1 GnuTLS NEWS -- History of user-visible changes. -*- outline -*-
2 Copyright (C) 2000, 2001, 2002, 2003, 2004, 2005,
3 2006, 2007, 2008, 2009, 2010, 2011 Free Software Foundation, Inc.
4 See the end for copying conditions.
6 * Version 2.12.7 (released 2011-06-18)
8 ** p11tool: Require login as security officer if --trusted option is
9 provided. Reported by Rickard Bellgrim.
11 ** libgnutls: The CKA_SUBJECT field is specified when copying certificates
12 in PKCS #11 smart-cards. Patch by Rickard Bellgrim.
14 ** libgnutls: Write label when writing private keys in PKCS #11 tokens.
15 Reported by Rickard Bellgrim.
17 ** libgnutls: Accept CKR_USER_ALREADY_LOGGED_IN as a valid error code
18 when logging in to PKCS #11 tokens.
20 ** API and ABI modifications:
21 No changes since last version.
24 * Version 2.12.6 (released 2011-06-4)
26 ** libgnutls: Allow usage of DSA signatures with truncated hash.
27 Following: http://tools.ietf.org/html/draft-mavrogiannopoulos-tls-dss-00
29 ** libgnutls: Prevent the usage of write() and friends when no data
32 ** libgnutls: Correctly set compression method when resuming sessions.
33 Reported by Dash Shendy.
35 ** libgnutls: gnutls_pubkey_get_pk_dsa_raw() and gnutls_pubkey_get_pk_rsa_raw
36 add leading zeros to the exported values.
38 ** libgnutls: Added gnutls_global_set_time_function() to allow overriding the
39 default system time() function.
41 ** API and ABI modifications:
42 gnutls_global_set_time_function: ADDED
45 * Version 2.12.5 (released 2011-05-14)
47 ** certtool: Can now load private keys and public keys from PKCS #11 tokens
50 ** libgnutls: PKCS #11 URLs conform to the latest draft
51 being http://tools.ietf.org/html/draft-pechanec-pkcs11uri-04.
53 ** libgnutls: gnutls_pkcs11_privkey_import_url() will now correctly read
54 the public key algorithm of the key.
56 ** libgnutls: Added gnutls_x509_crq_verify() to allow
57 verification of the self signature in a certificate request.
58 This allows verifying whether the owner of the private key
59 is the generator of the request.
61 ** libgnutls: gnutls_x509_crt_set_crq() implicitly verifies
62 the self signature of the request.
64 ** API and ABI modifications:
65 gnutls_x509_crq_verify: ADDED
68 * Version 2.12.4 (released 2011-05-06)
70 ** libgnutls: Added gnutls_certificate_get_issuer() to
71 compensate for the deprecated gnutls_certificate_get_x509_cas().
73 ** libgnutls: Limited allowed wildcards to gnutls_x509_crt_check_hostname()
74 to prevent denial of service attacks. Reported by Kalle Olavi Niemitalo.
76 ** guile: Fix tests to match the `exit' behavior introduced in Guile 2.0.1.
77 This fix makes tests behave correctly wrt. to the Guile bug fix at
78 <http://git.sv.gnu.org/cgit/guile.git/commit/?id=e309f3bf9ee910c4772353ca3ff95f6f4ef466b5>.
80 ** API and ABI modifications:
81 gnutls_certificate_get_issuer: ADDED
84 * Version 2.12.3 (released 2011-04-22)
86 * libgnutls: Several minor bugfixes.
88 * libgnutls: Restored HMAC-MD5 for compatibility. Although considered
89 weak, several sites require it for connection. It is enabled for
90 "NORMAL" and "PERFORMANCE" priority strings.
92 * libgnutls: depend on libdl.
94 * libgnutls: gnutls_transport_set_global_errno() was deprecated.
95 Use your system's errno fascility or gnutls_transport_set_errno().
97 * gnutls-cli: Correction with usage of select to check for
98 pending data in gnutls sessions. It now uses gnutls_record_check_pending().
99 Reported by Herbert J. Skuhra.
101 * tests: More fixes and updates for win32. Patches by LRN.
103 * libgnutls: Several files unnecessarily included <gcrypt.h>; this has been fixed.
105 ** API and ABI modifications:
106 gnutls_transport_set_global_errno: DEPRECATED
109 * Version 2.12.2 (released 2011-04-08)
111 ** libgnutls: Several updates and fixes for win32. Patches by LRN.
113 ** libgnutls: Several bug and memory leak fixes.
115 ** srptool: Accepts the -d option to enable debugging.
117 ** libgnutls: Corrected bug in gnutls_srp_verifier() that prevented
118 the allocation of a verifier. Reported by Andrew Wiseman.
120 ** API and ABI modifications:
121 No changes since last version.
124 * Version 2.12.1 (released 2011-04-02)
126 ** certtool: Generated certificate request with stricter permissions.
127 Reported by Luca Capello.
129 ** libgnutls: Bug fixes in opencdk code. Reported by Vitaly Kruglikov.
131 ** libgnutls: Corrected windows system_errno() function prototype.
133 ** libgnutls: C++ compatibility fix for compat.h. Reported by Mark Brand.
135 ** libgnutls: Fix size of gnutls_openpgp_keyid_t by using the
136 GNUTLS_OPENPGP_KEYID_SIZE definition. Reported by Andreas Metzler.
138 ** API and ABI modifications:
139 No changes since last version.
142 * Version 2.12.0 (released 2011-03-24)
144 ** certtool: Warns on generation of DSA keys of over 1024 bits, about
145 the incompatibility with TLS other than 1.2.
147 ** libgnutls: Modified signature algorithm selection in client
148 certificate request, to avoid failures in DSA certificates.
150 ** libgnutls: Instead of failing with internal error, return
151 GNUTLS_E_INCOMPAT_DSA_KEY_WITH_TLS_PROTOCOL if an incompatible DSA
152 key with the negotiated protocol is encountered.
154 ** libgnutls: Bug fixes in the RSA ciphersuite behavior with openpgp keys.
156 ** libgnutls: Force state update when fork is detected in the nettle
159 ** libgnutls: modified gnutls_pubkey_import_openpgp() to use the preferred
160 subkey instead of setting explicitly one.
162 ** libgnutls: Corrected default behavior in record version of Client Hellos.
164 ** libgnutls-openssl: modified to use modern gnutls' functions.
165 This introduces an ABI incompatibility with previous versions.
167 ** API and ABI modifications:
168 gnutls_pubkey_import_openpgp: MODIFIED
171 * Version 2.11.7 (released 2011-03-09)
173 ** libgnutls: Corrected signature generation and verification
174 in the Certificate Verify message when in TLS 1.2. Reported
177 ** libgnutls: Corrected issue in DHE-PSK ciphersuites that ignored
180 ** libgnutls: SRP and PSK are no longer set on the default priorities.
181 They have to be explicitly set.
183 ** libgnutls: During handshake message verification using DSS
184 use the hash algorithm required by it.
186 ** libgnutls: gnutls_x509_privkey_sign_hash() is deprecated.
187 Use gnutls_privkey_sign_hash() instead.
189 ** libgnutls: gnutls_transport_set_lowat() is deprecated. Support
190 for this functionality will be dropped in later versions.
192 ** libgnutls: gnutls_pubkey_verify_data, gnutls_pubkey_verify_hash,
193 gnutls_x509_privkey_verify_data, gnutls_x509_crt_verify_data,
194 gnutls_x509_crt_verify_hash return the negative error code
195 GNUTLS_E_PK_SIG_VERIFY_FAILED if verification fails to simplify error
198 ** libgnutls: Added helper functions for signature verification:
199 gnutls_pubkey_verify_data() and gnutls_pubkey_import_privkey().
201 ** libgnutls: Modified gnutls_privkey_sign_data().
203 ** gnutls_x509_crl_privkey_sign2(), gnutls_x509_crq_sign2()
204 gnutls_x509_privkey_sign_hash(), gnutls_x509_privkey_sign_data(),
205 gnutls_x509_crt_verify_hash(), gnutls_x509_crt_verify_data(), were
206 deprecated for gnutls_x509_crl_privkey_sign(),
207 gnutls_x509_crq_privkey_sign(), gnutls_privkey_sign_hash(),
208 gnutls_privkey_sign_data(), gnutls_pubkey_verify_hash()
209 gnutls_pubkey_verify_data() respectively.
211 ** libgnutls: gnutls_*_export_raw() functions now add leading zero in
214 ** libgnutls: Added gnutls_transport_set_vec_push_function() that
215 can be used to specify a writev() like function. Using that gnutls
216 can provide more efficient writes to network layer in systems that
219 ** crypto.h: Fix use with C++.
220 Reported by "Brendan Doherty" <brendand@gentrack.com>.
222 ** API and ABI modifications:
223 gnutls_transport_set_vec_push_function: ADDED
224 gnutls_x509_crl_get_raw_issuer_dn: ADDED
225 gnutls_pubkey_import_privkey: ADDED
226 gnutls_pubkey_verify_data: ADDED
227 gnutls_privkey_sign_hash: MODIFIED (was added in 2.11.0)
228 gnutls_privkey_sign_data: MODIFIED (was added in 2.11.0)
229 gnutls_x509_crq_sign2: DEPRECATED (use: gnutls_x509_crq_privkey_sign)
230 gnutls_x509_crq_sign: DEPRECATED (use: gnutls_x509_crq_privkey_sign)
231 gnutls_x509_crq_get_preferred_hash_algorithm: REMOVED (was added in 2.11.0)
232 gnutls_x509_crl_sign: DEPRECATED (use: gnutls_x509_crl_privkey_sign)
233 gnutls_x509_crl_sign2: DEPRECATED (use: gnutls_x509_crl_privkey_sign)
234 gnutls_x509_privkey_sign_data: DEPRECATED (use: gnutls_privkey_sign_data)
235 gnutls_x509_privkey_sign_hash: DEPRECATED (use: gnutls_privkey_sign_hash)
236 gnutls_x509_privkey_verify_data: DEPRECATED (use: gnutls_pubkey_verify_data)
237 gnutls_psk_netconf_derive_key: DEPRECATED
238 gnutls_session_set_finished_function: DEPRECATED
239 gnutls_ext_register: DEPRECATED
240 gnutls_certificate_get_x509_crls: DEPRECATED
241 gnutls_certificate_get_x509_cas: DEPRECATED
242 gnutls_certificate_get_openpgp_keyring: DEPRECATED
243 gnutls_session_get_server_random: DEPRECATED
244 gnutls_session_get_client_random: DEPRECATED
245 gnutls_session_get_master_secret: DEPRECATED
246 gnutls_transport_set_lowat: DEPRECATED
247 gnutls_x509_crt_verify_hash: DEPRECATED (use: gnutls_pubkey_verify_hash)
248 gnutls_x509_crt_verify_data: DEPRECATED (use: gnutls_pubkey_verify_data)
249 gnutls_x509_crt_get_verify_algorithm: DEPRECATED (use: gnutls_pubkey_get_verify_algorithm)
250 gnutls_x509_crt_get_preferred_hash_algorithm: DEPRECATED (use: gnutls_pubkey_get_preferred_hash_algorithm)
251 gnutls_openpgp_privkey_sign_hash: DEPRECATED (use: gnutls_privkey_sign_hash)
252 gnutls_openpgp_privkey_decrypt_data: REMOVED (was added in 2.11.0)
253 gnutls_pkcs11_privkey_sign_hash: REMOVED (was added in 2.11.0)
254 gnutls_pkcs11_privkey_decrypt_data: REMOVED (was added in 2.11.0)
255 gnutls_pkcs11_privkey_sign_data: REMOVED (was added in 2.11.0)
256 gnutls_x509_privkey_sign_data2: REMOVED (was added in 2.11.0)
258 * Version 2.11.6 (released 2010-12-06)
260 ** libgnutls: Record version of Client Hellos is now set by default to
261 SSL 3.0. To restore the previous default behavior use %LATEST_RECORD_VERSION
264 ** libgnutls: Use ASN1_NULL when writing parameters for RSA signatures.
265 This makes us comply with RFC3279. Reported by Michael Rommel.
267 ** gnutls-serv: Corrected a buffer overflow. Reported and patch by Tomas Mraz.
269 ** API and ABI modifications:
270 No changes since last version.
272 * Version 2.11.5 (released 2010-12-01)
274 ** libgnutls: Reverted default behavior for verification and
275 introduced GNUTLS_VERIFY_DO_NOT_ALLOW_X509_V1_CA_CRT. Thus by default
276 V1 trusted CAs are allowed, unless the new flag is specified.
278 ** libgnutls: Correctly add leading zero to PKCS #8 encoded DSA key.
279 Reported by Jeffrey Walton.
281 ** libgnutls: Added SIGN-ALL, CTYPE-ALL, COMP-ALL, and VERS-TLS-ALL
282 as priority strings. Those allow to set all the supported algorithms
285 ** p11tool: Introduced. It allows manipulating pkcs 11 tokens.
287 ** gnutls-cli: Print channel binding only in verbose mode.
288 Before it printed it after the 'Compression:' output, thus breaking
289 Emacs starttls.el string searches.
291 ** API and ABI modifications:
292 gnutls_pkcs11_token_init: New function
293 gnutls_pkcs11_token_set_pin: New function
295 * Version 2.11.4 (released 2010-10-15)
297 ** libgnutls: Add new API gnutls_session_channel_binding.
298 The function is used to get the channel binding data. Currently only
299 the "tls-unique" (RFC 5929) channel binding type is supported, through
300 the GNUTLS_CB_TLS_UNIQUE type. See new section "Channel Bindings" in
303 ** gnutls-cli, gnutls-serv: Print 'tls-unique' Channel Bindings.
305 ** doc: Added pkcs11.h header file to GTK-DOC manual.
307 ** build: Update gnulib files.
309 ** i18n: Update translations.
311 ** tests: Add self tests gendh.c. Speed up Guile self checks.
313 ** API and ABI modifications:
314 gnutls_session_channel_binding: New function.
315 gnutls_channel_binding_t: New enumeration.
316 GNUTLS_CB_TLS_UNIQUE: New gnutls_channel_binding_t enum member.
317 GNUTLS_E_CHANNEL_BINDING_NOT_AVAILABLE: New error code.
319 * Version 2.11.3 (released 2010-10-14)
321 ** Indent code to follow the GNU Coding Standard.
322 You should be able to unpack the 2.11.2 release and run 'make indent'
323 twice to get exactly the same content as 2.11.3 except for generated
324 files. Using GNU Indent 2.2.11.
326 ** API and ABI modifications:
327 No changes since last version.
329 * Version 2.11.2 (released 2010-10-08)
331 ** libgnutls: Several bug fixes on session resumption
332 and session tickets support.
334 ** libgnutls: Add new extended key usage ipsecIKE.
336 ** certtool: Renamed PKCS #11 options to: --p11-provider,
337 --p11-export-url, --p11-list-certs, --p11-list-certs,
338 --p11-list-privkeys, --p11-list-trusted, --p11-list-all-certs,
339 --p11-list-all, --p11-list-tokens, --p11-login, --p11-write,
340 --p11-write-label, --p11-write-trusted, --p11-detailed-url,
343 ** libgnutls: Corrected bug that caused importing DSA keys as RSA,
344 introduced with the new nettle code.
346 ** libgnutls: Corrected advertizing issue for session tickets.
348 ** API and ABI modifications:
349 gnutls_x509_crt_get_subject_unique_id: ADDED.
350 gnutls_x509_crt_get_issuer_unique_id: ADDED.
352 * Version 2.11.1 (released 2010-09-14)
354 ** libgnutls: Nettle is the default crypto back end. Use --with-libgcrypt
355 to use the libgcrypt back end.
357 ** libgnutls: Depend on nettle 2.1. This makes nettle a fully working
358 backend crypto library.
360 ** libgnutls: Added RSA_NULL_SHA1 and SHA256 ciphersuites.
362 ** libgnutls: Several updates in the buffering internal interface.
364 ** libgnutls: Is now more liberal in the PEM decoding. That is spaces and
365 tabs are being skipped.
367 ** libgnutls: Added support for draft-pechanec-pkcs11uri-02.
369 ** libgnutls: The %COMPAT flag now allows larger records that violate the
372 ** libgnutls: by default lowat level has been set to zero to avoid unnecessary
373 system calls. Applications that depended on it being 1 should explicitly call
374 gnutls_transport_set_lowat().
376 ** libgnutls: Updated documentation and gnutls_pk_params_t mappings
377 to ECRYPT II recommendations. Mappings were moved to a single location
378 and DSA keys are handled differently (since DSA2 allows for 1024,2048
381 ** libgnutls: gnutls_x509_privkey_import() will fallback to
382 gnutls_x509_privkey_import_pkcs8() without a password, if it
383 is unable to decode the key.
385 ** libgnutls: HMAC-MD5 no longer used by default.
387 ** API and ABI modifications:
388 gnutls_openpgp_privkey_sec_param: ADDED
389 gnutls_x509_privkey_sec_param: ADDED
391 * Version 2.11.0 (released 2010-07-22)
393 ** libgnutls: support scattered write using writev(). This takes
394 advantage of the new buffering layer and allows queuing of packets
395 and flushing them. This is currently used for handshake messages
398 ** libgnutls: Added gnutls_global_set_mutex() to allow setting
399 alternative locking procedures. By default the system available
400 locking is used. In *NIX pthreads are used and in windows the
401 critical section API. This follows a different approach than the
402 previous versions that depended on libgcrypt initialization. The
403 locks are now set by default in systems that support it. Programs
404 that used gcry_control() to set thread locks should insert it into
406 #if GNUTLS_VERSION_NUMBER <= 0x020b00
410 ** libgnutls: Added support for reading DN from EV-certificates.
412 jurisdictionOfIncorporationLocalityName,
413 jurisdictionOfIncorporationStateOrProvinceName,
414 jurisdictionOfIncorporationCountryName
416 ** libgnutls: Added support for DSA signing/verifying with bit
419 ** libgnutls-extra: When in FIPS mode gnutls_global_init_extra()
420 has to be called to register any required md5 handlers.
422 ** libgnutls: Internal buffering code was replaced by simpler
423 code contributed by Jonathan Bastien-Filiatrault.
425 ** libgnutls: Internal API for extensions augmented to allow
426 safe storing and loading of data on resumption. This allows writing
427 self-contained extensions (when possible). As a side effect
428 the OPRFI extension was removed.
430 ** libgnutls: Added support for DSA-SHA256 and DSA-SHA224
432 ** libgnutls: Added PKCS #11 support and an API to access objects in
433 gnutls/pkcs11.h. Currently certificates and public keys can be
434 imported from tokens, and operations can be performed on private keys.
436 ** libgnutls: Added abstract gnutls_privkey_t and gnutls_pubkey_t
438 ** libgnutls: Added initial support for the nettle library. It uses
439 the system's random generator for seeding. That is /dev/urandom in Linux,
440 system calls in Win32 and EGD on other systems.
442 ** libgnutls: Corrected issue on the %SSL3_RECORD_VERSION priority string. It now
443 works even when resuming a session.
445 ** libgnutls: Added gnutls_certificate_set_retrieve_function() to replace the
446 similar gnutls_certificate_set_server_retrieve_function() and
447 gnutls_certificate_set_client_retrieve_function(). In addition it support
448 PKCS #11 private keys.
450 ** libgnutls: Added gnutls_pkcs11_copy_x509_crt(), gnutls_pkcs11_copy_x509_privkey(),
451 and gnutls_pkcs11_delete_url() to allow copying and deleting data in tokens.
453 ** libgnutls: Added gnutls_sec_param_to_pk_bits() et al. to allow select bit
454 sizes for private keys using a human understandable scale.
456 ** certtool: Added new options: --pkcs11-list-tokens, --pkcs11-list-all
457 --pkcs11-list-all-certs, --pkcs11-list-trusted, --pkcs11-list-certs,
458 --pkcs11-delete-url, --pkcs11-write
460 certtool: The --pkcs-cipher is taken into account when generating a
461 private key. The default cipher used now is aes-128. The old behavior can
462 be simulated by specifying "--pkcs-cipher 3des-pkcs12".
464 certtool: Added --certificate-pubkey to print the public key of the
467 ** gnutls-cli/gnutls-serv: --x509cafile, --x509certfile and --x509keyfile
468 can now accept a PKCS #11 URL in addition to a file. This will allow for
469 example to use the Gnome-keyring trusted certificate list to verify
470 connections using a url such as:
471 pkcs11:token=Root%20CA%20Certificates;serial=1%3AROOTS%3ADEFAULT;model=1%2E0;manufacturer=Gnome%20Keyring
473 ** API and ABI modifications:
474 gnutls_certificate_set_server_retrieve_function: DEPRECATED
475 gnutls_certificate_set_client_retrieve_function: DEPRECATED
476 gnutls_sign_callback_set: DEPRECATED
477 gnutls_global_set_mutex: ADDED
478 gnutls_pubkey_get_preferred_hash_algorithm: ADDED
479 gnutls_x509_crt_get_preferred_hash_algorithm: ADDED
480 gnutls_x509_privkey_export_rsa_raw2: ADDED
482 gnutls_sec_param_to_pk_bits: ADDED
483 gnutls_pk_bits_to_sec_param: ADDED
484 gnutls_sec_param_get_name: ADDED
485 gnutls_pkcs11_type_get_name: ADDED
486 gnutls_certificate_set_retrieve_function: ADDED
487 gnutls_pkcs11_init: ADDED
488 gnutls_pkcs11_deinit: ADDED
489 gnutls_pkcs11_set_pin_function: ADDED
490 gnutls_pkcs11_set_token_function: ADDED
491 gnutls_pkcs11_add_provider: ADDED
492 gnutls_pkcs11_obj_init: ADDED
493 gnutls_pkcs11_obj_import_url: ADDED
494 gnutls_pkcs11_obj_export_url: ADDED
495 gnutls_pkcs11_obj_deinit: ADDED
496 gnutls_pkcs11_obj_export: ADDED
497 gnutls_pkcs11_obj_list_import_url: ADDED
498 gnutls_pkcs11_obj_export: ADDED
499 gnutls_x509_crt_import_pkcs11: ADDED
500 gnutls_pkcs11_obj_get_type: ADDED
501 gnutls_x509_crt_list_import_pkcs11: ADDED
502 gnutls_x509_crt_import_pkcs11_url: ADDED
503 gnutls_pkcs11_obj_get_info: ADDED
504 gnutls_pkcs11_token_get_info: ADDED
505 gnutls_pkcs11_token_get_url: ADDED
506 gnutls_pkcs11_privkey_init: ADDED
507 gnutls_pkcs11_privkey_deinit: ADDED
508 gnutls_pkcs11_privkey_get_pk_algorithm: ADDED
509 gnutls_pkcs11_privkey_get_info: ADDED
510 gnutls_pkcs11_privkey_import_url: ADDED
511 gnutls_pkcs11_privkey_sign_data: ADDED
512 gnutls_pkcs11_privkey_sign_hash: ADDED
513 gnutls_pkcs11_privkey_decrypt_data: ADDED
514 gnutls_privkey_init: ADDED
515 gnutls_privkey_deinit: ADDED
516 gnutls_privkey_get_pk_algorithm: ADDED
517 gnutls_privkey_get_type: ADDED
518 gnutls_privkey_import_pkcs11: ADDED
519 gnutls_privkey_import_x509: ADDED
520 gnutls_privkey_import_openpgp: ADDED
521 gnutls_privkey_sign_data: ADDED
522 gnutls_privkey_sign_hash: ADDED
523 gnutls_privkey_decrypt_data: ADDED
524 gnutls_pkcs11_privkey_export_url: ADDED
525 gnutls_x509_crq_privkey_sign: ADDED
526 gnutls_x509_crl_privkey_sign: ADDED
527 gnutls_x509_crt_privkey_sign: ADDED
528 gnutls_pubkey_init: ADDED
529 gnutls_pubkey_deinit: ADDED
530 gnutls_pubkey_get_pk_algorithm: ADDED
531 gnutls_pubkey_import_x509: ADDED
532 gnutls_pubkey_import_openpgp: ADDED
533 gnutls_pubkey_get_pk_rsa_raw: ADDED
534 gnutls_pubkey_get_pk_dsa_raw: ADDED
535 gnutls_pubkey_export: ADDED
536 gnutls_pubkey_get_key_id: ADDED
537 gnutls_pubkey_get_key_usage: ADDED
538 gnutls_pubkey_verify_hash: ADDED
539 gnutls_pubkey_get_verify_algorithm: ADDED
540 gnutls_pkcs11_type_get_name: ADDED
541 gnutls_pubkey_import_pkcs11_url: ADDED
542 gnutls_pubkey_import: ADDED
543 gnutls_pubkey_import_pkcs11: ADDED
544 gnutls_pubkey_import_dsa_raw: ADDED
545 gnutls_pubkey_import_rsa_raw: ADDED
546 gnutls_x509_crt_set_pubkey: ADDED
547 gnutls_x509_crq_set_pubkey: ADDED
548 gnutls_pkcs11_copy_x509_crt: ADDED
549 gnutls_pkcs11_copy_x509_privkey: ADDED
550 gnutls_pkcs11_delete_url: ADDED
552 * Version 2.10.1 (released 2010-07-25)
554 ** libgnutls: Added support for broken certificates that indicate RSA
557 ** gnutls-cli: Allow verification using V1 CAs.
559 ** libgnutls: gnutls_x509_privkey_import() will fallback to
560 gnutls_x509_privkey_import_pkcs8() without a password, if it
561 is unable to decode the key.
563 ** libgnutls: Correctly deinitialize crypto API functions to prevent
564 a memory leak. Reported by Mads Kiilerich.
566 ** certtool: If asked to generate DSA keys of size more than 1024 bits,
567 issue a warning, that the output key might not be working everywhere.
569 ** certtool: The --pkcs-cipher is taken into account when generating a
570 private key. The default cipher used now is aes-128. The old behavior
571 can be simulated by specifying "--pkcs-cipher 3des-pkcs12".
573 ** API and ABI modifications:
574 No changes since last version.
576 * Version 2.10.0 (released 2010-06-25)
578 ** API and ABI modifications:
579 No changes since last version.
581 * Version 2.9.12 (released 2010-06-17)
583 ** gnutls-cli: Make --starttls work again.
584 Problem introduced in patch to use read() instead of fgets() committed
587 ** API and ABI modifications:
588 No changes since last version.
590 * Version 2.9.11 (released 2010-06-07)
592 ** libgnutls: Removed two APIs related to safe renegotiation.
593 Use priority strings instead. The APIs were
594 gnutls_safe_negotiation_set_initial and gnutls_safe_renegotiation_set.
595 (Remember that we don't promise ABI stability during development
596 series, so this doesn't cause an shared library ABI increment.)
598 ** tests: More self testing of safe renegotiation extension.
599 See tests/safe-renegotiation/README for more information.
601 ** doc: a PDF version of the API reference manual (GTK-DOC) is now built.
603 ** doc: Terms 'GNUTLS' and 'GNU TLS' were changed to 'GnuTLS' for consistency.
605 ** API and ABI modifications:
606 gnutls_safe_negotiation_set_initial: REMOVED.
607 gnutls_safe_renegotiation_set: REMOVED.
609 * Version 2.9.10 (released 2010-04-22)
611 ** libgnutls: Time verification extended to trusted certificate list.
612 Unless new constant GNUTLS_VERIFY_DISABLE_TRUSTED_TIME_CHECKS flag is
615 ** certtool: Display postalCode and Name X.509 DN attributes correctly.
616 Based on patch by Pavan Konjarla. Adds new constant
617 GNUTLS_OID_X520_POSTALCODE and GNUTLS_OID_X520_NAME.
619 ** libgnutls: Added Steve Dispensa's patch for safe renegotiation (RFC 5746)
620 Solves the issue discussed in:
621 <http://www.ietf.org/mail-archive/web/tls/current/msg03928.html> and
622 <http://www.ietf.org/mail-archive/web/tls/current/msg03948.html>.
623 Note that to allow connecting to unpatched servers the full protection
624 is only enabled if the priority string %SAFE_RENEGOTIATION is
625 specified. You can check whether protection is in place by querying
626 gnutls_safe_renegotiation_status(). New error codes
627 GNUTLS_E_SAFE_RENEGOTIATION_FAILED and
628 GNUTLS_E_UNSAFE_RENEGOTIATION_DENIED added.
630 ** libgnutls: When checking openpgp self signature also check the signatures
632 Ilari Liusvaara noticed and reported the issue and provided test
635 ** libgnutls: Added cryptodev support (/dev/crypto).
636 Tested with http://www.logix.cz/michal/devel/cryptodev/. Added
637 benchmark utility for AES. Adds new error codes
638 GNUTLS_E_CRYPTODEV_IOCTL_ERROR and GNUTLS_E_CRYPTODEV_DEVICE_ERROR.
640 ** libgnutls: Exported API to access encryption and hash algorithms.
641 The new API functions are gnutls_cipher_decrypt, gnutls_cipher_deinit,
642 gnutls_cipher_encrypt, gnutls_cipher_get_block_size,
643 gnutls_cipher_init, gnutls_hash, gnutls_hash_deinit, gnutls_hash_fast,
644 gnutls_hash_get_len, gnutls_hash_init, gnutls_hash_output,
645 gnutls_hmac, gnutls_hmac_deinit, gnutls_hmac_fast,
646 gnutls_hmac_get_len, gnutls_hmac_init, gnutls_hmac_output. New API
647 constants are GNUTLS_MAC_SHA224 and GNUTLS_DIG_SHA224.
649 ** libgnutls: Added gnutls_certificate_set_verify_function() to allow
650 verification of certificate upon receipt rather than waiting until the
651 end of the handshake.
653 ** libgnutls: Don't send alerts during handshake.
654 Instead new error code GNUTLS_E_UNKNOWN_SRP_USERNAME is added.
656 ** certtool: Corrected two issues that affected certificate request generation.
657 (1) Null padding is added on integers (found thanks to Wilankar Trupti),
658 (2) In optional SignatureAlgorithm parameters field for DSA keys the DSA
659 parameters were added. Those were rejected by Verisign. Gnutls no longer adds
660 those parameters there since other implementations don't do either and having
661 them does not seem to offer anything (anyway you need the signer's certificate
662 to verify thus public key will be available). Found thanks to Boyan Kasarov.
663 This however has the side-effect that public key IDs shown by certtool are
664 now different than previous gnutls releases.
665 (3) the option --pgp-certificate-info will verify self signatures
667 ** certtool: Allow exporting of Certificate requests on DER format.
669 ** certtool: New option --no-crq-extensions to avoid extensions in CSRs.
671 ** gnutls-cli: Handle reading binary data from server.
672 Reported by and tiny patch from Vitaly Mayatskikh
673 <v.mayatskih@gmail.com> in
674 <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/4096>.
676 ** minitasn1: Upgraded to libtasn1 version 2.6.
678 ** i18n: Updated Czech, Dutch, French, Polish, Swedish translation.
679 ** Added Italian and Simplified Chinese translation.
680 Thanks to Petr Pisar, Erwin Poeze, Nicolas Provost, Jakub Bogusz,
681 Daniel Nylander, Sergio Zanchetta, Tao Wei, and Aron Xu.
683 ** doc: The GTK-DOC manual is significantly improved.
685 ** API and ABI modifications:
686 %DISABLE_SAFE_RENEGOTIATION: Added to priority strings (do not use).
687 %INITIAL_SAFE_RENEGOTIATION: Added to priority strings.
688 %UNSAFE_RENEGOTIATION: Added to priority strings.
689 GNUTLS_DIG_SHA224: ADDED.
690 GNUTLS_E_CRYPTODEV_DEVICE_ERROR: ADDED.
691 GNUTLS_E_CRYPTODEV_IOCTL_ERROR: ADDED.
692 GNUTLS_E_SAFE_RENEGOTIATION_FAILED: ADDED.
693 GNUTLS_E_UNKNOWN_SRP_USERNAME: ADDED.
694 GNUTLS_E_UNSAFE_RENEGOTIATION_DENIED: ADDED.
695 GNUTLS_MAC_SHA224: ADDED.
696 GNUTLS_OID_X520_NAME: ADDED.
697 GNUTLS_OID_X520_POSTALCODE: ADDED.
698 GNUTLS_VERIFY_DISABLE_TRUSTED_TIME_CHECKS: ADDED.
699 GNUTLS_VERSION_MAX: ADDED.
700 gnutls_certificate_set_verify_function: ADDED.
701 gnutls_cipher_decrypt: ADDED.
702 gnutls_cipher_deinit: ADDED.
703 gnutls_cipher_encrypt: ADDED.
704 gnutls_cipher_get_block_size: ADDED.
705 gnutls_cipher_init: ADDED.
707 gnutls_hash_deinit: ADDED.
708 gnutls_hash_fast: ADDED.
709 gnutls_hash_get_len: ADDED.
710 gnutls_hash_init: ADDED.
711 gnutls_hash_output: ADDED.
713 gnutls_hmac_deinit: ADDED.
714 gnutls_hmac_fast: ADDED.
715 gnutls_hmac_get_len: ADDED.
716 gnutls_hmac_init: ADDED.
717 gnutls_hmac_output: ADDED.
718 gnutls_safe_negotiation_set_initial: ADDED.
719 gnutls_safe_renegotiation_set: ADDED.
720 gnutls_safe_renegotiation_status: ADDED.
722 * Version 2.9.9 (released 2009-11-09)
724 ** libgnutls: Cleanups and several bug fixes.
725 Found by Steve Grubb and Tomas Mraz.
727 ** Link libgcrypt explicitly to certtool, gnutls-cli, gnutls-serv.
729 ** Fix --disable-valgrind-tests.
730 Reported by Ingmar Vanhassel in
731 <https://savannah.gnu.org/support/?107029>.
733 ** API and ABI modifications:
734 No changes since last version.
736 * Version 2.9.8 (released 2009-11-05)
738 ** libgnutls: Fix for memory leaks on interrupted handshake.
739 Reported by Tang Tong.
741 ** libgnutls: Addition of support for TLS 1.2 signature algorithms
742 ** extension and certificate verify field.
743 This requires changes for TLS 1.2 servers and clients that use
744 callbacks for certificate retrieval. They are now required to check
745 with gnutls_sign_algorithm_get_requested() whether the certificate
746 they send complies with the peer's preferences in signature
749 ** libgnutls: In server side when resuming a session do not overwrite the
750 ** initial session data with the resumed session data.
752 ** libgnutls: Added support for AES-128, AES-192 and AES-256 in PKCS #8
754 This affects also PKCS #12 encoded files. This adds the following new
755 enums: GNUTLS_CIPHER_AES_192_CBC, GNUTLS_PKCS_USE_PBES2_AES_128,
756 GNUTLS_PKCS_USE_PBES2_AES_192, GNUTLS_PKCS_USE_PBES2_AES_256.
758 ** libgnutls: Fix PKCS#12 encoding.
759 The error you would get was "The OID is not supported.". Problem
760 introduced for the v2.8.x branch in 2.7.6.
762 ** certtool: Added the --pkcs-cipher option.
763 To explicitely specify the encryption algorithm to use.
765 ** tests: Added "pkcs12_encode" self-test to check PKCS#12 functions.
767 ** tests: Fix time bomb in chainverify self-test.
768 Reported by Andreas Metzler <ametzler@downhill.at.eu.org> in
769 <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3925>.
771 ** tests: Fix expired cert in chainverify self-test.
773 ** i18n: Vietnamese translation updated.
774 Thanks to Clytie Siddall.
776 ** API and ABI modifications:
777 GNUTLS_CIPHER_AES_192_CBC: ADDED to gnutls/gnutls.h.
778 GNUTLS_PKCS_USE_PBES2_AES_128: ADDED to gnutls/x509.h.
779 GNUTLS_PKCS_USE_PBES2_AES_192: ADDED to gnutls/x509.h.
780 GNUTLS_PKCS_USE_PBES2_AES_256: ADDED to gnutls/x509.h.
781 GNUTLS_BAG_SECRET: ADDED to gnutls/pkcs12.h.
782 GNUTLS_DIG_UNKNOWN: ADDED to gnutls/gnutls.h.
783 gnutls_sign_algorithm_get_requested: ADDED.
785 * Version 2.9.7 (released 2009-10-06)
787 ** libgnutls: TLS 1.2 server mode fixes.
788 Now interoperates against Opera. Contributed by Daiki Ueno.
790 ** libgnutlsxx: Fix link problems.
791 Tiny patch from Boyan Kasarov <bkasarov@gmail.com>.
793 ** guile: Compatibility with guile 2.x.
794 By Ludovic Courtes <ludovic.courtes@laas.fr>.
796 ** API and ABI modifications:
797 No changes since last version.
799 * Version 2.9.6 (released 2009-09-22)
801 ** libgnutls: Enable Camellia ciphers by default.
803 ** API and ABI modifications:
804 No changes since last version.
806 * Version 2.9.5 (released 2009-09-10)
808 ** libgnutls: Add new functions to extract X.509 Issuer Alternative Names.
809 The new functions are gnutls_x509_crt_get_issuer_alt_name2,
810 gnutls_x509_crt_get_issuer_alt_name, and
811 gnutls_x509_crt_get_issuer_alt_othername_oid. Contributed by Brad
812 Hards <bradh@frogmouth.net>.
814 ** API and ABI modifications:
815 gnutls_x509_crt_get_issuer_alt_name2: ADDED.
816 gnutls_x509_crt_get_issuer_alt_name: ADDED.
817 gnutls_x509_crt_get_issuer_alt_othername_oid: ADDED.
819 * Version 2.9.4 (released 2009-09-03)
821 ** libgnutls: Client-side TLS 1.2 and SHA-256 ciphersuites now works.
822 The new supported ciphersuites are AES-128/256 in CBC mode with
823 ANON-DH/RSA/DHE-DSS/DHE-RSA. Contributed by Daiki Ueno. Further,
824 SHA-256 is now the preferred default MAC (however it is only used with
827 ** libgnutls: Make OpenPGP hostname checking work again.
828 The patch to resolve the X.509 CN/SAN issue accidentally broken
829 OpenPGP hostname comparison.
831 ** libgnutls: When printing X.509 certificates, handle XMPP SANs better.
832 Reported by Howard Chu <hyc@symas.com> in
833 <https://savannah.gnu.org/support/?106975>.
835 ** Fix use of deprecated types internally.
836 Use of deprecated types in GnuTLS from now on will lead to a compile
837 error, to prevent this from happening again.
839 ** API and ABI modifications:
840 No changes since last version.
842 * Version 2.9.3 (released 2009-08-19)
844 ** libgnutls: Support for TLS tickets was contributed by Daiki Ueno.
845 The new APIs are gnutls_session_ticket_enable_client,
846 gnutls_session_ticket_enable_server, and
847 gnutls_session_ticket_key_generate.
849 ** gnutls-cli, gnutls-serv: New parameter --noticket to disable TLS tickets.
851 ** API and ABI modifications:
852 gnutls_session_ticket_key_generate: ADDED.
853 gnutls_session_ticket_enable_client: ADDED.
854 gnutls_session_ticket_enable_server: ADDED.
856 * Version 2.9.2 (released 2009-08-14)
858 ** libgnutls: Fix problem with NUL bytes in X.509 CN and SAN fields.
859 By using a NUL byte in CN/SAN fields, it was possible to fool GnuTLS
860 into 1) not printing the entire CN/SAN field value when printing a
861 certificate and 2) cause incorrect positive matches when matching a
862 hostname against a certificate. Some CAs apparently have poor
863 checking of CN/SAN values and issue these (arguable invalid)
864 certificates. Combined, this can be used by attackers to become a
865 MITM on server-authenticated TLS sessions. The problem is mitigated
866 since attackers needs to get one certificate per site they want to
867 attack, and the attacker reveals his tracks by applying for a
868 certificate at the CA. It does not apply to client authenticated TLS
869 sessions. Research presented independently by Dan Kaminsky and Moxie
870 Marlinspike at BlackHat09. Thanks to Tomas Hoger <thoger@redhat.com>
871 for providing one part of the patch. [GNUTLS-SA-2009-4] [CVE-2009-2730].
873 ** libgnutls: Fix rare failure in gnutls_x509_crt_import.
874 The function may fail incorrectly when an earlier certificate was
875 imported to the same gnutls_x509_crt_t structure.
877 ** minitasn1: Internal copy updated to libtasn1 v2.3.
879 ** libgnutls: Fix return value of gnutls_certificate_client_get_request_status.
880 Before it always returned false. Reported by Peter Hendrickson
881 <pdh@wiredyne.com> in
882 <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3668>.
884 ** libgnutls: Fix off-by-one size computation error in unknown DN printing.
885 The error resulted in truncated strings when printing unknown OIDs in
886 X.509 certificate DNs. Reported by Tim Kosse
887 <tim.kosse@filezilla-project.org> in
888 <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3651>.
890 ** libgnutls: Fix PKCS#12 decryption from password.
891 The encryption key derived from the password was incorrect for (on
892 average) 1 in every 128 input for random inputs. Reported by "Kukosa,
893 Tomas" <tomas.kukosa@siemens-enterprise.com> in
894 <http://permalink.gmane.org/gmane.network.gnutls.general/1663>.
896 ** libgnutls: Return correct bit lengths of some MPIs.
897 gnutls_dh_get_prime_bits, gnutls_rsa_export_get_modulus_bits, and
898 gnutls_dh_get_peers_public_bits. Before the reported value was
899 overestimated. Reported by Peter Hendrickson <pdh@wiredyne.com> in
900 <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3607>.
902 ** libgnutls: Avoid internal error when invoked after GNUTLS_E_AGAIN.
903 Report and patch by Tim Kosse <tim.kosse@filezilla-project.org> in
904 <http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3671>
906 <http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3670>.
908 ** libgnutls: Relax checking of required libtasn1/libgcrypt versions.
909 Before we required that the runtime library used the same (or more
910 recent) libgcrypt/libtasn1 as it was compiled with. Now we just check
911 that the runtime usage is above the minimum required. Reported by
912 Marco d'Itri <md@linux.it> via Andreas Metzler
913 <ametzler@downhill.at.eu.org> in <http://bugs.debian.org/540449>.
915 ** tests: Added new self-test pkcs12_s2k_pem to detect MPI bit length error.
917 ** tests: Improved test vectors in self-test pkcs12_s2k.
919 ** tests: Added new self-test dn2 to detect off-by-one size error.
921 ** tests: Fix failure in "chainverify" because a certificate have expired.
923 ** API and ABI modifications:
924 No changes since last version.
926 * Version 2.9.1 (released 2009-06-08)
928 ** libgnutls: Fix crash in gnutls_global_init after earlier init/deinit cycle.
929 Forwarded by Martin von Gagern <Martin.vGagern@gmx.net> from
930 <http://bugs.gentoo.org/272388>.
932 ** tests: Added new self-tests init_roundtrip.c to detect previous problem.
934 ** Reduce stack usage for some CRQ functions.
936 ** Doc fixes for CRQ functions.
938 ** API and ABI modifications:
939 No changes since last version.
941 * Version 2.9.0 (released 2009-05-28)
945 ** API and ABI modifications:
946 No changes since last version.
948 * Version 2.8.6 (released 2010-03-15)
950 ** libgnutls: For CSRs, don't null pad integers for RSA/DSA value.
951 VeriSign rejected CSRs with this padding. Reported by Wilankar Trupti
952 <trupti.wilankar@hp.com> and Boyan Kasarov <bkasarov@gmail.com>.
954 Note: As a side effect of this change, the "public key identifier"
955 value computed for a certificate using this version of GnuTLS will be
956 different from values computed using earlier versions of GnuTLS.
958 ** libgnutls: For CSRs on DSA keys, don't add DSA parameters to the
959 ** optional SignatureAlgorithm parameter field.
960 VeriSign rejected these CSRs. They are stricly speaking not needed
961 since you need the signer's certificate to verify the certificate
962 signature anyway. Reported by Wilankar Trupti
963 <trupti.wilankar@hp.com> and Boyan Kasarov <bkasarov@gmail.com>.
965 ** libgnutls: When checking openpgp self signature also check the signatures
967 Ilari Liusvaara noticed and reported the issue and provided test
970 ** libgnutls: Cleanups and several bug fixes.
971 Found by Steve Grubb and Tomas Mraz.
973 ** Link libgcrypt explicitly to certtool, gnutls-cli, gnutls-serv.
975 ** Fix --disable-valgrind-tests.
976 Reported by Ingmar Vanhassel in
977 <https://savannah.gnu.org/support/?107029>.
979 ** examples: Use the new APIs for printing X.509 certificate information.
981 ** Fix build failures on Solaris.
982 Thanks to Dagobert Michelsen <dam@opencsw.org>.
984 ** i18n: Updated Czech, Dutch, French, Polish, Swedish and Vietnamese
985 ** translations. Added Simplified Chinese translation.
987 ** API and ABI modifications:
988 No changes since last version.
990 * Version 2.8.5 (released 2009-11-02)
992 ** libgnutls: In server side when resuming a session do not overwrite the
993 ** initial session data with the resumed session data.
995 ** libgnutls: Fix PKCS#12 encoding.
996 The error you would get was "The OID is not supported.". Problem
997 introduced for the v2.8.x branch in 2.7.6.
999 ** guile: Compatibility with guile 2.x.
1000 By Ludovic Courtes <ludovic.courtes@laas.fr>.
1002 ** tests: Fix expired cert in chainverify self-test.
1004 ** tests: Fix time bomb in chainverify self-test.
1005 Reported by Andreas Metzler <ametzler@downhill.at.eu.org> in
1006 <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3925>.
1008 ** API and ABI modifications:
1009 No changes since last version.
1011 * Version 2.8.4 (released 2009-09-18)
1013 ** libgnutls: Enable Camellia ciphers by default.
1015 ** libgnutls: Make OpenPGP hostname checking work again.
1016 The patch to resolve the X.509 CN/SAN issue accidentally broken
1017 OpenPGP hostname comparison.
1019 ** libgnutls: When printing X.509 certificates, handle XMPP SANs better.
1020 Reported by Howard Chu <hyc@symas.com> in
1021 <https://savannah.gnu.org/support/?106975>.
1023 ** API and ABI modifications:
1024 No changes since last version.
1026 * Version 2.8.3 (released 2009-08-13)
1028 ** libgnutls: Fix patch for NUL in CN/SAN in last release.
1029 Code intended to be removed would lead to an read-out-bound error in
1030 some situations. Reported by Tomas Hoger <thoger@redhat.com>. A CVE
1031 code have been allocated for the vulnerability: [CVE-2009-2730].
1033 ** libgnutls: Fix rare failure in gnutls_x509_crt_import.
1034 The function may fail incorrectly when an earlier certificate was
1035 imported to the same gnutls_x509_crt_t structure.
1037 ** libgnutls-extra, libgnutls-openssl: Fix MinGW cross-compiling build error.
1039 ** tests: Made self-test mini-eagain take less time.
1043 ** API and ABI modifications:
1044 No changes since last version.
1046 * Version 2.8.2 (released 2009-08-10)
1048 ** libgnutls: Fix problem with NUL bytes in X.509 CN and SAN fields.
1049 By using a NUL byte in CN/SAN fields, it was possible to fool GnuTLS
1050 into 1) not printing the entire CN/SAN field value when printing a
1051 certificate and 2) cause incorrect positive matches when matching a
1052 hostname against a certificate. Some CAs apparently have poor
1053 checking of CN/SAN values and issue these (arguable invalid)
1054 certificates. Combined, this can be used by attackers to become a
1055 MITM on server-authenticated TLS sessions. The problem is mitigated
1056 since attackers needs to get one certificate per site they want to
1057 attack, and the attacker reveals his tracks by applying for a
1058 certificate at the CA. It does not apply to client authenticated TLS
1059 sessions. Research presented independently by Dan Kaminsky and Moxie
1060 Marlinspike at BlackHat09. Thanks to Tomas Hoger <thoger@redhat.com>
1061 for providing one part of the patch. [GNUTLS-SA-2009-4].
1063 ** libgnutls: Fix return value of gnutls_certificate_client_get_request_status.
1064 Before it always returned false. Reported by Peter Hendrickson
1065 <pdh@wiredyne.com> in
1066 <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3668>.
1068 ** libgnutls: Fix off-by-one size computation error in unknown DN printing.
1069 The error resulted in truncated strings when printing unknown OIDs in
1070 X.509 certificate DNs. Reported by Tim Kosse
1071 <tim.kosse@filezilla-project.org> in
1072 <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3651>.
1074 ** libgnutls: Return correct bit lengths of some MPIs.
1075 gnutls_dh_get_prime_bits, gnutls_rsa_export_get_modulus_bits, and
1076 gnutls_dh_get_peers_public_bits. Before the reported value was
1077 overestimated. Reported by Peter Hendrickson <pdh@wiredyne.com> in
1078 <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3607>.
1080 ** libgnutls: Avoid internal error when invoked after GNUTLS_E_AGAIN.
1081 Report and patch by Tim Kosse <tim.kosse@filezilla-project.org> in
1082 <http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3671>
1084 <http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3670>.
1086 ** libgnutls: Relax checking of required libtasn1/libgcrypt versions.
1087 Before we required that the runtime library used the same (or more
1088 recent) libgcrypt/libtasn1 as it was compiled with. Now we just check
1089 that the runtime usage is above the minimum required. Reported by
1090 Marco d'Itri <md@linux.it> via Andreas Metzler
1091 <ametzler@downhill.at.eu.org> in <http://bugs.debian.org/540449>.
1093 ** minitasn1: Internal copy updated to libtasn1 v2.3.
1095 ** tests: Fix failure in "chainverify" because a certificate have expired.
1097 ** API and ABI modifications:
1098 No changes since last version.
1100 * Version 2.8.1 (released 2009-06-10)
1102 ** libgnutls: Fix crash in gnutls_global_init after earlier init/deinit cycle.
1103 Forwarded by Martin von Gagern <Martin.vGagern@gmx.net> from
1104 <http://bugs.gentoo.org/272388>.
1106 ** libgnutls: Fix PKCS#12 decryption from password.
1107 The encryption key derived from the password was incorrect for (on
1108 average) 1 in every 128 input for random inputs. Reported by "Kukosa,
1109 Tomas" <tomas.kukosa@siemens-enterprise.com> in
1110 <http://permalink.gmane.org/gmane.network.gnutls.general/1663>.
1112 ** API and ABI modifications:
1113 No changes since last version.
1115 * Version 2.8.0 (released 2009-05-27)
1117 ** doc: Fix gnutls_dh_get_prime_bits. Fix error codes and algorithm lists.
1119 ** Major changes compared to the v2.4 branch:
1121 *** lib: Linker version scripts reduces number of exported symbols.
1123 *** lib: Limit exported symbols on systems without LD linker scripts.
1125 *** libgnutls: Fix namespace issue with version symbols.
1127 *** libgnutls: Add functions to verify a hash against a certificate.
1128 gnutls_x509_crt_verify_hash: ADDED
1129 gnutls_x509_crt_get_verify_algorithm: ADDED
1131 *** gnutls-serv: Listen on all interfaces, including both IPv4 and IPv6.
1133 *** i18n: The GnuTLS gettext domain is now 'libgnutls' instead of 'gnutls'.
1135 *** certtool: Query for multiple dnsName subjectAltName in interactive mode.
1137 *** gnutls-cli: No longer accepts V1 CAs by default during X.509 chain verify.
1139 *** gnutls-serv: No longer disable MAC padding by default.
1141 *** gnutls-cli: Certificate information output format changed.
1143 *** libgnutls: New priority strings %VERIFY_ALLOW_SIGN_RSA_MD5
1144 *** and %VERIFY_ALLOW_X509_V1_CA_CRT.
1146 *** libgnutls: gnutls_x509_crt_print prints signature algorithm in oneline mode.
1148 *** libgnutls: gnutls_openpgp_crt_print supports oneline mode.
1150 *** libgnutls: gnutls_handshake when sending client hello during a
1151 rehandshake, will not offer a version number larger than the current.
1153 *** libgnutls: New interface to get key id for certificate requests.
1154 gnutls_x509_crq_get_key_id: ADDED.
1156 *** libgnutls: gnutls_x509_crq_print will now also print public key id.
1158 *** certtool: --verify-chain now prints results of using library verification.
1160 *** libgnutls: Libgcrypt initialization changed.
1162 *** libgnutls: Small byte reads via gnutls_record_recv() optimized.
1164 *** gnutls-cli: Return non-zero exit code on error conditions.
1166 *** gnutls-cli: Corrected bug which caused a rehandshake request to be ignored.
1168 *** certtool: allow setting arbitrary key purpose object identifiers.
1170 *** libgnutls: Change detection of when to use a linker version script.
1171 Use --enable-ld-version-script or --disable-ld-version-script to
1172 override auto-detection logic.
1174 *** Fix warnings and build GnuTLS with more warnings enabled.
1176 *** New API to set X.509 credentials from PKCS#12 memory structure.
1177 gnutls_certificate_set_x509_simple_pkcs12_mem: ADDED
1179 *** Old libgnutls.m4 and libgnutls-config scripts removed.
1180 Please use pkg-config instead.
1182 *** libgnutls: Added functions to handle CRL extensions.
1183 gnutls_x509_crl_get_authority_key_id: ADDED
1184 gnutls_x509_crl_get_number: ADDED
1185 gnutls_x509_crl_get_extension_oid: ADDED
1186 gnutls_x509_crl_get_extension_info: ADDED
1187 gnutls_x509_crl_get_extension_data: ADDED
1188 gnutls_x509_crl_set_authority_key_id: ADDED
1189 gnutls_x509_crl_set_number: ADDED
1191 *** libgnutls: Added functions to handle X.509 extensions in Certificate
1193 gnutls_x509_crq_get_key_rsa_raw: ADDED
1194 gnutls_x509_crq_get_attribute_info: ADDED
1195 gnutls_x509_crq_get_attribute_data: ADDED
1196 gnutls_x509_crq_get_extension_info: ADDED
1197 gnutls_x509_crq_get_extension_data: ADDED
1198 gnutls_x509_crq_get_key_usage: ADDED
1199 gnutls_x509_crq_get_basic_constraints: ADDED
1200 gnutls_x509_crq_get_subject_alt_name: ADDED
1201 gnutls_x509_crq_get_subject_alt_othername_oid: ADDED
1202 gnutls_x509_crq_get_extension_by_oid: ADDED
1203 gnutls_x509_crq_set_subject_alt_name: ADDED
1204 gnutls_x509_crq_set_basic_constraints: ADDED
1205 gnutls_x509_crq_set_key_usage: ADDED
1206 gnutls_x509_crq_get_key_purpose_oid: ADDED
1207 gnutls_x509_crq_set_key_purpose_oid: ADDED
1208 gnutls_x509_crq_print: ADDED
1209 gnutls_x509_crt_set_crq_extensions: ADDED
1211 *** certtool: Print and set CRL and CRQ extensions.
1213 *** minitasn1: Internal copy updated to libtasn1 v2.1.
1215 *** examples: Now released into the public domain.
1217 *** The Texinfo and GTK-DOC manuals were improved.
1219 *** Several self-tests were added and others improved.
1221 *** API/ABI changes in GnuTLS 2.8 compared to GnuTLS 2.6.x
1222 No offically supported interfaces have been modified or removed. The
1223 library should be completely backwards compatible on both the source
1226 The shared library no longer exports some symbols that have never been
1227 officially supported, i.e., not mentioned in any of the header files.
1233 Normally when symbols are removed, the shared library version has to
1234 be incremented. This leads to a significant cost for everyone using
1235 the library. Because none of the above symbols have ever been
1236 intended for use by well-behaved applications, we decided that the it
1237 would be better for those applications to pay the price rather than
1238 incurring problems on the majority of applications.
1240 If it turns out that applications have been using unofficial
1241 interfaces, we will need to release a follow-on release on the v2.8
1242 branch to exports additional interfaces. However, initial testing
1243 suggests that few if any applications have been using any of the
1246 Although not a new change compared to 2.6.x, we'd like to remind you
1247 interfaces have been modified so that X.509 chain verification now
1248 also checks activation/expiration times on certificates. The affected
1251 gnutls_x509_crt_list_verify: CHANGED, checks activation/expiration times.
1252 gnutls_certificate_verify_peers: Likewise.
1253 gnutls_certificate_verify_peers2: Likewise.
1254 GNUTLS_CERT_NOT_ACTIVATED: ADDED.
1255 GNUTLS_CERT_EXPIRED: ADDED.
1256 GNUTLS_VERIFY_DISABLE_TIME_CHECKS: ADDED.
1258 This change in behaviour was made during the GnuTLS 2.6.x cycle, and
1259 we gave our rationale for it in earlier release notes.
1261 The following symbols have been added to the library:
1263 gnutls_certificate_set_x509_simple_pkcs12_mem: ADDED
1264 gnutls_x509_crl_get_authority_key_id: ADDED
1265 gnutls_x509_crl_get_extension_data: ADDED
1266 gnutls_x509_crl_get_extension_info: ADDED
1267 gnutls_x509_crl_get_extension_oid: ADDED
1268 gnutls_x509_crl_get_number: ADDED
1269 gnutls_x509_crl_set_authority_key_id: ADDED
1270 gnutls_x509_crl_set_number: ADDED
1271 gnutls_x509_crq_get_attribute_data: ADDED
1272 gnutls_x509_crq_get_attribute_info: ADDED
1273 gnutls_x509_crq_get_basic_constraints: ADDED
1274 gnutls_x509_crq_get_extension_by_oid: ADDED
1275 gnutls_x509_crq_get_extension_data: ADDED
1276 gnutls_x509_crq_get_extension_info: ADDED
1277 gnutls_x509_crq_get_key_id: ADDED.
1278 gnutls_x509_crq_get_key_purpose_oid: ADDED
1279 gnutls_x509_crq_get_key_rsa_raw: ADDED
1280 gnutls_x509_crq_get_key_usage: ADDED
1281 gnutls_x509_crq_get_subject_alt_name: ADDED
1282 gnutls_x509_crq_get_subject_alt_othername_oid: ADDED
1283 gnutls_x509_crq_print: ADDED
1284 gnutls_x509_crq_set_basic_constraints: ADDED
1285 gnutls_x509_crq_set_key_purpose_oid: ADDED
1286 gnutls_x509_crq_set_key_usage: ADDED
1287 gnutls_x509_crq_set_subject_alt_name: ADDED
1288 gnutls_x509_crt_get_verify_algorithm: ADDED
1289 gnutls_x509_crt_set_crq_extensions: ADDED
1290 gnutls_x509_crt_verify_hash: ADDED
1292 The following interfaces have been added to the header files:
1294 GNUTLS_VERSION: ADDED, replaces LIBGNUTLS_VERSION.
1295 GNUTLS_VERSION_MAJOR: ADDED, replaces LIBGNUTLS_VERSION_MAJOR.
1296 GNUTLS_VERSION_MINOR: ADDED, replaces LIBGNUTLS_VERSION_MINOR.
1297 GNUTLS_VERSION_PATCH: ADDED, replaces LIBGNUTLS_VERSION_PATCH.
1298 GNUTLS_VERSION_NUMBER: ADDED, replaces LIBGNUTLS_VERSION_NUMBER.
1299 GNUTLS_EXTRA_VERSION: ADDED, replaces LIBGNUTLS_EXTRA_VERSION.
1301 The following interfaces have been deprecated:
1303 LIBGNUTLS_VERSION: DEPRECATED.
1304 LIBGNUTLS_VERSION_MAJOR: DEPRECATED.
1305 LIBGNUTLS_VERSION_MINOR: DEPRECATED.
1306 LIBGNUTLS_VERSION_PATCH: DEPRECATED.
1307 LIBGNUTLS_VERSION_NUMBER: DEPRECATED.
1308 LIBGNUTLS_EXTRA_VERSION: DEPRECATED.
1310 * Version 2.7.14 (released 2009-05-26)
1312 ** libgnutls: Fix namespace issue with version symbol for libgnutls-extra.
1313 The symbol LIBGNUTLS_EXTRA_VERSION were renamed to
1314 GNUTLS_EXTRA_VERSION. The old symbol will continue to work but is
1317 ** Doc: Several typo fixes in documentation.
1318 Reported by Peter Hendrickson <pdh@wiredyne.com>.
1320 ** API and ABI modifications:
1321 GNUTLS_VERSION: ADDED, replaces LIBGNUTLS_EXTRA_VERSION.
1322 LIBGNUTLS_EXTRA_VERSION: DEPRECATED.
1324 * Version 2.7.13 (released 2009-05-25)
1326 ** libgnutls: Fix version of some exported symbols in the shared library.
1327 Reported by Andreas Metzler <ametzler@downhill.at.eu.org> in
1328 <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3576>.
1330 ** tests: Handle recently expired certificates in chainverify self-test.
1331 Reported by Andreas Metzler <ametzler@downhill.at.eu.org> in
1332 <http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3580>.
1334 ** API and ABI modifications:
1335 No changes since last version.
1337 * Version 2.7.12 (released 2009-05-20)
1339 ** gnutls-serv, gnutls-cli-debug: Make them work on Windows.
1341 ** tests/crq_key_id: Don't read entropy from /dev/random in self-test.
1342 Reported by Andreas Metzler <ametzler@downhill.at.eu.org> in
1343 <http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3570>.
1345 ** Fix build failures.
1346 Missing sa_family_t and vsnprintf on IRIX. Reported by "Tom
1347 G. Christensen" <tgc@jupiterrise.com> in
1348 <http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3571>.
1350 ** minitasn1: Internal copy updated to libtasn1 v2.2.
1351 GnuTLS should work fine with libtasn1 v1.x and that is still
1354 ** API and ABI modifications:
1355 No changes since last version.
1357 * Version 2.7.11 (released 2009-05-18)
1359 ** minitasn1: Fix build failure when using internal libtasn1.
1360 Reported by "Tom G. Christensen" <tgc@jupiterrise.com> in
1361 <http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3548>.
1363 ** libgnutls: Fix build failure with --disable-cxx.
1364 Reported by Andreas Metzler <ametzler@downhill.at.eu.org> in
1365 <http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3557>.
1367 ** gnutls-serv: Fix build failure for unportable NI_MAXHOST/NI_MAXSERV.
1368 Reported by "Tom G. Christensen" <tgc@jupiterrise.com> in
1369 <http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3560>
1371 ** Building with many warning flags now requires --enable-gcc-warnings.
1372 This avoids crying wolf for normal compiles.
1374 ** API and ABI modifications:
1375 No changes since last version.
1377 * Version 2.7.10 (released 2009-05-13)
1379 ** examples: Now released into the public domain.
1380 This makes the license of the example code compatible with more
1381 licenses, including the (L)GPL.
1383 ** minitasn1: Internal copy updated to libtasn1 v2.1.
1384 GnuTLS should work fine with libtasn1 v1.x and that is still
1387 ** libgnutls: Fix crash in signature verification
1388 The fix for the CVE-2009-1415 problem wasn't merged completely.
1390 ** doc: Fixes for GTK-DOC output.
1392 ** API and ABI modifications:
1393 No changes since last version.
1395 * Version 2.7.9 (released 2009-05-11)
1397 ** doc: Fix strings in man page of gnutls_priority_init.
1399 ** doc: Fix tables of error codes and supported algorithms.
1401 ** Fix build failure when cross-compiled using MinGW.
1403 ** Fix build failure when LZO is enabled.
1404 Reported by Arfrever Frehtes Taifersar Arahesis
1405 <arfrever.fta@gmail.com> in
1406 <http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3522>.
1408 ** Fix build failure on systems without AF_INET6, e.g., Solaris 2.6.
1409 Reported by "Tom G. Christensen" <tgc@jupiterrise.com> in
1410 <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3524>.
1412 ** Fix warnings in self-tests.
1414 ** API and ABI modifications:
1415 No changes since last version.
1417 * Version 2.7.8 (released 2009-05-03)
1419 ** libgnutls: Fix DSA key generation.
1420 Merged from stable branch. [GNUTLS-SA-2009-2] [CVE-2009-1416]
1422 ** libgnutls: Check expiration/activation time on untrusted certificates.
1423 Merged from stable branch. Reported by Romain Francoise
1424 <romain@orebokech.com>. This changes the semantics of
1425 gnutls_x509_crt_list_verify, which in turn is used by
1426 gnutls_certificate_verify_peers and gnutls_certificate_verify_peers2.
1427 We add two new gnutls_certificate_status_t codes for reporting the new
1428 error condition, GNUTLS_CERT_NOT_ACTIVATED and GNUTLS_CERT_EXPIRED.
1429 We also add a new gnutls_certificate_verify_flags flag,
1430 GNUTLS_VERIFY_DISABLE_TIME_CHECKS, that can be used to disable the new
1431 behaviour. [GNUTLS-SA-2009-3] [CVE-2009-1417]
1433 ** lib: Linker version scripts reduces number of exported symbols.
1434 The linker version script now lists all exported ABIs explicitly, to
1435 avoid accidentally exporting unintended functions. Compared to
1436 before, most symbols beginning with _gnutls* are no longer exported.
1437 These functions have never been intended for use by applications, and
1438 there were no prototypes for these function in the public header
1439 files. Thus we believe it is possible to do this without incrementing
1440 the library ABI version which normally has to be done when removing an
1443 ** lib: Limit exported symbols on systems without LD linker scripts.
1444 Before all symbols were exported. Now we limit the exported symbols
1445 to (for libgnutls and libgnutls-extra) gnutls* and (for libgnutls)
1446 _gnutls*. This is a superset of the actual supported ABI, but still
1447 an improvement compared to before. This is implemented using Libtool
1448 -export-symbols-regex. It is more portable than linker version
1451 ** libgnutls: Incremented CURRENT/AGE libtool version to reflect new symbols.
1452 This should have been done in the last release.
1454 ** gnutls-serv: Listen on all interfaces, including both IPv4 and IPv6.
1455 Reported by Peter Hendrickson <pdh@wiredyne.com> in
1456 <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3476>.
1458 ** doc: Improved sections for the info manual.
1459 We now follow the advice given by the texinfo manual on which
1460 directory categories to use. In particular, libgnutls moved from the
1461 'GNU Libraries' section to the 'Software libraries' and the command
1462 line tools moved from 'Network Applications' to 'System
1465 ** API and ABI modifications:
1466 gnutls_x509_crt_list_verify: CHANGED, checks activation/expiration times.
1467 gnutls_certificate_verify_peers: Likewise.
1468 gnutls_certificate_verify_peers2: Likewise.
1469 GNUTLS_CERT_NOT_ACTIVATED: ADDED.
1470 GNUTLS_CERT_EXPIRED: ADDED.
1471 GNUTLS_VERIFY_DISABLE_TIME_CHECKS: ADDED.
1473 * Version 2.7.7 (released 2009-04-20)
1475 ** libgnutls: Applied patch by Cedric Bail to add functions
1476 gnutls_x509_crt_verify_hash() and gnutls_x509_crt_get_verify_algorithm().
1478 ** gnutls.pc: Add -ltasn1 to 'pkg-config --libs --static gnutls' output.
1479 Reported by Andreas Metzler <ametzler@downhill.at.eu.org> in
1480 <http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3467>.
1482 ** minitasn1: Internal copy updated to libtasn1 v1.8.
1483 GnuTLS is also internally ready to be used with libtasn1 v2.0.
1485 ** doc: Fix build failure of errcodes/printlist.
1486 Reported by Roman Bogorodskiy <novel@FreeBSD.org> in
1487 <http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3435>.
1489 ** i18n: The GnuTLS gettext domain is now 'libgnutls' instead of 'gnutls'.
1490 It is currently only used by the core library. This will enable a new
1491 domain 'gnutls' for translations of the command line tools.
1493 ** Corrected possible memory corruption on signature verification failure.
1494 Reported by Miroslav Kratochvil <exa.exa@gmail.com>
1496 ** API and ABI modifications:
1497 gnutls_x509_crt_verify_hash: ADDED
1498 gnutls_x509_crt_get_verify_algorithm: ADDED
1500 * Version 2.7.6 (released 2009-02-27)
1502 ** certtool: Query for multiple dnsName subjectAltName in interactive mode.
1503 This applies both to generating certificates and certificate requests.
1505 ** pkix.asn: Removed unneeded definitions to reduce memory usage.
1507 ** gnutls-cli: No longer accepts V1 CAs by default during X.509 chain verify.
1508 Use --priority NORMAL:%VERIFY_ALLOW_X509_V1_CA_CRT to permit V1 CAs to
1509 be used for chain verification.
1511 ** gnutls-serv: No longer disable MAC padding by default.
1512 Use --priority NORMAL:%COMPAT to disable MAC padding again.
1514 ** gnutls-cli: Certificate information output format changed.
1515 The tool now uses libgnutls' functions to print certificate
1516 information. This avoids code duplication.
1518 ** libgnutls: New priority strings %VERIFY_ALLOW_SIGN_RSA_MD5
1519 ** and %VERIFY_ALLOW_X509_V1_CA_CRT.
1520 They can be used to override the default certificate chain validation
1523 ** libgnutls: Added %SSL3_RECORD_VERSION priority string that allows to
1524 specify the client hello message record version. Used to overcome buggy
1525 TLS servers. Report by Martin von Gagern.
1527 ** libgnutls: gnutls_x509_crt_print prints signature algorithm in oneline mode.
1529 ** libgnutls: gnutls_openpgp_crt_print supports oneline mode.
1531 ** doc: Update gnutls-cli and gnutls-serv --help output descriptions.
1533 ** API and ABI modifications:
1534 No changes since last version.
1536 * Version 2.7.5 (released 2009-02-06)
1538 ** libgnutls: Accept chains where intermediary certs are trusted.
1539 Before GnuTLS needed to validate the entire chain back to a
1540 self-signed certificate. GnuTLS will now stop looking when it has
1541 found an intermediary trusted certificate. The new behaviour is
1542 useful when chains, for example, contains a top-level CA, an
1543 intermediary CA signed using RSA-MD5, and an end-entity certificate.
1544 To avoid chain validation errors due to the RSA-MD5 cert, you can
1545 explicitly add the intermediary RSA-MD5 cert to your trusted certs.
1546 The signature on trusted certificates are not checked, so the chain
1547 has a chance to validate correctly. Reported by "Douglas E. Engert"
1548 <deengert@anl.gov> in
1549 <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3351>.
1551 ** libgnutls: result_size in gnutls_hex_encode now holds
1552 the size of the result. Report by John Brooks <special@dereferenced.net>.
1554 ** libgnutls: gnutls_handshake when sending client hello during a
1555 rehandshake, will not offer a version number larger than the current.
1556 Reported by Tristan Hill <stan@saticed.me.uk>.
1558 ** libgnutls: Permit V1 Certificate Authorities properly.
1559 Before they were mistakenly rejected even though
1560 GNUTLS_VERIFY_ALLOW_ANY_X509_V1_CA_CRT and/or
1561 GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT were supplied. Reported by
1562 "Douglas E. Engert" <deengert@anl.gov> in
1563 <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3351>.
1565 ** API and ABI modifications:
1566 No changes since last version.
1568 * Version 2.7.4 (released 2009-01-07)
1570 ** libgnutls: deprecate X.509 validation chains using MD5 and MD2 signatures.
1571 This is a bugfix -- the previous attempt to do this from internal x509
1572 certificate verification procedures did not return the correct value
1573 for certificates using a weak hash. Reported by Daniel Kahn Gillmor
1574 <dkg@fifthhorseman.net> in
1575 <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3332>,
1576 debugged and patch by Tomas Mraz <tmraz@redhat.com> and Daniel Kahn
1577 Gillmor <dkg@fifthhorseman.net>.
1579 ** libgnutls: New interface to get key id for certificate requests.
1580 Patch from David MarÃn Carreño <davefx@gmail.com> in
1581 <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3321>.
1583 ** libgnutls: gnutls_x509_crq_print will now also print public key id.
1585 ** certtool: --verify-chain now prints results of using library verification.
1586 Earlier, certtool --verify-chain used its own validation algorithm
1587 which wasn't guaranteed to give the same result as the libgnutls
1588 internal validation algorithm. Now this command print a new final
1589 line with header 'Chain verification output:' that contains the result
1590 from using the internal verification algorithm on the same chain.
1592 ** tests: Add crq_key_id self-test of gnutls_x509_crq_get_key_id.
1594 ** API and ABI modifications:
1595 gnutls_x509_crq_get_key_id: ADDED.
1597 * Version 2.7.3 (released 2008-12-10)
1599 ** libgnutls: Fix chain verification for chains that ends with RSA-MD2 CAs.
1600 Reported by Michael Kiefer <Michael-Kiefer@web.de> in
1601 <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507633> forwarded by
1602 Andreas Metzler <ametzler@downhill.at.eu.org> in
1603 <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3309>.
1605 ** libgnutls: Libgcrypt initialization changed.
1606 If libgcrypt has not already been initialized, GnuTLS will now
1607 initialize libgcrypt with disabled secure memory. Initialize
1608 libgcrypt explicitly in your application if you want to enable secure
1609 memory. Before GnuTLS initialized libgcrypt to use GnuTLS's memory
1610 allocation functions, which doesn't use secure memory, so there is no
1611 real change in behaviour.
1613 ** libgnutls: Fix memory leak in PSK authentication.
1614 Reported by Michael Weiser <michael@weiser.dinsnail.net> in
1615 <http://permalink.gmane.org/gmane.network.gnutls.general/1465>.
1617 ** libgnutls: Small byte reads via gnutls_record_recv() optimized.
1619 ** certtool: Move gcry_control(GCRYCTL_ENABLE_QUICK_RANDOM, 0) call earlier.
1620 It needs to be invoked before libgcrypt is initialized.
1622 ** gnutls-cli: Return non-zero exit code on error conditions.
1624 ** gnutls-cli: Corrected bug which caused a rehandshake request to be ignored.
1626 ** tests: Added chainverify self-test that tests X.509 chain verifications.
1628 ** API and ABI modifications:
1629 No changes since last version.
1631 * Version 2.7.2 (released 2008-11-18)
1633 ** libgnutls: Fix X.509 certificate chain validation error. [GNUTLS-SA-2008-3]
1634 The flaw makes it possible for man in the middle attackers (i.e.,
1635 active attackers) to assume any name and trick GnuTLS clients into
1636 trusting that name. Thanks for report and analysis from Martin von
1637 Gagern <Martin.vGagern@gmx.net>. [CVE-2008-4989]
1639 Any updates with more details about this vulnerability will be added
1640 to <http://www.gnu.org/software/gnutls/security.html>
1642 ** libgnutls: Fix namespace issue with version symbols.
1643 The symbols LIBGNUTLS_VERSION, LIBGNUTLS_VERSION_MAJOR,
1644 LIBGNUTLS_VERSION_MINOR, LIBGNUTLS_VERSION_PATCH, and
1645 LIBGNUTLS_VERSION_NUMBER were renamed to GNUTLS_VERSION_NUMBER,
1646 GNUTLS_VERSION_MAJOR, GNUTLS_VERSION_MINOR, GNUTLS_VERSION_PATCH, and
1647 GNUTLS_VERSION_NUMBER respectively. The old symbols will continue to
1648 work but are deprecated.
1650 ** certtool: allow setting arbitrary key purpose object identifiers.
1652 ** libgnutls: Fix detection of C99 macros, to make debug logging work again.
1654 ** libgnutls: Add missing prototype for gnutls_srp_set_prime_bits.
1655 Reported by Kevin Quick <quick@sparq.org> in
1656 <https://savannah.gnu.org/support/index.php?106454>.
1658 ** libgnutls-extra: Make building with LZO compression work again.
1659 Build failure reported by Arfrever Frehtes Taifersar Arahesis
1660 <arfrever.fta@gmail.com> in
1661 <http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3194>.
1663 ** libgnutls: Change detection of when to use a linker version script.
1664 Use --enable-ld-version-script or --disable-ld-version-script to
1665 override auto-detection logic.
1667 ** doc: Change license on the manual to GFDLv1.3+.
1669 ** doc: GTK-DOC fixes for new splitted configuration system.
1671 ** doc: Texinfo stylesheet uses white background.
1673 ** tests: Add cve-2008-4989.c self-test.
1674 Tests regressions of the GNUTLS-SA-2008-3 security problem, and the
1675 follow-on problem with crashes on length 1 certificate chains.
1677 ** gnulib: Deprecated modules removed.
1678 Modules include memchr and memcmp.
1680 ** Fix warnings and build GnuTLS with more warnings enabled.
1682 ** minitasn1: Internal copy updated to libtasn1 v1.7.
1684 ** API and ABI modifications:
1685 gnutls_certificate_set_x509_simple_pkcs12_mem: ADDED
1686 GNUTLS_VERSION: ADDED, replaces LIBGNUTLS_VERSION.
1687 GNUTLS_VERSION_MAJOR: ADDED, replaces LIBGNUTLS_VERSION_MAJOR.
1688 GNUTLS_VERSION_MINOR: ADDED, replaces LIBGNUTLS_VERSION_MINOR.
1689 GNUTLS_VERSION_PATCH: ADDED, replaces LIBGNUTLS_VERSION_PATCH.
1690 GNUTLS_VERSION_NUMBER: ADDED, replaces LIBGNUTLS_VERSION_NUMBER.
1691 LIBGNUTLS_VERSION: DEPRECATED.
1692 LIBGNUTLS_VERSION_MAJOR: DEPRECATED.
1693 LIBGNUTLS_VERSION_MINOR: DEPRECATED.
1694 LIBGNUTLS_VERSION_PATCH: DEPRECATED.
1695 LIBGNUTLS_VERSION_NUMBER: DEPRECATED.
1697 * Version 2.7.1 (released 2008-10-31)
1699 ** certtool: print a PKCS #8 key even if it is not encrypted.
1701 ** Old libgnutls.m4 and libgnutls-config scripts removed.
1702 Please use pkg-config instead.
1704 ** Configuration system modified.
1705 There is now a configure script in lib/ and libextra/ as well, because
1706 gnulib works better with a config.h per gnulib directory.
1708 ** API and ABI modifications:
1709 No changes since last version.
1711 * Version 2.7.0 (released 2008-10-16)
1713 ** libgnutls: Added functions to handle CRL extensions.
1715 ** libgnutls: Added functions to handle X.509 extensions in Certificate
1718 ** libgnutls: Improved error string for GNUTLS_E_AGAIN.
1719 Suggested by "Lavrentiev, Anton (NIH/NLM/NCBI) [C]" <lavr@ncbi.nlm.nih.gov>.
1721 ** certtool: Print and set CRL and CRQ extensions.
1723 ** libgnutls-extra: Protect internal symbols with static.
1724 Fixes problem when linking certtool statically. Tiny patch from Aaron
1725 Ucko <ucko@ncbi.nlm.nih.gov>.
1727 ** libgnutls-openssl: fix out of bounds access.
1728 Problem in X509_get_subject_name and X509_get_issuer_name. Tiny patch
1729 from Thomas Viehmann <tv@beamnet.de>.
1731 ** libgnutlsxx: Define server_session::get_srp_username even if no SRP.
1733 ** tests: Make tests compile when using internal libtasn1.
1734 Patch by ludo@gnu.org (Ludovic Courtès).
1736 ** Changed detection of libtasn1 and libgcrypt to avoid depending on *-config.
1737 We now require a libgcrypt that has Camellia constants declared in
1738 gcrypt.h, which means v1.3.0 or later.
1740 ** API and ABI modifications:
1741 gnutls_x509_crl_get_authority_key_id: ADDED
1742 gnutls_x509_crl_get_number: ADDED
1743 gnutls_x509_crl_get_extension_oid: ADDED
1744 gnutls_x509_crl_get_extension_info: ADDED
1745 gnutls_x509_crl_get_extension_data: ADDED
1746 gnutls_x509_crl_set_authority_key_id: ADDED
1747 gnutls_x509_crl_set_number: ADDED
1748 gnutls_x509_crq_get_key_rsa_raw: ADDED
1749 gnutls_x509_crq_get_attribute_info: ADDED
1750 gnutls_x509_crq_get_attribute_data: ADDED
1751 gnutls_x509_crq_get_extension_info: ADDED
1752 gnutls_x509_crq_get_extension_data: ADDED
1753 gnutls_x509_crq_get_key_usage: ADDED
1754 gnutls_x509_crq_get_basic_constraints: ADDED
1755 gnutls_x509_crq_get_subject_alt_name: ADDED
1756 gnutls_x509_crq_get_subject_alt_othername_oid: ADDED
1757 gnutls_x509_crq_get_extension_by_oid: ADDED
1758 gnutls_x509_crq_set_subject_alt_name: ADDED
1759 gnutls_x509_crq_set_basic_constraints: ADDED
1760 gnutls_x509_crq_set_key_usage: ADDED
1761 gnutls_x509_crq_get_key_purpose_oid: ADDED
1762 gnutls_x509_crq_set_key_purpose_oid: ADDED
1763 gnutls_x509_crq_print: ADDED
1764 gnutls_x509_crt_set_crq_extensions: ADDED
1766 * Version 2.6.6 (released 2009-04-30)
1768 ** libgnutls: Corrected double free on signature verification failure.
1769 Reported by Miroslav Kratochvil <exa.exa@gmail.com>. See the advisory
1770 for more details. [GNUTLS-SA-2009-1] [CVE-2009-1415]
1772 ** libgnutls: Fix DSA key generation.
1773 Noticed when investigating the previous GNUTLS-SA-2009-1 problem. All
1774 DSA keys generated using GnuTLS 2.6.x are corrupt. See the advisory
1775 for more details. [GNUTLS-SA-2009-2] [CVE-2009-1416]
1777 ** libgnutls: Check expiration/activation time on untrusted certificates.
1778 Reported by Romain Francoise <romain@orebokech.com>. Before the
1779 library did not check activation/expiration times on certificates, and
1780 was documented as not doing so. We have realized that many
1781 applications that use libgnutls, including gnutls-cli, fail to perform
1782 proper checks. Implementing similar logic in all applications leads
1783 to code duplication. Hence, we decided to check whether the current
1784 time (as reported by the time function) is within the
1785 activation/expiration period of certificates when verifying untrusted
1788 This changes the semantics of gnutls_x509_crt_list_verify, which in
1789 turn is used by gnutls_certificate_verify_peers and
1790 gnutls_certificate_verify_peers2. We add two new
1791 gnutls_certificate_status_t codes for reporting the new error
1792 condition, GNUTLS_CERT_NOT_ACTIVATED and GNUTLS_CERT_EXPIRED. We also
1793 add a new gnutls_certificate_verify_flags flag,
1794 GNUTLS_VERIFY_DISABLE_TIME_CHECKS, that can be used to disable the new
1797 More details about the vulnerabilities will be posted at
1798 <http://www.gnu.org/software/gnutls/security.html>.
1800 ** gnutls-cli, gnutls-cli-debug: Fix AIX build problem.
1801 Reported by LAUPRETRE François (P) <francois.laupretre@ratp.fr> in
1802 <http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3468>.
1804 ** tests: Fix linking of tests/openpgp/keyring self-test.
1805 Reported by Daniel Black in <https://savannah.gnu.org/support/?106543>.
1807 ** API and ABI modifications:
1808 gnutls_x509_crt_list_verify: CHANGED, checks activation/expiration times.
1809 gnutls_certificate_verify_peers: Likewise.
1810 gnutls_certificate_verify_peers2: Likewise.
1811 GNUTLS_CERT_NOT_ACTIVATED: ADDED.
1812 GNUTLS_CERT_EXPIRED: ADDED.
1813 GNUTLS_VERIFY_DISABLE_TIME_CHECKS: ADDED.
1815 * Version 2.6.5 (released 2009-04-11)
1817 ** libgnutls: Added %SSL3_RECORD_VERSION priority string that allows to
1818 specify the client hello message record version. Used to overcome buggy
1819 TLS servers. Report by Martin von Gagern.
1821 ** GnuTLS no longer uses the libtasn1-config script to find libtasn1.
1822 Libtasn1 0.3.4 or later is required. This is to align with the
1823 upcoming libtasn1 v2.0 release that doesn't have a libtasn1-script.
1825 ** API and ABI modifications:
1826 No changes since last version.
1828 * Version 2.6.4 (released 2009-02-06)
1830 ** libgnutls: Accept chains where intermediary certs are trusted.
1831 Before GnuTLS needed to validate the entire chain back to a
1832 self-signed certificate. GnuTLS will now stop looking when it has
1833 found an intermediary trusted certificate. The new behaviour is
1834 useful when chains, for example, contains a top-level CA, an
1835 intermediary CA signed using RSA-MD5, and an end-entity certificate.
1836 To avoid chain validation errors due to the RSA-MD5 cert, you can
1837 explicitly add the intermediary RSA-MD5 cert to your trusted certs.
1838 The signature on trusted certificates are not checked, so the chain
1839 has a chance to validate correctly. Reported by "Douglas E. Engert"
1840 <deengert@anl.gov> in
1841 <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3351>.
1843 ** libgnutls: result_size in gnutls_hex_encode now holds
1844 the size of the result. Report by John Brooks <special@dereferenced.net>.
1846 ** libgnutls: gnutls_handshake when sending client hello during a
1847 rehandshake, will not offer a version number larger than the current.
1848 Reported by Tristan Hill <stan@saticed.me.uk>.
1850 ** libgnutls: Permit V1 Certificate Authorities properly.
1851 Before they were mistakenly rejected even though
1852 GNUTLS_VERIFY_ALLOW_ANY_X509_V1_CA_CRT and/or
1853 GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT were supplied. Reported by
1854 "Douglas E. Engert" <deengert@anl.gov> in
1855 <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3351>.
1857 ** libgnutls: deprecate X.509 validation chains using MD5 and MD2 signatures.
1858 This is a bugfix -- the previous attempt to do this from internal x509
1859 certificate verification procedures did not return the correct value
1860 for certificates using a weak hash. Reported by Daniel Kahn Gillmor
1861 <dkg@fifthhorseman.net> in
1862 <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3332>,
1863 debugged and patch by Tomas Mraz <tmraz@redhat.com> and Daniel Kahn
1864 Gillmor <dkg@fifthhorseman.net>.
1866 ** libgnutls: Fix compile error with Sun CC.
1867 Reported by Jeff Cai <jeff.cai@sun.com> in
1868 <https://savannah.gnu.org/support/?106549>.
1870 ** API and ABI modifications:
1871 No changes since last version.
1873 * Version 2.6.3 (released 2008-12-12)
1875 ** libgnutls: Fix chain verification for chains that ends with RSA-MD2 CAs.
1876 Reported by Michael Kiefer <Michael-Kiefer@web.de> in
1877 <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507633> forwarded by
1878 Andreas Metzler <ametzler@downhill.at.eu.org> in
1879 <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3309>.
1881 ** libgnutls: Fix memory leak in PSK authentication.
1882 Reported by Michael Weiser <michael@weiser.dinsnail.net> in
1883 <http://permalink.gmane.org/gmane.network.gnutls.general/1465>.
1885 ** certtool: Move gcry_control(GCRYCTL_ENABLE_QUICK_RANDOM, 0) call earlier.
1886 It needs to be invoked before libgcrypt is initialized.
1888 ** gnutls-cli: Return non-zero exit code on error conditions.
1890 ** gnutls-cli: Corrected bug which caused a rehandshake request to be ignored.
1892 ** API and ABI modifications:
1893 No changes since last version.
1895 * Version 2.6.2 (released 2008-11-12)
1897 ** libgnutls: Fix crash in X.509 validation code for self-signed certificates.
1898 The patch to fix the security problem GNUTLS-SA-2008-3 introduced a
1899 problem for certificate chains that contained just one self-signed
1900 certificate. Reported by Michael Meskes <meskes@debian.org> in
1901 <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505279>.
1903 ** API and ABI modifications:
1904 No changes since last version.
1906 * Version 2.6.1 (released 2008-11-10)
1908 ** libgnutls: Fix X.509 certificate chain validation error. [GNUTLS-SA-2008-3]
1909 The flaw makes it possible for man in the middle attackers (i.e.,
1910 active attackers) to assume any name and trick GnuTLS clients into
1911 trusting that name. Thanks for report and analysis from Martin von
1912 Gagern <Martin.vGagern@gmx.net>. [CVE-2008-4989]
1914 Any updates with more details about this vulnerability will be added
1915 to <http://www.gnu.org/software/gnutls/security.html>
1917 ** libgnutls: Add missing prototype for gnutls_srp_set_prime_bits.
1918 Reported by Kevin Quick <quick@sparq.org> in
1919 <https://savannah.gnu.org/support/index.php?106454>.
1921 ** libgnutls-extra: Protect internal symbols with static.
1922 Fixes problem when linking certtool statically. Tiny patch from Aaron
1923 Ucko <ucko@ncbi.nlm.nih.gov>.
1925 ** libgnutls-openssl: Fix patch against X509_get_issuer_name.
1926 It incorrectly returned the subject DN instead of issuer DN in v2.6.0.
1927 Thanks to Thomas Viehmann <tv@beamnet.de> for report.
1929 ** certtool: Print a PKCS #8 key even if it is not encrypted.
1931 ** tests: Make tests compile when using internal libtasn1.
1932 Patch by ludo@gnu.org (Ludovic Courtès).
1934 ** API and ABI modifications:
1935 No changes since last version.
1937 * Version 2.6.0 (released 2008-10-06)
1939 ** libgnutls: Correct printing and parsing of IPv6 addresses.
1941 ** libgnutls-openssl: fix out of bounds access.
1942 Problem in X509_get_subject_name and X509_get_issuer_name. Tiny patch
1943 from Thomas Viehmann <tv@beamnet.de>.
1945 ** certtool: Use inet_pton for parsing IPv6 addresses.
1947 ** Major changes compared to the v2.4 branch:
1949 *** Added API to replace and update the crypto backend.
1951 *** certtool: can add several subject alternative names via template file.
1953 *** opencdk: Parse (but not decrypt) encrypted secret keys.
1955 *** libgnutls: gnutls_x509_crt_set_subject_alt_name() was added that can
1956 either set or append alternative names. It can also handle binary structures
1957 such as IP addresses.
1959 *** libgnutls: New function to set minimum acceptable SRP bits.
1960 The function is gnutls_srp_set_prime_bits.
1962 *** libgnutls: Add interface to deal with public key and signature algorithms.
1963 The functions are called gnutls_pk_list, gnutls_pk_get_id,
1964 gnutls_sign_list, and gnutls_sign_get_id.
1966 *** libgnutls: New interfaces to get name of public key and signing algorithms.
1967 The functions are gnutls_sign_get_name and gnutls_pk_get_name.
1969 *** libgnutls: New API to get a string corresponding to a error symbol.
1970 The function is gnutls_strerror_name.
1972 *** libgnutls: New API to set the public parameters in a certificate request
1973 *** from a private key.
1974 The function is gnutls_x509_crq_set_key_rsa_raw.
1976 *** libgnutls: New API to set a callback to extract TLS Finished data.
1977 The function to register is gnutls_session_set_finished_function and
1978 it takes a callback of the gnutls_finished_callback_func type.
1980 *** libgnutls: Fix namespace problem with TLS_MASTER_SIZE and TLS_RANDOM_SIZE.
1982 *** libgnutls: New interface to register a new TLS extension handler.
1983 The new function gnutls_ext_register can be used to register handlers
1984 for specific TLS extension types. The callback functions have the new
1985 types gnutls_ext_recv_func and gnutls_ext_send_func. A type to
1986 classify TLS extensions, gnutls_ext_parse_type_t, has been added as
1989 *** libgnutls-extra: Add function to work with Libgcrypt in FIPS mode.
1990 The function is gnutls_register_md5_handler. When libgcrypt is in
1991 FIPS mode, MD5 is disabled, but TLS normally requires use of MD5 in
1994 *** API/ABI changes in GnuTLS 2.6
1995 No functions have been removed or modified. The library should be
1996 fully backwards compatible on both the source and binary level.
1998 A new header file <gnutls/crypto.h> have been added. It contains
1999 definitions related to replacing the internal crypto functionality.
2000 All definitions and the header itself is experimental but supported.
2002 We have realized that the symbols TLS_MASTER_SIZE and TLS_RANDOM_SIZE
2003 does not use the normal namespace. We have added GNUTLS_MASTER_SIZE
2004 and GNUTLS_RANDOM_SIZE, but the old symbols are still defined.
2006 The following functions have been added to libgnutls:
2010 gnutls_crypto_bigint_register2
2011 gnutls_crypto_cipher_register2
2012 gnutls_crypto_digest_register2
2013 gnutls_crypto_mac_register2
2014 gnutls_crypto_pk_register2
2015 gnutls_crypto_rnd_register2
2016 gnutls_crypto_single_cipher_register2
2017 gnutls_crypto_single_digest_register2
2018 gnutls_crypto_single_mac_register2
2023 gnutls_session_set_finished_function
2025 gnutls_sign_get_name
2027 gnutls_srp_set_prime_bits:
2028 gnutls_strerror_name
2029 gnutls_x509_crq_set_key_rsa_raw
2030 gnutls_x509_crt_set_crl_dist_points2
2031 gnutls_x509_crt_set_subject_alt_name
2033 The following functions have been added to libgnutls-extra:
2035 gnutls_register_md5_handler
2037 ** API and ABI modifications:
2038 No changes since last version.
2040 * Version 2.5.9 (released 2008-09-29)
2042 ** libgnutls: Fix several memory leaks.
2043 Reported by Sam Varshavchik <mrsam@courier-mta.com>.
2045 ** libgnutls: Fix buffer overrun in gnutls_x509_crt_list_import.
2046 Report and patch by Jonathan Manktelow.
2048 ** libgnutls: crypto.h gnutls_pk_params_st changes allocation strategy.
2049 The parameters are now allocated in the structure itself.
2051 ** doc: Texinfo HTML manual uses a stylesheet to improve readability.
2053 ** tests: Scripts now use EXEEXT properly.
2054 Modern libtool doesn't create wrapper script, so the self tests need
2055 to invoke certtool.exe under MinGW32+Wine.
2057 ** Uses autoconf 2.63, automake 1.10.1, libtool 2.2.6a.
2058 Automake warnings are now also enabled.
2060 ** API and ABI modifications:
2061 gnutls_pk_params_st: MODIFIED
2063 * Version 2.5.8 (released 2008-09-21)
2065 ** certtool: updated so it can add several subject alternative names using
2068 ** libgnutls: gnutls_x509_crt_set_subject_alt_name() was added that can
2069 either set or append alternative names. It can also handle binary structures
2070 such as IP addresses.
2072 ** libgnutls: Fix crash in hashing code when using non-libgcrypt handlers.
2074 ** libgnutls: New function to set minimum acceptable SRP bits.
2075 The function is gnutls_srp_set_prime_bits. Tiny patch by Kevin Quick
2076 <quick@sparq.org> in <https://savannah.gnu.org/support/index.php?106454>.
2078 ** libgnutls: Check for overflows in gnutls_calloc and gnutls_secure_calloc.
2079 Also fix overflows in calls to those functions. Reported by Werner
2080 Koch <wk@gnupg.org>.
2082 ** libgnutls-extra: Add function to work with Libgcrypt in FIPS mode.
2083 The function is gnutls_register_md5_handler. When libgcrypt is in
2084 FIPS mode, MD5 is disabled, but TLS normally requires use of MD5 in
2087 ** Opencdk: Add calls to gnutls_assert to ease debugging.
2091 ** API and ABI modifications:
2092 gnutls_srp_set_prime_bits: ADDED
2093 gnutls_register_md5_handler: ADDED
2094 gnutls_x509_crt_set_crl_dist_points2: ADDED
2095 gnutls_x509_crt_set_subject_alt_name: ADDED
2097 * Version 2.5.7 (released 2008-09-16)
2099 ** libgnutls: New interfaces to get name of public key and signing algorithms.
2100 The functions are gnutls_sign_get_name and gnutls_pk_get_name.
2102 ** libgnutls: Don't crash when gnutls_credentials_set is called twice.
2104 ** libgnutls: Fix libgnutls shared library version.
2105 It wasn't properly incremented after adding symbols in the last
2108 ** manual: Now mention supported public key and public key signing algorithms.
2110 ** tests/openssl: initialize gnutls before use.
2112 ** tests/setcredcrash: New test to catch regressions of gnutls_credentials_set.
2114 ** GTK-DOC manual: mention new symbols in 2.6.x. Mention crypto.h functions.
2116 ** API and ABI modifications:
2117 gnutls_sign_get_name: ADDED
2118 gnutls_pk_get_name: ADDED
2120 * Version 2.5.6 (released 2008-09-08)
2122 ** libgnutls: Add interface to deal with public key and signature algorithms.
2123 The functions are called gnutls_pk_list, gnutls_pk_get_id,
2124 gnutls_sign_list, and gnutls_sign_get_id. Suggested by Sam
2125 Varshavchik <mrsam@courier-mta.com>.
2127 ** libgnutls: Refactor and clean up some code.
2129 ** libgnutls: Fix compile error with Sun CC.
2131 ** gnutls-cli: Improve --list output to include public key and signature algs.
2133 ** gnutls-cli, gnutls-serv: Remove --copyright parameter.
2134 Use standard --version to get license info.
2136 ** gnutls-cli.1: Document all new parameters.
2137 Thanks to James Westby <jw+debian@jameswestby.net>.
2139 ** tests: New self-test pgps2kgnu to test parsing of encrypted secrets.
2140 Contributed by Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net>.
2142 ** API and ABI modifications:
2143 gnutls_pk_list: ADDED
2144 gnutls_pk_get_id: ADDED
2145 gnutls_sign_list: ADDED
2146 gnutls_sign_get_id: ADDED
2148 * Version 2.5.5 (released 2008-08-29)
2150 ** libgnutls: New API to get a string corresponding to a error symbol.
2151 The function is gnutls_strerror_name.
2153 ** libgnutls: Fix include paths so that building with internal libtasn1 works.
2154 Reported by "jth.net ApS" <info@jth.net>.
2156 ** libgnutls: Fix segmentation fault when generating private keys.
2157 Reported by Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net>.
2159 ** libgnutls: Remove code to import certificate chains in PKCS#7 format.
2160 The code has not worked since v0.9.0 and apparently nobody has missed
2161 it, so we decided to remove the code rather than fix it. If you have
2162 old certificate chains stored in PKCS#7 format, you can convert them
2163 to a list of PEM certificates by using 'certtool --p7-info'. Reported
2164 by Christian Grothoff <christian@grothoff.org>.
2166 ** opencdk: Parse (but not decrypt) encrypted secret keys.
2167 Contributed by Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net>.
2169 ** libgnutls: Fix many warnings.
2171 ** Included copy of libtasn1 is upgraded to version 1.5.
2173 ** Add French translation, thanks to Nicolas Provost.
2175 ** API and ABI modifications:
2176 gnutls_strerror_name: ADDED
2178 * Version 2.5.4 (released 2008-08-19)
2180 ** Fix secure memory initialization of libgcrypt.
2181 Reported by Joe Orton <joe@manyfish.co.uk> in
2182 <http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/2992>.
2185 Reference to NIST SP 800-57 in the manual on key size recommendations.
2186 Added 'Since:' tags to new APIs for gtk-doc.
2188 ** API and ABI modifications:
2189 No changes since last version.
2191 * Version 2.5.3 (released 2008-08-14)
2193 ** libgnutls: New API to set the public parameters in a certificate request
2194 ** from a private key.
2195 The function is gnutls_x509_crq_set_key_rsa_raw. Inspired by
2196 discussion with "Zach C." <fxchip@gmail.com>.
2198 ** libgnutls: New API to set a callback to extract TLS Finished data.
2199 The function to register is gnutls_session_set_finished_function and
2200 it takes a callback of the gnutls_finished_callback_func type.
2202 ** libgnutls: Drop final comma after GNUTLS_CRT_PRINT_UNSIGNED_FULL in enum.
2203 Reported in <https://savannah.gnu.org/support/?106453>.
2205 ** libgnutls: Fix namespace problem with TLS_MASTER_SIZE and TLS_RANDOM_SIZE.
2206 The new names are GNUTLS_MASTER_SIZE and GNUTLS_RANDOM_SIZE. The old
2207 names are mapped to the new names in compat.h. These mappings will
2208 likely be removed more quickly than other mappings in that file due to
2209 the namespace violation.
2211 ** libgnutlsxx: Make it build when SRP is disabled.
2213 ** doc: Add doxygen files in doc/doxygen/.
2215 ** API and ABI modifications:
2216 gnutls_x509_crq_set_key_rsa_raw: ADDED
2217 gnutls_session_set_finished_function: ADDED
2218 gnutls_finished_callback_func: ADDED
2219 GNUTLS_MASTER_SIZE: ADDED
2220 GNUTLS_RANDOM_SIZE: ADDED
2221 TLS_MASTER_SIZE: DEPRECATED
2222 TLS_RANDOM_SIZE: DEPRECATED
2224 * Version 2.5.2 (released 2008-07-08)
2226 ** libgnutls: Fix bug in gnutls_dh_params_generate2.
2227 The prime and generator was swapped.
2229 ** libgnutls: New interface to register a new TLS extension handler.
2230 The new function gnutls_ext_register can be used to register handlers
2231 for specific TLS extension types. The callback functions have the new
2232 types gnutls_ext_recv_func and gnutls_ext_send_func. A type to
2233 classify TLS extensions, gnutls_ext_parse_type_t, has been added as
2236 ** Move more code for TLS/IA extension from libgnutls to libgnutls-extra.
2237 This was made possible by using the new gnutls_ext_register interface.
2238 The TLS/IA functionality has only been supported through the
2239 libgnutls-extra library, so it makes sense for the code to belong
2242 ** API and ABI modifications:
2243 gnutls_ext_recv_func: ADDED
2244 gnutls_ext_send_func: ADDED
2245 gnutls_ext_parse_type_t: ADDED
2246 gnutls_ext_register: ADDED
2248 * Version 2.5.1 (released 2008-07-02)
2252 ** API and ABI modifications:
2253 No changes since last version.
2255 * Version 2.5.0 (released 2008-07-02)
2257 ** Port fixes from v2.4.1 release, see below.
2259 ** Added API to replace and update the crypto backend.
2260 The header gnutls/crypto.h is now officially supported, and declares
2263 ** Rewritten opencdk crypto backend, to use the gnutls internal one.
2265 ** Update gnulib and translations.
2266 The gnulib gc crypto code has been removed since it was never finished
2267 and is no longer even used. An internal non-libgcrypt crypto
2268 implementation may be added in the future, but we'll decide that later
2271 ** API and ABI modifications:
2272 gnutls_crypto_bigint_register2: ADDED.
2273 gnutls_crypto_cipher_register2: ADDED.
2274 gnutls_crypto_digest_register2: ADDED.
2275 gnutls_crypto_mac_register2: ADDED.
2276 gnutls_crypto_pk_register2: ADDED.
2277 gnutls_crypto_rnd_register2: ADDED.
2278 gnutls_crypto_single_cipher_register2: ADDED.
2279 gnutls_crypto_single_digest_register2: ADDED.
2280 gnutls_crypto_single_mac_register2: ADDED.
2282 * Version 2.4.3 (released 2009-02-06)
2284 ** libgnutls: Accept chains where intermediary certs are trusted.
2285 Before GnuTLS needed to validate the entire chain back to a
2286 self-signed certificate. GnuTLS will now stop looking when it has
2287 found an intermediary trusted certificate. The new behaviour is
2288 useful when chains, for example, contains a top-level CA, an
2289 intermediary CA signed using RSA-MD5, and an end-entity certificate.
2290 To avoid chain validation errors due to the RSA-MD5 cert, you can
2291 explicitly add the intermediary RSA-MD5 cert to your trusted certs.
2292 The signature on trusted certificates are not checked, so the chain
2293 has a chance to validate correctly. Reported by "Douglas E. Engert"
2294 <deengert@anl.gov> in
2295 <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3351>.
2297 ** libgnutls: Permit V1 Certificate Authorities properly.
2298 Before they were mistakenly rejected even though
2299 GNUTLS_VERIFY_ALLOW_ANY_X509_V1_CA_CRT and/or
2300 GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT were supplied. Reported by
2301 "Douglas E. Engert" <deengert@anl.gov> in
2302 <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3351>.
2304 ** libgnutls: deprecate X.509 validation chains using MD5 and MD2 signatures.
2305 This is a bugfix -- the previous attempt to do this from internal x509
2306 certificate verification procedures did not return the correct value
2307 for certificates using a weak hash. Reported by Daniel Kahn Gillmor
2308 <dkg@fifthhorseman.net> in
2309 <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3332>,
2310 debugged and patch by Tomas Mraz <tmraz@redhat.com> and Daniel Kahn
2311 Gillmor <dkg@fifthhorseman.net>.
2313 ** libgnutls: Fix chain verification for chains that ends with RSA-MD2 CAs.
2314 Reported by Michael Kiefer <Michael-Kiefer@web.de> in
2315 <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507633> forwarded by
2316 Andreas Metzler <ametzler@downhill.at.eu.org> in
2317 <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3309>.
2319 ** libgnutls: Fix crash in X.509 validation code for self-signed certificates.
2320 The patch to fix the security problem GNUTLS-SA-2008-3 introduced a
2321 problem for certificate chains that contained just one self-signed
2322 certificate. Reported by Michael Meskes <meskes@debian.org> in
2323 <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505279>.
2325 ** libgnutls: Fix X.509 certificate chain validation error. [GNUTLS-SA-2008-3]
2326 The flaw makes it possible for man in the middle attackers (i.e.,
2327 active attackers) to assume any name and trick GnuTLS clients into
2328 trusting that name. Thanks for report and analysis from Martin von
2329 Gagern <Martin.vGagern@gmx.net>. [CVE-2008-4989]
2331 Any updates with more details about this vulnerability will be added
2332 to <http://www.gnu.org/software/gnutls/security.html>
2334 ** libgnutls: Fix buffer overrun in gnutls_x509_crt_list_import.
2335 Report and patch by Jonathan Manktelow.
2337 ** libgnutls: Avoid use of non-thread safe strerror.
2339 ** API and ABI modifications:
2340 No changes since last version.
2342 * Version 2.4.2 (released 2008-09-15)
2344 ** libgnutls: Don't crash when gnutls_credentials_set is called twice.
2346 ** libgnutls: Corrected memory leak in X.509 functions.
2347 Thanks to Colin Leroy <colin@colino.net>.
2349 ** libgnutls: Fix compile error with Sun CC.
2351 ** gnutls-cli.1: Document all new parameters.
2352 Thanks to James Westby <jw+debian@jameswestby.net>.
2354 ** tests/openssl: initialize gnutls before use.
2355 Fixes crash with libgcrypt 1.4.2. Reported by Ludovic Courtes
2356 <ludovic.courtes@laas.fr>.
2358 ** doc/: Fix texinfo markup for old texinfo versions.
2360 ** Included copy of libtasn1 is upgraded to version 1.5.
2362 ** API and ABI modifications:
2363 No changes since last version.
2365 * Version 2.4.1 (released 2008-06-30)
2367 ** libgnutls: Fix local crash in gnutls_handshake. [GNUTLS-SA-2008-2]
2368 If the gnutls_handshake function is called for a normal session, which
2369 can happen for re-handshakes, the library would crash because it tried
2370 to hash some data using a libgcrypt handle that had been deallocated.
2371 Report and tiny patch from Tomas Mraz <tmraz@redhat.com>. Any updates
2372 with more details about this vulnerability will be added to
2373 <http://www.gnu.org/software/gnutls/security.html>
2375 ** libgnutls: Fix memory leaks when doing a re-handshake.
2376 Reported by Sam Varshavchik <mrsam@courier-mta.com> in
2377 <http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/2928>.
2379 ** Fix compiler warnings.
2380 Reported by Massimo Gaspari <massimo.gaspari@alice.it> in
2381 <http://thread.gmane.org/gmane.network.gnutls.general/1281>.
2383 ** Fix ordering of -I's to avoid opencdk.h conflict with system headers.
2384 Reported by Roman Bogorodskiy <novel@FreeBSD.org> in
2385 <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/2930>.
2387 ** srptool: Fix a problem where --verify check does not succeed.
2388 Report and tiny patch by Matthias Koenig <mkoenig@suse.de> in
2389 <http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/2944>.
2391 ** API and ABI modifications:
2392 No changes since last version.
2394 * Version 2.4.0 (released 2008-06-19)
2396 ** Major changes compared to the v2.2 branch:
2398 *** The OpenPGP sub-system has been improved and now supports subkeys.
2400 *** The PSK sub-system has been improved and now supports password
2401 *** derivation and PSK identity hints.
2402 The password derivation algorithms support is documented in
2403 draft-ietf-netconf-tls-02.txt.
2405 *** The certtool --inder and --outder has been replaced by --inraw and --outraw.
2406 This aligns terminology with OpenPGP, which doesn't use DER encoding.
2407 The old parameters will continue to work for some time.
2409 *** Certtool now confirm passwords and changes permissions of private key files.
2411 *** The default handshake size limit has been increased to 48kb.
2412 It appears as if some valid handshakes are large due to sending many
2413 CA certificates. (The earlier limit was 16kb.)
2415 *** LZO compression is now disabled by default.
2416 The main reason is that LZO compression in TLS is not standardized,
2417 but license compatiblity issues with minilzo triggered us to make this
2420 *** Improvements for cross-compilation to Windows and OpenWRT.
2422 *** The look of the GTK-DOC manual has been improved.
2423 Major developer visible changes compared to the v2.2 branch:
2425 *** Full OpenPGP support is part of libgnutls, licensed under the LGPL.
2427 *** New APIs to access the raw X.509 Subject and Issuer DN's and
2428 *** elements from the certificate credentials structure.
2429 Thanks to Joe Orton.
2431 *** New APIs to improve working with username/passwords and PSK.
2433 *** Names of constants to affect certificate printing changed.
2434 The constants are used for OpenPGP too, which the names didn't
2435 reflect, so the following name change has been made:
2438 GNUTLS_X509_CRT_FULL GNUTLS_CRT_PRINT_FULL
2439 GNUTLS_X509_CRT_ONELINE GNUTLS_CRT_PRINT_ONELINE
2440 GNUTLS_X509_CRT_UNSIGNED_FULL GNUTLS_CRT_PRINT_UNSIGNED_FULL
2442 The old names will be mapped to the new names for some time.
2444 *** The function gnutls_openpgp_privkey_get_id has been renamed to
2445 *** gnutls_openpgp_privkey_get_key_id.
2446 A compatibility mapping exists to avoid breaking API backwards
2449 *** Replaced all uses of alloca with malloc and free.
2451 *** We no longer build with -D_REENTRANT -D_THREAD_SAFE.
2452 We have been unable to find a documented rationale for this practice.
2454 *** Of course, many smaller fixes have been made, see the ChangeLog file.
2456 *** API/ABI changes in GnuTLS 2.4
2457 All OpenPGP related functions have been moved from libgnutls-extra to
2458 libgnutls, and several new functions have been added (see below).
2459 Before making the release, we discussed whether moving functions from
2460 libgnutls-extra to libgnutls would require us to increment the ABI
2461 version, but the general opinion was that this would not be required.
2462 All older functions continue to work the same. We are open to the
2463 possibility that this decision will lead to problem on some platform,
2464 and if it turns out that the Right Thing should have been to increment
2465 the shared library version, we would need to release an update within
2466 the 2.4.x branch that increments the shared library version.
2468 This release adds the following functions:
2470 gnutls_psk_client_get_hint
2471 gnutls_psk_set_server_credentials_hint
2472 gnutls_psk_netconf_derive_key
2474 Used to get/set the PSK identity hint, and derive PSK keys from
2475 passwords a'la netconf.
2477 gnutls_x509_dn_deinit
2478 gnutls_x509_dn_export
2479 gnutls_x509_dn_import
2482 Used to handle X.509 Certificate DN's directly.
2486 Converts a data buffer to hex. Useful for handling PSK/SRP shared
2489 gnutls_certificate_get_x509_cas
2490 gnutls_certificate_get_x509_crls
2491 gnutls_certificate_get_openpgp_keyring
2493 Functions for direct access to credential elements.
2495 gnutls_openpgp_crt_get_auth_subkey
2496 gnutls_openpgp_crt_get_key_id
2497 gnutls_openpgp_crt_get_pk_dsa_raw
2498 gnutls_openpgp_crt_get_pk_rsa_raw
2499 gnutls_openpgp_crt_get_preferred_key_id
2500 gnutls_openpgp_crt_get_revoked_status
2501 gnutls_openpgp_crt_get_subkey_count
2502 gnutls_openpgp_crt_get_subkey_creation_time
2503 gnutls_openpgp_crt_get_subkey_expiration_time
2504 gnutls_openpgp_crt_get_subkey_fingerprint
2505 gnutls_openpgp_crt_get_subkey_id
2506 gnutls_openpgp_crt_get_subkey_idx
2507 gnutls_openpgp_crt_get_subkey_pk_algorithm
2508 gnutls_openpgp_crt_get_subkey_pk_dsa_raw
2509 gnutls_openpgp_crt_get_subkey_pk_rsa_raw
2510 gnutls_openpgp_crt_get_subkey_revoked_status
2511 gnutls_openpgp_crt_get_subkey_usage
2512 gnutls_openpgp_crt_print
2513 gnutls_openpgp_crt_set_preferred_key_id
2514 gnutls_openpgp_keyring_get_crt
2515 gnutls_openpgp_keyring_get_crt_count
2516 gnutls_openpgp_privkey_export
2517 gnutls_openpgp_privkey_export_dsa_raw
2518 gnutls_openpgp_privkey_export_rsa_raw
2519 gnutls_openpgp_privkey_export_subkey_dsa_raw
2520 gnutls_openpgp_privkey_export_subkey_rsa_raw
2521 gnutls_openpgp_privkey_get_fingerprint
2522 gnutls_openpgp_privkey_get_key_id
2523 gnutls_openpgp_privkey_get_pk_algorithm
2524 gnutls_openpgp_privkey_get_preferred_key_id
2525 gnutls_openpgp_privkey_get_revoked_status
2526 gnutls_openpgp_privkey_get_subkey_count
2527 gnutls_openpgp_privkey_get_subkey_creation_time
2528 gnutls_openpgp_privkey_get_subkey_expiration_time
2529 gnutls_openpgp_privkey_get_subkey_fingerprint
2530 gnutls_openpgp_privkey_get_subkey_id
2531 gnutls_openpgp_privkey_get_subkey_idx
2532 gnutls_openpgp_privkey_get_subkey_pk_algorithm
2533 gnutls_openpgp_privkey_get_subkey_revoked_status
2534 gnutls_openpgp_privkey_set_preferred_key_id
2536 New OpenPGP related functions.
2538 The function gnutls_openpgp_crt_get_key_id is the same as the old
2539 from gnutls_openpgp_crt_get_id, see above.
2541 The release also adds a new header file 'gnutls/crypto.h', however it
2542 is currently not used.
2544 ** libgnutls [OpenPGP]: New APIs to retrieve fingerprint from OpenPGP subkeys.
2545 Contributed by Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net>.
2547 ** API and ABI modifications:
2548 gnutls_openpgp_crt_get_subkey_fingerprint: ADDED.
2549 gnutls_openpgp_privkey_get_subkey_fingerprint: ADDED.
2551 * Version 2.3.15 (released 2008-06-15)
2553 ** Disable the openpgp-certs self-tests.
2554 It results in failure under Wine and doesn't work on Debian buildds.
2556 ** API and ABI modifications:
2557 No changes since last version.
2559 * Version 2.3.14 (released 2008-06-11)
2561 ** libgnutls [OpenPGP]: Changed OpenPGP verification behaviour.
2562 An OpenPGP certificate is now only considered verified if all the user
2565 ** Examples: Make C++ example compile.
2566 Earlier it may have failed with an unresolved reference to strlen.
2568 ** Documentation: Doc fix for gnutls_x509_crt_get_extension_oid.
2569 Reported by Sam Varshavchik <mrsam@courier-mta.com>.
2571 ** API and ABI modifications:
2572 No changes since last version.
2574 * Version 2.3.13 (released 2008-06-07)
2576 ** libgnutls [OpenPGP]: Make OpenPGP handshakes work again.
2578 ** doc/: Add psktool to info index. Some minor cleanups.
2580 ** tests/: Added non-forking TLS handshake test, see tests/mini.c.
2582 ** tests/: Added libgcrypt.supp which can be used with valgrind.
2583 The file suppresses the known libgcrypt memory leaks, so they aren't
2584 printed when you run valgrind on the gnutls self-tests. Use it as
2585 follows: valgrind --suppressions=libgcrypt.supp ./x509self or add
2586 '--suppressions=/home/you/src/gnutls/tests/libgcrypt.supp' to your
2589 ** tests/: Reduce amount of debugging output by default.
2590 Use --verbose for each test to get the full output.
2592 ** tests/: Fix memory leaks in several self-tests.
2593 None of the self tests should be leaking memory when running valgrind
2594 or similar tools. (Known exceptions are dhepskself, pskself, and
2595 set_pkcs12_cred, which appear likely to be due to memory leaks in the
2598 ** API and ABI modifications:
2599 No changes since last version.
2601 * Version 2.3.12 (released 2008-06-04)
2603 ** Merge gnutls_with_netconf branch.
2605 *** libgnutls [PSK]: New API to retrieve PSK identity hint in client.
2606 The function is gnutls_psk_client_get_hint.
2608 *** libgnutls [PSK]: New API to set PSK identity hint in server.
2609 The function is gnutls_psk_set_server_credentials_hint.
2611 *** libgnutls [PSK]: Support server key exchange with PSK identity hint.
2612 In the client, the message is parsed and the application can use
2613 gnutls_psk_client_get_hint to retrieve the hint. In the server, the
2614 message is sent if the application has specified a PSK identity hint
2615 using gnutls_psk_set_server_credentials_hint.
2617 *** libgnutls [PSK]: Support Netconf PSK key derivation.
2618 The function gnutls_psk_netconf_derive_key supports the PSK key
2619 derivation as specified in draft-ietf-netconf-tls-02.txt. New self
2622 *** psktool: Support new --netconf-hint to generate PSK key from password.
2623 Uses the Netconf algorithm to derive PSK key from password.
2625 *** gnutls-serv: Support new --pskhint parameter to set PSK identity hint.
2627 *** gnutls-cli: Always support PSK modes, through a callback.
2628 The callback will derive a PSK key using Netconf algorithm. It will
2629 print the PSK identity hint to help the user.
2631 *** New PSK example client and server.
2632 See doc/examples/ex-client-psk.c and doc/examples/ex-serv-psk.c.
2634 ** libgnutls: Fix gnutls_x509_crl_set_version on arm platforms.
2635 The code didn't work properly on platforms where 'char' is unsigned,
2636 when you set version 0. Reported by Laurence Withers
2637 <l@lwithers.me.uk> in
2638 <http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/2825>.
2640 ** libgnutls-openssl: added RAND_pseudo_bytes API.
2641 Patch from Robert Millan <rmh@aybabtu.com>.
2643 ** API and ABI modifications:
2644 RAND_pseudo_bytes: ADDED to libgnutls-openssl.
2645 gnutls_psk_client_get_hint: ADDED.
2646 gnutls_psk_set_server_credentials_hint: ADDED.
2647 gnutls_psk_netconf_derive_key: ADDED
2649 * Version 2.3.11 (released 2008-05-20)
2651 ** Fix flaw in fix for GNUTLS-SA-2008-1-3.
2652 The flaw would result in incorrectly terminated sessions with the
2653 error "Decryption has failed" when the server sends a small packet
2654 (typically when the session is closed). Reported by Andreas Metzler
2655 <ametzler@downhill.at.eu.org> in
2656 <http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/2807>.
2658 ** Don't use gnulib headers when building C++ library.
2659 Fixes builds under Windows.
2661 ** Make umask a requirement.
2662 We don't know of any system that lacks it, even GNU CoreUtils use it
2665 ** Update gnulib files.
2666 Fixes a problem where it pulled in a replacement for memcmp under
2667 MinGW, which caused the C++ example to fail to build.
2669 ** API and ABI modifications:
2670 No changes since last version.
2672 * Version 2.3.10 (released 2008-05-19)
2674 ** Added wide wildcard hostname matching.
2675 Tiny patch by Jean-Philippe Garcia Ballester.
2677 ** Fix three security vulnerabilities. [GNUTLS-SA-2008-1]
2678 Thanks to CERT-FI for finding the bugs and providing detailed reports,
2679 which allowed the bugs to be reproduced and fixed easily. Patches
2680 developed by Simon Josefsson and Nikos Mavrogiannopoulos. Any updates
2681 with more details about these vulnerabilities will be added to
2682 <http://www.gnu.org/software/gnutls/security.html>
2684 *** [GNUTLS-SA-2008-1-1]
2685 *** libgnutls: Fix crash when sending invalid server name.
2686 The crash can be triggered remotely before authentication, which can
2687 lead to a Daniel of Service attack to disable the server. The bug
2688 cause gnutls to store more session resumption data than what was
2689 allocated for, thus overwriting unallocated memory.
2691 *** [GNUTLS-SA-2008-1-2]
2692 *** libgnutls: Fix crash when sending repeated client hellos.
2693 The crash can be triggered remotely before authentication, which can
2694 lead to a Daniel of Service attack to disable the server. The bug
2695 triggers a null-pointer dereference.
2697 *** [GNUTLS-SA-2008-1-3]
2698 *** libgnutls: Fix crash in cipher padding decoding for invalid record lengths.
2699 The crash can be triggered remotely before authentication, which can
2700 lead to a Daniel of Service attack to disable the server. The bug
2701 cause gnutls to read memory beyond the end of the received record.
2703 ** libgnutlsxx: Updated API according to patches from Eduardo
2704 Villanueva Che (discussion at
2705 <http://lists.gnu.org/archive/html/gnutls-devel/2007-02/msg00017.html>)
2707 ** Use umask to restrict permissions to owner before creating a file.
2709 ** API and ABI modifications:
2710 No changes since last version.
2712 * Version 2.3.9 (released 2008-05-16)
2714 ** libgnutls: Fix build failures if SRP/OpenPGP is disabled.
2715 Based on report and tiny patches from
2716 <jared.jennings.ctr@eglin.af.mil>, see
2717 <https://savannah.gnu.org/support/index.php?106342>.
2719 ** libgnutls: Translation fixes.
2721 ** gnutls-cli: Fix so that PSK authentication works.
2722 Also improve manual to give example for gnutls-cli PSK authentication.
2724 ** certtool: Encrypting a private key now require a confirmed password.
2725 Before './certtool -k -8' would merely ask for a password once.
2726 Reported by Daniel 'NebuchadnezzaR' Dehennin
2727 <nebuchadnezzar@asgardr.info> see
2728 <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=364287>.
2730 ** certtool: When writing private keys to files, change permissions of file.
2731 Now the file which the private key is saved to is chmod'ed 0600.
2732 Reported by martin f krafft <madduck@debian.org> see
2733 <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=373169>.
2735 ** guile: Fix -fgnu89-inline test.
2737 ** Removed --enable-profile-mode.
2738 The code linked gnutls with the libfc project (Function Check) which
2739 appears to have been stalled since around 2002.
2741 ** Clean up header file checks by ./configure.
2743 ** Update of gnulib files.
2745 ** API and ABI modifications:
2746 No changes since last version.
2748 * Version 2.3.8 (released 2008-04-29)
2750 ** libgnutls: Increase default handshake packet size limit to 48kb.
2751 The old limit was 16kb and some servers send huge list of trusted CAs,
2752 thus running into the limit. FYI, applications can further increase
2753 this limit using gnutls_handshake_set_max_packet_length. Thanks to
2754 Marc Haber <mh+debian-bugs@zugschlus.de> and "Marc F. Clemente"
2755 <marc@mclemente.net> for reporting and providing test servers.
2757 ** libgnutls: Add new error code: GNUTLS_E_HANDSHAKE_TOO_LARGE
2758 Returned when the handshake data size is too large. Before
2759 GNUTLS_E_MEMORY_ERROR was used, which could be confused with other
2762 ** libgnutls: Hide definitions in crypto.h.
2763 We have decided that the APIs defined in crypto.h are not stable
2764 enough for v2.4, so don't use any of those functions.
2766 ** gnutls-cli: exit when hostname doesn't match certificate.
2767 Use --insecure to avoid hostname comparison.
2769 ** certtool: --inder and --outder replaced by --inraw and --outraw.
2770 The reason is to align terminology with OpenPGP, which doesn't use
2771 DER. The old parameters will continue to work for some time.
2773 ** doc: Add section 'Index of new symbols in 2.4.0' to the GTK-DOC manual.
2775 ** doc: Many cosmetic fixes, to silence (most) gtk-doc warnings.
2777 ** Mingw32: Revert libgcrypt vasprintf work-around added in last release.
2778 Use libgcrypt 1.4.1 or later when building on MinGW32, it removes the
2779 vasprintf symbol from the libgcrypt library which caused problems.
2781 ** Update of gnulib files.
2783 ** tests: New self-test of crypto.h RNG code tests/crypto_rng.
2785 ** API and ABI modifications:
2786 GNUTLS_E_HANDSHAKE_TOO_LARGE: ADDED.
2788 * Version 2.3.7 (released 2008-04-21)
2790 ** opencdk now properly sets the key usage bits into openpgp keys.
2792 ** gnutls-cli: Fix crash on TLS handshake failures.
2793 Reported by "Marc F. Clemente" <marc@mclemente.net> in Debian BTS #466477.
2794 This is similar to <http://bugs.debian.org/429183>.
2796 ** certtool: with --generate-request and newly generated keys, print the key.
2798 ** Build fixes for MinGW.
2799 Missing rpl_fseeko symbol in lib/opencdk/. Better checks for linking
2800 with -lws2_32 when needed. Use ASCII only isprint() when printing
2801 X.509 certificate information, to avoid non-ASCII but printable
2802 characters. Thanks to Massimo Gaspari <massimo.gaspari@alice.it> for
2805 ** Update internal copy of libtasn1 to version 1.4.
2807 ** API and ABI modifications:
2808 No changes since last version.
2810 * Version 2.3.6 (released 2008-04-17)
2812 ** Make gnutls_x509_crq_sign2 set certificate request version if not set.
2813 ** Improve documentation for gnutls_x509_crq_sign2.
2814 Based on report from "John Brooks" <aspecialj@gmail.com> in
2815 <http://permalink.gmane.org/gmane.network.gnutls.general/1154>.
2817 ** tests/pathlen: run diff without parameters to improve portability.
2818 Based on HPUX build hints in
2819 <http://hpux.cs.utah.edu/hppd/cgi-bin/wwwtar?/hpux/Gnu/gnutls-2.3.4/gnutls-2.3.4-src-11.11.tar.gz+gnutls-2.3.4/HPUX.Install+text>.
2821 ** Don't use %e specifier with strftime, it doesn't work under Windows.
2822 Reported by Massimo Gaspari <massimo.gaspari@alice.it> in
2823 <http://permalink.gmane.org/gmane.network.gnutls.general/1170>.
2825 ** Remove all uses of gnutls_alloca/gnutls_afree.
2826 Use normal gnutls_malloc instead. One reason is increased portability
2827 to Windows, the other is that several of the uses may be unsafe
2828 because the size of data allocated could be large. Reported by
2829 Massimo Gaspari <massimo.gaspari@alice.it> in
2830 <http://permalink.gmane.org/gmane.network.gnutls.general/1170>.
2832 ** Build Guile code with -fgnu89-inline only when supported.
2833 Reported by Kris Karas <ktk@enterprise.bidmc.harvard.edu> in
2834 <http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/2708>.
2836 ** Several GTK-DOC related fixes.
2838 ** Clean up OpenCDK related code.
2839 GnuTLS now requires its internal OpenCDK code rather than the external
2840 GPL library OpenCDK. Unfortunately, we don't have resources to
2841 maintain an external library (help welcome).
2843 ** API and ABI modifications:
2844 No changes since last version.
2846 * Version 2.3.5 (released 2008-04-14)
2848 ** Build fix for MinGW and --disable-shared.
2849 Reported by Massimo Gaspari <massimo.gaspari@alice.it> in
2850 <http://permalink.gmane.org/gmane.network.gnutls.general/1145>.
2852 ** Document how to generate CRLs.
2853 Suggested by "Rainer Gerhards" <rgerhards@gmail.com>.
2855 ** Documented the --priority option to gnutls-cli and gnutls-serv.
2857 ** Several minor fixes in the OpenPGP interface.
2858 Thanks to Daniel Kahn Gillmor.
2860 ** Fix fopen file descriptor leak in PSK server code.
2861 Thanks to Laurence Withers <l@lwithers.me.uk>, see
2862 <http://lists.gnu.org/archive/html/gnutls-devel/2008-04/msg00002.html>.
2864 ** Translations files not stored directly in git to avoid merge conflicts.
2866 ** New APIs to let applications replace the RNG used.
2867 Update all RNG callers in the code to use the new interface.
2869 ** Guile code now built with -fgnu89-inline to fix inline semantic problem.
2871 ** Update gnulib files.
2873 ** API and ABI modifications:
2874 gnutls_crypto_rnd_register: ADDED
2875 gnutls_rnd_level_t: ADDED
2876 GNUTLS_RND_KEY: ADDED, gnutls_rnd_level_t member
2877 GNUTLS_RND_RANDOM: ADDED, gnutls_rnd_level_t member
2878 GNUTLS_RND_NONCE: ADDED, gnutls_rnd_level_t member
2879 gnutls_crypto_rnd_st: ADDED
2880 GNUTLS_DIG_SHA224: ADDED
2881 GNUTLS_SIGN_RSA_SHA224: ADDED
2882 gnutls_openpgp_crt_get_auth_subkey: MODIFIED
2884 * Version 2.3.4 (released 2008-03-19)
2886 ** Finish renaming of gnutls_certificate_export_x509_cas etc.
2887 They weren't renamed in the public header file.
2889 ** Added functions to register a cipher/mac/digest. This allows to
2890 override the included ones.
2892 ** Fix a bunch of compiler warnings.
2894 ** API and ABI modifications:
2895 gnutls_crypto_cipher_st: ADDED
2896 gnutls_crypto_mac_st: ADDED
2897 gnutls_crypto_digest_st: ADDED
2898 gnutls_crypto_cipher_register: ADDED
2899 gnutls_crypto_mac_register: ADDED
2900 gnutls_crypto_digest_register: ADDED
2901 GNUTLS_E_CRYPTO_ALREADY_REGISTERED: ADDED
2903 * Version 2.3.3 (released 2008-03-10)
2905 ** Fix build failure in libextra/gnutls_extra.c that needed opencdk.h.
2906 Reported by Roman Bogorodskiy <novel@FreeBSD.org>.
2908 ** No longer compiled using -D_REENTRANT -D_THREAD_SAFE.
2909 We could not find any modern justification for enabling these flags by
2910 default. If you know of some platform that needs one of the flags to
2911 work properly, please let us know. (Actually introduced in v2.3.0 but
2912 not documented until now.)
2914 ** Importing many CA certificates are now considerably faster.
2915 This affect gnutls_certificate_set_x509_trust_mem,
2916 gnutls_certificate_set_x509_trust, and
2917 gnutls_certificate_set_x509_trust_file. The complexity was reduced
2918 from O(2*n^2) to O(n). When adding 206 files containing 408
2919 certificates, using gnutls_certificate_set_x509_trust_file, the time
2920 dropped from 40 seconds to 0.3 seconds. Thanks to Edgar Fuß for code
2921 to trigger the problem. See also
2922 <http://blog.josefsson.org/2008/02/27/real-world-performance-tuning-with-callgrind/>.
2924 ** Clarify documentation for gnutls_x509_crt_set_subject_alternative_name
2925 ** to be explicit that it takes zero terminated data.
2927 ** gnutls-cli --print-cert now print PKCS#3 format Diffie-Hellman parameters.
2929 ** Documentation fixes for the GTK-DOC manual.
2931 ** Fix compilation error related to __FUNCTION__ on some systems.
2932 Reported by Tim Mooney, see
2933 <https://savannah.gnu.org/support/?106267>.
2935 ** Updated translations.
2937 ** Update gnulib files.
2939 ** API and ABI modifications:
2940 gnutls_hex2bin: MODIFIED, uses size_t instead of int for string length,
2941 and char* instead of void* for output buffer.
2943 * Version 2.3.2 (released 2008-02-26)
2945 ** Fix srcdir!=objdir failure in openpgpself test.
2947 ** Improved API documentation output from GTK-DOC.
2949 ** Added gnutls_x509_dn_export(). Patch by Joe Orton.
2951 ** Renamed gnutls_certificate_export_x509_cas and friends.
2952 See <http://lists.gnu.org/archive/html/gnutls-devel/2008-02/msg00043.html>.
2954 ** Internal header files cleanup.
2956 ** API and ABI modifications:
2957 gnutls_certificate_export_x509_cas: RENAMED to gnutls_certificate_get_x509_cas
2958 gnutls_certificate_export_x509_crls: RENAMED to gnutls_certificate_get_x509_crls
2959 gnutls_certificate_export_openpgp_keyring: RENAMED to gnutls_certificate_get_openpgp_keyring
2960 gnutls_x509_dn_export: ADDED
2962 * Version 2.3.1 (released 2008-02-21)
2964 ** OpenPGP support merged into libgnutls and is now licensed under LGPL.
2965 The included copy of OpenCDK has been stripped down and re-licensed
2968 ** Cipher priority string handling now handle strings that starts with NULL.
2969 Thanks to Laurence Withers <l@lwithers.me.uk>.
2971 ** gnutls-cli: When -d is used, also prints RNG information from libgcrypt.
2973 ** Corrected memory leaks in session resuming and DHE ciphersuites. Reported
2976 ** Increased the default certificate verification chain limits and allowed
2977 for checks without limitation.
2979 ** Corrected the behaviour of gnutls_x509_crt_get_subject_alt_name()
2980 and gnutls_x509_crt_get_subject_alt_name() to not null terminate binary
2981 strings and return the proper size.
2983 ** Add section 'On Record Padding' to the manual.
2984 This collects all problems related to record padding with
2985 Nokia/Sony-Ericsson phones that we know about.
2987 ** Several improvements in the OpenPGP authentication.
2988 Now subkeys can be used for authentication, according to
2989 draft-mavrogiannopoulos-rfc5081bis-00.txt.
2991 ** certtool can print information on OpenPGP certificates and keys.
2993 ** Added gnutls_x509_dn_import/init/deinit() to access raw DER DN.
2996 ** Added gnutls_certificate_export_x509_cas and other functions to
2997 export elements from the certificate credentials structure. Based on
2998 suggestion from Joe Orton.
3001 Clarify that srp_base64 is not the same as normal base64.
3003 ** Fix non-portable use of brace expansion in makefiles.
3005 ** API and ABI modifications:
3006 gnutls_certificate_export_x509_cas: ADDED
3007 gnutls_certificate_export_x509_crls: ADDED
3008 gnutls_certificate_export_openpgp_keyring: ADDED
3009 gnutls_openpgp_keyid_t: ADDED, instead of hard-coded 'unsigned char[8]'.
3010 gnutls_openpgp_crt_get_key_id: ADDED, obsoletes gnutls_openpgp_crt_get_id.
3011 gnutls_openpgp_crt_get_revoked_status: ADDED
3012 gnutls_openpgp_crt_get_subkey_count: ADDED
3013 gnutls_openpgp_crt_get_subkey_idx: ADDED
3014 gnutls_openpgp_crt_get_subkey_revoked_status: ADDED
3015 gnutls_openpgp_crt_get_subkey_pk_algorithm: ADDED
3016 gnutls_openpgp_crt_get_subkey_creation_time: ADDED
3017 gnutls_openpgp_crt_get_subkey_expiration_time: ADDED
3018 gnutls_openpgp_crt_get_subkey_id: ADDED
3019 gnutls_openpgp_crt_get_subkey_usage: ADDED
3020 gnutls_openpgp_privkey_get_fingerprint: ADDED
3021 gnutls_openpgp_privkey_get_key_id: ADDED
3022 gnutls_openpgp_privkey_get_subkey_count: ADDED
3023 gnutls_openpgp_privkey_get_subkey_idx: ADDED
3024 gnutls_openpgp_privkey_get_subkey_revoked_status: ADDED
3025 gnutls_openpgp_privkey_get_revoked_status: ADDED
3026 gnutls_openpgp_privkey_get_subkey_pk_algorithm: ADDED
3027 gnutls_openpgp_privkey_get_subkey_expiration_time: ADDED
3028 gnutls_openpgp_privkey_get_subkey_id: ADDED
3029 gnutls_openpgp_privkey_get_subkey_creation_time: ADDED
3030 gnutls_openpgp_crt_get_subkey_pk_dsa_raw: ADDED
3031 gnutls_openpgp_crt_get_subkey_pk_rsa_raw: ADDED
3032 gnutls_openpgp_crt_get_pk_dsa_raw: ADDED
3033 gnutls_openpgp_crt_get_pk_rsa_raw: ADDED
3034 gnutls_openpgp_privkey_export_subkey_dsa_raw: ADDED
3035 gnutls_openpgp_privkey_export_subkey_rsa_raw: ADDED
3036 gnutls_openpgp_privkey_export_dsa_raw: ADDED
3037 gnutls_openpgp_privkey_export_rsa_raw: ADDED
3038 gnutls_openpgp_privkey_export: ADDED
3039 gnutls_certificate_set_openpgp_key_file2: ADDED
3040 gnutls_certificate_set_openpgp_key_mem2: ADDED
3041 gnutls_x509_dn_init: ADDED
3042 gnutls_x509_dn_import: ADDED
3043 gnutls_x509_dn_deinit: ADDED
3044 GNUTLS_E_OPENPGP_SUBKEY_ERROR: ADDED
3045 gnutls_hex2bin: ADDED
3046 GNUTLS_CRT_PRINT_FULL: ADDED, same as old GNUTLS_X509_CRT_FULL.
3047 GNUTLS_CRT_PRINT_ONELINE: ADDED, same as old GNUTLS_X509_CRT_ONELINE.
3048 GNUTLS_CRT_PRINT_UNSIGNED_FULL: ADDED, same as
3049 old GNUTLS_X509_CRT_UNSIGNED_FULL.
3051 * Version 2.3.0 (released 2008-01-08)
3053 ** LZO compression is now disabled by default.
3054 The reason is that LZO compression is not standardized in TLS. If you
3055 wish to experiment with it, you will have to supply --with-lzo when
3056 invoking ./configure. The internal copy of minilzo is no longer
3057 included with GnuTLS, so you will need to install liblzo or liblzo2 on
3058 your system to have --with-lzo to be effective.
3060 ** More than one server name field is now sent to the server properly.
3061 Thanks to mark.phillips@virgin.net.
3063 ** Fixes the post_client_hello_function(). The extensions are now parsed
3064 in a callback friendly way.
3066 ** Fix for certificate selection in servers with certificate callbacks.
3068 ** Updated translations.
3070 ** Update gnulib files.
3072 ** API and ABI modifications:
3073 No changes since last version.
3075 * Version 2.2.5 (released 2008-05-19)
3077 ** Fix flaw in fix for GNUTLS-SA-2008-1-3.
3078 The flaw would result in incorrectly terminated sessions with the
3079 error "Decryption has failed" when the server sends a small packet
3080 (typically when the session is closed). Reported by Andreas Metzler
3081 <ametzler@downhill.at.eu.org> in
3082 <http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/2807>.
3084 ** API and ABI modifications:
3085 No changes since last version.
3087 * Version 2.2.4 (released 2008-05-19)
3089 ** Fix three security vulnerabilities. [GNUTLS-SA-2008-1]
3090 Thanks to CERT-FI for finding the bugs and providing detailed reports,
3091 which allowed the bugs to be reproduced and fixed easily. Patches
3092 developed by Simon Josefsson and Nikos Mavrogiannopoulos. Any updates
3093 with more details about these vulnerabilities will be added to
3094 <http://www.gnu.org/software/gnutls/security.html>
3096 *** [GNUTLS-SA-2008-1-1]
3097 *** libgnutls: Fix crash when sending invalid server name.
3098 The crash can be triggered remotely before authentication, which can
3099 lead to a Daniel of Service attack to disable the server. The bug
3100 cause gnutls to store more session resumption data than what was
3101 allocated for, thus overwriting unallocated memory.
3103 *** [GNUTLS-SA-2008-1-2]
3104 *** libgnutls: Fix crash when sending repeated client hellos.
3105 The crash can be triggered remotely before authentication, which can
3106 lead to a Daniel of Service attack to disable the server. The bug
3107 triggers a null-pointer dereference.
3109 *** [GNUTLS-SA-2008-1-3]
3110 *** libgnutls: Fix crash in cipher padding decoding for invalid record lengths.
3111 The crash can be triggered remotely before authentication, which can
3112 lead to a Daniel of Service attack to disable the server. The bug
3113 cause gnutls to read memory beyond the end of the received record.
3115 ** API and ABI modifications:
3116 No changes since last version.
3118 * Version 2.2.3 (released 2008-05-06)
3120 ** Increase default handshake packet size limit to 48kb.
3121 The old limit was 16kb and some servers send huge list of trusted CAs,
3122 thus running into the limit. FYI, applications can further increase
3123 this limit using gnutls_handshake_set_max_packet_length. Thanks to
3124 Marc Haber <mh+debian-bugs@zugschlus.de> and "Marc F. Clemente"
3125 <marc@mclemente.net> for reporting and providing test servers.
3127 ** Fix compilation error related to __FUNCTION__ on some systems.
3128 Reported by Tim Mooney, see
3129 <https://savannah.gnu.org/support/?106267>.
3131 ** Documented the --priority option to gnutls-cli and gnutls-serv.
3133 ** Fix fopen file descriptor leak in PSK server code.
3134 Thanks to Laurence Withers <l@lwithers.me.uk>, see
3135 <http://lists.gnu.org/archive/html/gnutls-devel/2008-04/msg00002.html>.
3137 ** Build Guile code with -fgnu89-inline only when supported.
3138 Reported by Kris Karas <ktk@enterprise.bidmc.harvard.edu> in
3139 <http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/2708>.
3141 ** Make Camellia encryption work.
3142 Reported by Yoshisato YANAGISAWA <yanagisawa@csg.is.titech.ac.jp> in
3143 <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/2746>.
3145 ** API and ABI modifications:
3146 No changes since last version.
3148 * Version 2.2.2 (released 2008-02-21)
3150 ** Cipher priority string handling now handle strings that starts with NULL.
3151 Thanks to Laurence Withers <l@lwithers.me.uk>.
3153 ** Corrected memory leaks in session resuming and DHE ciphersuites. Reported
3156 ** Increased the default certificate verification chain limits and allowed
3157 for checks without limitation.
3159 ** Corrected the behaviour of gnutls_x509_crt_get_subject_alt_name()
3160 and gnutls_x509_crt_get_subject_alt_name() to not null terminate binary
3161 strings and return the proper size.
3163 ** API and ABI modifications:
3164 No changes since last version.
3166 * Version 2.2.1 (released 2008-01-17)
3168 ** Prevent linking libextra against previously installed libgnutls.
3169 Tiny patch from "Alon Bar-Lev" <alon.barlev@gmail.com>, see
3170 <http://bugs.gentoo.org/show_bug.cgi?id=202269>.
3172 ** Fixes the post_client_hello_function(). The extensions are now parsed
3173 in a callback friendly way.
3175 ** Fix for certificate selection in servers with certificate callbacks.
3177 ** API and ABI modifications:
3178 No changes since last version.
3180 * Version 2.2.0 (released 2007-12-14)
3182 ** Update internal copy of libtasn1 to version 1.2.
3184 ** Certtool --verify-chain now handle inputs larger than 64kb.
3185 This fixes the self-test "rsa-md5-collision" under MinGW+Wine with
3186 recent versions of libgcrypt. The problem was that Wine with the
3187 libgcrypt RNG generates huge amounts of debugging output.
3189 ** Translation updates.
3190 Added Dutch translation. Updated Polish and Swedish translation.
3192 ** Major changes compared to the v2.0 branch:
3194 *** SRP support aligned with newly published RFC 5054.
3196 *** OpenPGP support aligned with newly published RFC 5081.
3198 *** Support for DSA2 keys.
3200 *** Support for Camellia cipher.
3202 *** Support for Opaque PRF Input extension.
3204 *** PKCS#8 parser now handle DSA keys.
3206 *** Change from GPLv2 to GPLv3 for command-line tools, libgnutls-extra, etc.
3207 Notice that liblzo2 2.02 is licensed under GPLv2 only. Earlier
3208 versions, such as 2.01 which is included with GnuTLS, is available
3209 under GPLv2 or later. If this incompatibility causes problems, we
3210 recommend you to disable LZO using --without-lzo. LZO compression is
3211 not a standard TLS compression algorithm, so the impact should be
3214 *** Functions for disabling record protocol padding.
3215 Works around bugs on Nokia/Ericsson phones.
3217 *** New functions gnutls_priority_set() for setting cipher priorities easily.
3218 Priorities like "COMPAT" also enables other work arounds, such as
3221 *** Other minor improvements and bug fixes.
3223 ** Backwards incompatible API/ABI changes in GnuTLS 2.2
3224 To adapt to changes in the TLS extension specifications for OpenPGP
3225 and SRP, the GnuTLS API had to be modified. This means breaking the
3226 API and ABI backwards compatibility. That is something we try to
3227 avoid unless it is necessary. We decided to also remove the already
3228 deprecated stub functions for X.509 to XML conversion and TLS
3229 authorization (see below) when we had the opportunity.
3231 Generally, most applications does not need to be modified. Just
3232 re-compile them against the latest GnuTLS release, and it should work
3235 Applications that use the OpenPGP or SRP features needs to be
3236 modified. Below is a list of the modified APIs and discussion of what
3237 the minimal things you need to modify in your application to make it
3238 work with GnuTLS 2.2.
3240 Note that GnuTLS 2.2 also introduces new APIs -- such as
3241 gnutls_set_priority() that is superior to
3242 gnutls_set_default_priority() -- that you may want to start using.
3243 However, using those new APIs is not required to use GnuTLS 2.2 since
3244 the old functions continue are still supported. This text only
3245 discuss what you minimally have to modify.
3247 *** XML related changes
3248 The function `gnutls_x509_crt_to_xml' has been removed. It has been
3249 deprecated and only returned an error code since GnuTLS version
3250 1.2.11. Nobody has complained, so users doesn't seem to miss the
3251 functionality. We don't know of any other library to convert X.509
3252 certificates into XML format, but we decided (long ago) that GnuTLS
3253 isn't the right place for this kind of functionality. If you want
3254 help to find some other library to use here, please explain and
3255 discuss your use case on help-gnutls@gnu.org.
3257 *** TLS Authorization related changes
3258 Everything related to TLS authorizations have been removed, they were
3259 only stub functions that returned an error code:
3261 GNUTLS_SUPPLEMENTAL_AUTHZ_DATA
3262 gnutls_authz_data_format_type_t
3263 gnutls_authz_recv_callback_func
3264 gnutls_authz_send_callback_func
3266 gnutls_authz_send_x509_attr_cert
3267 gnutls_authz_send_saml_assertion
3268 gnutls_authz_send_x509_attr_cert_url
3269 gnutls_authz_send_saml_assertion_url
3271 *** SRP related changes
3272 The callback gnutls_srp_client_credentials_function has a new
3273 prototype, and its semantic has changed. You need to rewrite the
3274 callback, see the updated function documentation and SRP example code
3275 (doc/examples/ex-client-srp.c and doc/examples/ex-serv-srp.c) for more
3278 The alert codes GNUTLS_A_MISSING_SRP_USERNAME and
3279 GNUTLS_A_UNKNOWN_SRP_USERNAME are no longer used by the SRP
3280 specification, instead the GNUTLS_A_UNKNOWN_PSK_IDENTITY alert is
3281 used. There are #define's to map the old names to the new. You may
3282 run into problems if you have a switch-case with cases for both SRP
3283 alerts, since they are now mapped to the same value. The solution is
3284 to drop the SRP alerts from such switch cases, as they are now
3285 deprecated in favor of GNUTLS_A_UNKNOWN_PSK_IDENTITY.
3287 *** OpenPGP related changes
3288 The function `gnutls_certificate_set_openpgp_keyserver' have been
3289 removed. There is no replacement functionality inside GnuTLS. If you
3290 need keyserver functionality, consider using the GnuPG tools.
3292 All functions, types, and error codes related to OpenPGP trustdb
3293 format have been removed. The trustdb format is a non-standard
3294 GnuPG-specific format, and we recommend you to use key rings instead.
3295 The following have been removed:
3297 gnutls_certificate_set_openpgp_trustdb
3298 gnutls_openpgp_trustdb_init
3299 gnutls_openpgp_trustdb_deinit
3300 gnutls_openpgp_trustdb_import
3301 gnutls_openpgp_key_verify_trustdb
3302 gnutls_openpgp_trustdb_t
3303 GNUTLS_E_OPENPGP_TRUSTDB_VERSION_UNSUPPORTED
3305 The following functions has an added parameter of the (new) type
3306 `gnutls_openpgp_crt_fmt_t'. The type specify the format of the data
3307 (binary or base64). The functions are:
3308 gnutls_certificate_set_openpgp_key_file
3309 gnutls_certificate_set_openpgp_key_mem
3310 gnutls_certificate_set_openpgp_keyring_mem
3311 gnutls_certificate_set_openpgp_keyring_file
3313 To improve terminology and align with the X.509 interface, some
3314 functions have been renamed. Compatibility mappings exists. The old
3315 and new names of the affected functions and types are:
3318 gnutls_openpgp_key_t gnutls_openpgp_crt_t
3319 gnutls_openpgp_key_fmt_t gnutls_openpgp_crt_fmt_t
3320 gnutls_openpgp_key_status_t gnutls_openpgp_crt_status_t
3321 GNUTLS_OPENPGP_KEY GNUTLS_OPENPGP_CERT
3322 GNUTLS_OPENPGP_KEY_FINGERPRINT GNUTLS_OPENPGP_CERT_FINGERPRINT
3323 gnutls_openpgp_key_init gnutls_openpgp_crt_init
3324 gnutls_openpgp_key_deinit gnutls_openpgp_crt_deinit
3325 gnutls_openpgp_key_import gnutls_openpgp_crt_import
3326 gnutls_openpgp_key_export gnutls_openpgp_crt_export
3327 gnutls_openpgp_key_get_key_usage gnutls_openpgp_crt_get_key_usage
3328 gnutls_openpgp_key_get_fingerprint gnutls_openpgp_crt_get_fingerprint
3329 gnutls_openpgp_key_get_pk_algorithm gnutls_openpgp_crt_get_pk_algorithm
3330 gnutls_openpgp_key_get_name gnutls_openpgp_crt_get_name
3331 gnutls_openpgp_key_get_version gnutls_openpgp_crt_get_version
3332 gnutls_openpgp_key_get_creation_time gnutls_openpgp_crt_get_creation_time
3333 gnutls_openpgp_key_get_expiration_time gnutls_openpgp_crt_get_expiration_time
3334 gnutls_openpgp_key_get_id gnutls_openpgp_crt_get_id
3335 gnutls_openpgp_key_check_hostname gnutls_openpgp_crt_check_hostname
3336 gnutls_openpgp_send_key gnutls_openpgp_send_cert
3338 ** API and ABI modifications:
3339 No changes since last version.
3341 * Version 2.1.8 (released 2007-12-10)
3343 ** The GPL version has been changed from version 2 to version 3.
3344 This affects the self-tests, command-line tools, the libgnutls-extra
3345 library, the relevant guile parts, and the build environment.
3347 ** Added gnutls_x509_crt_get_subject_alt_name2().
3349 ** Corrected a segfault when setting an empty gnutls_priority_t
3350 at gnutls_priority_set().
3352 ** Use gettext 0.17 which updates m4/lib-*.m4 macros.
3353 Fixes a problem with spurious -L/usr/lib additions.
3355 ** API and ABI modifications:
3356 gnutls_x509_crt_get_subject_alt_name2: ADD.
3358 * Version 2.1.7 (released 2007-11-29)
3360 ** PKCS #8 parser can now encode/decode DSA keys.
3362 ** Updated gnutls_set_default_priority2() now renamed to
3363 gnutls_priority_set() and gnutls_priority_set_direct() which
3364 accept a string to indicate preferences of ciphersuite parameters.
3366 ** gnutls-cli and gnutls-serv now have a --priority option to set
3367 the priority string.
3369 ** The gnutls_*_convert_priority() functions were deprecated by
3370 the gnutls_priority_set() and gnutls_priority_set_direct().
3372 ** Internal copy of OpenCDK upgraded to version 0.6.6.
3374 ** API and ABI modifications:
3375 gnutls_priority_init: ADD.
3376 gnutls_priority_deinit: ADD.
3377 gnutls_priority_set: ADD.
3378 gnutls_priority_set_direct: ADD.
3379 gnutls_set_default_priority2: RENAMED to gnutls_priority_set_direct()
3380 gnutls_mac_convert_priority: REMOVED
3381 gnutls_compression_convert_priority: REMOVED
3382 gnutls_protocol_convert_priority: REMOVED
3383 gnutls_kx_convert_priority: REMOVED
3384 gnutls_cipher_convert_priority: REMOVED
3385 gnutls_certificate_type_convert_priority: REMOVED
3386 gnutls_set_default_priority: UNDEPRECATED
3387 gnutls_set_default_priority_export: UNDEPRECATED
3389 ** Undocumented API and ABI modifications earlier in the 2.1.x series:
3390 GNUTLS_CIPHER_UNKNOWN: ADD.
3391 GNUTLS_CIPHER_CAMELLIA_128_CBC: ADD.
3392 GNUTLS_CIPHER_CAMELLIA_256_CBC: ADD.
3393 GNUTLS_KX_UNKNOWN: ADD.
3394 GNUTLS_COMP_UNKNOWN: ADD.
3395 GNUTLS_CRT_UNKNOWN: ADD.
3396 gnutls_mac_get_id: ADD.
3397 gnutls_compression_get_id: ADD.
3398 gnutls_cipher_get_id: ADD.
3399 gnutls_kx_get_id: ADD.
3400 gnutls_protocol_get_id: ADD.
3401 gnutls_certificate_type_get_id: ADD.
3402 gnutls_handshake_post_client_hello_func: ADD.
3403 gnutls_certificate_send_x509_rdn_sequence: ADD prototype to gnutls.h.in.
3405 * Version 2.1.6 (released 2007-11-15)
3407 ** Corrected bug in decompression of expanded compression data.
3409 ** Added the --to-p8 option to certtool to convert private keys
3412 ** Introduced the GNUTLS_E_BASE64_UNEXPECTED_HEADER_ERROR error code.
3414 ** gnutls_certificate_set_x509_key_* can now read PKCS #8 unencrypted
3417 ** Fixed GNUTLS_E_UNKNOWN_ALGORITHM vs GNUTLS_E_UNKNOWN_HASH_ALGORITHM.
3418 During the 2.1.x series the GNUTLS_E_UNKNOWN_HASH_ALGORITHM error code
3419 was renamed to GNUTLS_E_UNKNOWN_ALGORITHM, unfortunately without being
3420 documented. This caused some problems (e.g., debian #450854). To
3421 avoid backwards compatibility problems, this release revert this
3422 change, so that GNUTLS_E_UNKNOWN_HASH_ALGORITHM works just like it has
3423 done in GnuTLS 2.0.x and earlier, and add a new error code
3424 GNUTLS_E_UNKNOWN_ALGORITHM.
3426 ** Fixes several gtk-doc warnings.
3428 ** API and ABI modifications:
3429 GNUTLS_E_UNKNOWN_ALGORITHM: CHANGED.
3430 GNUTLS_E_UNKNOWN_HASH_ALGORITHM: CHANGED.
3431 GNUTLS_E_BASE64_UNEXPECTED_HEADER_ERROR: ADD.
3433 * Version 2.1.5 (released 2007-11-01)
3435 ** Fix PKCS#3 parameter export problem.
3437 ** Improve certtool queries, they now print the default value.
3441 ** Update gnulib files.
3443 ** API and ABI modifications:
3444 No changes since last version.
3446 * Version 2.1.4 (released 2007-10-27)
3448 ** Added the --v1 option to certtool, to allow generating X.509
3449 version 1 certificates.
3451 ** certtool: Add option --disable-quick-random to enable the old behaviour
3452 of using /dev/random to generate keys.
3454 ** Added priority functions that accept strings.
3456 ** Added gnutls_set_default_priority2() which accepts a flag to indicate
3457 priorities preferences.
3459 ** Added gnutls_record_disable_padding() to allow servers talking to
3460 buggy clients that complain if the TLS 1.0 record protocol padding is
3463 ** Introduced gnutls_session_enable_compatibility_mode() to allow enabling
3464 all supported compatibility options (like disabling padding).
3466 ** The gnutls_certificate_set_openpgp_* functions were modified to include
3467 the format. This makes the interface consistent with the x509 functions.
3469 ** Internal copy of OpenCDK upgraded to version 0.6.5.
3471 ** Update gnulib files.
3473 ** API and ABI modifications:
3474 gnutls_certificate_set_openpgp_key_mem: MODIFIED
3475 gnutls_certificate_set_openpgp_key_file: MODIFIED
3476 gnutls_certificate_set_openpgp_keyring_mem: MODIFIED
3477 gnutls_certificate_set_openpgp_keyring_file: MODIFIED
3478 gnutls_set_default_priority: DEPRECATED
3479 gnutls_set_default_priority_export: DEPRECATED
3480 gnutls_set_default_priority2: ADDED
3481 gnutls_session_enable_compatibility_mode: ADDED
3482 gnutls_record_disable_padding: ADDED
3483 gnutls_mac_convert_priority: ADDED
3484 gnutls_compression_convert_priority: ADDED
3485 gnutls_protocol_convert_priority: ADDED
3486 gnutls_kx_convert_priority: ADDED
3487 gnutls_cipher_convert_priority: ADDED
3488 gnutls_certificate_type_convert_priority: ADDED
3489 gnutls_openpgp_key_t: RENAMED to gnutls_openpgp_crt_t
3490 gnutls_openpgp_key_status_t: RENAMED to gnutls_openpgp_crt_status_t
3491 gnutls_openpgp_send_key: RENAMED to gnutls_openpgp_send_cert
3492 gnutls_openpgp_key_init: RENAMED to gnutls_openpgp_crt_init
3493 gnutls_openpgp_key_import: RENAMED to gnutls_openpgp_crt_import
3494 gnutls_openpgp_key_export: RENAMED to gnutls_openpgp_crt_export
3495 gnutls_openpgp_key_check_hostname: RENAMED to gnutls_openpgp_crt_check_hostname
3496 gnutls_openpgp_key_get_creation_time: RENAMED to gnutls_openpgp_crt_get_creation_time
3497 gnutls_openpgp_key_get_expiration_time: RENAMED to gnutls_openpgp_crt_get_expiration_time
3498 gnutls_openpgp_key_get_fingerprint: RENAMED to gnutls_openpgp_crt_get_fingerprint
3499 gnutls_openpgp_key_get_version: RENAMED to gnutls_openpgp_crt_get_version
3500 gnutls_openpgp_key_get_pk_algorithm: RENAMED to gnutls_openpgp_crt_get_pk_algorithm
3501 gnutls_openpgp_key_get_name: RENAMED to gnutls_openpgp_crt_get_name
3502 gnutls_openpgp_key_deinit: RENAMED to gnutls_openpgp_crt_deinit
3503 gnutls_openpgp_key_get_id: RENAMED to gnutls_openpgp_crt_get_id
3504 gnutls_openpgp_key_get_key_usage: RENAMED to gnutls_openpgp_crt_get_key_usage
3505 gnutls_openpgp_key_verify_ring: RENAMED to gnutls_openpgp_crt_verify_ring
3506 gnutls_openpgp_key_verify_self: RENAMED to gnutls_openpgp_crt_verify_self
3508 * Version 2.1.3 (released 2007-10-17)
3510 ** TLS authorization support removed.
3511 This technique may be patented in the future, and it is not of crucial
3512 importance for the Internet community. After deliberation we have
3513 concluded that the best thing we can do in this situation is to
3514 encourage society not to adopt this technique. We have decided to
3515 lead the way with our own actions.
3517 ** Re-enabled the 256 bit ciphers in the default priorities.
3519 ** Corrected bugs in openpgp key verification using a keyring (both in
3522 ** API and ABI modifications:
3523 gnutls_certificate_set_openpgp_keyserver: REMOVED
3524 gnutls_authz_data_format_type_t,
3525 gnutls_authz_recv_callback_func,
3526 gnutls_authz_send_callback_func,
3527 gnutls_authz_enable,
3528 gnutls_authz_send_x509_attr_cert,
3529 gnutls_authz_send_saml_assertion,
3530 gnutls_authz_send_x509_attr_cert_url,
3531 gnutls_authz_send_saml_assertion_url: REMOVED.
3532 GNUTLS_SUPPLEMENTAL_USER_MAPPING_DATA: ADDED. To avoid that the
3533 gnutls_supplemental_data_format_type_t enum type becomes empty.
3535 * Version 2.1.2 (released 2007-10-14)
3537 ** Removed all the trustdb code from openpgp authentication.
3538 We now use only the well-specified keyrings.
3540 ** The 256 bit ciphers are not enabled in the default priorities.
3542 ** Added support for DSA2 using libgcrypt 1.3.0.
3544 ** certtool: Fixed data corruption when using --outder.
3546 ** Removed all the xml related stubs and functions.
3548 ** Added capability to set a callback after the client hello is received
3549 by the server in order to adjust parameters before the handshake.
3551 ** SRP was corrected to adhere to the latest draft (published soon as RFC)
3553 ** Corrected bug which did not allow a server to run without supporting
3556 ** Updated the DN parser which now prints wrongly decoded values as hex
3559 ** certtool: Add option --quick-random.
3560 For generating low security test credentials.
3562 ** API and ABI modifications:
3563 gnutls_x509_crt_to_xml: REMOVED
3564 gnutls_openpgp_key_to_xml: REMOVED
3565 gnutls_openpgp_key_verify_trustdb: REMOVED
3566 gnutls_openpgp_trustdb_init: REMOVED
3567 gnutls_openpgp_trustdb_deinit: REMOVED
3568 gnutls_openpgp_trustdb_import: REMOVED
3569 gnutls_certificate_set_openpgp_trustdb: REMOVED
3570 gnutls_srp_client_credentials_function: CHANGED
3571 gnutls_handshake_set_post_client_hello_function: ADDED
3572 gnutls_mac_get_key_size: ADDED
3573 GNUTLS_E_OPENPGP_TRUSTDB_VERSION_UNSUPPORTED: DEPRECATED.
3574 GNUTLS_A_MISSING_SRP_USERNAME: DEPRECATED
3575 GNUTLS_A_UNKNOWN_SRP_USERNAME: DEPRECATED
3577 * Version 2.1.1 (released 2007-09-24)
3579 ** Added support for Camellia cipher, thanks to Yoshisato YANAGISAWA.
3580 Camellia is only enabled in GnuTLS if the installed libgcrypt has been
3581 compiled with Camellia support. See the libgcrypt documentation on
3582 how to enable it. Unconditionally disable it using the configure
3583 option --disable-camellia. Fixes #1.
3585 ** Properly document in the NEWS file the API change in the last release.
3587 ** API and ABI modifications:
3588 No changes since last version.
3590 * Version 2.1.0 (released 2007-09-20)
3592 ** Support for draft-rescorla-tls-opaque-prf-input-00.txt.
3593 The support is disabled by default. Since no value has been allocated
3594 by the IANA for this extension yet, you will need to provide one
3595 yourself by invoking './configure --enable-opaque-prf-input=42'.
3598 ** Example code: Fix compilation flaw under MinGW.
3600 ** API and ABI modifications:
3601 gnutls_oprfi_callback_func: ADD, new typedef function prototype.
3602 gnutls_oprfi_enable_client: ADD, new function.
3603 gnutls_oprfi_enable_server: ADD, new function.
3605 * Version 2.0.4 (released 2007-11-16)
3607 ** Corrected bug in decompression of expanded compression data.
3609 ** API and ABI modifications:
3610 No changes since last version.
3612 * Version 2.0.3 (released 2007-11-10)
3614 ** This version backports several fixes from the 2.1.x branch.
3616 ** Fixed PKCS #3 parameter export.
3618 ** Added gnutls_record_disable_padding() to allow servers talking to
3619 buggy clients that complain if the TLS 1.0 record protocol padding is
3622 ** Introduced gnutls_session_enable_compatibility_mode() to allow enabling
3623 all supported compatibility options (like disabling padding).
3625 ** Corrected bug which did not allow a server to run without supporting
3628 ** API and ABI modifications:
3629 gnutls_session_enable_compatibility_mode: ADDED
3630 gnutls_record_disable_padding: ADDED
3632 * Version 2.0.2 (released 2007-10-17)
3634 ** TLS authorization support removed.
3635 This technique may be patented in the future, and it is not of crucial
3636 importance for the Internet community. After deliberation we have
3637 concluded that the best thing we can do in this situation is to
3638 encourage society not to adopt this technique. We have decided to
3639 lead the way with our own actions.
3641 ** certtool: Fixed data corruption when using --outder.
3643 ** Fix configure-time Guile detection.
3645 ** API and ABI modifications:
3646 GNUTLS_SUPPLEMENTAL_USER_MAPPING_DATA: ADDED. To avoid that the
3647 gnutls_supplemental_data_format_type_t enum type becomes empty.
3649 * Version 2.0.1 (released 2007-09-20)
3651 ** New directory doc/credentials/ with test credentials.
3652 This collects the test credentials from the web page and from src/.
3653 The script gnutls-http-serv has also been moved to that directory.
3655 ** Update SRP extension type and cipher suite with official IANA values.
3656 This breaks backwards compatibility with SRP in older versions of
3657 GnuTLS, but this is intentional to speed up the adoption of the
3658 official values. The old values we used were incorrect.
3660 ** Guile: Fix `x509-certificate-dn-oid'
3662 ** API and ABI modifications:
3663 No changes since last version.
3665 * Version 2.0.0 (released 2007-09-04)
3667 ** Included copy of Libtasn1 upgraded to version 1.1.
3669 ** Disable building of some examples if anonymous ciphers are disabled.
3671 ** Don't build examples for disabled features.
3673 ** API and ABI modifications:
3674 No changes since last version.
3676 * Version 1.7.19 (released 2007-08-27)
3678 ** Fix gnutls_error_is_fatal so that positive "errors" are non-critical.
3679 This solves connection problems in mutt, see
3680 <http://bugs.debian.org/439640>.
3682 ** Update gnulib files.
3683 In particular, the getpass module -- with its dependencies on getline,
3684 getdelim, fseeko etc -- where moved from the lgl/ (used by the core
3685 library) directory to the gl/ directory (only used by the command line
3686 tools). The reason is that getpass is now only used by the
3687 command-line tools, and reducing the number of gnulib modules linked
3688 to the core library helps portability and reduces size.
3692 ** Disable building of PGP examples if PGP is disabled.
3694 ** Included copy of OpenCDK upgraded to version 0.6.4.
3696 ** API and ABI modifications:
3697 No changes since last version.
3699 * Version 1.7.18 (released 2007-08-16)
3701 ** Install images for the info manual.
3702 This has a side effect of renaming the images. See
3703 <http://thread.gmane.org/gmane.comp.tex.texinfo.bugs/3533> for
3704 discussions on the approach chosen.
3706 ** Fix pointer mix to variables of different size.
3707 Patch extracted from
3708 <http://cvs.fedora.redhat.com/viewcvs/devel/gnutls/gnutls-1.6.3-incompat-pointers.patch?rev=1.1&view=auto>.
3710 ** Fix warnings during build.
3711 Thanks to Andreas Metzler <ametzler@downhill.at.eu.org>.
3713 ** API and ABI modifications:
3714 No changes since last version.
3716 * Version 1.7.17 (released 2007-08-15)
3718 ** New functions to perform external signing.
3719 Set the signing callback function (of the gnutls_sign_func prototype)
3720 using the gnutls_sign_callback_set function. In the callback, you may
3721 find the new functions gnutls_x509_privkey_sign_hash and
3722 gnutls_openpgp_privkey_sign_hash useful. A new function
3723 gnutls_sign_callback_get is also added, to retrieve the function
3724 pointer. Thanks to "Alon Bar-Lev" <alon.barlev@gmail.com> for
3725 comments and testing.
3727 ** New self test of client and server authenticated X.509 TLS sessions.
3728 See tests/x509self.c and tests/x509signself.c. The latter also tests
3729 the new external signing callback interface.
3731 ** New errors GNUTLS_E_APPLICATION_ERROR_MIN..GNUTLS_E_APPLICATION_ERROR_MAX.
3732 These two actually describe the outer limits of a range of error codes
3733 reserved to the application. All of the errors are treated as fatal
3734 by the library (it has to since it doesn't know the semantics of the
3735 error codes). This can be useful in callbacks, to signal some
3736 application-specific error condition, which will usually eventually
3737 cause some gnutls API to return the same error code as the callback,
3738 which then can be inspected by the application. Note that error codes
3741 ** gnutls_set_default_priority now disable TLS 1.2 by default.
3742 The RFC is not released yet, and we're approaching a major release so
3743 let's not enable it just yet.
3745 ** Fix namespace so that gnutls_*_t is used consistently.
3746 Before, many places in the GnuTLS code used the old deprecated type
3747 names without the '_t' suffix.
3749 ** Build fixes for Guile code.
3750 Patch from Ludovic Courtes <ludovic.courtes@laas.fr>.
3752 ** More documentation fixes.
3753 In particular, the section headings were modified for casing. By
3754 Ludovic Courtes <ludovic.courtes@laas.fr>.
3756 ** Updated Polish and Swedish translations.
3757 Thanks to Jakub Bogusz <qboosh@pld-linux.org> and Daniel Nylander
3758 <po@danielnylander.se>.
3760 ** API and ABI modifications:
3761 gnutls_sign_func: ADD, new type for sign callback.
3762 gnutls_sign_callback_set: ADD, new function to set sign callback.
3763 gnutls_sign_callback_get: ADD, new function to retrieve sign callback.
3764 gnutls_x509_privkey_sign_hash,
3765 gnutls_openpgp_privkey_sign_hash: ADD, new functions useful in sign callback.
3766 GNUTLS_E_APPLICATION_ERROR_MIN,
3767 GNUTLS_E_APPLICATION_ERROR_MAX: ADD, new CPP #defines for error codes.
3769 * Version 1.7.16 (released 2007-08-07)
3771 ** Fix sanity checks and return values in certificate selection.
3772 In some cases, GnuTLS omitted to report suitable error codes when no
3773 suitable certificate was found.
3775 ** Fix gnutls-cli starttls EOF on Mac OS X.
3776 Thanks to Hal Eden <n.mavrogiannopoulos@gmail.com>.
3778 ** Documentation fixes.
3779 In particular, the section headings were modified for casing. By
3780 Ludovic Courtes <ludovic.courtes@laas.fr>.
3782 ** Update gnulib files.
3784 ** API and ABI modifications:
3785 No changes since last version.
3787 * Version 1.7.15 (released 2007-07-02)
3789 ** Fix self-tests key-id under mingw32.
3791 ** Test that the Guile header files are recent enough to work.
3792 Before we just tested that the command line tool 'guile' was recent
3793 enough, which may not be sufficient if you still have an old
3794 libguile.h header installed.
3796 ** Guile bindings are now installed under $prefix by default.
3797 Use --without-guile-site-dir to install it under $pkgdatadir/site/
3798 where $pkgdatadir is as returned by "guile-config info pkgdatadir".
3799 Use --with-guile-site-dir=/your/own/path to specify the path manually.
3800 The default, --with-guile-site-dir, will install the Guile bindings
3801 under $datadir/guile/site. There is a new section 'Guile
3802 Preparations' in the manual that discuss these issues.
3804 ** Fix run-time library path ordering in linking the Guile bindings.
3806 ** Improved manual on downloading, installing, getting help, bug reports etc.
3807 Suggested by Ludovic Courtès <ludovic.courtes@laas.fr>.
3809 ** Add Malay message translations.
3810 Thanks to Sharuzzaman Ahmat Raslan <sharuzzaman@myrealbox.com>.
3812 ** API and ABI modifications:
3813 No changes since last version.
3815 * Version 1.7.14 (released 2007-06-26)
3817 ** Don't enable Guile bindings unless we have Guile 1.8 or later.
3818 Patch from Ludovic Courtès <ludovic.courtes@laas.fr>.
3820 ** Fix memory leak during DSA signature verification.
3821 Patch from Ludovic Courtès <ludovic.courtes@laas.fr>.
3823 ** Fix crash in gnutls-cli when TLS handshake fails.
3824 Reported by Marc Haber <mh+debian-bugs@zugschlus.de> and Andreas
3825 Metzler <ametzler@downhill.at.eu.org> via Debian BTS #429183, see
3826 <http://bugs.debian.org/429183>.
3828 ** Minor OpenPGP fixes in stream_to_datum.
3829 Patch from Timo Schulz <twoaday@freakmail.de> and Ludovic Courtès
3830 <ludovic.courtes@laas.fr>.
3832 ** Fix off-by-one in TLS 1.2 handshake.
3833 Patch from Ludovic Courtès <ludovic.courtes@laas.fr>.
3835 ** Minor Guile binding self-test cleanup.
3836 Patch from Ludovic Courtès <ludovic.courtes@laas.fr>.
3838 ** Update gnulib files.
3840 ** API and ABI modifications:
3841 No changes since last version.
3843 * Version 1.7.13 (released 2007-06-11)
3845 ** OpenCDK copy updated to version 0.6.3.
3847 ** Build fixes for GnuTLS Guile bindings.
3848 Patch from Ludovic Courtès <ludovic.courtes@laas.fr>.
3850 ** Build fix for GTK-DOC manual.
3852 ** Update gnulib files.
3854 ** API and ABI modifications:
3855 No changes since last version.
3857 * Version 1.7.12 (released 2007-06-08)
3859 ** Guile bindings for GnuTLS have been included.
3860 Contributed by Ludovic Courtès <ludovic.courtes@laas.fr>. There is a
3861 new chapter 'Guile Bindings' in the manual.
3863 ** Have PKCS8 parser return better error codes.
3864 Reported by Nate Nielsen <nielsen-list@memberwebs.com>, see
3865 <http://lists.gnupg.org/pipermail/gnutls-dev/2007-May/001653.html> and
3866 <http://lists.gnupg.org/pipermail/gnutls-dev/2007-May/001654.html>.
3868 ** Fix mem leak for sessions with client authentication via certificates.
3869 Reported by Andrew W. Nosenko <andrew.w.nosenko@gmail.com>, see
3870 <http://lists.gnupg.org/pipermail/gnutls-dev/2007-April/001539.html>.
3873 Reported by Dennis Vshivkov <walrus@amur.ru>, see
3874 <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=333050>. Added
3875 self-test tests/parse_ca.c to test regressions.
3877 ** Fix build failures related to missing images in manual.
3878 Reported by Andreas Metzler <ametzler@downhill.at.eu.org>.
3880 ** Update gnulib files.
3882 ** API and ABI modifications:
3883 No changes since last version.
3885 * Version 1.7.11 (released 2007-05-26)
3887 ** Include opencdk.h in the release.
3888 Reported by Roman Bogorodskiy <novel@FreeBSD.org>.
3890 ** API and ABI modifications:
3891 No changes since last version.
3893 * Version 1.7.10 (released 2007-05-25)
3895 ** New API functions to extract DER encoded X.509 Subject/Issuer DN.
3896 Suggested by Nate Nielsen <nielsen-list@memberwebs.com>.
3898 ** Update of gnulib files.
3900 ** GnuTLS is now developed in GIT instead of CVS.
3901 See <http://repo.or.cz/w/gnutls.git> for a public repository.
3903 ** API and ABI modifications:
3904 gnutls_x509_crt_get_raw_issuer_dn: ADD.
3905 gnutls_x509_crt_get_raw_dn: ADD.
3907 * Version 1.7.9 (released 2007-05-12)
3909 ** X.509 certificates are preferred over OpenPGP keys.
3910 This is a change in the semantics of gnutls_set_default_priority.
3912 ** The included copy of OpenCDK has been updated to 0.6.1.
3913 There has been some API changes in OpenCDK, and the GnuTLS layer have
3914 been modified as well. Note that while there are API/ABI incompatible
3915 changes in OpenCDK, this does not influence GnuTLS's API/ABI because
3916 its API/ABI have not changed. From this version on, GnuTLS requires
3917 OpenCDK 0.6.0 or later.
3919 ** Fix build failure caused by missing doc/gnutls-logo.pdf.
3921 ** Change certtool's default serial number from 0 to a time-based value.
3923 ** Fix X.509 signing with RSA-PKCS#1 to set a NULL parameters fields.
3924 Before, we remove the parameters field, which resulted in a slightly
3925 different DER encoding which in turn caused signature verification
3926 failures of GnuTLS-generated RSA certificates in some other
3927 implementations (e.g., GnuPG 2.x's gpgsm). Depending on which RFCs
3928 you read, this may or may not be correct, but our new behaviour appear
3929 to be consistent with other widely used implementations.
3931 ** Fix mem leaks in gnutls_x509_crt_print.
3933 ** API and ABI modifications:
3934 No changes since last version.
3936 * Version 1.7.8 (released 2007-04-16)
3938 ** Added examples for the authorization extension.
3939 See doc/examples/ex-client-authz.c and doc/examples/ex-serv-authz.c.
3941 ** The examples only use gnutls_set_default_priority().
3942 The exception is when DH_ANON is needed.
3944 ** Improve gnutls_set_default_priority() priorities.
3945 The new approach is for it to try and negotiate all secure and
3946 standard mechanisms available. Currently, DH_ANON ciphersuites and
3947 LZO compressions are not enabled by default, because they are,
3948 respectively, insecure and non-standardized. Note that TLS 1.2 will
3949 not be enabled by default in non-experimental release until it has
3950 been approved by the IETF.
3952 ** gnutls-cli and gnutls-serv now uses the library's default priorities.
3953 This means that to get DH_ANON and LZO compression, you'll need to
3954 specify that manually using '--kx anon' or '--comp lzo'.
3956 ** Minor fixes to the human display format of X.509 certificates.
3958 ** New APIs to extract Distinguished Name's from X.509 certificates.
3959 Based on patch from Howard Chu <hyc@symas.com>.
3961 ** Improved library searching for opencdk.
3962 It will now add the appropriate -R or -Wl,-rpath flags as necessary.
3963 The deprecated opencdk.m4 is no longer used.
3965 ** New APIs to list supported algorithms in the library.
3966 The APIs are gnutls_cipher_list, gnutls_mac_list,
3967 gnutls_compression_list, gnutls_protocol_list,
3968 gnutls_certificate_type_list, gnutls_kx_list, and
3969 gnutls_cipher_suite_info. Suggested by Howard Chu <hyc@symas.com>.
3971 ** The gnutls_x509_crt_get_key_id API now handle non-RSA/DSA keys.
3973 ** New configure option --disable-tls-authorization to disable tls-authz.
3975 ** Fix prototype for `gnutls_psk_set_client_credentials'.
3976 The last parameter was renamed from 'flags' to 'format' and the type
3977 changed from 'unsigned int' to 'gnutls_psk_key_flags' (an enum type),
3978 which shouldn't cause any ABI changes. Reported by ludo@chbouib.org
3981 ** Fix allocation in gnutls_certificate_set_openpgp_key.
3982 Tiny patch from ludo@chbouib.org (Ludovic Courtès).
3984 ** API and ABI modifications:
3985 gnutls_x509_dn_t: ADD.
3986 gnutls_x509_ava_st: ADD.
3987 gnutls_x509_crt_get_subject,
3988 gnutls_x509_crt_get_issuer: ADD.
3989 gnutls_x509_dn_get_rdn_ava: ADD.
3990 gnutls_cipher_list: ADD.
3991 gnutls_mac_list: ADD.
3992 gnutls_compression_list: ADD.
3993 gnutls_protocol_list: ADD.
3994 gnutls_certificate_type_list: ADD.
3995 gnutls_kx_list: ADD.
3996 gnutls_cipher_suite_info: ADD.
3998 * Version 1.7.7 (released 2007-02-22)
4000 ** Support for supplemental handshake messages and authorization data.
4001 Supplemental data is described in RFC 4680 and the authorization
4002 extensions in draft-housley-tls-authz-extns-07.
4004 ** Support for authorization data in gnutls-cli and gnutls-serv.
4005 New parameters --authz-x509-attr-cert and --authz-saml-assertion.
4007 ** Fix for gnutls_x509_crt_check_hostname.
4008 Before it would have reported that the certificate matched a hostname
4009 when it did not have any dNSName or any CN field. Report and tiny
4010 patch from "Richard W.M. Jones" <rjones@redhat.com>.
4012 ** New self test for RFC 2818 comparison in gnutls_x509_crt_check_hostname.
4013 Tests regressions of the bug, and several other features.
4015 ** GnuTLS now matches URI's with IP Addresses against iPAddress SAN's.
4016 Before there were no support for iPAddress SAN's during comparison.
4018 ** New API to print information about CRL's.
4019 The function is gnutls_x509_crl_print.
4021 ** New API to extract signature value from CRL's.
4022 The function is gnutls_x509_crl_get_signature.
4024 ** Support for directoryName Subject Alternative Name's.
4025 The gnutls_x509_crt_get_subject_alt_name function returns the DN as a
4026 string in the provided buffer.
4028 ** Internal improvements to certtool.
4029 It uses gnutls_x509_crl_print to print CRL information. It uses some
4030 more gnulib modules to simplify error handling.
4032 ** API and ABI modifications:
4033 GNUTLS_HANDSHAKE_SUPPLEMENTAL: ADD, new gnutls_handshake_description_t element.
4034 gnutls_supplemental_data_format_type_t: ADD.
4035 gnutls_authz_data_format_type_t: ADD.
4036 gnutls_supplemental_get_name: ADD.
4037 gnutls_authz_recv_callback_func,
4038 gnutls_authz_send_callback_func: ADD, callback prototypes.
4039 gnutls_authz_enable: ADD.
4040 gnutls_authz_send_x509_attr_cert,
4041 gnutls_authz_send_saml_assertion,
4042 gnutls_authz_send_x509_attr_cert_url,
4043 gnutls_authz_send_saml_assertion_url: ADD.
4044 GNUTLS_SAN_DN: ADD, new gnutls_x509_subject_alt_name_t element.
4045 gnutls_x509_crl_print: ADD.
4046 gnutls_x509_crl_get_signature: ADD.
4048 * Version 1.7.6 (released 2007-02-12)
4050 ** Support for 'otherName' Subject Alternative Names.
4051 The existing API gnutls_x509_crt_get_subject_alt_name may now return
4052 the new type GNUTLS_SAN_OTHERNAME together with the otherName value.
4053 To find out the otherName OID (necessary for proper parsing of the
4054 value), use the new API gnutls_x509_crt_get_subject_alt_othername_oid.
4055 For known OIDs, gnutls_x509_crt_get_subject_alt_othername_oid will
4056 return "virtual" SAN values, e.g., GNUTLS_SAN_OTHERNAME_XMPP to
4057 simplify OID matching. Suggested by Matthias Wimmer <m@tthias.eu>.
4059 ** Certtool can print otherName SAN values for certificates.
4060 For known otherName OIDs (currently only id-on-xmppAddr as defined by
4061 RFC 3920), it will also print the name.
4063 ** Fix TLS 1.2 RSA signing in servers.
4064 Before it used the old-style MD5+SHA1 signature, but the TLS
4065 signatures should be normal PKCS#1 signatures. FYI, we use and
4066 require that DigestInfo parameters are present and NULL for TLS 1.2.
4068 ** Add APIs to access X.509 extensions sequentially.
4069 The existing APIs gnutls_x509_crt_get_extension_oid() and
4070 gnutls_x509_crt_get_extension_by_oid() does not permit callers to
4071 inspect the extensions in the order defined by the certificate.
4073 ** Add API to extract signature value from X.509 certificates.
4074 The function is gnutls_x509_crt_get_signature.
4076 ** Fix crash when generating proxy certificates in batch mode.
4077 If you don't specify a proxy policy in batch mode, it will use
4080 ** Add API to print information about X.509 certificates.
4081 The function is gnutls_x509_crt_print.
4083 ** Certtool uses the new API gnutls_x509_crt_print to print certificate info.
4084 One consequence of this is that the output syntax has changed
4085 slightly. Some more fields are printed.
4089 ** API and ABI modifications:
4090 gnutls_x509_crt_print: ADD
4091 gnutls_certificate_print_formats_t: ADD, new enum.
4092 gnutls_x509_crt_get_signature: ADD.
4093 gnutls_x509_crt_get_extension_data: ADD.
4094 gnutls_x509_crt_get_extension_info: ADD.
4095 gnutls_x509_crt_get_subject_alt_othername_oid: ADD.
4096 GNUTLS_SAN_OTHERNAME: ADD, new gnutls_x509_subject_alt_name_t element.
4097 GNUTLS_SAN_OTHERNAME_XMPP: ADD, new gnutls_x509_subject_alt_name_t element.
4099 * Version 1.7.5 (released 2007-02-06)
4101 ** Servers won't negotiate SRP RSA/DSS cipher suites if no SRP credential
4104 ** Default behaviour for the gnutls-cli and gnutls-serv tools improved.
4106 ** Fix --list output for gnutls-cli and gnutls-serv.
4107 Mention TLS1.2, SHA512 etc.
4109 ** Manual contains new section on setting up a test HTTP server.
4110 A server set up following those descriptions are available online via
4111 <http://www.gnutls.org/server.html>.
4113 ** Update of gnulib files.
4115 ** API and ABI modifications:
4116 No changes since last version.
4118 * Version 1.7.4 (released 2007-02-05)
4120 ** Support for RSA signing using SHA-256/384/512.
4121 A new self test "sha2" tries to build a long X.509 certificate chain
4122 testing all new hashes.
4124 ** The gnutls-serv tool now use static DH parameters if none are supplied.
4126 ** Discuss proxy certificates in the manual.
4128 ** Improve bibliographical citations in the manual.
4130 ** Update of gnulib files.
4132 ** Fix certtool template handling of pathLenConstraints.
4133 It now defaults to -1 instead of 0, which causes the field to be
4134 missing unless the template specify it.
4136 ** API and ABI modifications:
4139 GNUTLS_MAC_SHA512: New gnutls_mac_algorithm_t values.
4142 GNUTLS_DIG_SHA512: New gnutls_digest_algorithm_t values.
4143 GNUTLS_SIGN_RSA_SHA256,
4144 GNUTLS_SIGN_RSA_SHA384,
4145 GNUTLS_SIGN_RSA_SHA512: New gnutls_sign_algorithm_t values.
4147 * Version 1.7.3 (released 2007-02-01)
4149 ** New option to certtool: --generate-proxy.
4150 This will generate a Proxy Certificate from an end entity certificate.
4151 Proxy Certificates are documented in RFC 3820. You will need to
4152 specify the proxy certificate's private key with --load-privkey, the
4153 user certificate with --load-certificate and the private key used to
4154 sign the new proxy certificate with --load-ca-privkey. Certtool will
4155 query for proxy path length and the policy language OID. Currently
4156 only OIDs that have an empty policy are supported (which includes the
4157 two OIDs defined by RFC 3820).
4159 ** Certtool --certificate-info now prints information for Proxy Certificates.
4160 Before the proxy extension was just printed as DER encoded data.
4162 ** New APIs to set proxy subject names and get/set proxy cert extension.
4164 ** Fix parsing of pathLenConstraints in BasicConstraints with missing cA.
4166 ** Added self-test to test for regressions of pathLenConstraint bug.
4167 Incidentally, this also test (some) other regressions or changes in
4168 the output from certtool --certificate-info.
4170 ** When certtool generates CA certificates, pressing enter on the path
4171 ** length constraint query will now remove the field.
4172 Before it set the path length constraint to 0, which is a rather poor
4175 ** Certtool now print times in UTC when printing certificate/CRL info.
4177 ** Add better fix to work around C++ compiler bug on Mac OS X.
4178 Reported and tiny patch provided by Matthias Scheler <tron@NetBSD.org>.
4180 ** Fix import of ASCII armored OpenPGP keys.
4181 Patch by ludovic.courtes@laas.fr (Ludovic Courtès).
4183 ** Update of gnulib files.
4185 ** API and ABI modifications:
4186 gnutls_x509_crt_set_proxy_dn: ADD.
4187 gnutls_x509_crt_set_proxy: ADD.
4188 gnutls_x509_crt_get_proxy: ADD.
4190 * Version 1.7.2 (released 2007-01-14)
4192 ** Certtool now print the value of the pathLenConstraints field for certs.
4194 ** Certtool now query for path length constraints when generating CA certs.
4195 For batch uses, the certtool configuration name is "path_len".
4196 Suggested by Sascha Ziemann <sascha.ziemann@secunet.com>.
4198 ** Add new API to get/set pathLenConstraint in the Basic Constraints.
4199 The new functions gnutls_x509_crt_get_basic_constraints and
4200 gnutls_x509_crt_set_basic_constraints provide a superset of the
4201 functionality in the old gnutls_x509_crt_get_ca_status and
4202 gnutls_x509_crt_set_ca_status (respectively), but the old functions
4203 will continue to be supported.
4205 ** Add new API in OpenCDK to extract public/secret OpenPGP key to S-expr.
4206 The functions are cdk_pubkey_to_sexp and cdk_seckey_to_sexp. A proper
4207 OpenCDK release with this patch will be made soon, which should bump
4208 the OpenCDK version number. Patch by Mario Lenz <mario.lenz@gmx.net>.
4210 ** Certtool --to-p12 can now store more than one certificate in the blob.
4211 Before it could only store one certificate, but now it will read and
4212 store as many certificate there are from the --load-certificate file.
4213 Suggested by Sascha Ziemann <sascha.ziemann@secunet.com>.
4215 ** Clean up separation of gnutls and gnutls-extra for OpenPGP.
4216 In particular, the OpenPGP function variables are no longer part of
4217 the exported libgnutls interface, and no header files from
4218 libgnutls-extra (GPL) are needed by libgnutls (LGPL). The variables
4219 were never intended for non-internal purposes, and thus this does not
4220 imply a change in the external API/ABI.
4222 ** Print URL to gaa when missing, and fix srcdir!=builddir for GAA files.
4223 Reported by ludovic.courtes@laas.fr (Ludovic Courtès).
4225 ** GnuTLS no longer uses -mms-bitfields --enable-runtime-pseudo-reloc.
4226 Before these parameters were set to make GnuTLS build under mingw32,
4227 however, they appear to no longer be necessary.
4229 ** A minor fix to the C++ library to make it build.
4230 Reported by Pavlov Konstantin <thresh@altlinux.ru>.
4232 ** Update of gnulib files.
4234 ** API and ABI modifications:
4235 gnutls_x509_crt_get_basic_constraints: ADD.
4236 gnutls_x509_crt_set_basic_constraints: ADD.
4237 cdk_pubkey_to_sexp: ADD (in opencdk).
4238 cdk_seckey_to_sexp: ADD (in opencdk).
4240 * Version 1.7.1 (released 2006-12-28)
4242 ** TLS 1.2 server side fix.
4243 The Certificate Request sent did not contain the list of supported
4244 hashes field, thus violating the protocol. It will now contain an
4245 empty list. Reported by ludovic.courtes@laas.fr (Ludovic Courtès).
4247 ** TLS 1.2 DSA signature verification fix.
4248 Reported by ludovic.courtes@laas.fr (Ludovic Courtès).
4250 ** Fix the list of trusted CAs that server's send to clients.
4251 Before, the list contained issuer DN's instead of subject DN's of the
4252 trusted CAs. Reported by Max Kellermann <max@duempel.org>.
4254 ** Fix gnutls_certificate_set_x509_crl to initialize the CRL before using it.
4255 Also added a self-test in tests/certificate_set_x509_crl.c to test the
4256 function. Reported by Max Kellermann <max@duempel.org>.
4258 ** Encode UID fields in DN's as DirectoryString.
4259 Before GnuTLS encoded and parsed UID fields as IA5String. This was
4260 incorrect, it should have used DirectoryString. Now it will use
4261 DirectoryString for the UID field, but for backwards compatibility it
4262 will also accept IA5String UID's. Reported by Max Kellermann
4265 ** Improve out-of-sourcedir builds from CVS.
4266 Reported by ludovic.courtes@laas.fr (Ludovic Courtès).
4268 ** Bootstrap tools changed.
4269 We now require autoconf 2.61, automake 1.10, and gettext 0.16, when
4270 building GnuTLS from CVS. Libtool 1.5.22 is used.
4272 ** Fixed a syntax error in lib/gnutls.asn.
4273 Reported by Paul Millar <p.millar@physics.gla.ac.uk>.
4275 ** Added German translation of GnuTLS messages.
4277 ** Update of gnulib files.
4279 ** API and ABI modifications:
4280 No changes since last version.
4282 * Version 1.7.0 (released 2006-11-29)
4284 ** The default protocol priority try TLS 1.1 and TLS 1.2 too.
4285 The details is that the protocol priority set by
4286 `gnutls_set_default_priority' has been changed from TLS 1.0 and SSL
4287 3.0 to TLS 1.2, TLS 1.1, TLS 1.0 and SSL 3.0.
4289 ** Preliminary support for TLS 1.2.
4290 The client has been successfully tested against
4291 https://www.mikestoolbox.org:4433/.
4293 ** Anonself test now print a lot of debugging info, including TLS version.
4295 ** Doc fixes in OpenCDK, to avoid some gtk-doc warnings.
4297 ** Update of gnulib files.
4299 ** API and ABI modifications:
4300 GNUTLS_TLS1_2: New gnutls_protocol_t enum member.
4302 *** Pulled up from stable 1.6.x branch:
4304 ** Fix ./configure failure with non-GCC compilers.
4305 This fixes the following error message:
4306 configure: error: conditional "HAVE_LD_OUTPUT_DEF" was never defined.
4307 Reported by "Michael C. Vergallen" <mvergall@telenet.be>.
4309 * Version 1.6.3 (released 2007-05-26)
4311 ** New API functions to extract DER encoded X.509 Subject/Issuer DN.
4312 Suggested by Nate Nielsen <nielsen-list@memberwebs.com>. Backported
4313 from the 1.7.x branch, see
4314 <http://lists.gnu.org/archive/html/help-gnutls/2007-05/msg00029.html>.
4316 ** Have PKCS8 parser return better error codes.
4317 Reported by Nate Nielsen <nielsen-list@memberwebs.com>, see
4318 <http://lists.gnupg.org/pipermail/gnutls-dev/2007-May/001653.html> and
4319 <http://lists.gnupg.org/pipermail/gnutls-dev/2007-May/001654.html>.
4321 ** Fix mem leak for sessions with client authentication via certificates.
4322 Reported by Andrew W. Nosenko <andrew.w.nosenko@gmail.com>, see
4323 <http://lists.gnupg.org/pipermail/gnutls-dev/2007-April/001539.html>.
4325 ** Fix building of 'tlsia' self test.
4326 Earlier some gcc are known to build tlsia linking to
4327 $prefix/lib/libgnutls-extra.so rather than the libgnutls-extra.so in
4328 the build directory, even though command line parameters look OK.
4329 Changing order of some parameters fixes it.
4331 ** API and ABI modifications:
4332 gnutls_x509_crt_get_raw_issuer_dn: ADD.
4333 gnutls_x509_crt_get_raw_dn: ADD.
4335 * Version 1.6.2 (released 2007-04-18)
4337 ** Fix X.509 signing with RSA-PKCS#1 to set a NULL parameters fields.
4338 Before, we remove the parameters field, which resulted in a slightly
4339 different DER encoding which in turn caused signature verification
4340 failures of GnuTLS-generated RSA certificates in some other
4341 implementations (e.g., GnuPG 2.x's gpgsm). Depending on which RFCs
4342 you read, this may or may not be correct, but our new behaviour appear
4343 to be consistent with other widely used implementations.
4345 ** Regenerate the PKIX ASN.1 syntax tree.
4346 For some reason, after changing the ASN.1 type of ldap-UID in the last
4347 release, the generated C file built from the ASN.1 schema was not
4348 refreshed. This can cause problems when reading/writing UID
4349 components inside X.500 Distinguished Names. Reported by devel
4350 <dev001@pas-world.com>.
4352 ** Updated translations.
4354 ** API and ABI modifications:
4355 No changes since last version.
4357 * Version 1.6.1 (released 2006-12-28)
4359 ** Fix the list of trusted CAs that server's send to clients.
4360 Before, the list contained issuer DN's instead of subject DN's of the
4361 trusted CAs. Reported by Max Kellermann <max@duempel.org>.
4363 ** Fix gnutls_certificate_set_x509_crl to initialize the CRL before using it.
4364 Reported by Max Kellermann <max@duempel.org>.
4366 ** Encode UID fields in DN's as DirectoryString.
4367 Before GnuTLS encoded and parsed UID fields as IA5String. This was
4368 incorrect, it should have used DirectoryString. Now it will use
4369 DirectoryString for the UID field, but for backwards compatibility it
4370 will also accept IA5String UID's. Reported by Max Kellermann
4373 ** Fix ./configure failure with non-GCC compilers.
4374 This fixes the following error message:
4375 configure: error: conditional "HAVE_LD_OUTPUT_DEF" was never defined.
4376 Reported by "Michael C. Vergallen" <mvergall@telenet.be>.
4378 ** API and ABI modifications:
4379 No changes since last version.
4381 * Version 1.6.0 (released 2006-11-17)
4383 ** No changes since 1.5.5.
4384 The major changes compared to the 1.4.x branch are:
4386 *** A GnuTLS C++ library is part of the official distribution.
4387 Currently there are no examples or documentation, but hopefully this
4388 will change. See gnutlsxx.h for the API.
4390 *** Windows is a supported platform.
4391 There are, however, two know bugs. One is related to select() in
4392 command line tools (not, nota bene, in the library), the other is a
4393 problem with libgcrypt that causes delays. Help is needed to resolve
4394 those issues, so we feel we can't delay the release because of this.
4396 *** New APIs for custom push/pull function error reporting.
4397 The new APIs are gnutls_transport_set_errno and
4398 gnutls_transport_set_global_errno. See the release notes for version
4399 1.5.4 for more information.
4401 *** Self tests are run under valgrind, if available. See --disable-valgrind.
4403 * Version 1.5.5 (released 2006-11-16)
4405 ** Correctly bump shared library version after adding new APIs.
4406 This was forgotten in the last release.
4408 ** Fix unsigned vs signed problem in ex-x509-info.c example.
4409 Reported by Tim Kosse <tim.kosse@filezilla-project.org>.
4411 ** Fix the rsa-md5-collision self test to work for MinGW+Wine.
4413 ** Update of gnulib files.
4415 ** API and ABI modifications:
4416 No changes since last version.
4418 * Version 1.5.4 (released 2006-11-07)
4420 ** New API functions to set errno in push/pull functions.
4421 Under Windows, setting the errno variable in a push/pull replacement
4422 may end up setting the wrong errno variable, and GnuTLS send/recv
4423 functions become confused about the real errno returned from a failed
4424 push/pull function. Therefor, we have added two APIs to set the errno
4425 variable used by GnuTLS. The APIs can also help to keep things
4426 thread-safe, by avoiding potentially global variables. Typically,
4427 instead of setting errno in your push/pull function, you will call one
4428 of these functions. It is recommended to use
4429 gnutls_transport_set_errno, but if you don't have the session variable
4430 easily accessible in the push/pull replacement function, you can use
4431 gnutls_transport_set_global_errno. Suggested by Tim Kosse
4432 <tim.kosse@filezilla-project.org>.
4434 void gnutls_transport_set_errno (gnutls_session_t session, int err);
4435 void gnutls_transport_set_global_errno (int err);
4437 ** When calling `recv' or `send' Windows errors are handled properly.
4438 The Windows recv/send functions doesn't use errno, and GnuTLS now use
4439 WSAGetLastError to access the error condition instead.
4441 ** Several OpenPGP API fixes.
4442 All suggested by ludovic.courtes@laas.fr (Ludovic Courtès). The most
4443 important fix is to change the return value of
4444 gnutls_openpgp_privkey_get_pk_algorithm and
4445 gnutls_openpgp_key_get_pk_algorithm from 'int' to
4446 'gnutls_pk_algorithm_t', which is an enum type (and thus API/ABI
4447 compatible with 'int').
4449 ** When a GnuTLS server receive a SSLv2 Client Hello for an unknown TLS
4450 ** version, try to negotiate the highest version support by the GnuTLS server,
4451 ** instead of the lowest.
4452 Reported by <Pasi.Eronen@nokia.com>.
4454 ** Replace old constructs with use of gnulib modules.
4455 For example, we can now assume unistd.h, sys/stat.h, sys/socket.h in
4456 the code. If the headers doesn't exist on the target system, gnulib
4457 will make sure its replacement header files are used instead.
4459 ** Fix SOVERSION computation for *.def files.
4460 This fixes build errors similar to "No rule to make target
4461 `libgnutls-`expr', needed by `all-am'." when building for Windows.
4463 ** gnutls_check-version uses strverscmp from gnulib.
4465 ** Update of gnulib files.
4467 ** API and ABI modifications:
4468 gnutls_transport_set_errno: ADD
4469 gnutls_transport_set_global_errno: ADD
4471 * Version 1.5.3 (released 2006-10-26)
4473 ** Add new self-test of RSA-MD5 signature chains.
4474 Note that we already, since GnuTLS 1.2.9, reject RSA-MD5 signatures
4475 when verifying X.509 chains. The code is in tests/rsa-md5-collision/
4476 and is based on the work by Marc Stevens et al, see
4477 <http://www.win.tue.nl/hashclash/TargetCollidingCertificates/>.
4479 ** Re-factor self tests.
4481 ** The include copy of Libtasn1 is updated to version 0.3.7.
4483 ** The included copy of OpenCDK is updated to version 0.5.11.
4485 ** Fix the filename of the *.def file on Windows after library version bump.
4487 ** Separated the gnulib directory into one for LGPL modules and one for GPL.
4488 This allows the GPL'd part of GnuTLS to take advantage of the GPL'd
4489 gnulib modules. Earlier we could only use the LGPL'ed module from
4490 gnulib, because two gnulib directories in the same project didn't
4493 ** API and ABI modifications:
4494 No changes since last version.
4496 * Version 1.5.2 (released 2006-10-03)
4498 ** Decrement the shared library version back to 13 (as in the 1.4.x branch).
4499 Note that if you installed 1.5.0 or 1.5.1, they will have a higher
4500 shared library version than this version, so you'll have to remove
4501 them and possibly relink your applications. The reason for this is
4502 that no API/ABI changes have been made since the 1.4.x branch, and
4503 that incrementing the shared library version was a mistake. Reported
4504 by Andreas Metzler <ametzler@downhill.at.eu.org>.
4506 ** Fix off-by-one error when computing length to malloc.
4507 The code is used by gnutls_openpgp_add_keyring_file and
4508 gnutls_openpgp_add_keyring_mem. Reported by "Adam Langley"
4509 <agl@imperialviolet.org>.
4511 ** Add version script for the GnuTLS C++ library.
4512 Reported by Andreas Metzler <ametzler@downhill.at.eu.org>.
4514 ** Fix the C++ compiler detection logic.
4515 Reported by Andreas Metzler <ametzler@downhill.at.eu.org>.
4517 ** Update of gnulib files.
4519 ** API and ABI modifications:
4520 No changes since last version.
4522 * Version 1.5.1 (released 2006-09-21)
4524 ** Fix PKCS#1 verification to avoid a variant of Bleichenbacher's
4525 ** Crypto 06 rump session attack.
4526 In particular, we check that the digestAlgorithm.parameters field is
4527 missing or empty, to avoid that it can contain "garbage" that may be
4528 used to alter the numeric properties of the signature. See
4529 <http://www.imc.org/ietf-openpgp/mail-archive/msg14307.html> (which is
4530 not exactly the same as the problem we fix here). Reported by Yutaka
4531 OIWA <y.oiwa@aist.go.jp>.
4533 See GNUTLS-SA-2006-4 on http://www.gnutls.org/security.html for more
4534 up to date information.
4536 ** Add self test to test for above flaw.
4538 ** Fix gnutls-cli-debug regarding resume support detection.
4539 Earlier, if the session-id from the server had a length of 0, it would
4540 indicate that the server supports resumption, which isn't the case.
4541 Reported by Kataja Kai <kai.kataja@op.fi>.
4543 ** Fix building of examples on FreeBSD by including netinet/in.h.
4544 Reported by Roman Bogorodskiy <novel@FreeBSD.org>.
4546 ** Fix certtool bug that caused the private key to not be loaded when
4547 generating a certificate with --load-request, which in turn triggered
4548 another unrelated bug in gnutls_x509_crt_sign2 (also fixed). Reported
4549 by Sascha Ziemann <sascha.ziemann@secunet.com>.
4551 ** gnutls-cli and gnutls-serv works on Windows.
4552 The problem was the select() call that doesn't work on file
4553 descriptors (stdin) on Windows. We borrowed some code from plibc to
4554 solve this. It appears to be somewhat unreliable though.
4556 ** Autoconf 2.60 is now used.
4558 ** API and ABI modifications:
4559 No changes since last version.
4561 * Version 1.5.0 (released 2006-08-13)
4563 ** Change SRP and Cert-Type extensions to match IANA registry.
4565 ** Fixed bug in OpenPGP authentication handshake.
4567 ** Improvements for building under MinGW.
4568 Provides internal inet_ntop and inet_pton functions and arpa/inet.h
4569 header. Calls WSAStartup and WSACleanup in gnutls_global_init and
4570 gnutls_global_deinit, respectively. Loads getaddrinfo and getnameinfo
4571 at run-time from ws2_32.dll, and falls back on a simple replacement if
4572 it is not available. Builds the library with -mms-bitfields
4573 -Wl,--enable-runtime-pseudo-reloc. Links with --output-def, to
4574 create *.def files, which are installed.
4576 ** The examples now (conditionally) include config.h and link to gnulib.
4577 No other source changes were necessary, so the examples should
4578 continue to be possible to use stand-alone without any autoconf or
4581 ** Added C++ header "gnutlsxx.h" and library "libgnutlsxx".
4582 You may unconditionally disable it with --disable-cxx. See
4583 includes/gnutls/gnutlsxx.h and lib/gnutlsxx.cpp for the
4586 ** Made command line tool '--version' behave according to GNU Standards.
4587 This enables 'make distcheck' to succeed.
4589 ** OpenCDK updated to 0.5.9 to fix some problems with OpenPGP support.
4591 ** Make --without-included-libtasn1 work.
4592 Reported by Daniel Black <dragonheart@gentoo.org>.
4594 ** Fix a crash (strcmp() on a NULL value) in the certificate verification logic.
4595 See http://www.gnu.org/software/gnutls/security.html regardging
4596 GNUTLS-SA-2006-2 for more up to date information. Reported by
4597 satyakumar <satyam_kkd@hyd.hellosoft.com>.
4599 ** API and ABI modifications:
4600 No changes since last version.
4602 * Version 1.4.5 (released 2006-11-06)
4604 ** When a GnuTLS server receive a SSLv2 Client Hello for an unknown TLS
4605 ** version, try to negotiate the highest version support by the GnuTLS server,
4606 ** instead of the lowest.
4607 Reported by <Pasi.Eronen@nokia.com>.
4609 ** Fix typo in doc/examples/ex-serv-pgp.c.
4610 Reported by Adam Langley" <agl@imperialviolet.org>.
4612 ** API and ABI modifications:
4613 No changes since last version.
4615 * Version 1.4.4 (released 2006-09-12)
4617 ** Relax the test that caught signatures that exploit the variant of
4618 ** Bleichenbacher's Crypto 06 rump session attack on our
4619 ** verification logic flaw.
4620 In particular, we now permit the digestAlgorithm.parameters field to
4621 be present but empty, whereas in 1.4.3 we actually checked that the
4624 ** Revert the removal of debug information for the GNUTLS-SA-2006-3 problem.
4625 The messages are only printed in debug mode, which is not recommended
4626 for normal use, and thus logging this situation cannot be abused as an
4627 oracle in typical recommended situations.
4629 ** API and ABI modifications:
4630 No changes since last version.
4632 * Version 1.4.3 (released 2006-09-08)
4634 ** Fix PKCS#1 verification to avoid a variant of Bleichenbacher's
4635 ** Crypto 06 rump session attack.
4636 In particular, we check that the digestAlgorithm.parameters field is
4637 empty, to avoid that it can contain "garbage" that may be used to
4638 alter the numeric properties of the signature. See
4639 <http://www.imc.org/ietf-openpgp/mail-archive/msg14307.html> (which is
4640 not exactly the same as the problem we fix here). Reported by Yutaka
4641 OIWA <y.oiwa@aist.go.jp>.
4643 See GNUTLS-SA-2006-4 on http://www.gnutls.org/security.html for more
4644 up to date information.
4646 ** Fix PKCS#1 decryption to avoid Bleichenbacher's Crypto 98 attack.
4647 See <http://www.bell-labs.com/user/bleichen/papers/pkcs.ps.gz>.
4648 Reported by Werner Koch <wk@gnupg.org>.
4650 See GNUTLS-SA-2006-3 on http://www.gnutls.org/security.html for more
4651 up to date information.
4653 ** Fix crash in gnutls_x509_crt_sign2 if passed a NULL issuer_key.
4655 ** API and ABI modifications:
4656 No changes since last version.
4658 * Version 1.4.2 (released 2006-08-12)
4660 ** Fix a crash (strcmp() on a NULL value) in the certificate verification logic.
4661 This can happen if you call gnutls_certificate_verify_peers2 and have
4662 a certain mix of local CA certificates and the peer send special
4663 certificates, that together trigger certain behaviour. It is not
4664 known at this point whether the crash can be triggered without the
4665 special local CA certificate, and thus turn this into a remote crash
4666 of clients that verify server certificates when they talk to a server
4667 with the special server certificate. See GNUTLS-SA-2006-2 on
4668 http://www.gnu.org/software/gnutls/security.html for more up to date
4669 information. Reported by satyakumar <satyam_kkd@hyd.hellosoft.com>.
4671 ** Change SRP and Cert-Type extensions to match IANA registry.
4673 ** OpenCDK updated to 0.5.9 to fix some problems with OpenPGP support.
4675 ** Make --without-included-libtasn1 work.
4676 Reported by Daniel Black <dragonheart@gentoo.org>.
4678 ** API and ABI modifications:
4679 No changes since last version.
4681 * Version 1.4.1 (released 2006-06-14)
4683 ** Replaced inactive ifdefs to enable openpgp support in test programs.
4685 ** Fixed bug in OpenPGP authentication handshake.
4687 ** Fixed typographical in man pages.
4689 ** Build fixes of the manual.
4691 ** Added Swedish translation.
4693 ** API and ABI modifications:
4694 No changes since last version.
4696 * Version 1.4.0 (released 2006-05-15)
4698 ** Remove GnuTLS 0.8.x compatibility functions.
4700 ** The libgcrypt RNG is initialized in gnutls_global_init().
4702 ** TLS/IA API changes from Emile van Bergen.
4703 A dummy credential structure is not needed now, if you wish to use the
4704 low-level TLS/IA API, simply call gnutls_ia_enable to enable TLS/IA on
4707 ** The self-tests are now run under valgrind, if it is installed.
4709 ** Libtasn1 is updated to 0.3.4, and that version is now required.
4711 ** The command line tools now use getaddrinfo and support IPv6.
4713 ** API and ABI modifications:
4714 _gnutls_x509_get_raw_crt_activation_time,
4715 _gnutls_x509_get_raw_crt_expiration_time: Removed.
4716 gnutls_ia_require_inner_phase: Removed, replaced by gnutls_ia_enable.
4717 gnutls_ia_enable: Added.
4719 * Version 1.3.5 (released 2006-03-08)
4721 ** Error messages are now translated using GNU Gettext.
4723 ** The function gnutls_x509_crt_to_xml now return an internal error.
4724 This means that the code to convert X.509 certificates to XML format
4725 does not work any more. The reason is that the function called
4726 libtasn1 internal functions. It seems unclean for libtasn1 to export
4727 the APIs needed here. Instead it would be better to implement XML
4728 support inside libtasn1 properly. If you need this functionality
4729 strongly, please consider looking into implementing this suggested
4730 approach instead. As a workaround, you may also modify lib/x509/xml.c
4731 (change '#if 1' to '#if 0') and build using --with-included-libtasn1.
4733 ** Libraries are now built with libtool's -no-undefined.
4734 This helps producing libraries for Windows using mingw32.
4736 ** Doc fixes to explain that gnutls_record_send can block.
4738 ** Libtasn1 0.3.1 or later is now required.
4739 The include copy has been updated too.
4741 ** gnutls-cli can now recognize services and port numbers with the -p option.
4743 ** API and ABI modifications:
4744 No changes since last version.
4746 * Version 1.3.4 (released 2006-02-09)
4748 ** Fix read of out bounds bug in DER parser.
4749 Reported by Evgeny Legerov <admin@gleg.net>, and debugging help from
4750 Protover SSL. Libtasn1 0.2.18 is now required, which contains the
4751 previous bug fix. The included libtasn1 version in GnuTLS has been
4754 ** Fixed bug in non-blocking gnutls_bye(). gnutls_record_send() will no
4755 longer invalidate a session if the underlying send fails, but it will
4756 prevent future writes. That is to allow reading the already received data.
4757 Patches and bug reports by Yoann Vandoorselaere <yoann@prelude-ids.org>
4759 ** Corrected bugs in gnutls_certificate_set_x509_crl() and
4760 gnutls_certificate_set_x509_trust(), that caused memory corruption if
4761 more than one certificates were added. Report and patch by Max Kellermann.
4763 ** Fix build problems of OpenCDK on AIX.
4764 Thanks to "Heiden, John" <JHeiden@UTNet.UToledo.Edu>.
4766 ** API and ABI modifications:
4767 No changes since last version.
4769 * Version 1.3.3 (released 2006-01-12)
4771 ** New API to access the TLS master secret.
4772 When possible, you should use the TLS PRF functions instead.
4773 Suggested by Jouni Malinen <jkmaline@cc.hut.fi>.
4775 ** Improved handling when multiple libraries use GnuTLS at the same time.
4776 Now gnutls_global_init() can be called multiple times, and
4777 gnutls_global_deinit() will only deallocate the structure when it has
4778 been called as many times as gnutls_global_init() was called.
4780 ** Added a self test of TLS resume functionality.
4782 ** Fix crash in TLS resume code, caused by TLS/IA changes.
4784 ** Documentation fixes about thread unsafety, prompted by
4785 ** discussion with bryanh@giraffe-data.com (Bryan Henderson).
4786 In particular, gnutls_global_init() and gnutls_global_deinit() are not
4787 thread safe. Careful callers may want to protect the call using a
4788 mutex. The problem could also be ignored, which would cause a memory
4789 leak under rare conditions when two threads invoke the function
4790 roughly at the same time.
4792 ** Add 'const' keywords in various places, from Frediano ZIGLIO.
4794 ** The code was indented again, including the external header files.
4796 ** API and ABI modifications:
4797 New functions to retrieve the master secret value:
4798 gnutls_session_get_master_secret
4800 Add a 'const' keyword to existing API:
4801 gnutls_x509_crq_get_challenge_password
4803 * Version 1.3.2 (released 2005-12-15)
4805 ** GnuTLS now support TLS Inner application (TLS/IA).
4806 This is per draft-funk-tls-inner-application-extension-01. This
4807 functionality is added to libgnutls-extra, so it is licensed under the
4808 GNU General Public License.
4810 ** New APIs to access the TLS Pseudo-Random-Function (PRF).
4811 The PRF is used by some protocols building on TLS, such as EAP-PEAP
4812 and EAP-TTLS. One function to access the raw PRF and one to access
4813 the PRF seeded with the client/server random fields are provided.
4814 Suggested by Jouni Malinen <jkmaline@cc.hut.fi>.
4816 ** New APIs to acceess the client and server random fields in a session.
4817 These fields can be useful by protocols using TLS. Note that these
4818 fields are typically used as input to the TLS PRF, and if this is your
4819 intended use, you should use the TLS PRF API that use the
4820 client/server random field directly. Suggested by Jouni Malinen
4821 <jkmaline@cc.hut.fi>.
4823 ** Internal type cleanups.
4824 The uint8, uint16, uint32 types have been replaced by uint8_t,
4825 uint16_t, uint32_t. Gnulib is used to guarantee the presence of
4826 correct types on platforms that lack them. The uint type have been
4827 replaced by unsigned.
4829 ** API and ABI modifications:
4830 New functions to invoke the TLS Pseudo-Random-Function (PRF):
4834 New functions to retrieve the session's client and server random values:
4835 gnutls_session_get_server_random
4836 gnutls_session_get_client_random
4838 New function, to perform TLS/IA handshake:
4841 New function to decide whether to do a TLS/IA handshake:
4842 gnutls_ia_handshake_p
4844 New functions to allocate a TLS/IA credential:
4845 gnutls_ia_allocate_client_credentials
4846 gnutls_ia_free_client_credentials
4847 gnutls_ia_allocate_server_credentials
4848 gnutls_ia_free_server_credentials
4850 New functions to handle the AVP callback:
4851 gnutls_ia_set_client_avp_function
4852 gnutls_ia_set_client_avp_ptr
4853 gnutls_ia_get_client_avp_ptr
4854 gnutls_ia_set_server_avp_function
4855 gnutls_ia_set_server_avp_ptr
4856 gnutls_ia_get_server_avp_ptr
4858 New functions, to toggle TLS/IA application phases:
4859 gnutls_ia_require_inner_phase
4861 New function to mix session keys with inner secret:
4862 gnutls_ia_permute_inner_secret
4864 Low-level API (used internally by gnutls_ia_handshake):
4865 gnutls_ia_endphase_send
4869 New functions that can be used after successful TLS/IA negotiation:
4870 gnutls_ia_generate_challenge
4871 gnutls_ia_extract_inner_secret
4873 Enum type with TLS/IA modes:
4876 Enum type with TLS/IA packet types:
4879 Enum values for TLS/IA alerts:
4880 GNUTLS_A_INNER_APPLICATION_FAILURE
4881 GNUTLS_A_INNER_APPLICATION_VERIFICATION
4883 New error codes, to signal when an application phase has finished:
4884 GNUTLS_E_WARNING_IA_IPHF_RECEIVED
4885 GNUTLS_E_WARNING_IA_FPHF_RECEIVED
4887 New error code to signal TLS/IA verify failure:
4888 GNUTLS_E_IA_VERIFY_FAILED
4890 * Version 1.3.1 (released 2005-12-08)
4892 ** Support for DHE-PSK cipher suites has been added.
4893 This method offers perfect forward secrecy.
4895 ** Fix gnutls-cli STARTTLS hang when SIGINT is sent too quickly, thanks to
4896 Otto Maddox <ottomaddox@fastmail.fm> and Nozomu Ando <nand@mac.com>.
4898 ** Corrected a bug in certtool for 64 bit machines. Reported
4899 by Max Kellermann <max@duempel.org>.
4901 ** New function to set a X.509 private key and certificate pairs, and/or
4902 CRLs, from an PKCS#12 file, suggested by Emile van Bergen
4903 <emile@e-advies.nl>.
4905 The integrity of the PKCS#12 file is protected through a password
4906 based MAC; public-key based signatures for integrity protection are
4907 not supported. PKCS#12 bags may be encrypted using password derived
4908 symmetric keys, public-key based encryption is not supported. The
4909 PKCS#8 keys may be encrypted using passwords. The API use the same
4910 password for all operations. We believe that any more flexibility
4911 create too much complexity that would hurt overall security, but may
4912 add more PKCS#12 related APIs if real-world experience indicate
4915 ** gnutls_x509_privkey_import_pkcs8 now accept unencrypted PEM PKCS#8 keys,
4916 reported by Emile van Bergen <emile@e-advies.nl>.
4917 This will enable "certtool -k -8" to parse those keys.
4919 ** Certtool now generate keys in unencrypted PKCS#8 format for empty passwords.
4920 Use "certtool -p -8" and press press enter at the prompt. Earlier,
4921 certtool would have encrypted the key using an empty password.
4923 ** Certtool now accept --password for --key-info and encrypted PKCS#8 keys.
4924 Earlier it would have prompted the user for it, even if --password was
4927 ** Added self test of PKCS#8 parsing.
4928 Unencrypted and encrypted (pbeWithSHAAnd3-KeyTripleDES-CBC and
4929 pbeWithSHAAnd40BitRC2-CBC) formats are tested. The test is in
4932 ** API and ABI modifications:
4933 New function to set X.509 credentials from a PKCS#12 file:
4934 gnutls_certificate_set_x509_simple_pkcs12_file
4936 New gnutls_kx_algorithm_t enum type:
4939 New API to return session data (basically same as gnutls_session_get_data):
4940 gnutls_session_get_data2
4942 New API to set PSK Diffie-Hellman parameters:
4943 gnutls_psk_set_server_dh_params
4945 * Version 1.3.0 (2005-11-15)
4947 ** Support for TLS Pre-Shared Key (TLS-PSK) ciphersuites have been added.
4948 This add several new APIs, see below. Read the updated manual for
4949 more information. A new self test "pskself" has been added, that will
4950 test this functionality.
4952 ** The session resumption data are now system independent.
4954 ** The code has been re-indented to conform to the GNU coding style.
4956 ** Removed the RIPEMD ciphersuites.
4958 ** Added a discussion of the internals of gnutls in manual.
4960 ** Fixes for Tru64 UNIX 4.0D that lack MAP_FAILED, from Albert Chin.
4962 ** Remove trailing comma in enums, for IBM C v6, from Albert Chin.
4964 ** Make sure config.h is included first in a few files, from Albert Chin.
4966 ** Don't use C++ comments ("//") as they are invalid, from Albert Chin.
4968 ** Don't install SRP programs and man pages if --disable-srp-authentication,
4971 ** API and ABI modifications:
4972 New gnutls_kx_algorithm_t key exchange type: GNUTLS_KX_PSK
4974 New gnutls_credentials_type_t credential type:
4977 New credential types:
4978 gnutls_psk_server_credentials_t
4979 gnutls_psk_client_credentials_t
4981 New functions to allocate PSK credentials:
4982 gnutls_psk_allocate_client_credentials
4983 gnutls_psk_free_client_credentials
4984 gnutls_psk_free_server_credentials
4985 gnutls_psk_allocate_server_credentials
4987 New enum type for PSK key flags:
4988 gnutls_psk_key_flags
4990 New function prototypes for credential callback:
4991 gnutls_psk_client_credentials_function
4992 gnutls_psk_server_credentials_function
4994 New function to set PSK username and key:
4995 gnutls_psk_set_client_credentials
4997 New function to set PSK passwd file:
4998 gnutls_psk_set_server_credentials_file
5000 New function to extract PSK user in server:
5001 gnutls_psk_server_get_username
5003 New functions to set PSK callback:
5004 gnutls_psk_set_server_credentials_function
5005 gnutls_psk_set_client_credentials_function
5007 Use size_t instead of int for output size parameter:
5008 gnutls_srp_base64_encode
5009 gnutls_srp_base64_decode
5011 * Version 1.2.11 (2006-05-11)
5012 - The function gnutls_x509_crt_to_xml is not supported any more, and
5013 return an internal error. The reason is that the function called
5014 internal libtasn1 functions which are no longer exported from
5016 - Updated libtasn1 requirement to 0.3.4 and refreshed internal mintiasn1.
5017 - Updated gnulib compatibility files.
5018 - Fixed _gnutls_x509_get_raw_crt_expiration_time and
5019 _gnutls_x509_get_raw_crt_activation_time to return (time_t)-1 on errors.
5020 - API and ABI modifications:
5021 No changes since last version.
5023 * Version 1.2.10 (2006-02-09)
5024 - Fix read out bounds bug in DER parser. Reported by Evgeny Legerov
5025 <admin@gleg.net>, and debugging help from Protover SSL.
5026 - Libtasn1 0.2.18 is now required (contains the previous bug fix).
5027 The included version has been updated too.
5028 - Fix gnutls-cli STARTTLS hang when SIGINT is sent too quickly, thanks to
5029 Otto Maddox <ottomaddox@fastmail.fm> and Nozomu Ando <nand@mac.com>.
5030 - Corrected a bug in certtool for 64 bit machines. Reported
5031 by Max Kellermann <max@duempel.org>.
5032 - Corrected bugs in gnutls_certificate_set_x509_crl() and
5033 gnutls_certificate_set_x509_trust(), that caused memory corruption if
5034 more than one certificates were added. Report and patch by Max Kellermann.
5035 - Fixed bug in non-blocking gnutls_bye(). gnutls_record_send() will no
5036 longer invalidate a session if the underlying send fails, but it will
5037 prevent future writes. That is to allow reading the already received data.
5038 Patches and bug reports by Yoann Vandoorselaere <yoann@prelude-ids.org>
5040 * Version 1.2.9 (2005-11-07)
5041 - Documentation was updated and improved.
5042 - RSA-MD2 is now supported for verifying digital signatures.
5043 - Due to cryptographic advances, verifying untrusted X.509
5044 certificates signed with RSA-MD2 or RSA-MD5 will now fail with a
5045 GNUTLS_CERT_INSECURE_ALGORITHM verification output. For
5046 applications that must remain interoperable, you can use the
5047 GNUTLS_VERIFY_ALLOW_SIGN_RSA_MD2 or GNUTLS_VERIFY_ALLOW_SIGN_RSA_MD5
5048 flags when verifying certificates. Naturally, this is not
5049 recommended default behaviour for applications. To enable the
5050 broken algorithms, call gnutls_certificate_set_verify_flags with the
5051 proper flag, to change the verification mode used by
5052 gnutls_certificate_verify_peers2.
5053 - Make it possible to send empty data through gnutls_record_send,
5054 to align with the send(2) API.
5055 - Some changes in the certificate receiving part of handshake to prevent
5056 some possible errors with non-blocking servers.
5057 - Added numeric version symbols to permit simple CPP-based feature
5058 tests, suggested by Daniel Stenberg <daniel@haxx.se>.
5059 - The (experimental) low-level crypto alternative to libgcrypt used
5060 earlier (Nettle) has been replaced with crypto code from gnulib.
5061 This leads to easier re-use of these components in other projects,
5062 leading to more review and simpler maintenance. The new configure
5063 parameter --with-builtin-crypto replace the old --with-nettle, and
5064 must be used if you wish to enable this functionality. See README
5065 under "Experimental" for more information. Internally, GnuTLS has
5066 been updated to use the new "Generic Crypto" API in gl/gc.h. The
5067 API is similar to the old crypto/gc.h, because the gnulib code were
5068 based on GnuTLS's gc.h.
5069 - Fix compiler warning in the "anonself" self test.
5070 - API and ABI modifications:
5071 gnutls_x509_crt_list_verify: Added 'const' to prototype in <gnutls/x509.h>.
5072 This doesn't reflect a change in behaviour,
5073 so we don't break backwards compatibility.
5074 GNUTLS_MAC_MD2: New gnutls_mac_algorithm_t value.
5075 GNUTLS_DIG_MD2: New gnutls_digest_algorithm_t value.
5076 GNUTLS_VERIFY_ALLOW_SIGN_RSA_MD2,
5077 GNUTLS_VERIFY_ALLOW_SIGN_RSA_MD5: New gnutls_certificate_verify_flags values.
5079 gnutls_x509_crt_list_verify,
5080 gnutls_x509_crt_verify, or
5081 gnutls_certificate_set_verify_flags.
5082 GNUTLS_CERT_INSECURE_ALGORITHM: New gnutls_certificate_status_t value,
5083 used when broken signature algorithms
5084 is used (currently RSA-MD2/MD5).
5085 LIBGNUTLS_VERSION_MAJOR,
5086 LIBGNUTLS_VERSION_MINOR,
5087 LIBGNUTLS_VERSION_PATCH,
5088 LIBGNUTLS_VERSION_NUMBER: New CPP symbols, indicating the GnuTLS
5089 version number, can be used for feature existence
5092 * Version 1.2.8 (2005-10-07)
5093 - Libgcrypt 1.2.2 is required to fix a bug for forking GnuTLS servers.
5094 - Don't install the auxilliary libexamples library used by the
5095 examples in doc/examples/ on "make install", report and tiny patch
5096 from Thomas Klausner <tk@giga.or.at>.
5097 - If you pass a X.509 CA or PGP trust database to the command line
5098 tool, it will now abort the connection if the server certificate
5099 validation fails. Use the parameter --insecure to continue even
5100 after certificate validation failures. Inspired from discussion
5101 with Alexander Kotelnikov <sacha@myxomop.com>.
5102 - The test for socklen_t has been moved to gnulib.
5103 - Link failures for duplicate or missing "program_name" symbol has been fixed,
5104 patch from Martin Lambers <marlam@marlam.de>.
5105 - The command line tool and the examples no longer uses mmap or bzero,
5106 to make them more portable, patch from Martin Lambers
5108 - Made the PKCS #12 API handle null passwords. Based on patch by
5109 Anton Altaparmakov <aia21@cam.ac.uk>.
5110 - The GTK-DOC manual should build with current released tools.
5111 (But a copy of the output is included, so the tools are not required.)
5112 - The inet_ntop function is now used through gnulib.
5113 - API and ABI modifications:
5114 No changes since last version.
5116 * Version 1.2.7 (2005-09-09)
5117 - The GnuTLS and GnuTLS-extra libraries are now built with versioned symbols.
5118 - Certtool now complains when reading out-of-range X.509 serial
5119 numbers, suggested by Fran <e_agf@yahoo.es>.
5120 - Certtool now uses the readline library (when available) when reading
5121 X.509 serial numbers.
5122 - Fixed build problems in getpass on uClibc and Mingw32 platforms.
5123 - Fixed compile warning regarding socklen_t on Mingw32, reported by
5124 Martin Lambers <marlam@marlam.de>.
5125 - Fixed examples in doc/examples/, suggested by Fran <e_agf@yahoo.es>.
5126 - Gnulib is now used for the core library, enabling future code cleanups.
5127 - The gnutls-cli tool now use gnutls_certificate_verify_peers2,
5128 suggested by Daniel Stenberg <daniel@haxx.se>.
5129 - Doc fixes for gnutls_transport_set_push and gnutls_transport_set_pull.
5130 - Minilibtasn1 is now 0.2.17 (removed optional use of C99 macros).
5131 - Disable zlib support if zlib.h is not present.
5132 - A number of internal cleanups.
5133 - API and ABI modifications:
5134 No changes since last version.
5136 * Version 1.2.6 (2005-07-16)
5137 - MiniLZO updated to version 2.01 and moved to separate directory.
5138 - Collision between system LZO header files and MiniLZO header file
5139 fixed, reported by Matthias Urlichs <smurf@smurf.noris.de>.
5140 - Will now test for liblzo functionality in liblzo2 too, reported by
5141 Thomas Klausner <tk@giga.or.at>.
5142 - Minilibtasn1 is now 0.2.14 (no code changes).
5143 - Some code changes to avoid GTK-DOC warnings.
5144 - API and ABI modifications:
5145 No changes since last version.
5147 * Version 1.2.5 (2005-07-03)
5148 - More builddir != srcdir fixes, reported by Mike Castle
5149 <dalgoda@ix.netcom.com>.
5150 - Fixed off-by-one bug in the size parameter of gnutls_x509_crt_get*_dn,
5151 reported by Adam Langley <alangley@gmail.com>.
5152 - Corrected some stuff in minilzo detection. Pointed out by
5154 - MiniLZO updated to version 2.00.
5155 - gnutls_x509_crt_list_import now accept a DER formatted CRL.
5156 - API and ABI modifications:
5157 No changes since last version.
5159 * Version 1.2.4 (2005-05-28)
5160 - Corrected some bugs that could affect 64 bit systems.
5161 - Some corrections in the header files to include the prototype
5162 of memmem properly (affected 64 bit systems). Report and patch
5163 by Yoann Vandoorselaere <yoann@prelude-ids.org>.
5164 - Introduced the --fix-key option to certtool, which can be used to
5165 regenerate the (optional) parameters in a private key. It should
5166 be used together with --key-info.
5167 - Corrected a bug in certificate chain verification that could lead
5168 to marking a trusted chain as non trusted, if the last certificate in
5169 the chain was a self signed one.
5170 - Gnulib portability files were updated.
5171 - License were updated to reflect new FSF address.
5172 - API and ABI modifications:
5173 No changes since last version.
5175 * Version 1.2.3 (2005-04-28)
5176 - Corrected bug in record packet parsing that could lead
5177 to a denial of service attack.
5178 - Corrected bug in RSA key export. Previously exported keys
5179 can be fixed using certtool. Use certtool -k <infile >outfile
5180 - API and ABI modifications:
5181 gnutls_x509_privkey_fix(): Add.
5183 * Version 1.2.2 (2005-04-25)
5184 - gnutls_error_to_alert() now considers
5185 GNUTLS_E_UNEXPECTED_HANDSHAKE_PACKET.
5186 - Fixed error in session resuming that could cause a crash in a session.
5187 - Fixed pkcs12 friendly name and local key identifier decoding.
5188 - Internal cleanups, removed duplicate typedef/struct definitions,
5189 and made source code include external include file, to check
5190 function prototypes during compile time.
5191 - API and ABI modifications:
5192 No changes since last version. At least not intentional, but due
5193 to the include header changes, there may be inadvertant changes,
5194 please let us know if you find any.
5196 * Version 1.2.1 (2005-04-04)
5197 - gnutls_bye() will no longer fail when RDWR is used and application
5198 data are available for reading.
5199 - Added more strict checks for the SRP parameters (g,n), when they
5200 are not in the included list.
5201 - Added warning to certtool when MD5 is being used for digital
5203 - Optimizations ("-O2 -finline-functions") are not enabled by default,
5204 instead the standard autoconf defaults are used. Use `./configure
5205 CFLAGS="-O2 -finline-functions"' to get the old optimizations.
5206 - Added the option --get-dh-params to certtool, in order to get the
5207 parameters included in the library primes and generators.
5208 - Improved the semantics of GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT, to
5209 allow only trusted Version 1 CAs and introduced
5210 GNUTLS_VERIFY_ALLOW_ANY_X509_V1_CA_CRT which has the old semantics.
5211 - Nettle self tests now build properly, reported by Pierre
5212 <pierre42d@9online.fr>.
5213 - Eliminated some memory leaks in DHE and RSA-EXPORT cipher suites.
5214 Reported by Yoann Vandoorselaere <yoann@prelude-ids.org>.
5215 - If the library has been compiled with features disabled, a warning is
5216 issued during the compilation of any program.
5217 - API and ABI modifications:
5218 gnutls_x509_crt_list_import(): Add
5219 gnutls_x509_crq_get_attribute_by_oid(): Add.
5220 gnutls_x509_crq_set_attribute_by_oid(): Add
5221 gnutls_x509_crt_set_extension_by_oid(): Add.
5222 GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT: Modify semantics.
5223 GNUTLS_VERIFY_ALLOW_ANY_X509_V1_CA_CRT: Add, old behaviour.
5225 * Version 1.2.0 (2005-01-27)
5226 - Added the definitions and OIDs for the RIPEMD-160 hash algorithm.
5227 - Introduced gnutls_x509_crt_sign2(), gnutls_x509_crq_sign2() and
5228 gnutls_x509_crl_sign2().
5229 - Fixed license header in source code files.
5231 * Version 1.1.23 (2005-01-18)
5232 - It is now possible to generate PKCS#12 structures without private
5233 keys using "certtool --to-p12", suggested by Fabian Fagerholm
5235 - Certtool now prints information for the RSA and DSA parameters of
5236 certificates and private keys.
5237 - Corrected the write of CRL distribution points.
5238 - The certificate chain verification function now checks certificates
5239 in the reverse order to minimize the spent resources.
5240 - Corrected several bugs found by Marcin Garski <mgarski@post.pl>
5241 - The functions gnutls_x509_crl_get_issuer_dn, gnutls_x509_crq_get_dn,
5242 gnutls_x509_crt_get_issuer_dn, gnutls_x509_crt_get_dn, and
5243 gnutls_x509_rdn_get now set *sizeof_buf to the buffer length that is
5244 required, instead of the string length. That is, the value has been
5245 incremented by 1 to account for the terminating zero. Reported by
5246 Martin Lambers <marlam@web.de>.
5247 - Debug output shouldn't crash on platforms that doesn't handle NULL
5248 printf %s values. Reported by Michael.Ringe@aachen.utimaco.de.
5249 - Sync included copy of libtasn1 with version 0.2.13.
5250 - Client X.509 authenticated connections via gnutls-cli should now work again.
5252 * Version 1.1.22 (2004-11-04)
5253 - Replace GNU LD version script with Libtool -export-symbols-regex,
5254 from Joe Orton <joe@manyfish.co.uk>.
5255 - Documentation improvements.
5256 - Code indented using 'indent -i4 -kr'.
5257 - The API manual is included in Devhelp format. (Was in last release too,
5258 but the NEWS entry was forgotten.)
5259 - The OpenSSL compatibility code now use the internal crypto interface.
5260 - Added simple self test of OpenSSL compatibility library.
5261 - Internally, libtool convenience libraries are used.
5262 - Cleanups to configure.ac.
5264 * Version 1.1.21 (2004-10-27)
5265 - Print DN of certificates with unknown characters in them, but in hexform
5267 - Added second precision to the X.509 parsing and generation functions.
5268 - Corrected bug in _gnutls_x509_get_dn_oid(), and returns the
5270 - Add parameter --la-file to libgnutls-config and libgnutls-extra-config,
5271 tiny patch contributed by Joe Orton <joe@manyfish.co.uk>.
5272 - Add pkg-config meta files, suggested by Stéphane LOEUILLET
5273 <stephane.loeuillet@tiscali.fr>.
5274 - Fix memory initializaion bug in gnutls_certificate_set_x509_trust,
5275 tiny patch by Aleix Conchillo Flaque <aleix@member.fsf.org>.
5276 - Add self test of PKCS#12 functionality in "certtool", based on test
5277 vectors from Joe Orton <joe@manyfish.co.uk>.
5278 - Fix library order in libgnutls*-config --libs output, to permit
5279 static linking, reported by Yoann Vandoorselaere
5280 <yoann@prelude-ids.org>.
5282 * Version 1.1.20 (2004-10-12)
5283 - Fix compile problem in gl/getpass.c on some systems.
5285 * Version 1.1.19 (2004-10-07)
5286 - Fix memory leak in gnutls_certificate_verify_peers and
5287 gnutls_certificate_free_credentials, report and patch by Simon
5288 Posnjak <simon.posnjak@cetrtapot.si>.
5289 - Fix crash in `certtool --to-p12 --load-privkey foo', i.e. exporting
5290 a key and no certificate to PKCS#12.
5291 - Fix objdir != srcdir builds, reported by "Gerrit P. Haase"
5292 <gp@familiehaase.de>.
5293 - Fixes faulty getpass implementation in libextra/opencdk/, reported
5294 by Yoann Vandoorselaere <yoann@prelude-ids.org>.
5295 - Uses memmem instead of strnstr in lib/.
5296 - Using more GNULib portability files, although not yet inside lib/.
5297 - Added gnutls_certificate_verify_peers to gnutls/compat.h.
5298 Nikos deprecated gnutls_certificate_verify_peers in favor of
5299 gnutls_certificate_verify_peers2 earlier in the 1.1 branch.
5300 - Improvements to the manual.
5301 - Add new example "ex-rfc2818" for certificate verification, from Nikos.
5302 - Known bug: the library require snprintf. This has not yet been
5303 fixed, but will be handled via GNULib later on.
5305 * Version 1.1.18 (2004-08-24)
5306 - Corrected handling of certificate with dates after year 2038.
5307 - Corrected DER decoder which could incorrectly treat input as BER and fail.
5308 - Correct certtool --smime-to-p7 end of line character handling.
5309 - Added example client and server for anonymous authentication.
5310 - Added self test that tests anonymous TLS client and server.
5311 - Added self tests of Nettle and generic crypto layer.
5312 - Added API reference manual in HTML format in doc/reference/ using GTK-DOC.
5313 Online version at <http://www.gnu.org/software/gnutls/reference/>.
5314 - Assume C89 or better; removed checks for size_t, ptrdiff_t and time_t.
5315 - Man pages for API functions are included.
5317 * Version 1.1.17 (2004-08-18)
5318 - Bug fix of padding string in RSA PKCS#1 v1.5 type 2 encryption,
5319 reported by Robey Pointer <robey@danger.com>.
5320 - Generic crypto interface for secret key ciphers, hashes and randomness added.
5321 See section "Experimental" within section "COMPILATION ISSUES" in README.
5322 - Removed length limit on passwords read by 'certtool'.
5323 - Documentation fixes.
5325 * Version 1.1.16 (2004-08-15)
5326 - Fix missing gnulib linker parameter when building certtool.
5327 - Add gnulib module 'progname', needed by module 'error'.
5328 - Improve building with srcdir != objdir.
5330 * Version 1.1.15 (2004-08-15)
5331 - Certtool has simplistic --smime-to-p7 to translate RFC 2633 messages into
5333 - Ported to Mac OS X / Darwin.
5334 - Ported to FreeBSD.
5336 * Version 1.1.14 (2004-08-09)
5337 - Documentation converted to Texinfo format.
5338 - Bug fix of test suite.
5339 - Configure now print build information, used by Autobuild.
5341 * Version 1.1.13 (2004-08-05)
5342 - Added simple self test suite.
5344 * Version 1.1.12 (2004-08-02)
5345 - Updated the SRP authentication to conform to the
5346 latest (yet unreleased) draft. Unfortunately this breaks
5347 compatibility with previous versions.
5348 - Changed the makefiles to be more portable.
5349 - SRP ciphersuites were moved to the gnutls library.
5350 - Added some default limits in the verification of certificate
5351 chains, to avoid denial of service attacks. Also added
5352 gnutls_certificate_set_verify_limits() to override them.
5353 Issue pointed out by Patrik Hornik <patrik@hornik.sk>.
5354 - Added gnutls_certificate_verify_peers2().
5356 * Version 1.1.11 (2004-07-16)
5357 - Added the '_t' suffix to all exported symbols.
5358 - Fixed bug in RSA encryption, report and patch by Martijn Koster
5359 <mak@greenhills.co.uk>.
5360 - Corrected a bug in certificate verification. Pointed out by
5361 Yoann Vandoorselaere <yoann@prelude-ids.org>
5362 - Added the GNUTLS_VERIFY_DO_NOT_ALLOW_SAME flags to the
5363 verification functions.
5364 - The ephemeral DH and RSA parameters are no longer stored in the
5366 - Do not free the SRP (prime and generator) parameters obtained from the
5367 callback if they are the static ones defined in extra.h
5368 - Eliminated some memory leaks. Reported by Yoann Vandoorselaere.
5370 * Version 1.1.10 (2004-06-12)
5371 - Added gnutls_sign_algorithm_get_name() and gnutls_pk_algorithm_get_name()
5372 - Corrected bug in TLS renegotiation.
5373 - Corrected bug in OpenPGP key loading using a callback.
5374 - gnutls-srpcrypt was renamed to srptool
5375 - Allow handshake requests by the client.
5376 - Automatically disable certificate types that do not have corresponding
5378 - Added gnutls_auth_client_get_type() and gnutls_auth_server_get_type()
5379 - Opencdk library is being included if not found.
5380 - certtool can now add ip address SAN extension.
5381 - certtool has now support for more X.520 DN attribute types.
5382 - Better handling of EOF in gnutls_record_recv().
5383 - _gnutls_deinit() is no longer used. Sessions are not
5384 automatically removed any more, on abnormal termination.
5385 - Corrected session resuming in SRP ciphersuites.
5386 - Updated to conform to the latest srp draft (draft-ietf-tls-srp-07)
5387 - Added new functions to allow access to the ephemeral
5388 Diffie Hellman parameters.
5389 - Added the functions gnutls_x509_crt_get_pk_rsa_raw() and
5390 gnutls_x509_crt_get_pk_dsa_raw() to retrieve parameters from certificates.
5391 - Added the functions gnutls_dh_get_group(), gnutls_dh_get_pubkey() and
5392 gnutls_rsa_export_get_pubkey() to retrieve parameters of the DH or
5393 RSA-EXPORT key exchange.
5394 - Some fixes in the session resuming code.
5395 - Added gnutls_openpgp_keyring_check_id().
5397 * Version 1.1.9 (2004-04-14)
5398 - Added support for authority key identifier and the extended key usage
5399 X.509 extension fields. The certtoool was updated to support them.
5400 - The RC2 cipher is no more included. The one in libgcrypt is now used.
5401 - Added batch support to certtool. Now it can use templates.
5403 * Version 1.1.8 (2004-04-07)
5404 - Implemented all the tests for the SRP group parameters in
5405 client side. This may lead to incompatibility with very
5407 - Corrected bug in RSA parameters handling which could cause
5409 - Optimized the copying of rsa_params.
5411 * Version 1.1.7 (2004-03-29)
5412 - Added gnutls_certificate_set_params_function() and
5413 gnutls_anon_set_params_function() that set the RSA or DH
5414 parameters using a callback.
5415 - Added functions gnutls_rsa_params_cpy(), gnutls_dh_params_cpy()
5416 and gnutls_x509_privkey_cpy().
5417 - Corrected a compilation issue when opencdk was installed in a
5418 non standard directory.
5419 - Deprecated: gnutls_srp_server_set_select_function(),
5420 gnutls_certificate_client_set_select_function(), gnutls_srp_server_set_select_function().
5422 * Version 1.1.6 (2004-02-24)
5423 - Several bug fixes, by Arne Thomassen.
5424 - Fixed a bug where 'server name' extension was always sent.
5426 * Version 1.1.5 (2004-01-06)
5427 - Added the gnutls_sign_algorithm type.
5429 * Version 1.1.4 (2004-01-04)
5430 - Improved gnutls-cli's SRP behaviour in SRP ciphersuites.
5431 If they are of highest priority then the abbreviated handshake
5433 - Removed all references of missing files.
5434 - Changed handshake behaviour to send the lowest TLS version
5435 when an unsupported version was advertized. The current behaviour
5436 is to send the maximum version we support.
5437 - Corrected problem printing the DC attributes in a DN.
5439 * Version 1.1.3 (2003-12-30)
5440 - Implemented TLS 1.1 (and also obsoleted the TLS 1.0 CBC protection
5443 * Version 1.1.2 (2003-12-28)
5444 - Added CRL verification functionality to certtool.
5445 - Corrected the CRL distribution point extension handling.
5447 * Version 1.1.1 (2003-12-26)
5448 - Added PKCS #7 support to certtool utility.
5449 - Added support for reading and generating CRL distribution
5450 points extensions in certificates.
5451 - Added support for generating CRLs in the library and the
5453 - Added support for the Subject Key ID PKIX extension.
5455 * Version 1.1.0 (2003-12-21)
5456 - The error codes GNUTLS_E_NO_TEMPORARY_DH_PARAMS and GNUTLS_E_NO_TEMPORARY_RSA_PARAMS
5457 are no longer returned by the handshake function. Ciphersuites that
5458 require temporary parameters are removed when such parameters do not exist.
5459 - Added the callbacks gnutls_certificate_client_retrieve_function() and
5460 gnutls_certificate_server_retrieve_function(), to allow a client or a server
5461 to specify certificates for the handshake without storing them to the
5462 credentials structure.
5463 - Added support for generating and exporting DSA private keys.
5464 - Added gnutls_x509_crt_set_key_usage() and certtool can now set the
5465 certificate's key usage.
5466 - Added gnutls_openpgp_key_get_key_usage().
5468 * Version 1.0.25 (2005-04-27)
5469 - Corrected bug in record packet parsing that could lead
5470 to a denial of service attack.
5471 - Corrected bug in RSA key export.
5473 * Version 1.0.24 (2005-01-18)
5474 - Corrected several bugs found by Marcin Garski <mgarski@post.pl>
5476 * Version 1.0.23 (2004-11-13)
5477 - Replace GNU LD version script with Libtool -export-symbols-regex,
5478 from Joe Orton <joe@manyfish.co.uk>.
5479 - Copy libtasn1 has been updated to version 0.2.11.
5480 - Corrected the write of CRL distribution points.
5481 - It is now possible to generate PKCS#12 structures without private
5482 keys using "certtool --to-p12", suggested by Fabian Fagerholm
5485 * Version 1.0.22 (2004-10-28)
5486 - Print DN of certificates with unknown characters in them, but in hexform
5488 - Corrected bug in _gnutls_x509_get_dn_oid(), and returns the
5490 - Added second precision to the X.509 parsing functions.
5491 - Add parameter --la-file to libgnutls-config and libgnutls-extra-config,
5492 tiny patch contributed by Joe Orton <joe@manyfish.co.uk>.
5493 - Add pkg-config meta files, suggested by Stéphane LOEUILLET
5494 <stephane.loeuillet@tiscali.fr>.
5495 - Fix memory initializaion bug in gnutls_certificate_set_x509_trust,
5496 tiny patch by Aleix Conchillo Flaque <aleix@member.fsf.org>.
5497 - Fix certtool --password for PKCS #12, back ported from 1.1.x branch.
5498 - Fix library order in libgnutls*-config --libs output, to permit
5499 static linking, reported by Yoann Vandoorselaere
5500 <yoann@prelude-ids.org>.
5502 * Version 1.0.21 (2004-10-07)
5503 - Fix memory leak in gnutls_certificate_verify_peers and
5504 gnutls_certificate_free_credentials, report and patch by Simon
5505 Posnjak <simon.posnjak@cetrtapot.si>.
5506 - Fix crash in `certtool --to-p12 --load-privkey foo', i.e. exporting
5507 a key and no certificate to PKCS#12.
5508 - Fix objdir != srcdir builds, reported by "Gerrit P. Haase"
5509 <gp@familiehaase.de>.
5510 - Avoid redefining getpass if system already has it, reported by
5511 Yoann Vandoorselaere <yoann@prelude-ids.org>.
5512 - Add new example "ex-rfc2818" for certificate verification, from Nikos.
5513 - Known bug: the library require snprintf.
5515 * Version 1.0.20 (2004-08-18)
5516 - Bug fix of padding string in RSA PKCS#1 v1.5 type 2 encryption,
5517 reported by Robey Pointer <robey@danger.com>.
5519 * Version 1.0.19 (2004-08-09)
5520 - Bug fix of test suite.
5522 * Version 1.0.18 (2004-08-05)
5523 - Added simple self test suite.
5525 * Version 1.0.17 (2004-08-02)
5526 - Updated the SRP authentication to conform to the
5527 latest (yet unreleased) draft. Unfortunately this breaks
5528 compatibility with previous versions.
5529 - Changed the makefiles to be more portable.
5530 - Added some default limits in the verification of certificate
5531 chains, to avoid denial of service attacks. Also added
5532 gnutls_certificate_set_verify_limits() to override them.
5533 Issue pointed out by Patrik Hornik <patrik@hornik.sk>.
5534 - Added gnutls_certificate_verify_peers2().
5536 * Version 1.0.16 (2004-07-10)
5537 - Do not free the SRP (prime and generator) parameters obtained from the
5538 callback if they are the static ones defined in extra.h.
5539 - Eliminated some memory leaks. Reported by Yoann Vandoorselaere.
5540 - Some fixes in the makefiles.
5542 * Version 1.0.15 (2004-06-29)
5543 - Fixed bug in RSA encryption, report and patch by Martijn Koster
5544 <mak@greenhills.co.uk>.
5545 - Corrected a bug in certificate verification. Pointed out by
5546 Yoann Vandoorselaere <yoann@prelude-ids.org>.
5548 * Version 1.0.14 (2004-06-12)
5549 - Automatically disable certificate types that do not have corresponding
5551 - Updates in the documentation.
5552 - certtool can now add ip address SAN extension.
5553 - certtool has now support for more X.520 DN attribute types.
5554 - Opencdk library is being included if not found.
5555 - Added gnutls_openpgp_keyring_check_id().
5556 - Corrected a serious bug in the included libtasn1 library.
5557 - Corrected session resuming in SRP ciphersuites.
5558 - Updated to conform to the latest srp draft (draft-ietf-tls-srp-07)
5559 - Added the functions gnutls_x509_crt_get_pk_rsa_raw() and
5560 gnutls_x509_crt_get_pk_dsa_raw() to retrieve parameters from certificates.
5561 - Some fixes in the session resuming code.
5563 * Version 1.0.13 (2004-04-29)
5564 - Some complilation fixes.
5565 - Added the --xml parameter to the certtool utility.
5567 * Version 1.0.12 (2004-04-23)
5568 - Corrected bug in OpenPGP key loading using a callback.
5569 - Renamed gnutls-srpcrypt to srptool
5570 - Allow handshake requests by the client.
5571 * Things backported from the development branch:
5572 - Added support for authority key identifier and the extended key usage
5573 X.509 extension fields. The certtoool was updated to support them.
5574 - Added batch support to certtool. Now it can use templates.
5575 - The RC2 cipher is no more included. The one in libgcrypt is now used.
5577 * Version 1.0.11 (2004-04-17)
5578 - Added gnutls_sign_algorithm_get_name() and gnutls_pk_algorithm_get_name()
5579 - Corrected bug in TLS renegotiation.
5581 * Version 1.0.10 (2004-04-03)
5582 - Corrected bug in RSA parameters handling which could cause
5584 - Corrected bug in SSL 3.0 authentication.
5586 * Version 1.0.9 (2004-03-29)
5587 - Added gnutls_certificate_set_params_function() and
5588 gnutls_anon_set_params_function() that set the RSA or DH
5589 parameters using a callback.
5590 - Added functions gnutls_rsa_params_cpy(), gnutls_dh_params_cpy()
5591 and gnutls_x509_privkey_cpy().
5592 - Corrected a compilation issue when opencdk was installed in a
5593 non standard directory.
5594 - Documented the changes need in multi-threaded application due
5595 to the new libgcrypt.
5597 * Version 1.0.8 (2004-02-28)
5598 - Corrected bug in mutual certificate authentication in SSL 3.0.
5600 * Version 1.0.7 (2004-02-25)
5601 - Implemented TLS 1.1 (and also obsoleted the TLS 1.0 CBC protection
5603 - Some updates in the documentation.
5605 * Version 1.0.6 (2004-02-12)
5606 * Backported things from the development branch (while maintaining
5607 backwards compatibility):
5608 - Improved gnutls-cli's SRP behaviour in SRP ciphersuites.
5609 If they are of highest priority then the abbreviated handshake
5611 - The error codes GNUTLS_E_NO_TEMPORARY_DH_PARAMS and GNUTLS_E_NO_TEMPORARY_RSA_PARAMS
5612 are no longer returned by the handshake function. Ciphersuites that
5613 require temporary parameters are removed when such parameters do not exist.
5614 - Added the callbacks gnutls_certificate_client_retrieve_function() and
5615 gnutls_certificate_server_retrieve_function(), to allow a client or a server
5616 to specify certificates for the handshake without storing them to the
5617 credentials structure.
5618 - Added support for generating and exporting DSA private keys.
5620 * Version 1.0.5 (2004-02-11)
5621 - Fixed a bug where 'server name' extension was always sent.
5622 * Backported things from the development branch:
5623 - Added CRL verification functionality to certtool.
5624 - Corrected the CRL distribution point extension handling.
5625 - Added PKCS #7 support to certtool utility.
5626 - Added support for reading and generating CRL distribution
5627 points extensions in certificates.
5628 - Added support for generating CRLs in the library and the
5630 - Added support for the Subject Key ID PKIX extension.
5631 - Added the gnutls_sign_algorithm type.
5633 * Version 1.0.4 (2004-01-04)
5634 - Changed handshake behaviour to send the lowest TLS version
5635 when an unsupported version was advertized. The current behaviour
5636 is to send the maximum version we support.
5637 - certtool no longer asks the password in unencrypted private
5639 - The source is now compiled to use the reentrant libc functions.
5641 * Version 1.0.3 (2003-12-21)
5642 - Corrected bug in gnutls_bye() which made it return an error code
5643 of INVALID_REQUEST instead of success.
5644 - Corrected a bug in the GNUTLS_KEY key usage definitions.
5646 * Version 1.0.2 (2003-12-18)
5647 - Corrected a bug in the RSA key generation. This was
5648 generating unusable RSA keys.
5650 * Version 1.0.1 (2003-12-10)
5651 - Some minor fixes in the makefiles. They now include CFLAGS
5652 from libgcrypt or opencdk if installed in a non standard directory.
5653 - Fixed the SRP detection test in gnutls-cli-debug.
5654 - Added gnutls_rsa_params_export_pkcs1() and gnutls_rsa_params_import_pkcs1().
5656 * Version 1.0.0 (2003-12-04)
5657 - Exported the static SRP group parameters.
5658 - Some fixes in the certificate authenticated SRP ciphersuites.
5659 - Improved the support for draft-ietf-tls-srp-05. The two-phase
5660 handshake is now fully supported without any interaction with
5661 the application layer (except for a callback).
5663 * Version 0.9.99 (2003-11-28)
5664 - Some fixes in the gnutls.h header for the gnutls_server_name_set()
5665 and gnutls_server_name_get() prototypes.
5666 - Exported the gnutls_x509_privkey_sign_data(), gnutls_x509_privkey_verify_data()
5667 and gnutls_x509_crt_verify_data().
5668 - Some fixes in the openpgp authentication.
5669 - Removed the Twofish cipher.
5671 * Version 0.9.98 (2003-11-16)
5672 - The openssl compatibility layer was moved to gnutls-openssl
5673 library instead of being included in the gnutls-extra library.
5674 - Added the RIPEMD ciphersuites defined in draft-ietf-tls-openpgp-keys-04.
5675 - Building with openpgp support is now mandatory.
5676 - gnutls4 compatibility header is no longer included by default in
5678 - gnutls8 function usage yelds a deprecation warning in gcc3.
5679 - gnutls_x509_*_set_dn_by_oid() and gnutls_x509_*_get_*_dn_by_oid()
5680 functions have a raw_flag parameter added.
5681 - Added gnutls_x509_*_get_dn_oid() and gnutls_x509_crt_get_extension_oid()
5682 functions which return the available OIDs.
5684 * Version 0.9.97 (2003-11-11)
5685 - The certtool utility can now generate PKCS #12 structures
5686 without specifying a certificate.
5687 - Added capability to read CRLs to certtool.
5688 - Corrected some functions which return GNUTLS_E_SHORT_MEMORY_BUFFER
5689 to properly set the required buffer size.
5690 - Corrected a bug in libgcrypt detection.
5692 * Version 0.9.96 (2003-11-09)
5693 - Some changes to allow compilation with mingw32.
5694 - Several code cleanups.
5696 * Version 0.9.95 (2003-11-02)
5697 - Improved the verification functions. Added new verification
5698 output flags and removed the unused and redundant ones.
5699 - Improved the OpenPGP key support.
5700 - The prime utility was removed, and its functionality was moved
5703 * Version 0.9.94 (2003-10-30)
5704 - Added manpages for the included programs.
5705 - Documented and improved the certtool utility.
5706 - Added PKCS #12 support to certtool utility.
5708 * Version 0.9.93 (2003-10-26)
5709 - Corrected some compilation issues.
5710 - Improved the certtool command line utility.
5712 * Version 0.9.92 (2003-10-25)
5713 - The RFC2818 hostname verification is now case insensitive.
5714 - Added support for generating X.509 certificates.
5715 - Added the certtool, a tool for generating X.509 certificates
5717 * Version 0.9.91 (2003-10-17)
5718 - Fixed a compilation issue in the openpgp authentication part.
5720 * Version 0.9.90 (2003-10-08)
5721 - Updated the openpgp key API (depends on the unreleased new
5724 * Version 0.9.8 (2003-10-02)
5725 - Updated the SRP implementation to follow the latest draft
5726 (draft-ietf-tls-srp-05).
5727 - Improved the gnutls-cli behaviour in error handling,
5728 and added a check for the peer's hostname.
5729 - Use versioned symbols in the library (where available).
5730 - RIJNDAEL ciphersuites were renamed to AES.
5732 * Version 0.9.7 (2003-08-25)
5733 - The tex files are now included in the distribution.
5734 - The library can now decrypt PKCS #12 files encrypted with
5736 - The missing rfc2818_hostname object is now included.
5737 - Several corrections and bug fixes in the library by
5738 Arne Thomassen <arne@arne-thomassen.de>.
5739 - CR is now allowed in the base64 decoder.
5741 * Version 0.9.6 (2003-06-28)
5742 - Added gnutls_x509_privkey_get_key_id() and gnutls_x509_crt_get_key_id()
5743 functions which return a unique (per public key) ID. These can
5744 be used to check if the private key corresponds to a given certificate.
5745 - Corrections in the TLS layer openpgp certificate packet parser.
5746 - Corrected a bug in the record layer buffering, which affected
5747 the case where external pull function was used. Report and patch
5748 by Sergey Poznyakoff <gray@Mirddin.farlep.net>.
5749 - Corrected a bug in gnutls-srpcrypt where a non allocated variable
5751 - SRP programs are now built by default.
5752 - Added API to read and write to PKCS #12 structures. Prototypes
5754 - The gnutls_transport_ptr type was changed to a pointer type (void*).
5756 * Version 0.9.5 (2003-04-06)
5757 - Several improvements in the PKCS #7 handling
5758 - Eliminated several hard coded constants in MPI parameters.
5760 * Version 0.9.4 (2003-03-28)
5761 - Corrected a parsing error in the Certificate request message.
5762 - Corrected behaviour when a certificate request message is received.
5763 Now a certificate packet is always sent, and in SSL 3.0 cipher suites
5764 a no_certificate alert is sent instead.
5765 - Added functionality to generate PKCS #7 structures (with certificates).
5767 * Version 0.9.3 (2003-03-24)
5768 - Support for MD2 was dropped.
5769 - Improved the error logging functions, by adding a level, and
5770 by allowing debugging messages just by increasing the level.
5771 - The diffie Hellman ciphersuites are now of higher priority than
5773 - The RSA premaster secret version check can no longer be disabled.
5774 - Implemented the counter measure discussed in the paper "Attacking
5775 RSA-based Sessions in SSL/TLS", against the attack described in the
5777 - Added the functions: gnutls_handshake_get_last_in(),
5778 gnutls_handshake_get_last_out().
5779 - The gnutls_certificate_set_rsa_params() was renamed to
5780 gnutls_certificate_set_rsa_export_params().
5781 - Added the new functions: gnutls_certificate_set_x509_key()
5782 gnutls_certificate_set_x509_trust(), gnutls_certificate_set_x509_crl(),
5783 gnutls_x509_crt_export(), gnutls_x509_crl_export().
5784 - Added support for encoding and decoding PKCS #8 2.0 encrypted
5787 * Version 0.9.2 (2003-03-15)
5788 - Some corrections in the memory mapping code (file is unmapped after
5790 - Added support for PKCS#10 certificate requests generation.
5792 * Version 0.9.1 (2003-03-12)
5793 - Corrected a bug in 64 bit architectures, which affected the
5794 serial number calculation in the record layer.
5795 - Added gnutls_certificate_free_keys() which deletes all the
5796 private keys and certificates from the credentials structure.
5797 - Corrected a broken buffer check in _gnutls_io_read_buffered(),
5798 which caused some unexpected packet length errors. Report and patch
5799 by Ian Peters <itp@ximian.com>.
5800 - Added ability to generate RSA keys.
5801 - Increased the maximum parameter size in order to read some large keys
5802 by some CAs. Patch by Ian Peters <itp@ximian.com>.
5803 - Added an strnstr() function and the requirement in some functions to
5804 use null terminated PEM structures is no more.
5805 - Use mmap() if available to read files.
5806 - Fixed a memory leak in SRP code reported by Rupert Kittinger
5807 <r.kittinger@efkon.com>.
5809 * Version 0.9.0 (2003-03-03)
5810 - This version is not binary compatible with the previous ones.
5811 - The library notifies the application on empty and illegal SRP usernames,
5812 so that proper notification (via an alert) is sent to the peer.
5813 - Added ability to send some messages back to the application using
5814 the gnutls_global_set_log_function().
5815 - gnutls_dh_params_generate() and gnutls_rsa_params_generate() now use
5816 gnutls_malloc() to allocate the output parameters.
5817 - Added support for MD2 algorithm in certificate signature verification.
5818 - The RSA and DH parameter generation interface was changed. Added
5819 ability to import and export from and to PKCS3 structures. This
5820 was needed to read parameters generated using the openssl dhparam tool.
5821 - Several changes in the temporary (DH/RSA) parameter codebase. No DH
5822 parameters are now included in the library. Also the credentials structure
5823 can now hold only one temporary parameter of a kind.
5824 - Added a new Certificate, CRL, Private key and PKCS7 structures handling
5825 API, defined in gnutls/x509.h
5826 - Added gnutls_certificate_set_verify_flags() function to allow setting the
5827 verification flags in the credentials structure. They will be used in the
5828 *verify_peers functions.
5829 - Added protection against the new TLS 1.0 record layer timing attack.
5830 - Added support for Certificate revocation lists. Functions defined
5832 - The only functions that were removed are:
5833 gnutls_x509_certificate_to_xml()
5834 gnutls_x509_extract_dn_string()
5835 - Ported to libtasn1 0.2.x
5837 * Version 0.8.1 (2003-01-22)
5838 - Improved the SRP support, to prevent attackers guessing the
5839 available usernames by brute force.
5840 - Improved the SRP detection in gnutls-cli-debug
5841 - Some fixes which now allow compilation.
5843 * Version 0.8.0 (2003-01-20)
5844 - Added gnutls_x509_extract_dn_string() which returns a
5845 distinguished name in a single string.
5846 - Added gnutls_openpgp_extract_key_name_string() which returns
5847 an openpgp user ID in a single string.
5848 - Added gnutls_x509_extract_certificate_ca_status() which returns
5849 the CA status of the given certificate.
5850 - Added SRP-6 support. Follows draft-ietf-tls-srp-04.
5851 - If libtasn1 is not present in the system, it is included in
5852 the main gnutls library.
5853 - If liblzo is present in the system, then the included minilzo
5854 will not be used, and libgnutls-extra will depend on liblzo.
5855 - GNUTLS_E_PARSING_ERROR error code was replaced by GNUTLS_E_BASE64_DECODING_ERROR,
5856 and GNUTLS_E_SRP_PWD_PARSING_ERROR. GNUTLS_E_ASCII_ARMOR_ERROR was also
5857 replaced by GNUTLS_E_BASE64_DECODING_ERROR.
5859 * Version 0.6.0 (2002-12-08)
5860 - Added "gnutls/compat4.h" header. This is included in gnutls.h
5861 to emulate the old 0.4.x API.
5862 - Example programs are now stored in doc/examples/
5863 - Several improvements and updates in the documentation.
5864 - Added the certificate authenticated SRP cipher suites.
5865 - gnutls_x509_extract_certificate_dn_string() was updated to return
5866 an RFC2253 conforming string.
5867 - Added the SRP related functions:
5868 gnutls_srp_verifier()
5869 gnutls_srp_base64_encode()
5870 gnutls_srp_base64_decode()
5871 - Added the function gnutls_srp_set_server_credentials_function()
5872 to allow retrieving SRP parameters from an external backend - other
5873 than password files.
5874 - Added the function gnutls_openpgp_set_recv_key_function()
5875 which can be used to set a callback, to get OpenPGP keys.
5876 - Exported the functions:
5879 which should be used by callback functions.
5880 - Changed the semantics of gnutls_pem_base64_encode_alloc()
5881 and gnutls_pem_base64_decode_alloc(). In the default case
5882 were the gnutls library is used with malloc/realloc/free,
5883 these are binary compatible.
5885 * Version 0.5.11 (2002-11-05)
5886 - Some fixes in 'gnutls-cli' client program to prevent some segmentation
5888 - Example programs found in the documentation can now be generated by
5889 running "make examples" in doc/tex directory.
5890 - Added more descriptive error strings, to gnutls_strerror().
5891 - Documented error codes, and the function reference list is now sorted.
5892 - Optimized buffering code.
5893 - gnutls_x509_extract_certificate_dn_string() was rewritten.
5894 - Added GNUTLS_E_SHORT_MEMORY_BUFFER error code, which is returned in the
5895 case where the memory buffer provided is not long enough.
5896 - Depends on the new OpenCDK 0.3.2.
5898 * Version 0.5.10 (2002-10-13)
5899 - Updated documentation.
5900 - Added server name extension. This allows clients to specify the
5901 name of the server they connect to. Useful to HTTPS.
5902 - Several corrections in the code base, mostly in signed/unsigned,
5905 * Version 0.5.9 (2002-10-10)
5906 - Corrected some code which worked fine in gcc 3.2, but not with any
5908 - Updated 'gnutls-cli' with the '--starttls' option, to allow testing
5909 starttls implementations.
5910 - Added gnutls_x509_extract_key_pk_algorithm() function which extracts
5911 the private key type, of a DER encoded key.
5912 - Added gnutls_x509_extract_certificate_dn_string() which returns the
5913 certificate's distinguished name in a single string.
5914 - Added gnutls_set_default_priority() and gnutls_set_default_export_priority()
5915 functions, to avoid calling all the *_priority() functions if the defaults
5917 - Added int gnutls_x509_check_certificates_hostname() which check whether
5918 the given hostname matches the owner of the given X.509 certificate.
5920 * Version 0.5.8 (2002-09-25)
5921 - Updated documentation.
5922 - Added gnutls_record_get_direction() which replaces the obsolete
5923 gnutls_handshake_get_direction().
5924 - Added function to convert error codes to alert descriptions
5925 - Added LZO compression
5927 * Version 0.5.7 (2002-09-11)
5928 - Some fixes in the memory allocation functions (realloc).
5929 - Improved the string functions used in XML certificate generation.
5930 - Removed dependency on libgdbm.
5931 - Corrected bug in gnutls_dh_params_set() which affected
5932 gnutls_dh_params_deinit().
5933 - Corrected bug in session resuming code in server side.
5935 * Version 0.5.6 (2002-09-06)
5936 - Corrected bugs in SRP implementation, which prevented gnutls
5937 to interoperate with other implementations. (interoperability testing
5938 was done by David Taylor)
5939 - Corrected bug in cert_type extension.
5940 - Corrected extension type checks which used an 8 bit extension size,
5942 - Added versioning in the XML output of certificate functions.
5943 - Removed the X.509 test suite.
5945 * Version 0.5.5 (2002-09-03)
5946 - Updated the SRP implementation to the latest draft. The blowfish
5947 crypt implementation was removed, since the new draft does not allow
5948 other hash algorithms except for the srpsha.
5949 - Renamed all the constructed types in order to have more consistent
5951 - Improved the certificate and key read functions. Now they can read
5952 the certificate and the private key from the same file.
5953 - Updated and corrected documentation.
5955 * Version 0.5.4 (2002-08-27)
5956 - Fixes in TLS 1.0 PRF and SSL3 random functions.
5957 - gnutls_handshake_set_exportable_detection() was obsoleted.
5958 - Added gnutls_openpgp_extract_key_id() which returns the key ID.
5959 - Corrected bug in DHE key exchange
5960 - Added support for temporary RSA keys which are needed for the
5961 export cipher suites.
5962 - Added the TLS_RSA_EXPORT_ARCFOUR_40_MD5 ciphersuite.
5964 * Version 0.5.3 (2002-08-23)
5965 - No changes. Replaces the tarball of 0.5.2 which accidentally contained
5966 code from the unstable branch.
5968 * Version 0.5.2 (2002-08-22)
5969 - Added an error code that is returned in clients which connect
5970 to export only servers. This must be enabled using the
5971 gnutls_handshake_set_exportable_detection() function.
5972 - Updated openssl compatibility layer.
5973 - Added gnutls_handshake_get_direction() function which returns
5974 the state of the handshake when interrupted.
5976 * Version 0.5.1 (2002-07-17)
5977 - Corrected the m4 macros which used <gnutls.h> instead of
5979 - Documentation fixes
5980 - Added gnutls_transport_set_ptr2() function, which accepts two
5981 different pointers, to be used while receiving, and
5983 - Semantic changes in gnutls_record_set_max_size(). The requested
5984 size is now immediately enforced at the output buffers.
5985 - gnutls_global_init_extra() now fails if the library versions do
5987 - Fixes in client and server example programs. Null encryption can
5988 be used in these programs, to assist in debuging.
5989 - Fixes in zlib compression code.
5991 * Version 0.5.0 (2002-07-06)
5992 - Added X.509 certificate tests in tests/ directory
5993 - Removed stubs for SRP and Anonymous authentication. They served
5994 no purpose since they are always included, unless it was requested
5996 - Added gnutls_handshake_set_private_extensions() function. This
5997 function can be used to enable private (gnutls specific) cipher suites
5998 and compression algorithms.
5999 - Added check for C99 macro support by the compiler.
6000 - Added functions gnutls_b64_encode_fmt2() and gnutls_b64_decode_fmt2()
6001 - Added the new libtasn1 library.
6002 - Removed the gdbm backend. Applications are now responsible for the
6003 session resuming backend. The gnutls-serv application contains an
6004 simple example on how to use gdbm for resuming.
6005 - Headers for the gnutls library are now installed in $(includedir)/gnutls
6006 - Added an OpenSSL compatible interface (with some limitations).
6007 - Added functions to convert DER encoded certificates to XML format.
6009 * Version 0.4.4 (2002-06-24)
6010 - Corrected bug in PKCS-1 RSA encryption which prevented gnutls to encrypt
6011 using keys of some specific size.
6013 * Version 0.4.3 (2002-05-23)
6014 - The gnutls-extra library now compiles fine, if the opencdk library is
6016 - Several bug fixes.
6017 - Added gnutls_global_set_mem_func() function, to set the memory allocation
6018 functions, if other than the defaults are to be used.
6019 - The default memory allocation functions are now the ones in libc.
6021 * Version 0.4.2 (2002-05-21)
6022 - Separated ASN.1 structures parser documentation and TLS library
6024 - Added gnutls_handshake_set_rsa_pms() function, which disables the
6025 version check in RSA premaster secret.
6026 - Added gnutls_session_is_resumed() function, which reports if a session
6028 - Added gnutls_state_set_ptr() and gnutls_state_get_ptr() functions, to
6029 assist in callback functions.
6030 - Replaced the included 1024 bit prime for Diffie Hellman, with a new
6032 - Relicensed the library under the GNU Lesser General Public License
6033 - Added gnutls-extra library which contains the GPL covered code of gnutls.
6035 * Version 0.4.1 (2002-04-07)
6036 - Now uses alloca() for temporary variables
6037 - Optimized RSA signing
6038 - Added functions to return the peer's certificate activation and
6040 - Corrected time function's behaviour (the time value returned no longer
6041 relate to local timezone).
6043 * Version 0.4.0 (2002-04-01)
6044 - Added support for RFC2630 (PKCS7) X.509 certificate sets
6045 - Added new functions: gnutls_x509_extract_certificate_pk_algorithm(),
6046 gnutls_openpgp_extract_key_pk_algorithm().
6047 - Several optimizations in the Handshake protocol
6048 - Several optimizations in RSA algorithm
6049 - Unified the return values because of small buffers.
6051 * Version 0.3.92 (2002-03-23)
6052 - Updated documentation
6053 - Combined error codes of ASN.1 parser and gnutls
6054 - Removed GNUTLS_CERT_TRUSTED from the CertificateStatus enumeration
6055 - Added protection against CBC chosen plaintext attack (disabled by default)
6056 - Improved and optimized compression support
6058 * Version 0.3.91 (2002-03-03)
6059 - Added gnutls-cli-debug program
6060 - Corrections in session resumption
6061 - Rehandshake can now handle negotiation of different authentication
6063 - gnutls-cli, gnutls-serv, gnutls-srpcrypt and gnutls-cli-debug are
6064 now being installed.
6066 * Version 0.3.90 (2002-02-24)
6067 - Handshake messages are not kept in memory any more. Now we use
6068 less memory during a handshake
6069 - Added support for certificates with DSA parameters
6070 - Added DHE_DSS cipher suites
6071 - Key exchange methods changed so they do not depend on the
6072 certificate type. Added certificate type negotiation TLS extension.
6073 - Added openpgp key support (EXPERIMENTAL)
6074 - Improved Diffie Hellman key exchange support.
6075 - Bug fixes in the RSA key exchange.
6076 - Added check for the requested TLS extensions
6077 - TLS extensions now use a 16 bit type field.
6078 - Added a minimal string library to assist in ASN.1 parsing
6079 - Changes in ASN.1 parser to work with the new bison
6080 - Added gnutls_x509_extract_subject_alt_name(), which deprecates
6081 gnutls_x509_extract_subject_dns_name()
6082 - gnutls_x509_set_trust_(file/mem) can now be called multiple times
6083 - gnutls_srp_server_set_cred_file() can now be called multiple times
6085 * Version 0.3.5 (2002-01-25)
6086 - Corrected the RSA key exchange method, to avoid attacks against
6089 * Version 0.3.4 (2002-01-20)
6090 - Corrected bugs in DHE_RSA key exchange method
6092 * Version 0.3.3 (2002-01-19)
6093 - Added gnutls_x509pki_verify_certificate()
6094 - Added gnutls_x509pki_set_trust_mem() and gnutls_x509pki_set_key_mem()
6095 - Bug fixes in srpcrypt (based on patch by Marc Huber)
6096 - Bug fixes in the Handshake protocol (based on patch by Guillaume Morin)
6097 - Corrected library versioning
6099 * Version 0.3.2 (2002-01-05)
6100 - Corrected bug which did not allow a client to accept multiple CA names
6101 - Added gnutls_fingerprint()
6102 - Added gnutls_x509pki_extract_certificate_serial()
6103 - Added gnutls_b64_encode_fmt() and gnutls_b64_decode_fmt()
6104 - Corrected behaviour in version advertizing
6105 - Updated documentation
6106 - Prefixed all types in gnutls.h with 'GNUTLS_' to avoid namespace collisions
6108 * Version 0.3.1 (2001-12-21)
6109 - Corrections in the configuration files
6110 - Fixes a bug in anonymous authentication
6112 * Version 0.3.0 (2001-12-17)
6113 - Corrected bug in new integer formatting (now we use the old format again)
6114 - Several corrections and usual cleanups
6116 * Version 0.2.91 (2001-12-10)
6117 - Fixes in MPI handling (fixes possible bug with signed integers)
6118 - Removed name indication extension
6119 - Added gnutls_transport_get_ptr() and gnutls_db_get_ptr()
6120 - Optimizations in server certificate callback.
6121 - Fixes in anonymous authentication
6122 - Corrections in client ciphersuite selection
6124 * Version 0.2.90 (2001-12-07)
6125 - gnutls_handshake(), gnutls_read() etc. functions no longer require
6126 the 'SOCKET cd' argument. This argument is set using the function
6127 gnutls_set_transport_ptr().
6128 - introduced gnutls_x509pki_get_peer_certificate_list(). This function returns
6129 a list containing peer's certificate and issuers DER encoded.
6130 - Updated X.509 certificate handling API
6131 - Added callback to select the server certificate
6132 - More consistent function naming (changes in several function names)
6133 - Buffer overflow checking in ASN.1 structures parser
6134 - Updated documentation
6136 * Version 0.2.11 (2001-11-16)
6137 - Changed the meaning of GNUTLS_E_REHANDSHAKE value. If this value
6138 is returned, then the caller should perform a handshake or send
6139 an alert to the peer.
6140 - Made receive buffer dynamic. Normally if no large chunks are received
6141 it occupies less space.
6142 - Added max_record_size extension
6143 - Bugfixes in session handling
6144 - Improved non blocking IO support in the Handshake Protocol
6145 - Usual bugfixes and cleanups
6146 - Documentation updated (includes ASN.1 documentation)
6148 * Version 0.2.10 (2001-11-05)
6149 - Corrected bugs and improved non blocking IO
6150 - Added hooks to use external database to store sessions
6153 * Version 0.2.9 (2001-10-27)
6154 - AUTH_INFO types and structures were moved to library internals
6155 - AUTH_FAILED is no longer returned in SRP authentication
6156 (any fatal error in SRP means auth failed)
6157 - Introduced GNUTLS_E_INTERRUPTED
6158 - Added support for non blocking IO
6159 - gnutls_recv() and gnutls_send() are now obsolete
6160 - Changed semantics of gnutls_rehandshake()
6162 * Version 0.2.4 (2001-10-12)
6163 - Better handling of X.509 certificate extensions
6164 - Added DHE_RSA ciphersuites
6165 - Updated the Name Indication (dnsname) extension
6166 - Improvements in Diffie Hellman primes handling
6168 * Version 0.2.3 (2001-09-19)
6169 - Memory optimizations in gnutls_recv()
6170 - Fixed several memory leaks
6171 - Added ability to specify callback for x509 client certificate selection
6172 - Better documentation
6174 * Version 0.2.2 (2001-08-21)
6175 - Several bugfixes (library and documentation)
6177 * Version 0.2.1 (2001-08-07)
6180 * Version 0.2.0 (2001-08-07)
6181 - Partial support for X.509v3 Certificate extensions.
6182 - Added Internal memory handlers
6183 - Removed gnutls_x509_set_cn()
6184 - Added X.509 client authentication
6185 - Several bug fixes and protocol fixes
6187 * Version 0.1.9 (2001-07-30)
6188 - Corrected bug(s) in ChangeCipherSpec packet (fixes renegotiate)
6189 - SRP is updated to conform to the newest draft.
6190 - Added support for DNSNAME extension.
6191 - Reentracy fixes in ASN.1 Parsing.
6192 - Optimizations in hash/hmac functions
6193 - (Error) message handling has changed
6194 - Better Protocol Version handling
6195 - Added X.509 Certificate Verification
6196 - gnutls_read() semantics are now closer to read(2) - added EOF
6197 - Documented some part of gnutls in doc/tex/ using Latex
6199 * Version 0.1.4 (2001-06-22)
6200 - Corrected (srp) base64 encoding.
6201 - Changed bcrypt algorithm to include username.
6202 - Added RSA Ciphersuites (no certificate checking).
6203 - Fixes in SSL 2.0 client hello parsing.
6204 - Added ASN.1 and DER parsers.
6205 - Bugfixes in session resuming
6206 - Updated Ciphersuite selection algorithm
6207 - Added internal representation of X.509 structures.
6208 - Added global state
6210 * Version 0.1.3 (2001-06-01)
6211 - Updated API (and the way it is documented - we use inline documentation)
6212 - Added function to access alert messages.
6213 - Added support for renegotiating parameters.
6214 - Better and Faster Resume Database handling.
6217 * Version 0.1.2 (2001-05-14)
6219 - Fixes in extension handling
6221 * Version 0.1.1 (2001-05-13)
6222 - Added compatibility with Stanford's libsrp library
6224 * Version 0.1.0 (2001-05-09)
6225 - Added SSL 2.0 client hello support
6226 - GNUTLS is a gnu library
6227 - Added support for TLS extensions.
6228 - Added support for SRP
6230 * Version 0.0.7 (2001-01-11)
6231 - Added server side session resuming (using gdbm)
6232 - Added twofish algorithm
6234 * Version 0.0.6 (2000-12-20)
6235 - Added client side session resuming
6236 - Better documentation (check doc/API)
6237 - Better socket handling (gnutls can be used with select())
6238 - Some primitive support for non blocking IO and socket options has been added.
6240 * Version 0.0.5 (2000-12-07)
6241 - Added Compression (using ZLIB)
6242 - Added SSL 3.0 support
6244 ----------------------------------------------------------------------
6245 Copying and distribution of this file, with or without modification,
6246 are permitted in any medium without royalty provided the copyright
6247 notice and this notice are preserved.