[SCM] GNU gnutls branch, gnutls_3_0_x, updated. gnutls_3_0_0-43-g42d6b18

[Nikos Mavrogiannopoulos]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU gnutls".

http://git.savannah.gnu.org/cgit/gnutls.git/commit/?id=42d6b18fb461b8ec6967673d77cc649532a07d8b

The branch, gnutls_3_0_x has been updated
       via  42d6b18fb461b8ec6967673d77cc649532a07d8b (commit)
       via  6cececa34b3f0929ca5827684aacfe8a902eadcd (commit)
       via  81578f4aa9e1fff9172267e0e141ebdb5ff59625 (commit)
       via  baea6a13f8ede8139ae246376169bb1cf54025ce (commit)
       via  2615762e5a67002ae9795d5a5089af76d322ee08 (commit)
       via  f2eb4e32053719a140fd3a09a46ed159d1d95501 (commit)
      from  7da7af3c68a54e88ddf825c4a412fe6824b86fcd (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 42d6b18fb461b8ec6967673d77cc649532a07d8b
Author: Nikos Mavrogiannopoulos <address@hidden>
Date:   Thu Aug 11 21:31:15 2011 +0200

    updates

commit 6cececa34b3f0929ca5827684aacfe8a902eadcd
Author: Nikos Mavrogiannopoulos <address@hidden>
Date:   Thu Aug 11 21:09:28 2011 +0200

    changed paper size.

commit 81578f4aa9e1fff9172267e0e141ebdb5ff59625
Author: Nikos Mavrogiannopoulos <address@hidden>
Date:   Thu Aug 11 20:28:17 2011 +0200

    doc update

commit baea6a13f8ede8139ae246376169bb1cf54025ce
Author: Nikos Mavrogiannopoulos <address@hidden>
Date:   Thu Aug 11 19:51:10 2011 +0200

    reduced space taken by descriptions.

commit 2615762e5a67002ae9795d5a5089af76d322ee08
Author: Nikos Mavrogiannopoulos <address@hidden>
Date:   Thu Aug 11 19:44:37 2011 +0200

    more updates.

commit f2eb4e32053719a140fd3a09a46ed159d1d95501
Author: Nikos Mavrogiannopoulos <address@hidden>
Date:   Thu Aug 11 18:54:29 2011 +0200

    documented fixes

-----------------------------------------------------------------------

Summary of changes:
 NEWS                   |    2 ++
 doc/alert-printlist.c  |    4 +---
 doc/cha-gtls-app.texi  |   36 +++++++++++++++++++++++++++++++++---
 doc/cha-intro-tls.texi |    9 ++++-----
 doc/cha-library.texi   |    8 ++++----
 doc/cha-programs.texi  |    4 ++--
 doc/errcodes.c         |    7 ++-----
 doc/latex/gnutls.tex   |    4 ++--
 doc/printlist.c        |    4 +---
 lib/gnutls_global.c    |    4 ++--
 10 files changed, 53 insertions(+), 29 deletions(-)

diff --git a/NEWS b/NEWS
index 1f937ff..f1581f3 100644
--- a/NEWS
+++ b/NEWS
@@ -4,6 +4,8 @@ See the end for copying conditions.
 
 * Version 3.0.1 (unreleased)
 
+** libgnutls: fixed alignment issue in AES-NI code.
+
 ** libgnutls: The config file at gnutls_pkcs11_init()
 is being read if provided.
 
diff --git a/doc/alert-printlist.c b/doc/alert-printlist.c
index 5c38666..4d7ad38 100644
--- a/doc/alert-printlist.c
+++ b/doc/alert-printlist.c
@@ -72,8 +72,6 @@ static const char headers[] = "\\tablefirsthead{%\n"
        "\\tablehead{%\n"
        "\\hline\n"
        "\\multicolumn{3}{|l|}{\\small\\sl continued from previous page}\\\\\n"
-       "\\hline\n"
-       "Alert & ID & Description\\\\\n"
        "\\hline}\n"
        "\\tabletail{%\n"
        "\\hline\n"
@@ -112,7 +110,7 @@ const char* _name;
 
 puts( headers);
 
-printf("\\begin{supertabular}{|l|p{1cm}|p{3.5cm}|}\n\\label{tab:alerts}\n");
+printf("\\begin{supertabular}{|p{.50\\linewidth}|p{.07\\linewidth}|p{.34\\linewidth}|}\n\\label{tab:alerts}\n");
 
   {
     size_t i;
diff --git a/doc/cha-gtls-app.texi b/doc/cha-gtls-app.texi
index 2bcb5b3..2b250b2 100644
--- a/doc/cha-gtls-app.texi
+++ b/doc/cha-gtls-app.texi
@@ -5,7 +5,7 @@
 
 @menu
 * Preparation::
-* Session initialization::
+* TLS and DTLS sessions::
 * Priority Strings::
 * Client examples::
 * Server examples::
@@ -113,8 +113,9 @@ specifying both options to @command{pkg-config}:
 gcc -o foo foo.c `pkg-config gnutls --cflags --libs`
 @end smallexample
 
address@hidden Session initialization
address@hidden Session initialization
address@hidden TLS and DTLS sessions
address@hidden TLS and DTLS sessions
address@hidden Session initialization
 
 In the previous sections we have discussed the global initialization
 required for GnuTLS as well as the initialization required for each
@@ -157,6 +158,35 @@ time limit.
 
 @showfuncdesc{gnutls_transport_set_pull_timeout_function}
 
address@hidden Handshake
+Once a session has been initialized and a network
+connection has been set up, TLS and DTLS protocols
+perform a handshake. The handshake is the actual key
+exchange.
+
address@hidden
+
+The handshake process doesn't ensure the verification
+of the peer's identity. When certificates are in use,
+this can be done, either after the handshake is complete, or during 
+the handshake if @funcref{gnutls_certificate_set_verify_function}
+has been used. In both cases the following function can be
+used to verify the peer's certificate (see @ref{Certificate authentication}
+for more information).
+
address@hidden 
+
+Once a TLS or DTLS session is no longer needed, it is
+recommended to use @funcref{gnutls_bye} to terminate the
+session. That way the peer is notified securely about the
+intention of termination, which allows distinguishing it
+from a malicious connection termination.
+
address@hidden
+
+A session can be deinitialized using the following function.
+
address@hidden
 
 @node Priority Strings
 @section Priority strings
diff --git a/doc/cha-intro-tls.texi b/doc/cha-intro-tls.texi
index 433cdab..a27c217 100644
--- a/doc/cha-intro-tls.texi
+++ b/doc/cha-intro-tls.texi
@@ -100,7 +100,7 @@ timers and waiting for peer's messages during the handshake 
process,
 @acronym{GnuTLS} will block and might be interrupted by signals. The
 blocking operation of @acronym{GnuTLS} during @acronym{DTLS} handshake
 can be changed using the appropriate flags in @funcref{gnutls_init} (see
address@hidden initialization}).
address@hidden and DTLS sessions}).
 By default, if the transport functions are not set, @acronym{GnuTLS}
 will use the Berkeley sockets. 
 
@@ -312,8 +312,8 @@ The alert protocol is there to allow signals to be sent 
between peers.
 These signals are mostly used to inform the peer about the cause of a
 protocol failure. Some of these signals are used internally by the
 protocol and the application protocol does not have to cope with them
-(e.g. @code{GNUTLS_A_CLOSE_NOTIFY}), and others refer to the
-application protocol solely (e.g. @code{GNUTLS_A_USER_CANCELLED}).  An
+(e.g. @code{GNUTLS_\-A_\-CLOSE_\-NOTIFY}), and others refer to the
+application protocol solely (e.g. @code{GNUTLS_\-A_\-USER_\-CANCELLED}).  An
 alert signal includes a level indication which may be either fatal or
 warning. Fatal alerts always terminate the current connection, and
 prevent future re-negotiations using the current session ID. All alert
@@ -334,7 +334,6 @@ protocol are shown below.
 
 @include alerts.texi
 
-
 @node The TLS Handshake Protocol
 @section The TLS handshake protocol
 @anchor{The Handshake Protocol}
@@ -347,7 +346,7 @@ has to set up the required parameters. The main handshake 
function
 is @funcref{gnutls_handshake}. In the next paragraphs we elaborate on 
 controlling of the handshake protocol, i.e., the ciphersuite negotiation.
 
address@hidden
address@hidden
 
 
 @menu
diff --git a/doc/cha-library.texi b/doc/cha-library.texi
index cf5a2cf..2fb96ab 100644
--- a/doc/cha-library.texi
+++ b/doc/cha-library.texi
@@ -35,9 +35,9 @@ include:
 
 @acronym{GnuTLS} consists of three independent parts, namely the ``TLS
 protocol part'', the ``Certificate part'', and the ``Cryptographic
-back-end'' part.  The `TLS protocol part' is the actual protocol
+back-end'' part.  The ``TLS protocol part'' is the actual protocol
 implementation, and is entirely implemented within the
address@hidden library.  The `Certificate part' consists of the
address@hidden library.  The ``Certificate part'' consists of the
 certificate parsing, and verification functions which is partially
 implemented in the @acronym{GnuTLS} library.  The
 address@hidden@url{http://www.gnu.org/software/libtasn1/}},
@@ -116,10 +116,10 @@ to be taken. Thus negative error codes may be fatal or 
not.
 
 Fatal errors terminate the connection immediately and further sends
 and receives will be disallowed.  Such an example is
address@hidden Non-fatal errors may warn about
address@hidden Non-fatal errors may warn about
 something, i.e., a warning alert was received, or indicate the some
 action has to be taken. This is the case with the error code
address@hidden returned by @funcref{gnutls_record_recv}.
address@hidden returned by @funcref{gnutls_record_recv}.
 This error code indicates that the server requests a re-handshake. The
 client may ignore this request, or may reply with an alert.  You can
 test if an error code is a fatal one by using the
diff --git a/doc/cha-programs.texi b/doc/cha-programs.texi
index 531f0ee..46dfe10 100644
--- a/doc/cha-programs.texi
+++ b/doc/cha-programs.texi
@@ -817,8 +817,8 @@ Normally the file will generate random keys for the 
indicated username.
 @cindex srptool
 
 The @file{srptool} is a very simple program that emulates the programs
-in the @emph{Stanford SRP libraries}, see
address@hidden://srp.stanford.edu/}.  It is intended for use in places
+in the @emph{Stanford SRP address@hidden
address@hidden://srp.stanford.edu/}.}.  It is intended for use in places
 where you don't expect @acronym{SRP} authentication to be the used for
 system users.
 
diff --git a/doc/errcodes.c b/doc/errcodes.c
index ff01e06..d00d25c 100644
--- a/doc/errcodes.c
+++ b/doc/errcodes.c
@@ -56,9 +56,6 @@ static const char headers[] = "\\tablefirsthead{%\n"
        "\\tablehead{%\n"
        "\\hline\n"
        "\\multicolumn{2}{|l|}{\\small\\sl continued from previous page}\\\\\n"
-       "\\hline\n"
-       "\\multicolumn{1}{|c}{Error code} &\n"
-       "\\multicolumn{1}{c|}{Description} \\\\\n"
        "\\hline}\n"
        "\\tabletail{%\n"
        "\\hline\n"
@@ -152,7 +149,7 @@ error_name names_to_sort[MAX_CODES]; /* up to MAX_CODES 
names  */
 
 puts( headers);
 
-printf("\\begin{supertabular}{|l|p{6.3cm}|}\n");
+printf("\\begin{supertabular}{|p{.52\\linewidth}|p{.40\\linewidth}|}\n");
 
 memset( names_to_sort, 0, sizeof(names_to_sort));
 j=0;
@@ -174,7 +171,7 @@ for (i=0;i<j;i++)
    desc = gnutls_strerror( names_to_sort[i].error_index);
    if (desc == NULL || _name == NULL) continue;
 
-   printf( "{\\tiny{%s}} & %s", escape_string(_name, buffer1, 
sizeof(buffer1)), escape_string(desc, buffer2, sizeof(buffer2)));
+   printf( "{\\scriptsize{%s}} & %s", escape_string(_name, buffer1, 
sizeof(buffer1)), escape_string(desc, buffer2, sizeof(buffer2)));
    printf( "\\\\\n");
 }
 
diff --git a/doc/latex/gnutls.tex b/doc/latex/gnutls.tex
index 8617349..b05264b 100644
--- a/doc/latex/gnutls.tex
+++ b/doc/latex/gnutls.tex
@@ -1,6 +1,7 @@
-\documentclass[letterpaper,10pt]{book}
+\documentclass[fontsize=10pt,twoside,openright]{scrbook}
 \bibliographystyle{plain}
 
+\usepackage[paperwidth=18.91cm,paperheight=24.589cm,twoside,bindingoffset=9mm,outer=2.2cm,inner=1cm,top=2.6cm,bottom=2.5cm]{geometry}
 \usepackage{fancyhdr}
 \usepackage{graphicx}
 \usepackage{makeidx}
@@ -16,7 +17,6 @@
 \usepackage{xcolor}
 \usepackage[greek,english]{babel}%for euro sign
 
-
 \hypersetup{
     colorlinks,%
     citecolor=blue,%
diff --git a/doc/printlist.c b/doc/printlist.c
index f3b7c4a..ac6c1d2 100644
--- a/doc/printlist.c
+++ b/doc/printlist.c
@@ -162,8 +162,6 @@ static const char headers[] = "\\tablefirsthead{%\n"
        "\\tablehead{%\n"
        "\\hline\n"
        "\\multicolumn{3}{|l|}{\\small\\sl continued from previous page}\\\\\n"
-       "\\hline\n"
-       "Ciphersuite name & TLS ID & since\\\\\n"
        "\\hline}\n"
        "\\tabletail{%\n"
        "\\hline\n"
@@ -202,7 +200,7 @@ const char* _name;
 
 puts( headers);
 
-printf("\\begin{supertabular}{|l|p{1.8cm}|p{1.6cm}|}\n");
+printf("\\begin{supertabular}{|p{.60\\linewidth}|p{.15\\linewidth}|p{.10\\linewidth}|}\n");
 
   {
     size_t i;
diff --git a/lib/gnutls_global.c b/lib/gnutls_global.c
index 328f867..e99f1c1 100644
--- a/lib/gnutls_global.c
+++ b/lib/gnutls_global.c
@@ -60,7 +60,7 @@ int _gnutls_log_level = 0;      /* default log level */
  * Normally you may not use this function since it is only used for
  * debugging purposes.
  *
- * gnutls_log_func is of the form,
+ * @gnutls_log_func is of the form,
  * void (*gnutls_log_func)( int level, const char*);
  **/
 void
@@ -78,7 +78,7 @@ gnutls_global_set_log_function (gnutls_log_func log_func)
  * because it will report the session of the event if any. Note that
  * that session might be null if there is no corresponding TLS session.
  *
- * gnutls_audit_log_func is of the form,
+ * @gnutls_audit_log_func is of the form,
  * void (*gnutls_audit_log_func)( gnutls_session_t, int level, const char*);
  *
  * Since: 3.0.0


hooks/post-receive
-- 
GNU gnutls