GNU SASL 1.10.0 released

[Simon Josefsson]

GNU SASL is a modern C library that implement the network security
protocol Simple Authentication and Security Layer (SASL).  The framework
itself and a couple of common SASL mechanisms are implemented.  GNU SASL
can be used by network applications for IMAP, SMTP, XMPP and other
protocols to provide authentication services.  Supported mechanisms
include CRAM-MD5, EXTERNAL, GSSAPI, ANONYMOUS, PLAIN, SECURID,
DIGEST-MD5, SCRAM-SHA-1(-PLUS), SCRAM-SHA-256(-PLUS), GS2-KRB5, SAML20,
OPENID20, LOGIN, and NTLM.

* Version 1.10.0 (released 2021-01-01) [stable]

** This is a new major stable release.  Brief changes compared to 1.8.x:

*** SCRAM-SHA-256 and SCRAM-SHA-256-PLUS support per RFC 7677.

*** SCRAM supports password-less usage (StoredKey/ServerKey).

*** New 'gsasl --mkpasswd' command to prepare SCRAM salted/hashed passwords.

*** Final warning that obsolete APIs will be removed.

*** Various cleanups, portability and other bug fixes.
See the entries in NEWS and lib/NEWS covering the 1.9.x branch for details.

The API and ABI is fully backwards compatible with version 1.8.x.

The project's web page is available at:
  https://www.gnu.org/software/gsasl/

All manuals are available from:
  https://www.gnu.org/software/gsasl/manual/

The main manual:
  https://www.gnu.org/software/gsasl/manual/gsasl.html - HTML format
  https://www.gnu.org/software/gsasl/manual/gsasl.pdf - PDF format

API Reference manual:
  https://www.gnu.org/software/gsasl/reference/ - GTK-DOC HTML

Doxygen documentation:
  https://www.gnu.org/software/gsasl/doxygen/ - HTML format
  https://www.gnu.org/software/gsasl/doxygen/gsasl.pdf - PDF format

For code coverage, cyclomatic code complexity charts and clang analyzer see:
  https://gsasl.gitlab.io/gsasl-cicd/coverage/
  https://gsasl.gitlab.io/gsasl-cicd/cyclo/
  https://gsasl.gitlab.io/gsasl-cicd/clang-analyzer/

If you need help to use GNU SASL, or want to help others, you are
invited to join our help-gsasl mailing list, see:
  https://lists.gnu.org/mailman/listinfo/help-gsasl

Here are the compressed sources of the entire package:
  https://ftp.gnu.org/gnu/gsasl/gsasl-1.10.0.tar.gz (5.7MB)
  https://ftp.gnu.org/gnu/gsasl/gsasl-1.10.0.tar.gz.sig (OpenPGP)

Here are the compressed sources of the LGPL library (included above):
  https://ftp.gnu.org/gnu/gsasl/libgsasl-1.10.0.tar.gz (1.8MB)
  https://ftp.gnu.org/gnu/gsasl/libgsasl-1.10.0.tar.gz.sig (OpenPGP)

The software releases are cryptographically signed by the author using
an OpenPGP Ed25519 key created on 2019-03-20 with the following
fingerprint:

  B1D2 BD13 75BE CB78 4CF4  F8C4 D73C F638 C53C 06BE

The key may be downloaded from: https://josefsson.org/key-20190320.txt

Use the .sig files to verify that the corresponding source files
(without the .sig suffix) are intact.  First, be sure to download both
the .sig file and the corresponding tarball.  Then, run a command like
this:

  gpg --verify gsasl-1.10.0.tar.gz.sig

If that command fails because you don't have the required public key,
then run this command to import it:

  gpg --keyserver keys.gnupg.net --recv-keys "D73CF638C53C06BE"

and rerun the 'gpg --verify' command.

Here are the SHA-1 and SHA-224 checksums:

ec3def1bdc4a0b6284f0d1e2901495218c87587e  gsasl-1.10.0.tar.gz
e3704f7b73293b381873f2d1d485a8b21941d7f85ff367eecc8bdb3b  gsasl-1.10.0.tar.gz

a16ff428bbf28fcfa681c7edd2cd2bb087bcc4e7  libgsasl-1.10.0.tar.gz
20b37757fccb6a0f8b4c6fcb28f51a3b4b8a4b1fdb4736da07707a0b  libgsasl-1.10.0.tar.gz

Happy hacking,
Simon

signature.asc
Description: PGP signature