[SCM] GNU gnutls branch, gnutls_2_8_x, updated. gnutls_2_8_4-19-g4e2e3f6

[Simon Josefsson]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU gnutls".

http://git.savannah.gnu.org/cgit/gnutls.git/commit/?id=4e2e3f6c3881fceecf176f1ae0b7c85f03a18ffc

The branch, gnutls_2_8_x has been updated
       via  4e2e3f6c3881fceecf176f1ae0b7c85f03a18ffc (commit)
       via  4b520125eb1337f06da49b70232c09d178696817 (commit)
      from  0596403a2d5b07721903381dec89707d88eac4ed (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 4e2e3f6c3881fceecf176f1ae0b7c85f03a18ffc
Author: Simon Josefsson <address@hidden>
Date:   Mon Nov 2 12:18:03 2009 +0100

    Generated.

commit 4b520125eb1337f06da49b70232c09d178696817
Author: Simon Josefsson <address@hidden>
Date:   Mon Nov 2 12:07:13 2009 +0100

    Version 2.8.5.

-----------------------------------------------------------------------

Summary of changes:
 ChangeLog |  109 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 NEWS      |    2 +-
 2 files changed, 110 insertions(+), 1 deletions(-)

diff --git a/ChangeLog b/ChangeLog
index 1d1fc07..694f565 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,112 @@
+2009-11-02  Simon Josefsson <address@hidden>
+
+       * NEWS: Version 2.8.5.
+
+2009-11-02  Simon Josefsson <address@hidden>
+
+       * NEWS: Add.
+
+2009-11-02  Simon Josefsson <address@hidden>
+
+       * tests/chainverify.c: Fix time bomb in chainverify self-test.  
Reported by Andreas Metzler <address@hidden> in
+
+       <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3925>.
+
+2009-11-02  Simon Josefsson <address@hidden>
+
+       * lib/gnutls_buffers.c, lib/gnutls_buffers.h, lib/gnutls_cipher.c,
+       lib/gnutls_handshake.c, lib/gnutls_handshake.h,
+       lib/gnutls_hash_int.c, lib/gnutls_hash_int.h, lib/gnutls_int.h,
+       lib/gnutls_sig.c, lib/gnutls_state.c: Revert "1. Fix for memory
+       leaks on interrupted handshake." This reverts commit 
15b31cfc7888aafb4135fb1bc92c710eeaebb4c0.  Let's
+       not pull this into the next release, it wasn't in the release
+       candidate.
+
+2009-11-01  Nikos Mavrogiannopoulos <address@hidden>
+
+       * lib/gnutls_buffers.c, lib/gnutls_buffers.h, lib/gnutls_cipher.c,
+       lib/gnutls_handshake.c, lib/gnutls_handshake.h,
+       lib/gnutls_hash_int.c, lib/gnutls_hash_int.h, lib/gnutls_int.h,
+       lib/gnutls_sig.c, lib/gnutls_state.c: 1. Fix for memory leaks on 
interrupted handshake.  2. Fixes issue where a TLS 1.2 client will wrongly 
calculate hashes
+       if the server will select a different than 1.2 protocol.  3. In TLS 1.2 
when a certificate request is sent, support is not
+       complete. In that case abort the handshake. By checking TLS 1.2 it
+       seems that the algorithms to be used for the signature in the
+       certificate verify message are negotiated not at the client/server
+       hello messages but rather selected by the server at the certificate
+       request. This might not look as bad, but since in this message we
+       have to sign all previous handshake messages, it forces us to keep
+       all the handshake messages into a buffer until this point... I don't
+       know who proposed this change to the TLS WG, but it seems it wasn't
+       really thought of.
+
+2009-10-28  Nikos Mavrogiannopoulos <address@hidden>
+
+       * NEWS, lib/gnutls_handshake.c: When resuming a session do not
+       overwrite the initial session data with resumed session data.
+       Discovered on discussion at help-gnutls with Sebastien Decugis.
+
+2009-10-26  Simon Josefsson <address@hidden>
+
+       * NEWS: Add.
+
+2009-10-20  Simon Josefsson <address@hidden>
+
+       * tests/chainverify.c: Fix expired cert.
+
+2009-10-14  Simon Josefsson <address@hidden>
+
+       * NEWS: Add.
+
+2009-10-14  Simon Josefsson <address@hidden>
+
+       * lib/pkix_asn1_tab.c: Regenerate.
+
+2009-10-14  Simon Josefsson <address@hidden>
+
+       * lib/pkix.asn: Work around 'Cannot find OID: 1.2.840.113549.1.9.21'
+       PKCS#12 problem.  Reported by Michael Welsh Duggan <address@hidden> in
+       <http://permalink.gmane.org/gmane.network.gnutls.general/1786>.
+
+2009-09-28  Ludovic Courtès <address@hidden>
+
+       * configure.ac, guile/src/core.c: guile: Adjust for Guile 1.9.3+.  * 
guile/src/core.c (mark_session_record_port,
+         free_session_record_port): Conditionalize on `SCM_MAJOR_VERSION == 1
+         && SCM_MINOR_VERSION <= 8'.  
(scm_init_gnutls_session_record_port_type): Adjust accordingly.    
(make_session_record_port): Use `scm_gc_malloc_pointerless ()'
+         when available.
+
+2009-09-28  Ludovic Courtès <address@hidden>
+
+       * guile/src/core.c: guile: Syntactic nitpicking.  * guile/src/core.c 
(SCM_GNUTLS_MAKE_SESSION_DATA,   SCM_GNUTLS_SET_SESSION_RECORD_PORT): Remove 
extraneous semicolon.
+
+2009-09-28  Ludovic Courtès <address@hidden>
+
+       * guile/src/core.c: guile: Use Guile's malloc routines.  * 
guile/src/core.c (scm_init_gnutls): Use Guile's malloc routines.
+
+2009-09-23  Ludovic Courtès <address@hidden>
+
+       * guile/src/core.c: Fix integer/pointer cast warnings in the Guile
+       bindings on x86_64.  * guile/src/core.c (do_fill_port, 
fill_session_record_port_input,   scm_gnutls_set_session_transport_fd_x): Make 
sure pointer/integer
+         casts use integers of the right size.
+
+2009-09-23  Ludovic Courtès <address@hidden>
+
+       * guile/src/extra.c: Update Guile bindings to the current OpenPGP
+       API.  * guile/src/extra.c (scm_gnutls_openpgp_certificate_id,   
scm_gnutls_openpgp_certificate_id_x): Use   the newer 
`gnutls_openpgp_crt_get_key_id ()'.
+
+2009-09-23  Ludovic Courtès <address@hidden>
+
+       * doc/Makefile.am, guile/src/Makefile.am, guile/tests/Makefile.am: 
+       Turn off auto-compilation when using Guile 1.9+.  * 
guile/src/Makefile.am (GUILE_FOR_BUILD): Turn off auto-compilation   with Guile 
1.9+.  * guile/tests/Makefile.am (TESTS_ENVIRONMENT): Likewise.  * 
doc/Makefile.am (GUILE_FOR_BUILD): Likewise.
+
+2009-09-18  Simon Josefsson <address@hidden>
+
+       * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4,
+       libextra/configure.ac: Bump versions.
+
+2009-09-18  Simon Josefsson <address@hidden>
+
+       * ChangeLog: Generated.
+
 2009-09-18  Simon Josefsson <address@hidden>
 
        * NEWS: Version 2.8.4.
diff --git a/NEWS b/NEWS
index 8c7c8ad..58ab5bd 100644
--- a/NEWS
+++ b/NEWS
@@ -3,7 +3,7 @@ Copyright (C) 2004, 2005, 2006, 2007, 2008, 2009 Simon Josefsson
 Copyright (C) 2000, 2001, 2002, 2003, 2004 Nikos Mavrogiannopoulos
 See the end for copying conditions.
 
-* Version 2.8.5 (unreleased)
+* Version 2.8.5 (released 2009-11-02)
 
 ** libgnutls: In server side when resuming a session do not overwrite the 
 ** initial session data with the resumed session data.


hooks/post-receive
-- 
GNU gnutls