------------------------------------------------------------------- Tue Sep 24 07:45:57 UTC 2013 - dimstar@opensuse.org - Update to version 2.38.0: + New stable release (No changes since 2.37.5). ------------------------------------------------------------------- Wed Aug 28 09:12:27 UTC 2013 - dimstar@opensuse.org - Revert the changes from Jul 11 to not use certs.pem: + No longer pass --with-pkcs and --without-ca-certificate to configure, but instead pass --with-ca-certificates=/etc/ssl/ca-bundle.pem. + Drop glib-networking-fix-no-cert-bundles.patch: the patch causes side-effects, as discovered in bnc#825903). ------------------------------------------------------------------- Tue Jul 30 07:06:44 UTC 2013 - dimstar@opensuse.org - Update to version 2.37.5: + gnutls: minimum version is now 2.12.8 (with 3.x preferred...). + glib-networking now supports the --enable-installed-tests flag, to install its test programs to run at other times (ie, after updating glib). ------------------------------------------------------------------- Thu Jul 11 21:11:29 UTC 2013 - dimstar@opensuse.org - Build using system pkcs#11 certificate store instead of using /etc/ssl/certs.pem: + Pass the following parameters to configure --with-pkcs --without-ca-certificate + Add glib-networking-fix-no-cert-bundles.patch: do not fail if no certificate bundle (anchor) is specified. ------------------------------------------------------------------- Tue Jul 9 16:18:44 UTC 2013 - dimstar@opensuse.org - Update to version 2.37.4: + bgo#701377: proxy/gnome: further improve GNOME session detection. + bgo#701693: gnutls: don't crash if $G_TLS_GNUTS_PRIORITY is invalid. ------------------------------------------------------------------- Tue May 28 19:52:00 UTC 2013 - dimstar@opensuse.org - Update to version 2.37.2: + proxy/gnome: Improve session-type detection to include gnome-classic and anything else starting with "gnome" (bgo#700607). + proxy/libproxy: make SOCKS work when using the async API (bgo#699359). + proxy/tests: make the libproxy test program use the just-built plugin rather than the installed one (bgo#700286). + proxy/tests: fix to not error out if neither proxy module is built (bgo#700628). + tls/tests: fix a sporadic crash. ------------------------------------------------------------------- Wed May 1 08:16:29 UTC 2013 - dimstar@opensuse.org - Update to version 2.37.1: + gnutls: - bgo#695062: Fixed a hang while rehandshaking with gnutls 3.x. - bgo#697754: Fixed a handshaking crash in multithreaded use. + proxy/gnome: - Fix "automatic" mode, which was mistakenly being treated as "none". - bgo#698936: Use this in Unity sessions as well as GNOME ones. + Updated translations. ------------------------------------------------------------------- Tue Apr 16 13:48:36 UTC 2013 - dimstar@opensuse.org - Update to version 2.36.1: + gnutls: Fixed a bug that could cause hangs and/or bursts of CPU usage in some cases (bgo#696881). + gnutls: Fixed CFLAGS when building with gnutls in a different prefix (bgo#696519). + Updated translations. ------------------------------------------------------------------- Mon Mar 25 13:11:31 UTC 2013 - dimstar@opensuse.org - Update to version 2.36.0: + Updated translations. ------------------------------------------------------------------- Tue Mar 5 18:52:17 UTC 2013 - dimstar@opensuse.org - Update to version 2.35.9: + Fixed one kind of handshake failure to return the correct error code under gnutls 3.x (bgo#694812). + Updated translations. ------------------------------------------------------------------- Tue Feb 19 13:50:45 UTC 2013 - dimstar@opensuse.org - Update to version 2.35.8: + proxy/gnome: ported to new GSimpleProxyResolver, and added more tests. + gnutls: Fixed a small per-connection leak (bgo#693718). + tls/tests: Fixed several race conditions that caused spurious failures (bgo#693720). + Updated translations. ------------------------------------------------------------------- Tue Feb 5 19:01:56 UTC 2013 - dimstar@opensuse.org - Update to version 2.35.6: + proxy/gnome: Fixed several bugs: - Multithreaded usage could result in crashes. - In "automatic" mode, synchronous lookups would obey ignore-hosts, but asynchronous lookups would not. - lookup_async() would never notice if the proxy settings switched from "automatic" to "manual" or "none" (and would make a synchronous D-Bus call when switching in the other direction). - If given an invalid URI, lookup_async() would return a successful result (and leak the GError that it was supposed to have returned), and lookup() would return both the error and the proxy (leaking one or the other, depending on how the caller behaved). + Updated translations. ------------------------------------------------------------------- Tue Jan 15 10:09:10 UTC 2013 - dimstar@opensuse.org - Update to version 2.35.4: + proxy/gnome: The tests should now work correctly even if run from a non-GNOME environment. + Updated translations. ------------------------------------------------------------------- Tue Jan 8 18:12:56 UTC 2013 - dimstar@opensuse.org - Update to version 2.35.3: + build: The TLS tests are now not built if you are building without gnutls support. + gnutls: Several handshaking fixes: - Fix a hang when doing a synchronous close() immediately after cancelling an asynchronous handshake() (which would happen in libsoup if you cancelled a message at the right time) (bgo#688751) - Avoid an assertion when an implicit handshake fails (bgo#689274) - Fixed GTlsServerConnection:authentication-mode to work again, and added a regression test for this (bgo#689259) - Return the appropriate error (G_TLS_ERROR_CERTIFICATE_REQUIRED) when a handshake fails because the server required a certificate but none was provided, and added a test for this (bgo#689260) - Make g_io_stream_close() finish successfully after a failed handshake (bgo#689260) - Make g_io_stream_close() finish successfully before a handshake (bgo#689271) + gnutls: Updated to be aware of G_IO_ERROR_BROKEN_PIPE in glib 2.35.3, which needs to be converted to G_TLS_ERROR_NOT_TLS in some cases. (Previously this error showed up as just G_IO_ERROR_FAILED.) + proxy/gnome: This is now only used in GNOME login sessions (as, essentially, a more efficient version of the libproxy GNOME backend); in non-GNOME sessions, gio will now fall back to the libproxy plugin, allowing environment variables or other libproxy settings backends to be used. + Updated translations. ------------------------------------------------------------------- Fri Nov 16 09:24:05 UTC 2012 - dimstar@opensuse.org - Update to version 2.35.1: + Update for glib 2.35.1; remove g_type_init() calls and port to GTask. + Updated translations. ------------------------------------------------------------------- Thu Nov 15 18:31:43 UTC 2012 - dimstar@opensuse.org - Update to version 2.34.2: + build: it no longer tries to build the TLS tests if gnutls is not available. + Updated translations. ------------------------------------------------------------------- Mon Sep 24 17:56:17 UTC 2012 - dimstar@opensuse.org - Update to version 2.34.0: + Updated translations. ------------------------------------------------------------------- Mon Sep 17 22:57:28 UTC 2012 - zaitor@opensuse.org - Update to version 2.33.14: + Updated translations. ------------------------------------------------------------------- Tue Sep 4 13:52:36 UTC 2012 - dimstar@opensuse.org - Update to version 2.33.12: + gnutls: Revert the addition of the certificate-bytes and private-key-bytes properties to GTlsCertificateGnutls, since they were reverted in glib (bgo#682081) + Updated translations. ------------------------------------------------------------------- Tue Aug 21 07:38:31 UTC 2012 - dimstar@opensuse.org - Update to version 2.33.10: + gnutls: - Improved the certificate verifying code to deal with the case of a CA being reissued with the same key but a different signature algorithm. (bgo#681299) - Fixed an uninitialized variable in g_tls_connection_gnutls_close(). (bgo#681636) + Updated translations. ------------------------------------------------------------------- Tue Aug 7 07:00:12 UTC 2012 - dimstar@opensuse.org - Update to version 2.33.8: + gnutls: - If a GTlsConnection gets an error when handshaking, it will now continue to return that error message on future I/O attempts, rather than behaving in an undefined manner - You can now read from a GTlsConnection's input stream and write to its output stream at the same time (either in different threads, or asynchronously in a single thread). (bgo#660252) + Updated translations. ------------------------------------------------------------------- Tue Jun 26 08:22:45 UTC 2012 - dimstar@opensuse.org - Update to version 2.33.3: + Updated autogen.sh (in particular to support automake 1.12) (bgo#675261) + gnutls: fix the use-system-certdb property on GTlsConnectionGnutls + Updated translations. ------------------------------------------------------------------- Wed May 16 18:13:24 UTC 2012 - dimstar@opensuse.org - Update to version 2.33.2: + gnutls: simplify using new glib pollable stream methods + proxy/gnome: fix a bug that made it impossible to use SOCKS without also having a separate http proxy. ------------------------------------------------------------------- Tue May 15 14:32:18 UTC 2012 - vuntz@opensuse.org - Update to version 2.32.3: + proxy/gnome: Fix SOCKS to work when no http proxy is set + Updated translations. ------------------------------------------------------------------- Tue Apr 17 05:50:39 UTC 2012 - vuntz@opensuse.org - Update to version 2.32.1: + gnutls: Added /etc/ssl/ca-bundle.pem to the list of files to check for to use as the default CA list (bgo#673944) + Updated translations. ------------------------------------------------------------------- Tue Mar 27 06:06:14 UTC 2012 - vuntz@opensuse.org - Update to version 2.32.0: + Updated translations. ------------------------------------------------------------------- Tue Mar 20 15:25:19 UTC 2012 - vuntz@opensuse.org - Update to version 2.31.22: + Updated translations. ------------------------------------------------------------------- Tue Mar 6 08:08:18 UTC 2012 - vuntz@opensuse.org - Update to version 2.31.20: + gnutls: Fixed a linking problem on some platforms when PKCS#11 is enabled (bgo#670956) + Updated translations. ------------------------------------------------------------------- Tue Feb 7 14:39:36 UTC 2012 - vuntz@opensuse.org - Update to version 2.31.16: + gnutls: Fixed a TLS handshaking bug that in particular caused lots of crashes in epiphany (bgo#658771) + tls/tests: Fixed a bug in the pkcs11-pin test that could cause it to spuriously fail + Updated translations. - Remove xz BuildRequires now that it comes for free in the build system. ------------------------------------------------------------------- Tue Dec 20 09:16:20 UTC 2011 - vuntz@opensuse.org - Update to version 2.31.6: + gnutls: - Support gnutls built against nettle instead of gcrypt (bgo#657306) - Implement TLS session caching for GTlsServerConnection (bgo#636574) + tls/tests: Explicitly request the memory GSettings backend, to avoid warnings in partial jhbuild environments. + proxy/gnome: Update to use GInetAddressMask. + Updated translations. - Add xz BuildRequires because we can't build a package for a xz-compressed tarball without explicitly specifying that... See bnc#697467 for more details. ------------------------------------------------------------------- Tue Nov 22 09:34:27 UTC 2011 - dimstar@opensuse.org - Update to version 2.31.2: + gnutls: - Added gnutls-pkcs11 backend, which uses gnutls 2.12.8 and p11-kit (a new optional dependency) to provide access to PKCS#11 tokens. At the moment, this is only enabled if you set GIO_USE_TLS=gnutls-pkcs11 in the environment (bgo#656361) - GTlsCertificateGnutls can now read unencrypted PKCS#8 keys (which show "BEGIN PRIVATE KEY" in PEM form) in addition to the previously-supported PKCS#1 keys ("BEGIN RSA PRIVATE KEY"). + Updated translations. - Add pkgconfig(p11-kit-1) BuildRequires. New dependency. ------------------------------------------------------------------- Tue Nov 15 14:15:53 UTC 2011 - dimstar@opensuse.org - Really enable parallel build: fix typo smp_flags => smp_mflags. ------------------------------------------------------------------- Thu Oct 27 21:17:41 UTC 2011 - dimstar@opensuse.org - Update to version 2.31.0: + Integrate fixes from 2.30.1. + gnutls: - Bumped required GNUTLS version to 2.11.0 and updated code for that (bgo#656903). - Added another G_TLS_ERROR_NOT_TLS (aka "dumb server, try falling back from TLS to SSLv3") case, when the handshake completes but then packets after that don't decrypt correctly (bgo#662104). - Made sure that GTlsConnection:peer-certificate and :peer-certificate-errors get set even when the peer certificate is rejected. + proxy/gnome: build fixes (bgo#662203, bgo#662085). + Updated translations. ------------------------------------------------------------------- Tue Oct 18 06:23:19 UTC 2011 - vuntz@opensuse.org - Update to version 2.30.1: + Fixed a crash when passing a NULL GCancellable to g_tls_connection_close_async() (bgo#659786) + Fixed ignore_hosts handling in GProxyResolverGnome (bgo#655581) + Fixed handling of self-signed CA certificates in GTlsDatabaseGnutls (bgo#660508) + Updated translations. ------------------------------------------------------------------- Mon Sep 26 22:22:55 UTC 2011 - vuntz@opensuse.org - Update to version 2.30.0: + Updated translations. ------------------------------------------------------------------- Tue Sep 20 07:08:59 UTC 2011 - vuntz@opensuse.org - Update to version 2.29.92: + gnutls: - Fixed a problem when linking against GNUTLS 3.0, where connections would sometimes return the error "The TLS connection was non-properly terminated". (bgo#659233) - Plugged a few memory leaks + Updated translations. ------------------------------------------------------------------- Wed Aug 31 09:53:01 CEST 2011 - vuntz@opensuse.org - Update to version 2.29.18: + gnutls: - fixed two rehandshaking bugs; one in which a client would erroneously report an error after successfully rehandshaking (bgo#653645), and one where initiating an asynchronous rehandshake on the server side would send illegal packets and cause the client to disconnect. - made GTlsDatabaseGnutls and GTlsFileDatabaseGnutls properly cancellable - fixed the client-side session cache to not share session IDs between different virtual hosts on the same IP address, which caused problems with some servers. (bgo#581342) + tls: Fixed up the tls test program so it can be run from "make check" + Updated translations. ------------------------------------------------------------------- Thu Aug 25 08:07:12 UTC 2011 - dimstar@opensuse.org - Add libgcrypt-devel BuildRequires: gnutls used to bring this in as a dependency for us. ------------------------------------------------------------------- Tue Aug 16 04:31:36 CEST 2011 - dimstar@opensuse.org - Update to version 2.29.15: + bgo#636572: gnutls: implement GTlsDatabase + bgo#652284: gnutls: override minimum key length, to allow connecting to HTTP servers with very small keys + bgo#581342: gnutls: use %COMPAT mode, which makes GNUTLS behave more like OpenSSL/NSS/Windows in a few ways, making it work with certain broken HTTP servers. + gnutls: fixed a crash when passed a NULL GError. ------------------------------------------------------------------- Wed Jul 6 23:14:21 CEST 2011 - vuntz@opensuse.org - Change rpm query to look for the real package containing gio to use the new gio virtual name, that is now provided by the package containing the gio library. This is better than the query on the library filename, which might change later. - Also properly escape the queryformat, since we need to double the % characters in a .spec file. ------------------------------------------------------------------- Tue Jul 5 08:23:04 CEST 2011 - vuntz@opensuse.org - Update to version 2.29.9: + Optimized GDBus usage in PACRunner. + Fixed a race condition in GProxyResolverGnome. + Changed configure to --enable-maintainer-mode by default, to match glib. + Updated translations. ------------------------------------------------------------------- Fri Jun 17 02:17:16 CEST 2011 - vuntz@opensuse.org - Fix build after glib libraries moved back to %{_libdir}. ------------------------------------------------------------------- Mon May 23 23:12:28 CEST 2011 - dimstar@opensuse.org - Update to version 2.28.7: + Fixed a race condition in GProxyResolverGnome that caused problems when making simultaneous connections from multiple threads. + Updated translations. ------------------------------------------------------------------- Wed May 04 13:58:22 UTC 2011 - alinm.elena@gmail.com - Add gsettings-desktop-schemas Requires as the proxy schemas are used. ------------------------------------------------------------------- Wed Apr 27 11:19:50 UTC 2011 - fcrozat@novell.com - Update to version 2.28.6.1: + Fixed a bug in the gnutls backend introduced in 2.28.6 ------------------------------------------------------------------- Tue Apr 26 14:56:58 UTC 2011 - fcrozat@novell.com - Update to version 2.28.6: + Fixed some links in the gnutls backend. + Updated translations. ------------------------------------------------------------------- Tue Apr 5 11:52:29 UTC 2011 - fcrozat@novell.com - Update to version 2.28.5: + Updated translations. ------------------------------------------------------------------- Tue Mar 22 13:09:50 UTC 2011 - fcrozat@novell.com - Update to version 2.28.4: + Added a new proxy backend, GProxyResolverGnome, that uses GSettings and the network proxy schemas from gsettings-desktop-schemas to provide proxy information (and using a new D-Bus service provided by the libproxy backend to provide PAC/WPAD support). + Updated translations. - Changes from version 2.28.0: + Build fix. + Updated translations. - Add dbus-1 and pkgconfig(gsettings-desktop-schemas) BuildRequires. dbus-1 is only needed for directory ownership. ------------------------------------------------------------------- Mon Feb 14 18:03:20 CET 2011 - sbrabec@suse.cz - Added support for translation-update-upstream. ------------------------------------------------------------------- Sat Jan 8 00:15:42 CET 2011 - vuntz@opensuse.org - Update to version 2.27.90: + Fixed configure script to actually error out if installed glib version is too old + gnutls: - updated GTlsClientConnectionGnutls for :accepted-cas type change - fixed an uninitialized variable ------------------------------------------------------------------- Wed Dec 22 10:17:33 CET 2010 - vuntz@opensuse.org - Update to version 2.27.5: + gnutls: - finish implementing GTlsRehandshakeMode, which was present but non-functional in 2.27.4 - updates for glib TLS API changes - fix some async bugs that caused the main loop to spin - implement a client-side session cache, to speed up handshakes + Compile with gcc warnings by default ------------------------------------------------------------------- Tue Dec 7 11:21:55 CET 2010 - vuntz@opensuse.org - Update to version 2.27.4: + Add GNUTLS-based implementation of GTlsBackend. - Add pkgconfig(gnutls) BuildRequires, and pass --with-ca-certificates=/etc/ssl/ca-bundle.pem to configure. ------------------------------------------------------------------- Wed Oct 13 22:50:58 CEST 2010 - vuntz@opensuse.org - Update to version 2.26.0: + No changes, just a version bump. - Update spec file after move of glib libraries to /lib: we are checking the name of the package providing libgio by looking at the provider of the file. ------------------------------------------------------------------- Mon Oct 11 21:34:59 CEST 2010 - vuntz@opensuse.org - Add missing Requires for glib2-tools to glib-networking in baselibs.conf. ------------------------------------------------------------------- Tue Aug 31 09:32:52 CEST 2010 - vuntz@opensuse.org - Initial packaging (version 2.25.0)