2007-01-16 00:15:20 +01:00
|
|
|
#
|
2008-07-25 00:38:45 +02:00
|
|
|
# spec file for package gnutls (Version 2.4.1)
|
2007-01-16 00:15:20 +01:00
|
|
|
#
|
2009-03-20 19:25:39 +01:00
|
|
|
# Copyright (c) 2009 SUSE LINUX Products GmbH, Nuernberg, Germany.
|
2007-01-16 00:15:20 +01:00
|
|
|
#
|
2008-11-02 15:41:35 +01:00
|
|
|
# All modifications and additions to the file contributed by third parties
|
|
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
|
|
# upon. The license for this file, and modifications and additions to the
|
|
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
|
|
# license for the pristine package is not an Open Source License, in which
|
|
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
|
|
# published by the Open Source Initiative.
|
|
|
|
|
2007-01-16 00:15:20 +01:00
|
|
|
# Please submit bugfixes or comments via http://bugs.opensuse.org/
|
|
|
|
#
|
|
|
|
|
|
|
|
# norootforbuild
|
|
|
|
|
2008-02-28 01:56:17 +01:00
|
|
|
|
2007-01-16 00:15:20 +01:00
|
|
|
Name: gnutls
|
2008-02-28 01:56:17 +01:00
|
|
|
BuildRequires: gcc-c++ libgcrypt-devel libopencdk-devel
|
2008-07-25 00:38:45 +02:00
|
|
|
Version: 2.4.1
|
2009-03-20 19:25:39 +01:00
|
|
|
Release: 25
|
2008-04-06 05:50:25 +02:00
|
|
|
License: GPL v3 or later; LGPL v2.1 or later
|
2007-01-16 00:15:20 +01:00
|
|
|
BuildRoot: %{_tmppath}/%{name}-%{version}-build
|
2007-10-25 18:10:26 +02:00
|
|
|
Url: http://www.gnutls.org/
|
2007-01-16 00:15:20 +01:00
|
|
|
Source0: %name-%version.tar.bz2
|
2008-07-25 00:38:45 +02:00
|
|
|
Patch1: gnutls-2.4.1-disable_cxx.patch
|
2008-11-28 15:06:02 +01:00
|
|
|
Patch2: CVE-2008-4989.patch
|
2007-01-16 00:15:20 +01:00
|
|
|
Summary: The GNU Transport Layer Security Library
|
|
|
|
Group: Productivity/Networking/Security
|
2007-10-25 18:10:26 +02:00
|
|
|
AutoReqProv: on
|
2008-11-02 15:41:35 +01:00
|
|
|
# bug437293
|
|
|
|
%ifarch ppc64
|
|
|
|
Obsoletes: gnutls-64bit
|
|
|
|
%endif
|
|
|
|
#
|
2007-01-16 00:15:20 +01:00
|
|
|
|
|
|
|
%description
|
|
|
|
The GnuTLS project aims to develop a library that provides a secure
|
|
|
|
layer over a reliable transport layer. Currently the GnuTLS library
|
|
|
|
implements the proposed standards of the IETF's TLS working group.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Authors:
|
|
|
|
--------
|
|
|
|
Nikos Mavroyanopoulos
|
|
|
|
Fabio Fiorina
|
|
|
|
Timo Schulz
|
|
|
|
Andrew McDonald
|
|
|
|
|
2008-02-28 01:56:17 +01:00
|
|
|
%package -n libgnutls26
|
2008-04-06 05:50:25 +02:00
|
|
|
License: LGPL v2.1 or later
|
2008-02-28 01:56:17 +01:00
|
|
|
Summary: The GNU Transport Layer Security Library
|
|
|
|
Group: Productivity/Networking/Security
|
|
|
|
|
|
|
|
%description -n libgnutls26
|
|
|
|
The GnuTLS project aims to develop a library that provides a secure
|
|
|
|
layer over a reliable transport layer. Currently the GnuTLS library
|
|
|
|
implements the proposed standards of the IETF's TLS working group.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Authors:
|
|
|
|
--------
|
|
|
|
Nikos Mavroyanopoulos
|
|
|
|
Fabio Fiorina
|
|
|
|
Timo Schulz
|
|
|
|
Andrew McDonald
|
|
|
|
|
|
|
|
%package -n libgnutls-extra26
|
2008-04-06 05:50:25 +02:00
|
|
|
License: GPL v3 or later
|
2007-10-25 18:10:26 +02:00
|
|
|
Summary: The GNU Transport Layer Security Library
|
|
|
|
Group: Productivity/Networking/Security
|
|
|
|
|
2008-02-28 01:56:17 +01:00
|
|
|
%description -n libgnutls-extra26
|
2007-10-25 18:10:26 +02:00
|
|
|
The GnuTLS project aims to develop a library that provides a secure
|
|
|
|
layer over a reliable transport layer. Currently the GnuTLS library
|
|
|
|
implements the proposed standards of the IETF's TLS working group.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Authors:
|
|
|
|
--------
|
|
|
|
Nikos Mavroyanopoulos
|
|
|
|
Fabio Fiorina
|
|
|
|
Timo Schulz
|
|
|
|
Andrew McDonald
|
|
|
|
|
|
|
|
%package -n libgnutls-devel
|
2008-04-06 05:50:25 +02:00
|
|
|
License: LGPL v2.1 or later
|
2007-01-16 00:15:20 +01:00
|
|
|
Summary: Development package for gnutls
|
2007-08-03 16:29:06 +02:00
|
|
|
Group: Development/Libraries/C and C++
|
2008-02-28 01:56:17 +01:00
|
|
|
Requires: libgnutls26 = %version glibc-devel libopencdk-devel libgcrypt-devel
|
|
|
|
PreReq: %install_info_prereq
|
|
|
|
|
|
|
|
%description -n libgnutls-devel
|
|
|
|
Files needed for software development using gnutls.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Authors:
|
|
|
|
--------
|
|
|
|
Nikos Mavroyanopoulos
|
|
|
|
Fabio Fiorina
|
|
|
|
Timo Schulz
|
|
|
|
Andrew McDonald
|
|
|
|
|
|
|
|
%package -n libgnutls-extra-devel
|
2008-04-06 05:50:25 +02:00
|
|
|
License: GPL v3 or later
|
2008-02-28 01:56:17 +01:00
|
|
|
Summary: The GNU Transport Layer Security Library
|
2008-07-25 00:38:45 +02:00
|
|
|
Group: Development/Libraries/C and C++
|
2008-02-28 01:56:17 +01:00
|
|
|
Requires: libgnutls-extra26 = %version libgnutls-devel
|
2007-10-25 18:10:26 +02:00
|
|
|
# gnutls-devel last used in 10.3
|
|
|
|
Obsoletes: gnutls-devel < %version
|
|
|
|
Provides: gnutls-devel = %version
|
2008-11-02 15:41:35 +01:00
|
|
|
# bug437293
|
|
|
|
%ifarch ppc64
|
|
|
|
Obsoletes: gnutls-devel-64bit
|
|
|
|
%endif
|
|
|
|
#
|
2007-01-16 00:15:20 +01:00
|
|
|
|
2008-02-28 01:56:17 +01:00
|
|
|
%description -n libgnutls-extra-devel
|
|
|
|
The GnuTLS project aims to develop a library that provides a secure
|
|
|
|
layer over a reliable transport layer. Currently the GnuTLS library
|
|
|
|
implements the proposed standards of the IETF's TLS working group.
|
2007-01-16 00:15:20 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Authors:
|
|
|
|
--------
|
|
|
|
Nikos Mavroyanopoulos
|
|
|
|
Fabio Fiorina
|
|
|
|
Timo Schulz
|
|
|
|
Andrew McDonald
|
|
|
|
|
|
|
|
%prep
|
|
|
|
%setup -q
|
2008-05-08 23:13:43 +02:00
|
|
|
%patch1 -p1
|
2008-11-28 15:06:02 +01:00
|
|
|
%patch2 -p1
|
2007-01-16 00:15:20 +01:00
|
|
|
|
|
|
|
%build
|
|
|
|
autoreconf -fi
|
2007-04-17 00:33:13 +02:00
|
|
|
./configure --prefix=%_prefix \
|
|
|
|
--sysconfdir=%_sysconfdir \
|
|
|
|
--libdir=%_libdir \
|
|
|
|
--mandir=%_mandir --infodir=%_infodir \
|
|
|
|
--localstatedir=%_localstatedir \
|
|
|
|
--with-included-libtasn1 \
|
2008-02-28 01:56:17 +01:00
|
|
|
--without-lzo \
|
2008-06-25 19:25:04 +02:00
|
|
|
--disable-srp-authentication \
|
2008-07-25 00:38:45 +02:00
|
|
|
--disable-rpath \
|
2007-04-17 00:33:13 +02:00
|
|
|
CFLAGS="$RPM_OPT_FLAGS" \
|
|
|
|
CXXFLAGS="$RPM_OPT_FLAGS"
|
2007-01-16 00:15:20 +01:00
|
|
|
make
|
2008-08-04 00:36:13 +02:00
|
|
|
make check
|
2007-01-16 00:15:20 +01:00
|
|
|
|
|
|
|
%install
|
|
|
|
make DESTDIR=$RPM_BUILD_ROOT install
|
|
|
|
rm -rf doc/examples/.deps doc/examples/.libs doc/examples/*.{o,lo,la} doc/examples/Makefile{,.in}
|
|
|
|
find doc/examples -perm -111 -exec rm {} \;
|
2007-10-25 18:10:26 +02:00
|
|
|
rm -rf %{buildroot}/usr/share/locale/en@{,bold}quot
|
|
|
|
# Do not package static libs and libtool files
|
|
|
|
rm -f %{buildroot}%{_libdir}/*.{a,la}
|
2007-08-03 16:29:06 +02:00
|
|
|
%find_lang %name
|
2007-01-16 00:15:20 +01:00
|
|
|
|
|
|
|
%clean
|
|
|
|
rm -rf %buildroot
|
|
|
|
|
2008-02-28 01:56:17 +01:00
|
|
|
%post -n libgnutls26
|
|
|
|
/sbin/ldconfig
|
|
|
|
|
|
|
|
%postun -n libgnutls26
|
|
|
|
/sbin/ldconfig
|
|
|
|
|
|
|
|
%post -n libgnutls-extra26
|
|
|
|
/sbin/ldconfig
|
|
|
|
|
|
|
|
%postun -n libgnutls-extra26
|
|
|
|
/sbin/ldconfig
|
2007-01-16 00:15:20 +01:00
|
|
|
|
2007-10-25 18:10:26 +02:00
|
|
|
%post -n libgnutls-devel
|
2007-01-16 00:15:20 +01:00
|
|
|
%install_info --info-dir=%{_infodir} %{_infodir}/gnutls.info.gz
|
|
|
|
|
2007-10-25 18:10:26 +02:00
|
|
|
%postun -n libgnutls-devel
|
2007-01-16 00:15:20 +01:00
|
|
|
%install_info_delete --info-dir=%{_infodir} %{_infodir}/gnutls.info.gz
|
|
|
|
|
2007-08-03 16:29:06 +02:00
|
|
|
%files -f %name.lang
|
2007-01-16 00:15:20 +01:00
|
|
|
%defattr(-, root, root)
|
|
|
|
%doc THANKS README NEWS ChangeLog COPYING.LIB COPYING AUTHORS doc/TODO
|
|
|
|
%_bindir/certtool
|
|
|
|
%_bindir/gnutls-cli
|
|
|
|
%_bindir/gnutls-cli-debug
|
|
|
|
%_bindir/gnutls-serv
|
|
|
|
%_bindir/psktool
|
|
|
|
%_mandir/man1/*
|
|
|
|
|
2008-02-28 01:56:17 +01:00
|
|
|
%files -n libgnutls26
|
|
|
|
%defattr(-,root,root)
|
|
|
|
%_libdir/libgnutls.so.26*
|
|
|
|
|
|
|
|
%files -n libgnutls-extra26
|
2007-10-25 18:10:26 +02:00
|
|
|
%defattr(-,root,root)
|
2008-02-28 01:56:17 +01:00
|
|
|
%_libdir/libgnutls-extra.so.26*
|
|
|
|
%_libdir/libgnutls-openssl.so.26*
|
2007-10-25 18:10:26 +02:00
|
|
|
|
|
|
|
%files -n libgnutls-devel
|
2007-01-16 00:15:20 +01:00
|
|
|
%defattr(-, root, root)
|
|
|
|
%_bindir/libgnutls-config
|
|
|
|
%_includedir/*
|
2008-02-28 01:56:17 +01:00
|
|
|
%_libdir/libgnutls.so
|
|
|
|
%_datadir/aclocal/libgnutls.m4
|
|
|
|
%_libdir/pkgconfig/gnutls.pc
|
2007-01-16 00:15:20 +01:00
|
|
|
%_mandir/man3/*
|
|
|
|
%_infodir/%{name}*
|
|
|
|
%doc doc/examples doc/gnutls.html doc/*.png doc/gnutls.pdf doc/reference/html/*
|
2008-02-28 01:56:17 +01:00
|
|
|
|
|
|
|
%files -n libgnutls-extra-devel
|
|
|
|
%defattr(-, root, root)
|
|
|
|
%_bindir/libgnutls-extra-config
|
|
|
|
%_libdir/libgnutls-extra.so
|
|
|
|
%_libdir/libgnutls-openssl.so
|
|
|
|
%_datadir/aclocal/libgnutls-extra.m4
|
|
|
|
%_libdir/pkgconfig/gnutls-extra.pc
|
|
|
|
|
2007-04-17 00:33:13 +02:00
|
|
|
%changelog
|
2009-03-20 19:25:39 +01:00
|
|
|
* Fri Mar 13 2009 jshi@suse.de
|
|
|
|
- fix security bug [bnc#457938]
|
|
|
|
new CVE-2008-4989
|
2008-12-15 12:34:16 +01:00
|
|
|
* Wed Dec 10 2008 olh@suse.de
|
|
|
|
- use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade
|
|
|
|
(bnc#437293)
|
2008-11-28 15:06:02 +01:00
|
|
|
* Fri Nov 28 2008 jshi@suse.de
|
|
|
|
- fix security bug [bnc#441856]
|
|
|
|
CVE-2008-4989
|
2008-11-02 15:41:35 +01:00
|
|
|
* Thu Oct 30 2008 olh@suse.de
|
|
|
|
- obsolete old -XXbit packages (bnc#437293)
|
2008-08-04 00:36:13 +02:00
|
|
|
* Sat Aug 02 2008 meissner@suse.de
|
|
|
|
- run testsuite
|
2008-07-25 00:38:45 +02:00
|
|
|
* Thu Jul 17 2008 mkoenig@suse.de
|
|
|
|
- update to version 2.4.1
|
|
|
|
* libgnutls: Fix local crash in gnutls_handshake
|
|
|
|
* libgnutls: Fix memory leaks when doing a re-handshake
|
|
|
|
* Fix compiler warnings
|
|
|
|
* Fix ordering of -I's to avoid opencdk.h conflict with
|
|
|
|
system headers
|
|
|
|
* srptool: Fix a problem where --verify check does not succeed
|
|
|
|
- remove C++ wrapper lib, it is not usable without SRP
|
|
|
|
- remove patch
|
|
|
|
gnutls-1.6.1-srptool.patch
|
|
|
|
* Wed Jul 02 2008 mkoenig@suse.de
|
|
|
|
- remove gnutls main package from baselibs.conf
|
|
|
|
* Thu Jun 26 2008 mkoenig@suse.de
|
|
|
|
- update to version 2.4.0
|
|
|
|
* The OpenPGP sub-system has been improved and now supports subkeys
|
|
|
|
* The PSK sub-system has been improved and now supports password
|
|
|
|
derivation and PSK identity hints
|
|
|
|
* The certtool --inder and --outder has been replaced
|
|
|
|
by --inraw and --outraw
|
|
|
|
* New APIs to access the raw X.509 Subject and Issuer DN's and
|
|
|
|
elements from the certificate credentials structure
|
|
|
|
* New APIs to improve working with username/passwords and PSK
|
|
|
|
* Names of constants to affect certificate printing changed
|
|
|
|
* The function gnutls_openpgp_privkey_get_id has been renamed to
|
|
|
|
gnutls_openpgp_privkey_get_key_id
|
|
|
|
* API/ABI changes in GnuTLS 2.4
|
|
|
|
All OpenPGP related functions have been moved from
|
|
|
|
libgnutls-extra to libgnutls, and several new functions have
|
|
|
|
been added
|
|
|
|
- remove SRP functionality from C++ wrapper, otherwise it cannot
|
|
|
|
be linked against it
|
|
|
|
- removed patches
|
|
|
|
gnutls-2.2.2-uninitialized.patch
|
|
|
|
gnutls-char-signedness.patch
|
|
|
|
gnutls-GNUTLS_SA_2008_1.patch
|
2008-06-25 19:25:04 +02:00
|
|
|
* Mon Jun 23 2008 mkoenig@suse.de
|
|
|
|
- disable SRP [bnc#65192]
|
2008-06-03 16:13:23 +02:00
|
|
|
* Wed May 21 2008 mkoenig@suse.de
|
|
|
|
- fix three security bugs [bnc#392947]
|
|
|
|
CVE-2008-1948 GNUTLS-SA-2008-1-1
|
|
|
|
Fix crash when sending invalid server name
|
|
|
|
CVE-2008-1949 GNUTLS-SA-2008-1-2
|
|
|
|
Fix crash when sending repeated client hellos
|
|
|
|
CVE-2008-1950 GNUTLS-SA-2008-1-3
|
|
|
|
Fix crash in cipher padding decoding for invalid record lengths
|
2008-05-08 23:13:43 +02:00
|
|
|
* Thu May 08 2008 mkoenig@suse.de
|
|
|
|
- fix build
|
2008-04-29 23:32:26 +02:00
|
|
|
* Tue Apr 29 2008 cthiel@suse.de
|
|
|
|
- obsolete gnutls-<arch> via baselibs.conf
|
2008-04-10 14:17:31 +02:00
|
|
|
* Thu Apr 10 2008 ro@suse.de
|
|
|
|
- added baselibs.conf file to build xxbit packages
|
|
|
|
for multilib support
|
2008-04-06 05:50:25 +02:00
|
|
|
* Thu Apr 03 2008 mkoenig@suse.de
|
|
|
|
- update to version 2.2.2
|
|
|
|
* Cipher priority string handling now handle strings that
|
|
|
|
starts with NULL
|
|
|
|
* Corrected memory leaks in session resuming and DHE ciphersuites
|
|
|
|
* Increased the default certificate verification chain limits and
|
|
|
|
allowed for checks without limitation
|
|
|
|
* Corrected the behaviour of gnutls_x509_crt_get_subject_alt_name()
|
|
|
|
and gnutls_x509_crt_get_subject_alt_name() to not null terminate
|
|
|
|
binary strings and return the proper size
|
2008-02-28 01:56:17 +01:00
|
|
|
* Thu Jan 31 2008 mkoenig@suse.de
|
|
|
|
- update to version 2.2.1
|
|
|
|
* Fixes the post_client_hello_function()
|
|
|
|
* Fix for certificate selection in servers with certificate callbacks
|
|
|
|
* certtool: Fixed data corruption when using --outder
|
|
|
|
* TLS authorization support removed.
|
|
|
|
* Corrected bug which did not allow a server to run without
|
|
|
|
supporting certificates
|
|
|
|
* Introduced gnutls_session_enable_compatibility_mode()
|
|
|
|
* Added gnutls_record_disable_padding() to allow servers talking to
|
|
|
|
buggy clients
|
|
|
|
* Fixed PKCS #3 parameter export
|
|
|
|
* Added support for Camellia cipher
|
|
|
|
* certtool: Add option --quick-random
|
|
|
|
* Added capability to set a callback after the client hello is
|
|
|
|
received by the server in order to adjust parameters before
|
|
|
|
the handshake
|
|
|
|
* certtool: Fixed data corruption when using --outder
|
|
|
|
* SRP was corrected to adhere to the latest draft
|
|
|
|
* Updated the DN parser
|
|
|
|
* Added support for DSA2 using libgcrypt 1.3.0
|
|
|
|
* Removed all the trustdb code from openpgp authentication.
|
|
|
|
We now use only the well-specified keyrings
|
|
|
|
* The gnutls_certificate_set_openpgp_* functions were modified
|
|
|
|
to include the format. This makes the interface consistent with
|
|
|
|
the x509 functions
|
|
|
|
* Introduced gnutls_session_enable_compatibility_mode()
|
|
|
|
* Added gnutls_set_default_priority2()
|
|
|
|
* Added priority functions that accept strings
|
|
|
|
* certtool: Add option --disable-quick-random to enable the
|
|
|
|
old behaviour of using /dev/random to generate keys
|
|
|
|
* Added the --v1 option to certtool, to allow generating X.509
|
|
|
|
version 1 certificates
|
|
|
|
* Fix PKCS#3 parameter export problem
|
|
|
|
* Fixed GNUTLS_E_UNKNOWN_ALGORITHM vs GNUTLS_E_UNKNOWN_HASH_ALGORITHM
|
|
|
|
* gnutls_certificate_set_x509_key_* can now read PKCS #8 unencrypted
|
|
|
|
private keys
|
|
|
|
* Introduced the GNUTLS_E_BASE64_UNEXPECTED_HEADER_ERROR error code
|
|
|
|
* Added the --to-p8 option to certtool to convert private keys
|
|
|
|
to PKCS #8 keys
|
|
|
|
* Corrected bug in decompression of expanded compression data
|
|
|
|
* The gnutls_*_convert_priority() functions were deprecated
|
|
|
|
* gnutls-cli and gnutls-serv now have a --priority option
|
|
|
|
* PKCS #8 parser can now encode/decode DSA keys
|
|
|
|
* Corrected a segfault when setting an empty gnutls_priority_t
|
|
|
|
at gnutls_priority_set()
|
|
|
|
* Added gnutls_x509_crt_get_subject_alt_name2()
|
|
|
|
* The GPL version has been changed from version 2 to version 3.
|
|
|
|
This affects the self-tests, command-line tools, the libgnutls-extra
|
|
|
|
library, the relevant guile parts, and the build environment
|
|
|
|
- API and ABI modifications, library soname switch from 13 to 26
|
|
|
|
- change package structure:
|
|
|
|
* branch off libgnutls-extra
|
|
|
|
since this is now GPLv3 or later while libgnutls remains
|
|
|
|
LGPLv2.1 or later
|
|
|
|
* gnutls license change to GPLv3
|
|
|
|
- build without lzo support to avoid license problems
|
|
|
|
since lzo is currently GPLv2 only
|
|
|
|
- removed merged patches:
|
|
|
|
gnutls-fix_size_t.patch
|
|
|
|
* Tue Oct 23 2007 mkoenig@suse.de
|
2007-10-25 18:10:26 +02:00
|
|
|
- update to version 2.0.1
|
|
|
|
- change package layout to conform shlib policy:
|
|
|
|
rename gnutls-devel -> libgnutls-devel
|
|
|
|
new subpackage libgnutls13
|
|
|
|
- removed patches:
|
|
|
|
gnutls-1.4.4-sign-callback.patch
|
|
|
|
gnutls-1.6.1-compiler_warnings.patch
|
2008-02-28 01:56:17 +01:00
|
|
|
* Thu Aug 30 2007 mkoenig@suse.de
|
2007-08-30 22:52:13 +02:00
|
|
|
- fix srptool [#208227]
|
|
|
|
- fix some compiler warnings
|
2008-02-28 01:56:17 +01:00
|
|
|
* Fri Aug 03 2007 hvogel@suse.de
|
2007-08-03 16:29:06 +02:00
|
|
|
- Some additions for evolution smart card support
|
2008-02-28 01:56:17 +01:00
|
|
|
* Thu May 10 2007 mkoenig@suse.de
|
2007-05-11 10:36:22 +02:00
|
|
|
- Fix segfault on s390x [#97441]
|
|
|
|
gnutls-fix_size_t.patch
|
2008-02-28 01:56:17 +01:00
|
|
|
* Tue Jan 23 2007 mkoenig@suse.de
|
2007-04-17 00:33:13 +02:00
|
|
|
- update to new stable branch 1.6.1:
|
|
|
|
* Fix the list of trusted CAs that server's send to clients.
|
|
|
|
* Fix gnutls_certificate_set_x509_crl to initialize the CRL
|
|
|
|
before using it.
|
|
|
|
* Encode UID fields in DN's as DirectoryString.
|
|
|
|
* Fix ./configure failure with non-GCC compilers.
|
|
|
|
* A GnuTLS C++ library is part of the official distribution.
|
|
|
|
* New APIs for custom push/pull function error reporting.
|
2008-02-28 01:56:17 +01:00
|
|
|
* Tue Oct 24 2006 mkoenig@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- move developer related docs to devel package and remove
|
|
|
|
binary stuff from docs [#212454]
|
2008-02-28 01:56:17 +01:00
|
|
|
* Tue Sep 19 2006 mkoenig@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- update to version 1.4.4:
|
|
|
|
* bugfix release
|
|
|
|
* fixes security vulnerability [#206636] (CVE-2006-4790)
|
2008-02-28 01:56:17 +01:00
|
|
|
* Thu Aug 31 2006 mkoenig@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- update to new stable branch 1.4.1:
|
|
|
|
* The command line tools now use getaddrinfo and support IPv6.
|
|
|
|
* gnutls-cli can now recognize services and port numbers with
|
|
|
|
the -p option.
|
|
|
|
* Error messages are now translated using GNU Gettext.
|
|
|
|
* GnuTLS now support TLS Inner application (TLS/IA).
|
|
|
|
* API and ABI modifications:
|
|
|
|
+ Support for DHE-PSK cipher suites has been added.
|
|
|
|
+ Removed the RIPEMD ciphersuites.
|
|
|
|
+ Remove GnuTLS 0.8.x compatibility functions.
|
|
|
|
+ Support for TLS Pre-Shared Key (TLS-PSK) ciphersuites have
|
|
|
|
been added.
|
|
|
|
+ Certtool now generate keys in unencrypted PKCS#8 format for
|
|
|
|
empty passwords.
|
|
|
|
+ Certtool now accept --password for --key-info and encrypted
|
|
|
|
PKCS#8 keys.
|
|
|
|
+ gnutls_x509_privkey_import_pkcs8 now accept unencrypted
|
|
|
|
PEM PKCS#8 keys,
|
|
|
|
+ New function to set a X.509 private key and certificate
|
|
|
|
pairs, and/or CRLs, from an PKCS#12 file.
|
|
|
|
+ New APIs to acceess the client and server random fields in
|
|
|
|
a session.
|
|
|
|
+ New APIs to access the TLS Pseudo-Random-Function (PRF).
|
|
|
|
+ New API to access the TLS master secret.
|
|
|
|
+ The function gnutls_x509_crt_to_xml now return an internal
|
|
|
|
error.
|
|
|
|
* Several bugfixes:
|
|
|
|
+ Corrected a bug in certtool for 64 bit machines.
|
|
|
|
+ Fix gnutls-cli STARTTLS hang when SIGINT is sent too quickly.
|
|
|
|
+ Fix crash in TLS resume code, caused by TLS/IA changes.
|
|
|
|
+ Corrected bugs in gnutls_certificate_set_x509_crl() and
|
|
|
|
gnutls_certificate_set_x509_trust().
|
|
|
|
+ Fixed bug in non-blocking gnutls_bye().
|
|
|
|
+ Fix read of out bounds bug in DER parser.
|
|
|
|
+ Fixed bug in OpenPGP authentication handshake.
|
2008-02-28 01:56:17 +01:00
|
|
|
* Sat Feb 18 2006 ro@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- cleanup doc directory (.deps,.libs)
|
2008-02-28 01:56:17 +01:00
|
|
|
* Fri Feb 10 2006 hvogel@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- Update to version 1.2.10. This release fixes several serious
|
|
|
|
bugs that would make the DER decoder in libtasn1 crash on
|
|
|
|
invalid input [#149897]. Including:
|
|
|
|
* Corrected a bug in certtool for 64 bit machines.
|
|
|
|
* Fix gnutls-cli STARTTLS hang when SIGINT is sent too quickly
|
|
|
|
* Corrected bugs in gnutls_certificate_set_x509_crl() and
|
|
|
|
gnutls_certificate_set_x509_trust(), that caused memory
|
|
|
|
corruption if more than one certificates were added.
|
|
|
|
* Fixed bug in non-blocking gnutls_bye(). gnutls_record_send()
|
|
|
|
will no longer invalidate a session if the underlying send
|
|
|
|
fails, but it will prevent future writes.
|
2008-02-28 01:56:17 +01:00
|
|
|
* Wed Jan 25 2006 mls@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- converted neededforbuild to BuildRequires
|
2008-02-28 01:56:17 +01:00
|
|
|
* Tue Dec 20 2005 ro@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- do not package /usr/share/info/dir
|
2008-02-28 01:56:17 +01:00
|
|
|
* Fri Dec 09 2005 hvogel@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- update to version 1.2.9
|
2008-02-28 01:56:17 +01:00
|
|
|
* Tue Oct 25 2005 hvogel@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- update to version 1.2.8
|
2008-02-28 01:56:17 +01:00
|
|
|
* Mon Aug 22 2005 hvogel@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- fix data type comparison [Bug #104617]
|
2008-02-28 01:56:17 +01:00
|
|
|
* Sun Jul 03 2005 hvogel@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- update to version 1.2.5
|
2008-02-28 01:56:17 +01:00
|
|
|
* Wed Jun 29 2005 hvogel@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- patch from mrueckert to use external lzo again
|
2008-02-28 01:56:17 +01:00
|
|
|
* Thu Jun 23 2005 hvogel@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- use %%install_info/%%install_info_delete
|
2008-02-28 01:56:17 +01:00
|
|
|
* Tue Jun 07 2005 hvogel@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- update to version 1.2.4
|
2008-02-28 01:56:17 +01:00
|
|
|
* Fri Jun 03 2005 ro@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- fix specfile (don't apply non-existant patch1)
|
2008-02-28 01:56:17 +01:00
|
|
|
* Thu Jun 02 2005 hvogel@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- use included minilzo
|
2008-02-28 01:56:17 +01:00
|
|
|
* Wed May 25 2005 hvogel@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- Update to version 1.2.3 (fixes gnutls DOS Bug #83481)
|
|
|
|
- Include defines.h before gnutls.h, to pull in config.h, to make
|
|
|
|
sure memmem.h prototype memmem properly
|
2008-11-28 15:06:02 +01:00
|
|
|
* Sat Jan 29 2005 hvogel@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- Update to version 1.2.0
|
2008-02-28 01:56:17 +01:00
|
|
|
* Wed Jan 19 2005 hvogel@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- update to version 1.1.23
|
|
|
|
- get rid of prebuild html/ps docu again, the devel packages has
|
|
|
|
man-pages now
|
2008-02-28 01:56:17 +01:00
|
|
|
* Mon Dec 13 2004 hvogel@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- update to version 1.0.23
|
|
|
|
- make build of postscript/html docu configureable
|
2008-02-28 01:56:17 +01:00
|
|
|
* Sat Oct 23 2004 hvogel@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- move config script to the devel package
|
2008-02-28 01:56:17 +01:00
|
|
|
* Thu Oct 14 2004 hvogel@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- Update to version 1.0.21
|
2008-02-28 01:56:17 +01:00
|
|
|
* Tue Sep 28 2004 hvogel@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- add doc subpackage with prebuild html/ps docu (Bug #44496)
|
2008-02-28 01:56:17 +01:00
|
|
|
* Mon Sep 27 2004 hvogel@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- fix ac-quotation patch to include libgnutls-extra.m4 (Bug #46035)
|
2008-02-28 01:56:17 +01:00
|
|
|
* Tue Aug 31 2004 kukuk@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- Update to version 1.0.20
|
2008-02-28 01:56:17 +01:00
|
|
|
* Mon Aug 30 2004 kukuk@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- Add libopencdk-devel to neededforbuild
|
2008-02-28 01:56:17 +01:00
|
|
|
* Thu Jul 15 2004 hvogel@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- add libgcrypt-devel and lipgpg-error-devel to nfb
|
2008-02-28 01:56:17 +01:00
|
|
|
* Wed May 19 2004 hvogel@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- update to version 1.0.13
|
2008-02-28 01:56:17 +01:00
|
|
|
* Fri May 14 2004 mmj@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- Add C++ compiler to build
|
|
|
|
- Don't remove buildroot when installing
|
2008-02-28 01:56:17 +01:00
|
|
|
* Mon Mar 01 2004 hvogel@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- update to version 1.0.8
|
2008-02-28 01:56:17 +01:00
|
|
|
* Tue Feb 17 2004 hvogel@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- update to version 1.0.6
|
|
|
|
- fix autoconf quotations
|
2008-02-28 01:56:17 +01:00
|
|
|
* Wed May 14 2003 schubi@suse.de
|
2007-01-16 00:15:20 +01:00
|
|
|
- initial; Sourcecode received from XIMIAN
|