4/malloc.m4, lib/gl/m4/memmem.m4, - lib/gl/m4/memmove.m4, lib/gl/m4/minmax.m4, lib/gl/m4/nls.m4, - lib/gl/m4/po.m4, lib/gl/m4/printf-posix.m4, lib/gl/m4/printf.m4, - lib/gl/m4/progtest.m4, lib/gl/m4/realloc.m4, lib/gl/m4/sockets.m4, - lib/gl/m4/sockpfaf.m4, lib/gl/m4/stdbool.m4, lib/gl/m4/stdint.m4, - lib/gl/m4/stdint_h.m4, lib/gl/m4/stdio_h.m4, lib/gl/m4/strcase.m4, - lib/gl/m4/strverscmp.m4, lib/gl/m4/threadlib.m4, - lib/gl/m4/uintmax_t.m4, lib/gl/m4/unistd_h.m4, - lib/gl/m4/vasnprintf.m4, lib/gl/m4/wchar_t.m4, lib/gl/m4/wint_t.m4, - lib/gl/stdint.in.h, lib/gl/stdio.in.h, lib/gl/sys_stat.in.h, - lib/gl/tests/test-unistd.c, lib/gl/unistd.in.h, lib/gl/wchar.in.h: - Update gnulib files. - -2009-01-21 Simon Josefsson - - * THANKS: Add. - -2009-01-21 Simon Josefsson - - * libextra/gl/Makefile.am, libextra/gl/gnulib.mk, - libextra/gl/m4/gnulib-cache.m4, libextra/gl/m4/gnulib-common.m4, - libextra/gl/m4/lib-ld.m4, libextra/gl/m4/lib-link.m4, - libextra/gl/m4/md5.m4: Add -I's in libextra/gl for stdint.h on - Solaris. Reported by Dagobert Michelsen in - - http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3388 - -2009-01-13 Simon Josefsson - - * lib/gnutls_state.c: Check return value properly. - -2009-01-13 Simon Josefsson - - * lib/gnutls_state.c: Fix mem leak because buffer is not expanded - correctly. - -2009-01-09 Simon Josefsson - - * NEWS: Fix typos. - -2009-01-09 Simon Josefsson - - * NEWS, lib/x509/verify.c: Permit V1 Certificate Authorities - properly. Before they were mistakenly rejected even though - GNUTLS_VERIFY_ALLOW_ANY_X509_V1_CA_CRT and/or - GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT were supplied. Reported by - "Douglas E. Engert" in - - . - -2009-01-09 Simon Josefsson - - * src/certtool.c: Permit V1 CA's in new --verify-chain code. - -2009-01-09 Simon Josefsson - - * THANKS: Add. - -2009-01-09 Simon Josefsson - - * tests/chainverify.c: Added chain supplied by "Douglas E. Engert" - . - -2009-01-07 Simon Josefsson - - * src/errcodes.c, src/printlist.c: Fix license header. - -2009-01-07 Simon Josefsson - - * lib/gnutls_errors.c, lib/gnutls_errors.h, lib/gnutls_global.c, - lib/gnutls_global.h, lib/gnutls_int.h: Cleanup logger function type. - -2009-01-07 Simon Josefsson - - * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump versions. - -2009-01-07 Simon Josefsson - - * ChangeLog: Generated. - -2009-01-07 Simon Josefsson - - * NEWS: Version 2.7.4. - -2009-01-07 Simon Josefsson - - * lib/gnutls_rsa_export.c: Doc fixes. - -2009-01-07 Simon Josefsson - - * doc/examples/ex-client-psk.c, doc/examples/ex-client-resume.c, - doc/examples/ex-client-srp.c, doc/examples/ex-client-tlsia.c, - doc/examples/ex-client1.c, lib/gnutls_algorithms.c, - lib/gnutls_rsa_export.c, lib/openpgp/output.c, lib/x509/output.c, - lib/x509/privkey.c, src/cli.c, src/common.c, src/serv.c, - src/tls_test.c, tests/dhepskself.c: Fix warnings. - -2009-01-07 Simon Josefsson - - * build-aux/gendocs.sh, doc/gendocs_template, gl/Makefile.am, - gl/m4/errno_h.m4, gl/m4/extensions.m4, gl/m4/getaddrinfo.m4, - gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, gl/m4/inttypes_h.m4, - gl/m4/lib-link.m4, gl/m4/manywarnings.m4, gl/m4/multiarch.m4, - gl/m4/printf.m4, gl/m4/size_max.m4, gl/m4/stdint.m4, - gl/m4/stdint_h.m4, gl/m4/wchar.m4, gl/m4/wchar_t.m4, - gl/m4/wint_t.m4, gl/m4/xsize.m4, gl/stdint.in.h, gl/stdlib.in.h, - gl/sys_select.in.h, gl/tests/Makefile.am, - gl/tests/test-select-in.sh, gl/unistd.in.h, gl/version-etc.c, - gl/wchar.in.h, lib/gl/Makefile.am, lib/gl/m4/codeset.m4, - lib/gl/m4/errno_h.m4, lib/gl/m4/extensions.m4, - lib/gl/m4/gettext.m4, lib/gl/m4/glibc2.m4, lib/gl/m4/glibc21.m4, - lib/gl/m4/gnulib-cache.m4, lib/gl/m4/gnulib-comp.m4, - lib/gl/m4/iconv.m4, lib/gl/m4/intdiv0.m4, lib/gl/m4/intlmacosx.m4, - lib/gl/m4/intmax.m4, lib/gl/m4/inttypes-pri.m4, - lib/gl/m4/inttypes_h.m4, lib/gl/m4/lcmessage.m4, - lib/gl/m4/lib-link.m4, lib/gl/m4/multiarch.m4, lib/gl/m4/nls.m4, - lib/gl/m4/po.m4, lib/gl/m4/printf-posix.m4, lib/gl/m4/printf.m4, - lib/gl/m4/progtest.m4, lib/gl/m4/size_max.m4, lib/gl/m4/stdint.m4, - lib/gl/m4/stdint_h.m4, lib/gl/m4/threadlib.m4, - lib/gl/m4/uintmax_t.m4, lib/gl/m4/visibility.m4, - lib/gl/m4/wchar.m4, lib/gl/m4/wchar_t.m4, lib/gl/m4/wint_t.m4, - lib/gl/m4/xsize.m4, lib/gl/stdint.in.h, lib/gl/stdlib.in.h, - lib/gl/tests/Makefile.am, lib/gl/unistd.in.h, lib/gl/wchar.in.h, - libextra/gl/Makefile.am, libextra/gl/m4/extensions.m4, - libextra/gl/m4/gnulib-cache.m4, libextra/gl/m4/gnulib-comp.m4, - libextra/gl/m4/lib-link.m4: Update gnulib files. - -2009-01-07 Simon Josefsson - - * NEWS: Fix NEWS entry. - -2009-01-07 Simon Josefsson - - * tests/sha2/sha2: Fix self-test with new certtool --verify-chain - output. - -2009-01-06 Daniel Kahn Gillmor - - * NEWS: added NEWS item about MD5 deprecation - -2009-01-06 Simon Josefsson - - * tests/pkcs1-padding/pkcs1-pad: Fix expect strings to compensate - for new certtool -e output. - -2009-01-06 Simon Josefsson - - * NEWS, src/certtool.c: certtool: Make --verify-chain use libgnutls - verification algorithm. - -2009-01-06 Simon Josefsson - - * tests/chainverify.c: Test chain with EE cert signed using RSA-MD5. - -2009-01-06 Daniel Kahn Gillmor - - * lib/x509/verify.c: actually deprecate MD5 and MD2 signatures - during X.509 verification by treating them as invalid unless the - GNUTLS_VERIFY_ALLOW_SIGN_RSA_{MD5,MD2} flags are present. - -2008-12-12 Simon Josefsson - - * NEWS: Add NEWS entries from 2.6.3. - -2008-12-12 Simon Josefsson - - * tests/crq_key_id.c: Fix. - -2008-12-12 Simon Josefsson - - * tests/crq_key_id.c: Make it compile. Speed up key generation. - -2008-12-12 Simon Josefsson - - * tests/crq_key_id.c: Indent. - -2008-12-12 Simon Josefsson - - * NEWS, tests/Makefile.am, tests/crq_key_id.c: Add crq_key_id - self-test from David Marín Carreño. - -2008-12-11 Simon Josefsson - - * configure.ac: Update manywarnings usage. - -2008-12-11 Simon Josefsson - - * NEWS: Add. - -2008-12-11 Simon Josefsson - - * lib/x509/output.c: Print public key id for certificate requests - too. - -2008-12-11 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2008-12-11 Simon Josefsson - - * configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump versions. - -2008-12-11 Simon Josefsson - - * AUTHORS, NEWS, lib/includes/gnutls/x509.h, lib/x509/crq.c: gnutls: - New interface to get key id for certificate requests. Patch from - David Marín Carreño in - - . - -2008-12-10 Simon Josefsson - - * ChangeLog: Generated. - -2008-12-10 Simon Josefsson - - * NEWS: Version 2.7.3. - -2008-12-10 Simon Josefsson - - * tests/chainverify.c: Check ca=false with flags too. - -2008-12-10 Simon Josefsson - - * gl/override/tests/test-lseek.sh.diff, gl/tests/test-lseek.sh, - lib/gl/tests/test-lseek.sh: Disable parts of gnulib self-tests that - fail on mingw. - -2008-12-10 Simon Josefsson - - * lib/gl/tests/test-lseek.c, maint.mk: Update gnulib files. - -2008-12-10 Simon Josefsson - - * gl/override/tests/test-lseek.c.diff, - gl/override/tests/test-select-in.sh.diff, gl/tests/test-lseek.c, - gl/tests/test-select-in.sh: Disable parts of gnulib self-tests that - fail on mingw. - -2008-12-10 Simon Josefsson - - * doc/examples/ex-cxx.cpp: Drop config.h, not needed (hopefully?) - and breaks mingw due to rpl_gmtime. - -2008-12-10 Simon Josefsson - - * src/Makefile.am: Certtool need libgnutls etc for - libcmd-certtool.la too, due to certtool-cfg.c. - -2008-12-10 Simon Josefsson - - * tests/x509self.c: Fix comments. - -2008-12-10 Simon Josefsson - - * NEWS: Add. - -2008-12-10 Simon Josefsson - - * NEWS: Add. - -2008-12-10 Simon Josefsson - - * tests/cve-2008-4989.c: Align with Nikos' patch. - -2008-12-10 Simon Josefsson - - * lib/opencdk/Makefile.am, lib/opencdk/armor.c, - lib/opencdk/keydb.c, lib/opencdk/literal.c, lib/opencdk/misc.c, - lib/opencdk/new-packet.c, lib/opencdk/read-packet.c, - lib/opencdk/sig-check.c, lib/opencdk/stream.c: Revert "Fix warnings - in opencdk." This reverts commit 59cddc711e55bbd094bdf95986277fb33ba964ee. - -2008-12-10 Simon Josefsson - - * lib/x509/verify.c: Revert last commit. - -2008-12-10 Simon Josefsson - - * tests/chainverify.c: Add GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag - when needed. - -2008-12-10 Simon Josefsson - - * tests/chainverify.c: Add hbci chain. - -2008-12-10 Simon Josefsson - - * tests/chainverify.c: Fix comments. - -2008-12-10 Simon Josefsson - - * tests/chainverify.c: Fix order to match comments. - -2008-12-10 Simon Josefsson - - * tests/chainverify.c: Don't fail on expect errors, to allow more - information to be collected. - -2008-12-10 Simon Josefsson - - * NEWS, lib/x509/verify.c: Revert Nikos revert, and fix verification - hopefully better. The new logic is to include the CA cert in - validation, but short-cut full validation of trusted certificates. - -2008-12-10 Simon Josefsson - - * tests/chainverify.c: Add chain with CA having a basic constraint - saying CA=FALSE. - -2008-12-10 Simon Josefsson - - * tests/cve-2008-4989.c: Add note. - -2008-12-10 Simon Josefsson - - * NEWS, tests/Makefile.am, tests/chainverify.c: Add self-test of - chain verification logic. - -2008-12-09 Simon Josefsson - - * tests/libgcrypt.supp: Ignore more. - -2008-12-05 Simon Josefsson - - * NEWS: Add. - -2008-12-05 Nikos Mavrogiannopoulos - - * lib/x509/verify.c: reintroduced the self signed certificate - removal code. This time shouldn't have the drawbacks that used to. - -2008-12-05 Simon Josefsson - - * lib/gnutls_global.c: Disable secmem rather than overriding - libgcrypt memory allocators. Suggested by Werner Koch in - - . - -2008-12-04 Nikos Mavrogiannopoulos - - * lib/gnutls_global.c: rearranged initialization stuff based on - Werner's suggestions. - -2008-12-04 Nikos Mavrogiannopoulos - - * src/certtool.c: gcry_control (GCRYCTL_ENABLE_QUICK_RANDOM, 0) is - being called after libgcrypt initialization (gnutls_global_init). - -2008-12-03 Simon Josefsson - - * lib/opencdk/Makefile.am, lib/opencdk/armor.c, - lib/opencdk/keydb.c, lib/opencdk/literal.c, lib/opencdk/misc.c, - lib/opencdk/new-packet.c, lib/opencdk/read-packet.c, - lib/opencdk/sig-check.c, lib/opencdk/stream.c: Fix warnings in - opencdk. - -2008-12-03 Simon Josefsson - - * gl/m4/manywarnings.m4: Add. - -2008-12-01 Simon Josefsson - - * configure.ac, gl/Makefile.am, gl/m4/gnulib-cache.m4, - gl/m4/gnulib-comp.m4, gl/m4/include_next.m4, gl/m4/warnings.m4, - gl/stdint.in.h, gl/sys_time.in.h, lib/gl/m4/include_next.m4, - lib/gl/stdint.in.h: Update gnulib files. - -2008-11-29 Nikos Mavrogiannopoulos - - * tests/x509self.c: Incorporated patch (with modifications) from Joe - Orton that also checks the rehandshake capabilities. - -2008-11-25 Simon Josefsson - - * lib/opencdk/Makefile.am, lib/openpgp/Makefile.am, - libextra/Makefile.am, tests/Makefile.am: Fix minitasn1 -I's. - -2008-11-25 Simon Josefsson - - * lib/x509/Makefile.am: Fix minitasn1 -I. - -2008-11-25 Simon Josefsson - - * lib/gnutls_buffers.c: Fix compiler warning. - -2008-11-23 Simon Josefsson - - * src/Makefile.am: Libreadline is needed by libcmd_certtool.la, not - certtool. Reported by Arfrever Frehtes Taifersar Arahesis - in - - . - -2008-11-23 Nikos Mavrogiannopoulos - - * lib/opencdk/context.h, lib/opencdk/literal.c, lib/opencdk/misc.c, - lib/opencdk/new-packet.c, lib/opencdk/opencdk.h, - lib/opencdk/read-packet.c: Converted non-C compliant code to - standard C. The usage of structures like: struct x { int el1; char str[1]; } and the trick of using a single allocation for str and the structure - itself by allocating sizeof(x) + strlen()-1, are questionable. They - were converted to: struct x { int el1; char *str; } and there is a single allocation of sizeof(x)+strlen() but then the - str pointer is updated to point to the rest of the data. - -2008-11-23 Nikos Mavrogiannopoulos - - * lib/gnutls_buffers.c, lib/gnutls_int.h, lib/gnutls_str.c, - lib/gnutls_str.h, lib/x509/dn.c: When reading data from a buffer - (gnutls_string) avoid memmoving all remaining data. This will speed - up short byte reads. - -2008-11-21 Nikos Mavrogiannopoulos - - * doc/TODO: reorganized goals - -2008-11-21 Nikos Mavrogiannopoulos - - * src/cli.c: return non zero error code on error conditions. - -2008-11-21 Nikos Mavrogiannopoulos - - * doc/certtool.cfg: better grouping of configuration directives - -2008-11-21 Nikos Mavrogiannopoulos - - * : commit 8b14ab18cf5e5214ac3d28412e0c503e83a753c1 Author: Nikos - Mavrogiannopoulos Date: Fri Nov 21 21:02:45 - 2008 +0200 - -2008-11-18 Simon Josefsson - - * lib/gnutls_compress.c: Clean up LZO initialization. - -2008-11-18 Simon Josefsson - - * lib/auth_cert.c: Don't use // comments. - -2008-11-18 Simon Josefsson - - * src/Makefile.am: Change link order, so that gnulib is last. - -2008-11-18 Simon Josefsson - - * maint.mk: Update gnulib files. - -2008-11-18 Simon Josefsson - - * lib/po/LINGUAS: Sync with TP. - -2008-11-18 Simon Josefsson - - * lib/po/LINGUAS: Sync with TP. - -2008-11-18 Simon Josefsson - - * lib/po/LINGUAS, lib/po/ms.po.in: Sync with TP. - -2008-11-18 Simon Josefsson - - * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump versions. - -2008-11-18 Simon Josefsson - - * ChangeLog: Generated. - -2008-11-18 Simon Josefsson - - * NEWS: Version 2.7.2. - -2008-11-18 Simon Josefsson - - * doc/reference/Makefile.am: Add deprecated guard for libtasn1. - -2008-11-18 Simon Josefsson - - * NEWS, lib/minitasn1/coding.c, lib/minitasn1/decoding.c, - lib/minitasn1/element.c, lib/minitasn1/element.h, - lib/minitasn1/errors.c, lib/minitasn1/gstr.h, - lib/minitasn1/libtasn1.h, lib/minitasn1/parser_aux.c, - lib/minitasn1/parser_aux.h, lib/minitasn1/structure.c, - lib/minitasn1/structure.h: Sync with libtasn1 v1.7. - -2008-11-18 Simon Josefsson - - * doc/examples/Makefile.am, lib/Makefile.am, - lib/openpgp/Makefile.am, libextra/Makefile.am: Fix WARN_CFLAGS uses. - -2008-11-18 Simon Josefsson - - * lib/gnutls_compress.c: Fix warnings. - -2008-11-18 Simon Josefsson - - * tests/Makefile.am: Respect ENABLE_OPENSSL. - -2008-11-18 Simon Josefsson - - * configure.ac: Move gnulib EARLY early. - -2008-11-18 Simon Josefsson - - * configure.ac, lib/configure.ac, lib/m4/hooks.m4, - lib/m4/output-def.m4, libextra/configure.ac, m4/output-def.m4: Move - C++ and -output-def detection. - -2008-11-18 Simon Josefsson - - * configure.ac, lib/configure.ac, lib/m4/hooks.m4, - lib/m4/linker-script.m4, libextra/configure.ac, m4/linker-script.m4: - Fix linker script test. - -2008-11-18 Simon Josefsson - - * configure.ac: Fix typo. - -2008-11-18 Simon Josefsson - - * configure.ac, libextra/m4/hooks.m4: Print Openssl status. - -2008-11-18 Simon Josefsson - - * configure.ac, lib/m4/hooks.m4: Print C++ status. - -2008-11-18 Simon Josefsson - - * configure.ac: Cleanup guile tests. - -2008-11-17 Simon Josefsson - - * gl/m4/warnings.m4: Update gnulib files. - -2008-11-17 Simon Josefsson - - * configure.ac: Rewrite warning initializations. - -2008-11-17 Simon Josefsson - - * configure.ac: Typo. - -2008-11-17 Simon Josefsson - - * gl/m4/warnings.m4: Update gnulib files. - -2008-11-17 Simon Josefsson - - * doc/examples/examples.h: Add. - -2008-11-17 Simon Josefsson - - * configure.ac, doc/examples/Makefile.am, doc/examples/ex-alert.c, - doc/examples/ex-client-psk.c, doc/examples/ex-pkcs12.c, - doc/examples/ex-rfc2818.c, doc/examples/ex-session-info.c, - doc/examples/ex-verify.c, doc/examples/ex-x509-info.c, - doc/examples/tcp.c, gl/gettext.h, gl/override/lib/gettext.h.diff, - lib/gl/gettext.h, lib/gl/override/lib/gettext.h.diff, - lib/gnutls_hash_int.c, lib/gnutls_hash_int.h, lib/gnutls_state.c, - lib/gnutls_str.h, lib/openpgp/output.c, lib/x509/Makefile.am, - lib/x509/dn.c, lib/x509/output.c, lib/x509/privkey.c, - libextra/fipsmd5.c, libextra/gnutls_extra.c, - libextra/gnutls_openssl.c, src/Makefile.am, src/cli.c, - src/common.h, src/crypt.c, src/prime.c, src/psk.c, src/serv.c, - src/tls_test.c, tests/Makefile.am, tests/anonself.c, - tests/crypto_rng.c, tests/dhepskself.c, tests/dn.c, - tests/finished.c, tests/gc.c, tests/mini.c, tests/openpgpself.c, - tests/pkcs12_s2k.c, tests/pskself.c, tests/resume.c, - tests/set_pkcs12_cred.c, tests/tlsia.c, tests/utils.c, - tests/utils.h, tests/x509dn.c, tests/x509self.c, - tests/x509signself.c: Use more warnings. Fix many warnings. - -2008-11-17 Simon Josefsson - - * gl/m4/warnings.m4, gl/override/tests/test-select-out.sh.diff, - gl/tests/test-select-out.sh: Update gnulib files. - -2008-11-17 Simon Josefsson - - * lib/includes/gnutls/compat.h, lib/includes/gnutls/crypto.h, - lib/includes/gnutls/gnutlsxx.h, lib/includes/gnutls/openpgp.h, - lib/includes/gnutls/pkcs12.h, lib/includes/gnutls/x509.h: Fix - cosmetic nits in header files. - -2008-11-17 Simon Josefsson - - * NEWS, lib/includes/gnutls/compat.h, - lib/includes/gnutls/gnutls.h.in: Fix namespace of version symbols. - -2008-11-17 Simon Josefsson - - * NEWS: Add. - -2008-11-17 Simon Josefsson - - * lib/includes/gnutls/gnutls.h.in: Move #include's outside of C++ - markers. - -2008-11-17 Simon Josefsson - - * src/cli-gaa.c, src/cli-gaa.h, src/serv-gaa.c, src/serv-gaa.h: - Generated. - -2008-11-17 Simon Josefsson - - * src/common.c: Work around gnulib+mingw problem. - -2008-11-17 Simon Josefsson - - * src/cli.gaa, src/common.h, src/serv.c, src/serv.gaa: Never include - config.h in *.h files. - -2008-11-17 Simon Josefsson - - * gl/m4/hostent.m4, gl/m4/servent.m4: Update gnulib files. - -2008-11-17 Simon Josefsson - - * gl/override/tests/test-select-out.sh.diff, - gl/tests/test-select-out.sh: Work around reported bug in gnulib - self-tests. - -2008-11-17 Simon Josefsson - - * gl/m4/getaddrinfo.m4, gl/m4/gnulib-comp.m4, gl/m4/sockets.m4, - gl/tests/test-select-out.sh, lib/gl/m4/sockets.m4: Update gnulib - files. - -2008-11-17 Simon Josefsson - - * Makefile.am, build-aux/gnupload, gl/m4/getaddrinfo.m4, - gl/m4/netdb_h.m4, gl/netdb.in.h, gl/tests/sockets.h, - lib/gl/Makefile.am, lib/gl/m4/gnulib-cache.m4, - lib/gl/m4/gnulib-comp.m4, lib/gl/m4/netdb_h.m4, lib/gl/netdb.in.h, - lib/gl/sockets.h, lib/gl/tests/Makefile.am, - libextra/gl/Makefile.am, libextra/gl/m4/gnulib-cache.m4, - libextra/gl/m4/gnulib-comp.m4: Update gnulib files. - -2008-11-17 Simon Josefsson - - * lib/gnutls_auth.c: Make it build. - -2008-11-15 Nikos Mavrogiannopoulos - - * lib/gnutls_auth.c: Corrected memory leak in - _gnutls_free_auth_info(). Trace and patch by Michael Weiser. - -2008-11-14 Simon Josefsson - - * tests/Makefile.am: Disable openpgp-keyring when not building - openpgp. - -2008-11-14 Simon Josefsson - - * tests/Makefile.am: Add -I for libextra too. - -2008-11-14 Simon Josefsson - - * lib/gnutlsxx.cpp: Make it compile with --disable-openpgp. - -2008-11-14 Simon Josefsson - - * tests/resume.c: Fix warning. - -2008-11-14 Simon Josefsson - - * lib/mpi-libgcrypt.c: Don't return from void function. Reported by - Jeff Cai in - https://savannah.gnu.org/support/?106549 - -2008-11-14 Simon Josefsson - - * lib/gnutls_int.h, libextra/ext_inner_application.c, - libextra/gnutls_ia.c: Include gnutls/extra.h at the right places. - -2008-11-14 Simon Josefsson - - * lib/mac-libgcrypt.c: Don't return from void function. Reported by - Jeff Cai in - https://savannah.gnu.org/support/?106549 - -2008-11-14 Simon Josefsson - - * tests/Makefile.am, tests/pkcs12-decode/Makefile.am, - tests/pkcs12-decode/pkcs12_s2k.c, tests/pkcs12_s2k.c: Move - pkcs12_s2k.c test to top-level to avoid -I/etc flag duplication. - -2008-11-14 Simon Josefsson - - * tests/pkcs12-decode/pkcs12: Test pkcs12_2certs.p12 too. - -2008-11-14 Simon Josefsson - - * tests/pkcs12-decode/Makefile.am: Dist pkcs12_2certs.p12. - -2008-11-14 Simon Josefsson - - * doc/Makefile.am: Dist README.gaa. - -2008-11-14 Simon Josefsson - - * doc/Makefile.am: Remove README.autoconf. - -2008-11-14 Simon Josefsson - - * lib/m4/hooks.m4: Run AC_PROG_CXX only when needed. Reported by - Daniel Black in - . - -2008-11-13 Simon Josefsson - - * configure.ac: Use more warnings. - -2008-11-13 Simon Josefsson - - * libextra/gnutls_openssl.c: Fix warning. - -2008-11-13 Simon Josefsson - - * lib/Makefile.am: Drop incorrect -I. - -2008-11-13 Simon Josefsson - - * doc/README.gaa: Add. - -2008-11-13 Simon Josefsson - - * configure.ac, doc/examples/ex-serv-export.c, - libextra/gnutls_ia.c, src/Makefile.am, src/certtool-gaa.c, - src/cli-gaa.c, src/crypt-gaa.c, src/psk-gaa.c, src/serv-gaa.c, - src/tests.c, src/tls_test-gaa.c: Use more warnings. Fix warnings. - -2008-11-12 Simon Josefsson - - * lib/auth_cert.c, lib/gnutls_mpi.c, lib/gnutls_pk.c, - lib/mac-libgcrypt.c: Fix warnings. - -2008-11-12 Simon Josefsson - - * cfg.mk: Add -Werror again, code is fixed. - -2008-11-12 Simon Josefsson - - * doc/examples/Makefile.am: Use warning flags, but not for C++ code. - -2008-11-12 Simon Josefsson - - * tests/Makefile.am, tests/cve-2008-4989.c: Use more warnings. Fix - warnings. - -2008-11-12 Simon Josefsson - - * src/Makefile.am, src/certtool-cfg.h, src/certtool-gaa.c: Use more - warnings. Fix warnings. - -2008-11-12 Simon Josefsson - - * lib/openpgp/Makefile.am, libextra/Makefile.am, - libextra/gl/Makefile.am, libextra/gl/m4/extensions.m4, - libextra/gl/m4/gnulib-cache.m4, libextra/gl/m4/gnulib-comp.m4: Use - more warning flags. Need extensions in libextra. - -2008-11-12 Simon Josefsson - - * lib/gnutls_buffers.c, lib/gnutls_extensions.c, - lib/gnutls_extensions.h, lib/gnutls_handshake.c, lib/gnutls_mpi.c, - lib/gnutls_x509.c: Fix warnings. - -2008-11-12 Simon Josefsson - - * lib/includes/gnutls/gnutls.h.in: Add prototype for - gnutls_certificate_set_x509_simple_pkcs12_mem. - -2008-11-12 Simon Josefsson - - * lib/x509/Makefile.am: Use WARN_CFLAGS. - -2008-11-12 Simon Josefsson - - * lib/ext_server_name.c, lib/gnutls_cipher.c, - lib/gnutls_constate.c, lib/gnutls_extensions.c, - lib/gnutls_handshake.c, lib/gnutls_record.c, - lib/gnutls_supplemental.c, lib/gnutls_v2_compat.c: Fix warnings. - -2008-11-12 Simon Josefsson - - * Makefile.am: Build gl/ later. - -2008-11-12 Simon Josefsson - - * cfg.mk: Drop -Werror because gnutls code doesn't compile with it. - -2008-11-12 Simon Josefsson - - * configure.ac, lib/Makefile.am: Disable pointer sign warnings. Use - WARN_CFLAGS more. - -2008-11-12 Simon Josefsson - - * configure.ac: Better warning flag hangling. - -2008-11-12 Simon Josefsson - - * cfg.mk, doc/README.GIT: Drop --enable-developer-mode. - -2008-11-12 Simon Josefsson - - * configure.ac: Remove debug code. - -2008-11-12 Simon Josefsson - - * cfg.mk, configure.ac: Use warnings module. - -2008-11-12 Simon Josefsson - - * cfg.mk, configure.ac, gl/m4/gnulib-comp.m4, gl/m4/warnings.m4, - lib/configure.ac, libextra/configure.ac: Use gnulib warnings module. - -2008-11-12 Simon Josefsson - - * NEWS: Add v2.6.2 entries. - -2008-11-12 Simon Josefsson - - * lib/m4/hooks.m4, lib/m4/output-def.m4: Use output-def.m4. - -2008-11-12 Simon Josefsson - - * lib/gnutls.pc.in, libextra/gnutls-extra.pc.in: Add URL fields. - -2008-11-12 Simon Josefsson - - * lib/m4/hooks.m4, lib/m4/linker-script.m4: Fix version script - detection. - -2008-11-12 Simon Josefsson - - * configure.ac, lib/configure.ac, lib/m4/hooks.m4, - lib/m4/linker-script.m4, libextra/configure.ac, m4/valgrind.m4: Use - external m4 files for shared tests. - -2008-11-12 Simon Josefsson - - * NEWS: Fix. - -2008-11-12 Simon Josefsson - - * tests/cve-2008-4989.c: Frob expected verify status code. With - latest verify.c patch it just say the chain is invalid, rather than - complaining about missing signer certificate. This is arguable more - correct. - -2008-11-12 Simon Josefsson - - * lib/x509/verify.c: Remove check of last certificate in path is - self signed. Causes crashes further down in the code for - certificate chains that only contain one self-signed certificate. - Still protects against the GNUTLS-SA-2008-3 vulnerabillity. - Reported by Michael Meskes in - . - -2008-11-12 Simon Josefsson - - * gl/tests/test-select-out.sh: Comment out broken test. - -2008-11-11 Simon Josefsson - - * gl/Makefile.am, gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, - gl/m4/warnings.m4, lib/gl/Makefile.am, lib/gl/m4/gnulib-cache.m4, - lib/gl/m4/gnulib-comp.m4, lib/gl/m4/warnings.m4: Update gnulib - files. - -2008-11-11 Simon Josefsson - - * Makefile.am: Need more -I's. - -2008-11-11 Simon Josefsson - - * gl/Makefile.am, gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, - lib/gl/Makefile.am, lib/gl/m4/gnulib-cache.m4, - lib/gl/m4/gnulib-comp.m4, lib/gl/m4/warnings.m4: Update gnulib - files. - -2008-11-11 Simon Josefsson - - * gl/Makefile.am, gl/fseeko.c, gl/m4/getaddrinfo.m4, - gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, gl/m4/netdb_h.m4, - gl/m4/printf.m4, gl/netdb.in.h, gl/tests/test-select-fd.c, - gl/tests/test-select-in.sh, gl/tests/test-select-out.sh, - lib/gl/Makefile.am, lib/gl/fseeko.c, lib/gl/m4/netdb_h.m4, - lib/gl/m4/printf.m4, lib/gl/netdb.in.h: Update gnulib files. - -2008-11-11 Simon Josefsson - - * tests/cve-2008-4989.c: Also test chain length of 1 since the - security patch caused a crash. - -2008-11-11 Simon Josefsson - - * tests/libgcrypt.supp: Add another gcrypt leak. - -2008-11-11 Simon Josefsson - - * lib/gnutls_extensions.c, lib/gnutls_extensions.h, - lib/gnutls_global.c: Fix mem leak. - -2008-11-11 Simon Josefsson - - * tests/cve-2008-4989.c: Fix mem leaks. - -2008-11-11 Simon Josefsson - - * NEWS, tests/Makefile.am, tests/cve-2008-4989.c: Add - cve-2008-4989.c self-test. - -2008-11-10 Simon Josefsson - - * gl/tests/gettimeofday.c, gl/tests/test-gettimeofday.c, - gl/tests/test-select-fd.c, gl/tests/test-select-in.sh, - gl/tests/test-select-out.sh, gl/tests/test-select-stdin.c: Update - gnulib files. - -2008-11-10 Simon Josefsson - - * gl/m4/gettimeofday.m4, gl/m4/gnulib-comp.m4, - gl/m4/sys_ioctl_h.m4, gl/tests/Makefile.am, - lib/gl/m4/include_next.m4, lib/gl/sys_stat.in.h: Update gnulib - files. - -2008-11-10 Simon Josefsson - - * NEWS, THANKS, lib/x509/verify.c: Merge in v2.6.1 fixes. - -2008-11-07 Simon Josefsson - - * NEWS, lib/m4/hooks.m4: Use modern -Wl,--version-script check. - -2008-11-07 Simon Josefsson - - * doc/cyclo/Makefile.am: Cover more files. - -2008-11-07 Simon Josefsson - - * lib/opencdk/opencdk.h: Fix C++ rule, for pmccabe2html. - -2008-11-07 Simon Josefsson - - * build-aux/pmccabe.css, build-aux/pmccabe2html, configure.ac, - doc/Makefile.am, doc/cyclo/Makefile.am, gl/Makefile.am, - gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, gl/m4/pmccabe2html.m4, - gl/sys_stat.in.h: Add cyclomatic code complexity charts. - -2008-11-07 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2008-11-07 Simon Josefsson - - * NEWS, lib/m4/hooks.m4, libextra/configure.ac: Need LZO detection - in libgnutls. - -2008-11-05 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_x509.c, tests/Makefile.am, - tests/set_pkcs12_cred.c: * Added gnutls_certificate_set_x509_simple_pkcs12_mem * Made gnutls_certificate_set_x509_simple_pkcs12_file() more - advanced. It will return a corresponding certificate and key pair. - [The previous version would return the first ones found]. Eliminated - memory leaks on error conditions on these functions. - -2008-11-05 Nikos Mavrogiannopoulos - - * .gitignore: ignore more stuff - -2008-11-05 Nikos Mavrogiannopoulos - - * NEWS, doc/certtool.cfg, src/certtool-cfg.c, src/certtool.c: - certtool: allow setting arbitrary key purpose object identifiers. - -2008-11-05 Simon Josefsson - - * doc/README.autoconf: Remove obsolete instructions. - -2008-11-04 Simon Josefsson - - * lib/gnutls_srp.c, lib/gnutls_ui.c: Doc fix. - -2008-11-04 Simon Josefsson - - * NEWS: Add. - -2008-11-04 Simon Josefsson - - * src/certtool.c: Use error instead of fprintf. - -2008-11-04 Simon Josefsson - - * lib/includes/gnutls/gnutls.h.in: Indent differently for gtk-doc. - -2008-11-04 Simon Josefsson - - * doc/reference/Makefile.am: Ignore gnulib headers. - -2008-11-04 Simon Josefsson - - * m4/ax_create_stdint_h.m4: Remove. - -2008-11-04 Simon Josefsson - - * doc/reference/Makefile.am: Ignore config.h. - -2008-11-04 Simon Josefsson - - * tests/Makefile.am: Drop pointless gc_LDADD. - -2008-11-04 Simon Josefsson - - * tests/Makefile.am: Drop removed -Ilgl. - -2008-11-04 Simon Josefsson - - * NEWS, doc/Makefile.am, doc/fdl-1.3.texi, doc/fdl.texi, - doc/gnutls.texi, gl/Makefile.am, gl/m4/gnulib-cache.m4, - gl/m4/gnulib-comp.m4, gl/m4/include_next.m4: Update gnulib files. - Use GFDLv1.3 for manual. - -2008-11-04 Simon Josefsson - - * NEWS: Add. - -2008-11-04 Simon Josefsson - - * lib/includes/gnutls/gnutls.h.in: Fix typo. - -2008-11-04 Simon Josefsson - - * lib/includes/gnutls/gnutls.h.in: Sync gnutls_srp_set_prime_bits - prototype with code. - -2008-11-04 Simon Josefsson - - * lib/includes/gnutls/gnutls.h.in: Add forgotten prototype for - gnutls_srp_server_get_username. Reported by Kevin Quick. - -2008-11-03 Nikos Mavrogiannopoulos - - * lib/gnutls_ui.c: documented that gnutls_dh_set_prime_bits() has no - effect in server side. - -2008-11-03 Nikos Mavrogiannopoulos - - * : commit fe191e360728fcee72cf5ba835f2301f1bf78b49 Author: Nikos - Mavrogiannopoulos Date: Mon Nov 3 21:44:38 - 2008 +0200 - -2008-11-03 Simon Josefsson - - * lib/gl/Makefile.am, lib/gl/m4/gnulib-comp.m4, - lib/gl/m4/memchr.m4, lib/gl/m4/memcmp.m4, lib/gl/memchr.c, - lib/gl/memcmp.c, lib/gl/tests/Makefile.am, - lib/gl/tests/test-memchr.c, lib/gl/tests/test-memcmp.c, maint.mk: - Update gnulib files. - -2008-11-03 Simon Josefsson - - * NEWS: Add. - -2008-11-03 Simon Josefsson - - * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, - libextra/configure.ac: Bump versions. - -2008-11-03 Simon Josefsson - - * lib/m4/hooks.m4: Check for C99 macros. - -2008-11-02 Nikos Mavrogiannopoulos - - * lib/minitasn1/decoding.c, lib/minitasn1/element.c, - lib/minitasn1/libtasn1.h, lib/minitasn1/parser_aux.c, - lib/minitasn1/parser_aux.h: * added BER octet string decoder from libtasn1. * added the tree generation optimizations. - -2008-11-02 Nikos Mavrogiannopoulos - - * src/certtool.c: * Some more verbose out. * Do not abort the pkcs12 structure parsing if one bag failed. - -2008-11-02 Nikos Mavrogiannopoulos - - * lib/x509/pkcs12.c: Reduce verbosity - -2008-11-02 Nikos Mavrogiannopoulos - - * lib/x509/pkcs12.c: print DER errors if any. - -2008-10-31 Simon Josefsson - - * doc/texinfo.css: Use white background. - -2008-10-31 Simon Josefsson - - * ChangeLog: Generated. - -2008-10-31 Simon Josefsson - - * NEWS: Version 2.7.1. - -2008-10-30 Simon Josefsson - - * guile/src/Makefile.am: Really fix -I's. - -2008-10-30 Simon Josefsson - - * guile/src/Makefile.am: Fix -I's. - -2008-10-30 Simon Josefsson - - * tests/Makefile.am: Add -lgnutls-extra for openpgp-keyring. - -2008-10-30 Simon Josefsson - - * gl/Makefile.am, gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, - gl/m4/sys_stat_h.m4, gl/sys_stat.in.h, gl/tests/Makefile.am, - gl/tests/test-sys_stat.c: Need more gnulib modules. - -2008-10-30 Simon Josefsson - - * gl/Makefile.am, gl/connect.c, gl/m4/gnulib-cache.m4, - gl/m4/gnulib-comp.m4, gl/recv.c, gl/send.c, gl/tests/Makefile.am, - gl/tests/connect.c, src/certtool.c, src/cli.c: Need more gnulib - modules. - -2008-10-30 Simon Josefsson - - * gl/Makefile.am, gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, - gl/perror.c, gl/tests/Makefile.am, gl/tests/perror.c: Update gnulib - files. - -2008-10-30 Simon Josefsson - - * .gitignore: Update. - -2008-10-30 Simon Josefsson - - * doc/.gitignore, lib/po/.gitignore, libextra/.gitignore: Update. - -2008-10-30 Simon Josefsson - - * gl/Makefile.am, gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, - gl/m4/minmax.m4, gl/m4/read-file.m4, gl/minmax.h, gl/read-file.c, - gl/read-file.h, gl/tests/Makefile.am, gl/tests/test-read-file.c, - src/Makefile.am, src/cli.c, src/serv.c: Need more gnulib modules. - -2008-10-30 Simon Josefsson - - * gl/accept.c, gl/alloca.c, gl/bind.c, gl/close.c, gl/fclose.c, - gl/listen.c, gl/m4/close.m4, gl/m4/fclose.m4, gl/m4/perror.m4, - gl/m4/sockets.m4, gl/m4/sys_ioctl_h.m4, gl/m4/sys_select_h.m4, - gl/m4/sys_time_h.m4, gl/setsockopt.c, gl/socket.c, - gl/sys_select.in.h, gl/sys_time.in.h, gl/tests/connect.c, - gl/tests/ioctl.c, gl/tests/perror.c, gl/tests/sockets.c, - gl/tests/sockets.h, gl/tests/sys_ioctl.in.h, - gl/tests/test-perror.c, gl/tests/test-perror.sh, - gl/tests/test-select.c, gl/tests/test-sockets.c, - gl/tests/test-sys_select.c, gl/tests/test-sys_time.c, - gl/tests/w32sock.h, gl/winsock-select.c: Update gnulib files. - -2008-10-30 Simon Josefsson - - * gl/Makefile.am, gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, - gl/shutdown.c, gl/tests/Makefile.am, gl/tests/dummy.c, - gl/w32sock.h, lib/Makefile.am, src/common.h: Use sockets module. - -2008-10-30 Simon Josefsson - - * guile/src/Makefile.am: Fix. - -2008-10-30 Simon Josefsson - - * configure.ac, lib/gl/Makefile.am, lib/gl/m4/gnulib-cache.m4, - lib/gl/m4/gnulib-comp.m4, lib/gl/m4/sockets.m4, lib/gl/sockets.c, - lib/gl/sockets.h, lib/gl/tests/Makefile.am, - lib/gl/tests/test-sockets.c, lib/gnutls_buffers.c, - lib/gnutls_global.c: Better gnulib module usage. - -2008-10-30 Simon Josefsson - - * gl/m4/gnulib-comp.m4: Update gnulib files. - -2008-10-30 Simon Josefsson - - * configure.ac, configure.in: Rename. - -2008-10-30 Simon Josefsson - - * guile/src/Makefile.am, src/Makefile.am: Fixes. - -2008-10-30 Simon Josefsson - - * configure.in, lib/configure.ac, tests/Makefile.am: Fixes. - -2008-10-30 Simon Josefsson - - * configure.in: Remove. - -2008-10-30 Simon Josefsson - - * Makefile.am, configure.in, doc/Makefile.am, - doc/examples/Makefile.am, doc/reference/Makefile.am, - guile/src/Makefile.am, includes/Makefile.am, - includes/gnutls/compat.h, includes/gnutls/crypto.h, - includes/gnutls/extra.h, includes/gnutls/gnutls.h.in, - includes/gnutls/gnutlsxx.h, includes/gnutls/openpgp.h, - includes/gnutls/openssl.h, includes/gnutls/pkcs12.h, - includes/gnutls/x509.h, lib/Makefile.am, lib/configure.ac, - lib/includes/Makefile.am, lib/includes/gnutls/compat.h, - lib/includes/gnutls/crypto.h, lib/includes/gnutls/gnutls.h.in, - lib/includes/gnutls/gnutlsxx.h, lib/includes/gnutls/openpgp.h, - lib/includes/gnutls/pkcs12.h, lib/includes/gnutls/x509.h, - lib/opencdk/Makefile.am, lib/openpgp/Makefile.am, - lib/x509/Makefile.am, libextra/Makefile.am, libextra/configure.ac, - libextra/includes/Makefile.am, libextra/includes/gnutls/extra.h, - libextra/includes/gnutls/openssl.h, src/Makefile.am, - tests/Makefile.am, tests/hostname-check.README, - tests/hostname-check.c, tests/hostname-check/Makefile.am, - tests/hostname-check/README, tests/hostname-check/hostname-check.c, - tests/openpgp-keyring.c, tests/openpgp/Makefile.am, - tests/openpgp/keyring.c, tests/pkcs12-decode/Makefile.am: Separate - headers as well. Clean up -I's. - -2008-10-30 Simon Josefsson - - * guile/src/Makefile.am, tests/Makefile.am, - tests/pkcs12-decode/Makefile.am: Builds on my system now. - -2008-10-30 Simon Josefsson - - * NEWS: Add. - -2008-10-30 Simon Josefsson - - * configure.in, lib/gnutls_mem.h: Drop dmalloc and efence support. - -2008-10-30 Simon Josefsson - - * configure.in, lib/Makefile.am, lib/configure.ac, lib/m4/hooks.m4, - lib/openpgp/Makefile.am, lib/x509/Makefile.am, - libextra/Makefile.am, src/Makefile.am: Make it build better. - -2008-10-30 Simon Josefsson - - * configure.in, lib/Makefile.am, lib/m4/hooks.m4, - libextra/Makefile.am, src/Makefile.am: Fixes. - -2008-10-30 Simon Josefsson - - * cfg.mk, configure.in, includes/gnutls/gnutls.h.in, - lib/Makefile.am, lib/configure.ac, lib/m4/hooks.m4, - lib/openpgp/Makefile.am, lib/x509/Makefile.am: Make it build. - -2008-10-30 Simon Josefsson - - * lib/po/POTFILES.in: Fix paths. - -2008-10-30 Simon Josefsson - - * cfg.mk, lib/m4/hooks.m4: Build fixes. - -2008-10-30 Simon Josefsson - - * cfg.mk: Fix i18n stuff. - -2008-10-30 Simon Josefsson - - * lib/m4/hooks.m4, libextra/m4/hooks.m4: New files, forgotten in - last commit. - -2008-10-30 Simon Josefsson - - * lib/build-aux/config.rpath, lib/build-aux/link-warning.h, - lib/gl/Makefile.am, lib/gl/m4/gnulib-cache.m4, - libextra/build-aux/config.rpath: Update gnulib files. - -2008-10-30 Simon Josefsson - - * COPYING.LIB, Makefile.am, configure.in, lib/AUTHORS, lib/COPYING, - lib/ChangeLog, lib/Makefile.am, lib/NEWS, lib/README, - lib/configure.ac, lib/po/.gitignore, lib/po/LINGUAS, - lib/po/Makevars, lib/po/POTFILES.in, lib/po/de.po.in, - lib/po/fr.po.in, lib/po/ms.po.in, lib/po/nl.po.in, lib/po/pl.po.in, - lib/po/sv.po.in, lib/po/vi.po.in, libextra/AUTHORS, - libextra/COPYING, libextra/ChangeLog, libextra/Makefile.am, - libextra/NEWS, libextra/README, libextra/configure.ac, - libextra/gl/Makefile.am, libextra/gl/m4/gnulib-cache.m4, - libextra/gl/m4/gnulib-comp.m4, libextra/gl/m4/lib-ld.m4, - libextra/gl/m4/lib-link.m4, libextra/gl/m4/lib-prefix.m4, - po/.gitignore, po/LINGUAS, po/Makevars, po/POTFILES.in, - po/de.po.in, po/fr.po.in, po/ms.po.in, po/nl.po.in, po/pl.po.in, - po/sv.po.in, po/vi.po.in: More splitting updates. - -2008-10-30 Simon Josefsson - - * libextra/gl/Makefile.am, libextra/gl/m4/gnulib-cache.m4, - libextra/gl/m4/gnulib-comp.m4: Update gnulib files. - -2008-10-30 Simon Josefsson - - * gl/alloca.in.h, gl/asnprintf.c, gl/errno.in.h, gl/float+.h, - gl/float.in.h, gl/fseeko.c, gl/gettext.h, gl/lseek.c, - gl/m4/alloca.m4, gl/m4/errno_h.m4, gl/m4/float_h.m4, - gl/m4/fseeko.m4, gl/m4/intmax_t.m4, gl/m4/inttypes_h.m4, - gl/m4/longlong.m4, gl/m4/lseek.m4, gl/m4/malloc.m4, - gl/m4/printf.m4, gl/m4/realloc.m4, gl/m4/size_max.m4, - gl/m4/snprintf.m4, gl/m4/sockpfaf.m4, gl/m4/stdbool.m4, - gl/m4/stdint.m4, gl/m4/stdint_h.m4, gl/m4/stdio_h.m4, - gl/m4/stdlib_h.m4, gl/m4/string_h.m4, gl/m4/sys_socket_h.m4, - gl/m4/unistd_h.m4, gl/m4/vasnprintf.m4, gl/m4/wchar.m4, - gl/m4/wchar_t.m4, gl/m4/wint_t.m4, gl/m4/xsize.m4, - gl/printf-args.c, gl/printf-args.h, gl/printf-parse.c, - gl/printf-parse.h, gl/realloc.c, gl/size_max.h, gl/snprintf.c, - gl/stdbool.in.h, gl/stdint.in.h, gl/stdio-impl.h, gl/stdio-write.c, - gl/stdio.in.h, gl/stdlib.in.h, gl/string.in.h, gl/sys_socket.in.h, - gl/tests/dummy.c, gl/tests/test-alloca-opt.c, - gl/tests/test-errno.c, gl/tests/test-fseeko.c, - gl/tests/test-fseeko.sh, gl/tests/test-lseek.c, - gl/tests/test-lseek.sh, gl/tests/test-snprintf.c, - gl/tests/test-stdbool.c, gl/tests/test-stdint.c, - gl/tests/test-stdio.c, gl/tests/test-stdlib.c, - gl/tests/test-string.c, gl/tests/test-sys_socket.c, - gl/tests/test-unistd.c, gl/tests/test-vasnprintf.c, - gl/tests/test-wchar.c, gl/tests/verify.h, gl/unistd.in.h, - gl/vasnprintf.c, gl/vasnprintf.h, gl/wchar.in.h, gl/xsize.h: Update - gnulib files. - -2008-10-30 Simon Josefsson - - * Makefile.am, configure.in, gl/Makefile.am, gl/m4/gnulib-cache.m4, - gl/m4/gnulib-comp.m4, gl/tests/Makefile.am, lib/configure.ac, - libextra/Makefile.am, libextra/configure.ac: More splitting. - -2008-10-30 Simon Josefsson - - * build-aux/config.rpath, lib/gl/Makefile.am, - lib/gl/m4/gnulib-cache.m4, lib/gl/m4/gnulib-comp.m4, - lib/gl/m4/stdlib_h.m4, lib/gl/m4/sys_ioctl_h.m4, - lib/gl/m4/sys_socket_h.m4, lib/gl/stdlib.in.h, - lib/gl/sys_socket.in.h, lib/gl/sys_stat.in.h, - lib/gl/tests/Makefile.am, lib/gl/unistd.in.h: Update gnulib files. - -2008-10-30 Simon Josefsson - - * Makefile.am, build-aux/config.rpath, configure.in, - lgl/Makefile.am, lgl/alloca.in.h, lgl/asnprintf.c, lgl/asprintf.c, - lgl/byteswap.in.h, lgl/c-ctype.c, lgl/c-ctype.h, lgl/errno.in.h, - lgl/float+.h, lgl/float.in.h, lgl/fseeko.c, lgl/gettext.h, - lgl/lseek.c, lgl/m4/alloca.m4, lgl/m4/byteswap.m4, - lgl/m4/codeset.m4, lgl/m4/errno_h.m4, lgl/m4/extensions.m4, - lgl/m4/float_h.m4, lgl/m4/fseeko.m4, lgl/m4/func.m4, - lgl/m4/gettext.m4, lgl/m4/glibc2.m4, lgl/m4/glibc21.m4, - lgl/m4/gnulib-cache.m4, lgl/m4/gnulib-common.m4, - lgl/m4/gnulib-comp.m4, lgl/m4/gnulib-tool.m4, lgl/m4/iconv.m4, - lgl/m4/include_next.m4, lgl/m4/intdiv0.m4, lgl/m4/intl.m4, - lgl/m4/intldir.m4, lgl/m4/intlmacosx.m4, lgl/m4/intmax.m4, - lgl/m4/intmax_t.m4, lgl/m4/inttypes-pri.m4, lgl/m4/inttypes_h.m4, - lgl/m4/lcmessage.m4, lgl/m4/lib-ld.m4, lgl/m4/lib-link.m4, - lgl/m4/lib-prefix.m4, lgl/m4/lock.m4, lgl/m4/longlong.m4, - lgl/m4/lseek.m4, lgl/m4/malloc.m4, lgl/m4/memchr.m4, - lgl/m4/memcmp.m4, lgl/m4/memmem.m4, lgl/m4/memmove.m4, - lgl/m4/minmax.m4, lgl/m4/netdb_h.m4, lgl/m4/nls.m4, lgl/m4/po.m4, - lgl/m4/printf-posix.m4, lgl/m4/printf.m4, lgl/m4/progtest.m4, - lgl/m4/read-file.m4, lgl/m4/realloc.m4, lgl/m4/size_max.m4, - lgl/m4/snprintf.m4, lgl/m4/socklen.m4, lgl/m4/sockpfaf.m4, - lgl/m4/stdbool.m4, lgl/m4/stdint.m4, lgl/m4/stdint_h.m4, - lgl/m4/stdio_h.m4, lgl/m4/stdlib_h.m4, lgl/m4/strcase.m4, - lgl/m4/string_h.m4, lgl/m4/strings_h.m4, lgl/m4/strverscmp.m4, - lgl/m4/sys_ioctl_h.m4, lgl/m4/sys_socket_h.m4, - lgl/m4/sys_stat_h.m4, lgl/m4/threadlib.m4, lgl/m4/time_h.m4, - lgl/m4/time_r.m4, lgl/m4/uintmax_t.m4, lgl/m4/unistd_h.m4, - lgl/m4/vasnprintf.m4, lgl/m4/vasprintf.m4, lgl/m4/visibility.m4, - lgl/m4/wchar.m4, lgl/m4/wchar_t.m4, lgl/m4/wint_t.m4, - lgl/m4/xsize.m4, lgl/memchr.c, lgl/memcmp.c, lgl/memmem.c, - lgl/memmove.c, lgl/minmax.h, lgl/netdb.in.h, - lgl/override/lib/gc-libgcrypt.c.diff, lgl/printf-args.c, - lgl/printf-args.h, lgl/printf-parse.c, lgl/printf-parse.h, - lgl/read-file.c, lgl/read-file.h, lgl/realloc.c, lgl/size_max.h, - lgl/snprintf.c, lgl/stdbool.in.h, lgl/stdint.in.h, - lgl/stdio-impl.h, lgl/stdio-write.c, lgl/stdio.in.h, - lgl/stdlib.in.h, lgl/str-two-way.h, lgl/strcasecmp.c, - lgl/string.in.h, lgl/strings.in.h, lgl/strncasecmp.c, - lgl/strverscmp.c, lgl/sys_socket.in.h, lgl/sys_stat.in.h, - lgl/tests/Makefile.am, lgl/tests/dummy.c, lgl/tests/intprops.h, - lgl/tests/test-alloca-opt.c, lgl/tests/test-byteswap.c, - lgl/tests/test-c-ctype.c, lgl/tests/test-errno.c, - lgl/tests/test-fseeko.c, lgl/tests/test-fseeko.sh, - lgl/tests/test-func.c, lgl/tests/test-lseek.c, - lgl/tests/test-lseek.sh, lgl/tests/test-memchr.c, - lgl/tests/test-memcmp.c, lgl/tests/test-netdb.c, - lgl/tests/test-read-file.c, lgl/tests/test-snprintf.c, - lgl/tests/test-stdbool.c, lgl/tests/test-stdint.c, - lgl/tests/test-stdio.c, lgl/tests/test-stdlib.c, - lgl/tests/test-string.c, lgl/tests/test-strings.c, - lgl/tests/test-strverscmp.c, lgl/tests/test-sys_socket.c, - lgl/tests/test-sys_stat.c, lgl/tests/test-time.c, - lgl/tests/test-unistd.c, lgl/tests/test-vasnprintf.c, - lgl/tests/test-vasprintf.c, lgl/tests/test-wchar.c, - lgl/tests/verify.h, lgl/time.in.h, lgl/time_r.c, lgl/unistd.in.h, - lgl/vasnprintf.c, lgl/vasnprintf.h, lgl/vasprintf.c, - lgl/wchar.in.h, lgl/xsize.h, lib/Makefile.am, lib/configure.ac, - lib/gl/Makefile.am, lib/gl/alloca.in.h, lib/gl/asnprintf.c, - lib/gl/asprintf.c, lib/gl/byteswap.in.h, lib/gl/c-ctype.c, - lib/gl/c-ctype.h, lib/gl/errno.in.h, lib/gl/float+.h, - lib/gl/float.in.h, lib/gl/fseeko.c, lib/gl/gettext.h, - lib/gl/lseek.c, lib/gl/m4/alloca.m4, lib/gl/m4/byteswap.m4, - lib/gl/m4/codeset.m4, lib/gl/m4/errno_h.m4, - lib/gl/m4/extensions.m4, lib/gl/m4/float_h.m4, lib/gl/m4/fseeko.m4, - lib/gl/m4/func.m4, lib/gl/m4/gettext.m4, lib/gl/m4/glibc2.m4, - lib/gl/m4/glibc21.m4, lib/gl/m4/gnulib-cache.m4, - lib/gl/m4/gnulib-common.m4, lib/gl/m4/gnulib-comp.m4, - lib/gl/m4/gnulib-tool.m4, lib/gl/m4/iconv.m4, - lib/gl/m4/include_next.m4, lib/gl/m4/intdiv0.m4, lib/gl/m4/intl.m4, - lib/gl/m4/intldir.m4, lib/gl/m4/intlmacosx.m4, lib/gl/m4/intmax.m4, - lib/gl/m4/intmax_t.m4, lib/gl/m4/inttypes-pri.m4, - lib/gl/m4/inttypes_h.m4, lib/gl/m4/lcmessage.m4, - lib/gl/m4/lib-ld.m4, lib/gl/m4/lib-link.m4, - lib/gl/m4/lib-prefix.m4, lib/gl/m4/lock.m4, lib/gl/m4/longlong.m4, - lib/gl/m4/lseek.m4, lib/gl/m4/malloc.m4, lib/gl/m4/memchr.m4, - lib/gl/m4/memcmp.m4, lib/gl/m4/memmem.m4, lib/gl/m4/memmove.m4, - lib/gl/m4/minmax.m4, lib/gl/m4/netdb_h.m4, lib/gl/m4/nls.m4, - lib/gl/m4/po.m4, lib/gl/m4/printf-posix.m4, lib/gl/m4/printf.m4, - lib/gl/m4/progtest.m4, lib/gl/m4/read-file.m4, - lib/gl/m4/realloc.m4, lib/gl/m4/size_max.m4, lib/gl/m4/snprintf.m4, - lib/gl/m4/socklen.m4, lib/gl/m4/sockpfaf.m4, lib/gl/m4/stdbool.m4, - lib/gl/m4/stdint.m4, lib/gl/m4/stdint_h.m4, lib/gl/m4/stdio_h.m4, - lib/gl/m4/stdlib_h.m4, lib/gl/m4/strcase.m4, lib/gl/m4/string_h.m4, - lib/gl/m4/strings_h.m4, lib/gl/m4/strverscmp.m4, - lib/gl/m4/sys_ioctl_h.m4, lib/gl/m4/sys_socket_h.m4, - lib/gl/m4/sys_stat_h.m4, lib/gl/m4/threadlib.m4, - lib/gl/m4/time_h.m4, lib/gl/m4/time_r.m4, lib/gl/m4/uintmax_t.m4, - lib/gl/m4/unistd_h.m4, lib/gl/m4/vasnprintf.m4, - lib/gl/m4/vasprintf.m4, lib/gl/m4/visibility.m4, - lib/gl/m4/wchar.m4, lib/gl/m4/wchar_t.m4, lib/gl/m4/wint_t.m4, - lib/gl/m4/xsize.m4, lib/gl/memchr.c, lib/gl/memcmp.c, - lib/gl/memmem.c, lib/gl/memmove.c, lib/gl/minmax.h, - lib/gl/netdb.in.h, lib/gl/override/lib/gc-libgcrypt.c.diff, - lib/gl/printf-args.c, lib/gl/printf-args.h, lib/gl/printf-parse.c, - lib/gl/printf-parse.h, lib/gl/read-file.c, lib/gl/read-file.h, - lib/gl/realloc.c, lib/gl/size_max.h, lib/gl/snprintf.c, - lib/gl/stdbool.in.h, lib/gl/stdint.in.h, lib/gl/stdio-impl.h, - lib/gl/stdio-write.c, lib/gl/stdio.in.h, lib/gl/stdlib.in.h, - lib/gl/str-two-way.h, lib/gl/strcasecmp.c, lib/gl/string.in.h, - lib/gl/strings.in.h, lib/gl/strncasecmp.c, lib/gl/strverscmp.c, - lib/gl/sys_socket.in.h, lib/gl/sys_stat.in.h, - lib/gl/tests/Makefile.am, lib/gl/tests/dummy.c, - lib/gl/tests/intprops.h, lib/gl/tests/test-alloca-opt.c, - lib/gl/tests/test-byteswap.c, lib/gl/tests/test-c-ctype.c, - lib/gl/tests/test-errno.c, lib/gl/tests/test-fseeko.c, - lib/gl/tests/test-fseeko.sh, lib/gl/tests/test-func.c, - lib/gl/tests/test-lseek.c, lib/gl/tests/test-lseek.sh, - lib/gl/tests/test-memchr.c, lib/gl/tests/test-memcmp.c, - lib/gl/tests/test-netdb.c, lib/gl/tests/test-read-file.c, - lib/gl/tests/test-snprintf.c, lib/gl/tests/test-stdbool.c, - lib/gl/tests/test-stdint.c, lib/gl/tests/test-stdio.c, - lib/gl/tests/test-stdlib.c, lib/gl/tests/test-string.c, - lib/gl/tests/test-strings.c, lib/gl/tests/test-strverscmp.c, - lib/gl/tests/test-sys_socket.c, lib/gl/tests/test-sys_stat.c, - lib/gl/tests/test-time.c, lib/gl/tests/test-unistd.c, - lib/gl/tests/test-vasnprintf.c, lib/gl/tests/test-vasprintf.c, - lib/gl/tests/test-wchar.c, lib/gl/tests/verify.h, lib/gl/time.in.h, - lib/gl/time_r.c, lib/gl/unistd.in.h, lib/gl/vasnprintf.c, - lib/gl/vasnprintf.h, lib/gl/vasprintf.c, lib/gl/wchar.in.h, - lib/gl/xsize.h, libextra/configure.ac: Start configure split. - -2008-10-30 Simon Josefsson - - * NEWS, configure.in, doc/gnutls.texi, lib/Makefile.am, - lib/libgnutls-config.in, lib/libgnutls.m4, libextra/.gitignore, - libextra/Makefile.am, libextra/libgnutls-extra-config.in, - libextra/libgnutls-extra.m4: Remove *-config scripts and old M4 - checks. - -2008-10-29 Simon Josefsson - - * cfg.mk, maint.mk: Update gnulib files. - -2008-10-28 Simon Josefsson - - * cfg.mk: Fix coverage rules. - -2008-10-28 Simon Josefsson - - * cfg.mk: Need to build before running checks. - -2008-10-28 Simon Josefsson - - * cfg.mk: Add code coverage rules. - -2008-10-23 Simon Josefsson - - * : commit 3eab289192e97f0bada61ca2c4d51214a4e4f7df Author: Nikos - Mavrogiannopoulos Date: Wed Oct 22 22:06:21 - 2008 +0300 - -2008-10-22 Nikos Mavrogiannopoulos - - * : commit 8973cd66b52fda65b4c9ffadab3b9db59a464fb0 Author: Simon - Josefsson Date: Wed Oct 22 18:42:41 2008 - +0200 - -2008-10-22 Simon Josefsson - - * gl/m4/netdb_h.m4, gl/netdb.in.h, lgl/m4/netdb_h.m4, - lgl/netdb.in.h, lgl/sys_socket.in.h: Update gnulib files. - -2008-10-22 Simon Josefsson - - * doc/scripts/gdoc: Sync gdoc with libidn for license fixes. - -2008-10-22 Simon Josefsson - - * src/serv.c: Use netdb.h instead of getaddrinfo.h. - -2008-10-22 Simon Josefsson - - * NEWS: Fix. - -2008-10-22 Simon Josefsson - - * gl/arpa_inet.in.h, gl/gai_strerror.c, gl/getaddrinfo.c, - gl/getaddrinfo.h, gl/gnulib.mk, gl/m4/getaddrinfo.m4, - gl/m4/gnulib-common.m4, gl/m4/gnulib-comp.m4, gl/m4/netdb_h.m4, - gl/netdb.in.h, gl/netinet_in.in.h, gl/stdarg.in.h, - gl/tests/gnulib.mk, gl/tests/test-getaddrinfo.c, - gl/tests/test-netdb.c, lgl/Makefile.am, lgl/errno.in.h, - lgl/float.in.h, lgl/m4/gnulib-common.m4, lgl/m4/gnulib-comp.m4, - lgl/m4/netdb_h.m4, lgl/m4/stdlib_h.m4, lgl/m4/sys_socket_h.m4, - lgl/m4/sys_stat_h.m4, lgl/m4/unistd_h.m4, lgl/netdb.in.h, - lgl/stdint.in.h, lgl/stdio.in.h, lgl/stdlib.in.h, lgl/string.in.h, - lgl/strings.in.h, lgl/sys_socket.in.h, lgl/sys_stat.in.h, - lgl/time.in.h, lgl/unistd.in.h, lgl/wchar.in.h, lgl/winsock.c, - libextra/gl/m4/gnulib-common.m4: Update gnulib files. - -2008-10-22 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2008-10-16 Nikos Mavrogiannopoulos - - * : commit a1c1da1939efe571f427a6323a8bb5311d933061 Author: Simon - Josefsson Date: Thu Oct 16 12:21:32 2008 - +0200 - -2008-10-16 Simon Josefsson - - * NEWS: Version 2.7.0. - -2008-10-16 Simon Josefsson - - * configure.in: Drop netdb.h check. - -2008-10-16 Simon Josefsson - - * lgl/Makefile.am, lgl/m4/gnulib-cache.m4, lgl/m4/gnulib-comp.m4, - lgl/m4/netdb_h.m4, lgl/netdb.in.h, lgl/tests/Makefile.am, - lgl/tests/test-netdb.c, src/common.h: Add netdb gnulib module. Use - it. - -2008-10-16 Simon Josefsson - - * NEWS: Add. - -2008-10-16 Simon Josefsson - - * NEWS: Add. - -2008-10-16 Simon Josefsson - - * gl/Makefile.am: Upgrade. - -2008-10-16 Simon Josefsson - - * GNUmakefile, gl/getaddrinfo.c, gl/m4/getaddrinfo.m4, - lgl/Makefile.am, lgl/m4/gnulib-comp.m4, lgl/m4/stdio_h.m4, - lgl/m4/sys_ioctl_h.m4, lgl/m4/sys_socket_h.m4, lgl/m4/unistd_h.m4, - lgl/stdio-write.c, lgl/stdio.in.h, lgl/sys_socket.in.h, - lgl/unistd.in.h, lgl/winsock.c: Update gnulib files. - -2008-10-15 Simon Josefsson - - * tests/Makefile.am: Need to build libutils.la before recursing into - e.g. pkcs12-decode. - -2008-10-14 Simon Josefsson - - * lib/gnutlsxx.cpp: Minimize ABI changes. - -2008-10-13 Simon Josefsson - - * THANKS: Add. - -2008-10-13 Simon Josefsson - - * lib/gnutls_errors.c: Improve GNUTLS_E_AGAIN explanation. - Suggested by "Lavrentiev, Anton (NIH/NLM/NCBI) [C]" - . - -2008-10-12 Simon Josefsson - - * doc/TODO: Add. - -2008-10-11 Nikos Mavrogiannopoulos - - * .gitignore: added to reduce untracked files. - -2008-10-11 Simon Josefsson - - * NEWS: Add. - -2008-10-11 Simon Josefsson - - * THANKS, libextra/fipsmd5.c: Add static qualifiers on internal - symbols. Tiny patch from Aaron Ucko . - -2008-10-09 Simon Josefsson - - * doc/reference/Makefile.am: Sync with upstream. - -2008-10-08 Simon Josefsson - - * lib/gnutls_cert.h, lib/opencdk/armor.c, lib/opencdk/hash.c, - lib/opencdk/kbnode.c, lib/opencdk/new-packet.c, - lib/opencdk/seskey.c, lib/opencdk/verify.c, lib/x509/x509_int.h, - src/cfg/platon/str/strplus.c: Fix syntax-check warnings. - -2008-10-08 Simon Josefsson - - * lib/opencdk/opencdk.h: Indent. - -2008-10-08 Simon Josefsson - - * lib/debug.c, lib/opencdk/seskey.c, lib/opencdk/sig-check.c: Drop - gcrypt.h includes. - -2008-10-08 Simon Josefsson - - * NEWS: Mention libgcrypt dependency. - -2008-10-08 Simon Josefsson - - * configure.in, lib/Makefile.am, lib/opencdk/Makefile.am, - lib/openpgp/Makefile.am, lib/x509/Makefile.am, libextra/Makefile.am: - More libgcrypt fixes. - -2008-10-08 Simon Josefsson - - * configure.in, lib/Makefile.am, src/Makefile.am, tests/Makefile.am: - More libgcrypt fixes. - -2008-10-08 Simon Josefsson - - * configure.in, lib/gnutls_global.c, m4/libgcrypt.m4: Modernize - libgcrypt detection. - -2008-10-08 Simon Josefsson - - * doc/reference/gnutls-docs.sgml, includes/gnutls/x509.h, - lib/x509/crl.c, lib/x509/crl_write.c, lib/x509/crq.c, - lib/x509/output.c, lib/x509/x509_write.c: Doc fixes. - -2008-10-08 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2008-10-08 Simon Josefsson - - * NEWS: Sync with real list. - -2008-10-08 Simon Josefsson - - * lib/x509/x509_int.h: Need libtasn1.h here. - -2008-10-08 Simon Josefsson - - * lib/auth_rsa.c, lib/auth_rsa_export.c, lib/gnutls_cert.c, - lib/gnutls_cert.h, lib/gnutls_mpi.h, lib/gnutls_sig.c, - lib/gnutls_x509.c, lib/mpi-libgcrypt.c, lib/rnd-libgcrypt.c: Reduce - libtasn1.h includes. - -2008-10-08 Simon Josefsson - - * configure.in: Drop obsolete libtasn1 flags. - -2008-10-08 Simon Josefsson - - * lib/Makefile.am, libextra/Makefile.am, src/Makefile.am: Update - libtasn1 linker flags. - -2008-10-08 Simon Josefsson - - * GNUmakefile, configure.in, gl/arpa_inet.in.h, gl/c-ctype.h, - gl/gnulib.mk, gl/m4/arpa_inet_h.m4, gl/m4/gnulib-cache.m4, - gl/m4/gnulib-comp.m4, gl/m4/inet_ntop.m4, gl/m4/inet_pton.m4, - gl/strerror.c, lgl/Makefile.am, lgl/c-ctype.h, lgl/errno.in.h, - lgl/m4/gnulib-cache.m4, lgl/m4/gnulib-comp.m4, lgl/m4/memcmp.m4, - lgl/m4/stdio_h.m4, lgl/m4/string_h.m4, lgl/m4/sys_socket_h.m4, - lgl/m4/unistd_h.m4, lgl/m4/wchar.m4, lgl/stdio.in.h, - lgl/string.in.h, lgl/sys_socket.in.h, lgl/unistd.in.h, - libextra/gl/Makefile.am, libextra/gl/m4/gnulib-cache.m4, - libextra/gl/md5.c: Update gnulib files. - -2008-10-08 Simon Josefsson - - * configure.in: Remove obsolete stuff. - -2008-10-08 Simon Josefsson - - * lib/auth_cert.c, lib/gnutls_constate.c, lib/gnutls_mpi.c, - lib/gnutls_pk.c, lib/opencdk/armor.c, lib/opencdk/hash.c, - lib/opencdk/kbnode.c, lib/opencdk/keydb.c, lib/opencdk/pubkey.c, - lib/opencdk/stream.c, lib/openpgp/privkey.c, lib/x509/common.c, - lib/x509/crl.c, lib/x509/crl_write.c, lib/x509/crq.c, - lib/x509/extensions.c, lib/x509/mpi.c, lib/x509/output.c, - lib/x509/privkey.c, lib/x509/x509.c, lib/x509/x509_write.c, - libextra/fipsmd5.c, libextra/gl/md5.c, src/certtool-cfg.c, - src/certtool.c, src/cli.c, src/serv.c: Indent. - -2008-10-08 Simon Josefsson - - * NEWS, configure.in, lib/gnutls_global.c, m4/libtasn1.m4: Detect - libtasn1 via AC_LIB_HAVE_LINKFLAGS. - -2008-10-07 Simon Josefsson - - * NEWS: Fix. - -2008-10-07 Ludovic Courtès - - * tests/Makefile.am: More test compilation fixes with minitasn1. * tests/Makefile.am (AM_CPPFLAGS)[ENABLE_MINITASN1]: Add minitasn1 directory. Signed-off-by: Simon Josefsson - -2008-10-07 Simon Josefsson - - * NEWS: Add. - -2008-10-07 Ludovic Courtès - - * tests/pkcs12-decode/Makefile.am: Fix compilation of - `pkcs12-decode' test when using minitasn1. * tests/pkcs12-decode/Makefile.am (AM_CPPFLAGS)[ENABLE_MINITASN1]: - Add `minitasn1' include directory. Signed-off-by: Simon Josefsson - -2008-10-06 Simon Josefsson - - * THANKS: Add. - -2008-10-06 Simon Josefsson - - * libextra/gnutls_openssl.c: Get issuer dn in X509_get_issuer_name, - correct last patch. - -2008-10-06 Simon Josefsson - - * NEWS: Add 2.6.0 entries. - -2008-10-05 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2008-10-05 Simon Josefsson - - * NEWS: Add. - -2008-10-05 Simon Josefsson - - * libextra/gnutls_openssl.c: Fix out-of-bounds access. Similar to - debian #499945 lynx-cur problem. libextra/gnutls_openssl.c: fix - X509_get_issuer_name to return issuer name of given certificate and - not try to get the subject dn of the issuer certificate wich may or - may not exist. (Checked how openssl does this, too.) This fixes a - accessing an array outside its bounds. Debian bug #499945 is - instructive about the problem. While lynx-cur credits Thomas Dickey - for the bug, the code and implications are essentially the same for - the gnutls openssl-compat libary. Tiny patch from Thomas Viehmann - . - -2008-10-04 Nikos Mavrogiannopoulos - - * src/certtool-cfg.c, src/certtool-cfg.h, src/certtool-common.h, - src/certtool-gaa.c, src/certtool-gaa.h, src/certtool.c, - src/certtool.gaa: reduced warnings in compilation of certtool. - -2008-10-04 Nikos Mavrogiannopoulos - - * lib/x509/output.c: use union to avoid wrong type issues. - -2008-10-04 Nikos Mavrogiannopoulos - - * lib/x509/output.c: corrected print order. - -2008-10-04 Nikos Mavrogiannopoulos - - * NEWS, doc/certtool.cfg, includes/gnutls/x509.h, - lib/gnutls_errors.h, lib/gnutls_handshake.c, lib/x509/common.c, - lib/x509/crl.c, lib/x509/crq.c, lib/x509/dn.c, - lib/x509/extensions.c, lib/x509/mpi.c, lib/x509/output.c, - lib/x509/pkcs12.c, lib/x509/pkcs7.c, lib/x509/x509.c, - lib/x509/x509_int.h, lib/x509/x509_write.c, src/certtool-cfg.c, - src/certtool-cfg.h, src/certtool.c: Added function to copy - extensions from a CRL to a certificate. Reduced many warnings (and - added more by defining gnutls_log as printf like function --gcc - only) - -2008-10-04 Nikos Mavrogiannopoulos - - * configure.in: Disable certain warnings that do not work with my - compiler. - -2008-10-04 Nikos Mavrogiannopoulos - - * NEWS, includes/gnutls/x509.h, lib/x509/crq.c, - lib/x509/extensions.c, lib/x509/output.c, src/certtool.c: Added - gnutls_x509_crq_set_key_purpose_oid and - gnutls_x509_crq_get_key_purpose_oid. - -2008-10-04 Nikos Mavrogiannopoulos - - * NEWS: documentation added functions - -2008-10-04 Nikos Mavrogiannopoulos - - * NEWS: updated - -2008-10-04 Nikos Mavrogiannopoulos - - * lib/x509/crq.c, lib/x509/extensions.c, lib/x509/x509_int.h: set - global maximum size for certificate requests' extensions size. - -2008-10-04 Nikos Mavrogiannopoulos - - * src/Makefile.am: added missing file - -2008-10-04 Nikos Mavrogiannopoulos - - * includes/gnutls/x509.h, lib/x509/crl.c, lib/x509/crq.c, - lib/x509/extensions.c, lib/x509/mpi.c, lib/x509/output.c, - lib/x509/x509.c, lib/x509/x509_int.h, src/certtool-cfg.c, - src/certtool-cfg.h, src/certtool-common.h, src/certtool-gaa.c, - src/certtool-gaa.h, src/certtool.c, src/certtool.gaa: Added initial - support for certificate requests handling of X.509 extensions. - Added support to certtool to handle these extensions (add/read) - -2008-10-03 Nikos Mavrogiannopoulos - - * NEWS, doc/certtool.cfg, includes/gnutls/x509.h, lib/x509/crl.c, - lib/x509/crl_write.c, lib/x509/extensions.c, lib/x509/output.c, - lib/x509/x509_int.h, src/certtool-cfg.c, src/certtool-cfg.h, - src/certtool.c: Added functions to handle and set CRL extensions. - -2008-10-01 Simon Josefsson - - * po/nl.po.in, po/vi.po.in: Sync with TP. - -2008-10-01 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2008-09-29 Nikos Mavrogiannopoulos - - * : commit c357933a30801a82e484bed8fbc4bd5b2b34d5e0 Author: Nikos - Mavrogiannopoulos Date: Mon Sep 29 15:08:02 - 2008 +0300 - -2008-09-29 Simon Josefsson - - * ChangeLog: Generated. - -2008-09-29 Simon Josefsson - - * NEWS: Version 2.5.9. - -2008-09-29 Simon Josefsson - - * NEWS: Fix. - -2008-09-29 Simon Josefsson - - * NEWS, configure.in: Document ABI change. - -2008-09-29 Simon Josefsson - - * lib/gnutls_constate.c: Re-add comment about too long function, it - is one of the most complex in gnutls. - -2008-09-29 Simon Josefsson - - * configure.in: Need AC_CONFIG_MACRO_DIR for modern libtool. - -2008-09-28 Nikos Mavrogiannopoulos - - * includes/gnutls/crypto.h, lib/gnutls_pk.c, lib/opencdk/pubkey.c, - lib/pk-libgcrypt.c, lib/x509/privkey.c, lib/x509/x509_int.h: changed - crypto API to reduce probability of memory leaks during usage of - pk_params. - -2008-09-28 Nikos Mavrogiannopoulos - - * : commit 699aa57dacc6446e92c123e93bba1f894067893e Author: Nikos - Mavrogiannopoulos Date: Sun Sep 28 03:34:59 - 2008 +0300 - -2008-09-28 Nikos Mavrogiannopoulos - - * NEWS: Revert "fixed" This reverts commit 14647811d21d3eda2d5bd82557329bcf7778f31b. - -2008-09-28 Nikos Mavrogiannopoulos - - * NEWS: fixed - -2008-09-28 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.c, lib/gnutls_constate.c, lib/gnutls_int.h: - avoid using malloc for small buffers. - -2008-09-28 Nikos Mavrogiannopoulos - - * lib/gnutls_mpi.c: optimized in order to avoid calling malloc for - small buffers. - -2008-09-27 Nikos Mavrogiannopoulos - - * lib/gnutls_constate.c, lib/gnutls_mpi.c: Revert "Revert C99 uses. - Fixes gnutls_mpi.c mem leak, but not others." This reverts commit bdfa289133b15ad7d92eb3151ce86cca4c879426. - -2008-09-25 Simon Josefsson - - * tests/pathlen/Makefile.am, tests/pathlen/pathlen: Use EXEEXT in - self-test scripts. - -2008-09-25 Simon Josefsson - - * NEWS, tests/key-id/Makefile.am, tests/key-id/key-id, - tests/pkcs1-padding/Makefile.am, tests/pkcs1-padding/pkcs1-pad, - tests/rsa-md5-collision/Makefile.am, - tests/rsa-md5-collision/rsa-md5-collision, tests/sha2/Makefile.am, - tests/sha2/sha2, tests/userid/Makefile.am, tests/userid/userid: Use - EXEEXT in self-test scripts. - -2008-09-25 Simon Josefsson - - * NEWS: Add. - -2008-09-25 Simon Josefsson - - * lgl/vasnprintf.c: Update gnulib files. - -2008-09-25 Simon Josefsson - - * NEWS, THANKS: Add. - -2008-09-25 Simon Josefsson - - * lib/gnutls_constate.c, lib/gnutls_mpi.c: Revert C99 uses. Fixes - gnutls_mpi.c mem leak, but not others. - -2008-09-24 Simon Josefsson - - * NEWS: Add. - -2008-09-24 Simon Josefsson - - * NEWS: Add. - -2008-09-24 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2008-09-23 Nikos Mavrogiannopoulos - - * lib/x509/x509.c: Corrected buffer overrun in crt_list_import. - Reported and patch by Jonathan Manktelow. - -2008-09-23 Nikos Mavrogiannopoulos - - * README: corrected libgcrypt site. - -2008-09-23 Nikos Mavrogiannopoulos - - * lib/x509/privkey.c: corrected embarrasing bug. - -2008-09-23 Nikos Mavrogiannopoulos - - * lib/auth_cert.c, lib/gnutls_constate.c, lib/gnutls_mpi.c, - lib/pk-libgcrypt.c, lib/x509/common.c, lib/x509/dn.c: Corrected - several memory leaks reported by Sam. In some cases switched to C99 - to avoid having complex code. - -2008-09-23 Simon Josefsson - - * lib/openpgp/extras.c: Doc fix. - -2008-09-23 Simon Josefsson - - * lib/x509/crl_write.c, lib/x509/x509_write.c: Doc fix. - -2008-09-23 Simon Josefsson - - * configure.in, doc/reference/Makefile.am: Use automake warnings. - -2008-09-23 Simon Josefsson - - * cfg.mk: Typo. - -2008-09-23 Simon Josefsson - - * cfg.mk: Fix mingw32 rules. - -2008-09-23 Simon Josefsson - - * cfg.mk, doc/Makefile.am, doc/texinfo.css: Use a stylesheet for - texinfo HTML manual. - -2008-09-21 Nikos Mavrogiannopoulos - - * lib/x509/privkey.c: fixed memory leak in reencoding of RSA and DSA - private keys. Reported and studied by Sam Varshavchik - -2008-09-21 Nikos Mavrogiannopoulos - - * lib/x509/x509_write.c: documented the way set_subject_alt_name() - can set value. - -2008-09-21 Simon Josefsson - - * ChangeLog: Generated. - -2008-09-21 Simon Josefsson - - * NEWS: Version 2.5.8. - -2008-09-21 Simon Josefsson - - * po/fr.po.in, po/pl.po.in, po/sv.po.in: Sync with TP. - -2008-09-21 Simon Josefsson - - * libextra/Makefile.am: Use srcdir for -Igl/. - -2008-09-21 Simon Josefsson - - * Makefile.am: Don't use CFLAGS with distcheck, causes errors in - ./configure tests. - -2008-09-21 Simon Josefsson - - * src/certtool.c: Fix warnings. - -2008-09-21 Simon Josefsson - - * src/Makefile.am, src/certtool.c, src/serv.c: Use internal md5 if - libgcrypt is in FIPS mode. - -2008-09-21 Simon Josefsson - - * src/cli.c: Initialize libgnutls-extra too. - -2008-09-21 Simon Josefsson - - * includes/gnutls/extra.h: Add prototype for - gnutls_register_md5_handler. - -2008-09-21 Simon Josefsson - - * libextra/fipsmd5.c: Add Since: tag. - -2008-09-21 Simon Josefsson - - * lib/x509/x509_write.c: Doc fixes. - -2008-09-21 Simon Josefsson - - * Makefile.am: Need -I for aclocal. - -2008-09-21 Simon Josefsson - - * lgl/Makefile.am, lgl/m4/wchar.m4, lgl/tests/test-wchar.c, - lgl/wchar.in.h: Add. - -2008-09-21 Simon Josefsson - - * configure.in, libextra/Makefile.am, src/Makefile.am, src/cli.c: - Fix libextra build. Make gnutls-cli work in libgcrypt FIPS mode. - -2008-09-21 Simon Josefsson - - * libextra/Makefile.am: Fix typo. - -2008-09-21 Simon Josefsson - - * NEWS: Add. - -2008-09-21 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2008-09-21 Simon Josefsson - - * doc/gnutls.texi: Fix markup. - -2008-09-21 Simon Josefsson - - * libextra/Makefile.am: Add -I for hmac.h, md5.h. - -2008-09-21 Nikos Mavrogiannopoulos - - * src/certtool.c: deinitialize structures after use. - -2008-09-21 Nikos Mavrogiannopoulos - - * lib/gnutls_pk.c: Corrected memory leak. Reported by Sam - Varshavchik. - -2008-09-21 Nikos Mavrogiannopoulos - - * includes/gnutls/x509.h: added missing headers. - -2008-09-21 Nikos Mavrogiannopoulos - - * lib/gnutls_pk.c, lib/x509/privkey.c: Corrected several bugs in DSA - DER key importing. Reported and debugged by Sam Varshavchik. - -2008-09-20 Nikos Mavrogiannopoulos - - * lib/opencdk/armor.c, lib/opencdk/hash.c, lib/opencdk/kbnode.c, - lib/opencdk/keydb.c, lib/opencdk/stream.c: added gnutls_assert() to - assist debugging. - -2008-09-20 Nikos Mavrogiannopoulos - - * lib/openpgp/privkey.c: properly report the error line. - -2008-09-20 Nikos Mavrogiannopoulos - - * NEWS, doc/gnutls.texi, lib/x509/extensions.c, lib/x509/output.c, - lib/x509/x509_int.h, lib/x509/x509_write.c, src/certtool-cfg.c, - src/certtool-cfg.h, src/certtool.c: output.c: Can properly print IP - addresses in certificates. x509_write.c: added - gnutls_x509_crt_set_subject_alt_name added that can add multiple - subject alternative names. certtool: use the new function to be - able to add several names. - -2008-09-19 Simon Josefsson - - * configure.in: Bump versions. - -2008-09-19 Simon Josefsson - - * NEWS, libextra/Makefile.am, libextra/fipsmd5.c: Add - gnutls_register_md5_handler. - -2008-09-19 Simon Josefsson - - * gl/gnulib.mk, gl/m4/gnulib-comp.m4, gl/m4/strdup.m4, gl/strdup.c, - lgl/vasnprintf.c: Update gnulib files. - -2008-09-19 Simon Josefsson - - * configure.in, libextra/gl/Makefile.am, libextra/gl/hmac-md5.c, - libextra/gl/hmac.h, libextra/gl/m4/gnulib-cache.m4, - libextra/gl/m4/gnulib-common.m4, libextra/gl/m4/gnulib-comp.m4, - libextra/gl/m4/gnulib-tool.m4, libextra/gl/m4/hmac-md5.m4, - libextra/gl/m4/md5.m4, libextra/gl/m4/memxor.m4, libextra/gl/md5.c, - libextra/gl/md5.h, libextra/gl/memxor.c, libextra/gl/memxor.h: Add - md5 and hmac from gnulib to libextra/gl/. - -2008-09-19 Simon Josefsson - - * NEWS: Add. - -2008-09-19 Simon Josefsson - - * lib/gnutls_hash_int.c: Make _gnutls_hash_copy work with registered - hashes. - -2008-09-19 Simon Josefsson - - * THANKS, lib/gnutls_compress.c, lib/gnutls_compress.h, - libextra/gnutls_extra.c: Make LZO compression support build. Tiny - patch from Arfrever Frehtes Taifersar Arahesis - . - -2008-09-17 Simon Josefsson - - * doc/reference/Makefile.am, lib/Makefile.am, lib/defines.h, - lib/gnutls_errors.h, lib/gnutls_int.h: Merge defines.h into - gnutls_int.h. - -2008-09-17 Simon Josefsson - - * lib/gnutls_buffer.h: Remove, unused. - -2008-09-17 Simon Josefsson - - * lib/auth_cert.c, lib/gnutls_x509.c: Fix overflows in gnutls_calloc - calls. - -2008-09-17 Simon Josefsson - - * libextra/openssl_compat.c: Fix last commit. - -2008-09-17 Simon Josefsson - - * NEWS, lib/auth_cert.c, lib/gnutls_cert.c, - lib/gnutls_session_pack.c, libextra/openssl_compat.c: Fix overflows - in gnutls_calloc calls. - -2008-09-17 Simon Josefsson - - * NEWS, lib/gnutls_mem.c: libgnutls: Check for overflows in - gnutls_calloc and gnutls_secure_calloc. Reported by Werner Koch - . - -2008-09-17 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2008-09-17 Simon Josefsson - - * NEWS, THANKS, lib/auth_srp.c, lib/gnutls_int.h, lib/gnutls_srp.c: - libgnutls: New function to set minimum acceptable SRP bits. The - function is gnutls_srp_set_prime_bits. Tiny patch by Kevin Quick - in - . - -2008-09-17 Simon Josefsson - - * doc/manpages/gnutls-cli.1: Fix markup, tiny patch from Sam - Varshavchik . - -2008-09-16 Simon Josefsson - - * NEWS, lib/auth_cert.c, lib/auth_rsa.c, lib/ext_cert_type.c, - lib/ext_max_record.c, lib/ext_oprfi.c, lib/ext_server_name.c, - lib/gnutls_algorithms.c, lib/gnutls_auth.c, lib/gnutls_buffers.c, - lib/gnutls_cert.c, lib/gnutls_cipher.c, lib/gnutls_compress.c, - lib/gnutls_constate.c, lib/gnutls_extensions.c, - lib/gnutls_global.c, lib/gnutls_handshake.c, lib/gnutls_kx.c, - lib/gnutls_pk.c, lib/gnutls_record.c, lib/gnutls_session_pack.c, - lib/gnutls_sig.c, lib/gnutls_state.c, lib/gnutls_v2_compat.c, - lib/gnutls_x509.c, lib/mac-libgcrypt.c, lib/minitasn1/structure.c, - lib/opencdk/armor.c, lib/opencdk/read-packet.c, lib/openpgp/pgp.c, - lib/x509/common.c, lib/x509/crq.c, lib/x509/pkcs12.c, - lib/x509/privkey.c, libextra/gnutls_ia.c, src/printlist.c, - src/serv.c, tests/finished.c, tests/openssl.c, tests/pgps2kgnu.c, - tests/pkcs12-decode/pkcs12_s2k.c, tests/simple.c: Indent. - -2008-09-16 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2008-09-16 Simon Josefsson - - * ChangeLog: Generated. - -2008-09-16 Simon Josefsson - - * NEWS: Version 2.5.7. - -2008-09-16 Simon Josefsson - - * includes/gnutls/gnutls.h.in: Fix warning about trailing comma. - -2008-09-16 Simon Josefsson - - * doc/gnutls.texi: Fix math markup. - -2008-09-16 Simon Josefsson - - * src/printlist.c: Fix. - -2008-09-16 Simon Josefsson - - * doc/Makefile.am, doc/gnutls.texi, src/printlist.c: Fix. - -2008-09-16 Simon Josefsson - - * NEWS: Add. - -2008-09-16 Simon Josefsson - - * doc/reference/gnutls-docs.sgml: Document crypto.h stuff. - -2008-09-16 Simon Josefsson - - * doc/reference/gnutls-docs.sgml: Add list of new symbols in 2.6.x. - -2008-09-16 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2008-09-16 Simon Josefsson - - * includes/gnutls/crypto.h: Indent. - -2008-09-16 Simon Josefsson - - * includes/gnutls/gnutls.h.in: Don't use extern on functions, for - consistency. - -2008-09-16 Simon Josefsson - - * NEWS: Mention new functions. - -2008-09-16 Simon Josefsson - - * NEWS, doc/manpages/Makefile.am, includes/gnutls/gnutls.h.in, - lib/gnutls_algorithms.c, src/printlist.c: Add interfaces to get PK - and PK-sign algorithms. Use them. - -2008-09-16 Simon Josefsson - - * NEWS: Credit. - -2008-09-16 Simon Josefsson - - * tests/Makefile.am: Don't run pgps2kgnu self test when openpgp is - disable. - -2008-09-16 Simon Josefsson - - * NEWS: Merge in 2.4.2 news entries. - -2008-09-16 Simon Josefsson - - * lib/opencdk/main.c, lib/opencdk/opencdk.h: Remove cdk_strerror, - unused and uses non-thread safe strerror. - -2008-09-16 Simon Josefsson - - * tests/openpgpself.c, tests/x509dn.c, tests/x509self.c: Fix - warnings. - -2008-09-16 Simon Josefsson - - * tests/crypto_rng.c: Fix warnings. - -2008-09-16 Simon Josefsson - - * tests/parse_ca.c: Fix warning. - -2008-09-16 Simon Josefsson - - * cfg.mk: Split release target. - -2008-09-16 Simon Josefsson - - * gl/gnulib.mk, gl/m4/eoverflow.m4, gl/m4/gnulib-cache.m4, - gl/m4/gnulib-comp.m4, gl/m4/strerror.m4, gl/strerror.c, - gl/tests/gnulib.mk, gl/tests/test-EOVERFLOW.c, - gl/tests/test-strerror.c, lgl/Makefile.am, lgl/errno.in.h, - lgl/m4/eoverflow.m4, lgl/m4/errno_h.m4, lgl/m4/gnulib-comp.m4, - lgl/m4/stdio_h.m4, lgl/stdio.in.h, lgl/sys_socket.in.h, - lgl/tests/Makefile.am, lgl/tests/test-EOVERFLOW.c, - lgl/tests/test-errno.c, lgl/tests/test-memchr.c: Update gnulib - files. - -2008-09-15 Simon Josefsson - - * NEWS: Add. - -2008-09-15 Simon Josefsson - - * tests/Makefile.am, tests/setcredcrash.c: Self-test regression of - gnutls_credentials_set. - -2008-09-15 Nikos Mavrogiannopoulos - - * lib/gnutls_auth.c: removed unnesessary and dangerous free from - credentials_set(). - -2008-09-14 Nikos Mavrogiannopoulos - - * lib/auth_cert.c: added some pedantic error checking. - -2008-09-09 Simon Josefsson - - * src/certtool-gaa.c, src/cli-gaa.c, src/crypt-gaa.c, - src/psk-gaa.c, src/serv-gaa.c, src/tls_test-gaa.c: Regenerate using - patched gaa. - -2008-09-09 Simon Josefsson - - * Makefile.am: Test release with -Werror to avoid regressions. - -2008-09-09 Simon Josefsson - - * libextra/openssl_compat.c: Remove unused code. - -2008-09-09 Simon Josefsson - - * lib/mac-libgcrypt.c: Fix warning. - -2008-09-09 Simon Josefsson - - * lib/opencdk/new-packet.c: Fix warning. - -2008-09-09 Simon Josefsson - - * lib/opencdk/opencdk.h: (CDK_KEY_USG_ENCR, CDK_KEY_USG_SIGN): Protect | op. - -2008-09-09 Simon Josefsson - - * lib/cipher-libgcrypt.c: Fix warnings. - -2008-09-09 Simon Josefsson - - * lib/mac-libgcrypt.c: Fix warnings. - -2008-09-09 Simon Josefsson - - * lib/mpi-libgcrypt.c: Fix warnings. - -2008-09-09 Simon Josefsson - - * NEWS: Add. - -2008-09-09 Simon Josefsson - - * doc/gnutls.texi: Add initialization section. Update thread - initialization discussion. - -2008-09-09 Simon Josefsson - - * tests/openssl.c: Need to initialize gnutls to avoid crash. - -2008-09-08 Simon Josefsson - - * cfg.mk: Drop redundant. - -2008-09-08 Simon Josefsson - - * NEWS: Add. - -2008-09-08 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2008-09-08 Simon Josefsson - - * configure.in: Remove foo.def after testing --output-def. - -2008-09-08 Simon Josefsson - - * ChangeLog: Generated. - -2008-09-08 Simon Josefsson - - * NEWS: Version 2.5.6. - -2008-09-08 Simon Josefsson - - * build-aux/config.rpath, gl/m4/include_next.m4, - lgl/m4/include_next.m4: Update gnulib files. - -2008-09-03 Simon Josefsson - - * doc/examples/ex-alert.c, doc/examples/ex-cert-select.c, - doc/examples/ex-client-psk.c, doc/examples/ex-client-resume.c, - doc/examples/ex-client-srp.c, doc/examples/ex-client-tlsia.c, - doc/examples/ex-client1.c, doc/examples/ex-client2.c, - doc/examples/ex-crq.c, doc/examples/ex-cxx.cpp, - doc/examples/ex-pkcs12.c, doc/examples/ex-rfc2818.c, - doc/examples/ex-serv-anon.c, doc/examples/ex-serv-export.c, - doc/examples/ex-serv-pgp.c, doc/examples/ex-serv-psk.c, - doc/examples/ex-serv-srp.c, doc/examples/ex-serv1.c, - doc/examples/ex-session-info.c, doc/examples/ex-verify.c, - doc/examples/ex-x509-info.c, doc/examples/tcp.c, lib/defines.h, - lib/gnutls_asn1_tab.c, lib/openpgp/openpgp_int.h, - lib/pkix_asn1_tab.c, src/errcodes.c, tests/anonself.c, - tests/certificate_set_x509_crl.c, tests/dhepskself.c, - tests/finished.c, tests/hostname-check/hostname-check.c, - tests/mini.c, tests/moredn.c, tests/netconf-psk.c, - tests/openpgpself.c, tests/oprfi.c, tests/pgps2kgnu.c, - tests/pskself.c, tests/resume.c, tests/tlsia.c, tests/x509dn.c, - tests/x509self.c, tests/x509signself.c: Use #ifdef for checking - HAVE_CONFIG_H for consistency. - -2008-09-02 Simon Josefsson - - * po/POTFILES.in: Mark gnutls_alert for translation. - -2008-09-02 Simon Josefsson - - * po/ms.po.in: Sync with TP. - -2008-09-02 Simon Josefsson - - * lgl/vasnprintf.c: Update gnulib files. - -2008-09-02 Simon Josefsson - - * NEWS: Add. - -2008-09-02 Simon Josefsson - - * NEWS: Add. - -2008-09-02 Simon Josefsson - - * THANKS: Add. - -2008-09-02 Simon Josefsson - - * lib/gnutls_cipher_int.c: Don't return from a void function. - Reported by Dave Uhring . - -2008-09-01 Daniel Kahn Gillmor - - * tests/Makefile.am, tests/pgps2kgnu.c: added pgps2kgnu test for GNU - extensions to OpenPGP String-to-Key (S2K) conventions. - -2008-09-01 Simon Josefsson - - * src/tls_test.c: Use gnulib for --version. - -2008-09-01 Simon Josefsson - - * src/crypt.c: Use gnulib more. Remove code. - -2008-09-01 Simon Josefsson - - * src/crypt.c, src/psk.c: Use gnulib for --version. - -2008-09-01 Simon Josefsson - - * src/cli-gaa.c, src/cli-gaa.h, src/serv-gaa.c, src/serv-gaa.h: - Generated. - -2008-09-01 Simon Josefsson - - * doc/gnutls.texi, doc/manpages/certtool.1, - doc/manpages/gnutls-cli.1, doc/manpages/gnutls-serv.1: Drop - --copyright from documentation. - -2008-09-01 Simon Josefsson - - * NEWS, src/cli.gaa, src/common.c, src/serv.c, src/serv.gaa: Drop - --copyright. - -2008-09-01 Simon Josefsson - - * src/serv.c: Use gnulib for --version. - -2008-09-01 Simon Josefsson - - * src/cli.c: Use gnulib for --version. - -2008-09-01 Simon Josefsson - - * src/certtool.c: Only print libgnutls version in --version if it is - different. - -2008-09-01 Simon Josefsson - - * NEWS: Add. - -2008-09-01 Simon Josefsson - - * doc/reference/Makefile.am, lib/Makefile.am, lib/gnutls_int.h, - lib/gnutls_str.h: Remove gnutls_buffer.h, move definitions to - gnutls_str.h. - -2008-09-01 Simon Josefsson - - * lib/gnutls_alert.c: Translate error messages. Cleanup code. - -2008-09-01 Simon Josefsson - - * lib/gnutls_compress.c, lib/gnutls_compress.h: Remove unused stuff. - -2008-09-01 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2008-09-01 Simon Josefsson - - * NEWS: Add. - -2008-09-01 Simon Josefsson - - * tests/simple.c: Test sign algos. - -2008-09-01 Simon Josefsson - - * src/common.c: Print pk and sign algos. - -2008-09-01 Simon Josefsson - - * lib/gnutls_algorithms.c: Typo. - -2008-09-01 Simon Josefsson - - * NEWS: Add. - -2008-09-01 Simon Josefsson - - * NEWS, includes/gnutls/gnutls.h.in, lib/gnutls_algorithms.c: Add - gnutls_sign_list and gnutls_sign_get_id. Suggested by Sam - Varshavchik . - -2008-09-01 Simon Josefsson - - * lib/gnutls_algorithms.h, lib/gnutls_compress.h: Move declarations. - -2008-09-01 Simon Josefsson - - * doc/reference/Makefile.am, lib/Makefile.am, - lib/gnutls_compress.c, lib/gnutls_compress.h, - lib/gnutls_compress_int.c, lib/gnutls_compress_int.h, - lib/gnutls_int.h: Merge gnutls_compress_int.? with - gnutls_compress.?. - -2008-09-01 Simon Josefsson - - * doc/reference/Makefile.am, lib/Makefile.am, lib/auth_anon.c, - lib/auth_cert.c, lib/auth_dh_common.c, lib/auth_dhe.c, - lib/auth_dhe_psk.c, lib/auth_psk.c, lib/auth_psk_passwd.c, - lib/auth_rsa.c, lib/auth_rsa_export.c, lib/auth_srp.c, - lib/auth_srp_passwd.c, lib/auth_srp_rsa.c, lib/ext_server_name.c, - lib/ext_srp.c, lib/gnutls_anon_cred.c, lib/gnutls_auth.c, - lib/gnutls_auth.h, lib/gnutls_auth_int.h, lib/gnutls_cert.c, - lib/gnutls_handshake.c, lib/gnutls_record.c, - lib/gnutls_session_pack.c, lib/gnutls_state.c, lib/gnutls_state.h, - lib/gnutls_ui.c, lib/gnutls_v2_compat.c, lib/gnutls_x509.c, - libextra/ext_inner_application.c: Move definitions in - gnutls_auth_int.h to gnutls_auth.h and update callers. - -2008-09-01 Simon Josefsson - - * lib/gnutls_algorithms.c, lib/gnutls_algorithms.h, - lib/gnutls_compress.c: Move compression functions to - gnutls_compress.c to make gnutls_algorithms.c more readable. - -2008-09-01 Simon Josefsson - - * lib/gnutls_algorithms.c: Fix warning. - -2008-09-01 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2008-09-01 Simon Josefsson - - * lib/gnutls_algorithms.c: Doc fix. - -2008-09-01 Simon Josefsson - - * tests/simple.c: Add more tests. - -2008-09-01 Simon Josefsson - - * lib/gnutls_algorithms.c: Fix typo. - -2008-09-01 Simon Josefsson - - * NEWS, includes/gnutls/gnutls.h.in, lib/gnutls_algorithms.c: Add - gnutls_pk_list and gnutls_pk_get_id. Suggested by Sam Varshavchik - . - -2008-09-01 Simon Josefsson - - * gl/arpa_inet.in.h, gl/gnulib.mk, gl/m4/include_next.m4, - gl/m4/lib-link.m4, gl/m4/lib-prefix.m4, gl/netinet_in.in.h, - gl/stdarg.in.h, lgl/Makefile.am, lgl/float.in.h, - lgl/m4/include_next.m4, lgl/m4/lib-link.m4, lgl/m4/lib-prefix.m4, - lgl/stdint.in.h, lgl/stdio.in.h, lgl/stdlib.in.h, lgl/string.in.h, - lgl/strings.in.h, lgl/sys_socket.in.h, lgl/sys_stat.in.h, - lgl/time.in.h, lgl/unistd.in.h, lgl/wchar.in.h: Update gnulib files. - -2008-09-01 Simon Josefsson - - * lib/minitasn1/Makefile.am, lib/openpgp/Makefile.am: Fixes. - -2008-09-01 Simon Josefsson - - * doc/gnutls.texi: Fix license and libgnutls-extra stuff. - -2008-08-31 Nikos Mavrogiannopoulos - - * : commit 765c079be0195f0f7fbefccf8b6a8910015042a6 Author: Nikos - Mavrogiannopoulos Date: Sun Aug 31 13:33:52 - 2008 +0300 - -2008-08-29 Simon Josefsson - - * lib/Makefile.am, lib/gnutls_openpgp.c, lib/openpgp/Makefile.am, - lib/openpgp/gnutls_openpgp.c: Move gnutls_openpgp.c to lib/openpgp/. - -2008-08-29 Simon Josefsson - - * lib/gnutls_errors.c: Add Since: tag for gtk-doc. - -2008-08-29 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2008-08-29 Simon Josefsson - - * cfg.mk: Fix release target. - -2008-08-29 Simon Josefsson - - * NEWS: Version 2.5.5. - -2008-08-29 Simon Josefsson - - * ChangeLog: Generated. - -2008-08-29 Simon Josefsson - - * .clcopying: Update copyright years. - -2008-08-29 Simon Josefsson - - * Makefile.am, cfg.mk: Split up release targets. - -2008-08-29 Simon Josefsson - - * NEWS, lib/minitasn1/element.c, lib/minitasn1/libtasn1.h, - lib/minitasn1/structure.c: Use libtasn1 1.5. - -2008-08-29 Simon Josefsson - - * lib/gnutls_str.c: Include stdarg.h for va_start etc. - -2008-08-29 Simon Josefsson - - * lib/gnutls_anon_cred.c: Fix dummy cred. - -2008-08-29 Simon Josefsson - - * configure.in: Bump libtool version because of new API. - -2008-08-29 Simon Josefsson - - * doc/examples/ex-client-tlsia.c, doc/examples/ex-serv-anon.c, - doc/examples/ex-serv-export.c, doc/examples/ex-serv-pgp.c, - doc/examples/ex-serv-psk.c, doc/examples/ex-serv-srp.c, - doc/examples/ex-serv1.c, lib/gnutls_anon_cred.c, - lib/gnutls_buffers.c, lib/opencdk/keydb.c, - libextra/openssl_compat.c, libextra/openssl_compat.h, - src/certtool-cfg.c, src/certtool.c, src/cli.c, src/common.c, - src/crypt.c, src/prime.c, src/printlist.c, src/serv.c, src/tests.c, - src/tls_test.c: Fix warnings. - -2008-08-29 Simon Josefsson - - * configure.in: Fix description of --enable-developer-mode. Right - now all it does is to enable compiler warnings. - -2008-08-29 Simon Josefsson - - * NEWS, lib/auth_cert.c, lib/auth_srp_passwd.h, - lib/auth_srp_sb64.c, lib/gnutls_constate.c, lib/gnutls_global.c, - lib/gnutls_helper.c, lib/gnutls_int.h, lib/gnutls_srp.c, - lib/gnutls_supplemental.c, lib/gnutls_x509.c, lib/mac-libgcrypt.c, - lib/mpi-libgcrypt.c, lib/opencdk/armor.c, lib/opencdk/hash.c, - lib/opencdk/keydb.c, lib/opencdk/literal.c, lib/opencdk/main.h, - lib/opencdk/opencdk.h, lib/opencdk/stream.c, lib/openpgp/extras.c, - lib/pk-libgcrypt.c, libextra/gnutls_ia.c: Fix warnings. - -2008-08-29 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2008-08-29 Simon Josefsson - - * lib/gnutls_errors.c: Translate unknown error code message. - -2008-08-29 Simon Josefsson - - * lib/gnutls_errors.c: Don't translate symbol names. - -2008-08-29 Simon Josefsson - - * lib/gnutls_errors.c: Fix warning about defining variable inside - functions. - -2008-08-29 Simon Josefsson - - * NEWS, includes/gnutls/gnutls.h.in, lib/gnutls_errors.c, - src/errcodes.c: Add gnutls_strerror_name. - -2008-08-29 Simon Josefsson - - * lib/gnutls_extensions.c: Re-add, but mark static. - -2008-08-29 Simon Josefsson - - * GNUmakefile, gl/getdelim.c, gl/m4/getdelim.m4, maint.mk: Update - gnulib files. - -2008-08-29 Simon Josefsson - - * NEWS, lib/opencdk/Makefile.am, lib/x509/Makefile.am: Fix libtasn1 - include paths. - -2008-08-28 Nikos Mavrogiannopoulos - - * lib/opencdk/read-packet.c: avoid using gcrypt function. - -2008-08-28 Simon Josefsson - - * configure.in, lib/auth_rsa.c, lib/debug.c, lib/gnutls_cert.c, - lib/gnutls_dh.c, lib/gnutls_errors.c, lib/gnutls_extensions.c, - lib/gnutls_handshake.c, lib/gnutls_v2_compat.c: Fix warnings. - -2008-08-28 Simon Josefsson - - * lib/x509/common.c: Simplify logic. - -2008-08-28 Simon Josefsson - - * lib/x509/dn.c: Remove dead code. - -2008-08-28 Simon Josefsson - - * lib/openpgp/Makefile.am: Don't include missing -I's. - -2008-08-28 Simon Josefsson - - * configure.in: Drop warning. - -2008-08-28 Simon Josefsson - - * lib/x509/Makefile.am: Drop removed libextra directories from -I's. - -2008-08-28 Simon Josefsson - - * configure.in: Enable all kind of warnings. If you remove some, - add a comment on why. - -2008-08-28 Simon Josefsson - - * lib/openpgp/pgp.c, lib/x509/pbkdf2-sha1.c: Fix warnings. - -2008-08-28 Simon Josefsson - - * configure.in: Tweak warnings. - -2008-08-28 Simon Josefsson - - * includes/gnutls/x509.h, lib/x509/common.c, lib/x509/common.h, - lib/x509/dn.c: Fix warnings. - -2008-08-28 Simon Josefsson - - * lib/x509/common.c, lib/x509/common.h: Fix warnings. - -2008-08-28 Simon Josefsson - - * lib/auth_srp.c, lib/rnd-libgcrypt.c: Fix warnings. - -2008-08-28 Simon Josefsson - - * lib/gnutls_num.h: Protect against double inclusion. - -2008-08-28 Simon Josefsson - - * lib/crypto.h: Protect against double inclusions. - -2008-08-28 Simon Josefsson - - * lgl/Makefile.am, lgl/byteswap.in.h, lgl/m4/byteswap.m4, - lgl/m4/gnulib-cache.m4, lgl/m4/gnulib-comp.m4, - lgl/tests/Makefile.am, lgl/tests/test-byteswap.c, lib/gnutls_num.c, - lib/gnutls_num.h: Use byteswap from gnulib. - -2008-08-28 Simon Josefsson - - * lib/auth_srp.h, lib/gnutls_global.c: Fix warnings. - -2008-08-28 Simon Josefsson - - * lib/gnutls_auth_int.h: Protect against double inclusion. - -2008-08-28 Simon Josefsson - - * lib/gnutls_errors.h: Protect against double inclusion. - -2008-08-28 Simon Josefsson - - * lib/gnutls_buffers.h, lib/gnutls_record.h, lib/gnutls_state.h: Fix - warnings. - -2008-08-28 Simon Josefsson - - * lib/gnutls_algorithms.h, lib/gnutls_pk.h, lib/gnutls_x509.h, - lib/x509/privkey.c, lib/x509/privkey_pkcs8.c, lib/x509/verify.c: Fix - warnings. - -2008-08-28 Simon Josefsson - - * configure.in: Add warning. - -2008-08-28 Simon Josefsson - - * configure.in: Check whether warning flags are supported before - using them. - -2008-08-28 Simon Josefsson - - * doc/examples/Makefile.am, lib/gnutls_x509.c, lib/x509/output.c: - Make disable-extra-pki work better. - -2008-08-28 Simon Josefsson - - * configure.in: Fix --disable-extra-pki flag. - -2008-08-28 Simon Josefsson - - * NEWS, lib/gnutls_x509.c, lib/gnutls_x509.h, tests/Makefile.am, - tests/set_pkcs7_cred.c: Remove code to import PKCS#7 certificate - chains. The code hasn't worked since GnuTLS v0.9.0. Reported by - Christian Grothoff . - -2008-08-27 Simon Josefsson - - * lib/gnutls_handshake.c: Cast datasize to long to match %ld printf - format. - -2008-08-26 Simon Josefsson - - * tests/set_pkcs7_cred.c: Fix. - -2008-08-26 Simon Josefsson - - * tests/set_pkcs7_cred.c: Use utils infrastructure. - -2008-08-26 Simon Josefsson - - * tests/Makefile.am, tests/set_pkcs7_cred.c: Add set_pkcs7_cred self - test. - -2008-08-26 Daniel Kahn Gillmor - - * : commit 06ee30f6e553d4739ca50ab84492179da64cfc3e Author: Daniel - Kahn Gillmor Date: Tue Aug 26 11:00:27 - 2008 -0400 - -2008-08-26 Simon Josefsson - - * lib/gnutls_global.c, libextra/gnutls_extra.c: Fix gnulib calls. - -2008-08-26 Simon Josefsson - - * THANKS: Add. - -2008-08-26 Simon Josefsson - - * NEWS: Add. - -2008-08-26 Simon Josefsson - - * NEWS: Add. - -2008-08-26 Simon Josefsson - - * NEWS: Add. - -2008-08-26 Simon Josefsson - - * NEWS: Add. - -2008-08-26 Simon Josefsson - - * gl/m4/autobuild.m4, lgl/Makefile.am, lgl/m4/gnulib-comp.m4, - lgl/m4/string_h.m4, lgl/m4/strverscmp.m4, lgl/m4/threadlib.m4, - lgl/string.in.h, lgl/strverscmp.h, lgl/tests/Makefile.am, - lgl/tests/test-strverscmp.c: Update gnulib files. - -2008-08-25 Nikos Mavrogiannopoulos - - * lib/gnutls_pk.c, lib/pk-libgcrypt.c, lib/x509/privkey.c: corrected - private key generation - -2008-08-25 Nikos Mavrogiannopoulos - - * : commit 976565830d853f981ecd749bdb15dd02133ed93b Author: Nikos - Mavrogiannopoulos Date: Mon Aug 25 19:50:07 - 2008 +0300 - -2008-08-25 Nikos Mavrogiannopoulos - - * lib/x509/output.c: removed code that incorrectly printed IP - addresses. - -2008-08-23 Simon Josefsson - - * NEWS: Add. - -2008-08-23 Simon Josefsson - - * po/LINGUAS, po/fr.po.in, po/nl.po.in: Sync with TP. - -2008-08-20 Simon Josefsson - - * NEWS: Add. - -2008-08-19 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2008-08-19 Nikos Mavrogiannopoulos - - * lib/opencdk/opencdk.h, lib/opencdk/read-packet.c: patch by Daniel - Kahn Gillmor, to enable parsing (but not decrypting) of locked - secret keys (including the "gnu-dummy" S2K option). - -2008-08-19 Simon Josefsson - - * ChangeLog: Generated. - -2008-08-19 Simon Josefsson - - * NEWS: Version 2.5.4. - -2008-08-18 Simon Josefsson - - * gl/m4/autobuild.m4, lgl/m4/lock.m4: Update gnulib files. - -2008-08-18 Simon Josefsson - - * NEWS: Fix. - -2008-08-18 Simon Josefsson - - * NEWS: Add. - -2008-08-18 Simon Josefsson - - * NEWS: Add. - -2008-08-18 Simon Josefsson - - * lib/gnutls_global.c: Fix secure memory initialization of - libgcrypt. Reported by Joe Orton in - - . - -2008-08-16 Simon Josefsson - - * doc/gnutls.texi: Reference NIST SP 800-57. - -2008-08-16 Simon Josefsson - - * doc/protocol/rfc5246.txt: Add. - -2008-08-14 Simon Josefsson - - * NEWS: Re-add lost entry. - -2008-08-14 Simon Josefsson - - * lib/crypto.c, lib/gnutls_extensions.c, lib/gnutls_state.c, - lib/x509/crq.c: Doc fixes. - -2008-08-14 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2008-08-14 Simon Josefsson - - * ChangeLog: Generated. - -2008-08-14 Simon Josefsson - - * NEWS: Version 2.5.3. - -2008-08-13 Simon Josefsson - - * NEWS: Add. - -2008-08-13 Simon Josefsson - - * NEWS: Add. - -2008-08-13 Simon Josefsson - - * includes/gnutls/extra.h, includes/gnutls/openssl.h, - includes/gnutls/pkcs12.h, includes/gnutls/x509.h: Bump copyright in - installed header files. - -2008-08-13 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2008-08-13 Simon Josefsson - - * NEWS: Add. - -2008-08-13 Simon Josefsson - - * includes/gnutls/gnutls.h.in: Drop final comma in enum. Reported - in . - -2008-08-13 Simon Josefsson - - * lib/gnutlsxx.cpp: Don't call SRP functions if SRP is disabled. - -2008-08-13 Simon Josefsson - - * includes/gnutls/compat.h, includes/gnutls/gnutls.h.in, - lib/auth_rsa.c, lib/gnutls_constate.c, lib/gnutls_handshake.c, - lib/gnutls_int.h, lib/gnutls_kx.c, lib/gnutls_session_pack.c, - lib/gnutls_sig.c, lib/gnutls_state.c, lib/gnutls_v2_compat.c, - libextra/gnutls_ia.c: Fix namespace problem with TLS_MASTER_SIZE and - TLS_RANDOM_SIZE. - -2008-08-13 Simon Josefsson - - * gl/c-ctype.c, gl/c-ctype.h, gl/gnulib.mk, gl/inet_pton.c, - gl/m4/gnulib-comp.m4, gl/m4/inet_pton.m4, gl/tests/gnulib.mk, - gl/tests/test-c-ctype.c: Update gnulib files. - -2008-08-13 Simon Josefsson - - * NEWS, includes/gnutls/gnutls.h.in, lib/gnutls_handshake.c, - lib/gnutls_int.h, lib/gnutls_state.c, tests/Makefile.am, - tests/finished.c: Add API to set callback to extract TLS Finished - messages. - -2008-08-08 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2008-08-05 Simon Josefsson - - * GNUmakefile: Update gnulib files. - -2008-08-05 Simon Josefsson - - * NEWS: Add. - -2008-08-04 Simon Josefsson - - * GNUmakefile, build-aux/gnupload: Update gnulib files. - -2008-08-03 Nikos Mavrogiannopoulos - - * includes/gnutls/x509.h, lib/x509/crq.c: added - gnutls_x509_crq_set_key_rsa_raw() which will set a raw key to a - certificate request. - -2008-08-02 Nikos Mavrogiannopoulos - - * : commit 767fb210de7dcde20ac05e1f3ca78375279f5603 Author: Nikos - Mavrogiannopoulos Date: Sat Aug 2 11:55:56 - 2008 +0300 - -2008-07-22 Simon Josefsson - - * lib/auth_psk_passwd.c, lib/gnutls_cipher.c, - lib/gnutls_handshake.c, lib/x509/pkcs12.c, - lib/x509/privkey_pkcs8.c, src/crypt.c: Make it compile. - -2008-07-22 Simon Josefsson - - * doc/Makefile.am: Drop doxygen. - -2008-07-22 Simon Josefsson - - * GNUmakefile, gl/m4/gnulib-comp.m4, lgl/m4/gnulib-comp.m4, - lgl/vasnprintf.c: Update gnulib files. - -2008-07-10 Simon Josefsson - - * configure.in: Bump versions. - -2008-07-10 Simon Josefsson - - * NEWS, configure.in, doc/Makefile.am, doc/doxygen/Doxyfile.in, - doc/doxygen/Doxyfile.orig: Add doxygen scripts. - -2008-07-10 Simon Josefsson - - * lib/x509/common.c: Cleanup struct name, for doxygen documentation. - -2008-07-09 Simon Josefsson - - * lib/random.h: Add license. - -2008-07-09 Simon Josefsson - - * lib/auth_rsa.c, lib/auth_srp_passwd.c, lib/gnutls_pk.c, - lib/random.c, lib/random.h, lib/x509/privkey_pkcs8.c, src/psk.c: - Minor randomness API cleanups. - -2008-07-09 Simon Josefsson - - * lib/x509/dsa.c: Remove unused code. - -2008-07-08 Simon Josefsson - - * ChangeLog: Generated. - -2008-07-08 Simon Josefsson - - * NEWS: Version 2.5.2. - -2008-07-08 Simon Josefsson - - * doc/gnutls.texi: Fix @include of algorithms.texi. - -2008-07-08 Simon Josefsson - - * doc/Makefile.am: Fix typos. - -2008-07-08 Simon Josefsson - - * doc/Makefile.am, src/Makefile.am: Generate algorithms.texi the - same way as error_codes.texi for consistency. Fixes 'make - distcheck' due to srcdir != objdir breakage. - -2008-07-08 Simon Josefsson - - * configure.in: Bump libtool library version because we added - interfaces. - -2008-07-08 Simon Josefsson - - * NEWS, lib/Makefile.am, lib/ext_inner_application.c, - lib/ext_inner_application.h, lib/gnutls_extensions.c, - libextra/Makefile.am, libextra/ext_inner_application.c, - libextra/ext_inner_application.h, libextra/gnutls_extra.c: Move - TLS/IA features to libgnutls-extra. - -2008-07-08 Simon Josefsson - - * tests/tlsia.c: Initialize extra library. - -2008-07-08 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2008-07-07 Nikos Mavrogiannopoulos - - * src/printlist.c: added missing file. - -2008-07-06 Nikos Mavrogiannopoulos - - * doc/Makefile.am, doc/gnutls.texi: automatically generate the - appendix with supported algorithms and ciphersuites. - -2008-07-06 Nikos Mavrogiannopoulos - - * src/Makefile.am: automatically generate the appendix with - supported algorithms and ciphersuites. - -2008-07-06 Nikos Mavrogiannopoulos - - * lib/gnutls_priority.c: document a way to get the available - algorithms and protocols. - -2008-07-05 Nikos Mavrogiannopoulos - - * lib/x509/common.c: Corrected memory leak in read_octet. Based on - patch by Colin Leroy (colin@colino.net) - -2008-07-03 Simon Josefsson - - * NEWS: Add. - -2008-07-03 Simon Josefsson - - * includes/gnutls/gnutls.h.in, lib/gnutls_extensions.c, - lib/gnutls_extensions.h, lib/gnutls_global.c, - lib/gnutls_handshake.c, lib/gnutls_int.h: Add APIs to register TLS - extension handlers. - -2008-07-02 Simon Josefsson - - * lib/minitasn1/Makefile.am, lib/x509/Makefile.am: Use AM_CPPFLAGS. - -2008-07-02 Simon Josefsson - - * lib/opencdk/Makefile.am: lib/opencdk/Makefile.am (INCLUDES): - Rename to `AM_CPPFLAGS'. - -2008-07-02 Simon Josefsson - - * NEWS: Fix. - -2008-07-02 Simon Josefsson - - * NEWS: Add. - -2008-07-02 Simon Josefsson - - * Makefile.am, cfg.mk: Guile problem fixed. - -2008-07-02 Simon Josefsson - - * lib/gnutls_dh_primes.c: Fix typo that swapped prime/generator in - gnutls_dh_params_generate2. - -2008-07-02 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2008-07-02 Simon Josefsson - - * ChangeLog: Generated. - -2008-07-02 Simon Josefsson - - * NEWS: Version 2.5.1. - -2008-07-02 Simon Josefsson - - * cfg.mk, doc/examples/ex-cert-select.c, - doc/examples/ex-client-psk.c, doc/examples/ex-client-tlsia.c, - doc/examples/ex-client1.c, doc/examples/ex-client2.c, - doc/examples/ex-serv-export.c, doc/examples/ex-serv-pgp.c, - doc/examples/ex-serv-psk.c, doc/examples/ex-serv1.c, - guile/src/core.c, guile/src/errors.c, guile/src/extra.c, - lib/auth_cert.c, lib/auth_dh_common.c, lib/auth_dhe.c, - lib/auth_psk.c, lib/auth_psk_passwd.c, lib/auth_rsa.c, - lib/auth_rsa_export.c, lib/auth_srp.c, lib/auth_srp_passwd.c, - lib/auth_srp_rsa.c, lib/cipher-libgcrypt.c, lib/crypto.c, - lib/debug.c, lib/ext_cert_type.c, lib/ext_max_record.c, - lib/ext_oprfi.c, lib/ext_server_name.c, lib/ext_srp.c, - lib/gnutls_alert.c, lib/gnutls_algorithms.c, - lib/gnutls_anon_cred.c, lib/gnutls_auth.c, lib/gnutls_buffers.c, - lib/gnutls_cert.c, lib/gnutls_cipher.c, lib/gnutls_cipher_int.c, - lib/gnutls_compress.c, lib/gnutls_constate.c, lib/gnutls_db.c, - lib/gnutls_dh.c, lib/gnutls_dh_primes.c, lib/gnutls_errors.c, - lib/gnutls_extensions.c, lib/gnutls_global.c, - lib/gnutls_handshake.c, lib/gnutls_hash_int.c, lib/gnutls_kx.c, - lib/gnutls_mpi.c, lib/gnutls_openpgp.c, lib/gnutls_pk.c, - lib/gnutls_priority.c, lib/gnutls_psk.c, lib/gnutls_psk_netconf.c, - lib/gnutls_record.c, lib/gnutls_session.c, - lib/gnutls_session_pack.c, lib/gnutls_sig.c, lib/gnutls_srp.c, - lib/gnutls_state.c, lib/gnutls_str.c, lib/gnutls_supplemental.c, - lib/gnutls_ui.c, lib/gnutls_v2_compat.c, lib/gnutls_x509.c, - lib/mac-libgcrypt.c, lib/minitasn1/structure.c, - lib/mpi-libgcrypt.c, lib/opencdk/armor.c, lib/opencdk/dummy.c, - lib/opencdk/hash.c, lib/opencdk/kbnode.c, lib/opencdk/keydb.c, - lib/opencdk/literal.c, lib/opencdk/main.c, lib/opencdk/misc.c, - lib/opencdk/new-packet.c, lib/opencdk/pubkey.c, - lib/opencdk/read-packet.c, lib/opencdk/seskey.c, - lib/opencdk/sig-check.c, lib/opencdk/stream.c, - lib/opencdk/verify.c, lib/opencdk/write-packet.c, - lib/openpgp/compat.c, lib/openpgp/extras.c, lib/openpgp/output.c, - lib/openpgp/pgp.c, lib/openpgp/pgpverify.c, lib/openpgp/privkey.c, - lib/pk-libgcrypt.c, lib/random.c, lib/rnd-libgcrypt.c, - lib/x509/common.c, lib/x509/crl.c, lib/x509/crq.c, lib/x509/dn.c, - lib/x509/dsa.c, lib/x509/extensions.c, lib/x509/mpi.c, - lib/x509/output.c, lib/x509/pbkdf2-sha1.c, lib/x509/pkcs12.c, - lib/x509/pkcs12_encr.c, lib/x509/pkcs7.c, lib/x509/privkey.c, - lib/x509/privkey_pkcs8.c, lib/x509/rfc2818_hostname.c, - lib/x509/sign.c, lib/x509/x509.c, lib/x509/x509_write.c, - libextra/gnutls_openssl.c, src/certtool-cfg.c, src/certtool.c, - src/cli.c, src/common.c, src/crypt.c, src/psk.c, src/select.c, - src/serv.c, src/tests.c, src/tls_test.c, - tests/certificate_set_x509_crl.c, tests/crypto_rng.c, - tests/dhepskself.c, tests/dn.c, tests/gc.c, - tests/hostname-check/hostname-check.c, tests/mini.c, - tests/moredn.c, tests/mpi.c, tests/openpgp/keyring.c, - tests/openpgpself.c, tests/oprfi.c, tests/parse_ca.c, - tests/pkcs12-decode/pkcs12_s2k.c, tests/x509dn.c, tests/x509self.c, - tests/x509signself.c: Indent code. - -2008-07-02 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2008-07-02 Simon Josefsson - - * ChangeLog: Generated. - -2008-07-02 Simon Josefsson - - * NEWS: Version 2.5.0. - -2008-07-02 Simon Josefsson - - * tests/pkcs12-decode/Makefile.am: The -I.. needs to point to - srcdir. - -2008-07-02 Simon Josefsson - - * NEWS: Add. - -2008-07-02 Simon Josefsson - - * NEWS: Add. - -2008-07-02 Simon Josefsson - - * lib/opencdk/Makefile.am: Need -I to builddir for gnutls.h. - -2008-07-02 Simon Josefsson - - * doc/reference/Makefile.am: Ignore more. - -2008-07-02 Simon Josefsson - - * lib/x509/Makefile.am: Dist pbkdf2-sha1.h. - -2008-07-02 Simon Josefsson - - * po/pl.po.in, po/vi.po.in: Sync with TP. - -2008-07-02 Simon Josefsson - - * Makefile.am, cfg.mk: Disable building guile for now, to be able to - do a release. - -2008-07-02 Simon Josefsson - - * NEWS: Sort functions. - -2008-07-02 Simon Josefsson - - * doc/gnutls.texi: Don't use @acronym for C++, as it breaks old - texinfo/tetex installations. Further, C++ isn't an acronym anyway - as far as I know. - -2008-07-01 Simon Josefsson - - * gl/gnulib.mk, gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, - gl/tests/Makefile.am, gl/tests/gnulib.mk, - gl/tests/test-EOVERFLOW.c, gl/tests/test-arpa_inet.c, - gl/tests/test-getaddrinfo.c, gl/tests/test-getdelim.c, - gl/tests/test-getline.c, gl/tests/test-netinet_in.c, - gl/tests/test-strerror.c, lgl/Makefile.am, lgl/m4/gnulib-cache.m4, - lgl/m4/gnulib-comp.m4, lgl/tests/Makefile.am, lgl/tests/dummy.c, - lgl/tests/intprops.h, lgl/tests/test-EOVERFLOW.c, - lgl/tests/test-alloca-opt.c, lgl/tests/test-c-ctype.c, - lgl/tests/test-fseeko.c, lgl/tests/test-fseeko.sh, - lgl/tests/test-func.c, lgl/tests/test-lseek.c, - lgl/tests/test-lseek.sh, lgl/tests/test-memchr.c, - lgl/tests/test-memcmp.c, lgl/tests/test-read-file.c, - lgl/tests/test-snprintf.c, lgl/tests/test-stdbool.c, - lgl/tests/test-stdint.c, lgl/tests/test-stdio.c, - lgl/tests/test-stdlib.c, lgl/tests/test-string.c, - lgl/tests/test-strings.c, lgl/tests/test-sys_socket.c, - lgl/tests/test-sys_stat.c, lgl/tests/test-time.c, - lgl/tests/test-unistd.c, lgl/tests/test-vasnprintf.c, - lgl/tests/test-vasprintf.c, lgl/tests/test-wchar.c, - lgl/tests/verify.h: Add gnulib self-tests. - -2008-07-01 Simon Josefsson - - * lgl/m4/gnulib-cache.m4: Put gnulib tests in a separate directory. - -2008-07-01 Simon Josefsson - - * m4/gc_random.m4: Remove unused code. - -2008-07-01 Simon Josefsson - - * lgl/Makefile.am, lgl/arcfour.c, lgl/arcfour.h, lgl/arctwo.c, - lgl/arctwo.h, lgl/des.c, lgl/des.h, lgl/gc-gnulib.c, - lgl/gc-libgcrypt.c, lgl/gc-pbkdf2-sha1.c, lgl/gc.h, lgl/hmac-md5.c, - lgl/hmac-sha1.c, lgl/hmac.h, lgl/m4/arcfour.m4, lgl/m4/arctwo.m4, - lgl/m4/des.m4, lgl/m4/gc-arcfour.m4, lgl/m4/gc-arctwo.m4, - lgl/m4/gc-camellia.m4, lgl/m4/gc-des.m4, lgl/m4/gc-hmac-md5.m4, - lgl/m4/gc-hmac-sha1.m4, lgl/m4/gc-md2.m4, lgl/m4/gc-md4.m4, - lgl/m4/gc-md5.m4, lgl/m4/gc-pbkdf2-sha1.m4, lgl/m4/gc-random.m4, - lgl/m4/gc-rijndael.m4, lgl/m4/gc-sha1.m4, lgl/m4/gc.m4, - lgl/m4/gnulib-cache.m4, lgl/m4/gnulib-comp.m4, lgl/m4/hmac-md5.m4, - lgl/m4/hmac-sha1.m4, lgl/m4/md2.m4, lgl/m4/md4.m4, lgl/m4/md5.m4, - lgl/m4/memxor.m4, lgl/m4/rijndael.m4, lgl/m4/sha1.m4, lgl/md2.c, - lgl/md2.h, lgl/md4.c, lgl/md4.h, lgl/md5.c, lgl/md5.h, - lgl/memxor.c, lgl/memxor.h, lgl/rijndael-alg-fst.c, - lgl/rijndael-alg-fst.h, lgl/rijndael-api-fst.c, - lgl/rijndael-api-fst.h, lgl/sha1.c, lgl/sha1.h: Drop gnulib gc - modules. - -2008-07-01 Simon Josefsson - - * configure.in, lgl/m4/gnulib-cache.m4: Drop gc. - -2008-07-01 Simon Josefsson - - * lib/gnutls_cipher.c, lib/gnutls_handshake.c, - lib/x509/privkey_pkcs8.c: Drop gc.h. - -2008-06-30 Simon Josefsson - - * NEWS: Add. - -2008-06-30 Simon Josefsson - - * lib/gnutls_handshake.c: (_gnutls_handshake_hash_buffers_clear): Make sure deinitialized MAC - hashes are initialized. Report and tiny patch from Tomas Mraz - . - -2008-06-30 Simon Josefsson - - * THANKS: Add. - -2008-06-30 Nikos Mavrogiannopoulos - - * src/crypt.c: this fixes a problem in srptool, where the passwords - never match (--verify check) on some architectures (patch by - Matthias Koenig ) - -2008-06-30 Nikos Mavrogiannopoulos - - * includes/gnutls/openssl.h, libextra/gnutls_openssl.c: corrected - openssl. - -2008-06-30 Nikos Mavrogiannopoulos - - * includes/gnutls/openssl.h, libextra/gnutls_openssl.c: use native - gnutls functions. - -2008-06-30 Nikos Mavrogiannopoulos - - * lib/gnutls_hash_int.c, lib/gnutls_hash_int.h: added - _gnutls_hash_fast() - -2008-06-30 Nikos Mavrogiannopoulos - - * : commit fded9a7d1e6d58f951fc7e8f4db80d3e23f5ea1f Author: Nikos - Mavrogiannopoulos Date: Mon Jun 30 20:15:19 - 2008 +0300 - -2008-06-30 Nikos Mavrogiannopoulos - - * src/crypt.c, src/psk.c: avoid using gc_ functions for random data. - -2008-06-30 Nikos Mavrogiannopoulos - - * lib/gnutls_hash_int.c, lib/gnutls_hash_int.h, - lib/x509/Makefile.am, lib/x509/pbkdf2-sha1.c, - lib/x509/pbkdf2-sha1.h, lib/x509/privkey_pkcs8.c, tests/gc.c: added - _gnutls_pkcs5_pbkdf2_sha1() based on gc_pkcs5_pbkdf2_sha1() - -2008-06-30 Simon Josefsson - - * : Remove executable. - -2008-06-30 Simon Josefsson - - * lib/gnutls_psk_netconf.c: Remove debug code. - -2008-06-30 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2008-06-30 Simon Josefsson - - * gl/m4/gnulib-cache.m4, gl/m4/gnulib-tool.m4, - lgl/m4/gnulib-cache.m4, lgl/m4/gnulib-tool.m4: Update gnulib files. - -2008-06-30 Simon Josefsson - - * NEWS: Add. - -2008-06-29 Nikos Mavrogiannopoulos - - * lib/gnutls_state.c: added check before reallocation of parameters - to avoid memory leaks on rehandshake. - -2008-06-28 Nikos Mavrogiannopoulos - - * NEWS: document the rewrite of opencdk crypto backend. - -2008-06-28 Nikos Mavrogiannopoulos - - * NEWS, doc/gnutls.texi, includes/gnutls/crypto.h, - includes/gnutls/gnutls.h.in, lib/Makefile.am, lib/auth_anon.c, - lib/auth_dh_common.c, lib/auth_dh_common.h, lib/auth_dhe.c, - lib/auth_dhe_psk.c, lib/auth_rsa.c, lib/auth_rsa_export.c, - lib/auth_srp.c, lib/cipher-libgcrypt.c, lib/crypto.c, lib/crypto.h, - lib/debug.c, lib/debug.h, lib/gnutls_algorithms.c, - lib/gnutls_cert.h, lib/gnutls_cipher_int.c, - lib/gnutls_cipher_int.h, lib/gnutls_datum.h, lib/gnutls_dh.c, - lib/gnutls_dh.h, lib/gnutls_dh_primes.c, lib/gnutls_global.c, - lib/gnutls_hash_int.c, lib/gnutls_hash_int.h, lib/gnutls_int.h, - lib/gnutls_mpi.c, lib/gnutls_mpi.h, lib/gnutls_openpgp.c, - lib/gnutls_pk.c, lib/gnutls_pk.h, lib/gnutls_priority.c, - lib/gnutls_psk_netconf.c, lib/gnutls_rsa_export.c, - lib/gnutls_rsa_export.h, lib/gnutls_sig.c, lib/gnutls_sig.h, - lib/gnutls_srp.c, lib/gnutls_srp.h, lib/gnutls_state.c, - lib/gnutls_state.h, lib/gnutls_supplemental.c, lib/gnutls_x509.h, - lib/mac-libgcrypt.c, lib/mpi-libgcrypt.c, lib/opencdk/Makefile.am, - lib/opencdk/armor.c, lib/opencdk/context.h, lib/opencdk/dummy.c, - lib/opencdk/filters.h, lib/opencdk/hash.c, lib/opencdk/kbnode.c, - lib/opencdk/keydb.c, lib/opencdk/literal.c, lib/opencdk/main.c, - lib/opencdk/main.h, lib/opencdk/misc.c, lib/opencdk/new-packet.c, - lib/opencdk/opencdk.h, lib/opencdk/packet.h, lib/opencdk/pubkey.c, - lib/opencdk/read-packet.c, lib/opencdk/seskey.c, - lib/opencdk/sig-check.c, lib/opencdk/stream.c, lib/opencdk/types.h, - lib/opencdk/verify.c, lib/opencdk/write-packet.c, - lib/openpgp/extras.c, lib/openpgp/openpgp_int.h, - lib/openpgp/output.c, lib/openpgp/pgp.c, lib/openpgp/privkey.c, - lib/pk-libgcrypt.c, lib/random.c, lib/random.h, - lib/rnd-libgcrypt.c, lib/x509/Makefile.am, lib/x509/common.c, - lib/x509/common.h, lib/x509/crl.c, lib/x509/mpi.c, - lib/x509/pkcs12.c, lib/x509/pkcs12_encr.c, lib/x509/privkey.c, - lib/x509/privkey_pkcs8.c, lib/x509/sign.c, lib/x509/verify.c, - lib/x509/x509.c, lib/x509/x509_int.h, src/psk-gaa.c, - tests/Makefile.am, tests/ca.pem, tests/crypto_rng.c, tests/mpi.c, - tests/netconf-psk.c, tests/openpgp/keyring.c, - tests/pkcs12-decode/Makefile.am, tests/pkcs12-decode/pkcs12_s2k.c: - Initial merge attempt with gnutls_with_ext_mpi - -2008-06-25 Nikos Mavrogiannopoulos - - * lib/gnutls_dh_primes.c: do not add trailing zero on the size - count. - -2008-06-23 Simon Josefsson - - * GNUmakefile: Update gnulib files. - -2008-06-23 Simon Josefsson - - * NEWS: Add. - -2008-06-23 Simon Josefsson - - * lib/Makefile.am: Fix build failures related to opencdk.h. - Reported by Roman Bogorodskiy in - - . - -2008-06-19 Simon Josefsson - - * configure.in: Fix typo. - -2008-06-19 Simon Josefsson - - * configure.in: Disable C++ library if psk, srp, anon etc have been - disabled. The libgnutlsxx.cpp file calls several functions that may - have been removed. - -2008-06-19 Simon Josefsson - - * configure.in, doc/examples/Makefile.am: Make - --disable-psk-authentication work. - -2008-06-19 Simon Josefsson - - * lgl/m4/lock.m4: Update gnulib files. - -2008-06-19 Simon Josefsson - - * doc/examples/ex-cxx.cpp: Use cstring instead of string.h. - Reported by Daniel Black in - - . - -2008-06-19 Simon Josefsson - - * NEWS: Add. - -2008-06-18 Simon Josefsson - - * src/cli.c, src/psk.c: Fix warning regarding undeclared getpass - replacement. Reported by Massimo Gaspari - in . - -2008-06-18 Simon Josefsson - - * src/cli.c: Fix warning. Reported by Massimo Gaspari - in - . - -2008-06-18 Simon Josefsson - - * lib/gnutls_state.h: Add prototype for _gnutls_session_is_psk. - Reported by Massimo Gaspari in - . - -2008-06-18 Simon Josefsson - - * Makefile.am, NEWS, configure.in: Bump versions. - -2008-06-18 Simon Josefsson - - * ChangeLog: Generated. - -2008-06-18 Simon Josefsson - - * NEWS: Add v2.4.0 release notes. - -2008-06-18 Simon Josefsson - - * Makefile.am: Fix release target. - -2008-06-18 Simon Josefsson - - * NEWS: Version 2.4.0. - -2008-06-18 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2008-06-18 Simon Josefsson - - * AUTHORS, NEWS, includes/gnutls/openpgp.h, lib/openpgp/pgp.c, - lib/openpgp/privkey.c: libgnutls [OpenPGP]: New APIs to retrieve - fingerprint from OpenPGP subkeys. Contributed by Daniel Kahn - Gillmor . - -2008-06-16 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2008-06-16 Simon Josefsson - - * lib/openpgp/pgp.c: Fix typo in documentation. Tiny patch from - Daniel Kahn Gillmor . - -2008-06-15 Simon Josefsson - - * ChangeLog: Generated. - -2008-06-15 Simon Josefsson - - * NEWS: Version 2.3.15. - -2008-06-15 Simon Josefsson - - * tests/Makefile.am, tests/openpgp-certs/Makefile.am: Disable - openpgp-certs properly. - -2008-06-15 Simon Josefsson - - * doc/gendocs_template, lgl/Makefile.am, lgl/m4/stdio_h.m4, - lgl/stdio.in.h: Update gnulib files. - -2008-06-15 Simon Josefsson - - * NEWS, tests/Makefile.am: Disable openpgp-certs self-test. - -2008-06-11 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2008-06-11 Simon Josefsson - - * ChangeLog: Generated. - -2008-06-11 Simon Josefsson - - * NEWS: Version 2.3.14. - -2008-06-10 Simon Josefsson - - * lgl/m4/memmem.m4: Update gnulib files. - -2008-06-10 Simon Josefsson - - * tests/openpgp-certs/testcerts: Use port 5557. - -2008-06-10 Simon Josefsson - - * NEWS: Unrelease it. - -2008-06-09 Simon Josefsson - - * tests/openpgp-certs/testcerts: Fix. - -2008-06-09 Simon Josefsson - - * tests/openpgp-certs/testcerts: Deal with objdir != srcdir builds. - -2008-06-09 Simon Josefsson - - * tests/openpgp-certs/Makefile.am: Dist *.gpg's. - -2008-06-09 Simon Josefsson - - * Makefile.am: Fix release target. - -2008-06-09 Simon Josefsson - - * configure.in: Reorder. - -2008-06-09 Simon Josefsson - - * configure.in: Drop AC_CANONICAL_TARGET, unused. - -2008-06-09 Simon Josefsson - - * configure.in, gl/gnulib.mk, gl/m4/autobuild.m4, - gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, m4/autobuild.m4: Import - autobuild from gnulib. - -2008-06-09 Simon Josefsson - - * NEWS: Version 2.3.14. - -2008-06-09 Simon Josefsson - - * NEWS: Fix. - -2008-06-09 Simon Josefsson - - * lib/x509/x509.c: Doc fix. - -2008-06-08 Simon Josefsson - - * THANKS: Add. - -2008-06-08 Simon Josefsson - - * NEWS, lib/x509/x509.c: gnutls_x509_crt_get_extension_oid: Doc fix. - Reported by Sam Varshavchik . - -2008-06-08 Nikos Mavrogiannopoulos - - * lib/opencdk/sig-check.c: added check for empty UID list. - -2008-06-08 Nikos Mavrogiannopoulos - - * configure.in, tests/Makefile.am, tests/openpgp-certs/Makefile.am, - tests/openpgp-certs/ca-public.gpg, - tests/openpgp-certs/ca-secret.gpg, - tests/openpgp-certs/srv-public-127.0.0.1-signed.gpg, - tests/openpgp-certs/srv-public-all-signed.gpg, - tests/openpgp-certs/srv-public-localhost-signed.gpg, - tests/openpgp-certs/srv-public.gpg, - tests/openpgp-certs/srv-secret.gpg, tests/openpgp-certs/testcerts: - Added OpenPGP certificate verification test. - -2008-06-08 Nikos Mavrogiannopoulos - - * NEWS, lib/opencdk/keydb.c, lib/opencdk/main.h, - lib/opencdk/sig-check.c: Changed OpenPGP verification behaviour. An - OpenPGP certificate is now only considered verified if all the user - IDs are verified. - -2008-06-07 Simon Josefsson - - * NEWS, doc/examples/ex-cxx.cpp: Make it find strlen. Problem - reported by Rainer Gerhards and suggested fix - by "John Brooks" . - -2008-06-07 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2008-06-07 Simon Josefsson - - * po/LINGUAS: Sync with TP. - -2008-06-07 Simon Josefsson - - * po/LINGUAS: Sync with TP. - -2008-06-07 Simon Josefsson - - * ChangeLog: Generated. - -2008-06-07 Simon Josefsson - - * NEWS: Version 2.3.13. - -2008-06-07 Simon Josefsson - - * NEWS: Fix. - -2008-06-07 Simon Josefsson - - * NEWS: Add. - -2008-06-07 Simon Josefsson - - * doc/examples/ex-serv-export.c: Fix memory leak. - -2008-06-07 Simon Josefsson - - * tests/resume.c: Fix memory leak. - -2008-06-07 Simon Josefsson - - * GNUmakefile: Update gnulib files. - -2008-06-07 Simon Josefsson - - * NEWS, tests/anonself.c, tests/dhepskself.c, tests/mini.c, - tests/openpgpself.c, tests/oprfi.c, tests/x509dn.c, - tests/x509self.c, tests/x509signself.c: tests/: Reduce amount of - debugging output. - -2008-06-05 Simon Josefsson - - * NEWS: Add. - -2008-06-05 Simon Josefsson - - * tests/set_pkcs12_cred.c: Make it run without PKCS12FILE for - typical scenarios. - -2008-06-05 Simon Josefsson - - * NEWS: Fix. - -2008-06-05 Simon Josefsson - - * tests/resume.c: Fix memory leak. - -2008-06-05 Simon Josefsson - - * tests/tlsia.c: Fix memory leak. - -2008-06-05 Simon Josefsson - - * tests/x509dn.c: Fix memory leaks. - -2008-06-05 Simon Josefsson - - * tests/pskself.c: Fix most memory leaks. - -2008-06-05 Simon Josefsson - - * tests/dhepskself.c: Fix memory leaks. - -2008-06-05 Simon Josefsson - - * tests/x509signself.c: Fix memory leaks. - -2008-06-05 Simon Josefsson - - * tests/anonself.c: Fix memory leaks. - -2008-06-05 Simon Josefsson - - * tests/x509self.c: Revert last commit, fix memory leak the right - way. - -2008-06-05 Simon Josefsson - - * tests/openpgpself.c: Fix memory leak. - -2008-06-05 Simon Josefsson - - * tests/x509self.c: Fix memory leaks. - -2008-06-05 Simon Josefsson - - * doc/examples/ex-x509-info.c: Fix printing of serial number. - -2008-06-05 Simon Josefsson - - * tests/libgcrypt.supp: Drop non-generic stuff. - -2008-06-05 Simon Josefsson - - * tests/gc.c: Fix memory leak. - -2008-06-05 Simon Josefsson - - * tests/certder.c: Fix memory leaks. - -2008-06-05 Simon Josefsson - - * tests/moredn.c: Fix memory leak. - -2008-06-05 Simon Josefsson - - * NEWS: Add. - -2008-06-05 Simon Josefsson - - * tests/Makefile.am: Dist libgcrypt.supp. - -2008-06-05 Simon Josefsson - - * tests/libgcrypt.supp: Add. - -2008-06-05 Simon Josefsson - - * tests/mini.c: Fix warnings. - -2008-06-05 Simon Josefsson - - * NEWS, tests/Makefile.am, tests/mini.c: Add mini self-test, to - avoid having to fork to test TLS handshakes. - -2008-06-05 Simon Josefsson - - * po/ms.po.in: Sync with TP. - -2008-06-05 Simon Josefsson - - * NEWS: Add. - -2008-06-05 Simon Josefsson - - * doc/gnutls.texi: Reorder. - -2008-06-05 Simon Josefsson - - * doc/gnutls.texi: Add psktool to @direntry. Alphasort @direntry. - -2008-06-05 Simon Josefsson - - * README: Drop experimental stuff. - -2008-06-05 Simon Josefsson - - * NEWS: Fix. - -2008-06-05 Simon Josefsson - - * NEWS: Add. - -2008-06-05 Simon Josefsson - - * tests/openpgpself.c: The test now works. - -2008-06-05 Simon Josefsson - - * lgl/stdio-impl.h: Update gnulib files. - -2008-06-05 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2008-06-04 Nikos Mavrogiannopoulos - - * lib/openpgp/pgp.c, lib/openpgp/privkey.c: safer copying of keyid - type. - -2008-06-04 Simon Josefsson - - * ChangeLog: Generated. - -2008-06-04 Simon Josefsson - - * NEWS: Version 2.3.12. - -2008-06-04 Simon Josefsson - - * doc/protocol/draft-ietf-netconf-tls-02.txt: Add. - -2008-06-04 Simon Josefsson - - * NEWS: We reverted the ABI bump. - -2008-06-04 Simon Josefsson - - * lib/gnutls_psk_netconf.c: Doc fix. - -2008-06-04 Simon Josefsson - - * lib/gnutls_psk.c: Doc fix. - -2008-06-04 Simon Josefsson - - * doc/manpages/Makefile.am, src/psk-gaa.c: Generated. - -2008-06-04 Simon Josefsson - - * configure.in: Bump ABI version due to added symbols. - -2008-06-04 Simon Josefsson - - * : commit aa2c7264a52b993aca39c613e5fe1aed7511c972 Author: Simon - Josefsson Date: Wed Jun 4 08:11:34 2008 - +0200 - -2008-06-04 Simon Josefsson - - * doc/examples/ex-session-info.c: Update example with more PSK - printing. - -2008-06-04 Simon Josefsson - - * NEWS: Version 2.3.4.netconf.2. - -2008-06-04 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2008-06-04 Simon Josefsson - - * doc/gnutls.texi: Document PSK stuff. - -2008-06-04 Simon Josefsson - - * src/cli.c: Allow --pskusername to be specified to avoid query in - PSK callback. - -2008-06-04 Simon Josefsson - - * NEWS: Add. - -2008-06-04 Simon Josefsson - - * src/serv-gaa.c, src/serv-gaa.h: Generated. - -2008-06-04 Simon Josefsson - - * NEWS, src/cli.c: gnutls-cli: Implement PSK callback. - -2008-06-04 Simon Josefsson - - * NEWS, src/serv.c, src/serv.gaa: Add gnutls-serv --pskhint. - -2008-06-04 Simon Josefsson - - * lib/auth_psk.c: Generate server key exchange (psk identity hint). - Invoke client callback. - -2008-06-04 Simon Josefsson - - * includes/gnutls/gnutls.h.in, lib/auth_psk.h, lib/gnutls_psk.c: Add - gnutls_psk_set_server_credentials_hint. - -2008-06-03 Simon Josefsson - - * NEWS, includes/gnutls/gnutls.h.in, lib/gnutls_psk.c, src/common.c: - Add gnutls_psk_client_get_hint function. Use it. - -2008-06-03 Simon Josefsson - - * lib/gnutls_session_pack.c: Pack/unpack psk identity hint too. - -2008-06-03 Simon Josefsson - - * NEWS, src/psk-gaa.c, src/psk-gaa.h, src/psk.c, src/psk.gaa: - psktool: Support --netconf-hint. - -2008-06-03 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2008-06-02 Nikos Mavrogiannopoulos - - * lib/openpgp/openpgp_int.h: safer use of KEYID_IMPORT(). - -2008-06-02 Nikos Mavrogiannopoulos - - * lib/auth_cert.c: Corrected usage of DECR_LEN() - -2008-06-01 Nikos Mavrogiannopoulos - - * tests/openpgpself.c: reduced logging level - -2008-05-27 Simon Josefsson - - * m4/libgcrypt.m4: Update to latest version. - -2008-05-27 Simon Josefsson - - * lib/libgnutls.vers, libextra/libgnutls-extra.vers: Add emacs mode - markers. - -2008-05-26 Simon Josefsson - - * NEWS: Fix. - -2008-05-26 Simon Josefsson - - * configure.in: Revert "Revert ABI version, make libgnutls-extra use - another ABI version." This reverts commit 1a0f4dbf5a79ac61c7d10257221d851a4a12d814. - -2008-05-26 Simon Josefsson - - * libextra/Makefile.am: Revert "Use libtool EXTRA_ version symbols." This reverts commit 4e6bc87a35ed471022019265f7b5628e480f7e38. - -2008-05-26 Simon Josefsson - - * NEWS: Mention ABI bump. - -2008-05-26 Simon Josefsson - - * libextra/Makefile.am: Use libtool EXTRA_ version symbols. - -2008-05-26 Simon Josefsson - - * configure.in: Revert ABI version, make libgnutls-extra use another - ABI version. - -2008-05-26 Simon Josefsson - - * configure.in: Bump ABI version. - -2008-05-26 Simon Josefsson - - * lib/gnutls_cert.c: Doc fix. - -2008-05-26 Simon Josefsson - - * NEWS: Merge 2.2.x branch NEWS entries. - -2008-05-26 Simon Josefsson - - * NEWS: Add. - -2008-05-26 Simon Josefsson - - * lib/x509/crl_write.c: (gnutls_x509_crl_set_version): Fix on platform where 'char' can be - unsigned. Based on report from Laurence Withers , - see: - - . - -2008-05-26 Simon Josefsson - - * lgl/m4/memcmp.m4, lgl/stdbool.in.h, lgl/vasnprintf.c: Update - gnulib files. - -2008-05-26 Simon Josefsson - - * NEWS, includes/gnutls/openssl.h, libextra/gnutls_openssl.c: - libgnutls-openssl: added RAND_pseudo_bytes API. Tiny patch from - Robert Millan . - -2008-05-26 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2008-05-24 Nikos Mavrogiannopoulos - - * lib/opencdk/sig-check.c: added error check. - -2008-05-24 Nikos Mavrogiannopoulos - - * lib/openpgp/output.c: Print Never when a certificate never - expires. - -2008-05-24 Nikos Mavrogiannopoulos - - * lib/openpgp/pgp.c: Corrected bug gnutls_openpgp_crt_get_name() - which returned the same value for index==0 or 1. - -2008-05-20 Simon Josefsson - - * ChangeLog: Generated. - -2008-05-20 Simon Josefsson - - * NEWS: Version 2.3.11. - -2008-05-20 Simon Josefsson - - * NEWS: Add. - -2008-05-20 Simon Josefsson - - * lgl/m4/memcmp.m4, maint.mk: Update gnulib files. - -2008-05-20 Simon Josefsson - - * doc/examples/Makefile.am: Fix ex-cxx name. Fix LDADD's. - -2008-05-20 Simon Josefsson - - * po/nl.po.in, po/pl.po.in, po/sv.po.in, po/vi.po.in: Sync with TP. - -2008-05-20 Simon Josefsson - - * src/certtool.c: Restore umask after opening file. Suggested by - Daniel Kahn Gillmor . - -2008-05-20 Simon Josefsson - - * NEWS, configure.in, src/certtool.c, src/crypt.c, src/psk.c: Use - umask unconditionally. - -2008-05-19 Simon Josefsson - - * NEWS: Add. - -2008-05-19 Simon Josefsson - - * lib/gnutls_cipher.c: Fix broken debug check for GNUTLS-SA-2008-1. - -2008-05-19 Simon Josefsson - - * NEWS: Add. - -2008-05-19 Simon Josefsson - - * lib/Makefile.am: Don't pass all C flags when building C++ library. - -2008-05-19 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2008-05-19 Simon Josefsson - - * ChangeLog: Generated. - -2008-05-19 Simon Josefsson - - * NEWS: Version 2.3.10. - -2008-05-19 Simon Josefsson - - * configure.in: Bump versions. - -2008-05-19 Simon Josefsson - - * NEWS: Add. - -2008-05-05 Nikos Mavrogiannopoulos - - * lib/gnutls_str.c, tests/hostname-check/hostname-check.c: added - wide wildcard hostname matching. Patch by Jean-Philippe Garcia - Ballester. - -2008-05-19 Simon Josefsson - - * Makefile.am: Disable ftp.gnutls.org for now. - -2008-05-19 Simon Josefsson - - * lgl/vasnprintf.c: Update gnulib files. - -2008-05-19 Simon Josefsson - - * NEWS: Add. - -2008-05-19 Simon Josefsson - - * lib/ext_server_name.c, lib/gnutls_cipher.c, - lib/gnutls_handshake.c: Fix GNUTLS-SA-2008-1 security - vulnerabilities. See - http://www.gnu.org/software/gnutls/security.html for updates. - -2008-05-18 Nikos Mavrogiannopoulos - - * NEWS: Use umask to restrict permissions to owner before creating a - file. - -2008-05-18 Nikos Mavrogiannopoulos - - * src/certtool-gaa.c, src/certtool-gaa.h, src/certtool.c, - src/certtool.gaa: Use umask to restrict the newly created file's - permissions if operating on a private key. This effectively fixes - the issue reported at - and the - followups. - -2008-05-17 Nikos Mavrogiannopoulos - - * NEWS, doc/examples/Makefile.am, doc/examples/ex-cxx.cpp, - doc/gnutls.texi, includes/gnutls/gnutlsxx.h, lib/gnutlsxx.cpp: - Updated the C++ API with patch from Eduardo Villanueva Che. - Suggested by Benjamin Herr. - -2008-05-16 Simon Josefsson - - * ChangeLog: Generated. - -2008-05-16 Simon Josefsson - - * NEWS: Version 2.3.9. - -2008-05-16 Simon Josefsson - - * configure.in: Remove obsolete comment. - -2008-05-16 Simon Josefsson - - * configure.in: Typo. - -2008-05-16 Simon Josefsson - - * NEWS: Add. - -2008-05-16 Simon Josefsson - - * configure.in: Don't check for present headers, hard code checks - for silly src/cfg/. - -2008-05-16 Simon Josefsson - - * configure.in, lgl/Makefile.am, lgl/m4/gnulib-cache.m4, - lgl/m4/gnulib-comp.m4: Replace strings.h check with gnulib module. - -2008-05-16 Simon Josefsson - - * lgl/m4/strcase.m4, lgl/m4/strings_h.m4, lgl/strcasecmp.c, - lgl/strings.in.h, lgl/strncasecmp.c: Replace strings.h check with - gnulib module. - -2008-05-16 Simon Josefsson - - * NEWS, THANKS, src/certtool.c: certtool: When writing private keys - to files, change permissions of file. Now the file which the - private key is saved to is chmod'ed 0600. Reported by martin f - krafft see - . - -2008-05-16 Simon Josefsson - - * NEWS, THANKS, src/certtool-cfg.c, src/certtool-cfg.h, - src/certtool.c: certtool: Encrypting a private key now require a - confirmed password. Before, './certtool -k -8' would merely ask for - a password once. Reported by Daniel 'NebuchadnezzaR' Dehennin - see - . - -2008-05-16 Simon Josefsson - - * gl/gnulib.mk, gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4: Update - gnulib files. - -2008-05-16 Simon Josefsson - - * NEWS, configure.in: Remove --enable-profile-mode. - -2008-05-16 Simon Josefsson - - * lgl/m4/memmem.m4, lgl/str-two-way.h: Update gnulib files. - -2008-05-15 Simon Josefsson - - * ChangeLog: Generated. - -2008-05-15 Simon Josefsson - - * lib/auth_psk.c, lib/gnutls_kx.c, lib/gnutls_state.c: Allow for - server key exchange message to be optional for PSK ciphers. - -2008-05-15 Simon Josefsson - - * NEWS: Version 2.3.4.netconf.1. - -2008-05-15 Simon Josefsson - - * NEWS: Add. - -2008-05-15 Simon Josefsson - - * NEWS: Add. - -2008-05-15 Simon Josefsson - - * lib/auth_psk.c, lib/auth_psk.h: Parse psk_identity_hint field. - -2008-05-15 Simon Josefsson - - * src/cli.c: Fix so that PSK authentication works. - -2008-05-15 Simon Josefsson - - * NEWS, doc/gnutls.texi: Document gnutls-cli PSK fix. - -2008-05-15 Simon Josefsson - - * src/cli.c: Fix so that PSK authentication works. - -2008-05-15 Simon Josefsson - - * gl/m4/gnulib-common.m4, gl/m4/gnulib-comp.m4, - lgl/m4/gnulib-common.m4, lgl/m4/gnulib-comp.m4: Update gnulib files. - -2008-05-11 Simon Josefsson - - * doc/protocol/draft-ietf-tls-ecc-new-mac-07.txt: Add. - -2008-05-07 Simon Josefsson - - * NEWS: Add. - -2008-05-07 Simon Josefsson - - * guile/tests/Makefile.am: Don't run guile openpgp self tests if - openpgp is disabled. - -2008-05-07 Simon Josefsson - - * tests/Makefile.am: Don't run openpgpself if openpgp stuff wasn't - built. - -2008-05-07 Simon Josefsson - - * NEWS, doc/examples/ex-session-info.c, guile/src/core.c, - guile/tests/Makefile.am: libgnutls: Compile if SRP is disabled. - Report and tiny patches from , see - . - -2008-05-06 Simon Josefsson - - * lib/gnutls_global.c: Fix warning. - -2008-05-06 Simon Josefsson - - * NEWS, gl/getaddrinfo.h: Update gnulib files. - -2008-05-06 Simon Josefsson - - * NEWS: Fix. - -2008-05-06 Simon Josefsson - - * NEWS: Add. - -2008-05-06 Simon Josefsson - - * lib/openpgp/output.c: More translation markups. - -2008-05-06 Simon Josefsson - - * po/POTFILES.in: Add translations from openpgp output functions - too. - -2008-05-06 Simon Josefsson - - * lib/x509/output.c: Translation fixes, tiny patch from Benno - Schulenberg . - -2008-05-05 Simon Josefsson - - * gl/m4/inet_ntop.m4, gl/m4/inet_pton.m4, - lgl/override/lib/gc-libgcrypt.c.diff: Update gnulib files. - -2008-05-02 Simon Josefsson - - * : commit 382e242d6ab440749f44f53020a928c09a4c4765 Author: Nikos - Mavrogiannopoulos Date: Thu May 1 11:06:19 - 2008 +0300 - -2008-04-30 Simon Josefsson - - * doc/protocol/draft-badra-tls-psk-new-mac-aes-gcm-02.txt: Add. - -2008-04-30 Simon Josefsson - - * gl/arpa_inet.in.h, gl/getaddrinfo.c, gl/gnulib.mk, - gl/m4/arpa_inet_h.m4, gl/m4/inet_ntop.m4, gl/m4/inet_pton.m4: Update - gnulib files. - -2008-04-29 Simon Josefsson - - * doc/protocol/draft-ietf-tls-ecc-new-mac-06.txt, - doc/protocol/draft-rescorla-tls-extended-random-00.txt: Add. - -2008-04-29 Simon Josefsson - - * NEWS: Add. - -2008-04-29 Simon Josefsson - - * configure.in: Call AM_CONDITIONAL at top-level. - -2008-04-29 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2008-04-29 Simon Josefsson - - * Makefile.am: Dist maint.mk. - -2008-04-29 Simon Josefsson - - * ChangeLog: Generated. - -2008-04-29 Simon Josefsson - - * NEWS: Version 2.3.8. - -2008-04-29 Simon Josefsson - - * gl/gnulib.mk, gl/m4/arpa_inet_h.m4, lgl/Makefile.am, - lgl/m4/stdlib_h.m4, lgl/m4/string_h.m4, lgl/stdlib.in.h, - lgl/string.in.h: Update gnulib files. - -2008-04-29 Simon Josefsson - - * po/LINGUAS, po/vi.po.in: Sync with TP. - -2008-04-29 Simon Josefsson - - * NEWS: Add. - -2008-04-29 Simon Josefsson - - * NEWS: Add. - -2008-04-29 Simon Josefsson - - * NEWS: Add. - -2008-04-29 Simon Josefsson - - * NEWS: Clarify area of change. - -2008-04-29 Simon Josefsson - - * NEWS: Add. - -2008-04-29 Simon Josefsson - - * NEWS: Add. - -2008-04-29 Simon Josefsson - - * lib/gnutls_handshake.c: Doc fix. - -2008-04-29 Simon Josefsson - - * NEWS, includes/gnutls/gnutls.h.in, lib/gnutls_buffers.c, - lib/gnutls_errors.c, lib/gnutls_handshake.c, lib/gnutls_int.h: - Increase max handshake packet size. Add new error code for - situation. Thanks to Marc Haber and - "Marc F. Clemente" for reporting and providing - test servers. - -2008-04-29 Simon Josefsson - - * : commit 08e4c95c3659544c39b93539d62209d4c296d5b1 Author: Simon - Josefsson Date: Tue Apr 29 00:13:26 2008 - +0200 - -2008-04-28 Simon Josefsson - - * src/cli.c: Avoid another duplicate call to socket_bye() which can - cause a crash. - -2008-04-28 Nikos Mavrogiannopoulos - - * NEWS, src/cli.c, src/common.c, src/common.h, src/serv.c, - src/tests.c: gnutls-cli will exit once a certificate that doesn't - have the correct name is found. - -2008-04-28 Simon Josefsson - - * doc/reference/gnutls-docs.sgml, lib/gnutls_cert.c, - lib/gnutls_openpgp.c, lib/gnutls_str.c, lib/gnutls_x509.c, - lib/openpgp/pgp.c, lib/openpgp/privkey.c, lib/x509/dn.c: Doc markup - for newly added APIs. - -2008-04-28 Simon Josefsson - - * lib/x509/crl.c, lib/x509/crq.c, lib/x509/pkcs12_bag.c, - lib/x509/pkcs7.c, lib/x509/x509.c: Doc fixes (silence gtk-doc - warnings). - -2008-04-28 Simon Josefsson - - * lib/x509/crl_write.c, lib/x509/x509_write.c: Doc fixes (silence - gtk-doc warnings). - -2008-04-28 Simon Josefsson - - * lib/x509/crl.c, lib/x509/crl_write.c, lib/x509/crq.c, - lib/x509/pkcs12.c, lib/x509/pkcs12_bag.c, lib/x509/pkcs7.c, - lib/x509/privkey_pkcs8.c, lib/x509/sign.c, lib/x509/verify.c, - lib/x509/x509.c, lib/x509/x509_write.c: Doc fixes (silence gtk-doc - warnings). - -2008-04-28 Simon Josefsson - - * lib/x509/common.c, lib/x509/dn.c, lib/x509/output.c, - lib/x509/privkey.c: Doc fixes (silence gtk-doc warnings). - -2008-04-28 Simon Josefsson - - * : commit 02393bd4ef0c2ee7864c356f70623f3950f372f0 Author: Simon - Josefsson Date: Mon Apr 28 18:14:14 2008 - +0200 - -2008-04-28 Simon Josefsson - - * NEWS: Add. - -2008-04-28 Simon Josefsson - - * build-aux/gendocs.sh, gl/arpa_inet.in.h, gl/gnulib.mk, - gl/inet_ntop.c, gl/inet_ntop.h, gl/inet_pton.c, gl/inet_pton.h, - gl/m4/gnulib-comp.m4, gl/m4/inet_ntop.m4, gl/m4/inet_pton.m4, - lgl/Makefile.am, lgl/fseeko.c, lgl/intprops.h, - lgl/m4/gnulib-comp.m4, lgl/m4/sys_socket_h.m4, lgl/memchr.c, - lgl/stdio-impl.h, lgl/sys_socket.in.h: Update gnulib files. - -2008-04-28 Simon Josefsson - - * NEWS: Add. - -2008-04-28 Simon Josefsson - - * configure.in: Fix typo. - -2008-04-28 Simon Josefsson - - * configure.in, includes/gnutls/crypto.h: Hide crypto.h definitions - by default. - -2008-04-26 Nikos Mavrogiannopoulos - - * tests/Makefile.am, tests/crypto_rng.c: added crypto rng - registration test. - -2008-04-26 Nikos Mavrogiannopoulos - - * lib/crypto.c: add warning that these functions have to be called - before gnutls_global_init(). - -2008-04-26 Nikos Mavrogiannopoulos - - * lib/crypto.c, lib/random.c: faster seek into the list. - -2008-04-25 Simon Josefsson - - * NEWS, lib/gnutls_psk_netconf.c, tests/netconf-psk.c: Change PSK - key derivation algorithm. - -2008-04-25 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2008-04-25 Nikos Mavrogiannopoulos - - * lib/crypto.c, lib/crypto.h, lib/gnutls_global.c: Added - deregisteration function to free buffers allocated for registering - algorithms. - -2008-04-25 Nikos Mavrogiannopoulos - - * lib/crypto.c: corrected segmentation fault on registering ciphers. - -2008-04-25 Nikos Mavrogiannopoulos - - * doc/manpages/certtool.1, src/certtool-gaa.c, src/certtool-gaa.h, - src/certtool.gaa: added --outraw --inraw options. - -2008-04-23 Simon Josefsson - - * gl/gnulib.mk, lgl/sys_socket.in.h: Update gnulib files. - -2008-04-23 Simon Josefsson - - * configure.in: Revert libgcrypt vs vasprintf workaround, now that - 1.4.1rc1 is released. - -2008-04-22 Simon Josefsson - - * gl/arpa_inet.in.h: Update gnulib files. - -2008-04-22 Simon Josefsson - - * gl/arpa_inet.in.h, gl/gnulib.mk, gl/m4/arpa_inet_h.m4, - gl/m4/gnulib-comp.m4, lgl/sys_socket.in.h: Update gnulib files. - -2008-04-22 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2008-04-22 Simon Josefsson - - * : commit 34e3d59b2e276b8a45924f11f6916399fa14f5be Author: Simon - Josefsson Date: Tue Apr 22 09:56:03 2008 - +0200 - -2008-04-21 Nikos Mavrogiannopoulos - - * : commit 1b6c0f521f7e6e3d48b74fbb568a53547c5ff8ec Author: Nikos - Mavrogiannopoulos Date: Mon Apr 21 21:53:55 - 2008 +0300 - -2008-04-21 Simon Josefsson - - * ChangeLog: Generated. - -2008-04-21 Simon Josefsson - - * NEWS: Version 2.3.7. - -2008-04-21 Simon Josefsson - - * doc/Makefile.am: Don't clean Guile documentations on make clean. - -2008-04-21 Simon Josefsson - - * src/cli.c, src/psk-gaa.c, src/psk.gaa, src/serv.c, src/tests.c: - Fix warnings. - -2008-04-21 Simon Josefsson - - * NEWS: Fix. - -2008-04-21 Simon Josefsson - - * NEWS, doc/reference/Makefile.am, lib/minitasn1/Makefile.am, - lib/minitasn1/coding.c, lib/minitasn1/decoding.c, - lib/minitasn1/element.c, lib/minitasn1/int.h, - lib/minitasn1/libtasn1.h, lib/minitasn1/mem.h: Update to libtasn1 - 1.4. - -2008-04-19 Nikos Mavrogiannopoulos - - * NEWS: opencdk now properly sets the key usage bits into openpgp - keys. - -2008-04-19 Nikos Mavrogiannopoulos - - * lib/opencdk/keydb.c, lib/opencdk/read-packet.c: save key usage - while reading public keys. - -2008-04-18 Simon Josefsson - - * NEWS, THANKS: Add. - -2008-04-18 Simon Josefsson - - * src/cli.c: Don't crash on TLS handshake failures. Reported by - "Marc F. Clemente" in Debian BTS #466477. This - is related to the 5e5f086e124d8d90829fc8e22f34044161da5f80 fix, this - part is necessary too. - -2008-04-18 Simon Josefsson - - * NEWS, src/certtool.c: certtool: with --generate-request and newly - generated keys, print the key. - -2008-04-18 Simon Josefsson - - * configure.in: Explain libgcrypt around gnulib. - -2008-04-18 Simon Josefsson - - * doc/reference/Makefile.am, doc/reference/gnutls-docs.sgml: Don't - document opencdk API. - -2008-04-18 Simon Josefsson - - * NEWS: Add. - -2008-04-18 Simon Josefsson - - * NEWS: Add. - -2008-04-18 Simon Josefsson - - * configure.in: Typo fix. - -2008-04-18 Simon Josefsson - - * lib/Makefile.am: Link to -lws2_32 if needed. - -2008-04-18 Simon Josefsson - - * configure.in: Define WINVER to get modern features. Test for - ws2_32. Add conditional. - -2008-04-18 Simon Josefsson - - * NEWS: Add. - -2008-04-18 Simon Josefsson - - * lib/x509/output.c: Use ASCII-only isprint function to get - consistent outputs. Reported by Massimo Gaspari - in - . - -2008-04-18 Simon Josefsson - - * lgl/Makefile.am, lgl/c-ctype.c, lgl/c-ctype.h, lgl/dummy.c, - lgl/m4/gnulib-cache.m4, lgl/m4/gnulib-comp.m4: Add c-ctype module, - for lib/x509/output.c. - -2008-04-18 Simon Josefsson - - * gl/fseeko.c, gl/gnulib.mk, gl/lseek.c, gl/m4/extensions.m4, - gl/m4/fseeko.m4, gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, - gl/m4/lseek.m4, gl/m4/netinet_in_h.m4, gl/m4/strerror.m4, - lgl/Makefile.am, lgl/fseeko.c, lgl/lseek.c, lgl/m4/extensions.m4, - lgl/m4/fseeko.m4, lgl/m4/gnulib-cache.m4, lgl/m4/gnulib-comp.m4, - lgl/m4/lseek.m4, lgl/m4/memmem.m4, lgl/m4/stdint.m4, - lgl/m4/stdio_h.m4, lgl/m4/sys_socket_h.m4: Move fseeko to lgl/ from - gl/ for opencdk. - -2008-04-18 Simon Josefsson - - * configure.in: Link to libgcrypt when running gnulib checks, to get - their vasprintf on MinGW. - -2008-04-18 Simon Josefsson - - * configure.in: Don't check for vasprintf, already checked for by - gnulib. - -2008-04-17 Nikos Mavrogiannopoulos - - * lib/openpgp/pgp.c: corrected typo. - -2008-04-17 Simon Josefsson - - * .clcopying, .cvscopying, .cvsusers, Makefile.am, src/pkcs1.asn: - Fix some obsolete stuff. - -2008-04-17 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2008-04-17 Simon Josefsson - - * lib/x509/x509.c: (gnutls_x509_crt_get_key_usage): Doc fix. - -2008-04-17 Simon Josefsson - - * ChangeLog: Generated. - -2008-04-17 Simon Josefsson - - * NEWS: Version 2.3.6. - -2008-04-17 Simon Josefsson - - * src/Makefile.am: Link errcodes with gnulib. Possibly fixes - rpl_strerror problem when linking on HPUX, see: - - . - -2008-04-17 Simon Josefsson - - * NEWS: Add. - -2008-04-17 Simon Josefsson - - * NEWS: Add. - -2008-04-17 Simon Josefsson - - * : commit 01a64fe6798a4ba82df9accf67c7c8f657abd9f5 Author: Simon - Josefsson Date: Thu Apr 17 14:27:03 2008 - +0200 - -2008-04-17 Simon Josefsson - - * lib/opencdk/kbnode.c: Doc fix (gtk-doc warning). - -2008-04-17 Simon Josefsson - - * includes/gnutls/openssl.h: Fix gtk-doc warning about duplicate RSA - namespace. - -2008-04-17 Simon Josefsson - - * lib/auth_cert.c: Fix warning. - -2008-04-17 Ludovic Courtès - - * : commit 2b4f4e3fd2b0df0b77b283928154b5f3e9139fe8 Author: Simon - Josefsson Date: Thu Apr 17 14:15:49 2008 - +0200 - -2008-04-17 Simon Josefsson - - * doc/reference/Makefile.am: Fix --source-dir to only cover lib/, - libextra/ and includes/. - -2008-04-17 Simon Josefsson - - * lib/Makefile.am: Simplify cdk handling. - -2008-04-17 Simon Josefsson - - * doc/gnutls.texi: Discuss OpenCDK better. - -2008-04-17 Simon Josefsson - - * README: No need for external opencdk. - -2008-04-17 Simon Josefsson - - * configure.in, lib/Makefile.am, lib/opencdk/misc.c: Remove code to - link with external opencdk. It seems we now don't have resources to - maintain the LGPL opencdk code externally, since making it use - GnuTLS's crypto code will be complicated. See discussion in: - - http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/2672/focus=2711 - -2008-04-17 Simon Josefsson - - * configure.in: No need for alloca checks. - -2008-04-17 Simon Josefsson - - * NEWS, lib/gnutls_algorithms.c, lib/gnutls_buffers.c, - lib/gnutls_constate.c, lib/gnutls_handshake.c, lib/gnutls_mem.h, - lib/gnutls_mpi.c, lib/gnutls_pk.c, lib/x509/crl.c, lib/x509/mpi.c, - lib/x509/privkey_pkcs8.c, lib/x509/sign.c, lib/x509/x509.c: Remove - all uses of gnutls_alloca/gnutls_afree. Use normal gnutls_malloc - instead. One reason is increased portability to Windows, the other - is that several of the uses may be unsafe because the size of data - allocated could be large. Reported by Massimo Gaspari - in - . - -2008-04-17 Simon Josefsson - - * lib/auth_cert.c: Don't use alloca, the certificate list can be - larger than stack size. - -2008-04-17 Simon Josefsson - - * THANKS: Add. - -2008-04-17 Simon Josefsson - - * THANKS: Add. - -2008-04-17 Simon Josefsson - - * NEWS, lib/x509/output.c: Don't use %e specifier with strftime, it - doesn't work under Windows. Reported by Massimo Gaspari - in - . - -2008-04-17 Simon Josefsson - - * lib/gnutls_asn1_tab.c, lib/pkix_asn1_tab.c: Re-generate using - modern libtasn1. - -2008-04-17 Simon Josefsson - - * doc/examples/Makefile.am: Fix typo. - -2008-04-17 Simon Josefsson - - * NEWS, tests/pathlen/pathlen: Run diff without parameters, to - improve portability. Based on HPUX recommendations in - - . - -2008-04-16 Simon Josefsson - - * doc/examples/Makefile.am: Reorder libgnu.la last. Possibly fix - rpl_fseeko problem reported in - . - -2008-04-15 Simon Josefsson - - * doc/gnutls.texi: Update bibliography. - -2008-04-15 Simon Josefsson - - * lib/gnutls_state.c: Doc fix (silence texinfo warning). - -2008-04-15 Simon Josefsson - - * lib/openpgp/pgp.c: Improve error messages. See - . - -2008-04-15 Simon Josefsson - - * doc/protocol/draft-ietf-tls-rsa-aes-gcm-03.txt: Add. - -2008-04-15 Simon Josefsson - - * NEWS, lib/x509/crq.c, src/certtool.c: Make gnutls_x509_crq_sign2 - set certificate request version if not set. - -2008-04-15 Simon Josefsson - - * NEWS, THANKS, lib/x509/crq.c: Improve documentation for - gnutls_x509_crq_sign2. Based on report from "John Brooks" - in - . - -2008-04-15 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2008-04-14 Simon Josefsson - - * doc/protocol/draft-rescorla-tls-suiteb-02.txt: Add. - -2008-04-14 Simon Josefsson - - * doc/protocol/draft-ietf-tls-ecc-new-mac-05.txt: Add. - -2008-04-14 Simon Josefsson - - * ChangeLog: Generated. - -2008-04-14 Simon Josefsson - - * NEWS: Version 2.3.5. - -2008-04-14 Simon Josefsson - - * NEWS: Add. - -2008-04-14 Simon Josefsson - - * NEWS: Add. - -2008-04-14 Simon Josefsson - - * NEWS: Add. - -2008-04-13 Simon Josefsson - - * src/cli.c, src/tls_test.c: Rely on sys/socket.h for SHUT_*. - -2008-04-13 Simon Josefsson - - * lgl/m4/sys_socket_h.m4, lgl/sys_socket.in.h: Update gnulib files. - -2008-04-13 Simon Josefsson - - * lgl/Makefile.am, lgl/gc-libgcrypt.c, lgl/m4/gnulib-cache.m4: - Update gnulib files. - -2008-04-13 Simon Josefsson - - * lgl/m4/gnulib-cache.m4, lgl/override/lib/gc-libgcrypt.c.diff: - Quick fix for SHA-224 and old libgcrypt's. - -2008-04-13 Simon Josefsson - - * NEWS: Add. - -2008-04-13 Simon Josefsson - - * NEWS: Add. - -2008-04-13 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2008-04-13 Simon Josefsson - - * lib/random.h: Fix warnings. - -2008-04-13 Simon Josefsson - - * cfg.mk: Typo. - -2008-04-13 Simon Josefsson - - * po/Makevars: We don't need --no-location any more, git stores - *.po.in's. - -2008-04-13 Simon Josefsson - - * Makefile.am, cfg.mk: Translation fixes. - -2008-04-13 Simon Josefsson - - * po/de.po, po/de.po.in, po/ms.po, po/ms.po.in, po/nl.po, - po/nl.po.in, po/pl.po, po/pl.po.in, po/sv.po, po/sv.po.in: Improve - translation handling to avoid git conflicts. - -2008-04-13 Simon Josefsson - - * GNUmakefile, build-aux/gnupload, gl/fseeko.c, gl/getdelim.c, - gl/m4/eoverflow.m4, gl/m4/gnulib-common.m4, gl/m4/gnulib-comp.m4, - gl/m4/include_next.m4, lgl/gc-gnulib.c, lgl/m4/gc-random.m4, - lgl/m4/gnulib-common.m4, lgl/m4/gnulib-comp.m4, - lgl/m4/include_next.m4, lgl/m4/stdint.m4, lgl/m4/vasnprintf.m4, - lgl/snprintf.c, lgl/vasnprintf.c, lgl/vasprintf.c, lgl/wchar.in.h: - Update gnulib files. - -2008-04-13 Simon Josefsson - - * doc/manpages/Makefile.am: Cosmetic. - -2008-04-13 Simon Josefsson - - * doc/manpages/Makefile.am: Whitespace fix. - -2008-04-13 Simon Josefsson - - * doc/manpages/Makefile.am: Improve APIMANS/SRPMANS, to make it - easier to understand changes. - -2008-04-13 Simon Josefsson - - * NEWS: Add. - -2008-04-13 Simon Josefsson - - * configure.in: Fix test. - -2008-04-13 Simon Josefsson - - * configure.in: Don't bother checking for --output-def if shared - libraries are disabled. Based on report from Massimo Gaspari - in - . - -2008-04-13 Simon Josefsson - - * NEWS, THANKS, doc/gnutls.texi: Document how to generate CRLs. - -2008-04-13 Simon Josefsson - - * ChangeLog: Generated. - -2008-04-13 Simon Josefsson - - * NEWS: Version 2.3.4.netconf.0. - -2008-04-13 Simon Josefsson - - * Makefile.am: Fix release target. - -2008-04-13 Simon Josefsson - - * configure.in: Bump version. - -2008-04-13 Simon Josefsson - - * doc/examples/ex-client-psk.c: Typo. - -2008-04-13 Simon Josefsson - - * NEWS: Add. - -2008-04-13 Simon Josefsson - - * lib/gnutls_psk_netconf.c: Typo. - -2008-04-13 Simon Josefsson - - * includes/gnutls/gnutls.h.in: Typo. - -2008-04-13 Nikos Mavrogiannopoulos - - * includes/gnutls/openpgp.h: changed api. - -2008-04-12 Simon Josefsson - - * doc/examples/ex-serv-psk.c: Doc fix. - -2008-04-12 Simon Josefsson - - * NEWS: Add. - -2008-04-12 Simon Josefsson - - * doc/examples/ex-client-psk.c, doc/examples/ex-serv-psk.c: Add, PSK - self test. - -2008-04-12 Simon Josefsson - - * lib/gnutls_psk_netconf.c: Typo. - -2008-04-12 Simon Josefsson - - * doc/examples/Makefile.am: Add ex-serv-psk. - -2008-04-12 Nikos Mavrogiannopoulos - - * src/cli.c: get_auth_subkey has one more parameter. - -2008-04-12 Nikos Mavrogiannopoulos - - * lib/opencdk/pubkey.c: return the size of the required buffer to - hold the data - -2008-04-12 Nikos Mavrogiannopoulos - - * lib/openpgp/output.c: Deallocate memory from parameters only when - function run was successful. - -2008-04-12 Nikos Mavrogiannopoulos - - * lib/gnutls_openpgp.c, lib/openpgp/pgp.c: Added a flag in - get_auth_subkey() to work for all use cases - -2008-04-10 Nikos - - * lib/openpgp/pgp.c: do not return any subkey if an authentication - subkey is not found - -2008-04-10 Nikos - - * lib/openpgp/extras.c, lib/openpgp/pgp.c, lib/openpgp/privkey.c: - corrected bug in openpgp import when data is of size zero. Reported - by Daniel Kahn - -2008-04-08 Simon Josefsson - - * lib/gnutls_psk_netconf.c: Fix mem leak on errors. - -2008-04-08 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2008-04-08 Simon Josefsson - - * tests/netconf-psk.c: Fix bugs. - -2008-04-08 Simon Josefsson - - * lib/gnutls_psk_netconf.c: Fix bugs. - -2008-04-08 Simon Josefsson - - * tests/netconf-psk.c: Starting pointer for NETCONF-PSK support. - -2008-04-08 Simon Josefsson - - * NEWS, includes/gnutls/gnutls.h.in, lib/Makefile.am, - lib/gnutls_psk_netconf.c, tests/Makefile.am: Starting pointer for - NETCONF-PSK support. - -2008-04-04 Nikos - - * lib/openpgp/pgp.c, lib/openpgp/privkey.c: Fail at import stage if - a non proper certificate is loaded. - -2008-04-04 Simon Josefsson - - * doc/protocol/draft-nir-tls-eap-03.txt: Add. - -2008-04-04 Simon Josefsson - - * doc/protocol/draft-ietf-netconf-tls-01.txt: Add. - -2008-04-03 Simon Josefsson - - * NEWS: Add. - -2008-04-03 Simon Josefsson - - * lib/auth_psk_passwd.c: (_gnutls_psk_pwd_find_entry): Call fclose after fopen. Tiny patch - from Laurence Withers , see - - . - -2008-04-03 Simon Josefsson - - * : commit 117152d4c91e1c01055eedada1412ec763e5196b Author: Simon - Josefsson Date: Thu Apr 3 09:40:01 2008 - +0200 - -2008-04-02 Nikos - - * NEWS: documented the openpgp updates. - -2008-04-02 Nikos - - * doc/manpages/certtool.1: added the openpgp functionality to the - manpage. - -2008-04-02 Nikos - - * lib/openpgp/privkey.c: Corrected exporting the DSA secret key - parameters. - -2008-04-02 Nikos - - * lib/openpgp/openpgp_int.h, lib/openpgp/pgp.c, - lib/openpgp/privkey.c: Add proper ARMOR header in private keys. - -2008-04-02 Nikos - - * lib/openpgp/output.c, lib/openpgp/pgp.c, lib/openpgp/privkey.c: - Consistent printing of revoked status. Consistent printing of key - algorithm. - -2008-04-02 Nikos - - * lib/gnutls_errors.c: Added revoked UID error string. - -2008-04-02 Nikos - - * lib/openpgp/output.c, lib/openpgp/privkey.c: Print revoked names. - -2008-04-02 Simon Josefsson - - * doc/protocol/draft-ietf-tls-ecdhe-psk-01.txt: Add. - -2008-03-30 Simon Josefsson - - * lib/crypto.h: Fix warnings. - -2008-03-30 Simon Josefsson - - * lgl/Makefile.am, lgl/gc-libgcrypt.c, lgl/gc.h, - lgl/m4/stdlib_h.m4, lgl/stdlib.in.h: Update gnulib files. - -2008-03-29 Nikos - - * NEWS: Documented the --priority option to gnutls-cli and - gnutls-serv. - -2008-03-29 Nikos - - * doc/manpages/gnutls-cli.1, doc/manpages/gnutls-serv.1: documented - the --priority option. - -2008-03-29 Nikos - - * NEWS: corrected the news entry. - -2008-03-29 Nikos - - * lib/auth_cert.c: Reverted to gnutls 2.2 behaviour of allowing an - empty key (for PKCS #11). Reported by Joe Orton. - -2008-03-29 Nikos - - * NEWS: gnutls_crypto_rnd_register: ADDED - -2008-03-29 Nikos - - * : commit 0b37eef0f6b6626d5e4b5936bbc6f012416ef61a Author: Nikos - Date: Sat Mar 29 12:01:27 2008 +0200 - -2008-03-29 Simon Josefsson - - * doc/protocol/draft-badra-tls-psk-new-mac-aes-gcm-00.txt, - doc/protocol/draft-badra-tls-psk-new-mac-aes-gcm-01.txt: Add. - -2008-03-28 Simon Josefsson - - * lgl/gc-libgcrypt.c, lgl/gc.h: Update gnulib files. - -2008-03-28 Simon Josefsson - - * NEWS: Entries added at wrong place, move them. - -2008-03-28 Simon Josefsson - - * NEWS, includes/gnutls/gnutls.h.in: Avoid defining SHA-224 MAC - since it isn't specified in TLS 1.2. - -2008-03-28 Simon Josefsson - - * NEWS, includes/gnutls/gnutls.h.in: Add SHA-224 enum types. - -2008-03-28 Simon Josefsson - - * gl/gnulib.mk: Update gnulib files. - -2008-03-27 Simon Josefsson - - * doc/protocol/draft-ietf-tls-rfc4346-bis-10.txt: Add. - -2008-03-25 Simon Josefsson - - * GNUmakefile, build-aux/GNUmakefile, build-aux/maint.mk, cfg.mk, - gl/gnulib.mk, gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, - gl/m4/lib-link.m4, lgl/Makefile.am, lgl/m4/gnulib-cache.m4, - lgl/m4/gnulib-comp.m4, lgl/m4/lib-link.m4, maint-cfg.mk, maint.mk: - Update gnulib files. - -2008-03-20 Ludovic Courtès - - * configure.in, guile/src/Makefile.am: Check whether - `-fgnu89-inline' is supported before using it. * configure.in: Check for `-fgnu89-inline', define Automake - conditional `HAVE_GCC_GNU89_INLINE_OPTION'. * guile/src/Makefile.am (AM_CFLAGS): Only use `-fgnu89-inline' when `HAVE_GCC_GNU89_INLINE_OPTION' is true. - -2008-03-19 Simon Josefsson - - * libextra/gnutls_extra.c: Fix LZO build failure. - -2008-03-19 Ludovic Courtès - - * guile/src/Makefile.am: guile: Compile with `-fgnu89-inline'. * guile/src/Makefile.am (AM_CFLAGS): Add `-fgnu89-inline' when `HAVE_GCC' is true. This works around the fact that GnuTLS is compiled with `-std=c99', while Guile and GMP expect GNU inline semantics, which defer from C99 inline semantics. - -2008-03-19 Ludovic Courtès - - * guile/src/core.c: guile: Don't declare `inline' functions that use - `alloca ()'. * guile/src/core.c (set_certificate_file): Remove `inline' keyword. - -2008-03-19 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2008-03-19 Simon Josefsson - - * ChangeLog: Generated. - -2008-03-19 Simon Josefsson - - * includes/Makefile.am: Dist gnutls/crypto.h. - -2008-03-19 Simon Josefsson - - * NEWS: Version 2.3.4. - -2008-03-19 Simon Josefsson - - * NEWS: Add. - -2008-03-19 Simon Josefsson - - * NEWS: Fix. - -2008-03-19 Simon Josefsson - - * NEWS: Add. - -2008-03-19 Simon Josefsson - - * doc/examples/ex-client-resume.c, lib/crypto.c, - lib/gnutls_compress_int.c, lib/gnutls_extensions.c, - lib/gnutls_handshake.c, lib/gnutls_openpgp.c, lib/openpgp/extras.c, - lib/openpgp/output.c, lib/openpgp/pgp.c, lib/openpgp/privkey.c, - libextra/gnutls_extra.c, libextra/gnutls_ia.c, src/certtool.c, - src/serv.c: Fix gcc warnings. - -2008-03-19 Simon Josefsson - - * lib/x509/x509.c: Fix warning. - -2008-03-16 Nikos - - * lib/gnutls_cipher_int.c, lib/gnutls_cipher_int.h, - lib/gnutls_hash_int.c, lib/gnutls_hash_int.h: fixes for all tests to - succeed. - -2008-03-16 Nikos - - * includes/gnutls/crypto.h: updated - -2008-03-16 Nikos - - * lib/gnutls_cipher.c, lib/gnutls_cipher_int.c, - lib/gnutls_cipher_int.h, lib/gnutls_constate.c, - lib/gnutls_handshake.c, lib/gnutls_hash_int.c, - lib/gnutls_hash_int.h, lib/gnutls_int.h, lib/gnutls_sig.c, - lib/gnutls_srp.c, lib/gnutls_state.c, lib/gnutls_ui.c, - lib/x509/pkcs12.c, lib/x509/privkey.c, lib/x509/privkey_pkcs8.c, - lib/x509/sign.c, lib/x509/verify.c, lib/x509/x509.c: several fixes - in the cipher (register) interface and added hash. - -2008-03-16 Nikos - - * NEWS, includes/gnutls/crypto.h, includes/gnutls/gnutls.h.in, - lib/Makefile.am, lib/crypto.c, lib/crypto.h, lib/gnutls_cipher.c, - lib/gnutls_cipher_int.c, lib/gnutls_cipher_int.h, - lib/gnutls_constate.c, lib/gnutls_errors.c, lib/gnutls_int.h, - lib/gnutls_state.c: Added functionality to override (register) a - cipher. Initial functionality for MAC and digest algorithms. - -2008-03-11 Simon Josefsson - - * lib/openpgp/gnutls_openpgp.h: Remove things already in - includes/gnutls/openpgp.h. - -2008-03-11 Simon Josefsson - - * lib/gnutls_openpgp.c, lib/opencdk/Makefile.am, - lib/opencdk/armor.c, lib/opencdk/context.h, lib/opencdk/filters.h, - lib/opencdk/hash.c, lib/opencdk/kbnode.c, lib/opencdk/keydb.c, - lib/opencdk/literal.c, lib/opencdk/main.c, lib/opencdk/main.h, - lib/opencdk/misc.c, lib/opencdk/new-packet.c, - lib/opencdk/opencdk.h, lib/opencdk/packet.h, lib/opencdk/pubkey.c, - lib/opencdk/read-packet.c, lib/opencdk/seskey.c, - lib/opencdk/sig-check.c, lib/opencdk/stream.c, - lib/opencdk/stream.h, lib/opencdk/types.h, lib/opencdk/verify.c, - lib/opencdk/write-packet.c, lib/openpgp/Makefile.am, - lib/openpgp/compat.c, lib/openpgp/extras.c, lib/openpgp/pgp.c, - lib/openpgp/pgpverify.c, lib/openpgp/privkey.c: Clean up license - headers for OpenPGP code. According to Nikos they are now licensed - under the LGPL, see: - - http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/2658/focus=2659 - -2008-03-11 Simon Josefsson - - * lib/Makefile.am: Typo. - -2008-03-11 Simon Josefsson - - * gl/gnulib.mk, gl/m4/gnulib-comp.m4, gl/m4/include_next.m4, - gl/m4/stdarg.m4, gl/stdarg.in.h, lgl/Makefile.am, - lgl/m4/absolute-header.m4, lgl/m4/gnulib-comp.m4, - lgl/m4/include_next.m4: Update gnulib files. - -2008-03-10 Simon Josefsson - - * NEWS: Add. - -2008-03-10 Simon Josefsson - - * build-aux/gendocs.sh, gl/m4/fseeko.m4: Update gnulib files. - -2008-03-10 Simon Josefsson - - * includes/gnutls/gnutls.h.in: Finish renaming of export - x509/openpgp functions. In particular, - gnutls_certificate_get_x509_cas, gnutls_certificate_get_x509_crls, - and gnutls_certificate_get_openpgp_keyring. - -2008-03-10 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2008-03-10 Simon Josefsson - - * ChangeLog: Generated. - -2008-03-10 Simon Josefsson - - * libextra/Makefile.am: Revert - a3e4759117cee5d756475215437a440dc12fcc6c because it breaks libtool - v2.2. ../libtool: line 4398: cd: ../../lib/.libs: No such file or - directory libtool: link: cannot determine absolute directory name of - `../../lib/.libs' - -2008-03-10 Simon Josefsson - - * NEWS: Version 2.3.3. - -2008-03-10 Simon Josefsson - - * NEWS: Fix. - -2008-03-10 Simon Josefsson - - * NEWS: Fix. - -2008-03-10 Simon Josefsson - - * NEWS, doc/reference/Makefile.am, libextra/Makefile.am, - libextra/gnutls_extra.c, libextra/gnutls_extra.h: Remove - gnutls_extra.h, not needed anymore. Fixes build failure in libextra - that looked for opencdk.h (via auth_cert.h). Reported by Roman - Bogorodskiy . - -2008-03-08 Nikos - - * : commit cf8fb4bca34ec865959f1544e395b5566f2449ac Author: Nikos - Date: Sat Mar 8 02:06:25 2008 +0200 - -2008-03-07 Ludovic Courtès - - * guile/src/Makefile.am: guile: Propagate Guile's CPPFLAGS to - `guile-snarf'. - -2008-03-07 Ludovic Courtès - - * guile/src/make-enum-header.scm, guile/src/utils.h: guile: Include - , not "config.h". - -2008-03-07 Simon Josefsson - - * NEWS: Add. - -2008-03-07 Simon Josefsson - - * THANKS: Add. - -2008-03-06 Simon Josefsson - - * NEWS: Add. - -2008-03-06 Simon Josefsson - - * doc/reference/gnutls-docs.sgml: Add index. - -2008-03-06 Simon Josefsson - - * lib/x509_b64.c: Doc fixes. - -2008-03-06 Simon Josefsson - - * lib/gnutls_alert.c: Doc fix. - -2008-03-06 Simon Josefsson - - * NEWS, includes/gnutls/gnutls.h.in, lib/gnutls_str.c: Fix - gnutls_hex2bin prototype. - -2008-03-06 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2008-03-06 Simon Josefsson - - * src/cli.c: Fix warnings. - -2008-03-06 Simon Josefsson - - * src/select.c: Avoid confusing gtk-doc. - -2008-03-06 Simon Josefsson - - * lib/opencdk/kbnode.c: Doc fixes. - -2008-03-06 Simon Josefsson - - * lib/opencdk/stream.c, lib/opencdk/verify.c: Doc fixes. - -2008-03-06 Simon Josefsson - - * lib/openpgp/privkey.c: Doc fixes. - -2008-03-06 Simon Josefsson - - * lib/openpgp/pgp.c, lib/openpgp/privkey.c: Doc fixes. - -2008-03-06 Simon Josefsson - - * lib/gnutls_algorithms.c, lib/gnutls_state.c: Doc fixes. - -2008-03-06 Simon Josefsson - - * lib/gnutls_alert.c, lib/gnutls_algorithms.c, lib/gnutls_record.c, - lib/gnutls_state.c: Doc fixes. - -2008-03-06 Simon Josefsson - - * lib/gnutls_ui.c: Doc fix. - -2008-03-06 Simon Josefsson - - * lib/gnutls_db.c: Doc fix. - -2008-03-06 Simon Josefsson - - * lib/gnutls_session.c: Doc fix. - -2008-03-06 Simon Josefsson - - * lib/gnutls_global.c: Doc fix. - -2008-03-06 Simon Josefsson - - * lib/gnutls_srp.c: Doc fix. - -2008-03-06 Simon Josefsson - - * lib/gnutls_auth.c, lib/gnutls_openpgp.c, lib/gnutls_srp.c, - libextra/gnutls_ia.c: Doc fixes. - -2008-03-06 Simon Josefsson - - * m4/pkg.m4: Added, needed by new gtk-doc.m4. - -2008-03-06 Simon Josefsson - - * doc/reference/Makefile.am: Update gtk-doc Makefile.am to latest - examples. - -2008-03-06 Simon Josefsson - - * doc/reference/tmpl/gnutls-unused.sgml, gtk-doc.make: Update - gtk-doc makefile, this version allows us to get rid of tmpl/. - -2008-03-06 Simon Josefsson - - * m4/gtk-doc.m4: Update gtk-doc.m4. - -2008-03-06 Simon Josefsson - - * lib/gnutls_alert.c, lib/gnutls_cert.c, lib/gnutls_global.c, - lib/gnutls_psk.c, lib/gnutls_record.c, lib/gnutls_srp.c, - lib/gnutls_state.c, lib/gnutls_ui.c, lib/gnutls_x509.c: Doc fix, - remove verbose 'This function ...' Improves looks in 'apropos' - output. - -2008-03-06 Simon Josefsson - - * lib/gnutls_anon_cred.c, lib/gnutls_db.c, lib/gnutls_dh_primes.c, - lib/gnutls_handshake.c, lib/gnutls_openpgp.c, lib/gnutls_psk.c, - lib/gnutls_rsa_export.c, lib/gnutls_state.c, lib/gnutls_ui.c, - lib/x509_b64.c: Doc fix, remove verbose 'This function will' stuff. - Improves man page look in 'apropos'. - -2008-03-06 Simon Josefsson - - * lgl/Makefile.am, lgl/m4/func.m4, lgl/m4/gnulib-cache.m4, - lgl/m4/gnulib-comp.m4: Use func module, to get __func__. - -2008-03-05 Simon Josefsson - - * NEWS: Add. - -2008-03-05 Simon Josefsson - - * NEWS, src/common.c: Print DH parameters of session. - -2008-03-05 Simon Josefsson - - * gl/getaddrinfo.c, gl/getdelim.c, lgl/alloca.in.h, - lgl/gc-gnulib.c, lgl/xsize.h: Update gnulib files. - -2008-02-28 Simon Josefsson - - * guile/src/utils.c: Use __func__ instead of __FUNCTION__. Reported - by Tim Mooney, see . A - gnulib module to make sure __func__ is available would be nice. - -2008-02-27 Simon Josefsson - - * NEWS: Add. - -2008-02-27 Simon Josefsson - - * lib/x509/x509_write.c: Doc fix. - -2008-02-27 Simon Josefsson - - * NEWS, lib/gnutls_x509.c: Optimize adding many trusted - certificates. See - - . - -2008-02-26 Simon Josefsson - - * lib/x509/x509_write.c: Doc fixes. - -2008-02-26 Simon Josefsson - - * AUTHORS: Add. - -2008-02-26 Simon Josefsson - - * AUTHORS: Add. - -2008-02-26 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2008-02-26 Simon Josefsson - - * Makefile.am: Fix release target. - -2008-02-26 Simon Josefsson - - * ChangeLog: Generated. - -2008-02-26 Simon Josefsson - - * NEWS: Version 2.3.2. - -2008-02-26 Simon Josefsson - - * tests/openpgpself.c: Force success. - -2008-02-26 Simon Josefsson - - * NEWS: Add. - -2008-02-26 Simon Josefsson - - * doc/reference/Makefile.am, lib/Makefile.am, lib/gnutls_db.c, - lib/gnutls_session.h: Remove empty gnutls_session.h. - -2008-02-26 Simon Josefsson - - * lib/x509/x509_int.h: align comments - -2008-02-26 Simon Josefsson - - * lib/x509/x509_int.h: Pull in gnutls/pkcs12.h instead of - duplicating stuff. - -2008-02-26 Simon Josefsson - - * lib/x509/Makefile.am, lib/x509/pkcs12.c, lib/x509/pkcs12.h, - lib/x509/pkcs12_bag.c, lib/x509/privkey_pkcs8.c, - lib/x509/x509_int.h: Move lib/x509/pkcs12.h stuff to x509_int.h. - -2008-02-26 Simon Josefsson - - * doc/reference/Makefile.am, lib/gnutls_cert.c, - lib/gnutls_dh_primes.c, lib/gnutls_pk.c, lib/gnutls_x509.c, - lib/x509/Makefile.am, lib/x509/common.c, lib/x509/crl_write.c, - lib/x509/crq.c, lib/x509/extensions.c, lib/x509/mpi.c, - lib/x509/mpi.h, lib/x509/pkcs12.c, lib/x509/privkey.c, - lib/x509/privkey_pkcs8.c, lib/x509/sign.c, lib/x509/verify.c, - lib/x509/x509.c, lib/x509/x509_int.h, lib/x509/x509_write.c: Move - mpi.h stuff to x509_int.h. - -2008-02-26 Simon Josefsson - - * doc/reference/Makefile.am, lib/gnutls_str.c, lib/gnutls_str.h, - lib/openpgp/pgp.c, lib/x509/Makefile.am, lib/x509/rfc2818.h, - lib/x509/rfc2818_hostname.c: Move rfc2818.h hostname comparison to - gnutls_str.h and update callers. - -2008-02-26 Simon Josefsson - - * libextra/openssl_compat.c: gnutls_int includes config.h, no need - to do it twice. - -2008-02-26 Simon Josefsson - - * libextra/openssl_compat.c: Need gnutls_int.h for mpi_t and stuff - (now in lib/x509/x509_int.h). - -2008-02-26 Simon Josefsson - - * doc/reference/Makefile.am, lib/x509/Makefile.am, - lib/x509/crl_write.c, lib/x509/crq.c, lib/x509/extensions.c, - lib/x509/extensions.h, lib/x509/privkey.c, - lib/x509/privkey_pkcs8.c, lib/x509/x509.c, lib/x509/x509_int.h, - lib/x509/x509_write.c: Move extensions.h stuff to x509_int.h. - -2008-02-26 Simon Josefsson - - * doc/reference/Makefile.am, lib/gnutls_rsa_export.c, - lib/gnutls_x509.c, lib/x509/Makefile.am, lib/x509/pkcs12_bag.c, - lib/x509/privkey.h, lib/x509/privkey_pkcs8.c, lib/x509/x509.c, - lib/x509/x509_int.h: Move privkey.h stuff to x509_int.h. - -2008-02-26 Simon Josefsson - - * doc/reference/Makefile.am, lib/gnutls_x509.c, - lib/openpgp/pgpverify.c, lib/x509/Makefile.am, lib/x509/privkey.c, - lib/x509/sign.c, lib/x509/verify.c, lib/x509/verify.h, - lib/x509/x509.c, lib/x509/x509_int.h: Move verify.h stuff to - x509_int.h. - -2008-02-26 Simon Josefsson - - * doc/reference/Makefile.am, lib/gnutls_x509.c, - lib/x509/Makefile.am, lib/x509/pkcs7.c, lib/x509/pkcs7.h, - lib/x509/x509_int.h: Move pkcs7.h stuff to x509_int.h. - -2008-02-26 Simon Josefsson - - * doc/reference/Makefile.am, lib/x509/Makefile.am, lib/x509/dsa.c, - lib/x509/dsa.h, lib/x509/privkey.c, lib/x509/x509_int.h: Move dsa.h - stuff to x509_int.h. - -2008-02-26 Simon Josefsson - - * doc/reference/Makefile.am, lib/x509/Makefile.am, lib/x509/crl.c, - lib/x509/crl_write.c, lib/x509/crq.c, lib/x509/dn.c, lib/x509/dn.h, - lib/x509/pkcs12.c, lib/x509/pkcs7.c, lib/x509/privkey.c, - lib/x509/privkey_pkcs8.c, lib/x509/rfc2818_hostname.c, - lib/x509/sign.c, lib/x509/verify.c, lib/x509/x509.c, - lib/x509/x509_int.h, lib/x509/x509_write.c, - libextra/openssl_compat.c: Move dn.h stuff to x509_int.h. - -2008-02-26 Simon Josefsson - - * doc/reference/Makefile.am, lib/x509/Makefile.am, - lib/x509/crl_write.c, lib/x509/crq.c, lib/x509/privkey.c, - lib/x509/sign.c, lib/x509/sign.h, lib/x509/x509_int.h, - lib/x509/x509_write.c: Move sign.h stuff to x509_int.h. - -2008-02-26 Simon Josefsson - - * lib/openpgp/privkey.c: No need for rfc2818.h. - -2008-02-26 Simon Josefsson - - * lib/x509/x509_int.h: Doc fixes. - -2008-02-26 Simon Josefsson - - * lib/x509/x509_int.h: Remove stuff already in - includes/gnutls/x509.h. - -2008-02-26 Simon Josefsson - - * .gitignore: [no log message] - -2008-02-26 Simon Josefsson - - * Makefile.am, build-aux/gnupload, gl/gnulib.mk, - gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4: Use gnupload. - -2008-02-26 Simon Josefsson - - * doc/protocol/draft-ietf-tls-rfc4366-bis-02.txt: Add. - -2008-02-25 Simon Josefsson - - * doc/reference/Makefile.am, lib/x509/Makefile.am, - lib/x509/crl_write.c, lib/x509/crq.c, lib/x509/crq.h, - lib/x509/x509_int.h, lib/x509/x509_write.c: Merge crq.h into - x509_int.h, avoid one trivial header file. - -2008-02-25 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2008-02-25 Simon Josefsson - - * lib/x509/Makefile.am: Rename x509.h to x509_int.h. - -2008-02-25 Simon Josefsson - - * NEWS: Add. - -2008-02-25 Simon Josefsson - - * lib/auth_cert.h, lib/gnutls_cert.c, lib/gnutls_cert.h, - lib/gnutls_rsa_export.c, lib/gnutls_x509.c, lib/x509/crl.c, - lib/x509/extensions.c, lib/x509/mpi.c, lib/x509/mpi.h, - lib/x509/output.c, lib/x509/privkey.c, lib/x509/privkey_pkcs8.c, - lib/x509/rfc2818_hostname.c, lib/x509/sign.c, lib/x509/verify.c, - lib/x509/verify.h, lib/x509/x509.c, lib/x509/x509.h, - lib/x509/x509_int.h: Rename lib/x509/x509.h to x509_int.h. Fixes - name-space collision that confuses GTK-DOC with - includes/gnutls/x509.h. - -2008-02-25 Simon Josefsson - - * lib/auth_cert.h, lib/openpgp/Makefile.am, lib/openpgp/compat.c, - lib/openpgp/extras.c, lib/openpgp/openpgp.h, - lib/openpgp/openpgp_int.h, lib/openpgp/pgp.c, - lib/openpgp/pgpverify.c, lib/openpgp/privkey.c: Rename - lib/openpgp/openpgp.h to openpgp_int.h. Fixes name-space collision - that confuses GTK-DOC with includes/gnutls/openpgp.h. - -2008-02-25 Simon Josefsson - - * doc/reference/Makefile.am: Change DOC_SOURCE_DIR, needed for - GTK-DOC to have comments for variables. - -2008-02-25 Simon Josefsson - - * lib/gnutls_int.h: Remove unused defines. - -2008-02-25 Simon Josefsson - - * tests/moredn.c: Added, lost part of Joe's original - gnutls_x509_dn_export patch. - -2008-02-25 Simon Josefsson - - * lgl/Makefile.am, lgl/m4/time_r.m4, lgl/m4/unistd_h.m4, - lgl/unistd.in.h: Update gnulib files. - -2008-02-25 Simon Josefsson - - * doc/protocol/draft-badra-tls-password-ext-01.txt: Add. - -2008-02-24 Nikos - - * NEWS, doc/manpages/Makefile.am, includes/gnutls/x509.h, - lib/x509/common.c, lib/x509/common.h, lib/x509/dn.c, - tests/Makefile.am: Added gnutls_x509_dn_export(). Patch by Joe - Orton. - -2008-02-21 Nikos - - * lib/gnutls_cert.c: _export_ -> _get_ - -2008-02-21 Simon Josefsson - - * NEWS: Add. - -2008-02-21 Simon Josefsson - - * tests/openpgpself.c: Don't use credentials from files (causes - problems with srcdir!=builddir). - -2008-02-21 Simon Josefsson - - * NEWS, configure.in: Bump version. - -2008-02-21 Simon Josefsson - - * ChangeLog: Generated. - -2008-02-21 Simon Josefsson - - * NEWS: Version 2.3.1. - -2008-02-21 Simon Josefsson - - * NEWS: Add. - -2008-02-21 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2008-02-21 Simon Josefsson - - * NEWS: Fixes. - -2008-02-21 Simon Josefsson - - * NEWS: Typo. - -2008-02-21 Simon Josefsson - - * NEWS: Fix. - -2008-02-21 Simon Josefsson - - * NEWS, includes/gnutls/compat.h, includes/gnutls/gnutls.h.in, - lib/x509/output.c, src/certtool.c, src/serv.c: Use better names in - gnutls_certificate_print_formats_t. - -2008-02-21 Simon Josefsson - - * NEWS: Mention new APIs. - -2008-02-21 Simon Josefsson - - * includes/gnutls/openpgp.h: Drop gnutls_openpgp_crt_get_id (handled - by compat.h). - -2008-02-21 Simon Josefsson - - * NEWS: Fix. - -2008-02-21 Simon Josefsson - - * NEWS: Credit. - -2008-02-21 Simon Josefsson - - * NEWS, includes/gnutls/compat.h, lib/openpgp/pgp.c: Cleanup - gnutls_openpgp_crt_get_id vs gnutls_openpgp_crt_get_key_id. - -2008-02-21 Simon Josefsson - - * includes/gnutls/gnutls.h.in: Typo. - -2008-02-21 Simon Josefsson - - * includes/gnutls/gnutls.h.in, includes/gnutls/openpgp.h: Make it - build. - -2008-02-21 Simon Josefsson - - * doc/protocol/draft-ietf-tls-extractor-01.txt, - doc/protocol/draft-mavrogiannopoulos-rfc5081bis-00.txt: Add. - -2008-02-20 Nikos - - * NEWS: removed function - -2008-02-20 Nikos - - * NEWS, includes/gnutls/gnutls.h.in, lib/gnutls_cert.c: Added - gnutls_certificate_export_x509_cas and other functions to export - elements from the certificate credentials structure. - -2008-02-19 Nikos - - * lib/auth_cert.h, lib/openpgp/openpgp.h: changes to compile with - ENABLE_OPENPGP undef. - -2008-02-19 Nikos - - * lib/openpgp/pgp.c: do not return more than the available names. - -2008-02-19 Nikos - - * lib/openpgp/output.c: corrected bug that prevented printing the - names. - -2008-02-19 Nikos - - * tests/openpgp_test.c, tests/openpgpself.c: some updates - -2008-02-19 Nikos - - * tests/Makefile.am, tests/openpgpself.c: added self test for - openpgp connection - -2008-02-19 Nikos - - * NEWS, includes/gnutls/x509.h, lib/x509/dn.c, lib/x509/x509.c, - tests/Makefile.am, tests/x509dn.c: Added - gnutls_x509_dn_import/init/deinit() to access raw DER DN. Patch by - Joe Orton. - -2008-02-19 Nikos - - * lib/auth_cert.c, lib/gnutls_cert.c, lib/gnutls_openpgp.c, - lib/openpgp/gnutls_openpgp.h: better usage of gnutls_openpgp_keyid_t - -2008-02-19 Nikos - - * lib/auth_cert.c, lib/gnutls_openpgp.c, lib/openpgp/extras.c, - lib/openpgp/output.c, lib/openpgp/pgpverify.c, - lib/openpgp/privkey.c: copyright 2008 - -2008-02-18 Nikos - - * doc/examples/ex-serv-pgp.c, includes/gnutls/gnutls.h.in, - includes/gnutls/openpgp.h, lib/auth_cert.c, lib/gnutls_cert.c, - lib/gnutls_openpgp.c, lib/openpgp/extras.c, - lib/openpgp/gnutls_openpgp.h, lib/openpgp/openpgp.h, - lib/openpgp/output.c, lib/openpgp/pgp.c, lib/openpgp/pgpverify.c, - lib/openpgp/privkey.c, src/certtool.c, src/cli-gaa.c, src/cli.c, - src/serv-gaa.c, tests/openpgp/keyring.c: pgp_keyid_t is now - compatible with the 2.2 key id. - -2008-02-18 Nikos - - * : commit 8784572575208f8755087125b168bb0a8832cee4 Author: Nikos - Date: Mon Feb 18 17:58:24 2008 +0200 - -2008-02-18 Simon Josefsson - - * README: Don't mention SSL/TLS versions here. Some minor other - fixes. - -2008-02-18 Simon Josefsson - - * includes/gnutls/openpgp.h: For compatibility. - -2008-02-18 Simon Josefsson - - * lib/openpgp/openpgp.h: Remove all external APIs already declared - in includes/gnutls/openpgp.h. - -2008-02-18 Simon Josefsson - - * NEWS, includes/gnutls/compat.h, lib/openpgp/pgp.c: Re-add - gnutls_openpgp_crt_get_id to avoid breaking ABI. - -2008-02-18 Simon Josefsson - - * NEWS: Mention gnutls_openpgp_keyid_t. - -2008-02-18 Simon Josefsson - - * lgl/m4/vasnprintf.m4, lgl/vasnprintf.c: Update gnulib files. - -2008-02-17 Nikos - - * lib/x509/x509.c: corrected string handling in parse_general_name. - Thanks to Andreas Metzler for pointing out. - -2008-02-17 Nikos - - * NEWS, lib/gnutls_int.h, lib/gnutls_ui.c, lib/gnutls_x509.c: - Increased the default certificate verification chain limits and - allowed for checks without limitation. - -2008-02-17 Nikos - - * lib/gnutls_priority.c: corrected previous fix in priorities - handling. - -2008-02-17 Nikos - - * NEWS, lib/auth_dh_common.c, lib/gnutls_auth.c, - lib/gnutls_session.c, lib/gnutls_session_pack.c: Corrected memory - leaks in session resuming and DHE ciphersuites. Reported by Daniel - Stenberg. - -2008-02-15 Nikos - - * NEWS: documented the gnutls_x509_crt_get_subject_alt_name fix. - -2008-02-15 Nikos - - * lib/x509/x509.c: null terminate only printable strings. - -2008-02-14 Simon Josefsson - - * doc/protocol/draft-ietf-tls-des-idea-00.txt: Add. - -2008-02-13 Simon Josefsson - - * NEWS: Add. - -2008-02-12 Simon Josefsson - - * doc/protocol/draft-ietf-tls-ecc-new-mac-04.txt: Add. - -2008-02-12 Simon Josefsson - - * NEWS: Add. - -2008-02-12 Simon Josefsson - - * lib/auth_srp_sb64.c: Doc fixes, to clarify that srp_base64 != - base64. Based on discussion in - - . - -2008-02-10 Simon Josefsson - - * doc/protocol/draft-ietf-tls-ecc-new-mac-03.txt, - doc/protocol/draft-ietf-tls-rfc4346-bis-09.txt, - doc/protocol/draft-ietf-tls-rsa-aes-gcm-02.txt: Add. - -2008-02-07 Nikos - - * : commit 5178625a7e120fdf7b859f52848aa9cc69574268 Author: Nikos - Date: Thu Feb 7 18:15:26 2008 +0200 - -2008-02-06 Simon Josefsson - - * GNUmakefile, Makefile.am, maint-cfg.mk: Brace expansion is not - POSIX portable. - -2008-02-04 Simon Josefsson - - * NEWS: Add. - -2008-02-04 Simon Josefsson - - * src/cli.c: When --debug is given, also print libgcrypt RNG - information. - -2008-02-04 Simon Josefsson - - * NEWS, doc/gnutls.texi: Add 'On Record Padding' section. - -2008-02-04 Simon Josefsson - - * doc/gnutls.texi: Re-order indices so they are last in the PDF. - -2008-02-04 Simon Josefsson - - * NEWS: Merge in 2.2.1 release notes. - -2008-02-03 Simon Josefsson - - * lib/gnutls_cert.c: Make it compile. - -2008-02-03 Simon Josefsson - - * lib/defines.h: Drop SIZEOF_UNSIGNED_LONG_INT, it's done in - configure.in now. - -2008-02-03 Simon Josefsson - - * lgl/Makefile.am, lgl/m4/md4.m4, lgl/m4/md5.m4, lgl/m4/sha1.m4, - lgl/m4/unistd_h.m4, lgl/md2.c, lgl/md2.h, lgl/md4.c, lgl/md4.h, - lgl/md5.c, lgl/md5.h, lgl/sha1.c, lgl/sha1.h, lgl/unistd.in.h: - Update gnulib files. - -2008-02-01 Simon Josefsson - - * configure.in, lib/minitasn1/int.h, lib/minitasn1/libtasn1.h, - lib/minitasn1/structure.c: Update libtasn1 to 1.3. - -2008-01-31 Simon Josefsson - - * lgl/Makefile.am, lgl/m4/unistd_h.m4, lgl/unistd.in.h, - lgl/vasnprintf.c: Update gnulib files. - -2008-01-27 Nikos - - * src/certtool.c: some updates - -2008-01-27 Nikos - - * includes/gnutls/openpgp.h: new definitions - -2008-01-26 Nikos - - * : commit 2d73da902a2a983cf146d32e7528f8d5d3efc287 Author: Nikos - Date: Sat Jan 26 23:08:18 2008 +0200 - -2008-01-26 Simon Josefsson - - * doc/protocol/rfc5077.txt: Add. - -2008-01-26 Simon Josefsson - - * doc/protocol/draft-ietf-tls-rfc4346-bis-08.txt: Add. - -2008-01-25 Nikos - - * lib/gnutls_openpgp.c, lib/openpgp/extras.c: updates in openpgp - keyring handling. - -2008-01-25 Nikos - - * lib/opencdk/Makefile.am, lib/opencdk/keydb.c, - lib/opencdk/keydb.h, lib/opencdk/opencdk.h: Modified the search to - include a state. - -2008-01-25 Nikos - - * src/certtool-gaa.c, src/certtool-gaa.h, src/certtool.c, - src/certtool.gaa: print keyrings - -2008-01-23 Simon Josefsson - - * doc/manpages/Makefile.am: Simplify output. - -2008-01-23 Simon Josefsson - - * doc/manpages/Makefile.am: Fix paths. - -2008-01-19 Simon Josefsson - - * configure.in: Bump version so we are higher than gnutls 2.2.x but - remain compatible. This will avoid shared library name conflicts - with 2.2.x, and also that any 2.3.x libraries will always be - prefered over 2.2.x. - -2008-01-19 Simon Josefsson - - * build-aux/gendocs.sh, gl/error.h, lgl/Makefile.am, - lgl/gc-libgcrypt.c, lgl/m4/gnulib-comp.m4, lgl/m4/string_h.m4, - lgl/memmem.c, lgl/stdio.in.h, lgl/str-two-way.h, lgl/string.in.h, - lgl/vasnprintf.h: Update gnulib files. - -2008-01-17 Simon Josefsson - - * AUTHORS: Update Ludovic's e-mail. - -2008-01-17 Simon Josefsson - - * guile/tests/openpgp-auth.scm: Also test dhe-rsa. - -2008-01-15 Simon Josefsson - - * libextra/openpgp/Makefile.am, libextra/openpgp/compat.c, - libextra/openpgp/extras.c, libextra/openpgp/gnutls_openpgp.h, - libextra/openpgp/openpgp.h, libextra/openpgp/pgp.c, - libextra/openpgp/pgpverify.c, libextra/openpgp/privkey.c: Remove - openpgp files moved to lib/openpgp/. - -2008-01-15 Simon Josefsson - - * doc/Makefile.am: Fix pgp-api.texi move. - -2008-01-14 Simon Josefsson - - * doc/protocol/rfc2440.txt: Fix chmod. - -2008-01-14 Simon Josefsson - - * doc/protocol/draft-ietf-tls-rfc4366-bis-01.txt: Add. - -2008-01-14 Nikos - - * : commit c6093b9df165dfbfbce8922e2192eedba5303f08 Author: Nikos - Date: Mon Jan 14 21:08:18 2008 +0200 - -2008-01-14 Nikos - - * NEWS: documented more changes. - -2008-01-14 Nikos - - * tests/openpgp/keyring.c: changes for the new api - -2008-01-14 Simon Josefsson - - * lgl/Makefile.am, lgl/m4/alloca.m4, lgl/m4/gnulib-cache.m4, - lgl/m4/gnulib-comp.m4, lgl/m4/memmem.m4, lgl/string.in.h: Use - gnulib's memmem-simple instead. - -2008-01-14 Simon Josefsson - - * configure.in: Remove libextra/minilozo/Makefile. - -2008-01-14 Nikos - - * includes/gnutls/openpgp.h, lib/openpgp/privkey.c, src/certtool.c: - openpgp_privkey_export() has parameters to export encrypted secret - keys. Added for future compatibility. - -2008-01-13 Simon Josefsson - - * doc/protocol/draft-ietf-tls-rsa-aes-gcm-01.txt: Add. - -2008-01-13 Nikos - - * lib/gnutls_openpgp.c: use the first valid subkey if an - authentication subkey is not found. - -2008-01-13 Nikos - - * NEWS, includes/gnutls/compat.h, includes/gnutls/openpgp.h, - lib/openpgp/openpgp.h, lib/openpgp/output.c, lib/openpgp/pgp.c, - lib/openpgp/pgpverify.c, lib/openpgp/privkey.c, src/certtool-gaa.c, - src/certtool-gaa.h, src/certtool.c, src/certtool.gaa: Additions to - make certtool print information on openpgp keys. - -2008-01-13 Nikos - - * NEWS: documented changes. - -2008-01-13 Nikos - - * README, configure.in, includes/gnutls/gnutls.h.in, - includes/gnutls/openpgp.h, lib/Makefile.am, lib/auth_cert.c, - lib/auth_cert.h, lib/gnutls_cert.c, lib/gnutls_cert.h, - lib/gnutls_errors.c, lib/gnutls_extra_hooks.c, - lib/gnutls_extra_hooks.h, lib/gnutls_openpgp.c, lib/gnutls_state.c, - lib/opencdk/Makefile.am, lib/opencdk/README, lib/opencdk/armor.c, - lib/opencdk/context.h, lib/opencdk/dummy.c, lib/opencdk/filters.h, - lib/opencdk/hash.c, lib/opencdk/kbnode.c, lib/opencdk/keydb.c, - lib/opencdk/literal.c, lib/opencdk/main.c, lib/opencdk/main.h, - lib/opencdk/misc.c, lib/opencdk/new-packet.c, - lib/opencdk/opencdk.h, lib/opencdk/packet.h, lib/opencdk/pubkey.c, - lib/opencdk/read-packet.c, lib/opencdk/seskey.c, - lib/opencdk/sig-check.c, lib/opencdk/stream.c, - lib/opencdk/stream.h, lib/opencdk/types.h, lib/opencdk/verify.c, - lib/opencdk/write-packet.c, lib/openpgp/Makefile.am, - lib/openpgp/compat.c, lib/openpgp/extras.c, - lib/openpgp/gnutls_openpgp.h, lib/openpgp/openpgp.h, - lib/openpgp/output.c, lib/openpgp/pgp.c, lib/openpgp/pgpverify.c, - lib/openpgp/privkey.c, libextra/Makefile.am, - libextra/gnutls_extra.c, libextra/gnutls_openpgp.c, - libextra/opencdk/Makefile.am, libextra/opencdk/README, - libextra/opencdk/armor.c, libextra/opencdk/cipher.c, - libextra/opencdk/compress.c, libextra/opencdk/context.h, - libextra/opencdk/dummy.c, libextra/opencdk/filters.h, - libextra/opencdk/kbnode.c, libextra/opencdk/keydb.c, - libextra/opencdk/literal.c, libextra/opencdk/main.c, - libextra/opencdk/main.h, libextra/opencdk/misc.c, - libextra/opencdk/new-packet.c, libextra/opencdk/opencdk.h, - libextra/opencdk/packet.h, libextra/opencdk/pubkey.c, - libextra/opencdk/read-packet.c, libextra/opencdk/seskey.c, - libextra/opencdk/sig-check.c, libextra/opencdk/stream.c, - libextra/opencdk/stream.h, libextra/opencdk/types.h, - libextra/opencdk/verify.c, libextra/opencdk/write-packet.c, - src/Makefile.am, src/certtool-gaa.c, src/certtool-gaa.h, - src/certtool.c, src/certtool.gaa, src/cli.c, src/serv.c, - src/tls_test.c: merged the openpgp branch to head\! - -2008-01-12 Nikos - - * libextra/Makefile.am: Added fix by Alon to avoid linking against - /usr/lib/libgnutls.so. - -2008-01-09 Simon Josefsson - - * GNUmakefile, maint-cfg.mk: Re-add config.rpath hack, since gnulib - updated config.rpath. - -2008-01-09 Simon Josefsson - - * build-aux/config.rpath, lgl/Makefile.am, lgl/dummy.c, - lgl/m4/eealloc.m4, lgl/m4/gnulib-comp.m4, lgl/m4/malloca.m4, - lgl/malloca.c, lgl/malloca.h, lgl/malloca.valgrind, lgl/memmem.c, - lgl/printf-parse.c: Update gnulib files. - -2008-01-08 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2008-01-08 Simon Josefsson - - * ChangeLog: Generated. - -2008-01-08 Simon Josefsson - - * NEWS: Version 2.3.0. - -2008-01-08 Simon Josefsson - - * po/LINGUAS: Sync with TP. - -2008-01-08 Simon Josefsson - - * po/LINGUAS: Sync with TP. - -2008-01-08 Simon Josefsson - - * configure.in: Further LZO fixes. - -2008-01-08 Simon Josefsson - - * doc/reference/Makefile.am: Cleanup after LZO removal. - -2008-01-08 Simon Josefsson - - * NEWS, configure.in, doc/gnutls.texi, libextra/Makefile.am, - libextra/minilzo/Makefile.am, libextra/minilzo/README.LZO, - libextra/minilzo/lzoconf.h, libextra/minilzo/lzodefs.h, - libextra/minilzo/minilzo.c, libextra/minilzo/minilzo.h, - libextra/minilzo/testmini.c: Remove LZO compression support. - -2008-01-08 Simon Josefsson - - * Makefile.am: Call git-push (git-push --tags doesn't push - changes..). - -2008-01-08 Simon Josefsson - - * NEWS, gl/progname.c, lgl/m4/memmem.m4, lgl/memmem.c: Update gnulib - files. - -2008-01-07 Simon Josefsson - - * NEWS: Add. - -2008-01-07 Simon Josefsson - - * lib/ext_server_name.c: Handle more than one server name field - correctly. Tiny patch from mark.phillips@virgin.net. - -2008-01-05 Simon Josefsson - - * configure.in: Drop -D_REENTRANT -D_THREAD_SAFE, not needed as far - as I can tell. - -2008-01-04 Simon Josefsson - - * NEWS: Add. - -2008-01-04 Simon Josefsson - - * po/LINGUAS, po/ms.po: Sync with TP. - -2008-01-04 Simon Josefsson - - * po/LINGUAS: Sync with TP. - -2008-01-02 Simon Josefsson - - * doc/manpages/Makefile.am: Bump copyright years. - -2008-01-02 Simon Josefsson - - * NEWS: Remove dupe entry. - -2008-01-02 Simon Josefsson - - * gl/fseeko.c, gl/m4/gnulib-comp.m4, gl/progname.c, - gl/version-etc.c, lgl/Makefile.am, lgl/float.in.h, - lgl/m4/float_h.m4, lgl/m4/gnulib-comp.m4, lgl/m4/memmem.m4, - lgl/m4/stdlib_h.m4, lgl/m4/string_h.m4, lgl/m4/unistd_h.m4, - lgl/memmem.c, lgl/stdint.in.h, lgl/stdlib.in.h, lgl/string.in.h, - lgl/unistd.in.h: Update gnulib files. - -2008-01-02 Simon Josefsson - - * lgl/dummy.c, lgl/m4/eealloc.m4, lgl/m4/malloca.m4, - lgl/m4/memchr.m4, lgl/m4/memcmp.m4, lgl/malloca.c, lgl/malloca.h, - lgl/malloca.valgrind, lgl/memchr.c, lgl/memcmp.c: Update gnulib - files. - -2008-01-02 Simon Josefsson - - * gl/.gitignore, lgl/.gitignore: Remove .gitignore's from gnulib. - -2007-12-21 Simon Josefsson - - * doc/protocol/draft-ietf-tls-ecc-new-mac-02.txt, - doc/protocol/draft-ietf-tls-extractor-00.txt: Add. - -2007-12-21 Simon Josefsson - - * lib/gnutls_priority.c: Doc fixes. - -2007-12-17 Simon Josefsson - - * doc/protocol/draft-hajjeh-tls-sign-04.txt: Add. - -2007-12-15 Nikos - - * lib/gnutls_state.c: Fix for certificate selection in servers with - certificate callbacks. - -2007-12-16 Nikos - - * : 1 2 lib/gnutls_state.c - -2007-12-10 Simon Josefsson - - * lib/minitasn1/libtasn1.h: Bump versions. - -2007-12-14 Simon Josefsson - - * NEWS: Merge in old NEWS entries. - -2007-12-14 Simon Josefsson - - * po/LINGUAS, po/nl.po, po/pl.po, po/sv.po: Sync with TP. - -2007-12-13 Simon Josefsson - - * .cvscopying: Add 2007. - -2007-12-13 Simon Josefsson - - * NEWS: Add. - -2007-12-13 Simon Josefsson - - * lib/gnutls_state.c: If the server has a callback, the search for a - valid certificate will fail. Patch from Nikos. - -2007-12-13 Simon Josefsson - - * doc/protocol/draft-hajjeh-tls-identity-protection-02.txt: Add. - -2007-12-12 Ludovic Courtès - - * : commit a37e52e18a625138cb0e3441023e2ac9fbb62552 Author: Ludovic - Courtès Date: Tue Dec 11 18:23:15 2007 +0100 - -2007-12-11 Ludovic Courtès - - * guile/tests/openpgp-auth.scm, guile/tests/openpgp-keyring.scm, - guile/tests/openpgp-keys.scm: Update Guile OpenPGP test cases to use - the new names. * guile/tests/*.scm: Substitute `certificate' to `public-key' in - tests using the OpenPGP API. - -2007-12-11 Ludovic Courtès - - * doc/guile.texi: Update OpenPGP names in Guile examples. * doc/guile.texi (Guile Examples): Substitute `certificate' to `public-key' in OpenPGP examples. - -2007-12-11 Ludovic Courtès - - * guile/modules/gnutls.scm, guile/modules/gnutls/extra.scm, - guile/pre-inst-guile.in, guile/src/Makefile.am: Bump Guile glue - libraries version number. * guile/modules/gnutls.scm: Load `libguile-gnutls-v-1'. * guile/modules/gnutls/extra.scm: Load `libguile-gnutls-extra-v-1'. * guile/pre-inst-guile.in: Load `v-1' libraries. * guile/src/Makefile.am (lib_LTLIBRARIES): Bump libraries from `v-0' - to `v-1'. Update all variables. - -2007-12-11 Ludovic Courtès - - * guile/modules/gnutls/build/enums.scm, - guile/modules/gnutls/build/smobs.scm, - guile/modules/gnutls/extra.scm, guile/src/extra.c: Substitute - `certificate' to `public-key' in `(gnutls extra)'. * guile/modules/gnutls/build/enums.scm (%openpgp-key-format-enum): Rename to... (%openpgp-certificate-format-enum): This. (%gnutls-extra-enums): Update. * guile/modules/gnutls/build/smobs.scm (%openpgp-public-key-smob): Rename to... (%openpgp-certificate-smob): This. (%gnutls-extra-smobs): Update. * guile/modules/gnutls/extra.scm: Substitute all `certificate' in - all `public-key' names. Add backward-compatible bindings. * guile/src/extra.c: Substitute `certificate' to `public-key'. - -2007-12-11 Simon Josefsson - - * GNUmakefile, maint-cfg.mk: Remove config.rpath hack. - -2007-12-10 Simon Josefsson - - * NEWS: Add. - -2007-12-10 Simon Josefsson - - * src/certtool.c: Make --verify-chain support larger inputs than - 64kb. - -2007-12-10 Simon Josefsson - - * configure.in: Re-order gettext invocation to avoid autoconf - warnings. - -2007-12-10 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2007-12-10 Simon Josefsson - - * ChangeLog: Generated. - -2007-12-10 Simon Josefsson - - * NEWS: Version 2.1.8. - -2007-12-09 Simon Josefsson - - * doc/Makefile.am: GPLv3 typo. - -2007-12-09 Simon Josefsson - - * NEWS: Doc fix. - -2007-12-09 Simon Josefsson - - * NEWS, configure.in, maint-cfg.mk: Gettext 0.17 to solve -L - problem. - -2007-12-09 Simon Josefsson - - * configure.in: GPLv3. - -2007-12-09 Simon Josefsson - - * gl/version-etc.c: Revert local gnulib override regarding GPLv3. - -2007-12-09 Simon Josefsson - - * doc/Makefile.am, doc/credentials/Makefile.am, - doc/extract-guile-c-doc.scm, doc/guile.texi, gl/Makefile.am, - guile/modules/gnutls/extra.scm, - guile/modules/system/documentation/c-snarf.scm, - guile/modules/system/documentation/output.scm, - guile/pre-inst-guile.in, guile/src/extra.c, - guile/tests/openpgp-auth.scm, guile/tests/openpgp-keyring.scm, - guile/tests/openpgp-keys.scm, includes/Makefile.am: More GPLv3 - fixes. - -2007-12-09 Simon Josefsson - - * gl/override/lib/version-etc.c.diff: More GPLv3 fixes. - -2007-12-09 Simon Josefsson - - * doc/gpl-3.0.texi: Use GPLv3 in manual. - -2007-12-09 Simon Josefsson - - * doc/gnutls.texi, doc/gpl-2.0.texi, gl/gnulib.mk, - gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4: Use GPLv3 in manual. - -2007-12-09 Simon Josefsson - - * Makefile.am, doc/examples/Makefile.am, doc/manpages/Makefile.am, - includes/gnutls/extra.h, includes/gnutls/openssl.h, - libextra/Makefile.am, libextra/gnutls_extra.h, - libextra/libgnutls-extra.vers, libextra/openpgp/Makefile.am, - libextra/openssl_compat.h, maint-cfg.mk: GPLv3 fixes. - -2007-12-09 Simon Josefsson - - * src/Makefile.am, src/common.c, src/list.h, src/serv.c: Use GPLv3 - in src/. - -2007-12-09 Simon Josefsson - - * tests/Makefile.am, tests/anonself.c, tests/certder.c, - tests/certificate_set_x509_crl.c, tests/dhepskself.c, tests/dn.c, - tests/gc.c, tests/hostname-check/Makefile.am, - tests/hostname-check/hostname-check.c, tests/key-id/Makefile.am, - tests/key-id/key-id, tests/nist-pkits/pkits, - tests/nist-pkits/pkits_crl, tests/nist-pkits/pkits_crt, - tests/nist-pkits/pkits_pkcs12, tests/nist-pkits/pkits_smime, - tests/openpgp/Makefile.am, tests/openpgp/keyring.c, - tests/openssl.c, tests/oprfi.c, tests/parse_ca.c, - tests/pathlen/Makefile.am, tests/pathlen/pathlen, - tests/pkcs1-padding/Makefile.am, tests/pkcs1-padding/pkcs1-pad, - tests/pkcs12-decode/Makefile.am, tests/pkcs12-decode/pkcs12, - tests/pkcs8-decode/Makefile.am, tests/pkcs8-decode/pkcs8, - tests/pskself.c, tests/resume.c, - tests/rsa-md5-collision/Makefile.am, - tests/rsa-md5-collision/rsa-md5-collision, tests/set_pkcs12_cred.c, - tests/sha2/Makefile.am, tests/sha2/sha2, tests/simple.c, - tests/tlsia.c, tests/userid/Makefile.am, tests/userid/userid, - tests/utils.c, tests/utils.h, tests/x509paths/chain, - tests/x509self.c, tests/x509signself.c: Use GPLv3 for self-tests. - -2007-12-09 Simon Josefsson - - * build-aux/config.rpath, build-aux/gendocs.sh, doc/fdl.texi, - doc/gendocs_template, gl/fseeko.c, gl/gai_strerror.c, - gl/getaddrinfo.c, gl/getaddrinfo.h, gl/getdelim.c, gl/getline.c, - gl/getpass.c, gl/getpass.h, gl/inet_ntop.c, gl/inet_ntop.h, - gl/lseek.c, gl/m4/getdelim.m4, gl/m4/getline.m4, - gl/m4/gnulib-comp.m4, gl/m4/lib-link.m4, gl/m4/strerror.m4, - gl/netinet_in.in.h, gl/strdup.c, gl/strerror.c, gl/version-etc.c, - lgl/Makefile.am, lgl/m4/gettext.m4, lgl/m4/gnulib-comp.m4, - lgl/m4/iconv.m4, lgl/m4/intdiv0.m4, lgl/m4/intl.m4, - lgl/m4/intlmacosx.m4, lgl/m4/intmax_t.m4, lgl/m4/lib-link.m4, - lgl/m4/lock.m4, lgl/m4/longlong.m4, lgl/m4/po.m4, - lgl/m4/printf-posix.m4, lgl/m4/stdio_h.m4, lgl/m4/stdlib_h.m4, - lgl/m4/string_h.m4, lgl/m4/uintmax_t.m4, lgl/m4/ulonglong.m4, - lgl/m4/unistd_h.m4, lgl/m4/vasnprintf.m4, lgl/m4/wint_t.m4, - lgl/printf-parse.c, lgl/realloc.c, lgl/stdlib.in.h, - lgl/string.in.h, lgl/unistd.in.h, lgl/vasnprintf.c: Update gnulib. - -2007-12-09 Nikos - - * lib/gnutls_handshake.c, lib/gnutls_handshake.h, - lib/gnutls_v2_compat.c: user_hello_func is call always. Even when - resuming a session. - -2007-12-09 Nikos - - * src/common.c: print session ID - -2007-12-07 System User - - * NEWS: license update - -2007-12-07 System User - - * COPYING, libextra/gnutls_extra.c, libextra/gnutls_ia.c, - libextra/gnutls_openpgp.c, libextra/gnutls_openssl.c, - libextra/openpgp/compat.c, libextra/openpgp/extras.c, - libextra/openpgp/pgp.c, libextra/openpgp/pgpverify.c, - libextra/openpgp/privkey.c, libextra/openssl_compat.c, - src/certtool-cfg.c, src/certtool.c, src/cli.c, src/common.c, - src/crypt.c, src/prime.c, src/psk.c, src/serv.c, src/tests.c, - src/tls_test.c: GPL parts under GPLv3 - -2007-12-06 System User - - * lib/gnutls_record.c: It seems we were ahead of our time. - -2007-12-06 System User - - * NEWS, lib/gnutls_record.c: Revert "We now ignore received packets - with unknown content types" This reverts commit 4a19fd59da474b3de977a925fd91578db7e3d4a1. - -2007-12-06 Simon Josefsson - - * lib/x509/x509.c: Doc fix.es - -2007-12-06 Simon Josefsson - - * lib/x509/x509.c: Typo fix. Tiny patch from Daniel Kahn Gillmor - . - -2007-12-04 Nikos - - * : commit bd3b0f49c966277e91f57c64cfcc720cbebb4a73 Author: Nikos - Date: Tue Dec 4 22:05:25 2007 +0200 - -2007-12-04 Simon Josefsson - - * maint-cfg.mk: Overwrite autopoint files with gnulib files. - -2007-12-03 Nikos - - * : commit dac01d7279eb28e7c5909d53bf346206f10319b5 Author: Nikos - Date: Mon Dec 3 20:05:32 2007 +0200 - -2007-12-03 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2007-12-03 Simon Josefsson - - * NEWS: Add. - -2007-12-03 Simon Josefsson - - * configure.in: Bump version. - -2007-12-03 Simon Josefsson - - * configure.in: Bump to indicate added ABI. - -2007-12-03 Simon Josefsson - - * maint-cfg.mk: Copy, don't remove... to fix Makefile.in hard-coded - links to m4 filenames. - -2007-12-03 Simon Josefsson - - * maint-cfg.mk: Remove gettext havelib files. - -2007-12-03 Simon Josefsson - - * lib/x509/privkey_pkcs8.c: Indent. - -2007-12-03 Nikos - - * : 3 0 NEWS - -2007-12-02 Nikos - - * NEWS, includes/gnutls/x509.h, lib/x509/x509.c: added - gnutls_x509_crt_get_subject_alt_name2 to overcome some limitations - of the original function. - -2007-12-02 Nikos - - * : 1 1 lib/x509/x509.c - -2007-12-01 Simon Josefsson - - * : commit b6e4b1ff3f7ef8a8d26f2e89c0bc50d2fc9d23f4 Author: Nikos - Date: Sat Dec 1 08:25:34 2007 +0200 - -2007-11-30 Nikos - - * configure.in, lib/x509/dsa.c, src/certtool.c: Depend on libgcrypt - 1.2.4 again (lose DSA2 functionality). - -2007-11-30 Nikos - - * lib/gnutls_priority.c: Added SECURE256 and SECURE128 level. - -2007-11-29 Simon Josefsson - - * ChangeLog: Generated. - -2007-11-29 Simon Josefsson - - * NEWS: Version 2.1.7. - -2007-11-28 Nikos - - * : 2 2 lib/gnutls_priority.c - -2007-11-28 Nikos - - * lib/auth_srp_passwd.c: more assertions. - -2007-11-28 Nikos - - * lib/auth_srp.c: more assertions - -2007-11-28 Nikos - - * lib/auth_srp.c: added assertion. - -2007-11-28 Nikos - - * src/serv.c: fix in priority_set - -2007-11-28 Nikos - - * includes/gnutls/gnutlsxx.h: updated the gnutlsxx interface - -2007-11-28 Nikos - - * includes/gnutls/gnutls.h.in, lib/gnutls_priority.c: more updates - for priority functions. - -2007-11-28 Nikos - - * doc/examples/ex-cert-select.c, doc/examples/ex-client-resume.c, - doc/examples/ex-client-srp.c, doc/examples/ex-client-tlsia.c, - doc/examples/ex-client1.c, doc/examples/ex-client2.c, - doc/examples/ex-serv-anon.c, doc/examples/ex-serv-export.c, - doc/examples/ex-serv-pgp.c, doc/examples/ex-serv-srp.c, - doc/examples/ex-serv1.c, lib/gnutls_priority.c, lib/gnutlsxx.cpp, - src/cli.c, src/serv.c: Return the string position in case of an - error in the priority functions. - -2007-11-28 Simon Josefsson - - * lib/gnutls_priority.c: Typo. - -2007-11-28 Simon Josefsson - - * NEWS: Fix. - -2007-11-28 Simon Josefsson - - * lib/gnutls_priority.c: Give example for %COMPAT. - -2007-11-28 Simon Josefsson - - * lib/gnutls_priority.c: Rename HIGH to SECURE. - -2007-11-28 Simon Josefsson - - * lib/gnutls_priority.c: Re-add aes-256 so we don't fail to - negotiate it in case end only supports it. Doc fixes. - -2007-11-28 Simon Josefsson - - * lib/gnutls_priority.c: Doc fixes. Fix warnings. - -2007-11-28 Simon Josefsson - - * lib/gnutls_priority.c: Re-indent. - -2007-11-28 Simon Josefsson - - * po/ms.po: Sync with TP. - -2007-11-28 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2007-11-28 Simon Josefsson - - * NEWS: Fix. - -2007-11-28 Simon Josefsson - - * includes/gnutls/compat.h, includes/gnutls/gnutls.h.in, - lib/gnutls_priority.c: Re-add gnutls_set_default_priority and - gnutls_set_default_export_priority. - -2007-11-27 Simon Josefsson - - * doc/protocol/draft-ietf-tls-rfc4346-bis-07.txt: Add. - -2007-11-26 Simon Josefsson - - * doc/protocol/rfc5054.txt: Add. - -2007-11-26 Simon Josefsson - - * doc/protocol/draft-rescorla-tls-extractor-01.txt: Add. - -2007-11-26 Nikos Mavrogiannopoulos - - * : 1 1 lib/gnutls_priority.c - -2007-11-25 Nikos Mavrogiannopoulos - - * lib/x509/common.c: corrected bug in the new read_mpis - -2007-11-25 Nikos Mavrogiannopoulos - - * lib/x509/common.c, lib/x509/common.h, lib/x509/crl.c, - lib/x509/crq.c, lib/x509/pkcs12.c, lib/x509/pkcs7.c, - lib/x509/privkey.c, lib/x509/privkey_pkcs8.c, lib/x509/x509.c: - export_int was simplified are no artificial limits are imposed any - more - -2007-11-25 Nikos Mavrogiannopoulos - - * lib/x509/common.c: variables for the time functions are not more - rational. - -2007-11-25 Nikos Mavrogiannopoulos - - * lib/x509/common.c, lib/x509/mpi.c: in RSA certificate parameters - no artificial limits are imposed any more - -2007-11-25 Nikos Mavrogiannopoulos - - * lib/x509/privkey_pkcs8.c: corrected documentation - -2007-11-25 Nikos Mavrogiannopoulos - - * NEWS, lib/x509/mpi.c, lib/x509/mpi.h, lib/x509/privkey.c, - lib/x509/privkey.h, lib/x509/privkey_pkcs8.c: added support for PKCS - #8 decoding of DSA keys. - -2007-11-24 Nikos Mavrogiannopoulos - - * lib/x509/mpi.c, lib/x509/privkey_pkcs8.c: added ability to write - DSA private keys. - -2007-11-24 Nikos Mavrogiannopoulos - - * doc/examples/ex-cert-select.c, doc/examples/ex-serv1.c: examples - now compile - -2007-11-24 Nikos Mavrogiannopoulos - - * : 3 3 doc/examples/ex-cert-select.c - -2007-11-24 Nikos Mavrogiannopoulos - - * NEWS, doc/examples/ex-cert-select.c, - doc/examples/ex-client-resume.c, doc/examples/ex-client-srp.c, - doc/examples/ex-client-tlsia.c, doc/examples/ex-client1.c, - doc/examples/ex-client2.c, doc/examples/ex-serv-anon.c, - doc/examples/ex-serv-export.c, doc/examples/ex-serv-pgp.c, - doc/examples/ex-serv-srp.c, doc/examples/ex-serv1.c, - doc/gnutls.texi, includes/gnutls/compat.h, - includes/gnutls/gnutls.h.in, includes/gnutls/gnutlsxx.h, - lib/gnutls_int.h, lib/gnutls_priority.c, lib/gnutlsxx.cpp, - src/cli.c, src/common.c, src/serv.c: new era of priority functions. - -2007-11-24 Nikos Mavrogiannopoulos - - * lib/ext_cert_type.c, lib/gnutls_algorithms.c, lib/gnutls_int.h, - lib/gnutls_priority.c, lib/gnutls_record.c, lib/gnutls_state.c: - cleanup the priority functionality - -2007-11-21 Nikos Mavrogiannopoulos - - * doc/gnutls.texi: links to rfc 5054 (srp) - -2007-11-18 Nikos Mavrogiannopoulos - - * includes/gnutls/compat.h: updated the priority compatibility - functions - -2007-11-18 Nikos Mavrogiannopoulos - - * NEWS, doc/gnutls.texi, includes/gnutls/gnutls.h.in, - lib/gnutls_priority.c, lib/gnutls_state.h: added - gnutls_check_priority() to check syntax of priority strings. - -2007-11-18 Nikos Mavrogiannopoulos - - * lib/gnutls_handshake.c, lib/gnutls_handshake.h, - lib/gnutls_v2_compat.c: Renegotiate the protocol version after the - user_hello_func has been called - -2007-11-18 Nikos Mavrogiannopoulos - - * doc/examples/ex-cert-select.c, doc/examples/ex-client-srp.c, - includes/gnutls/gnutlsxx.h, lib/gnutls_priority.c, lib/gnutlsxx.cpp: - fixes for the new gnutls_set_priority(). - -2007-11-18 Nikos Mavrogiannopoulos - - * doc/gnutls.texi: The gnutls_*_convert_priority() functions were - deprecated by the gnutls_set_priority() - -2007-11-18 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_priority.c: The gnutls_*_convert_priority() - functions were deprecated by the gnutls_set_priority() - -2007-11-18 Nikos Mavrogiannopoulos - - * NEWS, configure.in, doc/examples/ex-client-resume.c, - doc/examples/ex-client-srp.c, doc/examples/ex-client-tlsia.c, - doc/examples/ex-client1.c, doc/examples/ex-client2.c, - doc/examples/ex-serv-anon.c, doc/examples/ex-serv-export.c, - doc/examples/ex-serv-pgp.c, doc/examples/ex-serv-srp.c, - doc/examples/ex-serv1.c, doc/gnutls.texi, includes/gnutls/compat.h, - includes/gnutls/gnutls.h.in, includes/gnutls/gnutlsxx.h, - lib/gnutls_algorithms.h, lib/gnutls_priority.c, lib/gnutlsxx.cpp, - src/cli-gaa.c, src/cli-gaa.h, src/cli.c, src/cli.gaa, - src/serv-gaa.c, src/serv-gaa.h, src/serv.c, src/serv.gaa: added - gnutls_set_priority() to replace gnutls_set_default_priority2(). - -2007-11-16 Simon Josefsson - - * libextra/opencdk/keydb.c, libextra/opencdk/seskey.c: Re-apply - opencdk fixes that were lost in 0.6.6 upgrade. - -2007-11-16 Simon Josefsson - - * NEWS, libextra/opencdk/cipher.c, libextra/opencdk/keydb.c, - libextra/opencdk/opencdk.h, libextra/opencdk/seskey.c, - libextra/opencdk/stream.c: Use OpenCDK 0.6.6. - -2007-11-16 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2007-11-15 Simon Josefsson - - * ChangeLog: Generated. - -2007-11-15 Simon Josefsson - - * NEWS: Version 2.1.6. - -2007-11-15 Simon Josefsson - - * NEWS: Add. - -2007-11-15 Simon Josefsson - - * NEWS: Add. - -2007-11-15 Simon Josefsson - - * NEWS: Add. - -2007-11-15 Simon Josefsson - - * includes/gnutls/compat.h: Revert rename of - GNUTLS_E_UNKNOWN_HASH_ALGORITHM. Instead we add a new - GNUTLS_E_UNKNOWN_ALGORITHM. - -2007-11-15 Simon Josefsson - - * includes/gnutls/gnutls.h.in: Revert rename of - GNUTLS_E_UNKNOWN_HASH_ALGORITHM. Instead we add a new - GNUTLS_E_UNKNOWN_ALGORITHM. - -2007-11-15 Simon Josefsson - - * lib/gnutls_errors.c: Revert rename of - GNUTLS_E_UNKNOWN_HASH_ALGORITHM. Instead we add a new - GNUTLS_E_UNKNOWN_ALGORITHM. - -2007-11-14 Simon Josefsson - - * libextra/opencdk/seskey.c: Doc fix. - -2007-11-14 Simon Josefsson - - * libextra/opencdk/keydb.c: Doc fix. - -2007-11-14 Simon Josefsson - - * lib/gnutls_record.c: Doc fix. - -2007-11-14 Simon Josefsson - - * lib/gnutls_cert.c: Doc fix. - -2007-11-14 Simon Josefsson - - * lib/gnutls_anon_cred.c: Doc fix. - -2007-11-14 Simon Josefsson - - * lib/gnutls_state.c: Doc fix. - -2007-11-14 Simon Josefsson - - * lib/gnutls_x509.c: Doc fix. - -2007-11-14 Simon Josefsson - - * lib/gnutls_x509.c: Doc fix. - -2007-11-14 Simon Josefsson - - * lib/gnutls_psk.c: Doc fix. - -2007-11-14 Simon Josefsson - - * lib/gnutls_algorithms.c: Doc fix. - -2007-11-14 Simon Josefsson - - * lib/gnutls_handshake.c: Doc fixes. - -2007-11-14 Simon Josefsson - - * includes/gnutls/compat.h, includes/gnutls/extra.h: Move compat - stuff to compat.h. - -2007-11-14 Simon Josefsson - - * guile/src/extra.c: Use new APIs. - -2007-11-14 Simon Josefsson - - * guile/modules/gnutls/build/enums.scm: Typo. - -2007-11-14 Simon Josefsson - - * guile/modules/gnutls/build/enums.scm, - guile/modules/gnutls/build/smobs.scm: Update API. - -2007-11-14 Simon Josefsson - - * guile/modules/gnutls/build/enums.scm: Add unknown-algorithm (new - name of unknown-hash-algorithm). - -2007-11-14 Simon Josefsson - - * guile/modules/gnutls/build/enums.scm: Remove openpgp trustdb - error. - -2007-11-14 Simon Josefsson - - * includes/gnutls/compat.h, includes/gnutls/gnutls.h.in: Move compat - mappings to compat.h. - -2007-11-14 Simon Josefsson - - * src/cli.c, src/common.c: Use new API. - -2007-11-14 Simon Josefsson - - * doc/examples/ex-serv-export.c, lib/auth_cert.h, - libextra/gnutls_openpgp.c: Use new API. - -2007-11-14 Simon Josefsson - - * libextra/gnutls_openpgp.c: Don't use trustdb error code. - -2007-11-14 Simon Josefsson - - * includes/gnutls/gnutlsxx.h, lib/gnutlsxx.cpp: Use new API in C++ - library. - -2007-11-14 Simon Josefsson - - * src/cli.c: Use new API. - -2007-11-14 Simon Josefsson - - * includes/gnutls/compat.h, includes/gnutls/gnutls.h.in, - includes/gnutls/openpgp.h: Move compat mappings to compat.h. - -2007-11-14 Simon Josefsson - - * includes/gnutls/compat.h: Fix. - -2007-11-14 Simon Josefsson - - * includes/gnutls/compat.h: Remove trustdb error code, since we - removed all functions. - -2007-11-14 Nikos Mavrogiannopoulos - - * lib/gnutls_cipher.c, lib/gnutls_compress.c, - lib/gnutls_compress_int.c: some updates in the compression code - -2007-11-14 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_cipher.c, lib/gnutls_compress.c, - lib/gnutls_compress.h, lib/gnutls_record.c: Corrected bug in - decompression of expanded compression data. - -2007-11-13 Nikos Mavrogiannopoulos - - * lib/gnutls_cipher.c: When decompressed data are more than the - record max size warn using GNUTLS_E_DECOMPRESSION_FAILED. - -2007-11-11 Nikos Mavrogiannopoulos - - * : 1 1 src/certtool.gaa - -2007-11-11 Nikos Mavrogiannopoulos - - * includes/gnutls/gnutls.h.in, lib/gnutls_cert.c, src/tls_test.c: - Applied documentation and prototype fixes reported by Evan Martin - . - -2007-11-05 Nikos Mavrogiannopoulos - - * doc/gnutls.texi: updated the links to openpgp draft - -2007-11-05 Simon Josefsson - - * src/cli.c: Add warnings about messages used by Emacs tls.el. - -2007-11-03 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2007-11-03 Simon Josefsson - - * doc/protocol/rfc5081.txt: Add. - -2007-11-01 Simon Josefsson - - * ChangeLog: Generated. - -2007-11-01 Simon Josefsson - - * NEWS: Version 2.1.5. - -2007-11-01 Simon Josefsson - - * NEWS: Add. - -2007-11-01 Simon Josefsson - - * NEWS: Add. - -2007-11-01 Simon Josefsson - - * NEWS: Add. - -2007-11-01 Simon Josefsson - - * configure.in: Bump ABI to 25. - -2007-11-01 Simon Josefsson - - * doc/protocol/draft-ietf-tls-rfc4346-bis-06.txt: Add. - -2007-10-31 Nikos Mavrogiannopoulos - - * src/certtool-cfg.c, src/crypt-gaa.c: certtool now prints defaults. - -2007-10-31 Nikos Mavrogiannopoulos - - * lib/gnutls_dh_primes.c: The pkcs3 parameters are now corrected - exported (without sign). - -2007-10-30 Nikos Mavrogiannopoulos - - * src/crypt.gaa: parameters -> group parameters - -2007-10-30 Nikos Mavrogiannopoulos - - * AUTHORS, Makefile.am, NEWS, README, THANKS, - build-aux/config.rpath, configure.in, doc/Makefile.am, - doc/gnutls.texi, includes/gnutls/extra.h, - includes/gnutls/openpgp.h, includes/gnutls/pkcs12.h, - includes/gnutls/x509.h, lib/Makefile.am, lib/auth_anon.c, - lib/auth_anon.h, lib/auth_cert.c, lib/auth_cert.h, - lib/auth_dh_common.c, lib/auth_dh_common.h, lib/auth_dhe.c, - lib/auth_dhe_psk.c, lib/auth_psk.c, lib/auth_psk.h, - lib/auth_psk_passwd.c, lib/auth_psk_passwd.h, lib/auth_rsa.c, - lib/auth_rsa_export.c, lib/auth_srp.c, lib/auth_srp.h, - lib/auth_srp_passwd.c, lib/auth_srp_passwd.h, lib/auth_srp_rsa.c, - lib/auth_srp_sb64.c, lib/debug.c, lib/debug.h, lib/defines.h, - lib/ext_cert_type.c, lib/ext_cert_type.h, lib/ext_max_record.c, - lib/ext_max_record.h, lib/ext_server_name.c, lib/ext_server_name.h, - lib/ext_srp.c, lib/ext_srp.h, lib/gnutls_alert.c, - lib/gnutls_algorithms.c, lib/gnutls_algorithms.h, - lib/gnutls_anon_cred.c, lib/gnutls_auth.c, lib/gnutls_auth.h, - lib/gnutls_auth_int.h, lib/gnutls_buffer.h, lib/gnutls_buffers.c, - lib/gnutls_buffers.h, lib/gnutls_cert.c, lib/gnutls_cert.h, - lib/gnutls_cipher.c, lib/gnutls_cipher.h, lib/gnutls_cipher_int.c, - lib/gnutls_cipher_int.h, lib/gnutls_compress.c, - lib/gnutls_compress.h, lib/gnutls_compress_int.c, - lib/gnutls_compress_int.h, lib/gnutls_constate.c, - lib/gnutls_constate.h, lib/gnutls_datum.c, lib/gnutls_datum.h, - lib/gnutls_db.c, lib/gnutls_db.h, lib/gnutls_dh.c, lib/gnutls_dh.h, - lib/gnutls_dh_primes.c, lib/gnutls_errors.c, lib/gnutls_errors.h, - lib/gnutls_extensions.c, lib/gnutls_extensions.h, - lib/gnutls_global.c, lib/gnutls_global.h, lib/gnutls_handshake.c, - lib/gnutls_handshake.h, lib/gnutls_hash_int.c, - lib/gnutls_hash_int.h, lib/gnutls_helper.c, lib/gnutls_int.h, - lib/gnutls_kx.c, lib/gnutls_kx.h, lib/gnutls_mem.c, - lib/gnutls_mem.h, lib/gnutls_mpi.c, lib/gnutls_mpi.h, - lib/gnutls_num.c, lib/gnutls_num.h, lib/gnutls_pk.c, - lib/gnutls_pk.h, lib/gnutls_priority.c, lib/gnutls_psk.c, - lib/gnutls_record.c, lib/gnutls_record.h, lib/gnutls_rsa_export.c, - lib/gnutls_rsa_export.h, lib/gnutls_session.c, - lib/gnutls_session.h, lib/gnutls_session_pack.c, - lib/gnutls_session_pack.h, lib/gnutls_sig.c, lib/gnutls_sig.h, - lib/gnutls_srp.c, lib/gnutls_srp.h, lib/gnutls_state.c, - lib/gnutls_state.h, lib/gnutls_str.c, lib/gnutls_str.h, - lib/gnutls_ui.c, lib/gnutls_v2_compat.c, lib/gnutls_v2_compat.h, - lib/gnutls_x509.c, lib/gnutls_x509.h, lib/io_debug.h, - lib/x509/common.c, lib/x509/common.h, lib/x509/crl.c, - lib/x509/crl_write.c, lib/x509/crq.c, lib/x509/crq.h, - lib/x509/dn.c, lib/x509/dn.h, lib/x509/dsa.c, lib/x509/dsa.h, - lib/x509/extensions.c, lib/x509/extensions.h, lib/x509/mpi.c, - lib/x509/mpi.h, lib/x509/pkcs12.c, lib/x509/pkcs12.h, - lib/x509/pkcs12_bag.c, lib/x509/pkcs7.c, lib/x509/pkcs7.h, - lib/x509/privkey.c, lib/x509/privkey.h, lib/x509/privkey_pkcs8.c, - lib/x509/rfc2818.h, lib/x509/sign.c, lib/x509/sign.h, - lib/x509/verify.c, lib/x509/verify.h, lib/x509/x509.c, - lib/x509/x509.h, lib/x509/x509_write.c, lib/x509_b64.c, - lib/x509_b64.h, libextra/Makefile.am, libextra/gnutls_extra.c, - libextra/gnutls_extra.h, libextra/openpgp/Makefile.am, - libextra/openpgp/compat.c, libextra/openpgp/extras.c, - libextra/openpgp/pgp.c, libextra/openpgp/pgpverify.c, - libextra/openpgp/privkey.c, libextra/openssl_compat.c, - libextra/openssl_compat.h, src/certtool.c, src/cli.c, src/common.c, - src/crypt.c, src/prime.c, src/serv.c, src/tests.c, src/tls_test.c: - Changed my name to my "official" name. - -2007-10-30 Nikos Mavrogiannopoulos - - * includes/gnutls/compat.h, includes/gnutls/gnutls.h.in: Moved some - old defines to compat.c. - -2007-10-30 Nikos Mavrogiannopoulos - - * lib/libgnutlsxx.vers, libextra/libgnutls-extra.vers: Updated the - ld version. - -2007-10-29 Simon Josefsson - - * includes/gnutls/gnutls.h.in: Fix gnutls_set_default_priority and - gnutls_set_default_export priority. The old functions returned an - error code, need to fake it. - -2007-10-29 Simon Josefsson - - * Makefile.am: Reorder release target, to do disconnected ops first, - and to avoid losing tags. - -2007-10-29 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2007-10-29 Simon Josefsson - - * lgl/Makefile.am, lgl/m4/gnulib-cache.m4, lgl/m4/gnulib-comp.m4, - lgl/stdint.in.h: Update gnulib files. - -2007-10-28 Nikos Mavrogiannopoulos - - * configure.in: Used the original libtool library version. - -2007-10-27 Simon Josefsson - - * ChangeLog: Generated. - -2007-10-27 Simon Josefsson - - * NEWS: Version 2.1.4. - -2007-10-27 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2007-10-27 Simon Josefsson - - * configure.in: Bump version. - -2007-10-27 Simon Josefsson - - * includes/gnutls/compat.h: Add for backwards compatibility. - -2007-10-27 Simon Josefsson - - * doc/gnutls.texi: Fix typo. - -2007-10-27 Simon Josefsson - - * NEWS: Add. - -2007-10-27 Simon Josefsson - - * build-aux/config.rpath, gl/m4/gnulib-common.m4, gl/strerror.c, - lgl/m4/gnulib-common.m4, lgl/m4/ulonglong.m4, lgl/stdbool.in.h, - lgl/stdint.in.h: Update gnulib files. - -2007-10-27 Simon Josefsson - - * NEWS: Add. - -2007-10-27 Simon Josefsson - - * libextra/opencdk/cipher.c, libextra/opencdk/keydb.c, - libextra/opencdk/new-packet.c, libextra/opencdk/opencdk.h, - libextra/opencdk/seskey.c: Sync with OpenCDK 0.6.5. - -2007-10-27 Nikos Mavrogiannopoulos - - * src/certtool-gaa.c, src/certtool-gaa.h, src/certtool.c, - src/certtool.gaa: quick-random option was removed since it is now - the default. - -2007-10-26 Nikos Mavrogiannopoulos - - * : 1 2 lib/gnutls_algorithms.c - -2007-10-26 Ludovic Courtès - - * doc/README.CODING_STYLE: Add doc about maintenance of the Guile - bindings. - -2007-10-25 Simon Josefsson - - * : commit d3ebcb4c39cd2e7650694e08faad5a7ca57c662e Author: Simon - Josefsson Date: Thu Oct 25 21:51:38 2007 - +0200 - -2007-10-25 Nikos Mavrogiannopoulos - - * doc/gnutls.texi: added some text for the debugging functions. - -2007-10-25 Simon Josefsson - - * doc/gnutls.texi: Typo. - -2007-10-25 Simon Josefsson - - * Makefile.am: Reorder and simplify. - -2007-10-25 Simon Josefsson - - * lib/gnutls_state.c: Doc fix. - -2007-10-25 Simon Josefsson - - * : commit 867ffe404fbc7e16a543d2314bca85d613a902ef Author: Nikos - Mavrogiannopoulos Date: Wed Oct 24 23:48:27 2007 - +0300 - -2007-10-24 Nikos Mavrogiannopoulos - - * : 2 2 doc/examples/ex-serv-pgp.c - -2007-10-24 Nikos Mavrogiannopoulos - - * NEWS, doc/examples/ex-client-srp.c, - doc/examples/ex-client-tlsia.c, doc/examples/ex-serv-anon.c, - doc/examples/ex-serv-pgp.c, doc/examples/ex-serv-srp.c, - doc/examples/ex-serv1.c, includes/gnutls/gnutls.h.in, - lib/gnutls_priority.c: Introduced GNUTLS_PRIORITIES_SECURITY_NORMAL - and GNUTLS_PRIORITIES_SECURITY_HIGH - -2007-10-24 Simon Josefsson - - * : commit 74200139866f14efc4cbabeec8c6698982327296 Author: Nikos - Mavrogiannopoulos Date: Wed Oct 24 18:33:00 2007 - +0300 - -2007-10-24 Nikos Mavrogiannopoulos - - * lib/gnutls_v2_compat.c: The user handshake callback function is - now called on SSLv2 hello messages. - -2007-10-24 Nikos Mavrogiannopoulos - - * NEWS, doc/examples/ex-client-resume.c, - doc/examples/ex-client-srp.c, doc/examples/ex-client-tlsia.c, - doc/examples/ex-client1.c, doc/examples/ex-client2.c, - doc/examples/ex-serv-anon.c, doc/examples/ex-serv-export.c, - doc/examples/ex-serv-pgp.c, doc/examples/ex-serv-srp.c, - doc/examples/ex-serv1.c, includes/gnutls/gnutls.h.in, - lib/gnutls_priority.c, src/cli.c, src/serv.c: Added - gnutls_set_default_priority2() and deprecated - gnutls_set_default_priority(). - -2007-10-24 Nikos Mavrogiannopoulos - - * : 4 0 doc/manpages/certtool.1 - -2007-10-24 Nikos Mavrogiannopoulos - - * NEWS: added news entry for --disable-quick-random - -2007-10-24 Nikos Mavrogiannopoulos - - * src/certtool-gaa.c, src/certtool-gaa.h, src/certtool.gaa, - src/cli.c, src/serv.c: /dev/urandom is used now by default for key - generation. The option --disable-quick-random was introduced. - -2007-10-24 Nikos Mavrogiannopoulos - - * doc/examples/ex-serv-export.c, doc/examples/ex-serv1.c: updated - some examples. - -2007-10-24 Nikos Mavrogiannopoulos - - * configure.in: The library version is now 14 instead of 24. (14 is - greater than our current 13). - -2007-10-24 Nikos Mavrogiannopoulos - - * NEWS, doc/examples/ex-serv1.c, includes/gnutls/gnutls.h.in, - lib/gnutls_state.c, src/serv.c, src/tests.c, src/tests.h: Introduced - gnutls_session_enable_compatibility_mode() to allow enabling all - supported compatibility options (like disabling padding). Some other - bug fixes in tls-test.c. - -2007-10-24 Nikos Mavrogiannopoulos - - * doc/examples/ex-client-srp.c, doc/gnutls.texi: Added some - documentation for the new convert functions. - -2007-10-23 Nikos Mavrogiannopoulos - - * lib/gnutls_priority.c: renamed zlib to deflate - -2007-10-23 Nikos Mavrogiannopoulos - - * lib/gnutls_algorithms.c, lib/libgnutls.vers: Updata gnutls.vers - since we changed our interfaces and some other fixes. - -2007-10-23 Nikos Mavrogiannopoulos - - * : 2 2 lib/gnutls_algorithms.c - -2007-10-23 Nikos Mavrogiannopoulos - - * doc/examples/ex-alert.c, doc/examples/ex-cert-select.c, - doc/examples/ex-client-resume.c, doc/examples/ex-client-srp.c, - doc/examples/ex-client-tlsia.c, doc/examples/ex-client1.c, - doc/examples/ex-client2.c, doc/examples/ex-crq.c, - doc/examples/ex-pkcs12.c, doc/examples/ex-rfc2818.c, - doc/examples/ex-serv-anon.c, doc/examples/ex-serv-export.c, - doc/examples/ex-serv-pgp.c, doc/examples/ex-serv-srp.c, - doc/examples/ex-serv1.c, doc/examples/ex-session-info.c, - doc/examples/ex-verify.c, doc/examples/ex-x509-info.c, - doc/examples/tcp.c: Added copyright notices to examples - -2007-10-23 Nikos Mavrogiannopoulos - - * includes/gnutls/gnutls.h.in: corrected the prototypes - -2007-10-23 Nikos Mavrogiannopoulos - - * lib/x509/verify.c: replaced UNKNOWN_HASH_ALGORITHM WITH - UNKNOWN_ALGORITHM - -2007-10-23 Nikos Mavrogiannopoulos - - * includes/gnutls/gnutls.h.in: corrected typo. - -2007-10-23 Nikos Mavrogiannopoulos - - * : 1 1 lib/gnutls_record.c - -2007-10-23 Nikos Mavrogiannopoulos - - * NEWS, includes/gnutls/gnutls.h.in, lib/gnutls_priority.c: Updated - the priority functions to be more compatible to our interface and - avoid parsing on every session generation. The current approach - stores parsed data to our integer format.CG: - - ----------------------------------------------------------------------- - -2007-10-22 Nikos Mavrogiannopoulos - - * NEWS, includes/gnutls/gnutls.h.in, lib/gnutls_int.h, - lib/gnutls_record.c: Added gnutls_record_disable_padding() to allow - servers talk to buggy clients that complain if TLS 1.0 padding is - used. - -2007-10-22 Nikos Mavrogiannopoulos - - * NEWS, includes/gnutls/gnutls.h.in, lib/gnutls_errors.c, - lib/gnutls_priority.c, lib/gnutls_record.c: Added new priority - functions that accept text instead of integers. - -2007-10-22 Nikos Mavrogiannopoulos - - * build-aux/config.rpath, lib/gnutls_buffers.c, lib/gnutls_record.c: - Removed some ancient non-used functions. - -2007-10-22 Nikos Mavrogiannopoulos - - * : commit 628c62e935effc1c276fa6e4ae653f8488e017be Author: Nikos - Mavrogiannopoulos Date: Mon Oct 22 14:03:08 2007 - +0300 - -2007-10-22 Simon Josefsson - - * po/de.po, po/ms.po, po/pl.po, po/sv.po: Sync with TP. - -2007-10-22 Simon Josefsson - - * lgl/m4/gc-camellia.m4: Add. - -2007-10-22 Simon Josefsson - - * lgl/Makefile.am, lgl/gc-libgcrypt.c, lgl/gc.h, - lgl/m4/gnulib-cache.m4, lgl/m4/gnulib-comp.m4: Update gnulib files. - -2007-10-22 Simon Josefsson - - * build-aux/config.rpath, build-aux/maint.mk, gl/error.c, - gl/error.h, gl/fseeko.c, gl/gnulib.mk, gl/inet_pton.c, - gl/inet_pton.h, gl/intprops.h, gl/m4/extensions.m4, - gl/m4/getaddrinfo.m4, gl/m4/getdelim.m4, gl/m4/getline.m4, - gl/m4/gnulib-comp.m4, gl/m4/socklen.m4, gl/m4/strerror.m4, - gl/netinet_in.in.h, gl/netinet_in_.h, gl/progname.c, gl/progname.h, - gl/readline.c, gl/readline.h, gl/strerror.c, gl/version-etc-fsf.c, - gl/version-etc.c, gl/version-etc.h, lgl/Makefile.am, - lgl/alloca.in.h, lgl/alloca_.h, lgl/dummy.c, lgl/float.in.h, - lgl/float_.h, lgl/gc-gnulib.c, lgl/gc-libgcrypt.c, lgl/gc.h, - lgl/m4/extensions.m4, lgl/m4/gnulib-comp.m4, lgl/m4/lock.m4, - lgl/m4/longlong.m4, lgl/m4/memmem.m4, lgl/m4/socklen.m4, - lgl/m4/stdint.m4, lgl/m4/stdio_h.m4, lgl/m4/string_h.m4, - lgl/m4/strverscmp.m4, lgl/m4/ulonglong.m4, lgl/m4/vasprintf.m4, - lgl/printf-parse.c, lgl/realloc.c, lgl/stdbool.in.h, - lgl/stdbool_.h, lgl/stdint.in.h, lgl/stdint_.h, lgl/stdio.in.h, - lgl/stdio_.h, lgl/stdlib.in.h, lgl/stdlib_.h, lgl/string.in.h, - lgl/string_.h, lgl/sys_socket.in.h, lgl/sys_socket_.h, - lgl/sys_stat.in.h, lgl/sys_stat_.h, lgl/time.in.h, lgl/time_.h, - lgl/unistd.in.h, lgl/unistd_.h, lgl/vasnprintf.c, lgl/wchar.in.h, - lgl/wchar_.h: Update gnulib files. - -2007-10-22 Simon Josefsson - - * : commit 07837c92f65f09b58c0ec55e3f49382ce0d71ba5 Author: Nikos - Mavrogiannopoulos Date: Fri Oct 19 22:05:28 2007 - +0300 - -2007-10-19 Nikos Mavrogiannopoulos - - * NEWS, doc/gnutls.texi, includes/gnutls/gnutls.h.in, - includes/gnutls/openpgp.h, lib/auth_cert.c, lib/gnutls_cert.c, - lib/gnutls_extra_hooks.c, lib/gnutls_extra_hooks.h, - lib/gnutls_state.c, libextra/gnutls_extra.c, - libextra/gnutls_openpgp.c, libextra/openpgp/compat.c, - libextra/openpgp/extras.c, libextra/openpgp/gnutls_openpgp.h, - libextra/openpgp/openpgp.h, libextra/openpgp/pgp.c, - libextra/openpgp/pgpverify.c, libextra/openpgp/privkey.c, - src/common.c: Occurences of gnutls_openpgp_key were renamed to - gnutls_openpgp_cert, leaving an API compatibility layer. - -2007-10-19 Nikos Mavrogiannopoulos - - * includes/gnutls/gnutls.h.in, includes/gnutls/openpgp.h, - lib/auth_cert.c, lib/gnutls_extra_hooks.c, - lib/gnutls_extra_hooks.h, libextra/gnutls_extra.c, - libextra/gnutls_extra.h, libextra/gnutls_openpgp.c, - libextra/openpgp/compat.c, libextra/openpgp/extras.c, - libextra/openpgp/openpgp.h, libextra/openpgp/pgp.c, - libextra/openpgp/pgpverify.c: Renamed gnutls_openpgp_key_t to - gnutls_openpgp_cert_t - -2007-10-17 Simon Josefsson - - * ChangeLog: Generated. - -2007-10-17 Simon Josefsson - - * lib/Makefile.am: Revert mistake removal. - -2007-10-17 Simon Josefsson - - * doc/manpages/Makefile.am, po/de.po, po/ms.po, po/pl.po, po/sv.po, - src/cli-gaa.c, src/cli-gaa.h, src/cli.gaa, src/serv-gaa.c, - src/serv-gaa.h, src/serv.gaa: Generated. - -2007-10-17 Simon Josefsson - - * NEWS: Version 2.1.3. - -2007-10-17 Simon Josefsson - - * configure.in: Bump ABI version. - -2007-10-17 Simon Josefsson - - * lib/gnutls_extensions.c, lib/gnutls_int.h, - lib/gnutls_supplemental.c: Remove tls-authz. - -2007-10-17 Simon Josefsson - - * doc/gnutls.texi: Remove tls-authz. - -2007-10-17 Simon Josefsson - - * NEWS, configure.in, doc/examples/Makefile.am, - doc/examples/ex-client-authz.c, doc/examples/ex-serv-authz.c, - doc/reference/Makefile.am, includes/gnutls/gnutls.h.in, - lib/Makefile.am, lib/ext_authz.c, lib/ext_authz.h, src/cli.c, - src/cli.gaa, src/serv.c, src/serv.gaa: Remove TLS-authz. - -2007-10-15 Simon Josefsson - - * configure.in: Bump version. - -2007-10-15 Simon Josefsson - - * NEWS: Add. - -2007-10-15 Nikos Mavrogiannopoulos - - * lib/gnutls_priority.c: Reenabled the 256 bit algorithms in the - default priorities. - -2007-10-15 Nikos Mavrogiannopoulos - - * NEWS, configure.in, lib/auth_cert.h, lib/gnutls_cert.c, - lib/gnutls_errors.c, lib/gnutls_extra_hooks.c, - lib/gnutls_extra_hooks.h, libextra/gnutls_extra.c, - libextra/gnutls_openpgp.c, libextra/opencdk/main.h, - libextra/opencdk/sig-check.c, libextra/openpgp/compat.c, - libextra/openpgp/gnutls_openpgp.h, libextra/openpgp/pgpverify.c: ** - Corrected bugs in the openpgp certificate verification functions - using a keyring. Now it correctly verifies openpgp certificates. ** Removed the ancient pgpkeyserver support (which was not used - anywhere) - -2007-10-14 Simon Josefsson - - * ChangeLog: Generated. - -2007-10-14 Simon Josefsson - - * NEWS: Typo. - -2007-10-14 Simon Josefsson - - * NEWS: Version 2.1.2. - -2007-10-14 Simon Josefsson - - * doc/protocol/draft-nir-tls-eap-02.txt: Add. - -2007-10-14 Simon Josefsson - - * NEWS: Wrap. - -2007-10-14 Simon Josefsson - - * NEWS: Mention enum's. - -2007-10-14 Simon Josefsson - - * includes/gnutls/compat.h, includes/gnutls/gnutls.h.in: Move - deprecated SRP alerts to compat.h. - -2007-10-14 Simon Josefsson - - * includes/gnutls/compat.h: Add compatibility mapping for - GNUTLS_E_OPENPGP_TRUSTDB_VERSION_UNSUPPORTED. - -2007-10-14 Simon Josefsson - - * configure.in: Encode in shared library that we aren't backwards - compatible. - -2007-10-13 Nikos Mavrogiannopoulos - - * src/cli-gaa.c, src/cli-gaa.h, src/cli.c, src/cli.gaa, - src/serv-gaa.c, src/serv-gaa.h, src/serv.c, src/serv.gaa: removed - references to trustdb - -2007-10-13 Nikos Mavrogiannopoulos - - * NEWS, doc/gnutls.texi, includes/gnutls/compat.h, - includes/gnutls/extra.h, includes/gnutls/gnutls.h.in, - includes/gnutls/openpgp.h, libextra/gnutls_openpgp.c, - libextra/openpgp/compat.c, libextra/openpgp/extras.c, - libextra/openpgp/openpgp.h, libextra/openpgp/pgpverify.c: Removed - all the trustdb related code. It wasn't used and trustdbs are not - specified anywhere except pgp. Now we use the standard key rings. - -2007-10-13 Nikos Mavrogiannopoulos - - * doc/gnutls.texi: more text - -2007-10-12 Nikos Mavrogiannopoulos - - * NEWS, lib/gnutls_priority.c: The 256 bit ciphers are not enabled - in the default priorities. - -2007-10-12 Nikos Mavrogiannopoulos - - * configure.in, lib/gnutls_algorithms.c, lib/gnutls_pk.c, - lib/x509/dsa.c, lib/x509/sign.c, src/certtool-gaa.c, - src/certtool.c, src/certtool.gaa: Added support for DSA2 (key sizes - for more than 1024 bits on DSA) via libgcrypt 1.3.0. - -2007-10-12 Nikos Mavrogiannopoulos - - * doc/gnutls.texi: Updated documentation. - -2007-10-12 Nikos Mavrogiannopoulos - - * : 1 0 NEWS - -2007-10-09 Simon Josefsson - - * NEWS: Mention certtool --quick-random. - -2007-10-09 Nikos Mavrogiannopoulos - - * includes/gnutls/gnutls.h.in: Added defines for the deprecated SRP - alert numbers. - -2007-10-09 Nikos Mavrogiannopoulos - - * lib/x509/extensions.c: added an assertion. - -2007-10-09 Nikos Mavrogiannopoulos - - * lib/gnutls_kx.c: Corrected an error in a parenthesis. - -2007-10-09 Nikos Mavrogiannopoulos - - * : commit 72b99e94b1ecb51a2182645797e6153baeb60fc4 Author: Nikos - Mavrogiannopoulos Date: Tue Oct 9 11:37:45 2007 - +0300 - -2007-10-08 Ludovic Courtès - - * guile/modules/gnutls.scm, guile/modules/gnutls/build/enums.scm: - Guile: Reflect SRP/PSK changes. * guile/modules/gnutls.scm (alert-description/unknown-srp-username, alert-description/missing-srp-username): Remove. (alert-description/unknown-psk-identity): New. * guile/modules/gnutls/build/enums.scm (%alert-description-enum): Likewise. - -2007-10-08 Ludovic Courtès - - * NEWS: Update `NEWS'. - -2007-10-08 Ludovic Courtès - - * configure.in: Fix configure-time Guile detection. * configure.in: Substitute `GUILE_LDFLAGS' into `LIBS', not - `LDFLAGS'. Patch by Nix . - -2007-10-08 Nikos Mavrogiannopoulos - - * : 1 1 doc/Makefile.am - -2007-10-08 Nikos Mavrogiannopoulos - - * : commit 175526ddfe18f4c443fb31a676b8f1d50895b053 Author: Nikos - Mavrogiannopoulos Date: Mon Oct 8 12:57:03 - 2007 +0300 - -2007-10-08 Simon Josefsson - - * : commit 1f24725c9a0b09e7a42ee18f2bb4c0fbac581b8f Author: Nikos - Mavrogiannopoulos Date: Mon Oct 8 12:08:33 - 2007 +0300 - -2007-10-07 Nikos Mavrogiannopoulos - - * lib/auth_srp.c: corrected possible size issue - -2007-10-07 Nikos Mavrogiannopoulos - - * NEWS, build-aux/config.rpath, doc/gnutls.texi, - includes/gnutls/openpgp.h, includes/gnutls/x509.h, - lib/x509/Makefile.am, lib/x509/xml.c, libextra/openpgp/Makefile.am, - libextra/openpgp/xml.c, po/de.po, po/ms.po, src/certtool-gaa.c, - src/certtool-gaa.h, src/certtool.c, src/certtool.gaa, - src/cli-gaa.c, src/cli-gaa.h, src/cli.c, src/cli.gaa, src/common.c: - Removed all the xml functions and stubs, as well as references in - the documentation. - -2007-10-06 Nikos Mavrogiannopoulos - - * lib/gnutls_alert.c: error_to_alert() now always return an alert - number. This is to avoid sending illegal values when the return - value is not checked (commonplace). - -2007-10-06 Nikos Mavrogiannopoulos - - * : 51 51 src/certtool-gaa.c 10 10 src/certtool-gaa.h - -2007-10-06 Nikos Mavrogiannopoulos - - * src/certtool-gaa.c, src/certtool-gaa.h, src/certtool.c, - src/certtool.gaa: Added the --quick-random option to certtool to - improve generation time of private keys. They delay is quite - annoying especially when generating test keys. - -2007-10-06 Simon Josefsson - - * configure.in: Bump versions. - -2007-10-06 Simon Josefsson - - * NEWS: Add. - -2007-10-06 Nikos Mavrogiannopoulos - - * src/certtool.c: Corrected output in DER format and corrected - output for smime_to_pkcs7 to output in outfile instead of stdout. - -2007-09-24 Simon Josefsson - - * ChangeLog: Generated. - -2007-09-24 Simon Josefsson - - * configure.in: Bump version. - -2007-09-24 Simon Josefsson - - * NEWS: Version 2.1.1. - -2007-09-24 Simon Josefsson - - * NEWS: Add. - -2007-09-24 Simon Josefsson - - * configure.in: Rework Camellia configure messages and logic. - -2007-09-24 Simon Josefsson - - * NEWS: Add fixes, for trac. - -2007-09-24 Simon Josefsson - - * NEWS: Add. - -2007-09-24 Simon Josefsson - - * configure.in: Typo. - -2007-09-24 Simon Josefsson - - * configure.in: Add --disable-camellia. Remove automake - conditional, not used. - -2007-09-24 Simon Josefsson - - * AUTHORS: Add. - -2007-09-24 Simon Josefsson - - * NEWS: Add. - -2007-09-24 Simon Josefsson - - * NEWS: Bump version. - -2007-09-24 Simon Josefsson - - * configure.in, includes/gnutls/gnutls.h.in, lgl/gc-libgcrypt.c, - lgl/gc.h, lib/gnutls_algorithms.c, lib/gnutls_cipher_int.c, - lib/gnutls_priority.c, libextra/gnutls_openssl.c, - libextra/opencdk/opencdk.h, src/common.c, src/tests.c, src/tests.h, - src/tls_test.c: Add patch to support Camellia, contributed by - Yoshisato YANAGISAWA. Fixes #1. See - - http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/2331 - -2007-09-20 Simon Josefsson - - * ChangeLog: Generated. - -2007-09-20 Simon Josefsson - - * NEWS: Version 2.1.0. - -2007-09-20 Simon Josefsson - - * configure.in: Move CFLAGS setting further down, to make AC_PROG_CC - add -g to it. - -2007-09-20 Simon Josefsson - - * src/cli-gaa.c, src/serv-gaa.c: Generated. - -2007-09-20 Simon Josefsson - - * src/serv.gaa: Set variables to NULL. Fix oprfi variable. - -2007-09-20 Simon Josefsson - - * src/cli.gaa: Set variables to NULL. - -2007-09-20 Simon Josefsson - - * lib/ext_oprfi.c: Fix crash. - -2007-09-20 Simon Josefsson - - * lib/ext_oprfi.c: Fix crash. - -2007-09-20 Simon Josefsson - - * src/serv.c: Fix infloop. - -2007-09-20 Simon Josefsson - - * src/serv.c: Fix crash. - -2007-09-20 Simon Josefsson - - * src/cli.c: Fix crash. - -2007-09-20 Simon Josefsson - - * src/cli-gaa.c, src/cli-gaa.h, src/cli.c, src/cli.gaa, - src/serv-gaa.c, src/serv-gaa.h, src/serv.c, src/serv.gaa: Support - Opaque PRF Input in gnutls-cli and gnutls-serv. - -2007-09-20 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2007-09-20 Simon Josefsson - - * NEWS: Mention how to enable oprfi support. - -2007-09-20 Simon Josefsson - - * doc/gnutls.texi: Typo. +2011-07-23 Nikos Mavrogiannopoulos -2007-09-20 Simon Josefsson + * NEWS, configure.ac, doc/announce.txt, m4/hooks.m4: released 2.99.4 - * lib/Makefile.am: Document more. +2011-06-29 Petr Písař -2007-09-20 Simon Josefsson + * lib/gnutls_privkey.c: Honor uninitialized private key in + destructor Fixes bug #107730. Signed-off-by: Nikos Mavrogiannopoulos - * lib/ext_oprfi.c: Doc fix. +2011-07-23 Nikos Mavrogiannopoulos -2007-09-20 Simon Josefsson + * src/certtool.c: Corrected initialization of key when generating + request. Reported by Petr Pisar. - * NEWS, configure.in, doc/gnutls.texi, includes/gnutls/gnutls.h.in, - lib/Makefile.am, lib/ext_oprfi.c, lib/ext_oprfi.h, - lib/gnutls_extensions.c, lib/gnutls_int.h, lib/gnutls_kx.c, - tests/Makefile.am, tests/oprfi.c: Support for Opaque PRF Input TLS - extension. - -2007-09-20 Simon Josefsson - - * doc/gnutls.texi: Add configure.in snippet to TLS ext section. - -2007-09-20 Simon Josefsson - - * doc/gnutls.texi: Typo. - -2007-09-20 Simon Josefsson - - * NEWS: Add. - -2007-09-20 Simon Josefsson - - * configure.in: Bump versions. - -2007-09-20 Simon Josefsson - - * doc/examples/Makefile.am: Fix -I's. - -2007-09-20 Simon Josefsson - - * ChangeLog: Generated. - -2007-09-20 Simon Josefsson - - * Makefile.am: Fix release target (git-tag no longer exit with - failure for non-existing tags). - -2007-09-20 Simon Josefsson - - * NEWS: Version 2.0.1. - -2007-09-20 Simon Josefsson - - * doc/gnutls.texi: Improve TLS ext section. - -2007-09-19 Simon Josefsson - - * doc/protocol/draft-ietf-tls-rfc4346-bis-05.txt: Add. - -2007-09-18 Simon Josefsson - - * doc/gnutls.texi: Notes on adding a new TLS extension. - -2007-09-17 Simon Josefsson - - * : commit 344057de0fbf1cbc55dbd74cc23c78ebd2609cfc Author: Simon - Josefsson Date: Mon Sep 17 11:13:39 2007 - +0200 - -2007-09-17 Nikos Mavrogiannopoulos - - * : commit 6d3a3222640ce3b5e4daa67a4624a507445de334 Author: Simon - Josefsson Date: Mon Sep 17 11:06:24 2007 - +0200 - -2007-09-17 Simon Josefsson - - * NEWS: Add. - -2007-09-17 Simon Josefsson - - * doc/Makefile.am, doc/credentials/Makefile.am, - doc/credentials/ca.tmpl, doc/credentials/client.tmpl, - doc/credentials/gnutls-http-serv, - doc/credentials/openpgp-server-key.txt, - doc/credentials/openpgp-server.txt, - doc/credentials/openpgp/Makefile.am, - doc/credentials/openpgp/cli_pub.asc, - doc/credentials/openpgp/cli_ring.asc, - doc/credentials/openpgp/cli_sec.asc, - doc/credentials/openpgp/pub.asc, doc/credentials/openpgp/sec.asc, - doc/credentials/params.pem, doc/credentials/proxy.tmpl, - doc/credentials/psk-passwd.txt, doc/credentials/server.tmpl, - doc/credentials/srp-passwd.txt, doc/credentials/srp-tpasswd.conf, - doc/credentials/srp/Makefile.am, doc/credentials/srp/tpasswd, - doc/credentials/srp/tpasswd.conf, doc/credentials/x509-ca-key.pem, - doc/credentials/x509-ca.pem, doc/credentials/x509-client-key.pem, - doc/credentials/x509-client.pem, doc/credentials/x509-other-ca.pem, - doc/credentials/x509-proxy-key.pem, doc/credentials/x509-proxy.pem, - doc/credentials/x509-server-dsa.pem, - doc/credentials/x509-server-key-dsa.pem, - doc/credentials/x509-server-key.pem, - doc/credentials/x509-server.pem, doc/credentials/x509-trust.pem, - doc/credentials/x509/Makefile.am, doc/credentials/x509/ca.pem, - doc/credentials/x509/cert-dsa.pem, doc/credentials/x509/cert.pem, - doc/credentials/x509/clicert-dsa.pem, - doc/credentials/x509/clicert.pem, - doc/credentials/x509/clikey-dsa.pem, - doc/credentials/x509/clikey.pem, doc/credentials/x509/key-dsa.pem, - doc/credentials/x509/key.pem, src/Makefile.am, - src/gnutls-http-serv, src/openpgp/Makefile.am, - src/openpgp/cli_pub.asc, src/openpgp/cli_ring.asc, - src/openpgp/cli_sec.asc, src/openpgp/pub.asc, src/openpgp/sec.asc, - src/params.pem, src/srp/Makefile.am, src/srp/tpasswd, - src/srp/tpasswd.conf, src/x509/Makefile.am, src/x509/ca.pem, - src/x509/cert-dsa.pem, src/x509/cert.pem, src/x509/clicert-dsa.pem, - src/x509/clicert.pem, src/x509/clikey-dsa.pem, src/x509/clikey.pem, - src/x509/key-dsa.pem, src/x509/key.pem: Move test credentials from - src/ to doc/credentials/. - -2007-09-17 Nikos Mavrogiannopoulos - - * : commit 9afa028dae6756ef463652e56543c89b04add024 Author: Nikos - Mavrogiannopoulos Date: Mon Sep 17 11:47:12 - 2007 +0300 - -2007-09-11 Simon Josefsson - - * gl/gnulib.mk, gl/m4/extensions.m4, gl/m4/gnulib-cache.m4, - gl/m4/gnulib-comp.m4, gl/m4/string_h.m4, gl/string_.h: Remove - duplicate gnulib modules. - -2007-09-11 Simon Josefsson - - * gl/gettext.h, gl/gnulib.mk, gl/m4/gnulib-cache.m4, - gl/m4/gnulib-comp.m4, gl/m4/sockpfaf.m4, gl/m4/stdbool.m4, - gl/m4/stdio_h.m4, gl/m4/sys_socket_h.m4, gl/m4/unistd_h.m4, - gl/stdbool_.h, gl/stdio_.h, gl/sys_socket_.h, gl/unistd_.h: Remove - duplicate gnulib modules. - -2007-09-11 Simon Josefsson - - * gl/gnulib.mk, gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4: Update - gnulib files. - -2007-09-11 Simon Josefsson - - * lgl/m4/absolute-header.m4: Update gnulib files. - -2007-09-11 Simon Josefsson - - * lgl/m4/malloc.m4, lgl/m4/realloc.m4, lgl/m4/stdlib_h.m4, - lgl/realloc.c, lgl/stdlib_.h: Add. - -2007-09-04 Ludovic Courtès - - * guile/src/core.c: Guile: Fix `x509-certificate-dn-oid' and related - functions. * guile/src/core.c (X509_CERTIFICATE_DN_OID_FUNCTION_BODY): Use `scm_take_locale_stringn ()' instead of `scm_take_locale_string - ()'. * NEWS: Update. Signed-off-by: Simon Josefsson - -2007-09-04 Ludovic Courtès - - * NEWS: Guile: Fix `x509-certificate-dn-oid' and related functions. * guile/src/core.c (X509_CERTIFICATE_DN_OID_FUNCTION_BODY): Use `scm_take_locale_stringn ()' instead of `scm_take_locale_string - ()'. * NEWS: Update. Signed-off-by: Simon Josefsson - -2007-09-10 Simon Josefsson - - * gl/gnulib.mk, gl/m4/gnulib-comp.m4, lgl/Makefile.am, - lgl/m4/gnulib-comp.m4, lgl/m4/time_h.m4: Update gnulib files. - -2007-09-10 Simon Josefsson - - * .cvsignore, build-aux/.cvsignore, doc/.cvsignore, - doc/examples/.cvsignore, doc/manpages/.cvsignore, - doc/reference/.cvsignore, doc/reference/tmpl/.cvsignore, - doc/scripts/.cvsignore, gl/.cvsignore, includes/.cvsignore, - includes/gnutls/.cvsignore, lgl/.cvsignore, lib/.cvsignore, - lib/minitasn1/.cvsignore, lib/x509/.cvsignore, libextra/.cvsignore, - libextra/minilzo/.cvsignore, libextra/opencdk/.cvsignore, - libextra/openpgp/.cvsignore, m4/.cvsignore, po/.cvsignore, - src/.cvsignore, src/cfg/.cvsignore, src/cfg/platon/.cvsignore, - src/cfg/platon/str/.cvsignore, src/openpgp/.cvsignore, - src/srp/.cvsignore, src/x509/.cvsignore, tests/.cvsignore, - tests/hostname-check/.cvsignore, tests/key-id/.cvsignore, - tests/nist-pkits/.cvsignore, tests/pathlen/.cvsignore, - tests/pkcs1-padding/.cvsignore, tests/pkcs12-decode/.cvsignore, - tests/pkcs8-decode/.cvsignore, tests/rsa-md5-collision/.cvsignore, - tests/sha2/.cvsignore, tests/userid/.cvsignore, - tests/x509paths/.cvsignore: Remove .cvsignore's. - -2007-09-07 Simon Josefsson - - * NEWS: Fix. - -2007-09-07 Simon Josefsson - - * configure.in: Bump versions. - -2007-09-07 Simon Josefsson - - * NEWS, lib/gnutls_algorithms.c, lib/gnutls_int.h: Use official IANA - values for SRP. - -2007-09-06 Simon Josefsson - - * doc/examples/Makefile.am: TLS/IA example uses anonymous ciphers. - -2007-09-04 Simon Josefsson - - * ChangeLog: Generated. - -2007-09-04 Simon Josefsson - - * NEWS: Version 2.0.0. - -2007-09-04 Simon Josefsson - - * NEWS: Add. - -2007-09-03 Simon Josefsson - - * NEWS: Add 1.6.x entries. - -2007-09-03 Simon Josefsson - - * NEWS: Fix. - -2007-09-03 Simon Josefsson - - * configure.in: Use three-digit versions. - -2007-09-01 Simon Josefsson - - * NEWS: Fix. - -2007-09-01 Simon Josefsson - - * lib/minitasn1/libtasn1.h, lib/minitasn1/parser_aux.c: Use libtasn1 - v1.1. - -2007-08-31 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2007-08-31 Simon Josefsson - - * lib/minitasn1/libtasn1.h, lib/minitasn1/structure.c: Use libtasn1 - v1.0. - -2007-08-31 Simon Josefsson - - * configure.in: Drop gnits mode. - -2007-08-31 Simon Josefsson - - * doc/examples/Makefile.am: Also don't build ex-serv-anon when - anonymous ciphers are disabled. - -2007-08-31 Simon Josefsson - - * doc/examples/Makefile.am: Don't try to build ex-client1 if - anonymous ciphers are disabled. - -2007-08-27 Simon Josefsson - - * ChangeLog: Generated. - -2007-08-27 Simon Josefsson - - * NEWS: Version 1.7.19. - -2007-08-27 Simon Josefsson - - * NEWS: Add. - -2007-08-27 Simon Josefsson - - * doc/examples/ex-session-info.c: Support GNUTLS_CRD_PSK and - GNUTLS_CRD_IA. - -2007-08-27 Simon Josefsson - - * src/common.c: Handle GNUTLS_CRD_IA in print_info(). - -2007-08-27 Simon Josefsson - - * NEWS: Add. - -2007-08-27 Simon Josefsson - - * lib/gnutls_errors.c: Doc fix. - -2007-08-27 Simon Josefsson - - * lib/gnutls_handshake.c: Revert "Check that value is negative - before using gnutls_error_is_fatal." This reverts commit 9949a4b0b6b62a0ff3c05fee4283928d1a53b675. - -2007-08-27 Simon Josefsson - - * lib/gnutls_errors.c: Have gnutls_error_is_fatal return 0 on - positive "errors". Would fix bug reported by Andreas Metzler - in - - . - -2007-08-27 Simon Josefsson - - * lib/gnutls_handshake.c: Check that value is negative before using - gnutls_error_is_fatal. Fixes bug reported by Andreas Metzler - in - - see also . - -2007-08-24 Simon Josefsson - - * NEWS: Add. - -2007-08-24 Simon Josefsson - - * libextra/opencdk/misc.c, libextra/opencdk/opencdk.h: Upgrade to - OpenCDK 0.6.4. - -2007-08-24 Simon Josefsson - - * doc/protocol/draft-babu-serv-cert-trans-from-proxy-00.txt: Add. - -2007-08-23 Simon Josefsson - - * gl/readline.c: Upgrade gnulib files. - -2007-08-23 Simon Josefsson - - * src/certtool.c: No need for getline.h. +2011-07-23 Nikos Mavrogiannopoulos -2007-08-23 Simon Josefsson + * NEWS: updated. - * NEWS: Add. - -2007-08-23 Simon Josefsson - - * gl/getdelim.c, gl/getdelim.h, gl/getline.c, gl/getline.h, - gl/getpass.c, gl/gnulib.mk, gl/m4/getdelim.m4, gl/m4/getline.m4, - gl/m4/gnulib-comp.m4, gl/m4/stdio_h.m4, gl/m4/unistd_h.m4, - gl/stdio_.h, gl/unistd_.h, lgl/Makefile.am, lgl/m4/stdio_h.m4, - lgl/stdio_.h: Upgrade gnulib files. - -2007-08-23 Simon Josefsson - - * NEWS: Add. - -2007-08-23 Simon Josefsson - - * gl/fseeko.c, gl/getpass.c, gl/getpass.h, gl/gnulib.mk, - gl/lseek.c, gl/m4/fseeko.m4, gl/m4/getpass.m4, - gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, gl/m4/lseek.m4, - lgl/Makefile.am, lgl/fseeko.c, lgl/getdelim.c, lgl/getdelim.h, - lgl/getline.c, lgl/getline.h, lgl/getpass.c, lgl/getpass.h, - lgl/lseek.c, lgl/m4/fseeko.m4, lgl/m4/getdelim.m4, - lgl/m4/getline.m4, lgl/m4/getpass.m4, lgl/m4/gnulib-cache.m4, - lgl/m4/gnulib-comp.m4, lgl/m4/lseek.m4: Update gnulib files. - -2007-08-20 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2007-08-20 Simon Josefsson - - * doc/examples/Makefile.am: Don't build pgp example if pgp has been - disabled. - -2007-08-16 Simon Josefsson - - * ChangeLog: Generated. - -2007-08-16 Simon Josefsson - - * NEWS: Version 1.7.18. - -2007-08-16 Simon Josefsson - - * NEWS: Add. - -2007-08-16 Simon Josefsson - - * configure.in: Bump version. - -2007-08-16 Simon Josefsson - - * NEWS: Add. - -2007-08-16 Simon Josefsson - - * NEWS: Add. - -2007-08-16 Simon Josefsson - - * lib/auth_psk_passwd.c, lib/gnutls_psk.c, lib/gnutls_x509.c, - libextra/gnutls_openpgp.c, libextra/openssl_compat.c: Fix pointer - mix for different sized variables. Tiny patch from - - . - -2007-08-15 Simon Josefsson - - * doc/Makefile.am: Typo. - -2007-08-15 Simon Josefsson - - * doc/Makefile.am: Install images in info directory. - -2007-08-15 Simon Josefsson - - * doc/Makefile.am, doc/arch/certificate-user-use-case.eps, - doc/arch/certificate-user-use-case.pdf, - doc/arch/client-server-use-case.eps, - doc/arch/client-server-use-case.pdf, doc/arch/extensions_st.eps, - doc/arch/extensions_st.pdf, doc/arch/handshake-sequence.eps, - doc/arch/handshake-sequence.pdf, doc/arch/handshake-state.eps, - doc/arch/handshake-state.pdf, doc/arch/mod_auth_st.eps, - doc/arch/mod_auth_st.pdf, doc/arch/objects.eps, - doc/arch/objects.pdf, doc/gnutls-certificate-user-use-case.eps, - doc/gnutls-certificate-user-use-case.pdf, - doc/gnutls-client-server-use-case.eps, - doc/gnutls-client-server-use-case.pdf, - doc/gnutls-extensions_st.eps, doc/gnutls-extensions_st.pdf, - doc/gnutls-handshake-sequence.eps, - doc/gnutls-handshake-sequence.pdf, doc/gnutls-handshake-state.eps, - doc/gnutls-handshake-state.pdf, doc/gnutls-mod_auth_st.eps, - doc/gnutls-mod_auth_st.pdf, doc/gnutls-objects.eps, - doc/gnutls-objects.pdf, doc/gnutls.texi: More image renaming. - -2007-08-15 Simon Josefsson - - * doc/Makefile.am, doc/gnutls-internals.eps, - doc/gnutls-internals.pdf, doc/gnutls-layers.eps, - doc/gnutls-layers.pdf, doc/gnutls-pgp.eps, doc/gnutls-pgp.pdf, - doc/gnutls-x509.eps, doc/gnutls-x509.pdf, doc/gnutls.texi, - doc/internals.eps, doc/internals.pdf, doc/layers.eps, - doc/layers.pdf, doc/pgp1.eps, doc/pgp1.pdf, doc/x509-1.eps, - doc/x509-1.pdf: Rename images to deal with texinfo brokenness. See - . - -2007-08-15 Simon Josefsson - - * doc/Makefile.am, doc/my-bib-macros.texi: Remove my-bib-macros, not - used. - -2007-08-15 Simon Josefsson - - * tests/x509self.c: Fix warning. Tiny patch from Andreas Metzler - . - -2007-08-15 Simon Josefsson - - * libextra/gnutls_openpgp.c: Fix warning. Tiny patch from Andreas - Metzler . - -2007-08-15 Simon Josefsson - - * ChangeLog: Generated. - -2007-08-15 Simon Josefsson - - * NEWS: Typo. - -2007-08-15 Simon Josefsson - - * NEWS: Version 1.7.17. - -2007-08-15 Simon Josefsson - - * doc/manpages/Makefile.am: Generated. - -2007-08-13 Simon Josefsson - - * NEWS: Add. - -2007-08-13 Simon Josefsson - - * NEWS, includes/gnutls/openpgp.h, libextra/gnutls_openpgp.c: Add - gnutls_openpgp_privkey_sign_hash. +2011-07-23 Nikos Mavrogiannopoulos -2007-08-13 Simon Josefsson + * lib/gnutls_rsa_export.c, lib/x509/privkey.c, + lib/x509/privkey_pkcs8.c, lib/x509/x509_int.h: The crippled status + of an gnutls_x509_privkey_t was removed. - * doc/examples/ex-cert-select.c, includes/gnutls/gnutls.h.in, - includes/gnutls/gnutlsxx.h, includes/gnutls/openpgp.h, - includes/gnutls/pkcs12.h, lib/auth_dh_common.c, lib/auth_dhe_psk.c, - lib/auth_psk.c, lib/auth_psk.h, lib/auth_psk_passwd.c, - lib/auth_psk_passwd.h, lib/gnutls_psk.c, lib/gnutls_session.c, - lib/gnutls_session_pack.c, lib/gnutls_x509.c, lib/gnutlsxx.cpp, - lib/x509/output.c, src/certtool-cfg.c, src/certtool-cfg.h, - src/certtool.c, src/cli.c, src/common.c, src/common.h, src/crypt.c, - src/prime.c, src/psk.c, src/serv.c, src/tests.c, src/tests.h, - src/tls_test.c: Use *_t types consistently. - -2007-08-12 Simon Josefsson - - * includes/gnutls/gnutls.h.in, includes/gnutls/x509.h, - lib/gnutls_cert.c, lib/gnutls_sig.c, lib/x509/privkey.c, - tests/x509signself.c: Use const and pointers to gnutls_datum_t in - sign callback. - -2007-08-12 Simon Josefsson - - * tests/x509signself.c: Fix warnings. - -2007-08-11 Simon Josefsson - - * doc/manpages/Makefile.am: Update. - -2007-08-11 Simon Josefsson - - * configure.in: Set shared library version correctly. - -2007-08-11 Simon Josefsson - - * NEWS, includes/gnutls/gnutls.h.in: New errors - GNUTLS_E_APPLICATION_ERROR_MIN..GNUTLS_E_APPLICATION_ERROR_MAX. - -2007-08-11 Simon Josefsson - - * NEWS, includes/gnutls/gnutls.h.in, lib/gnutls_cert.c, - lib/gnutls_sig.c: Add gnutls_sign_callback_get. * includes/gnutls/gnutls.h.in (gnutls_sign_callback_get): Add. * lib/gnutls_cert.c (gnutls_sign_callback_set): Move here from gnutls_sig.c. Doc fix. (gnutls_sign_callback_get): New function. * lib/gnutls_sig.c (gnutls_sign_callback_set): Removed. - -2007-08-10 Simon Josefsson - - * lib/gnutls_errors.c: (gnutls_error_is_fatal): Return default is 1 for unknown error - codes. - -2007-08-10 Simon Josefsson - - * doc/manpages/Makefile.am: Update. - -2007-08-10 Simon Josefsson - - * NEWS, includes/gnutls/gnutls.h.in, includes/gnutls/x509.h, - lib/auth_cert.c, lib/auth_dhe.c, lib/auth_rsa_export.c, - lib/gnutls_int.h, lib/gnutls_sig.c, lib/gnutls_x509.c, - lib/x509/privkey.c, tests/Makefile.am, tests/x509signself.c: - External signing callback interface. * includes/gnutls/gnutls.h.in (gnutls_sign_func): New type. (gnutls_sign_callback_set): New function. * includes/gnutls/x509.h (gnutls_x509_privkey_sign_hash): New function. * lib/gnutls_x509.c (gnutls_certificate_set_x509_key_mem): Handle NULL key. Doc fix. * lib/gnutls_sig.c (_gnutls_tls_sign_hdata): Pass session to _gnutls_tls_sign. (_gnutls_tls_sign_params): Likewise. (_gnutls_tls_sign): Add new parameter 'session'. Call sign callback if appropriate. (gnutls_sign_callback_set): New function. * lib/gnutls_x509.c (read_key_mem): Support a NULL key. * lib/gnutls_int.h (internals_st): Add sign_func, sign_func_userdata. * lib/auth_dhe.c (gen_dhe_server_kx): Use length of certificate list to decide wheter to sign, not presence of private key. * lib/auth_cert.c (_gnutls_gen_cert_client_cert_vrfy): Likewise. * lib/auth_rsa_export.c (gen_rsa_export_server_kx): Likewise. * lib/auth_cert.c(_gnutls_get_selected_cert): Don't require that private key is present. * lib/auth_rsa_export.c (gen_rsa_export_server_kx): Don't check key size when key is not present, assume it is > 512 bits. * lib/x509/privkey.c (gnutls_x509_privkey_sign_hash): New function. * tests/Makefile.am: Add x509signself. - -2007-08-10 Simon Josefsson - - * NEWS: Add. - -2007-08-10 Simon Josefsson - - * tests/Makefile.am: Build x509self. - -2007-08-10 Simon Josefsson - - * tests/x509self.c: New file. - -2007-08-08 Simon Josefsson - - * NEWS: Add. - -2007-08-08 Simon Josefsson - - * lib/gnutls_priority.c: Disable TLS 1.2 by default, at least until - RFC is out and we've done simple interop of it. +2011-07-23 Nikos Mavrogiannopoulos -2007-08-08 Simon Josefsson + * doc/examples/ex-pkcs11-list.c: Example compilation fix. - * AUTHORS: Add. - -2007-08-08 Simon Josefsson - - * NEWS: Add. - -2007-08-08 Simon Josefsson - - * po/pl.po, po/sv.po: Sync with TP. - -2007-08-08 Simon Josefsson - - * NEWS: Add. - -2007-07-09 Ludovic Courtès - - * doc/gnutls.texi, doc/signatures.texi: Capitalized subsection - titles. * doc/gnutls.texi: Capitalized subsection titles. * doc/signatures.texi: Likewise. Signed-off-by: Simon Josefsson - -2007-08-08 Simon Josefsson +2011-07-07 Stef Walter - * NEWS: Add. + * configure.ac, lib/includes/gnutls/pkcs11.h, lib/pkcs11.c, + lib/pkcs11_int.h, lib/pkcs11_privkey.c, lib/pkcs11_write.c: pkcs11: + Use p11_kit_pin_xxx() functionality when 'pinfile' is in uris. * This allows other apps to register a handler for a specific + pinfile and then that application will be able to provide the PIN + for those URIs. Signed-off-by: Nikos Mavrogiannopoulos -2007-08-03 Ludovic Courtès +2011-07-22 Nikos Mavrogiannopoulos - * doc/Makefile.am, guile/src/Makefile.am: Fixed CPPFLAGS for Guile - code and documentation. * doc/Makefile.am (SNARF_CPPFLAGS): Added `{top_srcdir,top_builddir}/includes' and `top_builddir'. (core.c.texi): Added `&&' between the `make' command and the `$(GUILE_FOR_BUILD)' command. Use `$(MAKE)' instead of `make'. (extra.c.texi): Likewise. * src/Makefile.am (AM_CPPFLAGS): Added `{top_srcdir,top_builddir}/includes'. Signed-off-by: Simon Josefsson + * lib/pkcs11.c: Added compatibility mode with + /etc/gnutls/pkcs11.conf -2007-08-08 Simon Josefsson +2011-07-21 Nikos Mavrogiannopoulos - * NEWS, configure.in: Bump versions. + * doc/cha-tls-app.texi: Updates in upward negotiation section. -2007-08-08 Simon Josefsson +2011-07-21 Nikos Mavrogiannopoulos - * ChangeLog: Generated. + * doc/latex/gnutls.bib: Corrected bibliography -2007-08-07 Simon Josefsson +2011-07-21 Nikos Mavrogiannopoulos - * NEWS: Version 1.7.16. + * doc/cha-auth.texi, doc/cha-cert-auth.texi, doc/cha-gtls-app.texi, + doc/cha-intro-tls.texi, doc/cha-library.texi, + doc/cha-programs.texi, doc/cha-tls-app.texi: corrected section + names. -2007-08-07 Simon Josefsson +2011-07-21 Nikos Mavrogiannopoulos - * NEWS: Add. + * doc/cha-library.texi, doc/cha-support.texi, lib/gnutls_errors.c, + lib/gnutls_srp.c: Updated information on required libraries. -2007-08-07 Simon Josefsson +2011-07-21 Nikos Mavrogiannopoulos - * NEWS: Add. + * doc/cha-cert-auth.texi, doc/cha-gtls-app.texi, + doc/cha-intro-tls.texi, doc/cha-library.texi, doc/cha-preface.texi: + Corrected typos. -2007-08-07 Simon Josefsson +2011-06-28 Nikos Mavrogiannopoulos - * build-aux/GNUmakefile, build-aux/maint.mk, doc/fdl.texi, - doc/gnutls.texi, doc/gpl-2.0.texi, doc/lgpl-2.1.texi, gl/error.c, - gl/gnulib.mk, gl/m4/gnulib-cache.m4, gl/m4/include_next.m4, - gl/override/doc/gpl-2.0.texi.diff, - gl/override/doc/lgpl-2.1.texi.diff, lgl/Makefile.am, - lgl/m4/gnulib-cache.m4, lgl/m4/include_next.m4, lgl/m4/stdint.m4: - Update gnulib files. + * doc/.gitignore, doc/Makefile.am, doc/alert-printlist.c, + doc/cha-auth.texi, doc/cha-cert-auth.texi, doc/cha-gtls-app.texi, + doc/cha-intro-tls.texi, doc/cha-library.texi, doc/gnutls.texi, + doc/latex/Makefile.am, doc/latex/gnutls.tex, doc/latex/macros.tex, + doc/scripts/gdoc, doc/scripts/mytexi2latex, doc/scripts/sort1.pl, + doc/scripts/split.pl, lib/gnutls_x509.c: updated function listing. -2007-08-02 Ludovic Courtès +2011-06-28 Nikos Mavrogiannopoulos - * NEWS: Updated `NEWS'. Signed-off-by: Simon Josefsson + * lib/gnutls_alert.c, lib/includes/gnutls/gnutls.h.in, + lib/libgnutls.map: Added gnutls_alert_get_strname(). -2007-08-01 Ludovic Courtès +2011-06-27 Nikos Mavrogiannopoulos - * lib/auth_cert.c: Fixed erroneous checks and sloppy return values - in certificate selection. * lib/auth_cert.c (_gnutls_get_selected_cert): Dereference APR_CERT_LIST_LENGTH, APR_PKEY and APR_CERT_LIST when validating - their value. (_gnutls_server_select_cert): When IDX < 0, set RET to `GNUTLS_E_INSUFFICIENT_CREDENTIALS'. Signed-off-by: Simon Josefsson + * lib/algorithms/cert_types.c, lib/algorithms/ciphers.c, + lib/algorithms/ecc.c, lib/algorithms/kx.c, lib/algorithms/mac.c, + lib/algorithms/protocols.c, lib/algorithms/publickey.c, + lib/algorithms/secparams.c, lib/algorithms/sign.c, lib/auth/cert.c, + lib/auth/psk.c, lib/auth/rsa_export.c, lib/crypto-api.c, + lib/crypto-backend.c, lib/ext/max_record.c, + lib/ext/safe_renegotiation.c, lib/ext/server_name.c, + lib/ext/session_ticket.c, lib/gcrypt/mpi.c, lib/gnutls_alert.c, + lib/gnutls_anon_cred.c, lib/gnutls_auth.c, lib/gnutls_buffers.c, + lib/gnutls_cert.c, lib/gnutls_dh_primes.c, lib/gnutls_dtls.c, + lib/gnutls_errors.c, lib/gnutls_global.c, lib/gnutls_handshake.c, + lib/gnutls_mpi.c, lib/gnutls_pcert.c, lib/gnutls_priority.c, + lib/gnutls_privkey.c, lib/gnutls_psk.c, lib/gnutls_pubkey.c, + lib/gnutls_record.c, lib/gnutls_sig.c, lib/gnutls_state.c, + lib/gnutls_str.c, lib/gnutls_ui.c, lib/gnutls_x509.c, + lib/minitasn1/decoding.c, lib/minitasn1/errors.c, + lib/nettle/ecc_verify_hash.c, lib/opencdk/kbnode.c, + lib/opencdk/sig-check.c, lib/openpgp/extras.c, + lib/openpgp/gnutls_openpgp.c, lib/openpgp/output.c, + lib/openpgp/pgp.c, lib/openpgp/privkey.c, lib/pkcs11.c, + lib/pkcs11_privkey.c, lib/pkcs11_secret.c, lib/pkcs11_write.c, + lib/random.c, lib/x509/common.c, lib/x509/crl.c, + lib/x509/crl_write.c, lib/x509/crq.c, lib/x509/dn.c, + lib/x509/extensions.c, lib/x509/output.c, lib/x509/pkcs12.c, + lib/x509/pkcs12_bag.c, lib/x509/pkcs12_encr.c, lib/x509/pkcs7.c, + lib/x509/privkey.c, lib/x509/privkey_pkcs8.c, + lib/x509/rfc2818_hostname.c, lib/x509/sign.c, + lib/x509/verify-high.c, lib/x509/verify.c, lib/x509/x509.c, + lib/x509/x509_write.c: documentation fixes + +2011-06-23 Nikos Mavrogiannopoulos + + * NEWS, lib/COPYING, lib/accelerated/accelerated.c, + lib/accelerated/cryptodev.c, lib/auth/anon.c, lib/auth/anon_ecdh.c, + lib/auth/cert.c, lib/auth/dh_common.c, lib/auth/dhe.c, + lib/auth/dhe_psk.c, lib/auth/ecdh_common.c, lib/auth/psk.c, + lib/auth/psk_passwd.c, lib/auth/rsa.c, lib/auth/rsa_export.c, + lib/auth/srp.c, lib/auth/srp_passwd.c, lib/auth/srp_rsa.c, + lib/auth/srp_sb64.c, lib/crypto-api.c, lib/crypto-backend.c, + lib/debug.c, lib/ext/cert_type.c, lib/ext/ecc.c, + lib/ext/max_record.c, lib/ext/safe_renegotiation.c, + lib/ext/server_name.c, lib/ext/session_ticket.c, + lib/ext/signature.c, lib/ext/srp.c, lib/gnutls_alert.c, + lib/gnutls_anon_cred.c, lib/gnutls_auth.c, lib/gnutls_buffers.c, + lib/gnutls_cert.c, lib/gnutls_cipher.c, lib/gnutls_cipher_int.c, + lib/gnutls_compress.c, lib/gnutls_constate.c, lib/gnutls_datum.c, + lib/gnutls_db.c, lib/gnutls_dh.c, lib/gnutls_dh_primes.c, + lib/gnutls_dtls.c, lib/gnutls_ecc.c, lib/gnutls_errors.c, + lib/gnutls_extensions.c, lib/gnutls_global.c, + lib/gnutls_handshake.c, lib/gnutls_hash_int.c, lib/gnutls_helper.c, + lib/gnutls_kx.c, lib/gnutls_mbuffers.c, lib/gnutls_mem.c, + lib/gnutls_mpi.c, lib/gnutls_num.c, lib/gnutls_pcert.c, + lib/gnutls_pk.c, lib/gnutls_priority.c, lib/gnutls_privkey.c, + lib/gnutls_psk.c, lib/gnutls_pubkey.c, lib/gnutls_record.c, + lib/gnutls_rsa_export.c, lib/gnutls_session.c, + lib/gnutls_session_pack.c, lib/gnutls_sig.c, lib/gnutls_srp.c, + lib/gnutls_state.c, lib/gnutls_str.c, lib/gnutls_supplemental.c, + lib/gnutls_ui.c, lib/gnutls_v2_compat.c, lib/gnutls_x509.c, + lib/hash.c, lib/locks.c, lib/nettle/cipher.c, + lib/nettle/ecc_free.c, lib/nettle/ecc_make_key.c, + lib/nettle/ecc_map.c, lib/nettle/ecc_mulmod.c, + lib/nettle/ecc_points.c, lib/nettle/ecc_projective_add_point.c, + lib/nettle/ecc_projective_dbl_point.c, + lib/nettle/ecc_projective_dbl_point_3.c, + lib/nettle/ecc_shared_secret.c, lib/nettle/ecc_sign_hash.c, + lib/nettle/ecc_verify_hash.c, lib/nettle/egd.c, lib/nettle/init.c, + lib/nettle/mac.c, lib/nettle/mpi.c, lib/nettle/pk.c, + lib/nettle/rnd.c, lib/opencdk/armor.c, lib/opencdk/hash.c, + lib/opencdk/kbnode.c, lib/opencdk/keydb.c, lib/opencdk/literal.c, + lib/opencdk/main.c, lib/opencdk/misc.c, lib/opencdk/new-packet.c, + lib/opencdk/pubkey.c, lib/opencdk/read-packet.c, + lib/opencdk/seskey.c, lib/opencdk/sig-check.c, + lib/opencdk/stream.c, lib/opencdk/write-packet.c, + lib/openpgp/compat.c, lib/openpgp/extras.c, + lib/openpgp/gnutls_openpgp.c, lib/openpgp/output.c, + lib/openpgp/pgp.c, lib/openpgp/pgpverify.c, lib/openpgp/privkey.c, + lib/pkcs11.c, lib/pkcs11_privkey.c, lib/pkcs11_secret.c, + lib/pkcs11_write.c, lib/random.c, lib/system.c, + lib/system_override.c, lib/x509/common.c, lib/x509/crl.c, + lib/x509/crl_write.c, lib/x509/crq.c, lib/x509/dn.c, + lib/x509/extensions.c, lib/x509/key_decode.c, + lib/x509/key_encode.c, lib/x509/mpi.c, lib/x509/output.c, + lib/x509/pbkdf2-sha1.c, lib/x509/pkcs12.c, lib/x509/pkcs12_bag.c, + lib/x509/pkcs12_encr.c, lib/x509/pkcs7.c, lib/x509/privkey.c, + lib/x509/privkey_pkcs8.c, lib/x509/rfc2818_hostname.c, + lib/x509/sign.c, lib/x509/verify-high.c, lib/x509/verify.c, + lib/x509/x509.c, lib/x509/x509_write.c, lib/x509_b64.c: Upgraded to + LGPLv3. -2007-08-02 Simon Josefsson +2011-06-23 Nikos Mavrogiannopoulos - * doc/protocol/draft-santesson-tls-gssapi-03.txt: Add. + * doc/latex/cover.tex.in: updated cover. -2007-08-02 Simon Josefsson +2011-06-21 Nikos Mavrogiannopoulos - * AUTHORS: Add. + * doc/latex/fdl.tex: improvements on fdl. -2007-07-14 Simon Josefsson +2011-06-21 Nikos Mavrogiannopoulos - * lgl/stdint_.h, lgl/vasnprintf.c: Update gnulib files. + * AUTHORS: Added LRN. -2007-07-14 Simon Josefsson +2011-06-21 Nikos Mavrogiannopoulos - * NEWS: Add. + * doc/cha-auth.texi, doc/cha-cert-auth.texi, doc/cha-gtls-app.texi, + doc/cha-intro-tls.texi, doc/cha-library.texi, + doc/cha-programs.texi, doc/scripts/mytexi2latex: documentation + updates. -2007-07-14 Simon Josefsson +2011-06-21 Nikos Mavrogiannopoulos - * configure.in: Bump versions. + * NEWS, lib/gnutls_srp.c, lib/gnutls_srp.h: gnutls_srp_verifier() + returns data allocated with gnutls_malloc() for consistency. -2007-07-14 Simon Josefsson +2011-06-21 Nikos Mavrogiannopoulos - * src/cli.c: On starttls EOF on stdin, clear EOF flag to make future - reads work OK. Needed for Mac OS X. Report and tiny patch by Hal - Eden . + * lib/gnutls_errors.c: reduced error message. -2007-07-12 Simon Josefsson +2011-06-20 Nikos Mavrogiannopoulos - * build-aux/gendocs.sh, gl/override/lib/version-etc.c.diff, - lgl/Makefile.am, lgl/m4/wchar.m4, lgl/wchar_.h: Update. + * doc/cha-intro-tls.texi: simplified text. -2007-07-09 Simon Josefsson +2011-06-20 Nikos Mavrogiannopoulos - * doc/protocol/draft-ietf-tls-rfc4346-bis-04.txt, - doc/protocol/draft-santesson-tls-gssapi-02.txt: Add. + * doc/latex/fdl.tex, doc/latex/gnutls.tex: FDL is now included using + a tiny font. -2007-07-09 Simon Josefsson +2011-06-20 Nikos Mavrogiannopoulos - * doc/Makefile.am, doc/gnutls.texi, doc/internals.texi: Avoid make - errors regarding internals.texi. See + * doc/cha-auth.texi, doc/cha-intro-tls.texi, + doc/examples/ex-client1.c, doc/scripts/mytexi2latex: Tables were + also made floating - . +2011-06-20 Nikos Mavrogiannopoulos -2007-07-09 Simon Josefsson + * doc/cha-cert-auth.texi, doc/cha-internals.texi, + doc/cha-intro-tls.texi, doc/cha-library.texi, + doc/scripts/mytexi2latex: figures were made floating. - * doc/Makefile.am, guile/src/Makefile.am: Fix build failure in doc/ - when guile isn't installed built yet. +2011-06-20 Nikos Mavrogiannopoulos -2007-07-08 Ludovic Courtès + * doc/latex/cover.tex.in, doc/scripts/mytexi2latex: Added + high-quality pdf images. - * doc/gnutls.texi, doc/internals.texi: Manual: Capitalized section - and chapter titles. * doc/gnutls.texi: Capitalized section and chapter titles. (Certificate to XML convertion functions): Fixed typo both in node name and chapter title. Updated menu. * doc/internals.texi: Likewise. Signed-off-by: Simon Josefsson +2011-06-19 Nikos Mavrogiannopoulos -2007-07-06 Simon Josefsson + * .gitignore, doc/latex/.gitignore: more files to ignore - * doc/protocol/draft-nir-tls-eap-01.txt: Add. +2011-06-19 Nikos Mavrogiannopoulos -2007-07-02 Ludovic Courtès + * configure.ac, doc/Makefile.am, doc/cha-auth.texi, + doc/cha-bib.texi, doc/cha-cert-auth.texi, + doc/cha-ciphersuites.texi, doc/cha-errors.texi, + doc/cha-functions.texi, doc/cha-gtls-app.texi, + doc/cha-internals.texi, doc/cha-intro-tls.texi, + doc/cha-library.texi, doc/cha-preface.texi, doc/cha-programs.texi, + doc/cha-support.texi, doc/cha-tls-app.texi, doc/errcodes.c, + doc/examples/ex-client1.c, doc/examples/ex-pkcs11-list.c, + doc/examples/ex-serv-anon.c, doc/gnutls.texi, + doc/latex/Makefile.am, doc/latex/cover.tex.in, doc/latex/fdl.tex, + doc/latex/gnutls.bib, doc/latex/gnutls.tex, doc/latex/macros.tex, + doc/printlist.c, doc/scripts/mytexi2latex, doc/scripts/sort1.pl, + doc/signatures.texi: updated documentation to allow latex output. - * doc/guile.texi: Manual: Small Guile fixes. * doc/guile.texi: Fixed typos, added cross-refs to the Guile manual. Signed-off-by: Simon Josefsson +2011-06-19 Nikos Mavrogiannopoulos -2007-07-03 Simon Josefsson + * lib/gnutls_record.c, lib/x509/crq.c, lib/x509/x509.c, + lib/x509/x509_write.c: corrected typos - * doc/protocol/draft-ietf-tls-rfc4366-bis-00.txt: Add. +2011-06-19 Nikos Mavrogiannopoulos -2007-07-02 Simon Josefsson + * doc/cha-cert-auth.texi, doc/examples/Makefile.am, + doc/examples/ex-cert-select.c, doc/examples/ex-client-udp.c, + doc/examples/ex-crq.c, doc/examples/ex-pkcs11-list.c, + doc/examples/ex-session-info.c, doc/examples/ex-verify.c: indented + code. Corrected PKCS #11 example. - * ChangeLog: Generated. +2011-06-18 Nikos Mavrogiannopoulos -2007-07-02 Simon Josefsson + * doc/Makefile.am: added missing file. - * NEWS: Version 1.7.15. +2011-06-18 Nikos Mavrogiannopoulos -2007-07-02 Simon Josefsson + * AUTHORS, NEWS, lib/includes/gnutls/gnutls.h.in, m4/hooks.m4: + bumped version. - * po/LINGUAS: Revert. +2011-06-18 Nikos Mavrogiannopoulos -2007-07-02 Simon Josefsson + * NEWS, lib/gnutls_errors.c, lib/includes/gnutls/pkcs11.h, + lib/pkcs11.c, lib/pkcs11_write.c, src/p11tool-gaa.c, + src/p11tool-gaa.h, src/p11tool.c, src/p11tool.gaa, src/p11tool.h, + src/pkcs11.c: Added new PKCS #11 flags to force an object being + private or not. Those are GNUTLS_PKCS11_OBJ_FLAG_MARK_PRIVATE and + GNUTLS_PKCS11_OBJ_FLAG_MARK_NOT_PRIVATE. p11tool supports now the + --no-private and --private options. - * po/LINGUAS: Sync with TP. +2011-06-17 Nikos Mavrogiannopoulos -2007-07-02 Simon Josefsson + * src/p11common.c: Limit the number of attempts with the same PIN, + to avoid attempting again and again with a wrong PIN. - * NEWS: Add. +2011-06-17 Nikos Mavrogiannopoulos -2007-07-02 Simon Josefsson + * lib/pkcs11_write.c: When writing an object with CKA_TRUSTED set + CKA_PRIVATE explicitly to FALSE, to allow the SO to write it. + Reported by Rickard Bellgrim. - * doc/gpl-2.0.texi, doc/gpl.texi, doc/lgpl-2.1.texi, doc/lgpl.texi: - Fix gnulib name changes. +2011-06-16 Nikos Mavrogiannopoulos -2007-07-02 Simon Josefsson + * THANKS: updated - * build-aux/config.rpath, build-aux/maint.mk, doc/Makefile.am, - doc/gnutls.texi, gl/gnulib.mk, gl/m4/getaddrinfo.m4, - gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, - gl/override/doc/gpl-2.0.texi.diff, gl/override/doc/gpl.texi.diff, - gl/override/doc/lgpl-2.1.texi.diff, gl/override/doc/lgpl.texi.diff: - Update gnulib files. Fix GPL renaming. +2011-06-16 Nikos Mavrogiannopoulos -2007-07-02 Simon Josefsson + * src/pkcs11.c: removed unneeded test. - * NEWS: Add. +2011-06-16 Nikos Mavrogiannopoulos -2007-07-02 Simon Josefsson + * lib/pkcs11.c: Enforce the GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO even if + GNUTLS_PKCS11_OBJ_FLAG_LOGIN is specified. - * doc/gnutls.texi: Typo. +2011-06-16 Nikos Mavrogiannopoulos -2007-07-02 Simon Josefsson + * src/Makefile.am, src/p11common.c, src/pkcs11.c: Use common code + for PKCS #11 callbacks across clients. Require SO login to write a + trusted object. - * doc/gnutls.texi: Improve installation instructions. +2011-06-16 Nikos Mavrogiannopoulos -2007-07-02 Simon Josefsson + * lib/algorithms/ciphersuites.c, lib/ext/safe_renegotiation.h: bit + fields changed to unsigned. - * doc/gnutls.texi: Add 'Obtaining and Installing'. Suggested by - ludo@gnu.org (Ludovic Courtès). +2011-06-16 Nikos Mavrogiannopoulos -2007-06-29 Simon Josefsson + * lib/gnutls_pubkey.c, lib/x509/privkey.c: Moved null check before + initialization. - * NEWS: Add. +2011-06-16 Nikos Mavrogiannopoulos -2007-06-29 Simon Josefsson + * lib/opencdk/keydb.c: removed unreachable code warning - * doc/guile.texi: Add 'Guile Preparations' section. Based on - discussions with ludo@gnu.org (Ludovic Courtès). +2011-06-16 Nikos Mavrogiannopoulos -2007-06-29 Simon Josefsson + * lib/opencdk/hash.c, lib/opencdk/main.h, lib/opencdk/stream.c, + lib/opencdk/write-packet.c: eliminated wipemem(). - * configure.in: Check for scm_from_locale_string instead of SCM_API. - Patch from ludo@gnu.org (Ludovic Courtès). +2011-06-16 Nikos Mavrogiannopoulos -2007-06-29 Simon Josefsson + * lib/gnutls_pk.c: corrected uninitialized variable warning. - * NEWS: Add. +2011-06-16 Rickard Bellgrim -2007-06-29 Simon Josefsson + * lib/pkcs11_write.c: The CKA_SUBJECT must be specified for a + certificate. Signed-off-by: Nikos Mavrogiannopoulos - * guile/src/Makefile.am: Put $(GUILE_FLAGS) in LIBADD, not LDFLAGS. - Reported by ludo@gnu.org (Ludovic Courtès). +2011-06-15 Nikos Mavrogiannopoulos -2007-06-27 Simon Josefsson + * lib/includes/gnutls/pkcs11.h, lib/pkcs11.c, src/pkcs11.c: When + setting the TRUSTED flag login as security officer. - * doc/TODO: Add. +2011-06-15 Nikos Mavrogiannopoulos -2007-06-27 Simon Josefsson + * lib/pkcs11_write.c: write label in PKCS #11 privkey. - * NEWS: Add. +2011-06-15 Nikos Mavrogiannopoulos -2007-06-27 Simon Josefsson + * lib/gnutls_privkey.c, lib/gnutls_pubkey.c, lib/pkcs11.c, + lib/pkcs11_int.h, lib/pkcs11_privkey.c, lib/pkcs11_secret.c, + lib/pkcs11_write.c: define ck_bool_t to be compatible with PKCS #11 + bool type. - * po/LINGUAS, po/ms.po: Sync with TP. +2011-06-15 Nikos Mavrogiannopoulos -2007-06-27 Simon Josefsson + * configure.ac: ignore more warnings. - * NEWS: Add. +2011-06-09 Stef Walter -2007-06-27 Simon Josefsson + * lib/Makefile.am, lib/pkcs11_int.h, lib/pkcs11_spec.h: Use pkcs11.h + specification file from p11-kit. * Remove one included briefly in gnutls. Signed-off-by: Nikos Mavrogiannopoulos - * tests/key-id/key-id: Can't use /dev/null as template under - mingw32, probably really a bug in cfg+. +2011-06-09 Stef Walter -2007-06-27 Simon Josefsson + * lib/pkcs11.c, src/cli.c, src/p11common.c, src/pkcs11.c, + tests/suite/mini-eagain2.c: Fix up compiler warnings. Signed-off-by: Nikos Mavrogiannopoulos - * gl/m4/getaddrinfo.m4: Fix gai_strerror on mingw32. +2011-06-09 Nikos Mavrogiannopoulos -2007-06-26 Simon Josefsson + * lib/pkcs11_spec.h: Added missing file - * NEWS, configure.in: Check that the guile header files is recent - enough and that it works. +2011-06-07 Nikos Mavrogiannopoulos -2007-06-26 Simon Josefsson + * doc/cha-cert-auth.texi: document new config file format and path. - * configure.in: Move Guile setup stuff down under 'External - libraries'. +2011-06-07 Stef Walter -2007-06-26 Simon Josefsson + * configure.ac, doc/examples/Makefile.am, lib/Makefile.am, + lib/auth/cert.c, lib/gnutls_global.c, lib/gnutls_privkey.c, + lib/gnutls_pubkey.c, lib/gnutls_x509.c, lib/pakchois/README, + lib/pakchois/dlopen.c, lib/pakchois/dlopen.h, + lib/pakchois/errors.c, lib/pakchois/pakchois.c, + lib/pakchois/pakchois.h, lib/pakchois/pakchois11.h, lib/pkcs11.c, + lib/pkcs11_int.h, lib/pkcs11_privkey.c, lib/pkcs11_secret.c, + lib/pkcs11_write.c, src/Makefile.am, src/certtool-common.c, + src/certtool.c, src/cli.c, src/p11tool.c, src/serv.c: The attached + patch ports gnutls to p11-kit. p11-kit is added as a dependency. + p11-kit itself has no dependencies outside of basic libc stuff. The + source code for p11-kit is available both in git and tarball form. + [3] If the gnutls dependency on p11-kit is disabled (via a configure + option) then the PKCS#11 support is disabled. This is useful in bare + bones embedded systems or places where very minimal dependencies are + limited. - * Makefile.am, NEWS, configure.in: Fix installation path of Guile - bindings. +2011-06-07 Nikos Mavrogiannopoulos -2007-06-26 Simon Josefsson + * doc/manpages/Makefile.am: updated - * NEWS, configure.in: Bump versions. +2011-06-07 Nikos Mavrogiannopoulos -2007-06-26 Simon Josefsson + * lib/pkcs11.c, lib/pkcs11_privkey.c: Return error code when an + object is not found. Only request for token insertion if the + expected data is not found. Based on patch by Stef Walter. - * ChangeLog: Generated. +2011-06-07 Nikos Mavrogiannopoulos -2007-06-26 Simon Josefsson + * configure.ac: Depend on automake 1.11. - * NEWS: Version 1.7.14. +2011-06-06 Stef Walter -2007-06-26 Simon Josefsson + * tests/suite/Makefile.am: tests: Build eagain-cli with correct + libraries * Add -ldl -lpthread to linker flags Signed-off-by: Nikos Mavrogiannopoulos - * NEWS: Add. +2011-05-30 Stef Walter -2007-06-26 Simon Josefsson + * src/cli.c: gnutls-cli: Fix uninitialized variable when PKCS#11 + uris in use. * When PKCS#11 URIs are in use previously tried to free + uninitialized memory. Initialize to zero. Signed-off-by: Nikos Mavrogiannopoulos - * NEWS: Add. +2011-05-30 Stef Walter -2007-06-26 Simon Josefsson - - * doc/gendocs_template, gl/gnulib.mk, gl/m4/absolute-header.m4, - gl/m4/gnulib-comp.m4, gl/m4/include_next.m4, gl/m4/netinet_in_h.m4, - gl/m4/string_h.m4, gl/m4/sys_socket_h.m4, gl/netinet_in_.h, - gl/string_.h, gl/sys_socket_.h, lgl/Makefile.am, lgl/float_.h, - lgl/m4/absolute-header.m4, lgl/m4/float_h.m4, - lgl/m4/gnulib-comp.m4, lgl/m4/include_next.m4, lgl/m4/stdint.m4, - lgl/m4/stdio_h.m4, lgl/m4/string_h.m4, lgl/m4/sys_socket_h.m4, - lgl/m4/sys_stat_h.m4, lgl/m4/time_h.m4, lgl/m4/unistd_h.m4, - lgl/m4/wchar.m4, lgl/printf-args.c, lgl/printf-parse.h, - lgl/stdint_.h, lgl/stdio_.h, lgl/string_.h, lgl/sys_socket_.h, - lgl/sys_stat_.h, lgl/time_.h, lgl/unistd_.h, lgl/wchar_.h: Update - gnulib files. + * lib/pkcs11.c: pkcs11: Accept CKR_USER_ALREADY_LOGGED_IN as + successful result for PAP Login * When doing CKF_PROTECTED_AUTHENTICATION_PATH login, accept CKR_USER_ALREADY_LOGGED_IN as a successful result. * Another code path, or another consumer of the same PKCS#11 module may have already logged in. * This is what the non PAP code path already does. Signed-off-by: Nikos Mavrogiannopoulos -2007-06-26 Simon Josefsson +2011-06-06 Stef Walter - * NEWS: Add. + * lib/auth/srp.c, lib/auth/srp_rsa.c, lib/ext/session_ticket.c, + lib/gnutls_compress.c, lib/hash.c, lib/nettle/ecc_mulmod.c, + lib/x509/common.c: Remove unused variables * GCC 4.6.0 prints a warning, and build failes with -Wunused Signed-off-by: Nikos Mavrogiannopoulos -2007-06-17 Ludovic Courtes +2011-06-06 Nikos Mavrogiannopoulos - * configure.in: Make sure Guile is 1.8 or later. * configure.in: Make sure Guile is 1.8 or later, using - `GUILE_CHECK'. Signed-off-by: Simon Josefsson + * lib/nettle/rnd.c: use gnutls_assert_val() in EGD errors. -2007-06-26 Simon Josefsson +2011-06-05 Nikos Mavrogiannopoulos - * NEWS: Add. + * tests/dsa/testdsa, tests/openpgp-certs/testcerts, + tests/scripts/common.sh, tests/suite/testcompat-main, + tests/suite/testsrn: Corrected fail() shell function. Reported by + Andreas Metzler. -2007-06-26 Ludovic Courtes +2011-06-05 Nikos Mavrogiannopoulos - * lib/gnutls_pk.c: Fixed memory leak in `_gnutls_dsa_verify ()'. * lib/gnutls_pk.c (_gnutls_dsa_verify): Release `rs[0]' and `rs[1]' when done. Signed-off-by: Simon Josefsson + * tests/dsa/testdsa: Corrected typo. Reported by Andreas Metzler. -2007-06-20 Simon Josefsson +2011-06-05 Nikos Mavrogiannopoulos - * NEWS: Add. + * doc/manpages/Makefile.am: regenerated makefile. -2007-06-20 Simon Josefsson +2011-06-05 Nikos Mavrogiannopoulos - * THANKS: Add. + * lib/x509/common.c: documentation fix. -2007-06-20 Simon Josefsson +2011-06-05 Nikos Mavrogiannopoulos - * src/cli.c: Don't crash if TLS handshake fails. Reported by Marc - Haber and Andreas Metzler - via Debian BTS #429183. + * lib/accelerated/intel/Makefile.am, + lib/accelerated/intel/aes-x86.c, + lib/accelerated/intel/asm/appro-aes-gcm-x86.s: pclmul is not used on + intel 32-bit systems. -2007-06-20 Simon Josefsson +2011-06-05 Nikos Mavrogiannopoulos - * doc/protocol/draft-ietf-tls-rsa-aes-gcm-00.txt: Add. + * lib/accelerated/intel/aes-x86.c, lib/gnutls_global.h, + lib/gnutls_priority.c: When AES and GCM acceleration is available + increase the priority of AES-GCM ciphersuites in performance and + normal cases. -2007-06-15 Simon Josefsson +2011-06-05 Nikos Mavrogiannopoulos - * doc/protocol/draft-ietf-tls-srp-14.txt: Add. + * lib/gcrypt/cipher.c, lib/gcrypt/pk.c: prevent compilation of + gcrypt support since it is incomplete. -2007-06-14 Simon Josefsson +2011-06-05 Nikos Mavrogiannopoulos - * AUTHORS: Update PGP key. + * lib/Makefile.am, lib/algorithms/ciphers.c, + lib/algorithms/ciphersuites.c, lib/gcrypt/cipher.c, + lib/nettle/cipher.c, m4/hooks.m4: do not use NETTLE_LIBS to include + hogweed and gmp. removed ENABLE_CAMELLIA and NETTLE_GCM. -2007-06-14 Simon Josefsson +2011-06-05 Nikos Mavrogiannopoulos - * AUTHORS: Change Ludovic' description. + * src/benchmark-tls.c: improved benchmark. -2007-06-14 Simon Josefsson +2011-06-05 Nikos Mavrogiannopoulos - * libextra/gnutls_openpgp.c: Merge patch from Timo, applied to CVS. (stream_to_datum): Call gnutls_assert() on error. + * doc/Makefile.am, doc/cha-cert-auth.texi, doc/cha-internals.texi, + doc/cha-intro-tls.texi, doc/cha-library.texi, + doc/cha-programs.texi, doc/examples/ex-session-info.c, + doc/gnutls-certificate-user-use-case.pdf, + doc/gnutls-client-server-use-case.pdf, + doc/gnutls-extensions_st.pdf, doc/gnutls-handshake-sequence.pdf, + doc/gnutls-handshake-state.pdf, doc/gnutls-internals.pdf, + doc/gnutls-layers.pdf, doc/gnutls-logo.pdf, + doc/gnutls-mod_auth_st.pdf, doc/gnutls-objects.pdf, + doc/gnutls-pgp.pdf, doc/gnutls-x509.pdf, doc/gnutls.texi: Updated + documentation. Removed all .pdf files. They were not needed. -2007-06-13 Ludovic Courtès +2011-06-05 Nikos Mavrogiannopoulos - * lib/auth_cert.c: Fix off-by-one in TLS 1.2 handshake. * lib/auth_cert.c (_gnutls_gen_cert_server_cert_req): Before - invoking `gnutls_malloc ()', increment SIZE when using TLS 1.2 so - that the allocated buffer is large-enough to contain the list of - supported hashes. Don't change SIZE later on. Signed-off-by: Simon Josefsson + * lib/algorithms.h, lib/algorithms/ciphersuites.c, + lib/gnutls_handshake.c: Avoid memory allocations when requesting the + supported ciphersuites. -2007-06-13 Ludovic Courtès +2011-06-05 Nikos Mavrogiannopoulos - * libextra/gnutls_openpgp.c: Fix use of uninitialized variable in - `gnutls_certificate_set_openpgp_key_mem ()' * libextra/gnutls_openpgp.c (stream_to_datum): Check whether INP is - NULL rather than checking BUF (which is not initialized yet). Signed-off-by: Simon Josefsson + * lib/accelerated/intel/aes-x86.c: more verbose if the PCLMUL + instruction is detected. -2007-06-13 Simon Josefsson +2011-06-05 Nikos Mavrogiannopoulos - * NEWS, configure.in: Bump versions. + * tests/cipher-test.c: Added debugging ability to cipher-test. -2007-06-13 Simon Josefsson +2011-06-05 Nikos Mavrogiannopoulos - * doc/protocol/draft-salowey-tls-rfc4507bis-00.txt: Add. + * doc/TODO: more cleanup. -2007-06-12 Simon Josefsson +2011-06-04 Nikos Mavrogiannopoulos - * doc/TODO: Add. + * doc/TODO: Added new TODO items. -2007-06-11 Ludovic Courtes +2011-06-04 Nikos Mavrogiannopoulos - * guile/tests/openpgp-auth.scm, guile/tests/openpgp-keyring.scm, - guile/tests/raw-to-c.scm: Small cleanups in `guile/tests'. Signed-off-by: Simon Josefsson + * doc/TODO: removed completed items from todo list -2007-06-12 Simon Josefsson +2011-06-04 Nikos Mavrogiannopoulos - * doc/Makefile.am: Clarify that guile.texi dependencies are - dependencies of gnutls.texi too. + * lib/gnutls_priority.c: reinstated MAC-ALL semantics. -2007-06-11 Simon Josefsson +2011-06-04 Nikos Mavrogiannopoulos - * doc/protocol/draft-nir-tls-eap-00.txt: Add. + * .gitignore: more files to ignore. -2007-06-11 Simon Josefsson +2011-06-04 Nikos Mavrogiannopoulos - * THANKS, configure.in: Need to use CFLAGS when checking for - -Wno-pointer-sign. Reported by "Kristofer T. Karas" - . + * lib/gnutls_session_pack.c: store the ECC curve in the session + resumption parameters. -2007-06-11 Simon Josefsson +2011-06-04 Nikos Mavrogiannopoulos - * ChangeLog: Generated. + * NEWS, doc/cha-cert-auth.texi, doc/examples/ex-verify.c, + lib/gnutls_cert.c, lib/includes/gnutls/x509.h, lib/libgnutls.map, + lib/x509/verify-high.c, tests/Makefile.am, tests/x509cert-tl.c: + Added gnutls_x509_trust_list_add_named_crt() and + gnutls_x509_trust_list_verify_named_crt() that allow having a list + of certificates in the trusted list that will be associated with a + name (e.g. server name) and will not be used as CAs. -2007-06-11 Simon Josefsson +2011-06-04 Nikos Mavrogiannopoulos - * NEWS: Version 1.7.13. + * NEWS, doc/cha-intro-tls.texi, + lib/accelerated/intel/aes-gcm-x86.c, + lib/accelerated/intel/aes-x86.c, lib/algorithms/ciphersuites.c, + lib/gnutls_priority.c, lib/includes/gnutls/gnutls.h.in, + lib/nettle/cipher.c: Added SuiteB ciphersuites. Added SUITEB128 and + SUITEB192 priority strings. SECURE256 was renamed to SECURE192 + (because TLS ciphersuite's security level was not enough to justify + 256-bits). -2007-06-11 Simon Josefsson +2011-06-04 Nikos Mavrogiannopoulos - * Makefile.am: Fix update-po target. + * NEWS, lib/includes/gnutls/gnutls.h.in, lib/libgnutls.map: + gnutls_ecc_curve_get() was added. -2007-06-11 Simon Josefsson +2011-06-04 Nikos Mavrogiannopoulos - * NEWS: Fix. + * lib/gnutls_state.c: The PRF is now read from the ciphersuite + table. -2007-06-11 Simon Josefsson +2011-06-04 Nikos Mavrogiannopoulos - * NEWS: Add. + * src/common.c: Print information on elliptic curve sessions. -2007-06-11 Simon Josefsson +2011-06-04 Nikos Mavrogiannopoulos - * doc/manpages/Makefile.am: Fix copyright years. + * lib/abstract_int.h, lib/gnutls_pubkey.c, lib/gnutls_sig.c, + lib/gnutls_sig.h, lib/includes/gnutls/abstract.h, + lib/includes/gnutls/compat.h, lib/libgnutls.map, lib/x509/common.c, + lib/x509/common.h, lib/x509/crq.c, lib/x509/privkey.c, + lib/x509/verify.c, lib/x509/x509.c, lib/x509/x509_int.h: Split + pubkey_verify_sig() to pubkey_verify_hashed_data() and + pubkey_verify_data(). Added gnutls_pubkey_verify_data2() to allow + verification of a signature when the signature algorithm cannot be + determined by the signature and the public key only. -2007-06-11 Simon Josefsson +2011-06-04 Nikos Mavrogiannopoulos - * doc/reference/gnutls.types: Add, to work around problems if this - file isn't present. + * lib/gnutls_hash_int.h, lib/gnutls_sig.c: Allow all SHA algorithms + for DSA signatures. -2007-06-11 Simon Josefsson +2011-06-03 Nikos Mavrogiannopoulos - * Makefile.am: Fix release target. + * lib/x509/verify.c: fixes for + http://tools.ietf.org/html/draft-mavrogiannopoulos-tls-dss-00 -2007-06-11 Simon Josefsson +2011-06-03 Nikos Mavrogiannopoulos - * po/Makevars: Specify MSGFILTER, to fix make distcheck. + * lib/auth/cert.h, lib/gnutls_cert.c, lib/gnutls_handshake.c: + simplified _gnutls_selected_cert_supported_kx(). -2007-06-11 Simon Josefsson +2011-06-03 Nikos Mavrogiannopoulos - * guile/src/Makefile.am: Need to put libguile-gnutls-v-0.la before - gnulib_libs, to fix rpath issue. + * lib/gnutls_pubkey.c, lib/nettle/pk.c, lib/x509/verify.c: + Truncation of ECDSA and DSA signatures moved to + _wrap_nettle_pk_sign() and _wrap_nettle_pk_verify(). -2007-06-11 Simon Josefsson +2011-06-03 Nikos Mavrogiannopoulos - * guile/src/Makefile.am: Use _LIBADD for libraries, not _LDFLAGS. + * lib/algorithms.h, lib/algorithms/ciphersuites.c, + lib/algorithms/sign.c, lib/ext/signature.c, lib/gnutls_buffers.c, + lib/gnutls_buffers.h, lib/gnutls_handshake.c, lib/gnutls_int.h, + lib/gnutls_sig.c, lib/nettle/pk.c: Simplified the handling of + handshake messages to be hashed. Instead of doing a hash during the + handshake process we now keep the data until handshake is over and + hash them on demand. This uses more memory but eliminates issues + with TLS 1.2 and makes the handling simpler. -2007-06-11 Simon Josefsson +2011-06-03 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/ext/signature.c, lib/gnutls_pubkey.c, lib/nettle/pk.c, + lib/x509/common.h, lib/x509/verify.c: Hash algorithms used for DSA + and ECDSA correspond to draft-mavrogiannopoulos-tls-dss-00.txt. -2007-06-11 Simon Josefsson +2011-06-03 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/ext/ecc.c: updated -2007-06-11 Simon Josefsson +2011-06-02 Nikos Mavrogiannopoulos - * gl/gnulib.mk, gl/m4/string_h.m4, gl/string_.h, lgl/Makefile.am, - lgl/fseeko.c, lgl/m4/gettext.m4, lgl/m4/gnulib-comp.m4, - lgl/m4/intlmacosx.m4, lgl/m4/string_h.m4, lgl/m4/vasnprintf.m4, - lgl/printf-args.c, lgl/printf-args.h, lgl/printf-parse.c, - lgl/printf-parse.h, lgl/string_.h, lgl/vasnprintf.c: Update gnulib - files. + * doc/cha-internals.texi, doc/gnutls.texi: Added refint macro to + refer to internal -non exported- functions. Used it to reference to + the gnutls_*_register() functions. -2007-06-11 Simon Josefsson +2011-06-02 Nikos Mavrogiannopoulos - * libextra/opencdk/armor.c, libextra/opencdk/cipher.c, - libextra/opencdk/compress.c, libextra/opencdk/context.h, - libextra/opencdk/filters.h, libextra/opencdk/kbnode.c, - libextra/opencdk/keydb.c, libextra/opencdk/literal.c, - libextra/opencdk/main.c, libextra/opencdk/main.h, - libextra/opencdk/misc.c, libextra/opencdk/new-packet.c, - libextra/opencdk/opencdk.h, libextra/opencdk/pubkey.c, - libextra/opencdk/read-packet.c, libextra/opencdk/seskey.c, - libextra/opencdk/sig-check.c, libextra/opencdk/stream.c, - libextra/opencdk/stream.h, libextra/opencdk/verify.c: Update to - OpenCDK 0.6.3. + * NEWS, lib/Makefile.am, lib/auth/psk_passwd.c, lib/auth/rsa.c, + lib/auth/rsa_export.c, lib/auth/srp_passwd.c, lib/crypto-api.c, + lib/crypto-backend.c, lib/crypto-backend.h, lib/crypto.c, + lib/ext/session_ticket.c, lib/gnutls_cipher.c, + lib/gnutls_cipher_int.h, lib/gnutls_handshake.c, + lib/gnutls_hash_int.h, lib/gnutls_mpi.c, lib/gnutls_mpi.h, + lib/gnutls_pk.c, lib/includes/gnutls/crypto.h, lib/libgnutls.map, + lib/nettle/mpi.c, lib/nettle/pk.c, lib/opencdk/misc.c, + lib/pkcs11_secret.c, lib/random.h, lib/x509/pkcs12.c, + lib/x509/privkey_pkcs8.c, libextra/gnutls_openssl.c, src/psk.c, + src/srptool.c, tests/Makefile.am, tests/crypto_rng.c, + tests/rng-fork.c: gnutls/crypto.h no longer includes functions to + register ciphers. Thus the following functions - gnutls_crypto_bigint_register - gnutls_crypto_cipher_register - gnutls_crypto_digest_register - gnutls_crypto_mac_register - gnutls_crypto_pk_register - gnutls_crypto_rnd_register - gnutls_crypto_single_cipher_register - gnutls_crypto_single_digest_register - gnutls_crypto_single_mac_register are only available internally + via crypto-backend.h. -2007-06-11 Simon Josefsson +2011-06-02 Nikos Mavrogiannopoulos - * doc/protocol/draft-badra-ecdhe-tls-psk-00.txt, - doc/protocol/draft-hajjeh-tls-identity-protection-01.txt, - doc/protocol/draft-hajjeh-tls-sign-03.txt: Add. + * build-aux/config.rpath: updated -2007-06-08 Ludovic Courtes +2011-06-01 Nikos Mavrogiannopoulos - * guile/src/Makefile.am: Fix Guile linking so that the right GnuTLS - libs are used. * guile/src/Makefile.am (GNUTLS_CORE_LIBS, GNUTLS_EXTRA_LIBS): New. (GNULIB_LDFLAGS): Renamed to `GNULIB_LIBS'. Explicitly pass the - `.la' path. (libguile_gnutls_v_0_la_LDFLAGS): Pass `$(GUILE_LDFLAGS)' as the - last item so that RPATH is in the right order (i.e., all `$(top_builddir)/...' appear first). (libguile_gnutls_extra_v_0_la_LDFLAGS): Likewise. + * lib/accelerated/intel/asm/appro-aes-gcm-x86-64.s, + lib/accelerated/intel/asm/appro-aes-gcm-x86.s, + lib/accelerated/intel/asm/appro-aes-x86-64.s, + lib/accelerated/intel/asm/appro-aes-x86.s: typos and date fix in + license. -2007-06-08 Simon Josefsson +2011-06-01 Nikos Mavrogiannopoulos - * NEWS, configure.in: Bump versions. + * src/benchmark-tls.c: Added benchmark on GCM ciphersuites and + arcfour for comparison. -2007-06-08 Simon Josefsson +2011-06-01 Nikos Mavrogiannopoulos - * ChangeLog: Generated. + * lib/gnutls_int.h: corrected typo. -2007-06-08 Simon Josefsson +2011-06-01 Nikos Mavrogiannopoulos - * NEWS: Version 1.7.12. + * lib/accelerated/intel/aes-gcm-x86.c, + lib/accelerated/intel/aes-x86.c: indented code -2007-06-08 Simon Josefsson +2011-06-01 Nikos Mavrogiannopoulos - * NEWS: Add. + * src/benchmark.c: properly initialize benchmarks. -2007-06-08 Simon Josefsson +2011-06-01 Nikos Mavrogiannopoulos - * lib/x509/x509.c: Fix warnings on amd64, from Nikos. + * configure.ac, m4/hooks.m4: bumped version. -2007-06-08 Simon Josefsson +2011-06-01 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/accelerated/intel/aes-gcm-x86.c: Corrections in encryption and + decryption of incomplete blocks. -2007-06-08 Simon Josefsson +2011-06-01 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/accelerated/intel/aes-gcm-x86.c, lib/gnutls_int.h, + lib/gnutls_state.c: Use nettle's memxor or gnulib's if it doesn't + exist. -2007-06-08 Simon Josefsson +2011-06-01 Nikos Mavrogiannopoulos - * : commit 42c591867afe192eae45c56f1e0f9e3b8867d2ad Author: Simon - Josefsson Date: Fri Jun 8 13:45:59 2007 - +0200 + * NEWS, lib/accelerated/intel/Makefile.am, + lib/accelerated/intel/aes-gcm-x86.c, + lib/accelerated/intel/aes-x86.c, lib/accelerated/intel/aes-x86.h, + lib/accelerated/intel/asm/appro-aes-gcm-x86-64.s, + lib/accelerated/intel/asm/appro-aes-gcm-x86.s, lib/gnutls_num.c, + lib/gnutls_num.h, tests/cipher-test.c: Added AES-GCM optimizations + using the PCLMULQDQ instruction. Uses Andy Polyakov's assembly code. -2007-06-08 Simon Josefsson +2011-06-01 Nikos Mavrogiannopoulos - * po/Makevars: Try to fix line number collisions. + * lib/crypto-api.c: documented usage of gnutls_cipher_add_auth(). -2007-06-06 Ludovic Courtes +2011-06-01 Nikos Mavrogiannopoulos - * configure.in, guile/src/Makefile.am: Fixed the - `-Wno-strict-prototypes' issue in Guile code. * configure.in: Add all custom CFLAGS to `AM_CFLAGS' rather than `CFLAGS', except for `-D_REENTRANT -D_THREAD_SAFE' which must be present during feature tests. Substitute `AM_CFLAGS'. * src/Makefile.am (libguile_gnutls_v_0_la_CFLAGS): Added - `$(AM_CFLAGS)'. (libguile_gnutls_extra_v_0_la_CFLAGS): Likewise. (AM_CFLAGS): When GCC is used, add `-Wno-strict-prototypes'. + * doc/cha-intro-tls.texi: updates. -2007-06-06 Ludovic Courtes +2011-05-31 Roman Bogorodskiy - * configure.in: Cosmetic changes in `configure.in'. * configure.in: Display a heading indicating that Guile stuff are - being detected. + * lib/Makefile.am: Prevent including installed gnutls' headers. -2007-06-06 Ludovic Courtes +2011-05-31 Roman Bogorodskiy - * m4/guile.m4: Added `guile.m4', per Simon's request. + * src/udp-serv.c: Add missing to get sockaddr_in. -2007-06-06 Ludovic Courtes +2011-05-31 Nikos Mavrogiannopoulos - * configure.in: Don't look for Guile when `guile-snarf' is not - found. * configure.in: Don't invoke `GUILE_PROGS' and `GUILE_FLAGS' when `guile-snarf' is not found. + * doc/cha-intro-tls.texi: Compatibility text updated. -2007-06-04 Simon Josefsson +2011-05-29 Nikos Mavrogiannopoulos - * doc/protocol/draft-rescorla-tls-suiteb-01.txt: Add. + * lib/accelerated/intel/asm/appro-aes-x86-64.s, + lib/accelerated/intel/asm/appro-aes-x86.s: Added new AES code by + Andy. -2007-06-04 Simon Josefsson +2011-05-29 Nikos Mavrogiannopoulos - * doc/protocol/draft-ietf-tls-ecc-new-mac-01.txt: Add. + * doc/credentials/x509/ca-key.pem: Added missing file. -2007-06-01 Simon Josefsson +2011-05-29 Nikos Mavrogiannopoulos - * doc/guile.texi: More @node fixes. + * .gitignore: more files to ignore -2007-06-01 Simon Josefsson +2011-05-29 Nikos Mavrogiannopoulos - * doc/guile.texi: Avoid @node collisions with main manual. + * lib/nettle/Makefile.am, lib/nettle/ecc_free.c, + lib/nettle/ecc_make_key.c, lib/nettle/ecc_map.c, + lib/nettle/ecc_mulmod.c, lib/nettle/ecc_points.c, + lib/nettle/ecc_projective_add_point.c, + lib/nettle/ecc_projective_dbl_point_3.c, + lib/nettle/ecc_shared_secret.c, lib/nettle/ecc_sign_hash.c, + lib/nettle/ecc_test.c, lib/nettle/ecc_verify_hash.c: Added FSF + copyright to public domain files. -2007-06-01 Simon Josefsson +2011-05-29 Nikos Mavrogiannopoulos - * doc/Makefile.am: Need -I for config.h. + * configure.ac, lib/accelerated/x86.h: Use cpuid.h if it exists, to + use the x86 CPUID instruction. -2007-06-01 Simon Josefsson +2011-05-29 Nikos Mavrogiannopoulos - * Makefile.am: Need to build doc/ after guile/. + * THANKS: Added Dash. -2007-06-01 Simon Josefsson +2011-05-28 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/gnutls_compress.c, lib/gnutls_compress.h, + lib/gnutls_handshake.c: simplified + _gnutls_supported_compression_methods(). -2007-06-01 Simon Josefsson +2011-05-28 Nikos Mavrogiannopoulos - * guile/src/Makefile.am: Need -I for config.h. + * lib/gnutls_constate.c, lib/gnutls_handshake.c, lib/gnutls_int.h, + lib/gnutls_session_pack.c, lib/gnutls_v2_compat.c: Correctly set + compression method when resuming sessions. Reported by Dash Shendy. -2007-06-01 Ludovic Courtès +2011-05-28 Nikos Mavrogiannopoulos - * : commit f469cfce51318df3b629d9af210ce4b4e587fac0 Author: Ludovic - Courtes Date: Fri Jun 1 00:51:10 2007 +0200 + * lib/gnutls_hash_int.c: digest_length() uses int as input. -2007-06-01 Ludovic Courtes +2011-05-28 Stef Walter - * doc/extract-guile-c-doc.scm, - guile/modules/system/documentation/c-snarf.scm: Tiny bug fixes in - Guile's documentation extraction. * doc/extract-guile-c-doc.scm (main): Use named arguments rather - than a single rest arg. Fixed the order of arguments as passed to `run-cpp-and-extract-snarfing' so that `ccache gcc -E' is really passed as `("ccache" "gcc" "-E")' (in this order). * guile/modules/system/documentation/c-snarf.scm (run-cpp-and-extract-snarfing): Pass FILE as the last CPP - argument. + * lib/nettle/cipher.c: Fix warnings with GCC 4.5.2 -2007-05-31 Ludovic Courtes +2011-05-28 Nikos Mavrogiannopoulos - * Makefile.am, configure.in, guile/src/Makefile.am: Build cleanups - following Simon's comments. * Makefile.am (SUBDIRS): Add `guile' when `HAVE_GUILE'. * configure.in: When `guile-snarf' is not found, set `opt_guile_bindings' to `no' instead of bailing out. * src/Makefile.am (GUILE_FOR_BUILD): Fixed `-L' parameter. + * doc/credentials/Makefile.am, doc/credentials/x509/Makefile.am: + Corrected EXTRA_DIST -2007-05-31 Simon Josefsson +2011-05-28 Nikos Mavrogiannopoulos - * doc/gnutls.texi: Revert unnecessary changes. + * tests/suite/testcompat-main: updated keys. -2007-05-31 Simon Josefsson +2011-05-28 Nikos Mavrogiannopoulos - * : commit d51689f572e544759632fa2f9ca0209a843d4452 Author: Ludovic - Courtès Date: Thu May 31 00:28:19 2007 +0200 + * lib/auth/cert.c, lib/auth/cert.h, lib/gnutls_handshake.c, + lib/gnutls_handshake.h: Take into account each and every advertized + public key algorithm when selecting a certificate. Previously we + were assuming only RSA or DSA, or ANY. -2007-05-31 Ludovic Courtès +2011-05-28 Nikos Mavrogiannopoulos - * doc/guile.texi: Minor doc fixes. + * doc/credentials/gnutls-http-serv, src/serv-gaa.c, src/serv-gaa.h, + src/serv.c, src/serv.gaa: Added feature to specify ecc private keys + and certificates. -2007-05-31 Ludovic Courtès +2011-05-28 Nikos Mavrogiannopoulos - * doc/Makefile.am: Handle missing Guile when building the - documentation. + * lib/algorithms.h, lib/gnutls_handshake.c, lib/gnutls_state.c: + Corrected ECC ciphersuite detection. -2007-05-31 Ludovic Courtès +2011-05-28 Nikos Mavrogiannopoulos - * doc/Makefile.am, doc/extract-guile-c-doc.scm, doc/gnutls.texi, - doc/guile.texi: Integrated documentation of Guile bindings. + * doc/credentials/x509-ca-key.pem, doc/credentials/x509-ca.pem, + doc/credentials/x509-client-key.pem, + doc/credentials/x509-client.pem, doc/credentials/x509-other-ca.pem, + doc/credentials/x509-proxy-key.pem, doc/credentials/x509-proxy.pem, + doc/credentials/x509-server-dsa.pem, + doc/credentials/x509-server-key-dsa.pem, + doc/credentials/x509-server-key.pem, + doc/credentials/x509-server.pem, doc/credentials/x509-trust.pem, + doc/credentials/x509/ca.pem, doc/credentials/x509/cert-dsa.pem, + doc/credentials/x509/cert-ecc.pem, + doc/credentials/x509/cert-rsa.pem, doc/credentials/x509/cert.pem, + doc/credentials/x509/clicert-dsa.pem, + doc/credentials/x509/clicert.pem, doc/credentials/x509/key-dsa.pem, + doc/credentials/x509/key-ecc.pem, doc/credentials/x509/key-rsa.pem, + doc/credentials/x509/key.pem, lib/nettle/pk.c, lib/x509/verify.c: + Laxed verification checks for DSA to allow SHA256 in place of + SHA224. Added new certificate sets in doc/credentials/x509/. -2007-05-30 Ludovic Courtès +2011-05-28 Nikos Mavrogiannopoulos - * configure.in, guile/src/Makefile.am: Try to handle "function - declaration isn't a prototype" warnings. + * lib/gnutls_priority.c: ECDHE and ECDSA were added to deafult + priorities. -2007-05-30 Simon Josefsson +2011-05-28 Nikos Mavrogiannopoulos - * gl/netinet_in_.h, gl/string_.h, gl/sys_socket_.h, - lgl/Makefile.am, lgl/float_.h, lgl/fseeko.c, lgl/lseek.c, - lgl/m4/iconv.m4, lgl/m4/lseek.m4, lgl/m4/stdio_h.m4, lgl/stdint_.h, - lgl/stdio_.h, lgl/string_.h, lgl/sys_socket_.h, lgl/sys_stat_.h, - lgl/time_.h, lgl/unistd_.h, lgl/wchar_.h: Update. + * lib/auth/rsa.c, lib/x509/key_encode.c, lib/x509/privkey_pkcs8.c: + gnutls_secure_malloc() is no longer used. -2007-05-30 Ludovic Courtès +2011-05-28 Nikos Mavrogiannopoulos - * Makefile.am, configure.in, guile/Makefile.am, - guile/modules/Makefile.am, guile/modules/gnutls.scm, - guile/modules/gnutls/build/enums.scm, - guile/modules/gnutls/build/priorities.scm, - guile/modules/gnutls/build/smobs.scm, - guile/modules/gnutls/build/utils.scm, - guile/modules/gnutls/extra.scm, - guile/modules/system/documentation/README, - guile/modules/system/documentation/c-snarf.scm, - guile/modules/system/documentation/output.scm, - guile/pre-inst-guile.in, guile/src/Makefile.am, guile/src/core.c, - guile/src/errors.c, guile/src/errors.h, guile/src/extra.c, - guile/src/make-enum-header.scm, guile/src/make-enum-map.scm, - guile/src/make-session-priorities.scm, - guile/src/make-smob-header.scm, guile/src/make-smob-types.scm, - guile/src/utils.c, guile/src/utils.h, guile/tests/Makefile.am, - guile/tests/anonymous-auth.scm, guile/tests/errors.scm, - guile/tests/openpgp-auth.scm, guile/tests/openpgp-keyring.asc, - guile/tests/openpgp-keyring.scm, guile/tests/openpgp-keys.scm, - guile/tests/openpgp-pub.asc, guile/tests/openpgp-sec.asc, - guile/tests/pkcs-import-export.scm, guile/tests/raw-to-c.scm, - guile/tests/rsa-parameters.pem, - guile/tests/session-record-port.scm, guile/tests/srp-base64.scm, - guile/tests/x509-auth.scm, guile/tests/x509-certificate.pem, - guile/tests/x509-certificates.scm, guile/tests/x509-key.pem: Started - Guile integration. Documentation is still missing. A bit rough on the edges, but - `make' and `make check' do work. + * lib/auth/dhe_psk.c, lib/auth/psk.c: deinitialize PSK key memory. -2007-05-28 Simon Josefsson +2011-05-28 Nikos Mavrogiannopoulos - * doc/Makefile.am: Make sure all images are distributed in all - formats. Reported by Andreas Metzler . + * lib/auth/psk.c: explicitly request for client key in server side. -2007-05-27 Simon Josefsson +2011-05-27 Nikos Mavrogiannopoulos - * lib/gnutls_x509.c: (parse_pem_ca_mem): Handle reads beyond first certificate properly. - Reported by Dennis Vshivkov in - . + * NEWS, lib/algorithms/ciphersuites.c, lib/algorithms/kx.c, + lib/auth/anon.c, lib/auth/anon_ecdh.c, lib/auth/dh_common.c, + lib/auth/dh_common.h, lib/auth/dhe.c, lib/auth/dhe_psk.c, + lib/auth/ecdh_common.c, lib/auth/ecdh_common.h, lib/gnutls_state.c, + lib/includes/gnutls/gnutls.h.in: Added ECDHE-PSK ciphersuites for + TLS (RFC 5489). -2007-05-27 Simon Josefsson +2011-05-27 Nikos Mavrogiannopoulos - * tests/Makefile.am, tests/parse_ca.c: Add self-test. + * doc/gnutls-guile.texi: Corrections. -2007-05-27 Simon Josefsson +2011-05-27 Nikos Mavrogiannopoulos - * THANKS: Add. + * doc/.gitignore: ignore tex files. -2007-05-27 Simon Josefsson +2011-05-27 Nikos Mavrogiannopoulos - * NEWS: Fix. + * doc/cha-copying.texi: Do not list all licenses in the manual of + gnutls. Just the license of the manual is enough. -2007-05-27 Simon Josefsson +2011-05-27 Nikos Mavrogiannopoulos - * NEWS: [no log message] + * doc/Makefile.am, doc/cha-ciphersuites.texi, + doc/cha-functions.texi, doc/cha-preface.texi, + doc/gnutls-guile.texi, doc/guile.texi, guile/src/core.c: guile + bindings added as a separate document. -2007-05-27 Simon Josefsson +2011-05-27 Nikos Mavrogiannopoulos - * lib/gnutls_datum.c: (_gnutls_free_datum_m): Free even if size is 0. + * doc/gnutls.texi: reorganization. Removed guile bindings. -2007-05-26 Simon Josefsson +2011-05-27 Nikos Mavrogiannopoulos - * NEWS: Add. + * doc/cha-auth.texi, doc/cha-cert-auth.texi, doc/cha-gtls-app.texi, + doc/gnutls.texi: reorganization and added section on parameter + generation. -2007-05-26 Simon Josefsson +2011-05-26 Nikos Mavrogiannopoulos - * lib/x509/privkey_pkcs8.c: (decode_pkcs8_key): If ASN.1 decoding fails after decrypting an - already properly decoded value, assume it is due to a bad password - rather than ASN.1 error. Reported by Nate Nielsen - . (From 1.6.x branch.) + * lib/Makefile.am, lib/auth/Makefile.am, lib/ext/Makefile.am, + lib/nettle/Makefile.am: Added new headers. -2007-05-26 Simon Josefsson +2011-05-26 Nikos Mavrogiannopoulos - * lib/x509/privkey_pkcs8.c: (decode_private_key_info): Translate asn1 errors properly. Reported - by Nate Nielsen . + * NEWS: document elliptic curves addition. -2007-05-26 Simon Josefsson +2011-05-26 Nikos Mavrogiannopoulos - * lib/auth_cert.c: Fix mem leak, reported by Andrey Nosenko - . (From 1.6.x branch.) + * m4/hooks.m4: libgcrypt support was removed. -2007-05-26 Simon Josefsson +2011-05-26 Nikos Mavrogiannopoulos - * THANKS: Add (from 1.6.x). + * NEWS: listed newly added functions. -2007-05-26 Simon Josefsson +2011-05-26 Nikos Mavrogiannopoulos - * NEWS, configure.in: Bump versions. + * lib/nettle/Makefile.am, lib/nettle/ecc.h, + lib/nettle/ecc_make_key.c, lib/nettle/ecc_shared_secret.c, + lib/nettle/ecc_sign_hash.c, lib/nettle/ecc_verify_hash.c, + lib/nettle/mp_unsigned_bin.c: Use nettle's functions for integer + import/export. -2007-05-26 Simon Josefsson +2011-05-26 Nikos Mavrogiannopoulos - * ChangeLog: Generated. + * lib/algorithms/publickey.c, lib/gnutls_sig.c: more updates for + ECDSA ciphersuites. -2007-05-26 Simon Josefsson +2011-05-26 Nikos Mavrogiannopoulos - * NEWS: Version 1.7.11. + * lib/ext/ecc.c: reduced debugging. -2007-05-26 Simon Josefsson +2011-05-26 Nikos Mavrogiannopoulos - * NEWS: Fix. + * lib/gnutls_pubkey.c, lib/gnutls_sig.c: Changes to allow ECDH-DSA + with client mode certificates. -2007-05-26 Simon Josefsson +2011-05-26 Nikos Mavrogiannopoulos - * configure.in: Bump versions. + * tests/certs/ca-cert-ecc.pem, tests/certs/ca-ecc.pem, + tests/certs/cert-ecc.pem, tests/certs/ecc.pem, + tests/suite/testcompat-main: Added server and client mode tests for + ECDH-ECDSA. -2007-05-26 Simon Josefsson +2011-05-26 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/ext/session_ticket.c, lib/gnutls_db.c, lib/gnutls_dtls.c, + lib/gnutls_global.c, lib/gnutls_handshake.c, lib/gnutls_int.h, + lib/gnutls_session_pack.c, lib/gnutls_v2_compat.c, + lib/includes/gnutls/gnutls.h.in, lib/libgnutls.map, + lib/nettle/rnd.c, lib/opencdk/keydb.c, lib/opencdk/literal.c, + lib/opencdk/read-packet.c, lib/opencdk/sig-check.c, + lib/openpgp/gnutls_openpgp.c, lib/system.c, lib/system.h, + lib/x509/common.c, lib/x509/verify.c, tests/chainverify.c: Added + gnutls_global_set_time_function() to allow overriding the default + system time() function. -2007-05-26 Simon Josefsson +2011-05-25 Giuseppe Scrivano - * libextra/opencdk/Makefile.am: Add opencdk.h to sources. + * doc/cha-programs.texi: Fix example in the documentation. Signed-off-by: Nikos Mavrogiannopoulos -2007-05-25 Simon Josefsson +2011-05-25 Nikos Mavrogiannopoulos - * ChangeLog: Generated. + * doc/cha-programs.texi: updated documentation on PSK. Signed-off-by: Nikos Mavrogiannopoulos -2007-05-25 Simon Josefsson +2011-05-25 Nikos Mavrogiannopoulos - * NEWS: Version 1.7.10. + * lib/nettle/ecc_projective_add_point.c: If Q=-P return the point at + infinity. -2007-05-25 Simon Josefsson +2011-05-25 Nikos Mavrogiannopoulos - * Makefile.am: Use cg instead of cvs commands, for update-po target. + * tests/chainverify.c: Added elliptic curves chain certificate. -2007-05-25 Simon Josefsson +2011-05-25 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/gnutls_buffers.c: do not try to write to a socket when no + data. -2007-05-25 Simon Josefsson +2011-05-24 Nikos Mavrogiannopoulos - * Makefile.am: Change release target from cvs to git. + * tests/openpgpself.c: increased log level -2007-05-25 Simon Josefsson +2011-05-24 Nikos Mavrogiannopoulos - * lgl/lseek.c, lgl/m4/lseek.m4: Update. + * lib/gnutls_buffers.h, lib/gnutls_handshake.c: + _gnutls_handshake_hash_buffer_clear was replaced by + _gnutls_buffer_clear(); -2007-05-25 Simon Josefsson +2011-05-23 Nikos Mavrogiannopoulos - * doc/gendocs_template, lgl/.cvsignore, lgl/Makefile.am, - lgl/fseeko.c, lgl/m4/fseeko.m4, lgl/m4/gnulib-comp.m4, - lgl/m4/unistd_h.m4, lgl/stdio_.h, lgl/unistd_.h: Update. + * lib/nettle/pk.c: Only warn on invalid security level hashes. -2007-05-25 Simon Josefsson +2011-05-23 Nikos Mavrogiannopoulos - * NEWS: Typo. + * src/certtool.c: SHA256 is the default hash algorithm in certtool. -2007-05-24 Simon Josefsson +2011-05-23 Nikos Mavrogiannopoulos - * doc/manpages/Makefile.am: Update. + * lib/gnutls_pk.c, lib/gnutls_pk.h, lib/gnutls_privkey.c, + lib/gnutls_sig.c, lib/x509/verify.c: Several updates to allow + generation and signing of an ECC certificate. -2007-05-24 Simon Josefsson +2011-05-23 Nikos Mavrogiannopoulos - * lib/gnutls_x509.c: Use new API. + * doc/manpages/certtool.1: updated certtool info. -2007-05-24 Simon Josefsson +2011-05-23 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/algorithms/ciphersuites.c: corrected bug in ciphersuite name + searching. -2007-05-24 Simon Josefsson +2011-05-22 Nikos Mavrogiannopoulos - * gl/gnulib.mk, gl/netinet_in_.h, gl/string_.h, gl/sys_socket_.h, - lgl/.cvsignore, lgl/Makefile.am, lgl/float+.h, lgl/float_.h, - lgl/fseeko.c, lgl/m4/float_h.m4, lgl/m4/fseeko.m4, - lgl/m4/gnulib-comp.m4, lgl/m4/stdio_h.m4, lgl/m4/vasnprintf.m4, - lgl/m4/vasprintf.m4, lgl/m4/wint_t.m4, lgl/stdint_.h, lgl/stdio_.h, - lgl/string_.h, lgl/sys_socket_.h, lgl/sys_stat_.h, lgl/time_.h, - lgl/unistd_.h, lgl/vasnprintf.c, lgl/wchar_.h: Update. + * doc/cha-auth.texi: Discussed the newly added ciphersuites. -2007-05-24 Simon Josefsson +2011-05-22 Nikos Mavrogiannopoulos - * configure.in: Bump versions. + * doc/Makefile.am: Added algorithms/ to function index. -2007-05-24 Simon Josefsson +2011-05-22 Nikos Mavrogiannopoulos - * NEWS, includes/gnutls/x509.h, lib/x509/verify.c, lib/x509/x509.c, - lib/x509/x509.h: Export gnutls_x509_crt_get_raw_dn, - gnutls_x509_crt_get_raw_issuer_dn. + * lib/algorithms/ciphersuites.c: Added ECC ciphersuites from + rfc5289. -2007-05-23 Timo Schulz +2011-05-22 Nikos Mavrogiannopoulos - * libextra/openpgp/xml.c: fix the key ID representation in the XML - code. + * src/certtool.c: Print the private key after generation. Print ECC + keys. -2007-05-21 Timo Schulz +2011-05-22 Nikos Mavrogiannopoulos - * libextra/openpgp/extras.c, libextra/openpgp/openpgp.h, - libextra/openpgp/pgp.c, libextra/openpgp/xml.c: cleanups for the xml - code: elgamal keys are not supported. bug fix for the key import - (base64) code, store the stream and close it in the deinit function. + * lib/algorithms/ecc.c, lib/gnutls_ecc.c, + lib/includes/gnutls/abstract.h, lib/includes/gnutls/x509.h, + lib/libgnutls.map, lib/x509/privkey.c: Added + gnutls_x509_privkey_import_ecc_raw() and + gnutls_x509_privkey_export_ecc_raw(). -2007-05-21 Timo Schulz +2011-05-22 Nikos Mavrogiannopoulos - * src/openpgp/Makefile.am, src/openpgp/cli_ring.asc: Add client - keyring in base64 format. This is the same file as cli_ring.gpg but - armored. + * lib/x509/privkey.c: Decode PEM ECC private keys. -2007-05-21 Timo Schulz +2011-05-22 Nikos Mavrogiannopoulos - * libextra/openpgp/extras.c: do not close the input stream in the - import code when the base64 is used. + * lib/algorithms.h, lib/algorithms/ecc.c, lib/x509/key_encode.c, + lib/x509/privkey.c, src/certtool-gaa.c, src/certtool-gaa.h, + src/certtool.c, src/certtool.gaa: updates to allow the generation of + an ECC private key. -2007-05-14 Timo Schulz +2011-05-22 Nikos Mavrogiannopoulos - * tests/openpgp/keyring.c: few more comments. + * lib/x509_b64.c: do not crash on null message. -2007-05-14 Timo Schulz +2011-05-22 Nikos Mavrogiannopoulos - * configure.in: add makefile for the openpgp test folder + * .gitignore: updated -2007-05-14 Timo Schulz +2011-05-22 Nikos Mavrogiannopoulos - * libextra/openpgp/extras.c: patch to support raw keyrings. + * lib/algorithms/ciphersuites.c, lib/algorithms/kx.c, + lib/auth/cert.c, lib/auth/dhe.c, lib/gnutls_pk.c, lib/gnutls_pk.h, + lib/gnutls_pubkey.c, lib/gnutls_sig.c, lib/gnutls_state.c, + lib/includes/gnutls/gnutls.h.in, lib/nettle/ecc_sign_hash.c, + lib/nettle/pk.c, lib/nettle/rnd.c, lib/nettle/rnd.h, + lib/x509/common.h, lib/x509/verify.c: Added support for verifying + server certificates with ECDSA. -2007-05-14 Timo Schulz +2011-05-22 Nikos Mavrogiannopoulos - * tests/Makefile.am, tests/openpgp/Makefile.am, - tests/openpgp/keyring.c: Add simple openpgp test. + * lib/ext/ecc.c: Only reply with ECC Packet format extension if we + have negotiated ECC. -2007-05-12 Simon Josefsson +2011-05-22 Nikos Mavrogiannopoulos - * ChangeLog: [no log message] + * tests/pathlen/ca-no-pathlen.pem, + tests/pathlen/no-ca-or-pathlen.pem, tests/pkcs12_s2k_pem.c: leak fix + and updates for new formats. -2007-05-12 Simon Josefsson +2011-05-22 Nikos Mavrogiannopoulos - * NEWS: Version 1.7.9. + * tests/suite/testcompat-main: Added ECDHE-RSA tests. -2007-05-12 Simon Josefsson +2011-05-22 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/algorithms/secparams.c, lib/gnutls_pubkey.c: always put + leading zero to output keys -2007-05-12 Simon Josefsson +2011-05-22 Nikos Mavrogiannopoulos - * tests/Makefile.am: Reorder to work around libtool bug. + * lib/x509/output.c: print the bits together with the security + level. -2007-05-12 Simon Josefsson +2011-05-22 Nikos Mavrogiannopoulos - * NEWS: Fix. + * lib/x509/privkey.c, lib/x509/privkey_pkcs8.c: leaks fixes. -2007-05-12 Simon Josefsson +2011-05-22 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/pkcs11.c: corrected file descriptor leak. -2007-05-12 Simon Josefsson +2011-05-22 Nikos Mavrogiannopoulos - * lgl/m4/vasnprintf.m4, lgl/vasnprintf.c, libextra/opencdk/armor.c, - libextra/opencdk/cipher.c, libextra/opencdk/compress.c, - libextra/opencdk/context.h, libextra/opencdk/filters.h, - libextra/opencdk/kbnode.c, libextra/opencdk/keydb.c, - libextra/opencdk/literal.c, libextra/opencdk/main.c, - libextra/opencdk/main.h, libextra/opencdk/misc.c, - libextra/opencdk/opencdk.h, libextra/opencdk/pubkey.c, - libextra/opencdk/read-packet.c, libextra/opencdk/sig-check.c, - libextra/opencdk/stream.c, libextra/opencdk/verify.c, - libextra/opencdk/write-packet.c: Update. + * libextra/gnutls_extra.c: gnutls_algorithms.h -> algorithms.h -2007-05-11 Simon Josefsson +2011-05-22 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/x509/key_decode.c, lib/x509/key_encode.c: corrected ECC public + key encoding/decoding. -2007-05-11 Simon Josefsson +2011-05-22 Nikos Mavrogiannopoulos - * lib/gnutls_priority.c: (gnutls_set_default_priority): Change order to prefer X.509 over - OpenPGP. + * src/certtool-common.c, src/certtool.c: Corrected bug in public key + import. print information on ECC public keys. -2007-05-03 Simon Josefsson +2011-05-22 Nikos Mavrogiannopoulos - * doc/gendocs_template, gl/override/doc/gendocs_template, - gl/override/doc/gendocs_template.diff: Update. + * lib/includes/gnutls/crypto.h, lib/nettle/pk.c, + lib/x509/key_encode.c, lib/x509/x509_int.h: No need to keep Z in + parameters since the pubkey can always be converted to an affine + point. -2007-05-03 Simon Josefsson +2011-05-22 Nikos Mavrogiannopoulos - * doc/gendocs_template: Revert to upstream gnulib version. + * lib/algorithms/secparams.c, lib/gnutls_pubkey.c, + lib/includes/gnutls/abstract.h, lib/libgnutls.map, + lib/x509/common.c, lib/x509/key_decode.c, lib/x509/mpi.c, + lib/x509/output.c: print information on ECC certificates. -2007-05-03 Simon Josefsson +2011-05-22 Nikos Mavrogiannopoulos - * NEWS: Fix. + * lib/abstract_int.h, lib/algorithms.h, lib/algorithms/ecc.c, + lib/auth/anon.h, lib/auth/ecdh_common.c, lib/auth/ecdh_common.h, + lib/auth/rsa.c, lib/auth/rsa_export.c, lib/ext/ecc.c, + lib/gnutls.asn, lib/gnutls_asn1_tab.c, lib/gnutls_ecc.c, + lib/gnutls_ecc.h, lib/gnutls_errors.c, lib/gnutls_int.h, + lib/gnutls_pk.c, lib/gnutls_pk.h, lib/gnutls_privkey.c, + lib/gnutls_pubkey.c, lib/gnutls_rsa_export.c, + lib/gnutls_rsa_export.h, lib/gnutls_sig.c, lib/gnutls_sig.h, + lib/gnutls_state.c, lib/gnutls_state.h, + lib/includes/gnutls/crypto.h, lib/includes/gnutls/gnutls.h.in, + lib/libgnutls.map, lib/nettle/ecc_test.c, lib/nettle/pk.c, + lib/openpgp/openpgp_int.h, lib/openpgp/pgp.c, + lib/openpgp/privkey.c, lib/x509/Makefile.am, lib/x509/common.c, + lib/x509/common.h, lib/x509/crq.c, lib/x509/key_decode.c, + lib/x509/key_encode.c, lib/x509/mpi.c, lib/x509/privkey.c, + lib/x509/privkey_pkcs8.c, lib/x509/verify.c, lib/x509/x509.c, + lib/x509/x509_int.h, lib/x509/x509_write.c: gnutls_pk_params_st is + used internally to transfer public key parameters. This replaces the + raw bigint_t arrays. -2007-05-03 Simon Josefsson +2011-05-21 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/algorithms.h, lib/algorithms/ciphersuites.c, + lib/algorithms/ecc.c, lib/auth/ecdh_common.c, lib/ext/ecc.c, + lib/ext/ecc.h: Curve TLS ID is being stored in algorithms/ecc.c. -2007-05-03 Simon Josefsson +2011-05-21 Nikos Mavrogiannopoulos - * gl/gnulib.mk, gl/m4/gnulib-comp.m4, gl/m4/socklen.m4, - gl/socket_.h, gl/string_.h, gl/sys_socket_.h, lgl/Makefile.am, - lgl/getpass.c, lgl/m4/fseeko.m4, lgl/m4/gnulib-comp.m4, - lgl/m4/socklen.m4, lgl/m4/stdint.m4, lgl/m4/stdio_h.m4, - lgl/m4/sys_stat_h.m4, lgl/m4/unistd_h.m4, lgl/socket_.h, - lgl/stat_.h, lgl/stdio_.h, lgl/string_.h, lgl/sys_socket_.h, - lgl/sys_stat_.h, lgl/time_.h, lgl/unistd_.h, lgl/wchar_.h: Update. + * configure.ac, lib/Makefile.am, lib/algorithms.h, + lib/algorithms/Makefile.am, lib/algorithms/cert_types.c, + lib/algorithms/ciphers.c, lib/algorithms/ciphersuites.c, + lib/algorithms/ecc.c, lib/algorithms/kx.c, lib/algorithms/mac.c, + lib/algorithms/protocols.c, lib/algorithms/publickey.c, + lib/algorithms/secparams.c, lib/algorithms/sign.c, lib/auth/cert.c, + lib/auth/dh_common.c, lib/auth/dhe.c, lib/auth/ecdh_common.c, + lib/auth/rsa.c, lib/auth/rsa_export.c, lib/ext/session_ticket.c, + lib/ext/signature.c, lib/ext/srp.c, lib/gnutls_algorithms.c, + lib/gnutls_algorithms.h, lib/gnutls_auth.c, lib/gnutls_cert.c, + lib/gnutls_cipher.c, lib/gnutls_cipher_int.c, + lib/gnutls_compress.c, lib/gnutls_constate.c, lib/gnutls_ecc.c, + lib/gnutls_handshake.c, lib/gnutls_kx.c, lib/gnutls_priority.c, + lib/gnutls_record.c, lib/gnutls_sig.c, lib/gnutls_state.c, + lib/gnutls_v2_compat.c, lib/gnutls_x509.c, lib/nettle/ecc_test.c, + lib/nettle/mpi.c, lib/opencdk/read-packet.c, lib/x509/common.h, + lib/x509/privkey_pkcs8.c: gnutls_algorithms.c was split into + manageable files in algorithms/. -2007-05-02 Simon Josefsson +2011-05-21 Nikos Mavrogiannopoulos - * doc/Makefile.am: Add gnutls-logo.pdf, to fix distcheck. + * lib/gnutls_handshake.c: use the _gnutls_session_is_ecc() to check + for ECDH. -2007-05-02 Simon Josefsson +2011-05-21 Nikos Mavrogiannopoulos - * lib/x509/output.c: Fix mem leaks. + * lib/auth/ecdh_common.c, lib/gnutls_algorithms.c, + lib/includes/gnutls/gnutls.h.in, lib/nettle/pk.c, lib/x509/x509.c: + Added OIDs and definitions for ECDSA signature algorithm. -2007-04-29 Simon Josefsson +2011-05-21 Nikos Mavrogiannopoulos - * doc/protocol/draft-otto-tls-sigma-ciphersuite-00.txt: Add. + * src/benchmark-tls.c: Print purpose of testing. -2007-04-24 Timo Schulz +2011-05-21 Nikos Mavrogiannopoulos - * libextra/opencdk/literal.c: missing file. + * src/benchmark-tls.c: compare ECDH and DH on the same security + level. -2007-04-24 Simon Josefsson +2011-05-21 Nikos Mavrogiannopoulos - * doc/protocol/draft-ietf-tls-ecc-new-mac-00.txt, - doc/protocol/draft-ietf-tls-suiteb-00.txt: Add. + * doc/cha-intro-tls.texi, lib/gnutls_algorithms.c, + lib/gnutls_algorithms.h, lib/gnutls_priority.c: Added ability to + specify curves as priority strings. -2007-04-22 Timo Schulz +2011-05-21 Nikos Mavrogiannopoulos - * libextra/opencdk/dummy.c: [no log message] + * lib/nettle/ecc.h: removed ecc_is_valid_idx() prototype -2007-04-22 Timo Schulz +2011-05-21 Nikos Mavrogiannopoulos - * libextra/opencdk/Makefile.am, libextra/opencdk/README, - libextra/opencdk/armor.c, libextra/opencdk/cipher.c, - libextra/opencdk/cipher.h, libextra/opencdk/compress.c, - libextra/opencdk/context.h, libextra/opencdk/encrypt.c, - libextra/opencdk/filters.h, libextra/opencdk/kbnode.c, - libextra/opencdk/keydb.c, libextra/opencdk/keygen.c, - libextra/opencdk/keylist.c, libextra/opencdk/keyserver.c, - libextra/opencdk/main.c, libextra/opencdk/main.h, - libextra/opencdk/md.c, libextra/opencdk/md.h, - libextra/opencdk/misc.c, libextra/opencdk/new-packet.c, - libextra/opencdk/opencdk.h, libextra/opencdk/packet.h, - libextra/opencdk/plaintext.c, libextra/opencdk/pubkey.c, - libextra/opencdk/read-packet.c, libextra/opencdk/seskey.c, - libextra/opencdk/sig-check.c, libextra/opencdk/sign.c, - libextra/opencdk/stream.c, libextra/opencdk/stream.h, - libextra/opencdk/sym-cipher.c, libextra/opencdk/trustdb.c, - libextra/opencdk/types.h, libextra/opencdk/verify.c, - libextra/opencdk/write-packet.c: replace the old build-in opencdk - version with the most recent cvs version. + * lib/nettle/ecc.h, lib/nettle/ecc_make_key.c, + lib/nettle/ecc_map.c, lib/nettle/ecc_mulmod.c, + lib/nettle/ecc_points.c, lib/nettle/ecc_projective_add_point.c, + lib/nettle/ecc_projective_dbl_point.c, + lib/nettle/ecc_projective_dbl_point_3.c, + lib/nettle/ecc_shared_secret.c, lib/nettle/ecc_test.c, + lib/nettle/ecc_verify_hash.c, lib/nettle/pk.c: Dropped ltc_ from + function and type names. -2007-04-22 Simon Josefsson +2011-05-21 Nikos Mavrogiannopoulos - * configure.in: Check for OpenCDK function that is only available in - OpenCDK 0.6.0. + * tests/x509cert.c: corrected memory leak. -2007-04-21 Simon Josefsson +2011-05-21 Nikos Mavrogiannopoulos - * doc/TODO: Add. + * lib/nettle/cipher.c: use new nettle's name for gcm_aes_auth(). -2007-04-21 Simon Josefsson +2011-05-21 Simon Josefsson - * doc/protocol/draft-badra-tls-password-00.txt, - doc/protocol/draft-badra-tls-password-ext-00.txt: Add. + * gl/hmac-md5.c, gl/m4/valgrind-tests.m4, gl/memxor.c, gl/memxor.h, + gl/override/lib/hmac-md5.c.diff, gl/override/lib/memxor.c.diff, + gl/override/lib/memxor.h.diff, + gl/override/m4/valgrind-tests.m4.diff: Override gnulib code with fix + for memxor and valgrind. -2007-04-20 Timo Schulz +2011-05-21 Nikos Mavrogiannopoulos - * libextra/gnutls_openpgp.c: Adjustments for the opencdk migration - and some cleanups. + * lib/auth/anon_ecdh.c, lib/auth/dh_common.c, lib/auth/dhe.c, + lib/auth/ecdh_common.c, lib/gnutls_algorithms.c, + lib/gnutls_global.c, lib/gnutls_handshake.c, lib/gnutls_state.c, + lib/gnutls_state.h, lib/includes/gnutls/gnutls.h.in: Added support + for ECDHE-RSA ciphersuites. -2007-04-20 Timo Schulz +2011-05-21 Nikos Mavrogiannopoulos - * libextra/openpgp/compat.c, libextra/openpgp/extras.c, - libextra/openpgp/gnutls_openpgp.h, libextra/openpgp/openpgp.h, - libextra/openpgp/pgp.c, libextra/openpgp/pgpverify.c, - libextra/openpgp/privkey.c, libextra/openpgp/xml.c: First bunch of - patches for the opencdk migration. + * tests/eagain-common.h: inlined function to avoid gcc warnings -2007-04-19 Simon Josefsson +2011-05-21 Nikos Mavrogiannopoulos - * libextra/openpgp/extras.c: (gnutls_openpgp_keyring_import): Make it work (it seems the old code - didn't work). Patch from ludo@chbouib.org (Ludovic Courtès). + * lib/nettle/Makefile.am, lib/nettle/ecc.h, lib/nettle/ecc_free.c, + lib/nettle/ecc_make_key.c, lib/nettle/ecc_map.c, + lib/nettle/ecc_mulmod.c, lib/nettle/ecc_points.c, + lib/nettle/ecc_projective_add_point.c, + lib/nettle/ecc_projective_dbl_point.c, + lib/nettle/ecc_projective_dbl_point_3.c, + lib/nettle/ecc_shared_secret.c, lib/nettle/ecc_sign_hash.c, + lib/nettle/ecc_test.c, lib/nettle/ecc_verify_hash.c, + lib/nettle/ltc_ecc_map.c, lib/nettle/ltc_ecc_mulmod.c, + lib/nettle/ltc_ecc_points.c, + lib/nettle/ltc_ecc_projective_add_point.c, + lib/nettle/ltc_ecc_projective_dbl_point.c: Added previous code that + was fixed for y^2 = x^3 - 3x + b, because all secg curves have a + fixed to -3. Simplified file naming scheme. -2007-04-18 Simon Josefsson +2011-05-21 Nikos Mavrogiannopoulos - * doc/gnutls.texi: Mention P12 structure. + * lib/gnutls_algorithms.c, lib/gnutls_int.h: Added SECP224R1. -2007-04-18 Simon Josefsson +2011-05-21 Nikos Mavrogiannopoulos - * tests/tlsia.c: Check return codes from init functions. + * src/Makefile.am, src/benchmark-cipher.c, src/benchmark-tls.c, + src/benchmark.c, src/benchmark.h: updates to benchmarks. -2007-04-18 Simon Josefsson +2011-05-20 Nikos Mavrogiannopoulos - * NEWS, lib/x509/sign.c: Write NULL in parameters for RSA signing. + * lib/gnutls_algorithms.c, lib/gnutls_int.h, lib/gnutls_priority.c, + lib/nettle/ecc_test.c: Added curve SECP512R1. -2007-04-17 Simon Josefsson +2011-05-20 Nikos Mavrogiannopoulos - * NEWS, src/certtool-cfg.c, src/certtool.c: Use current time as - default serial number. + * src/benchmark-cipher.c, src/benchmark-common.c, src/benchmark.c: + benchmark ECDH and DH. -2007-04-17 Simon Josefsson +2011-05-20 Simon Josefsson - * NEWS: Add. + * build-aux/config.rpath, gl/Makefile.am, gl/alignof.h, + gl/glthread/lock.c, gl/glthread/lock.h, gl/glthread/threadlib.c, + gl/hmac-md5.c, gl/intprops.h, gl/m4/gnulib-cache.m4, + gl/m4/gnulib-comp.m4, gl/m4/strerror.m4, gl/m4/strerror_r.m4, + gl/m4/thread.m4, gl/m4/valgrind-tests.m4, gl/m4/yield.m4, + gl/memxor.c, gl/memxor.h, gl/stdint.in.h, gl/strerror-impl.h, + gl/strerror.c, gl/strerror_r.c, gl/tests/Makefile.am, + gl/tests/dummy.c, gl/tests/glthread/thread.c, + gl/tests/glthread/thread.h, gl/tests/glthread/yield.h, + gl/tests/test-intprops.c, gl/tests/test-lock.c, + gl/tests/test-strerror.c, gl/tests/test-strerror_r.c: Update gnulib + files. -2007-04-16 Simon Josefsson +2011-05-20 Nikos Mavrogiannopoulos + + * lib/auth/ecdh_common.c, lib/gnutls_handshake.c, src/common.c: + client side ECC fixes. + +2011-05-20 Nikos Mavrogiannopoulos + + * src/cli.c: corrected debugging. + +2011-05-20 Nikos Mavrogiannopoulos + + * lib/auth/ecdh_common.c, lib/gnutls_algorithms.c, + lib/gnutls_algorithms.h, lib/gnutls_global.c, + lib/includes/gnutls/crypto.h, lib/nettle/ecc.h, + lib/nettle/ecc_free.c, lib/nettle/ecc_make_key.c, + lib/nettle/ecc_shared_secret.c, lib/nettle/ecc_sign_hash.c, + lib/nettle/ecc_test.c, lib/nettle/ecc_verify_hash.c, + lib/nettle/ltc_ecc_map.c, lib/nettle/ltc_ecc_mulmod.c, + lib/nettle/ltc_ecc_points.c, + lib/nettle/ltc_ecc_projective_add_point.c, + lib/nettle/ltc_ecc_projective_dbl_point.c, lib/nettle/pk.c, + lib/x509/x509_int.h: Account 'A' in calculations for point doubling. + +2011-05-20 Nikos Mavrogiannopoulos + + * gl/Makefile.am, gl/alignof.h, gl/close-hook.c, gl/close-hook.h, + gl/error.c, gl/error.h, gl/fd-hook.c, gl/fd-hook.h, + gl/glthread/lock.c, gl/glthread/lock.h, gl/glthread/threadlib.c, + gl/intprops.h, gl/m4/error.m4, gl/m4/fcntl_h.m4, gl/m4/fseeko.m4, + gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, gl/m4/inttypes.m4, + gl/m4/manywarnings.m4, gl/m4/memchr.m4, gl/m4/netdb_h.m4, + gl/m4/stdint.m4, gl/m4/stdio_h.m4, gl/m4/strerror.m4, + gl/m4/strerror_r.m4, gl/m4/string_h.m4, gl/m4/sys_uio_h.m4, + gl/m4/thread.m4, gl/m4/unistd_h.m4, gl/m4/warnings.m4, + gl/m4/wchar_h.m4, gl/m4/yield.m4, gl/malloc.c, gl/netdb.in.h, + gl/realloc.c, gl/sockets.c, gl/stdint.in.h, gl/stdio.in.h, + gl/stdlib.in.h, gl/strerror-impl.h, gl/strerror.c, gl/strerror_r.c, + gl/string.in.h, gl/sys_socket.in.h, gl/sys_uio.in.h, + gl/tests/Makefile.am, gl/tests/dummy.c, gl/tests/fcntl.in.h, + gl/tests/glthread/thread.c, gl/tests/glthread/thread.h, + gl/tests/glthread/yield.h, gl/tests/intprops.h, + gl/tests/inttypes.in.h, gl/tests/test-fcntl-h.c, + gl/tests/test-intprops.c, gl/tests/test-inttypes.c, + gl/tests/test-lock.c, gl/tests/test-strerror.c, + gl/tests/test-strerror_r.c, gl/tests/test-sys_socket.c, + gl/tests/test-sys_uio.c, gl/unistd.in.h, gl/verify.h, gl/wchar.in.h: + Added new gnulib and error.h. + +2011-05-20 Nikos Mavrogiannopoulos + + * lib/gnutls_global.c: removed debugging. + +2011-05-20 Nikos Mavrogiannopoulos + + * cfg.mk: added error.h + +2011-05-16 Nikos Mavrogiannopoulos + + * lib/Makefile.am, lib/auth/Makefile.am, lib/auth/anon.h, + lib/auth/anon_ecdh.c, lib/auth/ecdh_common.c, + lib/auth/ecdh_common.h, lib/ext/Makefile.am, lib/ext/ecc.c, + lib/ext/ecc.h, lib/gnutls_algorithms.c, lib/gnutls_algorithms.h, + lib/gnutls_dh.c, lib/gnutls_ecc.c, lib/gnutls_ecc.h, + lib/gnutls_errors.c, lib/gnutls_extensions.c, lib/gnutls_global.c, + lib/gnutls_int.h, lib/gnutls_pk.c, lib/gnutls_pk.h, + lib/gnutls_priority.c, lib/gnutls_state.c, lib/gnutls_state.h, + lib/includes/gnutls/crypto.h, lib/includes/gnutls/gnutls.h.in, + lib/nettle/Makefile.am, lib/nettle/ecc.h, lib/nettle/ecc_free.c, + lib/nettle/ecc_make_key.c, lib/nettle/ecc_shared_secret.c, + lib/nettle/ecc_sign_hash.c, lib/nettle/ecc_test.c, + lib/nettle/ecc_verify_hash.c, lib/nettle/gnettle.h, + lib/nettle/ltc_ecc_map.c, lib/nettle/ltc_ecc_mulmod.c, + lib/nettle/ltc_ecc_points.c, + lib/nettle/ltc_ecc_projective_add_point.c, + lib/nettle/ltc_ecc_projective_dbl_point.c, + lib/nettle/mp_unsigned_bin.c, lib/nettle/mpi.c, lib/nettle/multi.c, + lib/nettle/pk.c, lib/nettle/rnd.c, lib/nettle/rnd.h, + lib/x509/x509_int.h: Initial ecc support. Adds support for anonymous + ECDH ciphersuites. - * NEWS, configure.in: Bump versions. +2011-05-17 Nikos Mavrogiannopoulos -2007-04-16 Simon Josefsson + * src/benchmark-common.c, src/benchmark.h: more win32 fixes. - * ChangeLog: [no log message] +2011-05-17 Nikos Mavrogiannopoulos -2007-04-16 Simon Josefsson + * src/benchmark-common.c: corrections in win32 version. - * NEWS: Version 1.7.8. +2011-05-17 Nikos Mavrogiannopoulos -2007-04-16 Simon Josefsson + * lib/ext/signature.c, lib/gnutls_extensions.c: Some debugging moved + to a higher level. - * lib/x509/x509_write.c: Doc fix. +2011-05-17 Nikos Mavrogiannopoulos -2007-04-16 Simon Josefsson + * src/Makefile.am, src/benchmark-common.c, src/benchmark-tls.c, + src/benchmark.c, src/benchmark.h, tests/eagain-common.h: Added + benchmark utility that tests the encryption time in TLS packets. - * tests/gc.c: Need to init libgcrypt with secure memory hooks. +2011-05-17 Nikos Mavrogiannopoulos -2007-04-16 Simon Josefsson + * src/p11common.c: corrected message reporting. - * NEWS, doc/manpages/Makefile.am: Add. +2011-05-16 Nikos Mavrogiannopoulos -2007-04-16 Simon Josefsson + * src/p11common.c: Corrected PIN caching. - * includes/gnutls/gnutls.h.in: Reorder to make it compile. +2011-05-16 Nikos Mavrogiannopoulos -2007-04-16 Simon Josefsson + * lib/gnutls_record.c: assign value - * gl/m4/gnulib-comp.m4, gl/string_.h, lgl/Makefile.am, - lgl/float+.h, lgl/m4/gnulib-comp.m4, lgl/m4/intl.m4, - lgl/m4/longdouble.m4, lgl/m4/stdint.m4, lgl/m4/stdio_h.m4, - lgl/m4/vasnprintf.m4, lgl/printf-args.c, lgl/printf-args.h, - lgl/printf-parse.c, lgl/stdio_.h, lgl/string_.h, lgl/time_.h, - lgl/vasnprintf.c, lgl/wchar_.h: Update. +2011-05-16 Nikos Mavrogiannopoulos -2007-04-16 Simon Josefsson + * lib/nettle/mpi.c: reduce the repetitions for rabin-miller to a + sensible value. - * lgl/gc-libgcrypt.c, lib/gnutls_handshake.c, - lib/gnutls_session_pack.c, lib/x509/output.c, lib/x509/verify.c: Fix - warnings, tiny patch from Andreas Metzler - . +2011-05-14 Nikos Mavrogiannopoulos -2007-04-12 Simon Josefsson + * doc/cha-intro-tls.texi: discuss missing algorithms. - * doc/TODO: Fix. +2011-05-10 Nikos Mavrogiannopoulos -2007-04-12 Simon Josefsson + * NEWS: updated - * doc/TODO: Fix. +2011-05-10 Nikos Mavrogiannopoulos -2007-04-12 Simon Josefsson + * lib/gnutls_str.c, lib/gnutls_str.h, lib/pkcs11.c: Correctly import + and export pkcs11-urls with ID field set. - * doc/TODO: Add. +2011-05-10 Nikos Mavrogiannopoulos -2007-04-11 Simon Josefsson + * lib/nettle/egd.c, lib/opencdk/literal.c, lib/opencdk/misc.c, + lib/opencdk/read-packet.c, lib/pkcs11.c, lib/x509/common.c, + lib/x509_b64.c, lib/x509_b64.h: eliminated last instances of + strcpy() and strcat() to keep pendantics happy. - * NEWS, includes/gnutls/gnutls.h.in, lib/gnutls_psk.c: (gnutls_psk_set_client_credentials): Fix prototype. +2011-05-09 Nikos Mavrogiannopoulos -2007-04-10 Simon Josefsson + * doc/cha-intro-tls.texi: update on compatibility issues text. - * NEWS: Add. +2011-05-09 Nikos Mavrogiannopoulos -2007-04-10 Simon Josefsson + * lib/pkcs11.c: doc update in gnutls_pkcs11_init() - * doc/examples/Makefile.am, lib/Makefile.am, src/cli.c, src/serv.c: - Respect ENABLE_AUTHZ. +2011-05-08 Nikos Mavrogiannopoulos -2007-04-10 Simon Josefsson + * doc/cha-preface.texi: removed references that produced nothing in + pdf. - * lib/gnutls_extensions.c: Make tls-authz conditional on - ENABLE_AUTHZ. +2011-05-08 Nikos Mavrogiannopoulos -2007-04-10 Simon Josefsson + * doc/cha-intro-tls.texi: Added missing nodes. - * configure.in: Add anon conditional. +2011-05-08 Nikos Mavrogiannopoulos -2007-04-10 Simon Josefsson + * doc/cha-intro-tls.texi: Added discussion on compatibility issues. - * configure.in: Fix --disable-*. +2011-05-07 Nikos Mavrogiannopoulos -2007-04-10 Simon Josefsson + * libextra/gnutls_openssl.c: undef X509_NAME before including + openssl.h. - * configure.in: Add --disable-tls-authorization. +2011-05-07 Nikos Mavrogiannopoulos -2007-04-10 Simon Josefsson + * NEWS, doc/cha-gtls-app.texi, lib/accelerated/intel/aes-x86.c, + lib/auth/rsa.c, lib/auth/rsa_export.c, lib/auth/srp.c, + lib/gnutls_buffers.c, lib/gnutls_dtls.c, lib/gnutls_errors.c, + lib/gnutls_errors.h, lib/gnutls_global.c, lib/gnutls_global.h, + lib/gnutls_handshake.c, lib/gnutls_record.c, + lib/includes/gnutls/gnutls.h.in, lib/libgnutls.map, src/cli.c, + src/serv.c: Added gnutls_global_set_audit_log_function() that allows + associating TLS session with several important issues. - * libextra/gnutls_openpgp.c: (gnutls_certificate_set_openpgp_key): Allocate certificate structure - properly. Tiny patch from ludo@chbouib.org (Ludovic Courtès). +2011-05-07 Nikos Mavrogiannopoulos -2007-04-06 Simon Josefsson + * NEWS, lib/x509/crq.c: updates - * src/cli.c: Make -d work again after last change. +2011-05-07 Nikos Mavrogiannopoulos -2007-04-06 Simon Josefsson + * NEWS, lib/includes/gnutls/x509.h, lib/libgnutls.map, + lib/x509/crq.c, lib/x509/x509_write.c, tests/crq_key_id.c: Added + gnutls_x509_crq_verify(). - * NEWS: Add. +2011-05-07 Nikos Mavrogiannopoulos -2007-04-06 Simon Josefsson + * doc/manpages/certtool.1, src/Makefile.am, src/certtool-common.c, + src/certtool-common.h, src/certtool.c, src/common.c, + src/p11common.c, src/p11common.h, src/pkcs11.c: certtool can now + load private keys and public keys from PKCS #11 tokens (via URLs). - * lib/x509/x509.c: (gnutls_x509_crt_get_key_id): Don't fail on non-RSA/DSA public keys. +2011-05-07 Nikos Mavrogiannopoulos -2007-04-04 Simon Josefsson + * lib/pkcs11_privkey.c: gnutls_pkcs11_privkey_import_url() will + correctly set algorithm of private key. - * src/cli-gaa.c, src/cli.gaa, src/common.c, src/common.h, - src/serv-gaa.c, src/serv.gaa: Use gnutls_cipher_suite_info. +2011-05-07 Nikos Mavrogiannopoulos -2007-04-04 Simon Josefsson + * src/Makefile.am, src/certtool.c, src/p11tool.c: No libgnutls-extra + is required for certtool or p11tool. - * NEWS, includes/gnutls/gnutls.h.in, lib/gnutls_algorithms.c: Add - gnutls_cipher_suite_info API, suggested by Howard Chu - . +2011-05-07 Nikos Mavrogiannopoulos -2007-04-04 Simon Josefsson + * tests/rng-fork.c: Do not use /tmp for temporary file. Just use the + local (test) directory. - * src/common.c: Don't hard code algorithm list. +2011-05-05 Nikos Mavrogiannopoulos -2007-04-04 Simon Josefsson + * tests/hostname-check.c: Added a check to verify that we don't try + forever trying to verify too many wildcards. - * NEWS, includes/gnutls/gnutls.h.in, lib/gnutls_algorithms.c: Add - new APIs to list supported algorithms: gnutls_cipher_list, - gnutls_mac_list, gnutls_compression_list, gnutls_protocol_list, - gnutls_certificate_type_list, and gnutls_kx_list. Suggested by - Howard Chu . +2011-05-05 Nikos Mavrogiannopoulos -2007-04-04 Simon Josefsson + * THANKS, lib/gnutls_str.c, lib/gnutls_str.h, lib/openpgp/pgp.c, + lib/x509/rfc2818_hostname.c: _gnutls_hostname_compare() was + incredibly slow when over ten wildcards were present. Set a limit on + 6 wildcards to avoid any denial of service attack. Reported by Kalle + Olavi Niemitalo. - * lib/gnutls_algorithms.c, lib/gnutls_algorithms.h: Simplify kx - definition, since gnutls-extra no longer touches it. +2011-05-05 Nikos Mavrogiannopoulos -2007-04-04 Simon Josefsson + * lib/gnutls_str.c, lib/opencdk/misc.c: Use c_toupper to avoid + converting characters non in the english ASCII set. Reported by + Kalle Olavi Niemitalo. - * src/cli.c: Init the library immediately (for print_list(), called - by gaa_parser, to be able to call gnutls functions). +2011-05-05 Nikos Mavrogiannopoulos -2007-04-03 Simon Josefsson + * lib/x509/verify-high.c: use > 0 instead of == 1. - * src/Makefile.am: $(LIBOPENCDK_LIBS) should be necessary here, - since libgnutls-extra links to it. +2011-05-03 Nikos Mavrogiannopoulos -2007-04-03 Simon Josefsson + * .gitignore, NEWS, lib/gnutls_cert.c, + lib/includes/gnutls/gnutls.h.in, lib/includes/gnutls/x509.h, + lib/libgnutls.map, lib/x509/verify-high.c, tests/Makefile.am, + tests/x509cert.c: Added gnutls_certificate_get_issuer() to allow + getting the issuer a certificate from the certificate credentials + structure. - * libextra/Makefile.am: Fix LIBOPENCDK_LIBS. No need for - AM_CPPFLAGS += $(LIBOPENCDK_CFLAGS), the new macro add necessary - -I's to CPPFLAGS automatically. +2011-04-30 Andreas Metzler -2007-04-03 Simon Josefsson + * doc/manpages/p11tool.1: escape dashes in manpage Signed-off-by: Nikos Mavrogiannopoulos - * configure.in: Need stddef.h for opencdk.h. +2011-05-01 Nikos Mavrogiannopoulos -2007-04-03 Simon Josefsson + * .gitignore, gl/m4/.gitignore, gl/m4/byteswap.m4, + gl/m4/codeset.m4, gl/m4/fcntl-o.m4, gl/m4/fcntl_h.m4, + gl/m4/func.m4, gl/m4/gettext.m4, gl/m4/glibc2.m4, gl/m4/glibc21.m4, + gl/m4/hmac-md5.m4, gl/m4/iconv.m4, gl/m4/intdiv0.m4, gl/m4/intl.m4, + gl/m4/intldir.m4, gl/m4/intlmacosx.m4, gl/m4/intmax.m4, + gl/m4/inttypes-pri.m4, gl/m4/lcmessage.m4, gl/m4/ld-output-def.m4, + gl/m4/ld-version-script.m4, gl/m4/lock.m4, gl/m4/md5.m4, + gl/m4/memmem.m4, gl/m4/memxor.m4, gl/m4/nls.m4, gl/m4/po.m4, + gl/m4/printf-posix.m4, gl/m4/progtest.m4, gl/m4/strcase.m4, + gl/m4/strdup.m4, gl/m4/strings_h.m4, gl/m4/strverscmp.m4, + gl/m4/threadlib.m4, gl/m4/time_r.m4, gl/m4/uintmax_t.m4, + gl/m4/valgrind-tests.m4, gl/m4/vasprintf.m4, gl/m4/visibility.m4, + gl/m4/vsnprintf.m4, gl/tests/.gitignore, gl/tests/intprops.h, + gl/tests/test-byteswap.c, gl/tests/test-func.c, + gl/tests/test-hmac-md5.c, gl/tests/test-md5.c, + gl/tests/test-strings.c, gl/tests/test-strverscmp.c, + gl/tests/test-u64.c, gl/tests/test-vasprintf.c, + gl/tests/test-vsnprintf.c: Added missing m4 gl files. - * gl/getpass.c, gl/getpass.h, gl/gnulib.mk, gl/m4/getpass.m4, - gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, lgl/.cvsignore, - lgl/Makefile.am, lgl/getdelim.c, lgl/getdelim.h, lgl/getline.c, - lgl/getline.h, lgl/getpass.c, lgl/getpass.h, lgl/m4/getdelim.m4, - lgl/m4/getline.m4, lgl/m4/getpass.m4, lgl/m4/gnulib-cache.m4, - lgl/m4/gnulib-comp.m4: Update. +2011-05-01 Nikos Mavrogiannopoulos -2007-04-03 Simon Josefsson + * NEWS: documented previous updates. - * configure.in: Fix LIBGNUTLS_EXTRA_* for cdk changes. +2011-04-30 Nikos Mavrogiannopoulos -2007-04-03 Simon Josefsson + * tests/suite/testcompat-main: Check for openssl 1.0.x to test DTLS. - * NEWS: Add. +2011-04-28 Ludovic Courtès -2007-04-03 Simon Josefsson + * guile/modules/Makefile.am, guile/modules/gnutls/build/tests.scm, + guile/tests/anonymous-auth.scm, guile/tests/errors.scm, + guile/tests/openpgp-auth.scm, guile/tests/openpgp-keyring.scm, + guile/tests/openpgp-keys.scm, guile/tests/pkcs-import-export.scm, + guile/tests/session-record-port.scm, guile/tests/srp-base64.scm, + guile/tests/x509-auth.scm, guile/tests/x509-certificates.scm: guile: + Fix tests to match the `exit' behavior introduced in Guile 2.0.1. This fix makes tests behave correctly wrt. to the Guile bug fix at - * configure.in, m4/opencdk.m4: Use AC_LIB_HAVE_LINKFLAGS to find - opencdk, remove opencdk.m4. + . -2007-04-03 Simon Josefsson +2011-04-23 Nikos Mavrogiannopoulos - * build-aux/gendocs.sh, gl/stdbool_.h, lgl/Makefile.am, - lgl/alloca_.h, lgl/asprintf.c, lgl/m4/gnulib-cache.m4, - lgl/m4/gnulib-comp.m4, lgl/m4/iconv.m4, lgl/m4/intdiv0.m4, - lgl/stat_.h, lgl/stdbool_.h, lgl/vasprintf.c: Update. + * lib/gnutls.pc.in: removed pakchois dependency -2007-03-28 Simon Josefsson +2011-04-23 Nikos Mavrogiannopoulos - * lib/x509/output.c: No need to error about unknown algorithm, it - already says unknown. + * NEWS, configure.ac: updated for release -2007-03-28 Simon Josefsson +2011-04-23 Nikos Mavrogiannopoulos - * lib/gnutls_algorithms.c: Remove #if GNUTLS_PK_LOOP madness that - hides problems. (gnutls_pk_algorithm_get_name): Don't return GOST for unsupported - algorithms (e.g., ECC). + * tests/x509dn.c: added missing header. -2007-03-28 Simon Josefsson +2011-04-23 Nikos Mavrogiannopoulos - * lib/gnutls_str.c: No need for vasprintf.h. + * lib/accelerated/intel/Makefile.am: pass tag=CC to libtool. It + seems automake cannot really work with assembler sources. -2007-03-28 Simon Josefsson +2011-04-23 Nikos Mavrogiannopoulos - * gl/getaddrinfo.c, gl/string_.h, gl/version-etc.c, lgl/.cvsignore, - lgl/Makefile.am, lgl/asprintf.c, lgl/des.c, lgl/dummy.c, - lgl/float+.h, lgl/m4/gnulib-comp.m4, lgl/m4/printf-posix.m4, - lgl/m4/stdio_h.m4, lgl/m4/vasnprintf.m4, lgl/m4/vasprintf.m4, - lgl/printf-parse.c, lgl/stdio_.h, lgl/string_.h, lgl/vasnprintf.c, - lgl/vasprintf.c, lgl/vasprintf.h: Update. + * lib/gnutls_pcert.c, lib/openpgp/gnutls_openpgp.c: documentation + fixes. -2007-03-21 Simon Josefsson +2011-04-22 Nikos Mavrogiannopoulos - * doc/examples/ex-crq.c, doc/examples/ex-pkcs12.c, - doc/examples/ex-rfc2818.c, src/crypt.c: Use size_t at appropriate - places. Tiny patch by Deanna Phillips . + * cfg.mk: start counting from 2009 for ChangeLog. -2007-03-21 Simon Josefsson +2011-04-22 Nikos Mavrogiannopoulos - * tests/anonself.c: Need netinet/in.h. Tiny patch from Deanna - Phillips . + * tests/hostname-check.c: Removed incorrect test on IPAddresses (was + relying on IPaddresses encoded as text) -2007-03-21 Simon Josefsson +2011-04-21 Nikos Mavrogiannopoulos - * tests/pkcs1-padding/pkcs1-pad: Trim whitespace from 'wc' output. - Tiny patch from Deanna Phillips . + * lib/x509/rfc2818_hostname.c: gnutls_x509_crt_check_hostname() will + never compare against IPaddress. (previous comparison was flawed) -2007-03-15 Simon Josefsson +2011-04-21 Nikos Mavrogiannopoulos - * doc/TODO: Add. + * doc/examples/ex-cert-select.c, lib/auth/cert.c, lib/auth/cert.h, + lib/gnutls_cert.c, lib/includes/gnutls/abstract.h, + lib/includes/gnutls/gnutls.h.in, lib/libgnutls.map, src/certtool.c, + src/cli.c, tests/x509dn.c: Added + gnutls_certificate_set_retrieve_function2() to replace + gnutls_certificate_set_retrieve_function(). The new one is a + efficient for busy servers because it eliminates the need for the + server to encode the certificate to DER format. -2007-03-15 Simon Josefsson +2011-04-20 Nikos Mavrogiannopoulos - * lib/x509/x509_write.c: (gnutls_x509_crt_set_version): Doc fix, tiny patch from Florian - Weimer . + * lib/gnutls_alert.c, lib/gnutls_errors.c, + lib/includes/gnutls/gnutls.h.in: Added GNUTLS_E_USER_ERROR -2007-03-12 Simon Josefsson +2011-04-20 Nikos Mavrogiannopoulos - * gl/gnulib.mk, gl/m4/gnulib-comp.m4, gl/m4/netinet_in_h.m4, - gl/m4/sys_socket_h.m4, gl/netinet_in_.h, gl/socket_.h, - lgl/Makefile.am, lgl/des.c, lgl/des.h, lgl/dummy.c, - lgl/gc-gnulib.c, lgl/m4/gnulib-comp.m4, lgl/m4/snprintf.m4, - lgl/m4/stdbool.m4, lgl/m4/stdio_h.m4, lgl/m4/sys_socket_h.m4, - lgl/m4/vasnprintf.m4, lgl/snprintf.c, lgl/socket_.h, - lgl/stdbool_.h, lgl/stdint_.h, lgl/stdio_.h, lgl/vasnprintf.c, - lgl/vasnprintf.h, lgl/vasprintf.h: Update. + * lib/auth/cert.c, lib/ext/signature.c, lib/ext/signature.h, + lib/gnutls_pcert.c, lib/includes/gnutls/abstract.h, + lib/libgnutls.map: Eliminated the need for sign_algo in + gnutls_pcert_st. This means that we don't follow RFC5246 by letter, + but there wasn't any other implementation using the sign_algorithm + part of the certificate selection, and this helps reduce complexity. -2007-03-07 Simon Josefsson +2011-04-20 Nikos Mavrogiannopoulos - * doc/protocol/draft-ietf-tls-rfc4346-bis-03.txt: Update, + * src/cfg/Makefile.am, src/cfg/README: Added readme for libcfg. -2007-03-07 Simon Josefsson +2011-04-20 Nikos Mavrogiannopoulos - * lib/gnutls_buffers.c: Simplify error handling. + * configure.ac: No need to check for -maes and -mpclmul with the + current AES-NI code. -2007-03-07 Simon Josefsson +2011-04-17 Nikos Mavrogiannopoulos - * NEWS: Add. + * .gitignore: updated -2007-03-07 Simon Josefsson +2011-04-17 Nikos Mavrogiannopoulos - * lib/gnutls_priority.c: Doc fix. + * lib/Makefile.am, lib/abstract_int.h, lib/auth/cert.c, + lib/auth/cert.h, lib/auth/dhe.c, lib/auth/rsa.c, + lib/auth/rsa_export.c, lib/auth/srp_rsa.c, lib/ext/signature.c, + lib/ext/signature.h, lib/gnutls_algorithms.c, lib/gnutls_cert.c, + lib/gnutls_cert.h, lib/gnutls_handshake.c, lib/gnutls_int.h, + lib/gnutls_mpi.c, lib/gnutls_pcert.c, lib/gnutls_privkey.c, + lib/gnutls_pubkey.c, lib/gnutls_sig.c, lib/gnutls_sig.h, + lib/gnutls_state.c, lib/gnutls_ui.c, lib/gnutls_x509.c, + lib/gnutls_x509.h, lib/includes/gnutls/abstract.h, + lib/opencdk/pubkey.c, lib/openpgp/gnutls_openpgp.c, + lib/openpgp/gnutls_openpgp.h, lib/openpgp/openpgp_int.h, + lib/openpgp/pgp.c, lib/openpgp/pgpverify.c, lib/openpgp/privkey.c, + lib/pkcs11_int.h, lib/x509/common.h, lib/x509/pkcs12_encr.c, + lib/x509/sign.c, lib/x509/verify-high.c, lib/x509/verify.c, + lib/x509/x509.c, lib/x509/x509_int.h: Combined external abstract API + with internal usage of gnutls_cert. This results to a + gnutls_pcert_st struct exported in abstract.h. This change will allow a certificate retrieval callback that does + not require gnutls to decode or encode the provided certificate. -2007-03-07 Simon Josefsson +2011-04-16 Nikos Mavrogiannopoulos - * configure.in: Bump due to added APIs. + * NEWS, lib/gnutls_priority.c: Restored HMAC-MD5 for compatibility. + Although considered weak, several sites require it for connection. + It is enabled for "NORMAL" and "PERFORMANCE" priority strings. -2007-03-07 Simon Josefsson +2011-04-16 Nikos Mavrogiannopoulos - * lib/gnutls_priority.c: Prefer aes256. + * lib/accelerated/intel/aes-x86.c: Try to detect AES-NI on Intel and + AMD machines only. -2007-03-06 Simon Josefsson +2011-04-16 Nikos Mavrogiannopoulos - * doc/manpages/Makefile.am: Update. + * NEWS, configure.ac, lib/accelerated/intel/Makefile.am, + lib/accelerated/intel/README, lib/accelerated/intel/aes-x86.c, + lib/accelerated/intel/asm/appro-aes-x86-64.s, + lib/accelerated/intel/asm/appro-aes-x86.s, + lib/accelerated/intel/asm/x64_iaesx64.s, + lib/accelerated/intel/asm/x86_iaesx86.s, + lib/accelerated/intel/iaes_asm_interface.h, + lib/accelerated/intel/iaesni.h, lib/accelerated/intel/license.txt: + Added Andy Polyakov's version of AES-NI optimizations. -2007-03-06 Simon Josefsson +2011-04-16 Nikos Mavrogiannopoulos - * GNUmakefile, maint-cfg.mk: Work around config.rpath issue. + * .gitignore: more files to ignore -2007-03-06 Simon Josefsson +2011-04-16 Nikos Mavrogiannopoulos - * lgl/stdio_.h: Update. + * src/tests.c: COMP-ZLIB -> COMP-DEFLATE -2007-03-05 Simon Josefsson +2011-04-16 Nikos Mavrogiannopoulos - * src/serv.c: Use libgnutls' priorities. + * lib/Makefile.am, m4/hooks.m4: Link with pthreads. -2007-03-05 Simon Josefsson +2011-04-16 Nikos Mavrogiannopoulos - * src/cli.c: Fix. + * doc/Makefile.am: read API from new directories as well. -2007-03-05 Simon Josefsson +2011-04-16 Nikos Mavrogiannopoulos - * tests/dhepskself.c: Remove priority setting. Fix output. + * lib/accelerated/Makefile.am: corrected filename -2007-03-05 Simon Josefsson +2011-04-16 Nikos Mavrogiannopoulos - * doc/examples/ex-client-authz.c, doc/examples/ex-client-srp.c, - doc/examples/ex-client2.c, doc/examples/ex-serv-pgp.c: Remove - confusing priority setting stuff. + * lib/ext/session_ticket.c: removed conditional compilation -2007-03-05 Simon Josefsson +2011-04-16 Nikos Mavrogiannopoulos - * .cvsignore, build-aux/.cvsignore, doc/.cvsignore: [no log message] + * lib/ext/session_ticket.h: removed conditional compilation. -2007-03-05 Simon Josefsson +2011-04-16 Nikos Mavrogiannopoulos - * lib/ext_authz.c: Don't assert when no authz. + * lib/accelerated/cryptodev.c: use correct header. -2007-03-05 Simon Josefsson +2011-04-16 Nikos Mavrogiannopoulos - * src/cli.c: Use default ciphers. Simplify SRP callback. + * lib/README: documented directories. -2007-03-05 Simon Josefsson +2011-04-16 Nikos Mavrogiannopoulos - * lib/gnutls_priority.c: (gnutls_set_default_priority): Fix defaults. + * lib/Makefile.am, lib/accelerated/Makefile.am, + lib/accelerated/cryptodev.c, lib/accelerated/cryptodev.h, + lib/cryptodev.c, lib/gnutls_cryptodev.h, lib/gnutls_global.c: Moved + cryptodev to accelerated/ -2007-03-05 Simon Josefsson +2011-04-16 Nikos Mavrogiannopoulos - * src/cli.c: Let libgnutls remove SRP/PSK if not used. + * lib/gnutls_extensions.c, lib/gnutls_handshake.c: Session tickets + are included unconditionally. -2007-03-05 Simon Josefsson +2011-04-16 Nikos Mavrogiannopoulos - * lib/gnutls_priority.c: Indent and doc fix. + * configure.ac, lib/Makefile.am, lib/auth/Makefile.am, + lib/auth/anon.c, lib/auth/anon.h, lib/auth/cert.c, lib/auth/cert.h, + lib/auth/dh_common.c, lib/auth/dh_common.h, lib/auth/dhe.c, + lib/auth/dhe_psk.c, lib/auth/psk.c, lib/auth/psk.h, + lib/auth/psk_passwd.c, lib/auth/psk_passwd.h, lib/auth/rsa.c, + lib/auth/rsa_export.c, lib/auth/srp.c, lib/auth/srp.h, + lib/auth/srp_passwd.c, lib/auth/srp_passwd.h, lib/auth/srp_rsa.c, + lib/auth/srp_sb64.c, lib/auth_anon.c, lib/auth_anon.h, + lib/auth_cert.c, lib/auth_cert.h, lib/auth_dh_common.c, + lib/auth_dh_common.h, lib/auth_dhe.c, lib/auth_dhe_psk.c, + lib/auth_psk.c, lib/auth_psk.h, lib/auth_psk_passwd.c, + lib/auth_psk_passwd.h, lib/auth_rsa.c, lib/auth_rsa_export.c, + lib/auth_srp.c, lib/auth_srp.h, lib/auth_srp_passwd.c, + lib/auth_srp_passwd.h, lib/auth_srp_rsa.c, lib/auth_srp_sb64.c, + lib/ext/Makefile.am, lib/ext/cert_type.c, lib/ext/cert_type.h, + lib/ext/max_record.c, lib/ext/max_record.h, + lib/ext/safe_renegotiation.c, lib/ext/safe_renegotiation.h, + lib/ext/server_name.c, lib/ext/server_name.h, + lib/ext/session_ticket.c, lib/ext/session_ticket.h, + lib/ext/signature.c, lib/ext/signature.h, lib/ext/srp.c, + lib/ext/srp.h, lib/ext_cert_type.c, lib/ext_cert_type.h, + lib/ext_max_record.c, lib/ext_max_record.h, + lib/ext_safe_renegotiation.c, lib/ext_safe_renegotiation.h, + lib/ext_server_name.c, lib/ext_server_name.h, + lib/ext_session_ticket.c, lib/ext_session_ticket.h, + lib/ext_signature.c, lib/ext_signature.h, lib/ext_srp.c, + lib/ext_srp.h, lib/gnutls_anon_cred.c, lib/gnutls_auth.c, + lib/gnutls_cert.c, lib/gnutls_extensions.c, lib/gnutls_handshake.c, + lib/gnutls_psk.c, lib/gnutls_record.c, lib/gnutls_session_pack.c, + lib/gnutls_sig.c, lib/gnutls_srp.c, lib/gnutls_state.c, + lib/gnutls_ui.c, lib/gnutls_x509.c, lib/openpgp/gnutls_openpgp.h, + m4/hooks.m4: The auth_ and ext_ files were moved to respective + directories. -2007-03-05 Simon Josefsson +2011-04-15 Nikos Mavrogiannopoulos - * lib/Makefile.am, lib/gnutls_priority.h, lib/gnutls_record.c, - lib/gnutls_state.c: Remove gnutls_priority.h, not needed. + * doc/cha-intro-tls.texi: Reorganized sections in documentation. -2007-03-05 Simon Josefsson +2011-04-15 Nikos Mavrogiannopoulos - * configure.in: Reorder. + * doc/examples/ex-cxx.cpp: removed unneeded comment. -2007-03-05 Simon Josefsson +2011-04-15 Nikos Mavrogiannopoulos - * configure.in: Reorder. + * tests/cve-2009-1416.c, tests/pkcs12_s2k_pem.c: Added missing + headers. -2007-03-05 Simon Josefsson +2011-04-15 Nikos Mavrogiannopoulos - * configure.in: Reorder. + * tests/suite/Makefile.am, tests/suite/chain, tests/suite/testbig, + tests/suite/testbig-main, tests/suite/testcompat, + tests/suite/testcompat-main, tests/suite/x509paths/.gitignore, + tests/suite/x509paths/README, tests/x509paths/README, + tests/x509paths/chain: x509paths tests moved to suite/. -2007-03-05 Simon Josefsson +2011-04-15 Nikos Mavrogiannopoulos - * GNUmakefile, build-aux/GNUmakefile, build-aux/config.rpath, - build-aux/gendocs.sh, build-aux/link-warning.h, build-aux/maint.mk, - gendocs.sh, gl/gnulib.mk, gl/m4/gnulib-cache.m4, lgl/Makefile.am, - lgl/m4/gnulib-cache.m4, link-warning.h, maint.mk: Fixes for - build-aux. + * tests/certs/cert-rsa-2432.pem, tests/certs/rsa-2432.pem, + tests/scripts/common.sh, tests/suite/Makefile.am, + tests/suite/testbig, tests/suite/testbig-main: Added + interoperability tests with openssl. -2007-03-05 Simon Josefsson +2011-04-15 Nikos Mavrogiannopoulos - * configure.in: Use build-aux/. + * lib/gnutls_buffers.c: Corrected SSLv2 header parsing. -2007-03-05 Simon Josefsson +2011-04-15 Nikos Mavrogiannopoulos - * doc/protocol/draft-ietf-tls-rfc4346-bis-03.txt, - lgl/m4/gnulib-comp.m4, lgl/m4/time_r.m4, lgl/m4/vasnprintf.m4, - lgl/m4/vasprintf.m4, lgl/time_.h, lgl/vasnprintf.c, - lgl/vasnprintf.h, lgl/vasprintf.h: Updaet. + * doc/credentials/x509-server-dsa.pem, + doc/credentials/x509-server-key-dsa.pem: corrected illegal DSA key. -2007-02-26 Simon Josefsson +2011-04-14 Nikos Mavrogiannopoulos - * doc/protocol/draft-salowey-tls-rsa-aes-gcm-00.txt: Add. + * tests/suite/Makefile.am, tests/suite/testsrn: Enabled the extra + safe renegotiation tests. -2007-02-26 Simon Josefsson +2011-04-14 Nikos Mavrogiannopoulos - * po/sv.po: Sync with TP. + * m4/hooks.m4: removed opaque PRF from m4. -2007-02-26 Simon Josefsson +2011-04-14 Nikos Mavrogiannopoulos - * po/pl.po: Sync with TP. + * lib/gnutls_buffers.c: removed text about select(). -2007-02-26 Simon Josefsson +2011-04-13 Nikos Mavrogiannopoulos - * doc/protocol/draft-nir-tee-pm-00.txt: Add. + * configure.ac, lib/Makefile.am: check for libdl that pakchois + needs. -2007-02-25 Simon Josefsson +2011-04-13 Nikos Mavrogiannopoulos - * doc/examples/.cvsignore: [no log message] + * lib/Makefile.am, lib/pakchois/README: Added readme about pakchois + and removed checks for pakchois in Makefile.am. -2007-02-25 Simon Josefsson +2011-04-13 Nikos Mavrogiannopoulos - * doc/gnutls.texi: Add authz server. + * configure.ac, m4/hooks.m4: Reorganization in configure file. + Pakchois is not longer checked for being present. The included + version is always used. -2007-02-25 Simon Josefsson +2011-04-13 Nikos Mavrogiannopoulos - * NEWS: Fix. + * gl/.gitignore, gl/asprintf.c, gl/byteswap.in.h, gl/hmac-md5.c, + gl/hmac.h, gl/md5.c, gl/md5.h, gl/memmem.c, gl/memxor.c, + gl/memxor.h, gl/str-two-way.h, gl/strcasecmp.c, gl/strdup.c, + gl/strings.in.h, gl/strncasecmp.c, gl/strverscmp.c, gl/time_r.c, + gl/u64.h, gl/unistd.h, gl/vasprintf.c, gl/vsnprintf.c, + gl/warn-on-use.h, gl/wchar.h: Added missing gnulib files -2007-02-25 Simon Josefsson +2011-04-13 Nikos Mavrogiannopoulos - * doc/examples/Makefile.am: Add authz. + * lib/crypto-api.c: Added missing const. -2007-02-25 Simon Josefsson +2011-04-12 Ludovic Courtès - * doc/examples/ex-serv-authz.c: Add. + * NEWS, src/certtool-common.c, src/certtool.c, src/p11tool.c, + tests/crq_key_id.c, tests/cve-2009-1416.c, tests/pkcs12_s2k_pem.c: + Don't include when it's not needed. -2007-02-25 Simon Josefsson +2011-04-13 Nikos Mavrogiannopoulos - * doc/examples/ex-client-authz.c, doc/gnutls.texi: Add. + * doc/cha-internals.texi: fixed and updates in documentation -2007-02-24 Simon Josefsson +2011-04-13 Nikos Mavrogiannopoulos - * lib/x509/x509.c: Add credits. + * doc/gnutls-crypto-layers.eps: Updated crypto layers documentation. -2007-02-22 Simon Josefsson +2011-04-12 Nikos Mavrogiannopoulos - * lib/x509/output.c: Minor tweaks to proxy output. + * NEWS, lib/accelerated/intel/Makefile.am, + lib/accelerated/intel/aes-x86.c, + lib/accelerated/intel/asm/x64_do_rdtsc.s, + lib/accelerated/intel/asm/x86_do_rdtsc.s, tests/cipher-test.c: + Updates in the AES-NI accelerator. -2007-02-22 Simon Josefsson +2011-04-12 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/crypto-api.c, lib/includes/gnutls/crypto.h, lib/libgnutls.map: + Added gnutls_cipher_set_iv(). -2007-02-22 Simon Josefsson +2011-04-12 Nikos Mavrogiannopoulos - * THANKS: Typo. + * tests/Makefile.am, tests/cipher-test.c: Added test vectors for + AES,SHAxxx and MD5. -2007-02-22 Simon Josefsson +2011-04-12 Nikos Mavrogiannopoulos - * THANKS: Add. + * lib/accelerated/intel/aes-x86.c, lib/crypto.c, + lib/includes/gnutls/crypto.h: Increased priority of CPU assisted + ciphers. -2007-02-22 Simon Josefsson +2011-04-12 Nikos Mavrogiannopoulos - * tests/.cvsignore: [no log message] + * src/cli.c: Do not rely on lowat being set. -2007-02-22 Simon Josefsson +2011-04-11 Nikos Mavrogiannopoulos - * tests/dn.c: Other cert. + * lib/accelerated/Makefile.am, lib/accelerated/intel/Makefile.am, + lib/accelerated/intel/README: Added README explaining the usage of + Intel AES library. -2007-02-22 Simon Josefsson +2011-04-11 Nikos Mavrogiannopoulos - * tests/Makefile.am: Add dn. + * lib/gnutls_buffers.c: Corrected parsing error in TLS, when many + handshake messages were packed in a single record message. -2007-02-22 Simon Josefsson +2011-04-11 Nikos Mavrogiannopoulos - * tests/dn.c: Add. + * .gitignore, configure.ac, lib/accelerated/Makefile.am, + lib/accelerated/accelerated.c, lib/accelerated/aes-x86.c, + lib/accelerated/aes-x86.h, lib/accelerated/intel/Makefile.am, + lib/accelerated/intel/aes-x86.c, lib/accelerated/intel/aes-x86.h, + lib/accelerated/intel/asm/x64_do_rdtsc.s, + lib/accelerated/intel/asm/x64_iaesx64.s, + lib/accelerated/intel/asm/x86_do_rdtsc.s, + lib/accelerated/intel/asm/x86_iaesx86.s, + lib/accelerated/intel/iaes_asm_interface.h, + lib/accelerated/intel/iaesni.h, lib/accelerated/intel/license.txt, + m4/gcc.m4: fixes in acceleration detection. Added Intel's library + code for AES-NI acceleration. -2007-02-22 Simon Josefsson +2011-04-11 Nikos Mavrogiannopoulos - * lib/x509/x509.c: Rename. + * guile/modules/gnutls/build/enums.scm, lib/libgnutls.map, + libextra/Makefile.am: Purged all references of LZO. -2007-02-22 Simon Josefsson +2011-04-11 Nikos Mavrogiannopoulos - * includes/gnutls/x509.h: Rename non-released functions. + * configure.ac: removed duplicate test -2007-02-22 Simon Josefsson +2011-04-11 Nikos Mavrogiannopoulos - * lib/x509/x509.h: Remove. + * doc/examples/ex-cxx.cpp, gl/time.in.h: No need to under restrict + for C++. Only use config.h. -2007-02-22 Simon Josefsson +2011-04-11 Nikos Mavrogiannopoulos - * lib/x509/x509.c: Code cleanup and documentation of last patch. + * NEWS, lib/includes/gnutls/gnutls.h.in, lib/system_override.c: + gnutls_transport_set_global_errno() is no more. -2007-02-22 Simon Josefsson +2011-04-11 Nikos Mavrogiannopoulos - * includes/gnutls/x509.h, lib/x509/x509.h: Fix. + * tests/eagain-common.h, tests/safe-renegotiation/Makefile.am, + tests/safe-renegotiation/srn0.c, tests/safe-renegotiation/srn1.c, + tests/safe-renegotiation/srn2.c, tests/safe-renegotiation/srn3.c, + tests/safe-renegotiation/srn4.c, tests/safe-renegotiation/srn5.c: + Combined the safe renegotiation tests with the again-common lib. -2007-02-22 Simon Josefsson +2011-04-10 Nikos Mavrogiannopoulos - * includes/gnutls/x509.h, lib/x509/x509.c, lib/x509/x509.h: New APIs - to deal with DN's. Patch from Howard Chu . + * NEWS, configure.ac, doc/cha-intro-tls.texi, doc/cha-preface.texi, + doc/cha-programs.texi, lib/gnutls_compress.c, lib/gnutls_errors.c, + lib/gnutls_state.c, lib/includes/gnutls/gnutls.h.in, + lib/libgnutls.map, libextra/gnutls_extra.c, m4/hooks.m4: Support for + liblzo was dropped. -2007-02-22 Simon Josefsson +2011-04-10 Nikos Mavrogiannopoulos - * NEWS, configure.in: Bump versions. + * NEWS, configure.ac: bumped version -2007-02-22 Simon Josefsson +2011-04-10 Nikos Mavrogiannopoulos - * ChangeLog: [no log message] + * .gitignore, gl/time.h, gl/time.in.h: updated time.h.in -2007-02-22 Simon Josefsson +2011-04-10 Nikos Mavrogiannopoulos - * NEWS: Version 1.7.7. + * lib/gnutls_algorithms.c, lib/gnutls_dtls.c, lib/gnutls_mem.c, + lib/gnutls_psk.c, lib/gnutls_record.c, + lib/includes/gnutls/gnutls.h.in, lib/pkcs11.c, + lib/pkcs11_privkey.c, lib/x509/verify-high.c, lib/x509/verify.c: + Corrected documentation of several API functions. -2007-02-22 Simon Josefsson +2011-04-10 Nikos Mavrogiannopoulos - * lgl/.cvsignore: [no log message] + * doc/cha-gtls-app.texi, doc/cha-library.texi: documentation + updates. -2007-02-22 Simon Josefsson +2011-04-10 Nikos Mavrogiannopoulos - * gl/getaddrinfo.c, gl/gnulib.mk, gl/m4/gnulib-comp.m4, - gl/m4/string_h.m4, gl/string_.h, lgl/Makefile.am, - lgl/m4/gnulib-comp.m4, lgl/m4/intdiv0.m4, lgl/m4/snprintf.m4, - lgl/m4/stdio_h.m4, lgl/m4/string_h.m4, lgl/m4/unistd_h.m4, - lgl/snprintf.c, lgl/snprintf.h, lgl/stdio_.h, lgl/string_.h, - lgl/unistd_.h, link-warning.h: Update. + * doc/scripts/gdoc, doc/scripts/sort2.pl: remove perl warnings from + scripts. -2007-02-22 Simon Josefsson +2011-04-10 Nikos Mavrogiannopoulos - * doc/manpages/Makefile.am: Update. + * configure.ac, lib/Makefile.am, lib/accelerated/Makefile.am, + lib/accelerated/accelerated.c, lib/accelerated/accelerated.h, + lib/accelerated/aes-x86.c, lib/accelerated/aes-x86.h, + lib/accelerated/x86.h, lib/gnutls_global.c, m4/gcc.m4: Added support + for x86 intel AES instruction acceleration if detected. -2007-02-22 Simon Josefsson +2011-04-10 Nikos Mavrogiannopoulos - * lib/ext_authz.c, lib/gnutls_supplemental.c: Typo. + * gl/time.h, gl/unistd.h, gl/warn-on-use.h, gl/wchar.h: Added gl/ + files. -2007-02-22 Simon Josefsson +2011-04-10 Nikos Mavrogiannopoulos - * lib/gnutls_extensions.c, lib/gnutls_extensions.h: Revert. + * cfg.mk: corrected po directory and build-aux paths. -2007-02-22 Simon Josefsson +2011-04-10 Nikos Mavrogiannopoulos - * lib/gnutls_int.h: New flags for authz extension. + * doc/examples/Makefile.am: include gnulib files. -2007-02-22 Simon Josefsson +2011-04-10 Nikos Mavrogiannopoulos - * lib/ext_authz.c: Use our own logic to determine whether to send - extension replies in server. + * doc/TODO: updated TODO -2007-02-22 Simon Josefsson +2011-04-10 Nikos Mavrogiannopoulos - * lib/gnutls_extensions.h: Add prototype for - _gnutls_extension_list_check, we use it in ext_authz.c. + * tests/openpgp-certs/testselfsigs: Use --infile in certtool to + avoid issues with streams in windows. Patch by LRN. -2007-02-22 Simon Josefsson +2011-04-10 Nikos Mavrogiannopoulos - * lib/gnutls_extensions.c: Remove static from - _gnutls_extension_list_check, we use it in ext_authz.c + * lib/opencdk/armor.c: Changes armor.c to be able to handle both LF + and CRLF inputs (output is still either LF-only or CRLF-only + depending on the platform). Patch by LRN. Optimizations in the usage of strlen(). -2007-02-22 Simon Josefsson +2011-04-10 Nikos Mavrogiannopoulos - * lib/ext_authz.c: Don't send authz extension when we shouldn't. + * src/cli.c, src/psk.c, src/serv.c, src/srptool.c, src/tests.c: + Define variables within the intended scope (not windows). Based on + patch by LRN. -2007-02-22 Simon Josefsson +2011-04-10 Nikos Mavrogiannopoulos - * src/cli-gaa.c, src/cli-gaa.h: Generated. + * doc/examples/ex-cert-select-pkcs11.c, src/common.c, src/pkcs11.c: + Use getpass.h (from gnulib). Patch by LRN. -2007-02-22 Simon Josefsson +2011-04-10 Nikos Mavrogiannopoulos - * src/cli.c, src/serv.c: Fix #include's. + * lib/pakchois/dlopen.c: Return correct value for dlclose() in + windows. Patch by LRN. -2007-02-22 Simon Josefsson +2011-04-10 Nikos Mavrogiannopoulos - * NEWS: Add. + * tests/openpgp-auth.c: Disable openpgp-auth run in windows due to + lack of socketpair(). Patch by LRN. -2007-02-22 Simon Josefsson +2011-04-09 Nikos Mavrogiannopoulos - * src/cli.c, src/cli.gaa: Support gnutls-cli --authz-x509-attr-cert - and --authz-saml-assertion. + * Makefile.am: gl before lib or libextra -2007-02-22 Simon Josefsson +2011-04-09 Nikos Mavrogiannopoulos - * src/common.c, src/serv-gaa.c, src/serv-gaa.h, src/serv.c, - src/serv.gaa: Support gnutls-serv --authz-x509-attr-cert and - --authz-saml-assertion. + * ChangeLog: generated -2007-02-22 Simon Josefsson +2011-04-09 Nikos Mavrogiannopoulos - * NEWS: Fix. + * NEWS: updated -2007-02-22 Simon Josefsson +2011-04-09 Nikos Mavrogiannopoulos - * configure.in: Fix so version due to added APIs. + * .gitignore, doc/cha-gtls-app.texi, doc/cha-intro-tls.texi, + doc/examples/Makefile.am, doc/examples/ex-client-udp.c, + doc/examples/udp.c, lib/gnutls_state.c: Added documentation for + Datagram TLS. -2007-02-22 Simon Josefsson +2011-04-09 Nikos Mavrogiannopoulos - * doc/reference/Makefile.am: Ignore more. + * cfg.mk: updated -2007-02-22 Simon Josefsson +2011-04-08 Nikos Mavrogiannopoulos - * NEWS: Revert. + * tests/chainverify.c: disable test in windows. -2007-02-22 Simon Josefsson +2011-04-08 Nikos Mavrogiannopoulos - * lib/gnutls.pc.in: Revert Requires-change. + * tests/mini-x509-rehandshake.c, tests/openpgp-auth.c, + tests/openpgp-auth2.c: corrected leaks in tests. -2007-02-21 Simon Josefsson +2011-04-08 Nikos Mavrogiannopoulos - * NEWS: Typo. + * lib/auth_cert.c, lib/gnutls_pk.c: corrected memory leak on RSA + signatures. -2007-02-21 Simon Josefsson +2011-04-08 Nikos Mavrogiannopoulos - * lib/gnutls_extensions.c: Add authz extension. + * lib/x509/common.c: more leaks fixed in common.c -2007-02-21 Simon Josefsson +2011-04-08 Nikos Mavrogiannopoulos - * lib/ext_authz.c: Typo. + * lib/gnutls_pubkey.c: Corrected leaks in gnutls_pubkey_t + deinitialization. -2007-02-21 Simon Josefsson +2011-04-08 Nikos Mavrogiannopoulos - * lib/gnutls_supplemental.c: Add authz hooks. + * lib/x509/verify-high.c: fix in trusted_list certificate + deinitialization. -2007-02-21 Simon Josefsson +2011-04-08 Nikos Mavrogiannopoulos - * includes/gnutls/gnutls.h.in: Fix type (in never released - prototypes). + * lib/gnutls_privkey.c: correction in deinitialization of privkey. -2007-02-21 Simon Josefsson +2011-04-08 Nikos Mavrogiannopoulos - * lib/gnutls_int.h: Add authz stuff. + * tests/mini-x509-rehandshake.c, tests/mini-x509.c: combined more + tests with eagain-common.h. -2007-02-21 Simon Josefsson +2011-04-08 Nikos Mavrogiannopoulos - * lib/Makefile.am: Build ext_authz.h and ext_authz.c. + * lib/auth_dh_common.c, lib/gnutls_privkey.c, lib/gnutls_x509.c, + lib/nettle/pk.c, lib/pakchois/pakchois.c, lib/pakchois/pakchois.h, + lib/pkcs11.c, lib/x509/verify-high.c, tests/mini-x509.c: Corrected + memory leaks. -2007-02-21 Simon Josefsson +2011-04-08 Nikos Mavrogiannopoulos - * lib/ext_authz.c, lib/ext_authz.h: New file. + * build-aux/arg-nonnull.h, build-aux/c++defs.h, + build-aux/config.rpath, build-aux/warn-on-use.h, cfg.mk, + gl/Makefile.am, gl/m4/.gitignore, gl/m4/gnulib-cache.m4, + gl/m4/gnulib-comp.m4: added valgrind from gnulib. -2007-02-21 Simon Josefsson +2011-04-08 Nikos Mavrogiannopoulos - * lib/gnutls_handshake.c, lib/gnutls_supplemental.h: Sync with - gnutls_supplemental.c. + * tests/dsa/testdsa, tests/openpgp-certs/testcerts: Do not run the + test scripts in win32 environment. -2007-02-21 Simon Josefsson +2011-04-08 Nikos Mavrogiannopoulos - * lib/gnutls_supplemental.c: Fill in type+length. + * cfg.mk: use the system wide gnulib-tool. -2007-02-21 Simon Josefsson +2011-04-08 Nikos Mavrogiannopoulos - * NEWS: Add. + * .gitignore: updated -2007-02-21 Simon Josefsson +2011-04-08 Nikos Mavrogiannopoulos - * includes/gnutls/gnutls.h.in: Add gnutls_authz_recv_callback_func - and gnutls_authz_send_callback_func. Add gnutls_authz_enable, - gnutls_authz_send_x509_attr_cert, gnutls_authz_send_saml_assertion, - gnutls_authz_send_x509_attr_cert_url, and - gnutls_authz_send_saml_assertion_url. Remove GNUTLS_AUTHZ_LAST from - gnutls_authz_data_format_type_t (never part of any release). + * NEWS: updated -2007-02-21 Simon Josefsson +2011-04-08 Nikos Mavrogiannopoulos - * lib/gnutls_supplemental.c: If callbacks failed to provide - anything, at least send protocol valid (yet semantically invalid) - supplemental message. + * tests/suite/ecore/src/lib/ecore_exe.c: include priority headers + unconditionally. -2007-02-21 Simon Josefsson +2011-04-08 Nikos Mavrogiannopoulos - * lib/gnutls_int.h: Add for supplemental support. + * configure.ac, tests/Makefile.am, tests/suite/Makefile.am, + tests/suite/Makefile.in: Better way of not including the tests/suite + directory. Based on discussion with LRN and Vincent Torri. -2007-02-21 Simon Josefsson +2011-04-08 Nikos Mavrogiannopoulos - * lib/gnutls_handshake.c: Support supplemental handshake messages. + * .gitignore, Makefile.am, cfg.mk, configure.ac, + doc/examples/Makefile.am, doc/gendocs_template, gl/.gitignore, + gl/Makefile.am, gl/accept.c, gl/alignof.h, gl/alloca.c, + gl/alloca.in.h, gl/arpa_inet.in.h, gl/asnprintf.c, gl/bind.c, + gl/c-ctype.c, gl/c-ctype.h, gl/close-hook.c, gl/close-hook.h, + gl/close.c, gl/connect.c, gl/errno.in.h, gl/error.c, gl/error.h, + gl/fclose.c, gl/float+.h, gl/float.in.h, gl/fseeko.c, gl/ftello.c, + gl/gai_strerror.c, gl/getaddrinfo.c, gl/getdelim.c, gl/getline.c, + gl/getpass.c, gl/getpass.h, gl/gettext.h, gl/gettime.c, + gl/gettimeofday.c, gl/inet_ntop.c, gl/inet_pton.c, gl/intprops.h, + gl/listen.c, gl/lseek.c, gl/m4/.gitignore, gl/m4/00gnulib.m4, + gl/m4/alloca.m4, gl/m4/arpa_inet_h.m4, gl/m4/asm-underscore.m4, + gl/m4/autobuild.m4, gl/m4/clock_time.m4, gl/m4/close.m4, + gl/m4/errno_h.m4, gl/m4/error.m4, gl/m4/extensions.m4, + gl/m4/fclose.m4, gl/m4/float_h.m4, gl/m4/fseeko.m4, + gl/m4/ftello.m4, gl/m4/getaddrinfo.m4, gl/m4/getdelim.m4, + gl/m4/getline.m4, gl/m4/getpagesize.m4, gl/m4/getpass.m4, + gl/m4/gettime.m4, gl/m4/gettimeofday.m4, gl/m4/gnulib-cache.m4, + gl/m4/gnulib-common.m4, gl/m4/gnulib-comp.m4, gl/m4/gnulib-tool.m4, + gl/m4/hostent.m4, gl/m4/include_next.m4, gl/m4/inet_ntop.m4, + gl/m4/inet_pton.m4, gl/m4/intmax_t.m4, gl/m4/inttypes_h.m4, + gl/m4/ioctl.m4, gl/m4/lib-ld.m4, gl/m4/lib-link.m4, + gl/m4/lib-prefix.m4, gl/m4/longlong.m4, gl/m4/lseek.m4, + gl/m4/malloc.m4, gl/m4/manywarnings.m4, gl/m4/memchr.m4, + gl/m4/minmax.m4, gl/m4/mmap-anon.m4, gl/m4/multiarch.m4, + gl/m4/netdb_h.m4, gl/m4/netinet_in_h.m4, gl/m4/perror.m4, + gl/m4/printf.m4, gl/m4/read-file.m4, gl/m4/readline.m4, + gl/m4/realloc.m4, gl/m4/select.m4, gl/m4/servent.m4, + gl/m4/size_max.m4, gl/m4/snprintf.m4, gl/m4/socketlib.m4, + gl/m4/sockets.m4, gl/m4/socklen.m4, gl/m4/sockpfaf.m4, + gl/m4/stdarg.m4, gl/m4/stdbool.m4, gl/m4/stddef_h.m4, + gl/m4/stdint.m4, gl/m4/stdint_h.m4, gl/m4/stdio_h.m4, + gl/m4/stdlib_h.m4, gl/m4/strerror.m4, gl/m4/string_h.m4, + gl/m4/sys_ioctl_h.m4, gl/m4/sys_select_h.m4, gl/m4/sys_socket_h.m4, + gl/m4/sys_stat_h.m4, gl/m4/sys_time_h.m4, gl/m4/time_h.m4, + gl/m4/timespec.m4, gl/m4/ungetc.m4, gl/m4/unistd_h.m4, + gl/m4/valgrind-tests.m4, gl/m4/vasnprintf.m4, gl/m4/version-etc.m4, + gl/m4/warn-on-use.m4, gl/m4/warnings.m4, gl/m4/wchar_h.m4, + gl/m4/wchar_t.m4, gl/m4/wint_t.m4, gl/m4/xsize.m4, gl/malloc.c, + gl/memchr.c, gl/minmax.h, gl/netdb.in.h, gl/netinet_in.in.h, + gl/perror.c, gl/printf-args.c, gl/printf-args.h, gl/printf-parse.c, + gl/printf-parse.h, gl/progname.c, gl/progname.h, gl/read-file.c, + gl/read-file.h, gl/readline.c, gl/readline.h, gl/realloc.c, + gl/recv.c, gl/select.c, gl/send.c, gl/setsockopt.c, gl/shutdown.c, + gl/size_max.h, gl/snprintf.c, gl/socket.c, gl/sockets.c, + gl/sockets.h, gl/stdarg.in.h, gl/stdbool.in.h, gl/stddef.in.h, + gl/stdint.in.h, gl/stdio-impl.h, gl/stdio-write.c, gl/stdio.in.h, + gl/stdlib.in.h, gl/strerror.c, gl/string.in.h, gl/sys_select.in.h, + gl/sys_socket.in.h, gl/sys_stat.in.h, gl/sys_time.in.h, + gl/tests/.gitignore, gl/tests/Makefile.am, gl/tests/binary-io.h, + gl/tests/dummy.c, gl/tests/fcntl.in.h, gl/tests/getpagesize.c, + gl/tests/init.sh, gl/tests/ioctl.c, gl/tests/macros.h, + gl/tests/signature.h, gl/tests/sys_ioctl.in.h, + gl/tests/test-alignof.c, gl/tests/test-alloca-opt.c, + gl/tests/test-arpa_inet.c, gl/tests/test-binary-io.c, + gl/tests/test-c-ctype.c, gl/tests/test-errno.c, + gl/tests/test-fcntl-h.c, gl/tests/test-fseeko.c, + gl/tests/test-ftello.c, gl/tests/test-ftello3.c, + gl/tests/test-getaddrinfo.c, gl/tests/test-getdelim.c, + gl/tests/test-getline.c, gl/tests/test-gettimeofday.c, + gl/tests/test-inet_ntop.c, gl/tests/test-inet_pton.c, + gl/tests/test-lseek.c, gl/tests/test-lseek.sh, + gl/tests/test-memchr.c, gl/tests/test-netdb.c, + gl/tests/test-netinet_in.c, gl/tests/test-perror.c, + gl/tests/test-perror.sh, gl/tests/test-read-file.c, + gl/tests/test-select-fd.c, gl/tests/test-select-in.sh, + gl/tests/test-select-out.sh, gl/tests/test-select-stdin.c, + gl/tests/test-select.c, gl/tests/test-snprintf.c, + gl/tests/test-sockets.c, gl/tests/test-stdbool.c, + gl/tests/test-stddef.c, gl/tests/test-stdint.c, + gl/tests/test-stdio.c, gl/tests/test-stdlib.c, + gl/tests/test-strerror.c, gl/tests/test-string.c, + gl/tests/test-sys_ioctl.c, gl/tests/test-sys_select.c, + gl/tests/test-sys_socket.c, gl/tests/test-sys_stat.c, + gl/tests/test-sys_time.c, gl/tests/test-sys_wait.h, + gl/tests/test-time.c, gl/tests/test-unistd.c, + gl/tests/test-update-copyright.sh, gl/tests/test-vasnprintf.c, + gl/tests/test-vc-list-files-cvs.sh, + gl/tests/test-vc-list-files-git.sh, gl/tests/test-verify.c, + gl/tests/test-version-etc.c, gl/tests/test-version-etc.sh, + gl/tests/test-wchar.c, gl/tests/w32sock.h, gl/tests/zerosize-ptr.h, + gl/time.in.h, gl/timespec.h, gl/unistd.in.h, gl/vasnprintf.c, + gl/vasnprintf.h, gl/verify.h, gl/version-etc-fsf.c, + gl/version-etc.c, gl/version-etc.h, gl/w32sock.h, gl/wchar.in.h, + gl/xsize.h, guile/src/Makefile.am, lib/Makefile.am, + lib/configure.ac, lib/gcrypt/Makefile.am, lib/gl/Makefile.am, + lib/gl/alignof.h, lib/gl/alloca.in.h, lib/gl/asnprintf.c, + lib/gl/asprintf.c, lib/gl/byteswap.in.h, lib/gl/c-ctype.c, + lib/gl/c-ctype.h, lib/gl/close-hook.c, lib/gl/close-hook.h, + lib/gl/errno.in.h, lib/gl/float+.h, lib/gl/float.in.h, + lib/gl/fseeko.c, lib/gl/ftello.c, lib/gl/gettext.h, lib/gl/lseek.c, + lib/gl/m4/00gnulib.m4, lib/gl/m4/alloca.m4, + lib/gl/m4/asm-underscore.m4, lib/gl/m4/byteswap.m4, + lib/gl/m4/codeset.m4, lib/gl/m4/errno_h.m4, + lib/gl/m4/extensions.m4, lib/gl/m4/fcntl-o.m4, + lib/gl/m4/float_h.m4, lib/gl/m4/fseeko.m4, lib/gl/m4/ftello.m4, + lib/gl/m4/func.m4, lib/gl/m4/getpagesize.m4, lib/gl/m4/gettext.m4, + lib/gl/m4/glibc2.m4, lib/gl/m4/glibc21.m4, + lib/gl/m4/gnulib-cache.m4, lib/gl/m4/gnulib-common.m4, + lib/gl/m4/gnulib-comp.m4, lib/gl/m4/gnulib-tool.m4, + lib/gl/m4/iconv.m4, lib/gl/m4/include_next.m4, + lib/gl/m4/intdiv0.m4, lib/gl/m4/intl.m4, lib/gl/m4/intldir.m4, + lib/gl/m4/intlmacosx.m4, lib/gl/m4/intmax.m4, + lib/gl/m4/intmax_t.m4, lib/gl/m4/inttypes-pri.m4, + lib/gl/m4/inttypes_h.m4, lib/gl/m4/lcmessage.m4, + lib/gl/m4/ld-output-def.m4, lib/gl/m4/ld-version-script.m4, + lib/gl/m4/lib-ld.m4, lib/gl/m4/lib-link.m4, + lib/gl/m4/lib-prefix.m4, lib/gl/m4/lock.m4, lib/gl/m4/longlong.m4, + lib/gl/m4/lseek.m4, lib/gl/m4/malloc.m4, lib/gl/m4/memchr.m4, + lib/gl/m4/memmem.m4, lib/gl/m4/minmax.m4, lib/gl/m4/mmap-anon.m4, + lib/gl/m4/multiarch.m4, lib/gl/m4/netdb_h.m4, lib/gl/m4/nls.m4, + lib/gl/m4/po.m4, lib/gl/m4/printf-posix.m4, lib/gl/m4/printf.m4, + lib/gl/m4/progtest.m4, lib/gl/m4/read-file.m4, + lib/gl/m4/realloc.m4, lib/gl/m4/size_max.m4, lib/gl/m4/snprintf.m4, + lib/gl/m4/socketlib.m4, lib/gl/m4/sockets.m4, lib/gl/m4/socklen.m4, + lib/gl/m4/sockpfaf.m4, lib/gl/m4/stdbool.m4, lib/gl/m4/stddef_h.m4, + lib/gl/m4/stdint.m4, lib/gl/m4/stdint_h.m4, lib/gl/m4/stdio_h.m4, + lib/gl/m4/stdlib_h.m4, lib/gl/m4/strcase.m4, lib/gl/m4/string_h.m4, + lib/gl/m4/strings_h.m4, lib/gl/m4/strverscmp.m4, + lib/gl/m4/sys_socket_h.m4, lib/gl/m4/sys_stat_h.m4, + lib/gl/m4/threadlib.m4, lib/gl/m4/time_h.m4, lib/gl/m4/time_r.m4, + lib/gl/m4/uintmax_t.m4, lib/gl/m4/ungetc.m4, lib/gl/m4/unistd_h.m4, + lib/gl/m4/vasnprintf.m4, lib/gl/m4/vasprintf.m4, + lib/gl/m4/visibility.m4, lib/gl/m4/vsnprintf.m4, + lib/gl/m4/warn-on-use.m4, lib/gl/m4/wchar_h.m4, + lib/gl/m4/wchar_t.m4, lib/gl/m4/wint_t.m4, lib/gl/m4/xsize.m4, + lib/gl/malloc.c, lib/gl/memchr.c, lib/gl/memchr.valgrind, + lib/gl/memmem.c, lib/gl/minmax.h, lib/gl/netdb.in.h, + lib/gl/override/lib/gc-libgcrypt.c.diff, + lib/gl/override/lib/gettext.h.diff, lib/gl/printf-args.c, + lib/gl/printf-args.h, lib/gl/printf-parse.c, lib/gl/printf-parse.h, + lib/gl/read-file.c, lib/gl/read-file.h, lib/gl/realloc.c, + lib/gl/size_max.h, lib/gl/snprintf.c, lib/gl/sockets.c, + lib/gl/sockets.h, lib/gl/stdbool.in.h, lib/gl/stddef.in.h, + lib/gl/stdint.in.h, lib/gl/stdio-impl.h, lib/gl/stdio-write.c, + lib/gl/stdio.in.h, lib/gl/stdlib.in.h, lib/gl/str-two-way.h, + lib/gl/strcasecmp.c, lib/gl/string.in.h, lib/gl/strings.in.h, + lib/gl/strncasecmp.c, lib/gl/strverscmp.c, lib/gl/sys_socket.in.h, + lib/gl/sys_stat.in.h, lib/gl/tests/Makefile.am, + lib/gl/tests/binary-io.h, lib/gl/tests/dummy.c, + lib/gl/tests/getpagesize.c, lib/gl/tests/init.sh, + lib/gl/tests/intprops.h, lib/gl/tests/macros.h, + lib/gl/tests/signature.h, lib/gl/tests/test-alloca-opt.c, + lib/gl/tests/test-binary-io.c, lib/gl/tests/test-binary-io.sh, + lib/gl/tests/test-byteswap.c, lib/gl/tests/test-c-ctype.c, + lib/gl/tests/test-errno.c, lib/gl/tests/test-fseeko.c, + lib/gl/tests/test-fseeko.sh, lib/gl/tests/test-fseeko2.sh, + lib/gl/tests/test-ftello.c, lib/gl/tests/test-ftello.sh, + lib/gl/tests/test-ftello2.sh, lib/gl/tests/test-ftello3.c, + lib/gl/tests/test-func.c, lib/gl/tests/test-memchr.c, + lib/gl/tests/test-netdb.c, lib/gl/tests/test-read-file.c, + lib/gl/tests/test-snprintf.c, lib/gl/tests/test-sockets.c, + lib/gl/tests/test-stdbool.c, lib/gl/tests/test-stddef.c, + lib/gl/tests/test-stdint.c, lib/gl/tests/test-stdio.c, + lib/gl/tests/test-stdlib.c, lib/gl/tests/test-string.c, + lib/gl/tests/test-strings.c, lib/gl/tests/test-strverscmp.c, + lib/gl/tests/test-sys_socket.c, lib/gl/tests/test-sys_stat.c, + lib/gl/tests/test-sys_wait.h, lib/gl/tests/test-time.c, + lib/gl/tests/test-unistd.c, lib/gl/tests/test-vasnprintf.c, + lib/gl/tests/test-vasprintf.c, lib/gl/tests/test-verify.c, + lib/gl/tests/test-verify.sh, lib/gl/tests/test-vsnprintf.c, + lib/gl/tests/test-wchar.c, lib/gl/tests/zerosize-ptr.h, + lib/gl/time.in.h, lib/gl/time_r.c, lib/gl/unistd.in.h, + lib/gl/vasnprintf.c, lib/gl/vasnprintf.h, lib/gl/vasprintf.c, + lib/gl/verify.h, lib/gl/vsnprintf.c, lib/gl/w32sock.h, + lib/gl/wchar.in.h, lib/gl/xsize.h, lib/gnutls_int.h, + lib/m4/hooks.m4, lib/minitasn1/Makefile.am, lib/nettle/Makefile.am, + lib/opencdk/Makefile.am, lib/openpgp/Makefile.am, lib/po/LINGUAS, + lib/po/Makevars, lib/po/POTFILES.in, lib/po/cs.po.in, + lib/po/de.po.in, lib/po/fr.po.in, lib/po/it.po.in, lib/po/ms.po.in, + lib/po/nl.po.in, lib/po/pl.po.in, lib/po/sv.po.in, lib/po/vi.po.in, + lib/po/zh_CN.po.in, lib/x509/Makefile.am, libextra/Makefile.am, + libextra/configure.ac, libextra/gl/Makefile.am, + libextra/gl/gnulib.mk, libextra/gl/hmac-md5.c, libextra/gl/hmac.h, + libextra/gl/m4/00gnulib.m4, libextra/gl/m4/extensions.m4, + libextra/gl/m4/gnulib-cache.m4, libextra/gl/m4/gnulib-common.m4, + libextra/gl/m4/gnulib-comp.m4, libextra/gl/m4/gnulib-tool.m4, + libextra/gl/m4/hmac-md5.m4, libextra/gl/m4/ld-output-def.m4, + libextra/gl/m4/ld-version-script.m4, libextra/gl/m4/lib-ld.m4, + libextra/gl/m4/lib-link.m4, libextra/gl/m4/lib-prefix.m4, + libextra/gl/m4/md5.m4, libextra/gl/m4/memxor.m4, libextra/gl/md5.c, + libextra/gl/md5.h, libextra/gl/memxor.c, libextra/gl/memxor.h, + libextra/gl/override/lib/md5.c.diff, libextra/m4/hooks.m4, + m4/hooks.m4, po/LINGUAS, po/Makevars, po/POTFILES.in, po/cs.po.in, + po/de.po.in, po/fr.po.in, po/it.po.in, po/ms.po.in, po/nl.po.in, + po/pl.po.in, po/sv.po.in, po/vi.po.in, po/zh_CN.po.in, + src/Makefile.am, tests/suite/Makefile.in: Use a single configure.ac. + This speed ups compilation and reduces duplication of code (multiple + gl/ libraries etc.). This saves about 2mb in distributed size + (compressed). -2007-02-21 Simon Josefsson +2011-04-08 Nikos Mavrogiannopoulos - * lib/Makefile.am: Add gnutls_supplemental.h and - gnutls_supplemental.c. + * src/certtool-cfg.c: Avoid using readline. -2007-02-21 Simon Josefsson +2011-04-08 Nikos Mavrogiannopoulos - * lib/gnutls_supplemental.c, lib/gnutls_supplemental.h: New file. + * lib/gnutls_buffers.c: initialized ret in _gnutls_writev_emu(). -2007-02-21 Simon Josefsson +2011-04-08 Nikos Mavrogiannopoulos - * doc/TODO: Add. + * lib/includes/gnutls/x509.h: doc fix -2007-02-19 Simon Josefsson +2011-04-08 Nikos Mavrogiannopoulos - * includes/gnutls/gnutls.h.in: Add gnutls_supplemental_get_name. - Fix gnutls_authz_data_format_type_t. + * lib/system.c: removed unneeded variable. -2007-02-19 Simon Josefsson +2011-04-08 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/auth_cert.c: Corrected check for an unknown sign algorithm. + Patch by LRN. -2007-02-17 Simon Josefsson +2011-04-08 Nikos Mavrogiannopoulos - * lib/debug.c: Support SUPPLEMENTAL handshake type. + * lib/openpgp/output.c: Do not use %e in strftime. Use %d instead + which is identically available in windows as well. Based on patch + by LRN. -2007-02-16 Simon Josefsson +2011-04-08 Nikos Mavrogiannopoulos - * AUTHORS: update + * lib/x509/output.c, tests/certuniqueid.c: Fixed mismatch in size_t + size. Patch by LRN. -2007-02-16 Simon Josefsson +2011-04-07 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/system.c, lib/system_override.c: Correctly set errno in win32 + using gnutls_transport_set_global_errno(). Based on patch by LRN. -2007-02-16 Simon Josefsson +2011-04-07 Nikos Mavrogiannopoulos - * tests/hostname-check/hostname-check.c: Tests ipAddress SAN's too. + * tests/eagain-common.h, tests/mini-eagain-dtls.c, + tests/mini-eagain.c, tests/mini.c: Avoid using + gnutls_transport_set_global_errno() and use + gnutls_transport_set_errno() instead. -2007-02-16 Simon Josefsson +2011-04-07 Nikos Mavrogiannopoulos - * tests/hostname-check/hostname-check.c: Test wildcard stuff too. + * lib/system_override.c: win32 fixes for set_global_errno(). + Suggested by LRN. -2007-02-16 Simon Josefsson +2011-04-07 Nikos Mavrogiannopoulos - * lib/x509/rfc2818_hostname.c: Indent. + * src/benchmark.c: Win32 changes for benchmark. Patch by LRN. -2007-02-16 Simon Josefsson +2011-04-07 Nikos Mavrogiannopoulos - * lib/x509/rfc2818_hostname.c: Support iPAddress too. Doc fix. + * tests/anonself.c, tests/dhepskself.c, tests/openpgpself.c, + tests/pskself.c, tests/resume.c, tests/rng-fork.c, tests/x509dn.c, + tests/x509self.c: win32 fixes. Patch by LRN. -2007-02-16 Simon Josefsson +2011-04-07 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/gnutls_buffers.c: minor modification in write_emu(). -2007-02-16 Simon Josefsson +2011-04-07 Nikos Mavrogiannopoulos - * tests/hostname-check/hostname-check.c: Fix mem leak. + * lib/opencdk/literal.c, lib/opencdk/main.h, lib/opencdk/misc.c: + simplified cdk_trim_string() to make it safer to use. -2007-02-16 Simon Josefsson +2011-04-07 Nikos Mavrogiannopoulos - * lib/x509/rfc2818_hostname.c: Doc fix. + * lib/x509/privkey_pkcs8.c: correctly reset params. -2007-02-16 Simon Josefsson +2011-04-07 Nikos Mavrogiannopoulos - * lib/x509/rfc2818_hostname.c: Don't treat absence of CN in subject - as a successful RFC 2818 hostname comparison match. Reported by - "Richard W.M. Jones" . + * lib/x509/crl.c, lib/x509/x509.c: use correct pointer size. -2007-02-16 Simon Josefsson +2011-04-07 Nikos Mavrogiannopoulos - * tests/hostname-check/.cvsignore: [no log message] + * lib/gnutls_algorithms.c: correctly compare sign algorithm_st. -2007-02-16 Simon Josefsson +2011-04-07 Nikos Mavrogiannopoulos - * configure.in, tests/Makefile.am, - tests/hostname-check/Makefile.am, tests/hostname-check/README, - tests/hostname-check/hostname-check.c: Add self test of rfc2818 - server identity check. + * lib/opencdk/Makefile.am, lib/opencdk/context.h, + lib/opencdk/main.c, lib/opencdk/main.h, lib/opencdk/opencdk.h, + lib/opencdk/verify.c: removed unused code -2007-02-15 Simon Josefsson +2011-04-07 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/opencdk/armor.c: null terminate the armored string -2007-02-15 Simon Josefsson +2011-04-07 Nikos Mavrogiannopoulos - * lib/gnutls.pc.in: Add 'Requires: libtasn1' to make 'pkg-config - --libs gnutls' output -ltasn1. Reported by Pavlov Konstantin - . + * src/cli.c: properly null terminate string. -2007-02-14 Simon Josefsson +2011-04-07 Nikos Mavrogiannopoulos - * lib/gnutls_hash_int.c: Avoid assert. + * src/common.c, src/pkcs11.c: check PIN size. -2007-02-14 Simon Josefsson +2011-04-07 Nikos Mavrogiannopoulos - * src/certtool.c: Make sure NULL is a pointer. + * src/srptool.c: check salt size. -2007-02-14 Simon Josefsson +2011-04-07 Nikos Mavrogiannopoulos - * src/certtool.c: Change vararg 0 to NULL. Tiny change suggested by - Joe Orton . + * lib/opencdk/read-packet.c: more clear bounds checking -2007-02-14 Simon Josefsson +2011-04-06 Nikos Mavrogiannopoulos - * includes/gnutls/gnutls.h.in: Fix gnutls_authz_data_format_type_t. + * lib/x509/privkey.c: initialize e and d. -2007-02-14 Simon Josefsson +2011-04-06 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/pkcs11_write.c: deinitialize pks variable only when needed. -2007-02-14 Simon Josefsson +2011-04-06 Nikos Mavrogiannopoulos - * includes/gnutls/gnutls.h.in: Add - gnutls_supplemental_data_format_type_t with member - GNUTLS_SUPPLEMENTAL_AUTHZ_DATA. + * lib/openpgp/pgpverify.c: Initialize verify. -2007-02-14 Simon Josefsson +2011-04-06 Nikos Mavrogiannopoulos - * NEWS: Add. + * src/cli.c: initialize session_id_size. -2007-02-14 Simon Josefsson +2011-04-06 Nikos Mavrogiannopoulos - * includes/gnutls/gnutls.h.in: Add gnutls_authz_data_format_type_t, - with members GNUTLS_AUTHZ_X509_ATTR_CERT, - GNUTLS_AUTHZ_SAML_ASSERTION, GNUTLS_AUTHZ_X509_ATTR_CERT_URL, - GNUTLS_AUTHZ_SAML_ASSERTION_URL. + * lib/opencdk/misc.c, lib/opencdk/opencdk.h: removed unneeded + function. -2007-02-14 Simon Josefsson +2011-04-06 Nikos Mavrogiannopoulos - * lib/gnutls_int.h: Reorder. + * lib/pakchois/pakchois.c: correctly traverse slots -2007-02-14 Simon Josefsson +2011-04-05 Nikos Mavrogiannopoulos - * lib/gnutls_int.h: Add GNUTLS_EXTENSION_AUTHZ_CLIENT and - GNUTLS_EXTENSION_AUTHZ_SERVER. + * guile/src/core.c: avoid using a freed pointer. -2007-02-14 Simon Josefsson +2011-04-05 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/pkcs11.c: Initialize tinfo using the initially available + information. -2007-02-14 Simon Josefsson +2011-04-05 Nikos Mavrogiannopoulos - * includes/gnutls/gnutls.h.in: Add GNUTLS_HANDSHAKE_SUPPLEMENTAL. + * lib/gnutls_dtls.c: corrected debugging info. -2007-02-14 Simon Josefsson +2011-04-04 Nikos Mavrogiannopoulos - * includes/gnutls/gnutls.h.in: Spell out handshake types. + * tests/eagain-common.h, tests/mini-eagain-dtls.c, + tests/mini-eagain.c, tests/mini.c: The mini-* programs were + combined. -2007-02-13 Simon Josefsson +2011-04-04 Nikos Mavrogiannopoulos - * src/certtool-gaa.c, src/certtool-gaa.h: Update. + * lib/gnutls_record.c: Do not cleanup bufel after it has been + inserted into buffer. -2007-02-13 Simon Josefsson +2011-04-04 Nikos Mavrogiannopoulos - * src/certtool.c: Use error(). + * lib/gnutls_mbuffers.c: Combined dequeue with remove_front() and + pop_first(). -2007-02-13 Simon Josefsson +2011-04-03 Nikos Mavrogiannopoulos - * src/certtool.c: Cleanup p12 printing. + * doc/examples/Makefile.am: Compile ex-cert-select-pkcs11 as a + separate program. -2007-02-13 Simon Josefsson +2011-04-03 Nikos Mavrogiannopoulos - * src/certtool.c: Cleanup pkcs7_info. + * .gitignore, lib/gnutls_buffers.c, lib/gnutls_dtls.c, + lib/gnutls_int.h, lib/gnutls_state.c, + lib/includes/gnutls/gnutls.h.in, lib/system.h, tests/Makefile.am, + tests/eagain-common.h, tests/mini-eagain-dtls.c, + tests/mini-eagain.c, tests/utils.c: Added support for non-blocking + DTLS. Added mini-eagain-dtls to test its operation. Improved + mini-eagain. -2007-02-13 Simon Josefsson +2011-04-03 Nikos Mavrogiannopoulos - * src/certtool.c: Fix. + * lib/nettle/init.c: gcrypt.h is not really needed. Reported by + David Reiser. -2007-02-13 Simon Josefsson +2011-04-03 Nikos Mavrogiannopoulos - * src/certtool.c: Better errors. + * src/srptool.c: corrected header inclusion. -2007-02-13 Simon Josefsson +2011-04-03 Nikos Mavrogiannopoulos - * src/certtool.gaa: Remove --copyright (use --version). + * src/Makefile.am, src/crypt-gaa.c, src/crypt-gaa.h, src/crypt.c, + src/crypt.gaa, src/srptool-gaa.c, src/srptool-gaa.h, src/srptool.c, + src/srptool.gaa: crypt.* renamed to srptool.*. -2007-02-13 Simon Josefsson +2011-04-03 Nikos Mavrogiannopoulos - * src/certtool.c: Use version-etc. + * lib/gnutls_srp.c: Corrected bug in gnutls_srp_verifier() that + prevented the allocation of a verifier. Reported by Andrew Wiseman. -2007-02-13 Simon Josefsson +2011-04-03 Nikos Mavrogiannopoulos - * configure.in: Fix for version-etc. + * src/crypt-gaa.c, src/crypt-gaa.h, src/crypt.c, src/crypt.gaa: + Added debug option to srptool. -2007-02-13 Simon Josefsson +2011-04-03 Nikos Mavrogiannopoulos - * gl/gnulib.mk, gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, - gl/m4/stdarg.m4, gl/version-etc-fsf.c, gl/version-etc.c, - gl/version-etc.h: Update. + * doc/cha-cert-auth.texi: Documented p11-kit. -2007-02-13 Simon Josefsson +2011-04-02 Nikos Mavrogiannopoulos - * src/certtool.c: Cleanup CRL. + * doc/cha-library.texi: corrected typo -2007-02-13 Simon Josefsson +2011-03-30 Nikos Mavrogiannopoulos - * src/certtool.c: Cleanup. + * tests/scripts/common.sh: Added copyright. -2007-02-13 Simon Josefsson +2011-03-30 Nikos Mavrogiannopoulos - * src/certtool.c: Simplify. + * configure.ac, tests/Makefile.am, tests/dsa/testdsa, + tests/openpgp-certs/testcerts, tests/scripts/Makefile.am, + tests/scripts/common.sh: Reorganized scripts that use test servers, + based on patch by Cedric Arbogast. -2007-02-13 Simon Josefsson +2011-03-30 Nikos Mavrogiannopoulos - * src/certtool.c: Cleanups. + * src/certtool-gaa.c, src/certtool.gaa: Create certificate request + with stricter permissions. Reported by Luca Capello. -2007-02-13 Simon Josefsson +2011-03-28 Nikos Mavrogiannopoulos - * src/certtool.c: Rewrite generate_private_key_int. + * tests/openpgp-certs/Makefile.am: enabled testcerts. -2007-02-13 Simon Josefsson +2011-03-28 Nikos Mavrogiannopoulos - * src/certtool.c: Fix mem leak. + * tests/openpgp-certs/testcerts: made more silent. -2007-02-13 Simon Josefsson +2011-03-28 Nikos Mavrogiannopoulos - * src/certtool.c: Fix crl_info. + * tests/dsa/testdsa, tests/openpgp-certs/testcerts: Made scripts + bourne shell compliant and not bash. -2007-02-13 Simon Josefsson +2011-03-26 Nikos Mavrogiannopoulos - * src/certtool.c: Rewrite load_private_key. + * THANKS: e-mail addresses are not directly recognizable. -2007-02-13 Simon Josefsson +2011-03-26 Nikos Mavrogiannopoulos - * src/certtool.c: Rewrite load_request. + * lib/opencdk/stream.c: Corrected access to freed memory location. + Reported by Vitaly Kruglikov. -2007-02-13 Simon Josefsson +2011-03-26 Nikos Mavrogiannopoulos - * src/certtool.c: Rewrite load_ca_private_key. + * THANKS: added Mark and Vitaly to THANKS. -2007-02-13 Simon Josefsson +2011-03-26 Nikos Mavrogiannopoulos - * src/certtool.c: Remove. + * lib/system.c: Corrected windows system_errno() function. Reported + and patch by Mark Brand. -2007-02-13 Simon Josefsson +2011-03-26 Nikos Mavrogiannopoulos - * src/certtool.c: Rewrite load_ca_cert. + * lib/includes/gnutls/compat.h: C++ compatibility fix for compat.h. + Suggested by Mark Brand. -2007-02-13 Simon Josefsson +2011-03-25 Nikos Mavrogiannopoulos - * src/certtool.c: No limit on CRL size during verification. + * lib/opencdk/verify.c: Corrected uninitialized var deinitiation. + Reported by Vitaly Kruglikov. -2007-02-13 Simon Josefsson +2011-03-25 Nikos Mavrogiannopoulos - * lib/x509/x509.c: Simplify. + * lib/gnutls_sig.c: eliminate compiler warning. Reported by Andreas + Metzler. -2007-02-13 Simon Josefsson +2011-03-25 Nikos Mavrogiannopoulos - * tests/certificate_set_x509_crl.c: Need config.h. + * lib/includes/gnutls/openpgp.h, lib/openpgp/gnutls_openpgp.c, + lib/openpgp/pgp.c, lib/openpgp/privkey.c: Fix size of + gnutls_openpgp_keyid_t by using the GNUTLS_OPENPGP_KEYID_SIZE + definition. Reported by Andreas Metzler. -2007-02-13 Simon Josefsson +2011-03-24 Nikos Mavrogiannopoulos - * src/Makefile.am: Use AM_CPPFLAGS, not obsolete INCLUDES. + * NEWS: included news of 2.12.0 -2007-02-13 Simon Josefsson +2011-03-24 Nikos Mavrogiannopoulos - * src/Makefile.am: Need libgnu.la. + * guile/tests/Makefile.am: added missing files. -2007-02-13 Simon Josefsson +2011-03-23 Nikos Mavrogiannopoulos - * src/errcodes.c: Need config.h. + * lib/includes/gnutls/abstract.h, lib/includes/gnutls/gnutls.h.in, + lib/includes/gnutls/pkcs11.h, lib/includes/gnutls/x509.h, + lib/pkcs11.c, lib/x509/crl.c: documentation fixes. -2007-02-13 Simon Josefsson +2011-03-23 Nikos Mavrogiannopoulos - * lib/gnutls_asn1_tab.c, lib/pkix_asn1_tab.c: Update. + * tests/dsa/testdsa: Added DSA tests for client certificates as + well. -2007-02-13 Simon Josefsson +2011-03-23 Nikos Mavrogiannopoulos - * configure.in: Remove stuff obsoleted by time_r. + * lib/ext_signature.c, lib/ext_signature.h, lib/gnutls_handshake.c, + lib/gnutls_sig.c, lib/includes/gnutls/abstract.h, lib/x509/verify.c: + Simplified signature algorithm selection. -2007-02-13 Simon Josefsson +2011-03-23 Nikos Mavrogiannopoulos - * configure.in: Don't check for time.h, not needed. + * src/cli.c: The processed messages go to stdout. -2007-02-13 Simon Josefsson +2011-03-23 Nikos Mavrogiannopoulos - * lib/defines.h: Only use time.h, from gnulib if needed. + * lib/gnutls_privkey.c: updated documentation -2007-02-13 Simon Josefsson +2011-03-23 Nikos Mavrogiannopoulos - * lgl/.cvsignore: [no log message] + * lib/gnutls_algorithms.c, lib/gnutls_int.h, + lib/includes/gnutls/gnutls.h.in: Increased GNUTLS_MAX_ALGORITHM_NUM + to 32. The gnutls_*_list() functions generate the list of algorithm + on the spot and no longer require a static duplicate list of + algorithms. This comes at a cost of not being thread safe (which is + not significant since those functions are only used for special + purposes). -2007-02-13 Simon Josefsson +2011-03-21 Nikos Mavrogiannopoulos - * tests/pathlen/ca-no-pathlen.pem, - tests/pathlen/no-ca-or-pathlen.pem: UPdate. + * lib/gnutls_privkey.c: corrected parameter. -2007-02-13 Simon Josefsson +2011-03-21 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/gnutls_pubkey.c, lib/includes/gnutls/pkcs11.h, lib/pkcs11.c, + lib/pkcs11_privkey.c, lib/pkcs11_secret.c, lib/x509/privkey.c: + Documentation fixes and cleanups. -2007-02-13 Simon Josefsson +2011-03-20 Nikos Mavrogiannopoulos - * lib/x509/output.c: Remove. + * src/cli.c: define variable locally -2007-02-13 Simon Josefsson +2011-03-20 Nikos Mavrogiannopoulos - * gl/string_.h, lgl/Makefile.am, lgl/m4/gnulib-comp.m4, - lgl/m4/time_h.m4, lgl/m4/time_r.m4, lgl/string_.h, lgl/time_.h, - lgl/time_r.c, lgl/time_r.h: Update. + * src/cli.c, src/serv.c: use IP_DONTFRAG if it is defined. -2007-02-13 Simon Josefsson +2011-03-20 Nikos Mavrogiannopoulos - * tests/nist-pkits/.cvsignore, tests/x509paths/.cvsignore: [no log - message] + * lib/gnutls_buffers.c, lib/gnutls_buffers.h, lib/gnutls_dtls.c, + lib/gnutls_dtls.h, lib/gnutls_handshake.c, lib/gnutls_handshake.h, + lib/gnutls_int.h, lib/gnutls_record.c, + lib/includes/gnutls/gnutls.h.in, lib/system.c, lib/system.h, + src/cli.c, src/common.h, src/serv.c, src/udp-serv.c: Avoided waiting + for peer's retransmission to ensure receipt of finished messages, + and used a 'timer'-like to retransmit packets. -2007-02-13 Simon Josefsson +2011-03-20 Nikos Mavrogiannopoulos - * tests/nist-pkits/README: Fix. + * lib/gnutls_dtls.c, lib/includes/gnutls/dtls.h, lib/libgnutls.map: + added gnutls_dtls_get_data_mtu(). -2007-02-13 Simon Josefsson +2011-03-19 Nikos Mavrogiannopoulos - * tests/nist-pkits/gnutls-nist-tests.html: Add. + * tests/dsa/testdsa: make gnutls-cli more quiet. -2007-02-13 Simon Josefsson +2011-03-19 Nikos Mavrogiannopoulos - * tests/nist-pkits/README: Fix. + * configure.ac, tests/Makefile.am, tests/dsa/Makefile.am, + tests/dsa/cert.dsa.1024.pem, tests/dsa/cert.dsa.2048.pem, + tests/dsa/cert.dsa.3072.pem, tests/dsa/dsa.1024.pem, + tests/dsa/dsa.2048.pem, tests/dsa/dsa.3072.pem, tests/dsa/testdsa, + tests/suite/Makefile.in: Added test to verify connections with DSA + keys of various sizes. -2007-02-13 Simon Josefsson +2011-03-19 Nikos Mavrogiannopoulos - * tests/nist-pkits/pkits_test: Unpack. + * src/certtool.c: warn on generation of DSA keys of over 1024 bits. -2007-02-13 Simon Josefsson +2011-03-19 Nikos Mavrogiannopoulos - * tests/nist-pkits/.cvsignore: [no log message] + * lib/gnutls_alert.c, lib/gnutls_errors.c, lib/gnutls_sig.c, + lib/includes/gnutls/gnutls.h.in: Return a special error code if DSA + keys with over 1024 are being used with TLS 1.x, x<2. -2007-02-13 Simon Josefsson +2011-03-19 Nikos Mavrogiannopoulos - * tests/nist-pkits/pkits_test: Add. + * lib/nettle/pk.c: truncate hash size when asking to sign or verify + DSA with a longer hash. -2007-02-13 Simon Josefsson +2011-03-18 Nikos Mavrogiannopoulos - * tests/nist-pkits/pkits_test_list_generator.patch: Update. + * lib/gnutls_buffers.c, lib/system.c: Check for rejected connections + in system_recv_timeout(). -2007-02-13 Simon Josefsson +2011-03-18 Nikos Mavrogiannopoulos - * tests/nist-pkits/gnutls_test_entry: Remove. + * lib/system_override.c: quickly discuss callback format. -2007-02-13 Simon Josefsson +2011-03-16 Nikos Mavrogiannopoulos - * tests/nist-pkits/build-chain, tests/nist-pkits/gnutls_test_entry, - tests/nist-pkits/pkits_test_list_generator.patch: Add. + * lib/gnutls_dtls.c: When sending multiple cookies due to + verification errors do not increase the handshake sequence number + only the record sequence. -2007-02-13 Simon Josefsson +2011-03-16 Nikos Mavrogiannopoulos - * tests/nist-pkits/README: Add. + * AUTHORS: updated Jonathan -2007-02-13 Simon Josefsson +2011-03-16 Nikos Mavrogiannopoulos - * tests/nist-pkits/README: Add. + * tests/openpgp-auth.c: Added check for RSA ciphersuite in openpgp + keys. -2007-02-13 Simon Josefsson +2011-03-16 Nikos Mavrogiannopoulos - * lib/x509/mpi.c: We don't support inherited DSA parameters. + * lib/openpgp/privkey.c: read correct algorithm when decrypting data + and use correct number of private parameters. -2007-02-13 Simon Josefsson +2011-03-16 Nikos Mavrogiannopoulos - * tests/nist-pkits/pkits_crl, tests/nist-pkits/pkits_crt, - tests/nist-pkits/pkits_pkcs12, tests/nist-pkits/pkits_smime: Update. + * libextra/gnutls_extra.c: added missing ret. -2007-02-13 Simon Josefsson +2011-03-16 Nikos Mavrogiannopoulos - * tests/nist-pkits/pkits: Fix. + * lib/auth_cert.c: Set type when sending empty openpgp key. -2007-02-13 Simon Josefsson +2011-03-16 Nikos Mavrogiannopoulos - * tests/nist-pkits/pkits: Fix. + * lib/nettle/rnd.c, tests/Makefile.am, tests/rng-fork.c: Corrected + nettle's RNG behavior on fork and added a test case. -2007-02-13 Simon Josefsson +2011-03-16 Nikos Mavrogiannopoulos - * tests/nist-pkits/pkits: Fix. + * guile/tests/openpgp-auth.scm: enabled RSA and removed debugging. -2007-02-13 Simon Josefsson +2011-03-16 Nikos Mavrogiannopoulos - * tests/.cvsignore, tests/nist-pkits/.cvsignore: [no log message] + * lib/gnutls_privkey.c, lib/gnutls_pubkey.c, + lib/includes/gnutls/abstract.h, lib/openpgp/gnutls_openpgp.c, + tests/openpgp-auth.c, tests/openpgp-auth2.c: gnutls_pubkey_t and + gnutls_privkey_t can import either an openpgp subkey or a master + key. -2007-02-13 Simon Josefsson +2011-03-16 Nikos Mavrogiannopoulos - * tests/nist-pkits/README, tests/nist-pkits/pkits, - tests/nist-pkits/pkits_crl, tests/nist-pkits/pkits_crt, - tests/nist-pkits/pkits_pkcs12, tests/nist-pkits/pkits_smime, - tests/pkits, tests/pkits_crl, tests/pkits_crt, tests/pkits_pkcs12, - tests/pkits_smime: Move PKITS stuff to nist-pkits/. + * guile/tests/openpgp-auth.scm, guile/tests/openpgp-elg-pub.asc, + guile/tests/openpgp-elg-sec.asc, guile/tests/openpgp-keys.scm, + guile/tests/openpgp-pub.asc, guile/tests/openpgp-sec.asc: split the + pgp keys to elgamal and dsa. -2007-02-13 Simon Josefsson +2011-03-16 Nikos Mavrogiannopoulos - * doc/TODO: Add. + * lib/gnutls_errors.c, lib/includes/gnutls/gnutls.h.in, + lib/openpgp/pgp.c, lib/openpgp/privkey.c: introduced + GNUTLS_E_OPENPGP_PREFERRED_KEY_ERROR -2007-02-13 Simon Josefsson +2011-03-16 Nikos Mavrogiannopoulos - * tests/x509paths/README: Fix. + * lib/gnutls_algorithms.c: On unknown public key algorithms return + Unknown name. -2007-02-13 Simon Josefsson +2011-03-16 Nikos Mavrogiannopoulos - * tests/x509paths/chain: fix for chain 1. + * lib/gnutls_privkey.c: Read the public key algorithm from the + selected subkey and not the master key when importing to a + gnutls_privkey. -2007-02-13 Simon Josefsson +2011-03-16 Nikos Mavrogiannopoulos - * tests/.cvsignore: [no log message] + * lib/openpgp/gnutls_openpgp.c, tests/openpgpself.c: Documentation + fixed. Added fresh keys to test. -2007-02-13 Simon Josefsson +2011-03-15 Nikos Mavrogiannopoulos - * tests/chain, tests/x509paths/README, tests/x509paths/chain: Move - old NIST stuff to separate directory. + * tests/openpgpself.c: Test openpgp authentication with DSA-2048 bit + keys as well. -2007-02-13 Simon Josefsson +2011-03-15 Nikos Mavrogiannopoulos - * lib/x509/dn.c: Don't write to buf if *sizeof_buf==0. + * lib/openpgp/pgp.c: gnutls_openpgp_crt_get_auth_subkey() will no + longer return an unsupported subkey. -2007-02-13 Simon Josefsson +2011-03-15 Nikos Mavrogiannopoulos - * lib/x509/output.c: Don't use uninitialized. + * lib/x509/verify.c: Corrected verification of DSA-2048 keys. + Reported by teddy@fukt.bsnet.se. -2007-02-13 Simon Josefsson +2011-03-14 Nikos Mavrogiannopoulos - * lib/x509/x509.c: Don't access ret unless *ret_size>0. + * doc/cha-intro-tls.texi: Added + gnutls_transport_set_vec_push_function(). -2007-02-13 Simon Josefsson +2011-03-13 Nikos Mavrogiannopoulos - * configure.in: Fix PKI test. + * lib/gnutls_dtls.c, lib/includes/gnutls/dtls.h, lib/libgnutls.map, + src/udp-serv.c: updated cookie negotiation to use only a prestate + structure and avoids setting data to cookie. -2007-02-13 Simon Josefsson +2011-03-13 Nikos Mavrogiannopoulos - * doc/manpages/Makefile.am: Update. + * lib/gnutls_handshake.c: Use DTLS 1.0 instead of SSL 3.0 headers on + client hello in DTLS. -2007-02-13 Simon Josefsson +2011-03-13 Nikos Mavrogiannopoulos - * src/certtool.c: Simplify copyright. + * lib/gnutls_dtls.c, lib/gnutls_errors.c, + lib/includes/gnutls/dtls.h, lib/libgnutls.map, src/udp-serv.c: Added + photuris-like resource protection on the server. Added + gnutls_dtls_cookie_send(), gnutls_dtls_cookie_verify() and + gnutls_dtls_cookie_set() to avoid initializing a session before + cookie is verified. -2007-02-13 Simon Josefsson +2011-03-13 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/crypto-api.c, lib/ext_session_ticket.c, + lib/includes/gnutls/gnutls.h.in: added gnutls_key_generate() to API. -2007-02-13 Simon Josefsson +2011-03-13 Nikos Mavrogiannopoulos - * src/certtool-cfg.c: Remove. + * lib/ext_session_ticket.c: Avoid the usage of structures where the + attribute packed is assumed. -2007-02-13 Simon Josefsson +2011-03-13 Nikos Mavrogiannopoulos - * src/certtool.c: Remove unused. + * lib/gnutls_buffers.c, lib/gnutls_buffers.h, + lib/gnutls_handshake.c: renamed gnutls_handshake_buffer_* functions + to gnutls_handshake_hash_buffer_* to separate from new API functions + and corrected its usage. -2007-02-13 Simon Josefsson +2011-03-13 Nikos Mavrogiannopoulos - * src/Makefile.am: Make certtool conditional on ENABLE_PKI. + * lib/gnutls_algorithms.c: Added DSA-SHA256, DSA-SHA224 and + RSA-SHA224 to the supported signature algorithms list. Suggested by + teddy@fukt.bsnet.se -2007-02-13 Simon Josefsson +2011-03-13 Nikos Mavrogiannopoulos - * configure.in: Add conditional for PKI stuff. + * lib/gnutls_constate.c, lib/gnutls_constate.h, + lib/gnutls_handshake.c, lib/gnutls_int.h, lib/gnutls_v2_compat.c: + session->internals.compression_method was removed. It was no longer + required since the new compression algorithm was stored to next + epoch as well. -2007-02-13 Simon Josefsson +2011-03-12 Nikos Mavrogiannopoulos - * src/certtool.c: Handle larger certificate lists. + * lib/gnutls_buffers.c, lib/gnutls_cipher.c, lib/gnutls_constate.c, + lib/gnutls_handshake.c, lib/gnutls_record.c, lib/gnutls_state.h: + _gnutls_is_dtls() is no more. IS_DTLS() is being used instead. -2007-02-13 Simon Josefsson +2011-03-12 Nikos Mavrogiannopoulos - * src/certtool.c: Fix. + * lib/ext_session_ticket.c: do not print debugging output on + non-fatal errors. -2007-02-13 Simon Josefsson +2011-03-12 Nikos Mavrogiannopoulos - * src/certtool.c: Fix. + * lib/ext_session_ticket.c, lib/gnutls_cipher.c, + lib/gnutls_cipher_int.c, lib/gnutls_constate.c, + lib/gnutls_hash_int.c, lib/gnutls_hash_int.h, lib/gnutls_record.c: + Properly reset the SSL 3.0 MAC algorithm. -2007-02-13 Simon Josefsson +2011-03-12 Nikos Mavrogiannopoulos - * lib/x509/output.c: crl: Support GNUTLS_X509_CRT_UNSIGNED_FULL. + * lib/gnutls_buffers.c, lib/gnutls_errors.h, + lib/gnutls_handshake.c, lib/x509/verify-high.c: cleanups. Introduced + gnutls_assert_val_fatal() that only prints debugging messages on + non-fatal errors. -2007-02-13 Simon Josefsson +2011-03-12 Nikos Mavrogiannopoulos - * src/certtool.c: Use gnutls_x509_crl_print. + * lib/gnutls_alert.c: Added string for GNUTLS_A_SSL3_NO_CERTIFICATE. -2007-02-13 Simon Josefsson +2011-03-12 Nikos Mavrogiannopoulos - * NEWS, includes/gnutls/x509.h, lib/x509/crl.c, lib/x509/output.c, - lib/x509/x509.c: Add gnutls_x509_crl_get_signature and - gnutls_x509_crl_print. + * lib/gnutls_algorithms.c, lib/gnutls_algorithms.h: + gnutls_version_has_variable_padding is not really needed. A check + for SSL3.0 is more clear. -2007-02-13 Simon Josefsson +2011-03-12 Nikos Mavrogiannopoulos - * src/certtool.c: Use error(). + * lib/debug.c, lib/gnutls_buffers.c, lib/gnutls_constate.c, + lib/gnutls_handshake.c, lib/gnutls_record.c, lib/gnutls_v2_compat.c: + Corrected SSL2 client hello handling. -2007-02-13 Simon Josefsson +2011-03-12 Nikos Mavrogiannopoulos - * libextra/Makefile.am: We do need lgl/ though. + * lib/gnutls_record.c: do not set default record version (i.e. SSL + 3.0) during a re-handshake. -2007-02-13 Simon Josefsson +2011-03-12 Nikos Mavrogiannopoulos - * libextra/Makefile.am, libextra/opencdk/Makefile.am: No need for - gl/. + * lib/gnutls_priority.c: default behavior is to send SSL3.0 client + hellos. -2007-02-13 Simon Josefsson +2011-03-12 Nikos Mavrogiannopoulos - * libextra/openpgp/Makefile.am: Don't include gl/. + * lib/gnutls_handshake.c, lib/gnutls_int.h, lib/gnutls_priority.c: + corrected ssl3 record version sending in client hello. -2007-02-13 Simon Josefsson +2011-03-12 Nikos Mavrogiannopoulos - * gl/error.c, gl/error.h, gl/gnulib.mk, gl/m4/error.m4, - gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, gl/progname.c, - gl/progname.h: Add. + * NEWS, doc/cha-intro-tls.texi, lib/gnutls_buffers.c, + lib/gnutls_int.h, lib/gnutls_record.c, lib/gnutls_state.c, + lib/includes/gnutls/compat.h, lib/includes/gnutls/gnutls.h.in, + lib/libgnutls.map: gnutls_transport_set_lowat() is no more. -2007-02-13 Simon Josefsson +2011-03-12 Nikos Mavrogiannopoulos - * configure.in: Revert. + * lib/gnutls_buffers.c, lib/gnutls_record.c: some cleanups -2007-02-13 Simon Josefsson +2011-03-12 Nikos Mavrogiannopoulos - * Makefile.am, configure.in: Revert. + * lib/x509/common.h, lib/x509/verify-high.c, lib/x509/verify.c: + gnutls_x509_trust_list_verify_crt shortens the provided certificate + list based on the existing trusted CAs. -2007-02-13 Simon Josefsson +2011-03-12 Nikos Mavrogiannopoulos - * gl/dummy.c, src/lib/Makefile.am, src/lib/error.c, - src/lib/error.h, src/lib/m4/error.m4, src/lib/m4/gnulib-cache.m4, - src/lib/m4/gnulib-common.m4, src/lib/m4/gnulib-comp.m4, - src/lib/m4/gnulib-tool.m4, src/lib/progname.c, src/lib/progname.h: - Remove. + * lib/gnutls_int.h, lib/gnutls_state.c, lib/gnutlsxx.cpp, + lib/includes/gnutls/compat.h, lib/includes/gnutls/dtls.h, + lib/includes/gnutls/gnutls.h.in, lib/includes/gnutls/gnutlsxx.h, + lib/libgnutls.map, libextra/includes/gnutls/openssl.h, src/cli.c, + src/serv.c: gnutls_init_dtls() was made redundant. The same for + gnutls_end_connection_t which was replaced by a flags integer.. -2007-02-13 Simon Josefsson +2011-03-12 Nikos Mavrogiannopoulos - * libextra/Makefile.am: No need for gl/. + * lib/auth_psk.c, lib/auth_psk.h, lib/ext_session_ticket.c, + lib/ext_srp.c, lib/gnutls_sig.c, lib/gnutls_x509.c, + lib/pkcs11_int.h, lib/system.c, lib/system.h, lib/x509/mpi.c, + lib/x509/verify.c, src/certtool-common.h, src/certtool.c, + src/common.c, src/pkcs11.c, src/udp-serv.c: Corrected types. -2007-02-13 Simon Josefsson +2011-03-11 Nikos Mavrogiannopoulos - * Makefile.am: Fix src/lib/. + * src/cli-gaa.c, src/cli-gaa.h, src/cli.c, src/cli.gaa, + src/serv-gaa.c, src/serv-gaa.h, src/serv.c, src/serv.gaa, + src/udp-serv.c, src/udp-serv.h: Added --mtu option. -2007-02-13 Simon Josefsson +2011-03-11 Nikos Mavrogiannopoulos - * configure.in: Build src/lib/. + * lib/gnutls_buffers.c: properly re-generate headers of fragmented + packets. -2007-02-13 Simon Josefsson +2011-03-11 Nikos Mavrogiannopoulos - * configure.in: Init src/lib/. + * lib/gnutls_state.c: increased initial retransmission time to 1 + sec. -2007-02-13 Simon Josefsson +2011-03-11 Nikos Mavrogiannopoulos - * gl/gnulib.mk, gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, - src/lib/Makefile.am, src/lib/m4/gnulib-cache.m4, - src/lib/m4/gnulib-comp.m4: Update. + * lib/gnutls_handshake.c: In DTLS do not hash messages that + shouldn't be hashed (i.e. hello verify request). -2007-02-13 Simon Josefsson +2011-03-11 Nikos Mavrogiannopoulos - * gl/error.c, gl/error.h, gl/m4/error.m4: Remove. + * lib/gnutls_cipher.c: Corrected size check in block encrypted + records. -2007-02-13 Simon Josefsson +2011-03-10 Nikos Mavrogiannopoulos - * gl/error.c, gl/error.h, gl/gnulib.mk, gl/m4/error.m4, - gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, src/lib/Makefile.am, - src/lib/error.c, src/lib/error.h, src/lib/m4/error.m4, - src/lib/m4/gnulib-cache.m4, src/lib/m4/gnulib-common.m4, - src/lib/m4/gnulib-comp.m4, src/lib/m4/gnulib-tool.m4, - src/lib/progname.c, src/lib/progname.h: Add. + * lib/gnutls_buffers.c, lib/gnutls_handshake.c: Corrected behavior + in normal TLS handshake. -2007-02-13 Simon Josefsson +2011-03-10 Nikos Mavrogiannopoulos - * src/certtool.c: No size limit on CRL data. + * libextra/Makefile.am: link libgnutls-extra against libgcrypt if + required. Based on patch by Andreas Metzler + -2007-02-12 Simon Josefsson +2011-03-10 Nikos Mavrogiannopoulos - * lib/x509/common.c: (_gnutls_x509_san_find_type): Support GNUTLS_SAN_DN. + * NEWS, lib/m4/hooks.m4, libextra/Makefile.am: increased the so + version of libgnutls-openssl. -2007-02-12 Simon Josefsson +2011-03-05 Nikos Mavrogiannopoulos - * lib/x509/output.c: Support GNUTLS_SAN_DN. + * lib/ext_session_ticket.c, lib/gnutls_buffers.c, + lib/gnutls_buffers.h, lib/gnutls_cipher.c, lib/gnutls_dtls.c, + lib/gnutls_errors.c, lib/gnutls_handshake.c, + lib/gnutls_handshake.h, lib/gnutls_int.h, lib/gnutls_kx.c, + lib/gnutls_mbuffers.c, lib/gnutls_mbuffers.h, lib/gnutls_record.c, + lib/gnutls_state.c, lib/gnutls_str.c, lib/gnutls_v2_compat.c, + lib/includes/gnutls/gnutls.h.in: Added intermediate handshake layer + that will order handshake packets and drop duplicates. -2007-02-12 Simon Josefsson +2011-03-05 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/gnutls_record.c: handle non fatal errors when receiving record + headers. -2007-02-12 Simon Josefsson +2011-03-05 Nikos Mavrogiannopoulos - * lib/x509/x509.c: (parse_general_name): Support GNUTLS_SAN_DN. + * lib/gnutls_cipher.c: memcpy -> memmove. -2007-02-12 Simon Josefsson +2011-03-05 Nikos Mavrogiannopoulos - * NEWS: Fix. + * lib/gnutls_buffers.c, lib/gnutls_int.h: removed GMAX -2007-02-12 Simon Josefsson +2011-03-02 Nikos Mavrogiannopoulos - * configure.in: Bump versions. + * src/certtool.c: Allow providing no password for PKCS #12 structure + generation. Reported by Daniel Kahn Gillmor. -2007-02-12 Simon Josefsson +2011-03-02 Nikos Mavrogiannopoulos - * NEWS, includes/gnutls/gnutls.h.in: Add. + * src/certtool-cfg.c: consistently print all interactive questions + to stderr. Reported by Daniel Kahn Gillmor. -2007-02-12 Simon Josefsson +2011-02-26 Nikos Mavrogiannopoulos - * ChangeLog: [no log message] + * lib/gnutls_buffers.c, lib/gnutls_buffers.h, lib/gnutls_dtls.c, + lib/gnutls_int.h, lib/gnutls_mbuffers.c, lib/gnutls_mbuffers.h, + lib/gnutls_record.c, lib/gnutls_state.c: combined all the record + buffers in one. -2007-02-12 Simon Josefsson +2011-02-26 Nikos Mavrogiannopoulos - * NEWS: Version 1.7.6. + * lib/gnutls_buffers.c, lib/gnutls_buffers.h, lib/gnutls_dtls.c, + lib/gnutls_int.h, lib/gnutls_mbuffers.c, lib/gnutls_mbuffers.h, + lib/gnutls_record.c, lib/gnutls_record.h, lib/gnutls_state.c: + internal buffering for record and handshake data changed from + gnutls_buffers to gnutls_mbuffers. -2007-02-12 Simon Josefsson +2011-02-26 Nikos Mavrogiannopoulos - * configure.in: New APIs, bump libtool library versions. + * lib/debug.c, lib/gnutls_buffers.c, lib/gnutls_int.h, + lib/gnutls_record.c, lib/gnutls_state.c, + lib/includes/gnutls/gnutls.h.in: Removed last pieces of inner + application. -2007-02-12 Simon Josefsson +2011-02-26 Nikos Mavrogiannopoulos - * gl/gnulib.mk, gl/m4/string_h.m4, gl/string_.h, lgl/Makefile.am, - lgl/m4/string_h.m4, lgl/string_.h: Update. + * lib/gnutls_record.c: some cleanups -2007-02-12 Simon Josefsson +2011-03-01 Ludovic Courtès - * Makefile.am: Use latest docs on web site. + * guile/tests/anonymous-auth.scm, guile/tests/openpgp-auth.scm, + guile/tests/x509-auth.scm: guile: Change tests to use priority + strings. -2007-02-12 Simon Josefsson +2011-03-01 Ludovic Courtès - * po/POTFILES.in: Add. + * src/Makefile.am: Add `udp-serv.h' to the distribution. -2007-02-12 Simon Josefsson +2011-02-28 Andreas Metzler - * lib/x509/output.c: Mark for translation. + * lib/libgnutls.map: fix duplicate symbols in version script These three symbols are listed both in the GNUTLS_2_8 and the + GNUTLS_2_10 section. binutils uses the first occurence, drop the + second one. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-12 Simon Josefsson +2011-02-28 Nikos Mavrogiannopoulos - * lib/pkix_asn1_tab.c: Generated. + * doc/cha-intro-tls.texi: updates on -ALL priorities. -2007-02-12 Simon Josefsson +2011-02-28 Nikos Mavrogiannopoulos - * lib/x509/output.c: Print more than one SAN. + * lib/ext_signature.c: Restrict the signature algorithms we + advertize to SHA1 and SHA256. -2007-02-12 Simon Josefsson +2011-02-28 Ludovic Courtès - * lib/x509/output.c: Better printing of XMPP SAN. + * lib/includes/Makefile.am: Add `gnutls/dtls.h' to the distribution. -2007-02-12 Simon Josefsson +2011-02-27 Ludovic Courtès - * lib/pkix.asn: Add XMPP definitions. + * guile/modules/system/documentation/c-snarf.scm: guile: Fix + docstring extraction with CPP 4.5+. -2007-02-12 Simon Josefsson +2011-02-27 Ludovic Courtès - * lib/x509/x509.c: Doc fix. + * doc/Makefile.am: Pass the right CPPFLAGS when building Guile doc. -2007-02-12 Simon Josefsson +2011-02-27 Ludovic Courtès - * lib/x509/x509.c: Decode XMPP data. Suggested by Matthias Wimmer - . + * doc/cha-intro-tls.texi, guile/src/core.c: Add nodes for the + subsections of "The TLS Handshake Protocol". -2007-02-12 Simon Josefsson +2011-02-27 Ludovic Courtès - * src/serv.c: Print X.509 client cert info. + * lib/Makefile.am: Add `lib/gnutls_dtls.h' to the distribution. -2007-02-09 Simon Josefsson +2011-02-27 Ludovic Courtès - * src/serv.c: Text fix. + * guile/modules/gnutls.scm, guile/modules/gnutls/build/enums.scm, + guile/modules/gnutls/build/priorities.scm, guile/src/core.c, + guile/src/errors.c, guile/src/errors.h, guile/tests/Makefile.am, + guile/tests/priorities.scm: guile: Wrap + `gnutls_priority_set_direct'; deprecate the old method. -2007-02-09 Simon Josefsson +2011-02-27 Ludovic Courtès - * doc/manpages/Makefile.am: Update. + * doc/scripts/gdoc, doc/scripts/sort2.pl: Avoid hard-coded + /usr/bin/perl (trick taken from Gnulib.) -2007-02-09 Simon Josefsson +2011-02-27 Ludovic Courtès - * tests/pathlen/ca-no-pathlen.pem, - tests/pathlen/no-ca-or-pathlen.pem: Update. + * libextra/gnutls_extra.c: Fix LZO-enabled builds. -2007-02-09 Simon Josefsson +2011-02-24 Nikos Mavrogiannopoulos - * lib/x509/output.c: strftime %Z on mingw32 seems to not understand - that gmtime was used and that the time given is in UTC. Just hard - code it to UTC. + * lib/nettle/rnd.c: Detect fork() in the random number generator and + reseed. -2007-02-09 Simon Josefsson +2011-02-23 Nikos Mavrogiannopoulos - * lib/gnutls_str.c: Typo. + * lib/gnutls_dtls.c, lib/gnutls_state.c: use timeouts closer to DTLS + RFC. -2007-02-09 Simon Josefsson +2011-02-23 Nikos Mavrogiannopoulos - * lgl/Makefile.am, lgl/asprintf.c, lgl/m4/gnulib-cache.m4, - lgl/m4/gnulib-comp.m4, lgl/m4/vasprintf.m4, lgl/vasprintf.c, - lgl/vasprintf.h: Add. + * lib/gnutls_state.c, lib/includes/gnutls/gnutls.h.in, + lib/libgnutls.map, lib/system_override.c: Renamed + gnutls_transport_set_push_function2() to + gnutls_transport_set_vec_push_function(). -2007-02-09 Simon Josefsson +2011-02-20 Simon Josefsson - * lib/x509/output.c: Use gnulib's time_r for systems that lack - gmtime_r. + * NEWS, doc/manpages/Makefile.am, lib/includes/gnutls/compat.h, + lib/libgnutls.map, lib/x509/crq.c: Remove + gnutls_x509_crq_get_preferred_hash_algorithm. -2007-02-09 Simon Josefsson +2011-02-20 Simon Josefsson - * lgl/Makefile.am, lgl/m4/gnulib-cache.m4, lgl/m4/gnulib-comp.m4, - lgl/m4/time_r.m4, lgl/time_r.c, lgl/time_r.h: Add. + * lib/libgnutls.map: Remove dropped functions. -2007-02-09 Simon Josefsson +2011-02-20 Simon Josefsson - * tests/pathlen/no-ca-or-pathlen.pem: Fix. + * lib/x509/crl_write.c: Add deprecated docstring. -2007-02-09 Simon Josefsson +2011-02-20 Simon Josefsson - * lib/x509/output.c: Strings not zero terminated. + * lib/x509/crq.c: Fix deprecated docstring. -2007-02-09 Simon Josefsson +2011-02-20 Simon Josefsson - * lib/x509/output.c: Hexprint unknown extensions. + * lib/x509/privkey.c: Fix docstring. -2007-02-09 Simon Josefsson +2011-02-20 Simon Josefsson - * tests/key-id/key-id, tests/pathlen/ca-no-pathlen.pem, - tests/pathlen/no-ca-or-pathlen.pem: Update. + * lib/gnutls_pubkey.c: Fix docstring of new function. -2007-02-09 Simon Josefsson +2011-02-20 Simon Josefsson - * src/certtool.c: Remove. + * lib/gnutls_cert.c: Fix docstring for deprecated functions. -2007-02-09 Simon Josefsson +2011-02-20 Simon Josefsson - * src/certtool.c: Fix. + * lib/gnutls_sig.c: Make it build. -2007-02-09 Simon Josefsson +2011-02-20 Simon Josefsson - * NEWS: Add. + * lib/openpgp/privkey.c: Fix docstring of deprecated function. -2007-02-09 Simon Josefsson +2011-02-20 Simon Josefsson - * lib/x509/output.c: Support GNUTLS_X509_CRT_UNSIGNED_FULL. + * lib/gnutls_pubkey.c: Fix docstrinf of new function. -2007-02-09 Simon Josefsson +2011-02-20 Simon Josefsson - * src/certtool.c: Use gnutls_x509_crt_print. + * doc/reference/gnutls-docs.sgml: Fix typo. -2007-02-09 Simon Josefsson +2011-02-20 Simon Josefsson - * NEWS, includes/gnutls/x509.h: Add. + * doc/reference/gnutls-docs.sgml: Improve text. -2007-02-09 Simon Josefsson +2011-02-20 Simon Josefsson - * lib/x509/output.c: Fix error messages. + * lib/x509/crl.c: Doc fix of new function. -2007-02-09 Simon Josefsson +2011-02-20 Simon Josefsson - * lib/x509/output.c: Really fix. + * lib/gnutls_cert.c, lib/gnutls_privkey.c, lib/x509/privkey.c: Fix + docstring of deprecated functions. -2007-02-09 Simon Josefsson +2011-02-20 Simon Josefsson - * lib/x509/output.c: Fix. + * NEWS, lib/gnutls_privkey.c, lib/includes/gnutls/abstract.h, + lib/includes/gnutls/compat.h, lib/libgnutls.map, lib/x509/crq.c, + lib/x509/sign.c, tests/x509sign-verify.c: Rename + gnutls_privkey_sign_data2 to gnutls_privkey_sign_data and + gnutls_privkey_sign_hash2 to gnutls_privkey_sign_hash. These were added during the 2.11 cycle where we don't promise ABI + compatibility. -2007-02-09 Simon Josefsson +2011-02-20 Simon Josefsson - * includes/gnutls/x509.h: Change signature (ok since no release). + * doc/gnutls-crypto-layers.eps: Add doc/gnutls-crypto-layers.eps. -2007-02-09 Simon Josefsson +2011-02-20 Simon Josefsson - * lib/x509/output.c: Use datum for outputs. + * doc/Makefile.am: Dist gnutls-crypto-layers.*. -2007-02-09 Simon Josefsson +2011-02-20 Simon Josefsson - * doc/protocol/draft-housley-tls-authz-extns-07.txt: Add. + * lib/Makefile.am: Add abstract_int.h. -2007-02-09 Simon Josefsson +2011-02-20 Simon Josefsson - * lib/x509/output.c: Simplify. + * .gitignore: Ignore more. -2007-02-09 Simon Josefsson +2011-02-20 Simon Josefsson - * lib/x509/extensions.c: Don't crash on NULL's. + * lib/Makefile.am: Link with -lnettle too. -2007-02-08 Simon Josefsson +2011-02-20 Simon Josefsson - * NEWS: Add, from older branches. + * doc/Makefile.am, doc/cha-programs.texi, lib/gnutls_privkey.c, + lib/includes/gnutls/compat.h, lib/includes/gnutls/x509.h, + lib/openpgp/pgp.c: Fix syntax-check warnings. -2007-02-08 Simon Josefsson +2011-02-22 Ludovic Courtès - * lib/x509/output.c: Doc fix. + * guile/modules/gnutls/build/enums.scm: guile: Remove + GNUTLS_A_INNER_APPLICATION_FAILURE and + GNUTLS_A_INNER_APPLICATION_VERIFICATION. -2007-02-08 Simon Josefsson +2011-02-22 Nikos Mavrogiannopoulos - * lib/x509/Makefile.am: Build output.c. + * lib/gnutls_session_pack.c: store entities as numbers to avoid + issues in big-little endian machines. -2007-02-08 Simon Josefsson +2011-02-22 Nikos Mavrogiannopoulos - * NEWS, lib/x509/output.c: Add. + * lib/gnutls_record.c: documented the DTLS sequence particularities. -2007-02-08 Simon Josefsson +2011-02-22 Nikos Mavrogiannopoulos - * NEWS, includes/gnutls/x509.h, lib/x509/x509.c: Add - gnutls_x509_crt_get_signature. + * lib/gnutls_buffers.c, lib/gnutls_handshake.c, + lib/gnutls_record.c, lib/gnutls_record.h, + lib/includes/gnutls/gnutls.h.in, lib/libgnutls.map, src/udp-serv.c: + Added gnutls_record_recv_seq() that can return the sequence number + of the record packet, in addition to data. -2007-02-08 Simon Josefsson +2011-02-21 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/gnutls_record.c: reorganized and simplified gnutls_recv_int(). + It will discard invalid DTLS packets. -2007-02-08 Simon Josefsson +2011-02-20 Nikos Mavrogiannopoulos - * doc/gnutls.texi: gnutls-serv: create client & proxy too. + * lib/gnutls_constate.h, lib/gnutls_record.c: Discard messages that + contain a different epoch than the current one. -2007-02-08 Simon Josefsson +2011-02-20 Nikos Mavrogiannopoulos - * src/certtool-cfg.c: Default proxy policy is ALL. Fixes crash. + * lib/gnutls_record.c: renamed internal function to reflect + functionality. -2007-02-08 Simon Josefsson +2011-02-20 Nikos Mavrogiannopoulos - * lib/x509/extensions.c: Fix warnings. + * lib/gnutls_buffers.c, lib/gnutls_dtls.c, lib/gnutls_dtls.h, + lib/gnutls_int.h, lib/gnutls_record.c, lib/gnutls_state.c: + Implemented a sliding window-like thing to discard replayed packets. -2007-02-08 Simon Josefsson +2011-02-20 Nikos Mavrogiannopoulos - * lib/gnutls_str.c, lib/gnutls_str.h: Add - _gnutls_string_append_printf. + * src/cli.c: gnutls-cli shouldn't print errors on EAGAIN and + INTERRUPTED. -2007-02-08 Simon Josefsson +2011-02-20 Nikos Mavrogiannopoulos - * NEWS, includes/gnutls/x509.h, lib/x509/x509.c: Add - gnutls_x509_crt_get_extension_data and - gnutls_x509_crt_get_extension_info. + * lib/gnutls_num.c: corrected uint48pp. -2007-02-08 Simon Josefsson +2011-02-20 Nikos Mavrogiannopoulos - * src/certtool.c: Fix. + * lib/gnutls_constate.c, lib/gnutls_mbuffers.c, lib/gnutls_state.c: + Epoch garbage collector is being run when handshake is being cleaned + up. -2007-02-08 Simon Josefsson +2011-02-20 Nikos Mavrogiannopoulos - * src/certtool.c: XMPP otherName SAN support. + * lib/gnutls_buffers.c, lib/gnutls_buffers.h, lib/gnutls_dtls.c, + lib/gnutls_handshake.c, lib/gnutls_int.h, lib/gnutls_num.c, + lib/gnutls_state.c: skip replays in handshake packets. -2007-02-08 Simon Josefsson +2011-02-20 Nikos Mavrogiannopoulos - * NEWS: Typo. + * lib/gnutls_record.c: Forbid SSL v.2 client hello in DTLS. -2007-02-08 Simon Josefsson +2011-02-20 Nikos Mavrogiannopoulos - * NEWS, THANKS: Add. + * lib/gnutls_buffers.c, lib/gnutls_int.h: removed unneeded + variables. -2007-02-08 Simon Josefsson +2011-02-20 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/gnutls_buffers.c, lib/gnutls_constate.h, lib/gnutls_dtls.c, + lib/gnutls_handshake.c, lib/gnutls_int.h, lib/gnutls_mbuffers.c: + Cleanups in combination of DTLS and TLS buffers. -2007-02-08 Simon Josefsson +2011-02-20 Nikos Mavrogiannopoulos - * NEWS, lib/x509/x509.c: Fix. + * lib/auth_dhe.c, lib/auth_rsa.c, lib/auth_rsa_export.c, + lib/auth_srp.c, lib/gnutls_algorithms.c, lib/gnutls_dh_primes.c, + lib/gnutls_errors.h, lib/gnutls_handshake.c, lib/gnutls_sig.c, + lib/opencdk/main.h, lib/openpgp/pgp.c, lib/openpgp/pgpverify.c, + lib/openpgp/privkey.c, lib/x509/common.c, lib/x509/dn.c, + lib/x509/pkcs12.c, lib/x509/pkcs7.c, lib/x509/privkey_pkcs8.c, + lib/x509/verify.c, lib/x509/x509_write.c, lib/x509_b64.c: + gnutls_x509_log replaced with gnutls_audit_log. -2007-02-08 Simon Josefsson +2011-02-20 Nikos Mavrogiannopoulos - * includes/gnutls/gnutls.h.in: Doc fix. + * lib/gnutls_algorithms.h, lib/gnutls_cipher.c, lib/gnutls_dtls.c, + lib/gnutls_int.h, lib/gnutls_state.c, lib/gnutls_state.h: Return a + more precise mtu unit to applications. -2007-02-08 Simon Josefsson +2011-02-20 Nikos Mavrogiannopoulos - * lib/x509/x509.c: Support XMPP OID. + * src/udp-serv.c: restart handshake on signals. -2007-02-08 Simon Josefsson +2011-02-20 Nikos Mavrogiannopoulos - * lib/x509/x509.c: Doc fix. + * lib/gnutls_buffers.c, lib/gnutls_constate.h, lib/gnutls_dtls.c: + reference counting in epochs is being done using functions. -2007-02-08 Simon Josefsson +2011-02-20 Nikos Mavrogiannopoulos - * NEWS, includes/gnutls/gnutls.h.in, includes/gnutls/x509.h, - lib/x509/common.c, lib/x509/x509.c, src/certtool.c: Support - otherName SAN's. + * lib/gnutls_cipher.c, lib/gnutls_compress.c, lib/gnutls_dtls.c, + lib/gnutls_int.h, lib/gnutls_record.c, lib/gnutls_state.c, + lib/includes/gnutls/dtls.h, lib/libgnutls.map: Added + gnutls_dtls_g/set_mtu() to allow setting and getting the DTLS mtu + from application. -2007-02-07 Simon Josefsson +2011-02-20 Nikos Mavrogiannopoulos - * doc/gnutls.texi: Fix. + * lib/gnutls_buffers.c, lib/gnutls_dtls.c, lib/gnutls_dtls.h, + lib/gnutls_int.h, lib/gnutls_state.c: Combined DTLS buffers and + normal TLS buffers. -2007-02-07 Simon Josefsson +2011-02-19 Nikos Mavrogiannopoulos - * doc/gnutls.texi: add tcp and tlsia + * lib/Makefile.am, lib/ext_session_ticket.c, lib/gnutls_buffers.c, + lib/gnutls_buffers.h, lib/gnutls_constate.c, lib/gnutls_dtls.c, + lib/gnutls_handshake.c, lib/gnutls_int.h, lib/gnutls_state.c, + lib/includes/gnutls/gnutls.h.in, lib/libgnutls.map, lib/system.c, + lib/system.h, lib/system_override.c, src/Makefile.am, + src/serv-gaa.c, src/serv-gaa.h, src/serv.c, src/serv.gaa, + src/udp-serv.c, src/udp-serv.h: Changes to allow DTLS server side to + operate. Added a simple UDP server on gnutls-serv. Server other + cleanups. -2007-02-07 Simon Josefsson +2011-02-19 Nikos Mavrogiannopoulos - * AUTHORS: Fix. + * lib/gnutls_dtls.c, lib/gnutls_errors.c, lib/gnutls_int.h, + lib/gnutls_state.c, lib/includes/gnutls/dtls.h, + lib/includes/gnutls/gnutls.h.in, lib/libgnutls.map, src/cli.c: Allow + setting the DTLS timeouts explicitly. -2007-02-07 Simon Josefsson +2011-02-19 Nikos Mavrogiannopoulos - * src/serv.c: Don't say TLS 1.0. + * doc/TODO: updated. -2007-02-07 Simon Josefsson +2011-02-18 Nikos Mavrogiannopoulos - * NEWS: Fix. + * lib/auth_cert.c, lib/debug.c, lib/gnutls_algorithms.c, + lib/gnutls_buffers.c, lib/gnutls_buffers.h, lib/gnutls_cipher.c, + lib/gnutls_cipher.h, lib/gnutls_dtls.c, lib/gnutls_dtls.h, + lib/gnutls_errors.h, lib/gnutls_handshake.c, lib/gnutls_int.h, + lib/gnutls_mbuffers.h, lib/gnutls_num.c, lib/gnutls_num.h, + lib/gnutls_record.c, lib/gnutls_record.h, lib/gnutls_state.c, + lib/includes/gnutls/gnutls.h.in, lib/system.c, lib/system.h, + src/cli-gaa.c, src/cli-gaa.h, src/cli.c, src/cli.gaa: Several + updates for DTLS (client side only) to work. -2007-02-07 Simon Josefsson +2011-02-18 Nikos Mavrogiannopoulos - * lib/gnutls_sig.c: Fix DSA sign, broken by last commit. + * lib/opencdk/main.h: Increased level of opencdk debug messages. -2007-02-07 Simon Josefsson +2011-02-18 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/gnutls_sig.c: DSA keys in TLS 1.x, x<2 and SSL 3.0 use SHA-1 + as hash. That is we reverted to previous gnutls behavior. That + violates DSS but all implementations handle it like that. -2007-02-07 Simon Josefsson +2011-02-18 Nikos Mavrogiannopoulos - * lib/gnutls_sig.c: Fix TLS 1.2 signing (for servers). + * lib/gnutls_buffers.c, lib/gnutls_buffers.h, lib/gnutls_dtls.c, + lib/gnutls_dtls.h, lib/gnutls_handshake.c, lib/gnutls_int.h: use + similar API when caching messages in DTLS or TLS. -2007-02-07 Simon Josefsson +2011-02-18 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/gnutls_algorithms.c: corrected is_version_supported(). -2007-02-07 Simon Josefsson +2011-02-18 Nikos Mavrogiannopoulos - * doc/gnutls.texi: dsa key + * lib/gnutls_handshake.c, lib/gnutls_handshake.h, lib/gnutls_kx.c: + Simplified _gnutls_recv_handshake(). -2007-02-06 Simon Josefsson +2011-02-18 Nikos Mavrogiannopoulos - * doc/gnutls.texi: Fix. + * lib/gnutls_algorithms.c, lib/gnutls_algorithms.h, + lib/gnutls_dtls.c, lib/gnutls_handshake.c: ciphersuites have a bit + that indicates whether they are usable with DTLS or not. -2007-02-06 Simon Josefsson +2011-02-17 Nikos Mavrogiannopoulos - * lib/gnutls_sig.c: Fix crash on failures. + * lib/auth_dhe.c, lib/gnutls_algorithms.c, lib/gnutls_cipher.c: fix + for dtls. -2007-02-06 Simon Josefsson +2010-10-02 Jonathan Bastien-Filiatrault - * NEWS, configure.in: Bump versions. + * lib/gnutls_dtls.c, lib/gnutls_dtls.h, lib/gnutls_num.c, + lib/gnutls_num.h: dtls: Add uint48 handling functions. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2010-10-02 Jonathan Bastien-Filiatrault - * doc/protocol/draft-ietf-tls-srp-00.txt, - doc/protocol/draft-ietf-tls-srp-01.txt, - doc/protocol/draft-ietf-tls-srp-02.txt, - doc/protocol/draft-ietf-tls-srp-03.txt, - doc/protocol/draft-ietf-tls-srp-04.txt, - doc/protocol/draft-ietf-tls-srp-05.txt, - doc/protocol/draft-ietf-tls-srp-06.txt, - doc/protocol/draft-ietf-tls-srp-07.txt: Add. + * lib/gnutls_record.c: dtls: Bring epoch choice on receive closer to + the first usage. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2010-09-24 Jonathan Bastien-Filiatrault - * ChangeLog: [no log message] + * src/cli-gaa.c, src/cli-gaa.h, src/cli.c, src/cli.gaa: Add DTLS + support to command-line client. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2010-09-17 Jonathan Bastien-Filiatrault - * NEWS: Version 1.7.5. + * lib/gnutls_constate.c: dtls: Write epoch to sequence number. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2010-09-06 Jonathan Bastien-Filiatrault - * NEWS: Fix. + * lib/gnutls_handshake.c: dtls: Send consistent a client_random. This is necessary when challenged by HelloVerifiyRequest as we MUST + send the same client parameters. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2010-09-05 Jonathan Bastien-Filiatrault - * NEWS: Add. + * lib/gnutls_handshake.c, lib/gnutls_int.h: dtls: Limit the number + of HelloVerifyRequest round trips. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2010-09-05 Jonathan Bastien-Filiatrault - * gl/gnulib.mk, gl/m4/string_h.m4, gl/string_.h, lgl/Makefile.am, - lgl/m4/string_h.m4, lgl/string_.h: Update. + * lib/gnutls_dtls.c, lib/gnutls_handshake.c: dtls: TEMP: Sprinkle + transmits. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2010-09-05 Jonathan Bastien-Filiatrault - * NEWS: Reorder. + * lib/gnutls_handshake.c, lib/gnutls_int.h: dtls: Do + HANDSHAKE_HELLO_VERIFY_REQUEST processing. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2010-09-05 Jonathan Bastien-Filiatrault - * doc/gnutls.texi: Fix. + * lib/gnutls_handshake.c: dtls: Add + _gnutls_recv_hello_verify_request. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2010-09-05 Jonathan Bastien-Filiatrault - * NEWS: Add. + * lib/gnutls_record.c: Decrypt using the proper sequence number. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2010-09-05 Jonathan Bastien-Filiatrault - * src/cli.c: Don't ask for PSK if we don't have credentials for it. + * lib/gnutls_cipher.c, lib/gnutls_cipher.h: dtls: Use proper record + sequence for DTLS decrypt. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2011-02-17 Nikos Mavrogiannopoulos - * doc/gnutls.texi: mention psk + * lib/gnutls_handshake.c: corrected extdatalen -2007-02-06 Simon Josefsson +2010-09-05 Jonathan Bastien-Filiatrault - * NEWS: Add. + * lib/gnutls_buffers.c: dtls: Read whole datagrams. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2009-08-03 Jonathan Bastien-Filiatrault - * lib/gnutls_handshake.c: (_gnutls_remove_unwanted_ciphersuites): Remove GNUTLS_KX_SRP_RSA or - GNUTLS_KX_SRP_DSS if there is no SRP credential. + * lib/gnutls_handshake.c: dtls: Queue outgoing handshake messages in + the retransmission layer. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2009-08-03 Jonathan Bastien-Filiatrault - * doc/gnutls.texi: fix + * lib/gnutls_dtls.c, lib/gnutls_dtls.h: Add outgoing flight buffer + handling code. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2009-08-03 Jonathan Bastien-Filiatrault - * doc/gnutls.texi: fix + * lib/gnutls_errors.h: Define _gnutls_dtls_log for DTLS. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2009-08-03 Jonathan Bastien-Filiatrault - * src/cli.c: Don't try to negotiate SRP kx if we don't have SRP - username/password. + * lib/gnutls_int.h, lib/gnutls_state.c: Add structures for the + buffered outgoing flight. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2009-08-03 Jonathan Bastien-Filiatrault - * doc/gnutls.texi: Add. + * lib/gnutls_int.h, lib/gnutls_state.c: Add state for handshake mtu. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2009-08-03 Jonathan Bastien-Filiatrault - * src/cli.c: Prefer PSK. + * lib/gnutls_handshake.c: dtls: Fixup outgoing ClientHello hashing. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2009-08-03 Jonathan Bastien-Filiatrault - * src/cli.c, src/serv.c: Modernize priorities. + * lib/gnutls_handshake.c, lib/gnutls_int.h: Add proper handshake + outgoing sequence number. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2009-08-03 Jonathan Bastien-Filiatrault - * doc/gnutls.texi: more + * lib/Makefile.am, lib/gnutls_dtls.c, lib/gnutls_dtls.h: Add + gnutls_dtls.{c,h}. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2009-08-02 Jonathan Bastien-Filiatrault - * src/common.c: Parse new MACs. + * lib/gnutls_handshake.c: dtls: Remove unsuitable ciphers. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2009-07-28 Jonathan Bastien-Filiatrault - * src/serv.c: Prefer OpenPGP certs from client. + * lib/debug.c, lib/gnutls_handshake.c, + lib/includes/gnutls/gnutls.h.in: dtls: Add hanshake fragment headers + when sending handshake. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2009-07-28 Jonathan Bastien-Filiatrault - * doc/gnutls.texi: Fix. + * lib/gnutls_cipher.c, lib/gnutls_int.h, lib/gnutls_record.c: dtls: + Add epoch and sequence number to DTLS packets. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2009-07-28 Jonathan Bastien-Filiatrault - * NEWS: Fix. + * lib/gnutls_record.c: Use increment functions for sequence number. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2009-07-27 Jonathan Bastien-Filiatrault - * src/cli-gaa.c: Generated. + * lib/gnutls_int.h, lib/gnutls_num.c, lib/gnutls_num.h, + lib/gnutls_record.c: dtls: Add types and operations required for the + DTLS epoch and sequence. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2009-07-29 Jonathan Bastien-Filiatrault - * configure.in: Bump versions. + * lib/gnutls_algorithms.c, lib/gnutls_priority.c: Make version + lookup transport dependent. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2009-08-03 Jonathan Bastien-Filiatrault - * NEWS: Add. + * lib/gnutls_state.h: dtls: Add _gnutls_is_dtls to check if a + session uses DTLS. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2009-07-25 Jonathan Bastien-Filiatrault - * src/common.c: Typo in last commit. + * lib/gnutls_int.h, lib/gnutls_state.c, + lib/includes/gnutls/gnutls.h.in, lib/libgnutls.map: Add + gnutls_init_dtls function. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2009-07-25 Jonathan Bastien-Filiatrault - * src/cli.gaa: Typo. + * lib/gnutls_int.h: Add DTLS state. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2009-07-15 Jonathan Bastien-Filiatrault - * src/common.c: Fix --list. + * lib/gnutls_algorithms.c, lib/includes/gnutls/gnutls.h.in: Add + DTLS1.0 protocol entry. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2010-09-17 Jonathan Bastien-Filiatrault - * doc/gnutls.texi: Add. + * lib/ext_session_ticket.c, lib/gnutls_handshake.c, + lib/gnutls_kx.c, lib/gnutls_mbuffers.h: Allocate session buffers of + size, depending on type of session. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2010-09-25 Jonathan Bastien-Filiatrault - * lib/gnutls_hash_int.c: Revert, not needed. + * lib/gnutls_constate.c: Harmonize "d" argument between constate.c + and compress.c. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2010-09-24 Jonathan Bastien-Filiatrault - * lib/gnutls_hash_int.c: (_gnutls_hash_get_algo_len): Handle NULL MACs again, broken by last - commit. + * src/cli-gaa.c, src/cli.gaa: Fix typo. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2010-09-21 Jonathan Bastien-Filiatrault - * src/serv.c: Fix last commit. + * lib/gnutls_num.h: Parenthesize UINT64DATA again. Signed-off-by: Nikos Mavrogiannopoulos -2007-02-06 Simon Josefsson +2011-02-16 Nikos Mavrogiannopoulos - * src/serv.c: Support TLS 1.2 and AES 256. + * doc/cha-intro-tls.texi: reorganization of ciphersuite discussion. -2007-02-05 Simon Josefsson +2011-02-15 Nikos Mavrogiannopoulos - * ChangeLog: [no log message] + * lib/gnutls_priority.c: Allow using the minus "-" in the -ALL + priority strings. -2007-02-05 Simon Josefsson +2011-02-15 Nikos Mavrogiannopoulos - * NEWS: Version 1.7.4. + * lib/gnutls_algorithms.c: Added fixme note on TLS 1.2 PRF per + ciphersuite. -2007-02-05 Simon Josefsson +2011-02-15 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/gnutls_algorithms.c: The safe renegotiation ciphersuite is not + required to be registered. -2007-02-05 Simon Josefsson +2011-02-15 Nikos Mavrogiannopoulos - * src/serv.c: use static DH params if none or provided + * lib/auth_dhe_psk.c: Corrected bug in DHE-PSK in freeing + username/key. -2007-02-05 Simon Josefsson +2011-02-15 Nikos Mavrogiannopoulos - * tests/anonself.c, tests/dhepskself.c, tests/resume.c, - tests/tlsia.c, tests/utils.c, tests/utils.h: Use static DH. + * lib/gnutls_algorithms.c: Added ciphersuites (from RFC5487): + TLS_PSK_WITH_AES_128_GCM_SHA256 TLS_DHE_PSK_WITH_AES_128_GCM_SHA256 + TLS_PSK_WITH_AES_128_CBC_SHA256 TLS_DHE_PSK_WITH_AES_128_CBC_SHA256 + TLS_PSK_WITH_NULL_SHA256 TLS_DHE_PSK_WITH_NULL_SHA256 -2007-02-05 Simon Josefsson +2011-02-12 Nikos Mavrogiannopoulos - * tests/pskself.c: No dh here. + * NEWS, lib/gnutls_extensions.c, lib/gnutls_sig.c: Corrected + signature generation and verification in the Certificate Verify + message when in TLS 1.2. Reported by Todd A. Ouska. -2007-02-05 Simon Josefsson +2011-02-11 Nikos Mavrogiannopoulos - * NEWS: Reorder. + * lib/gnutls_state.c: removed duplicate assignments. -2007-02-05 Simon Josefsson +2011-02-10 Nikos Mavrogiannopoulos - * tests/sha2/.cvsignore: [no log message] + * lib/nettle/cipher.c: upgraded to nettle's new GCM API. -2007-02-05 Simon Josefsson +2011-02-10 Nikos Mavrogiannopoulos - * NEWS: Fix. + * lib/m4/hooks.m4: increased the C++ library current version. -2007-02-05 Simon Josefsson +2011-02-10 Nikos Mavrogiannopoulos - * configure.in, tests/Makefile.am: Add SHA-2 self test. + * NEWS, lib/gnutlsxx.cpp: The C++ interface returns exception on + every error and not only on fatal ones. This allows easier handling + of errors. -2007-02-05 Simon Josefsson +2011-02-10 Nikos Mavrogiannopoulos - * NEWS, tests/sha2/Makefile.am, tests/sha2/key-ca.pem, - tests/sha2/key-subca.pem, tests/sha2/key-subsubca.pem, - tests/sha2/key-user.pem, tests/sha2/sha2: Add. + * lib/gnutlsxx.cpp, lib/includes/gnutls/gnutlsxx.h: removed the old + set_priority functions. -2007-02-05 Simon Josefsson +2011-02-10 Nikos Mavrogiannopoulos - * NEWS: Add. + * src/cli.c, src/serv.c: removed more deprecated stuff. -2007-02-05 Simon Josefsson +2011-02-09 Nikos Mavrogiannopoulos - * src/certtool-cfg.c: Set pathlength to -1 (not present) by default, - for templates. + * libextra/gnutls_openssl.c, libextra/includes/gnutls/openssl.h: + updated openssl layer to new priority functions (untested). -2007-02-05 Simon Josefsson +2011-02-09 Nikos Mavrogiannopoulos - * src/certtool-gaa.c: Generated. + * lib/gnutls_sig.c: removed unused variable. -2007-02-05 Simon Josefsson +2011-02-09 Nikos Mavrogiannopoulos - * src/certtool.c, src/certtool.gaa: Support --hash SHA-256/384/512. + * NEWS, lib/gnutls_sig.c: Allow DSA2 even in protocols before TLS + 1.2. -2007-02-05 Simon Josefsson +2011-02-09 Nikos Mavrogiannopoulos - * lib/gnutls_algorithms.c, lib/gnutls_hash_int.c, lib/gnutls_int.h, - lib/x509/common.h, lib/x509/dn.c, lib/x509/x509.h: Support - (RSA-)SHA-256/384/512. + * src/cli.c: set the psk callback only if username/key were not + supplied at command line. -2007-02-05 Simon Josefsson +2011-02-09 Nikos Mavrogiannopoulos - * lgl/gc-libgcrypt.c, lgl/gc.h: Update. + * lib/ext_signature.c, lib/ext_signature.h, lib/gnutls_pk.c, + lib/gnutls_sig.c: In TLS 1.2 under DSS use the hash algorithm + required by DSS. -2007-02-05 Simon Josefsson +2011-02-09 Nikos Mavrogiannopoulos - * lib/gnutls_algorithms.c: (GNUTLS_SIGN_ALG_LOOP): Don't match unknown algorithms to GOST. - Affects gnutls_sign_algorithm_get_name, and - _gnutls_x509_sign_to_oid. + * tests/Makefile.am, tests/openpgp-auth.c, tests/openpgp-auth2.c: + Added new test openpgp-auth2.c that tests openpgp under TLS1.2 and + DSS as well. -2007-02-05 Simon Josefsson +2011-02-09 Nikos Mavrogiannopoulos - * NEWS, includes/gnutls/gnutls.h.in: Enum types for SHA-256/384/512. + * tests/anonself.c, tests/dhepskself.c, tests/mini-eagain.c, + tests/mini.c, tests/openpgp-auth.c, tests/pskself.c, tests/resume.c: + Modernized the test applications that now use the + gnutls_priority_set_direct(). -2007-02-05 Simon Josefsson +2011-02-09 Nikos Mavrogiannopoulos - * gl/gnulib.mk, gl/m4/gnulib-comp.m4, gl/m4/string_h.m4, - gl/stdbool_.h, gl/string_.h, lgl/Makefile.am, - lgl/m4/gnulib-comp.m4, lgl/m4/string_h.m4, lgl/memmem.c, - lgl/string_.h: Update. + * lib/includes/gnutls/compat.h, lib/includes/gnutls/gnutls.h.in: + deprecated gnutls_*_set_priority(). -2007-02-04 Simon Josefsson +2011-02-09 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/auth_cert.c, lib/ext_cert_type.c, lib/ext_max_record.c, + lib/ext_safe_renegotiation.c, lib/ext_server_name.c, + lib/ext_session_ticket.c, lib/ext_signature.c, lib/ext_srp.c, + lib/gnutls_extensions.c, lib/gnutls_extensions.h, + lib/gnutls_handshake.c, lib/gnutls_int.h, lib/gnutls_pk.c, + lib/gnutls_sig.c, lib/gnutls_state.c, + lib/includes/gnutls/gnutls.h.in, lib/nettle/pk.c: The extensions + code is now using the gnutls_buffer_st. -2007-02-04 Simon Josefsson +2011-02-09 Nikos Mavrogiannopoulos - * gl/gai_strerror.c, gl/gnulib.mk, gl/m4/gnulib-comp.m4, - gl/m4/socklen.m4, gl/m4/string_h.m4, gl/string_.h, lgl/Makefile.am, - lgl/m4/gnulib-comp.m4, lgl/m4/socklen.m4, lgl/m4/string_h.m4, - lgl/string_.h: Update. + * lib/gnutls_algorithms.c, lib/x509/x509_int.h: Added sha224 to the + list of MACs. -2007-02-02 Simon Josefsson +2011-02-09 Nikos Mavrogiannopoulos - * doc/gnutls.texi: Typo. + * lib/gnutls_priority.c: The PSK and SRP key exchange algorithms are + not included in the preset priority strings. -2007-02-02 Simon Josefsson +2011-02-09 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/auth_dh_common.c, lib/auth_dh_common.h, lib/auth_dhe_psk.c, + lib/auth_psk.c, lib/auth_psk.h: Callback function is being called in + both PSK-DHE and PSK. Using the callback function will not + overwrite the credentials, which were wrongly being overwritten + using the retrieved username/key. The credentials structure is now + accessed for reading only, as it should have been. -2007-02-02 Simon Josefsson +2011-02-09 Nikos Mavrogiannopoulos - * NEWS, configure.in: Bump versions. + * configure.ac: bumped version. -2007-02-02 Simon Josefsson +2011-02-08 Nikos Mavrogiannopoulos - * doc/signatures.texi: Removed the wrong file, re-add this one. - Oops. + * doc/cha-programs.texi: Added documentation on p11tool. -2007-02-02 Simon Josefsson +2011-02-08 Nikos Mavrogiannopoulos - * doc/Makefile.am: Remove bibliography.texi. + * doc/cha-intro-tls.texi, doc/cha-library.texi, + doc/manpages/gnutls-cli.1, doc/manpages/gnutls-serv.1, + lib/gnutls_priority.c, src/common.c: Moved documentation of priority + strings to manual and removed information from manpages and function + pages that now reference the manual section. -2007-02-02 Simon Josefsson +2011-02-08 Nikos Mavrogiannopoulos - * doc/bibliography.texi, doc/signatures.texi: Remove. + * lib/auth_anon.c, lib/auth_cert.c, lib/auth_cert.h, + lib/auth_dh_common.c, lib/auth_dh_common.h, lib/auth_dhe.c, + lib/auth_dhe_psk.c, lib/auth_psk.c, lib/auth_rsa.c, + lib/auth_rsa_export.c, lib/auth_srp.c, lib/auth_srp.h, + lib/auth_srp_rsa.c, lib/gnutls_auth.h, lib/gnutls_kx.c, + lib/gnutls_str.c, lib/gnutls_str.h: Simplified code in + authentication methods by using gnutls_buffer_st instead of + malloc/realloc. -2007-02-02 Simon Josefsson +2011-02-08 Nikos Mavrogiannopoulos - * doc/gnutls.texi: Don't use my-bib-macros. + * lib/gnutls_algorithms.c, lib/includes/gnutls/gnutls.h.in: Combined + same functions. -2007-02-02 Simon Josefsson +2011-02-08 Nikos Mavrogiannopoulos - * doc/my-bib-macros.texi: use pxref. + * lib/auth_cert.c, lib/auth_dhe.c, lib/ext_signature.c, + lib/gnutls_algorithms.c, lib/gnutls_algorithms.h: Several updates in + signature algorithms parsing and sending to avoid sending invalid + signature algorithms. -2007-02-02 Simon Josefsson +2011-02-08 Nikos Mavrogiannopoulos - * doc/my-bib-macros.texi: Fix. + * lib/gnutls_algorithms.c: Removed unused debugging code. -2007-02-02 Simon Josefsson +2011-02-07 Nikos Mavrogiannopoulos - * doc/gnutls.texi: proxy and certtool stuff + * lib/nettle/cipher.c: Removed unneeded initialization. -2007-02-02 Simon Josefsson +2011-02-07 Nikos Mavrogiannopoulos - * lib/x509/xml.c: Doc fix. + * NEWS, doc/cha-auth.texi, doc/cha-programs.texi, lib/Makefile.am, + lib/gnutls_psk_netconf.c, lib/includes/gnutls/compat.h: Removed + gnutls_psk_netconf_derive_key. -2007-02-02 Simon Josefsson +2011-02-07 Nikos Mavrogiannopoulos - * doc/bibliography.texi: reorder + * NEWS, lib/gnutls_cert.c, lib/includes/gnutls/compat.h: Removed + gnutls_certificate_verify_peers. -2007-02-02 Simon Josefsson +2011-02-07 Nikos Mavrogiannopoulos - * doc/bibliography.texi: Add rfc3820. + * NEWS, lib/gnutls_handshake.c, lib/gnutls_int.h, + lib/gnutls_state.c, lib/includes/gnutls/compat.h: Removed + gnutls_session_set_finished_function(). -2007-02-02 Simon Josefsson +2011-02-07 Nikos Mavrogiannopoulos - * doc/gnutls.texi: Mention RFC 3820. + * lib/gnutls_alert.c, lib/includes/gnutls/gnutls.h.in: Removed + remaining TLS/IA stuff. -2007-02-02 Simon Josefsson +2011-02-07 Nikos Mavrogiannopoulos - * doc/gnutls.texi: Improve extensions stuff. + * src/cli-gaa.c, src/cli-gaa.h, src/cli.gaa, src/serv-gaa.c, + src/serv-gaa.h, src/serv.gaa: Removed more leftovers from opaque PRF + output. -2007-02-01 Simon Josefsson +2011-02-07 Nikos Mavrogiannopoulos - * ChangeLog: [no log message] + * lib/gnutls_record.c: Corrected return message from + check_recv_type(). -2007-02-01 Simon Josefsson +2011-02-07 Nikos Mavrogiannopoulos - * NEWS: Version 1.7.3. + * lib/nettle/mac.c: Removed upper limit on MAC algorithm key. -2007-02-01 Simon Josefsson +2011-02-07 Nikos Mavrogiannopoulos - * NEWS: Typo. + * lib/gnutls_errors.c: improved premature_termination error message -2007-02-01 Simon Josefsson +2011-02-07 Nikos Mavrogiannopoulos - * tests/pathlen/ca-no-pathlen.pem, - tests/pathlen/no-ca-or-pathlen.pem: Update. + * doc/reference/Makefile.am, lib/libgnutls.map: Removed leftovers + from OPRFI extension. -2007-02-01 Simon Josefsson +2011-02-07 Nikos Mavrogiannopoulos - * NEWS: Add. + * NEWS, lib/gnutls_errors.c, lib/gnutls_record.c, + lib/includes/gnutls/gnutls.h.in: gnutls_recv() returns + GNUTLS_E_PREMATURE_TERMINATION on EOF. -2007-02-01 Simon Josefsson +2011-02-07 Nikos Mavrogiannopoulos - * src/certtool.c: Print times in UTC. + * src/cli-gaa.c, src/cli-gaa.h, src/cli.c, src/cli.gaa, + src/common.c, src/common.h, src/serv-gaa.c, src/serv-gaa.h, + src/serv.c, src/serv.gaa: Removed deprecated option such as + --protocols, ciphers etc. -2007-02-01 Simon Josefsson +2011-02-07 Nikos Mavrogiannopoulos - * NEWS: Fix. + * NEWS: not untested. -2007-02-01 Simon Josefsson +2011-02-07 Nikos Mavrogiannopoulos - * tests/key-id/.cvsignore: [no log message] + * src/benchmark.c: Set correct iv in GCM. -2007-02-01 Simon Josefsson +2011-02-07 Nikos Mavrogiannopoulos - * NEWS: Reorder. + * lib/gnutls_cipher.c, lib/gnutls_int.h: Cleanups and moved + definitions to gnutls_int.h. AEAD modes now use the record packet + counter as nonce. -2007-02-01 Simon Josefsson +2011-02-07 Nikos Mavrogiannopoulos - * configure.in: Typo. + * lib/nettle/cipher.c: Reset GCM mode when setting IV. -2007-02-01 Simon Josefsson +2011-02-07 Nikos Mavrogiannopoulos - * configure.in, tests/Makefile.am, tests/key-id/Makefile.am, - tests/key-id/README, tests/key-id/ca-gnutls-keyid.pem, - tests/key-id/ca-no-keyid.pem, tests/key-id/ca-weird-keyid.pem, - tests/key-id/key-ca.pem, tests/key-id/key-id, - tests/key-id/key-user.pem: Add key-id self test. + * lib/gnutls_algorithms.c: Added more GCM ciphersuites (DHE-* and + anonymous). -2007-02-01 Simon Josefsson +2011-02-07 Nikos Mavrogiannopoulos - * src/certtool.c: Don't print proxy info if there aren't any proxy - extension. + * lib/gnutls_priority.c: updated priorities. Removed ARCFOUR from + the secure ciphersuites and moved GCM to bottom of the ciphers in + performance. -2007-02-01 Simon Josefsson +2011-02-07 Nikos Mavrogiannopoulos - * doc/protocol/rfc4785.txt: Add. + * NEWS, lib/crypto-api.c, lib/gnutls_algorithms.c, + lib/gnutls_algorithms.h, lib/gnutls_cipher_int.c, + lib/gnutls_cipher_int.h, lib/includes/gnutls/crypto.h, + lib/libgnutls.map, src/benchmark.c: Added gnutls_cipher_add_auth() + gnutls_cipher_tag() to export the GCM interface. Updated the + benchmark. -2007-01-31 Simon Josefsson +2011-02-07 Nikos Mavrogiannopoulos - * src/certtool.c: Use the CA's SKI as the AKI value, if it is - present. Reported by Dale Sedivec - . + * lib/gnutls_cert.c: removed + gnutls_certificate_get_openpgp_keyring(). -2007-01-31 Simon Josefsson +2011-02-07 Nikos Mavrogiannopoulos - * lib/x509/x509.c: Doc fix. + * lib/gnutls_hash_int.c: minor optimizations. -2007-01-31 Simon Josefsson +2011-02-07 Nikos Mavrogiannopoulos - * doc/manpages/Makefile.am: Add. + * lib/gnutls_cipher_int.c, lib/gnutls_cipher_int.h, + lib/gnutls_hash_int.c, lib/gnutls_hash_int.h: inlined several small + functions. -2007-01-31 Simon Josefsson +2011-02-07 Nikos Mavrogiannopoulos - * src/certtool-cfg.c: Fix last commit. + * lib/gnutls_cipher.c, lib/gnutls_cipher_int.c, + lib/gnutls_cipher_int.h, lib/gnutls_handshake.c, + lib/gnutls_hash_int.c, lib/gnutls_hash_int.h, lib/gnutls_sig.c: + Better error checking on SSL3. -2007-01-31 Simon Josefsson +2011-02-07 Nikos Mavrogiannopoulos - * NEWS, src/certtool-cfg.c, src/certtool-cfg.h, src/certtool-gaa.c, - src/certtool-gaa.h, src/certtool.c, src/certtool.gaa: Support - reading/generating proxy certificates in certtool. + * lib/gnutls_cipher.c: calculation for c_length occurs in a single + place. -2007-01-31 Simon Josefsson +2011-02-06 Nikos Mavrogiannopoulos - * NEWS, includes/gnutls/x509.h, lib/x509/extensions.c, - lib/x509/extensions.h, lib/x509/x509.c: Add - gnutls_x509_crt_get_proxy. + * NEWS: unstable -> untested. -2007-01-31 Simon Josefsson +2011-02-06 Nikos Mavrogiannopoulos - * lib/x509/x509_write.c: Fix last commit. + * lib/nettle/mac.c: Increase the maximum HMAC key to account for + anonymous ciphersuites. -2007-01-31 Simon Josefsson +2011-02-06 Nikos Mavrogiannopoulos - * lib/x509/x509_write.c: (gnutls_x509_crt_set_proxy_dn): Permit NULL @name's. + * lib/gnutls_hash_int.c: check the error of hash set_key. -2007-01-31 Simon Josefsson +2011-02-06 Nikos Mavrogiannopoulos - * NEWS: Mention RFC 3820. + * lib/gnutls_kx.c: do not use strlen for fixed string. -2007-01-31 Simon Josefsson +2011-02-06 Nikos Mavrogiannopoulos - * NEWS, includes/gnutls/x509.h, lib/pkix.asn, lib/pkix_asn1_tab.c, - lib/x509/extensions.c, lib/x509/extensions.h, lib/x509/x509_write.c: - Add proxy certificate APIs. + * NEWS: updated NEWS on GCM mode. -2007-01-31 Simon Josefsson +2011-02-06 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/nettle/cipher.c: Use nettle's new API for GCM. -2007-01-31 Simon Josefsson +2011-02-06 Nikos Mavrogiannopoulos - * src/certtool-cfg.c: Have RET for path lengths to mean -1. + * src/cli.c: removed old comment -2007-01-31 Simon Josefsson +2011-02-06 Nikos Mavrogiannopoulos - * gl/.cvsignore, lgl/.cvsignore: [no log message] + * NEWS, doc/Makefile.am, doc/cha-functions.texi, + doc/cha-gtls-app.texi, doc/examples/Makefile.am, + doc/examples/ex-client-tlsia.c, lib/gnutls_kx.c, + libextra/Makefile.am, libextra/ext_inner_application.c, + libextra/ext_inner_application.h, libextra/gnutls_extra.c, + libextra/gnutls_ia.c, libextra/libgnutls-extra.map, + tests/Makefile.am, tests/tlsia.c: Removed inner application + extension. -2007-01-31 Simon Josefsson +2011-02-06 Nikos Mavrogiannopoulos - * lib/defines.h: String.h from gnulib now makes sure memmem is - available. + * lib/includes/gnutls/compat.h, lib/includes/gnutls/gnutls.h.in: + gnutls_certificate_verify_peers is deprecated. -2007-01-31 Simon Josefsson +2011-02-04 Nikos Mavrogiannopoulos - * gl/strdup.h, lgl/memmem.h: Remove. + * lib/gcrypt/mac.c, lib/gnutls_algorithms.c, + lib/gnutls_algorithms.h, lib/gnutls_cipher.c, lib/gnutls_cipher.h, + lib/gnutls_cipher_int.c, lib/gnutls_cipher_int.h, + lib/gnutls_constate.c, lib/gnutls_hash_int.c, + lib/gnutls_hash_int.h, lib/gnutls_int.h, lib/gnutls_priority.c, + lib/includes/gnutls/crypto.h, lib/includes/gnutls/gnutls.h.in, + lib/m4/hooks.m4, lib/nettle/cipher.c, lib/nettle/mac.c: Added + support for GCM ciphersuites (not tested with other implementation). -2007-01-31 Simon Josefsson +2011-02-05 Nikos Mavrogiannopoulos - * gl/getaddrinfo.c, gl/gnulib.mk, gl/m4/absolute-header.m4, - gl/m4/extensions.m4, gl/m4/gnulib-common.m4, gl/m4/gnulib-comp.m4, - gl/m4/strdup.m4, gl/m4/string_h.m4, gl/socket_.h, gl/strdup.c, - gl/string_.h, lgl/Makefile.am, lgl/m4/extensions.m4, - lgl/m4/gnulib-common.m4, lgl/m4/gnulib-comp.m4, lgl/m4/memmem.m4, - lgl/m4/stdint.m4, lgl/m4/string_h.m4, lgl/m4/unistd_h.m4, - lgl/m4/wchar.m4, lgl/printf-args.c, lgl/printf-args.h, - lgl/printf-parse.c, lgl/socket_.h, lgl/stdint_.h, lgl/string_.h, - lgl/vasnprintf.c, lgl/wchar_.h: Update. + * lib/gnutls_int.h: Added missing definitions (GNUTLS_MASTER_SIZE + etc). -2007-01-31 Simon Josefsson +2011-02-05 Nikos Mavrogiannopoulos - * tests/pathlen/.cvsignore: Add. + * NEWS, lib/gnutls_state.c, lib/includes/gnutls/compat.h: Removed: + gnutls_session_get_server_random, gnutls_session_get_client_random, + gnutls_session_get_master_secret -2007-01-26 Simon Josefsson +2011-02-05 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/build-aux/config.rpath, tests/suite/Makefile.in: updated. -2007-01-26 Simon Josefsson +2011-02-05 Nikos Mavrogiannopoulos - * configure.in, tests/Makefile.am, tests/pathlen/Makefile.am, - tests/pathlen/ca-no-pathlen.pem, - tests/pathlen/no-ca-or-pathlen.pem, tests/pathlen/pathlen: Test for - pathlen bug (and general certificate parsing). + * lib/Makefile.am, lib/gnutls.pc.in, lib/m4/hooks.m4: Add the nettle + libs into gnutls.pc. -2007-01-26 Simon Josefsson +2011-02-05 Nikos Mavrogiannopoulos - * NEWS: Add. + * NEWS, lib/gnutls_cert.c, lib/gnutls_extensions.c, + lib/includes/gnutls/compat.h, lib/m4/hooks.m4: Removed functions: + gnutls_ext_register, gnutls_certificate_get_x509_crls, + gnutls_certificate_get_x509_cas and bumped library version number. -2007-01-26 Simon Josefsson +2011-02-05 Andreas Metzler - * lib/x509/extensions.c: (_gnutls_x509_ext_extract_basicConstraints): Make sure - pathLenConstraint is read, even if CA reading fails. + * lib/configure.ac, lib/gnutls.pc.in, lib/m4/hooks.m4: [PATCH 1/4] + adapt pkg-config file for switch from AM_PATH_LIBGCRYPT to + AC_LIB_HAVE_LINKFLAGS [PATCH 2/4] pkg-config: Move libtasn1 from + Libs.private to Requires.private since libtasn1 provides a .pc file. + [PATCH 3/4] pkg-config: drop @LIBGNUTLS_LIBS@ from Libs.private. + This library only contains gnutls itself nowadays, which is in Libs + already. [PATCH 4/4] pkg-config: If gnutls is built with zlib + support list zlib in Requires.private. -2007-01-25 Simon Josefsson +2011-02-04 Simon Josefsson - * NEWS: Add. + * doc/cha-ciphersuites.texi, doc/signatures.texi: Fix MD2 + documentation. Suggested by "brian m. carlson" in + debian bug #464625. -2007-01-25 Simon Josefsson +2011-02-02 Nikos Mavrogiannopoulos - * includes/gnutls/gnutlsxx.h, lib/gnutlsxx.cpp: Add comment to - describe C++ compiler bug problem. + * doc/README.CODING_STYLE: updated coding style. -2007-01-25 Simon Josefsson +2011-02-02 Nikos Mavrogiannopoulos - * includes/gnutls/gnutlsxx.h, lib/gnutlsxx.cpp: Fix C++ compiler bug - in a "better" way, tiny patch from Matthias Scheler - . + * NEWS: documented gnutls_session_get_* deprecated functions. -2007-01-16 Simon Josefsson +2011-02-02 Nikos Mavrogiannopoulos - * configure.in: Bump versions. + * tests/x509paths/README: updated README on certificate + verifications that fail. -2007-01-16 Simon Josefsson +2011-02-02 Nikos Mavrogiannopoulos - * NEWS: Add. + * NEWS, src/certtool-common.h, src/certtool-gaa.c, + src/certtool-gaa.h, src/certtool.c, src/certtool.gaa: Added new + functionality to certtool, and can verify certificates against a + list of CAs using the --verify option. -2007-01-16 Simon Josefsson +2011-02-02 Nikos Mavrogiannopoulos - * lib/gnutls_cert.c, lib/gnutls_extra_hooks.h, - libextra/gnutls_openpgp.c, libextra/openpgp/gnutls_openpgp.h, - libextra/openpgp/privkey.c: Fix import of ASCII armored OpenPGP - keys, patch from ludovic.courtes@laas.fr (Ludovic Courtès). + * lib/x509/verify.c, tests/chainverify.c: Time checks were moved to + _gnutls_verify_certificate2(). This allows for straightforward + chain verification, and thus better printing of the chain output, + although some checks might be performed in duplicate. As a + side-effect better errors are returned (or precisely more + combinations of verification errors), thus chainverify test was + affected. -2007-01-15 Simon Josefsson +2011-02-02 Nikos Mavrogiannopoulos - * doc/protocol/draft-rescorla-tls-extractor-00.txt: Add. + * lib/x509/verify-high.c: Set memory to zero on allocation. -2007-01-14 Simon Josefsson +2011-02-02 Nikos Mavrogiannopoulos - * ChangeLog: [no log message] + * doc/cha-gtls-app.texi: fix in contents. -2007-01-14 Simon Josefsson +2011-02-02 Nikos Mavrogiannopoulos - * NEWS: Version 1.7.2. + * doc/examples/examples.h: prototype fix. -2007-01-14 Simon Josefsson +2011-02-02 Nikos Mavrogiannopoulos - * lgl/Makefile.am, lgl/gc-gnulib.c, lgl/m4/gnulib-comp.m4, - lgl/m4/unistd_h.m4, lgl/m4/wint_t.m4, lgl/unistd_.h: Update. + * doc/examples/ex-verify.c, lib/gnutls_cert.c, + lib/includes/gnutls/x509.h, lib/x509/verify-high.c, src/certtool.c: + gnutls_x509_trust_list_init() has an extra argument that allows + fine-tuning of the used memory. -2007-01-14 Simon Josefsson +2011-02-01 Nikos Mavrogiannopoulos - * NEWS: Add. + * doc/cha-bib.texi: Updated references of rfc5081 to rfc6091. -2007-01-14 Simon Josefsson +2011-02-01 Nikos Mavrogiannopoulos - * libextra/opencdk/pubkey.c: Doc fix. + * doc/cha-cert-auth.texi, doc/cha-gtls-app.texi, + doc/examples/ex-verify.c: Documented the new verification functions. -2007-01-14 Simon Josefsson +2011-01-31 Nikos Mavrogiannopoulos - * libextra/opencdk/opencdk.h, libextra/opencdk/pubkey.c: (cdk_pubkey_to_sexp, cdk_seckey_to_sexp): New functions, from Mario - Lenz . + * src/certtool.c, tests/sha2/sha2: Modified output to not confuse + earlier scripts. -2007-01-13 Simon Josefsson +2011-01-31 Nikos Mavrogiannopoulos - * NEWS, THANKS: Add. + * lib/x509/verify.c: Better output when removing certificates from + list. -2007-01-12 Simon Josefsson +2011-01-31 Nikos Mavrogiannopoulos - * lib/gnutlsxx.cpp: Make it compile by commenting out call to - virtual method (possibly incorrect but I don't know what the - intention was). + * tests/pkcs1-padding/pkcs1-pad: Modified to work on new certtool -e + output. -2007-01-12 Simon Josefsson +2011-01-31 Nikos Mavrogiannopoulos - * NEWS, configure.in: Don't use -mms-bitfields - --enable-runtime-pseudo-reloc. + * NEWS, doc/examples/ex-verify.c, lib/auth_cert.h, + lib/gnutls_cert.c, lib/gnutls_x509.c, lib/includes/gnutls/compat.h, + lib/includes/gnutls/gnutls.h.in, lib/includes/gnutls/x509.h, + lib/libgnutls.map, lib/x509/crl.c, lib/x509/x509.c, src/certtool.c, + tests/certificate_set_x509_crl.c: The internal subsystem uses the + new certificate verification functions. This has the side effect of + deprecating gnutls_certificate_get_x509_crls() and + gnutls_certificate_get_x509_cas() that can no longer operation since + they relied on internal structures. -2007-01-12 Simon Josefsson +2011-01-31 Nikos Mavrogiannopoulos - * gl/Makefile.am: Fix objdir!=srcdir. + * NEWS, doc/cha-gtls-app.texi, doc/examples/ex-verify.c, + lib/Makefile.am, lib/hash.c, lib/hash.h, + lib/includes/gnutls/x509.h, lib/libgnutls.map, + lib/x509/Makefile.am, lib/x509/crl.c, lib/x509/verify-high.c, + lib/x509/verify.c, lib/x509/x509.c, lib/x509/x509_int.h, + src/certtool.c: Added a new API to verify certificates. It is more + efficient and can be used to get details about the verification + procedure. -2007-01-11 Simon Josefsson +2011-01-31 Nikos Mavrogiannopoulos - * NEWS: Add. + * tests/x509paths/chain: better output in chain output. -2007-01-11 Simon Josefsson +2011-01-30 Nikos Mavrogiannopoulos - * src/certtool.c: (generate_pkcs12): Read more than one certificate, if there are more - available, and store them in the PKCS12 blob. Suggested by Sascha - Ziemann . + * NEWS, lib/includes/gnutls/x509.h, lib/x509/crl.c, + lib/x509/verify.c, lib/x509/x509.c: exported + gnutls_x509_crl_get_raw_issuer_dn() -2007-01-11 Simon Josefsson +2011-01-30 Nikos Mavrogiannopoulos - * doc/reference/Makefile.am: Ignore gnutls_extra_hooks.h. + * lib/x509/x509.c: corrected typos -2007-01-11 Simon Josefsson +2011-01-19 Nikos Mavrogiannopoulos - * doc/manpages/Makefile.am: Add. + * lib/pakchois/pakchois.c: CKR_CRYPTOKI_ALREADY_INITIALIZED is not + treated as an error, and Finalize is not called in that case. -2007-01-11 Simon Josefsson +2011-01-16 Nikos Mavrogiannopoulos - * Makefile.am: Reorder lgl/ and gl/, to make sure lgl is built - before gl. + * NEWS, lib/gnutls_privkey.c, lib/includes/gnutls/compat.h, + lib/openpgp/privkey.c: Reverted removal of + gnutls_openpgp_privkey_sign_hash() to retain compatibility with + 2.10.x. That function is now deprecated instead. -2007-01-11 Simon Josefsson +2011-01-16 Nikos Mavrogiannopoulos - * NEWS: Fix. + * lib/gnutls_privkey.c: Added checks before importing keys and + updated documentation. -2007-01-11 Simon Josefsson +2011-01-15 Nikos Mavrogiannopoulos - * NEWS, configure.in, includes/gnutls/x509.h, - lib/x509/extensions.c, lib/x509/extensions.h, lib/x509/x509.c, - lib/x509/x509_write.c, src/certtool-cfg.c, src/certtool-cfg.h, - src/certtool.c: Support pathLenConstraint. + * tests/suite/Makefile.in: updated Makefile.in -2007-01-11 Simon Josefsson +2011-01-15 Nikos Mavrogiannopoulos - * libextra/Makefile.am: libgnu.la depends on liblgnu.la, so don't - add it twice. + * doc/examples/ex-crq.c, lib/configure.ac, + lib/includes/gnutls/compat.h, lib/includes/gnutls/gnutls.h.in, + lib/includes/gnutls/x509.h, src/certtool.c, tests/crq_key_id.c: + fixes in internal build with the new deprecated functions. We allow + them to be used since they are inter-dependent. -2007-01-11 Simon Josefsson +2011-01-15 Nikos Mavrogiannopoulos - * gl/Makefile.am, gl/gnulib.mk, gl/m4/gnulib-cache.m4: Getaddrinfo - needs snprintf from ../lgl/, so make libgnu.la depend on liblgnu.la. + * lib/x509/x509_int.h: replaced old gnutls_pk_algorithm. -2007-01-11 Simon Josefsson +2011-01-15 Nikos Mavrogiannopoulos - * libextra/gnutls_extra.c: Need strverscmp.h. + * lib/includes/gnutls/compat.h: depends on gnutls/x509.h to compile. -2007-01-11 Simon Josefsson +2011-01-15 Nikos Mavrogiannopoulos - * NEWS: Fix. + * NEWS, lib/includes/gnutls/compat.h, lib/includes/gnutls/x509.h, + lib/x509/crl_write.c: deprecated gnutls_x509_crl_sign(), + gnutls_x509_crl_sign2() and + gnutls_x509_crq_get_preferred_hash_algorithm(). -2007-01-11 Simon Josefsson +2011-01-15 Nikos Mavrogiannopoulos - * lib/libgnutls.vers: Don't export _E_*, they are only needed inside - libgnutls now. Fix copyright years. + * NEWS, lib/includes/gnutls/compat.h, lib/includes/gnutls/x509.h, + lib/x509/crq.c: Deprecated gnutls_x509_crq_sign2() and + gnutls_x509_crq_sign() in favor for gnutls_x509_crq_privkey_sign(). -2007-01-11 Simon Josefsson +2011-01-15 Nikos Mavrogiannopoulos - * NEWS, lib/Makefile.am, lib/auth_cert.c, lib/auth_dh_common.c, - lib/auth_dhe.c, lib/auth_rsa.c, lib/auth_rsa_export.c, - lib/auth_srp_rsa.c, lib/gnutls_cert.c, lib/gnutls_extra_hooks.c, - lib/gnutls_extra_hooks.h, libextra/gnutls_extra.c: Cleanup gnutls vs - gnutls-extra integration, for OpenPGP certs. + * NEWS, lib/libgnutls.map: minor fixes. -2007-01-11 Simon Josefsson +2011-01-15 Nikos Mavrogiannopoulos - * libextra/gnutls_extra.c: Replace libgcrypt version check with - strverscmp. No need to duplicate prototype found in gnutls.h for - gnutls_check_version. + * NEWS, lib/includes/gnutls/compat.h, lib/includes/gnutls/x509.h, + lib/libgnutls.map, lib/x509/privkey.c, lib/x509/x509.c, + src/certtool.c, tests/cve-2009-1415.c, tests/x509sign-verify.c: + gnutls_x509_crt_verify_hash: DEPRECATED gnutls_x509_crt_verify_data: + DEPRECATED gnutls_x509_crt_get_verify_algorithm: DEPRECATED + gnutls_x509_crt_get_preferred_hash_algorithm: DEPRECATED Removed the + new gnutls_x509_privkey_sign_data2() and + gnutls_x509_privkey_sign_hash2(). That functionality will be only in the abstract.h pubkey and privkey + structures, to avoid duplication for every certificate type. -2007-01-09 Simon Josefsson +2011-01-15 Nikos Mavrogiannopoulos - * gl/m4/gnulib-common.m4, gl/m4/gnulib-comp.m4, gl/m4/lib-link.m4, - lgl/gc-gnulib.c, lgl/gc-libgcrypt.c, lgl/m4/gc-arcfour.m4, - lgl/m4/gc-arctwo.m4, lgl/m4/gc-des.m4, lgl/m4/gc-hmac-md5.m4, - lgl/m4/gc-hmac-sha1.m4, lgl/m4/gc-md2.m4, lgl/m4/gc-md4.m4, - lgl/m4/gc-md5.m4, lgl/m4/gc-random.m4, lgl/m4/gc-rijndael.m4, - lgl/m4/gc-sha1.m4, lgl/m4/gnulib-common.m4, lgl/m4/gnulib-comp.m4, - lgl/m4/lib-link.m4: Update. + * src/serv.c: Simplified macro to snprintf() in order to prevent + issues caused when snprintf() is a macro itself. Reported and + initial patch by Camillo Lugaresi. -2007-01-05 Simon Josefsson +2011-01-11 Nikos Mavrogiannopoulos - * NEWS: Add. + * tests/suite/Makefile.in: Revert "Remove, it is generated." This reverts commit de3a601e502b24f047412a161085f7fbd898b3f3 because + this file is not automatically generated (not included in top + Makefile.am). -2007-01-05 Simon Josefsson +2011-01-02 Simon Josefsson - * gl/Makefile.am, gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, - gl/m4/lib-link.m4, lgl/Makefile.am, lgl/m4/gnulib-cache.m4, - lgl/m4/gnulib-comp.m4, lgl/m4/lib-link.m4: Update. + * lib/m4/hooks.m4: Specify minimum libgcrypt version. -2007-01-05 Simon Josefsson +2010-12-23 Nikos Mavrogiannopoulos - * configure.in: Bump versions. + * doc/cha-internals.texi: Added discussion on crypto backend for + crypto libraries and /dev/crypto. -2007-01-05 Simon Josefsson +2010-12-21 Nikos Mavrogiannopoulos - * NEWS: Add. + * NEWS, lib/gnutls_privkey.c, lib/includes/gnutls/abstract.h, + lib/includes/gnutls/compat.h, lib/includes/gnutls/x509.h, + lib/x509/crq.c, lib/x509/privkey.c, lib/x509/sign.c: Renamed + gnutls_privkey_sign_data() to gnutls_privkey_sign_data2() to match + the similar function gnutls_x509_privkey_sign_data2(). + gnutls_x509_privkey_sign_data() was deprecated. -2007-01-05 Simon Josefsson +2010-12-19 Nikos Mavrogiannopoulos - * configure.in: Revert part of patch. + * lib/gnutls_str.c: Extra sanity check. -2007-01-05 Simon Josefsson +2010-12-19 Nikos Mavrogiannopoulos - * configure.in, src/Makefile.am: Tiny patch from - ludovic.courtes@laas.fr (Ludovic Courtès). * configure.in: Look for `gaa', issuing a warning with the URL if - not found. * src/Makefile.am (*-gaa.c): Use `$(GAA)' instead of `gaa'. Mark - `.gaa' files as being in `$(srcdir)', thereby allowing for - out-of-source-tree builds. + * lib/auth_srp_passwd.c: Use snprintf() to print an integer. -2006-12-28 Simon Josefsson +2010-12-19 Nikos Mavrogiannopoulos - * ChangeLog: [no log message] + * lib/x509/output.c: Use snprintf() to print IPs. There was a check + just before that, but be safe, just in case. -2006-12-28 Simon Josefsson +2010-12-19 Nikos Mavrogiannopoulos - * Makefile.am: Don't dist mkinstalldirs, automake no longer copies - it. + * doc/cha-auth.texi: Use SRP for password authentication. -2006-12-28 Simon Josefsson +2010-12-19 Nikos Mavrogiannopoulos - * ChangeLog: [no log message] + * doc/cha-auth.texi, lib/gnutls_cert.c, lib/gnutls_extensions.c, + lib/gnutls_psk_netconf.c, lib/gnutls_state.c, + lib/includes/gnutls/compat.h, lib/x509/privkey.c: Do not include + deprecated functions to library documentation. -2006-12-28 Simon Josefsson +2010-12-19 Nikos Mavrogiannopoulos - * NEWS: Version 1.7.1. + * NEWS, lib/includes/gnutls/compat.h, lib/includes/gnutls/x509.h, + lib/x509/privkey.c: gnutls_x509_privkey_verify_data() was + deprecated. -2006-12-28 Simon Josefsson +2010-12-19 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/gnutls_pubkey.c: Documented key usage of pubkey. -2006-12-28 Simon Josefsson +2010-12-19 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/gnutls_pubkey.c: Set public key bits on all import functions. + Issue reported by Murray Kucheawy. -2006-12-28 Simon Josefsson +2010-12-19 Nikos Mavrogiannopoulos - * NEWS: Fix. + * NEWS, lib/gnutls_privkey.c, lib/includes/gnutls/pkcs11.h, + lib/pkcs11_int.h, lib/pkcs11_privkey.c: + gnutls_pkcs11_privkey_sign_data(), + gnutls_pkcs11_privkey_sign_hash2() and + gnutls_pkcs11_privkey_decrypt_data() were removed. The abstract.h + functions should be used instead. -2006-12-28 Simon Josefsson +2010-12-19 Nikos Mavrogiannopoulos - * NEWS: Fix. + * NEWS, lib/gnutls_privkey.c, lib/includes/gnutls/openpgp.h, + lib/openpgp/gnutls_openpgp.h, lib/openpgp/pgp.c, + lib/openpgp/privkey.c: Removed the newly added functions: + gnutls_openpgp_privkey_sign_hash2(), + gnutls_openpgp_privkey_sign_data2(), + gnutls_openpgp_crt_verify_hash() That way the operations in + abstract.h should be used to get the same functionality, and API + will be kept simple and easier to maintain. The corresponding + gnutls_x509_* are kept for backwards compatibility. -2006-12-28 Simon Josefsson +2010-12-18 Nikos Mavrogiannopoulos - * NEWS, THANKS: Add. + * lib/gnutls_sig.c: Do not be strict on RSA hash algorithm selection + for signatures. -2006-12-28 Simon Josefsson +2010-12-18 Nikos Mavrogiannopoulos - * lib/gnutls_asn1_tab.c: Generate. + * lib/gnutls_cert.h, lib/gnutls_sig.c, lib/gnutls_x509.c: Removed + unneeded definitions, and more careful deinitializations in + parse_der_cert_mem(). -2006-12-28 Simon Josefsson +2010-12-18 Nikos Mavrogiannopoulos - * lib/gnutls.asn: Fix comment to make it parse correctly. + * tests/pathlen/ca-no-pathlen.pem, + tests/pathlen/no-ca-or-pathlen.pem: updated certificates to account + for extra null byte added in negative numbers. -2006-12-27 Simon Josefsson +2010-12-18 Nikos Mavrogiannopoulos - * tests/.cvsignore: [no log message] + * tests/cve-2009-1415.c: Account for GNUTLS_E_PK_SIG_VERIFY_FAILED. -2006-12-27 Simon Josefsson +2010-12-18 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/gnutls_privkey.c: Corrected bug in gnutls_privkey_sign_data(). -2006-12-27 Simon Josefsson +2010-12-18 Nikos Mavrogiannopoulos - * lib/gnutls_sig.c: Fix signature verification for DSA signatures in - TLS 1.2, reported by ludovic.courtes@laas.fr (Ludovic Courtès). (_gnutls_pkcs1_rsa_verify_sig): Rename to _gnutls_verify_sig, and - add new parameter SHA1POS to indicate where in hash_concat the SHA.1 - hash is stored (for DSA). (_gnutls_verify_sig_hdata): Pass proper SHA1POS. (_gnutls_verify_sig_params): Likewise. + * lib/gnutls_sig.c: some fixes in pk_prepare_hash(). -2006-12-27 Simon Josefsson +2010-12-18 Nikos Mavrogiannopoulos - * NEWS: Add. + * NEWS, lib/gnutls_pubkey.c, lib/openpgp/pgp.c, lib/x509/privkey.c, + lib/x509/verify.c, lib/x509/x509.c, tests/x509sign-verify.c: The + verification functions now return a GNUTLS_E_PK_SIG_VERIFY_FAILED on + signature verification error. -2006-12-27 Simon Josefsson +2010-12-18 Nikos Mavrogiannopoulos - * doc/Makefile.am, doc/manpages/Makefile.am, lib/Makefile.am, - lib/x509/Makefile.am, libextra/Makefile.am, - libextra/openpgp/Makefile.am: Tiny patch from - ludovic.courtes@laas.fr (Ludovic Courtès). * doc/Makefile.am: Refer to `sort2.pl' as - `$(srcdir)/scripts/sort2.pl' instead of `scripts/sort2.pl'. * doc/manpages/Makefile.am: Refer to `gdoc' as `$(top_srcdir)/doc/scripts/gdoc' instead of `../scripts/gdoc'. * doc/lib/Makefile.am: Likewise. * doc/lib/x509/Makefile.am: Likewise. * doc/libextra/Makefile.am: Likewise. * doc/libextra/openpgp/Makefile.am: Likewise. + * src/p11tool-gaa.c, src/p11tool.gaa: The default input format for + p11tool is PEM. -2006-12-27 Simon Josefsson +2010-12-16 Nikos Mavrogiannopoulos - * NEWS, THANKS: Add. + * lib/gnutls_pubkey.c: importing a pubkey from raw params will set + the bits field correctly. -2006-12-27 Simon Josefsson +2010-12-16 Nikos Mavrogiannopoulos - * lib/auth_cert.c: (_gnutls_gen_cert_server_cert_req): For TLS 1.2, generate conforming - cert requests (i.e., include a empty list of supported hashes). - Report and tiny patch from ludovic.courtes@laas.fr (Ludovic - Courtès). + * NEWS: Documented the addtion of gnutls_pubkey_import_privkey() and + gnutls_pubkey_verify_data() -2006-12-27 Simon Josefsson +2010-12-16 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/gnutls_pubkey.c, lib/includes/gnutls/abstract.h, + lib/libgnutls.map, lib/x509/verify.c, tests/x509sign-verify.c: Added + gnutls_pubkey_verify_data and test vectors. -2006-12-27 Simon Josefsson +2010-12-16 Nikos Mavrogiannopoulos - * tests/userid/.cvsignore: [no log message] + * doc/errcodes.c, doc/examples/ex-alert.c, + doc/examples/ex-cert-select-pkcs11.c, + doc/examples/ex-cert-select.c, doc/examples/ex-client-psk.c, + doc/examples/ex-client-resume.c, doc/examples/ex-client-srp.c, + doc/examples/ex-client-tlsia.c, doc/examples/ex-client1.c, + doc/examples/ex-client2.c, doc/examples/ex-crq.c, + doc/examples/ex-pkcs12.c, doc/examples/ex-rfc2818.c, + doc/examples/ex-serv-anon.c, doc/examples/ex-serv-pgp.c, + doc/examples/ex-serv-psk.c, doc/examples/ex-serv-srp.c, + doc/examples/ex-serv1.c, doc/examples/ex-session-info.c, + doc/examples/ex-verify.c, doc/examples/ex-x509-info.c, + doc/examples/examples.h, doc/examples/tcp.c, doc/printlist.c, + guile/src/core.c, guile/src/extra.c, guile/src/utils.h, + lib/abstract_int.h, lib/auth_anon.c, lib/auth_cert.c, + lib/auth_cert.h, lib/auth_dh_common.c, lib/auth_dh_common.h, + lib/auth_dhe.c, lib/auth_dhe_psk.c, lib/auth_psk.c, + lib/auth_psk_passwd.c, lib/auth_psk_passwd.h, lib/auth_rsa.c, + lib/auth_rsa_export.c, lib/auth_srp.c, lib/auth_srp.h, + lib/auth_srp_passwd.c, lib/auth_srp_passwd.h, lib/auth_srp_rsa.c, + lib/auth_srp_sb64.c, lib/crypto-api.c, lib/crypto.c, lib/crypto.h, + lib/cryptodev.c, lib/debug.c, lib/ext_cert_type.c, + lib/ext_max_record.c, lib/ext_safe_renegotiation.c, + lib/ext_safe_renegotiation.h, lib/ext_server_name.c, + lib/ext_session_ticket.c, lib/ext_signature.c, lib/ext_signature.h, + lib/ext_srp.c, lib/gcrypt/cipher.c, lib/gcrypt/init.c, + lib/gcrypt/mac.c, lib/gcrypt/mpi.c, lib/gcrypt/pk.c, + lib/gnutls_alert.c, lib/gnutls_algorithms.c, + lib/gnutls_algorithms.h, lib/gnutls_anon_cred.c, lib/gnutls_auth.c, + lib/gnutls_auth.h, lib/gnutls_buffers.c, lib/gnutls_buffers.h, + lib/gnutls_cert.c, lib/gnutls_cert.h, lib/gnutls_cipher.c, + lib/gnutls_cipher.h, lib/gnutls_cipher_int.c, + lib/gnutls_cipher_int.h, lib/gnutls_compress.c, + lib/gnutls_compress.h, lib/gnutls_constate.c, + lib/gnutls_constate.h, lib/gnutls_datum.c, lib/gnutls_datum.h, + lib/gnutls_db.c, lib/gnutls_db.h, lib/gnutls_dh.c, lib/gnutls_dh.h, + lib/gnutls_dh_primes.c, lib/gnutls_errors.c, + lib/gnutls_extensions.c, lib/gnutls_extensions.h, + lib/gnutls_global.c, lib/gnutls_handshake.c, + lib/gnutls_handshake.h, lib/gnutls_hash_int.c, + lib/gnutls_hash_int.h, lib/gnutls_int.h, lib/gnutls_kx.c, + lib/gnutls_kx.h, lib/gnutls_mbuffers.c, lib/gnutls_mbuffers.h, + lib/gnutls_mem.h, lib/gnutls_mpi.c, lib/gnutls_mpi.h, + lib/gnutls_num.c, lib/gnutls_pk.c, lib/gnutls_pk.h, + lib/gnutls_priority.c, lib/gnutls_privkey.c, lib/gnutls_psk.c, + lib/gnutls_psk_netconf.c, lib/gnutls_pubkey.c, lib/gnutls_record.c, + lib/gnutls_record.h, lib/gnutls_rsa_export.c, lib/gnutls_session.c, + lib/gnutls_session_pack.c, lib/gnutls_session_pack.h, + lib/gnutls_sig.c, lib/gnutls_sig.h, lib/gnutls_srp.c, + lib/gnutls_srp.h, lib/gnutls_state.c, lib/gnutls_state.h, + lib/gnutls_str.c, lib/gnutls_str.h, lib/gnutls_supplemental.c, + lib/gnutls_supplemental.h, lib/gnutls_ui.c, lib/gnutls_v2_compat.c, + lib/gnutls_v2_compat.h, lib/gnutls_x509.c, lib/gnutls_x509.h, + lib/includes/gnutls/abstract.h, lib/includes/gnutls/compat.h, + lib/includes/gnutls/crypto.h, lib/includes/gnutls/gnutls.h.in, + lib/includes/gnutls/gnutlsxx.h, lib/includes/gnutls/openpgp.h, + lib/includes/gnutls/pkcs11.h, lib/includes/gnutls/pkcs12.h, + lib/includes/gnutls/x509.h, lib/locks.c, lib/nettle/cipher.c, + lib/nettle/egd.c, lib/nettle/mpi.c, lib/nettle/pk.c, + lib/nettle/rnd.c, lib/opencdk/armor.c, lib/opencdk/context.h, + lib/opencdk/dummy.c, lib/opencdk/filters.h, lib/opencdk/hash.c, + lib/opencdk/kbnode.c, lib/opencdk/keydb.c, lib/opencdk/keydb.h, + lib/opencdk/literal.c, lib/opencdk/main.c, lib/opencdk/main.h, + lib/opencdk/misc.c, lib/opencdk/new-packet.c, + lib/opencdk/opencdk.h, lib/opencdk/packet.h, lib/opencdk/pubkey.c, + lib/opencdk/read-packet.c, lib/opencdk/seskey.c, + lib/opencdk/sig-check.c, lib/opencdk/stream.c, + lib/opencdk/stream.h, lib/opencdk/verify.c, + lib/opencdk/write-packet.c, lib/openpgp/compat.c, + lib/openpgp/extras.c, lib/openpgp/gnutls_openpgp.c, + lib/openpgp/gnutls_openpgp.h, lib/openpgp/openpgp_int.h, + lib/openpgp/output.c, lib/openpgp/pgp.c, lib/openpgp/pgpverify.c, + lib/openpgp/privkey.c, lib/pakchois/pakchois.c, + lib/pakchois/pakchois.h, lib/pakchois/pakchois11.h, lib/pkcs11.c, + lib/pkcs11_int.h, lib/pkcs11_privkey.c, lib/pkcs11_secret.c, + lib/pkcs11_write.c, lib/random.c, lib/system.c, lib/system.h, + lib/x509/common.c, lib/x509/common.h, lib/x509/crl.c, + lib/x509/crl_write.c, lib/x509/crq.c, lib/x509/dn.c, + lib/x509/extensions.c, lib/x509/mpi.c, lib/x509/output.c, + lib/x509/pbkdf2-sha1.c, lib/x509/pbkdf2-sha1.h, lib/x509/pkcs12.c, + lib/x509/pkcs12_bag.c, lib/x509/pkcs12_encr.c, lib/x509/pkcs7.c, + lib/x509/privkey.c, lib/x509/privkey_pkcs8.c, + lib/x509/rfc2818_hostname.c, lib/x509/sign.c, lib/x509/verify.c, + lib/x509/x509.c, lib/x509/x509_int.h, lib/x509/x509_write.c, + lib/x509_b64.c, lib/x509_b64.h, libextra/ext_inner_application.c, + libextra/ext_inner_application.h, libextra/gnutls_extra.c, + libextra/gnutls_ia.c, libextra/gnutls_openssl.c, + libextra/includes/gnutls/extra.h, + libextra/includes/gnutls/openssl.h, libextra/openssl_compat.c, + libextra/openssl_compat.h, maint.mk, src/benchmark.c, + src/certtool-cfg.c, src/certtool-cfg.h, src/certtool-common.c, + src/certtool-common.h, src/certtool.c, src/cli.c, src/common.c, + src/common.h, src/crypt.c, src/p11tool.c, src/p11tool.h, + src/pkcs11.c, src/prime.c, src/psk.c, src/serv.c, src/tests.c, + src/tests.h, src/tls_test.c, tests/anonself.c, + tests/certificate_set_x509_crl.c, tests/chainverify.c, + tests/crq_apis.c, tests/crq_key_id.c, tests/cve-2008-4989.c, + tests/dhepskself.c, tests/dn.c, tests/dn2.c, tests/gc.c, + tests/mini-eagain.c, tests/mini-x509-rehandshake.c, + tests/mini-x509.c, tests/mini.c, tests/mpi.c, + tests/nul-in-x509-names.c, tests/openpgp-auth.c, + tests/openpgp-keyring.c, tests/openpgp_test.c, tests/openpgpself.c, + tests/openssl.c, tests/pgps2kgnu.c, tests/pkcs12_encode.c, + tests/pkcs12_s2k.c, tests/pkcs12_s2k_pem.c, tests/pskself.c, + tests/resume.c, tests/safe-renegotiation/srn0.c, + tests/safe-renegotiation/srn1.c, tests/safe-renegotiation/srn2.c, + tests/safe-renegotiation/srn3.c, tests/safe-renegotiation/srn4.c, + tests/safe-renegotiation/srn5.c, tests/set_pkcs12_cred.c, + tests/simple.c, tests/tlsia.c, tests/utils.c, tests/utils.h, + tests/x509_altname.c, tests/x509_test.c, tests/x509dn.c, + tests/x509self.c, tests/x509sign-verify.c: Indented code. Use same + indentation but with -nut to avoid usage of tabs. In several editors + tabs can be configured not to be 8 spaces and this produces + artifacts with the current indentation that is a mixture of tabs and + spaces. -2006-12-27 Simon Josefsson +2010-12-16 Nikos Mavrogiannopoulos - * lib/x509/common.c: (_oid2str): Mark UID as a CHOICE-field (i.e., DirectoryString). (_gnutls_x509_oid_data2string): Handle ia5String in CHOICEs. Fixes - problem reported by Max Kellermann . + * lib/gnutls_privkey.c: _gnutls_privkey_get_public_mpis() handles + openpgp keys. -2006-12-27 Simon Josefsson +2010-12-16 Nikos Mavrogiannopoulos - * lib/pkix_asn1_tab.c: Generated. + * lib/abstract_int.h, lib/gnutls_privkey.c, lib/gnutls_pubkey.c, + lib/includes/gnutls/abstract.h, lib/libgnutls.map: Added + gnutls_pubkey_import_privkey(), that will copy the public key from a + gnutls_privkey_t structure. -2006-12-27 Simon Josefsson +2010-12-15 Nikos Mavrogiannopoulos - * lib/pkix.asn: Encoded UID DN fields as DirectoryString (e.g., - PrintableString), not as IA5String. Add IA5String as a CHOICE for - DirectoryString, to deal with backwards compatibility if there are - IA5String UID fields out there that were generated by older - versions. Reported by Max Kellermann . + * NEWS, lib/libgnutls.map: Do not export the non-existant symbols + gnutls_pkcs11_privkey_sign_hash and gnutls_privkey_sign_hash. -2006-12-27 Simon Josefsson +2010-12-13 Nikos Mavrogiannopoulos - * tests/userid/userid: Add. + * NEWS: documented new functions -2006-12-27 Simon Josefsson +2010-12-13 Nikos Mavrogiannopoulos - * configure.in: Add tests/userid/. + * NEWS: Added new functions. -2006-12-27 Simon Josefsson +2010-12-13 Nikos Mavrogiannopoulos - * tests/Makefile.am: Add userid/. + * lib/libgnutls.map: Added new functions. -2006-12-27 Simon Josefsson +2010-12-13 Nikos Mavrogiannopoulos - * tests/userid/Makefile.am, tests/userid/userid.pem: Add. + * lib/includes/gnutls/compat.h, lib/includes/gnutls/x509.h: + de-deprecated gnutls_x509_crt_verify_hash() -2006-12-27 Simon Josefsson +2010-12-13 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/includes/gnutls/openpgp.h, lib/libgnutls.map, + lib/openpgp/pgp.c, tests/x509sign-verify.c: Added + gnutls_openpgp_crt_verify_hash(). -2006-12-27 Simon Josefsson +2010-12-13 Nikos Mavrogiannopoulos - * lib/gnutls_x509.c: (generate_rdn_seq): Store subject DN instead of issuer DN in the - certificate authority list, to make sure server's send the proper - list of expected CAs to the client. Reported by Max Kellermann - . + * lib/includes/gnutls/pkcs11.h, lib/pkcs11_privkey.c: added + gnutls_privkey_sign_hash2() -2006-12-27 Simon Josefsson +2010-12-13 Nikos Mavrogiannopoulos - * lib/gnutls_x509.c: (gnutls_certificate_set_x509_crl): Initialize before use, reported - by Max Kellermann . + * lib/gnutls_privkey.c, lib/gnutls_sig.c, lib/gnutls_sig.h, + lib/openpgp/privkey.c, lib/pkcs11_privkey.c, lib/x509/privkey.c: + Simplified preparation of signing code. -2006-12-27 Simon Josefsson +2010-12-12 Nikos Mavrogiannopoulos - * NEWS, THANKS, tests/Makefile.am, tests/certificate_set_x509_crl.c: - Add. + * lib/gnutls_privkey.c, lib/gnutls_pubkey.c, lib/gnutls_sig.c, + lib/gnutls_sig.h, lib/openpgp/gnutls_openpgp.h, + lib/openpgp/privkey.c, lib/pkcs11_int.h, lib/pkcs11_privkey.c, + lib/x509/Makefile.am, lib/x509/privkey.c, lib/x509/sign.c, + lib/x509/sign.h: deprecated x509/sign.h and moved functionality of + it in gnutls_sig.h. -2006-12-27 Simon Josefsson +2010-12-12 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/x509/sign.c: pk_hash_data() will fail unless DSA or RSA are + specified. -2006-12-27 Simon Josefsson +2010-12-12 Nikos Mavrogiannopoulos - * gl/m4/lib-link.m4, gl/strdup.h, lgl/m4/lib-link.m4, - lgl/m4/stdint.m4: Update. + * lib/x509/privkey.c: better comments -2006-12-26 Simon Josefsson +2010-12-12 Nikos Mavrogiannopoulos - * doc/protocol/draft-ietf-tls-srp-13.txt: Add. + * lib/openpgp/gnutls_openpgp.c, lib/openpgp/privkey.c: + reorganization of the privkey_ functions(). -2006-12-26 Simon Josefsson +2010-12-11 Nikos Mavrogiannopoulos - * doc/protocol/draft-santesson-tls-gssapi-01.txt: Add. + * lib/gnutls_privkey.c, lib/includes/gnutls/abstract.h, + lib/includes/gnutls/compat.h, lib/includes/gnutls/openpgp.h, + lib/includes/gnutls/x509.h, lib/libgnutls.map, + lib/openpgp/gnutls_openpgp.c, lib/x509/privkey.c: Introduced + gnutls_*_privkey_sign_hash2() that is a high level function to + produce signatures. -2006-12-26 Simon Josefsson +2010-12-11 Nikos Mavrogiannopoulos - * doc/protocol/draft-rescorla-tls-opaque-prf-input-00.txt, - doc/protocol/draft-rescorla-tls-suiteb-00.txt: Add. + * lib/gnutls_privkey.c, lib/pkcs11_privkey.c, lib/x509/privkey.c, + lib/x509/sign.c, lib/x509/sign.h: Separated the sign_data functions + to a hashing phase, a preparing phase, and the actual signing. -2006-12-26 Simon Josefsson +2010-12-11 Nikos Mavrogiannopoulos - * po/LINGUAS, po/de.po: Sync with TP. + * NEWS: documented deprecated functions. -2006-12-10 Simon Josefsson +2010-12-09 Nikos Mavrogiannopoulos - * m4/intl.m4, m4/intldir.m4, m4/lock.m4, m4/visibility.m4: Remove - (should have just been .cvsignore'd). + * lib/includes/gnutls/compat.h, lib/includes/gnutls/openpgp.h, + lib/includes/gnutls/pkcs11.h: All the sign hash functions were + deprecated. -2006-12-10 Simon Josefsson +2010-12-09 Nikos Mavrogiannopoulos - * m4/.cvsignore: [no log message] + * lib/includes/gnutls/compat.h, lib/includes/gnutls/x509.h: + gnutls_x509_privkey_sign_hash() is dangerous and was deprecated. + Added some text explaining why some functions were deprecated. -2006-12-10 Simon Josefsson +2010-12-08 Nikos Mavrogiannopoulos - * m4/intl.m4, m4/intldir.m4, m4/lock.m4, m4/visibility.m4: Add. + * NEWS: documented previous update. -2006-12-10 Simon Josefsson +2010-12-08 Nikos Mavrogiannopoulos - * NEWS: Fix. + * lib/x509/privkey.c, lib/x509/x509.c: export_raw() functions now + add leading zero in mpis. -2006-12-10 Simon Josefsson +2010-12-07 Simon Josefsson * NEWS: Add. -2006-12-10 Simon Josefsson - - * configure.in: Bump versions. - -2006-12-10 Simon Josefsson - - * NEWS, configure.in: Bump versions. - -2006-12-01 Simon Josefsson - - * lib/gnutls_record.c: Doc fix. - -2006-11-29 Simon Josefsson - - * gl/Makefile.am, lgl/Makefile.am: Update. - -2006-11-29 Simon Josefsson - - * ChangeLog: [no log message] - -2006-11-29 Simon Josefsson - - * Makefile.am: Put in devel/ directory. Disable doc generation. - -2006-11-29 Simon Josefsson - - * NEWS: Version 1.7.0. - -2006-11-29 Simon Josefsson +2010-12-07 Simon Josefsson - * NEWS: Add. + * lib/includes/gnutls/crypto.h: C++ fixes, tiny patch from "Brendan + Doherty" . -2006-11-29 Simon Josefsson +2010-12-07 Simon Josefsson - * gl/Makefile.am, lgl/Makefile.am: Fix gnulib-tool bug. + * gl/m4/getdelim.m4, gl/m4/getline.m4, gl/m4/memchr.m4, + gl/m4/printf.m4, gl/m4/stdint.m4, lib/gl/m4/fcntl-o.m4, + lib/gl/m4/iconv.m4, lib/gl/m4/intdiv0.m4, lib/gl/m4/memchr.m4, + lib/gl/m4/memmem.m4, lib/gl/m4/printf.m4, lib/gl/m4/stdint.m4: + Update gnulib files. -2006-11-29 Simon Josefsson +2010-12-07 Simon Josefsson - * lib/gnutls_priority.c: Attempt TLS 1.2 and TLS 1.1 too, by - default. + * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, + libextra/configure.ac: Bump versions. -2006-11-29 Simon Josefsson +2010-12-07 Simon Josefsson - * NEWS: Fix. + * ChangeLog: Generated. -2006-11-28 Simon Josefsson +2010-12-07 Simon Josefsson - * gl/Makefile.am, gl/gettext.h, lgl/Makefile.am, lgl/gettext.h, - lgl/m4/eoverflow.m4, lgl/m4/size_max.m4, lgl/m4/stdint.m4: Update. + * configure.ac, lib/configure.ac, lib/m4/hooks.m4, + libextra/configure.ac: Bump versions. -2006-11-26 Simon Josefsson +2010-12-06 Simon Josefsson - * NEWS: Fix. + * ChangeLog: Generated. -2006-11-26 Simon Josefsson +2010-12-06 Simon Josefsson - * NEWS: Add. + * tests/Makefile.am: Don't fail on 'make distcheck'. -2006-11-26 Simon Josefsson +2010-12-06 Simon Josefsson - * tests/anonself.c: Print TLS version too. + * NEWS: Version 2.11.6. -2006-11-26 Simon Josefsson +2010-12-06 Simon Josefsson - * tests/anonself.c: More debugging. + * lib/gnutls_str.c: Indent. -2006-11-26 Simon Josefsson +2010-12-06 Nikos Mavrogiannopoulos - * tests/utils.c: Output more debug info. + * NEWS: documented SSL 3.0 record version change. -2006-11-26 Simon Josefsson +2010-12-06 Nikos Mavrogiannopoulos - * NEWS: Fix. + * lib/gnutls_handshake.c, lib/gnutls_int.h, lib/gnutls_priority.c: + SSL3_RECORD_VERSION priority option is now the default. That is in + order to not confuse non TLS 1.2 compliant implementations that + don't like a TLS 1.2 record. -2006-11-26 Simon Josefsson +2010-12-06 Nikos Mavrogiannopoulos - * libextra/opencdk/keyserver.c: Doc fix. + * lib/gnutls_str.c: simplified escape and unescape. -2006-11-26 Simon Josefsson +2010-12-05 Nikos Mavrogiannopoulos - * libextra/opencdk/opencdk.h: Doc fixes. + * THANKS: Added Michael. -2006-11-26 Simon Josefsson +2010-12-06 Simon Josefsson - * libextra/opencdk/kbnode.c, libextra/opencdk/keydb.c, - libextra/opencdk/keygen.c, libextra/opencdk/keylist.c, - libextra/opencdk/sign.c: Doc fix. + * cfg.mk, lib/gnutls_priority.c, lib/gnutls_state.c, + lib/includes/gnutls/compat.h, lib/includes/gnutls/gnutls.h.in, + lib/includes/gnutls/pkcs11.h, lib/nettle/rnd.c, lib/pkcs11.c, + lib/pkcs11_int.h, lib/pkcs11_secret.c, lib/pkcs11_write.c, + lib/x509/verify.c, src/certtool-common.c, src/certtool-common.h, + src/certtool.c, src/cli.c, src/common.c, src/p11tool.c, + src/p11tool.h, src/pkcs11.c, src/serv.c, tests/chainverify.c, + tests/openpgp-auth.c: Indent code. -2006-11-26 Simon Josefsson +2010-12-06 Simon Josefsson - * libextra/opencdk/kbnode.c, libextra/opencdk/keygen.c, - libextra/opencdk/sign.c: Doc fix. + * maint.mk: Update gnulib files. -2006-11-26 Simon Josefsson +2010-12-06 Simon Josefsson - * libextra/opencdk/keydb.c: Doc fix. + * gl/override/top/maint.mk.diff: Remove. -2006-11-26 Simon Josefsson +2010-12-06 Simon Josefsson - * libextra/gnutls_ia.c: Use new internal PRF API. + * .gitignore: Update. -2006-11-26 Simon Josefsson +2010-12-06 Simon Josefsson - * lib/gnutls_sig.c: To use NULL - DigestInfo.AlgorithmsIdentifier.parameters or not, that is the - question. + * lib/gnutls_priority.c, lib/pkcs11_secret.c, src/p11tool.c, + src/p11tool.gaa: Fix syntax-check nits. -2006-11-26 Simon Josefsson +2010-12-06 Simon Josefsson - * configure.in: Move AM_CONDITIONAL outside of 'if gcc' clause, - fixes problem reported by "Michael C. Vergallen" - . + * .x-sc_bindtextdomain: Ignore more. -2006-11-26 Simon Josefsson +2010-12-06 Simon Josefsson - * NEWS: Add. + * GNUmakefile, build-aux/gendocs.sh, build-aux/pmccabe.css, + build-aux/pmccabe2html, gl/Makefile.am, gl/arpa_inet.in.h, + gl/float+.h, gl/gettext.h, gl/inet_ntop.c, gl/intprops.h, + gl/m4/alloca.m4, gl/m4/arpa_inet_h.m4, gl/m4/getdelim.m4, + gl/m4/getline.m4, gl/m4/getpass.m4, gl/m4/gnulib-common.m4, + gl/m4/gnulib-comp.m4, gl/m4/mmap-anon.m4, gl/m4/printf.m4, + gl/m4/readline.m4, gl/m4/string_h.m4, gl/m4/sys_ioctl_h.m4, + gl/m4/sys_select_h.m4, gl/m4/sys_socket_h.m4, gl/m4/unistd_h.m4, + gl/m4/vasnprintf.m4, gl/m4/wchar_h.m4, gl/printf-parse.c, + gl/printf-parse.h, gl/stdint.in.h, gl/stdio.in.h, gl/stdlib.in.h, + gl/string.in.h, gl/sys_select.in.h, gl/sys_socket.in.h, + gl/tests/Makefile.am, gl/tests/init.sh, + gl/tests/test-select-stdin.c, gl/tests/test-select.c, + gl/tests/test-update-copyright.sh, gl/tests/verify.h, gl/time.in.h, + gl/unistd.in.h, gl/vasnprintf.c, gl/verify.h, gl/wchar.in.h, + lib/gl/Makefile.am, lib/gl/float+.h, lib/gl/gettext.h, + lib/gl/m4/alloca.m4, lib/gl/m4/glibc2.m4, lib/gl/m4/glibc21.m4, + lib/gl/m4/gnulib-common.m4, lib/gl/m4/gnulib-comp.m4, + lib/gl/m4/iconv.m4, lib/gl/m4/memmem.m4, lib/gl/m4/mmap-anon.m4, + lib/gl/m4/printf.m4, lib/gl/m4/string_h.m4, + lib/gl/m4/sys_socket_h.m4, lib/gl/m4/unistd_h.m4, + lib/gl/m4/vasnprintf.m4, lib/gl/m4/wchar_h.m4, + lib/gl/printf-parse.c, lib/gl/printf-parse.h, lib/gl/stdint.in.h, + lib/gl/stdio.in.h, lib/gl/stdlib.in.h, lib/gl/string.in.h, + lib/gl/sys_socket.in.h, lib/gl/tests/Makefile.am, + lib/gl/tests/init.sh, lib/gl/tests/intprops.h, + lib/gl/tests/verify.h, lib/gl/time.in.h, lib/gl/unistd.in.h, + lib/gl/vasnprintf.c, lib/gl/verify.h, lib/gl/wchar.in.h, + libextra/gl/m4/gnulib-common.m4, maint.mk: Update gnulib files. -2006-11-25 Simon Josefsson +2010-12-05 Nikos Mavrogiannopoulos - * NEWS: Add. + * tests/Makefile.am: Temporarily remove gendh test. It takes + extremely long time under valgrind. -2006-11-25 Simon Josefsson +2010-12-05 Nikos Mavrogiannopoulos - * lib/auth_cert.c, lib/gnutls_constate.c, lib/gnutls_handshake.c, - lib/gnutls_kx.c, lib/gnutls_sig.c, lib/gnutls_state.c, - lib/gnutls_state.h: Client TLS 1.2 support. Works against - www.mikestoolbox.org:4433. + * NEWS, lib/gnutls_sig.c, lib/x509/common.c, lib/x509/common.h, + lib/x509/mpi.c, lib/x509/sign.c, lib/x509/verify.c: Use ASN1_NULL + when writing parameters for RSA signatures. This makes us comply + with RFC3279. Reported by Michael Rommel. -2006-11-25 Simon Josefsson +2010-12-05 Nikos Mavrogiannopoulos - * src/common.c: Support "TLS1.2" as protocol name. + * NEWS, src/serv.c: Corrected buffer overflow in gnutls-serv by + Tomas Mraz. The gnutls-serv uses fixed allocated buffer for the response which + can be pretty long if a client certificate is presented to it and + the http header is large. This causes buffer overflow and heap + corruption which then leads to random segfaults or aborts. It was reported originally here: + https://bugzilla.redhat.com/show_bug.cgi?id=659259 The attached patch changes sprintf calls in peer_print_info() to + snprintf so the buffer is never overflowed. -2006-11-25 Simon Josefsson +2010-12-01 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/m4/hooks.m4: increased revision -2006-11-25 Simon Josefsson +2010-12-01 Nikos Mavrogiannopoulos - * includes/gnutls/gnutls.h.in: (gnutls_protocol_t): Add GNUTLS_TLS1_2. + * src/Makefile.am: Added p11tool.h -2006-11-25 Simon Josefsson +2010-12-01 Nikos Mavrogiannopoulos - * lib/gnutls_algorithms.c: Support TLS 1.2. + * NEWS: released 2.11.5 -2006-11-25 Simon Josefsson +2010-12-01 Nikos Mavrogiannopoulos - * NEWS: Add. + * doc/cha-internals.texi: escaped chars. -2006-11-25 Simon Josefsson +2010-12-01 Nikos Mavrogiannopoulos - * gl/Makefile.am, gl/getaddrinfo.c, gl/imaxtostr.c, gl/intprops.h, - gl/inttostr.c, gl/inttostr.h, gl/m4/absolute-header.m4, - gl/m4/gnulib-comp.m4, gl/m4/inttostr.m4, gl/m4/longlong.m4, - gl/m4/stdint.m4, gl/m4/ulonglong.m4, gl/offtostr.c, gl/stdint_.h, - gl/uinttostr.c, gl/umaxtostr.c, lgl/m4/alloca.m4, lgl/m4/gettext.m4: - Update. + * doc/cha-internals.texi: Updated extension writing code. Still not + clear enough. -2006-11-25 Simon Josefsson +2010-12-01 Nikos Mavrogiannopoulos - * NEWS, configure.in: Bump versions. + * doc/cha-cert-auth.texi: PKCS #11 fixes -2006-11-22 Simon Josefsson +2010-12-01 Nikos Mavrogiannopoulos - * doc/protocol/draft-housley-evidence-extns-01.txt: Add. + * doc/examples/ex-cert-select-pkcs11.c: Corrected pkcs11 example + URLs -2006-11-17 Simon Josefsson +2010-11-30 Nikos Mavrogiannopoulos - * ChangeLog: [no log message] + * src/pkcs11.c: Prefix mechanism number with 0x. -2006-11-17 Simon Josefsson +2010-11-30 Nikos Mavrogiannopoulos - * Makefile.am: Release do non-devel directory. + * lib/pakchois/pakchois11.h, src/pkcs11.c: Added camellia and + SHA224. -2006-11-17 Simon Josefsson +2010-11-27 Nikos Mavrogiannopoulos - * NEWS: Version 1.6.0. + * configure.ac, lib/configure.ac, lib/nettle/rnd.c: Use rusage if + present. Moved check to correct config and included resource.h + header. -2006-11-17 Simon Josefsson +2010-11-27 Nikos Mavrogiannopoulos - * doc/manpages/Makefile.am: Fix copyright years. + * lib/nettle/rnd.c: More details on the text -2006-11-17 Simon Josefsson +2010-11-27 Nikos Mavrogiannopoulos - * configure.in: Bump versions. + * lib/pkcs11.c: Corrected copyright statement -2006-11-17 Simon Josefsson +2010-11-27 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/nettle/rnd.c: Corrected copyright header. Added Niels. -2006-11-16 Simon Josefsson +2010-11-26 Nikos Mavrogiannopoulos - * ChangeLog: [no log message] + * NEWS, lib/gnutls_cert.c, lib/includes/gnutls/x509.h, + lib/x509/verify.c, src/certtool.c, src/cli.c, tests/chainverify.c: + Reverted default behavior for verification and introduced + GNUTLS_VERIFY_DO_NOT_ALLOW_X509_V1_CA_CRT. Thus by default V1 + trusted CAs are allowed, unless the new flag is specified. -2006-11-16 Simon Josefsson +2010-11-25 Simon Josefsson - * NEWS: Version 1.5.5. + * NEWS: Typo. -2006-11-16 Simon Josefsson +2010-11-25 Simon Josefsson - * lib/gnutls_record.c: (gnutls_record_recv): Fix docstring, suggested by Tim Kosse - . + * tests/suite/Makefile.in: Remove, it is generated. -2006-11-16 Simon Josefsson +2010-11-25 Simon Josefsson - * doc/protocol/draft-ietf-sasl-rfc2831bis-11.txt: Remove, oops wrong - project. + * README: No space at eol. -2006-11-16 Simon Josefsson +2010-11-25 Simon Josefsson - * doc/protocol/draft-ietf-sasl-rfc2831bis-11.txt: Add. + * tests/safe-renegotiation/Makefile.am: Fix syntax-check warning. -2006-11-16 Simon Josefsson +2010-11-25 Simon Josefsson - * tests/rsa-md5-collision/Makefile.am: Remove. + * cfg.mk: Ignore tests/suite for syntax-checks, not our code. -2006-11-16 Simon Josefsson +2010-11-25 Simon Josefsson - * NEWS: Add. + * README: Recommend git format-patch rather than git diff. -2006-11-16 Simon Josefsson +2010-11-24 Jeffrey Walton - * NEWS: Add. + * README: Attached is a proposed modification to the README file, + including recent comments by Simon. -2006-11-16 Simon Josefsson +2010-11-23 Simon Josefsson - * NEWS: Add. + * guile/src/Makefile.am: Fix dependencies, fixes parallel builds. Tiny patch from Graham Gower . -2006-11-16 Simon Josefsson +2010-11-19 Simon Josefsson - * gl/Makefile.am, gl/gettext.h, gl/m4/gnulib-comp.m4, - gl/m4/lib-link.m4, gl/m4/longlong.m4, gl/stdint_.h, - lgl/Makefile.am, lgl/gettext.h, lgl/m4/gnulib-comp.m4, - lgl/m4/lib-link.m4, lgl/m4/longlong.m4, lgl/stdint_.h: Update. + * doc/Makefile.am: Remove file. -2006-11-16 Simon Josefsson +2010-11-19 Simon Josefsson - * tests/rsa-md5-collision/chain1-expect.log, - tests/rsa-md5-collision/chain2-expect.log: Remove. + * doc/manpages/Makefile.am: Generated. -2006-11-16 Simon Josefsson +2010-11-19 Nikos Mavrogiannopoulos - * tests/rsa-md5-collision/rsa-md5-collision: Remove -x. + * configure.ac, tests/suite/Makefile.in: Create Makefile in + tests/suite/ -2006-11-16 Simon Josefsson +2010-11-19 Nikos Mavrogiannopoulos - * tests/rsa-md5-collision/rsa-md5-collision: Make it work under - mingw32. + * src/cli.c, src/psk-gaa.c, src/psk-gaa.h, src/psk.c, src/psk.gaa, + tests/Makefile.am, tests/netconf-psk.c: Deprecate the netconf + password and use a key only. -2006-11-15 Simon Josefsson +2010-11-19 Nikos Mavrogiannopoulos - * configure.in: Bump versions (done incorrectly in the 1.5.4 - release). + * doc/credentials/gnutls-http-serv: correctly set psk params. -2006-11-15 Simon Josefsson +2010-11-16 Nikos Mavrogiannopoulos - * NEWS: Add. + * NEWS: added info -2006-11-15 Simon Josefsson +2010-11-16 Nikos Mavrogiannopoulos - * doc/examples/ex-x509-info.c: Fix cert_list_size type to match API, - reported by Tim Kosse . + * lib/x509/privkey_pkcs8.c: Correctly write DSA public key in ASN.1 + (add leading zero). Reported by Jeffrey Walton. -2006-11-14 Simon Josefsson +2010-11-16 Nikos Mavrogiannopoulos - * doc/protocol/draft-hajjeh-tls-identity-protection-00.txt: Add. + * lib/x509/mpi.c: cleanups -2006-11-11 Simon Josefsson +2010-11-16 Nikos Mavrogiannopoulos - * doc/protocol/draft-hajjeh-tls-sign-02.txt: Add. + * doc/cha-auth.texi, lib/includes/gnutls/compat.h, + lib/includes/gnutls/gnutls.h.in: Deprecated the key derivation + method from netconf. The published RFC does not include this method + and it is not known whether it has been used at all in practice. No + need to support it. -2006-11-07 Simon Josefsson +2010-11-16 Nikos Mavrogiannopoulos - * ChangeLog: [no log message] + * NEWS, lib/gnutls_priority.c: Added SIGN-ALL, CTYPE-ALL, COMP-ALL, + and VERS-TLS-ALL priority strings. -2006-11-07 Simon Josefsson +2010-11-11 Nikos Mavrogiannopoulos - * NEWS: Version 1.5.4. + * lib/gnutls_x509.c: Removed redundant error check. Reported by + Nicolas Kaiser. -2006-11-07 Simon Josefsson +2010-11-11 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/includes/gnutls/pkcs11.h, lib/libgnutls.map, lib/pkcs11.c, + src/p11tool-gaa.c, src/p11tool-gaa.h, src/p11tool.c, + src/p11tool.gaa, src/p11tool.h, src/pkcs11.c: Added + --list-mechanisms option to p11tool. Lists all mechanisms supported + by a token. -2006-11-07 Simon Josefsson +2010-11-11 Nikos Mavrogiannopoulos - * NEWS: Add. + * doc/manpages/Makefile.am, doc/manpages/p11tool.1: Added manpage + for p11tool. -2006-11-07 Simon Josefsson +2010-11-11 Nikos Mavrogiannopoulos - * lgl/Makefile.am, lgl/m4/gnulib-cache.m4, lgl/m4/gnulib-comp.m4, - lgl/m4/strverscmp.m4, lgl/strverscmp.c, lgl/strverscmp.h, - lib/gnutls_global.c: Use strverscmp. + * doc/manpages/certtool.1, doc/manpages/gnutls-cli.1, + doc/manpages/gnutls-serv.1, doc/manpages/srptool.1: Corrected my + name. -2006-11-07 Simon Josefsson +2010-11-11 Nikos Mavrogiannopoulos - * lib/gnutls_buffers.c: Typo. + * src/p11tool-gaa.c, src/p11tool.gaa: In p11tool --url was renamed + to --export. -2006-11-07 Simon Josefsson +2010-11-11 Nikos Mavrogiannopoulos - * NEWS, doc/manpages/Makefile.am: Add. + * src/p11tool-gaa.c, src/p11tool-gaa.h, src/p11tool.gaa, + src/pkcs11.c: Corrected bug in secret key copy. Rationalized the + --help of p11tool. -2006-11-07 Simon Josefsson +2010-11-11 Nikos Mavrogiannopoulos - * libextra/gnutls_ia.c: Doc fix. + * lib/pkcs11.c, lib/pkcs11_secret.c: * Corrected flag conversion to internal representation. * When generating secret keys include a generic key type and a + random ID. -2006-11-07 Simon Josefsson +2010-11-11 Nikos Mavrogiannopoulos - * doc/gnutls.texi: More errno discussion regarding push/pull - functions. + * src/p11tool-gaa.c, src/p11tool-gaa.h, src/p11tool.gaa: Added + option --no-detailed-url to p11tool. More detailed url is the + default now. -2006-11-07 Simon Josefsson +2010-11-07 Nikos Mavrogiannopoulos - * NEWS: Add. + * NEWS, lib/Makefile.am, lib/includes/gnutls/pkcs11.h, + lib/libgnutls.map, lib/pkcs11.c, lib/pkcs11_int.h, + lib/pkcs11_secret.c, lib/pkcs11_write.c, src/pkcs11.c: Added + gnutls_pkcs11_token_set_pin() and gnutls_pkcs11_token_init() to + enable manipulating tokens purely from PKCS #11. -2006-11-07 Simon Josefsson +2010-11-07 Nikos Mavrogiannopoulos - * lib/gnutls_buffers.c: Don't use errno to avoid thread-safety - issues. + * doc/README.gaa: Removed README.gaa. -2006-11-07 Simon Josefsson +2010-11-07 Nikos Mavrogiannopoulos - * lib/gnutls_buffers.c: Convert to EINTR/EAGAIN errno under Windows, - using WSAGetLastError(). + * .gitignore, src/Makefile.am, src/certtool-common.c, + src/certtool-common.h, src/certtool-gaa.c, src/certtool-gaa.h, + src/certtool.c, src/certtool.gaa, src/p11tool-gaa.c, + src/p11tool-gaa.h, src/p11tool.c, src/p11tool.gaa, src/p11tool.h, + src/pkcs11.c: Introduced p11tool to separate PKCS #11 functionality + from certtool. -2006-11-07 Simon Josefsson +2010-11-07 Nikos Mavrogiannopoulos - * NEWS, includes/gnutls/gnutls.h.in, lib/gnutls_buffers.c, - lib/gnutls_int.h: Add new APIs to set errno for push/pull functions, - suggested by tim.kosse@filezilla-project.org. + * tests/Makefile.am, tests/finished.c: Removed check on deprecated + feature (finished). -2006-11-06 Simon Josefsson +2010-11-04 Nikos Mavrogiannopoulos - * NEWS: Fix. + * lib/includes/gnutls/compat.h, lib/includes/gnutls/gnutls.h.in: + Deprecated old functions. -2006-11-05 Simon Josefsson +2010-11-01 Nikos Mavrogiannopoulos - * NEWS: Add. + * doc/cha-intro-tls.texi: use @code for SAFE_RENEGOTIATION string. -2006-11-05 Simon Josefsson +2010-06-07 Simon Josefsson - * lib/Makefile.am, libextra/Makefile.am: Remove SOVERSION (see - configure.in). + * lib/gnutls_priority.c: Doc fix. -2006-11-05 Simon Josefsson +2010-10-16 Simon Josefsson - * configure.in: Set SOVERSION here. + * .gitignore: Add. -2006-11-05 Simon Josefsson +2010-10-16 Nikos Mavrogiannopoulos - * lgl/.cvsignore: [no log message] + * tests/Makefile.am, tests/safe-renegotiation/Makefile.am, + tests/safe-renegotiation/params.dh, + tests/safe-renegotiation/testsrn, tests/suite/Makefile.am, + tests/suite/README, tests/suite/eagain, + tests/suite/ecore/eina_config.h, + tests/suite/ecore/src/include/Eina.h, + tests/suite/ecore/src/include/eina_accessor.h, + tests/suite/ecore/src/include/eina_array.h, + tests/suite/ecore/src/include/eina_benchmark.h, + tests/suite/ecore/src/include/eina_binshare.h, + tests/suite/ecore/src/include/eina_config.h, + tests/suite/ecore/src/include/eina_convert.h, + tests/suite/ecore/src/include/eina_counter.h, + tests/suite/ecore/src/include/eina_cpu.h, + tests/suite/ecore/src/include/eina_error.h, + tests/suite/ecore/src/include/eina_file.h, + tests/suite/ecore/src/include/eina_fp.h, + tests/suite/ecore/src/include/eina_hamster.h, + tests/suite/ecore/src/include/eina_hash.h, + tests/suite/ecore/src/include/eina_inline_array.x, + tests/suite/ecore/src/include/eina_inline_f16p16.x, + tests/suite/ecore/src/include/eina_inline_f32p32.x, + tests/suite/ecore/src/include/eina_inline_f8p24.x, + tests/suite/ecore/src/include/eina_inline_fp.x, + tests/suite/ecore/src/include/eina_inline_hash.x, + tests/suite/ecore/src/include/eina_inline_list.x, + tests/suite/ecore/src/include/eina_inline_log.x, + tests/suite/ecore/src/include/eina_inline_mempool.x, + tests/suite/ecore/src/include/eina_inline_rbtree.x, + tests/suite/ecore/src/include/eina_inline_rectangle.x, + tests/suite/ecore/src/include/eina_inline_str.x, + tests/suite/ecore/src/include/eina_inline_stringshare.x, + tests/suite/ecore/src/include/eina_inline_tiler.x, + tests/suite/ecore/src/include/eina_inline_trash.x, + tests/suite/ecore/src/include/eina_inline_ustringshare.x, + tests/suite/ecore/src/include/eina_inlist.h, + tests/suite/ecore/src/include/eina_iterator.h, + tests/suite/ecore/src/include/eina_lalloc.h, + tests/suite/ecore/src/include/eina_list.h, + tests/suite/ecore/src/include/eina_log.h, + tests/suite/ecore/src/include/eina_magic.h, + tests/suite/ecore/src/include/eina_main.h, + tests/suite/ecore/src/include/eina_matrixsparse.h, + tests/suite/ecore/src/include/eina_mempool.h, + tests/suite/ecore/src/include/eina_module.h, + tests/suite/ecore/src/include/eina_quadtree.h, + tests/suite/ecore/src/include/eina_rbtree.h, + tests/suite/ecore/src/include/eina_rectangle.h, + tests/suite/ecore/src/include/eina_safety_checks.h, + tests/suite/ecore/src/include/eina_sched.h, + tests/suite/ecore/src/include/eina_str.h, + tests/suite/ecore/src/include/eina_strbuf.h, + tests/suite/ecore/src/include/eina_stringshare.h, + tests/suite/ecore/src/include/eina_tiler.h, + tests/suite/ecore/src/include/eina_trash.h, + tests/suite/ecore/src/include/eina_types.h, + tests/suite/ecore/src/include/eina_unicode.h, + tests/suite/ecore/src/include/eina_ustrbuf.h, + tests/suite/ecore/src/include/eina_ustringshare.h, + tests/suite/ecore/src/lib/Ecore.h, + tests/suite/ecore/src/lib/Ecore_Getopt.h, + tests/suite/ecore/src/lib/ecore.c, + tests/suite/ecore/src/lib/ecore_anim.c, + tests/suite/ecore/src/lib/ecore_app.c, + tests/suite/ecore/src/lib/ecore_events.c, + tests/suite/ecore/src/lib/ecore_exe.c, + tests/suite/ecore/src/lib/ecore_getopt.c, + tests/suite/ecore/src/lib/ecore_glib.c, + tests/suite/ecore/src/lib/ecore_idle_enterer.c, + tests/suite/ecore/src/lib/ecore_idle_exiter.c, + tests/suite/ecore/src/lib/ecore_idler.c, + tests/suite/ecore/src/lib/ecore_job.c, + tests/suite/ecore/src/lib/ecore_main.c, + tests/suite/ecore/src/lib/ecore_pipe.c, + tests/suite/ecore/src/lib/ecore_poll.c, + tests/suite/ecore/src/lib/ecore_private.h, + tests/suite/ecore/src/lib/ecore_signal.c, + tests/suite/ecore/src/lib/ecore_thread.c, + tests/suite/ecore/src/lib/ecore_time.c, + tests/suite/ecore/src/lib/ecore_timer.c, + tests/suite/ecore/src/lib/eina_accessor.c, + tests/suite/ecore/src/lib/eina_array.c, + tests/suite/ecore/src/lib/eina_benchmark.c, + tests/suite/ecore/src/lib/eina_binshare.c, + tests/suite/ecore/src/lib/eina_chained_mempool.c, + tests/suite/ecore/src/lib/eina_convert.c, + tests/suite/ecore/src/lib/eina_counter.c, + tests/suite/ecore/src/lib/eina_cpu.c, + tests/suite/ecore/src/lib/eina_error.c, + tests/suite/ecore/src/lib/eina_file.c, + tests/suite/ecore/src/lib/eina_fp.c, + tests/suite/ecore/src/lib/eina_hamster.c, + tests/suite/ecore/src/lib/eina_hash.c, + tests/suite/ecore/src/lib/eina_inlist.c, + tests/suite/ecore/src/lib/eina_iterator.c, + tests/suite/ecore/src/lib/eina_lalloc.c, + tests/suite/ecore/src/lib/eina_list.c, + tests/suite/ecore/src/lib/eina_log.c, + tests/suite/ecore/src/lib/eina_magic.c, + tests/suite/ecore/src/lib/eina_main.c, + tests/suite/ecore/src/lib/eina_matrixsparse.c, + tests/suite/ecore/src/lib/eina_mempool.c, + tests/suite/ecore/src/lib/eina_module.c, + tests/suite/ecore/src/lib/eina_private.h, + tests/suite/ecore/src/lib/eina_quadtree.c, + tests/suite/ecore/src/lib/eina_rbtree.c, + tests/suite/ecore/src/lib/eina_rectangle.c, + tests/suite/ecore/src/lib/eina_safety_checks.c, + tests/suite/ecore/src/lib/eina_sched.c, + tests/suite/ecore/src/lib/eina_share_common.c, + tests/suite/ecore/src/lib/eina_share_common.h, + tests/suite/ecore/src/lib/eina_str.c, + tests/suite/ecore/src/lib/eina_strbuf.c, + tests/suite/ecore/src/lib/eina_strbuf_common.c, + tests/suite/ecore/src/lib/eina_strbuf_common.h, + tests/suite/ecore/src/lib/eina_strbuf_template_c.x, + tests/suite/ecore/src/lib/eina_stringshare.c, + tests/suite/ecore/src/lib/eina_tiler.c, + tests/suite/ecore/src/lib/eina_unicode.c, + tests/suite/ecore/src/lib/eina_ustrbuf.c, + tests/suite/ecore/src/lib/eina_ustringshare.c, + tests/suite/ecore/src/lib/eina_value.c, tests/suite/mini-eagain2.c, + tests/suite/params.dh, tests/suite/testsrn: Added tests/suite which + contains tests to be executed during development time and will not + be distributed (not included in make dist). Added "ecore" and a new + mini-eagain to test EAGAIN behavior. -2006-11-05 Simon Josefsson +2010-10-16 Nikos Mavrogiannopoulos - * libextra/openpgp/openpgp.h: (gnutls_openpgp_key_get_pk_algorithm): Fix prototype. + * .gitignore: updated .gitignore. -2006-11-03 Simon Josefsson +2010-10-16 Simon Josefsson - * lgl/printf-parse.c: Update. + * NEWS, src/common.c: gnutls-cli: Print channel binding only in + verbose mode. Before it printed it after the 'Compression:' output, thus breaking + Emacs starttls.el string searches. -2006-10-30 Simon Josefsson +2010-10-15 Simon Josefsson - * NEWS: Add. + * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, + libextra/configure.ac: Bump versions. -2006-10-30 Simon Josefsson +2010-10-15 Simon Josefsson - * libextra/openpgp/pgp.c: (gnutls_openpgp_key_get_fingerprint): Doc fix. Reported by - ludovic.courtes@laas.fr (Ludovic Courtès). + * ChangeLog: Generated. -2006-10-30 Simon Josefsson +2010-10-15 Simon Josefsson - * libextra/openpgp/pgp.c: (gnutls_openpgp_key_get_name): Make SIZEOF_BUF contain - actual/required buffer size on return. Suggested by - ludovic.courtes@laas.fr (Ludovic Courtès). + * NEWS: Version 2.11.4. -2006-10-30 Simon Josefsson +2010-10-15 Simon Josefsson - * NEWS, includes/gnutls/openpgp.h, libextra/openpgp/pgp.c, - libextra/openpgp/privkey.c: Fix return types. + * lib/libgnutls.map: Rename new symbol prefix after next stable + branch instead of development branch. -2006-10-30 Simon Josefsson +2010-10-15 Simon Josefsson * NEWS: Add. -2006-10-30 Simon Josefsson +2010-10-15 Simon Josefsson - * lib/gnutls_v2_compat.c: Have SSLv2 ClientHello's for unknown - versions negotiate the highest version we support, instead of the - lowest. Reported by Pasi.Eronen@nokia.com. + * NEWS, doc/cha-bib.texi, doc/cha-gtls-app.texi: Document channel + binding API. -2006-10-30 Simon Josefsson +2010-10-15 Simon Josefsson - * NEWS: Add. + * lib/gnutls_handshake.c, lib/gnutls_int.h, lib/gnutls_state.c, + src/common.c: Implement RFC 5929 tls-unique channel binding. + +2010-10-14 Simon Josefsson -2006-10-30 Simon Josefsson + * NEWS, doc/manpages/Makefile.am, lib/gnutls_errors.c, + lib/gnutls_state.c, lib/includes/gnutls/gnutls.h.in, + lib/libgnutls.map: Add gnutls_session_channel_binding API. - * configure.in: Simplify ssize_t test. +2010-10-14 Simon Josefsson -2006-10-30 Simon Josefsson + * doc/manpages/Makefile.am: Generated. - * doc/examples/ex-cert-select.c: Remove duplicate #include - . +2010-10-14 Simon Josefsson -2006-10-30 Simon Josefsson + * NEWS: Add. - * configure.in, lib/defines.h: Simplify #include's using gnulib - modules. +2010-10-14 Simon Josefsson -2006-10-30 Simon Josefsson + * tests/Makefile.am, tests/gendh.c: Add self test gendh to check DH + generation. - * gl/getaddrinfo.c, gl/getdelim.c, gl/getline.c, gl/gettext.h, - gl/m4/lib-link.m4, gl/readline.c, lgl/Makefile.am, lgl/arcfour.c, - lgl/arctwo.c, lgl/des.c, lgl/gc-gnulib.c, lgl/gc-libgcrypt.c, - lgl/gc-pbkdf2-sha1.c, lgl/gettext.h, lgl/hmac-md5.c, - lgl/hmac-sha1.c, lgl/m4/codeset.m4, lgl/m4/gettext.m4, - lgl/m4/gnulib-cache.m4, lgl/m4/gnulib-comp.m4, lgl/m4/intl.m4, - lgl/m4/intldir.m4, lgl/m4/intmax.m4, lgl/m4/inttypes-h.m4, - lgl/m4/inttypes-pri.m4, lgl/m4/lib-link.m4, lgl/m4/lock.m4, - lgl/m4/signed.m4, lgl/m4/sys_stat_h.m4, lgl/m4/unistd_h.m4, - lgl/m4/vasnprintf.m4, lgl/md2.c, lgl/md4.c, lgl/memxor.c, - lgl/read-file.c, lgl/rijndael-alg-fst.c, lgl/rijndael-api-fst.c, - lgl/stat_.h: Update. +2010-10-14 Simon Josefsson -2006-10-30 Simon Josefsson + * tests/openpgp-auth.c: Fix compiler warnings. - * lgl/m4/gnulib-comp.m4, lgl/m4/sys_stat_h.m4, lgl/stat_.h: Update. +2010-10-14 Simon Josefsson -2006-10-30 Simon Josefsson + * guile/tests/Makefile.am, guile/tests/anonymous-auth.scm, + guile/tests/dh-parameters.pem, guile/tests/openpgp-auth.scm, + guile/tests/pkcs-import-export.scm, + guile/tests/session-record-port.scm, guile/tests/x509-auth.scm: + Don't generate DH primes in Guile self checks (for speed). - * NEWS, configure.in: Bump versions. +2010-10-14 Simon Josefsson -2006-10-26 Simon Josefsson + * tests/userid/userid: Cleanup, fixing distcheck. - * ChangeLog: [no log message] +2010-10-14 Simon Josefsson -2006-10-26 Simon Josefsson + * tests/openpgp-auth.c: Make it work with srcdir != objdir. - * NEWS: Version 1.5.3. +2010-10-14 Simon Josefsson -2006-10-26 Simon Josefsson + * doc/reference/gnutls-docs.sgml: Improve GTK-DOC manual. - * lgl/.cvsignore: [no log message] +2010-10-14 Simon Josefsson -2006-10-26 Simon Josefsson + * NEWS: Add. - * libextra/opencdk/Makefile.am: Fix -I's. +2010-10-14 Simon Josefsson -2006-10-26 Simon Josefsson + * .x-sc_two_space_separator_in_usage, lib/cryptodev.c, + lib/m4/hooks.m4, lib/pakchois/pakchois11.h: Fix syntax-check + warning. - * tests/rsa-md5-collision/Makefile.am: Dist more. +2010-10-14 Simon Josefsson -2006-10-26 Simon Josefsson + * build-aux/gendocs.sh, build-aux/pmccabe2html, doc/fdl-1.3.texi, + gl/Makefile.am, gl/arpa_inet.in.h, gl/errno.in.h, gl/float.in.h, + gl/ftello.c, gl/getaddrinfo.c, gl/m4/errno_h.m4, gl/m4/error.m4, + gl/m4/float_h.m4, gl/m4/ftello.m4, gl/m4/getpagesize.m4, + gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, gl/m4/hostent.m4, + gl/m4/include_next.m4, gl/m4/intmax_t.m4, gl/m4/inttypes_h.m4, + gl/m4/lib-ld.m4, gl/m4/lib-link.m4, gl/m4/lseek.m4, + gl/m4/malloc.m4, gl/m4/memchr.m4, gl/m4/minmax.m4, gl/m4/printf.m4, + gl/m4/realloc.m4, gl/m4/servent.m4, gl/m4/size_max.m4, + gl/m4/socketlib.m4, gl/m4/sockets.m4, gl/m4/socklen.m4, + gl/m4/sockpfaf.m4, gl/m4/stdarg.m4, gl/m4/stdbool.m4, + gl/m4/stdint.m4, gl/m4/stdint_h.m4, gl/m4/stdlib_h.m4, + gl/m4/time_h.m4, gl/m4/wchar_t.m4, gl/m4/wint_t.m4, gl/malloc.c, + gl/netdb.in.h, gl/netinet_in.in.h, gl/read-file.c, gl/realloc.c, + gl/select.c, gl/stdarg.in.h, gl/stddef.in.h, gl/stdint.in.h, + gl/stdio.in.h, gl/stdlib.in.h, gl/strerror.c, gl/string.in.h, + gl/sys_select.in.h, gl/sys_socket.in.h, gl/sys_stat.in.h, + gl/sys_time.in.h, gl/tests/Makefile.am, gl/tests/binary-io.h, + gl/tests/getpagesize.c, gl/tests/init.sh, gl/tests/sys_ioctl.in.h, + gl/tests/test-binary-io.c, gl/tests/test-binary-io.sh, + gl/tests/test-ftello.c, gl/tests/test-ftello.sh, + gl/tests/test-ftello2.sh, gl/tests/test-ftello3.c, + gl/tests/test-getaddrinfo.c, gl/tests/test-memchr.c, + gl/tests/test-netdb.c, gl/tests/test-read-file.c, + gl/tests/test-stdbool.c, gl/tests/test-stddef.c, + gl/tests/test-stdlib.c, gl/tests/test-sys_socket.c, + gl/tests/test-sys_wait.h, gl/tests/test-update-copyright.sh, + gl/tests/test-vc-list-files-cvs.sh, + gl/tests/test-vc-list-files-git.sh, gl/tests/test-verify.c, + gl/time.in.h, gl/timespec.h, gl/unistd.in.h, gl/wchar.in.h, + lib/build-aux/config.rpath, lib/gl/Makefile.am, lib/gl/errno.in.h, + lib/gl/float.in.h, lib/gl/ftello.c, lib/gl/m4/codeset.m4, + lib/gl/m4/errno_h.m4, lib/gl/m4/fcntl-o.m4, lib/gl/m4/float_h.m4, + lib/gl/m4/ftello.m4, lib/gl/m4/getpagesize.m4, + lib/gl/m4/gettext.m4, lib/gl/m4/gnulib-cache.m4, + lib/gl/m4/gnulib-comp.m4, lib/gl/m4/iconv.m4, + lib/gl/m4/include_next.m4, lib/gl/m4/intdiv0.m4, lib/gl/m4/intl.m4, + lib/gl/m4/intlmacosx.m4, lib/gl/m4/intmax.m4, + lib/gl/m4/intmax_t.m4, lib/gl/m4/inttypes-pri.m4, + lib/gl/m4/inttypes_h.m4, lib/gl/m4/lcmessage.m4, + lib/gl/m4/ld-version-script.m4, lib/gl/m4/lib-ld.m4, + lib/gl/m4/lib-link.m4, lib/gl/m4/lock.m4, lib/gl/m4/lseek.m4, + lib/gl/m4/malloc.m4, lib/gl/m4/memchr.m4, lib/gl/m4/memmem.m4, + lib/gl/m4/minmax.m4, lib/gl/m4/printf-posix.m4, + lib/gl/m4/printf.m4, lib/gl/m4/progtest.m4, lib/gl/m4/realloc.m4, + lib/gl/m4/size_max.m4, lib/gl/m4/socketlib.m4, + lib/gl/m4/sockets.m4, lib/gl/m4/socklen.m4, lib/gl/m4/sockpfaf.m4, + lib/gl/m4/stdbool.m4, lib/gl/m4/stdint.m4, lib/gl/m4/stdint_h.m4, + lib/gl/m4/stdlib_h.m4, lib/gl/m4/threadlib.m4, lib/gl/m4/time_h.m4, + lib/gl/m4/visibility.m4, lib/gl/m4/wchar_t.m4, lib/gl/m4/wint_t.m4, + lib/gl/malloc.c, lib/gl/netdb.in.h, lib/gl/read-file.c, + lib/gl/realloc.c, lib/gl/stddef.in.h, lib/gl/stdint.in.h, + lib/gl/stdio.in.h, lib/gl/stdlib.in.h, lib/gl/str-two-way.h, + lib/gl/string.in.h, lib/gl/strings.in.h, lib/gl/sys_socket.in.h, + lib/gl/sys_stat.in.h, lib/gl/tests/Makefile.am, + lib/gl/tests/binary-io.h, lib/gl/tests/getpagesize.c, + lib/gl/tests/init.sh, lib/gl/tests/test-binary-io.c, + lib/gl/tests/test-binary-io.sh, lib/gl/tests/test-ftello.c, + lib/gl/tests/test-ftello.sh, lib/gl/tests/test-ftello2.sh, + lib/gl/tests/test-ftello3.c, lib/gl/tests/test-memchr.c, + lib/gl/tests/test-netdb.c, lib/gl/tests/test-read-file.c, + lib/gl/tests/test-stdbool.c, lib/gl/tests/test-stddef.c, + lib/gl/tests/test-stdlib.c, lib/gl/tests/test-sys_socket.c, + lib/gl/tests/test-sys_wait.h, lib/gl/tests/test-verify.c, + lib/gl/time.in.h, lib/gl/unistd.in.h, lib/gl/wchar.in.h, + libextra/gl/gnulib.mk, libextra/gl/m4/gnulib-cache.m4, + libextra/gl/m4/gnulib-comp.m4, libextra/gl/m4/ld-version-script.m4, + libextra/gl/m4/lib-ld.m4, libextra/gl/m4/lib-link.m4, maint.mk: + Update gnulib files. - * NEWS, tests/rsa-md5-collision/README: Add. +2010-10-14 Simon Josefsson -2006-10-26 Simon Josefsson + * cfg.mk: Don't assume chmod +x on gendocs.sh. - * lib/Makefile.am, libextra/Makefile.am, src/Makefile.am, - tests/Makefile.am: Change lgpl/ library name. +2010-10-14 Simon Josefsson -2006-10-26 Simon Josefsson + * cfg.mk: Use gnulib --add-import. - * lgl/Makefile.am, lgl/m4/gnulib-cache.m4: Change lgpl/ library name - to liblgnu, to avoid weird libtool errors. +2010-10-14 Simon Josefsson -2006-10-26 Simon Josefsson + * .gitignore: Sort and update. - * lgl/Makefile.am, lgl/stdint_.h: Update. +2010-10-14 Simon Josefsson -2006-10-26 Simon Josefsson + * lib/po/nl.po.in: Sync with TP. - * gl/Makefile.am, gl/getaddrinfo.c, gl/imaxtostr.c, gl/intprops.h, - gl/inttostr.c, gl/inttostr.h, gl/m4/absolute-header.m4, - gl/m4/gnulib-comp.m4, gl/m4/inttostr.m4, gl/m4/longlong.m4, - gl/m4/stdint.m4, gl/m4/ulonglong.m4, gl/offtostr.c, gl/stdint_.h, - gl/uinttostr.c, gl/umaxtostr.c: Add. +2010-10-14 Simon Josefsson -2006-10-26 Simon Josefsson + * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, + libextra/configure.ac: Bump versions. - * NEWS: Fix. +2010-10-14 Simon Josefsson -2006-10-26 Simon Josefsson + * ChangeLog: Generated. - * libextra/opencdk/encrypt.c, libextra/opencdk/opencdk.h: Update to - 0.5.11. +2010-10-14 Simon Josefsson -2006-10-26 Simon Josefsson + * NEWS: Version 2.11.3. - * doc/gnutls.texi: Be specific about SSLv2 security problems. +2010-10-14 Simon Josefsson -2006-10-24 Simon Josefsson + * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, + libextra/configure.ac: Bump versions. - * tests/rsa-md5-collision/rsa-md5-collision: Fix distcheck. +2010-10-14 Simon Josefsson -2006-10-24 Simon Josefsson + * doc/errcodes.c, doc/examples/ex-alert.c, + doc/examples/ex-cert-select-pkcs11.c, + doc/examples/ex-cert-select.c, doc/examples/ex-client-psk.c, + doc/examples/ex-client-resume.c, doc/examples/ex-client-srp.c, + doc/examples/ex-client-tlsia.c, doc/examples/ex-client1.c, + doc/examples/ex-client2.c, doc/examples/ex-crq.c, + doc/examples/ex-pkcs12.c, doc/examples/ex-rfc2818.c, + doc/examples/ex-serv-anon.c, doc/examples/ex-serv-pgp.c, + doc/examples/ex-serv-psk.c, doc/examples/ex-serv-srp.c, + doc/examples/ex-serv1.c, doc/examples/ex-session-info.c, + doc/examples/ex-verify.c, doc/examples/ex-x509-info.c, + doc/examples/examples.h, doc/examples/tcp.c, guile/src/core.c, + guile/src/errors.c, guile/src/extra.c, guile/src/utils.c, + guile/src/utils.h, lib/auth_cert.c, lib/auth_cert.h, + lib/auth_dh_common.c, lib/auth_dh_common.h, lib/auth_psk.h, + lib/auth_rsa.c, lib/auth_rsa_export.c, lib/auth_srp.c, + lib/auth_srp.h, lib/crypto-api.c, lib/crypto.h, lib/cryptodev.c, + lib/debug.c, lib/debug.h, lib/ext_cert_type.c, + lib/ext_max_record.c, lib/ext_safe_renegotiation.c, + lib/ext_safe_renegotiation.h, lib/ext_server_name.c, + lib/ext_server_name.h, lib/ext_session_ticket.c, + lib/ext_session_ticket.h, lib/ext_signature.c, lib/ext_signature.h, + lib/ext_srp.c, lib/ext_srp.h, lib/gcrypt/init.c, lib/gcrypt/mpi.c, + lib/gcrypt/pk.c, lib/gnutls_alert.c, lib/gnutls_algorithms.c, + lib/gnutls_algorithms.h, lib/gnutls_auth.h, lib/gnutls_buffers.c, + lib/gnutls_buffers.h, lib/gnutls_cert.c, lib/gnutls_cert.h, + lib/gnutls_cipher.c, lib/gnutls_cipher.h, lib/gnutls_cipher_int.c, + lib/gnutls_cipher_int.h, lib/gnutls_compress.c, + lib/gnutls_compress.h, lib/gnutls_constate.c, + lib/gnutls_constate.h, lib/gnutls_datum.h, lib/gnutls_dh.h, + lib/gnutls_errors.c, lib/gnutls_errors.h, lib/gnutls_extensions.c, + lib/gnutls_extensions.h, lib/gnutls_global.c, lib/gnutls_global.h, + lib/gnutls_handshake.c, lib/gnutls_handshake.h, + lib/gnutls_hash_int.c, lib/gnutls_hash_int.h, lib/gnutls_int.h, + lib/gnutls_kx.c, lib/gnutls_mbuffers.c, lib/gnutls_mbuffers.h, + lib/gnutls_mem.h, lib/gnutls_mpi.h, lib/gnutls_num.h, + lib/gnutls_pk.c, lib/gnutls_pk.h, lib/gnutls_priority.c, + lib/gnutls_privkey.c, lib/gnutls_pubkey.c, lib/gnutls_record.c, + lib/gnutls_record.h, lib/gnutls_session_pack.c, lib/gnutls_sig.c, + lib/gnutls_sig.h, lib/gnutls_srp.c, lib/gnutls_state.c, + lib/gnutls_state.h, lib/gnutls_str.c, lib/gnutls_str.h, + lib/gnutls_supplemental.c, lib/gnutls_supplemental.h, + lib/gnutls_x509.c, lib/includes/gnutls/abstract.h, + lib/includes/gnutls/compat.h, lib/includes/gnutls/crypto.h, + lib/includes/gnutls/gnutls.h.in, lib/includes/gnutls/gnutlsxx.h, + lib/includes/gnutls/openpgp.h, lib/includes/gnutls/pkcs11.h, + lib/includes/gnutls/pkcs12.h, lib/includes/gnutls/x509.h, + lib/locks.c, lib/locks.h, lib/nettle/cipher.c, lib/nettle/egd.c, + lib/nettle/egd.h, lib/nettle/init.c, lib/nettle/mac.c, + lib/nettle/mpi.c, lib/nettle/pk.c, lib/nettle/rnd.c, + lib/opencdk/armor.c, lib/opencdk/hash.c, lib/opencdk/kbnode.c, + lib/opencdk/keydb.c, lib/opencdk/literal.c, lib/opencdk/main.c, + lib/opencdk/misc.c, lib/opencdk/new-packet.c, lib/opencdk/pubkey.c, + lib/opencdk/read-packet.c, lib/opencdk/seskey.c, + lib/opencdk/sig-check.c, lib/opencdk/stream.c, lib/opencdk/types.h, + lib/opencdk/verify.c, lib/openpgp/gnutls_openpgp.c, + lib/openpgp/openpgp_int.h, lib/openpgp/output.c, lib/openpgp/pgp.c, + lib/openpgp/privkey.c, lib/pakchois/dlopen.c, + lib/pakchois/dlopen.h, lib/pakchois/errors.c, + lib/pakchois/pakchois.c, lib/pakchois/pakchois.h, + lib/pakchois/pakchois11.h, lib/pkcs11.c, lib/pkcs11_int.h, + lib/pkcs11_privkey.c, lib/pkcs11_write.c, lib/random.c, + lib/random.h, lib/system.c, lib/system.h, lib/x509/common.c, + lib/x509/common.h, lib/x509/crl_write.c, lib/x509/crq.c, + lib/x509/dn.c, lib/x509/mpi.c, lib/x509/output.c, + lib/x509/privkey.c, lib/x509/sign.c, lib/x509/sign.h, + lib/x509/verify.c, lib/x509/x509.c, lib/x509/x509_int.h, + lib/x509/x509_write.c, lib/x509_b64.c, + libextra/ext_inner_application.c, libextra/ext_inner_application.h, + libextra/gnutls_extra.c, libextra/gnutls_ia.c, + libextra/includes/gnutls/extra.h, libextra/openssl_compat.h, + src/benchmark.c, src/certtool-cfg.h, src/certtool-common.h, + src/certtool.c, src/cli.c, src/common.c, src/common.h, src/crypt.c, + src/pkcs11.c, src/prime.c, src/psk.c, src/serv.c, src/tests.c, + tests/anonself.c, tests/certder.c, + tests/certificate_set_x509_crl.c, tests/certuniqueid.c, + tests/chainverify.c, tests/crq_apis.c, tests/crq_key_id.c, + tests/crypto_rng.c, tests/cve-2008-4989.c, tests/cve-2009-1415.c, + tests/cve-2009-1416.c, tests/dhepskself.c, tests/dn.c, tests/dn2.c, + tests/finished.c, tests/gc.c, tests/hostname-check.c, + tests/init_roundtrip.c, tests/mini-eagain.c, + tests/mini-x509-rehandshake.c, tests/mini-x509.c, tests/mini.c, + tests/moredn.c, tests/mpi.c, tests/netconf-psk.c, + tests/nul-in-x509-names.c, tests/openpgp-auth.c, + tests/openpgp-keyring.c, tests/openpgpself.c, tests/openssl.c, + tests/parse_ca.c, tests/pgps2kgnu.c, tests/pkcs12_encode.c, + tests/pkcs12_s2k.c, tests/pkcs12_s2k_pem.c, tests/pskself.c, + tests/resume.c, tests/safe-renegotiation/srn0.c, + tests/safe-renegotiation/srn1.c, tests/safe-renegotiation/srn2.c, + tests/safe-renegotiation/srn3.c, tests/safe-renegotiation/srn4.c, + tests/safe-renegotiation/srn5.c, tests/set_pkcs12_cred.c, + tests/setcredcrash.c, tests/simple.c, tests/tlsia.c, tests/utils.c, + tests/utils.h, tests/x509_altname.c, tests/x509dn.c, + tests/x509self.c, tests/x509sign-verify.c: Indent (using GNU indent + 2.2.11). - * tests/rsa-md5-collision/Makefile.am: Dist more. +2010-10-08 Nikos Mavrogiannopoulos -2006-10-24 Simon Josefsson + * NEWS, configure.ac, lib/m4/hooks.m4: bumped version - * NEWS: Add. +2010-10-08 Nikos Mavrogiannopoulos -2006-10-24 Simon Josefsson + * src/certtool.c: Revert "Applied last patch of Micah Anderson on + IKE status." This reverts commit a6b2f5ce7316b4774649ee9b421da2ee7fef461f. - * tests/pkcs12-decode/.cvsignore: [no log message] +2010-10-08 Nikos Mavrogiannopoulos -2006-10-24 Simon Josefsson + * libextra/fipsmd5.c: removed unneeded code. - * configure.in: Add tests. +2010-10-08 Nikos Mavrogiannopoulos -2006-10-24 Simon Josefsson + * src/certtool.c: Applied last patch of Micah Anderson on IKE + status. - * tests/Makefile.am, tests/pkcs12-decode/Makefile.am, - tests/pkcs12-decode/pkcs12, tests/pkcs12_neon: Move pkcs12 tests to - pkcs12-decode/. +2010-10-02 Nikos Mavrogiannopoulos -2006-10-24 Simon Josefsson + * src/certtool.c: Applied patch on IKE extension by Micah Anderson - * tests/pkcs8-decode/pkcs8: More debugging info. +2010-10-02 Nikos Mavrogiannopoulos -2006-10-24 Simon Josefsson + * lib/cryptodev.c, lib/gcrypt/mac.c, lib/gnutls_hash_int.c, + lib/includes/gnutls/crypto.h, lib/nettle/mac.c: Updated cryptodev + code to support the linux cryptodev extensions. Removed the clone() + capability from HMAC. It was never used and having it prevents using + it with hardware accelerators that might not have this capability. - * tests/pkcs8-decode/.cvsignore: [no log message] +2010-09-29 Nikos Mavrogiannopoulos -2006-10-24 Simon Josefsson + * THANKS: Added Micah - * tests/Makefile.am, tests/enc2pkcs8.pem, tests/encpkcs8.pem, - tests/pkcs8, tests/pkcs8-decode/Makefile.am, - tests/pkcs8-decode/enc2pkcs8.pem, tests/pkcs8-decode/encpkcs8.pem, - tests/pkcs8-decode/pkcs8, tests/pkcs8-decode/unencpkcs8.pem, - tests/unencpkcs8.pem: Move pkcs8 tests to pkcs8-decode/. +2010-10-01 Simon Josefsson -2006-10-24 Simon Josefsson + * doc/cha-cert-auth.texi, doc/cha-internals.texi, + doc/cha-library.texi, lib/ext_safe_renegotiation.c, + lib/ext_server_name.c, lib/gcrypt/init.c, lib/gnutls_record.c, + lib/gnutls_str.c, lib/locks.c, lib/nettle/egd.c, lib/nettle/init.c, + lib/system.c, lib/system.h, libextra/ext_inner_application.c, + src/certtool-common.h, src/common.c, src/pkcs11.c: Fix some + syntax-check errors. - * tests/Makefile.am: Move pkcs1-pad stuff to pkcs1-padding/. Add - rsa-md5-collision/. +2010-10-01 Simon Josefsson -2006-10-24 Simon Josefsson + * lib/gnutls_int.h, lib/includes/gnutls/gnutls.h.in, + lib/includes/gnutls/pkcs11.h: Fix compiler warnings. - * tests/pkcs1-padding/.cvsignore, - tests/rsa-md5-collision/.cvsignore: [no log message] +2010-10-01 Simon Josefsson -2006-10-24 Simon Josefsson + * NEWS, doc/manpages/Makefile.am: Mention new APIs. - * tests/rsa-md5-collision/Makefile.am, - tests/rsa-md5-collision/chain1-expect.log, - tests/rsa-md5-collision/chain2-expect.log, - tests/rsa-md5-collision/mbox, - tests/rsa-md5-collision/rsa-md5-collision: Add. +2010-09-30 Simon Josefsson -2006-10-24 Simon Josefsson + * tests/openpgp-certs/testselfsigs: Avoid bashism. Reported by m.drochner@fz-juelich.de in + . - * tests/pkcs1-padding/Makefile.am, tests/pkcs1-padding/pkcs1-pad, - tests/pkcs1-padding/pkcs1-pad-broken.pem, - tests/pkcs1-padding/pkcs1-pad-broken2.pem, - tests/pkcs1-padding/pkcs1-pad-broken3.pem, - tests/pkcs1-padding/pkcs1-pad-ok.pem, - tests/pkcs1-padding/pkcs1-pad-ok2.pem: Moved from ../. +2010-09-30 Simon Josefsson -2006-10-24 Simon Josefsson + * lib/crypto-api.c: Don't return from void functions. Reported by Dagobert Michelsen in - * tests/pkcs1-pad, tests/pkcs1-pad-broken.pem, - tests/pkcs1-pad-broken2.pem, tests/pkcs1-pad-broken3.pem, - tests/pkcs1-pad-ok.pem, tests/pkcs1-pad-ok2.pem: Move to separate - directory. + . -2006-10-24 Simon Josefsson +2010-09-30 Simon Josefsson - * doc/protocol/draft-ietf-tls-psk-null-03.txt, - doc/protocol/draft-ietf-tls-rfc4346-bis-02.txt: Add. + * lib/includes/gnutls/gnutls.h.in: Remove spurious comma. -2006-10-21 Simon Josefsson +2010-09-30 Simon Josefsson - * NEWS: Add. + * lib/includes/gnutls/x509.h: Remove spurious comma. -2006-10-21 Simon Josefsson +2010-09-30 Simon Josefsson - * lgl/.cvsignore: [no log message] + * tests/pkcs8-decode/Makefile.am, tests/pkcs8-decode/pkcs8: Make + pkcs8-decode test work on Windows. -2006-10-21 Simon Josefsson +2010-09-29 Nikos Mavrogiannopoulos - * tests/Makefile.am: Need lgpl gnulib. + * NEWS: updated -2006-10-21 Simon Josefsson +2010-09-29 Nikos Mavrogiannopoulos - * src/Makefile.am: Add lgpl too. + * lib/ext_session_ticket.c: treat absence of parameters the same as + having them disabled. -2006-10-21 Simon Josefsson +2010-09-29 Nikos Mavrogiannopoulos - * libextra/Makefile.am: Reorder libgnu.la's. + * tests/resume.c: Corrected behavior on failure (don't crash). -2006-10-21 Simon Josefsson +2010-09-29 Nikos Mavrogiannopoulos - * libextra/opencdk/Makefile.am: Need lgpl/ gnulib in CFLAGS. + * lib/ext_session_ticket.c, lib/gnutls_extensions.c: Corrected bugs + when restoring extensions during session resumtion. -2006-10-21 Simon Josefsson +2010-09-29 Nikos Mavrogiannopoulos - * lgl/alloca.h, lgl/stdint.h: Remove files that shouldn't have been - committed. + * lib/gnutls_extensions.c: Use more informative logging for + extensions. -2006-10-21 Simon Josefsson +2010-09-29 Micah Anderson - * gl/Makefile.am, gl/m4/gnulib-cache.m4: Fix avoid modules. + * NEWS, doc/certtool.cfg, doc/cha-programs.texi, + lib/includes/gnutls/x509.h, lib/x509/output.c, src/certtool-cfg.c, + src/certtool-cfg.h, src/certtool.c: Add new extended key usage + ipsecIKE According to RFC 4945 § 5.1.3.12 section title + "ExtendedKeyUsage"[0] the following extended key usage has been + added: ... this document defines an ExtendedKeyUsage keyPurposeID that MAY + be used to limit a certificate's use: id-kp-ipsecIKE OBJECT IDENTIFIER ::= { id-kp 17 } where id-kp is defined in RFC 3280 [5]. If a certificate is + intended to be used with both IKE and other applications, and one + of the other applications requires use of an EKU value, then such + certificates MUST contain either the keyPurposeID id-kp-ipsecIKE or anyExtendedKeyUsage [5], as well as the keyPurposeID values associated with the other applications. Similarly, if a CA + issues multiple otherwise-similar certificates for multiple + applications including IKE, and it is intended that the IKE + certificate NOT be used with another application, the IKE + certificate MAY contain an EKU extension listing a keyPurposeID of + id-kp-ipsecIKE to discourage its use with the other application. + Recall, however, that EKU extensions in certificates meant for use + in IKE are NOT RECOMMENDED. Conforming IKE implementations are not required to support EKU. + If a critical EKU extension appears in a certificate and EKU is + not supported by the implementation, then RFC 3280 requires that the certificate be rejected. Implementations that do support EKU + MUST support the following logic for certificate validation: o If no EKU extension, continue. o If EKU present AND contains either id-kp-ipsecIKE or anyExtendedKeyUsage, continue. o Otherwise, reject cert. Signed-off-by: Nikos Mavrogiannopoulos -2006-10-21 Simon Josefsson +2010-09-27 Nikos Mavrogiannopoulos - * gl/Makefile.am, gl/alloca_.h, gl/asnprintf.c, gl/m4/alloca.m4, - gl/m4/eoverflow.m4, gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, - gl/m4/intmax_t.m4, gl/m4/inttypes_h.m4, gl/m4/longdouble.m4, - gl/m4/longlong.m4, gl/m4/signed.m4, gl/m4/size_max.m4, - gl/m4/snprintf.m4, gl/m4/stdint_h.m4, gl/m4/vasnprintf.m4, - gl/m4/wchar_t.m4, gl/m4/wint_t.m4, gl/m4/xsize.m4, - gl/printf-args.c, gl/printf-args.h, gl/printf-parse.c, - gl/printf-parse.h, gl/size_max.h, gl/snprintf.c, gl/snprintf.h, - gl/vasnprintf.c, gl/vasnprintf.h, gl/xsize.h: Avoid duplicate - modules. + * NEWS, src/certtool-gaa.c, src/certtool.gaa: --pkcs11-* in certtool + was renamed to --p11-*. -2006-10-21 Simon Josefsson +2010-09-25 Nikos Mavrogiannopoulos - * gl/Makefile.am, gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4: Avoid - duplicate modules. + * lib/ext_session_ticket.c: Added some comments and removed unused + code. -2006-10-21 Simon Josefsson +2010-09-25 Nikos Mavrogiannopoulos - * libextra/Makefile.am: Need gnulib lgl/ in CFLAGS and LIBADD. + * NEWS, lib/ext_session_ticket.c: Corrected advertizing issue for + session tickets. -2006-10-21 Simon Josefsson +2010-09-24 Nikos Mavrogiannopoulos - * libextra/openpgp/Makefile.am: Need gnulib lgl/ in CFLAGS. - -2006-10-21 Simon Josefsson - - * gl/Makefile.am: Move modules from gl/ to lgl/. - -2006-10-21 Simon Josefsson - - * gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, lgl/Makefile.am, - lgl/m4/gnulib-cache.m4, lgl/m4/gnulib-comp.m4: Move modules from gl/ - to lgl/. - -2006-10-21 Simon Josefsson - - * gl/Makefile.am, gl/m4/absolute-header.m4, gl/m4/codeset.m4, - gl/m4/gettext.m4, gl/m4/glibc2.m4, gl/m4/glibc21.m4, - gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, gl/m4/iconv.m4, - gl/m4/intdiv0.m4, gl/m4/intmax.m4, gl/m4/inttypes-h.m4, - gl/m4/inttypes-pri.m4, gl/m4/lcmessage.m4, gl/m4/lock.m4, - gl/m4/memmove.m4, gl/m4/minmax.m4, gl/m4/nls.m4, gl/m4/po.m4, - gl/m4/printf-posix.m4, gl/m4/progtest.m4, gl/m4/read-file.m4, - gl/m4/stdint.m4, gl/m4/uintmax_t.m4, gl/m4/ulonglong.m4, - gl/m4/visibility.m4, gl/memmove.c, gl/minmax.h, gl/read-file.c, - gl/read-file.h, gl/stdint_.h, lgl/Makefile.am, lgl/alloca.h, - lgl/alloca_.h, lgl/asnprintf.c, lgl/gettext.h, lgl/m4/alloca.m4, - lgl/m4/codeset.m4, lgl/m4/eoverflow.m4, lgl/m4/gettext.m4, - lgl/m4/glibc2.m4, lgl/m4/glibc21.m4, lgl/m4/gnulib-cache.m4, - lgl/m4/gnulib-comp.m4, lgl/m4/iconv.m4, lgl/m4/intdiv0.m4, - lgl/m4/intmax.m4, lgl/m4/intmax_t.m4, lgl/m4/inttypes-h.m4, - lgl/m4/inttypes-pri.m4, lgl/m4/inttypes_h.m4, lgl/m4/lcmessage.m4, - lgl/m4/lock.m4, lgl/m4/longdouble.m4, lgl/m4/memmove.m4, - lgl/m4/nls.m4, lgl/m4/po.m4, lgl/m4/printf-posix.m4, - lgl/m4/progtest.m4, lgl/m4/read-file.m4, lgl/m4/signed.m4, - lgl/m4/size_max.m4, lgl/m4/snprintf.m4, lgl/m4/socklen.m4, - lgl/m4/sockpfaf.m4, lgl/m4/stdint_h.m4, lgl/m4/sys_socket_h.m4, - lgl/m4/uintmax_t.m4, lgl/m4/vasnprintf.m4, lgl/m4/visibility.m4, - lgl/m4/wchar_t.m4, lgl/m4/wint_t.m4, lgl/m4/xsize.m4, - lgl/memmove.c, lgl/printf-args.c, lgl/printf-args.h, - lgl/printf-parse.c, lgl/printf-parse.h, lgl/read-file.c, - lgl/read-file.h, lgl/size_max.h, lgl/snprintf.c, lgl/snprintf.h, - lgl/socket_.h, lgl/stdint.h, lgl/vasnprintf.c, lgl/vasnprintf.h, - lgl/xsize.h: Move modules from gl/ to lgl/. - -2006-10-21 Simon Josefsson - - * lgl/.cvsignore: [no log message] - -2006-10-21 Simon Josefsson - - * Makefile.am: Build lgl/ too. - -2006-10-21 Simon Josefsson - - * gl/Makefile.am, gl/arcfour.c, gl/arcfour.h, gl/arctwo.c, - gl/arctwo.h, gl/des.c, gl/des.h, gl/gc-gnulib.c, gl/gc-libgcrypt.c, - gl/gc-pbkdf2-sha1.c, gl/gc.h, gl/hmac-md5.c, gl/hmac-sha1.c, - gl/hmac.h, gl/m4/arcfour.m4, gl/m4/arctwo.m4, gl/m4/des.m4, - gl/m4/gc-arcfour.m4, gl/m4/gc-arctwo.m4, gl/m4/gc-des.m4, - gl/m4/gc-hmac-md5.m4, gl/m4/gc-hmac-sha1.m4, gl/m4/gc-md2.m4, - gl/m4/gc-md4.m4, gl/m4/gc-md5.m4, gl/m4/gc-pbkdf2-sha1.m4, - gl/m4/gc-random.m4, gl/m4/gc-rijndael.m4, gl/m4/gc-sha1.m4, - gl/m4/gc.m4, gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, - gl/m4/hmac-md5.m4, gl/m4/hmac-sha1.m4, gl/m4/md2.m4, gl/m4/md4.m4, - gl/m4/md5.m4, gl/m4/memxor.m4, gl/m4/rijndael.m4, gl/m4/sha1.m4, - gl/md2.c, gl/md2.h, gl/md4.c, gl/md4.h, gl/md5.c, gl/md5.h, - gl/memxor.c, gl/memxor.h, gl/rijndael-alg-fst.c, - gl/rijndael-alg-fst.h, gl/rijndael-api-fst.c, - gl/rijndael-api-fst.h, gl/sha1.c, gl/sha1.h, lgl/Makefile.am, - lgl/arcfour.c, lgl/arcfour.h, lgl/arctwo.c, lgl/arctwo.h, - lgl/des.c, lgl/des.h, lgl/gc-gnulib.c, lgl/gc-libgcrypt.c, - lgl/gc-pbkdf2-sha1.c, lgl/gc.h, lgl/hmac-md5.c, lgl/hmac-sha1.c, - lgl/hmac.h, lgl/m4/absolute-header.m4, lgl/m4/arcfour.m4, - lgl/m4/arctwo.m4, lgl/m4/des.m4, lgl/m4/gc-arcfour.m4, - lgl/m4/gc-arctwo.m4, lgl/m4/gc-des.m4, lgl/m4/gc-hmac-md5.m4, - lgl/m4/gc-hmac-sha1.m4, lgl/m4/gc-md2.m4, lgl/m4/gc-md4.m4, - lgl/m4/gc-md5.m4, lgl/m4/gc-pbkdf2-sha1.m4, lgl/m4/gc-random.m4, - lgl/m4/gc-rijndael.m4, lgl/m4/gc-sha1.m4, lgl/m4/gc.m4, - lgl/m4/gnulib-cache.m4, lgl/m4/gnulib-comp.m4, lgl/m4/hmac-md5.m4, - lgl/m4/hmac-sha1.m4, lgl/m4/lib-ld.m4, lgl/m4/lib-link.m4, - lgl/m4/lib-prefix.m4, lgl/m4/longlong.m4, lgl/m4/md2.m4, - lgl/m4/md4.m4, lgl/m4/md5.m4, lgl/m4/memxor.m4, lgl/m4/minmax.m4, - lgl/m4/rijndael.m4, lgl/m4/sha1.m4, lgl/m4/stdint.m4, - lgl/m4/ulonglong.m4, lgl/md2.c, lgl/md2.h, lgl/md4.c, lgl/md4.h, - lgl/md5.c, lgl/md5.h, lgl/memxor.c, lgl/memxor.h, lgl/minmax.h, - lgl/rijndael-alg-fst.c, lgl/rijndael-alg-fst.h, - lgl/rijndael-api-fst.c, lgl/rijndael-api-fst.h, lgl/sha1.c, - lgl/sha1.h, lgl/stdint_.h: Move modules from gl/ to lgl/. - -2006-10-21 Simon Josefsson - - * lib/minitasn1/Makefile.am, lib/x509/Makefile.am: Use gnulib in - lgl/ instead of gl/. - -2006-10-21 Simon Josefsson - - * configure.in, gl/Makefile.am, gl/alloca_.h, gl/arcfour.c, - gl/arcfour.h, gl/arctwo.c, gl/arctwo.h, gl/asnprintf.c, gl/des.c, - gl/des.h, gl/dummy.c, gl/gai_strerror.c, gl/gc-gnulib.c, - gl/gc-libgcrypt.c, gl/gc-pbkdf2-sha1.c, gl/gc.h, gl/getaddrinfo.c, - gl/getaddrinfo.h, gl/getdelim.c, gl/getdelim.h, gl/getline.c, - gl/getline.h, gl/getpass.c, gl/getpass.h, gl/gettext.h, - gl/hmac-md5.c, gl/hmac-sha1.c, gl/hmac.h, gl/inet_ntop.c, - gl/inet_ntop.h, gl/inet_pton.c, gl/inet_pton.h, - gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, gl/m4/memmem.m4, - gl/md2.c, gl/md2.h, gl/md4.c, gl/md4.h, gl/md5.c, gl/md5.h, - gl/memmem.c, gl/memmem.h, gl/memxor.c, gl/memxor.h, gl/minmax.h, - gl/printf-args.c, gl/printf-args.h, gl/printf-parse.c, - gl/printf-parse.h, gl/read-file.c, gl/read-file.h, gl/readline.c, - gl/readline.h, gl/rijndael-alg-fst.c, gl/rijndael-alg-fst.h, - gl/rijndael-api-fst.c, gl/rijndael-api-fst.h, gl/sha1.c, gl/sha1.h, - gl/size_max.h, gl/snprintf.c, gl/snprintf.h, gl/socket_.h, - gl/stdbool_.h, gl/stdint_.h, gl/strdup.c, gl/strdup.h, - gl/vasnprintf.c, gl/vasnprintf.h, gl/xsize.h, lgl/Makefile.am, - lgl/dummy.c, lgl/m4/gnulib-cache.m4, lgl/m4/gnulib-comp.m4, - lgl/m4/gnulib-tool.m4, lgl/m4/memmem.m4, lgl/memmem.c, - lgl/memmem.h, lib/Makefile.am: Add lgl/ for LGPLed gnulib modules - (for lib/) and use gl/ for GPL gnulib modules, for use in src/ etc. - -2006-10-21 Simon Josefsson - - * gl/Makefile.am, gl/gettext.h, gl/m4/alloca.m4, - gl/m4/gnulib-comp.m4, gl/m4/lock.m4, gl/m4/longlong.m4, - gl/m4/size_max.m4, gl/m4/stdint.m4, gl/m4/ulonglong.m4, - gl/m4/vasnprintf.m4, gl/printf-args.c, gl/printf-args.h, - gl/printf-parse.c, gl/stdint_.h, gl/strdup.c, gl/vasnprintf.c: - Update. - -2006-10-19 Simon Josefsson + * doc/TODO: cleanup of TODO list. Removed very old entries, entries + already fixed and added new ones. - * NEWS: Add. +2010-09-24 Nikos Mavrogiannopoulos -2006-10-19 Simon Josefsson + * lib/gnutls_handshake.c: IMED_RET parameters are easier to grasp. - * lib/minitasn1/coding.c, lib/minitasn1/decoding.c, - lib/minitasn1/libtasn1.h: Update to 0.3.7. +2010-09-24 Nikos Mavrogiannopoulos -2006-10-11 Simon Josefsson + * lib/crypto.c, lib/gcrypt/cipher.c, lib/gcrypt/mac.c, + lib/nettle/cipher.c, lib/nettle/mac.c: cipher,mac and digest + priorities moved to crypto.c - * NEWS: Add. +2010-09-23 Nikos Mavrogiannopoulos -2006-10-11 Simon Josefsson + * lib/gnutls_errors.c: changed the fatality level of some errors. - * libextra/opencdk/keylist.c, libextra/opencdk/opencdk.h: Bump to - 0.5.10. +2010-09-23 Nikos Mavrogiannopoulos -2006-10-11 Simon Josefsson + * lib/gnutls_handshake.c: No longer use is_fatal() during handshake. + Explicitely treat EAGAIN and INTERRUPTED as non-fatal during + handshake. If the check_fatal flag is set then + GNUTLS_E_WARNING_ALERT_RECEIVED could interrupt a handshake as well. - * doc/protocol/rfc4680.txt, doc/protocol/rfc4681.txt: Add. +2010-09-23 Nikos Mavrogiannopoulos -2006-10-10 Simon Josefsson + * src/cli.c: fflush stdout and stderr before the call to setbuf. + This fixes issue in solaris where lines dissappeared from output. + Reported and suggested fix by Knut Anders Hatlen. - * doc/protocol/draft-ietf-tls-psk-null-02.txt: Add. +2010-09-20 Nikos Mavrogiannopoulos -2006-10-03 Simon Josefsson + * NEWS: documented change - * NEWS: Add. +2010-09-19 Nikos Mavrogiannopoulos -2006-10-03 Simon Josefsson + * lib/nettle/pk.c: Corrected bug in wrap_nettle_pk_fixup that was + importing DSA keys are RSA ones. - * lib/Makefile.am, libextra/Makefile.am: Fix .def filename. +2010-09-19 Nikos Mavrogiannopoulos -2006-10-03 Simon Josefsson + * lib/nettle/pk.c, lib/openpgp/privkey.c: indented some code - * NEWS, configure.in: Bump versions. +2010-09-19 Nikos Mavrogiannopoulos -2006-10-03 Simon Josefsson + * lib/m4/hooks.m4: updated revision - * ChangeLog: [no log message] +2010-09-18 Ludovic Courtès -2006-10-03 Simon Josefsson + * .gitignore, tests/Makefile.am, tests/openpgp-auth.c: Add an + OpenPGP authentication unit test. * tests/Makefile.am (ctests)[ENABLE_OPENPGP]: Add `openpgp-auth'. (TESTS_ENVIRONMENT): Add `srcdir'. * tests/openpgp-auth.c: New file. Signed-off-by: Nikos Mavrogiannopoulos - * NEWS: Version 1.5.2. +2010-09-16 Jonathan Bastien-Filiatrault -2006-10-03 Simon Josefsson + * lib/ext_session_ticket.c, lib/gnutls_alert.c, + lib/gnutls_buffers.c, lib/gnutls_cipher.c, lib/gnutls_cipher.h, + lib/gnutls_compress.c, lib/gnutls_compress.h, + lib/gnutls_constate.c, lib/gnutls_constate.h, + lib/gnutls_handshake.c, lib/gnutls_int.h, lib/gnutls_num.h, + lib/gnutls_record.c, lib/gnutls_record.h, + lib/gnutls_session_pack.c, lib/gnutls_state.c, libextra/gnutls_ia.c: + Explicit symmetric cipher state versionning. This introduces the concept of a "cipher epoch". The epoch number is + the number of successful handshakes and is incremented by one each + time. This concept is native to DTLS and this patch makes the + symmetric cipher state explicit for TLS in preparation for DTLS. + This concept was implicit in plain TLS and ChangeCipherSpec messages + triggered a "pending state copy". Now, we the current epoch number + is simply incremented to the parameters negotiated by the handshake. The main side effects of this patch is a slightly more abstract + internal API and, in some cases, simpler code. The session blob + format is also changed a bit since this patch avoids storing + information that is now redundant. If this breaks library users' + expectations, this side effect can be negated. The cipher_specs structure has been removed. The conn_state has + become record_state_st. Only symmetric cipher information is + versioned. Things such as key exchange algorithm and the master + secret are not versioned and their handling is unchanged. I have tested this patch as much as I could. It introduces no test + suite regressions on my x64 Debian GNU/Linux system. Do not hesitate to point out shortcomings or suggest changes. Since + this is a big diff, I am expecting this to be an iterative process. Signed-off-by: Jonathan Bastien-Filiatrault + Signed-off-by: Nikos Mavrogiannopoulos - * NEWS: Fix. +2010-09-16 Jonathan Bastien-Filiatrault -2006-10-03 Simon Josefsson + * lib/gnutls_errors.h: Add gnutls_assert_val idiom. This warrants being made in an inline function or macro since it is used throughout the code. This converts 4 line repetitive blocks + into 1 line. Signed-off-by: Jonathan Bastien-Filiatrault + Signed-off-by: Nikos Mavrogiannopoulos - * NEWS: Add. +2010-09-14 Nikos Mavrogiannopoulos -2006-10-03 Simon Josefsson + * AUTHORS, NEWS, configure.ac: updated for 2.11.1 - * gl/Makefile.am, gl/getpass.c, gl/m4/getpass.m4, gl/m4/intmax.m4: - Update. +2010-09-10 Nikos Mavrogiannopoulos -2006-09-29 Simon Josefsson + * lib/includes/gnutls/pkcs11.h, lib/pkcs11.c, lib/pkcs11_int.h, + lib/pkcs11_privkey.c, src/certtool-gaa.c, src/certtool-gaa.h, + src/certtool.gaa, src/pkcs11.c: Added 3 levels of details in PKCS + #11 URLs. 1st level: Token level. Object is unique up to token. + 2nd level: Object is unique up to token and module used to access + it. 3rd level: Object is unique up to token and module and version + of module used to access it. - * doc/protocol/draft-ietf-tls-psk-null-01.txt: Add. +2010-09-10 Nikos Mavrogiannopoulos -2006-09-26 Simon Josefsson + * NEWS: Documented changes. - * NEWS: Add. +2010-09-10 Nikos Mavrogiannopoulos -2006-09-26 Simon Josefsson + * lib/x509_b64.c: Be liberal in the PEM decoding. That is spaces and + tabs are being skipped. - * libextra/gnutls_openpgp.c: (kbx_data_to_keyring): Fix off-by-one error in call to malloc, - reported by "Adam Langley" . +2010-09-08 Jonathan Bastien-Filiatrault -2006-09-25 Simon Josefsson + * lib/gnutls_buffers.c: Fully mbufferize _gnutls_read and + _gnutls_read_buffered. Signed-off-by: Jonathan Bastien-Filiatrault + Signed-off-by: Nikos Mavrogiannopoulos - * NEWS: Add. +2010-09-08 Jonathan Bastien-Filiatrault -2006-09-25 Simon Josefsson + * lib/gnutls_mbuffers.h: mbuffers: Add _mbuffer_xfree operation. Signed-off-by: Jonathan Bastien-Filiatrault + Signed-off-by: Nikos Mavrogiannopoulos - * configure.in: Use library shared version 13 instead of 14, - incrementing it was a mistake since no API/ABI changes happened. - Reported by Andreas Metzler . +2010-09-08 Jonathan Bastien-Filiatrault -2006-09-25 Simon Josefsson + * lib/gnutls_buffers.c, lib/gnutls_buffers.h, lib/gnutls_int.h, + lib/gnutls_record.c, lib/gnutls_state.c: mbuffers: make + _gnutls_io_read_buffered use mbuffers. This will be needed by the DTLS code to make sure reads are stored + in segments that correspond to datagram boundaries. Signed-off-by: Jonathan Bastien-Filiatrault + Signed-off-by: Nikos Mavrogiannopoulos - * configure.in: Improve the C++ test, to handle CXX env. variables, - suggested by Andreas Metzler . +2010-09-08 Jonathan Bastien-Filiatrault -2006-09-25 Simon Josefsson + * lib/gnutls_int.h: Parenthesize size calculations. This is standard practice and the DTLS code got bit by this. Signed-off-by: Jonathan Bastien-Filiatrault + Signed-off-by: Nikos Mavrogiannopoulos - * NEWS: Add. +2010-09-08 Jonathan Bastien-Filiatrault -2006-09-25 Simon Josefsson + * lib/gnutls_mbuffers.c, lib/gnutls_mbuffers.h: mbuffers: Add + mbuffer_linearize. Signed-off-by: Jonathan Bastien-Filiatrault + Signed-off-by: Nikos Mavrogiannopoulos - * lib/Makefile.am: Use version script for libgnutlsxx too. +2010-09-08 Jonathan Bastien-Filiatrault -2006-09-25 Simon Josefsson + * lib/gnutls_mbuffers.c: mbuffers: fix wrong size calculation. maximum_size is the maximum size of the payload, not including + overhead. Signed-off-by: Jonathan Bastien-Filiatrault + Signed-off-by: Nikos Mavrogiannopoulos - * NEWS, lib/libgnutlsxx.vers: Add. +2010-09-08 Jonathan Bastien-Filiatrault -2006-09-24 Simon Josefsson + * lib/gnutls_mbuffers.c: mbuffers: Make _mbuffer_remove_bytes return + a meaningful error code. Signed-off-by: Jonathan Bastien-Filiatrault + Signed-off-by: Nikos Mavrogiannopoulos - * gl/gc-gnulib.c, gl/m4/gnulib-comp.m4, gl/m4/lock.m4, - gl/m4/signed.m4, gl/m4/sockpfaf.m4, gl/md4.c, gl/rijndael-api-fst.c: - Update. +2010-09-08 Jonathan Bastien-Filiatrault -2006-09-24 Simon Josefsson + * lib/gnutls_mbuffers.c: mbuffers: Document the internal mbuffer + API. After a year of not hacking GnuTLS, I needed to look at the code to + know how mbuffers work. This will make it much easier for anybody + not familiar with this code. Signed-off-by: Jonathan Bastien-Filiatrault + Signed-off-by: Nikos Mavrogiannopoulos - * NEWS, configure.in: Bump versions. +2010-09-08 Nikos Mavrogiannopoulos -2006-09-24 Simon Josefsson + * NEWS: updated NEWS. - * lib/x509/x509.c: (gnutls_x509_crt_init): Don't set output parameter on failures, - reported by Alon Bar-Lev . Also clean up - logic. +2010-09-08 Nikos Mavrogiannopoulos -2006-09-24 Simon Josefsson + * lib/includes/gnutls/pkcs11.h, lib/pkcs11.c, lib/pkcs11_int.h, + lib/pkcs11_privkey.c, lib/pkcs11_write.c, src/certtool-common.h, + src/certtool-gaa.c, src/certtool-gaa.h, src/certtool.c, + src/certtool.gaa, src/pkcs11.c: PKCS#11 URL support updated to + conform to draft-pechanec-pkcs11uri-02. Now in the URL the pkcs11 + provider library (module) can be specified thus restricting objects + within a single provider. - * THANKS: Add. +2010-09-01 Nikos Mavrogiannopoulos -2006-09-24 Simon Josefsson + * NEWS, lib/gnutls_int.h, lib/gnutls_priority.c, + lib/gnutls_record.c: When the %COMPAT flag is specified, larger + records that would otherwise violate the TLS spec, are accepted. - * lib/x509/crl.c: Fix prototype of gnutls_x509_crl_get_issuer_dn to - match x509.h, for IRIX ido cc builds, reported by Georg Schwarz - . +2010-08-28 Brad Hards -2006-09-21 Simon Josefsson + * src/certtool.c, src/pkcs11.c: Show which option is the default for + command line tools. We use "y/N" is most places - this just adapts two places that use + "Y/N" to match the behavior of read_yesno(). Signed-off-by: Nikos Mavrogiannopoulos - * Makefile.am: Fix gendocs.sh path. +2010-08-20 Nikos Mavrogiannopoulos -2006-09-21 Simon Josefsson + * lib/x509/x509.c: prevent a memory leak in the unique_id functions. - * ChangeLog: [no log message] +2010-08-20 Brad Hards -2006-09-21 Simon Josefsson + * lib/includes/gnutls/x509.h, lib/libgnutls.map, lib/x509/output.c, + lib/x509/x509.c, tests/Makefile.am, tests/certuniqueid.c: As + identified in a previous mail, I've added support for accessing / + displaying the subjectUniqueID and issuerUniqueID fields within an + X.509 certificate. This is provided (along with a test case) in the + attached patch. Signed-off-by: Nikos Mavrogiannopoulos - * NEWS: Version 1.5.1. +2010-08-20 Nikos Mavrogiannopoulos -2006-09-21 Simon Josefsson + * NEWS, lib/gnutls_int.h: By default lowat is set to zero. - * gl/override/gpl.diff: Rename. +2010-08-19 Nikos Mavrogiannopoulos -2006-09-21 Simon Josefsson + * lib/pkcs11.c: Revert "When scanning for terminator character for + PKCS #11 URLs ignore escaped \;." This reverts commit 583fad076506421c9007a3349784496e2927dcd1. - * gl/override/doc/gpl.texi.diff, gl/override/doc/lgpl.texi.diff, - gl/override/gpl.diff, gl/override/gpl.texi.diff, - gl/override/lgpl.diff, gl/override/lgpl.texi.diff: Rename. +2010-08-18 Nikos Mavrogiannopoulos -2006-09-21 Simon Josefsson + * THANKS: Added Sjoerd. - * gl/override/lgpl.diff: Rename. +2010-08-18 Nikos Mavrogiannopoulos -2006-09-21 Simon Josefsson + * NEWS, lib/m4/hooks.m4: libnettle is the default crypto library. - * doc/fdl.texi, doc/gpl.texi, doc/lgpl.texi, gl/Makefile.am, - gl/asnprintf.c, gl/gai_strerror.c, gl/getaddrinfo.c, gl/getpass.c, - gl/inet_ntop.c, gl/inet_pton.c, gl/m4/gettext.m4, - gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, gl/m4/inttypes-h.m4, - gl/m4/inttypes-pri.m4, gl/m4/lib-link.m4, gl/m4/stdint.m4, - gl/md5.c, gl/memmove.c, gl/override/gpl.texi.diff, - gl/override/lgpl.texi.diff, gl/printf-args.c, gl/printf-parse.c, - gl/sha1.c, gl/snprintf.c, gl/stdint_.h, gl/strdup.c, - gl/vasnprintf.c: Update. +2010-08-18 Nikos Mavrogiannopoulos -2006-09-21 Simon Josefsson + * lib/gnutls_handshake.c: oldstate var removed. - * NEWS: Add. +2010-08-17 Nikos Mavrogiannopoulos -2006-09-21 Simon Josefsson + * tests/mini-eagain.c: mini-eagain will fail with EAGAIN error one + every two attempts. That is to remove probabilities. - * doc/Makefile.am: Dist gpl.texi and lgpl.texi. +2010-08-11 Sjoerd Simons -2006-09-21 Simon Josefsson + * lib/gnutls_int.h, lib/gnutls_record.c: Remember the amount of user + data we're sending out Partially reverts 3ef62950845f551ebc629e50d5ddf75f71b84294. + gnutls_record_send needs to return the amount of user-data we sent, + so we need to keep this information somewhere to return it when we + succeed in sending that data. Signed-off-by: Nikos Mavrogiannopoulos - * doc/gnutls.texi: Add LGPL and GPL texts. +2010-08-11 Sjoerd Simons -2006-09-21 Simon Josefsson + * lib/gnutls_handshake.c: Check whether the error is fatal in more + cases When stressing the async API of gnutls a lot of internal errors are + hit as IMED_RET clears the handshake hash buffers as a result of + -EAGAIN even though it would never be re-initialized at that point, + but is still needed in later stages. Signed-off-by: Nikos Mavrogiannopoulos - * NEWS: Add. +2010-08-11 Sjoerd Simons -2006-09-21 Simon Josefsson + * lib/gnutls_handshake.c, lib/gnutls_int.h: Add state for flushing + the handshake buffer A seperate state is needed between flushing the handshake buffers + and sending the chipher spec change otherwise it's impossible to + determine whether _gnutls_send_change_cipher_spec is called for the + first time or again. Signed-off-by: Nikos Mavrogiannopoulos - * tests/pkcs1-pad: Simplify grep expression, to work around debug - messages from wine. +2010-08-01 Simon Josefsson -2006-09-21 Simon Josefsson + * lib/nettle/mpi.c: Fix warning. - * src/certtool.c: (generate_self_signed): Load key, if generate_certificate() didn't - load or generate it, typically because it used a certificate - request. Reported by Sascha Ziemann . +2010-07-29 Nikos Mavrogiannopoulos -2006-09-21 Simon Josefsson + * lib/m4/hooks.m4: Define HAVE_GCRYPT when using gcrypt. nettle is + no longer marked as unsupported. - * src/certtool.c: Revert last patch. +2010-07-29 Nikos Mavrogiannopoulos -2006-09-21 Simon Josefsson + * NEWS, doc/manpages/Makefile.am, lib/gnutls_extensions.c, + lib/m4/hooks.m4, lib/nettle/cipher.c, lib/nettle/mac.c, + lib/nettle/pk.c, libextra/gnutls_extra.c: Added Camellia-128/256, + SHA-224/384/512 and support for DSA2 when using nettle. - * src/tests.c: (test_session_resume2): When comparing session id's, also compare - that the lengths are the same. +2010-07-28 Nikos Mavrogiannopoulos -2006-09-21 Simon Josefsson + * lib/pkcs11.c: When scanning for terminator character for PKCS #11 + URLs ignore escaped \;. - * NEWS, THANKS: Add. +2010-07-26 Nikos Mavrogiannopoulos -2006-09-21 Simon Josefsson + * lib/gnutls_priority.c: Modified the example to work in TLS 1.2. - * src/tests.c: (test_session_resume2): If session-id is NULL, resumption isn't - supported. Tiny patch from Kataja Kai . +2010-07-26 Nikos Mavrogiannopoulos -2006-09-19 Simon Josefsson + * NEWS, lib/gnutls_algorithms.c: Added RSA_NULL_SHA1 and SHA256 + ciphersuites. - * tests/Makefile.am: Dist more. +2010-07-26 Nikos Mavrogiannopoulos -2006-09-19 Simon Josefsson + * lib/ext_signature.c: When signature algorithms extension is not + received allow SHA1 and SHA256. - * tests/pkcs1-pad: Test another cert. +2010-07-26 Nikos Mavrogiannopoulos -2006-09-19 Simon Josefsson + * lib/gnutls_algorithms.c: NULL MAC renamed to MAC-NULL - * tests/pkcs1-pad-broken3.pem: Add forged cert, from Ralf-Philipp - Weinmann. +2010-07-25 Simon Josefsson -2006-09-18 Simon Josefsson + * src/common.c: Avoid fixed size buffers (now handles the big >100 + SAN cert). - * configure.in: Gnulib seems to require autoconf 2.60? Bump it. +2010-07-25 Simon Josefsson -2006-09-18 Simon Josefsson + * doc/manpages/Makefile.am: Generated. - * libextra/opencdk/keydb.c: (keydb_idx_search): Don't return CDK_EOF if key is found at offset - 0. Suggested by "Adam Langley" . +2010-07-25 Simon Josefsson -2006-09-18 Simon Josefsson + * NEWS: Re-add old NEWS entries. - * THANKS: Remove (already there). +2010-07-25 Simon Josefsson -2006-09-18 Simon Josefsson + * lib/gnutls_buffers.c: Doc fix. - * THANKS: Add. +2010-07-24 Nikos Mavrogiannopoulos -2006-09-18 Simon Josefsson + * lib/x509/privkey.c: Do not trust fbase64_decode to return 0 on + success. - * doc/examples/ex-serv-pgp.c: Fix typo. Tiny patch from "Adam - Langley" . +2010-07-24 Nikos Mavrogiannopoulos -2006-09-12 Simon Josefsson + * NEWS, lib/gnutls_x509.c, lib/x509/privkey.c, src/certtool.c: + gnutls_x509_privkey_import() will fallback to + gnutls_x509_privkey_import_pkcs8() without a password, if it is + unable to decode the key. - * NEWS: Add. +2010-07-24 Nikos Mavrogiannopoulos -2006-09-12 Simon Josefsson + * lib/gnutls_algorithms.c, lib/gnutls_algorithms.h, + lib/includes/gnutls/gnutls.h.in, lib/nettle/mpi.c, src/prime.c: + Added GNUTLS_PK_DH to differentiate in the generation of parameters + with PK_DSA that requires special treatment. - * NEWS: Fix. +2010-07-24 Nikos Mavrogiannopoulos -2006-09-12 Simon Josefsson + * lib/gnutls_algorithms.c: Corrected wrong descriptions of security + levels. - * tests/pkcs1-pad: Fix. +2010-07-24 Nikos Mavrogiannopoulos -2006-09-12 Simon Josefsson + * lib/gnutls_algorithms.c: use RSA-SHA1 as an indicator of RSA + certificates. - * lib/x509/verify.c: Permit empty parameters field too, found after - adding self tests. +2010-07-24 Nikos Mavrogiannopoulos -2006-09-12 Simon Josefsson + * lib/gnutls_algorithms.c: Fix DSA key values to avoid generating + normal and reporting them as low. - * tests/pkcs1-pad: Fix exit code. +2010-07-23 Nikos Mavrogiannopoulos -2006-09-12 Simon Josefsson + * NEWS, lib/gnutls_algorithms.c, lib/gnutls_algorithms.h, + lib/includes/gnutls/openpgp.h, lib/includes/gnutls/x509.h, + lib/libgnutls.map, lib/nettle/mpi.c, lib/openpgp/privkey.c, + lib/x509/privkey.c, src/certtool.c, + tests/pathlen/no-ca-or-pathlen.pem: Better handling of security + parameters to key sizes matching (via a single table). Added + functions to return the security parameter of a private key. - * tests/pkcs1-pad-broken2.pem, tests/pkcs1-pad-ok2.pem: Add, from - Eric Young in - . +2010-07-23 Nikos Mavrogiannopoulos -2006-09-12 Simon Josefsson + * doc/cha-intro-tls.texi: Simplified documentation. - * tests/pkcs1-pad: Add more tests. +2010-07-23 Nikos Mavrogiannopoulos -2006-09-12 Simon Josefsson + * lib/nettle/mpi.c: Follow ECRYPT II recommendations. - * tests/Makefile.am: Add pkcs1-pad test. +2010-07-23 Nikos Mavrogiannopoulos -2006-09-12 Simon Josefsson + * NEWS, doc/cha-bib.texi, doc/cha-intro-tls.texi, + lib/gnutls_algorithms.c: Updated documentation and + gnutls_pk_params_t mappings to ECRYPT II recommendations. - * tests/pkcs1-pad-broken.pem, tests/pkcs1-pad-ok.pem: Add, from - Yutaka OIWA . +2010-07-23 Nikos Mavrogiannopoulos -2006-09-12 Simon Josefsson + * lib/gnutls_priority.c: HMAC-MD5 deprecated according to ECRYPT II + yearly report (2009-2010) recommendations. - * tests/pkcs1-pad: Add. +2010-07-23 Nikos Mavrogiannopoulos -2006-09-12 Simon Josefsson + * tests/sha2/Makefile.am: added missing file key-subca-dsa.pem - * lib/x509/verify.c: Fix asn1_read_value() call to fix crash, - reported by Andreas Metzler . +2010-07-22 Nikos Mavrogiannopoulos -2006-09-12 Simon Josefsson + * gtk-doc.make: ignore html errors otherwise make dist doesn't work. - * lib/gnutls_pk.c: Add 'break' to make logic easier to follow. +2010-07-22 Nikos Mavrogiannopoulos -2006-09-11 Simon Josefsson + * NEWS: updated NEWS - * lib/gnutls_pk.c: Revert part of patch, logging is only enabled in - debug mode, which isn't recommended for real use. +2010-07-22 Nikos Mavrogiannopoulos -2006-09-08 Simon Josefsson + * src/certtool-common.h, src/certtool-gaa.c, src/certtool-gaa.h, + src/certtool.c, src/certtool.gaa: Added option for certtool to print + certificate public key. - * NEWS: Add. +2010-07-21 Nikos Mavrogiannopoulos -2006-09-08 Simon Josefsson + * lib/gnutls_algorithms.c: Added SIG_RSA_MD5_OID as an indicator of + RSA. Some microsoft products were using it. Reported by Mads + Kiilerich. - * NEWS: Fix. +2010-07-19 Nikos Mavrogiannopoulos -2006-09-08 Simon Josefsson + * lib/gnutls_algorithms.c, lib/x509/common.h: Added RSA with SHA224. - * NEWS: Fix. +2010-07-17 Nikos Mavrogiannopoulos -2006-09-08 Simon Josefsson + * lib/nettle/pk.c: Added blinding to RSA decryption AND signing. + Will stay there until it is moved to nettle itself. - * NEWS: Add. +2010-07-11 Nikos Mavrogiannopoulos -2006-09-08 Simon Josefsson + * lib/system.h: fixed - * lib/x509/verify.c: Make sure the digestAlgorithm.parameters field - is empty, which it has to be for the hashes we support. Otherwise, - the field can encode "garbage" that might be used to make the - signature be a perfect cube, similar (but not identical) to - Bleichenbacher's Crypto 06 rump session attack. +2010-07-11 Nikos Mavrogiannopoulos -2006-09-08 Simon Josefsson + * NEWS, lib/nettle/Makefile.am, lib/nettle/egd.c, lib/nettle/egd.h, + lib/nettle/rnd.c: Added support for EGD daemon in nettle's RNG. It + is used if /dev/urandom is not present. - * NEWS: Add. +2010-07-11 Nikos Mavrogiannopoulos -2006-09-08 Simon Josefsson + * lib/gnutls_buffers.c, lib/system.c, lib/system.h: Corrected the + lowat behavior. Documented that it will be deprecated in later + versions. - * NEWS: Add. +2010-07-11 Nikos Mavrogiannopoulos -2006-09-08 Simon Josefsson + * src/serv.c: gnutls-serv: Do not print CR/LF if received, but + instead print LF only. - * lib/gnutls_pk.c: Don't return different errors depending on - content of decrypted PKCS#1 token, to avoid Bleichenbacher's - Crypto'98 attack, suggested by Werner Koch . +2010-07-10 Nikos Mavrogiannopoulos -2006-09-08 Simon Josefsson + * lib/Makefile.am, lib/gnutls_buffers.c, lib/gnutls_state.c, + lib/locks.c, lib/locks.h, lib/pakchois/pakchois.c, lib/system.c, + lib/system.h: system specific functions were moved to system.c - * THANKS: Add. +2010-07-10 Nikos Mavrogiannopoulos -2006-09-08 Simon Josefsson + * NEWS, configure.ac, lib/gnutls_alert.c, lib/gnutls_buffers.c, + lib/gnutls_buffers.h, lib/gnutls_global.c, lib/gnutls_handshake.c, + lib/gnutls_handshake.h, lib/gnutls_int.h, lib/gnutls_mbuffers.c, + lib/gnutls_mbuffers.h, lib/gnutls_record.c, lib/gnutls_record.h, + lib/gnutls_state.c, lib/includes/gnutls/gnutls.h.in, + lib/libgnutls.map, libextra/gnutls_ia.c: Support scattered write + using writev(). This takes advantage of the new buffering layer and + allows queuing of packets and flushing them. This is currently used + for handshake messages only. Performance-wise the difference of + packing several TLS records in a single write doesn't seem to offer + anything over ethernet (that my tests were on). Probably on links + with higher latency there would be a benefit. - * doc/examples/ex-client-srp.c: Use GNUTLS_SHUT_RDWR, tiny patch - from "Robert Millan [ackstorm]" . +2010-07-08 Nikos Mavrogiannopoulos -2006-08-29 Simon Josefsson + * doc/cha-gtls-app.texi: Removed old reference. - * doc/protocol/draft-ietf-tls-openpgp-keys-11.txt: Add. +2010-07-08 Nikos Mavrogiannopoulos -2006-08-28 Simon Josefsson + * doc/cha-gtls-app.texi, doc/examples/Makefile.am, + doc/examples/ex-rfc2818.c: ex-rfc2818 is now a functional program + demonstrating the verification procedure. - * NEWS: Fix. +2010-07-08 Nikos Mavrogiannopoulos -2006-08-28 Simon Josefsson + * doc/Makefile.am, doc/cha-gtls-app.texi, doc/examples/Makefile.am, + doc/examples/ex-serv-export.c: Example with export ciphersuites was + removed. - * gl/Makefile.am, gl/getaddrinfo.c, gl/m4/arcfour.m4, - gl/m4/arctwo.m4, gl/m4/codeset.m4, gl/m4/des.m4, - gl/m4/gc-pbkdf2-sha1.m4, gl/m4/gc.m4, gl/m4/getdelim.m4, - gl/m4/getline.m4, gl/m4/getpass.m4, gl/m4/gnulib-cache.m4, - gl/m4/gnulib-comp.m4, gl/m4/hmac-md5.m4, gl/m4/hmac-sha1.m4, - gl/m4/intmax_t.m4, gl/m4/inttypes-pri.m4, gl/m4/inttypes_h.m4, - gl/m4/lock.m4, gl/m4/longlong.m4, gl/m4/md2.m4, gl/m4/md4.m4, - gl/m4/md5.m4, gl/m4/memxor.m4, gl/m4/read-file.m4, - gl/m4/readline.m4, gl/m4/rijndael.m4, gl/m4/sha1.m4, - gl/m4/stdint.m4, gl/m4/stdint_h.m4, gl/m4/strdup.m4, - gl/override/doc/gendocs_template, gl/stdint_.h: Update. +2010-07-08 Nikos Mavrogiannopoulos -2006-08-27 Simon Josefsson + * lib/gnutls_pubkey.c: corrected typo - * NEWS, THANKS: Add. +2010-07-07 Nikos Mavrogiannopoulos -2006-08-27 Simon Josefsson + * lib/nettle/pk.c: Use the same "e" for RSA as libgcrypt. It's the + fastest choice. - * doc/examples/ex-serv-anon.c, doc/examples/ex-serv-export.c, - doc/examples/ex-serv-pgp.c, doc/examples/ex-serv-srp.c, - doc/examples/ex-serv1.c, doc/examples/tcp.c: Include netinet/in.h - for FreeBSD, reported by Roman Bogorodskiy . +2010-07-05 Nikos Mavrogiannopoulos -2006-08-27 Simon Josefsson + * src/certtool-cfg.c: Do not crash if input is redirected from + /dev/null. - * NEWS: Add. +2010-07-05 Nikos Mavrogiannopoulos -2006-08-27 Simon Josefsson + * NEWS, src/certtool-gaa.c, src/certtool.c, src/certtool.gaa: + Changed the default pkcs-cipher to AES-128. Allowed specifying the + 3des-pkcs12 cipher with the --pkcs-cipher option. - * THANKS: Add. +2010-07-04 Nikos Mavrogiannopoulos -2006-08-27 Simon Josefsson + * src/benchmark.c: Use double to count bytes. - * src/certtool.c: (generate_certificate): Load private key when --load-request is - used, based on report from Sascha Ziemann - . +2010-07-04 Nikos Mavrogiannopoulos -2006-08-27 Simon Josefsson + * lib/nettle/rnd.c: Added a windows version of the RNG. - * lib/x509/x509_write.c: (gnutls_x509_crt_sign2): Check to see if ISSUER_KEY is NULL before - continuing, based on report from Sascha Ziemann - . +2010-07-04 Nikos Mavrogiannopoulos -2006-08-14 Simon Josefsson + * lib/nettle/rnd.c: Corrected locking usage in nettle's random + subsystem. - * NEWS: Add. +2010-07-03 Nikos Mavrogiannopoulos -2006-08-14 Simon Josefsson + * lib/gcrypt/Makefile.am, lib/gnutls_privkey.c, + lib/gnutls_pubkey.c, lib/nettle/Makefile.am, lib/pakchois/dlopen.h: + Fixed to compile under mingw32. - * src/serv.c: Map select to _win_select on Windows hosts. +2010-07-03 Nikos Mavrogiannopoulos -2006-08-14 Simon Josefsson + * lib/m4/hooks.m4: only warn if dlopen or pthreads are not found. - * src/Makefile.am: Need select.c in cli.c and serv.c. +2010-07-03 Nikos Mavrogiannopoulos -2006-08-14 Simon Josefsson + * lib/gcrypt/init.c, lib/includes/gnutls/gnutls.h.in, lib/locks.c, + lib/pakchois/pakchois.c: Locks were converted to be in align with + posix locks to easier wrap around them. - * src/select.c: Add, moved from cli.c, originally from plibc, see +2010-07-03 Nikos Mavrogiannopoulos - . + * lib/Makefile.am, lib/locks.c, lib/locks.h, lib/pakchois/dlopen.c, + lib/pakchois/dlopen.h, lib/pakchois/pakchois.c: The included + pakchois will use gnutls locks and will use a portable dlopen() to + allow compilation in win32 (untested). -2006-08-14 Simon Josefsson +2010-07-03 Nikos Mavrogiannopoulos - * src/cli.c: Move _win_select to select.c. + * lib/nettle/rnd.c: Read from /dev/urandom every 20 minutes. -2006-08-14 Simon Josefsson +2010-07-03 Nikos Mavrogiannopoulos - * src/cli.c: Make select() work on Windows, copying code from plibc, - see + * lib/Makefile.am, lib/x509/Makefile.am: Added missing files - . +2010-07-03 Nikos Mavrogiannopoulos -2006-08-13 Simon Josefsson + * lib/crypto-api.c, lib/gnutls_cipher_int.c, + lib/gnutls_cipher_int.h, lib/includes/gnutls/crypto.h, + lib/libgnutls.map: Allow encryption and decryption that are not + in-place only. - * libextra/gnutls_openssl.c: Mark with XXX. +2010-07-03 Nikos Mavrogiannopoulos -2006-08-13 Simon Josefsson + * src/benchmark.c: Print values in a human-readable format and do + the calculations in fixed time to prevent stalling in slow systems. - * NEWS, configure.in: Bump versions. +2010-07-02 Nikos Mavrogiannopoulos -2006-08-13 Simon Josefsson + * lib/m4/hooks.m4: corrected library version - * Makefile.am: Fix release target. +2010-07-02 Nikos Mavrogiannopoulos -2006-08-13 Simon Josefsson + * doc/examples/ex-cert-select-pkcs11.c, + lib/includes/gnutls/pkcs11.h, lib/pkcs11.c, lib/pkcs11_int.h, + src/common.c, src/pkcs11.c: PIN callback supplies the token URL. The + callback function in common.c will cache PIN if requested for second + time. - * ChangeLog: [no log message] +2010-07-02 Nikos Mavrogiannopoulos -2006-08-13 Simon Josefsson + * lib/gnutls_errors.c, lib/includes/gnutls/gnutls.h.in, + lib/pkcs11.c, lib/pkcs11_int.h, lib/pkcs11_privkey.c, + lib/pkcs11_write.c, src/common.c: Reverted the SAVE_PIN approach in + PIN callback. The new approach will be to provide enough information + for the callback to save the PIN itself. - * NEWS: Version 1.5.0. +2010-07-02 Nikos Mavrogiannopoulos -2006-08-13 Simon Josefsson + * lib/gcrypt/init.c: removed unneeded function. - * NEWS: Fix. +2010-07-02 Nikos Mavrogiannopoulos -2006-08-13 Simon Josefsson + * lib/gnutls_cert.c: More uses of gnutls_certificate_free_ca_names - * libextra/gnutls_openssl.c: Add (XXX). +2010-07-02 Nikos Mavrogiannopoulos -2006-08-13 Simon Josefsson + * lib/locks.c: Do not allow setting NULL lock functions - * lib/Makefile.am, libextra/Makefile.am: Install *.def to bin/ - directory. +2010-07-02 Nikos Mavrogiannopoulos -2006-08-13 Simon Josefsson + * lib/nettle/rnd.c: corrected lock usage. - * NEWS: Add. +2010-07-02 Nikos Mavrogiannopoulos -2006-08-13 Simon Josefsson + * lib/m4/hooks.m4: bumped library version - * configure.in, lib/Makefile.am, libextra/Makefile.am: Create *.def - files for libraries, on mingw. +2010-07-01 Nikos Mavrogiannopoulos -2006-08-13 Simon Josefsson + * lib/includes/Makefile.am: Include abstract.h in releases. - * gl/Makefile.am, gl/m4/gc.m4, gl/m4/getaddrinfo.m4, - gl/m4/gnulib-comp.m4, gl/m4/inet_ntop.m4, gl/m4/inet_pton.m4, - gl/m4/memxor.m4, gl/m4/restrict.m4, gl/snprintf.c: Update. +2010-06-30 Nikos Mavrogiannopoulos -2006-08-13 Simon Josefsson + * lib/crypto-api.c: Correctly deinitialize crypto API handles. - * libextra/gnutls_openssl.c: Use int/void* macros to avoid warnings, - suggested by Andreas Metzler . +2010-06-29 Nikos Mavrogiannopoulos -2006-08-13 Simon Josefsson + * lib/gnutls_int.h: commented obscure HANDSHAKE_MAC_TYPE_10 and + HANDSHAKE_MAC_TYPE_12. - * lib/gnutls_buffers.c: Remove. +2010-06-29 Nikos Mavrogiannopoulos -2006-08-13 Simon Josefsson + * lib/locks.c, lib/locks.h, lib/nettle/rnd.c: simplified locking + code. Locking functions always exist but are dummies if no locks + have been set. - * lib/gnutls_int.h: Move GNUTLS_POINTER_TO_INT here. Add - GNUTLS_INT_TO_POINTER. Based on glib macros, and suggestions from - Andreas Metzler . +2010-06-29 Nikos Mavrogiannopoulos -2006-08-13 Simon Josefsson + * lib/gcrypt/Makefile.am, lib/gcrypt/init.c, lib/gnutls_errors.c, + lib/gnutls_global.c, lib/gnutls_global.h, + lib/includes/gnutls/gnutls.h.in, lib/locks.c, lib/locks.h, + lib/nettle/Makefile.am, lib/nettle/init.c, lib/nettle/rnd.c: + Initialization of crypto libraries moved outside main gnutls code. - * configure.in: Add void*, for GNUTLS_POINTER_TO_INT_CAST macros. +2010-06-29 Nikos Mavrogiannopoulos -2006-08-11 Simon Josefsson + * lib/Makefile.am, lib/gnutls_global.c, lib/gnutls_global.h, + lib/locks.c, lib/locks.h: Moved locking code to special file. - * NEWS: Fix. +2010-06-29 Simon Josefsson -2006-08-11 Simon Josefsson + * doc/Makefile.am, doc/pkcs11-vision.eps: Add pkcs11-vision rules. - * NEWS: Add. +2010-06-29 Simon Josefsson -2006-08-11 Simon Josefsson + * doc/manpages/Makefile.am: Generated. - * NEWS: Add. +2010-06-28 Nikos Mavrogiannopoulos -2006-08-11 Simon Josefsson + * lib/includes/gnutls/pkcs11.h, lib/pkcs11_write.c, src/pkcs11.c: + When copying a private key the sensitive flag can be set or not. + This allows copying private keys that can be exported. - * lib/gnutls_algorithms.c: (_gnutls_x509_oid2mac_algorithm): Don't crash trying to strcmp the - NULL OID value in the hash_algorithms array, which happens when the - input OID doesn't match our OIDs for SHA1, MD5, MD2 or RIPEMD160. - Reported by satyakumar . +2010-06-28 Nikos Mavrogiannopoulos -2006-08-11 Simon Josefsson + * lib/includes/gnutls/pkcs11.h, lib/pkcs11.c, lib/pkcs11_int.h, + lib/pkcs11_write.c, src/certtool-common.h, src/certtool.c, + src/pkcs11.c: Combined object flags. No implicit login any more. + Login has to be specified with a flag on every call that could use + it. - * configure.in: Don't overwrite CFLAGS. +2010-06-28 Nikos Mavrogiannopoulos -2006-08-07 Simon Josefsson + * lib/gnutls_privkey.c, lib/gnutls_pubkey.c, lib/pkcs11.c, + lib/pkcs11_int.h, lib/pkcs11_privkey.c, lib/pkcs11_write.c: Indented + code. - * includes/gnutls/gnutlsxx.h: Make it compile. +2010-06-28 Nikos Mavrogiannopoulos -2006-08-06 Simon Josefsson + * doc/examples/ex-cert-select-pkcs11.c, lib/gnutls_pubkey.c, + lib/gnutls_x509.c, lib/includes/gnutls/abstract.h, + lib/includes/gnutls/pkcs11.h, lib/pkcs11.c, lib/pkcs11_write.c, + src/certtool-common.h, src/certtool-gaa.c, src/certtool-gaa.h, + src/certtool.c, src/certtool.gaa, src/cli.c, src/pkcs11.c: Allow + flags when importing objects from PKCS11 URLs. The only flag + supported now is the PKCS11_OBJ_FLAG_LOGIN, which forces login + before accessing object on a token. The reason is that some tokens + do not allow access of any data without login. - * NEWS: Add. +2010-06-27 Nikos Mavrogiannopoulos -2006-08-06 Simon Josefsson + * src/tests.c: Added AES-128 to block ciphers. - * src/tls_test-gaa.c, src/tls_test-gaa.h: Update. +2010-06-27 Nikos Mavrogiannopoulos -2006-08-06 Simon Josefsson + * lib/gnutls_session_pack.c: Corrected writing and reading order of + security parameters. - * src/tls_test.gaa: Use -V for --verbose. +2010-06-27 Nikos Mavrogiannopoulos -2006-08-06 Simon Josefsson + * lib/configure.ac, libextra/configure.ac: use 2.11.0 everywhere - * src/certtool.c, src/crypt.c: Fix --version to conform to FSF - standards, to fix make distcheck. +2010-06-27 Nikos Mavrogiannopoulos -2006-08-06 Simon Josefsson + * NEWS, doc/cha-gtls-app.texi, lib/configure.ac, + lib/gnutls_errors.c, lib/gnutls_global.c, lib/gnutls_global.h, + lib/includes/gnutls/gnutls.h.in, lib/libgnutls.map, + lib/nettle/rnd.c, lib/pkcs11.c: Added gnutls_global_set_mutex() to + allow setting alternative locking procedures. By default the system + available locking is used. In *NIX pthreads are used and in windows + the critical section API. As a side effect this change avoids any API dependance on libgcrypt + even if threads are used. - * src/tls_test.c, src/tls_test.gaa: Support --version. +2010-06-27 Nikos Mavrogiannopoulos -2006-08-06 Simon Josefsson + * tests/chainverify.c: Modified the cacertrsamd5 short-cut. The test + was checking whether verification using a trusted insecurely signed + self signed certificate will fail against a chain that has this as + intermediate. However this test should have succeeded since the + insecure certificate is trusted. This isn't the purpose of this test however. It should have checked + whether using the same certificate as trusted and to be verified and + the GNUTLS_VERIFY_DO_NOT_ALLOW_SAME flag should return an error. - * src/cli.c, src/psk.c, src/serv.c: Fix --version to conform to FSF - standards, to fix make distcheck. +2010-06-27 Nikos Mavrogiannopoulos -2006-08-06 Simon Josefsson + * tests/chainverify.c: Fail on error. - * NEWS: Add. +2010-06-26 Nikos Mavrogiannopoulos -2006-08-06 Simon Josefsson + * src/certtool.c: When generating private key allow usage of + --pkcs-cipher flag. - * configure.in: Fix --without-included-libtasn1, reported by Daniel - Black . +2010-06-22 Nikos Mavrogiannopoulos -2006-08-06 Simon Josefsson + * lib/auth_dhe_psk.c, lib/auth_psk.c, lib/auth_psk.h, + lib/auth_srp.c, lib/auth_srp.h, lib/ext_srp.c, lib/gnutls_int.h: + MAX_SRP_USERNAME -> MAX_USERNAME_SIZE - * gl/Makefile.am, gl/m4/gnulib-cache.m4: Update. +2010-06-24 Simon Josefsson -2006-08-06 Simon Josefsson + * README-alpha: We also require GNU make. - * NEWS: Fix. +2010-06-24 Simon Josefsson -2006-08-06 Simon Josefsson + * THANKS, configure.ac, lib/configure.ac, libextra/configure.ac: Use + silent build rules. Suggested by Vincent Torri in - * NEWS: Add. + . -2006-08-06 Simon Josefsson +2010-06-22 Nikos Mavrogiannopoulos - * libextra/opencdk/kbnode.c, libextra/opencdk/opencdk.h, - libextra/opencdk/stream.h: Update to 0.5.9. + * lib/includes/gnutls/gnutls.h.in: removed OPRFI extension + functions. -2006-08-03 Simon Josefsson +2010-06-22 Nikos Mavrogiannopoulos - * THANKS: add + * lib/Makefile.am: removed OPRFI from makefile. -2006-08-03 Simon Josefsson +2010-06-21 Nikos Mavrogiannopoulos - * tests/Makefile.am: Fix libgcrypt link failure, reported by Brant - Gurganus, tiny patch by Daniel Black . + * lib/x509/verify.c: When verifying certificates use the same + algorithm whether the DO_NOT_ALLOW_SAME flag is set or not. Before + we were shortening certificate list if the flag was not set by the + size of the first certificate found in the trusted list, and keep + the list intact otherwise. Now we shorten the list in the latter + case as well, except for the first certificate. -2006-07-28 Simon Josefsson +2010-06-19 Nikos Mavrogiannopoulos - * gendocs.sh, gl/Makefile.am, gl/getaddrinfo.c, gl/getaddrinfo.h, - gl/gettext.h, gl/inet_ntop.h, gl/inet_pton.h, gl/m4/getline.m4, - gl/m4/gettext.m4, gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, - gl/m4/inet_ntop.m4, gl/m4/inet_pton.m4, gl/m4/inttypes-h.m4, - gl/m4/inttypes-pri.m4, gl/m4/inttypes.m4, gl/m4/isc-posix.m4, - gl/m4/lib-link.m4, gl/m4/lock.m4, gl/m4/netinet_in_h.m4, - gl/m4/nls.m4, gl/m4/onceonly_2_57.m4, gl/m4/po.m4, gl/m4/stdint.m4, - gl/m4/visibility.m4, gl/printf-args.c, gl/stdint_.h: Update. + * NEWS: Added news entry for EV-certificates. -2006-07-23 Nikos Mavrogiannopoulos +2010-06-19 Nikos Mavrogiannopoulos - * lib/gnutls_int.h: cert_type extension was updated to the IANA - assigned value + * src/tests.c, src/tests.h, src/tls_test.c: Corrected some tests. + Added test to check whether the %COMPAT option is required for this + server. -2006-07-23 Nikos Mavrogiannopoulos +2010-06-19 Nikos Mavrogiannopoulos - * lib/gnutls_int.h: cert_type extension was updated to the IANA - assigned value + * lib/gnutls_extensions.c, lib/gnutls_session_pack.c: Corrections in + the new session packing code. Saving absolute positions in buffers + is no longer done. Now we store only and offset to allow + reallocating the buffer and still do the correct reference. -2006-07-13 Simon Josefsson +2010-06-19 Nikos Mavrogiannopoulos - * doc/gendocs.sh, gendocs.sh, gl/Makefile.am, - gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4: Update. + * lib/ext_safe_renegotiation.c, lib/ext_safe_renegotiation.h, + lib/ext_signature.c, lib/gnutls_handshake.c: Fixes in new extensions + code that relate to SSL 3.0. -2006-07-13 Simon Josefsson +2010-06-19 Nikos Mavrogiannopoulos - * libextra/gnutls_openssl.c: Revert. + * configure.ac: version is 2.11.0 -2006-07-13 Simon Josefsson +2010-06-19 Nikos Mavrogiannopoulos - * THANKS: Add. + * doc/cha-cert-auth.texi: Some updates in the PKCS11 text. -2006-07-13 Simon Josefsson +2010-06-19 Nikos Mavrogiannopoulos - * libextra/gnutls_openssl.c: Retry handshake on non-fatal errors. + * doc/cha-intro-tls.texi: Some updates on renegotiation text -2006-07-11 Simon Josefsson +2010-06-19 Nikos Mavrogiannopoulos - * doc/Makefile.am: Fix last commit. + * doc/cha-intro-tls.texi: Removed links for discussion of the COMPAT + topic. I don't think they should be in the documentation. -2006-07-11 Simon Josefsson +2010-06-19 Nikos Mavrogiannopoulos - * doc/Makefile.am: Dist arch/ images. + * doc/cha-intro-tls.texi: Corrected example with %COMPAT. -2006-07-11 Simon Josefsson +2010-06-19 Nikos Mavrogiannopoulos - * doc/Makefile.am: Need -I's for arch/ images. + * doc/cha-intro-tls.texi: Added gnutls_sec_param_to_pk_bits() + discussion. -2006-07-11 Simon Josefsson +2010-06-19 Nikos Mavrogiannopoulos - * configure.in: Improve valgrind test. + * doc/cha-intro-tls.texi: corrected text on AES -2006-07-11 Simon Josefsson +2010-06-19 Nikos Mavrogiannopoulos - * gl/Makefile.am, gl/m4/absolute-header.m4, gl/m4/gnulib-cache.m4, - gl/m4/gnulib-comp.m4, gl/m4/onceonly_2_57.m4, gl/m4/stdint.m4: - Update. + * lib/pkcs11.c: Only save PIN if login was successful. -2006-07-10 Simon Josefsson +2010-06-19 Nikos Mavrogiannopoulos - * THANKS: Fix. + * doc/cha-auth.texi, lib/ext_signature.c: Applied patch by Andreas + Metzler -2006-07-10 Simon Josefsson +2010-06-19 Nikos Mavrogiannopoulos - * THANKS: Add. + * src/benchmark.c: Allow setting debug level via cmd. -2006-07-10 Simon Josefsson +2010-06-19 Nikos Mavrogiannopoulos - * src/cli.c: Fix load of pgp_keyfile, reported by Mario Lenz. + * lib/cryptodev.c: Explicitely terminate cryptodev sessions. -2006-07-10 Simon Josefsson +2010-06-19 Nikos Mavrogiannopoulos - * gl/.cvsignore: [no log message] + * lib/gnutls_hash_int.c, lib/gnutls_hash_int.h: Removed the no + longer needed "active" variable. -2006-07-07 Simon Josefsson +2010-06-18 Nikos Mavrogiannopoulos - * gl/Makefile.am, gl/getaddrinfo.c, gl/getaddrinfo.h, - gl/m4/absolute-header.m4, gl/m4/full-header-path.m4, - gl/m4/getpass.m4, gl/m4/gnulib-comp.m4, gl/m4/longlong.m4, - gl/m4/onceonly_2_57.m4, gl/m4/sockpfaf.m4, gl/m4/stdint.m4, - gl/m4/ulonglong.m4, gl/stdint_.h: Update. + * NEWS: documented some of the changes -2006-07-07 Nikos Mavrogiannopoulos +2010-06-18 Nikos Mavrogiannopoulos - * doc/bibliography.texi, doc/gnutls.texi: changed CRL rfc reference - from 2511 to 4211 + * lib/gnutls_cipher_int.c, lib/gnutls_cipher_int.h, + lib/gnutls_hash_int.c, lib/gnutls_hash_int.h: Greatly simplified the + internal hash/hmac and cipher functions. -2006-07-06 Simon Josefsson +2010-06-18 Nikos Mavrogiannopoulos - * doc/TODO: Add. + * lib/includes/gnutls/pkcs11.h, lib/pkcs11.c, + src/certtool-common.h, src/certtool-gaa.c, src/certtool-gaa.h, + src/certtool.gaa, src/pkcs11.c: Allow listing of private keys only. + Certtool has now the --pkcs11-list-privkeya option. -2006-07-05 Nikos Mavrogiannopoulos +2010-06-18 Nikos Mavrogiannopoulos - * doc/TODO: [no log message] + * lib/pkcs11_privkey.c: Send correct token name to callback. -2006-07-05 Nikos Mavrogiannopoulos +2010-06-18 Nikos Mavrogiannopoulos - * libextra/gnutls_openpgp.c: added an extra error check. + * lib/gnutls_errors.c, lib/includes/gnutls/gnutls.h.in, + lib/pkcs11.c, lib/pkcs11_int.h, lib/pkcs11_privkey.c, + lib/pkcs11_write.c: Added more gnutls errors to map closer to PKCS11 + actual errors. -2006-07-05 Nikos Mavrogiannopoulos +2010-06-17 Nikos Mavrogiannopoulos - * src/cli.c, src/common.c, src/serv.c: replaced USE_OPENPGP ifdefs - with ENABLE_OPENPGP. + * lib/gnutls_errors.c, lib/includes/gnutls/gnutls.h.in, + lib/includes/gnutls/pkcs11.h, lib/pkcs11.c, lib/pkcs11_int.h, + lib/pkcs11_privkey.c, lib/pkcs11_write.c, src/cli.c, src/common.c: + Added option to the PKCS11 PIN callback to save PIN if the token is + being used with a single pkcs11_privkey structure. -2006-06-29 Simon Josefsson +2010-06-17 Nikos Mavrogiannopoulos - * doc/protocol/draft-funk-tls-inner-application-extension-03.txt: - Add. + * lib/pkcs11_privkey.c: For Private key operations new sessions are + opened when are needed. This makes the usage of the PKCS11 API + thread safe. The only drawback is the requirement to enter PIN on + every operation. -2006-06-28 Simon Josefsson +2010-06-15 Simon Josefsson - * NEWS: Add. + * src/cli.c: gnutls-cli: Make --starttls work again. Problem introduced in patch to use read() instead of fgets() + committed on 2010-01-27. -2006-06-28 Simon Josefsson +2010-06-14 Nikos Mavrogiannopoulos - * doc/examples/.cvsignore: [no log message] + * src/certtool.c, tests/sha2/key-ca-dsa.pem, + tests/sha2/key-subca-dsa.pem, tests/sha2/sha2, tests/sha2/sha2-dsa: + Allow SHA224 hash in certtool. Added tests for SHA-256 and SHA-224 + for DSA. -2006-06-28 Simon Josefsson +2010-06-14 Nikos Mavrogiannopoulos - * NEWS: Fix. + * src/certtool.c: Do not warn multiple times for the deprecation of + --bits. -2006-06-28 Simon Josefsson +2010-06-14 Nikos Mavrogiannopoulos - * includes/Makefile.am: Only conditionally install gnutlsxx.h. + * lib/ext_session_ticket.c, lib/gnutls_handshake.c, + lib/gnutls_int.h, lib/gnutls_kx.c, lib/gnutls_mbuffers.c, + lib/gnutls_mbuffers.h, lib/gnutls_record.c: Appending data in + mbuffers is now cheaper by avoiding realloc, at the cost of + requiring to specify a maximum mbuffer size at creation. -2006-06-28 Simon Josefsson +2010-06-13 Nikos Mavrogiannopoulos - * doc/examples/Makefile.am: Build and dist ex-client-tlsia. + * lib/ext_safe_renegotiation.c: Removed unused functions. -2006-06-28 Simon Josefsson +2010-06-13 Nikos Mavrogiannopoulos - * doc/Makefile.am: Dist gnutls-logo.png. + * lib/gnutls_handshake.c, lib/gnutls_int.h: Combined the max ticket + length with the maximum extension data length. -2006-06-28 Simon Josefsson +2010-06-11 Nikos Mavrogiannopoulos - * gl/getaddrinfo.c, gl/m4/getaddrinfo.m4: Update. + * NEWS, doc/cha-gtls-app.texi, lib/auth_srp.c, lib/ext_cert_type.c, + lib/ext_cert_type.h, lib/ext_max_record.c, lib/ext_max_record.h, + lib/ext_oprfi.c, lib/ext_oprfi.h, lib/ext_safe_renegotiation.c, + lib/ext_safe_renegotiation.h, lib/ext_server_name.c, + lib/ext_server_name.h, lib/ext_session_ticket.c, + lib/ext_session_ticket.h, lib/ext_signature.c, lib/ext_signature.h, + lib/ext_srp.c, lib/ext_srp.h, lib/gnutls_buffers.c, + lib/gnutls_constate.c, lib/gnutls_extensions.c, + lib/gnutls_extensions.h, lib/gnutls_handshake.c, lib/gnutls_int.h, + lib/gnutls_kx.c, lib/gnutls_mbuffers.c, lib/gnutls_mbuffers.h, + lib/gnutls_record.c, lib/gnutls_session_pack.c, lib/gnutls_state.c, + lib/gnutls_str.c, lib/gnutls_str.h, lib/includes/gnutls/compat.h, + lib/includes/gnutls/gnutls.h.in, lib/libgnutls.map, lib/pkcs11.c, + lib/x509/dn.c, libextra/ext_inner_application.c, + libextra/ext_inner_application.h, libextra/gnutls_extra.c, + libextra/gnutls_ia.c, src/cli.c, src/serv.c, tests/Makefile.am, + tests/oprfi.c, tests/tlsia.c: Simplified and made more safe the + packing of data for session storage. Extensions use the internal API + to store/retrieve during resumption. Removed OPRFI since it was never standardized and was never actually + included in gnutls since it was in inactive ifdef. This was instead + of rewriting it to use the new API. -2006-06-28 Simon Josefsson +2010-06-11 Nikos Mavrogiannopoulos - * gl/getaddrinfo.c: Update. + * lib/gnutls_buffers.c, lib/gnutls_handshake.c, lib/gnutls_int.h, + lib/gnutls_str.c, lib/gnutls_str.h, lib/gnutls_supplemental.c, + lib/gnutls_supplemental.h, lib/openpgp/output.c, lib/pkcs11.c, + lib/x509/dn.c, lib/x509/output.c: The gnutls_string code was + simplified and integrated with the buffer to avoid having two named + for the same thing. -2006-06-28 Simon Josefsson +2010-06-11 Nikos Mavrogiannopoulos - * gl/Makefile.am, gl/getaddrinfo.c, gl/getaddrinfo.h, - gl/m4/getaddrinfo.m4, gl/m4/stdint.m4, gl/stdint_.h: Update. + * lib/pakchois/pakchois.c: Properly handle fork() case. -2006-06-28 Simon Josefsson +2010-06-09 Nikos Mavrogiannopoulos - * doc/protocol/draft-ietf-tls-srp-12.txt: Add. + * libextra/gnutls_extra.c: Register the md5 handler if gcrypt is in + fips mode once gnutls_global_init_extra() is called. -2006-06-27 Simon Josefsson +2010-06-09 Nikos Mavrogiannopoulos - * doc/protocol/draft-ietf-tls-rfc4346-bis-01.txt: Add. + * src/tests.c: corrected tests. -2006-06-27 Simon Josefsson +2010-06-09 Nikos Mavrogiannopoulos - * doc/scripts/gdoc: Use GNU-style warnings. + * lib/pakchois/pakchois.c, lib/pakchois/pakchois.h, lib/pkcs11.c: + Added new calls to pakchois to open an absolute filename. -2006-06-27 Simon Josefsson +2010-06-07 Nikos Mavrogiannopoulos - * doc/scripts/gdoc: Improve man output, from libtasn1. + * lib/includes/gnutls/pkcs11.h: Removed several comments that + pointed to Alon's implementation comments. We use inline C comments + to generate documentation (not doxygen). -2006-06-27 Simon Josefsson +2010-06-04 Nikos Mavrogiannopoulos - * configure.in: Fix valgrind test. + * lib/Makefile.am, lib/ext_session_ticket.c, + lib/gnutls_algorithms.c, lib/gnutls_buffers.c, + lib/gnutls_buffers.h, lib/gnutls_handshake.c, + lib/gnutls_handshake.h, lib/gnutls_int.h, lib/gnutls_kx.c, + lib/gnutls_mbuffers.c, lib/gnutls_record.c, lib/gnutls_state.c: More + fixes for the rebase. -2006-06-27 Simon Josefsson +2010-06-04 Nikos Mavrogiannopoulos - * configure.in: Move around, to make $cross_compile work. + * AUTHORS: Added Jonathan. -2006-06-27 Simon Josefsson +2010-06-04 Nikos Mavrogiannopoulos - * configure.in, tests/Makefile.am: Add --enable-valgrind-tests that - make it possible to enable/disable use of valgrind on self tests - specifically. Defaults to enabled if valgrind is installed and we - aren't cross-compiling. + * lib/pakchois/pakchois.c: Provider unref must be done after all + sessions have been closed. -2006-06-27 Simon Josefsson +2010-06-03 Nikos Mavrogiannopoulos - * tests/Makefile.am: Fix. + * lib/Makefile.am: Several fixes for the broken rebase. -2006-06-27 Simon Josefsson +2010-06-03 Nikos Mavrogiannopoulos - * tests/Makefile.am: Revert. + * doc/cha-intro-tls.texi: Merged with master. -2006-06-27 Simon Josefsson +2010-06-03 Nikos Mavrogiannopoulos - * libextra/minilzo/Makefile.am: Use libtool -no-install. + * lib/gnutls_handshake.c, lib/gnutls_mbuffers.h, + lib/gnutls_record.c: Some other changes to mbuffers to make gnutls + (a bit more) agnostic on their internal structure. -2006-06-27 Simon Josefsson +2010-06-03 Nikos Mavrogiannopoulos - * libextra/minilzo/Makefile.am: Use -DLZO_HAVE_CONFIG_H, as - suggested by README.LZO. + * lib/x509/verify.c: Corrected prefered hash algorithm return value + on RSA. -2006-06-27 Simon Josefsson +2010-06-03 Nikos Mavrogiannopoulos - * libextra/minilzo/Makefile.am, tests/Makefile.am: Work under mingw. + * lib/gnutls_global.c: Use GCRYCTL_ENABLE_QUICK_RANDOM when using + libgcrypt. -2006-06-27 Simon Josefsson +2010-05-31 Nikos Mavrogiannopoulos - * configure.in, lib/gnutls_buffers.c: Avoid warnings when casting - void* to int. + * .gitignore: Ignore more files. -2006-06-27 Simon Josefsson +2010-05-31 Nikos Mavrogiannopoulos - * lib/minitasn1/coding.c, lib/minitasn1/libtasn1.h: Update. + * tests/sha2/sha2-dsa: Remove the correct file -2006-06-26 Simon Josefsson +2010-05-31 Nikos Mavrogiannopoulos - * gl/Makefile.am, gl/m4/stdint.m4, gl/stdint_.h: Update. + * tests/sha2/key-ca-dsa.pem, tests/sha2/key-dsa.pem: Added missing + files. -2006-06-26 Simon Josefsson +2010-05-31 Nikos Mavrogiannopoulos - * THANKS: Add. + * lib/gnutls_pk.c, lib/gnutls_pk.h, lib/gnutls_pubkey.c, + lib/includes/gnutls/abstract.h, lib/includes/gnutls/x509.h, + lib/x509/crq.c, lib/x509/x509.c, src/certtool.c: The + get_preferred_hash_algorithm() functions have now an extra argument + to indicate whether it is mandatory to use this algorithm. -2006-06-26 Simon Josefsson +2010-05-31 Nikos Mavrogiannopoulos - * lib/gnutls.pc.in, libextra/gnutls-extra.pc.in: Add Libs.Private to - pkg-config files, from Andreas Metzler - . + * doc/examples/ex-crq.c, lib/includes/gnutls/x509.h, + lib/libgnutls.map, lib/x509/crq.c: Added + gnutls_x509_crq_get_preferred_hash_algorithm(). -2006-06-22 Simon Josefsson +2010-05-31 Nikos Mavrogiannopoulos - * gl/getaddrinfo.c, gl/getaddrinfo.h, gl/m4/getaddrinfo.m4, - gl/socket_.h: Try new win32 hooks for getaddrinfo. + * NEWS, lib/gnutls_pubkey.c, lib/includes/gnutls/abstract.h, + lib/includes/gnutls/x509.h, lib/libgnutls.map, lib/x509/privkey.c, + lib/x509/verify.c, lib/x509/x509.c, src/certtool.c: Added + gnutls_pubkey_get_preferred_hash_algorithm() and + gnutls_x509_crt_get_preferred_hash_algorithm() to allow determining + the hash algorithm to use during signing. This is needed in the case + of DSA that uses specific versions of SHA depending on the size of + the parameters. -2006-06-22 Simon Josefsson +2010-05-31 Nikos Mavrogiannopoulos - * configure.in: Use AC_LIBTOOL_WIN32_DLL to make OBJDUMP/DLLTOOL - work under mingw. Fix use of deprecated AM_PROG_LIBTOOL. + * doc/gnutls.texi, lib/Makefile.am, lib/build-aux/config.rpath, + lib/gcrypt/pk.c, lib/gnutls_privkey.c, lib/pkcs11.c, + lib/pkcs11_privkey.c, lib/x509/privkey.c, lib/x509/sign.c, + lib/x509/sign.h, lib/x509/verify.c, lib/x509/x509.c, src/pkcs11.c: + Several fixes after big rebase. -2006-06-21 Nikos Mavrogiannopoulos +2010-05-30 Nikos Mavrogiannopoulos - * doc/TODO: [no log message] + * tests/sha2/Makefile.am, tests/sha2/sha2-dsa: Test the DSA with + SHA256 as well. -2006-06-21 Simon Josefsson +2010-05-30 Nikos Mavrogiannopoulos - * gl/inet_pton.c: Update. + * lib/x509/mpi.c: Print debugging information on error. -2006-06-21 Simon Josefsson +2010-05-30 Nikos Mavrogiannopoulos - * gl/alloca_.h, gl/getaddrinfo.c, gl/inet_ntop.c, - gl/m4/getaddrinfo.m4, gl/m4/sockpfaf.m4, gl/m4/stdint.m4, - gl/read-file.c, gl/socket_.h, gl/stdint_.h: Update. + * NEWS, lib/gcrypt/pk.c, lib/gnutls_pk.c, lib/gnutls_sig.c, + lib/nettle/mpi.c, lib/nettle/pk.c, lib/opencdk/pubkey.c, + lib/opencdk/sig-check.c, lib/opencdk/verify.c, + lib/openpgp/gnutls_openpgp.c, lib/openpgp/pgp.c, + lib/openpgp/privkey.c, lib/pkcs11_privkey.c, lib/x509/privkey.c, + lib/x509/x509_int.h: Nettle library can now parse the PGP integers. + Except for SHA-224/384/512 nettle seems to be fully working now. -2006-06-21 Simon Josefsson +2010-05-30 Nikos Mavrogiannopoulos - * doc/examples/Makefile.am: Add -no-install. + * src/certtool.c: use --sec-param to generate privkey. -2006-06-21 Simon Josefsson +2010-05-30 Nikos Mavrogiannopoulos - * doc/reference/Makefile.am: Look for gnutls.h in builddir. + * tests/openpgpself.c: reduced log level to a sane one -2006-06-19 Simon Josefsson +2010-05-30 Nikos Mavrogiannopoulos - * libextra/Makefile.am: Need -I$builddir/gl for alloca.h when srcdir - != objdir. + * tests/pathlen/ca-no-pathlen.pem, + tests/pathlen/no-ca-or-pathlen.pem: Corrected for new output of + --print-certificate-info -2006-06-19 Simon Josefsson +2010-05-30 Nikos Mavrogiannopoulos - * libextra/openpgp/Makefile.am: Need -I$builddir/gl for alloca.h - when srcdir != objdir. + * tests/sha2/sha2: Print information on failure. -2006-06-19 Simon Josefsson +2010-05-30 Nikos Mavrogiannopoulos - * lib/x509/Makefile.am: Need -I$builddir/gl for alloca.h when srcdir - != objdir. + * lib/libgnutls.map, src/certtool.c: Print exp1 and exp2 if they are + available. -2006-06-19 Simon Josefsson +2010-05-30 Nikos Mavrogiannopoulos - * src/Makefile.am: Need -I$builddir/gl for alloca.h when srcdir != - objdir. + * tests/pkcs1-padding/pkcs1-pad, tests/pkcs12-decode/pkcs12, + tests/pkcs8-decode/pkcs8, tests/userid/userid: Only print output if + something fails -2006-06-19 Simon Josefsson +2010-05-30 Nikos Mavrogiannopoulos - * lib/Makefile.am: Need -I$builddir/gl for alloca.h when srcdir != - objdir. + * lib/m4/hooks.m4, lib/pakchois/pakchois.c: Some pakchois fixes. -2006-06-17 Simon Josefsson +2010-05-30 Nikos Mavrogiannopoulos - * gl/Makefile.am: Update. + * lib/gnutls_global.c: Fixup to compile with nettle -2006-06-17 Simon Josefsson +2010-05-29 Nikos Mavrogiannopoulos - * gl/Makefile.am, gl/arpa_inet_.h, gl/inet_ntop.c, gl/inet_ntop.h, - gl/inet_pton.c, gl/inet_pton.h, gl/m4/arpa_inet_h.m4, - gl/m4/full-header-path.m4, gl/m4/gnulib-cache.m4, - gl/m4/gnulib-comp.m4, gl/m4/inet_ntop.m4, gl/m4/inet_pton.m4, - gl/m4/size_max.m4, gl/m4/stdint.m4, gl/read-file.c, gl/size_max.h, - gl/stdint_.h: Update. + * lib/m4/hooks.m4: Do not bother with MODPATH. We don't use it. -2006-06-17 Simon Josefsson +2010-05-29 Nikos Mavrogiannopoulos - * gl/.cvsignore: [no log message] + * lib/debug.c, lib/debug.h: Added again _gnutls_dump_mpi() to assist + in debugging. -2006-06-17 Simon Josefsson +2010-05-29 Nikos Mavrogiannopoulos - * doc/protocol/draft-badra-hajjeh-mtls-01.txt: Add + * tests/pkcs12_encode.c: Added debugging -2006-06-16 Simon Josefsson +2010-05-29 Nikos Mavrogiannopoulos - * doc/protocol/draft-ietf-tls-ctr-01.txt: Add. + * lib/gnutls_sig.c: Allow DSA with other than SHA1 algorithms in + TLS. -2006-06-16 Nikos Mavrogiannopoulos +2010-05-29 Nikos Mavrogiannopoulos - * NEWS: [no log message] + * lib/pkix_asn1_tab.c: removed more stuff. -2006-06-16 Nikos Mavrogiannopoulos +2010-05-29 Nikos Mavrogiannopoulos - * lib/auth_cert.c: fixed bug + * lib/pkix.asn, lib/x509/common.c: LocalKeyId and XmppAddr were + incorporated. -2006-06-16 Simon Josefsson +2010-05-29 Nikos Mavrogiannopoulos - * tests/Makefile.am: Disable tests that use fork if the host doesn't - have fork. + * lib/pkix.asn, lib/pkix_asn1_tab.c: No need for those OIDs any + more. -2006-06-16 Simon Josefsson +2010-05-29 Nikos Mavrogiannopoulos - * configure.in: Test for fork. + * tests/dn2.c: Corrected to support new EV_ values. -2006-06-16 Simon Josefsson +2010-05-29 Nikos Mavrogiannopoulos - * configure.in: Typo. + * tests/crq_key_id.c, tests/cve-2009-1416.c, tests/pkcs12_s2k_pem.c: + avoid calling gcrypt directly. -2006-06-16 Simon Josefsson +2010-05-29 Nikos Mavrogiannopoulos - * configure.in: Typo. + * NEWS, lib/includes/gnutls/crypto.h, lib/libgnutls.map, + lib/random.c, lib/random.h, src/crypt.c, src/psk.c, + tests/mini-eagain.c: exported gnutls_rnd(). -2006-06-16 Simon Josefsson +2010-05-29 Nikos Mavrogiannopoulos - * configure.in: Fix LDFLAGS. + * lib/x509/common.c, lib/x509/common.h, lib/x509/dn.c: The + recognition of DN elements is now self contained. It does not need + entries in pkix.asn. -2006-06-16 Simon Josefsson +2010-05-29 Nikos Mavrogiannopoulos - * configure.in: Use LDFLAGS for --enable-runtime-pseudo-reloc, to - avoid warnings. + * lib/pkix.asn, lib/pkix_asn1_tab.c, lib/x509/common.c: Added + support for EV certificate attributes. -2006-06-16 Simon Josefsson +2010-05-29 Nikos Mavrogiannopoulos - * tests/anonself.c, tests/dhepskself.c, tests/pskself.c, - tests/resume.c, tests/tlsia.c: Need config.h. + * lib/m4/hooks.m4, lib/nettle/cipher.c: Fixed nettle detection and + AES. -2006-06-16 Simon Josefsson +2010-05-29 Nikos Mavrogiannopoulos - * configure.in: Workaround hard-wiring of gcrypt test in gnulib. + * lib/gnutls_dh_primes.c: documentation updates -2006-06-16 Simon Josefsson +2010-05-29 Nikos Mavrogiannopoulos - * NEWS: Fix. + * src/certtool-common.h, src/certtool.c, src/prime.c: Generate + dh-params also used --sec-param. -2006-06-16 Simon Josefsson +2010-05-29 Nikos Mavrogiannopoulos - * includes/gnutls/extra.h: Fix prototype. + * lib/nettle/mpi.c: Document that the generator is the generator of + the subgroup and not the group. -2006-06-16 Simon Josefsson +2010-05-29 Nikos Mavrogiannopoulos - * NEWS: Add. + * src/cli.c: Corrected certificate callback. -2006-06-16 Simon Josefsson +2010-05-28 Nikos Mavrogiannopoulos - * lib/strfile.h: Remove. + * lib/gcrypt/Makefile.am, lib/nettle/Makefile.am, + lib/nettle/cipher.c: More AES stuff (still doesn't work). -2006-06-16 Simon Josefsson +2010-05-28 Nikos Mavrogiannopoulos - * configure.in, lib/Makefile.am, lib/gnutls_x509.c, - libextra/gnutls_openpgp.c: Use read_binary_file from gnulib instead - of strfile stuff, to fix problem with binary files on mingw. + * lib/nettle/pk.c: Correction in RSA encryption. -2006-06-16 Simon Josefsson +2010-05-28 Nikos Mavrogiannopoulos - * tests/set_pkcs12_cred.c: Use utils stuff. + * lib/nettle/cipher.c: Fixed issue with AES. -2006-06-16 Simon Josefsson +2010-05-28 Nikos Mavrogiannopoulos - * lib/gnutls_global.c: Initialize winsock, for mingw. + * NEWS, lib/gnutls_algorithms.c, lib/includes/gnutls/gnutls.h.in, + lib/libgnutls.map, lib/openpgp/output.c, lib/x509/output.c, + lib/x509/privkey.c, src/certtool-gaa.c, src/certtool-gaa.h, + src/certtool.c, src/certtool.gaa: Added + gnutls_sec_param_to_pk_bits() et al. to allow select bit sizes for + private keys using a human understandable scale. -2006-06-16 Simon Josefsson +2010-05-28 Nikos Mavrogiannopoulos - * configure.in: Add HAVE_WINSOCK. + * NEWS, lib/gnutls_algorithms.c, lib/includes/gnutls/gnutls.h.in, + lib/x509/common.h: Added support for SHA224 and SHA256 in DSA. -2006-06-16 Simon Josefsson +2010-05-28 Nikos Mavrogiannopoulos - * doc/examples/ex-alert.c, doc/examples/ex-cert-select.c, - doc/examples/ex-client-resume.c, doc/examples/ex-client-srp.c, - doc/examples/ex-client-tlsia.c, doc/examples/ex-client1.c, - doc/examples/ex-client2.c, doc/examples/ex-crq.c, - doc/examples/ex-pkcs12.c, doc/examples/ex-rfc2818.c, - doc/examples/ex-serv-anon.c, doc/examples/ex-serv-export.c, - doc/examples/ex-serv-pgp.c, doc/examples/ex-serv-srp.c, - doc/examples/ex-serv1.c, doc/examples/ex-session-info.c, - doc/examples/ex-verify.c, doc/examples/ex-x509-info.c, - doc/examples/tcp.c: Include config.h, don't include netinet/in.h - (for mingw). + * lib/m4/hooks.m4: Always use included pakchois. -2006-06-16 Simon Josefsson +2010-05-27 Nikos Mavrogiannopoulos - * configure.in: Need to use AC_LINK_IFELSE, for - -Wl,--enable-runtime-pseudo-reloc. + * doc/examples/ex-cert-select-pkcs11.c: make sure all lines fit in + page. -2006-06-16 Simon Josefsson +2010-05-26 Nikos Mavrogiannopoulos - * configure.in: Simplify. + * doc/cha-cert-auth.texi: make example more compact by removing + error checking. -2006-06-16 Simon Josefsson +2010-05-26 Nikos Mavrogiannopoulos - * configure.in: Fix typo. + * doc/cha-bib.texi, doc/cha-cert-auth.texi: Added bibliographic + reference to PKCS #11. -2006-06-16 Simon Josefsson +2010-05-26 Nikos Mavrogiannopoulos - * configure.in: Set -mms-bitfields -Wl,--enable-runtime-pseudo-reloc - if supported. The former is to produce MSVS-compatible DLLs. The - second is needed to link libgnutls-extra at all (only due to - _gnutls_compression_algorithms, fix it another way?). + * doc/cha-cert-auth.texi: Added sketch for PKCS #11 usage. -2006-06-16 Simon Josefsson +2010-05-26 Nikos Mavrogiannopoulos - * gl/Makefile.am: Update. + * doc/credentials/x509-server-dsa.pem, + doc/credentials/x509-server-key-dsa.pem: Added 2048 bit DSA key -2006-06-16 Simon Josefsson +2010-05-26 Nikos Mavrogiannopoulos - * gl/arpa_inet_.h, gl/inet_pton.c: Update. + * lib/opencdk/armor.c, lib/opencdk/read-packet.c, + lib/opencdk/stream.c, lib/opencdk/write-packet.c: Increased log + level of several messages. -2006-06-16 Simon Josefsson +2010-05-25 Nikos Mavrogiannopoulos - * configure.in: Typo. + * doc/credentials/x509/key.pem: Corrected coefficient and exp[12] + values in key. -2006-06-16 Simon Josefsson +2010-05-25 Nikos Mavrogiannopoulos - * configure.in: Add all the LZO tests. + * lib/nettle/pk.c: Added blinding in RSA. Correct broken private + keys on import. Nettle uses more values than gcrypt does from RSA + decryption and it seemed that some values in our stored private keys + were messy (generated by very old gnutls). -2006-06-15 Simon Josefsson +2010-05-24 Nikos Mavrogiannopoulos - * po/sv.po: Sync with TP. + * doc/examples/ex-cert-select-pkcs11.c, lib/gnutls_x509.c, + lib/includes/gnutls/pkcs11.h, lib/pkcs11.c, lib/pkcs11_int.h, + lib/pkcs11_privkey.c, lib/pkcs11_write.c, src/cli.c: Simplified + internal API. The only question that remains now is how to handle + the gnutls_pkcs11_privkey_t. Currently it opens a session and + maintains a handle to the object. This will require locks to be + added on operations. Alternatively new sessions may be opened for + each operation performed. This is guarranteed by PKCS #11 to be + thread safe but will of course require to ask for the PIN again. -2006-06-15 Simon Josefsson +2010-05-24 Nikos Mavrogiannopoulos - * configure.in: AC_PROG_CXX must be invoked unconditionally, for - libtool. (argh!) + * lib/pakchois/pakchois.c: Removed debugging print. -2006-06-15 Simon Josefsson +2010-05-24 Nikos Mavrogiannopoulos - * lib/Makefile.am: Fix last commit. + * lib/Makefile.am, lib/configure.ac, lib/m4/hooks.m4, + lib/pakchois/errors.c, lib/pakchois/pakchois.c, + lib/pakchois/pakchois.h, lib/pakchois/pakchois11.h: Added a modified + pakchois library (to open arbitrary pkcs11 modules). Current gnutls + works only with this one. -2006-06-15 Simon Josefsson +2010-05-24 Nikos Mavrogiannopoulos - * lib/Makefile.am: Make C++ stuff conditioned on ENABLE_CXX. + * doc/cha-gtls-app.texi: Added missing file. -2006-06-15 Simon Josefsson +2010-05-24 Nikos Mavrogiannopoulos - * configure.in: Add --disable-cxx, to make it possibly to disable - the C++ stuff. Will also automatically disable it if there is no - C++ compiler. + * doc/TODO: Removed finished items. -2006-06-15 Simon Josefsson +2010-05-24 Nikos Mavrogiannopoulos - * doc/examples/Makefile.am: Use gnulib, for portability. + * lib/pkcs11_write.c: Noted that there things to be done. -2006-06-15 Simon Josefsson +2010-05-24 Nikos Mavrogiannopoulos - * src/common.h: Don't include inet_ntop.h, use arpa/inet.h - unconditonially. + * doc/Makefile.am, doc/cha-cert-auth.texi: Added documentation on + abstract types. -2006-06-15 Simon Josefsson +2010-05-23 Nikos Mavrogiannopoulos - * gl/m4/arpa_inet_h.m4: Update. + * lib/gcrypt/pk.c, lib/gnutls_pk.c, lib/gnutls_pk.h, + lib/opencdk/pubkey.c, lib/openpgp/privkey.c, lib/x509/privkey.c: + Common code for calculation of RSA exp1 and exp2. Also update the + openpgp code to calculate those values. -2006-06-15 Simon Josefsson +2010-05-23 Nikos Mavrogiannopoulos - * gl/Makefile.am, gl/arpa_inet_.h, gl/inet_ntop.c, gl/inet_ntop.h, - gl/inet_pton.c, gl/m4/arpa_inet_h.m4, gl/m4/gnulib-cache.m4, - gl/m4/gnulib-comp.m4, gl/m4/inet_ntop.m4: Try new arpa-inet module, - for mingw. + * lib/auth_dh_common.c, lib/gnutls_dh_primes.c, lib/x509/privkey.c: + More fixes. -2006-06-14 Simon Josefsson +2010-05-23 Nikos Mavrogiannopoulos - * configure.in: Remove mingw32 hook to get -lwsock32, the - getaddrinfo gnulib module links with -lws2_32 which is the more - appropriate library to use (winsock.h goes with wsock32.lib and - winsock2.h goes with ws2_32, of which the latter is backwards - compatible and available since Windows 3.11 or so, I'm told). + * lib/auth_dh_common.c, lib/gcrypt/mpi.c, lib/gnutls_mpi.c: + Corrected nicely hidden bug that caused accesses to uninitialized + variables if the gcry_mpi_print() functions were pessimists and + returned more size than actually needed for the print. -2006-06-14 Simon Josefsson +2010-05-23 Nikos Mavrogiannopoulos - * tests/certder.c: fix + * lib/gcrypt/pk.c: Added some sanity checks. -2006-06-12 Simon Josefsson +2010-05-23 Nikos Mavrogiannopoulos - * gl/Makefile.am, gl/gc-gnulib.c, gl/m4/gnulib-cache.m4, - gl/m4/gnulib-comp.m4, gl/m4/read-file.m4, gl/read-file.c, - gl/read-file.h: Update. + * NEWS, doc/cha-auth.texi, doc/cha-bib.texi, + doc/cha-cert-auth.texi, doc/cha-ciphersuites.texi, + doc/cha-copying.texi, doc/cha-functions.texi, + doc/cha-internals.texi, doc/cha-intro-tls.texi, + doc/cha-library.texi, doc/cha-preface.texi, doc/cha-programs.texi, + doc/cha-tls-app.texi, doc/gnutls.texi, + lib/includes/gnutls/pkcs11.h, lib/libgnutls.map, lib/pkcs11.c: + Documentation updates. Separated big gnutls.texi to chapter to allow + easier maintainance. -2006-06-10 Simon Josefsson +2010-05-23 Nikos Mavrogiannopoulos - * configure.in: Bump so version. + * lib/Makefile.am, lib/gcrypt/mpi.c, lib/gcrypt/pk.c, + lib/includes/gnutls/crypto.h, lib/includes/gnutls/pkcs11.h, + lib/includes/gnutls/x509.h, lib/libgnutls.map, lib/nettle/pk.c, + lib/pkcs11.c, lib/pkcs11_int.h, lib/pkcs11_privkey.c, + lib/pkcs11_write.c, lib/x509/privkey.c, lib/x509/x509_int.h, + src/certtool-common.h, src/certtool-gaa.c, src/certtool-gaa.h, + src/certtool.c, src/certtool.gaa, src/crypt-gaa.c, src/pkcs11.c: + Added support to copy certificates and private keys to tokens. New + functions: gnutls_pkcs11_copy_x509_crt() + gnutls_pkcs11_copy_x509_privkey() gnutls_pkcs11_delete_url() Certtool was updated to allow copying certificates and private keys + to tokens. Deleting an object has issues (segfault) but it seems to + be related with libopensc and its pkcs11 API. -2006-06-08 Simon Josefsson +2010-05-22 Nikos Mavrogiannopoulos - * doc/reference/Makefile.am: Add gnutlsxx.h. + * lib/x509/verify.c: Added gnutls_pubkey_verify_hash(), + gnutls_pubkey_get_verify_algorithm(). -2006-06-07 Simon Josefsson +2010-05-22 Nikos Mavrogiannopoulos - * gl/getpass.c, gl/m4/stdbool.m4, gl/printf-args.c, gl/sha1.c, - gl/stdint_.h: Update. + * lib/pkcs11.c, src/pkcs11.c: Added gnutls_pubkey_import_pkcs11(), + gnutls_pubkey_import_rsa_raw(), gnutls_pubkey_import_dsa_raw(), + gnutls_pkcs11_obj_export(). -2006-06-07 Simon Josefsson +2010-05-22 Nikos Mavrogiannopoulos - * doc/protocol/draft-ietf-tls-openpgp-keys-10.txt: Add. + * NEWS: Tried to document recent changes. -2006-06-01 Nikos Mavrogiannopoulos +2010-05-22 Nikos Mavrogiannopoulos - * NEWS, configure.in, includes/Makefile.am, - includes/gnutls/gnutlsxx.h, lib/Makefile.am, lib/gnutls_db.c, - lib/gnutlsxx.cpp: Added a preliminary C++ interface. + * lib/gnutls_x509.c, lib/pkcs11.c, lib/pkcs11_int.h, + src/certtool-gaa.c, src/certtool.gaa, src/pkcs11.c: Added + gnutls_pubkey_t abstract type to handle public keys. It can + currently import/export public keys from existing certificate types + as well as from PKCS #11 URL. This allows generating a certificate + or certificate request from a given public key (currently one could + only generate them from a given private key). PKCS#11 API augmented to allow reading arbitrary objects instead of + just certificates. Certtool updated to list those objects. -2006-06-01 Simon Josefsson +2010-05-22 Nikos Mavrogiannopoulos - * doc/protocol/draft-housley-tls-authz-extns-06.txt: Add. + * lib/pkcs11.c: Added gnutls_pkcs11_token_get_flags() to distinguish + between hardware and soft tokens. -2006-05-23 Simon Josefsson +2010-05-21 Nikos Mavrogiannopoulos - * doc/protocol/draft-housley-tls-authz-extns-05.txt: Add. + * lib/Makefile.am: Added support for libnettle backend. This uses + gmp for big number operations. It is not currently completed. It + lacks RSA blinding as well as optimizations. -2006-05-23 Simon Josefsson +2010-05-18 Nikos Mavrogiannopoulos - * po/LINGUAS, po/sv.po: Sync with TP. + * lib/x509/sign.c: Corrected bug in DSA signature generation. -2006-05-22 Simon Josefsson +2010-05-18 Nikos Mavrogiannopoulos - * doc/manpages/certtool.1: Typo, from debian #368323. + * lib/x509/x509_int.h: Added operations to sign CRLs, certificates + and requests with an abstract key and thus with a PKCS #11 key as + well. -2006-05-18 Simon Josefsson +2010-05-18 Nikos Mavrogiannopoulos - * doc/protocol/draft-ietf-tls-srp-11.txt: Add. + * lib/includes/gnutls/privkey.h: privkey.h -> abstract.h -2006-05-17 Simon Josefsson +2010-05-18 Nikos Mavrogiannopoulos - * doc/protocol/rfc4507.txt: Add. + * lib/gnutls_x509.c: The gnutls-cli --x509cafile can now be a PKCS + #11 URL. It can read gnome-keyring's certificates and use them in + the trusted list. -2006-05-17 Simon Josefsson +2010-05-16 Nikos Mavrogiannopoulos - * NEWS, configure.in: Bump versions. + * lib/gnutls_x509.c: Corrections in openpgp private key usage. -2006-05-15 Simon Josefsson +2010-05-16 Nikos Mavrogiannopoulos - * ChangeLog: [no log message] + * tests/x509self.c: Updated self tests and examples to avoid using + deprecated functions such as + gnutls_certificate_server_set_retrieve_function and the sign + callback. -2006-05-15 Simon Josefsson +2010-05-16 Nikos Mavrogiannopoulos - * NEWS: Version 1.4.0. + * lib/includes/gnutls/privkey.h, lib/pkcs11_int.h: Added + documentation for most of the new functions. -2006-05-15 Simon Josefsson +2010-05-16 Nikos Mavrogiannopoulos - * doc/protocol/draft-ietf-tls-openpgp-keys-09.txt: Add. + * lib/pkcs11.c: Documented that it was initially based on neon + pkcs11 and got ideas from pkcs11-helper library. -2006-05-15 Simon Josefsson +2010-05-15 Nikos Mavrogiannopoulos - * src/certtool-cfg.c: Remove duplicated #include. + * lib/pkcs11.c: Corrections to properly handle token removal and + insert. -2006-05-12 Simon Josefsson +2010-05-15 Nikos Mavrogiannopoulos - * src/serv.c, src/tls_test.c: Don't use AI_NUMERICSERV, it doesn't - exist on most platforms. + * lib/Makefile.am, lib/gnutls_x509.c, lib/includes/gnutls/pkcs11.h, + lib/includes/gnutls/privkey.h, lib/pkcs11.c, lib/x509/sign.c: Added + gnutls_pkcs11_privkey_t and gnutls_privkey_t types. Those are an + abstract private key type that can be used to sign/encrypt any + private key of pkcs11,x509 or openpgp types. Added support for + PKCS11 in gnutls-cli/gnutls-serv. -2006-05-12 Simon Josefsson +2010-05-10 Nikos Mavrogiannopoulos - * NEWS: Add. + * src/certtool.c, src/pkcs11.c: Added several helper functions, to + allow printing of tokens. -2006-05-12 Simon Josefsson +2010-05-10 Nikos Mavrogiannopoulos - * src/serv.c: Need getaddrinfo.h. + * lib/pkcs11.c, src/certtool-gaa.c, src/certtool.c, + src/certtool.gaa, src/pkcs11.c: Added ability to export certificates + from PKCS #11 tokens. Added ability to list trusted certificates, + or only certificates with a corresponding private key or just all. -2006-05-12 Simon Josefsson +2010-05-09 Nikos Mavrogiannopoulos - * gl/Makefile.am, gl/gai_strerror.c, gl/getaddrinfo.c, - gl/getaddrinfo.h, gl/m4/getaddrinfo.m4, gl/m4/gnulib-cache.m4, - gl/m4/gnulib-comp.m4, gl/m4/strdup.m4, gl/strdup.c, gl/strdup.h: Add - getaddrinfo. + * lib/Makefile.am, lib/configure.ac, lib/includes/gnutls/pkcs11.h, + lib/pkcs11.c, src/certtool-gaa.c, src/certtool-gaa.h, + src/certtool.gaa, src/pkcs11.c: Added initial PKCS #11 support. + Certtool can now print lists of certificates available in system. -2006-05-11 Simon Josefsson +2010-05-22 Nikos Mavrogiannopoulos - * buildconf: Remove. + * NEWS, lib/gnutls_pubkey.c, lib/includes/gnutls/abstract.h, + lib/libgnutls.map, lib/x509/common.h, lib/x509/verify.c, + lib/x509/x509.c, lib/x509/x509_int.h: Added + gnutls_pubkey_verify_hash(), gnutls_pubkey_get_verify_algorithm(). -2006-05-11 Simon Josefsson +2010-05-22 Nikos Mavrogiannopoulos - * tests/Makefile.am: No supression file. + * NEWS, configure.ac, lib/gnutls_pubkey.c, + lib/includes/gnutls/abstract.h, lib/includes/gnutls/pkcs11.h, + lib/libgnutls.map, lib/pkcs11.c, lib/pkcs11_int.h, lib/x509/x509.c, + src/pkcs11.c: Added gnutls_pubkey_import_pkcs11(), + gnutls_pubkey_import_rsa_raw(), gnutls_pubkey_import_dsa_raw(), + gnutls_pkcs11_obj_export(). -2006-05-11 Simon Josefsson +2010-05-22 Nikos Mavrogiannopoulos - * libextra/gnutls_ia.c: Remove junk. + * .gitignore: Ignore files that should be ignored. -2006-05-11 Simon Josefsson +2010-05-22 Nikos Mavrogiannopoulos - * lib/ext_inner_application.c: Fix self tests. + * NEWS, src/certtool-gaa.c, src/certtool.gaa: Tried to document + recent changes. -2006-05-11 Simon Josefsson +2010-05-22 Nikos Mavrogiannopoulos - * libextra/gnutls_ia.c: Indent. + * lib/Makefile.am, lib/gnutls_pubkey.c, lib/gnutls_x509.c, + lib/includes/gnutls/abstract.h, lib/includes/gnutls/pkcs11.h, + lib/libgnutls.map, lib/pkcs11.c, lib/pkcs11_int.h, + lib/pkcs11_privkey.c, lib/x509/common.c, lib/x509/common.h, + lib/x509/mpi.c, lib/x509/x509.c, lib/x509/x509_int.h, + src/certtool-common.h, src/certtool-gaa.c, src/certtool-gaa.h, + src/certtool.c, src/certtool.gaa, src/pkcs11.c: Added + gnutls_pubkey_t abstract type to handle public keys. It can + currently import/export public keys from existing certificate types + as well as from PKCS #11 URL. This allows generating a certificate + or certificate request from a given public key (currently one could + only generate them from a given private key). PKCS#11 API augmented to allow reading arbitrary objects instead of + just certificates. Certtool updated to list those objects. -2006-05-11 Simon Josefsson +2010-05-22 Nikos Mavrogiannopoulos - * doc/manpages/Makefile.am: Update. + * lib/includes/gnutls/pkcs11.h, lib/pkcs11.c: Added + gnutls_pkcs11_token_get_flags() to distinguish between hardware and + soft tokens. -2006-05-11 Simon Josefsson +2010-05-22 Nikos Mavrogiannopoulos - * tests/Makefile.am: Improve valgrind stuff. + * lib/Makefile.am, lib/libgnutlsxx.map, lib/m4/hooks.m4: Export all + symbols from C++ library. This library doesn't contain any internal + symbols anyway and there is no reason to mess with the C++ ABI that + hasn't got the problems of C. -2006-05-11 Simon Josefsson +2010-05-21 Nikos Mavrogiannopoulos - * .cvsignore: [no log message] + * configure.ac, doc/examples/ex-serv-export.c, + doc/examples/ex-serv-psk.c, doc/examples/ex-serv1.c, + lib/Makefile.am, lib/auth_srp.c, lib/cipher-libgcrypt.c, + lib/configure.ac, lib/gcrypt/Makefile.am, lib/gcrypt/cipher.c, + lib/gcrypt/mac.c, lib/gcrypt/mpi.c, lib/gcrypt/pk.c, + lib/gcrypt/rnd.c, lib/gnutls_global.c, lib/gnutls_mpi.c, + lib/gnutls_srp.c, lib/m4/hooks.m4, lib/mac-libgcrypt.c, + lib/mpi-libgcrypt.c, lib/nettle/Makefile.am, lib/nettle/cipher.c, + lib/nettle/mac.c, lib/nettle/mpi.c, lib/nettle/pk.c, + lib/nettle/rnd.c, lib/pk-libgcrypt.c, lib/rnd-libgcrypt.c, + src/certtool.c, src/cli.c, src/serv.c, tests/chainverify.c: Added + support for libnettle backend. This uses gmp for big number + operations. It is not currently completed. It lacks RSA blinding as + well as optimizations. -2006-05-11 Simon Josefsson +2010-05-18 Nikos Mavrogiannopoulos - * config.rpath: Not needed, generated by autopoint. + * doc/manpages/gnutls-cli.1, src/cli-gaa.c, src/cli.gaa, + src/serv-gaa.c, src/serv.gaa: Documented that the --file options in + gnutls-cli and gnutls-serv can accept a PKCS #11 URL. -2006-05-11 Simon Josefsson +2010-05-18 Nikos Mavrogiannopoulos - * config.rpath, gl/Makefile.am, gl/des.c, gl/m4/gnulib-cache.m4, - gl/m4/gnulib-comp.m4, gl/md4.c, gl/sha1.c, gl/stdint_.h: Update. + * lib/x509/sign.c: Corrected bug in DSA signature generation. -2006-05-11 Nikos Mavrogiannopoulos +2010-05-18 Nikos Mavrogiannopoulos - * lib/auth_cert.c: updated to reflect the new openpgp draft. + * lib/gnutls_privkey.c, lib/includes/gnutls/abstract.h, + lib/libgnutls.map, lib/x509/crl_write.c, lib/x509/crq.c, + lib/x509/mpi.c, lib/x509/sign.c, lib/x509/x509_int.h, + lib/x509/x509_write.c: Added operations to sign CRLs, certificates + and requests with an abstract key and thus with a PKCS #11 key as + well. -2006-05-11 Simon Josefsson +2010-05-18 Nikos Mavrogiannopoulos - * configure.in: Check for -Wno-pointer-sign, taken from Werner's - ksba. + * lib/auth_cert.c, lib/auth_cert.h, lib/gnutls_privkey.c, + lib/gnutls_sig.h, lib/gnutls_x509.h, + lib/includes/gnutls/abstract.h, lib/includes/gnutls/privkey.h, + lib/openpgp/gnutls_openpgp.h: privkey.h -> abstract.h -2006-05-10 Simon Josefsson +2010-05-18 Nikos Mavrogiannopoulos - * NEWS, doc/protocol/draft-santesson-tls-ume-07.txt: Add. + * lib/Makefile.am, lib/configure.ac, lib/gnutls_x509.c, src/cli.c: + The gnutls-cli --x509cafile can now be a PKCS #11 URL. It can read + gnome-keyring's certificates and use them in the trusted list. -2006-05-10 Simon Josefsson +2010-05-16 Nikos Mavrogiannopoulos - * configure.in: Bump required libtasn1. + * lib/pkcs11.c: Documented that gnutls_global_init calls + gnutls_pkcs11_init. -2006-05-10 Simon Josefsson +2010-05-16 Nikos Mavrogiannopoulos - * lib/minitasn1/coding.c, lib/minitasn1/decoding.c, - lib/minitasn1/element.c, lib/minitasn1/errors.c, - lib/minitasn1/gstr.c, lib/minitasn1/libtasn1.h, - lib/minitasn1/parser_aux.c, lib/minitasn1/parser_aux.h, - lib/minitasn1/structure.c: Update to 0.3.4. + * src/cli.c: Only send termination request to avoid stalling on + servers that do not reply. -2006-05-07 Simon Josefsson +2010-05-16 Nikos Mavrogiannopoulos - * configure.in: Bump required libtasn1 version to 0.3.3. + * lib/gnutls_handshake.c, lib/gnutls_state.c, lib/gnutls_state.h: + Corrected issue on the %SSL3_RECORD_VERSION priority string. It now + works even when resuming a session. -2006-05-07 Simon Josefsson +2010-05-16 Nikos Mavrogiannopoulos - * tests/Makefile.am: Fix. + * doc/examples/Makefile.am, doc/examples/ex-cert-select-pkcs11.c, + doc/gnutls.texi: Added initial example. -2006-05-07 Simon Josefsson +2010-05-16 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/auth_cert.h, lib/gnutls_x509.c, lib/openpgp/gnutls_openpgp.c: + Corrections in openpgp private key usage. -2006-05-07 Simon Josefsson +2010-05-16 Nikos Mavrogiannopoulos - * tests/Makefile.am: Run tests under valgrind. + * doc/examples/ex-cert-select.c, tests/Makefile.am, + tests/pkcs12_s2k.c, tests/x509dn.c, tests/x509signself.c: Updated + self tests and examples to avoid using deprecated functions such as + gnutls_certificate_server_set_retrieve_function and the sign + callback. -2006-05-07 Nikos Mavrogiannopoulos +2010-05-16 Nikos Mavrogiannopoulos - * src/cli.c, src/serv.c, src/tls_test.c: some changes for IPv6. - Based on patch by Remi Denis-Courmont, sent to Debian bug tracking - system. + * lib/gnutlsxx.cpp, lib/includes/gnutls/gnutlsxx.h, src/tests.c: Use + the new callback function. -2006-05-05 Simon Josefsson +2010-05-16 Nikos Mavrogiannopoulos - * doc/protocol/draft-housley-tls-authz-extns-04.txt: Add. + * lib/gnutls_privkey.c, lib/includes/gnutls/pkcs11.h, + lib/includes/gnutls/privkey.h, lib/libgnutls.map, lib/pkcs11.c, + lib/pkcs11_int.h, lib/pkcs11_privkey.c, lib/x509/privkey.c: Added + documentation for most of the new functions. -2006-05-05 Nikos Mavrogiannopoulos +2010-05-16 Nikos Mavrogiannopoulos - * lib/minitasn1/structure.c: updated to the latest libtasn1 + * lib/pkcs11.c: Documented that it was initially based on neon + pkcs11 and got ideas from pkcs11-helper library. -2006-05-05 Simon Josefsson +2010-05-15 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/gnutls_x509.c, lib/libgnutls.map, lib/pkcs11.c, + lib/pkcs11_int.h, lib/pkcs11_privkey.c, src/common.c: Corrections to + properly handle token removal and insert. -2006-05-05 Simon Josefsson +2010-05-15 Nikos Mavrogiannopoulos - * includes/gnutls/extra.h, includes/gnutls/gnutls.h.in, - lib/ext_inner_application.c, lib/gnutls_int.h, libextra/gnutls_ia.c: - TLS/IA fixes from Emile. + * lib/includes/gnutls/compat.h, lib/includes/gnutls/gnutls.h.in: + Deprecated the sign callback. -2006-04-27 Simon Josefsson +2010-05-15 Nikos Mavrogiannopoulos - * doc/protocol/rfc4366.txt: Add. + * doc/manpages/Makefile.am, lib/Makefile.am, lib/auth_cert.c, + lib/auth_cert.h, lib/auth_dhe.c, lib/auth_rsa.c, + lib/auth_rsa_export.c, lib/auth_srp_rsa.c, lib/gnutls_cert.c, + lib/gnutls_cert.h, lib/gnutls_global.c, lib/gnutls_int.h, + lib/gnutls_privkey.c, lib/gnutls_sig.c, lib/gnutls_sig.h, + lib/gnutls_state.c, lib/gnutls_str.c, lib/gnutls_x509.c, + lib/gnutls_x509.h, lib/includes/gnutls/compat.h, + lib/includes/gnutls/gnutls.h.in, lib/includes/gnutls/openpgp.h, + lib/includes/gnutls/pkcs11.h, lib/includes/gnutls/privkey.h, + lib/includes/gnutls/x509.h, lib/libgnutls.map, + lib/openpgp/gnutls_openpgp.c, lib/openpgp/gnutls_openpgp.h, + lib/openpgp/openpgp_int.h, lib/pkcs11.c, lib/pkcs11_int.h, + lib/pkcs11_privkey.c, lib/x509/privkey.c, lib/x509/sign.c, + lib/x509/sign.h, lib/x509/x509_int.h, src/cli.c, src/common.c, + src/common.h, src/pkcs11.c, src/serv.c: Added + gnutls_pkcs11_privkey_t and gnutls_privkey_t types. Those are an + abstract private key type that can be used to sign/encrypt any + private key of pkcs11,x509 or openpgp types. Added support for + PKCS11 in gnutls-cli/gnutls-serv. -2006-04-27 Simon Josefsson +2010-05-15 Nikos Mavrogiannopoulos - * doc/protocol/rfc4346.txt, doc/protocol/rfc4347.txt: Add. + * .gitignore: ignore unrelated to gnutls files. -2006-04-26 Simon Josefsson +2010-05-10 Nikos Mavrogiannopoulos - * lib/gnutls_state.c: Fix prototypes. + * lib/includes/gnutls/pkcs11.h, lib/libgnutls.map, lib/pkcs11.c, + src/certtool-common.h, src/certtool-gaa.c, src/certtool-gaa.h, + src/certtool.c, src/certtool.gaa, src/pkcs11.c: Added several helper + functions, to allow printing of tokens. -2006-04-26 Simon Josefsson +2010-05-10 Nikos Mavrogiannopoulos - * gl/Makefile.am, gl/m4/getpass.m4, gl/m4/longdouble.m4: Update. + * lib/gnutls_errors.c, lib/gnutls_str.c, + lib/includes/gnutls/gnutls.h.in, lib/includes/gnutls/pkcs11.h, + lib/pkcs11.c, src/certtool-common.h, src/certtool-gaa.c, + src/certtool-gaa.h, src/certtool.c, src/certtool.gaa, src/pkcs11.c: + Added ability to export certificates from PKCS #11 tokens. Added + ability to list trusted certificates, or only certificates with a + corresponding private key or just all. -2006-04-21 Simon Josefsson +2010-05-09 Nikos Mavrogiannopoulos - * doc/protocol/draft-santesson-tls-supp-02.txt, - doc/protocol/draft-santesson-tls-ume-06.txt: Add. + * lib/Makefile.am, lib/auth_srp.c, lib/configure.ac, + lib/gnutls.pc.in, lib/gnutls_constate.c, lib/gnutls_errors.c, + lib/gnutls_handshake.c, lib/gnutls_kx.c, lib/gnutls_psk.c, + lib/gnutls_str.c, lib/gnutls_str.h, lib/includes/Makefile.am, + lib/includes/gnutls/pkcs11.h, lib/libgnutls.map, + lib/openpgp/gnutls_openpgp.c, lib/pkcs11.c, lib/x509/common.c, + lib/x509/dn.c, src/Makefile.am, src/certtool-common.h, + src/certtool-gaa.c, src/certtool-gaa.h, src/certtool.c, + src/certtool.gaa, src/pkcs11.c: Added initial PKCS #11 support. + Certtool can now print lists of certificates available in system. -2006-04-19 Simon Josefsson +2010-03-07 Nikos Mavrogiannopoulos - * tests/Makefile.am: (LDADD): Add libgnutls after libgnu, for libgcrypt transitive - reference, tiny patch from Nix . + * lib/x509/verify.c: Optimized the check_if_same(). -2006-04-19 Simon Josefsson +2010-02-24 Nikos Mavrogiannopoulos - * doc/protocol/draft-santesson-tls-supp-01.txt: Add. + * lib/gnutls_algorithms.c, lib/x509/common.c, lib/x509/common.h: + Added a forgoten by god OID for RSA. Warn using the actual OID on + unknown public key algorithms. -2006-04-17 Simon Josefsson +2009-12-09 Jonathan Bastien-Filiatrault - * doc/protocol/draft-housley-tls-authz-extns-03.txt, - doc/protocol/draft-santesson-tls-ume-05.txt: Add. + * lib/ext_session_ticket.c: Adapt session ticket support to mbuffer + API. -2006-04-11 Nikos Mavrogiannopoulos +2009-08-16 Jonathan Bastien-Filiatrault - * lib/gnutls_priority.c: removed AES-256 from the list of default - ciphers. No point in having it (when everything else is far away - even from 128 bit security) + * lib/gnutls_handshake.c, lib/gnutls_handshake.h, lib/gnutls_kx.c, + lib/gnutls_mbuffers.c, lib/gnutls_mbuffers.h: Use mbuffers for + handshake synthesis. -2006-04-07 Nikos Mavrogiannopoulos +2009-08-15 Jonathan Bastien-Filiatrault - * includes/gnutls/gnutls.h.in, lib/gnutls_srp.c: - gnutls_srp_set_client_credentials() uses const + * lib/gnutls_buffers.c, lib/gnutls_buffers.h, + lib/gnutls_handshake.c: Make _gnutls_handshake_io_send_int accept a + mbuffer_st. -2006-04-07 Nikos Mavrogiannopoulos +2009-08-15 Jonathan Bastien-Filiatrault - * lib/gnutls_priority.c: documented the return value in the priority - functions + * lib/gnutls_buffers.c, lib/gnutls_buffers.h, + lib/gnutls_handshake.c, lib/gnutls_int.h, lib/gnutls_state.c: + Simplify handshake send buffer logic. -2006-04-05 Nikos Mavrogiannopoulos +2009-08-15 Jonathan Bastien-Filiatrault - * includes/gnutls/gnutls.h.in, lib/gnutls_handshake.c: [no log - message] + * lib/gnutls_buffers.c: Fix interrupted write braino. -2006-04-04 Simon Josefsson +2009-08-15 Jonathan Bastien-Filiatrault - * gl/m4/gc-random.m4, gl/stdint_.h: Update. + * lib/gnutls_mbuffers.c: Avoid pointer warning. -2006-04-03 Nikos Mavrogiannopoulos +2009-08-15 Jonathan Bastien-Filiatrault - * lib/x509/common.c, lib/x509/common.h, lib/x509/crl.c, - lib/x509/crq.c, lib/x509/dn.c, lib/x509/extensions.c, - lib/x509/pkcs12.c, lib/x509/pkcs7.c, lib/x509/x509.c: use snprintf() - instead of multiple calls to str_cpy() and str_cat(). + * lib/gnutls_buffers.c, lib/gnutls_mbuffers.c, + lib/gnutls_mbuffers.h: Remove now useless + _gnutls_mbuffer_enqueue{,copy} functions. -2006-03-31 Nikos Mavrogiannopoulos +2009-08-15 Jonathan Bastien-Filiatrault - * lib/x509/x509.c: bug fix + * lib/gnutls_buffers.c, lib/gnutls_buffers.h, + lib/gnutls_mbuffers.c, lib/gnutls_record.c: Allocate data buffer + with mbuffer_st structure as suggested by Nikos. -2006-03-30 Simon Josefsson +2009-08-15 Jonathan Bastien-Filiatrault - * doc/protocol/draft-santesson-tls-supp-00.txt, - doc/protocol/draft-santesson-tls-ume-04.txt: Add. + * lib/gnutls_mbuffers.c, lib/gnutls_mbuffers.h: Prepare for mbuffer + allocation by the caller. -2006-03-26 Nikos Mavrogiannopoulos +2009-08-15 Jonathan Bastien-Filiatrault - * doc/TODO: [no log message] + * lib/gnutls_buffers.c: GNUify some missed GNUification. -2006-03-26 Nikos Mavrogiannopoulos +2009-08-15 Jonathan Bastien-Filiatrault - * configure.in: added -Wno-pointer-sign to gcc to avoid tons of - useless warnings. + * lib/gnutls_buffers.c: Harmonize read and write function names. -2006-03-24 Simon Josefsson +2009-08-15 Jonathan Bastien-Filiatrault - * doc/protocol/draft-housley-tls-authz-extns-01.txt: Add. + * lib/gnutls_buffers.c: Now that LEVEL and LEVEL_EQ are fixed, use + less lines. -2006-03-21 Simon Josefsson +2009-08-15 Jonathan Bastien-Filiatrault - * configure.in: Bump version. + * lib/gnutls_errors.h: Make LEVEL and LEVEL_EQ macros safer. Once again, I got bit by this pretty hard. -2006-03-21 Simon Josefsson +2009-08-09 Jonathan Bastien-Filiatrault - * NEWS: Add. + * lib/gnutls_record.c: Use a datum for ciphered data in + _gnutls_send_int. -2006-03-19 Nikos Mavrogiannopoulos +2009-08-09 Jonathan Bastien-Filiatrault - * doc/bibliography.texi, doc/gnutls.texi: added reference for TLS - 1.1 + * lib/gnutls_buffers.h: Remove the prototype for the non-existant + function _gnutls_io_write_buffered2. -2006-03-18 Nikos Mavrogiannopoulos +2009-08-09 Jonathan Bastien-Filiatrault - * lib/gnutls_cert.c, lib/gnutls_global.h, lib/gnutls_x509.c, - lib/x509/rfc2818_hostname.c: some fixes for compilation + * lib/gnutls_int.h, lib/gnutls_record.c: Cleanup of the remaining + internals.record_send_buffer mess. -2006-03-18 Nikos Mavrogiannopoulos +2009-08-09 Jonathan Bastien-Filiatrault - * src/certtool.c: export to DER format is possible with certtool + * lib/gnutls_buffers.c: Remove yet another !@#$% instance of + redundant hexadecimal dumping. -2006-03-15 Simon Josefsson +2009-08-09 Jonathan Bastien-Filiatrault - * configure.in: Bump versions. + * lib/gnutls_buffers.c, lib/gnutls_buffers.h, lib/gnutls_record.c: + Modify slightly the contract of _gnutls_io_write_buffered as + suggested by Nikos Mavrogiannopoulos. -2006-03-15 Simon Josefsson +2009-08-09 Jonathan Bastien-Filiatrault - * NEWS: Add. + * lib/gnutls_buffers.c, lib/gnutls_mbuffers.c, + lib/gnutls_mbuffers.h: Pass datums to mbuffers by address instead of + by value. -2006-03-15 Simon Josefsson +2009-08-08 Nikos Mavrogiannopoulos - * lib/gnutls_cert.c: Indent. + * lib/gnutls_handshake.c, lib/gnutls_record.c: Corrected case where + handshake data were received during a session. It now stores them + for future use by a gnutls_handshake(). Reported by Peter + Hendrickson . -2006-03-15 Simon Josefsson +2009-08-06 Jonathan Bastien-Filiatrault - * lib/x509/Makefile.am, lib/x509/compat.c, lib/x509/compat.h: Move - to ../gnutls_cert.c. + * lib/gnutls_buffers.c: Simplify _gnutls_io_write_buffered and + _gnutls_io_write_flush with mbuffers. -2006-03-15 Simon Josefsson +2009-08-06 Jonathan Bastien-Filiatrault - * lib/gnutls_cert.c: Move from x509/compat.c. + * lib/gnutls_int.h, lib/gnutls_state.c: Change type of + internals.record_send_buffer to a mbuffer. -2006-03-12 Simon Josefsson +2009-08-06 Jonathan Bastien-Filiatrault - * doc/README.CVS: Add. + * lib/gnutls_buffers.c: Extract a simple_write function from + _gnutls_io_write_buffered. -2006-03-12 Simon Josefsson +2009-08-06 Jonathan Bastien-Filiatrault - * doc/manpages/Makefile.am: Update. + * lib/gnutls_buffers.c: Add dump_bytes function. -2006-03-12 Simon Josefsson +2009-08-06 Jonathan Bastien-Filiatrault - * lib/minitasn1/structure.c: Update. + * lib/Makefile.am, lib/gnutls_int.h, lib/gnutls_mbuffers.c, + lib/gnutls_mbuffers.h: Add gnutls_mbuffers.{c,h} with some basic + mbuffer operations. -2006-03-11 Nikos Mavrogiannopoulos +2009-08-01 Jonathan Bastien-Filiatrault - * lib/gnutls_global.c: force the gcrypt random generator to be - initialized at startup. Maybe it should be within and ifdef? This - saves lots of debugging time when something fails. + * lib/gnutls_algorithms.c: Do not rely on version ordering; use + switch..case instead. -2006-03-11 Nikos Mavrogiannopoulos +2009-08-01 Jonathan Bastien-Filiatrault - * lib/minitasn1/coding.c, lib/minitasn1/libtasn1.h, - lib/minitasn1/structure.c: added the fix for der_coding() from - libtasn1. + * lib/auth_cert.c: Remove hardcoded version checks in auth_cert.c. -2006-03-09 Simon Josefsson +2009-08-01 Jonathan Bastien-Filiatrault - * doc/manpages/Makefile.am: Rebuild srp manpages too. + * lib/gnutls_state.c: Remove hardcoded version check in + gnutls_state.c. -2006-03-08 Simon Josefsson +2009-08-01 Jonathan Bastien-Filiatrault - * ChangeLog: [no log message] + * lib/gnutls_cipher.c: Remove hardcoded version checks in + gnutls_cipher.c. -2006-03-08 Simon Josefsson +2009-08-01 Jonathan Bastien-Filiatrault - * NEWS: Version 1.3.5. + * lib/gnutls_sig.c: Remove hardcoded version checks in gnutls_sig.c. -2006-03-08 Simon Josefsson +2009-08-01 Jonathan Bastien-Filiatrault - * NEWS: Add. + * lib/gnutls_handshake.c: Remove hardcoded version checks in + gnutls_handshake.c. -2006-03-08 Simon Josefsson +2009-08-01 Jonathan Bastien-Filiatrault - * NEWS: Add. + * lib/gnutls_algorithms.c: Add version check function for selectable + signature/hash certificate algorithms. -2006-03-08 Simon Josefsson +2009-08-01 Jonathan Bastien-Filiatrault - * NEWS: Add. + * lib/gnutls_algorithms.c: Add version check functions for + non-minimal padding. -2006-03-08 Simon Josefsson +2009-08-01 Jonathan Bastien-Filiatrault - * lib/minitasn1/coding.c, lib/minitasn1/libtasn1.h: Update. + * lib/gnutls_algorithms.c, lib/gnutls_algorithms.h: Add version + check function for explicit IV. -2006-03-08 Simon Josefsson +2009-08-01 Jonathan Bastien-Filiatrault - * po/LINGUAS, po/pl.po: Sync with TP. + * lib/gnutls_algorithms.h: Add version check functions for + selectable PRF and extension handling. -2006-03-08 Simon Josefsson +2010-06-01 Nikos Mavrogiannopoulos - * Makefile.am: Add update-po target. + * doc/announce.txt, doc/gnutls.texi, doc/manpages/gnutls-cli.1, + doc/manpages/gnutls-serv.1, lib/ext_safe_renegotiation.c, + lib/gnutls_handshake.c, lib/gnutls_int.h, lib/gnutls_priority.c, + lib/gnutls_state.c, tests/safe-renegotiation/srn1.c, + tests/safe-renegotiation/srn5.c, tests/safe-renegotiation/testsrn: + Splitted safe renegotiation capabilities to %SAFE_RENEGOTIATION: will enable safe renegotiation. This is the + most secure and recommended option for clients. However this will + prevent from connecting to legacy servers. %PARTIAL_RENEGOTIATION: Prevents renegotiation with clients and + servers not supporting the safe renegotiation extension. (this is + the default) %UNSAFE_RENEGOTIATION: Permits (re-)handshakes even unsafe ones. -2006-03-08 Simon Josefsson +2010-05-31 Simon Josefsson - * doc/manpages/Makefile.am: Update. + * doc/gnutls.texi: Minor fix. -2006-03-08 Simon Josefsson +2010-05-31 Simon Josefsson - * lib/x509/xml.c: Doc fix. + * GNUmakefile, maint.mk: Update gnulib files. -2006-03-08 Simon Josefsson +2010-05-29 Nikos Mavrogiannopoulos - * NEWS: Fix. + * doc/gnutls.texi: Documented the defaults. -2006-03-08 Simon Josefsson +2010-05-28 Nikos Mavrogiannopoulos - * lib/x509/common.c, lib/x509/sign.c, lib/x509/x509_write.c: Use new - asn1_copy_node API. + * doc/gnutls.texi: Added INITIAL_SAFE_RENEGOTIATION and other small + updates. -2006-03-08 Simon Josefsson +2010-05-28 Simon Josefsson - * lib/minitasn1/libtasn1.h, lib/minitasn1/structure.c: Update. + * doc/gnutls.texi: Update. -2006-03-08 Simon Josefsson +2010-05-28 Simon Josefsson - * lib/minitasn1/coding.c, lib/minitasn1/decoding.c, - lib/minitasn1/element.c, lib/minitasn1/int.h, - lib/minitasn1/libtasn1-dont.h, lib/minitasn1/libtasn1.h, - lib/minitasn1/parser_aux.c, lib/minitasn1/parser_aux.h, - lib/minitasn1/structure.c: Update. + * tests/safe-renegotiation/README: Add. -2006-03-08 Simon Josefsson +2010-05-28 Simon Josefsson - * lib/x509/xml.c: Use internal error approach again, after - discussion with Nikos. + * .x-sc_prohibit_strings_without_use, build-aux/c++defs.h, + build-aux/gendocs.sh, build-aux/gnupload, build-aux/vc-list-files, + configure.ac, doc/gendocs_template, gl/Makefile.am, gl/error.c, + gl/m4/asm-underscore.m4, gl/m4/gnulib-cache.m4, + gl/m4/gnulib-common.m4, gl/m4/gnulib-comp.m4, gl/m4/netdb_h.m4, + gl/m4/stdio_h.m4, gl/m4/unistd_h.m4, gl/m4/valgrind-tests.m4, + gl/netdb.in.h, gl/stdio-write.c, gl/stdio.in.h, + gl/tests/Makefile.am, gl/tests/init.sh, gl/tests/test-lseek.sh, + gl/tests/test-vc-list-files-cvs.sh, + gl/tests/test-vc-list-files-git.sh, gl/tests/test-verify.c, + gl/tests/test-verify.sh, gl/tests/verify.h, gl/unistd.in.h, + gl/vasnprintf.c, gl/wchar.in.h, gtk-doc.make, + lib/build-aux/c++defs.h, lib/gl/Makefile.am, + lib/gl/m4/asm-underscore.m4, lib/gl/m4/fcntl-o.m4, + lib/gl/m4/gettext.m4, lib/gl/m4/gnulib-common.m4, + lib/gl/m4/gnulib-comp.m4, lib/gl/m4/iconv.m4, lib/gl/m4/intl.m4, + lib/gl/m4/netdb_h.m4, lib/gl/m4/po.m4, lib/gl/m4/stdio_h.m4, + lib/gl/m4/unistd_h.m4, lib/gl/netdb.in.h, lib/gl/stdio-write.c, + lib/gl/stdio.in.h, lib/gl/tests/Makefile.am, lib/gl/tests/init.sh, + lib/gl/tests/test-vasprintf.c, lib/gl/tests/test-verify.c, + lib/gl/tests/test-verify.sh, lib/gl/tests/verify.h, + lib/gl/unistd.in.h, lib/gl/vasnprintf.c, lib/gl/wchar.in.h, + libextra/gl/m4/gnulib-common.m4, m4/valgrind.m4, maint.mk: Update + gnulib files, use valgrind-tests module, fix syntax-check problems. -2006-03-08 Simon Josefsson +2010-05-28 Simon Josefsson - * lib/x509/xml.c: Fix. + * doc/announce.txt: Doc fix. -2006-03-08 Simon Josefsson +2010-05-25 Nikos Mavrogiannopoulos - * lib/minitasn1/coding.c, lib/minitasn1/int.h, - lib/minitasn1/libtasn1-dont.h, lib/minitasn1/libtasn1.h: Update. + * lib/x509/common.h, lib/x509/privkey.c, lib/x509/sign.c, + lib/x509/verify.c: Use correct hashing algorithms for DSA with q + over 160 bits. -2006-03-08 Simon Josefsson +2010-05-24 Nikos Mavrogiannopoulos - * lib/x509/xml.c: Fix type_field. + * lib/gnutls_algorithms.c: Better checks in loops. -2006-03-08 Simon Josefsson +2010-05-22 Simon Josefsson - * lib/x509/xml.c: Use external API. + * lib/x509/crl.c: Doc fix. -2006-03-08 Simon Josefsson +2010-05-22 Simon Josefsson - * lib/minitasn1/coding.c, lib/minitasn1/decoding.c, - lib/minitasn1/element.c, lib/minitasn1/int.h, - lib/minitasn1/libtasn1.h, lib/minitasn1/parser_aux.c, - lib/minitasn1/parser_aux.h, lib/minitasn1/structure.c: Update. + * NEWS: Add. -2006-03-08 Simon Josefsson +2010-05-22 Simon Josefsson - * lib/x509/xml.c: Fix. + * NEWS: Add. -2006-03-08 Simon Josefsson +2010-05-22 Simon Josefsson - * lib/x509/common.c: Use external libtasn1 API. + * doc/reference/Makefile.am, gtk-doc.make, m4/gtk-doc.m4: Support + GTK-DOC PDF file. -2006-03-08 Simon Josefsson +2010-05-22 Simon Josefsson - * lib/x509/xml.c: Fix typo. + * cfg.mk: Also build PDF manual. -2006-03-08 Simon Josefsson +2010-05-22 Simon Josefsson - * configure.in: Required libtasn1 0.3.1. + * doc/gnutls.texi: Fix node/section usage. -2006-03-08 Simon Josefsson +2010-05-22 Simon Josefsson - * lib/x509/xml.c: Revert, we now use the new exported functions. + * tests/safe-renegotiation/srn5.c: Fix self test. -2006-03-08 Simon Josefsson +2010-05-22 Simon Josefsson - * lib/x509/xml.c: Make it build. + * lib/gnutls_handshake.c: Readd lost fix from Nikos. -2006-03-08 Simon Josefsson +2010-05-22 Simon Josefsson - * NEWS: Sort. + * lib/ext_safe_renegotiation.c: Readd lost fix from Nikos. -2006-03-08 Simon Josefsson +2010-05-22 Simon Josefsson * NEWS: Add. -2006-03-08 Simon Josefsson - - * lib/x509/xml.c: Disable XML functionality, because it relies on - libtasn1 internals. - -2006-03-08 Simon Josefsson +2010-05-22 Simon Josefsson - * NEWS: Add. + * lib/gnutls_errors.c, libextra/includes/gnutls/openssl.h, + libextra/openssl_compat.c: Doc fixes. -2006-03-08 Simon Josefsson +2010-05-22 Simon Josefsson - * lib/Makefile.am, libextra/Makefile.am: Add -no-undefined, for - mingw32 builds. + * lib/x509/x509.c: Doc fix. -2006-03-08 Simon Josefsson +2010-05-22 Simon Josefsson - * lib/x509/crq.c, lib/x509/xml.c, src/cli.c, src/common.c, - src/common.h, src/serv.c, tests/resume.c: Indent. + * Makefile.am, NEWS, README, cfg.mk, configure.ac, doc/Makefile.am, + doc/credentials/Makefile.am, doc/cyclo/Makefile.am, doc/errcodes.c, + doc/examples/Makefile.am, doc/examples/ex-client-srp.c, + doc/examples/ex-serv-anon.c, doc/examples/ex-serv-pgp.c, + doc/examples/ex-serv-psk.c, doc/examples/ex-serv-srp.c, + doc/examples/ex-serv1.c, doc/gnutls.texi, doc/manpages/Makefile.am, + doc/printlist.c, guile/Makefile.am, guile/modules/Makefile.am, + guile/modules/gnutls.scm, guile/modules/gnutls/build/enums.scm, + guile/modules/gnutls/build/priorities.scm, + guile/modules/gnutls/build/smobs.scm, + guile/modules/gnutls/build/utils.scm, + guile/modules/gnutls/extra.scm, guile/src/Makefile.am, + guile/src/core.c, guile/src/errors.c, guile/src/errors.h, + guile/src/extra.c, guile/src/make-enum-header.scm, + guile/src/make-enum-map.scm, guile/src/make-session-priorities.scm, + guile/src/make-smob-header.scm, guile/src/make-smob-types.scm, + guile/src/utils.c, guile/src/utils.h, guile/tests/Makefile.am, + guile/tests/anonymous-auth.scm, guile/tests/errors.scm, + guile/tests/openpgp-auth.scm, guile/tests/openpgp-keyring.scm, + guile/tests/openpgp-keys.scm, guile/tests/pkcs-import-export.scm, + guile/tests/session-record-port.scm, guile/tests/srp-base64.scm, + guile/tests/x509-auth.scm, guile/tests/x509-certificates.scm, + lib/Makefile.am, lib/auth_anon.c, lib/auth_anon.h, lib/auth_cert.c, + lib/auth_cert.h, lib/auth_dh_common.c, lib/auth_dh_common.h, + lib/auth_dhe.c, lib/auth_dhe_psk.c, lib/auth_psk.c, lib/auth_psk.h, + lib/auth_psk_passwd.c, lib/auth_psk_passwd.h, lib/auth_rsa.c, + lib/auth_rsa_export.c, lib/auth_srp.c, lib/auth_srp.h, + lib/auth_srp_passwd.c, lib/auth_srp_passwd.h, lib/auth_srp_rsa.c, + lib/auth_srp_sb64.c, lib/cipher-libgcrypt.c, lib/configure.ac, + lib/crypto-api.c, lib/crypto.c, lib/crypto.h, lib/cryptodev.c, + lib/debug.c, lib/debug.h, lib/ext_cert_type.c, lib/ext_cert_type.h, + lib/ext_max_record.c, lib/ext_max_record.h, lib/ext_oprfi.c, + lib/ext_oprfi.h, lib/ext_safe_renegotiation.c, + lib/ext_safe_renegotiation.h, lib/ext_server_name.c, + lib/ext_server_name.h, lib/ext_session_ticket.c, + lib/ext_session_ticket.h, lib/ext_signature.c, lib/ext_signature.h, + lib/ext_srp.c, lib/ext_srp.h, lib/gnutls_alert.c, + lib/gnutls_algorithms.c, lib/gnutls_algorithms.h, + lib/gnutls_anon_cred.c, lib/gnutls_auth.c, lib/gnutls_auth.h, + lib/gnutls_buffers.c, lib/gnutls_buffers.h, lib/gnutls_cert.c, + lib/gnutls_cert.h, lib/gnutls_cipher.c, lib/gnutls_cipher.h, + lib/gnutls_cipher_int.c, lib/gnutls_cipher_int.h, + lib/gnutls_compress.c, lib/gnutls_compress.h, + lib/gnutls_constate.c, lib/gnutls_constate.h, lib/gnutls_datum.c, + lib/gnutls_datum.h, lib/gnutls_db.c, lib/gnutls_db.h, + lib/gnutls_dh.c, lib/gnutls_dh.h, lib/gnutls_dh_primes.c, + lib/gnutls_errors.c, lib/gnutls_errors.h, lib/gnutls_extensions.c, + lib/gnutls_extensions.h, lib/gnutls_global.c, lib/gnutls_global.h, + lib/gnutls_handshake.c, lib/gnutls_handshake.h, + lib/gnutls_hash_int.c, lib/gnutls_hash_int.h, lib/gnutls_helper.c, + lib/gnutls_int.h, lib/gnutls_kx.c, lib/gnutls_kx.h, + lib/gnutls_mem.c, lib/gnutls_mem.h, lib/gnutls_mpi.c, + lib/gnutls_mpi.h, lib/gnutls_num.c, lib/gnutls_num.h, + lib/gnutls_pk.c, lib/gnutls_pk.h, lib/gnutls_priority.c, + lib/gnutls_psk.c, lib/gnutls_psk_netconf.c, lib/gnutls_record.c, + lib/gnutls_record.h, lib/gnutls_rsa_export.c, + lib/gnutls_rsa_export.h, lib/gnutls_session.c, + lib/gnutls_session_pack.c, lib/gnutls_session_pack.h, + lib/gnutls_sig.c, lib/gnutls_sig.h, lib/gnutls_srp.c, + lib/gnutls_srp.h, lib/gnutls_state.c, lib/gnutls_state.h, + lib/gnutls_str.c, lib/gnutls_str.h, lib/gnutls_supplemental.c, + lib/gnutls_supplemental.h, lib/gnutls_ui.c, lib/gnutls_v2_compat.c, + lib/gnutls_v2_compat.h, lib/gnutls_x509.c, lib/gnutls_x509.h, + lib/includes/Makefile.am, lib/includes/gnutls/crypto.h, + lib/includes/gnutls/gnutls.h.in, lib/includes/gnutls/openpgp.h, + lib/includes/gnutls/pkcs12.h, lib/includes/gnutls/x509.h, + lib/libgnutls.map, lib/libgnutlsxx.map, lib/m4/hooks.m4, + lib/mac-libgcrypt.c, lib/minitasn1/Makefile.am, + lib/mpi-libgcrypt.c, lib/opencdk/Makefile.am, + lib/openpgp/Makefile.am, lib/openpgp/compat.c, + lib/openpgp/extras.c, lib/openpgp/gnutls_openpgp.c, + lib/openpgp/output.c, lib/openpgp/pgp.c, lib/openpgp/pgpverify.c, + lib/openpgp/privkey.c, lib/pk-libgcrypt.c, lib/random.c, + lib/random.h, lib/rnd-libgcrypt.c, lib/x509/Makefile.am, + lib/x509/common.c, lib/x509/common.h, lib/x509/crl.c, + lib/x509/crl_write.c, lib/x509/crq.c, lib/x509/dn.c, + lib/x509/extensions.c, lib/x509/mpi.c, lib/x509/output.c, + lib/x509/pkcs12.c, lib/x509/pkcs12_bag.c, lib/x509/pkcs12_encr.c, + lib/x509/pkcs7.c, lib/x509/privkey.c, lib/x509/privkey_pkcs8.c, + lib/x509/rfc2818_hostname.c, lib/x509/sign.c, lib/x509/verify.c, + lib/x509/x509.c, lib/x509/x509_int.h, lib/x509/x509_write.c, + lib/x509_b64.c, lib/x509_b64.h, libextra/Makefile.am, + libextra/configure.ac, libextra/ext_inner_application.c, + libextra/ext_inner_application.h, libextra/fipsmd5.c, + libextra/gl/Makefile.am, libextra/gnutls_extra.c, + libextra/gnutls_ia.c, libextra/gnutls_openssl.c, + libextra/includes/Makefile.am, libextra/includes/gnutls/extra.h, + libextra/includes/gnutls/openssl.h, libextra/libgnutls-extra.map, + libextra/m4/hooks.m4, libextra/openssl_compat.c, + libextra/openssl_compat.h, src/Makefile.am, src/benchmark.c, + src/certtool-cfg.c, src/certtool.c, src/cli.c, src/common.c, + src/crypt.c, src/list.h, src/prime.c, src/psk.c, src/serv.c, + src/tests.c, src/tls_test.c, tests/Makefile.am, tests/anonself.c, + tests/certder.c, tests/certificate_set_x509_crl.c, + tests/chainverify.c, tests/crq_apis.c, tests/crq_key_id.c, + tests/crypto_rng.c, tests/cve-2008-4989.c, tests/cve-2009-1415.c, + tests/cve-2009-1416.c, tests/dhepskself.c, tests/dn.c, tests/dn2.c, + tests/finished.c, tests/gc.c, tests/hostname-check.c, + tests/init_roundtrip.c, tests/key-id/Makefile.am, + tests/key-id/key-id, tests/mini-eagain.c, + tests/mini-x509-rehandshake.c, tests/mini-x509.c, tests/mini.c, + tests/moredn.c, tests/mpi.c, tests/netconf-psk.c, + tests/nist-pkits/pkits, tests/nist-pkits/pkits_crl, + tests/nist-pkits/pkits_crt, tests/nist-pkits/pkits_pkcs12, + tests/nist-pkits/pkits_smime, tests/nul-in-x509-names.c, + tests/openpgp-certs/Makefile.am, tests/openpgp-certs/testcerts, + tests/openpgp-certs/testselfsigs, tests/openpgp-keyring.c, + tests/openpgpself.c, tests/openssl.c, tests/oprfi.c, + tests/parse_ca.c, tests/pathlen/Makefile.am, tests/pathlen/pathlen, + tests/pgps2kgnu.c, tests/pkcs1-padding/Makefile.am, + tests/pkcs1-padding/pkcs1-pad, tests/pkcs12-decode/Makefile.am, + tests/pkcs12-decode/pkcs12, tests/pkcs12_encode.c, + tests/pkcs12_s2k.c, tests/pkcs12_s2k_pem.c, + tests/pkcs8-decode/Makefile.am, tests/pkcs8-decode/pkcs8, + tests/pskself.c, tests/resume.c, tests/rfc2253-escape-test, + tests/rsa-md5-collision/Makefile.am, + tests/rsa-md5-collision/rsa-md5-collision, + tests/safe-renegotiation/Makefile.am, + tests/safe-renegotiation/srn0.c, tests/safe-renegotiation/srn1.c, + tests/safe-renegotiation/srn2.c, tests/safe-renegotiation/srn3.c, + tests/safe-renegotiation/srn4.c, tests/safe-renegotiation/srn5.c, + tests/safe-renegotiation/testsrn, tests/set_pkcs12_cred.c, + tests/setcredcrash.c, tests/sha2/Makefile.am, tests/sha2/sha2, + tests/simple.c, tests/tlsia.c, tests/userid/Makefile.am, + tests/userid/userid, tests/utils.c, tests/utils.h, + tests/x509_altname.c, tests/x509dn.c, tests/x509paths/chain, + tests/x509self.c, tests/x509sign-verify.c, tests/x509signself.c: + Change GNUTLS into GnuTLS. -2006-03-08 Simon Josefsson +2010-05-22 Simon Josefsson - * gl/Makefile.am, gl/gc-gnulib.c, gl/gc-libgcrypt.c, - gl/m4/gc-random.m4, gl/m4/gc.m4, gl/m4/gnulib-cache.m4, - gl/m4/gnulib-comp.m4, gl/m4/readline.m4, maint.mk: Update. + * AUTHORS, ChangeLog.1, NEWS, README, README-alpha, THANKS, + doc/gnutls.texi, doc/manpages/gnutls-cli-debug.1, + doc/manpages/gnutls-cli.1, doc/manpages/gnutls-serv.1, + doc/manpages/srptool.1, doc/reference/gnutls-docs.sgml, + lib/ext_safe_renegotiation.c, lib/gnutls_handshake.c, + src/cli-gaa.c, src/cli.gaa, src/serv-gaa.c, src/serv.gaa, + src/tls_test-gaa.c, src/tls_test.gaa: Change GNU TLS into GnuTLS. -2006-03-08 Simon Josefsson +2010-05-22 Nikos Mavrogiannopoulos - * po/LINGUAS: Add. + * lib/ext_safe_renegotiation.c, lib/gnutls_handshake.c: Ignore + parsing of ciphersuite or extensions when safe renegotiation is + disabled. -2006-03-08 Simon Josefsson +2010-05-22 Simon Josefsson - * doc/protocol/draft-funk-tls-inner-application-extension-02.txt: - Add. + * tests/safe-renegotiation/Makefile.am, + tests/safe-renegotiation/srn5.c: Add test of self renegotiation + APIs. -2006-03-05 Nikos Mavrogiannopoulos +2010-05-22 Simon Josefsson - * src/cli-gaa.c, src/cli-gaa.h, src/cli.c, src/cli.gaa, - src/common.c, src/common.h: gnutls-cli can now recognize services - and port numbers with the -p option. + * tests/safe-renegotiation/Makefile.am, + tests/safe-renegotiation/README, tests/safe-renegotiation/srn4.c: + Add more rengotiation self tests. -2006-03-03 Simon Josefsson +2010-05-22 Simon Josefsson - * .cvscopying: Fix. + * tests/safe-renegotiation/Makefile.am, + tests/safe-renegotiation/README, tests/safe-renegotiation/srn0.c: + Add more safe renegotiation self test. -2006-03-03 Simon Josefsson +2010-05-21 Simon Josefsson - * lib/Makefile.am: Gettext fixes. + * NEWS, doc/announce.txt, doc/gnutls.texi, + doc/manpages/Makefile.am, lib/ext_safe_renegotiation.c, + lib/includes/gnutls/gnutls.h.in, lib/libgnutls.map, + tests/safe-renegotiation/srn2.c: Remove + gnutls_safe_negotiation_set_initial and + gnutls_safe_renegotiation_set. -2006-03-03 Simon Josefsson +2010-05-18 Nikos Mavrogiannopoulos - * lib/gnutls_errors.c: Fix. + * lib/gnutls_priority.c: Documented behavioral change. -2006-03-03 Simon Josefsson +2010-05-18 Nikos Mavrogiannopoulos - * lib/gnutls_errors.c, lib/gnutls_global.c: Error message - translations. + * lib/gnutls_int.h, lib/gnutls_priority.c: Because we want to + differentiate the behavior of server and client with regards to safe + renegotiation. If a server didn't have either SAFE_RENEGOTIATION or + UNSAFE_RENEGOTIATION set the safe renegotiation will be the default. + This (as well as the safe_renegotiation_set flag) has to be removed + once safe renegotiation is default in both server and client side. -2006-03-03 Simon Josefsson +2010-05-18 Nikos Mavrogiannopoulos - * .cvsignore, m4/.cvsignore, po/.cvsignore: [no log message] + * lib/gnutls_state.c: Emulate old gnutls behavior regarding safe + renegotiation if the priority_* functions are not called. -2006-03-03 Simon Josefsson +2010-05-11 Nikos Mavrogiannopoulos - * maint.mk: Update. + * lib/includes/gnutls/x509.h: Corrected typo. Reported by Clint + Adams. -2006-03-03 Simon Josefsson +2010-05-03 Simon Josefsson - * maint-cfg.mk: Add indent file list. + * tests/safe-renegotiation/Makefile.am, + tests/safe-renegotiation/srn1.c, tests/safe-renegotiation/srn3.c: + tests: Add srn3 to test inverse of what srn1 is testing. -2006-03-03 Simon Josefsson +2010-05-03 Simon Josefsson - * Makefile.am: Remove indent target. + * tests/safe-renegotiation/Makefile.am, + tests/safe-renegotiation/srn2.c: tests: Add another safe + renegotiation self tests. -2006-03-03 Simon Josefsson +2010-05-03 Simon Josefsson - * configure.in: Revert, autoreconf needs it. + * tests/safe-renegotiation/srn1.c: Also test + gnutls_safe_renegotiation_status API. -2006-03-03 Simon Josefsson +2010-05-03 Simon Josefsson - * configure.in: Remove gettext version stuff. + * tests/safe-renegotiation/Makefile.am, + tests/safe-renegotiation/srn1.c: tests: Add first self-test of safe + renegotiation extension. -2006-03-03 Simon Josefsson +2010-05-03 Simon Josefsson - * gl/Makefile.am, gl/gettext.h, gl/m4/codeset.m4, gl/m4/gettext.m4, - gl/m4/glibc2.m4, gl/m4/glibc21.m4, gl/m4/gnulib-cache.m4, - gl/m4/gnulib-comp.m4, gl/m4/iconv.m4, gl/m4/intdiv0.m4, - gl/m4/intmax.m4, gl/m4/inttypes-pri.m4, gl/m4/isc-posix.m4, - gl/m4/lcmessage.m4, gl/m4/nls.m4, gl/m4/po.m4, - gl/m4/printf-posix.m4, gl/m4/progtest.m4, gl/m4/readline.m4, - gl/m4/uintmax_t.m4, gl/m4/ulonglong.m4, maint.mk: Update. + * tests/Makefile.am, tests/mini-x509-rehandshake.c: tests: Add small + X.509 rehandshake test. -2006-03-03 Simon Josefsson +2010-05-03 Simon Josefsson - * NEWS: Add. + * tests/mini-x509.c: Protect against infloops. -2006-03-03 Simon Josefsson +2010-05-03 Simon Josefsson - * Makefile.am, configure.in, po/Makevars, po/POTFILES.in: - Gettextize. + * tests/Makefile.am, tests/mini-x509.c: tests: Add mini-x509 + self-test. -2006-03-01 Simon Josefsson +2010-04-30 Simon Josefsson - * gtk-doc.make: Add. + * doc/gnutls.texi: Improve text, based on suggestions from Tomas + Hoger . -2006-03-01 Simon Josefsson +2010-04-29 Simon Josefsson - * gl/m4/readline.m4, gl/m4/socklen.m4, gl/m4/sys_socket_h.m4, - gl/readline.c, maint.mk: Update. + * lib/gnutls_handshake.c: Fix typo. -2006-03-01 Simon Josefsson +2010-04-29 Simon Josefsson - * buildconf, maint-cfg.mk: Don't gtkdocize. + * lib/gnutls_handshake.c: Improve renegotiation debug messages. -2006-02-28 Simon Josefsson +2010-04-29 Simon Josefsson - * lib/minitasn1/Makefile.am, lib/minitasn1/coding.c, - lib/minitasn1/decoding.c, lib/minitasn1/der.h, - lib/minitasn1/element.c, lib/minitasn1/errors.h, - lib/minitasn1/errors_int.h, lib/minitasn1/gstr.c, - lib/minitasn1/gstr.h, lib/minitasn1/int.h, - lib/minitasn1/libtasn1.h, lib/minitasn1/parser_aux.c, - lib/minitasn1/structure.c, lib/minitasn1/structure.h: Update. + * doc/announce.txt: Add. -2006-02-27 Simon Josefsson +2010-04-29 Simon Josefsson - * lib/gnutls_record.c: gnutls_record_send: Doc fix, suggested by - Eric Leblond . + * .gitignore: Add. -2006-02-17 Simon Josefsson +2010-04-29 Simon Josefsson - * lib/x509/sign.c: Fix warning. + * doc/gnutls.texi: Add section on safe renegotiation. -2006-02-17 Simon Josefsson +2010-04-29 Simon Josefsson - * includes/gnutls/gnutls.h.in: Make it explicit that GNUTLS_DIG_* - has the same values as GNUTLS_MAC_*. + * lib/gnutls_record.c: Remove debug code. -2006-02-16 Simon Josefsson +2010-04-25 Simon Josefsson - * doc/protocol/draft-santesson-tls-ume-02.txt: Add. + * doc/gnutls.texi: Mention shared library map file and GTK-DOC + guidelines. -2006-02-14 Simon Josefsson +2010-04-22 Simon Josefsson - * maint-cfg.mk: Fix. + * doc/announce.txt: Update URL. -2006-02-14 Simon Josefsson +2010-04-22 Simon Josefsson - * maint-cfg.mk: Fix. + * AUTHORS: Update my OpenPGP key. -2006-02-14 Simon Josefsson +2010-04-22 Simon Josefsson - * maint-cfg.mk: Fix. + * doc/announce.txt: Update my key. -2006-02-14 Simon Josefsson +2010-04-22 Simon Josefsson - * maint-cfg.mk: Fix. + * doc/announcement-template.txt: Remove. -2006-02-14 Simon Josefsson +2010-04-22 Simon Josefsson - * maint-cfg.mk: Add mingw32 target. + * doc/ANNOUNCE, doc/announce.txt: Prepare 2.10.0 release notes. -2006-02-14 Simon Josefsson +2010-04-22 Simon Josefsson - * GNUmakefile, gl/Makefile.am, gl/m4/gnulib-cache.m4, - gl/m4/gnulib-comp.m4, maint-cfg.mk, maint.mk: Add - maintainer-makefile module. + * NEWS: Add 2.8.x NEWS entries. -2006-02-11 Simon Josefsson +2010-04-22 Simon Josefsson - * lib/x509/xml.c: Use external libtasn1 API. + * libextra/configure.ac: Also bump libgnutls-extra version. -2006-02-11 Simon Josefsson +2010-04-22 Simon Josefsson - * lib/minitasn1/coding.c, lib/minitasn1/decoding.c, - lib/minitasn1/der.h, lib/minitasn1/element.c, - lib/minitasn1/libtasn1.h, lib/minitasn1/parser_aux.c, - lib/minitasn1/structure.c: Sync with libtasn1 CVS. + * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4: Bump + versions. -2006-02-11 Simon Josefsson +2010-04-22 Simon Josefsson - * configure.in: Bump libtasn1 version. + * build-aux/gendocs.sh: Chmod +x. -2006-02-10 Simon Josefsson +2010-04-22 Simon Josefsson - * NEWS, configure.in: Bump versions. + * ChangeLog: Generated. -2006-02-09 Simon Josefsson +2010-04-22 Simon Josefsson - * NEWS: Fix typo. + * NEWS: Version 2.9.10. -2006-02-09 Simon Josefsson +2010-04-21 Simon Josefsson - * ChangeLog: [no log message] + * NEWS, lib/minitasn1/Makefile.am, lib/minitasn1/coding.c, + lib/minitasn1/decoding.c, lib/minitasn1/element.h, + lib/minitasn1/gstr.h, lib/minitasn1/libtasn1.h, + lib/minitasn1/parser_aux.c, lib/minitasn1/parser_aux.h, + lib/minitasn1/structure.h, lib/minitasn1/version.c: Upgrade to + libtasn1 version 2.6. -2006-02-09 Simon Josefsson +2010-04-21 Simon Josefsson - * NEWS: Version 1.3.4. + * gl/Makefile.am, gl/m4/gnulib-comp.m4, gl/m4/ioctl.m4, + gl/m4/netdb_h.m4, gl/stdbool.in.h, gl/tests/test-lseek.sh, + gl/tests/test-select-in.sh, gl/tests/test-stdbool.c, + gl/tests/test-stdint.c, lib/gl/Makefile.am, lib/gl/m4/netdb_h.m4, + lib/gl/m4/visibility.m4, lib/gl/stdbool.in.h, + lib/gl/tests/test-stdbool.c, lib/gl/tests/test-stdint.c, + lib/gl/tests/test-vasprintf.c, maint.mk: Update gnulib files. -2006-02-09 Simon Josefsson +2010-04-21 Simon Josefsson - * NEWS: Add. + * configure.ac: Structure fork check together. -2006-02-09 Simon Josefsson +2010-04-15 Simon Josefsson - * NEWS, THANKS: Add. + * lib/gnutls_priority.c: Fix compiler warning. -2006-02-09 Simon Josefsson +2010-04-15 Simon Josefsson - * lib/minitasn1/coding.c, lib/minitasn1/decoding.c, - lib/minitasn1/element.c, lib/minitasn1/errors.c, - lib/minitasn1/errors.h, lib/minitasn1/errors_int.h, - lib/minitasn1/gstr.c, lib/minitasn1/int.h, - lib/minitasn1/libtasn1.h, lib/minitasn1/parser_aux.c, - lib/minitasn1/structure.c: Update from libtasn1. + * gl/override/top/maint.mk.diff, libextra/gl/hmac-md5.c, + libextra/gl/md5.c, maint.mk: Update gnulib files. -2006-02-09 Simon Josefsson +2010-04-15 Simon Josefsson - * THANKS: Add. + * lib/crypto-api.c, lib/gnutls_priority.c: Indent code. -2006-02-09 Simon Josefsson +2010-04-14 Nikos Mavrogiannopoulos - * doc/protocol/draft-housley-tls-authz-extns-00.txt: Add. + * lib/crypto-api.c, lib/includes/gnutls/crypto.h: Use size_t instead + of int for input variables that represent sizes. -2006-02-08 Simon Josefsson +2010-04-02 Nikos Mavrogiannopoulos - * lib/minitasn1/decoding.c: Fix typo in last commit. + * lib/gnutls_priority.c: Free the priority structure on error. + Reported by Paul Aurich. -2006-02-08 Simon Josefsson +2010-04-02 Nikos Mavrogiannopoulos - * tests/set_pkcs12_cred.c: Simplify using under gdb. + * lib/gnutls_priority.c: The string is colon separated. Reported by + Paul Aurich. -2006-02-08 Simon Josefsson +2010-04-14 Simon Josefsson - * lib/minitasn1/decoding.c: Fix for latest certder bug. + * lib/includes/gnutls/gnutls.h.in: Fix indent bug. -2006-02-08 Simon Josefsson +2010-04-14 Simon Josefsson - * tests/certder.c: Add more bug trigger. + * cfg.mk, doc/examples/examples.h, guile/src/errors.h, + guile/src/utils.h, lib/auth_cert.h, lib/auth_dh_common.h, + lib/crypto.h, lib/ext_oprfi.h, lib/ext_safe_renegotiation.h, + lib/ext_session_ticket.h, lib/ext_signature.h, + lib/gnutls_algorithms.h, lib/gnutls_cipher_int.h, + lib/gnutls_compress.h, lib/gnutls_cryptodev.h, lib/gnutls_errors.h, + lib/gnutls_extensions.h, lib/gnutls_hash_int.h, lib/gnutls_int.h, + lib/gnutls_mpi.h, lib/gnutls_pk.h, lib/gnutls_sig.h, + lib/gnutls_srp.h, lib/gnutls_state.h, lib/gnutls_str.h, + lib/gnutls_supplemental.h, lib/includes/gnutls/crypto.h, + lib/includes/gnutls/gnutls.h.in, lib/includes/gnutls/openpgp.h, + lib/includes/gnutls/pkcs12.h, lib/includes/gnutls/x509.h, + lib/opencdk/context.h, lib/opencdk/filters.h, lib/opencdk/keydb.h, + lib/opencdk/main.h, lib/opencdk/opencdk.h, lib/opencdk/packet.h, + lib/opencdk/stream.h, lib/opencdk/types.h, + lib/openpgp/gnutls_openpgp.h, lib/openpgp/openpgp_int.h, + lib/x509/pbkdf2-sha1.h, lib/x509/x509_int.h, + libextra/includes/gnutls/extra.h, + libextra/includes/gnutls/openssl.h, src/certtool-cfg.h, + src/certtool-common.h, src/common.h: More indentation. -2006-02-08 Simon Josefsson +2010-04-14 Simon Josefsson - * tests/certder.c: Add. + * NEWS: Add. -2006-02-08 Simon Josefsson +2010-04-14 Simon Josefsson - * lib/minitasn1/decoding.c: More asn1 length out of bounds checking. + * NEWS: Add. -2006-02-08 Simon Josefsson +2010-04-14 Simon Josefsson - * lib/minitasn1/decoding.c: Fix asn1_get_length_der usage. + * NEWS: Add. -2006-02-08 Simon Josefsson +2010-04-14 Simon Josefsson - * lib/minitasn1/coding.c: Fix asn1_get_length_der usage. + * doc/manpages/Makefile.am: Generated. -2006-02-08 Simon Josefsson +2010-04-14 Simon Josefsson - * lib/minitasn1/element.c: Fix copyright. + * doc/examples/ex-client-tlsia.c, doc/examples/ex-verify.c, + doc/examples/ex-x509-info.c, lib/auth_cert.c, lib/auth_rsa.c, + lib/ext_cert_type.c, lib/ext_max_record.c, lib/ext_oprfi.c, + lib/ext_safe_renegotiation.c, lib/ext_server_name.c, + lib/ext_session_ticket.c, lib/ext_signature.c, + lib/gnutls_algorithms.c, lib/gnutls_auth.c, lib/gnutls_buffers.c, + lib/gnutls_cert.c, lib/gnutls_cipher.c, lib/gnutls_compress.c, + lib/gnutls_constate.c, lib/gnutls_extensions.c, + lib/gnutls_global.c, lib/gnutls_handshake.c, lib/gnutls_kx.c, + lib/gnutls_priority.c, lib/gnutls_record.c, + lib/gnutls_session_pack.c, lib/gnutls_sig.c, lib/gnutls_state.c, + lib/gnutls_v2_compat.c, lib/gnutls_x509.c, + lib/minitasn1/decoding.c, lib/opencdk/read-packet.c, + lib/opencdk/sig-check.c, lib/x509/pkcs12.c, lib/x509/verify.c, + libextra/gl/hmac-md5.c, libextra/gl/md5.c, src/benchmark.c, + src/certtool.c, src/cli.c, src/serv.c, src/tests.c, src/tls_test.c, + tests/anonself.c, tests/certder.c, tests/chainverify.c, + tests/crq_apis.c, tests/crq_key_id.c, tests/cve-2008-4989.c, + tests/dhepskself.c, tests/dn.c, tests/dn2.c, tests/finished.c, + tests/gc.c, tests/hostname-check.c, tests/init_roundtrip.c, + tests/mini-eagain.c, tests/mini.c, tests/netconf-psk.c, + tests/nul-in-x509-names.c, tests/openpgp-keyring.c, + tests/openpgpself.c, tests/parse_ca.c, tests/pkcs12_encode.c, + tests/pkcs12_s2k.c, tests/pkcs12_s2k_pem.c, tests/pskself.c, + tests/resume.c, tests/set_pkcs12_cred.c, tests/simple.c, + tests/tlsia.c, tests/utils.c, tests/x509_altname.c, tests/x509dn.c, + tests/x509self.c, tests/x509sign-verify.c, tests/x509signself.c: + Indent code. -2006-02-08 Simon Josefsson +2010-04-14 Simon Josefsson - * lib/minitasn1/element.c, lib/minitasn1/structure.c: Fix - asn1_get_length_der usage. + * NEWS, lib/crypto-api.c, lib/ext_safe_renegotiation.c, + lib/gnutls_algorithms.c, lib/gnutls_cert.c, lib/libgnutls.map, + lib/x509/x509.c: Export new ABIs. Doc fixes for new APIs. -2006-02-08 Simon Josefsson +2010-04-14 Simon Josefsson - * lib/minitasn1/decoding.c: Revert. + * tests/safe-renegotiation/Makefile.am: Disable self-test + temporarily until we make it work cross-platform. -2006-02-08 Simon Josefsson +2010-04-13 Simon Josefsson - * tests/.cvsignore: [no log message] + * NEWS, lib/ext_safe_renegotiation.c, lib/gnutls_algorithms.c, + lib/includes/gnutls/gnutls.h.in: Doc fixes. -2006-02-08 Simon Josefsson +2010-04-13 Simon Josefsson - * lib/minitasn1/decoding.c: Fix for cert selftest. + * doc/manpages/Makefile.am, src/certtool-gaa.c: Generated. -2006-02-08 Simon Josefsson +2010-04-13 Simon Josefsson - * tests/Makefile.am: Add certder test. + * doc/reference/Makefile.am: Ignore c++defs.h. -2006-02-08 Simon Josefsson +2010-04-13 Simon Josefsson - * tests/certder.c: Add. + * .x-sc_prohibit_empty_lines_at_EOF, GNUmakefile, + build-aux/c++defs.h, build-aux/warn-on-use.h, doc/certtool.cfg, + doc/credentials/gnutls-http-serv, doc/credentials/params.pem, + doc/credentials/x509/Makefile.am, doc/credentials/x509/cert.pem, + doc/credentials/x509/clicert-dsa.pem, gl/Makefile.am, gl/fseeko.c, + gl/m4/fseeko.m4, gl/m4/gnulib-common.m4, gl/m4/gnulib-comp.m4, + gl/m4/lib-link.m4, gl/m4/memchr.m4, gl/m4/stdio_h.m4, + gl/m4/stdlib_h.m4, gl/m4/string_h.m4, gl/m4/time_h.m4, + gl/m4/unistd_h.m4, gl/m4/vasnprintf.m4, gl/stdio-impl.h, + gl/stdio.in.h, gl/stdlib.in.h, gl/string.in.h, gl/sys_socket.in.h, + gl/sys_stat.in.h, gl/sys_time.in.h, gl/tests/Makefile.am, + gl/tests/ioctl.c, gl/tests/sys_ioctl.in.h, + gl/tests/test-vasnprintf.c, gl/time.in.h, gl/unistd.in.h, + gl/vasnprintf.c, gl/wchar.in.h, guile/modules/gnutls/extra.scm, + guile/tests/x509-auth.scm, guile/tests/x509-certificate.pem, + lib/build-aux/c++defs.h, lib/build-aux/warn-on-use.h, + lib/ext_cert_type.h, lib/gl/Makefile.am, lib/gl/fseeko.c, + lib/gl/m4/fseeko.m4, lib/gl/m4/gnulib-common.m4, + lib/gl/m4/gnulib-comp.m4, lib/gl/m4/lib-link.m4, + lib/gl/m4/memchr.m4, lib/gl/m4/stdio_h.m4, lib/gl/m4/stdlib_h.m4, + lib/gl/m4/string_h.m4, lib/gl/m4/threadlib.m4, lib/gl/m4/time_h.m4, + lib/gl/m4/time_r.m4, lib/gl/m4/unistd_h.m4, + lib/gl/m4/vasnprintf.m4, lib/gl/stdio-impl.h, lib/gl/stdio.in.h, + lib/gl/stdlib.in.h, lib/gl/string.in.h, lib/gl/sys_socket.in.h, + lib/gl/sys_stat.in.h, lib/gl/tests/Makefile.am, + lib/gl/tests/test-vasnprintf.c, lib/gl/time.in.h, lib/gl/time_r.c, + lib/gl/unistd.in.h, lib/gl/vasnprintf.c, lib/gl/wchar.in.h, + lib/minitasn1/Makefile.am, lib/minitasn1/README, + lib/opencdk/keydb.h, lib/opencdk/packet.h, + libextra/gl/m4/gnulib-common.m4, libextra/gl/m4/gnulib-comp.m4, + libextra/gl/m4/lib-link.m4, maint.mk, src/certtool.gaa, + src/cfg/Makefile.am, src/crypt.gaa, src/tls_test.gaa, + tests/key-id/ca-gnutls-keyid.pem, tests/key-id/ca-no-keyid.pem, + tests/key-id/ca-weird-keyid.pem, + tests/pkcs1-padding/pkcs1-pad-broken.pem, + tests/pkcs1-padding/pkcs1-pad-broken2.pem, + tests/pkcs1-padding/pkcs1-pad-broken3.pem, + tests/pkcs1-padding/pkcs1-pad-ok.pem, + tests/pkcs1-padding/pkcs1-pad-ok2.pem, + tests/safe-renegotiation/Makefile.am, tests/test25.pem: Update + gnulib files, fix syntax-check warnings. -2006-02-08 Simon Josefsson +2010-03-31 Simon Josefsson - * NEWS: Add. + * .gitignore, gl/m4/wchar_h.m4, lib/gl/m4/wchar_h.m4: Add forgotten + gnulib files, and fix .gitignore. -2006-02-08 Simon Josefsson +2010-03-31 Simon Josefsson * NEWS: Add. -2006-02-08 Simon Josefsson - - * lib/minitasn1/libtasn1.h: Bump version. - -2006-02-08 Simon Josefsson - - * configure.in: Need libtasn1 0.2.18. - -2006-02-08 Simon Josefsson - - * lib/minitasn1/coding.c, lib/minitasn1/decoding.c, - lib/minitasn1/der.h, lib/minitasn1/element.c, - lib/minitasn1/libtasn1.h, lib/minitasn1/parser_aux.c, - lib/minitasn1/structure.c: Add libtasn1 fixes from Nikos, prompted - by report from "Evgeny Legerov" . - -2006-02-06 Nikos Mavrogiannopoulos - - * lib/x509/xml.c: some fixes for the new libtasn1 - -2006-02-05 Nikos Mavrogiannopoulos - - * lib/x509/mpi.c: [no log message] - -2006-02-05 Nikos Mavrogiannopoulos +2010-03-31 Simon Josefsson - * lib/x509/mpi.c: corrected wrong order of free. + * lib/po/LINGUAS, lib/po/it.po.in, lib/po/nl.po.in: Sync with TP. -2006-02-02 Simon Josefsson +2010-03-31 Simon Josefsson - * libextra/opencdk/main.h, libextra/opencdk/packet.h: Fix prototypes - for AIX compiler, reported by "Heiden, John" - . + * .x-sc_program_name, .x-sc_the_the, cfg.mk, + lib/ext_safe_renegotiation.c, lib/gnutls_handshake.c, + lib/m4/hooks.m4, lib/opencdk/sig-check.c, src/certtool.c, + src/serv.c, tests/dn.c, tests/mini.c: Update gnulib files. Fix + syntax-check warnings. -2006-02-01 Nikos Mavrogiannopoulos +2010-03-31 Simon Josefsson - * NEWS: [no log message] + * build-aux/c++defs.h, build-aux/vc-list-files, + build-aux/warn-on-use.h, gl/Makefile.am, gl/accept.c, + gl/arpa_inet.in.h, gl/bind.c, gl/connect.c, gl/getaddrinfo.c, + gl/gettext.h, gl/gettimeofday.c, gl/m4/arpa_inet_h.m4, + gl/m4/getaddrinfo.m4, gl/m4/gettimeofday.m4, + gl/m4/gnulib-common.m4, gl/m4/gnulib-comp.m4, gl/m4/inet_ntop.m4, + gl/m4/inet_pton.m4, gl/m4/lseek.m4, gl/m4/netdb_h.m4, + gl/m4/stddef_h.m4, gl/m4/stdio_h.m4, gl/m4/stdlib_h.m4, + gl/m4/string_h.m4, gl/m4/sys_ioctl_h.m4, gl/m4/sys_select_h.m4, + gl/m4/sys_socket_h.m4, gl/m4/sys_stat_h.m4, gl/m4/sys_time_h.m4, + gl/m4/time_h.m4, gl/m4/unistd_h.m4, gl/m4/warn-on-use.m4, + gl/m4/wchar.m4, gl/netdb.in.h, gl/netinet_in.in.h, gl/recv.c, + gl/select.c, gl/send.c, gl/stdint.in.h, gl/stdio.in.h, + gl/stdlib.in.h, gl/string.in.h, gl/sys_select.in.h, + gl/sys_socket.in.h, gl/sys_stat.in.h, gl/sys_time.in.h, + gl/tests/Makefile.am, gl/tests/ioctl.c, gl/tests/sys_ioctl.in.h, + gl/tests/test-vc-list-files-git.sh, gl/time.in.h, gl/unistd.in.h, + gl/wchar.in.h, lib/build-aux/c++defs.h, + lib/build-aux/warn-on-use.h, lib/gl/Makefile.am, lib/gl/gettext.h, + lib/gl/m4/gnulib-common.m4, lib/gl/m4/gnulib-comp.m4, + lib/gl/m4/intldir.m4, lib/gl/m4/lseek.m4, lib/gl/m4/netdb_h.m4, + lib/gl/m4/printf-posix.m4, lib/gl/m4/stddef_h.m4, + lib/gl/m4/stdio_h.m4, lib/gl/m4/stdlib_h.m4, lib/gl/m4/string_h.m4, + lib/gl/m4/strings_h.m4, lib/gl/m4/sys_socket_h.m4, + lib/gl/m4/sys_stat_h.m4, lib/gl/m4/time_h.m4, + lib/gl/m4/unistd_h.m4, lib/gl/m4/visibility.m4, + lib/gl/m4/warn-on-use.m4, lib/gl/m4/wchar.m4, lib/gl/netdb.in.h, + lib/gl/stdint.in.h, lib/gl/stdio.in.h, lib/gl/stdlib.in.h, + lib/gl/string.in.h, lib/gl/sys_socket.in.h, lib/gl/sys_stat.in.h, + lib/gl/tests/Makefile.am, lib/gl/time.in.h, lib/gl/unistd.in.h, + lib/gl/wchar.in.h, libextra/gl/m4/gnulib-common.m4, + libextra/gl/m4/gnulib-comp.m4, maint.mk: Update gnulib files. -2006-02-01 Nikos Mavrogiannopoulos +2010-03-30 Simon Josefsson - * lib/gnutls_x509.c: Corrected bugs in - gnutls_certificate_set_x509_crl() and - gnutls_certificate_set_x509_trust(), that caused memory corruption - if more than one certificates were added. Report and patch by Max - Kellermann . + * m4/valgrind.m4: Check for what we use. Bump serial. -2006-01-29 Nikos Mavrogiannopoulos +2010-03-30 Nikos Mavrogiannopoulos - * NEWS: [no log message] + * m4/valgrind.m4, tests/Makefile.am: Valgrind -q is now set by the + valgrind detection script to avoid issue when running tests without + valgrind. -2006-01-29 Nikos Mavrogiannopoulos +2010-03-27 Nikos Mavrogiannopoulos - * lib/gnutls_record.c: added some text about premature termination - of sessions. + * lib/gnutls_cert.c: increased small value for certificates. Typical + certificates are much longer than that. -2006-01-29 Nikos Mavrogiannopoulos +2010-03-20 Nikos Mavrogiannopoulos - * lib/gnutls_record.c: fixed bug in non-blocking gnutls_bye(). - gnutls_send will no longer invalidate session if the underlying send - fails, but it will set may_not_write to true. That is to allow - reading the already received data. Patches and bug reports by Yoann - Vandoorselaere + * configure.ac, tests/Makefile.am, tests/anonself.c, + tests/certder.c, tests/chainverify.c, tests/crq_apis.c, + tests/crq_key_id.c, tests/cve-2009-1415.c, tests/dhepskself.c, + tests/dn.c, tests/dn2.c, tests/finished.c, tests/gc.c, + tests/hostname-check.c, tests/init_roundtrip.c, + tests/mini-eagain.c, tests/mini.c, tests/moredn.c, tests/mpi.c, + tests/netconf-psk.c, tests/nul-in-x509-names.c, + tests/openpgp-keyring.c, tests/openpgpself.c, tests/openssl.c, + tests/parse_ca.c, tests/pkcs12_encode.c, tests/pkcs12_s2k.c, + tests/pskself.c, tests/resume.c, tests/set_pkcs12_cred.c, + tests/sha2/sha2, tests/simple.c, tests/tlsia.c, + tests/x509_altname.c, tests/x509dn.c, tests/x509self.c, + tests/x509sign-verify.c, tests/x509signself.c: Reduced several + unneeded messages during the make check procedure. Verbose messages + can be obtained with --verbose. -2006-01-27 Simon Josefsson +2010-03-20 Nikos Mavrogiannopoulos - * gl/.cvsignore: [no log message] + * doc/Makefile.am: use mv -f to avoid interactiveness. -2006-01-27 Simon Josefsson +2010-03-20 Nikos Mavrogiannopoulos - * gl/inet_ntop.h, gl/m4/gnulib-tool.m4, gl/m4/socklen.m4, - gl/m4/stdbool.m4, gl/socket_.h, gl/stdbool_.h, gl/vasnprintf.c: - Update. + * tests/dn2.c: Modified to account for postalcode. -2006-01-27 Simon Josefsson +2010-03-20 Nikos Mavrogiannopoulos - * src/common.h: Mingw32 fixes. + * NEWS: added news entry for postalcode. -2006-01-27 Simon Josefsson +2010-03-20 Nikos Mavrogiannopoulos - * doc/protocol/draft-salowey-tls-ticket-07.txt: Add. + * lib/includes/gnutls/x509.h, lib/pkix.asn, lib/pkix_asn1_tab.c, + lib/x509/common.c: Display postalCode and Name X.509 DN attributes + correctly. Based on patch by Pavan Konjarla. -2006-01-20 Simon Josefsson +2010-03-20 Nikos Mavrogiannopoulos - * doc/protocol/draft-santesson-tls-ume-01.txt: Add. + * lib/gnutls_algorithms.c, lib/gnutls_algorithms.h, + lib/includes/gnutls/gnutls.h.in, src/serv-gaa.c, src/serv.gaa: Each + ciphersuite is now tight with a minimum TLS version and a maximum + one. It is valid if it is between (and including) those. This was + added to deprecate TLS_RSA_EXPORT_WITH_RC4_40_MD5 which is not + available with TLS 1.1. Reported by Adrian F. Dimcev. -2006-01-20 Nikos Mavrogiannopoulos +2010-03-20 Nikos Mavrogiannopoulos - * src/tests.c, src/tests.h, src/tls_test.c: removed the RIPEMD test - since it is not supported any more. + * .gitignore: Ignore more files. -2006-01-20 Nikos Mavrogiannopoulos +2010-03-17 Nikos Mavrogiannopoulos - * doc/gnutls.texi: minor updates. + * NEWS, lib/auth_cert.c, lib/auth_cert.h, lib/gnutls_alert.c, + lib/gnutls_cert.c, lib/includes/gnutls/gnutls.h.in, + lib/libgnutls.map, src/cli.c: Added + gnutls_certificate_set_verify_function() to allow checking + (verifying) certificate before the handshake is completed. -2006-01-19 Simon Josefsson +2010-03-17 Nikos Mavrogiannopoulos - * gl/Makefile.am, gl/m4/gnulib-comp.m4, gl/m4/sys_socket_h.m4, - gl/md5.c, gl/md5.h, gl/sha1.c, gl/sha1.h, gl/socket_.h: Update. + * doc/examples/ex-rfc2818.c, doc/examples/ex-verify.c: Use the flags + for expiration instead of getting the time of each certificate. -2006-01-18 Simon Josefsson +2010-03-17 Simon Josefsson - * doc/TODO: Add. + * README-alpha: Mention datefudge. -2006-01-18 Simon Josefsson +2010-03-17 Simon Josefsson - * doc/protocol/draft-ietf-tls-openpgp-keys-08.txt: Add. + * tests/pkcs1-padding/pkcs1-pad: Skip test if datefudge is not + available. -2006-01-12 Simon Josefsson +2010-03-17 Nikos Mavrogiannopoulos - * NEWS, configure.in: Bump versions. + * lib/gnutls_priority.c: INITIAL_SAFE_RENEGOTIATION implies + SAFE_RENEGOTIATION. -2006-01-12 Simon Josefsson +2010-03-16 Nikos Mavrogiannopoulos - * Makefile.am: Fix igloo scp. + * lib/includes/gnutls/gnutls.h.in: Added missing prototype. -2006-01-12 Simon Josefsson +2010-03-16 Nikos Mavrogiannopoulos - * Makefile.am: Re-add igloo. + * tests/safe-renegotiation/testsrn: made SAFE_RENEGOTIATION flags + explicit. -2006-01-12 Simon Josefsson +2010-03-16 Nikos Mavrogiannopoulos - * ChangeLog: [no log message] + * lib/x509/verify.c, src/certtool.c: gnutls_x509_crt_verify() and + gnutls_x509_crt_list_verify() behave identically. That means that + gnutls_x509_crt_verify() will now check dates as well. Certool --verify-chain will use the GNUTLS_VERIFY_DO_NOT_ALLOW_SAME + flag to gnutls_x509_crt_verify() to force verification even if + certificates are the same. The only exception is at the final + certificate (self-checking) where the extra flag + GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT is specified to allow for v1 CA + certificates. -2006-01-12 Simon Josefsson +2010-03-16 Nikos Mavrogiannopoulos - * NEWS: Version 1.3.3. + * lib/x509/common.c: Handle dates before 1-1-1970 (handle as being + equal to 1-1-1970). -2006-01-12 Simon Josefsson +2010-03-16 Nikos Mavrogiannopoulos - * .cvscopying: Fix copyright years. + * tests/pkcs1-padding/pkcs1-pad: Fail if required programs are not + found. -2006-01-12 Simon Josefsson +2010-03-15 Nikos Mavrogiannopoulos - * doc/manpages/Makefile.am: Update. + * NEWS, doc/manpages/gnutls-cli.1, doc/manpages/gnutls-serv.1, + lib/ext_safe_renegotiation.c, lib/gnutls_priority.c, + lib/gnutls_record.c: Safe renegotiation is not enabled by default in + client side. -2006-01-11 Simon Josefsson +2010-03-15 Nikos Mavrogiannopoulos - * gl/Makefile.am, gl/dummy.c, gl/m4/gnulib-comp.m4, - gl/m4/readline.m4, gl/sha1.c, gl/stdint_.h: Update. + * doc/manpages/gnutls-cli.1, lib/gnutls_priority.c: better + documentation for %INITIAL_SAFE_RENEGOTIATION -2006-01-09 Simon Josefsson +2010-03-15 Simon Josefsson - * gl/m4/gnulib-comp.m4, gl/m4/gnulib-tool.m4, gl/m4/socklen.m4, - gl/m4/stdint.m4, gl/stdint_.h: Update. + * NEWS: Fix. -2006-01-09 Simon Josefsson +2010-03-15 Simon Josefsson - * doc/protocol/draft-santesson-tls-ume-00.txt: Add. + * tests/openpgp-certs/Makefile.am, tests/openpgp-certs/testselfsigs: + Rewrite tests/openpgp-certs/testselfsigs portably for Solaris. Fix + EXTRA_DIST. -2006-01-07 Nikos Mavrogiannopoulos +2010-03-15 Nikos Mavrogiannopoulos - * doc/bibliography.texi: [no log message] + * tests/safe-renegotiation/testsrn: localhost -> 127.0.0.1 to work + in places where localhost does not resolve. -2005-12-31 Simon Josefsson +2010-03-14 Nikos Mavrogiannopoulos - * includes/gnutls/extra.h: C++ fix. + * NEWS, lib/includes/gnutls/x509.h, lib/x509/verify.c: Extended time + verification to trusted certificate list as well. Introduced the + flag GNUTLS_VERIFY_DISABLE_TRUSTED_TIME_CHECKS that will prevent the + trusted certificate list verification. -2005-12-31 Simon Josefsson +2010-03-11 Nikos Mavrogiannopoulos - * libextra/gnutls_ia.c: Doc fix. + * src/tests.c, src/tests.h, src/tls_test.c: Added tests for safe + renegotiation. Removed old tests for obsolete features (lzo) and + tests that were not actually working (srp). -2005-12-28 Simon Josefsson +2010-03-11 Nikos Mavrogiannopoulos - * doc/protocol/draft-ietf-tls-openpgp-keys-07.txt: Add. + * lib/gnutls_extensions.c, lib/gnutls_extensions.h, + lib/gnutls_handshake.c, lib/includes/gnutls/gnutls.h.in, + tests/safe-renegotiation/testsrn: Extension generation in SSL 3.0 + (as a reply to SCSV) is not using common code with normal extension + generation. Solve issue reported by Tomas Mraz that caused SSL 3.0 + renegotiation fail. -2005-12-28 Simon Josefsson +2010-03-07 Nikos Mavrogiannopoulos - * NEWS, includes/gnutls/x509.h, lib/gnutls_errors.c, - lib/gnutls_global.h, lib/minitasn1/coding.c, - lib/minitasn1/errors.c, lib/x509/crq.c: Constify, tiny patch from - "ZIGLIO, Frediano, VF-IT" . + * lib/x509/verify.c: Removed artificial constrained that prevented + end-user certificates, being added to the trusted list, treated as + trusted. Suggestion and patch by Tomas Mraz. -2005-12-26 Simon Josefsson +2010-03-07 Nikos Mavrogiannopoulos - * NEWS: Add. + * doc/manpages/gnutls-cli.1: Documented that + initial_safe_renegotiation is the default. -2005-12-26 Simon Josefsson +2010-03-03 Nikos Mavrogiannopoulos - * lib/gnutls_global.c: Doc fix. + * src/serv.c: gnutls-serv will terminate connection on rehandshake + errors. -2005-12-26 Simon Josefsson +2010-03-03 Nikos Mavrogiannopoulos - * includes/gnutls/extra.h, libextra/gnutls_ia.c: Fix TLS/IA - prototypes, suggested by Jouni Malinen . + * lib/gnutls_alert.c, lib/gnutls_errors.c, lib/gnutls_handshake.c, + lib/includes/gnutls/gnutls.h.in: Avoid sending alerts during + handshake. Alerts might be interrupted and return a non-fatal error + which will propagate and in many cases it shouldn't. Avoid sending no renegotiation alert when a client connects to an + unsafe server. Thanks to Tomas Hoger for the report. -2005-12-23 Simon Josefsson +2010-02-26 Nikos Mavrogiannopoulos - * NEWS: Add. + * src/cli.c: On handshake error send appropriate alert and terminate + stream. -2005-12-23 Simon Josefsson +2010-02-18 Simon Josefsson - * lib/gnutls_global.c: Use _gnutls_init as increment/decrement - counter for init/deinit, suggested by ZIGLIO, Frediano. + * doc/reference/gnutls-docs.sgml: Add id's to chapters. -2005-12-18 Simon Josefsson +2010-02-18 Simon Josefsson - * includes/gnutls/gnutls.h.in: Cosmetic changes. + * .gitignore: Update. -2005-12-18 Simon Josefsson +2010-02-18 Simon Josefsson - * includes/gnutls/gnutls.h.in: Cosmetic changes. + * lib/po/zh_CN.po: Remove. -2005-12-18 Simon Josefsson +2010-02-18 Simon Josefsson - * tests/resume.c: Fix mem leak. + * src/Makefile.am: Fix -lrt usage. -2005-12-17 Simon Josefsson +2010-02-18 Simon Josefsson - * NEWS: Add. + * src/benchmark.c: Use gnulib gettime module. Indent. -2005-12-17 Nikos Mavrogiannopoulos +2010-02-18 Simon Josefsson - * doc/manpages/Makefile.am, includes/gnutls/gnutls.h.in, - lib/gnutls_compress_int.c, lib/gnutls_constate.c: fixed a memory - copy that caused crashes. + * lib/po/zh_CN.po: Add. -2005-12-17 Simon Josefsson +2010-02-18 Simon Josefsson - * tests/resume.c: More debug info. + * lib/gl/netdb.in.h: Update gnulib files. -2005-12-17 Simon Josefsson +2010-02-18 Simon Josefsson - * tests/.cvsignore: [no log message] + * gl/Makefile.am, gl/gettime.c, gl/gettimeofday.c, + gl/m4/clock_time.m4, gl/m4/gettime.m4, gl/m4/gnulib-cache.m4, + gl/m4/gnulib-comp.m4, gl/m4/timespec.m4, gl/netdb.in.h, + gl/tests/Makefile.am, gl/tests/gettimeofday.c, gl/timespec.h: Update + gnulib files. -2005-12-17 Simon Josefsson +2010-02-17 Simon Josefsson - * NEWS: Add. + * lib/cryptodev.c: Indent. Don't include fcntl.h and sys/ioctl.h on + (for example) Windows. -2005-12-17 Simon Josefsson +2010-02-17 Simon Josefsson - * tests/Makefile.am: Add resume self test. + * tests/safe-renegotiation/testsrn: Fix objdir != srcdir. -2005-12-17 Simon Josefsson +2010-02-17 Simon Josefsson - * tests/resume.c: Add, to test resume funtions. + * tests/safe-renegotiation/testsrn: Drop bashism. Make it work on + Windows. -2005-12-17 Simon Josefsson +2010-02-17 Simon Josefsson * NEWS: Fix. -2005-12-17 Simon Josefsson - - * doc/protocol/draft-salowey-tls-ticket-06.txt: Add. - -2005-12-16 Simon Josefsson - - * doc/TODO: Add. - -2005-12-16 Simon Josefsson - - * lib/gnutls_state.c: Doc fix. - -2005-12-16 Simon Josefsson - - * NEWS, includes/gnutls/gnutls.h.in: Add. - -2005-12-16 Simon Josefsson - - * lib/gnutls_state.c: Add API to get master secret too. +2010-02-17 Simon Josefsson -2005-12-15 Simon Josefsson + * NEWS: Add. - * includes/gnutls/gnutls.h.in: Fix. +2010-02-17 Simon Josefsson -2005-12-15 Simon Josefsson + * doc/manpages/Makefile.am: Generated. - * includes/gnutls/gnutls.h.in: Fix indentation. +2010-02-17 Simon Josefsson -2005-12-15 Simon Josefsson + * doc/reference/Makefile.am, doc/reference/gnutls-docs.sgml, + lib/ext_safe_renegotiation.c, lib/ext_signature.c, + lib/gnutls_supplemental.c: More GTK-DOC fixes. - * NEWS: Add. +2010-02-17 Simon Josefsson -2005-12-15 Simon Josefsson + * lib/gnutls_db.c: Doc fix. - * Makefile.am, includes/gnutls/extra.h, - includes/gnutls/gnutls.h.in, includes/gnutls/openpgp.h, - includes/gnutls/openssl.h, includes/gnutls/pkcs12.h, - includes/gnutls/x509.h, lib/auth_anon.c, lib/auth_cert.h, - lib/auth_dh_common.c, lib/auth_dh_common.h, lib/auth_dhe.c, - lib/auth_dhe_psk.c, lib/auth_psk.c, lib/auth_rsa.c, - lib/auth_rsa_export.c, lib/auth_srp.c, lib/auth_srp_passwd.h, - lib/auth_srp_sb64.c, lib/ext_inner_application.c, - lib/ext_inner_application.h, lib/ext_max_record.c, - lib/gnutls_algorithms.c, lib/gnutls_anon_cred.c, lib/gnutls_auth.c, - lib/gnutls_buffers.c, lib/gnutls_cert.c, lib/gnutls_db.h, - lib/gnutls_dh.c, lib/gnutls_dh.h, lib/gnutls_errors.c, - lib/gnutls_extensions.c, lib/gnutls_handshake.c, lib/gnutls_int.h, - lib/gnutls_mpi.c, lib/gnutls_mpi.h, lib/gnutls_pk.c, - lib/gnutls_pk.h, lib/gnutls_psk.c, lib/gnutls_record.c, - lib/gnutls_session.c, lib/gnutls_session_pack.c, - lib/gnutls_state.c, lib/gnutls_ui.c, lib/gnutls_x509.c, - lib/x509/mpi.h, lib/x509_b64.c, libextra/gnutls_ia.c, - libextra/openpgp/gnutls_openpgp.h, src/common.c, src/serv.c, - tests/dhepskself.c, tests/tlsia.c: Indent more. +2010-02-17 Simon Josefsson -2005-12-15 Simon Josefsson + * lib/openpgp/gnutls_openpgp.c: Doc fix. - * NEWS, configure.in: Bump versions. +2010-02-17 Simon Josefsson -2005-12-15 Simon Josefsson + * lib/includes/gnutls/gnutls.h.in: Doc fix. - * Makefile.am: Remove igloo, it seem weird. +2010-02-17 Simon Josefsson -2005-12-15 Simon Josefsson + * lib/includes/gnutls/gnutls.h.in: Fix enum doc. - * ChangeLog: [no log message] +2010-02-17 Simon Josefsson -2005-12-15 Simon Josefsson + * lib/includes/gnutls/gnutls.h.in: More enum docs. - * NEWS: Version 1.3.2. +2010-02-17 Simon Josefsson -2005-12-15 Simon Josefsson + * lib/includes/gnutls/crypto.h: More enum documentation. - * doc/manpages/Makefile.am: Update. +2010-02-17 Simon Josefsson -2005-12-15 Simon Josefsson + * libextra/gnutls_ia.c: Doc fix. - * NEWS: Add. +2010-02-17 Simon Josefsson -2005-12-15 Simon Josefsson + * lib/includes/gnutls/x509.h: More enum documentation. - * lib/gnutls_state.c, lib/gnutls_state.h: Fix warnings. +2010-02-17 Simon Josefsson -2005-12-15 Simon Josefsson + * libextra/includes/gnutls/extra.h: Document more. - * lib/gnutls_int.h: Remove debug code. +2010-02-17 Simon Josefsson -2005-12-15 Simon Josefsson + * lib/includes/gnutls/openpgp.h: Document more. - * THANKS: Add. +2010-02-17 Simon Josefsson -2005-12-15 Simon Josefsson + * lib/includes/gnutls/pkcs12.h: Document enum. - * NEWS, includes/gnutls/gnutls.h.in, lib/gnutls_state.c: Add - functions to access the TLS PRF and to extract client/server random - fields, suggested by Jouni Malinen . +2010-02-17 Simon Josefsson -2005-12-15 Simon Josefsson + * lib/includes/gnutls/gnutls.h.in: More enum. - * NEWS: Fix. +2010-02-17 Simon Josefsson -2005-12-15 Simon Josefsson + * lib/includes/gnutls/gnutls.h.in: Fix typo. - * NEWS: Fix. +2010-02-17 Simon Josefsson -2005-12-15 Simon Josefsson + * lib/includes/gnutls/gnutls.h.in: More GTK-DOC documentation. - * doc/reference/Makefile.am: Ignore more. +2010-02-17 Simon Josefsson -2005-12-15 Simon Josefsson + * lib/includes/gnutls/gnutls.h.in: Improve GTK-DOC coverage. - * doc/.cvsignore, libextra/.cvsignore, tests/.cvsignore: [no log - message] +2010-02-17 Simon Josefsson -2005-12-15 Simon Josefsson + * lib/includes/gnutls/crypto.h: Fix comments, for GTK-DOC. - * NEWS, doc/Makefile.am, doc/examples/ex-client-tlsia.c, - doc/gnutls.texi, doc/manpages/Makefile.am, includes/gnutls/extra.h, - includes/gnutls/gnutls.h.in, lib/Makefile.am, lib/debug.c, - lib/defines.h, lib/ext_inner_application.c, - lib/ext_inner_application.h, lib/gnutls_alert.c, - lib/gnutls_buffers.c, lib/gnutls_constate.c, lib/gnutls_errors.c, - lib/gnutls_extensions.c, lib/gnutls_int.h, lib/gnutls_kx.c, - lib/gnutls_record.c, lib/gnutls_state.c, libextra/Makefile.am, - libextra/gnutls_ia.c, tests/Makefile.am, tests/tlsia.c: Add TLS/IA - support. +2010-02-17 Simon Josefsson -2005-12-15 Simon Josefsson + * doc/reference/Makefile.am: Ignore more headers. - * gl/m4/gnulib-comp.m4: Update. +2010-02-17 Simon Josefsson -2005-12-12 Simon Josefsson + * lib/x509/crl.c: Doc fix. - * doc/TODO: Add. +2010-02-17 Simon Josefsson -2005-12-10 Nikos Mavrogiannopoulos + * lib/includes/gnutls/crypto.h: Fix for GTK-DOC parse breakage. - * lib/gnutls_ui.c: added missing set_params_function() +2010-02-17 Simon Josefsson -2005-12-09 Simon Josefsson + * doc/reference/Makefile.am: Ignore gnutlsxx.h too, GTK-DOC doesn't + handle C++. - * configure.in: Bump versions. +2010-02-17 Simon Josefsson -2005-12-09 Simon Josefsson + * doc/reference/Makefile.am: Need crypto.h too. - * NEWS: Add. +2010-02-17 Simon Josefsson -2005-12-09 Simon Josefsson - - * lib/auth_cert.c, lib/auth_cert.h, lib/auth_psk_passwd.c, - lib/auth_srp_passwd.c, lib/auth_srp_sb64.c, lib/defines.h, - lib/ext_cert_type.c, lib/ext_server_name.c, lib/ext_srp.c, - lib/gnutls_buffers.c, lib/gnutls_cert.c, lib/gnutls_dh.h, - lib/gnutls_dh_primes.c, lib/gnutls_int.h, lib/gnutls_pk.c, - lib/gnutls_pk.h, lib/gnutls_state.c, lib/gnutls_state.h, - lib/gnutls_ui.c, lib/gnutls_x509.c, lib/x509/common.c, - lib/x509/dn.c, lib/x509/extensions.c, lib/x509/pkcs7.c, - lib/x509/privkey_pkcs8.c, lib/x509_b64.c: Replace "uint" with - "unsigned". Remove unused "sint". - -2005-12-09 Simon Josefsson - - * lib/defines.h, lib/gnutls_handshake.c, lib/gnutls_handshake.h, - lib/gnutls_hash_int.c, lib/gnutls_hash_int.h, lib/gnutls_num.c, - lib/gnutls_num.h, lib/gnutls_session_pack.c, lib/x509/mpi.c, - lib/x509/mpi.h, libextra/openpgp/extras.c, - libextra/openpgp/gnutls_openpgp.h, libextra/openpgp/pgp.c: Replace - uint32 with uint32_t. - -2005-12-09 Simon Josefsson - - * lib/auth_dh_common.c, lib/auth_psk.c, lib/auth_rsa_export.c, - lib/auth_srp.c, lib/defines.h, lib/ext_max_record.c, - lib/ext_max_record.h, lib/ext_server_name.c, - lib/gnutls_algorithms.c, lib/gnutls_cipher.c, - lib/gnutls_extensions.c, lib/gnutls_extensions.h, - lib/gnutls_handshake.c, lib/gnutls_int.h, lib/gnutls_num.c, - lib/gnutls_num.h, lib/gnutls_record.c, lib/gnutls_v2_compat.c, - lib/x509/extensions.c, lib/x509/extensions.h, lib/x509/x509.c, - lib/x509/x509_write.c: Replace uint16 with uint16_t. + * doc/reference/Makefile.am: Improve header ignores. -2005-12-09 Simon Josefsson +2010-02-17 Simon Josefsson - * configure.in: Remove unused sizeof checks. + * lib/minitasn1/coding.c, lib/minitasn1/decoding.c, + lib/minitasn1/element.c, lib/minitasn1/errors.c, + lib/minitasn1/libtasn1.h, lib/minitasn1/parser_aux.c, + lib/minitasn1/structure.c: Upgrade to libtasn1 2.5 snapshot, for + GTK-DOC comments. -2005-12-09 Simon Josefsson +2010-02-17 Simon Josefsson - * configure.in, lib/auth_cert.c, lib/auth_dh_common.c, - lib/auth_rsa_export.c, lib/auth_srp.c, lib/auth_srp_passwd.h, - lib/auth_srp_sb64.c, lib/defines.h, lib/ext_cert_type.c, - lib/ext_max_record.c, lib/ext_server_name.c, lib/ext_srp.c, - lib/gnutls_alert.c, lib/gnutls_algorithms.c, - lib/gnutls_algorithms.h, lib/gnutls_cipher.c, lib/gnutls_cipher.h, - lib/gnutls_datum.c, lib/gnutls_db.c, lib/gnutls_db.h, - lib/gnutls_handshake.c, lib/gnutls_handshake.h, lib/gnutls_int.h, - lib/gnutls_kx.c, lib/gnutls_num.c, lib/gnutls_record.c, - lib/x509/extensions.c, lib/x509/pkcs12.c, lib/x509/pkcs7.c, - lib/x509/x509.c, lib/x509_b64.c, lib/x509_b64.h, - libextra/gnutls_openpgp.c, libextra/openpgp/gnutls_openpgp.h, - libextra/openpgp/xml.c: Replace uint8 with uint8_t. + * lib/includes/gnutls/openpgp.h: Another GTK-DOC fix. -2005-12-09 Simon Josefsson +2010-02-17 Simon Josefsson - * gl/Makefile.am, gl/m4/gnulib-cache.m4: Update. + * lib/auth_srp_sb64.c, lib/crypto-api.c, lib/crypto.c, + lib/ext_safe_renegotiation.c, lib/ext_server_name.c, + lib/ext_signature.c, lib/gnutls_alert.c, lib/gnutls_algorithms.c, + lib/gnutls_anon_cred.c, lib/gnutls_auth.c, lib/gnutls_buffers.c, + lib/gnutls_cert.c, lib/gnutls_compress.c, lib/gnutls_db.c, + lib/gnutls_dh_primes.c, lib/gnutls_errors.c, + lib/gnutls_extensions.c, lib/gnutls_global.c, + lib/gnutls_handshake.c, lib/gnutls_mem.c, lib/gnutls_priority.c, + lib/gnutls_psk.c, lib/gnutls_psk_netconf.c, lib/gnutls_record.c, + lib/gnutls_rsa_export.c, lib/gnutls_session.c, lib/gnutls_srp.c, + lib/gnutls_state.c, lib/gnutls_str.c, lib/gnutls_ui.c, + lib/gnutls_x509.c, lib/includes/gnutls/crypto.h, + lib/opencdk/stream.c, lib/openpgp/compat.c, lib/openpgp/extras.c, + lib/openpgp/gnutls_openpgp.c, lib/openpgp/output.c, + lib/openpgp/pgp.c, lib/openpgp/pgpverify.c, lib/openpgp/privkey.c, + lib/x509/common.c, lib/x509/crl.c, lib/x509/crl_write.c, + lib/x509/crq.c, lib/x509/dn.c, lib/x509/output.c, + lib/x509/pkcs12.c, lib/x509/pkcs12_bag.c, lib/x509/pkcs7.c, + lib/x509/privkey.c, lib/x509/privkey_pkcs8.c, + lib/x509/rfc2818_hostname.c, lib/x509/verify.c, lib/x509/x509.c, + lib/x509/x509_write.c, lib/x509_b64.c, libextra/gnutls_extra.c, + libextra/gnutls_ia.c, libextra/openssl_compat.c: Fix GTK-DOC syntax. + Unfortunately this looses some information. -2005-12-09 Simon Josefsson +2010-02-17 Simon Josefsson - * lib/defines.h: Remove unused types, to start the transition to the - POSIX integer types (uint32_t, uint16_t, uint8_t). + * lib/auth_srp_sb64.c, lib/crypto-api.c, + lib/ext_safe_renegotiation.c, lib/gnutls_anon_cred.c, + lib/gnutls_auth.c, lib/gnutls_cert.c, lib/gnutls_db.c, + lib/gnutls_dh.c, lib/gnutls_handshake.c, lib/gnutls_mem.c, + lib/gnutls_priority.c, lib/gnutls_psk.c, lib/gnutls_record.c, + lib/gnutls_session.c, lib/gnutls_srp.c, lib/gnutls_state.c, + lib/gnutls_x509.c, lib/x509/crl.c, lib/x509/crl_write.c, + lib/x509/pkcs12.c, lib/x509/pkcs12_bag.c, lib/x509/pkcs7.c, + lib/x509/privkey.c, lib/x509/privkey_pkcs8.c, lib/x509/sign.c, + lib/x509/verify.c, lib/x509/x509.c, lib/x509/x509_write.c, + libextra/openssl_compat.c: Align indentation of GTK-DOC comments. -2005-12-09 Simon Josefsson +2010-02-17 Simon Josefsson - * src/Makefile.am: Remove -I../lib, these tools should only use the - external API. + * lib/po/vi.po.in: Sync with TP. -2005-12-09 Simon Josefsson +2010-02-17 Simon Josefsson - * lib/defines.h, lib/gnutls_str.c: ULONG_MAX should be in limits.h, - so include it at the right place. + * doc/examples/Makefile.am: Silence gnulib warning about fseek. -2005-12-08 Simon Josefsson +2010-02-17 Simon Josefsson - * lib/x509/pkcs12.c: Fix mem leaks. Remove unused variable. + * build-aux/gendocs.sh, build-aux/gnupload, gl/Makefile.am, + gl/m4/getdelim.m4, gl/m4/getline.m4, gl/m4/gettimeofday.m4, + gl/m4/gnulib-comp.m4, gl/m4/stdio_h.m4, gl/m4/sys_time_h.m4, + gl/netdb.in.h, gl/stdio.in.h, gl/sys_time.in.h, + gl/tests/test-getdelim.c, gl/tests/test-getline.c, + gl/tests/test-gettimeofday.c, lib/gl/Makefile.am, + lib/gl/m4/stdio_h.m4, lib/gl/netdb.in.h, lib/gl/stdio.in.h, + maint.mk: Update gnulib files. -2005-12-08 Simon Josefsson +2010-02-05 Nikos Mavrogiannopoulos - * lib/gnutls_x509.c: Fix mem leak. + * lib/gnutls_session_pack.c: Corrected calculation of session data + for PSK ciphersuites. Solves issue #107256 reported by Wolfgang + Glas. -2005-12-08 Simon Josefsson +2010-02-03 Simon Josefsson - * ChangeLog: [no log message] + * doc/ANNOUNCE: Add announcement message. -2005-12-08 Simon Josefsson +2010-01-27 Simon Josefsson - * NEWS: Version 1.3.1. + * NEWS: Fix. -2005-12-08 Simon Josefsson +2010-01-27 Simon Josefsson - * lib/gnutls_str.c: Fix. + * NEWS: Add. -2005-12-08 Simon Josefsson +2010-01-27 Simon Josefsson - * tests/Makefile.am: Dist pkcs8 blobs. + * lib/po/LINGUAS, lib/po/cs.po.in, lib/po/de.po.in, + lib/po/fr.po.in, lib/po/ms.po.in, lib/po/nl.po.in, lib/po/pl.po.in, + lib/po/sv.po.in, lib/po/zh_CN.po.in: Sync with TP. -2005-12-08 Simon Josefsson +2010-01-27 Simon Josefsson - * NEWS: Add. + * build-aux/gnupload, doc/gendocs_template, + gl/tests/test-gettimeofday.c, gl/tests/test-memchr.c, + gl/tests/test-read-file.c, gl/tests/test-sockets.c, + lib/gl/tests/test-memchr.c, lib/gl/tests/test-read-file.c, + lib/gl/tests/test-sockets.c: Update gnulib files. -2005-12-08 Simon Josefsson +2010-01-27 Simon Josefsson - * NEWS: Add. + * AUTHORS: Add. -2005-12-08 Simon Josefsson +2010-01-27 Simon Josefsson - * doc/manpages/Makefile.am: Update. + * NEWS, lib/minitasn1/coding.c, lib/minitasn1/decoding.c, + lib/minitasn1/element.c, lib/minitasn1/errors.c, + lib/minitasn1/gstr.c, lib/minitasn1/int.h, + lib/minitasn1/libtasn1.h, lib/minitasn1/parser_aux.c, + lib/minitasn1/structure.c: Use libtasn1 v2.4. -2005-12-08 Simon Josefsson +2010-01-27 Simon Josefsson - * NEWS: Add. + * lib/gnutls.pc.in: Fix license. -2005-12-08 Simon Josefsson +2010-01-27 Simon Josefsson - * doc/TODO: Fix. + * .clcopying: Fix license. -2005-12-08 Simon Josefsson +2010-01-27 Simon Josefsson - * tests/enc3pkcs8.pem: add + * AUTHORS: Fix license. -2005-12-08 Simon Josefsson +2010-01-27 Simon Josefsson - * tests/enc3pkcs8.pem: Add. + * tests/key-id/README, tests/libgcrypt.supp, + tests/rsa-md5-collision/Makefile.am, + tests/rsa-md5-collision/README, tests/rsa-md5-collision/mbox, + tests/userid/userid.pem: License fix. -2005-12-08 Simon Josefsson +2010-01-27 Simon Josefsson - * tests/enc2pkcs8.pem, tests/pkcs8: Add rc2 pkcs#8 blob. + * ChangeLog, cfg.mk, configure.ac, doc/Makefile.am, + doc/credentials/Makefile.am, doc/cyclo/Makefile.am, doc/errcodes.c, + doc/examples/Makefile.am, doc/extract-guile-c-doc.scm, + doc/gendocs_template, doc/manpages/Makefile.am, doc/printlist.c, + gl/gnulib.mk, gl/m4/onceonly_2_57.m4, gl/tests/gnulib.mk, + guile/Makefile.am, guile/modules/Makefile.am, + guile/modules/gnutls.scm, guile/modules/gnutls/build/enums.scm, + guile/modules/gnutls/build/priorities.scm, + guile/modules/gnutls/build/smobs.scm, + guile/modules/gnutls/build/utils.scm, + guile/modules/gnutls/extra.scm, + guile/modules/system/documentation/c-snarf.scm, + guile/modules/system/documentation/output.scm, + guile/pre-inst-guile.in, guile/src/Makefile.am, guile/src/core.c, + guile/src/errors.c, guile/src/errors.h, guile/src/extra.c, + guile/src/make-enum-header.scm, guile/src/make-enum-map.scm, + guile/src/make-session-priorities.scm, + guile/src/make-smob-header.scm, guile/src/make-smob-types.scm, + guile/src/utils.c, guile/src/utils.h, guile/tests/Makefile.am, + guile/tests/anonymous-auth.scm, guile/tests/errors.scm, + guile/tests/openpgp-auth.scm, guile/tests/openpgp-keyring.scm, + guile/tests/openpgp-keys.scm, guile/tests/pkcs-import-export.scm, + guile/tests/session-record-port.scm, guile/tests/srp-base64.scm, + guile/tests/x509-auth.scm, guile/tests/x509-certificates.scm, + lib/Makefile.am, lib/auth_anon.c, lib/auth_anon.h, lib/auth_cert.c, + lib/auth_cert.h, lib/auth_dh_common.c, lib/auth_dh_common.h, + lib/auth_dhe.c, lib/auth_dhe_psk.c, lib/auth_psk.c, lib/auth_psk.h, + lib/auth_psk_passwd.c, lib/auth_psk_passwd.h, lib/auth_rsa.c, + lib/auth_rsa_export.c, lib/auth_srp.c, lib/auth_srp.h, + lib/auth_srp_passwd.c, lib/auth_srp_passwd.h, lib/auth_srp_rsa.c, + lib/auth_srp_sb64.c, lib/cipher-libgcrypt.c, lib/configure.ac, + lib/crypto-api.c, lib/crypto.c, lib/crypto.h, lib/cryptodev.c, + lib/debug.c, lib/debug.h, lib/ext_cert_type.c, lib/ext_cert_type.h, + lib/ext_max_record.c, lib/ext_max_record.h, lib/ext_oprfi.c, + lib/ext_oprfi.h, lib/ext_safe_renegotiation.c, + lib/ext_safe_renegotiation.h, lib/ext_server_name.c, + lib/ext_server_name.h, lib/ext_session_ticket.c, + lib/ext_session_ticket.h, lib/ext_signature.c, lib/ext_signature.h, + lib/ext_srp.c, lib/ext_srp.h, lib/gnutls_alert.c, + lib/gnutls_algorithms.c, lib/gnutls_algorithms.h, + lib/gnutls_anon_cred.c, lib/gnutls_auth.c, lib/gnutls_auth.h, + lib/gnutls_buffers.c, lib/gnutls_buffers.h, lib/gnutls_cert.c, + lib/gnutls_cert.h, lib/gnutls_cipher.c, lib/gnutls_cipher.h, + lib/gnutls_cipher_int.h, lib/gnutls_compress.c, + lib/gnutls_compress.h, lib/gnutls_constate.c, + lib/gnutls_constate.h, lib/gnutls_datum.c, lib/gnutls_datum.h, + lib/gnutls_db.c, lib/gnutls_db.h, lib/gnutls_dh.c, lib/gnutls_dh.h, + lib/gnutls_dh_primes.c, lib/gnutls_errors.c, lib/gnutls_errors.h, + lib/gnutls_extensions.c, lib/gnutls_extensions.h, + lib/gnutls_global.c, lib/gnutls_global.h, lib/gnutls_handshake.c, + lib/gnutls_handshake.h, lib/gnutls_hash_int.c, + lib/gnutls_hash_int.h, lib/gnutls_helper.c, lib/gnutls_int.h, + lib/gnutls_kx.c, lib/gnutls_kx.h, lib/gnutls_mem.c, + lib/gnutls_mem.h, lib/gnutls_mpi.c, lib/gnutls_mpi.h, + lib/gnutls_num.c, lib/gnutls_num.h, lib/gnutls_pk.c, + lib/gnutls_pk.h, lib/gnutls_priority.c, lib/gnutls_psk.c, + lib/gnutls_psk_netconf.c, lib/gnutls_record.c, lib/gnutls_record.h, + lib/gnutls_rsa_export.c, lib/gnutls_rsa_export.h, + lib/gnutls_session.c, lib/gnutls_session_pack.c, + lib/gnutls_session_pack.h, lib/gnutls_sig.c, lib/gnutls_sig.h, + lib/gnutls_srp.c, lib/gnutls_srp.h, lib/gnutls_state.c, + lib/gnutls_state.h, lib/gnutls_str.c, lib/gnutls_str.h, + lib/gnutls_supplemental.c, lib/gnutls_supplemental.h, + lib/gnutls_ui.c, lib/gnutls_v2_compat.c, lib/gnutls_v2_compat.h, + lib/gnutls_x509.c, lib/gnutls_x509.h, lib/includes/Makefile.am, + lib/includes/gnutls/crypto.h, lib/includes/gnutls/gnutls.h.in, + lib/includes/gnutls/openpgp.h, lib/includes/gnutls/pkcs12.h, + lib/includes/gnutls/x509.h, lib/libgnutls.map, lib/libgnutlsxx.map, + lib/m4/hooks.m4, lib/mac-libgcrypt.c, lib/minitasn1/Makefile.am, + lib/minitasn1/gstr.c, lib/minitasn1/int.h, + lib/minitasn1/libtasn1.h, lib/minitasn1/parser_aux.c, + lib/minitasn1/structure.c, lib/mpi-libgcrypt.c, + lib/opencdk/Makefile.am, lib/opencdk/armor.c, + lib/opencdk/context.h, lib/opencdk/filters.h, lib/opencdk/hash.c, + lib/opencdk/kbnode.c, lib/opencdk/keydb.c, lib/opencdk/literal.c, + lib/opencdk/main.c, lib/opencdk/main.h, lib/opencdk/misc.c, + lib/opencdk/new-packet.c, lib/opencdk/opencdk.h, + lib/opencdk/packet.h, lib/opencdk/pubkey.c, + lib/opencdk/read-packet.c, lib/opencdk/seskey.c, + lib/opencdk/sig-check.c, lib/opencdk/stream.c, + lib/opencdk/stream.h, lib/opencdk/types.h, lib/opencdk/verify.c, + lib/opencdk/write-packet.c, lib/openpgp/Makefile.am, + lib/openpgp/compat.c, lib/openpgp/extras.c, + lib/openpgp/gnutls_openpgp.c, lib/openpgp/output.c, + lib/openpgp/pgp.c, lib/openpgp/pgpverify.c, lib/openpgp/privkey.c, + lib/pk-libgcrypt.c, lib/po/cs.po.in, lib/po/de.po.in, + lib/po/fr.po.in, lib/po/ms.po.in, lib/po/nl.po.in, lib/po/pl.po.in, + lib/po/sv.po.in, lib/random.c, lib/random.h, lib/rnd-libgcrypt.c, + lib/x509/Makefile.am, lib/x509/common.c, lib/x509/common.h, + lib/x509/crl.c, lib/x509/crl_write.c, lib/x509/crq.c, + lib/x509/dn.c, lib/x509/extensions.c, lib/x509/mpi.c, + lib/x509/output.c, lib/x509/pbkdf2-sha1.c, lib/x509/pkcs12.c, + lib/x509/pkcs12_bag.c, lib/x509/pkcs12_encr.c, lib/x509/pkcs7.c, + lib/x509/privkey.c, lib/x509/privkey_pkcs8.c, + lib/x509/rfc2818_hostname.c, lib/x509/sign.c, lib/x509/verify.c, + lib/x509/x509.c, lib/x509/x509_int.h, lib/x509/x509_write.c, + lib/x509_b64.c, lib/x509_b64.h, libextra/Makefile.am, + libextra/configure.ac, libextra/ext_inner_application.c, + libextra/ext_inner_application.h, libextra/fipsmd5.c, + libextra/gl/Makefile.am, libextra/gnutls-extra.pc.in, + libextra/gnutls_extra.c, libextra/gnutls_ia.c, + libextra/gnutls_openssl.c, libextra/includes/Makefile.am, + libextra/includes/gnutls/extra.h, + libextra/includes/gnutls/openssl.h, libextra/libgnutls-extra.map, + libextra/m4/hooks.m4, libextra/openssl_compat.c, + libextra/openssl_compat.h, m4/guile.m4, m4/valgrind.m4, + src/Makefile.am, src/common.c, src/serv.c, tests/Makefile.am, + tests/anonself.c, tests/certder.c, + tests/certificate_set_x509_crl.c, tests/chainverify.c, + tests/crq_apis.c, tests/crq_key_id.c, tests/crypto_rng.c, + tests/cve-2008-4989.c, tests/cve-2009-1415.c, + tests/cve-2009-1416.c, tests/dhepskself.c, tests/dn.c, tests/dn2.c, + tests/finished.c, tests/gc.c, tests/hostname-check.c, + tests/init_roundtrip.c, tests/key-id/Makefile.am, + tests/key-id/key-id, tests/mini-eagain.c, tests/mini.c, + tests/moredn.c, tests/mpi.c, tests/netconf-psk.c, + tests/nist-pkits/pkits, tests/nist-pkits/pkits_crl, + tests/nist-pkits/pkits_crt, tests/nist-pkits/pkits_pkcs12, + tests/nist-pkits/pkits_smime, tests/nul-in-x509-names.c, + tests/openpgp-certs/Makefile.am, tests/openpgp-keyring.c, + tests/openpgpself.c, tests/openssl.c, tests/oprfi.c, + tests/parse_ca.c, tests/pathlen/Makefile.am, tests/pathlen/pathlen, + tests/pgps2kgnu.c, tests/pkcs1-padding/Makefile.am, + tests/pkcs1-padding/pkcs1-pad, tests/pkcs12-decode/Makefile.am, + tests/pkcs12-decode/pkcs12, tests/pkcs12_encode.c, + tests/pkcs12_s2k.c, tests/pkcs12_s2k_pem.c, + tests/pkcs8-decode/Makefile.am, tests/pkcs8-decode/pkcs8, + tests/pskself.c, tests/resume.c, tests/rfc2253-escape-test, + tests/rsa-md5-collision/Makefile.am, + tests/rsa-md5-collision/rsa-md5-collision, tests/set_pkcs12_cred.c, + tests/setcredcrash.c, tests/sha2/Makefile.am, tests/sha2/sha2, + tests/simple.c, tests/tlsia.c, tests/userid/Makefile.am, + tests/userid/userid, tests/utils.c, tests/utils.h, + tests/x509_altname.c, tests/x509dn.c, tests/x509paths/chain, + tests/x509self.c, tests/x509sign-verify.c, tests/x509signself.c: + Update copyright years. -2005-12-08 Simon Josefsson +2010-01-27 Simon Josefsson - * tests/encpkcs8.pem, tests/unencpkcs8.pem: Fix. + * Makefile.am: Fix license. -2005-12-08 Simon Josefsson +2010-01-27 Simon Josefsson - * tests/Makefile.am, tests/pkcs8: Add PKCS#8 self test. + * README: Fix license. -2005-12-08 Simon Josefsson +2010-01-27 Simon Josefsson - * NEWS: Add. + * README-alpha: Fix license. -2005-12-08 Simon Josefsson +2010-01-27 Simon Josefsson - * src/certtool.c: Make --password work for PKCS#8 --key-info. + * src/cli.c: Fix license. -2005-12-08 Simon Josefsson +2010-01-27 Simon Josefsson - * tests/encpkcs8.pem, tests/unencpkcs8.pem: Add, PKSC#8 blobs. + * src/crypt.c: Fix license. -2005-12-08 Simon Josefsson +2010-01-27 Simon Josefsson - * doc/TODO: Remove. + * src/tls_test.c: Fix license. -2005-12-08 Simon Josefsson +2010-01-27 Simon Josefsson - * NEWS: Add. + * src/tests.c: Fix license. -2005-12-08 Simon Josefsson +2010-01-27 Simon Josefsson - * lib/x509/privkey_pkcs8.c: (gnutls_x509_privkey_import_pkcs8): Handle unencrypted PEM keys. - Remove unused "encrypted" variable. + * src/psk.c: Fix license. -2005-12-08 Simon Josefsson +2010-01-27 Simon Josefsson - * NEWS, src/certtool.c: Generate unencrypted PKCS#8 keys for blank - passwords. + * src/prime.c: Fix license. -2005-12-08 Simon Josefsson +2010-01-27 Simon Josefsson - * NEWS: Fix. + * src/certtool.c: Fix license. -2005-12-08 Simon Josefsson +2010-01-27 Simon Josefsson - * tests/.cvsignore: [no log message] + * src/certtool-cfg.c: Fix copyright/license. -2005-12-08 Simon Josefsson +2010-01-27 Simon Josefsson - * NEWS, doc/TODO, includes/gnutls/gnutls.h.in, lib/gnutls_x509.c, - tests/Makefile.am, tests/set_pkcs12_cred.c: Support reading X.509 - credentials from PKCS#12 files. + * src/benchmark.c: Indent and fix copyright notices. -2005-12-08 Simon Josefsson +2010-01-27 Simon Josefsson - * src/certtool.c: Print PKCS#12 type for each element. + * build-aux/gnupload, gl/tests/test-gettimeofday.c, + gl/tests/test-memchr.c, gl/tests/test-read-file.c, + gl/tests/test-sockets.c, lib/gl/tests/test-memchr.c, + lib/gl/tests/test-read-file.c, lib/gl/tests/test-sockets.c: Update + gnulib files. -2005-12-06 Simon Josefsson +2010-01-27 Simon Josefsson - * doc/protocol/rfc4279.txt: Add. + * ChangeLog, ChangeLog.1, THANKS, build-aux/gnupload, cfg.mk, + doc/Makefile.am, doc/credentials/Makefile.am, + doc/cyclo/Makefile.am, doc/errcodes.c, doc/examples/Makefile.am, + doc/extract-guile-c-doc.scm, doc/manpages/Makefile.am, + doc/printlist.c, gl/tests/test-gettimeofday.c, + gl/tests/test-memchr.c, gl/tests/test-read-file.c, + gl/tests/test-sockets.c, guile/Makefile.am, + guile/modules/Makefile.am, guile/modules/gnutls.scm, + guile/modules/gnutls/build/enums.scm, + guile/modules/gnutls/build/priorities.scm, + guile/modules/gnutls/build/smobs.scm, + guile/modules/gnutls/build/utils.scm, + guile/modules/gnutls/extra.scm, + guile/modules/system/documentation/c-snarf.scm, + guile/modules/system/documentation/output.scm, + guile/pre-inst-guile.in, guile/src/errors.h, + guile/src/make-enum-header.scm, guile/src/make-enum-map.scm, + guile/src/make-session-priorities.scm, + guile/src/make-smob-header.scm, guile/src/make-smob-types.scm, + guile/src/utils.h, guile/tests/anonymous-auth.scm, + guile/tests/errors.scm, guile/tests/openpgp-auth.scm, + guile/tests/openpgp-keyring.scm, guile/tests/openpgp-keys.scm, + guile/tests/pkcs-import-export.scm, + guile/tests/session-record-port.scm, guile/tests/srp-base64.scm, + guile/tests/x509-auth.scm, guile/tests/x509-certificates.scm, + lib/Makefile.am, lib/auth_anon.c, lib/auth_anon.h, lib/auth_cert.c, + lib/auth_cert.h, lib/auth_dh_common.c, lib/auth_dh_common.h, + lib/auth_dhe.c, lib/auth_dhe_psk.c, lib/auth_psk.c, lib/auth_psk.h, + lib/auth_psk_passwd.c, lib/auth_psk_passwd.h, lib/auth_rsa.c, + lib/auth_rsa_export.c, lib/auth_srp.c, lib/auth_srp.h, + lib/auth_srp_passwd.c, lib/auth_srp_passwd.h, lib/auth_srp_rsa.c, + lib/auth_srp_sb64.c, lib/cipher-libgcrypt.c, lib/crypto-api.c, + lib/crypto.c, lib/crypto.h, lib/cryptodev.c, lib/debug.c, + lib/debug.h, lib/ext_cert_type.c, lib/ext_cert_type.h, + lib/ext_max_record.c, lib/ext_max_record.h, lib/ext_oprfi.c, + lib/ext_oprfi.h, lib/ext_safe_renegotiation.c, + lib/ext_safe_renegotiation.h, lib/ext_server_name.c, + lib/ext_server_name.h, lib/ext_session_ticket.c, + lib/ext_session_ticket.h, lib/ext_signature.c, lib/ext_signature.h, + lib/ext_srp.c, lib/ext_srp.h, lib/gl/tests/test-memchr.c, + lib/gl/tests/test-read-file.c, lib/gl/tests/test-sockets.c, + lib/gnutls_alert.c, lib/gnutls_algorithms.c, + lib/gnutls_algorithms.h, lib/gnutls_anon_cred.c, lib/gnutls_auth.c, + lib/gnutls_auth.h, lib/gnutls_buffers.c, lib/gnutls_buffers.h, + lib/gnutls_cert.c, lib/gnutls_cert.h, lib/gnutls_cipher.c, + lib/gnutls_cipher.h, lib/gnutls_cipher_int.c, + lib/gnutls_cipher_int.h, lib/gnutls_compress.c, + lib/gnutls_compress.h, lib/gnutls_constate.c, + lib/gnutls_constate.h, lib/gnutls_datum.c, lib/gnutls_datum.h, + lib/gnutls_db.c, lib/gnutls_db.h, lib/gnutls_dh.c, lib/gnutls_dh.h, + lib/gnutls_dh_primes.c, lib/gnutls_errors.c, lib/gnutls_errors.h, + lib/gnutls_extensions.c, lib/gnutls_extensions.h, + lib/gnutls_global.c, lib/gnutls_global.h, lib/gnutls_handshake.c, + lib/gnutls_handshake.h, lib/gnutls_hash_int.c, + lib/gnutls_hash_int.h, lib/gnutls_helper.c, lib/gnutls_int.h, + lib/gnutls_kx.c, lib/gnutls_kx.h, lib/gnutls_mem.c, + lib/gnutls_mem.h, lib/gnutls_mpi.c, lib/gnutls_mpi.h, + lib/gnutls_num.c, lib/gnutls_num.h, lib/gnutls_pk.c, + lib/gnutls_pk.h, lib/gnutls_priority.c, lib/gnutls_psk.c, + lib/gnutls_psk_netconf.c, lib/gnutls_record.c, lib/gnutls_record.h, + lib/gnutls_rsa_export.c, lib/gnutls_rsa_export.h, + lib/gnutls_session.c, lib/gnutls_session_pack.c, + lib/gnutls_session_pack.h, lib/gnutls_sig.c, lib/gnutls_sig.h, + lib/gnutls_srp.c, lib/gnutls_srp.h, lib/gnutls_state.c, + lib/gnutls_state.h, lib/gnutls_str.c, lib/gnutls_str.h, + lib/gnutls_supplemental.c, lib/gnutls_supplemental.h, + lib/gnutls_ui.c, lib/gnutls_v2_compat.c, lib/gnutls_v2_compat.h, + lib/gnutls_x509.c, lib/gnutls_x509.h, lib/includes/Makefile.am, + lib/includes/gnutls/crypto.h, lib/includes/gnutls/gnutls.h.in, + lib/includes/gnutls/openpgp.h, lib/includes/gnutls/pkcs12.h, + lib/includes/gnutls/x509.h, lib/libgnutls.map, lib/libgnutlsxx.map, + lib/mac-libgcrypt.c, lib/minitasn1/Makefile.am, + lib/minitasn1/coding.c, lib/minitasn1/decoding.c, + lib/minitasn1/element.c, lib/minitasn1/gstr.c, + lib/minitasn1/libtasn1.h, lib/minitasn1/parser_aux.c, + lib/minitasn1/structure.c, lib/mpi-libgcrypt.c, + lib/opencdk/Makefile.am, lib/opencdk/hash.c, + lib/openpgp/Makefile.am, lib/openpgp/compat.c, + lib/openpgp/extras.c, lib/openpgp/gnutls_openpgp.c, + lib/openpgp/output.c, lib/openpgp/pgp.c, lib/openpgp/pgpverify.c, + lib/openpgp/privkey.c, lib/pk-libgcrypt.c, lib/random.c, + lib/random.h, lib/rnd-libgcrypt.c, lib/x509/Makefile.am, + lib/x509/common.c, lib/x509/common.h, lib/x509/crl.c, + lib/x509/crl_write.c, lib/x509/crq.c, lib/x509/dn.c, + lib/x509/extensions.c, lib/x509/mpi.c, lib/x509/output.c, + lib/x509/pkcs12.c, lib/x509/pkcs12_bag.c, lib/x509/pkcs7.c, + lib/x509/privkey.c, lib/x509/privkey_pkcs8.c, + lib/x509/rfc2818_hostname.c, lib/x509/sign.c, lib/x509/verify.c, + lib/x509/x509.c, lib/x509/x509_int.h, lib/x509/x509_write.c, + lib/x509_b64.c, lib/x509_b64.h, libextra/Makefile.am, + libextra/ext_inner_application.c, libextra/ext_inner_application.h, + libextra/fipsmd5.c, libextra/gl/Makefile.am, + libextra/gnutls-extra.pc.in, libextra/gnutls_extra.c, + libextra/gnutls_ia.c, libextra/gnutls_openssl.c, + libextra/includes/Makefile.am, libextra/includes/gnutls/extra.h, + libextra/includes/gnutls/openssl.h, libextra/libgnutls-extra.map, + libextra/openssl_compat.c, libextra/openssl_compat.h, + src/Makefile.am, src/benchmark.c, src/certtool-cfg.c, + src/certtool.c, src/common.c, src/crypt.c, src/prime.c, src/psk.c, + src/serv.c, src/tests.c, src/tls_test.c, tests/Makefile.am, + tests/anonself.c, tests/certder.c, tests/chainverify.c, + tests/crq_apis.c, tests/crq_key_id.c, tests/crypto_rng.c, + tests/cve-2008-4989.c, tests/cve-2009-1415.c, + tests/cve-2009-1416.c, tests/dhepskself.c, tests/dn.c, tests/dn2.c, + tests/finished.c, tests/gc.c, tests/hostname-check.c, + tests/init_roundtrip.c, tests/key-id/Makefile.am, + tests/key-id/key-id, tests/mini-eagain.c, tests/mini.c, + tests/moredn.c, tests/mpi.c, tests/netconf-psk.c, + tests/nist-pkits/pkits, tests/nist-pkits/pkits_crl, + tests/nist-pkits/pkits_crt, tests/nist-pkits/pkits_pkcs12, + tests/nist-pkits/pkits_smime, tests/nul-in-x509-names.c, + tests/openpgp-certs/Makefile.am, tests/openpgp-certs/testcerts, + tests/openpgp-certs/testselfsigs, tests/openpgp-keyring.c, + tests/openpgpself.c, tests/openssl.c, tests/oprfi.c, + tests/parse_ca.c, tests/pathlen/Makefile.am, tests/pathlen/pathlen, + tests/pkcs1-padding/Makefile.am, tests/pkcs1-padding/pkcs1-pad, + tests/pkcs12-decode/Makefile.am, tests/pkcs12-decode/pkcs12, + tests/pkcs12_encode.c, tests/pkcs12_s2k.c, tests/pkcs12_s2k_pem.c, + tests/pkcs8-decode/Makefile.am, tests/pkcs8-decode/pkcs8, + tests/pskself.c, tests/resume.c, tests/rfc2253-escape-test, + tests/rsa-md5-collision/Makefile.am, + tests/rsa-md5-collision/rsa-md5-collision, + tests/safe-renegotiation/Makefile.am, + tests/safe-renegotiation/testsrn, tests/set_pkcs12_cred.c, + tests/setcredcrash.c, tests/sha2/Makefile.am, tests/sha2/sha2, + tests/simple.c, tests/tlsia.c, tests/userid/Makefile.am, + tests/userid/userid, tests/utils.c, tests/utils.h, + tests/x509_altname.c, tests/x509dn.c, tests/x509paths/chain, + tests/x509self.c, tests/x509sign-verify.c, tests/x509signself.c: Fix + FSF copyright notices. -2005-12-02 Nikos Mavrogiannopoulos +2010-01-27 Simon Josefsson - * lib/gnutls_session_pack.c: Corrected bugs in session resumption. - Bugs reported by Yoann Vandoorselare. + * THANKS, doc/gnutls.texi: doc: Fix pkg-config recommendation. Reported by Claudio Saavedra in -2005-12-02 Simon Josefsson + . - * Makefile.am: Put 1.3.x releases in devel/ directory. +2010-01-27 Simon Josefsson -2005-12-02 Simon Josefsson + * NEWS, THANKS, src/cli.c: gnutls-cli: Handle reading binary data + from server. Reported by and tiny patch from Vitaly Mayatskikh + in - * doc/TODO: add + . -2005-12-02 Simon Josefsson +2010-01-26 Simon Josefsson - * doc/TODO: Add. + * build-aux/update-copyright, gl/Makefile.am, + gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, gl/tests/Makefile.am, + gl/tests/test-update-copyright.sh: Update gnulib files. -2005-12-02 Simon Josefsson +2010-01-26 Nikos Mavrogiannopoulos - * doc/TODO: Fix. + * tests/openpgp-certs/testcerts, tests/openpgp-certs/testselfsigs, + tests/safe-renegotiation/testsrn: Added copyright notices! -2005-12-02 Simon Josefsson +2010-01-26 Simon Josefsson - * doc/TODO: Add. + * NEWS, doc/manpages/Makefile.am: Generated. -2005-12-02 Simon Josefsson +2010-01-26 Simon Josefsson - * doc/TODO: Add. + * .gitignore: Improve. -2005-12-02 Simon Josefsson +2010-01-26 Simon Josefsson - * doc/TODO: Add. + * doc/reference/Makefile.am: Ignore more. -2005-12-02 Simon Josefsson +2010-01-26 Simon Josefsson - * doc/TODO: Add. + * .gitignore, lib/gl/m4/warn-on-use.m4: Update gnulib files. -2005-12-02 Simon Josefsson +2010-01-26 Simon Josefsson - * doc/README.CODING_STYLE: Mention indentation. + * gl/m4/warn-on-use.m4, lib/build-aux/arg-nonnull.h, + lib/build-aux/warn-on-use.h: Update gnulib files. -2005-12-02 Simon Josefsson +2010-01-26 Simon Josefsson - * doc/TODO: Add. + * .gitignore: Fix. -2005-12-01 Simon Josefsson +2010-01-26 Simon Josefsson - * gl/m4/socklen.m4, gl/readline.c, gl/stdint_.h: Update. + * lib/gl/tests/macros.h, lib/gl/tests/signature.h: Update gnulib + files. -2005-12-01 Simon Josefsson +2010-01-26 Simon Josefsson - * src/cli.c: Don't infloop. + * .gitignore: Fix -2005-12-01 Simon Josefsson +2010-01-26 Simon Josefsson - * NEWS: Add. + * gl/tests/macros.h, gl/tests/signature.h, + gl/tests/test-sys_ioctl.c: Update gnulib files. -2005-12-01 Simon Josefsson +2010-01-26 Simon Josefsson - * src/cli.c: Check starttls_alarmed earlier, the signal might be - sent before select is called. Report by Otto Maddox - and influenced by tiny patch from Nozomu - Ando . + * GNUmakefile, build-aux/arg-nonnull.h, build-aux/config.rpath, + build-aux/gendocs.sh, build-aux/gnupload, build-aux/link-warning.h, + build-aux/pmccabe2html, build-aux/useless-if-before-free, + build-aux/vc-list-files, build-aux/warn-on-use.h, gl/Makefile.am, + gl/accept.c, gl/alignof.h, gl/alloca.c, gl/alloca.in.h, + gl/arpa_inet.in.h, gl/asnprintf.c, gl/bind.c, gl/c-ctype.c, + gl/c-ctype.h, gl/close-hook.c, gl/close-hook.h, gl/close.c, + gl/connect.c, gl/errno.in.h, gl/error.c, gl/error.h, gl/fclose.c, + gl/float+.h, gl/float.in.h, gl/fseeko.c, gl/gai_strerror.c, + gl/getaddrinfo.c, gl/getdelim.c, gl/getline.c, gl/getpass.c, + gl/getpass.h, gl/gettext.h, gl/inet_ntop.c, gl/inet_pton.c, + gl/intprops.h, gl/listen.c, gl/lseek.c, gl/m4/00gnulib.m4, + gl/m4/alloca.m4, gl/m4/arpa_inet_h.m4, gl/m4/autobuild.m4, + gl/m4/close.m4, gl/m4/errno_h.m4, gl/m4/error.m4, + gl/m4/extensions.m4, gl/m4/fclose.m4, gl/m4/float_h.m4, + gl/m4/fseeko.m4, gl/m4/getaddrinfo.m4, gl/m4/getdelim.m4, + gl/m4/getline.m4, gl/m4/getpass.m4, gl/m4/gettimeofday.m4, + gl/m4/gnulib-cache.m4, gl/m4/gnulib-common.m4, + gl/m4/gnulib-comp.m4, gl/m4/gnulib-tool.m4, gl/m4/hostent.m4, + gl/m4/include_next.m4, gl/m4/inet_ntop.m4, gl/m4/inet_pton.m4, + gl/m4/intmax_t.m4, gl/m4/inttypes_h.m4, gl/m4/lib-ld.m4, + gl/m4/lib-link.m4, gl/m4/lib-prefix.m4, gl/m4/longlong.m4, + gl/m4/lseek.m4, gl/m4/malloc.m4, gl/m4/manywarnings.m4, + gl/m4/memchr.m4, gl/m4/minmax.m4, gl/m4/mmap-anon.m4, + gl/m4/multiarch.m4, gl/m4/netdb_h.m4, gl/m4/netinet_in_h.m4, + gl/m4/perror.m4, gl/m4/printf.m4, gl/m4/read-file.m4, + gl/m4/readline.m4, gl/m4/realloc.m4, gl/m4/select.m4, + gl/m4/servent.m4, gl/m4/size_max.m4, gl/m4/snprintf.m4, + gl/m4/sockets.m4, gl/m4/socklen.m4, gl/m4/sockpfaf.m4, + gl/m4/stdarg.m4, gl/m4/stdbool.m4, gl/m4/stddef_h.m4, + gl/m4/stdint.m4, gl/m4/stdint_h.m4, gl/m4/stdio_h.m4, + gl/m4/stdlib_h.m4, gl/m4/strerror.m4, gl/m4/string_h.m4, + gl/m4/sys_ioctl_h.m4, gl/m4/sys_select_h.m4, gl/m4/sys_socket_h.m4, + gl/m4/sys_stat_h.m4, gl/m4/sys_time_h.m4, gl/m4/time_h.m4, + gl/m4/ungetc.m4, gl/m4/unistd_h.m4, gl/m4/vasnprintf.m4, + gl/m4/version-etc.m4, gl/m4/warnings.m4, gl/m4/wchar.m4, + gl/m4/wchar_t.m4, gl/m4/wint_t.m4, gl/m4/xsize.m4, gl/memchr.c, + gl/minmax.h, gl/netdb.in.h, gl/netinet_in.in.h, + gl/override/lib/gettext.h.diff, gl/perror.c, gl/printf-args.c, + gl/printf-args.h, gl/printf-parse.c, gl/printf-parse.h, + gl/progname.c, gl/progname.h, gl/read-file.c, gl/read-file.h, + gl/readline.c, gl/readline.h, gl/realloc.c, gl/recv.c, gl/select.c, + gl/send.c, gl/setsockopt.c, gl/shutdown.c, gl/size_max.h, + gl/snprintf.c, gl/socket.c, gl/sockets.c, gl/sockets.h, + gl/stdarg.in.h, gl/stdbool.in.h, gl/stddef.in.h, gl/stdint.in.h, + gl/stdio-impl.h, gl/stdio-write.c, gl/stdio.in.h, gl/stdlib.in.h, + gl/strerror.c, gl/string.in.h, gl/sys_select.in.h, + gl/sys_socket.in.h, gl/sys_stat.in.h, gl/sys_time.in.h, + gl/tests/Makefile.am, gl/tests/dummy.c, gl/tests/gettimeofday.c, + gl/tests/ioctl.c, gl/tests/sys_ioctl.in.h, gl/tests/test-alignof.c, + gl/tests/test-alloca-opt.c, gl/tests/test-arpa_inet.c, + gl/tests/test-c-ctype.c, gl/tests/test-errno.c, + gl/tests/test-fseeko.c, gl/tests/test-getaddrinfo.c, + gl/tests/test-getdelim.c, gl/tests/test-getline.c, + gl/tests/test-gettimeofday.c, gl/tests/test-inet_ntop.c, + gl/tests/test-inet_pton.c, gl/tests/test-lseek.c, + gl/tests/test-memchr.c, gl/tests/test-netdb.c, + gl/tests/test-netinet_in.c, gl/tests/test-perror.c, + gl/tests/test-read-file.c, gl/tests/test-select-fd.c, + gl/tests/test-select-stdin.c, gl/tests/test-select.c, + gl/tests/test-snprintf.c, gl/tests/test-stdbool.c, + gl/tests/test-stddef.c, gl/tests/test-stdint.c, + gl/tests/test-stdio.c, gl/tests/test-stdlib.c, + gl/tests/test-strerror.c, gl/tests/test-string.c, + gl/tests/test-sys_select.c, gl/tests/test-sys_socket.c, + gl/tests/test-sys_stat.c, gl/tests/test-sys_time.c, + gl/tests/test-time.c, gl/tests/test-unistd.c, + gl/tests/test-vasnprintf.c, gl/tests/test-vc-list-files-cvs.sh, + gl/tests/test-vc-list-files-git.sh, gl/tests/test-version-etc.c, + gl/tests/test-version-etc.sh, gl/tests/test-wchar.c, + gl/tests/verify.h, gl/tests/w32sock.h, gl/tests/zerosize-ptr.h, + gl/time.in.h, gl/unistd.in.h, gl/vasnprintf.c, gl/vasnprintf.h, + gl/version-etc-fsf.c, gl/version-etc.c, gl/version-etc.h, + gl/w32sock.h, gl/wchar.in.h, gl/xsize.h, + lib/build-aux/config.rpath, lib/build-aux/link-warning.h, + lib/gl/Makefile.am, lib/gl/alignof.h, lib/gl/alloca.in.h, + lib/gl/asnprintf.c, lib/gl/asprintf.c, lib/gl/byteswap.in.h, + lib/gl/c-ctype.c, lib/gl/c-ctype.h, lib/gl/close-hook.c, + lib/gl/close-hook.h, lib/gl/errno.in.h, lib/gl/float+.h, + lib/gl/float.in.h, lib/gl/fseeko.c, lib/gl/gettext.h, + lib/gl/lseek.c, lib/gl/m4/00gnulib.m4, lib/gl/m4/alloca.m4, + lib/gl/m4/byteswap.m4, lib/gl/m4/codeset.m4, lib/gl/m4/errno_h.m4, + lib/gl/m4/extensions.m4, lib/gl/m4/float_h.m4, lib/gl/m4/fseeko.m4, + lib/gl/m4/func.m4, lib/gl/m4/gettext.m4, lib/gl/m4/glibc2.m4, + lib/gl/m4/glibc21.m4, lib/gl/m4/gnulib-cache.m4, + lib/gl/m4/gnulib-common.m4, lib/gl/m4/gnulib-comp.m4, + lib/gl/m4/gnulib-tool.m4, lib/gl/m4/iconv.m4, + lib/gl/m4/include_next.m4, lib/gl/m4/intdiv0.m4, lib/gl/m4/intl.m4, + lib/gl/m4/intldir.m4, lib/gl/m4/intlmacosx.m4, lib/gl/m4/intmax.m4, + lib/gl/m4/intmax_t.m4, lib/gl/m4/inttypes-pri.m4, + lib/gl/m4/inttypes_h.m4, lib/gl/m4/lcmessage.m4, + lib/gl/m4/ld-output-def.m4, lib/gl/m4/ld-version-script.m4, + lib/gl/m4/lib-ld.m4, lib/gl/m4/lib-link.m4, + lib/gl/m4/lib-prefix.m4, lib/gl/m4/lock.m4, lib/gl/m4/longlong.m4, + lib/gl/m4/lseek.m4, lib/gl/m4/malloc.m4, lib/gl/m4/memchr.m4, + lib/gl/m4/memmem.m4, lib/gl/m4/minmax.m4, lib/gl/m4/mmap-anon.m4, + lib/gl/m4/multiarch.m4, lib/gl/m4/netdb_h.m4, lib/gl/m4/nls.m4, + lib/gl/m4/po.m4, lib/gl/m4/printf-posix.m4, lib/gl/m4/printf.m4, + lib/gl/m4/progtest.m4, lib/gl/m4/read-file.m4, + lib/gl/m4/realloc.m4, lib/gl/m4/size_max.m4, lib/gl/m4/snprintf.m4, + lib/gl/m4/sockets.m4, lib/gl/m4/socklen.m4, lib/gl/m4/sockpfaf.m4, + lib/gl/m4/stdbool.m4, lib/gl/m4/stddef_h.m4, lib/gl/m4/stdint.m4, + lib/gl/m4/stdint_h.m4, lib/gl/m4/stdio_h.m4, lib/gl/m4/stdlib_h.m4, + lib/gl/m4/strcase.m4, lib/gl/m4/string_h.m4, + lib/gl/m4/strings_h.m4, lib/gl/m4/strverscmp.m4, + lib/gl/m4/sys_socket_h.m4, lib/gl/m4/sys_stat_h.m4, + lib/gl/m4/threadlib.m4, lib/gl/m4/time_h.m4, lib/gl/m4/time_r.m4, + lib/gl/m4/uintmax_t.m4, lib/gl/m4/ungetc.m4, lib/gl/m4/unistd_h.m4, + lib/gl/m4/vasnprintf.m4, lib/gl/m4/vasprintf.m4, + lib/gl/m4/visibility.m4, lib/gl/m4/vsnprintf.m4, + lib/gl/m4/wchar.m4, lib/gl/m4/wchar_t.m4, lib/gl/m4/wint_t.m4, + lib/gl/m4/xsize.m4, lib/gl/memchr.c, lib/gl/memmem.c, + lib/gl/minmax.h, lib/gl/netdb.in.h, + lib/gl/override/lib/gettext.h.diff, lib/gl/printf-args.c, + lib/gl/printf-args.h, lib/gl/printf-parse.c, lib/gl/printf-parse.h, + lib/gl/read-file.c, lib/gl/read-file.h, lib/gl/realloc.c, + lib/gl/size_max.h, lib/gl/snprintf.c, lib/gl/sockets.c, + lib/gl/sockets.h, lib/gl/stdbool.in.h, lib/gl/stddef.in.h, + lib/gl/stdint.in.h, lib/gl/stdio-impl.h, lib/gl/stdio-write.c, + lib/gl/stdio.in.h, lib/gl/stdlib.in.h, lib/gl/str-two-way.h, + lib/gl/strcasecmp.c, lib/gl/string.in.h, lib/gl/strings.in.h, + lib/gl/strncasecmp.c, lib/gl/strverscmp.c, lib/gl/sys_socket.in.h, + lib/gl/sys_stat.in.h, lib/gl/tests/Makefile.am, + lib/gl/tests/dummy.c, lib/gl/tests/intprops.h, + lib/gl/tests/test-alloca-opt.c, lib/gl/tests/test-byteswap.c, + lib/gl/tests/test-c-ctype.c, lib/gl/tests/test-errno.c, + lib/gl/tests/test-fseeko.c, lib/gl/tests/test-func.c, + lib/gl/tests/test-memchr.c, lib/gl/tests/test-netdb.c, + lib/gl/tests/test-read-file.c, lib/gl/tests/test-snprintf.c, + lib/gl/tests/test-stdbool.c, lib/gl/tests/test-stddef.c, + lib/gl/tests/test-stdint.c, lib/gl/tests/test-stdio.c, + lib/gl/tests/test-stdlib.c, lib/gl/tests/test-string.c, + lib/gl/tests/test-strings.c, lib/gl/tests/test-strverscmp.c, + lib/gl/tests/test-sys_socket.c, lib/gl/tests/test-sys_stat.c, + lib/gl/tests/test-time.c, lib/gl/tests/test-unistd.c, + lib/gl/tests/test-vasnprintf.c, lib/gl/tests/test-vasprintf.c, + lib/gl/tests/test-vsnprintf.c, lib/gl/tests/test-wchar.c, + lib/gl/tests/verify.h, lib/gl/tests/zerosize-ptr.h, + lib/gl/time.in.h, lib/gl/time_r.c, lib/gl/unistd.in.h, + lib/gl/vasnprintf.c, lib/gl/vasnprintf.h, lib/gl/vasprintf.c, + lib/gl/vsnprintf.c, lib/gl/w32sock.h, lib/gl/wchar.in.h, + lib/gl/xsize.h, libextra/build-aux/config.rpath, + libextra/gl/gnulib.mk, libextra/gl/hmac-md5.c, libextra/gl/hmac.h, + libextra/gl/m4/00gnulib.m4, libextra/gl/m4/extensions.m4, + libextra/gl/m4/gnulib-cache.m4, libextra/gl/m4/gnulib-common.m4, + libextra/gl/m4/gnulib-comp.m4, libextra/gl/m4/gnulib-tool.m4, + libextra/gl/m4/hmac-md5.m4, libextra/gl/m4/ld-output-def.m4, + libextra/gl/m4/ld-version-script.m4, libextra/gl/m4/lib-ld.m4, + libextra/gl/m4/lib-link.m4, libextra/gl/m4/lib-prefix.m4, + libextra/gl/m4/md5.m4, libextra/gl/m4/memxor.m4, libextra/gl/md5.c, + libextra/gl/md5.h, libextra/gl/memxor.c, libextra/gl/memxor.h, + maint.mk: Update gnulib files. -2005-12-01 Simon Josefsson +2010-01-22 Nikos Mavrogiannopoulos - * tests/.cvsignore: [no log message] + * NEWS: Documented addition of new priority strings. -2005-11-30 Nikos Mavrogiannopoulos +2010-01-22 Nikos Mavrogiannopoulos - * includes/gnutls/gnutls.h.in, lib/gnutls_session.c, - lib/gnutls_session_pack.c: Some fixes in session resumption and - prototypes. Based on patches and suggestions by Joe Orton. + * NEWS: Documented Steve Dispensa's patch addition. -2005-11-21 Simon Josefsson +2010-01-22 Nikos Mavrogiannopoulos - * doc/protocol/tls-numbers.txt: From - . + * tests/safe-renegotiation/testsrn: Added tests for new behaviour of + client. -2005-11-18 Nikos Mavrogiannopoulos +2010-01-22 Nikos Mavrogiannopoulos - * lib/x509/privkey_pkcs8.c: added some clarification about the - encryption status. + * lib/gnutls_handshake.c: Revert "Always allow initial negotiation. + Disable subsequent unsafe renegotiations." This reverts commit + 1e4981cfbec360a19cfb7470ce96093aaa95b32e. Ah, this was to twart the attack (description by Daniel Kahn + Gilmor): The problem, as i understand it, is that the client is + incapable of telling whether the plaintext prefix injection attack + has already happened. I don't think disabling renegotiation for the + session resolves the problem. For a server which does not announce and enforce safe renegotiation, + what the client sees as an initial connection may unknowingly + actually be renegotiating an existing session that was started by an + attacker. The concern isn't that the (legitimate) client will have their + session re-negotiated by an attacker; it's that the MITM attacker + can trick the server into viewing the client's initial + authentication as a re-negotiation of a TLS session already + underway. for servers which do odd things like apply the credentials of the + post-renegotiation client to the traffic that happened before the + renegotiation (e.g. HTTPS, with client-side certificates required + only for certain subdirectories), a safe-renegotiation-aware client + *should* refuse to connect to servers which do not announce safe + renegotiation if they want to resist this attack. -2005-11-16 Nikos Mavrogiannopoulos +2010-01-21 Nikos Mavrogiannopoulos - * NEWS, src/certtool.c: Corrected a bug in certtool for 64 bit - machines. Reported by Max Kellermann . + * configure.ac: Added safe-renegotiation subdir. -2005-11-16 Nikos Mavrogiannopoulos +2010-01-21 Nikos Mavrogiannopoulos - * src/cli-gaa.c, src/cli.gaa: [no log message] + * lib/ext_safe_renegotiation.c, lib/gnutls_handshake.c, + lib/gnutls_int.h, lib/gnutls_priority.c, tests/Makefile.am, + tests/safe-renegotiation/Makefile.am, + tests/safe-renegotiation/params.dh, + tests/safe-renegotiation/testsrn: Added safe renegotiation test + cases. Added priority string option to completely disable + renegotiation to assist in testing more cases. -2005-11-16 Nikos Mavrogiannopoulos +2010-01-21 Nikos Mavrogiannopoulos - * lib/gnutls_datum.c, lib/gnutls_session_pack.c, src/serv.c: some - more fixes for PSK. + * src/cli-gaa.c, src/cli-gaa.h, src/cli.c, src/cli.gaa: Added the + --rehandshake option to gnutls-cli to allow connection and immediate + rehandshake. -2005-11-16 Nikos Mavrogiannopoulos +2010-01-21 Nikos Mavrogiannopoulos - * configure.in: the library version number was bumped to 13 to allow - for incompatible changes. + * lib/ext_safe_renegotiation.c: More carefull copying of data. Check + for the malicious case where a server does initial unsafe + negotiation and proceeds with a safe renegotiation. -2005-11-16 Nikos Mavrogiannopoulos +2010-01-21 Nikos Mavrogiannopoulos - * ChangeLog, lib/auth_anon.c, lib/auth_anon.h, - lib/auth_dh_common.c, lib/auth_dh_common.h, lib/auth_dhe.c, - lib/auth_dhe_psk.c, lib/auth_psk.c, lib/auth_psk.h, - lib/gnutls_kx.c, lib/gnutls_psk.c, lib/gnutls_session_pack.c, - lib/gnutls_state.c, lib/gnutls_ui.c, src/Makefile.am, - src/cli-gaa.c, src/cli.c, src/cli.gaa, src/common.c, - src/gnutls-http-serv, src/params.pem, src/serv.c: Completed the - DHE-PSK ciphersuite additions. + * lib/gnutls_handshake.c: Always allow initial negotiation. Disable + subsequent unsafe renegotiations. Signed-off-by: Nikos Mavrogiannopoulos -2005-11-15 Nikos Mavrogiannopoulos +2010-01-21 Nikos Mavrogiannopoulos - * lib/gnutls_psk.c: some documentation updates + * lib/ext_safe_renegotiation.c, lib/gnutls_handshake.c, + lib/gnutls_int.h, lib/gnutls_state.c: Safe renegotiation variable + cleanup. No longer clear variables that should stay across + rehandshakes. -2005-11-15 Nikos Mavrogiannopoulos +2010-01-21 Nikos Mavrogiannopoulos - * lib/gnutls_anon_cred.c, lib/gnutls_psk.c: - gnutls_anon_set_params_function was renamed to - gnutls_anon_set_server_params_function to be more consistent with - the other functions. The same for the PSK. + * lib/crypto-api.c, lib/gnutls_cipher_int.c: Documented the + crypto-api functions and made the API tolerant to NULL IV. -2005-11-15 Nikos Mavrogiannopoulos +2010-01-21 Nikos Mavrogiannopoulos - * lib/auth_cert.h, lib/auth_rsa.c, lib/auth_rsa_export.c, - lib/gnutls_cert.c, lib/gnutls_handshake.c: get_rsa_params was - converted to behave similarly to get_dh_params. + * lib/gnutls_handshake.c: Added documentation of rehandshake usage + in gnutls if full-duplex capability is required. -2005-11-15 Nikos Mavrogiannopoulos +2010-01-21 Nikos Mavrogiannopoulos - * doc/gnutls.texi: [no log message] + * lib/gnutls_buffers.c: Reduced asserts to reduce unneeded + printings. -2005-11-15 Nikos Mavrogiannopoulos +2010-01-21 Nikos Mavrogiannopoulos - * NEWS, includes/gnutls/gnutls.h.in, lib/Makefile.am, - lib/auth_anon.c, lib/auth_anon.h, lib/auth_cert.h, - lib/auth_dh_common.c, lib/auth_dhe.c, lib/auth_dhe_psk.c, - lib/auth_psk.c, lib/auth_psk.h, lib/auth_rsa_export.c, - lib/auth_srp.c, lib/auth_srp_sb64.c, lib/gnutls_algorithms.c, - lib/gnutls_anon_cred.c, lib/gnutls_auth.c, lib/gnutls_auth_int.h, - lib/gnutls_cert.c, lib/gnutls_dh.c, lib/gnutls_dh.h, - lib/gnutls_dh_primes.c, lib/gnutls_handshake.c, lib/gnutls_int.h, - lib/gnutls_mpi.c, lib/gnutls_mpi.h, lib/gnutls_psk.c, - lib/gnutls_rsa_export.c, lib/gnutls_rsa_export.h, - lib/gnutls_state.c, lib/gnutls_ui.c, src/common.c, src/serv.c, - tests/Makefile.am, tests/dhepskself.c, tests/pskself.c: added - DHE-PSK ciphersuites and some cleanups. + * src/cli.c, src/serv.c: Removed rehandshake initiation capability + from client and transferred it to the echo server. Once the server + receives a string **REHANDSHAKE** will request a rehandshake. -2005-11-15 Simon Josefsson +2010-01-19 Steve Dispensa - * NEWS: Typo. + * lib/gnutls_handshake.c: Here is another patch that fixes an + interoperability problem with safe renegotiation and resumption. In + copying forward the safe renegotiation state across resumptions, I + got a little carried away and copied too much data (new connections + should start with empty RI data). Signed-off-by: Nikos Mavrogiannopoulos -2005-11-15 Simon Josefsson +2010-01-15 Nikos Mavrogiannopoulos - * NEWS, configure.in: Bump versions. + * lib/ext_oprfi.c, lib/ext_session_ticket.c, lib/gnutls_constate.c, + lib/gnutls_handshake.c, lib/gnutls_int.h: Modified extensions + (session ticket, oprfi) to store internal data in gnutls internal + structure and input data only in the security_parameters extension + structure. Session ticket extension will call the user supplied hello function + on resumption. (the current API to handle that is inexistant. To be revised) -2005-11-15 Simon Josefsson +2010-01-14 Nikos Mavrogiannopoulos - * ChangeLog: [no log message] + * lib/ext_session_ticket.c, lib/gnutls_constate.c, + lib/gnutls_int.h, lib/gnutls_session_pack.c: Further cleanup the + extension internal structure. Now if values are not saved and + restored when resumming they will be initialized to zero. -2005-11-15 Simon Josefsson +2010-01-13 Nikos Mavrogiannopoulos - * NEWS: Version 1.3.0. + * tests/chainverify.c, tests/crq_apis.c, tests/crq_key_id.c, + tests/cve-2008-4989.c, tests/dn2.c, tests/finished.c, tests/mini.c, + tests/pkcs12_s2k_pem.c, tests/tlsia.c, tests/x509sign-verify.c: + Tests compile with --enable-gcc-warnings. -2005-11-15 Simon Josefsson +2010-01-13 Nikos Mavrogiannopoulos - * src/prime.c, src/serv.c, tests/pskself.c: Indent. + * lib/ext_safe_renegotiation.h, lib/gnutls_constate.c, + lib/gnutls_extensions.c, lib/gnutls_handshake.c, lib/gnutls_int.h, + lib/gnutls_state.c, tests/resume.c, tests/simple.c: Specify in + detail what to be copied when resuming. It seems there are + extensions (like safe renegotiation) that do not need to read the + stored values. Moreover this might overcome any bugs by the + extensions that used to store pointers in the extension structure. -2005-11-15 Simon Josefsson +2010-01-13 Nikos Mavrogiannopoulos - * Makefile.am: Use sha1sum instead of md5sum for igloo.linux.gr - CHECKSUMS. + * lib/ext_safe_renegotiation.c: Initialize the default value to 0. + It seemed to have default value of 0 when non resuming :) -2005-11-15 Simon Josefsson +2010-01-13 Nikos Mavrogiannopoulos - * ChangeLog.1: Add, generated using cvs2cl --utc --fsf --FSF - --usermap .cvsusers -I ChangeLog -I .cvs --window 120 -l - "-d""<2005-11-08""", and manually adjusting the start and end of the - file. + * doc/examples/ex-client-tlsia.c, tests/utils.c: Removed warnings. -2005-11-15 Simon Josefsson +2010-01-13 Nikos Mavrogiannopoulos - * Makefile.am: Don't use --tags for cvs2cl. + * configure.ac: Added -Wno-int-to-pointer-cast to enable compilation + when enable-gcc-warnings is given. -2005-11-15 Simon Josefsson +2010-01-13 Steve Dispensa - * lib/Makefile.am: Dist auth_psk.h. + * lib/gnutls_handshake.c: Here are two more patches. The first adds + support for renegotiation of resumption. Also, I found a bug in my initial implementation - I was incorrectly + sending the SCSV on all connections, not only those using SSLv3, as + should have been the case. Signed-off-by: Nikos Mavrogiannopoulos -2005-11-15 Simon Josefsson +2010-01-12 Nikos Mavrogiannopoulos - * NEWS: Fix. + * NEWS, doc/manpages/gnutls-cli.1, doc/manpages/gnutls-serv.1: + Documentation updates. -2005-11-15 Simon Josefsson +2010-01-12 Nikos Mavrogiannopoulos - * NEWS: Add. + * lib/gnutls_handshake.c: When denying an initial negotiation due to + missing safe renegotiation extension reply with NO_RENEGOTIATION + alert. -2005-11-15 Simon Josefsson +2010-01-12 Nikos Mavrogiannopoulos - * src/certtool-gaa.c, src/cli-gaa.c, src/crypt-gaa.c, - src/psk-gaa.c, src/serv-gaa.c, src/tls_test-gaa.c: Regenerate GAA - code, to remove use of C++ // comments. + * lib/gnutls_extensions.c, lib/gnutls_handshake.c, + lib/includes/gnutls/gnutls.h.in, tests/resume.c: When resuming no + extensions were parsed thus the safe renegotiation extension was + ignored as well causing a false detection of unsafe session. + Corrected by making a special class of extensions called RESUMED. + Those are parsed even when resuming (normally we don't do it to + prevent clients overwriting capabilities and credentials). -2005-11-15 Simon Josefsson +2010-01-12 Nikos Mavrogiannopoulos - * doc/manpages/Makefile.am: Add license. Fix parser error. Dist - and install SRP man pages too. + * lib/ext_safe_renegotiation.c, lib/ext_safe_renegotiation.h, + lib/gnutls_alert.c, lib/gnutls_algorithms.c, + lib/gnutls_algorithms.h, lib/gnutls_extensions.c, + lib/gnutls_extensions.h, lib/gnutls_handshake.c, lib/gnutls_int.h, + lib/gnutls_priority.c, lib/includes/gnutls/gnutls.h.in: Added Steve + Dispensa's patch for safe renegotiation (with artistic changes). + Effectively reverted my previous patch + 1a338cbaaeec11d958de8da4d1ae036979fccf3e. -2005-11-15 Simon Josefsson +2010-01-12 Nikos Mavrogiannopoulos - * configure.in, doc/examples/Makefile.am, doc/manpages/Makefile.am, - src/Makefile.am, src/prime.c: Disable more SRP stuff if - --disable-srp, tiny patch from Albert Chin - and tiny patch to src/prime.c - from RedHat gnutls-1.2.6 RPM. + * THANKS: Updated thanks file. -2005-11-15 Simon Josefsson +2010-01-12 Nikos Mavrogiannopoulos - * NEWS: Use more verbose NEWS entry format. + * NEWS, lib/opencdk/sig-check.c, src/certtool.c, + tests/openpgp-certs/Makefile.am, tests/openpgp-certs/testselfsigs: + When checking self signature also check the signatures of all + subkeys. Ilari Liusvaara noticed and reported the issue and + provided test vectors as well. certtool --pgp-certificate-info will check self signatures. Added self tests for self-sigs. -2005-11-15 Nikos Mavrogiannopoulos +2010-01-11 Nikos Mavrogiannopoulos - * tests/pskself.c: updated PSK self test + * tests/gc.c: hash_fast -> hmac_fast -2005-11-15 Simon Josefsson +2010-01-10 Nikos Mavrogiannopoulos - * src/certtool-gaa.c: Fix. + * doc/manpages/gnutls-cli.1, doc/manpages/gnutls-serv.1, + lib/Makefile.am, lib/ext_safe_renegotiation.c, + lib/ext_safe_renegotiation.h, lib/gnutls_errors.c, + lib/gnutls_extensions.c, lib/gnutls_handshake.c, lib/gnutls_int.h, + lib/gnutls_priority.c, lib/includes/gnutls/gnutls.h.in, src/cli.c, + src/serv.c: Added safe renegotiation patch from Steve Dispensa, + modified to suit gnutls code style and error checking. Modified to + conform to draft-ietf-tls-renegotiation-03.txt. gnutls-cli will search input for **RENEGOTIATION** to perform a + renegotiation and gnutls-serv will perform one if requested. -2005-11-15 Simon Josefsson +2010-01-10 Nikos Mavrogiannopoulos - * doc/manpages/Makefile.am: Generated. + * lib/x509/mpi.c: Corrections for --disable-extra-pki configure flag + to work. Patch by Bill Randle. -2005-11-15 Simon Josefsson +2010-01-04 Andreas Metzler - * tests/.cvsignore: [no log message] + * ChangeLog, doc/certtool.cfg, doc/gnutls.texi, lib/gnutls_auth.c, + lib/gnutls_priority.c, lib/gnutls_session.c, lib/openpgp/pgp.c, + lib/openpgp/privkey.c: Typo fixes: successful, precedence, preferred -2005-11-15 Simon Josefsson +2009-12-18 Nikos Mavrogiannopoulos - * tests/Makefile.am: Add pskself. + * lib/cryptodev.c: define EALG_MAX_BLOCK_LEN if not there. -2005-11-15 Simon Josefsson +2009-12-05 Nikos Mavrogiannopoulos - * tests/pskself.c: Add, based on anonself.c. + * libextra/fipsmd5.c: use C99 initializations -2005-11-15 Simon Josefsson +2009-12-05 Nikos Mavrogiannopoulos - * lib/gnutls_errors.c: Fix error messages; PSK also use the SRP - errors. + * NEWS, lib/Makefile.am, lib/compat.c, lib/crypto-api.c, + lib/crypto.c, lib/crypto.h, lib/gnutls_cipher.c, + lib/gnutls_cipher_int.c, lib/gnutls_cipher_int.h, + lib/gnutls_hash_int.c, lib/gnutls_hash_int.h, + lib/includes/gnutls/crypto.h, lib/includes/gnutls/gnutls.h.in, + lib/libgnutls.map, libextra/fipsmd5.c, src/benchmark.c: Reverted all + previous changes to combine hashes with MAC algorithms. It is now + permissible to register a hash algorithm separately from a MAC. -2005-11-15 Simon Josefsson +2009-12-05 Nikos Mavrogiannopoulos - * lib/gnutls_psk.c: Doc fix. + * lib/crypto-api.c, lib/crypto.c, lib/crypto.h, + lib/ext_session_ticket.c, lib/gnutls_algorithms.c, + lib/gnutls_algorithms.h, lib/gnutls_cipher.c, + lib/gnutls_cipher_int.c, lib/gnutls_cipher_int.h, + lib/gnutls_constate.c, lib/gnutls_constate.h, + lib/gnutls_handshake.c, lib/gnutls_hash_int.c, + lib/gnutls_hash_int.h, lib/gnutls_int.h, lib/gnutls_priority.c, + lib/gnutls_psk_netconf.c, lib/gnutls_sig.c, lib/gnutls_srp.c, + lib/gnutls_state.c, lib/gnutls_ui.c, lib/includes/gnutls/crypto.h, + lib/includes/gnutls/gnutls.h.in, lib/mac-libgcrypt.c, + lib/opencdk/dummy.c, lib/opencdk/filters.h, lib/opencdk/hash.c, + lib/opencdk/kbnode.c, lib/opencdk/main.h, lib/opencdk/opencdk.h, + lib/opencdk/pubkey.c, lib/opencdk/sig-check.c, + lib/opencdk/verify.c, lib/x509/crq.c, lib/x509/pbkdf2-sha1.c, + lib/x509/pkcs12.c, lib/x509/pkcs12_encr.c, lib/x509/privkey.c, + lib/x509/sign.c, lib/x509/verify.c, lib/x509/x509.c, + lib/x509/x509_int.h, libextra/fipsmd5.c, libextra/gnutls_openssl.c: + Revert "Merged the two internal hash API functions, to simplify and + reduce code." This reverts commit bc3e43d5f121e404aa32212dcfcc5027de807056. Conflicts: lib/crypto.c lib/gnutls_cipher.c lib/gnutls_hash_int.c lib/gnutls_hash_int.h lib/includes/gnutls/crypto.h lib/mac-libgcrypt.c -2005-11-14 Nikos Mavrogiannopoulos +2009-12-05 Nikos Mavrogiannopoulos - * doc/TODO: [no log message] + * lib/gnutls_hash_int.c, lib/includes/gnutls/crypto.h, + lib/mac-libgcrypt.c, libextra/gnutls_openssl.c, tests/gc.c: Revert + "Added plain MD5 hash check and corrected gnutls_hash_fast() usage + in openssl.c" This reverts commit 54486afbfcf3398846d5c20d3094bdb7d0a43ff2. -2005-11-14 Simon Josefsson +2009-12-04 Simon Josefsson - * lib/debug.c, lib/x509/common.c, lib/x509/crl.c, lib/x509/dn.c, - lib/x509/pkcs12.c, lib/x509/pkcs7.c, libextra/openssl_compat.c, - src/serv.c: Include config.h first. Tiny patch from Albert Chin - . + * doc/examples/ex-x509-info.c: Improve example of printing cert + info. -2005-11-14 Simon Josefsson +2009-12-04 Simon Josefsson - * libextra/opencdk/opencdk.h: Don't use trailing comma in last enum - constant, for IBM C v6. Tiny patch from Albert Chin - . + * doc/gnutls.texi: Typo fix. Reported by Laurence in -2005-11-14 Simon Josefsson + . - * lib/gnutls_x509.c: Tru64 UNIX 4.0D has mmap() but doesn't define - MAP_FAILED, tiny patch from Albert Chin - +2009-12-04 Nikos Mavrogiannopoulos -2005-11-12 Nikos Mavrogiannopoulos + * lib/compat.c, lib/gnutls_algorithms.h: fixes for compilation. - * NEWS, doc/gnutls.texi, lib/gnutls_algorithms.c: removed the RIPEMD - ciphersuites. +2009-12-03 Simon Josefsson -2005-11-12 Nikos Mavrogiannopoulos + * lib/gnutls_cert.c: Check return value from + gnutls_x509_crt_get_key_usage. - * doc/arch/extensions_st.eps, doc/arch/extensions_st.pdf, - doc/arch/mod_auth_st.eps, doc/arch/mod_auth_st.pdf, - doc/internals.texi: added brief documentation on the extension and - auth_method internals. +2009-12-02 Nikos Mavrogiannopoulos -2005-11-12 Simon Josefsson + * NEWS, tests/pathlen/ca-no-pathlen.pem, + tests/pathlen/no-ca-or-pathlen.pem: This is a follow-up to commit + 3d8da5765133c6ced37bf29b5a07f950b8c26cd7, that fixes some issues + with DSA and RSA certificate encoding. Due to that the shown public + key IDs are different than the ones in previous gnutls versions. - * doc/TODO: Add. +2009-12-02 Nikos Mavrogiannopoulos -2005-11-12 Nikos Mavrogiannopoulos + * lib/gnutls_cipher.c: reduced calls to gnutls_hash on + encryption/decryption. Only initialize MAC when needed. - * doc/gnutls.texi, lib/gnutls_state.c, lib/gnutls_x509.c, - src/certtool.gaa: some documentation updates. +2009-12-02 Nikos Mavrogiannopoulos -2005-11-10 Nikos Mavrogiannopoulos + * lib/gnutls_hash_int.c, lib/includes/gnutls/crypto.h, + lib/mac-libgcrypt.c, libextra/gnutls_openssl.c, tests/gc.c: Added + plain MD5 hash check and corrected gnutls_hash_fast() usage in + openssl.c Corrected new hash API bug that prevented usage of plain + hash functions. - * doc/arch/certificate-user-use-case.eps, - doc/arch/certificate-user-use-case.pdf, - doc/arch/client-server-use-case.eps, - doc/arch/client-server-use-case.pdf, - doc/arch/handshake-sequence.eps, doc/arch/handshake-sequence.pdf, - doc/arch/handshake-state.eps, doc/arch/handshake-state.pdf, - doc/arch/objects.eps, doc/arch/objects.pdf, - doc/certificate-user-use-case.pdf, doc/client-server-use-case.pdf, - doc/handshake-sequence.pdf, doc/handshake-state.pdf, - doc/internals.texi, doc/objects.pdf: moved architecture figures to - arch/ +2009-12-02 Nikos Mavrogiannopoulos -2005-11-10 Nikos Mavrogiannopoulos + * NEWS, doc/gnutls.texi, lib/Makefile.am, lib/compat.c, + lib/crypto.c, lib/ext_session_ticket.c, lib/gnutls_algorithms.c, + lib/gnutls_algorithms.h, lib/gnutls_cipher.c, + lib/includes/gnutls/crypto.h, lib/libgnutls.map, + lib/opencdk/read-packet.c, lib/x509/privkey_pkcs8.c, + src/benchmark.c, tests/gc.c: Exported gnutls_cipher_get_block_size() + and all hash functions added to libgnutls.map. Expanded benchmark + with 3DES and ARCFOUR. Corrected test that used non-existing symbol. - * ChangeLog, Makefile.am: made ChangeLog more compact by ignoring - past changes. +2009-12-02 Nikos Mavrogiannopoulos -2005-11-10 Simon Josefsson + * lib/m4/hooks.m4: Corrected check for cryptodev. Only enable it if + --enable-cryptodev is specified. - * gl/inet_ntop.h, gl/readline.c: Update. +2009-12-01 Nikos Mavrogiannopoulos -2005-11-08 Nikos Mavrogiannopoulos + * lib/cryptodev.c, lib/gnutls_cryptodev.h, lib/gnutls_hash_int.c, + lib/gnutls_hash_int.h, lib/mac-libgcrypt.c, lib/x509/mpi.c: + Corrected compilation issues. - * doc/gnutls.texi: [no log message] +2009-11-30 Nikos Mavrogiannopoulos -2005-11-08 Nikos Mavrogiannopoulos + * configure.ac, lib/m4/hooks.m4: Moved cryptodev check to + lib/m4/hooks.m4 and now --enable-cryptodev actually works. - * lib/gnutls_int.h: [no log message] +2009-11-30 Simon Josefsson -2005-11-08 Simon Josefsson + * lib/gnutls_x509.c: Doc fix. - * doc/signatures.texi: Add. +2009-11-30 Nikos Mavrogiannopoulos -2005-11-08 Nikos Mavrogiannopoulos + * lib/cryptodev.c: corrected old type. - * doc/Makefile.am, doc/certificate-user-use-case.pdf, - doc/client-server-use-case.pdf, doc/gnutls.texi, - doc/handshake-sequence.pdf, doc/handshake-state.pdf, - doc/internals.texi, doc/objects.pdf: added some stuff about the - internals of gnutls. +2009-11-30 Nikos Mavrogiannopoulos -2005-11-08 Nikos Mavrogiannopoulos + * lib/cryptodev.c: Only include cryptodev.h if cryptodev is there. - * : added again the files in binary mode. +2009-11-29 Nikos Mavrogiannopoulos -2005-11-08 Nikos Mavrogiannopoulos + * lib/crypto-api.c, lib/crypto.c, lib/crypto.h, + lib/ext_session_ticket.c, lib/gnutls_algorithms.c, + lib/gnutls_algorithms.h, lib/gnutls_cipher.c, + lib/gnutls_cipher_int.c, lib/gnutls_cipher_int.h, + lib/gnutls_constate.c, lib/gnutls_constate.h, + lib/gnutls_handshake.c, lib/gnutls_hash_int.c, + lib/gnutls_hash_int.h, lib/gnutls_int.h, lib/gnutls_priority.c, + lib/gnutls_psk_netconf.c, lib/gnutls_sig.c, lib/gnutls_srp.c, + lib/gnutls_state.c, lib/gnutls_ui.c, lib/includes/gnutls/crypto.h, + lib/includes/gnutls/gnutls.h.in, lib/mac-libgcrypt.c, + lib/opencdk/dummy.c, lib/opencdk/filters.h, lib/opencdk/hash.c, + lib/opencdk/kbnode.c, lib/opencdk/main.h, lib/opencdk/opencdk.h, + lib/opencdk/pubkey.c, lib/opencdk/sig-check.c, + lib/opencdk/verify.c, lib/x509/crq.c, lib/x509/pbkdf2-sha1.c, + lib/x509/pkcs12.c, lib/x509/pkcs12_encr.c, lib/x509/privkey.c, + lib/x509/sign.c, lib/x509/verify.c, lib/x509/x509.c, + lib/x509/x509_int.h, libextra/fipsmd5.c, libextra/gnutls_openssl.c: + Merged the two internal hash API functions, to simplify and reduce + code. gnutls_hmac* and gnutls_hash* were merged to gnutls_hash API. - * : [no log message] +2009-11-29 Nikos Mavrogiannopoulos -2005-11-08 Nikos Mavrogiannopoulos + * .gitignore, configure.ac, lib/Makefile.am, lib/crypto-api.c, + lib/crypto.c, lib/cryptodev.c, lib/gnutls_cipher_int.c, + lib/gnutls_cryptodev.h, lib/gnutls_errors.c, lib/gnutls_global.c, + lib/gnutls_hash_int.c, lib/gnutls_hash_int.h, + lib/includes/gnutls/crypto.h, lib/includes/gnutls/gnutls.h.in, + lib/libgnutls.map, src/Makefile.am, src/benchmark.c: Added cryptodev + support (/dev/crypto). Tested with + http://www.logix.cz/michal/devel/cryptodev/. Added benchmark + utility for AES. Exported API to access encryption algorithms. - * : added some architectural diagrams. Quite primitive. +2009-11-28 Nikos Mavrogiannopoulos -2005-11-08 Simon Josefsson + * NEWS: Documented certtool's certificate request generation fix. - * doc/signatures.texi: add +2009-11-28 Nikos Mavrogiannopoulos -2005-11-08 Simon Josefsson + * lib/x509/mpi.c: Corrected two issues that affected certificate + request generation. 1. Null padding is added on integers (found thanks to Wilankar + Trupti ) 2. In optional SignatureAlgorithm parameters field for DSA keys the + DSA parameters were added. Those were rejected by verisign. Gnutls + no longer adds those parameters there since other implementations + don't do either and having them does not seem to offer anything + (anyway you need the signer's certificate to verify thus public key + will be available). - * doc/signatures.texi: Wrap around <80 columns. +2009-11-27 Simon Josefsson -2005-11-08 Nikos Mavrogiannopoulos + * doc/manpages/Makefile.am, tests/key-id/key-id, + tests/nist-pkits/gnutls_test_entry, tests/x509paths/chain: More + fixes of grep -q problem. - * doc/manpages/Makefile.am, lib/gnutls_session_pack.c, src/cli.c, - src/serv.c: fixed bug in session packing for anonymous connections. +2009-11-27 Simon Josefsson -2005-11-07 Simon Josefsson + * NEWS: Add. - * src/serv.c, tests/anonself.c, tests/openpgp_test.c, - tests/openssl.c, tests/x509_test.c: Indent. +2009-11-24 Nikos Mavrogiannopoulos -2005-11-07 Simon Josefsson + * src/certtool-gaa.c, src/certtool-gaa.h, src/certtool.c, + src/certtool.gaa: Allow exporting of Certificate requests to DER + format. Added option --no-crq-extensions to avoid adding extensions + to a request. - * Makefile.am: Indent tests/. +2009-11-23 Simon Josefsson -2005-11-07 Simon Josefsson + * tests/rfc2253-escape-test: Don't use 'grep -q', to fix portability + to OpenSolaris. Reported by "Dr. David Kirkby" in - * NEWS: Add. + . -2005-11-07 Simon Josefsson +2009-11-16 Simon Josefsson - * lib/auth_anon.c, lib/auth_anon.h, lib/auth_cert.c, - lib/auth_cert.h, lib/auth_dh_common.c, lib/auth_dh_common.h, - lib/auth_dhe.c, lib/auth_psk.c, lib/auth_psk.h, - lib/auth_psk_passwd.c, lib/auth_psk_passwd.h, lib/auth_rsa.c, - lib/auth_rsa_export.c, lib/auth_srp.c, lib/auth_srp.h, - lib/auth_srp_passwd.c, lib/auth_srp_passwd.h, lib/auth_srp_rsa.c, - lib/auth_srp_sb64.c, lib/debug.c, lib/debug.h, lib/defines.h, - lib/ext_cert_type.c, lib/ext_cert_type.h, lib/ext_max_record.c, - lib/ext_max_record.h, lib/ext_server_name.c, lib/ext_server_name.h, - lib/ext_srp.c, lib/ext_srp.h, lib/gnutls_alert.c, - lib/gnutls_algorithms.c, lib/gnutls_algorithms.h, - lib/gnutls_anon_cred.c, lib/gnutls_asn1_tab.c, lib/gnutls_auth.c, - lib/gnutls_auth.h, lib/gnutls_auth_int.h, lib/gnutls_buffers.c, - lib/gnutls_buffers.h, lib/gnutls_cert.c, lib/gnutls_cert.h, - lib/gnutls_cipher.c, lib/gnutls_cipher.h, lib/gnutls_cipher_int.c, - lib/gnutls_cipher_int.h, lib/gnutls_compress.c, - lib/gnutls_compress.h, lib/gnutls_compress_int.c, - lib/gnutls_compress_int.h, lib/gnutls_constate.c, - lib/gnutls_constate.h, lib/gnutls_datum.c, lib/gnutls_datum.h, - lib/gnutls_db.c, lib/gnutls_db.h, lib/gnutls_dh.c, lib/gnutls_dh.h, - lib/gnutls_dh_primes.c, lib/gnutls_errors.c, lib/gnutls_errors.h, - lib/gnutls_extensions.c, lib/gnutls_extensions.h, - lib/gnutls_global.c, lib/gnutls_global.h, lib/gnutls_handshake.c, - lib/gnutls_handshake.h, lib/gnutls_hash_int.c, - lib/gnutls_hash_int.h, lib/gnutls_helper.c, lib/gnutls_helper.h, - lib/gnutls_int.h, lib/gnutls_kx.c, lib/gnutls_kx.h, - lib/gnutls_mem.c, lib/gnutls_mem.h, lib/gnutls_mpi.c, - lib/gnutls_mpi.h, lib/gnutls_num.c, lib/gnutls_num.h, - lib/gnutls_pk.c, lib/gnutls_pk.h, lib/gnutls_priority.c, - lib/gnutls_priority.h, lib/gnutls_psk.c, lib/gnutls_record.c, - lib/gnutls_record.h, lib/gnutls_rsa_export.c, - lib/gnutls_rsa_export.h, lib/gnutls_session.c, - lib/gnutls_session_pack.c, lib/gnutls_session_pack.h, - lib/gnutls_sig.c, lib/gnutls_sig.h, lib/gnutls_srp.c, - lib/gnutls_srp.h, lib/gnutls_state.c, lib/gnutls_state.h, - lib/gnutls_str.c, lib/gnutls_str.h, lib/gnutls_ui.c, - lib/gnutls_v2_compat.c, lib/gnutls_v2_compat.h, lib/gnutls_x509.c, - lib/gnutls_x509.h, lib/io_debug.h, lib/pkix_asn1_tab.c, - lib/strfile.h, lib/x509/common.c, lib/x509/common.h, - lib/x509/compat.c, lib/x509/compat.h, lib/x509/crl.c, - lib/x509/crl_write.c, lib/x509/crq.c, lib/x509/crq.h, - lib/x509/dn.c, lib/x509/dn.h, lib/x509/dsa.c, lib/x509/dsa.h, - lib/x509/extensions.c, lib/x509/extensions.h, lib/x509/mpi.c, - lib/x509/mpi.h, lib/x509/pkcs12.c, lib/x509/pkcs12.h, - lib/x509/pkcs12_bag.c, lib/x509/pkcs12_encr.c, lib/x509/pkcs7.c, - lib/x509/pkcs7.h, lib/x509/privkey.c, lib/x509/privkey.h, - lib/x509/privkey_pkcs8.c, lib/x509/rfc2818.h, - lib/x509/rfc2818_hostname.c, lib/x509/sign.c, lib/x509/sign.h, - lib/x509/verify.c, lib/x509/verify.h, lib/x509/x509.c, - lib/x509/x509.h, lib/x509/x509_write.c, lib/x509/xml.c, - lib/x509_b64.c, lib/x509_b64.h, libextra/gnutls_extra.c, - libextra/gnutls_extra.h, libextra/gnutls_openpgp.c, - libextra/gnutls_openssl.c, libextra/openpgp/compat.c, - libextra/openpgp/extras.c, libextra/openpgp/gnutls_openpgp.h, - libextra/openpgp/openpgp.h, libextra/openpgp/pgp.c, - libextra/openpgp/pgpverify.c, libextra/openpgp/privkey.c, - libextra/openpgp/xml.c, libextra/openssl_compat.c, - libextra/openssl_compat.h, src/certtool-cfg.c, src/certtool-cfg.h, - src/certtool.c, src/cli.c, src/common.c, src/common.h, src/crypt.c, - src/errcodes.c, src/list.h, src/prime.c, src/psk.c, src/serv.c, - src/tests.c, src/tests.h, src/tls_test.c: Use GNU coding style. + * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, + libextra/configure.ac: Bump versions. -2005-11-07 Simon Josefsson +2009-11-15 Simon Josefsson - * Makefile.am: Use GNU coding style for indent. + * doc/guile.texi: Doc fix. -2005-11-07 Simon Josefsson +2009-11-15 Simon Josefsson - * doc/manpages/Makefile.am: Add. + * gl/Makefile.am, gl/intprops.h, gl/m4/sys_stat_h.m4, + gl/m4/unistd_h.m4, gl/sys_stat.in.h, gl/unistd.in.h, + gl/version-etc.c, lib/gl/Makefile.am, lib/gl/m4/sys_stat_h.m4, + lib/gl/m4/unistd_h.m4, lib/gl/sys_stat.in.h, + lib/gl/tests/intprops.h, lib/gl/unistd.in.h, maint.mk: Update gnulib + files. -2005-11-07 Simon Josefsson +2009-11-09 Simon Josefsson - * doc/reference/Makefile.am: Ignore more headers. + * ChangeLog: Generated. -2005-11-07 Simon Josefsson +2009-11-09 Simon Josefsson - * src/.cvsignore: [no log message] + * NEWS: Version 2.9.9. -2005-11-07 Nikos Mavrogiannopoulos +2009-11-09 Simon Josefsson - * lib/auth_psk.c, lib/auth_psk_passwd.c, lib/auth_psk_passwd.h, - lib/gnutls_psk.c, src/serv-gaa.c, src/serv-gaa.h: more psk stuff + * build-aux/pmccabe2html, gl/Makefile.am, gl/getpagesize.c, + gl/m4/getpagesize.m4, gl/m4/gnulib-comp.m4, gl/tests/test-fseeko.c, + lib/gl/Makefile.am, lib/gl/getpagesize.c, lib/gl/m4/getpagesize.m4, + lib/gl/m4/gnulib-comp.m4, lib/gl/tests/test-fseeko.c: Update gnulib + files. -2005-11-07 Nikos Mavrogiannopoulos +2009-11-09 Simon Josefsson - * NEWS, configure.in, doc/TODO, doc/gnutls.texi, - doc/manpages/Makefile.am, doc/manpages/psktool.1, - includes/gnutls/gnutls.h.in, lib/Makefile.am, lib/auth_psk.c, - lib/auth_psk.h, lib/auth_psk_passwd.c, lib/auth_psk_passwd.h, - lib/auth_srp.h, lib/auth_srp_sb64.c, lib/ext_srp.c, - lib/gnutls_algorithms.c, lib/gnutls_compress_int.c, - lib/gnutls_db.c, lib/gnutls_helper.c, lib/gnutls_helper.h, - lib/gnutls_int.h, lib/gnutls_psk.c, lib/gnutls_session.c, - lib/gnutls_session_pack.c, lib/gnutls_session_pack.h, - lib/gnutls_srp.c, lib/gnutls_str.c, lib/gnutls_str.h, - lib/libgnutls.vers, src/Makefile.am, src/cli-gaa.c, src/cli-gaa.h, - src/cli.c, src/cli.gaa, src/common.c, src/crypt.c, - src/gnutls-http-serv, src/psk-gaa.c, src/psk-gaa.h, src/psk.c, - src/psk.gaa, src/serv.c, src/serv.gaa: This is the initial commit in - the 1.3 branch. Ported from the PSK branch: * PSK ciphersuites have been added. * The session resumption data are now system independent. + * NEWS: Add. -2005-11-07 Simon Josefsson +2009-11-09 Simon Josefsson - * ChangeLog: [no log message] + * src/certtool.c: Cleanup header inclusion. -2005-11-07 Simon Josefsson +2009-11-09 Simon Josefsson - * Version 1.2.9. + * Fix. -----