** libgnutls: The SSL 2.0 client hello support can completely be removed
using a compile time option. The configure option is --disable-ssl2-support.
+** libgnutls: Added support for OCSP Must staple PKIX extension. That is,
+ implemented the RFC7633 TLSFeature for OCSP status request extension.
+ Feature implemented by Tim Kosse.
+
** libgnutls: The SSLKEYLOGFILE and GNUTLS_KEYLOGFILE environment variables can
be used to log session keys. These session keys are compatible with
the NSS Key Log Format and can be used to decrypt the session for
debugging using wireshark.
** API and ABI modifications:
-No changes since last version.
+gnutls_x509_ext_import_tlsfeatures: Added
+gnutls_x509_ext_export_tlsfeatures: Added
+gnutls_x509_tlsfeatures_add: Added
+gnutls_x509_tlsfeatures_init: Added
+gnutls_x509_tlsfeatures_deinit: Added
+gnutls_x509_tlsfeatures_get: Added
+gnutls_x509_crt_get_tlsfeatures: Added
+gnutls_x509_crt_set_tlsfeatures: Added
+gnutls_x509_crq_get_tlsfeatures: Added
+gnutls_x509_crq_set_tlsfeatures: Added
+gnutls_ext_get_name: Added
* Version 3.5.0 (released 2016-05-09)
/*
- * Copyright (C) 2003-2012 Free Software Foundation, Inc.
- * Copyright (C) 2012 Nikos Mavrogiannopoulos
+ * Copyright (C) 2003-2016 Free Software Foundation, Inc.
+ * Copyright (C) 2012-2016 Nikos Mavrogiannopoulos
*
* Author: Nikos Mavrogiannopoulos
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned,
* otherwise a negative error value.
*
- * Since: TBD
+ * Since: 3.5.1
**/
int gnutls_x509_crq_get_tlsfeatures(gnutls_x509_crq_t crq,
gnutls_x509_tlsfeatures_t *features)
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned,
* otherwise a negative error value.
*
- * Since: TBD
+ * Since: 3.5.1
**/
int gnutls_x509_crq_set_tlsfeatures(gnutls_x509_crq_t crq,
gnutls_x509_tlsfeatures_t features)
/*
- * Copyright (C) 2003-2014 Free Software Foundation, Inc.
+ * Copyright (C) 2003-2016 Free Software Foundation, Inc.
+ *
* Authors: Nikos Mavrogiannopoulos, Simon Josefsson, Howard Chu
*
* This file is part of GnuTLS.
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned,
* otherwise a negative error value.
*
- * Since: TBD
+ * Since: 3.5.1
**/
int gnutls_x509_tlsfeatures_init(gnutls_x509_tlsfeatures_t *f)
{
*
* This function will deinitialize a X.509 TLS features extention structure
*
- * Since: TBD
+ * Since: 3.5.1
**/
void gnutls_x509_tlsfeatures_deinit(gnutls_x509_tlsfeatures_t f)
{
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned,
* otherwise a negative error value.
*
- * Since: TBD
+ * Since: 3.5.1
**/
int gnutls_x509_tlsfeatures_get(gnutls_x509_tlsfeatures_t f, unsigned idx, unsigned int *feature)
{
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned,
* otherwise a negative error value.
*
- * Since: TBD
+ * Since: 3.5.1
**/
int gnutls_x509_crt_get_tlsfeatures(gnutls_x509_crt_t crt,
gnutls_x509_tlsfeatures_t *features)
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a negative error value.
*
- * Since: TBD
+ * Since: 3.5.1
**/
int gnutls_x509_ext_import_tlsfeatures(const gnutls_datum_t * ext,
gnutls_x509_tlsfeatures_t f,
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a negative error value.
*
- * Since: TBD
+ * Since: 3.5.1
**/
int gnutls_x509_ext_export_tlsfeatures(gnutls_x509_tlsfeatures_t f,
gnutls_datum_t * ext)
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned,
* otherwise a negative error value.
*
- * Since: TBD
+ * Since: 3.5.1
**/
int gnutls_x509_tlsfeatures_add(gnutls_x509_tlsfeatures_t f, unsigned int feature)
{
/*
- * Copyright (C) 2003-2014 Free Software Foundation, Inc.
+ * Copyright (C) 2003-2016 Free Software Foundation, Inc.
*
* Author: Nikos Mavrogiannopoulos
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned,
* otherwise a negative error value.
*
- * Since: TBD
+ * Since: 3.5.1
**/
int gnutls_x509_crt_set_tlsfeatures(gnutls_x509_crt_t crt,
gnutls_x509_tlsfeatures_t features)