head 1.14; access; symbols pkgsrc-2013Q2:1.14.0.4 pkgsrc-2013Q2-base:1.14 pkgsrc-2012Q4:1.14.0.2 pkgsrc-2012Q4-base:1.14 pkgsrc-2012Q2:1.13.0.10 pkgsrc-2012Q2-base:1.13 pkgsrc-2012Q1:1.13.0.8 pkgsrc-2012Q1-base:1.13 pkgsrc-2011Q4:1.13.0.6 pkgsrc-2011Q4-base:1.13 pkgsrc-2011Q3:1.13.0.4 pkgsrc-2011Q3-base:1.13 pkgsrc-2011Q2:1.13.0.2 pkgsrc-2011Q2-base:1.13 pkgsrc-2011Q1:1.12.0.6 pkgsrc-2011Q1-base:1.12 pkgsrc-2010Q4:1.12.0.4 pkgsrc-2010Q4-base:1.12 pkgsrc-2010Q3:1.12.0.2 pkgsrc-2010Q3-base:1.12 pkgsrc-2010Q2:1.11.0.10 pkgsrc-2010Q2-base:1.11 pkgsrc-2010Q1:1.11.0.8 pkgsrc-2010Q1-base:1.11 pkgsrc-2009Q4:1.11.0.6 pkgsrc-2009Q4-base:1.11 pkgsrc-2009Q3:1.11.0.4 pkgsrc-2009Q3-base:1.11 pkgsrc-2009Q2:1.11.0.2 pkgsrc-2009Q2-base:1.11 pkgsrc-2009Q1:1.10.0.4 pkgsrc-2009Q1-base:1.10 pkgsrc-2008Q4:1.10.0.2 pkgsrc-2008Q4-base:1.10 pkgsrc-2008Q3:1.9.0.10 pkgsrc-2008Q3-base:1.9 cube-native-xorg:1.9.0.8 cube-native-xorg-base:1.9 pkgsrc-2008Q2:1.9.0.6 pkgsrc-2008Q2-base:1.9 cwrapper:1.9.0.4 pkgsrc-2008Q1:1.9.0.2 pkgsrc-2008Q1-base:1.9 pkgsrc-2007Q4:1.8.0.2 pkgsrc-2007Q4-base:1.8 pkgsrc-2007Q3:1.7.0.2 pkgsrc-2007Q3-base:1.7 pkgsrc-2007Q2:1.6.0.2 pkgsrc-2007Q2-base:1.6 pkgsrc-2007Q1:1.5.0.10 pkgsrc-2007Q1-base:1.5 pkgsrc-2006Q4:1.5.0.8 pkgsrc-2006Q4-base:1.5 pkgsrc-2006Q3:1.5.0.6 pkgsrc-2006Q3-base:1.5 pkgsrc-2006Q2:1.5.0.4 pkgsrc-2006Q2-base:1.5 pkgsrc-2006Q1:1.5.0.2 pkgsrc-2006Q1-base:1.5 pkgsrc-2005Q4:1.4.0.2 pkgsrc-2005Q4-base:1.4 pkgsrc-2005Q3:1.2.0.2 pkgsrc-2005Q3-base:1.2 pkgsrc-2005Q2:1.1.0.4 pkgsrc-2005Q2-base:1.1 pkgsrc-2005Q1:1.1.0.2; locks; strict; comment @# @; 1.14 date 2012.07.02.18.53.03; author drochner; state dead; branches; next 1.13; 1.13 date 2011.04.26.10.35.30; author adam; state Exp; branches; next 1.12; 1.12 date 2010.09.01.16.32.17; author drochner; state Exp; branches; next 1.11; 1.11 date 2009.06.18.10.19.46; author drochner; state Exp; branches; next 1.10; 1.10 date 2008.10.18.11.55.11; author adam; state Exp; branches; next 1.9; 1.9 date 2008.03.06.14.52.13; author wiz; state Exp; branches; next 1.8; 1.8 date 2007.10.23.11.43.57; author wiz; state Exp; branches; next 1.7; 1.7 date 2007.09.05.21.51.22; author drochner; state Exp; branches; next 1.6; 1.6 date 2007.04.20.06.07.16; author wiz; state Exp; branches; next 1.5; 1.5 date 2006.01.20.21.14.04; author adam; state Exp; branches; next 1.4; 1.4 date 2005.10.20.00.43.32; author wiz; state Exp; branches; next 1.3; 1.3 date 2005.09.30.13.11.34; author wiz; state Exp; branches; next 1.2; 1.2 date 2005.07.14.19.19.43; author wiz; state Exp; branches; next 1.1; 1.1 date 2005.04.03.04.50.21; author minskim; state Exp; branches 1.1.2.1; next ; 1.1.2.1 date 2005.04.03.04.50.21; author salo; state dead; branches; next 1.1.2.2; 1.1.2.2 date 2005.04.03.17.36.27; author salo; state Exp; branches; next ; desc @@ 1.14 log @update to 3.0,20 This switches to the new stable release branch. @ text @$NetBSD: patch-ab,v 1.13 2011/04/26 10:35:30 adam Exp $ --- doc/Makefile.in.orig 2011-04-22 11:41:08.000000000 +0000 +++ doc/Makefile.in @@@@ -942,7 +942,7 @@@@ top_srcdir = @@top_srcdir@@ EXTRA_DIST = TODO certtool.cfg gnutls.ps gnutls.pdf gnutls.html \ doxygen/Doxyfile.in doxygen/Doxyfile.orig texinfo.css \ $(guile_texi) extract-guile-c-doc.scm -SUBDIRS = examples cyclo scripts manpages credentials $(am__append_1) +SUBDIRS = cyclo scripts manpages credentials $(am__append_1) info_TEXINFOS = gnutls.texi # Examples. @@@@ -1170,7 +1170,7 @@@@ gnutls.dvi: gnutls.texi $(srcdir)/versio gnutls.pdf: gnutls.texi $(srcdir)/version.texi $(gnutls_TEXINFOS) gnutls.html: gnutls.texi $(srcdir)/version.texi $(gnutls_TEXINFOS) $(srcdir)/version.texi: $(srcdir)/stamp-vti -$(srcdir)/stamp-vti: gnutls.texi $(top_srcdir)/configure +$(srcdir)/stamp-vti: gnutls.texi @@(dir=.; test -f ./gnutls.texi || dir=$(srcdir); \ set `$(SHELL) $(top_srcdir)/build-aux/mdate-sh $$dir/gnutls.texi`; \ echo "@@set UPDATED $$1 $$2 $$3"; \ @ 1.13 log @Changes 2.12.3: * libgnutls: Several minor bugfixes. * libgnutls: Restored HMAC-MD5 for compatibility. Although considered weak, several sites require it for connection. It is enabled for "NORMAL" and "PERFORMANCE" priority strings. * libgnutls: depend on libdl. * libgnutls: gnutls_transport_set_global_errno() was deprecated. Use your system's errno fascility or gnutls_transport_set_errno(). * gnutls-cli: Correction with usage of select to check for pending data in gnutls sessions. It now uses gnutls_record_check_pending(). * tests: More fixes and updates for win32. Patches by LRN. * libgnutls: Several files unnecessarily included ; this has been fixed. ** API and ABI modifications: gnutls_transport_set_global_errno: DEPRECATED Changes 2.12.2: * libgnutls: Several updates and fixes for win32. Patches by LRN. * libgnutls: Several bug and memory leak fixes. * srptool: Accepts the -d option to enable debugging. * libgnutls: Corrected bug in gnutls_srp_verifier() that prevented the allocation of a verifier. Reported by Andrew Wiseman. Changes 2.12.1: * certtool: Generated certificate request with stricter permissions. * libgnutls: Bug fixes in opencdk code. Reported by Vitaly Kruglikov. * libgnutls: Corrected windows system_errno() function prototype. * libgnutls: C++ compatibility fix for compat.h. Reported by Mark Brand. * libgnutls: Fix size of gnutls_openpgp_keyid_t by using the GNUTLS_OPENPGP_KEYID_SIZE definition. Reported by Andreas Metzler. @ text @d1 1 a1 1 $NetBSD$ @ 1.12 log @update to 2.10.1 many fixes and API extensions, but still binary compatible afaict @ text @d3 1 a3 1 --- doc/Makefile.in.orig 2010-07-25 09:34:19.000000000 +0000 d5 4 a8 4 @@@@ -922,7 +922,7 @@@@ top_srcdir = @@top_srcdir@@ EXTRA_DIST = TODO README.gaa certtool.cfg gnutls.ps gnutls.pdf \ gnutls.html doxygen/Doxyfile.in doxygen/Doxyfile.orig \ texinfo.css $(guile_texi) extract-guile-c-doc.scm d14 1 a14 1 @@@@ -1139,7 +1139,7 @@@@ gnutls.dvi: gnutls.texi $(srcdir)/versio @ 1.11 log @Don't build in the doc/examples subdir, as suggested by Joern Clausen in PRs pkg/39612 and pkg/41610. The examples are not installed anyway, and this way build problems on Solaris are avoided. @ text @d3 1 a3 1 --- doc/Makefile.in.orig 2009-06-10 16:22:21.000000000 +0200 d5 1 a5 1 @@@@ -746,7 +746,7 @@@@ top_srcdir = @@top_srcdir@@ d7 2 a8 2 gnutls.html extract-guile-c-doc.scm doxygen/Doxyfile.in \ doxygen/Doxyfile.orig texinfo.css $(guile_texi) d13 2 a14 2 # Generated texinfos. @@@@ -957,7 +957,7 @@@@ gnutls.dvi: gnutls.texi $(srcdir)/versio @ 1.10 log @Changes 2.6.0: * libgnutls: Correct printing and parsing of IPv6 addresses. * libgnutls-openssl: fix out of bounds access. * certtool: Use inet_pton for parsing IPv6 addresses. * Added API to replace and update the crypto backend. * certtool: can add several subject alternative names via template file. * opencdk: Parse (but not decrypt) encrypted secret keys. * more... @ text @d3 1 a3 1 --- doc/Makefile.in.orig 2008-10-06 09:14:35.000000000 +0200 d5 10 a14 1 @@@@ -746,7 +746,7 @@@@ gnutls.dvi: gnutls.texi $(srcdir)/versio @ 1.9 log @Update to 2.2.2: * Version 2.2.2 (released 2008-02-21) ** Cipher priority string handling now handle strings that starts with NULL. Thanks to Laurence Withers . ** Corrected memory leaks in session resuming and DHE ciphersuites. Reported by Daniel Stenberg. ** Increased the default certificate verification chain limits and allowed for checks without limitation. ** Corrected the behaviour of gnutls_x509_crt_get_subject_alt_name() and gnutls_x509_crt_get_subject_alt_name() to not null terminate binary strings and return the proper size. ** API and ABI modifications: No changes since last version. * Version 2.2.1 (released 2008-01-17) ** Prevent linking libextra against previously installed libgnutls. Tiny patch from "Alon Bar-Lev" , see . ** Fixes the post_client_hello_function(). The extensions are now parsed in a callback friendly way. ** Fix for certificate selection in servers with certificate callbacks. ** API and ABI modifications: No changes since last version. * Version 2.2.0 (released 2007-12-14) Major changes compared to the v2.0 branch: * SRP support aligned with newly published RFC 5054. * OpenPGP support aligned with newly published RFC 5081. * Support for DSA2 keys. * Support for Camellia cipher. * Support for Opaque PRF Input extension. * PKCS#8 parser now handle DSA keys. * Change from GPLv2 to GPLv3 for command-line tools, libgnutls-extra, etc. Notice that liblzo2 2.02 is licensed under GPLv2 only. Earlier versions, such as 2.01 which is included with GnuTLS, is available under GPLv2 or later. If this incompatibility causes problems, we recommend you to disable LZO using --without-lzo. LZO compression is not a standard TLS compression algorithm, so the impact should be minimal. * Functions for disabling record protocol padding. Works around bugs on Nokia/Ericsson phones. * New functions gnutls_priority_set() for setting cipher priorities easily. Priorities like "COMPAT" also enables other work arounds, such as disabling padding. * Other minor improvements and bug fixes. Minor changes compared to the latest v2.1.8 release candidate: * Update internal copy of libtasn1 to version 1.2. * Certtool --verify-chain now handle inputs larger than 64kb. This fixes the self-test "rsa-md5-collision" under MinGW+Wine with recent versions of libgcrypt. The problem was that Wine with the libgcrypt RNG generates huge amounts of debugging output. * Translation updates. Added Dutch translation. Updated Polish and Swedish translation. Backwards incompatible API/ABI changes in GnuTLS 2.2 ==================================================== To adapt to changes in the TLS extension specifications for OpenPGP and SRP, the GnuTLS API had to be modified. This means breaking the API and ABI backwards compatibility. That is something we try to avoid unless it is necessary. We decided to also remove the already deprecated stub functions for X.509 to XML conversion and TLS authorization (see below) when we had the opportunity. Generally, most applications does not need to be modified. Just re-compile them against the latest GnuTLS release, and it should work fine. Applications that use the OpenPGP or SRP features needs to be modified. Below is a list of the modified APIs and discussion of what the minimal things you need to modify in your application to make it work with GnuTLS 2.2. Note that GnuTLS 2.2 also introduces new APIs -- such as gnutls_set_priority() that is superior to gnutls_set_default_priority() -- that you may want to start using. However, using those new APIs is not required to use GnuTLS 2.2 since the old functions continue are still supported. This text only discuss what you minimally have to modify. XML related changes ------------------- The function `gnutls_x509_crt_to_xml' has been removed. It has been deprecated and only returned an error code since GnuTLS version 1.2.11. Nobody has complained, so users doesn't seem to miss the functionality. We don't know of any other library to convert X.509 certificates into XML format, but we decided (long ago) that GnuTLS isn't the right place for this kind of functionality. If you want help to find some other library to use here, please explain and discuss your use case on help-gnutls gnu.org. TLS Authorization related changes --------------------------------- Everything related to TLS authorizations have been removed, they were only stub functions that returned an error code: GNUTLS_SUPPLEMENTAL_AUTHZ_DATA gnutls_authz_data_format_type_t gnutls_authz_recv_callback_func gnutls_authz_send_callback_func gnutls_authz_enable gnutls_authz_send_x509_attr_cert gnutls_authz_send_saml_assertion gnutls_authz_send_x509_attr_cert_url gnutls_authz_send_saml_assertion_url SRP related changes ------------------- The callback gnutls_srp_client_credentials_function has a new prototype, and its semantic has changed. You need to rewrite the callback, see the updated function documentation and SRP example code (doc/examples/ex-client-srp.c and doc/examples/ex-serv-srp.c) for more information. The alert codes GNUTLS_A_MISSING_SRP_USERNAME and GNUTLS_A_UNKNOWN_SRP_USERNAME are no longer used by the SRP specification, instead the GNUTLS_A_UNKNOWN_PSK_IDENTITY alert is used. There are #define's to map the old names to the new. You may run into problems if you have a switch-case with cases for both SRP alerts, since they are now mapped to the same value. The solution is to drop the SRP alerts from such switch cases, as they are now deprecated in favor of GNUTLS_A_UNKNOWN_PSK_IDENTITY. OpenPGP related changes ----------------------- The function `gnutls_certificate_set_openpgp_keyserver' have been removed. There is no replacement functionality inside GnuTLS. If you need keyserver functionality, consider using the GnuPG tools. All functions, types, and error codes related to OpenPGP trustdb format have been removed. The trustdb format is a non-standard GnuPG-specific format, and we recommend you to use key rings instead. The following have been removed: gnutls_certificate_set_openpgp_trustdb gnutls_openpgp_trustdb_init gnutls_openpgp_trustdb_deinit gnutls_openpgp_trustdb_import gnutls_openpgp_key_verify_trustdb gnutls_openpgp_trustdb_t GNUTLS_E_OPENPGP_TRUSTDB_VERSION_UNSUPPORTED The following functions has an added parameter of the (new) type `gnutls_openpgp_crt_fmt_t'. The type specify the format of the data (binary or base64). The functions are: gnutls_certificate_set_openpgp_key_file gnutls_certificate_set_openpgp_key_mem gnutls_certificate_set_openpgp_keyring_mem gnutls_certificate_set_openpgp_keyring_file To improve terminology and align with the X.509 interface, some functions have been renamed. Compatibility mappings exists. The old and new names of the affected functions and types are: Old name New name gnutls_openpgp_key_t gnutls_openpgp_crt_t gnutls_openpgp_key_fmt_t gnutls_openpgp_crt_fmt_t gnutls_openpgp_key_status_t gnutls_openpgp_crt_status_t GNUTLS_OPENPGP_KEY GNUTLS_OPENPGP_CERT GNUTLS_OPENPGP_KEY_FINGERPRINT GNUTLS_OPENPGP_CERT_FINGERPRINT gnutls_openpgp_key_init gnutls_openpgp_crt_init gnutls_openpgp_key_deinit gnutls_openpgp_crt_deinit gnutls_openpgp_key_import gnutls_openpgp_crt_import gnutls_openpgp_key_export gnutls_openpgp_crt_export gnutls_openpgp_key_get_key_usage gnutls_openpgp_crt_get_key_usage gnutls_openpgp_key_get_fingerprint gnutls_openpgp_crt_get_fingerprint gnutls_openpgp_key_get_pk_algorithm gnutls_openpgp_crt_get_pk_algorithm gnutls_openpgp_key_get_name gnutls_openpgp_crt_get_name gnutls_openpgp_key_get_version gnutls_openpgp_crt_get_version gnutls_openpgp_key_get_creation_time gnutls_openpgp_crt_get_creation_time gnutls_openpgp_key_get_expiration_time gnutls_openpgp_crt_get_expiration_time gnutls_openpgp_key_get_id gnutls_openpgp_crt_get_id gnutls_openpgp_key_check_hostname gnutls_openpgp_crt_check_hostname gnutls_openpgp_send_key gnutls_openpgp_send_cert * Version 2.0.0 (released 2007-09-04) The following changes have been made since GnuTLS 1.6: * Support for external RSA/DSA signing for TLS client authentication. This allows you to secure the private key better, for example by using privilege-separation techniques between the private key and the network client/server. * Support for signing X.509 certificates using RSA with SHA-256/384/512. * Experimental support for TLS 1.2 (disabled by default). The TLS 1.2 specification is not finalized yet, but we implement a draft version for testing. * Support for X.509 Proxy Certificates (RFC 3820) * Support for Supplemental handshakes messages (RFC 4680). * Support for TLS authorization extension (draft-housley-tls-authz-extns-07). * Support for the X.509 'otherName' Subject Altnerative Names (for XMPP). * Guile bindings for GnuTLS have been added, thanks to Ludovic Courtes. * Improve logic of gnutls_set_default_priority() which can now be more recommended. * New APIs to enumerate supported algorithms in the library. * New APIs to access X.509 Certificate extension sequentially. * New APIs to print X.509 Certificates and CRLs in human readable formats. * New APIs to extract X.509 Distinguished Names from certificates. * New APIs to handle pathLenConstraint in X.509 Basic Constraints. * Certtool can export more than one certificate to PKCS#12. * Several message translation improvements. * Instructions and improvements to easily set up a HTTPS test server. * Included copies updated to Libtasn1 1.1 and OpenCDK 0.6.4. * Build improvements for Windows, Mac OS X, uClinux, etc. * GnuTLS is now developed in GIT. * Improved manual * Many bugfixes and minor improvements. @ text @d1 1 a1 1 $NetBSD: patch-ab,v 1.8 2007/10/23 11:43:57 wiz Exp $ d3 1 a3 1 --- doc/Makefile.in.orig 2007-12-14 11:31:23.000000000 +0000 d5 1 a5 1 @@@@ -694,7 +694,7 @@@@ gnutls.dvi: gnutls.texi $(srcdir)/versio @ 1.8 log @Update to 2.0.2: * Version 2.0.2 (released 2007-10-17) ** TLS authorization support removed. This technique may be patented in the future, and it is not of crucial importance for the Internet community. After deliberation we have concluded that the best thing we can do in this situation is to encourage society not to adopt this technique. We have decided to lead the way with our own actions. ** certtool: Fixed data corruption when using --outder. ** Fix configure-time Guile detection. ** API and ABI modifications: GNUTLS_SUPPLEMENTAL_USER_MAPPING_DATA: ADDED. To avoid that the gnutls_supplemental_data_format_type_t enum type becomes empty. * Version 2.0.1 (released 2007-09-20) ** New directory doc/credentials/ with test credentials. This collects the test credentials from the web page and from src/. The script gnutls-http-serv has also been moved to that directory. ** Update SRP extension type and cipher suite with official IANA values. This breaks backwards compatibility with SRP in older versions of GnuTLS, but this is intentional to speed up the adoption of the official values. The old values we used were incorrect. ** Guile: Fix `x509-certificate-dn-oid' ** API and ABI modifications: No changes since last version. @ text @d1 1 a1 1 $NetBSD: patch-ab,v 1.7 2007/09/05 21:51:22 drochner Exp $ d3 1 a3 1 --- doc/Makefile.in.orig 2007-10-17 14:02:39.000000000 +0000 d5 1 a5 1 @@@@ -675,7 +675,7 @@@@ gnutls.dvi: gnutls.texi $(srcdir)/versio @ 1.7 log @update to 2.0.0 While an update to a .0 version is somehow risky, it finishes the unfortunate state that the pkgsrc gnutls didn't work with the pkgsrc opencdk, which I wouldn't like to go into the next stable branch. Release candidates have worked for me, and there is some time left before the Q3 branch, so I'm confident. changes: * Support for external RSA/DSA signing for TLS client authentication -many X.509 enhancements Support for Supplemental handshakes messages (RFC 4680) * Support for TLS authorization extension (draft-housley-tls-authz-extns-07) * Improve logic of gnutls_set_default_priority() * New APIs to enumerate supported algorithms in the library * Certtool can export more than one certificate to PKCS#12 * Several message translation improvements * Improved manual * Many bugfixes and minor improvements @ text @d1 1 a1 1 $NetBSD$ d3 1 a3 1 --- doc/Makefile.in.orig 2007-05-26 17:45:35.000000000 +0200 d5 1 a5 1 @@@@ -603,7 +603,7 @@@@ gnutls.dvi: gnutls.texi $(srcdir)/versio @ 1.6 log @Update to 1.6.2: * Version 1.6.2 (released 2007-04-18) ** Fix X.509 signing with RSA-PKCS#1 to set a NULL parameters fields. Before, we remove the parameters field, which resulted in a slightly different DER encoding which in turn caused signature verification failures of GnuTLS-generated RSA certificates in some other implementations (e.g., GnuPG 2.x's gpgsm). Depending on which RFCs you read, this may or may not be correct, but our new behaviour appear to be consistent with other widely used implementations. ** Regenerate the PKIX ASN.1 syntax tree. For some reason, after changing the ASN.1 type of ldap-UID in the last release, the generated C file built from the ASN.1 schema was not refreshed. This can cause problems when reading/writing UID components inside X.500 Distinguished Names. Reported by devel . ** Updated translations. ** API and ABI modifications: No changes since last version. @ text @d1 1 a1 1 $NetBSD: patch-ab,v 1.5 2006/01/20 21:14:04 adam Exp $ d3 1 a3 1 --- doc/Makefile.in.orig 2007-04-18 12:35:11.000000000 +0000 d5 1 a5 1 @@@@ -483,7 +483,7 @@@@ gnutls.dvi: gnutls.texi $(srcdir)/versio d12 1 a12 1 set `$(SHELL) $(srcdir)/mdate-sh $$dir/gnutls.texi`; \ @ 1.5 log @Changes 1.3.3: ** New API to access the TLS master secret. When possible, you should use the TLS PRF functions instead. ** Improved handling when multiple libraries use GnuTLS at the same time. Now gnutls_global_init() can be called multiple times, and gnutls_global_deinit() will only deallocate the structure when it has been called as many times as gnutls_global_init() was called. ** Added a self test of TLS resume functionality. ** Fix crash in TLS resume code, caused by TLS/IA changes. ** Add 'const' keywords in various places, from Frediano ZIGLIO. ** The code was indented again, including the external header files. ** API and ABI modifications: New functions to retrieve the master secret value: gnutls_session_get_master_secret Add a 'const' keyword to existing API: gnutls_x509_crq_get_challenge_password @ text @d1 1 a1 1 $NetBSD$ d3 1 a3 1 --- doc/Makefile.in.orig 2006-01-12 18:13:50.000000000 +0100 d5 1 a5 1 @@@@ -413,7 +413,7 @@@@ gnutls.dvi: gnutls.texi $(srcdir)/versio @ 1.4 log @Update to 1.2.8: * Version 1.2.8 (2005-10-07) - Libgcrypt 1.2.2 is required to fix a bug for forking GnuTLS servers. - Don't install the auxilliary libexamples library used by the examples in doc/examples/ on "make install", report and tiny patch from Thomas Klausner - If you pass a X.509 CA or PGP trust database to the command line tool, it will now abort the connection if the server certificate validation fails. Use the parameter --insecure to continue even after certificate validation failures. Inspired from discussion with Alexander Kotelnikov - The test for socklen_t has been moved to gnulib. - Link failures for duplicate or missing "program_name" symbol has been fixed, patch from Martin Lambers - The command line tool and the examples no longer uses mmap or bzero, to make them more portable, patch from Martin Lambers - Made the PKCS #12 API handle null passwords. Based on patch by Anton Altaparmakov - The GTK-DOC manual should build with current released tools. (But a copy of the output is included, so the tools are not required.) - API and ABI modifications: No changes since last version. @ text @d1 1 a1 1 $NetBSD: patch-ab,v 1.3 2005/09/30 13:11:34 wiz Exp $ d3 1 a3 1 --- doc/Makefile.in.orig 2005-10-07 13:26:30.000000000 +0200 d5 1 a5 1 @@@@ -387,7 +387,7 @@@@ gnutls.dvi: gnutls.texi $(srcdir)/versio @ 1.3 log @Update to 1.2.7: * Version 1.2.7 (2005-09-09) - The GNUTLS and GNUTLS-EXTRA libraries are now built with versioned symbols. - Certtool now complains when reading out-of-range X.509 serial numbers, suggested by Fran - Certtool now uses the readline library (when available) when reading X.509 serial numbers. - Fixed build problems in getpass on uClibc and Mingw32 platforms. - Fixed compile warning regarding socklen_t on Mingw32, reported by Martin Lambers - Fixed examples in doc/examples/, suggested by Fran - Gnulib is now used for the core library, enabling future code cleanups. - The gnutls-cli tool now use gnutls_certificate_verify_peers2, suggested by Daniel Stenberg - Doc fixes for gnutls_transport_set_push and gnutls_transport_set_pull. - Minilibtasn1 is now 0.2.17 (removed optional use of C99 macros). - Disable zlib support if zlib.h is not present. - A number of internal cleanups. - API and ABI modifications: No changes since last version. pkgsrc change: do not install libexamples (looks like a bug) @ text @d1 1 a1 1 $NetBSD: patch-ab,v 1.2 2005/07/14 19:19:43 wiz Exp $ d3 1 a3 1 --- doc/Makefile.in.orig 2005-09-30 14:32:44.000000000 +0200 d5 1 a5 1 @@@@ -385,7 +385,7 @@@@ gnutls.dvi: gnutls.texi $(srcdir)/versio @ 1.2 log @Update to 1.2.5: * Version 1.2.5 (2005-07-03) - More builddir != srcdir fixes, reported by Mike Castle - Fixed off-by-one bug in the size parameter of gnutls_x509_crt_get*_dn, reported by Adam Langley - Corrected some stuff in minilzo detection. Pointed out by Sergey Lipnevich. - MiniLZO updated to version 2.00. - gnutls_x509_crt_list_import now accept a DER formatted CRL. - API and ABI modifications: No changes since last version. @ text @d1 1 a1 1 $NetBSD: patch-ab,v 1.1 2005/04/03 04:50:21 minskim Exp $ d3 1 a3 1 --- doc/Makefile.in.orig 2005-06-27 13:36:18.000000000 +0200 d5 1 a5 1 @@@@ -372,7 +372,7 @@@@ gnutls.dvi: gnutls.texi $(srcdir)/versio @ 1.1 log @Avoid calling makeinfo because the distfile contains pre-built .info files. This makes the package build on platforms without makeinfo. Patch provided by Darrin B. Jewell in PR pkg/29869. @ text @d1 1 a1 1 $NetBSD$ d3 1 a3 1 --- doc/Makefile.in.orig Thu Jan 27 07:16:50 2005 d5 1 a5 1 @@@@ -369,7 +369,7 @@@@ gnutls.dvi: gnutls.texi $(srcdir)/versio @ 1.1.2.1 log @file patch-ab was added on branch pkgsrc-2005Q1 on 2005-04-03 04:50:21 +0000 @ text @d1 13 @ 1.1.2.2 log @Pullup ticket 418 - requested by Min Sik Kim portability fix for gnutls Revisions pulled up: - pkgsrc/security/gnutls/distinfo 1.14 - pkgsrc/security/gnutls/patches/patch-ab 1.1 Module Name: pkgsrc Committed By: minskim Date: Sun Apr 3 04:50:21 UTC 2005 Modified Files: pkgsrc/security/gnutls: distinfo Added Files: pkgsrc/security/gnutls/patches: patch-ab Log Message: Avoid calling makeinfo because the distfile contains pre-built .info files. This makes the package build on platforms without makeinfo. Patch provided by Darrin B. Jewell in PR pkg/29869. @ text @a0 13 $NetBSD: patch-ab,v 1.1.2.1 2005/04/03 17:36:27 salo Exp $ --- doc/Makefile.in.orig Thu Jan 27 07:16:50 2005 +++ doc/Makefile.in @@@@ -369,7 +369,7 @@@@ gnutls.dvi: gnutls.texi $(srcdir)/versio gnutls.pdf: gnutls.texi $(srcdir)/version.texi $(gnutls_TEXINFOS) gnutls.html: gnutls.texi $(srcdir)/version.texi $(gnutls_TEXINFOS) $(srcdir)/version.texi: $(srcdir)/stamp-vti -$(srcdir)/stamp-vti: gnutls.texi $(top_srcdir)/configure +$(srcdir)/stamp-vti: gnutls.texi @@(dir=.; test -f ./gnutls.texi || dir=$(srcdir); \ set `$(SHELL) $(srcdir)/mdate-sh $$dir/gnutls.texi`; \ echo "@@set UPDATED $$1 $$2 $$3"; \ @