[SCM] GNU gnutls branch, master, updated. gnutls_3_0_0-43-gc67dcd8

[Nikos Mavrogiannopoulos]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU gnutls".

http://git.savannah.gnu.org/cgit/gnutls.git/commit/?id=c67dcd8b833b63f26d1a34b7205d2758e0758542

The branch, master has been updated
       via  c67dcd8b833b63f26d1a34b7205d2758e0758542 (commit)
       via  6e59b2e7e4704d2086f44fa35501ecd704774046 (commit)
       via  479a89f3aa8f699407f59e901af7c425858d8728 (commit)
       via  00dd846d5954a6a923254d2df4148d8e8d1eb30e (commit)
       via  35a691adec3e65bd734ced3711bf654a86966185 (commit)
       via  89ed3802465f4212402f4c95a5e336791741adf8 (commit)
      from  d21285196611811120ff1ba41e64f716f244f3d8 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit c67dcd8b833b63f26d1a34b7205d2758e0758542
Author: Nikos Mavrogiannopoulos <address@hidden>
Date:   Thu Aug 11 21:31:15 2011 +0200

    updates

commit 6e59b2e7e4704d2086f44fa35501ecd704774046
Author: Nikos Mavrogiannopoulos <address@hidden>
Date:   Thu Aug 11 21:09:28 2011 +0200

    changed paper size.

commit 479a89f3aa8f699407f59e901af7c425858d8728
Author: Nikos Mavrogiannopoulos <address@hidden>
Date:   Thu Aug 11 20:28:17 2011 +0200

    doc update

commit 00dd846d5954a6a923254d2df4148d8e8d1eb30e
Author: Nikos Mavrogiannopoulos <address@hidden>
Date:   Thu Aug 11 19:51:10 2011 +0200

    reduced space taken by descriptions.

commit 35a691adec3e65bd734ced3711bf654a86966185
Author: Nikos Mavrogiannopoulos <address@hidden>
Date:   Thu Aug 11 19:44:37 2011 +0200

    more updates.

commit 89ed3802465f4212402f4c95a5e336791741adf8
Author: Nikos Mavrogiannopoulos <address@hidden>
Date:   Thu Aug 11 18:54:29 2011 +0200

    documented fixes

-----------------------------------------------------------------------

Summary of changes:
 NEWS                   |    2 ++
 doc/alert-printlist.c  |    4 +---
 doc/cha-gtls-app.texi  |   36 +++++++++++++++++++++++++++++++++---
 doc/cha-intro-tls.texi |    9 ++++-----
 doc/cha-library.texi   |    8 ++++----
 doc/cha-programs.texi  |    4 ++--
 doc/errcodes.c         |    7 ++-----
 doc/latex/gnutls.tex   |    4 ++--
 doc/printlist.c        |    4 +---
 lib/gnutls_global.c    |    4 ++--
 10 files changed, 53 insertions(+), 29 deletions(-)

diff --git a/NEWS b/NEWS
index 1f937ff..f1581f3 100644
--- a/NEWS
+++ b/NEWS
@@ -4,6 +4,8 @@ See the end for copying conditions.
 
 * Version 3.0.1 (unreleased)
 
+** libgnutls: fixed alignment issue in AES-NI code.
+
 ** libgnutls: The config file at gnutls_pkcs11_init()
 is being read if provided.
 
diff --git a/doc/alert-printlist.c b/doc/alert-printlist.c
index 5c38666..4d7ad38 100644
--- a/doc/alert-printlist.c
+++ b/doc/alert-printlist.c
@@ -72,8 +72,6 @@ static const char headers[] = "\\tablefirsthead{%\n"
        "\\tablehead{%\n"
        "\\hline\n"
        "\\multicolumn{3}{|l|}{\\small\\sl continued from previous page}\\\\\n"
-       "\\hline\n"
-       "Alert & ID & Description\\\\\n"
        "\\hline}\n"
        "\\tabletail{%\n"
        "\\hline\n"
@@ -112,7 +110,7 @@ const char* _name;
 
 puts( headers);
 
-printf("\\begin{supertabular}{|l|p{1cm}|p{3.5cm}|}\n\\label{tab:alerts}\n");
+printf("\\begin{supertabular}{|p{.50\\linewidth}|p{.07\\linewidth}|p{.34\\linewidth}|}\n\\label{tab:alerts}\n");
 
   {
     size_t i;
diff --git a/doc/cha-gtls-app.texi b/doc/cha-gtls-app.texi
index 2bcb5b3..2b250b2 100644
--- a/doc/cha-gtls-app.texi
+++ b/doc/cha-gtls-app.texi
@@ -5,7 +5,7 @@
 
 @menu
 * Preparation::
-* Session initialization::
+* TLS and DTLS sessions::
 * Priority Strings::
 * Client examples::
 * Server examples::
@@ -113,8 +113,9 @@ specifying both options to @command{pkg-config}:
 gcc -o foo foo.c `pkg-config gnutls --cflags --libs`
 @end smallexample
 
address@hidden Session initialization
address@hidden Session initialization
address@hidden TLS and DTLS sessions
address@hidden TLS and DTLS sessions
address@hidden Session initialization
 
 In the previous sections we have discussed the global initialization
 required for GnuTLS as well as the initialization required for each
@@ -157,6 +158,35 @@ time limit.
 
 @showfuncdesc{gnutls_transport_set_pull_timeout_function}
 
address@hidden Handshake
+Once a session has been initialized and a network
+connection has been set up, TLS and DTLS protocols
+perform a handshake. The handshake is the actual key
+exchange.
+
address@hidden
+
+The handshake process doesn't ensure the verification
+of the peer's identity. When certificates are in use,
+this can be done, either after the handshake is complete, or during 
+the handshake if @funcref{gnutls_certificate_set_verify_function}
+has been used. In both cases the following function can be
+used to verify the peer's certificate (see @ref{Certificate authentication}
+for more information).
+
address@hidden 
+
+Once a TLS or DTLS session is no longer needed, it is
+recommended to use @funcref{gnutls_bye} to terminate the
+session. That way the peer is notified securely about the
+intention of termination, which allows distinguishing it
+from a malicious connection termination.
+
address@hidden
+
+A session can be deinitialized using the following function.
+
address@hidden
 
 @node Priority Strings
 @section Priority strings
diff --git a/doc/cha-intro-tls.texi b/doc/cha-intro-tls.texi
index 433cdab..a27c217 100644
--- a/doc/cha-intro-tls.texi
+++ b/doc/cha-intro-tls.texi
@@ -100,7 +100,7 @@ timers and waiting for peer's messages during the handshake 
process,
 @acronym{GnuTLS} will block and might be interrupted by signals. The
 blocking operation of @acronym{GnuTLS} during @acronym{DTLS} handshake
 can be changed using the appropriate flags in @funcref{gnutls_init} (see
address@hidden initialization}).
address@hidden and DTLS sessions}).
 By default, if the transport functions are not set, @acronym{GnuTLS}
 will use the Berkeley sockets. 
 
@@ -312,8 +312,8 @@ The alert protocol is there to allow signals to be sent 
between peers.
 These signals are mostly used to inform the peer about the cause of a
 protocol failure. Some of these signals are used internally by the
 protocol and the application protocol does not have to cope with them
-(e.g. @code{GNUTLS_A_CLOSE_NOTIFY}), and others refer to the
-application protocol solely (e.g. @code{GNUTLS_A_USER_CANCELLED}).  An
+(e.g. @code{GNUTLS_\-A_\-CLOSE_\-NOTIFY}), and others refer to the
+application protocol solely (e.g. @code{GNUTLS_\-A_\-USER_\-CANCELLED}).  An
 alert signal includes a level indication which may be either fatal or
 warning. Fatal alerts always terminate the current connection, and
 prevent future re-negotiations using the current session ID. All alert
@@ -334,7 +334,6 @@ protocol are shown below.
 
 @include alerts.texi
 
-
 @node The TLS Handshake Protocol
 @section The TLS handshake protocol
 @anchor{The Handshake Protocol}
@@ -347,7 +346,7 @@ has to set up the required parameters. The main handshake 
function
 is @funcref{gnutls_handshake}. In the next paragraphs we elaborate on 
 controlling of the handshake protocol, i.e., the ciphersuite negotiation.
 
address@hidden
address@hidden
 
 
 @menu
diff --git a/doc/cha-library.texi b/doc/cha-library.texi
index cf5a2cf..2fb96ab 100644
--- a/doc/cha-library.texi
+++ b/doc/cha-library.texi
@@ -35,9 +35,9 @@ include:
 
 @acronym{GnuTLS} consists of three independent parts, namely the ``TLS
 protocol part'', the ``Certificate part'', and the ``Cryptographic
-back-end'' part.  The `TLS protocol part' is the actual protocol
+back-end'' part.  The ``TLS protocol part'' is the actual protocol
 implementation, and is entirely implemented within the
address@hidden library.  The `Certificate part' consists of the
address@hidden library.  The ``Certificate part'' consists of the
 certificate parsing, and verification functions which is partially
 implemented in the @acronym{GnuTLS} library.  The
 address@hidden@url{http://www.gnu.org/software/libtasn1/}},
@@ -116,10 +116,10 @@ to be taken. Thus negative error codes may be fatal or 
not.
 
 Fatal errors terminate the connection immediately and further sends
 and receives will be disallowed.  Such an example is
address@hidden Non-fatal errors may warn about
address@hidden Non-fatal errors may warn about
 something, i.e., a warning alert was received, or indicate the some
 action has to be taken. This is the case with the error code
address@hidden returned by @funcref{gnutls_record_recv}.
address@hidden returned by @funcref{gnutls_record_recv}.
 This error code indicates that the server requests a re-handshake. The
 client may ignore this request, or may reply with an alert.  You can
 test if an error code is a fatal one by using the
diff --git a/doc/cha-programs.texi b/doc/cha-programs.texi
index 531f0ee..46dfe10 100644
--- a/doc/cha-programs.texi
+++ b/doc/cha-programs.texi
@@ -817,8 +817,8 @@ Normally the file will generate random keys for the 
indicated username.
 @cindex srptool
 
 The @file{srptool} is a very simple program that emulates the programs
-in the @emph{Stanford SRP libraries}, see
address@hidden://srp.stanford.edu/}.  It is intended for use in places
+in the @emph{Stanford SRP address@hidden
address@hidden://srp.stanford.edu/}.}.  It is intended for use in places
 where you don't expect @acronym{SRP} authentication to be the used for
 system users.
 
diff --git a/doc/errcodes.c b/doc/errcodes.c
index ff01e06..d00d25c 100644
--- a/doc/errcodes.c
+++ b/doc/errcodes.c
@@ -56,9 +56,6 @@ static const char headers[] = "\\tablefirsthead{%\n"
        "\\tablehead{%\n"
        "\\hline\n"
        "\\multicolumn{2}{|l|}{\\small\\sl continued from previous page}\\\\\n"
-       "\\hline\n"
-       "\\multicolumn{1}{|c}{Error code} &\n"
-       "\\multicolumn{1}{c|}{Description} \\\\\n"
        "\\hline}\n"
        "\\tabletail{%\n"
        "\\hline\n"
@@ -152,7 +149,7 @@ error_name names_to_sort[MAX_CODES]; /* up to MAX_CODES 
names  */
 
 puts( headers);
 
-printf("\\begin{supertabular}{|l|p{6.3cm}|}\n");
+printf("\\begin{supertabular}{|p{.52\\linewidth}|p{.40\\linewidth}|}\n");
 
 memset( names_to_sort, 0, sizeof(names_to_sort));
 j=0;
@@ -174,7 +171,7 @@ for (i=0;i<j;i++)
    desc = gnutls_strerror( names_to_sort[i].error_index);
    if (desc == NULL || _name == NULL) continue;
 
-   printf( "{\\tiny{%s}} & %s", escape_string(_name, buffer1, 
sizeof(buffer1)), escape_string(desc, buffer2, sizeof(buffer2)));
+   printf( "{\\scriptsize{%s}} & %s", escape_string(_name, buffer1, 
sizeof(buffer1)), escape_string(desc, buffer2, sizeof(buffer2)));
    printf( "\\\\\n");
 }
 
diff --git a/doc/latex/gnutls.tex b/doc/latex/gnutls.tex
index 8617349..b05264b 100644
--- a/doc/latex/gnutls.tex
+++ b/doc/latex/gnutls.tex
@@ -1,6 +1,7 @@
-\documentclass[letterpaper,10pt]{book}
+\documentclass[fontsize=10pt,twoside,openright]{scrbook}
 \bibliographystyle{plain}
 
+\usepackage[paperwidth=18.91cm,paperheight=24.589cm,twoside,bindingoffset=9mm,outer=2.2cm,inner=1cm,top=2.6cm,bottom=2.5cm]{geometry}
 \usepackage{fancyhdr}
 \usepackage{graphicx}
 \usepackage{makeidx}
@@ -16,7 +17,6 @@
 \usepackage{xcolor}
 \usepackage[greek,english]{babel}%for euro sign
 
-
 \hypersetup{
     colorlinks,%
     citecolor=blue,%
diff --git a/doc/printlist.c b/doc/printlist.c
index f3b7c4a..ac6c1d2 100644
--- a/doc/printlist.c
+++ b/doc/printlist.c
@@ -162,8 +162,6 @@ static const char headers[] = "\\tablefirsthead{%\n"
        "\\tablehead{%\n"
        "\\hline\n"
        "\\multicolumn{3}{|l|}{\\small\\sl continued from previous page}\\\\\n"
-       "\\hline\n"
-       "Ciphersuite name & TLS ID & since\\\\\n"
        "\\hline}\n"
        "\\tabletail{%\n"
        "\\hline\n"
@@ -202,7 +200,7 @@ const char* _name;
 
 puts( headers);
 
-printf("\\begin{supertabular}{|l|p{1.8cm}|p{1.6cm}|}\n");
+printf("\\begin{supertabular}{|p{.60\\linewidth}|p{.15\\linewidth}|p{.10\\linewidth}|}\n");
 
   {
     size_t i;
diff --git a/lib/gnutls_global.c b/lib/gnutls_global.c
index 328f867..e99f1c1 100644
--- a/lib/gnutls_global.c
+++ b/lib/gnutls_global.c
@@ -60,7 +60,7 @@ int _gnutls_log_level = 0;      /* default log level */
  * Normally you may not use this function since it is only used for
  * debugging purposes.
  *
- * gnutls_log_func is of the form,
+ * @gnutls_log_func is of the form,
  * void (*gnutls_log_func)( int level, const char*);
  **/
 void
@@ -78,7 +78,7 @@ gnutls_global_set_log_function (gnutls_log_func log_func)
  * because it will report the session of the event if any. Note that
  * that session might be null if there is no corresponding TLS session.
  *
- * gnutls_audit_log_func is of the form,
+ * @gnutls_audit_log_func is of the form,
  * void (*gnutls_audit_log_func)( gnutls_session_t, int level, const char*);
  *
  * Since: 3.0.0


hooks/post-receive
-- 
GNU gnutls