GNU SASL 1.5.3 - experimental release

[Simon Josefsson]

The GNU SASL 1.5.x branch is NOT what you want for your stable system.
It is intended for developers and experienced users.

New in this release is SCRAM-SHA-1-PLUS and tls-unique channel bindings
support.

The main news feature in this branch is support for GS2-KRB5 and
SCRAM-SHA-1-PLUS.  GS2-KRB5 is tested with GNU GSS+Shishi, Heimdal, MIT
Kerberos V5 on GNU/Linux, Mac OS X and Windows.

Top-level NEWS entries:

** gsasl: Support for TLS channel bindings.
Requires GnuTLS 2.11.4 or later for the gnutls_session_channel_binding
function.  Used by the SCRAM-SHA-1-PLUS mechanism.

** doc: Mention new property GSASL_CB_TLS_UNIQUE and SCRAM-SHA-1-PLUS.

** tests: Added self-tests for SCRAM-SHA-1-PLUS.

Library (lib/) NEWS entries:

** libgsasl: Added property for tls-unique channel binding.
The new property GSASL_CB_TLS_UNIQUE takes a base64 encoded tls-unique
channel binding.  New error code GSASL_NO_CB_TLS_UNIQUE is returned
when application fails to provide a channel binding and the mechanism
requires it (i.e., in a PLUS server).

** SCRAM: Added support for SCRAM-SHA-1-PLUS with channel bindings.

** API and ABI modifications.
GSASL_CB_TLS_UNIQUE: ADDED.
GSASL_NO_CB_TLS_UNIQUE: ADDED.

Here are the compressed sources of the entire package:
  ftp://alpha.gnu.org/gnu/gsasl/gsasl-1.5.3.tar.gz
  ftp://alpha.gnu.org/gnu/gsasl/gsasl-1.5.3.tar.gz.sig (OpenPGP)

Here are the compressed sources of the LGPL library (included above):
  ftp://alpha.gnu.org/gnu/gsasl/libgsasl-1.5.3.tar.gz
  ftp://alpha.gnu.org/gnu/gsasl/libgsasl-1.5.3.tar.gz.sig (OpenPGP)

Windows binaries:
  ftp://alpha.gnu.org/gnu/gsasl/gsasl-1.5.3-x86.zip (32-bit)
  ftp://alpha.gnu.org/gnu/gsasl/gsasl-1.5.3-x64.zip (64-bit)
  ftp://alpha.gnu.org/gnu/gsasl/gsasl-1.5.3-x86-kfw322.zip (32-bit KfW)

For code coverage and cyclomatic code complexity charts:
  http://www.gnu.org/software/gsasl/coverage/
  http://www.gnu.org/software/gsasl/cyclo/cyclo-gsasl.html

Happy hacking,
Simon

pgp6tDMyJBVMH.pgp
Description: PGP signature