shishi-1.0.3 released [stable]

[Simon Josefsson]

Shishi implements the Kerberos network authentication system.  Shishi
can be used to authenticate users in distributed systems, and is most
often used via GSS-API for SSH or via SASL for IMAP/POP3.

The project's web page is available at:
  https://www.gnu.org/software/shishi/

All manuals are available from:
  https://www.gnu.org/software/shishi/manual/

Direct links to the manual:
  HTML: https://www.gnu.org/software/shishi/manual/shishi.html
   PDF: https://www.gnu.org/software/shishi/manual/shishi.pdf

Direct links to the API Reference manual:
  HTML: https://www.gnu.org/software/shishi/reference/
   PDF: https://www.gnu.org/software/shishi/reference/shishi.pdf

For code coverage, cyclomatic code complexity charts and clang analyzer see:
  https://gsasl.gitlab.io/shishi/coverage/
  https://gsasl.gitlab.io/shishi/cyclo/
  https://gsasl.gitlab.io/shishi/clang-analyzer/

If you need help to use GNU SASL, or want to help others, you are
invited to join our help-gsasl mailing list, see:
  https://lists.gnu.org/mailman/listinfo/help-shishi

Here are the compressed sources and a GPG detached signature:
  https://ftpmirror.gnu.org/shishi/shishi-1.0.3.tar.gz
  https://ftpmirror.gnu.org/shishi/shishi-1.0.3.tar.gz.sig

Use a mirror for higher download bandwidth:
  https://www.gnu.org/order/ftp.html

Here are the SHA1 and SHA256 checksums:

ba249b6f322d680cf198aa9171d6abe330628866  shishi-1.0.3.tar.gz
lXmP/RLdAaT4jgMR7gPKSibly05ekFmkDk/E2fKRfpI  shishi-1.0.3.tar.gz

The SHA256 checksum is base64 encoded, instead of the
hexadecimal encoding that most checksum tools default to.

Use a .sig file to verify that the corresponding file (without the
.sig suffix) is intact.  First, be sure to download both the .sig file
and the corresponding tarball.  Then, run a command like this:

  gpg --verify shishi-1.0.3.tar.gz.sig

The signature should match the fingerprint of the following key:

  pub   ed25519 2019-03-20 [SC]
        B1D2 BD13 75BE CB78 4CF4  F8C4 D73C F638 C53C 06BE
  uid   Simon Josefsson <simon@josefsson.org>

If that command fails because you don't have the required public key,
or that public key has expired, try the following commands to retrieve
or refresh it, and then rerun the 'gpg --verify' command.

  gpg --locate-external-key simon@josefsson.org

  gpg --recv-keys 51722B08FE4745A2

  wget -q -O- 
'https://savannah.gnu.org/project/release-gpgkeys.php?group=shishi&download=1' 
| gpg --import -

As a last resort to find the key, you can try the official GNU
keyring:

  wget -q https://ftp.gnu.org/gnu/gnu-keyring.gpg
  gpg --keyring gnu-keyring.gpg --verify shishi-1.0.3.tar.gz.sig


This release was bootstrapped with the following tools:
  Autoconf 2.71
  Automake 1.16.5
  Libtoolize 2.4.6
  Gnulib v0.1-5359-g6ef9c3334
  Makeinfo 6.7
  Help2man 1.48.1
  Gengetopt 2.23
  Gtkdocize 1.33.1
  Tar 1.34
  Gzip 1.10
  Bison 3.7.5

NEWS

* Noteworthy changes in release 1.0.3 (2022-08-07) [stable]

** New header file shishi-version (included from shishi.h).
Adds symbols SHISHI_VERSION_MAJOR, SHISHI_VERSION_MINOR,
SHISHI_VERSION_PATCH and SHISHI_VERSION_NUMBER.

** Modernize build infrastructure.
We now use gnulib's bootstrap.

** pam_shishi: Implement options 'debug', 'realm=', and 'principal='.
By Mats Erik Andersson <gnu@gisladisker.se>.

** Numerous other code cleanups, bug fixes, improved documentation,
** updated translations, and portability improvements.

Happy hacking,
Simon

signature.asc
Description: PGP signature