GNU SASL 1.4.0

[Simon Josefsson]

GNU SASL is a modern C library that implement the standard network
security protocol Simple Authentication and Security Layer (SASL).  The
framework itself and a couple of common SASL mechanisms (including
SCRAM-SHA-1) are implemented.  GNU SASL can be used by network
applications for IMAP, SMTP, XMPP and similar protocols to provide
authentication services.

Top-level NEWS entries:

* Version 1.4.0 (released 2009-11-17) [stable]

** No changes since 1.3.91 release candidate.
The release numbering scheme has changed compared to the last stable
release.  In the future we will use version numbers X.Y.Z with even Y
to indicate stable releases and odd Y to indicate experimental
releases.  Z is incremented by one for every release on a particular
branch.  For example, the next stable release will either be 1.4.1 or
1.6.0 and the next experimental release will be 1.5.0.  The intention
is that the stable branches can be used for security bug fixes if/when
there is a need.  Other changes or new features will (typically) not
be back-ported to a stable branch but instead will have to wait for
the next stable branch to be released.

* Version 1.3.91 (released 2009-11-06) [experimental]

** doc: Fix doc/cyclo/ output.

* Version 1.3.90 (released 2009-11-06) [experimental]

** tests/crypto: Also test newly added SHA-1 interfaces.

** tests/scram: Also test GSASL_SCRAM_SALTED_PASSWORD case.
This code path triggered a crash in v1.3.

** i18n: Added Finnish translation.
Thanks to Jorma Karvonen <address@hidden>.

Library (lib/) NEWS entries:

* Version 1.4.0 (released 2009-11-17) [stable]

** No changes since 1.3.91 release candidate.

** API and ABI modifications.
No changes since last version.

* Version 1.3.91 (released 2009-11-06) [experimental]

** Fix Visual Studio project files to work with SCRAM.
Suggested by Lothar May <address@hidden> in
<http://thread.gmane.org/gmane.comp.gnu.gsasl.general/254>.

** API and ABI modifications.
No changes since last version.

* Version 1.3.90 (released 2009-11-06) [experimental]

** libgsasl: Properly increment libtool version to reflect newly added ABIs.
This was accidentally forgotten in the last release.

** libgsasl: Export gsasl_sha1 and gsasl_hmac_sha1 in linker version script.
This was accidentally forgotten in the last release.

** libgsasl: Fix crash in SCRAM-SHA-1 client when the application provides
** a value for GSASL_SCRAM_SALTED_PASSWORD.

** libgsasl: Fix detection of libgcrypt during builds.
Before libgcrypt was not detected and used by default unless you
supplied --with-libgcrypt.

** i18n: Added Finnish translation.
Thanks to Jorma Karvonen <address@hidden>.

** i18n: Updated Vietnamese translation.
Thanks to Clytie Siddall <address@hidden>.

** API and ABI modifications.
No changes since last version.

Improving GNU SASL is costly, but you can help!  We are looking for
organizations that find GNU SASL useful and wish to contribute back.
You can contribute by reporting bugs, improve the software, purchase
support contracts, or donate money or equipment.

Commercial support contracts for GNU SASL are available, and they help
finance continued maintenance.  Simon Josefsson Datakonsult AB, a
Stockholm based privately held company, is currently funding GNU SASL
maintenance.  We are always looking for interesting development
projects.  See http://josefsson.org/ for more details.

The project's web page is available at:
  http://www.gnu.org/software/gsasl/

All manuals are available from:
  http://www.gnu.org/software/gsasl/manual/

Specifically, the following formats are available.

The main manual:
  http://www.gnu.org/software/gsasl/manual/gsasl.html - HTML format
  http://www.gnu.org/software/gsasl/manual/gsasl.pdf - PDF format

API Reference manual:
  http://www.gnu.org/software/gsasl/reference/ - GTK-DOC HTML

Doxygen documentation:
  http://www.gnu.org/software/gsasl/doxygen/ - HTML format
  http://www.gnu.org/software/gsasl/doxygen/gsasl.pdf - PDF format

Instructions for how to build GNU SASL under uClinux are available from
<http://josefsson.org/uclinux/>.  If your uClinux toolchain is broken,
it is possible to build GNU SASL without using the ./configure
mechanism, see <http://josefsson.org/uclinux/old/>.

If you need help to use GNU SASL, or want to help others, you are
invited to join our help-gsasl mailing list, see:
<http://lists.gnu.org/mailman/listinfo/help-gsasl>.

Here are the compressed sources of the entire package:
  ftp://ftp.gnu.org/gnu/gsasl/gsasl-1.4.0.tar.gz (3.7MB)
  ftp://ftp.gnu.org/gnu/gsasl/gsasl-1.4.0.tar.gz.sig (PGP)

Here are the compressed sources of the LGPL library (included above):
  ftp://ftp.gnu.org/gnu/gsasl/libgsasl-1.4.0.tar.gz (952KB)
  ftp://ftp.gnu.org/gnu/gsasl/libgsasl-1.4.0.tar.gz.sig (PGP)

We also provide pre-built Windows binaries:
  http://josefsson.org/gnutls4win/gsasl-1.4.0.zip
  http://josefsson.org/gnutls4win/mingw32-gsasl_1.4.0-1_all.deb

Here are the build reports for various platforms:
  http://autobuild.josefsson.org/gsasl/

Daily builds of the package are available from:
  http://daily.josefsson.org/gsasl/

For code coverage and cyclomatic code complexity charts:
  http://www.gnu.org/software/gsasl/coverage/
  http://www.gnu.org/software/gsasl/cyclo/cyclo-gsasl.html

The software is cryptographically signed by the author using an
OpenPGP key identified by the following information:

pub   1280R/B565716F 2002-05-05 [expires: 2010-04-21]
      Key fingerprint = 0424 D4EE 81A0 E3D1 19C6  F835 EDA2 1E94 B565 716F
uid                  Simon Josefsson <address@hidden>
uid                  Simon Josefsson <address@hidden>
sub   1280R/4D5D40AE 2002-05-05 [expires: 2010-04-21]

The key is available from:
  http://josefsson.org/key.txt
  dns:b565716f.josefsson.org?TYPE=CERT

Here are the SHA-1 and SHA-224 checksums:

1b5106f48592aa6d54279c2a7894585d6098498c  gsasl-1.4.0.tar.gz
4e1fcb8facf6d43a873f953abc93482b90c1fff966e7e756ddfbd284  gsasl-1.4.0.tar.gz

403b543b99cd9aa610fcb8d65f1e9f08e5cabbdc  libgsasl-1.4.0.tar.gz
00d22ae1135a7bd8947fc5274996dadd6287fa35484738e962c6e171  libgsasl-1.4.0.tar.gz

c68d1aeb700ad200d8bc58278a266973d8b7eb30  gsasl-1.4.0.zip
c78c4db0c73b9c418b9feb372a879ae3806ca82fae3aa4ade2697e0a  gsasl-1.4.0.zip

0e285d26c323636e3ec74fd53ac5261736fa6dfb  mingw32-gsasl_1.4.0-1_all.deb
2e97015252daafbfb691ac9ab5da1220ed4c7df7fdb47ddc4d5ca65d  
mingw32-gsasl_1.4.0-1_all.deb

Happy hacking,
Simon

pgplvZHQqm6YD.pgp
Description: PGP signature