[SCM] GNU gnutls branch, master, updated. gnutls_3_0_21-115-g5360415

[Nikos Mavrogiannopoulos]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU gnutls".

http://git.savannah.gnu.org/cgit/gnutls.git/commit/?id=53604151bd76275e7e85bc267a074a0b8cd015b0

The branch, master has been updated
       via  53604151bd76275e7e85bc267a074a0b8cd015b0 (commit)
       via  881864151d7a2c49364cb1e6b6f5e0db0bbfea31 (commit)
      from  41bd55ba0d6778a44e883f7c690e850b508274a2 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 53604151bd76275e7e85bc267a074a0b8cd015b0
Author: Nikos Mavrogiannopoulos <address@hidden>
Date:   Wed Aug 15 22:41:26 2012 +0200

    avoid memory leak

commit 881864151d7a2c49364cb1e6b6f5e0db0bbfea31
Author: Nikos Mavrogiannopoulos <address@hidden>
Date:   Wed Aug 15 22:37:24 2012 +0200

    updates

-----------------------------------------------------------------------

Summary of changes:
 Makefile.am                    |    2 +-
 NEWS                           |   91 ++++++++++++++++++++++++++++++++++++++-
 tests/mini-handshake-timeout.c |    2 +
 3 files changed, 91 insertions(+), 4 deletions(-)

diff --git a/Makefile.am b/Makefile.am
index 0afe4bd..2eebb77 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -38,7 +38,6 @@ dist-hook:
        make ChangeLog
        cp -f ChangeLog $(distdir)/
        sed 's/address@hidden@/$(VERSION)/g' -i $(distdir)/src/args-std.def
-       sed 's/address@hidden@address@hidden@/$(VERSION)/g' -i 
$(distdir)/doc/invoke-*.texi
        cd $(distdir)/src/ && for i in *.def;do \
                if test x"$$i" = x"args-std.def";then  continue; fi; \
                autogen $$i; \
@@ -48,3 +47,4 @@ dist-hook:
                rm -f $$i.tmp; \
                mv -f *.1 ../doc/manpages/; \
        done
+       sed 's/address@hidden@address@hidden@/$(VERSION)/g' -i 
$(distdir)/doc/invoke-*.texi
diff --git a/NEWS b/NEWS
index 954d417..db12120 100644
--- a/NEWS
+++ b/NEWS
@@ -2,7 +2,7 @@ GnuTLS NEWS -- History of user-visible changes.                
-*- outline -*-
 Copyright (C) 2000-2012 Free Software Foundation, Inc.
 See the end for copying conditions.
 
-* Version 3.1.0 (unreleased)
+* Version 3.1.0 (released 2012-08-15)
 
 ** libgnutls: Added direct support for TPM as a cryptographic module 
 in gnutls/tpm.h. TPM keys can be used in functions accepting files
@@ -98,12 +98,97 @@ gnutls_pubkey_verify_hash: Deprecated (use 
gnutls_pubkey_verify_hash2)
 gnutls_pubkey_verify_data: Deprecated (use gnutls_pubkey_verify_data2)
 
 
-* Version 3.0.19 (unreleased)
+* Version 3.0.22 (released 2012-08-04)
+
+** libgnutls: gnutls_certificate_set_x509_system_trust()
+is now supported on OpenBSD.
+
+** libgnutls: When verifying a certificate chain make sure it is chain.
+If the chain is wronly interrupted at some point then truncate it,
+and only try to verify the correct part. Patch by David Woodhouse
+
+** libgnutls: Restored the behavior of gnutls_x509_privkey_import_pkcs8()
+which now may (again) accept a NULL password.
+
+** certtool: Allow the user to choose the hash algorithm
+when signing certificate request or certificate revocation list.
+Patch by Petr Písař.
+
+** API and ABI modifications:
+No changes since last version.
+
+
+* Version 3.0.21 (released 2012-07-02)
+
+** libgnutls: fixed bug in gnutls_x509_privkey_import() 
+that prevented the loading of EC private keys when DER
+encoded. Reported by David Woodhouse.
+
+** libgnutls: In DTLS larger to mtu records result to 
+GNUTLS_E_LARGE_PACKET instead of being truncated.
+
+** libgnutls: gnutls_dtls_get_data_mtu() is more precise. Based
+on patch by David Woodhouse.
+
+** libgnutls: Fixed memory leak in PKCS #8 key import.
+
+** libgnutls: Added support for an old version of the DTLS protocol
+used by openconnect vpn client for compatibility with Cisco's AnyConnect 
+SSL VPN. It is marked as GNUTLS_DTLS0_9. Do not use it for newer protocols
+as it has issues.
+
+** libgnutls: Corrected bug that prevented resolving PKCS #11 URLs 
+if only the label is specified. Patch by David Woodhouse.
+
+** libgnutls: When EMSGSIZE errno is seen then GNUTLS_E_LARGE_PACKET
+is returned.
+
+** API and ABI modifications:
+gnutls_dtls_set_data_mtu: Added
+gnutls_session_set_premaster: Added
+
+
+* Version 3.0.20 (released 2012-06-05)
+
+** libgnutls: Corrected bug which prevented the parsing of
+handshake packets spanning multiple records.
+
+** libgnutls: Check key identifiers when checking for an issuer.
+
+** libgnutls: Added gnutls_pubkey_verify_hash2()
+
+** libgnutls: Added gnutls_certificate_set_x509_system_trust()
+that loads the trusted CA certificates from system locations
+(e.g. trusted storage in windows and CA bundle files in other systems).
+
+** certtool: Added support for the URI subject alternative
+name type in certtool.
+
+** certtool: Increase to 128 the maximum number of distinct options
+(e.g. dns_names) allowed.
+
+** gnutls-cli: If --print-cert is given, print the certificate, 
+even on verification failure.
+
+** API and ABI modifications:
+gnutls_pk_to_sign: Added
+gnutls_pubkey_verify_hash2: Added
+gnutls_certificate_set_x509_system_trust: Added
+
+
+* Version 3.0.19 (released 2012-04-22)
+
+** libgnutls: When decoding a PKCS #11 URL the pin-source field
+is assumed to be a file that stores the pin. Based on patch
+by David Smith.
 
 ** libgnutls: gnutls_record_check_pending() no longer
 returns unprocessed data, and thus ensure the non-blocking
 of the next call to gnutls_record_recv(). 
 
+** libgnutls: Added strict tests in Diffie-Hellman and
+SRP key exchange public keys.
+
 ** libgnutls: in ECDSA and DSA TLS 1.2 authentication be less
 strict in hash selection, and allow a stronger hash to
 be used than the appropriate, to improve interoperability
@@ -113,7 +198,7 @@ with openssl.
 in pkcs12 decoding tests.
 
 ** API and ABI modifications:
-gnutls_pubkey_verify_hash2: Added
+No changes since last version.
 
 
 * Version 3.0.18 (released 2012-04-02)
diff --git a/tests/mini-handshake-timeout.c b/tests/mini-handshake-timeout.c
index dc86861..30d899f 100644
--- a/tests/mini-handshake-timeout.c
+++ b/tests/mini-handshake-timeout.c
@@ -113,6 +113,7 @@ client (int fd, int wait)
   while (ret < 0 && gnutls_error_is_fatal(ret) == 0);
   
   gnutls_deinit(session);
+  gnutls_anon_free_client_credentials(anoncred);
   gnutls_global_deinit();
 
   if (ret < 0)
@@ -190,6 +191,7 @@ int ret;
   while (ret < 0 && gnutls_error_is_fatal(ret) == 0);
 
   gnutls_deinit (session);
+  gnutls_anon_free_server_credentials(anoncred);
   gnutls_global_deinit();
 
   if (ret < 0)


hooks/post-receive
-- 
GNU gnutls