GNU SASL 1.7.2 released (development version)

[Simon Josefsson]

GNU SASL is a modern C library that implement the standard network
security protocol Simple Authentication and Security Layer (SASL).  The
framework itself and a couple of common SASL mechanisms (including
SCRAM-SHA-1) are implemented.  GNU SASL can be used by network
applications for IMAP, SMTP, XMPP and similar protocols to provide
authentication services.

NEWS entries:

** gsasl: The client lets the server decide when authentication is complete.
Before the client quit from the authentication loop when the local
mechanism was finished, but some mechanisms (OPENID20) have optional
additional round-trips.

** gsasl: Added OPENID20 support.

** gsasl: The --no-cb parameter now avoids even attempting to get the
** channel binding data from GnuTLS.
Apparently this can avoid issues when GnuTLS fails to provide the CB.

** examples: Added stand-alone example SMTP server.
See examples/smtp-server.c.  This illustrate how to write a server
using GNU SASL, but it can also be used for interop testing of
clients.

** examples: Added example SMTP server with OpenID 2.0 support.
See examples/openid20/README.

** libgsasl: Updated OPENID20 implementation.
Now following draft-ietf-kitten-sasl-openid-08.

** API and ABI modifications.
GSASL_OPENID20_REDIRECT_URL: Added, new property.
GSASL_OPENID20_OUTCOME_DATA:: Added, new property.
GSASL_OPENID20_AUTHENTICATE_IN_BROWSER: Added, new callback.
GSASL_VALIDATE_OPENID20: Added, new callback.
GSASL_NO_OPENID20_REDIRECT_URL: Added, new error code.
GSASL_OPENID20_AUTH_IDENTIFIER: Removed, use GSASL_AUTHID instead.
GSASL_NO_OPENID20_AUTH_IDENTIFIER: Removed error code.

Improving GNU SASL is costly, but you can help!  We are looking for
organizations that find GNU SASL useful and wish to contribute back.
You can contribute by reporting bugs, improve the software, purchase
support contracts, or donate money or equipment.

Commercial support contracts for GNU SASL are available, and they help
finance continued maintenance.  Simon Josefsson Datakonsult AB, a
Stockholm based privately held company, is currently funding GNU SASL
maintenance.  We are always looking for interesting development
projects.  See http://josefsson.org/ for more details.

The project's web page is available at:
  https://www.gnu.org/software/gsasl/

All manuals are available from:
  https://www.gnu.org/software/gsasl/manual/

Specifically, the following formats are available.

The main manual:
  https://www.gnu.org/software/gsasl/manual/gsasl.html - HTML format
  https://www.gnu.org/software/gsasl/manual/gsasl.pdf - PDF format

API Reference manual:
  https://www.gnu.org/software/gsasl/reference/ - GTK-DOC HTML

Doxygen documentation:
  https://www.gnu.org/software/gsasl/doxygen/ - HTML format
  https://www.gnu.org/software/gsasl/doxygen/gsasl.pdf - PDF format

If you need help to use GNU SASL, or want to help others, you are
invited to join our help-gsasl mailing list, see:
<https://lists.gnu.org/mailman/listinfo/help-gsasl>.

Here are the compressed sources of the entire package:
  ftp://alpha.gnu.org/gnu/gsasl/gsasl-1.7.2.tar.gz (4.7MB)
  ftp://alpha.gnu.org/gnu/gsasl/gsasl-1.7.2.tar.gz.sig (OpenPGP)

Here are the compressed sources of the LGPL library (included above):
  ftp://alpha.gnu.org/gnu/gsasl/libgsasl-1.7.2.tar.gz (1.2MB)
  ftp://alpha.gnu.org/gnu/gsasl/libgsasl-1.7.2.tar.gz.sig (OpenPGP)

We also provide pre-built Windows binaries:
  ftp://alpha.gnu.org/gnu/gsasl/gsasl-1.7.2-x86.zip (32-bit)
  ftp://alpha.gnu.org/gnu/gsasl/gsasl-1.7.2-x64.zip (64-bit)
  ftp://alpha.gnu.org/gnu/gsasl/gsasl-1.7.2-x86-kfw322.zip (32-bit Kerberos)

For code coverage, cyclomatic code complexity charts and clang output see:
  https://www.gnu.org/software/gsasl/coverage/
  https://www.gnu.org/software/gsasl/cyclo/
  https://www.gnu.org/software/gsasl/clang-analyzer/

The software is cryptographically signed by the author using an
OpenPGP key identified by the following information:

pub   1280R/B565716F 2002-05-05 [expires: 2013-05-10]
      Key fingerprint = 0424 D4EE 81A0 E3D1 19C6  F835 EDA2 1E94 B565 716F
uid                  Simon Josefsson <address@hidden>
uid                  Simon Josefsson <address@hidden>
sub   2048R/105E722E 2012-03-13 [expires: 2013-07-26]
sub   2048R/728AB82C 2012-03-13 [expires: 2013-07-26]
sub   2048R/9394F626 2012-03-13 [expires: 2013-07-26]
sub   1280R/4D5D40AE 2002-05-05 [expires: 2013-05-10]

The key is available from:
  http://josefsson.org/key.txt
  dns:b565716f.josefsson.org?TYPE=CERT

Here are the SHA-1 and SHA-224 checksums:

20fa66609a43b357fdd8235a655615cd5b1dba21  gsasl-1.7.2.tar.gz
f1e4170fec985fe12f6e716f4b59110aeeab0956c394f3f30f556e58  gsasl-1.7.2.tar.gz

fab42a7baf8e820ff940d51afaa9eae9472092c8  libgsasl-1.7.2.tar.gz
b8a6a5278968407c180dab295c064a6cb72a3b3bb291b58a4dea1b36  libgsasl-1.7.2.tar.gz

21893d29673df7e452c1d9c7d1dd713cf1619533  gsasl-1.7.2-x86.zip
f9338d443b4765f3b2e08af7769ba548e27e25a7be04d20aed6a26d3  gsasl-1.7.2-x86.zip

47bfbfaff185b98d55310e13c0062a108cae4956  gsasl-1.7.2-x64.zip
9f49c9bc5c59bab5f3fe699b40159db069a2c3ec3b9c7483604fdf9e  gsasl-1.7.2-x64.zip

9db4f45f25a4cefa5fe2615f2ecf2cf8b217bb74  gsasl-1.7.2-x86-kfw322.zip
910a991ae88b43a5f1d36cd09c91a0e088e6ef22cd8dd34976824fb0  
gsasl-1.7.2-x86-kfw322.zip

Happy hacking,
Simon

pgpnEvnbMCfak.pgp
Description: PGP signature