[SCM] GNU gnutls branch, gnutls_2_10_x, updated. gnutls_2_10_1-16-g8e397ad

[Simon Josefsson]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU gnutls".

http://git.savannah.gnu.org/cgit/gnutls.git/commit/?id=8e397ada24fd86eaa3db868de45d28ad70fc9a34

The branch, gnutls_2_10_x has been updated
       via  8e397ada24fd86eaa3db868de45d28ad70fc9a34 (commit)
       via  581df8498c3ac0ef426714b09e9acc283e4d4ee3 (commit)
      from  8c1fbcb57d4aa8a6549df9a57299230e6a1b13fb (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 8e397ada24fd86eaa3db868de45d28ad70fc9a34
Author: Simon Josefsson <address@hidden>
Date:   Thu Sep 30 10:34:42 2010 +0200

    Generated.

commit 581df8498c3ac0ef426714b09e9acc283e4d4ee3
Author: Simon Josefsson <address@hidden>
Date:   Thu Sep 30 10:22:49 2010 +0200

    Version 2.10.2.

-----------------------------------------------------------------------

Summary of changes:
 ChangeLog |   93 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 NEWS      |    2 +-
 2 files changed, 94 insertions(+), 1 deletions(-)

diff --git a/ChangeLog b/ChangeLog
index 3db8020..a9b3183 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,96 @@
+2010-09-30  Simon Josefsson <address@hidden>
+
+       * NEWS: Version 2.10.2.
+
+2010-09-30  Simon Josefsson <address@hidden>
+
+       * tests/pkcs8-decode/Makefile.am, tests/pkcs8-decode/pkcs8: Make
+       pkcs8-decode test work on Windows.
+
+2010-09-29  Nikos Mavrogiannopoulos <address@hidden>
+
+       * lib/ext_session_ticket.c: Avoid double free.
+
+2010-09-29  Micah Anderson <address@hidden>
+
+       * NEWS, doc/certtool.cfg, lib/includes/gnutls/x509.h,
+       lib/x509/output.c, src/certtool-cfg.c, src/certtool-cfg.h,
+       src/certtool.c: Add new extended key usage ipsecIKE According to RFC 
4945 § 5.1.3.12 section title
+       "ExtendedKeyUsage"[0] the following extended key usage has been
+       added:  ... this document defines an ExtendedKeyUsage keyPurposeID that 
MAY
+          be used to limit a certificate's use:    id-kp-ipsecIKE OBJECT 
IDENTIFIER ::= { id-kp 17 }    where id-kp is defined in RFC 3280 [5].  If a 
certificate is
+          intended to be used with both IKE and other applications, and one
+          of the other applications requires use of an EKU value, then such
+          certificates MUST contain either the keyPurposeID id-kp-ipsecIKE or  
  anyExtendedKeyUsage [5], as well as the keyPurposeID values    associated 
with the other applications.  Similarly, if a CA
+          issues multiple otherwise-similar certificates for multiple
+          applications including IKE, and it is intended that the IKE
+          certificate NOT be used with another application, the IKE
+          certificate MAY contain an EKU extension listing a keyPurposeID of
+          id-kp-ipsecIKE to discourage its use with the other application.
+          Recall, however, that EKU extensions in certificates meant for use
+       in IKE are NOT RECOMMENDED.     Conforming IKE implementations are not 
required to support EKU.
+          If a critical EKU extension appears in a certificate and EKU is
+          not supported by the implementation, then RFC 3280 requires that the 
   certificate be rejected.  Implementations that do support EKU
+          MUST support the following logic for certificate validation:    o  
If no EKU extension, continue.     o  If EKU present AND contains either 
id-kp-ipsecIKE or       anyExtendedKeyUsage, continue.     o  Otherwise, reject 
cert.  Signed-off-by: Nikos Mavrogiannopoulos <address@hidden>
+
+2010-09-27  Nikos Mavrogiannopoulos <address@hidden>
+
+       * NEWS: removed invalid e-mail address
+
+2010-09-26  Simon Josefsson <address@hidden>
+
+       * NEWS: Add.
+
+2010-09-26  Simon Josefsson <address@hidden>
+
+       * NEWS: Add.
+
+2010-09-23  Nikos Mavrogiannopoulos <address@hidden>
+
+       * lib/gnutls_handshake.c: No longer use is_fatal() during handshake.
+       Explicitely treat EAGAIN and INTERRUPTED as non-fatal during
+       handshake. If the check_fatal flag is set then
+       GNUTLS_E_WARNING_ALERT_RECEIVED could interrupt a handshake as well.
+
+2010-09-23  Nikos Mavrogiannopoulos <address@hidden>
+
+       * src/cli.c: fflush stdout and stderr before the call to setbuf.
+       This fixes issue in solaris where lines dissappeared from output.
+       Reported and suggested fix by Knut Anders Hatlen.
+
+2010-09-10  Nikos Mavrogiannopoulos <address@hidden>
+
+       * NEWS, lib/x509_b64.c: Be liberal in the PEM decoding. That is
+       spaces and tabs are being skipped.
+
+2010-09-01  Nikos Mavrogiannopoulos <address@hidden>
+
+       * NEWS, lib/gnutls_int.h, lib/gnutls_priority.c,
+       lib/gnutls_record.c: When the %COMPAT flag is specified, larger
+       records that would otherwise violate the TLS spec, are accepted.
+
+2010-08-01  Simon Josefsson <address@hidden>
+
+       * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4,
+       libextra/configure.ac: Bump versions.
+
+2010-08-01  Simon Josefsson <address@hidden>
+
+       * doc/announce.txt: Update for 2.10.1.
+
+2010-08-01  Simon Josefsson <address@hidden>
+
+       * NEWS: Fix.
+
+2010-07-26  Nikos Mavrogiannopoulos <address@hidden>
+
+       * NEWS, lib/gnutls_algorithms.c: renamed NULL MAC to MAC-NULL to
+       prevent clash with NULL cipher.
+
+2010-07-25  Simon Josefsson <address@hidden>
+
+       * ChangeLog: Generated.
+
 2010-07-25  Simon Josefsson <address@hidden>
 
        * NEWS: Typo.
diff --git a/NEWS b/NEWS
index 32e6ab8..46fd5cf 100644
--- a/NEWS
+++ b/NEWS
@@ -3,7 +3,7 @@ Copyright (C) 2000, 2001, 2002, 2003, 2004, 2005,
               2006, 2007, 2008, 2009, 2010 Free Software Foundation, Inc.
 See the end for copying conditions.
 
-* Version 2.10.2 (unreleased)
+* Version 2.10.2 (released 2010-09-30)
 
 ** Use Libtool 2.2.10 to ease MinGW64 builds.
 


hooks/post-receive
-- 
GNU gnutls