GNU SASL 0.0.5 released

[Simon Josefsson]

GNU SASL is an implementation of the Simple Authentication and
Security Layer framework and a few common SASL mechanisms.  SASL is
used by network servers (e.g., IMAP, SMTP) to request authentication
from clients, and in clients to authenticate against servers.

GNU SASL contains a library (`libgsasl'), a command line utility
(`gsasl') to access the library from the shell, and a manual.  The
library includes support for the SASL framework (with authentication
functions and application data privacy and integrity functions) and at
least partial support for the CRAM-MD5, EXTERNAL, GSSAPI, ANONYMOUS,
PLAIN, SECURID, DIGEST-MD5, LOGIN, NTLM mechanisms.

The library is portable because it does not do network communication
by itself, but rather leaves it up to the calling application.  The
library is flexible with regards to the authorization infrastructure
used, as it utilizes callbacks into the application to decide whether
an user is authorized or not.

GNU SASL is developed for the GNU/Linux system, but runs on over 20
platforms including most major Unix platforms and Windows.

GNU SASL is licensed under the GNU Public License.

The project web page:
http://www.gnu.org/software/gsasl/

For more information see:
http://www.ietf.org/rfc/rfc2222.txt

GNU SASL can be downloaded from:

TAR.GZ source code:
http://josefsson.org/libgsasl/releases/libgsasl-0.0.5.tar.gz

OpenPGP signature of TAR.GZ source code:
http://josefsson.org/libgsasl/releases/libgsasl-0.0.5.tar.gz.asc

The fingerprint of the key used to sign releases is 0xB565716F and
should be available from OpenPGP key servers.

Noteworthy changes in 0.0.5:

** Command line application "gsasl" now supports --imap and --connect.
The --imap parameter makes it use a IMAP-like negotiation on
stdin/stdout.  The --connect parameter makes it connect to a host over
TCP, and talk to it instead of stdin/stdout.  This allows it to be
used as a simple test tool to connect to IMAP servers.  Currently
integrity and confidentiality is not working properly, so if you use
DIGEST-MD5 you currently have to specify --quality-of-protection=auth.

** Texinfo documentation added for command line tool.

** Libgcrypt initialization no longer causes a warning to be printed.

** Added API reference manual in HTML format, generated using GTK-DOC.
See doc/reference/, in particular doc/reference/html/index.html.

** GNU Libidn replaces Libstringprep.
Although it is still stored in the libstringprep/ directory for CVS
reasons.

** Bug fixes for DIGEST-MD5 and GSSAPI.