GNU SASL 1.7.4 released (development version)

[Simon Josefsson]

GNU SASL is a modern C library that implement the standard network
security protocol Simple Authentication and Security Layer (SASL).  The
framework itself and a couple of common SASL mechanisms are implemented.
GNU SASL can be used by network applications for IMAP, SMTP, XMPP and
similar protocols to provide authentication services.  Support for the
more recent SCRAM-SHA-1, OPENID20 and SAML20 mechanisms is included.

Note!  This is the second release candidate of 1.8.0.  Please test this
release as if it were a new stable release that replaces the earlier
1.4.x and 1.6.x branches.  It should be a drop-in.  I plan to make the
final release later this month.

NEWS entries:

** libgsasl: Reverted unification of OpenID and SAML properties/callbacks.
The reason was that client and servers needs to know whether it is
SAML or OpenID that is used, and using the same property and callback
symbol for both makes this more difficult.

** GSS-API server: Don't output zero-length tokens on context init success.
Reported by Andreas Oberritter <address@hidden>.

** GSS-API server: Only proceed to next step when context is established.
Reported by Andreas Oberritter <address@hidden>.

** Doc fixes and updates for the callback/property change in the library.
See lib/NEWS for details.  This affects SAML and OpenID.

** Rewrote DIGEST-MD5 code to avoid false positive complaint from valgrind.

** Slight fixes to Windows build script.

** i18n: Updated translations.

** Update gnulib files.

** API and ABI modifications.
GSASL_REDIRECT_URL: Removed.
GSASL_OPENID20_REDIRECT_URL: Added.
GSASL_SAML20_REDIRECT_URL: Added.
GSASL_AUTHENTICATE_IN_BROWSER: Removed.
GSASL_SAML20_AUTHENTICATE_IN_BROWSER: Added.
GSASL_OPENID20_AUTHENTICATE_IN_BROWSER: Added.

Improving GNU SASL is costly, but you can help!  We are looking for
organizations that find GNU SASL useful and wish to contribute back.
You can contribute by reporting bugs, improve the software, purchase
support contracts, or donate money or equipment.

Commercial support contracts for GNU SASL are available, and they help
finance continued maintenance.  Simon Josefsson Datakonsult AB, a
Stockholm based privately held company, is currently funding GNU SASL
maintenance.  We are always looking for interesting development
projects.  See http://josefsson.org/ for more details.

The project's web page is available at:
  https://www.gnu.org/software/gsasl/

All manuals are available from:
  https://www.gnu.org/software/gsasl/manual/

Specifically, the following formats are available.

The main manual:
  https://www.gnu.org/software/gsasl/manual/gsasl.html - HTML format
  https://www.gnu.org/software/gsasl/manual/gsasl.pdf - PDF format

API Reference manual:
  https://www.gnu.org/software/gsasl/reference/ - GTK-DOC HTML

Doxygen documentation:
  https://www.gnu.org/software/gsasl/doxygen/ - HTML format
  https://www.gnu.org/software/gsasl/doxygen/gsasl.pdf - PDF format

If you need help to use GNU SASL, or want to help others, you are
invited to join our help-gsasl mailing list, see:
  https://lists.gnu.org/mailman/listinfo/help-gsasl

Here are the compressed sources of the entire package:
  ftp://alpha.gnu.org/gnu/gsasl/gsasl-1.7.4.tar.gz (4.8MB)
  ftp://alpha.gnu.org/gnu/gsasl/gsasl-1.7.4.tar.gz.sig (OpenPGP)

Here are the compressed sources of the LGPL library (included above):
  ftp://alpha.gnu.org/gnu/gsasl/libgsasl-1.7.4.tar.gz (1.2MB)
  ftp://alpha.gnu.org/gnu/gsasl/libgsasl-1.7.4.tar.gz.sig (OpenPGP)

We also provide pre-built Windows binaries:
  ftp://alpha.gnu.org/gnu/gsasl/gsasl-1.7.4-x86.zip (32-bit)
  ftp://alpha.gnu.org/gnu/gsasl/gsasl-1.7.4-x64.zip (64-bit)
  ftp://alpha.gnu.org/gnu/gsasl/gsasl-1.7.4-x86-kfw322.zip (32-bit Kerberos)

For code coverage, cyclomatic code complexity charts and clang output see:
  https://www.gnu.org/software/gsasl/coverage/
  https://www.gnu.org/software/gsasl/cyclo/
  https://www.gnu.org/software/gsasl/clang-analyzer/

The software is cryptographically signed by the author using an
OpenPGP key identified by the following information:

pub   1280R/B565716F 2002-05-05 [expires: 2013-05-10]
      Key fingerprint = 0424 D4EE 81A0 E3D1 19C6  F835 EDA2 1E94 B565 716F
uid                  Simon Josefsson <address@hidden>
sub   2048R/105E722E 2012-03-13 [expires: 2013-07-26]
sub   2048R/728AB82C 2012-03-13 [expires: 2013-07-26]
sub   2048R/9394F626 2012-03-13 [expires: 2013-07-26]
sub   1280R/4D5D40AE 2002-05-05 [expires: 2013-05-10]

The key is available from:
  http://josefsson.org/key.txt
  dns:b565716f.josefsson.org?TYPE=CERT

Here are the SHA-1 and SHA-224 checksums:

a40dd0d6d8971b1d36f0aa35146b128e87a05ef1  gsasl-1.7.4.tar.gz
a18adcafd4fec7b537de84f0f85f606bfb4f7c6aad4ad8abbdad0b46  gsasl-1.7.4.tar.gz

5433b8607f522313b4f355db80dd0e8628948395  libgsasl-1.7.4.tar.gz
c97656905da77b7ad00a5b8e6894155f09252d6f72228ae1ea0d10bc  libgsasl-1.7.4.tar.gz

42ba6ef9c08ff2c6e01ddca769c08ce8ac5b12f6  gsasl-1.7.4-x86.zip
ae5e23f8245ff2e6fabcf371fd60b4f3b967ebdf4205413edb93b684  gsasl-1.7.4-x86.zip

58dae122bb626102a1cf00c02d63cbd5b71a7f50  gsasl-1.7.4-x64.zip
4cb83adf2ce21479dacf8f52f449099e3c95262f7ed8fc0c827db131  gsasl-1.7.4-x64.zip

b201a7901baf6d8cb8eb159243913821cb1c7ceb  gsasl-1.7.4-x86-kfw322.zip
735077e75662c0fd8e1f5b17d2a4059d3593653843a205f2380f73ad  
gsasl-1.7.4-x86-kfw322.zip

Happy hacking,
Simon

pgpNuBIhh0t16.pgp
Description: PGP signature