GSSLib 0.0.18

[Simon Josefsson]

I am pleased to announce the availability of the Generic Security
Service Library version 0.0.18.  This release fixes minor issues and
is mostly done for the upcoming Debian packages.

Noteworthy changes since version 0.0.17:

** Kerberos V5 gss_acquire_cred doesn't use the default realm when looking
** for hostkeys.
This was the reason that 'make check' failed earlier.

** Gnulib file update, including a rewrite of `gss_check_version'.

GSSLib is an implementation of the Generic Security Service
Application Program Interface (GSS-API).  GSS-API is used by network
servers to provide security services.  For example, GSS can be used to
authenticate a client against SMTP or IMAP servers.  GSS consists of a
library, a manual, and a command line tool for debugging purposes.

While written to be flexible with regards to different GSS mechanisms,
the only currently supported mechanism is Kerberos 5 via GNU Shishi.
Mutual and non-mutual authentication, as client and server, is
supported.  Message privacy protection using DES and 3DES is
supported.

GSS aims to be internationalized, thread safe and portable.  GSS is
written in ANSI/ISO C89, and has been ported to numerous platforms,
even cross compiled to embedded platforms such as Motorola Coldfire.

Current work items include implementing more GSS mechanisms, possibly
supporting MIT Kerberos 5 or Heimdal (thus making it possible to
change GSS-API implementation after compile-time, through a
configuration file), dynamically loaded mechanisms using dlopen,
message privacy using AES, message integrity support, and evaluation
of implementation suitability of CCM-BIND.  Assistance is appreciated
on any of these (or other) items.

Improving GSS is costly, but you can help!  We are looking for
organizations that find GSS useful and wish to contribute back.  You
can contribute by reporting bugs, improve the software, or donate
money or equipment.

Commercial support contracts for GSS are available, and they help
finance continued maintenance.  Simon Josefsson Datakonsult, a
Stockholm based privately held company, is currently funding GSS
maintenance.  We are always looking for interesting development
projects.

If you need help to use GSSLib, or want to help others, you are
invited to join our help-gss mailing list, see:
<http://lists.gnu.org/mailman/listinfo/help-gss>.

The project page of the library is available at:
  http://www.gnu.org/software/gss/
  http://josefsson.org/gss/

Here are the compressed sources (1.5MB):
  ftp://alpha.gnu.org/gnu/gss/gss-0.0.18.tar.gz
  http://josefsson.org/gss/releases/gss-0.0.18.tar.gz

Here are GPG detached signatures using key 0xB565716F:
  ftp://alpha.gnu.org/gnu/gss/gss-0.0.18.tar.gz.sig
  http://josefsson.org/gss/releases/gss-0.0.18.tar.gz.sig

Here are the MD5/SHA1 checksums:

8158e8b9f0df09f886c4b3d286ff403a4fce65ef  gss-0.0.18.tar.gz
da57f60581833ba7a46d8b3703dac6cfe6783fb0  gss-0.0.18.tar.gz.sig

f2ebfb444b71d7033fb2ddaacac8b5c3893867d504c5cb5df90c45de  gss-0.0.18.tar.gz
7eca82ff61de0d460ef193cfc8a979f8ea3f4086d9f76f064d9695c0  gss-0.0.18.tar.gz.sig

Enjoy,
Simon

pgpP4h1KqK80w.pgp
Description: PGP signature