From 1a8f5669edd6a98eb14a7ff1e78cef167cb81089f887728473edadf96403f1ae Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Bj=C3=B8rn=20Lie?= Date: Thu, 28 Mar 2019 10:38:38 +0000 Subject: [PATCH] Accepting request 688499 from GNOME:Next - Update to version 2.60.0.1: + Fix build with OpenSSL pkg-config unavailable. - Update to version 2.60.0: + This is the first stable release featuring the new OpenSSL backend. Please be advised that this new backend is still experimental and known to not work on some systems, including Debian. Linux distributions are encouraged to stick to the default build options, where OpenSSL is not yet enabled. + Fix build with GnuTLS disabled. - Update to version 2.59.92: + GnuTLS: reject sync operations during handshake to avoid deadlocks. + Temporarily disable DTLS and OpenSSL tests due to bugs. - Update to version 2.59.91: + Update OpenSSL SSL struct when certificate is changed. + Fix tests build when GnuTLS is disabled. + Remove Fedora-specific PROFILE=SYSTEM default cipher list. + Fix some problems with the connection tests. - Update to version 2.59.90: + This release adds an OpenSSL backend, obsoleting the glib-openssl project. + The OpenSSL backend seems to be mature, though it is less well-tested for desktop usage than the GnuTLS backend. It will remain disabled by default at build time due to the GPL-incompatible nature of the OpenSSL license -- and the GPLv2-incompatible nature of the Apache license that will be used by future versions of OpenSSL -- and because the GnuTLS backend is sufficient for Linux distros. + Use the OpenSSL backend if you are building an embedded system where (GPLv2+ or LGPLv3+) dependencies are unacceptable (e.g. nettle or GMP, both dependencies of GnuTLS) and you are OK with the GPL-incompatible OpenSSL license. If the OpenSSL backend is enabled at build time, you should probably disable build of the GnuTLS backend, or it will take precedence over the OpenSSL backend at runtime. - Update to version 2.59.2: + Add support for application layer protocol negotiation. - Update to version 2.59.1: + This release removes the gnutls-pkcs11 backend, which was disabled in 2.57.2, due to lack of any feedback whatsoever regarding its disablement. If you think it is still useful to you, given that the normal gnutls backend now supports PKCS#11, speak up now. + This release also includes several changes to properly support TLS 1.3. + Other changes: - Perform certificate verification during, not after, TLS handshake. - Dramatically improve the reliability of the non-DTLS tests. (DTLS is still having problems). - Regenerate test certificates to prepare for OpenSSL support. - Several meson build system improvements to prepare for OpenSSL support. OBS-URL: https://build.opensuse.org/request/show/688499 OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/glib-networking?expand=0&rev=127 --- glib-networking-2.58.0.tar.xz | 3 -- glib-networking-2.60.0.1.tar.xz | 3 ++ glib-networking.changes | 81 +++++++++++++++++++++++++++++++++ glib-networking.spec | 6 +-- 4 files changed, 87 insertions(+), 6 deletions(-) delete mode 100644 glib-networking-2.58.0.tar.xz create mode 100644 glib-networking-2.60.0.1.tar.xz diff --git a/glib-networking-2.58.0.tar.xz b/glib-networking-2.58.0.tar.xz deleted file mode 100644 index 3672e82..0000000 --- a/glib-networking-2.58.0.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:bdfa0255e031b8ee003cc283002536b77ee76450105f1dc6ab066b9bf4330068 -size 172632 diff --git a/glib-networking-2.60.0.1.tar.xz b/glib-networking-2.60.0.1.tar.xz new file mode 100644 index 0000000..585767d --- /dev/null +++ b/glib-networking-2.60.0.1.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:674e8b062c0639c274848d40b8308f8fb2ecd8b82e7eb6fe805d1aca7deb983c +size 184368 diff --git a/glib-networking.changes b/glib-networking.changes index dc96435..5d7965b 100644 --- a/glib-networking.changes +++ b/glib-networking.changes @@ -1,3 +1,84 @@ +------------------------------------------------------------------- +Tue Mar 12 21:17:50 UTC 2019 - Bjørn Lie + +- Update to version 2.60.0.1: + + Fix build with OpenSSL pkg-config unavailable. + +------------------------------------------------------------------- +Mon Mar 11 15:58:08 UTC 2019 - Bjørn Lie + +- Update to version 2.60.0: + + This is the first stable release featuring the new OpenSSL + backend. Please be advised that this new backend is still + experimental and known to not work on some systems, including + Debian. Linux distributions are encouraged to stick to the + default build options, where OpenSSL is not yet enabled. + + Fix build with GnuTLS disabled. + +------------------------------------------------------------------- +Tue Mar 5 06:12:55 UTC 2019 - Bjørn Lie + +- Update to version 2.59.92: + + GnuTLS: reject sync operations during handshake to avoid + deadlocks. + + Temporarily disable DTLS and OpenSSL tests due to bugs. + +------------------------------------------------------------------- +Thu Feb 21 10:13:50 UTC 2019 - bjorn.lie@gmail.com + +- Update to version 2.59.91: + + Update OpenSSL SSL struct when certificate is changed. + + Fix tests build when GnuTLS is disabled. + + Remove Fedora-specific PROFILE=SYSTEM default cipher list. + + Fix some problems with the connection tests. + +------------------------------------------------------------------- +Thu Feb 14 21:44:07 UTC 2019 - bjorn.lie@gmail.com + +- Update to version 2.59.90: + + This release adds an OpenSSL backend, obsoleting the + glib-openssl project. + + The OpenSSL backend seems to be mature, though it is less + well-tested for desktop usage than the GnuTLS backend. It will + remain disabled by default at build time due to the + GPL-incompatible nature of the OpenSSL license -- and the + GPLv2-incompatible nature of the Apache license that will be + used by future versions of OpenSSL -- and because the GnuTLS + backend is sufficient for Linux distros. + + Use the OpenSSL backend if you are building an embedded system + where (GPLv2+ or LGPLv3+) dependencies are unacceptable (e.g. + nettle or GMP, both dependencies of GnuTLS) and you are OK with + the GPL-incompatible OpenSSL license. If the OpenSSL backend is + enabled at build time, you should probably disable build of the + GnuTLS backend, or it will take precedence over the OpenSSL + backend at runtime. + +------------------------------------------------------------------- +Tue Jan 8 13:15:44 UTC 2019 - bjorn.lie@gmail.com + +- Update to version 2.59.2: + + Add support for application layer protocol negotiation. + +------------------------------------------------------------------- +Sat Jan 5 19:46:33 UTC 2019 - bjorn.lie@gmail.com + +- Update to version 2.59.1: + + This release removes the gnutls-pkcs11 backend, which was + disabled in 2.57.2, due to lack of any feedback whatsoever + regarding its disablement. If you think it is still useful to + you, given that the normal gnutls backend now supports PKCS#11, + speak up now. + + This release also includes several changes to properly support + TLS 1.3. + + Other changes: + - Perform certificate verification during, not after, TLS + handshake. + - Dramatically improve the reliability of the non-DTLS tests. + (DTLS is still having problems). + - Regenerate test certificates to prepare for OpenSSL support. + - Several meson build system improvements to prepare for + OpenSSL support. + ------------------------------------------------------------------- Wed Sep 26 16:33:50 UTC 2018 - bjorn.lie@gmail.com diff --git a/glib-networking.spec b/glib-networking.spec index 69ce0b3..ca18f11 100644 --- a/glib-networking.spec +++ b/glib-networking.spec @@ -1,7 +1,7 @@ # # spec file for package glib-networking # -# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,13 +18,13 @@ %define gio_real_package %(rpm -q --qf '%%{name}' --whatprovides gio) Name: glib-networking -Version: 2.58.0 +Version: 2.60.0.1 Release: 0 Summary: Network-related GIO modules for glib License: LGPL-2.1-or-later Group: Development/Libraries/C and C++ URL: https://www.gnome.org -Source0: https://download.gnome.org/sources/glib-networking/2.58/%{name}-%{version}.tar.xz +Source0: https://download.gnome.org/sources/glib-networking/2.60/%{name}-%{version}.tar.xz Source99: baselibs.conf BuildRequires: ca-certificates-mozilla