This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "GNU gsasl".
http://git.savannah.gnu.org/cgit/gsasl.git/commit/?id=4f12ca3ec8f941f39ed94a0dc06ff1a5e9c05892 The branch, master has been updated via 4f12ca3ec8f941f39ed94a0dc06ff1a5e9c05892 (commit) via 62f3add191543dd6993cc819c201e842e566c6ad (commit) via 2f5e217dfd6d975960df6eaded2995593fcdb2ac (commit) via 7349f11066ab96a68a56c650bbc0fbfb06f19bbc (commit) from 239669a59a0c18fe1b00500f94f366345f9ec52f (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 4f12ca3ec8f941f39ed94a0dc06ff1a5e9c05892 Author: Simon Josefsson <[email protected]> Date: Fri Mar 26 01:24:34 2010 +0100 Fixup NEWS entries. commit 62f3add191543dd6993cc819c201e842e566c6ad Author: Simon Josefsson <[email protected]> Date: Fri Mar 26 01:06:07 2010 +0100 Update for 1.4.4. commit 2f5e217dfd6d975960df6eaded2995593fcdb2ac Author: Simon Josefsson <[email protected]> Date: Thu Mar 25 10:56:12 2010 +0100 Improve wording. commit 7349f11066ab96a68a56c650bbc0fbfb06f19bbc Author: Simon Josefsson <[email protected]> Date: Thu Mar 25 10:55:02 2010 +0100 Link to Windows binaries. ----------------------------------------------------------------------- Summary of changes: NEWS | 8 ++++++++ doc/announce.txt | 49 +++++++++++++++++++++++-------------------------- doc/gsasl.texi | 14 ++++++++------ lib/NEWS | 17 +++++++++++++---- 4 files changed, 52 insertions(+), 36 deletions(-) diff --git a/NEWS b/NEWS index bcd43b9..9f842f0 100644 --- a/NEWS +++ b/NEWS @@ -8,6 +8,14 @@ SASL. That include the manual, the command line tool, and self tests. * Version 1.5.0 (unreleased) [beta] +* Version 1.4.4 (released 2010-03-25) [stable] + +** See lib/NEWS. + +* Version 1.4.3 (released 2010-03-25) [stable] + +** See lib/NEWS. + * Version 1.4.2 (released 2010-03-15) [stable] ** i18n: Updated translations. diff --git a/doc/announce.txt b/doc/announce.txt index 860df08..0179230 100644 --- a/doc/announce.txt +++ b/doc/announce.txt @@ -1,5 +1,6 @@ To: [email protected], [email protected] -Subject: GNU SASL 1.4.2 +Subject: GNU SASL 1.4.4 + <#part sign=pgpmime> GNU SASL is a modern C library that implement the standard network security protocol Simple Authentication and Security Layer (SASL). The @@ -8,22 +9,18 @@ SCRAM-SHA-1) are implemented. GNU SASL can be used by network applications for IMAP, SMTP, XMPP and similar protocols to provide authentication services. -Top-level NEWS entries: - -* Version 1.4.2 (released 2010-03-15) [stable] - -** i18n: Updated translations. - Library (lib/) NEWS entries: -* Version 1.4.2 (released 2010-03-15) [stable] +* Version 1.4.4 (released 2010-03-25) [stable] -** SCRAM: Encode and decode username/authzid properly. -Before any username/authzid that contained '=' or ',' would not work. +** SCRAM: Fix build error on platforms without strnlen. + +** API and ABI modifications. +No changes since last version. -** Fix typo in error message for GSASL_GSSAPI_ACCEPT_SEC_CONTEXT_ERROR. +* Version 1.4.3 (released 2010-03-25) [stable] -** i18n: Updated translations. +** SCRAM: Don't read out of bounds when parsing tokens. ** API and ABI modifications. No changes since last version. @@ -68,16 +65,16 @@ invited to join our help-gsasl mailing list, see: <http://lists.gnu.org/mailman/listinfo/help-gsasl>. Here are the compressed sources of the entire package: - ftp://ftp.gnu.org/gnu/gsasl/gsasl-1.4.2.tar.gz (3.9MB) - ftp://ftp.gnu.org/gnu/gsasl/gsasl-1.4.2.tar.gz.sig (PGP) + ftp://ftp.gnu.org/gnu/gsasl/gsasl-1.4.4.tar.gz (3.9MB) + ftp://ftp.gnu.org/gnu/gsasl/gsasl-1.4.4.tar.gz.sig (PGP) Here are the compressed sources of the LGPL library (included above): - ftp://ftp.gnu.org/gnu/gsasl/libgsasl-1.4.2.tar.gz (976KB) - ftp://ftp.gnu.org/gnu/gsasl/libgsasl-1.4.2.tar.gz.sig (PGP) + ftp://ftp.gnu.org/gnu/gsasl/libgsasl-1.4.4.tar.gz (980KB) + ftp://ftp.gnu.org/gnu/gsasl/libgsasl-1.4.4.tar.gz.sig (PGP) We also provide pre-built Windows binaries: - http://josefsson.org/gnutls4win/gsasl-1.4.2.zip - http://josefsson.org/gnutls4win/mingw32-gsasl_1.4.2-1_all.deb + http://josefsson.org/gnutls4win/gsasl-1.4.4.zip + http://josefsson.org/gnutls4win/mingw32-gsasl_1.4.4-1_all.deb Here are the build reports for various platforms: http://autobuild.josefsson.org/gsasl/ @@ -104,17 +101,17 @@ The key is available from: Here are the SHA-1 and SHA-224 checksums: -d08a15af40db3394576af6907b6c6ef14950f242 gsasl-1.4.2.tar.gz -29fa81cdeb0d35b280cd2c200c5ff7f25e107887f8cbb83385aa11d9 gsasl-1.4.2.tar.gz +25a74d71c738af555193e4069a22beaf0e0daf63 gsasl-1.4.4.tar.gz +5d123630ad9a9442b0c8fe187e4ec811700ec793eceece87f318eb00 gsasl-1.4.4.tar.gz -bc16a6c309d5cb55d5ec5a8441e15a2330c66628 libgsasl-1.4.2.tar.gz -71008dcc0fdb2044571a0dd74e179468665c85b558973e9b37271e1b libgsasl-1.4.2.tar.gz +d32d29a5c599b2d54f214fc5747559bc890f24de libgsasl-1.4.4.tar.gz +e4bbcb9fbc96a9ffd09795955dd7f697fe951e887fc7931b4332b7a7 libgsasl-1.4.4.tar.gz -f8d9fb0798261a10653dd721d5b871fec41645c6 gsasl-1.4.2.zip -48db1bf7898c9ac59d74c3a992a117abad445bf64520644e2c994c6c gsasl-1.4.2.zip +372e3f923d1dd446ea57a4f8b72b752ab89ba620 gsasl-1.4.4.zip +1cf7c4ba9e9abd8f4e19e424f6e198aea0db667936154475ca0abbec gsasl-1.4.4.zip -9519e72196b779e740af96c116edee4daf2014be mingw32-gsasl_1.4.2-1_all.deb -3faa7fff1004de069ba2071c6abc50d05addb0f68354e7a11b502a8c mingw32-gsasl_1.4.2-1_all.deb +4dcfa0461c4e11fa70b18172d10410048f46dc86 mingw32-gsasl_1.4.4-1_all.deb +17b2b1f8a50fd6633f3e42b22e19e3e617378b126133b6d5495dce35 mingw32-gsasl_1.4.4-1_all.deb Happy hacking, Simon diff --git a/doc/gsasl.texi b/doc/gsasl.texi index 30185fa..bcaec9c 100644 --- a/doc/gsasl.texi +++ b/doc/gsasl.texi @@ -12,7 +12,7 @@ This manual was last updated @value{UPDATED} for version @value{VERSION} of GNU SASL. -Copyright @copyright{} 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Simon Josefsson. +Copyright @copyright{} 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010 Simon Josefsson. @quotation Permission is granted to copy, distribute and/or modify this document @@ -534,7 +534,8 @@ For the complete list, refer to the output from @code{configure @subsection Installing under Windows There are two ways to build GNU SASL on Windows: via MinGW or via -Microsoft Visual Studio. +Microsoft Visual Studio. Note that a binary release for Windows is +available from @url{http://josefsson.org/gnutls4win/}. With MinGW, you can build a GNU SASL DLL and use it from other applications. After installing MinGW (@url{http://mingw.org/}) follow @@ -1705,10 +1706,11 @@ values offered by the server (which may be inspected through the The SCRAM-SHA-1 mechanism is designed to provide (almost) the same capabilities as CRAM-MD5 and DIGEST-MD5 but use modern cryptographic -techniques such as HMAC-SHA-1 and PKCS#5 PBKDF2. SCRAM-SHA-1 supports -authorization identities. Like CRAM-MD5 and DIGEST-MD5, only a hashed -password is transferred. Consequently, SCRAM-SHA-1 needs access to -the correct password to verify the client response. +techniques such as HMAC-SHA-1 hashing and PKCS#5 PBKDF2 key +derivation. SCRAM-SHA-1 supports authorization identities. Like +CRAM-MD5 and DIGEST-MD5, only a hashed password is transferred. +Consequently, SCRAM-SHA-1 needs access to the correct password to +verify the client response. In the client, this mechanism is always enabled, and it requires the @code{GSASL_AUTHID} property, and either @code{GSASL_PASSWORD} or diff --git a/lib/NEWS b/lib/NEWS index 4289d0f..52a98c3 100644 --- a/lib/NEWS +++ b/lib/NEWS @@ -12,12 +12,21 @@ MIT Kerberos or Heimdal. Channel bindings or not support yet. MIT Kerberos and Heimdal are now treated the same, it appears as if they are compatible in modern releases. -** SCRAM: Encode and decode username/authzid properly. -Before any username/authzid that contained '=' or ',' would not work. +** DIGEST-MD5: The server code now returns GSASL_OK after the final token. -** SCRAM: Don't read out of bounds when parsing tokens. +** API and ABI modifications. +No changes since last version. -** DIGEST-MD5: The server code now returns GSASL_OK after the final token. +* Version 1.4.4 (released 2010-03-25) [stable] + +** SCRAM: Fix build error on platforms without strnlen. + +** API and ABI modifications. +No changes since last version. + +* Version 1.4.3 (released 2010-03-25) [stable] + +** SCRAM: Don't read out of bounds when parsing tokens. ** API and ABI modifications. No changes since last version. hooks/post-receive -- GNU gsasl _______________________________________________ Gsasl-commit mailing list [email protected] http://lists.gnu.org/mailman/listinfo/gsasl-commit
