[SCM] GNU gnutls annotated tag, gnutls_2_9_10, created. gnutls_2_9_10

[Simon Josefsson]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU gnutls".

http://git.savannah.gnu.org/cgit/gnutls.git/commit/?id=613e1b10f6ebd62ab694568320730293e30cbec4

The annotated tag, gnutls_2_9_10 has been created
        at  613e1b10f6ebd62ab694568320730293e30cbec4 (tag)
   tagging  13c590063ac08be12de17161de5b7901bda746cc (commit)
  replaces  gnutls_2_9_9
 tagged by  Simon Josefsson
        on  Thu Apr 22 00:18:09 2010 +0200

- Log -----------------------------------------------------------------
2.9.10
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iOoEAAECADQFAkvPeaEtFIAAAAAAFQAPcGthLWFkZHJlc3NAZ251cGcub3JnamFz
QGV4dHVuZG8uY29tAAoJEO2iHpS1ZXFv0VoE/izgASngx/fHvzxFNVF1absoMa0p
HqfJvWEJ01zyAQbDjRgyKfMBX6Nvd4HaO8obhF1HvXStomxvwge25g96QDXA6XIk
owLCg4GzSVxscPI2vbHtvtc0y1WDT4Q7WdyabZzduVXC9RJVvbIJjzT5IRhRWY2O
UjRXxN5COB5R1zQJEPTOly7bDeUqjHZPH0AyWowS2QqVIkgTotqaQ+FyRg8=
=Kr9o
-----END PGP SIGNATURE-----

Andreas Metzler (1):
      Typo fixes: successful, precedence, preferred

Nikos Mavrogiannopoulos (83):
      Allow exporting of Certificate requests to DER format.
      Corrected two issues that affected certificate request generation.
      Documented certtool's certificate request generation fix.
      Added cryptodev support (/dev/crypto). Tested with 
http://www.logix.cz/michal/devel/cryptodev/.
      Merged the two internal hash API functions, to simplify and reduce code.
      Only include cryptodev.h if cryptodev is there.
      corrected old type.
      Moved cryptodev check to lib/m4/hooks.m4 and now --enable-cryptodev 
actually works.
      Corrected compilation issues.
      Corrected check for cryptodev. Only enable it if --enable-cryptodev is 
specified.
      Exported gnutls_cipher_get_block_size() and all hash functions added to 
libgnutls.map.
      Added plain MD5 hash check and corrected gnutls_hash_fast() usage in 
openssl.c
      reduced calls to gnutls_hash on encryption/decryption. Only initialize 
MAC when needed.
      This is a follow-up to commit 3d8da5765133c6ced37bf29b5a07f950b8c26cd7, 
that fixes
      fixes for compilation.
      Revert "Added plain MD5 hash check and corrected gnutls_hash_fast() usage 
in openssl.c"
      Revert "Merged the two internal hash API functions, to simplify and 
reduce code."
      Reverted all previous changes to combine hashes with MAC algorithms.
      use C99 initializations
      define EALG_MAX_BLOCK_LEN if not there.
      Corrections for --disable-extra-pki configure flag to work. Patch by Bill 
Randle.
      Added safe renegotiation patch from Steve Dispensa, modified to suit 
gnutls
      hash_fast -> hmac_fast
      When checking self signature also check the signatures of all subkeys.
      Updated thanks file.
      Added Steve Dispensa's patch for safe renegotiation (with artistic 
changes).
      When resuming no extensions were parsed thus the safe
      When denying an initial negotiation due to missing safe renegotiation
      Documentation updates.
      Added -Wno-int-to-pointer-cast to enable compilation when 
enable-gcc-warnings is given.
      Removed warnings.
      Initialize the default value to 0. It seemed to have default value of 0 
when non resuming :)
      Specify in detail what to be copied when resuming. It seems there
      Tests compile with --enable-gcc-warnings.
      Further cleanup the extension internal structure. Now if values are not
      Modified extensions (session ticket, oprfi) to store internal data in 
gnutls internal structure
      Removed rehandshake initiation capability from client and transferred it
      Reduced asserts to reduce unneeded printings.
      Added documentation of rehandshake usage in gnutls if full-duplex 
capability is required.
      Documented the crypto-api functions and made the API tolerant to NULL IV.
      Safe renegotiation variable cleanup. No longer clear variables that
      Always allow initial negotiation. Disable subsequent unsafe 
renegotiations.
      More carefull copying of data. Check for the malicious case where a 
server does initial unsafe negotiation and proceeds with a safe renegotiation.
      Added the --rehandshake option to gnutls-cli to allow connection and 
immediate rehandshake.
      Added safe renegotiation test cases. Added priority string option to
      Added safe-renegotiation subdir.
      Revert "Always allow initial negotiation. Disable subsequent unsafe 
renegotiations."
      Added tests for new behaviour of client.
      Documented Steve Dispensa's patch addition.
      Documented addition of new priority strings.
      Added copyright notices!
      Corrected calculation of session data for PSK ciphersuites. Solves issue 
#107256 reported by Wolfgang Glas.
      On handshake error send appropriate alert and terminate stream.
      Avoid sending alerts during handshake. Alerts might be interrupted and 
return
      gnutls-serv will terminate connection on rehandshake errors.
      Documented that initial_safe_renegotiation is the default.
      Removed artificial constrained that prevented end-user certificates,
      Extension generation in SSL 3.0 (as a reply to SCSV) is not using
      Added tests for safe renegotiation. Removed old tests for obsolete 
features (lzo)
      Extended time verification to trusted certificate list as well. Introduced
      localhost -> 127.0.0.1 to work in places where localhost does not resolve.
      better documentation for %INITIAL_SAFE_RENEGOTIATION
      Safe renegotiation is not enabled by default in client side.
      Fail if required programs are not found.
      Handle dates before 1-1-1970 (handle as being equal to 1-1-1970).
      gnutls_x509_crt_verify() and gnutls_x509_crt_list_verify() behave 
identically.
      made SAFE_RENEGOTIATION flags explicit.
      Added missing prototype.
      INITIAL_SAFE_RENEGOTIATION implies SAFE_RENEGOTIATION.
      Use the flags for expiration instead of getting the time of each 
certificate.
      Added gnutls_certificate_set_verify_function() to allow checking 
(verifying)
      Ignore more files.
      Each ciphersuite is now tight with a minimum TLS version and a maximum
      Display postalCode and Name X.509 DN attributes correctly.
      added news entry for postalcode.
      Modified to account for postalcode.
      use mv -f to avoid interactiveness.
      Reduced several unneeded messages during the make check procedure.
      increased small value for certificates. Typical certificates are much 
longer than that.
      Valgrind -q is now set by the valgrind detection script to avoid issue 
when running tests without valgrind.
      The string is colon separated. Reported by Paul Aurich.
      Free the priority structure on error. Reported by Paul Aurich.
      Use size_t instead of int for input variables that represent sizes.

Simon Josefsson (124):
      Update gnulib files.
      Doc fix.
      Bump versions.
      Don't use 'grep -q', to fix portability to OpenSolaris.
      Add.
      More fixes of grep -q problem.
      Doc fix.
      Check return value from gnutls_x509_crt_get_key_usage.
      Typo fix.
      Improve example of printing cert info.
      Update gnulib files.
      Update gnulib files.
      Fix
      Update gnulib files.
      Fix.
      Update gnulib files.
      Update gnulib files.
      Ignore more.
      Improve.
      Generated.
      Update gnulib files.
      gnutls-cli: Handle reading binary data from server.
      doc: Fix pkg-config recommendation.
      Fix FSF copyright notices.
      Update gnulib files.
      Indent and fix copyright notices.
      Fix copyright/license.
      Fix license.
      Fix license.
      Fix license.
      Fix license.
      Fix license.
      Fix license.
      Fix license.
      Fix license.
      Fix license.
      Fix license.
      Update copyright years.
      License fix.
      Fix license.
      Fix license.
      Fix license.
      Use libtasn1 v2.4.
      Add.
      Update gnulib files.
      Sync with TP.
      Add.
      Fix.
      Add announcement message.
      Update gnulib files.
      Silence gnulib warning about fseek.
      Sync with TP.
      Align indentation of GTK-DOC comments.
      Fix GTK-DOC syntax.  Unfortunately this looses some information.
      Another GTK-DOC fix.
      Upgrade to libtasn1 2.5 snapshot, for GTK-DOC comments.
      Improve header ignores.
      Need crypto.h too.
      Ignore gnutlsxx.h too, GTK-DOC doesn't handle C++.
      Fix for GTK-DOC parse breakage.
      Doc fix.
      Ignore more headers.
      Fix comments, for GTK-DOC.
      Improve GTK-DOC coverage.
      More GTK-DOC documentation.
      Fix typo.
      More enum.
      Document enum.
      Document more.
      Document more.
      More enum documentation.
      Doc fix.
      More enum documentation.
      More enum docs.
      Fix enum doc.
      Doc fix.
      Doc fix.
      Doc fix.
      More GTK-DOC fixes.
      Generated.
      Add.
      Fix.
      Drop bashism.  Make it work on Windows.
      Fix objdir != srcdir.
      Indent.  Don't include fcntl.h and sys/ioctl.h on (for example) Windows.
      Update gnulib files.
      Update gnulib files.
      Add.
      Use gnulib gettime module.  Indent.
      Fix -lrt usage.
      Remove.
      Update.
      Add id's to chapters.
      Rewrite tests/openpgp-certs/testselfsigs portably for Solaris.  Fix 
EXTRA_DIST.
      Fix.
      Skip test if datefudge is not available.
      Mention datefudge.
      Check for what we use.  Bump serial.
      Update gnulib files.
      Update gnulib files.  Fix syntax-check warnings.
      Sync with TP.
      Add.
      Add forgotten gnulib files, and fix .gitignore.
      Update gnulib files, fix syntax-check warnings.
      Ignore c++defs.h.
      Generated.
      Doc fixes.
      Disable self-test temporarily until we make it work cross-platform.
      Export new ABIs.  Doc fixes for new APIs.
      Indent code.
      Generated.
      Add.
      Add.
      Add.
      More indentation.
      Fix indent bug.
      Indent code.
      Update gnulib files.
      Fix compiler warning.
      Structure fork check together.
      Update gnulib files.
      Upgrade to libtasn1 version 2.6.
      Version 2.9.10.
      Generated.

Steve Dispensa (2):
      Here are two more patches. The first adds support for renegotiation of
      Here is another patch that fixes an interoperability problem with safe

-----------------------------------------------------------------------


hooks/post-receive
-- 
GNU gnutls