[SCM] GNU gnutls annotated tag, gnutls_3_0_21, created. gnutls_3_0_21

[Nikos Mavrogiannopoulos]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU gnutls".

http://git.savannah.gnu.org/cgit/gnutls.git/commit/?id=b69c477b0867d3ff9555c81fee653fb4e7d5ad60

The annotated tag, gnutls_3_0_21 has been created
        at  b69c477b0867d3ff9555c81fee653fb4e7d5ad60 (tag)
   tagging  ed3f249f2ac05465b6adaab68c67a1d4c396ef61 (commit)
  replaces  gnutls_3_0_18
 tagged by  Nikos Mavrogiannopoulos
        on  Tue Jul 3 08:58:01 2012 +0200

- Log -----------------------------------------------------------------
released 3.0.21
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAABAgAGBQJP8pf9AAoJEJ1eqvaQE7hC27AH/0Bvpgm5L7w/zVZHt0SOZ1xD
9KM6f+E18yUwZKEYZAZkaEI977nuDL7J12HS7Goq6nl0OXWCtmapm1Bcby+dqKT7
G8p+GDY1XJvFv4QK9Q1bUiKHY9rb9m70XgMHU6KQdgeZJRKmqH3OY5VbHbQQ7r84
+GlMbSdhsuz8lW5SX0qt1/DOjGP/023JLP6/PtFBGAHEoIkYIffm7Hl0lTKiV7Fh
XMmNRaVM0s56VLXxfCl/+oTjsJissP9dyk1ddMJPdcGi/y+3xcofRctMwhT+Nab+
usYjoJN+tC/AdrVQNdCKPhhQ7QBWK7np6jjWoA5hG9lhkWUt73AnkzRpnrwlQrw=
=QFM7
-----END PGP SIGNATURE-----

Alexandre Bique (1):
      Add gnutls::session::set_transport_vec_push().

David Woodhouse (5):
      Make parse_pkcs12() return extra certificates too
      Export parse_pkcs12() as gnutls_pkcs12_parse()
      Add gnutls_dtls_set_data_mtu()
      Fix documentation for gnutls_dtls_set_mtu()
      Return GNUTLS_E_LARGE_PACKET instead of truncating when sending DTLS 
record

Diego Elio Pettenò (1):
      build: make sure to declare the generated source files as BUILT_SOURCES

Lucas Fisher (1):
      Certtool exports multiple keys in PKCS12 file

Ludwig Nussel (1):
      introduce gnutls_certificate_set_x509_system_trust

Mark Brand (1):
      add missing include wincrypt.h

Nikos Mavrogiannopoulos (174):
      updated
      use AF_UNIX for socketpair.
      avoid the floating point test.
      Added more deprecated functions
      updated gnulib
      corrected comparison
      improved test and added debugging
      raw_to_string no longer returns NULL.
      do not print Key ID in a pkcs12 structure if it is null.
      documented fixes
      Revert "avoid killing child"
      updated documentation
      updated documentation for dtls.
      do not check for fchmod
      refuse to generate small group sizes.
      doc updates
      gnutls_record_check_pending functionality was divided to 
gnutls_record_check_pending and gnutls_record_check_unprocessed.
      updated
      corrected DH generation check.
      Add sanity checks in Diffie-Hellman key exchange values.
      Relax strict DSA/ECDSA checks to allow broader interoperability. Stronger 
hash algorithms are now allowed even if DSA might only allow SHA1.
      Added TLS 1.2 interop tests.
      updated gnulib
      Update random state on all cases.
      optimized usage of gnutls_rnd()
      gnutls_record_check_unprocessed is now inline function.
      text for 3.1.0
      no abi change in 3.0.19
      No need to include gettext.h. Link against libintl when needed.
      Sync with TP.
      by default register a file callback in p11-kit to read a file from the 
pin-source pkcs11url field.
      If a callback fails try the other.
      Use openpgp if enabled.
      Added option to unconditionally disable crywrap. Patch by Daniel Mierswa.
      Added better sanity checks in Diffie-Hellman key exchange.
      documented updated
      Added complete check in SRP parameters.
      Return proper error code if parameter check fails.
      simplified checks.
      corrected typo
      removed old dependency
      corrected bug in scan_nz()
      Corrected win64 cpuid() code. Report and patch by Mann Ern Kang.
      removed redundant declaration.
      This patch fixes following kind of issue with automake 1.12
      Added convenience functions to load a trust list from a file or a memory 
buffer.
      added new functions
      Updated libopts
      Added new functions
      Added the autogen files to git.
      Added support for the URI type of subject alternative name in certtool.
      Added URI to the example.
      Auto-generated texi files were added.
      Revert "This patch fixes following kind of issue with automake 1.12" It 
was suggested that this need not to be solved by gnutls.
      Print certificate if --print-cert is given, even on verification failure.
      Document the effect of lowering the DH bits.
      Added text for gnutls_dh_set_prime_bits and gnutls_srp_set_prime_bits
      Use the PKCS #1 1.5 encoding provided by nettle (2.5) for encryption and 
signatures.
      align with 3.0.x
      updates
      updated
      documented function.
      Be more conservative with examples and changed semantics of 
gnutls_certificate_set_x509_system_trust(). 
gnutls_certificate_set_x509_system_trust() returns 
GNUTLS_E_UNIMPLEMENTED_FEATURE on systems that do not have a (known) default 
trust store.
      Added the --dh-bits option to gnutls-cli.
      When checking for an issuer check for a match in the key identifiers.
      no need for netinet/ip.h
      document nettle requirement
      corrected doc.
      Added DevPak package.
      updated
      updated doc
      Added the notion of a default CRL file.
      no need to distribute postscript
      bumped version
      updated cross compilation makefile
      Added support for windows trusted certificate store
      updated cross compilation makefile.
      updated Makefile.
      updated documentation
      Updated documentation on DTLS.
      MAX_ENTRIES increased to 128.
      corrected data copy
      corrected typo
      updated
      documentation update
      updated Makefile
      Corrected handling of handshake packets that span multiple records.
      improved comments and added unlikely().
      Do not crash if password is null and GNUTLS_PKCS_PLAIN is not specified.
      documented behavior.
      Do not document old functions.
      typo fix
      corrected typo
      corrected text.
      doc updates
      minor documentation updates
      gnutls_certificate_set_x509_simple_pkcs12_file() now imports certificate 
chain if it is present.
      better function naming.
      No need for version script for CPP programs.
      Removed duplicate entries and added an explicit local.
      Differentiate between signature failure and generic errors, by 
introducing the verification flag GNUTLS_CERT_SIGNATURE_FAILURE. Suggested by 
David Woodhouse.
      Verification in openpgp changed to ressemble the X.509 behavior.
      updated news entries
      fixed symbol
      Introduced GNUTLS_E_ENCRYPTED_STRUCTURE error code.
      doc updates
      print warning to stderr
      Added new test program.
      small doc fix
      Re-use GNUTLS_E_DECRYPTION_FAILED for encrypted structures.
      stdarg.h is not needed
      updated
      moved ca-certs.
      updated gnulib
      do not use @euro{}
      no need for eurosans
      updates in latex build
      corrected invalid char
      mention retrieve_function2
      Added keys of equivalent security levels.
      Options --benchmark-tls was split to --benchmark-tls-kx
      corrected function name
      Added support for an old version of the DTLS protocol
      GNUTLS_E_ENCRYPTED_STRUCTURE is no more.
      Print the fingerprint only in the first certificate in the chain.
      simplified check for win32
      removed unused functions.
      documented pin_callback expectations.
      Changed prototype for gnutls_pkcs12_simple_parse() to simplify chain 
building.
      Fixed leaks in PKCS #8 decoding
      removed entry which was included in 3.0.20
      When generating a pkcs12 structure with multiple certificates set a 
friendly name only on the first one.
      In tokens that allow multiple sessions make the private key session 
persistent.
      more files to ignore
      added author of code.
      Revert "documented pin_callback expectations."
      deinitialize extra certs if they are empty.
      Added flag GNUTLS_PKCS12_SP_INCLUDE_SELF_SIGNED for 
gnutls_pkcs12_simple_parse().
      updated TODO
      removed old news entry
      small fix
      correct comparison of sent data in dtls-stress.
      moved symbol
      Use the label when looking for a certificate or private key in PKCS #11.
      Added gnutls_load_file().
      Added functions to directly load a private key.
      updated versions
      updated doc
      Updated Lucas' patch
      document limitations
      Dot require load-privkey for to-p12
      Splitted Lucas' contribution to allow incorporation.
      added missing file
      Return GNUTLS_E_LARGE_PACKET when errno is EMSGSIZE
      doc fix
      use new functions.
      document the gnutls_pcert_st
      doc fixes
      Added functions gnutls_x509_privkey_import2 and 
gnutls_x509_privkey_import_openssl.
      Included more algorithms in openssl privkey decryption.
      Added Camellia-192-CBC algorithm identifier.
      cleaned up errno handling.
      gnutls_dtls_get_data_mtu() is more precise. Based on patch by David 
Woodhouse.
      sign fixes
      only block ciphers need 1 byte padding.
      no need for _gnutls prefix.
      no need to check for DTLS
      fix
      added missing function
      Added test application that tests GNUTLS_E_LARGE_PACKET and modifies the 
MTU size during handshake.
      Handle EC DER keys.
      Check for PEM headers before DEK-Info.
      comment put in context
      gnutls_x509_privkey_import_openssl() works only with PEM files.

Patrick Pelletier (1):
      documentation and comment fixes

Simon Josefsson (3):
      Require automake >= 1.11.3 because of dist-lzip.
      Doc fix.
      Update to libtasn1 2.13.

-----------------------------------------------------------------------


hooks/post-receive
-- 
GNU gnutls