[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[SCM] GNU gnutls branch, master, updated. gnutls_2_9_9-210-g13c5900
|
From: |
Simon Josefsson |
|
Subject: |
[SCM] GNU gnutls branch, master, updated. gnutls_2_9_9-210-g13c5900 |
|
Date: |
Wed, 21 Apr 2010 22:18:16 +0000 |
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU gnutls".
http://git.savannah.gnu.org/cgit/gnutls.git/commit/?id=13c590063ac08be12de17161de5b7901bda746cc
The branch, master has been updated
via 13c590063ac08be12de17161de5b7901bda746cc (commit)
from aa6e719ecfe639563bbf57edcbb7beadc8c85a73 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit 13c590063ac08be12de17161de5b7901bda746cc
Author: Simon Josefsson <address@hidden>
Date: Thu Apr 22 00:18:09 2010 +0200
Generated.
-----------------------------------------------------------------------
Summary of changes:
ChangeLog | 1751 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++-
1 files changed, 1748 insertions(+), 3 deletions(-)
diff --git a/ChangeLog b/ChangeLog
index 7ec336b..5a5170c 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,1743 @@
+2010-04-22 Simon Josefsson <address@hidden>
+
+ * NEWS: Version 2.9.10.
+
+2010-04-21 Simon Josefsson <address@hidden>
+
+ * NEWS, lib/minitasn1/Makefile.am, lib/minitasn1/coding.c,
+ lib/minitasn1/decoding.c, lib/minitasn1/element.h,
+ lib/minitasn1/gstr.h, lib/minitasn1/libtasn1.h,
+ lib/minitasn1/parser_aux.c, lib/minitasn1/parser_aux.h,
+ lib/minitasn1/structure.h, lib/minitasn1/version.c: Upgrade to
+ libtasn1 version 2.6.
+
+2010-04-21 Simon Josefsson <address@hidden>
+
+ * gl/Makefile.am, gl/m4/gnulib-comp.m4, gl/m4/ioctl.m4,
+ gl/m4/netdb_h.m4, gl/stdbool.in.h, gl/tests/test-lseek.sh,
+ gl/tests/test-select-in.sh, gl/tests/test-stdbool.c,
+ gl/tests/test-stdint.c, lib/gl/Makefile.am, lib/gl/m4/netdb_h.m4,
+ lib/gl/m4/visibility.m4, lib/gl/stdbool.in.h,
+ lib/gl/tests/test-stdbool.c, lib/gl/tests/test-stdint.c,
+ lib/gl/tests/test-vasprintf.c, maint.mk: Update gnulib files.
+
+2010-04-21 Simon Josefsson <address@hidden>
+
+ * configure.ac: Structure fork check together.
+
+2010-04-15 Simon Josefsson <address@hidden>
+
+ * lib/gnutls_priority.c: Fix compiler warning.
+
+2010-04-15 Simon Josefsson <address@hidden>
+
+ * gl/override/top/maint.mk.diff, libextra/gl/hmac-md5.c,
+ libextra/gl/md5.c, maint.mk: Update gnulib files.
+
+2010-04-15 Simon Josefsson <address@hidden>
+
+ * lib/crypto-api.c, lib/gnutls_priority.c: Indent code.
+
+2010-04-14 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/crypto-api.c, lib/includes/gnutls/crypto.h: Use size_t instead
+ of int for input variables that represent sizes.
+
+2010-04-02 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/gnutls_priority.c: Free the priority structure on error.
+ Reported by Paul Aurich.
+
+2010-04-02 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/gnutls_priority.c: The string is colon separated. Reported by
+ Paul Aurich.
+
+2010-04-14 Simon Josefsson <address@hidden>
+
+ * lib/includes/gnutls/gnutls.h.in: Fix indent bug.
+
+2010-04-14 Simon Josefsson <address@hidden>
+
+ * cfg.mk, doc/examples/examples.h, guile/src/errors.h,
+ guile/src/utils.h, lib/auth_cert.h, lib/auth_dh_common.h,
+ lib/crypto.h, lib/ext_oprfi.h, lib/ext_safe_renegotiation.h,
+ lib/ext_session_ticket.h, lib/ext_signature.h,
+ lib/gnutls_algorithms.h, lib/gnutls_cipher_int.h,
+ lib/gnutls_compress.h, lib/gnutls_cryptodev.h, lib/gnutls_errors.h,
+ lib/gnutls_extensions.h, lib/gnutls_hash_int.h, lib/gnutls_int.h,
+ lib/gnutls_mpi.h, lib/gnutls_pk.h, lib/gnutls_sig.h,
+ lib/gnutls_srp.h, lib/gnutls_state.h, lib/gnutls_str.h,
+ lib/gnutls_supplemental.h, lib/includes/gnutls/crypto.h,
+ lib/includes/gnutls/gnutls.h.in, lib/includes/gnutls/openpgp.h,
+ lib/includes/gnutls/pkcs12.h, lib/includes/gnutls/x509.h,
+ lib/opencdk/context.h, lib/opencdk/filters.h, lib/opencdk/keydb.h,
+ lib/opencdk/main.h, lib/opencdk/opencdk.h, lib/opencdk/packet.h,
+ lib/opencdk/stream.h, lib/opencdk/types.h,
+ lib/openpgp/gnutls_openpgp.h, lib/openpgp/openpgp_int.h,
+ lib/x509/pbkdf2-sha1.h, lib/x509/x509_int.h,
+ libextra/includes/gnutls/extra.h,
+ libextra/includes/gnutls/openssl.h, src/certtool-cfg.h,
+ src/certtool-common.h, src/common.h: More indentation.
+
+2010-04-14 Simon Josefsson <address@hidden>
+
+ * NEWS: Add.
+
+2010-04-14 Simon Josefsson <address@hidden>
+
+ * NEWS: Add.
+
+2010-04-14 Simon Josefsson <address@hidden>
+
+ * NEWS: Add.
+
+2010-04-14 Simon Josefsson <address@hidden>
+
+ * doc/manpages/Makefile.am: Generated.
+
+2010-04-14 Simon Josefsson <address@hidden>
+
+ * doc/examples/ex-client-tlsia.c, doc/examples/ex-verify.c,
+ doc/examples/ex-x509-info.c, lib/auth_cert.c, lib/auth_rsa.c,
+ lib/ext_cert_type.c, lib/ext_max_record.c, lib/ext_oprfi.c,
+ lib/ext_safe_renegotiation.c, lib/ext_server_name.c,
+ lib/ext_session_ticket.c, lib/ext_signature.c,
+ lib/gnutls_algorithms.c, lib/gnutls_auth.c, lib/gnutls_buffers.c,
+ lib/gnutls_cert.c, lib/gnutls_cipher.c, lib/gnutls_compress.c,
+ lib/gnutls_constate.c, lib/gnutls_extensions.c,
+ lib/gnutls_global.c, lib/gnutls_handshake.c, lib/gnutls_kx.c,
+ lib/gnutls_priority.c, lib/gnutls_record.c,
+ lib/gnutls_session_pack.c, lib/gnutls_sig.c, lib/gnutls_state.c,
+ lib/gnutls_v2_compat.c, lib/gnutls_x509.c,
+ lib/minitasn1/decoding.c, lib/opencdk/read-packet.c,
+ lib/opencdk/sig-check.c, lib/x509/pkcs12.c, lib/x509/verify.c,
+ libextra/gl/hmac-md5.c, libextra/gl/md5.c, src/benchmark.c,
+ src/certtool.c, src/cli.c, src/serv.c, src/tests.c, src/tls_test.c,
+ tests/anonself.c, tests/certder.c, tests/chainverify.c,
+ tests/crq_apis.c, tests/crq_key_id.c, tests/cve-2008-4989.c,
+ tests/dhepskself.c, tests/dn.c, tests/dn2.c, tests/finished.c,
+ tests/gc.c, tests/hostname-check.c, tests/init_roundtrip.c,
+ tests/mini-eagain.c, tests/mini.c, tests/netconf-psk.c,
+ tests/nul-in-x509-names.c, tests/openpgp-keyring.c,
+ tests/openpgpself.c, tests/parse_ca.c, tests/pkcs12_encode.c,
+ tests/pkcs12_s2k.c, tests/pkcs12_s2k_pem.c, tests/pskself.c,
+ tests/resume.c, tests/set_pkcs12_cred.c, tests/simple.c,
+ tests/tlsia.c, tests/utils.c, tests/x509_altname.c, tests/x509dn.c,
+ tests/x509self.c, tests/x509sign-verify.c, tests/x509signself.c:
+ Indent code.
+
+2010-04-14 Simon Josefsson <address@hidden>
+
+ * NEWS, lib/crypto-api.c, lib/ext_safe_renegotiation.c,
+ lib/gnutls_algorithms.c, lib/gnutls_cert.c, lib/libgnutls.map,
+ lib/x509/x509.c: Export new ABIs. Doc fixes for new APIs.
+
+2010-04-14 Simon Josefsson <address@hidden>
+
+ * tests/safe-renegotiation/Makefile.am: Disable self-test
+ temporarily until we make it work cross-platform.
+
+2010-04-13 Simon Josefsson <address@hidden>
+
+ * NEWS, lib/ext_safe_renegotiation.c, lib/gnutls_algorithms.c,
+ lib/includes/gnutls/gnutls.h.in: Doc fixes.
+
+2010-04-13 Simon Josefsson <address@hidden>
+
+ * doc/manpages/Makefile.am, src/certtool-gaa.c: Generated.
+
+2010-04-13 Simon Josefsson <address@hidden>
+
+ * doc/reference/Makefile.am: Ignore c++defs.h.
+
+2010-04-13 Simon Josefsson <address@hidden>
+
+ * .x-sc_prohibit_empty_lines_at_EOF, GNUmakefile,
+ build-aux/c++defs.h, build-aux/warn-on-use.h, doc/certtool.cfg,
+ doc/credentials/gnutls-http-serv, doc/credentials/params.pem,
+ doc/credentials/x509/Makefile.am, doc/credentials/x509/cert.pem,
+ doc/credentials/x509/clicert-dsa.pem, gl/Makefile.am, gl/fseeko.c,
+ gl/m4/fseeko.m4, gl/m4/gnulib-common.m4, gl/m4/gnulib-comp.m4,
+ gl/m4/lib-link.m4, gl/m4/memchr.m4, gl/m4/stdio_h.m4,
+ gl/m4/stdlib_h.m4, gl/m4/string_h.m4, gl/m4/time_h.m4,
+ gl/m4/unistd_h.m4, gl/m4/vasnprintf.m4, gl/stdio-impl.h,
+ gl/stdio.in.h, gl/stdlib.in.h, gl/string.in.h, gl/sys_socket.in.h,
+ gl/sys_stat.in.h, gl/sys_time.in.h, gl/tests/Makefile.am,
+ gl/tests/ioctl.c, gl/tests/sys_ioctl.in.h,
+ gl/tests/test-vasnprintf.c, gl/time.in.h, gl/unistd.in.h,
+ gl/vasnprintf.c, gl/wchar.in.h, guile/modules/gnutls/extra.scm,
+ guile/tests/x509-auth.scm, guile/tests/x509-certificate.pem,
+ lib/build-aux/c++defs.h, lib/build-aux/warn-on-use.h,
+ lib/ext_cert_type.h, lib/gl/Makefile.am, lib/gl/fseeko.c,
+ lib/gl/m4/fseeko.m4, lib/gl/m4/gnulib-common.m4,
+ lib/gl/m4/gnulib-comp.m4, lib/gl/m4/lib-link.m4,
+ lib/gl/m4/memchr.m4, lib/gl/m4/stdio_h.m4, lib/gl/m4/stdlib_h.m4,
+ lib/gl/m4/string_h.m4, lib/gl/m4/threadlib.m4, lib/gl/m4/time_h.m4,
+ lib/gl/m4/time_r.m4, lib/gl/m4/unistd_h.m4,
+ lib/gl/m4/vasnprintf.m4, lib/gl/stdio-impl.h, lib/gl/stdio.in.h,
+ lib/gl/stdlib.in.h, lib/gl/string.in.h, lib/gl/sys_socket.in.h,
+ lib/gl/sys_stat.in.h, lib/gl/tests/Makefile.am,
+ lib/gl/tests/test-vasnprintf.c, lib/gl/time.in.h, lib/gl/time_r.c,
+ lib/gl/unistd.in.h, lib/gl/vasnprintf.c, lib/gl/wchar.in.h,
+ lib/minitasn1/Makefile.am, lib/minitasn1/README,
+ lib/opencdk/keydb.h, lib/opencdk/packet.h,
+ libextra/gl/m4/gnulib-common.m4, libextra/gl/m4/gnulib-comp.m4,
+ libextra/gl/m4/lib-link.m4, maint.mk, src/certtool.gaa,
+ src/cfg/Makefile.am, src/crypt.gaa, src/tls_test.gaa,
+ tests/key-id/ca-gnutls-keyid.pem, tests/key-id/ca-no-keyid.pem,
+ tests/key-id/ca-weird-keyid.pem,
+ tests/pkcs1-padding/pkcs1-pad-broken.pem,
+ tests/pkcs1-padding/pkcs1-pad-broken2.pem,
+ tests/pkcs1-padding/pkcs1-pad-broken3.pem,
+ tests/pkcs1-padding/pkcs1-pad-ok.pem,
+ tests/pkcs1-padding/pkcs1-pad-ok2.pem,
+ tests/safe-renegotiation/Makefile.am, tests/test25.pem: Update
+ gnulib files, fix syntax-check warnings.
+
+2010-03-31 Simon Josefsson <address@hidden>
+
+ * .gitignore, gl/m4/wchar_h.m4, lib/gl/m4/wchar_h.m4: Add forgotten
+ gnulib files, and fix .gitignore.
+
+2010-03-31 Simon Josefsson <address@hidden>
+
+ * NEWS: Add.
+
+2010-03-31 Simon Josefsson <address@hidden>
+
+ * lib/po/LINGUAS, lib/po/it.po.in, lib/po/nl.po.in: Sync with TP.
+
+2010-03-31 Simon Josefsson <address@hidden>
+
+ * .x-sc_program_name, .x-sc_the_the, cfg.mk,
+ lib/ext_safe_renegotiation.c, lib/gnutls_handshake.c,
+ lib/m4/hooks.m4, lib/opencdk/sig-check.c, src/certtool.c,
+ src/serv.c, tests/dn.c, tests/mini.c: Update gnulib files. Fix
+ syntax-check warnings.
+
+2010-03-31 Simon Josefsson <address@hidden>
+
+ * build-aux/c++defs.h, build-aux/vc-list-files,
+ build-aux/warn-on-use.h, gl/Makefile.am, gl/accept.c,
+ gl/arpa_inet.in.h, gl/bind.c, gl/connect.c, gl/getaddrinfo.c,
+ gl/gettext.h, gl/gettimeofday.c, gl/m4/arpa_inet_h.m4,
+ gl/m4/getaddrinfo.m4, gl/m4/gettimeofday.m4,
+ gl/m4/gnulib-common.m4, gl/m4/gnulib-comp.m4, gl/m4/inet_ntop.m4,
+ gl/m4/inet_pton.m4, gl/m4/lseek.m4, gl/m4/netdb_h.m4,
+ gl/m4/stddef_h.m4, gl/m4/stdio_h.m4, gl/m4/stdlib_h.m4,
+ gl/m4/string_h.m4, gl/m4/sys_ioctl_h.m4, gl/m4/sys_select_h.m4,
+ gl/m4/sys_socket_h.m4, gl/m4/sys_stat_h.m4, gl/m4/sys_time_h.m4,
+ gl/m4/time_h.m4, gl/m4/unistd_h.m4, gl/m4/warn-on-use.m4,
+ gl/m4/wchar.m4, gl/netdb.in.h, gl/netinet_in.in.h, gl/recv.c,
+ gl/select.c, gl/send.c, gl/stdint.in.h, gl/stdio.in.h,
+ gl/stdlib.in.h, gl/string.in.h, gl/sys_select.in.h,
+ gl/sys_socket.in.h, gl/sys_stat.in.h, gl/sys_time.in.h,
+ gl/tests/Makefile.am, gl/tests/ioctl.c, gl/tests/sys_ioctl.in.h,
+ gl/tests/test-vc-list-files-git.sh, gl/time.in.h, gl/unistd.in.h,
+ gl/wchar.in.h, lib/build-aux/c++defs.h,
+ lib/build-aux/warn-on-use.h, lib/gl/Makefile.am, lib/gl/gettext.h,
+ lib/gl/m4/gnulib-common.m4, lib/gl/m4/gnulib-comp.m4,
+ lib/gl/m4/intldir.m4, lib/gl/m4/lseek.m4, lib/gl/m4/netdb_h.m4,
+ lib/gl/m4/printf-posix.m4, lib/gl/m4/stddef_h.m4,
+ lib/gl/m4/stdio_h.m4, lib/gl/m4/stdlib_h.m4, lib/gl/m4/string_h.m4,
+ lib/gl/m4/strings_h.m4, lib/gl/m4/sys_socket_h.m4,
+ lib/gl/m4/sys_stat_h.m4, lib/gl/m4/time_h.m4,
+ lib/gl/m4/unistd_h.m4, lib/gl/m4/visibility.m4,
+ lib/gl/m4/warn-on-use.m4, lib/gl/m4/wchar.m4, lib/gl/netdb.in.h,
+ lib/gl/stdint.in.h, lib/gl/stdio.in.h, lib/gl/stdlib.in.h,
+ lib/gl/string.in.h, lib/gl/sys_socket.in.h, lib/gl/sys_stat.in.h,
+ lib/gl/tests/Makefile.am, lib/gl/time.in.h, lib/gl/unistd.in.h,
+ lib/gl/wchar.in.h, libextra/gl/m4/gnulib-common.m4,
+ libextra/gl/m4/gnulib-comp.m4, maint.mk: Update gnulib files.
+
+2010-03-30 Simon Josefsson <address@hidden>
+
+ * m4/valgrind.m4: Check for what we use. Bump serial.
+
+2010-03-30 Nikos Mavrogiannopoulos <address@hidden>
+
+ * m4/valgrind.m4, tests/Makefile.am: Valgrind -q is now set by the
+ valgrind detection script to avoid issue when running tests without
+ valgrind.
+
+2010-03-27 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/gnutls_cert.c: increased small value for certificates. Typical
+ certificates are much longer than that.
+
+2010-03-20 Nikos Mavrogiannopoulos <address@hidden>
+
+ * configure.ac, tests/Makefile.am, tests/anonself.c,
+ tests/certder.c, tests/chainverify.c, tests/crq_apis.c,
+ tests/crq_key_id.c, tests/cve-2009-1415.c, tests/dhepskself.c,
+ tests/dn.c, tests/dn2.c, tests/finished.c, tests/gc.c,
+ tests/hostname-check.c, tests/init_roundtrip.c,
+ tests/mini-eagain.c, tests/mini.c, tests/moredn.c, tests/mpi.c,
+ tests/netconf-psk.c, tests/nul-in-x509-names.c,
+ tests/openpgp-keyring.c, tests/openpgpself.c, tests/openssl.c,
+ tests/parse_ca.c, tests/pkcs12_encode.c, tests/pkcs12_s2k.c,
+ tests/pskself.c, tests/resume.c, tests/set_pkcs12_cred.c,
+ tests/sha2/sha2, tests/simple.c, tests/tlsia.c,
+ tests/x509_altname.c, tests/x509dn.c, tests/x509self.c,
+ tests/x509sign-verify.c, tests/x509signself.c: Reduced several
+ unneeded messages during the make check procedure. Verbose messages
+ can be obtained with --verbose.
+
+2010-03-20 Nikos Mavrogiannopoulos <address@hidden>
+
+ * doc/Makefile.am: use mv -f to avoid interactiveness.
+
+2010-03-20 Nikos Mavrogiannopoulos <address@hidden>
+
+ * tests/dn2.c: Modified to account for postalcode.
+
+2010-03-20 Nikos Mavrogiannopoulos <address@hidden>
+
+ * NEWS: added news entry for postalcode.
+
+2010-03-20 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/includes/gnutls/x509.h, lib/pkix.asn, lib/pkix_asn1_tab.c,
+ lib/x509/common.c: Display postalCode and Name X.509 DN attributes
+ correctly. Based on patch by Pavan Konjarla.
+
+2010-03-20 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/gnutls_algorithms.c, lib/gnutls_algorithms.h,
+ lib/includes/gnutls/gnutls.h.in, src/serv-gaa.c, src/serv.gaa: Each
+ ciphersuite is now tight with a minimum TLS version and a maximum
+ one. It is valid if it is between (and including) those. This was
+ added to deprecate TLS_RSA_EXPORT_WITH_RC4_40_MD5 which is not
+ available with TLS 1.1. Reported by Adrian F. Dimcev.
+
+2010-03-20 Nikos Mavrogiannopoulos <address@hidden>
+
+ * .gitignore: Ignore more files.
+
+2010-03-17 Nikos Mavrogiannopoulos <address@hidden>
+
+ * NEWS, lib/auth_cert.c, lib/auth_cert.h, lib/gnutls_alert.c,
+ lib/gnutls_cert.c, lib/includes/gnutls/gnutls.h.in,
+ lib/libgnutls.map, src/cli.c: Added
+ gnutls_certificate_set_verify_function() to allow checking
+ (verifying) certificate before the handshake is completed.
+
+2010-03-17 Nikos Mavrogiannopoulos <address@hidden>
+
+ * doc/examples/ex-rfc2818.c, doc/examples/ex-verify.c: Use the flags
+ for expiration instead of getting the time of each certificate.
+
+2010-03-17 Simon Josefsson <address@hidden>
+
+ * README-alpha: Mention datefudge.
+
+2010-03-17 Simon Josefsson <address@hidden>
+
+ * tests/pkcs1-padding/pkcs1-pad: Skip test if datefudge is not
+ available.
+
+2010-03-17 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/gnutls_priority.c: INITIAL_SAFE_RENEGOTIATION implies
+ SAFE_RENEGOTIATION.
+
+2010-03-16 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/includes/gnutls/gnutls.h.in: Added missing prototype.
+
+2010-03-16 Nikos Mavrogiannopoulos <address@hidden>
+
+ * tests/safe-renegotiation/testsrn: made SAFE_RENEGOTIATION flags
+ explicit.
+
+2010-03-16 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/x509/verify.c, src/certtool.c: gnutls_x509_crt_verify() and
+ gnutls_x509_crt_list_verify() behave identically. That means that
+ gnutls_x509_crt_verify() will now check dates as well. Certool
--verify-chain will use the GNUTLS_VERIFY_DO_NOT_ALLOW_SAME
+ flag to gnutls_x509_crt_verify() to force verification even if
+ certificates are the same. The only exception is at the final
+ certificate (self-checking) where the extra flag
+ GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT is specified to allow for v1 CA
+ certificates.
+
+2010-03-16 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/x509/common.c: Handle dates before 1-1-1970 (handle as being
+ equal to 1-1-1970).
+
+2010-03-16 Nikos Mavrogiannopoulos <address@hidden>
+
+ * tests/pkcs1-padding/pkcs1-pad: Fail if required programs are not
+ found.
+
+2010-03-15 Nikos Mavrogiannopoulos <address@hidden>
+
+ * NEWS, doc/manpages/gnutls-cli.1, doc/manpages/gnutls-serv.1,
+ lib/ext_safe_renegotiation.c, lib/gnutls_priority.c,
+ lib/gnutls_record.c: Safe renegotiation is not enabled by default in
+ client side.
+
+2010-03-15 Nikos Mavrogiannopoulos <address@hidden>
+
+ * doc/manpages/gnutls-cli.1, lib/gnutls_priority.c: better
+ documentation for %INITIAL_SAFE_RENEGOTIATION
+
+2010-03-15 Simon Josefsson <address@hidden>
+
+ * NEWS: Fix.
+
+2010-03-15 Simon Josefsson <address@hidden>
+
+ * tests/openpgp-certs/Makefile.am, tests/openpgp-certs/testselfsigs:
+ Rewrite tests/openpgp-certs/testselfsigs portably for Solaris. Fix
+ EXTRA_DIST.
+
+2010-03-15 Nikos Mavrogiannopoulos <address@hidden>
+
+ * tests/safe-renegotiation/testsrn: localhost -> 127.0.0.1 to work
+ in places where localhost does not resolve.
+
+2010-03-14 Nikos Mavrogiannopoulos <address@hidden>
+
+ * NEWS, lib/includes/gnutls/x509.h, lib/x509/verify.c: Extended time
+ verification to trusted certificate list as well. Introduced the
+ flag GNUTLS_VERIFY_DISABLE_TRUSTED_TIME_CHECKS that will prevent the
+ trusted certificate list verification.
+
+2010-03-11 Nikos Mavrogiannopoulos <address@hidden>
+
+ * src/tests.c, src/tests.h, src/tls_test.c: Added tests for safe
+ renegotiation. Removed old tests for obsolete features (lzo) and
+ tests that were not actually working (srp).
+
+2010-03-11 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/gnutls_extensions.c, lib/gnutls_extensions.h,
+ lib/gnutls_handshake.c, lib/includes/gnutls/gnutls.h.in,
+ tests/safe-renegotiation/testsrn: Extension generation in SSL 3.0
+ (as a reply to SCSV) is not using common code with normal extension
+ generation. Solve issue reported by Tomas Mraz that caused SSL 3.0
+ renegotiation fail.
+
+2010-03-07 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/x509/verify.c: Removed artificial constrained that prevented
+ end-user certificates, being added to the trusted list, treated as
+ trusted. Suggestion and patch by Tomas Mraz.
+
+2010-03-07 Nikos Mavrogiannopoulos <address@hidden>
+
+ * doc/manpages/gnutls-cli.1: Documented that
+ initial_safe_renegotiation is the default.
+
+2010-03-03 Nikos Mavrogiannopoulos <address@hidden>
+
+ * src/serv.c: gnutls-serv will terminate connection on rehandshake
+ errors.
+
+2010-03-03 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/gnutls_alert.c, lib/gnutls_errors.c, lib/gnutls_handshake.c,
+ lib/includes/gnutls/gnutls.h.in: Avoid sending alerts during
+ handshake. Alerts might be interrupted and return a non-fatal error
+ which will propagate and in many cases it shouldn't. Avoid sending no
renegotiation alert when a client connects to an
+ unsafe server. Thanks to Tomas Hoger for the report.
+
+2010-02-26 Nikos Mavrogiannopoulos <address@hidden>
+
+ * src/cli.c: On handshake error send appropriate alert and terminate
+ stream.
+
+2010-02-18 Simon Josefsson <address@hidden>
+
+ * doc/reference/gnutls-docs.sgml: Add id's to chapters.
+
+2010-02-18 Simon Josefsson <address@hidden>
+
+ * .gitignore: Update.
+
+2010-02-18 Simon Josefsson <address@hidden>
+
+ * lib/po/zh_CN.po: Remove.
+
+2010-02-18 Simon Josefsson <address@hidden>
+
+ * src/Makefile.am: Fix -lrt usage.
+
+2010-02-18 Simon Josefsson <address@hidden>
+
+ * src/benchmark.c: Use gnulib gettime module. Indent.
+
+2010-02-18 Simon Josefsson <address@hidden>
+
+ * lib/po/zh_CN.po: Add.
+
+2010-02-18 Simon Josefsson <address@hidden>
+
+ * lib/gl/netdb.in.h: Update gnulib files.
+
+2010-02-18 Simon Josefsson <address@hidden>
+
+ * gl/Makefile.am, gl/gettime.c, gl/gettimeofday.c,
+ gl/m4/clock_time.m4, gl/m4/gettime.m4, gl/m4/gnulib-cache.m4,
+ gl/m4/gnulib-comp.m4, gl/m4/timespec.m4, gl/netdb.in.h,
+ gl/tests/Makefile.am, gl/tests/gettimeofday.c, gl/timespec.h: Update
+ gnulib files.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * lib/cryptodev.c: Indent. Don't include fcntl.h and sys/ioctl.h on
+ (for example) Windows.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * tests/safe-renegotiation/testsrn: Fix objdir != srcdir.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * tests/safe-renegotiation/testsrn: Drop bashism. Make it work on
+ Windows.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * NEWS: Fix.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * NEWS: Add.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * doc/manpages/Makefile.am: Generated.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * doc/reference/Makefile.am, doc/reference/gnutls-docs.sgml,
+ lib/ext_safe_renegotiation.c, lib/ext_signature.c,
+ lib/gnutls_supplemental.c: More GTK-DOC fixes.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * lib/gnutls_db.c: Doc fix.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * lib/openpgp/gnutls_openpgp.c: Doc fix.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * lib/includes/gnutls/gnutls.h.in: Doc fix.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * lib/includes/gnutls/gnutls.h.in: Fix enum doc.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * lib/includes/gnutls/gnutls.h.in: More enum docs.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * lib/includes/gnutls/crypto.h: More enum documentation.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * libextra/gnutls_ia.c: Doc fix.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * lib/includes/gnutls/x509.h: More enum documentation.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * libextra/includes/gnutls/extra.h: Document more.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * lib/includes/gnutls/openpgp.h: Document more.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * lib/includes/gnutls/pkcs12.h: Document enum.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * lib/includes/gnutls/gnutls.h.in: More enum.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * lib/includes/gnutls/gnutls.h.in: Fix typo.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * lib/includes/gnutls/gnutls.h.in: More GTK-DOC documentation.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * lib/includes/gnutls/gnutls.h.in: Improve GTK-DOC coverage.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * lib/includes/gnutls/crypto.h: Fix comments, for GTK-DOC.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * doc/reference/Makefile.am: Ignore more headers.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * lib/x509/crl.c: Doc fix.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * lib/includes/gnutls/crypto.h: Fix for GTK-DOC parse breakage.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * doc/reference/Makefile.am: Ignore gnutlsxx.h too, GTK-DOC doesn't
+ handle C++.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * doc/reference/Makefile.am: Need crypto.h too.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * doc/reference/Makefile.am: Improve header ignores.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * lib/minitasn1/coding.c, lib/minitasn1/decoding.c,
+ lib/minitasn1/element.c, lib/minitasn1/errors.c,
+ lib/minitasn1/libtasn1.h, lib/minitasn1/parser_aux.c,
+ lib/minitasn1/structure.c: Upgrade to libtasn1 2.5 snapshot, for
+ GTK-DOC comments.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * lib/includes/gnutls/openpgp.h: Another GTK-DOC fix.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * lib/auth_srp_sb64.c, lib/crypto-api.c, lib/crypto.c,
+ lib/ext_safe_renegotiation.c, lib/ext_server_name.c,
+ lib/ext_signature.c, lib/gnutls_alert.c, lib/gnutls_algorithms.c,
+ lib/gnutls_anon_cred.c, lib/gnutls_auth.c, lib/gnutls_buffers.c,
+ lib/gnutls_cert.c, lib/gnutls_compress.c, lib/gnutls_db.c,
+ lib/gnutls_dh_primes.c, lib/gnutls_errors.c,
+ lib/gnutls_extensions.c, lib/gnutls_global.c,
+ lib/gnutls_handshake.c, lib/gnutls_mem.c, lib/gnutls_priority.c,
+ lib/gnutls_psk.c, lib/gnutls_psk_netconf.c, lib/gnutls_record.c,
+ lib/gnutls_rsa_export.c, lib/gnutls_session.c, lib/gnutls_srp.c,
+ lib/gnutls_state.c, lib/gnutls_str.c, lib/gnutls_ui.c,
+ lib/gnutls_x509.c, lib/includes/gnutls/crypto.h,
+ lib/opencdk/stream.c, lib/openpgp/compat.c, lib/openpgp/extras.c,
+ lib/openpgp/gnutls_openpgp.c, lib/openpgp/output.c,
+ lib/openpgp/pgp.c, lib/openpgp/pgpverify.c, lib/openpgp/privkey.c,
+ lib/x509/common.c, lib/x509/crl.c, lib/x509/crl_write.c,
+ lib/x509/crq.c, lib/x509/dn.c, lib/x509/output.c,
+ lib/x509/pkcs12.c, lib/x509/pkcs12_bag.c, lib/x509/pkcs7.c,
+ lib/x509/privkey.c, lib/x509/privkey_pkcs8.c,
+ lib/x509/rfc2818_hostname.c, lib/x509/verify.c, lib/x509/x509.c,
+ lib/x509/x509_write.c, lib/x509_b64.c, libextra/gnutls_extra.c,
+ libextra/gnutls_ia.c, libextra/openssl_compat.c: Fix GTK-DOC syntax.
+ Unfortunately this looses some information.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * lib/auth_srp_sb64.c, lib/crypto-api.c,
+ lib/ext_safe_renegotiation.c, lib/gnutls_anon_cred.c,
+ lib/gnutls_auth.c, lib/gnutls_cert.c, lib/gnutls_db.c,
+ lib/gnutls_dh.c, lib/gnutls_handshake.c, lib/gnutls_mem.c,
+ lib/gnutls_priority.c, lib/gnutls_psk.c, lib/gnutls_record.c,
+ lib/gnutls_session.c, lib/gnutls_srp.c, lib/gnutls_state.c,
+ lib/gnutls_x509.c, lib/x509/crl.c, lib/x509/crl_write.c,
+ lib/x509/pkcs12.c, lib/x509/pkcs12_bag.c, lib/x509/pkcs7.c,
+ lib/x509/privkey.c, lib/x509/privkey_pkcs8.c, lib/x509/sign.c,
+ lib/x509/verify.c, lib/x509/x509.c, lib/x509/x509_write.c,
+ libextra/openssl_compat.c: Align indentation of GTK-DOC comments.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * lib/po/vi.po.in: Sync with TP.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * doc/examples/Makefile.am: Silence gnulib warning about fseek.
+
+2010-02-17 Simon Josefsson <address@hidden>
+
+ * build-aux/gendocs.sh, build-aux/gnupload, gl/Makefile.am,
+ gl/m4/getdelim.m4, gl/m4/getline.m4, gl/m4/gettimeofday.m4,
+ gl/m4/gnulib-comp.m4, gl/m4/stdio_h.m4, gl/m4/sys_time_h.m4,
+ gl/netdb.in.h, gl/stdio.in.h, gl/sys_time.in.h,
+ gl/tests/test-getdelim.c, gl/tests/test-getline.c,
+ gl/tests/test-gettimeofday.c, lib/gl/Makefile.am,
+ lib/gl/m4/stdio_h.m4, lib/gl/netdb.in.h, lib/gl/stdio.in.h,
+ maint.mk: Update gnulib files.
+
+2010-02-05 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/gnutls_session_pack.c: Corrected calculation of session data
+ for PSK ciphersuites. Solves issue #107256 reported by Wolfgang
+ Glas.
+
+2010-02-03 Simon Josefsson <address@hidden>
+
+ * doc/ANNOUNCE: Add announcement message.
+
+2010-01-27 Simon Josefsson <address@hidden>
+
+ * NEWS: Fix.
+
+2010-01-27 Simon Josefsson <address@hidden>
+
+ * NEWS: Add.
+
+2010-01-27 Simon Josefsson <address@hidden>
+
+ * lib/po/LINGUAS, lib/po/cs.po.in, lib/po/de.po.in,
+ lib/po/fr.po.in, lib/po/ms.po.in, lib/po/nl.po.in, lib/po/pl.po.in,
+ lib/po/sv.po.in, lib/po/zh_CN.po.in: Sync with TP.
+
+2010-01-27 Simon Josefsson <address@hidden>
+
+ * build-aux/gnupload, doc/gendocs_template,
+ gl/tests/test-gettimeofday.c, gl/tests/test-memchr.c,
+ gl/tests/test-read-file.c, gl/tests/test-sockets.c,
+ lib/gl/tests/test-memchr.c, lib/gl/tests/test-read-file.c,
+ lib/gl/tests/test-sockets.c: Update gnulib files.
+
+2010-01-27 Simon Josefsson <address@hidden>
+
+ * AUTHORS: Add.
+
+2010-01-27 Simon Josefsson <address@hidden>
+
+ * NEWS, lib/minitasn1/coding.c, lib/minitasn1/decoding.c,
+ lib/minitasn1/element.c, lib/minitasn1/errors.c,
+ lib/minitasn1/gstr.c, lib/minitasn1/int.h,
+ lib/minitasn1/libtasn1.h, lib/minitasn1/parser_aux.c,
+ lib/minitasn1/structure.c: Use libtasn1 v2.4.
+
+2010-01-27 Simon Josefsson <address@hidden>
+
+ * lib/gnutls.pc.in: Fix license.
+
+2010-01-27 Simon Josefsson <address@hidden>
+
+ * .clcopying: Fix license.
+
+2010-01-27 Simon Josefsson <address@hidden>
+
+ * AUTHORS: Fix license.
+
+2010-01-27 Simon Josefsson <address@hidden>
+
+ * tests/key-id/README, tests/libgcrypt.supp,
+ tests/rsa-md5-collision/Makefile.am,
+ tests/rsa-md5-collision/README, tests/rsa-md5-collision/mbox,
+ tests/userid/userid.pem: License fix.
+
+2010-01-27 Simon Josefsson <address@hidden>
+
+ * ChangeLog, cfg.mk, configure.ac, doc/Makefile.am,
+ doc/credentials/Makefile.am, doc/cyclo/Makefile.am, doc/errcodes.c,
+ doc/examples/Makefile.am, doc/extract-guile-c-doc.scm,
+ doc/gendocs_template, doc/manpages/Makefile.am, doc/printlist.c,
+ gl/gnulib.mk, gl/m4/onceonly_2_57.m4, gl/tests/gnulib.mk,
+ guile/Makefile.am, guile/modules/Makefile.am,
+ guile/modules/gnutls.scm, guile/modules/gnutls/build/enums.scm,
+ guile/modules/gnutls/build/priorities.scm,
+ guile/modules/gnutls/build/smobs.scm,
+ guile/modules/gnutls/build/utils.scm,
+ guile/modules/gnutls/extra.scm,
+ guile/modules/system/documentation/c-snarf.scm,
+ guile/modules/system/documentation/output.scm,
+ guile/pre-inst-guile.in, guile/src/Makefile.am, guile/src/core.c,
+ guile/src/errors.c, guile/src/errors.h, guile/src/extra.c,
+ guile/src/make-enum-header.scm, guile/src/make-enum-map.scm,
+ guile/src/make-session-priorities.scm,
+ guile/src/make-smob-header.scm, guile/src/make-smob-types.scm,
+ guile/src/utils.c, guile/src/utils.h, guile/tests/Makefile.am,
+ guile/tests/anonymous-auth.scm, guile/tests/errors.scm,
+ guile/tests/openpgp-auth.scm, guile/tests/openpgp-keyring.scm,
+ guile/tests/openpgp-keys.scm, guile/tests/pkcs-import-export.scm,
+ guile/tests/session-record-port.scm, guile/tests/srp-base64.scm,
+ guile/tests/x509-auth.scm, guile/tests/x509-certificates.scm,
+ lib/Makefile.am, lib/auth_anon.c, lib/auth_anon.h, lib/auth_cert.c,
+ lib/auth_cert.h, lib/auth_dh_common.c, lib/auth_dh_common.h,
+ lib/auth_dhe.c, lib/auth_dhe_psk.c, lib/auth_psk.c, lib/auth_psk.h,
+ lib/auth_psk_passwd.c, lib/auth_psk_passwd.h, lib/auth_rsa.c,
+ lib/auth_rsa_export.c, lib/auth_srp.c, lib/auth_srp.h,
+ lib/auth_srp_passwd.c, lib/auth_srp_passwd.h, lib/auth_srp_rsa.c,
+ lib/auth_srp_sb64.c, lib/cipher-libgcrypt.c, lib/configure.ac,
+ lib/crypto-api.c, lib/crypto.c, lib/crypto.h, lib/cryptodev.c,
+ lib/debug.c, lib/debug.h, lib/ext_cert_type.c, lib/ext_cert_type.h,
+ lib/ext_max_record.c, lib/ext_max_record.h, lib/ext_oprfi.c,
+ lib/ext_oprfi.h, lib/ext_safe_renegotiation.c,
+ lib/ext_safe_renegotiation.h, lib/ext_server_name.c,
+ lib/ext_server_name.h, lib/ext_session_ticket.c,
+ lib/ext_session_ticket.h, lib/ext_signature.c, lib/ext_signature.h,
+ lib/ext_srp.c, lib/ext_srp.h, lib/gnutls_alert.c,
+ lib/gnutls_algorithms.c, lib/gnutls_algorithms.h,
+ lib/gnutls_anon_cred.c, lib/gnutls_auth.c, lib/gnutls_auth.h,
+ lib/gnutls_buffers.c, lib/gnutls_buffers.h, lib/gnutls_cert.c,
+ lib/gnutls_cert.h, lib/gnutls_cipher.c, lib/gnutls_cipher.h,
+ lib/gnutls_cipher_int.h, lib/gnutls_compress.c,
+ lib/gnutls_compress.h, lib/gnutls_constate.c,
+ lib/gnutls_constate.h, lib/gnutls_datum.c, lib/gnutls_datum.h,
+ lib/gnutls_db.c, lib/gnutls_db.h, lib/gnutls_dh.c, lib/gnutls_dh.h,
+ lib/gnutls_dh_primes.c, lib/gnutls_errors.c, lib/gnutls_errors.h,
+ lib/gnutls_extensions.c, lib/gnutls_extensions.h,
+ lib/gnutls_global.c, lib/gnutls_global.h, lib/gnutls_handshake.c,
+ lib/gnutls_handshake.h, lib/gnutls_hash_int.c,
+ lib/gnutls_hash_int.h, lib/gnutls_helper.c, lib/gnutls_int.h,
+ lib/gnutls_kx.c, lib/gnutls_kx.h, lib/gnutls_mem.c,
+ lib/gnutls_mem.h, lib/gnutls_mpi.c, lib/gnutls_mpi.h,
+ lib/gnutls_num.c, lib/gnutls_num.h, lib/gnutls_pk.c,
+ lib/gnutls_pk.h, lib/gnutls_priority.c, lib/gnutls_psk.c,
+ lib/gnutls_psk_netconf.c, lib/gnutls_record.c, lib/gnutls_record.h,
+ lib/gnutls_rsa_export.c, lib/gnutls_rsa_export.h,
+ lib/gnutls_session.c, lib/gnutls_session_pack.c,
+ lib/gnutls_session_pack.h, lib/gnutls_sig.c, lib/gnutls_sig.h,
+ lib/gnutls_srp.c, lib/gnutls_srp.h, lib/gnutls_state.c,
+ lib/gnutls_state.h, lib/gnutls_str.c, lib/gnutls_str.h,
+ lib/gnutls_supplemental.c, lib/gnutls_supplemental.h,
+ lib/gnutls_ui.c, lib/gnutls_v2_compat.c, lib/gnutls_v2_compat.h,
+ lib/gnutls_x509.c, lib/gnutls_x509.h, lib/includes/Makefile.am,
+ lib/includes/gnutls/crypto.h, lib/includes/gnutls/gnutls.h.in,
+ lib/includes/gnutls/openpgp.h, lib/includes/gnutls/pkcs12.h,
+ lib/includes/gnutls/x509.h, lib/libgnutls.map, lib/libgnutlsxx.map,
+ lib/m4/hooks.m4, lib/mac-libgcrypt.c, lib/minitasn1/Makefile.am,
+ lib/minitasn1/gstr.c, lib/minitasn1/int.h,
+ lib/minitasn1/libtasn1.h, lib/minitasn1/parser_aux.c,
+ lib/minitasn1/structure.c, lib/mpi-libgcrypt.c,
+ lib/opencdk/Makefile.am, lib/opencdk/armor.c,
+ lib/opencdk/context.h, lib/opencdk/filters.h, lib/opencdk/hash.c,
+ lib/opencdk/kbnode.c, lib/opencdk/keydb.c, lib/opencdk/literal.c,
+ lib/opencdk/main.c, lib/opencdk/main.h, lib/opencdk/misc.c,
+ lib/opencdk/new-packet.c, lib/opencdk/opencdk.h,
+ lib/opencdk/packet.h, lib/opencdk/pubkey.c,
+ lib/opencdk/read-packet.c, lib/opencdk/seskey.c,
+ lib/opencdk/sig-check.c, lib/opencdk/stream.c,
+ lib/opencdk/stream.h, lib/opencdk/types.h, lib/opencdk/verify.c,
+ lib/opencdk/write-packet.c, lib/openpgp/Makefile.am,
+ lib/openpgp/compat.c, lib/openpgp/extras.c,
+ lib/openpgp/gnutls_openpgp.c, lib/openpgp/output.c,
+ lib/openpgp/pgp.c, lib/openpgp/pgpverify.c, lib/openpgp/privkey.c,
+ lib/pk-libgcrypt.c, lib/po/cs.po.in, lib/po/de.po.in,
+ lib/po/fr.po.in, lib/po/ms.po.in, lib/po/nl.po.in, lib/po/pl.po.in,
+ lib/po/sv.po.in, lib/random.c, lib/random.h, lib/rnd-libgcrypt.c,
+ lib/x509/Makefile.am, lib/x509/common.c, lib/x509/common.h,
+ lib/x509/crl.c, lib/x509/crl_write.c, lib/x509/crq.c,
+ lib/x509/dn.c, lib/x509/extensions.c, lib/x509/mpi.c,
+ lib/x509/output.c, lib/x509/pbkdf2-sha1.c, lib/x509/pkcs12.c,
+ lib/x509/pkcs12_bag.c, lib/x509/pkcs12_encr.c, lib/x509/pkcs7.c,
+ lib/x509/privkey.c, lib/x509/privkey_pkcs8.c,
+ lib/x509/rfc2818_hostname.c, lib/x509/sign.c, lib/x509/verify.c,
+ lib/x509/x509.c, lib/x509/x509_int.h, lib/x509/x509_write.c,
+ lib/x509_b64.c, lib/x509_b64.h, libextra/Makefile.am,
+ libextra/configure.ac, libextra/ext_inner_application.c,
+ libextra/ext_inner_application.h, libextra/fipsmd5.c,
+ libextra/gl/Makefile.am, libextra/gnutls-extra.pc.in,
+ libextra/gnutls_extra.c, libextra/gnutls_ia.c,
+ libextra/gnutls_openssl.c, libextra/includes/Makefile.am,
+ libextra/includes/gnutls/extra.h,
+ libextra/includes/gnutls/openssl.h, libextra/libgnutls-extra.map,
+ libextra/m4/hooks.m4, libextra/openssl_compat.c,
+ libextra/openssl_compat.h, m4/guile.m4, m4/valgrind.m4,
+ src/Makefile.am, src/common.c, src/serv.c, tests/Makefile.am,
+ tests/anonself.c, tests/certder.c,
+ tests/certificate_set_x509_crl.c, tests/chainverify.c,
+ tests/crq_apis.c, tests/crq_key_id.c, tests/crypto_rng.c,
+ tests/cve-2008-4989.c, tests/cve-2009-1415.c,
+ tests/cve-2009-1416.c, tests/dhepskself.c, tests/dn.c, tests/dn2.c,
+ tests/finished.c, tests/gc.c, tests/hostname-check.c,
+ tests/init_roundtrip.c, tests/key-id/Makefile.am,
+ tests/key-id/key-id, tests/mini-eagain.c, tests/mini.c,
+ tests/moredn.c, tests/mpi.c, tests/netconf-psk.c,
+ tests/nist-pkits/pkits, tests/nist-pkits/pkits_crl,
+ tests/nist-pkits/pkits_crt, tests/nist-pkits/pkits_pkcs12,
+ tests/nist-pkits/pkits_smime, tests/nul-in-x509-names.c,
+ tests/openpgp-certs/Makefile.am, tests/openpgp-keyring.c,
+ tests/openpgpself.c, tests/openssl.c, tests/oprfi.c,
+ tests/parse_ca.c, tests/pathlen/Makefile.am, tests/pathlen/pathlen,
+ tests/pgps2kgnu.c, tests/pkcs1-padding/Makefile.am,
+ tests/pkcs1-padding/pkcs1-pad, tests/pkcs12-decode/Makefile.am,
+ tests/pkcs12-decode/pkcs12, tests/pkcs12_encode.c,
+ tests/pkcs12_s2k.c, tests/pkcs12_s2k_pem.c,
+ tests/pkcs8-decode/Makefile.am, tests/pkcs8-decode/pkcs8,
+ tests/pskself.c, tests/resume.c, tests/rfc2253-escape-test,
+ tests/rsa-md5-collision/Makefile.am,
+ tests/rsa-md5-collision/rsa-md5-collision, tests/set_pkcs12_cred.c,
+ tests/setcredcrash.c, tests/sha2/Makefile.am, tests/sha2/sha2,
+ tests/simple.c, tests/tlsia.c, tests/userid/Makefile.am,
+ tests/userid/userid, tests/utils.c, tests/utils.h,
+ tests/x509_altname.c, tests/x509dn.c, tests/x509paths/chain,
+ tests/x509self.c, tests/x509sign-verify.c, tests/x509signself.c:
+ Update copyright years.
+
+2010-01-27 Simon Josefsson <address@hidden>
+
+ * Makefile.am: Fix license.
+
+2010-01-27 Simon Josefsson <address@hidden>
+
+ * README: Fix license.
+
+2010-01-27 Simon Josefsson <address@hidden>
+
+ * README-alpha: Fix license.
+
+2010-01-27 Simon Josefsson <address@hidden>
+
+ * src/cli.c: Fix license.
+
+2010-01-27 Simon Josefsson <address@hidden>
+
+ * src/crypt.c: Fix license.
+
+2010-01-27 Simon Josefsson <address@hidden>
+
+ * src/tls_test.c: Fix license.
+
+2010-01-27 Simon Josefsson <address@hidden>
+
+ * src/tests.c: Fix license.
+
+2010-01-27 Simon Josefsson <address@hidden>
+
+ * src/psk.c: Fix license.
+
+2010-01-27 Simon Josefsson <address@hidden>
+
+ * src/prime.c: Fix license.
+
+2010-01-27 Simon Josefsson <address@hidden>
+
+ * src/certtool.c: Fix license.
+
+2010-01-27 Simon Josefsson <address@hidden>
+
+ * src/certtool-cfg.c: Fix copyright/license.
+
+2010-01-27 Simon Josefsson <address@hidden>
+
+ * src/benchmark.c: Indent and fix copyright notices.
+
+2010-01-27 Simon Josefsson <address@hidden>
+
+ * build-aux/gnupload, gl/tests/test-gettimeofday.c,
+ gl/tests/test-memchr.c, gl/tests/test-read-file.c,
+ gl/tests/test-sockets.c, lib/gl/tests/test-memchr.c,
+ lib/gl/tests/test-read-file.c, lib/gl/tests/test-sockets.c: Update
+ gnulib files.
+
+2010-01-27 Simon Josefsson <address@hidden>
+
+ * ChangeLog, ChangeLog.1, THANKS, build-aux/gnupload, cfg.mk,
+ doc/Makefile.am, doc/credentials/Makefile.am,
+ doc/cyclo/Makefile.am, doc/errcodes.c, doc/examples/Makefile.am,
+ doc/extract-guile-c-doc.scm, doc/manpages/Makefile.am,
+ doc/printlist.c, gl/tests/test-gettimeofday.c,
+ gl/tests/test-memchr.c, gl/tests/test-read-file.c,
+ gl/tests/test-sockets.c, guile/Makefile.am,
+ guile/modules/Makefile.am, guile/modules/gnutls.scm,
+ guile/modules/gnutls/build/enums.scm,
+ guile/modules/gnutls/build/priorities.scm,
+ guile/modules/gnutls/build/smobs.scm,
+ guile/modules/gnutls/build/utils.scm,
+ guile/modules/gnutls/extra.scm,
+ guile/modules/system/documentation/c-snarf.scm,
+ guile/modules/system/documentation/output.scm,
+ guile/pre-inst-guile.in, guile/src/errors.h,
+ guile/src/make-enum-header.scm, guile/src/make-enum-map.scm,
+ guile/src/make-session-priorities.scm,
+ guile/src/make-smob-header.scm, guile/src/make-smob-types.scm,
+ guile/src/utils.h, guile/tests/anonymous-auth.scm,
+ guile/tests/errors.scm, guile/tests/openpgp-auth.scm,
+ guile/tests/openpgp-keyring.scm, guile/tests/openpgp-keys.scm,
+ guile/tests/pkcs-import-export.scm,
+ guile/tests/session-record-port.scm, guile/tests/srp-base64.scm,
+ guile/tests/x509-auth.scm, guile/tests/x509-certificates.scm,
+ lib/Makefile.am, lib/auth_anon.c, lib/auth_anon.h, lib/auth_cert.c,
+ lib/auth_cert.h, lib/auth_dh_common.c, lib/auth_dh_common.h,
+ lib/auth_dhe.c, lib/auth_dhe_psk.c, lib/auth_psk.c, lib/auth_psk.h,
+ lib/auth_psk_passwd.c, lib/auth_psk_passwd.h, lib/auth_rsa.c,
+ lib/auth_rsa_export.c, lib/auth_srp.c, lib/auth_srp.h,
+ lib/auth_srp_passwd.c, lib/auth_srp_passwd.h, lib/auth_srp_rsa.c,
+ lib/auth_srp_sb64.c, lib/cipher-libgcrypt.c, lib/crypto-api.c,
+ lib/crypto.c, lib/crypto.h, lib/cryptodev.c, lib/debug.c,
+ lib/debug.h, lib/ext_cert_type.c, lib/ext_cert_type.h,
+ lib/ext_max_record.c, lib/ext_max_record.h, lib/ext_oprfi.c,
+ lib/ext_oprfi.h, lib/ext_safe_renegotiation.c,
+ lib/ext_safe_renegotiation.h, lib/ext_server_name.c,
+ lib/ext_server_name.h, lib/ext_session_ticket.c,
+ lib/ext_session_ticket.h, lib/ext_signature.c, lib/ext_signature.h,
+ lib/ext_srp.c, lib/ext_srp.h, lib/gl/tests/test-memchr.c,
+ lib/gl/tests/test-read-file.c, lib/gl/tests/test-sockets.c,
+ lib/gnutls_alert.c, lib/gnutls_algorithms.c,
+ lib/gnutls_algorithms.h, lib/gnutls_anon_cred.c, lib/gnutls_auth.c,
+ lib/gnutls_auth.h, lib/gnutls_buffers.c, lib/gnutls_buffers.h,
+ lib/gnutls_cert.c, lib/gnutls_cert.h, lib/gnutls_cipher.c,
+ lib/gnutls_cipher.h, lib/gnutls_cipher_int.c,
+ lib/gnutls_cipher_int.h, lib/gnutls_compress.c,
+ lib/gnutls_compress.h, lib/gnutls_constate.c,
+ lib/gnutls_constate.h, lib/gnutls_datum.c, lib/gnutls_datum.h,
+ lib/gnutls_db.c, lib/gnutls_db.h, lib/gnutls_dh.c, lib/gnutls_dh.h,
+ lib/gnutls_dh_primes.c, lib/gnutls_errors.c, lib/gnutls_errors.h,
+ lib/gnutls_extensions.c, lib/gnutls_extensions.h,
+ lib/gnutls_global.c, lib/gnutls_global.h, lib/gnutls_handshake.c,
+ lib/gnutls_handshake.h, lib/gnutls_hash_int.c,
+ lib/gnutls_hash_int.h, lib/gnutls_helper.c, lib/gnutls_int.h,
+ lib/gnutls_kx.c, lib/gnutls_kx.h, lib/gnutls_mem.c,
+ lib/gnutls_mem.h, lib/gnutls_mpi.c, lib/gnutls_mpi.h,
+ lib/gnutls_num.c, lib/gnutls_num.h, lib/gnutls_pk.c,
+ lib/gnutls_pk.h, lib/gnutls_priority.c, lib/gnutls_psk.c,
+ lib/gnutls_psk_netconf.c, lib/gnutls_record.c, lib/gnutls_record.h,
+ lib/gnutls_rsa_export.c, lib/gnutls_rsa_export.h,
+ lib/gnutls_session.c, lib/gnutls_session_pack.c,
+ lib/gnutls_session_pack.h, lib/gnutls_sig.c, lib/gnutls_sig.h,
+ lib/gnutls_srp.c, lib/gnutls_srp.h, lib/gnutls_state.c,
+ lib/gnutls_state.h, lib/gnutls_str.c, lib/gnutls_str.h,
+ lib/gnutls_supplemental.c, lib/gnutls_supplemental.h,
+ lib/gnutls_ui.c, lib/gnutls_v2_compat.c, lib/gnutls_v2_compat.h,
+ lib/gnutls_x509.c, lib/gnutls_x509.h, lib/includes/Makefile.am,
+ lib/includes/gnutls/crypto.h, lib/includes/gnutls/gnutls.h.in,
+ lib/includes/gnutls/openpgp.h, lib/includes/gnutls/pkcs12.h,
+ lib/includes/gnutls/x509.h, lib/libgnutls.map, lib/libgnutlsxx.map,
+ lib/mac-libgcrypt.c, lib/minitasn1/Makefile.am,
+ lib/minitasn1/coding.c, lib/minitasn1/decoding.c,
+ lib/minitasn1/element.c, lib/minitasn1/gstr.c,
+ lib/minitasn1/libtasn1.h, lib/minitasn1/parser_aux.c,
+ lib/minitasn1/structure.c, lib/mpi-libgcrypt.c,
+ lib/opencdk/Makefile.am, lib/opencdk/hash.c,
+ lib/openpgp/Makefile.am, lib/openpgp/compat.c,
+ lib/openpgp/extras.c, lib/openpgp/gnutls_openpgp.c,
+ lib/openpgp/output.c, lib/openpgp/pgp.c, lib/openpgp/pgpverify.c,
+ lib/openpgp/privkey.c, lib/pk-libgcrypt.c, lib/random.c,
+ lib/random.h, lib/rnd-libgcrypt.c, lib/x509/Makefile.am,
+ lib/x509/common.c, lib/x509/common.h, lib/x509/crl.c,
+ lib/x509/crl_write.c, lib/x509/crq.c, lib/x509/dn.c,
+ lib/x509/extensions.c, lib/x509/mpi.c, lib/x509/output.c,
+ lib/x509/pkcs12.c, lib/x509/pkcs12_bag.c, lib/x509/pkcs7.c,
+ lib/x509/privkey.c, lib/x509/privkey_pkcs8.c,
+ lib/x509/rfc2818_hostname.c, lib/x509/sign.c, lib/x509/verify.c,
+ lib/x509/x509.c, lib/x509/x509_int.h, lib/x509/x509_write.c,
+ lib/x509_b64.c, lib/x509_b64.h, libextra/Makefile.am,
+ libextra/ext_inner_application.c, libextra/ext_inner_application.h,
+ libextra/fipsmd5.c, libextra/gl/Makefile.am,
+ libextra/gnutls-extra.pc.in, libextra/gnutls_extra.c,
+ libextra/gnutls_ia.c, libextra/gnutls_openssl.c,
+ libextra/includes/Makefile.am, libextra/includes/gnutls/extra.h,
+ libextra/includes/gnutls/openssl.h, libextra/libgnutls-extra.map,
+ libextra/openssl_compat.c, libextra/openssl_compat.h,
+ src/Makefile.am, src/benchmark.c, src/certtool-cfg.c,
+ src/certtool.c, src/common.c, src/crypt.c, src/prime.c, src/psk.c,
+ src/serv.c, src/tests.c, src/tls_test.c, tests/Makefile.am,
+ tests/anonself.c, tests/certder.c, tests/chainverify.c,
+ tests/crq_apis.c, tests/crq_key_id.c, tests/crypto_rng.c,
+ tests/cve-2008-4989.c, tests/cve-2009-1415.c,
+ tests/cve-2009-1416.c, tests/dhepskself.c, tests/dn.c, tests/dn2.c,
+ tests/finished.c, tests/gc.c, tests/hostname-check.c,
+ tests/init_roundtrip.c, tests/key-id/Makefile.am,
+ tests/key-id/key-id, tests/mini-eagain.c, tests/mini.c,
+ tests/moredn.c, tests/mpi.c, tests/netconf-psk.c,
+ tests/nist-pkits/pkits, tests/nist-pkits/pkits_crl,
+ tests/nist-pkits/pkits_crt, tests/nist-pkits/pkits_pkcs12,
+ tests/nist-pkits/pkits_smime, tests/nul-in-x509-names.c,
+ tests/openpgp-certs/Makefile.am, tests/openpgp-certs/testcerts,
+ tests/openpgp-certs/testselfsigs, tests/openpgp-keyring.c,
+ tests/openpgpself.c, tests/openssl.c, tests/oprfi.c,
+ tests/parse_ca.c, tests/pathlen/Makefile.am, tests/pathlen/pathlen,
+ tests/pkcs1-padding/Makefile.am, tests/pkcs1-padding/pkcs1-pad,
+ tests/pkcs12-decode/Makefile.am, tests/pkcs12-decode/pkcs12,
+ tests/pkcs12_encode.c, tests/pkcs12_s2k.c, tests/pkcs12_s2k_pem.c,
+ tests/pkcs8-decode/Makefile.am, tests/pkcs8-decode/pkcs8,
+ tests/pskself.c, tests/resume.c, tests/rfc2253-escape-test,
+ tests/rsa-md5-collision/Makefile.am,
+ tests/rsa-md5-collision/rsa-md5-collision,
+ tests/safe-renegotiation/Makefile.am,
+ tests/safe-renegotiation/testsrn, tests/set_pkcs12_cred.c,
+ tests/setcredcrash.c, tests/sha2/Makefile.am, tests/sha2/sha2,
+ tests/simple.c, tests/tlsia.c, tests/userid/Makefile.am,
+ tests/userid/userid, tests/utils.c, tests/utils.h,
+ tests/x509_altname.c, tests/x509dn.c, tests/x509paths/chain,
+ tests/x509self.c, tests/x509sign-verify.c, tests/x509signself.c: Fix
+ FSF copyright notices.
+
+2010-01-27 Simon Josefsson <address@hidden>
+
+ * THANKS, doc/gnutls.texi: doc: Fix pkg-config recommendation.
Reported by Claudio Saavedra <address@hidden> in
+
+ <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/4095>.
+
+2010-01-27 Simon Josefsson <address@hidden>
+
+ * NEWS, THANKS, src/cli.c: gnutls-cli: Handle reading binary data
+ from server. Reported by and tiny patch from Vitaly Mayatskikh
+ <address@hidden> in
+
+ <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/4096>.
+
+2010-01-26 Simon Josefsson <address@hidden>
+
+ * build-aux/update-copyright, gl/Makefile.am,
+ gl/m4/gnulib-cache.m4, gl/m4/gnulib-comp.m4, gl/tests/Makefile.am,
+ gl/tests/test-update-copyright.sh: Update gnulib files.
+
+2010-01-26 Nikos Mavrogiannopoulos <address@hidden>
+
+ * tests/openpgp-certs/testcerts, tests/openpgp-certs/testselfsigs,
+ tests/safe-renegotiation/testsrn: Added copyright notices!
+
+2010-01-26 Simon Josefsson <address@hidden>
+
+ * NEWS, doc/manpages/Makefile.am: Generated.
+
+2010-01-26 Simon Josefsson <address@hidden>
+
+ * .gitignore: Improve.
+
+2010-01-26 Simon Josefsson <address@hidden>
+
+ * doc/reference/Makefile.am: Ignore more.
+
+2010-01-26 Simon Josefsson <address@hidden>
+
+ * .gitignore, lib/gl/m4/warn-on-use.m4: Update gnulib files.
+
+2010-01-26 Simon Josefsson <address@hidden>
+
+ * gl/m4/warn-on-use.m4, lib/build-aux/arg-nonnull.h,
+ lib/build-aux/warn-on-use.h: Update gnulib files.
+
+2010-01-26 Simon Josefsson <address@hidden>
+
+ * .gitignore: Fix.
+
+2010-01-26 Simon Josefsson <address@hidden>
+
+ * lib/gl/tests/macros.h, lib/gl/tests/signature.h: Update gnulib
+ files.
+
+2010-01-26 Simon Josefsson <address@hidden>
+
+ * .gitignore: Fix
+
+2010-01-26 Simon Josefsson <address@hidden>
+
+ * gl/tests/macros.h, gl/tests/signature.h,
+ gl/tests/test-sys_ioctl.c: Update gnulib files.
+
+2010-01-26 Simon Josefsson <address@hidden>
+
+ * GNUmakefile, build-aux/arg-nonnull.h, build-aux/config.rpath,
+ build-aux/gendocs.sh, build-aux/gnupload, build-aux/link-warning.h,
+ build-aux/pmccabe2html, build-aux/useless-if-before-free,
+ build-aux/vc-list-files, build-aux/warn-on-use.h, gl/Makefile.am,
+ gl/accept.c, gl/alignof.h, gl/alloca.c, gl/alloca.in.h,
+ gl/arpa_inet.in.h, gl/asnprintf.c, gl/bind.c, gl/c-ctype.c,
+ gl/c-ctype.h, gl/close-hook.c, gl/close-hook.h, gl/close.c,
+ gl/connect.c, gl/errno.in.h, gl/error.c, gl/error.h, gl/fclose.c,
+ gl/float+.h, gl/float.in.h, gl/fseeko.c, gl/gai_strerror.c,
+ gl/getaddrinfo.c, gl/getdelim.c, gl/getline.c, gl/getpass.c,
+ gl/getpass.h, gl/gettext.h, gl/inet_ntop.c, gl/inet_pton.c,
+ gl/intprops.h, gl/listen.c, gl/lseek.c, gl/m4/00gnulib.m4,
+ gl/m4/alloca.m4, gl/m4/arpa_inet_h.m4, gl/m4/autobuild.m4,
+ gl/m4/close.m4, gl/m4/errno_h.m4, gl/m4/error.m4,
+ gl/m4/extensions.m4, gl/m4/fclose.m4, gl/m4/float_h.m4,
+ gl/m4/fseeko.m4, gl/m4/getaddrinfo.m4, gl/m4/getdelim.m4,
+ gl/m4/getline.m4, gl/m4/getpass.m4, gl/m4/gettimeofday.m4,
+ gl/m4/gnulib-cache.m4, gl/m4/gnulib-common.m4,
+ gl/m4/gnulib-comp.m4, gl/m4/gnulib-tool.m4, gl/m4/hostent.m4,
+ gl/m4/include_next.m4, gl/m4/inet_ntop.m4, gl/m4/inet_pton.m4,
+ gl/m4/intmax_t.m4, gl/m4/inttypes_h.m4, gl/m4/lib-ld.m4,
+ gl/m4/lib-link.m4, gl/m4/lib-prefix.m4, gl/m4/longlong.m4,
+ gl/m4/lseek.m4, gl/m4/malloc.m4, gl/m4/manywarnings.m4,
+ gl/m4/memchr.m4, gl/m4/minmax.m4, gl/m4/mmap-anon.m4,
+ gl/m4/multiarch.m4, gl/m4/netdb_h.m4, gl/m4/netinet_in_h.m4,
+ gl/m4/perror.m4, gl/m4/printf.m4, gl/m4/read-file.m4,
+ gl/m4/readline.m4, gl/m4/realloc.m4, gl/m4/select.m4,
+ gl/m4/servent.m4, gl/m4/size_max.m4, gl/m4/snprintf.m4,
+ gl/m4/sockets.m4, gl/m4/socklen.m4, gl/m4/sockpfaf.m4,
+ gl/m4/stdarg.m4, gl/m4/stdbool.m4, gl/m4/stddef_h.m4,
+ gl/m4/stdint.m4, gl/m4/stdint_h.m4, gl/m4/stdio_h.m4,
+ gl/m4/stdlib_h.m4, gl/m4/strerror.m4, gl/m4/string_h.m4,
+ gl/m4/sys_ioctl_h.m4, gl/m4/sys_select_h.m4, gl/m4/sys_socket_h.m4,
+ gl/m4/sys_stat_h.m4, gl/m4/sys_time_h.m4, gl/m4/time_h.m4,
+ gl/m4/ungetc.m4, gl/m4/unistd_h.m4, gl/m4/vasnprintf.m4,
+ gl/m4/version-etc.m4, gl/m4/warnings.m4, gl/m4/wchar.m4,
+ gl/m4/wchar_t.m4, gl/m4/wint_t.m4, gl/m4/xsize.m4, gl/memchr.c,
+ gl/minmax.h, gl/netdb.in.h, gl/netinet_in.in.h,
+ gl/override/lib/gettext.h.diff, gl/perror.c, gl/printf-args.c,
+ gl/printf-args.h, gl/printf-parse.c, gl/printf-parse.h,
+ gl/progname.c, gl/progname.h, gl/read-file.c, gl/read-file.h,
+ gl/readline.c, gl/readline.h, gl/realloc.c, gl/recv.c, gl/select.c,
+ gl/send.c, gl/setsockopt.c, gl/shutdown.c, gl/size_max.h,
+ gl/snprintf.c, gl/socket.c, gl/sockets.c, gl/sockets.h,
+ gl/stdarg.in.h, gl/stdbool.in.h, gl/stddef.in.h, gl/stdint.in.h,
+ gl/stdio-impl.h, gl/stdio-write.c, gl/stdio.in.h, gl/stdlib.in.h,
+ gl/strerror.c, gl/string.in.h, gl/sys_select.in.h,
+ gl/sys_socket.in.h, gl/sys_stat.in.h, gl/sys_time.in.h,
+ gl/tests/Makefile.am, gl/tests/dummy.c, gl/tests/gettimeofday.c,
+ gl/tests/ioctl.c, gl/tests/sys_ioctl.in.h, gl/tests/test-alignof.c,
+ gl/tests/test-alloca-opt.c, gl/tests/test-arpa_inet.c,
+ gl/tests/test-c-ctype.c, gl/tests/test-errno.c,
+ gl/tests/test-fseeko.c, gl/tests/test-getaddrinfo.c,
+ gl/tests/test-getdelim.c, gl/tests/test-getline.c,
+ gl/tests/test-gettimeofday.c, gl/tests/test-inet_ntop.c,
+ gl/tests/test-inet_pton.c, gl/tests/test-lseek.c,
+ gl/tests/test-memchr.c, gl/tests/test-netdb.c,
+ gl/tests/test-netinet_in.c, gl/tests/test-perror.c,
+ gl/tests/test-read-file.c, gl/tests/test-select-fd.c,
+ gl/tests/test-select-stdin.c, gl/tests/test-select.c,
+ gl/tests/test-snprintf.c, gl/tests/test-stdbool.c,
+ gl/tests/test-stddef.c, gl/tests/test-stdint.c,
+ gl/tests/test-stdio.c, gl/tests/test-stdlib.c,
+ gl/tests/test-strerror.c, gl/tests/test-string.c,
+ gl/tests/test-sys_select.c, gl/tests/test-sys_socket.c,
+ gl/tests/test-sys_stat.c, gl/tests/test-sys_time.c,
+ gl/tests/test-time.c, gl/tests/test-unistd.c,
+ gl/tests/test-vasnprintf.c, gl/tests/test-vc-list-files-cvs.sh,
+ gl/tests/test-vc-list-files-git.sh, gl/tests/test-version-etc.c,
+ gl/tests/test-version-etc.sh, gl/tests/test-wchar.c,
+ gl/tests/verify.h, gl/tests/w32sock.h, gl/tests/zerosize-ptr.h,
+ gl/time.in.h, gl/unistd.in.h, gl/vasnprintf.c, gl/vasnprintf.h,
+ gl/version-etc-fsf.c, gl/version-etc.c, gl/version-etc.h,
+ gl/w32sock.h, gl/wchar.in.h, gl/xsize.h,
+ lib/build-aux/config.rpath, lib/build-aux/link-warning.h,
+ lib/gl/Makefile.am, lib/gl/alignof.h, lib/gl/alloca.in.h,
+ lib/gl/asnprintf.c, lib/gl/asprintf.c, lib/gl/byteswap.in.h,
+ lib/gl/c-ctype.c, lib/gl/c-ctype.h, lib/gl/close-hook.c,
+ lib/gl/close-hook.h, lib/gl/errno.in.h, lib/gl/float+.h,
+ lib/gl/float.in.h, lib/gl/fseeko.c, lib/gl/gettext.h,
+ lib/gl/lseek.c, lib/gl/m4/00gnulib.m4, lib/gl/m4/alloca.m4,
+ lib/gl/m4/byteswap.m4, lib/gl/m4/codeset.m4, lib/gl/m4/errno_h.m4,
+ lib/gl/m4/extensions.m4, lib/gl/m4/float_h.m4, lib/gl/m4/fseeko.m4,
+ lib/gl/m4/func.m4, lib/gl/m4/gettext.m4, lib/gl/m4/glibc2.m4,
+ lib/gl/m4/glibc21.m4, lib/gl/m4/gnulib-cache.m4,
+ lib/gl/m4/gnulib-common.m4, lib/gl/m4/gnulib-comp.m4,
+ lib/gl/m4/gnulib-tool.m4, lib/gl/m4/iconv.m4,
+ lib/gl/m4/include_next.m4, lib/gl/m4/intdiv0.m4, lib/gl/m4/intl.m4,
+ lib/gl/m4/intldir.m4, lib/gl/m4/intlmacosx.m4, lib/gl/m4/intmax.m4,
+ lib/gl/m4/intmax_t.m4, lib/gl/m4/inttypes-pri.m4,
+ lib/gl/m4/inttypes_h.m4, lib/gl/m4/lcmessage.m4,
+ lib/gl/m4/ld-output-def.m4, lib/gl/m4/ld-version-script.m4,
+ lib/gl/m4/lib-ld.m4, lib/gl/m4/lib-link.m4,
+ lib/gl/m4/lib-prefix.m4, lib/gl/m4/lock.m4, lib/gl/m4/longlong.m4,
+ lib/gl/m4/lseek.m4, lib/gl/m4/malloc.m4, lib/gl/m4/memchr.m4,
+ lib/gl/m4/memmem.m4, lib/gl/m4/minmax.m4, lib/gl/m4/mmap-anon.m4,
+ lib/gl/m4/multiarch.m4, lib/gl/m4/netdb_h.m4, lib/gl/m4/nls.m4,
+ lib/gl/m4/po.m4, lib/gl/m4/printf-posix.m4, lib/gl/m4/printf.m4,
+ lib/gl/m4/progtest.m4, lib/gl/m4/read-file.m4,
+ lib/gl/m4/realloc.m4, lib/gl/m4/size_max.m4, lib/gl/m4/snprintf.m4,
+ lib/gl/m4/sockets.m4, lib/gl/m4/socklen.m4, lib/gl/m4/sockpfaf.m4,
+ lib/gl/m4/stdbool.m4, lib/gl/m4/stddef_h.m4, lib/gl/m4/stdint.m4,
+ lib/gl/m4/stdint_h.m4, lib/gl/m4/stdio_h.m4, lib/gl/m4/stdlib_h.m4,
+ lib/gl/m4/strcase.m4, lib/gl/m4/string_h.m4,
+ lib/gl/m4/strings_h.m4, lib/gl/m4/strverscmp.m4,
+ lib/gl/m4/sys_socket_h.m4, lib/gl/m4/sys_stat_h.m4,
+ lib/gl/m4/threadlib.m4, lib/gl/m4/time_h.m4, lib/gl/m4/time_r.m4,
+ lib/gl/m4/uintmax_t.m4, lib/gl/m4/ungetc.m4, lib/gl/m4/unistd_h.m4,
+ lib/gl/m4/vasnprintf.m4, lib/gl/m4/vasprintf.m4,
+ lib/gl/m4/visibility.m4, lib/gl/m4/vsnprintf.m4,
+ lib/gl/m4/wchar.m4, lib/gl/m4/wchar_t.m4, lib/gl/m4/wint_t.m4,
+ lib/gl/m4/xsize.m4, lib/gl/memchr.c, lib/gl/memmem.c,
+ lib/gl/minmax.h, lib/gl/netdb.in.h,
+ lib/gl/override/lib/gettext.h.diff, lib/gl/printf-args.c,
+ lib/gl/printf-args.h, lib/gl/printf-parse.c, lib/gl/printf-parse.h,
+ lib/gl/read-file.c, lib/gl/read-file.h, lib/gl/realloc.c,
+ lib/gl/size_max.h, lib/gl/snprintf.c, lib/gl/sockets.c,
+ lib/gl/sockets.h, lib/gl/stdbool.in.h, lib/gl/stddef.in.h,
+ lib/gl/stdint.in.h, lib/gl/stdio-impl.h, lib/gl/stdio-write.c,
+ lib/gl/stdio.in.h, lib/gl/stdlib.in.h, lib/gl/str-two-way.h,
+ lib/gl/strcasecmp.c, lib/gl/string.in.h, lib/gl/strings.in.h,
+ lib/gl/strncasecmp.c, lib/gl/strverscmp.c, lib/gl/sys_socket.in.h,
+ lib/gl/sys_stat.in.h, lib/gl/tests/Makefile.am,
+ lib/gl/tests/dummy.c, lib/gl/tests/intprops.h,
+ lib/gl/tests/test-alloca-opt.c, lib/gl/tests/test-byteswap.c,
+ lib/gl/tests/test-c-ctype.c, lib/gl/tests/test-errno.c,
+ lib/gl/tests/test-fseeko.c, lib/gl/tests/test-func.c,
+ lib/gl/tests/test-memchr.c, lib/gl/tests/test-netdb.c,
+ lib/gl/tests/test-read-file.c, lib/gl/tests/test-snprintf.c,
+ lib/gl/tests/test-stdbool.c, lib/gl/tests/test-stddef.c,
+ lib/gl/tests/test-stdint.c, lib/gl/tests/test-stdio.c,
+ lib/gl/tests/test-stdlib.c, lib/gl/tests/test-string.c,
+ lib/gl/tests/test-strings.c, lib/gl/tests/test-strverscmp.c,
+ lib/gl/tests/test-sys_socket.c, lib/gl/tests/test-sys_stat.c,
+ lib/gl/tests/test-time.c, lib/gl/tests/test-unistd.c,
+ lib/gl/tests/test-vasnprintf.c, lib/gl/tests/test-vasprintf.c,
+ lib/gl/tests/test-vsnprintf.c, lib/gl/tests/test-wchar.c,
+ lib/gl/tests/verify.h, lib/gl/tests/zerosize-ptr.h,
+ lib/gl/time.in.h, lib/gl/time_r.c, lib/gl/unistd.in.h,
+ lib/gl/vasnprintf.c, lib/gl/vasnprintf.h, lib/gl/vasprintf.c,
+ lib/gl/vsnprintf.c, lib/gl/w32sock.h, lib/gl/wchar.in.h,
+ lib/gl/xsize.h, libextra/build-aux/config.rpath,
+ libextra/gl/gnulib.mk, libextra/gl/hmac-md5.c, libextra/gl/hmac.h,
+ libextra/gl/m4/00gnulib.m4, libextra/gl/m4/extensions.m4,
+ libextra/gl/m4/gnulib-cache.m4, libextra/gl/m4/gnulib-common.m4,
+ libextra/gl/m4/gnulib-comp.m4, libextra/gl/m4/gnulib-tool.m4,
+ libextra/gl/m4/hmac-md5.m4, libextra/gl/m4/ld-output-def.m4,
+ libextra/gl/m4/ld-version-script.m4, libextra/gl/m4/lib-ld.m4,
+ libextra/gl/m4/lib-link.m4, libextra/gl/m4/lib-prefix.m4,
+ libextra/gl/m4/md5.m4, libextra/gl/m4/memxor.m4, libextra/gl/md5.c,
+ libextra/gl/md5.h, libextra/gl/memxor.c, libextra/gl/memxor.h,
+ maint.mk: Update gnulib files.
+
+2010-01-22 Nikos Mavrogiannopoulos <address@hidden>
+
+ * NEWS: Documented addition of new priority strings.
+
+2010-01-22 Nikos Mavrogiannopoulos <address@hidden>
+
+ * NEWS: Documented Steve Dispensa's patch addition.
+
+2010-01-22 Nikos Mavrogiannopoulos <address@hidden>
+
+ * tests/safe-renegotiation/testsrn: Added tests for new behaviour of
+ client.
+
+2010-01-22 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/gnutls_handshake.c: Revert "Always allow initial negotiation.
+ Disable subsequent unsafe renegotiations." This reverts commit
+ 1e4981cfbec360a19cfb7470ce96093aaa95b32e. Ah, this was to twart the
attack (description by Daniel Kahn
+ Gilmor): The problem, as i understand it, is that the client is
+ incapable of telling whether the plaintext prefix injection attack
+ has already happened. I don't think disabling renegotiation for the
+ session resolves the problem. For a server which does not announce and
enforce safe renegotiation,
+ what the client sees as an initial connection may unknowingly
+ actually be renegotiating an existing session that was started by an
+ attacker. The concern isn't that the (legitimate) client will have
their
+ session re-negotiated by an attacker; it's that the MITM attacker
+ can trick the server into viewing the client's initial
+ authentication as a re-negotiation of a TLS session already
+ underway. for servers which do odd things like apply the credentials
of the
+ post-renegotiation client to the traffic that happened before the
+ renegotiation (e.g. HTTPS, with client-side certificates required
+ only for certain subdirectories), a safe-renegotiation-aware client
+ *should* refuse to connect to servers which do not announce safe
+ renegotiation if they want to resist this attack.
+
+2010-01-21 Nikos Mavrogiannopoulos <address@hidden>
+
+ * configure.ac: Added safe-renegotiation subdir.
+
+2010-01-21 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/ext_safe_renegotiation.c, lib/gnutls_handshake.c,
+ lib/gnutls_int.h, lib/gnutls_priority.c, tests/Makefile.am,
+ tests/safe-renegotiation/Makefile.am,
+ tests/safe-renegotiation/params.dh,
+ tests/safe-renegotiation/testsrn: Added safe renegotiation test
+ cases. Added priority string option to completely disable
+ renegotiation to assist in testing more cases.
+
+2010-01-21 Nikos Mavrogiannopoulos <address@hidden>
+
+ * src/cli-gaa.c, src/cli-gaa.h, src/cli.c, src/cli.gaa: Added the
+ --rehandshake option to gnutls-cli to allow connection and immediate
+ rehandshake.
+
+2010-01-21 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/ext_safe_renegotiation.c: More carefull copying of data. Check
+ for the malicious case where a server does initial unsafe
+ negotiation and proceeds with a safe renegotiation.
+
+2010-01-21 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/gnutls_handshake.c: Always allow initial negotiation. Disable
+ subsequent unsafe renegotiations. Signed-off-by: Nikos
Mavrogiannopoulos <address@hidden>
+
+2010-01-21 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/ext_safe_renegotiation.c, lib/gnutls_handshake.c,
+ lib/gnutls_int.h, lib/gnutls_state.c: Safe renegotiation variable
+ cleanup. No longer clear variables that should stay across
+ rehandshakes.
+
+2010-01-21 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/crypto-api.c, lib/gnutls_cipher_int.c: Documented the
+ crypto-api functions and made the API tolerant to NULL IV.
+
+2010-01-21 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/gnutls_handshake.c: Added documentation of rehandshake usage
+ in gnutls if full-duplex capability is required.
+
+2010-01-21 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/gnutls_buffers.c: Reduced asserts to reduce unneeded
+ printings.
+
+2010-01-21 Nikos Mavrogiannopoulos <address@hidden>
+
+ * src/cli.c, src/serv.c: Removed rehandshake initiation capability
+ from client and transferred it to the echo server. Once the server
+ receives a string **REHANDSHAKE** will request a rehandshake.
+
+2010-01-19 Steve Dispensa <address@hidden>
+
+ * lib/gnutls_handshake.c: Here is another patch that fixes an
+ interoperability problem with safe renegotiation and resumption. In
+ copying forward the safe renegotiation state across resumptions, I
+ got a little carried away and copied too much data (new connections
+ should start with empty RI data). Signed-off-by: Nikos
Mavrogiannopoulos <address@hidden>
+
+2010-01-15 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/ext_oprfi.c, lib/ext_session_ticket.c, lib/gnutls_constate.c,
+ lib/gnutls_handshake.c, lib/gnutls_int.h: Modified extensions
+ (session ticket, oprfi) to store internal data in gnutls internal
+ structure and input data only in the security_parameters extension
+ structure. Session ticket extension will call the user supplied hello
function
+ on resumption. (the current API to handle that is inexistant. To be
revised)
+
+2010-01-14 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/ext_session_ticket.c, lib/gnutls_constate.c,
+ lib/gnutls_int.h, lib/gnutls_session_pack.c: Further cleanup the
+ extension internal structure. Now if values are not saved and
+ restored when resumming they will be initialized to zero.
+
+2010-01-13 Nikos Mavrogiannopoulos <address@hidden>
+
+ * tests/chainverify.c, tests/crq_apis.c, tests/crq_key_id.c,
+ tests/cve-2008-4989.c, tests/dn2.c, tests/finished.c, tests/mini.c,
+ tests/pkcs12_s2k_pem.c, tests/tlsia.c, tests/x509sign-verify.c:
+ Tests compile with --enable-gcc-warnings.
+
+2010-01-13 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/ext_safe_renegotiation.h, lib/gnutls_constate.c,
+ lib/gnutls_extensions.c, lib/gnutls_handshake.c, lib/gnutls_int.h,
+ lib/gnutls_state.c, tests/resume.c, tests/simple.c: Specify in
+ detail what to be copied when resuming. It seems there are
+ extensions (like safe renegotiation) that do not need to read the
+ stored values. Moreover this might overcome any bugs by the
+ extensions that used to store pointers in the extension structure.
+
+2010-01-13 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/ext_safe_renegotiation.c: Initialize the default value to 0.
+ It seemed to have default value of 0 when non resuming :)
+
+2010-01-13 Nikos Mavrogiannopoulos <address@hidden>
+
+ * doc/examples/ex-client-tlsia.c, tests/utils.c: Removed warnings.
+
+2010-01-13 Nikos Mavrogiannopoulos <address@hidden>
+
+ * configure.ac: Added -Wno-int-to-pointer-cast to enable compilation
+ when enable-gcc-warnings is given.
+
+2010-01-13 Steve Dispensa <address@hidden>
+
+ * lib/gnutls_handshake.c: Here are two more patches. The first adds
+ support for renegotiation of resumption. Also, I found a bug in my
initial implementation - I was incorrectly
+ sending the SCSV on all connections, not only those using SSLv3, as
+ should have been the case. Signed-off-by: Nikos Mavrogiannopoulos
<address@hidden>
+
+2010-01-12 Nikos Mavrogiannopoulos <address@hidden>
+
+ * NEWS, doc/manpages/gnutls-cli.1, doc/manpages/gnutls-serv.1:
+ Documentation updates.
+
+2010-01-12 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/gnutls_handshake.c: When denying an initial negotiation due to
+ missing safe renegotiation extension reply with NO_RENEGOTIATION
+ alert.
+
+2010-01-12 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/gnutls_extensions.c, lib/gnutls_handshake.c,
+ lib/includes/gnutls/gnutls.h.in, tests/resume.c: When resuming no
+ extensions were parsed thus the safe renegotiation extension was
+ ignored as well causing a false detection of unsafe session.
+ Corrected by making a special class of extensions called RESUMED.
+ Those are parsed even when resuming (normally we don't do it to
+ prevent clients overwriting capabilities and credentials).
+
+2010-01-12 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/ext_safe_renegotiation.c, lib/ext_safe_renegotiation.h,
+ lib/gnutls_alert.c, lib/gnutls_algorithms.c,
+ lib/gnutls_algorithms.h, lib/gnutls_extensions.c,
+ lib/gnutls_extensions.h, lib/gnutls_handshake.c, lib/gnutls_int.h,
+ lib/gnutls_priority.c, lib/includes/gnutls/gnutls.h.in: Added Steve
+ Dispensa's patch for safe renegotiation (with artistic changes).
+ Effectively reverted my previous patch
+ 1a338cbaaeec11d958de8da4d1ae036979fccf3e.
+
+2010-01-12 Nikos Mavrogiannopoulos <address@hidden>
+
+ * THANKS: Updated thanks file.
+
+2010-01-12 Nikos Mavrogiannopoulos <address@hidden>
+
+ * NEWS, lib/opencdk/sig-check.c, src/certtool.c,
+ tests/openpgp-certs/Makefile.am, tests/openpgp-certs/testselfsigs:
+ When checking self signature also check the signatures of all
+ subkeys. Ilari Liusvaara noticed and reported the issue and
+ provided test vectors as well. certtool --pgp-certificate-info will
check self signatures. Added self tests for self-sigs.
+
+2010-01-11 Nikos Mavrogiannopoulos <address@hidden>
+
+ * tests/gc.c: hash_fast -> hmac_fast
+
+2010-01-10 Nikos Mavrogiannopoulos <address@hidden>
+
+ * doc/manpages/gnutls-cli.1, doc/manpages/gnutls-serv.1,
+ lib/Makefile.am, lib/ext_safe_renegotiation.c,
+ lib/ext_safe_renegotiation.h, lib/gnutls_errors.c,
+ lib/gnutls_extensions.c, lib/gnutls_handshake.c, lib/gnutls_int.h,
+ lib/gnutls_priority.c, lib/includes/gnutls/gnutls.h.in, src/cli.c,
+ src/serv.c: Added safe renegotiation patch from Steve Dispensa,
+ modified to suit gnutls code style and error checking. Modified to
+ conform to draft-ietf-tls-renegotiation-03.txt. gnutls-cli will search
input for **RENEGOTIATION** to perform a
+ renegotiation and gnutls-serv will perform one if requested.
+
+2010-01-10 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/x509/mpi.c: Corrections for --disable-extra-pki configure flag
+ to work. Patch by Bill Randle.
+
+2010-01-04 Andreas Metzler <address@hidden>
+
+ * ChangeLog, doc/certtool.cfg, doc/gnutls.texi, lib/gnutls_auth.c,
+ lib/gnutls_priority.c, lib/gnutls_session.c, lib/openpgp/pgp.c,
+ lib/openpgp/privkey.c: Typo fixes: successful, precedence, preferred
+
+2009-12-18 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/cryptodev.c: define EALG_MAX_BLOCK_LEN if not there.
+
+2009-12-05 Nikos Mavrogiannopoulos <address@hidden>
+
+ * libextra/fipsmd5.c: use C99 initializations
+
+2009-12-05 Nikos Mavrogiannopoulos <address@hidden>
+
+ * NEWS, lib/Makefile.am, lib/compat.c, lib/crypto-api.c,
+ lib/crypto.c, lib/crypto.h, lib/gnutls_cipher.c,
+ lib/gnutls_cipher_int.c, lib/gnutls_cipher_int.h,
+ lib/gnutls_hash_int.c, lib/gnutls_hash_int.h,
+ lib/includes/gnutls/crypto.h, lib/includes/gnutls/gnutls.h.in,
+ lib/libgnutls.map, libextra/fipsmd5.c, src/benchmark.c: Reverted all
+ previous changes to combine hashes with MAC algorithms. It is now
+ permissible to register a hash algorithm separately from a MAC.
+
+2009-12-05 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/crypto-api.c, lib/crypto.c, lib/crypto.h,
+ lib/ext_session_ticket.c, lib/gnutls_algorithms.c,
+ lib/gnutls_algorithms.h, lib/gnutls_cipher.c,
+ lib/gnutls_cipher_int.c, lib/gnutls_cipher_int.h,
+ lib/gnutls_constate.c, lib/gnutls_constate.h,
+ lib/gnutls_handshake.c, lib/gnutls_hash_int.c,
+ lib/gnutls_hash_int.h, lib/gnutls_int.h, lib/gnutls_priority.c,
+ lib/gnutls_psk_netconf.c, lib/gnutls_sig.c, lib/gnutls_srp.c,
+ lib/gnutls_state.c, lib/gnutls_ui.c, lib/includes/gnutls/crypto.h,
+ lib/includes/gnutls/gnutls.h.in, lib/mac-libgcrypt.c,
+ lib/opencdk/dummy.c, lib/opencdk/filters.h, lib/opencdk/hash.c,
+ lib/opencdk/kbnode.c, lib/opencdk/main.h, lib/opencdk/opencdk.h,
+ lib/opencdk/pubkey.c, lib/opencdk/sig-check.c,
+ lib/opencdk/verify.c, lib/x509/crq.c, lib/x509/pbkdf2-sha1.c,
+ lib/x509/pkcs12.c, lib/x509/pkcs12_encr.c, lib/x509/privkey.c,
+ lib/x509/sign.c, lib/x509/verify.c, lib/x509/x509.c,
+ lib/x509/x509_int.h, libextra/fipsmd5.c, libextra/gnutls_openssl.c:
+ Revert "Merged the two internal hash API functions, to simplify and
+ reduce code." This reverts commit
bc3e43d5f121e404aa32212dcfcc5027de807056. Conflicts: lib/crypto.c
lib/gnutls_cipher.c lib/gnutls_hash_int.c lib/gnutls_hash_int.h
lib/includes/gnutls/crypto.h lib/mac-libgcrypt.c
+
+2009-12-05 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/gnutls_hash_int.c, lib/includes/gnutls/crypto.h,
+ lib/mac-libgcrypt.c, libextra/gnutls_openssl.c, tests/gc.c: Revert
+ "Added plain MD5 hash check and corrected gnutls_hash_fast() usage
+ in openssl.c" This reverts commit
54486afbfcf3398846d5c20d3094bdb7d0a43ff2.
+
+2009-12-04 Simon Josefsson <address@hidden>
+
+ * doc/examples/ex-x509-info.c: Improve example of printing cert
+ info.
+
+2009-12-04 Simon Josefsson <address@hidden>
+
+ * doc/gnutls.texi: Typo fix. Reported by Laurence <address@hidden> in
+
+ <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/4036>.
+
+2009-12-04 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/compat.c, lib/gnutls_algorithms.h: fixes for compilation.
+
+2009-12-03 Simon Josefsson <address@hidden>
+
+ * lib/gnutls_cert.c: Check return value from
+ gnutls_x509_crt_get_key_usage.
+
+2009-12-02 Nikos Mavrogiannopoulos <address@hidden>
+
+ * NEWS, tests/pathlen/ca-no-pathlen.pem,
+ tests/pathlen/no-ca-or-pathlen.pem: This is a follow-up to commit
+ 3d8da5765133c6ced37bf29b5a07f950b8c26cd7, that fixes some issues
+ with DSA and RSA certificate encoding. Due to that the shown public
+ key IDs are different than the ones in previous gnutls versions.
+
+2009-12-02 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/gnutls_cipher.c: reduced calls to gnutls_hash on
+ encryption/decryption. Only initialize MAC when needed.
+
+2009-12-02 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/gnutls_hash_int.c, lib/includes/gnutls/crypto.h,
+ lib/mac-libgcrypt.c, libextra/gnutls_openssl.c, tests/gc.c: Added
+ plain MD5 hash check and corrected gnutls_hash_fast() usage in
+ openssl.c Corrected new hash API bug that prevented usage of plain
+ hash functions.
+
+2009-12-02 Nikos Mavrogiannopoulos <address@hidden>
+
+ * NEWS, doc/gnutls.texi, lib/Makefile.am, lib/compat.c,
+ lib/crypto.c, lib/ext_session_ticket.c, lib/gnutls_algorithms.c,
+ lib/gnutls_algorithms.h, lib/gnutls_cipher.c,
+ lib/includes/gnutls/crypto.h, lib/libgnutls.map,
+ lib/opencdk/read-packet.c, lib/x509/privkey_pkcs8.c,
+ src/benchmark.c, tests/gc.c: Exported gnutls_cipher_get_block_size()
+ and all hash functions added to libgnutls.map. Expanded benchmark
+ with 3DES and ARCFOUR. Corrected test that used non-existing symbol.
+
+2009-12-02 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/m4/hooks.m4: Corrected check for cryptodev. Only enable it if
+ --enable-cryptodev is specified.
+
+2009-12-01 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/cryptodev.c, lib/gnutls_cryptodev.h, lib/gnutls_hash_int.c,
+ lib/gnutls_hash_int.h, lib/mac-libgcrypt.c, lib/x509/mpi.c:
+ Corrected compilation issues.
+
+2009-11-30 Nikos Mavrogiannopoulos <address@hidden>
+
+ * configure.ac, lib/m4/hooks.m4: Moved cryptodev check to
+ lib/m4/hooks.m4 and now --enable-cryptodev actually works.
+
+2009-11-30 Simon Josefsson <address@hidden>
+
+ * lib/gnutls_x509.c: Doc fix.
+
+2009-11-30 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/cryptodev.c: corrected old type.
+
+2009-11-30 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/cryptodev.c: Only include cryptodev.h if cryptodev is there.
+
+2009-11-29 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/crypto-api.c, lib/crypto.c, lib/crypto.h,
+ lib/ext_session_ticket.c, lib/gnutls_algorithms.c,
+ lib/gnutls_algorithms.h, lib/gnutls_cipher.c,
+ lib/gnutls_cipher_int.c, lib/gnutls_cipher_int.h,
+ lib/gnutls_constate.c, lib/gnutls_constate.h,
+ lib/gnutls_handshake.c, lib/gnutls_hash_int.c,
+ lib/gnutls_hash_int.h, lib/gnutls_int.h, lib/gnutls_priority.c,
+ lib/gnutls_psk_netconf.c, lib/gnutls_sig.c, lib/gnutls_srp.c,
+ lib/gnutls_state.c, lib/gnutls_ui.c, lib/includes/gnutls/crypto.h,
+ lib/includes/gnutls/gnutls.h.in, lib/mac-libgcrypt.c,
+ lib/opencdk/dummy.c, lib/opencdk/filters.h, lib/opencdk/hash.c,
+ lib/opencdk/kbnode.c, lib/opencdk/main.h, lib/opencdk/opencdk.h,
+ lib/opencdk/pubkey.c, lib/opencdk/sig-check.c,
+ lib/opencdk/verify.c, lib/x509/crq.c, lib/x509/pbkdf2-sha1.c,
+ lib/x509/pkcs12.c, lib/x509/pkcs12_encr.c, lib/x509/privkey.c,
+ lib/x509/sign.c, lib/x509/verify.c, lib/x509/x509.c,
+ lib/x509/x509_int.h, libextra/fipsmd5.c, libextra/gnutls_openssl.c:
+ Merged the two internal hash API functions, to simplify and reduce
+ code. gnutls_hmac* and gnutls_hash* were merged to gnutls_hash API.
+
+2009-11-29 Nikos Mavrogiannopoulos <address@hidden>
+
+ * .gitignore, configure.ac, lib/Makefile.am, lib/crypto-api.c,
+ lib/crypto.c, lib/cryptodev.c, lib/gnutls_cipher_int.c,
+ lib/gnutls_cryptodev.h, lib/gnutls_errors.c, lib/gnutls_global.c,
+ lib/gnutls_hash_int.c, lib/gnutls_hash_int.h,
+ lib/includes/gnutls/crypto.h, lib/includes/gnutls/gnutls.h.in,
+ lib/libgnutls.map, src/Makefile.am, src/benchmark.c: Added cryptodev
+ support (/dev/crypto). Tested with
+ http://www.logix.cz/michal/devel/cryptodev/. Added benchmark
+ utility for AES. Exported API to access encryption algorithms.
+
+2009-11-28 Nikos Mavrogiannopoulos <address@hidden>
+
+ * NEWS: Documented certtool's certificate request generation fix.
+
+2009-11-28 Nikos Mavrogiannopoulos <address@hidden>
+
+ * lib/x509/mpi.c: Corrected two issues that affected certificate
+ request generation. 1. Null padding is added on integers (found thanks
to Wilankar
+ Trupti <address@hidden>) 2. In optional SignatureAlgorithm parameters
field for DSA keys the
+ DSA parameters were added. Those were rejected by verisign. Gnutls
+ no longer adds those parameters there since other implementations
+ don't do either and having them does not seem to offer anything
+ (anyway you need the signer's certificate to verify thus public key
+ will be available).
+
+2009-11-27 Simon Josefsson <address@hidden>
+
+ * doc/manpages/Makefile.am, tests/key-id/key-id,
+ tests/nist-pkits/gnutls_test_entry, tests/x509paths/chain: More
+ fixes of grep -q problem.
+
+2009-11-27 Simon Josefsson <address@hidden>
+
+ * NEWS: Add.
+
+2009-11-24 Nikos Mavrogiannopoulos <address@hidden>
+
+ * src/certtool-gaa.c, src/certtool-gaa.h, src/certtool.c,
+ src/certtool.gaa: Allow exporting of Certificate requests to DER
+ format. Added option --no-crq-extensions to avoid adding extensions
+ to a request.
+
+2009-11-23 Simon Josefsson <address@hidden>
+
+ * tests/rfc2253-escape-test: Don't use 'grep -q', to fix portability
+ to OpenSolaris. Reported by "Dr. David Kirkby" <address@hidden> in
+
+
<http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3993>.
+
+2009-11-16 Simon Josefsson <address@hidden>
+
+ * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4,
+ libextra/configure.ac: Bump versions.
+
+2009-11-15 Simon Josefsson <address@hidden>
+
+ * doc/guile.texi: Doc fix.
+
+2009-11-15 Simon Josefsson <address@hidden>
+
+ * gl/Makefile.am, gl/intprops.h, gl/m4/sys_stat_h.m4,
+ gl/m4/unistd_h.m4, gl/sys_stat.in.h, gl/unistd.in.h,
+ gl/version-etc.c, lib/gl/Makefile.am, lib/gl/m4/sys_stat_h.m4,
+ lib/gl/m4/unistd_h.m4, lib/gl/sys_stat.in.h,
+ lib/gl/tests/intprops.h, lib/gl/unistd.in.h, maint.mk: Update gnulib
+ files.
+
+2009-11-09 Simon Josefsson <address@hidden>
+
+ * ChangeLog: Generated.
+
2009-11-09 Simon Josefsson <address@hidden>
* NEWS: Version 2.9.9.
@@ -9799,7 +11539,7 @@
* configure.in: Bump version so we are higher than gnutls 2.2.x but
remain compatible. This will avoid shared library name conflicts
with 2.2.x, and also that any 2.3.x libraries will always be
- preferred over 2.2.x.
+ prefered over 2.2.x.
2008-01-19 Simon Josefsson <address@hidden>
@@ -19218,11 +20958,16 @@
2005-11-07 Simon Josefsson <address@hidden>
- * Version 1.2.9.
+ * NEWS: Version 1.2.9.
+
+2005-11-06 Nikos Mavrogiannopoulos <address@hidden>
+
+ * corrected bug in pkcs 12 ID key setting. Found and reported by Fran
+ <address@hidden>.
-----
- Copyright (C) 2005, 2006, 2007, 2008, 2009, 2010 Free Software
+ Copyright (C) 2005, 2006, 2007, 2008, 2009, 2010 Free Software
Foundation, Inc.
Copying and distribution of this file, with or without
hooks/post-receive
--
GNU gnutls
| [Prev in Thread] |
Current Thread |
[Next in Thread] |
- [SCM] GNU gnutls branch, master, updated. gnutls_2_9_9-210-g13c5900,
Simon Josefsson <=