GNU SASL is a modern C library that implement the standard network security protocol Simple Authentication and Security Layer (SASL). The framework itself and a couple of common SASL mechanisms (including CRAM-MD5 and SCRAM-SHA-1) are implemented. GNU SASL can be used by implementations of IMAP, SMTP, XMPP and other application protocols to provide authentication services.
Highlights since the prior stable branch v1.4.x: ** SCRAM: General fixes and support for SCRAM-SHA-1-PLUS with channel bindings. ** GS2-KRB5: New mechanism GS2 with support for Kerberos V5. The supported GSS-API implementations are GNU GSS (v1.0.0+), MIT Kerberos, Heimdal, or MIT Kerberos for Windows. The GS2-KRB5-PLUS variant with TLS channel bindings is not supported. ** GSSAPI/GS2-KRB5: Support for MIT Kerberos for Windows GSS-API library. ** DIGEST-MD5: The server code now returns GSASL_OK after the final token. ** gsasl: Support for TLS channel bindings. Requires GnuTLS 2.11.4 or later for the gnutls_session_channel_binding function. Used by the SCRAM-SHA-1-PLUS mechanism. ** libgsasl: Added property for tls-unique channel binding. The new property GSASL_CB_TLS_UNIQUE takes a base64 encoded tls-unique channel binding. New error code GSASL_NO_CB_TLS_UNIQUE is returned when application fails to provide a channel binding and the mechanism requires it (i.e., in a PLUS server). ** gsasl: Add --no-cb to disable use of TLS channel bindings. ** libgsasl: No longer require the same or newer libgcrypt it was built with. Before libgsasl refused to work if it was used with a libgcrypt shared library that was older than the version that libgsasl was built with. ** doc: Several improvements, including discussion of new features. ** tests: Added and improved several self-tests. ** i18n: Updated translations. ** Update gnulib files. ** API and ABI modifications. GSASL_CB_TLS_UNIQUE: ADDED. GSASL_NO_CB_TLS_UNIQUE: ADDED. GSASL_GSSAPI_ENCAPSULATE_TOKEN_ERROR: ADDED. GSASL_GSSAPI_DECAPSULATE_TOKEN_ERROR: ADDED. GSASL_GSSAPI_INQUIRE_MECH_FOR_SASLNAME_ERROR: ADDED. GSASL_GSSAPI_TEST_OID_SET_MEMBER_ERROR: ADDED. GSASL_GSSAPI_RELEASE_OID_SET_ERROR: ADDED. Improving GNU SASL is costly, but you can help! We are looking for organizations that find GNU SASL useful and wish to contribute back. You can contribute by reporting bugs, improve the software, purchase support contracts, or donate money or equipment. Commercial support contracts for GNU SASL are available, and they help finance continued maintenance. Simon Josefsson Datakonsult AB, a Stockholm based privately held company, is currently funding GNU SASL maintenance. We are always looking for interesting development projects. See http://josefsson.org/ for more details. The project's web page is available at: http://www.gnu.org/software/gsasl/ All manuals are available from: http://www.gnu.org/software/gsasl/manual/ Specifically, the following formats are available. The main manual: http://www.gnu.org/software/gsasl/manual/gsasl.html - HTML format http://www.gnu.org/software/gsasl/manual/gsasl.pdf - PDF format API Reference manual: http://www.gnu.org/software/gsasl/reference/ - GTK-DOC HTML Doxygen documentation: http://www.gnu.org/software/gsasl/doxygen/ - HTML format http://www.gnu.org/software/gsasl/doxygen/gsasl.pdf - PDF format Instructions for how to build GNU SASL under uClinux are available From <http://josefsson.org/uclinux/>. If your uClinux toolchain is broken, it is possible to build GNU SASL without using the ./configure mechanism, see <http://josefsson.org/uclinux/old/>. If you need help to use GNU SASL, or want to help others, you are invited to join our help-gsasl mailing list, see: http://lists.gnu.org/mailman/listinfo/help-gsasl Here are the compressed sources of the entire package: ftp://ftp.gnu.org/gnu/gsasl/gsasl-1.6.0.tar.gz (4.4MB) ftp://ftp.gnu.org/gnu/gsasl/gsasl-1.6.0.tar.gz.sig (OpenPGP) Here are the compressed sources of the LGPL library (included above): ftp://ftp.gnu.org/gnu/gsasl/libgsasl-1.6.0.tar.gz (1.1MB) ftp://ftp.gnu.org/gnu/gsasl/libgsasl-1.6.0.tar.gz.sig (OpenPGP) We also provide pre-built Windows binaries (32-bit, 64-bit, 32-bit KfW): ftp://ftp.gnu.org/gnu/gsasl/gsasl-1.6.0-x86.zip (650KB) ftp://ftp.gnu.org/gnu/gsasl/gsasl-1.6.0-x86.zip.sig (OpenPGP) ftp://ftp.gnu.org/gnu/gsasl/gsasl-1.6.0-x64.zip (699KB) ftp://ftp.gnu.org/gnu/gsasl/gsasl-1.6.0-x64.zip.sig (OpenPGP) ftp://ftp.gnu.org/gnu/gsasl/gsasl-1.6.0-x86-kfw322.zip (686KB) ftp://ftp.gnu.org/gnu/gsasl/gsasl-1.6.0-x86-kfw322.zip.sig (OpenPGP) For code coverage and cyclomatic code complexity charts: http://www.gnu.org/software/gsasl/coverage/ http://www.gnu.org/software/gsasl/cyclo/cyclo-gsasl.html Here are the build reports for various platforms: http://autobuild.josefsson.org/gsasl/ Daily builds of the package are available from: http://daily.josefsson.org/gsasl/ The software is cryptographically signed by the author using an OpenPGP key identified by the following information: pub 1280R/B565716F 2002-05-05 [expires: 2011-03-30] Key fingerprint = 0424 D4EE 81A0 E3D1 19C6 F835 EDA2 1E94 B565 716F uid Simon Josefsson <[email protected]> uid Simon Josefsson <[email protected]> sub 1280R/4D5D40AE 2002-05-05 [expires: 2011-03-30] The key is available from: http://josefsson.org/key.txt dns:b565716f.josefsson.org?TYPE=CERT Here are the SHA-1 and SHA-224 checksums: 56055324ebf1d1b823412b6fcee192c03452ea84 gsasl-1.6.0.tar.gz d0fd62b83e698b8552df92eed07a7e173c3c2216536f64f4555484fc gsasl-1.6.0.tar.gz bb760a943ac487d332d5216559cd5fa765952245 libgsasl-1.6.0.tar.gz 5e17fa554a5f9b66b07cb31ba4d901265696a991b9746f0e384e36fb libgsasl-1.6.0.tar.gz ed866c7f0ccaf1aa2a088f13b4f5d8b4a16493d4 gsasl-1.6.0-x86.zip 9010e89dfc14b82f0d4fc6f071ff3b7230abe75f96b4134a6258228a gsasl-1.6.0-x86.zip e1604e27a5e5a44e63a9cb302539a392d4c102bc gsasl-1.6.0-x64.zip 853b17e11605023a1fc0d0f1245bebc193808550100c98d5486b6457 gsasl-1.6.0-x64.zip 400cd7a75ec17dfe65def4dc1e40a1bceb41e30b gsasl-1.6.0-x86-kfw322.zip 5bb5279e4472f05199abb13b913072e6dfbbdf2391e2f29514722ace gsasl-1.6.0-x86-kfw322.zip Happy hacking, Simon
pgpbMT8x2hL63.pgp
Description: PGP signature
_______________________________________________ GNU Announcement mailing list <[email protected]> http://lists.gnu.org/mailman/listinfo/info-gnu
