File glib-networking.changes of Package glib-networking
1148
1
-------------------------------------------------------------------
2
Mon Jun 8 18:55:17 UTC 2020 - Michael Gorse <mgorse@suse.com>
3
4
- Update to version 2.62.4:
5
- Fix CVE-2020-13645, fail connections when server identity is
6
unset (boo#1172460).
7
8
-------------------------------------------------------------------
9
Sat Jan 25 14:08:41 UTC 2020 - Dominique Leuenberger <dimstar@opensuse.org>
10
11
- No longer recommend -lang: supplements are in use
12
13
-------------------------------------------------------------------
14
Sun Jan 5 14:05:57 UTC 2020 - Bjørn Lie <bjorn.lie@gmail.com>
15
16
- Update to version 2.62.3:
17
+ Fix leak of base iostream (or base datagram socket), 2.62
18
regression.
19
+ Fix duplicate notifies of peer-certificate and
20
peer-certificate-errors.
21
+ Fix obscure corner case where SNI might not work.
22
23
-------------------------------------------------------------------
24
Tue Dec 10 08:37:59 UTC 2019 - Bjørn Lie <bjorn.lie@gmail.com>
25
26
- Update to version 2.62.2:
27
+ Fix handshake_context crashes.
28
29
-------------------------------------------------------------------
30
Sat Oct 5 08:22:43 UTC 2019 - Bjørn Lie <bjorn.lie@gmail.com>
31
32
- Update to version 2.62.1:
33
+ Fix two memory leaks.
34
35
-------------------------------------------------------------------
36
Sat Sep 7 13:44:42 CDT 2019 - mgorse@suse.com
37
38
- Update to version 2.62.0:
39
+ Revert broken queued data fix for
40
glgo#GNOME/glib-networking#15.
41
42
-------------------------------------------------------------------
43
Mon Sep 2 00:45:58 UTC 2019 - Michael Gorse <mgorse@suse.com>
44
45
- Update to version 2.61.92:
46
+ Discard queued data after interrupted writes.
47
+ Verify socket timeouts are respected.
48
+ Fix a couple broken error messages.
49
+ Changes in version 2.61.90:
50
+ Fix translations of certain error messages
51
+ Changes in version 2.61.2:
52
+ Improve certain handshake error messages.
53
+ Fix regressions introduced in 2.61.1.
54
+ Changes in version 2.61.1:
55
+ This release contains a major refactoring of the TLS
56
codebase. The GnuTLS backend now shares the same base classes
57
as the OpenSSL backend, to avoid duplicating as much code as
58
possible. The base classes, previously used only by the
59
OpenSSL backend and originally forked from glib-networking
60
several years ago, have been enhanced to achieve feature-parity
61
with the current state of the GnuTLS backend. Please note
62
that the OpenSSL backend remains experimental. Further planned
63
work is required before this backend will be production-ready.
64
65
-------------------------------------------------------------------
66
Wed Aug 28 11:30:30 CEST 2019 - kukuk@suse.de
67
68
- Move LICENSE_EXCEPTION to %license.
69
70
-------------------------------------------------------------------
71
Sun Jun 9 15:44:46 UTC 2019 - Bjørn Lie <bjorn.lie@gmail.com>
72
73
- Update to version 2.60.3:
74
+ Fix clobbering of the thread-default main context after
75
certificate verification failure during async handshakes since
76
2.60.1.
77
+ Fix GTlsDatabase initialization failures in OpenSSL backend due
78
to uninitialized memory use.
79
+ Fix minor leak of ALPN protocols.
80
81
-------------------------------------------------------------------
82
Fri May 3 17:15:49 UTC 2019 - Bjørn Lie <bjorn.lie@gmail.com>
83
84
- Update to version 2.60.2:
85
+ OpenSSL backend now defaults to system trust store.
86
+ Fix client auth failure error with GnuTLS 3.6.7 (bsc#1134795).
87
- Drop 0001-gnutls-Handle-new-GNUTLS_E_CERTIFICATE_REQUIRED.patch:
88
fixed upstream.
89
90
-------------------------------------------------------------------
91
Fri Apr 5 14:47:33 UTC 2019 - Vítězslav Čížek <vcizek@suse.com>
92
93
- Handle new GnuTLS error GNUTLS_E_CERTIFICATE_REQUIRED
94
+ https://gitlab.gnome.org/GNOME/glib-networking/issues/70
95
+ add 0001-gnutls-Handle-new-GNUTLS_E_CERTIFICATE_REQUIRED.patch
96
97
-------------------------------------------------------------------
98
Tue Apr 2 05:52:06 UTC 2019 - Bjørn Lie <bjorn.lie@gmail.com>
99
100
- Update to version 2.60.1:
101
+ Improve reliability of client auth failure tests.
102
+ Fix excessive CPU usage after sync handshake.
103
104
-------------------------------------------------------------------
105
Tue Mar 12 21:17:50 UTC 2019 - Bjørn Lie <bjorn.lie@gmail.com>
106
107
- Update to version 2.60.0.1:
108
+ Fix build with OpenSSL pkg-config unavailable.
109
110
-------------------------------------------------------------------
111
Mon Mar 11 15:58:08 UTC 2019 - Bjørn Lie <bjorn.lie@gmail.com>
112
113
- Update to version 2.60.0:
114
+ This is the first stable release featuring the new OpenSSL
115
backend. Please be advised that this new backend is still
116
experimental and known to not work on some systems, including
117
Debian. Linux distributions are encouraged to stick to the
118
default build options, where OpenSSL is not yet enabled.
119
+ Fix build with GnuTLS disabled.
120
121
-------------------------------------------------------------------
122
Tue Mar 5 06:12:55 UTC 2019 - Bjørn Lie <bjorn.lie@gmail.com>
123
124
- Update to version 2.59.92:
125
+ GnuTLS: reject sync operations during handshake to avoid
126
deadlocks.
127
+ Temporarily disable DTLS and OpenSSL tests due to bugs.
128
129
-------------------------------------------------------------------
130
Thu Feb 21 10:13:50 UTC 2019 - bjorn.lie@gmail.com
131
132
- Update to version 2.59.91:
133
+ Update OpenSSL SSL struct when certificate is changed.
134
+ Fix tests build when GnuTLS is disabled.
135
+ Remove Fedora-specific PROFILE=SYSTEM default cipher list.
136
+ Fix some problems with the connection tests.
137
138
-------------------------------------------------------------------
139
Thu Feb 14 21:44:07 UTC 2019 - bjorn.lie@gmail.com
140
141
- Update to version 2.59.90:
142
+ This release adds an OpenSSL backend, obsoleting the
143
glib-openssl project.
144
+ The OpenSSL backend seems to be mature, though it is less
145
well-tested for desktop usage than the GnuTLS backend. It will
146
remain disabled by default at build time due to the
147
GPL-incompatible nature of the OpenSSL license -- and the
148
GPLv2-incompatible nature of the Apache license that will be
149
used by future versions of OpenSSL -- and because the GnuTLS
150
backend is sufficient for Linux distros.
151
+ Use the OpenSSL backend if you are building an embedded system
152
where (GPLv2+ or LGPLv3+) dependencies are unacceptable (e.g.
153
nettle or GMP, both dependencies of GnuTLS) and you are OK with
154
the GPL-incompatible OpenSSL license. If the OpenSSL backend is
155
enabled at build time, you should probably disable build of the
156
GnuTLS backend, or it will take precedence over the OpenSSL
157
backend at runtime.
158
159
-------------------------------------------------------------------
160
Tue Jan 8 13:15:44 UTC 2019 - bjorn.lie@gmail.com
161
162
- Update to version 2.59.2:
163
+ Add support for application layer protocol negotiation.
164
165
-------------------------------------------------------------------
166
Sat Jan 5 19:46:33 UTC 2019 - bjorn.lie@gmail.com
167
168
- Update to version 2.59.1:
169
+ This release removes the gnutls-pkcs11 backend, which was
170
disabled in 2.57.2, due to lack of any feedback whatsoever
171
regarding its disablement. If you think it is still useful to
172
you, given that the normal gnutls backend now supports PKCS#11,
173
speak up now.
174
+ This release also includes several changes to properly support
175
TLS 1.3.
176
+ Other changes:
177
- Perform certificate verification during, not after, TLS
178
handshake.
179
- Dramatically improve the reliability of the non-DTLS tests.
180
(DTLS is still having problems).
181
- Regenerate test certificates to prepare for OpenSSL support.
182
- Several meson build system improvements to prepare for
183
OpenSSL support.
184
185
-------------------------------------------------------------------
186
Wed Sep 26 16:33:50 UTC 2018 - bjorn.lie@gmail.com
187
188
- Update to version 2.58.0:
189
+ Updated translations.
190
191
-------------------------------------------------------------------
192
Wed Aug 29 00:27:45 UTC 2018 - bjorn.lie@gmail.com
193
194
- Update to version 2.57.92:
195
+ Revert fixes for glgo#GNOME/glib-networking#4 and
196
glgo#GNOME/glib-networking#6 due to regression
197
glgo#GNOME/glib-networking#43.
198
+ Fix installed tests glgo#GNOME/glib-networking!7.
199
200
-------------------------------------------------------------------
201
Mon Aug 13 08:47:28 UTC 2018 - bjorn.lie@gmail.com
202
203
- Update to version 2.57.90:
204
+ Properly check for server errors in connection tests.
205
+ Perform certificate verification during, not after, TLS
206
handshake.
207
+ Avoid trailing dots in SNI hostnames.
208
+ Send fallback SCSV with fallback connection attempts.
209
+ Fail unsafe rehandshake attempts initiated by API request.
210
211
-------------------------------------------------------------------
212
Thu Jul 26 23:21:03 UTC 2018 - bjorn.lie@gmail.com
213
214
- Update to version 2.57.3:
215
+ Fix memory leaks when calling
216
g_tls_connection_gnutls_get_certificate().
217
+ Use .so for modules on macOS instead of dylib.
218
+ Fix build with MSVCC.
219
220
-------------------------------------------------------------------
221
Wed Jun 6 00:16:09 UTC 2018 - luc14n0@linuxmail.org
222
223
- Update to version 2.57.2:
224
+ No visible changes for the user.
225
- Drop pkgconfig(p11-kit-1) BuildRequires: it's now not enabled by
226
default, and even when it was being enabled the backend would
227
only work if the env GIO_USE_TLS=gnutls-pkcs11 would be set.
228
229
-------------------------------------------------------------------
230
Sat Jun 2 03:00:57 UTC 2018 - luc14n0@linuxmail.org
231
232
- Update to version 2.57.1:
233
+ Use GnuTLS system trust (bgo#753260).
234
+ Fix criticals when child streams outlast the parent
235
GTlsConnection (bgo#792219).
236
+ Fix crash when setting client cert without private key
237
(bgo#793712).
238
239
-------------------------------------------------------------------
240
Tue May 22 20:14:53 UTC 2018 - bjorn.lie@gmail.com
241
242
- Update to version 2.56.1:
243
+ Fix build with PKCS#11 backend disabled (bgo#794292).
244
+ Various meson build system fixes (bgo#794358 and bgo#794372).
245
+ Tests are now compatible with GnuTLS 3.6 (bgo#794286).
246
247
-------------------------------------------------------------------
248
Tue Mar 20 17:31:22 UTC 2018 - dimstar@opensuse.org
249
250
- Unconditionally enable translation-update-upstream: on
251
Tumbleweed, this results in a NOP and for Leap in SLE paid
252
translations being used (boo#1086036).
253
254
-------------------------------------------------------------------
255
Sun Mar 11 10:04:19 UTC 2018 - dimstar@opensuse.org
256
257
- Update to version 2.56.0:
258
+ Updated translations.
259
260
-------------------------------------------------------------------
261
Wed Feb 28 16:26:49 UTC 2018 - dimstar@opensuse.org
262
263
- Modernize spec-file by calling spec-cleaner
264
265
-------------------------------------------------------------------
266
Tue Feb 13 15:03:10 UTC 2018 - dimstar@opensuse.org
267
268
- Update to version 2.55.90:
269
+ Fix unit tests when SSLv3 is unavailable (bgo#782853).
270
+ Allow static linking (bgo#791100).
271
+ Fix issues found by coverity (bgo#792402).
272
+ Remove TLS build option; it is now mandatory.
273
+ Try to ensure that GnuTLS is only initialized if TLS is
274
actually used.
275
+ Update use of GObject to follow current best practices.
276
+ Use XDG_CURRENT_DESKTOP to determine which proxy module to
277
load.
278
279
-------------------------------------------------------------------
280
Sun Dec 17 02:46:47 UTC 2017 - luc14n0@linuxmail.org
281
282
- Update to version 2.55.2:
283
+ Fix glib-pacrunner.service installation directory (bgo#790367).
284
+ Updated translations.
285
- Drop glib-networking-Fix-build-failure-on-64bit-platforms.patch:
286
fixed upstream.
287
- Drop intltool BuildRequires as this is no longer used anymore
288
once upstream migrated to gettext long ago.
289
- Add pkgconfig(glib-2.0) BuildRequires. Note that it was being
290
pulled with gio-2.0 pkgconfig module and used already as both of
291
them live in glib2-devel package.
292
293
-------------------------------------------------------------------
294
Mon Dec 4 14:23:47 UTC 2017 - dimstar@opensuse.org
295
296
- Add pkgconfig(systemd) BuildRequires: new dependency after the
297
port to meson.
298
299
-------------------------------------------------------------------
300
Tue Nov 14 08:33:31 UTC 2017 - fezhang@suse.com
301
302
- Update to version 2.55.1:
303
+ Implement DTLS support (bgo#697908).
304
+ Port to Meson build system (bgo#786639).
305
+ Updated translations.
306
- Add ca-certificates-mozilla BuildRequires: new dependency.
307
- Add meson BuildRequires and switch autotools macros configure,
308
make and makeinstall to meson, meson_build and meson_install
309
following upstream switch to Meson build system.
310
- Add glib-networking-Fix-build-failure-on-64bit-platforms.patch:
311
Fix a build failure (bgo#790367).
312
313
-------------------------------------------------------------------
314
Fri Oct 27 22:32:33 UTC 2017 - luc14n0@linuxmail.org
315
316
- Update to version 2.54.1:
317
+ gnutls: Fix using different client certs for different
318
connections (bgo#781578).
319
+ Updated translations.
320
321
-------------------------------------------------------------------
322
Tue Sep 12 18:14:32 UTC 2017 - luc14n0@linuxmail.org
323
324
- Update to version 2.54.0:
325
+ Updated translations.
326
327
-------------------------------------------------------------------
328
Fri Sep 8 15:54:06 UTC 2017 - jengelh@inai.de
329
330
- Replace old macros and fixup RPM group.
331
332
-------------------------------------------------------------------
333
Tue Aug 15 16:02:32 UTC 2017 - zaitor@opensuse.org
334
335
- Update to version 2.53.90:
336
+ gnutls: Stop using %LATEST_RECORD_VERSION in priority string,
337
since that gives better compatibility with current gnutls /
338
current real world (bgo#782218).
339
+ gnutls: Provide a better error message when a TLS alert is
340
received (bgo#782218).
341
+ Updated translations.
342
- Conditionally apply translations-update-upstream BuildRequires
343
and macro for non-openSUSE only.
344
345
-------------------------------------------------------------------
346
Mon Sep 19 17:20:30 UTC 2016 - zaitor@opensuse.org
347
348
- Update to version 2.50.0:
349
+ Updated translations.
350
351
-------------------------------------------------------------------
352
Tue Aug 16 13:15:52 UTC 2016 - dimstar@opensuse.org
353
354
- Update to version 2.49.90:
355
+ Ported to use upstream gettext rather than
356
intltool/glib-gettext (bgo#768708).
357
+ Updated po files for future gettext versions.
358
+ Fixed translation lookup on Windows (bgo#765466).
359
+ Updated translations.
360
361
-------------------------------------------------------------------
362
Tue May 17 18:03:01 UTC 2016 - mgorse@suse.com
363
364
- Update to GNOME 3.20.2 Fate#318572
365
366
-------------------------------------------------------------------
367
Mon May 9 20:31:04 UTC 2016 - zaitor@opensuse.org
368
369
- Update to version 2.48.2:
370
+ gnutls: Fixed an infinite loop if a server sent two identical
371
copies of its CA certificate (bgo#765317).
372
+ Updated translations.
373
374
-------------------------------------------------------------------
375
Tue Apr 26 13:16:40 UTC 2016 - zaitor@opensuse.org
376
377
- Update to version 2.48.1:
378
+ Fixed translations in non-UTF-8 domains (bgo#765466).
379
+ Fixed bash-ism in configure (bgo#765396).
380
+ Updated translations.
381
- Stop passing V=1 to make, we do debugging locally.
382
- Add default http://www.gnome.org as Url: Silence rpmlint.
383
384
-------------------------------------------------------------------
385
Tue Mar 22 09:45:06 UTC 2016 - dimstar@opensuse.org
386
387
- Update to version 2.48.0:
388
+ New stable release. (No changes since 2.47.90).
389
390
-------------------------------------------------------------------
391
Tue Feb 16 10:28:48 UTC 2016 - dimstar@opensuse.org
392
393
- Update to version 2.47.90:
394
+ gnutls: The non-PKCS#11 TLS plugin now uses gnutls's
395
certificate validation code directly, rather than attempting to
396
build a certificate chain itself first (bgo#753260 and others).
397
+ gnutls: Fixed a leak when closing a connection during an
398
implicit handshake (bgo#736809).
399
+ gnutls: Fixed "make check" without PKCS#11 support
400
(bgo#728977).
401
+ gnutls: Various changes in preparation for DTLS support (but
402
not the actual DTLS support itself) (bgo#697908, bgo#735754).
403
+ Updated translations.
404
405
-------------------------------------------------------------------
406
Tue Nov 24 23:29:37 UTC 2015 - zaitor@opensuse.org
407
408
- Update to version 2.47.1:
409
+ Added a systemd service file for glib-pacrunner (bgo#755740).
410
411
-------------------------------------------------------------------
412
Mon Oct 12 21:41:36 UTC 2015 - zaitor@opensuse.org
413
414
- Update to version 2.46.1:
415
+ Fixed a certificate chain validation problem that affected
416
Facebook in Epiphany (bgo#750457).
417
418
-------------------------------------------------------------------
419
Mon Sep 21 15:41:41 UTC 2015 - dimstar@opensuse.org
420
421
- Update to version 2.46.0:
422
+ Various minor cleanups and small memory leak fixes.
423
+ Added a new test case for client certificate chain handling
424
(bgo#754129).
425
+ Updated translations.
426
427
-------------------------------------------------------------------
428
Fri May 1 18:31:06 UTC 2015 - zaitor@opensuse.org
429
430
- Update to version 2.45.1:
431
+ tls/gnutls: Implement
432
g_tls_client_connection_copy_session_state(), to allow
433
implementing FTP-over-TLS in gvfs (bgo#745255).
434
435
-------------------------------------------------------------------
436
Mon Mar 23 14:22:54 UTC 2015 - dimstar@opensuse.org
437
438
- Update to version 2.44.0:
439
+ Stable release, no changes since 2.43.92.
440
441
-------------------------------------------------------------------
442
Tue Mar 17 21:49:55 UTC 2015 - dimstar@opensuse.org
443
444
- Update to version 2.43.92:
445
+ Fix TLS session caching when using session tickets
446
(bgo#745099).
447
+ Updated translations.
448
449
-------------------------------------------------------------------
450
Tue Mar 3 12:29:38 UTC 2015 - dimstar@opensuse.org
451
452
- Update to version 2.43.91:
453
+ tls/gnutls: Removed a workaround for connecting to servers with
454
weak DH parameters, which was apparently only needed because
455
gnutls was prioritizing DHE over RSA (rh#1177964#c8).
456
+ tls/gnutls: We now require gnutls 3.x again. (In fact, 2.42.1
457
and 2.43.1 accidentally used a 3.x-only function, so we already
458
required it, we were just failing to declare that fact).
459
+ tls/tests: Skip certain tests when running against old gnutls
460
or GLib releases. (glib-networking 2.43.91 itself does not
461
require GLib 2.43, but one of the test cases does).
462
+ Updated translations.
463
464
-------------------------------------------------------------------
465
Wed Dec 17 19:27:08 UTC 2014 - zaitor@opensuse.org
466
467
- Update to version 2.43.1:
468
+ The GTlsClientConnection "use-ssl3" property now falls back to
469
TLS 1.0 if SSL 3.0 has been disabled, rather than just failing.
470
Also, we now use the gnutls %LATEST_RECORD_VERSION option by
471
default (to allow connecting to certain servers that were
472
incorrectly patched for the POODLE attack), but also make sure
473
to remove that option in the fallback ("use-ssl3") mode (to
474
allow connecting to other servers that are differently broken)
475
(bgo#738633, bgo#740087).
476
+ tls/gnutls: Miscellaneous warning, debugging, and leak fixes
477
(bgo#736757, bgo#736809, bgo#737106).
478
+ Updated translations.
479
480
-------------------------------------------------------------------
481
Wed Dec 17 17:31:56 UTC 2014 - zaitor@opensuse.org
482
483
- Update to version 2.42.1:
484
+ The GTlsClientConnection "use-ssl3" property now falls back to
485
TLS 1.0 if SSL 3.0 has been disabled, rather than just failing.
486
Also, we now use the gnutls %LATEST_RECORD_VERSION option by
487
default (to allow connecting to certain servers that were
488
incorrectly patched for the POODLE attack), but also make sure
489
to remove that option in the fallback ("use-ssl3") mode (to
490
allow connecting to other servers that are differently broken).
491
(bgo#738633, bgo#740087).
492
+ tls/gnutls: Miscellaneous warning, debugging, and leak fixes
493
(bgo#736757, bgo#736809, bgo#737106).
494
+ Updated translations.
495
496
-------------------------------------------------------------------
497
Tue Sep 23 09:23:21 UTC 2014 - dimstar@opensuse.org
498
499
- Update to version 2.42.0:
500
+ New stable release. (No changes since 2.41.92).
501
502
-------------------------------------------------------------------
503
Mon Sep 15 16:20:10 UTC 2014 - zaitor@opensuse.org
504
505
- Update to version 2.41.92:
506
+ tls/gnutls:
507
- Incorrectly-ordered certificate chains are now accepted
508
(bgo#683266).
509
- Closing an already-closed GTlsConnection now correctly
510
returns TRUE rather than G_IO_ERROR_CLOSED (bgo#735754).
511
512
-------------------------------------------------------------------
513
Tue Jul 22 14:08:33 UTC 2014 - dimstar@opensuse.org
514
515
- Update to version 2.41.4:
516
+ tls/gnutls: certificates with IP address subject altnames are
517
now supported (bgo#726596).
518
+ tls/tests: added a script to re-generate the certificates, and
519
regenerated them (since the key for the existing CA certificate
520
had been lost, so it wasn't possible to add new test
521
certificates, eg, for IP SAN) (bgo#733365).
522
+ Updated translations.
523
524
-------------------------------------------------------------------
525
Sat Jul 12 21:59:31 UTC 2014 - dimstar@opensuse.org
526
527
- Update to version 2.41.3:
528
+ tls/gnutls: If a server's certificate includes an issuer chain,
529
we now send the entire chain to the client (bgo#724708).
530
+ Updated translations.
531
532
-------------------------------------------------------------------
533
Mon Apr 14 19:20:37 UTC 2014 - zaitor@opensuse.org
534
535
- Update to version 2.40.1:
536
+ tls/gnutls: g_tls_backend_get_default_database() should never
537
return %NULL; if glib-networking was built without a
538
ca-certificates file, then the default GTlsDatabase should just
539
be empty (bgo#727282).
540
541
-------------------------------------------------------------------
542
Tue Mar 25 09:06:09 UTC 2014 - dimstar@opensuse.org
543
544
- Update to version 2.40.0:
545
+ New stable release. No changes since 2.39.90.
546
547
-------------------------------------------------------------------
548
Wed Feb 19 16:23:17 UTC 2014 - zaitor@opensuse.org
549
550
- Update to version 2.39.90:
551
+ tls/gnutls:
552
- Avoid trying to update a destroyed GSource (bgo#723774).
553
- Fix another flaky test (bgo#722336).
554
+ tests: use the TAP driver.
555
+ Updated translations.
556
557
-------------------------------------------------------------------
558
Mon Dec 16 22:11:46 UTC 2013 - dimstar@opensuse.org
559
560
- Update to version 2.39.3:
561
+ tls/tests: Fix one sporadic bug in the connection test
562
(bgo#720081) and make it properly fail rather than hanging
563
forever when another sporadic bug happens (which I don't
564
actually know the cause of) (bgo#719727).
565
+ tls/gnutls: Fix for -Werror=format-nonliteral (bgo#720081).
566
567
-------------------------------------------------------------------
568
Thu Nov 21 13:49:58 UTC 2013 - dimstar@opensuse.org
569
570
- Update to version 2.39.1:
571
+ tls/gnutls:
572
- Use g_tls_interaction_invoke_request_certificate()
573
when processing a certificate request (bgo#637257).
574
- Handle G_IO_ERROR_TIMED_OUT on a GTlsConnection correctly
575
rather than reporting "The specified session has
576
been invalidated for some reason" (bgo#710700).
577
- add a test for a fix made in glib (bgo#710691).
578
579
-------------------------------------------------------------------
580
Mon Nov 11 22:57:26 UTC 2013 - dimstar@opensuse.org
581
582
- Update to version 2.38.2 (bnc#849913):
583
+ Fix to previous installed-tests fix, which resulted in some
584
files getting installed even when installed tests weren't
585
enabled (bgo#710197).
586
- Drop "Cleanup wrongly installed /files directory".
587
588
-------------------------------------------------------------------
589
Tue Oct 15 14:30:07 UTC 2013 - dimstar@opensuse.org
590
591
- Update to version 2.38.1:
592
+ glibpacrunner: Don't crash if there is an internal libproxy
593
error (rh#866927).
594
+ tls/tests: Fix installed tests to not accidentally depend on
595
having the source tree still exist (bgo#709628).
596
+ Updated translations.
597
- Cleanup wrongly installed /files directory (bgo#710197).
598
599
-------------------------------------------------------------------
600
Tue Sep 24 07:45:57 UTC 2013 - dimstar@opensuse.org
601
602
- Update to version 2.38.0:
603
+ New stable release (No changes since 2.37.5).
604
605
-------------------------------------------------------------------
606
Wed Aug 28 09:12:27 UTC 2013 - dimstar@opensuse.org
607
608
- Revert the changes from Jul 11 to not use certs.pem:
609
+ No longer pass --with-pkcs and --without-ca-certificate to
610
configure, but instead pass
611
--with-ca-certificates=/etc/ssl/ca-bundle.pem.
612
+ Drop glib-networking-fix-no-cert-bundles.patch: the patch
613
causes side-effects, as discovered in bnc#825903).
614
615
-------------------------------------------------------------------
616
Tue Jul 30 07:06:44 UTC 2013 - dimstar@opensuse.org
617
618
- Update to version 2.37.5:
619
+ gnutls: minimum version is now 2.12.8 (with 3.x preferred...).
620
+ glib-networking now supports the --enable-installed-tests flag,
621
to install its test programs to run at other times (ie, after
622
updating glib).
623
624
-------------------------------------------------------------------
625
Thu Jul 11 21:11:29 UTC 2013 - dimstar@opensuse.org
626
627
- Build using system pkcs#11 certificate store instead of using
628
/etc/ssl/certs.pem:
629
+ Pass the following parameters to configure
630
--with-pkcs
631
--without-ca-certificate
632
+ Add glib-networking-fix-no-cert-bundles.patch: do not fail if
633
no certificate bundle (anchor) is specified.
634
635
-------------------------------------------------------------------
636
Tue Jul 9 16:18:44 UTC 2013 - dimstar@opensuse.org
637
638
- Update to version 2.37.4:
639
+ bgo#701377: proxy/gnome: further improve GNOME session
640
detection.
641
+ bgo#701693: gnutls: don't crash if $G_TLS_GNUTS_PRIORITY is
642
invalid.
643
644
-------------------------------------------------------------------
645
Tue May 28 19:52:00 UTC 2013 - dimstar@opensuse.org
646
647
- Update to version 2.37.2:
648
+ proxy/gnome: Improve session-type detection to include
649
gnome-classic and anything else starting with "gnome"
650
(bgo#700607).
651
+ proxy/libproxy: make SOCKS work when using the async API
652
(bgo#699359).
653
+ proxy/tests: make the libproxy test program use the just-built
654
plugin rather than the installed one (bgo#700286).
655
+ proxy/tests: fix to not error out if neither proxy module is
656
built (bgo#700628).
657
+ tls/tests: fix a sporadic crash.
658
659
-------------------------------------------------------------------
660
Wed May 1 08:16:29 UTC 2013 - dimstar@opensuse.org
661
662
- Update to version 2.37.1:
663
+ gnutls:
664
- bgo#695062: Fixed a hang while rehandshaking with gnutls 3.x.
665
- bgo#697754: Fixed a handshaking crash in multithreaded use.
666
+ proxy/gnome:
667
- Fix "automatic" mode, which was mistakenly being treated as
668
"none".
669
- bgo#698936: Use this in Unity sessions as well as GNOME ones.
670
+ Updated translations.
671
672
-------------------------------------------------------------------
673
Tue Apr 16 13:48:36 UTC 2013 - dimstar@opensuse.org
674
675
- Update to version 2.36.1:
676
+ gnutls: Fixed a bug that could cause hangs and/or bursts of CPU
677
usage in some cases (bgo#696881).
678
+ gnutls: Fixed CFLAGS when building with gnutls in a different
679
prefix (bgo#696519).
680
+ Updated translations.
681
682
-------------------------------------------------------------------
683
Mon Mar 25 13:11:31 UTC 2013 - dimstar@opensuse.org
684
685
- Update to version 2.36.0:
686
+ Updated translations.
687
688
-------------------------------------------------------------------
689
Tue Mar 5 18:52:17 UTC 2013 - dimstar@opensuse.org
690
691
- Update to version 2.35.9:
692
+ Fixed one kind of handshake failure to return the correct error
693
code under gnutls 3.x (bgo#694812).
694
+ Updated translations.
695
696
-------------------------------------------------------------------
697
Tue Feb 19 13:50:45 UTC 2013 - dimstar@opensuse.org
698
699
- Update to version 2.35.8:
700
+ proxy/gnome: ported to new GSimpleProxyResolver, and added more
701
tests.
702
+ gnutls: Fixed a small per-connection leak (bgo#693718).
703
+ tls/tests: Fixed several race conditions that caused spurious
704
failures (bgo#693720).
705
+ Updated translations.
706
707
-------------------------------------------------------------------
708
Tue Feb 5 19:01:56 UTC 2013 - dimstar@opensuse.org
709
710
- Update to version 2.35.6:
711
+ proxy/gnome: Fixed several bugs:
712
- Multithreaded usage could result in crashes.
713
- In "automatic" mode, synchronous lookups would obey
714
ignore-hosts, but asynchronous lookups would not.
715
- lookup_async() would never notice if the proxy settings
716
switched from "automatic" to "manual" or "none" (and would
717
make a synchronous D-Bus call when switching in the other
718
direction).
719
- If given an invalid URI, lookup_async() would return a
720
successful result (and leak the GError that it was supposed
721
to have returned), and lookup() would return both the error
722
and the proxy (leaking one or the other, depending on how
723
the caller behaved).
724
+ Updated translations.
725
726
-------------------------------------------------------------------
727
Tue Jan 15 10:09:10 UTC 2013 - dimstar@opensuse.org
728
729
- Update to version 2.35.4:
730
+ proxy/gnome: The tests should now work correctly even if run
731
from a non-GNOME environment.
732
+ Updated translations.
733
734
-------------------------------------------------------------------
735
Tue Jan 8 18:12:56 UTC 2013 - dimstar@opensuse.org
736
737
- Update to version 2.35.3:
738
+ build: The TLS tests are now not built if you are building
739
without gnutls support.
740
+ gnutls: Several handshaking fixes:
741
- Fix a hang when doing a synchronous close() immediately
742
after cancelling an asynchronous handshake() (which would
743
happen in libsoup if you cancelled a message at the right
744
time) (bgo#688751)
745
- Avoid an assertion when an implicit handshake fails
746
(bgo#689274)
747
- Fixed GTlsServerConnection:authentication-mode to work
748
again, and added a regression test for this (bgo#689259)
749
- Return the appropriate error
750
(G_TLS_ERROR_CERTIFICATE_REQUIRED) when a handshake fails
751
because the server required a certificate but none was
752
provided, and added a test for this (bgo#689260)
753
- Make g_io_stream_close() finish successfully after a failed
754
handshake (bgo#689260)
755
- Make g_io_stream_close() finish successfully before a
756
handshake (bgo#689271)
757
+ gnutls: Updated to be aware of G_IO_ERROR_BROKEN_PIPE in glib
758
2.35.3, which needs to be converted to G_TLS_ERROR_NOT_TLS in
759
some cases. (Previously this error showed up as just
760
G_IO_ERROR_FAILED.)
761
+ proxy/gnome: This is now only used in GNOME login sessions (as,
762
essentially, a more efficient version of the libproxy GNOME
763
backend); in non-GNOME sessions, gio will now fall back to the
764
libproxy plugin, allowing environment variables or other
765
libproxy settings backends to be used.
766
+ Updated translations.
767
768
-------------------------------------------------------------------
769
Fri Nov 16 09:24:05 UTC 2012 - dimstar@opensuse.org
770
771
- Update to version 2.35.1:
772
+ Update for glib 2.35.1; remove g_type_init() calls and port to
773
GTask.
774
+ Updated translations.
775
776
-------------------------------------------------------------------
777
Thu Nov 15 18:31:43 UTC 2012 - dimstar@opensuse.org
778
779
- Update to version 2.34.2:
780
+ build: it no longer tries to build the TLS tests if gnutls is
781
not available.
782
+ Updated translations.
783
784
-------------------------------------------------------------------
785
Mon Sep 24 17:56:17 UTC 2012 - dimstar@opensuse.org
786
787
- Update to version 2.34.0:
788
+ Updated translations.
789
790
-------------------------------------------------------------------
791
Mon Sep 17 22:57:28 UTC 2012 - zaitor@opensuse.org
792
793
- Update to version 2.33.14:
794
+ Updated translations.
795
796
-------------------------------------------------------------------
797
Tue Sep 4 13:52:36 UTC 2012 - dimstar@opensuse.org
798
799
- Update to version 2.33.12:
800
+ gnutls: Revert the addition of the certificate-bytes and
801
private-key-bytes properties to GTlsCertificateGnutls, since
802
they were reverted in glib (bgo#682081)
803
+ Updated translations.
804
805
-------------------------------------------------------------------
806
Tue Aug 21 07:38:31 UTC 2012 - dimstar@opensuse.org
807
808
- Update to version 2.33.10:
809
+ gnutls:
810
- Improved the certificate verifying code to deal with the case
811
of a CA being reissued with the same key but a different
812
signature algorithm. (bgo#681299)
813
- Fixed an uninitialized variable in
814
g_tls_connection_gnutls_close(). (bgo#681636)
815
+ Updated translations.
816
817
-------------------------------------------------------------------
818
Tue Aug 7 07:00:12 UTC 2012 - dimstar@opensuse.org
819
820
- Update to version 2.33.8:
821
+ gnutls:
822
- If a GTlsConnection gets an error when handshaking, it will
823
now continue to return that error message on future I/O
824
attempts, rather than behaving in an undefined manner
825
- You can now read from a GTlsConnection's input stream and
826
write to its output stream at the same time (either in
827
different threads, or asynchronously in a single thread).
828
(bgo#660252)
829
+ Updated translations.
830
831
-------------------------------------------------------------------
832
Tue Jun 26 08:22:45 UTC 2012 - dimstar@opensuse.org
833
834
- Update to version 2.33.3:
835
+ Updated autogen.sh (in particular to support automake 1.12)
836
(bgo#675261)
837
+ gnutls: fix the use-system-certdb property on
838
GTlsConnectionGnutls
839
+ Updated translations.
840
841
-------------------------------------------------------------------
842
Wed May 16 18:13:24 UTC 2012 - dimstar@opensuse.org
843
844
- Update to version 2.33.2:
845
+ gnutls: simplify using new glib pollable stream methods
846
+ proxy/gnome: fix a bug that made it impossible to use SOCKS
847
without also having a separate http proxy.
848
849
-------------------------------------------------------------------
850
Tue May 15 14:32:18 UTC 2012 - vuntz@opensuse.org
851
852
- Update to version 2.32.3:
853
+ proxy/gnome: Fix SOCKS to work when no http proxy is set
854
+ Updated translations.
855
856
-------------------------------------------------------------------
857
Tue Apr 17 05:50:39 UTC 2012 - vuntz@opensuse.org
858
859
- Update to version 2.32.1:
860
+ gnutls: Added /etc/ssl/ca-bundle.pem to the list of files to
861
check for to use as the default CA list (bgo#673944)
862
+ Updated translations.
863
864
-------------------------------------------------------------------
865
Tue Mar 27 06:06:14 UTC 2012 - vuntz@opensuse.org
866
867
- Update to version 2.32.0:
868
+ Updated translations.
869
870
-------------------------------------------------------------------
871
Tue Mar 20 15:25:19 UTC 2012 - vuntz@opensuse.org
872
873
- Update to version 2.31.22:
874
+ Updated translations.
875
876
-------------------------------------------------------------------
877
Tue Mar 6 08:08:18 UTC 2012 - vuntz@opensuse.org
878
879
- Update to version 2.31.20:
880
+ gnutls: Fixed a linking problem on some platforms when PKCS#11
881
is enabled (bgo#670956)
882
+ Updated translations.
883
884
-------------------------------------------------------------------
885
Tue Feb 7 14:39:36 UTC 2012 - vuntz@opensuse.org
886
887
- Update to version 2.31.16:
888
+ gnutls: Fixed a TLS handshaking bug that in particular caused
889
lots of crashes in epiphany (bgo#658771)
890
+ tls/tests: Fixed a bug in the pkcs11-pin test that could cause
891
it to spuriously fail
892
+ Updated translations.
893
- Remove xz BuildRequires now that it comes for free in the build
894
system.
895
896
-------------------------------------------------------------------
897
Tue Dec 20 09:16:20 UTC 2011 - vuntz@opensuse.org
898
899
- Update to version 2.31.6:
900
+ gnutls:
901
- Support gnutls built against nettle instead of gcrypt
902
(bgo#657306)
903
- Implement TLS session caching for GTlsServerConnection
904
(bgo#636574)
905
+ tls/tests: Explicitly request the memory GSettings backend, to
906
avoid warnings in partial jhbuild environments.
907
+ proxy/gnome: Update to use GInetAddressMask.
908
+ Updated translations.
909
- Add xz BuildRequires because we can't build a package for a
910
xz-compressed tarball without explicitly specifying that... See
911
bnc#697467 for more details.
912
913
-------------------------------------------------------------------
914
Tue Nov 22 09:34:27 UTC 2011 - dimstar@opensuse.org
915
916
- Update to version 2.31.2:
917
+ gnutls:
918
- Added gnutls-pkcs11 backend, which uses gnutls 2.12.8 and
919
p11-kit (a new optional dependency) to provide access to
920
PKCS#11 tokens. At the moment, this is only enabled if you
921
set GIO_USE_TLS=gnutls-pkcs11 in the environment (bgo#656361)
922
- GTlsCertificateGnutls can now read unencrypted PKCS#8 keys
923
(which show "BEGIN PRIVATE KEY" in PEM form) in addition to
924
the previously-supported PKCS#1 keys ("BEGIN RSA PRIVATE
925
KEY").
926
+ Updated translations.
927
- Add pkgconfig(p11-kit-1) BuildRequires. New dependency.
928
929
-------------------------------------------------------------------
930
Tue Nov 15 14:15:53 UTC 2011 - dimstar@opensuse.org
931
932
- Really enable parallel build: fix typo smp_flags => smp_mflags.
933
934
-------------------------------------------------------------------
935
Thu Oct 27 21:17:41 UTC 2011 - dimstar@opensuse.org
936
937
- Update to version 2.31.0:
938
+ Integrate fixes from 2.30.1.
939
+ gnutls:
940
- Bumped required GNUTLS version to 2.11.0 and updated code for
941
that (bgo#656903).
942
- Added another G_TLS_ERROR_NOT_TLS (aka "dumb server, try
943
falling back from TLS to SSLv3") case, when the handshake
944
completes but then packets after that don't decrypt
945
correctly (bgo#662104).
946
- Made sure that GTlsConnection:peer-certificate and
947
:peer-certificate-errors get set even when the peer
948
certificate is rejected.
949
+ proxy/gnome: build fixes (bgo#662203, bgo#662085).
950
+ Updated translations.
951
952
-------------------------------------------------------------------
953
Tue Oct 18 06:23:19 UTC 2011 - vuntz@opensuse.org
954
955
- Update to version 2.30.1:
956
+ Fixed a crash when passing a NULL GCancellable to
957
g_tls_connection_close_async() (bgo#659786)
958
+ Fixed ignore_hosts handling in GProxyResolverGnome (bgo#655581)
959
+ Fixed handling of self-signed CA certificates in
960
GTlsDatabaseGnutls (bgo#660508)
961
+ Updated translations.
962
963
-------------------------------------------------------------------
964
Mon Sep 26 22:22:55 UTC 2011 - vuntz@opensuse.org
965
966
- Update to version 2.30.0:
967
+ Updated translations.
968
969
-------------------------------------------------------------------
970
Tue Sep 20 07:08:59 UTC 2011 - vuntz@opensuse.org
971
972
- Update to version 2.29.92:
973
+ gnutls:
974
- Fixed a problem when linking against GNUTLS 3.0, where
975
connections would sometimes return the error "The TLS
976
connection was non-properly terminated". (bgo#659233)
977
- Plugged a few memory leaks
978
+ Updated translations.
979
980
-------------------------------------------------------------------
981
Wed Aug 31 09:53:01 CEST 2011 - vuntz@opensuse.org
982
983
- Update to version 2.29.18:
984
+ gnutls:
985
- fixed two rehandshaking bugs; one in which a client would
986
erroneously report an error after successfully rehandshaking
987
(bgo#653645), and one where initiating an asynchronous
988
rehandshake on the server side would send illegal packets and
989
cause the client to disconnect.
990
- made GTlsDatabaseGnutls and GTlsFileDatabaseGnutls properly
991
cancellable
992
- fixed the client-side session cache to not share session IDs
993
between different virtual hosts on the same IP address, which
994
caused problems with some servers. (bgo#581342)
995
+ tls: Fixed up the tls test program so it can be run from "make
996
check"
997
+ Updated translations.
998
999
-------------------------------------------------------------------
1000
Thu Aug 25 08:07:12 UTC 2011 - dimstar@opensuse.org
1001
1002
- Add libgcrypt-devel BuildRequires: gnutls used to bring this in
1003
as a dependency for us.
1004
1005
-------------------------------------------------------------------
1006
Tue Aug 16 04:31:36 CEST 2011 - dimstar@opensuse.org
1007
1008
- Update to version 2.29.15:
1009
+ bgo#636572: gnutls: implement GTlsDatabase
1010
+ bgo#652284: gnutls: override minimum key length, to allow
1011
connecting to HTTP servers with very small keys
1012
+ bgo#581342: gnutls: use %COMPAT mode, which makes GNUTLS behave
1013
more like OpenSSL/NSS/Windows in a few ways, making it work
1014
with certain broken HTTP servers.
1015
+ gnutls: fixed a crash when passed a NULL GError.
1016
1017
-------------------------------------------------------------------
1018
Wed Jul 6 23:14:21 CEST 2011 - vuntz@opensuse.org
1019
1020
- Change rpm query to look for the real package containing gio to
1021
use the new gio virtual name, that is now provided by the package
1022
containing the gio library. This is better than the query on the
1023
library filename, which might change later.
1024
- Also properly escape the queryformat, since we need to double the
1025
% characters in a .spec file.
1026
1027
-------------------------------------------------------------------
1028
Tue Jul 5 08:23:04 CEST 2011 - vuntz@opensuse.org
1029
1030
- Update to version 2.29.9:
1031
+ Optimized GDBus usage in PACRunner.
1032
+ Fixed a race condition in GProxyResolverGnome.
1033
+ Changed configure to --enable-maintainer-mode by default,
1034
to match glib.
1035
+ Updated translations.
1036
1037
-------------------------------------------------------------------
1038
Fri Jun 17 02:17:16 CEST 2011 - vuntz@opensuse.org
1039
1040
- Fix build after glib libraries moved back to %{_libdir}.
1041
1042
-------------------------------------------------------------------
1043
Mon May 23 23:12:28 CEST 2011 - dimstar@opensuse.org
1044
1045
- Update to version 2.28.7:
1046
+ Fixed a race condition in GProxyResolverGnome that caused
1047
problems when making simultaneous connections from multiple
1048
threads.
1049
+ Updated translations.
1050
1051
-------------------------------------------------------------------
1052
Wed May 04 13:58:22 UTC 2011 - alinm.elena@gmail.com
1053
1054
- Add gsettings-desktop-schemas Requires as the proxy schemas are
1055
used.
1056
1057
-------------------------------------------------------------------
1058
Wed Apr 27 11:19:50 UTC 2011 - fcrozat@novell.com
1059
1060
- Update to version 2.28.6.1:
1061
+ Fixed a bug in the gnutls backend introduced in 2.28.6
1062
1063
-------------------------------------------------------------------
1064
Tue Apr 26 14:56:58 UTC 2011 - fcrozat@novell.com
1065
1066
- Update to version 2.28.6:
1067
+ Fixed some links in the gnutls backend.
1068
+ Updated translations.
1069
1070
-------------------------------------------------------------------
1071
Tue Apr 5 11:52:29 UTC 2011 - fcrozat@novell.com
1072
1073
- Update to version 2.28.5:
1074
+ Updated translations.
1075
1076
-------------------------------------------------------------------
1077
Tue Mar 22 13:09:50 UTC 2011 - fcrozat@novell.com
1078
1079
- Update to version 2.28.4:
1080
+ Added a new proxy backend, GProxyResolverGnome, that uses
1081
GSettings and the network proxy schemas from
1082
gsettings-desktop-schemas to provide proxy information (and
1083
using a new D-Bus service provided by the libproxy backend to
1084
provide PAC/WPAD support).
1085
+ Updated translations.
1086
- Changes from version 2.28.0:
1087
+ Build fix.
1088
+ Updated translations.
1089
- Add dbus-1 and pkgconfig(gsettings-desktop-schemas)
1090
BuildRequires. dbus-1 is only needed for directory ownership.
1091
1092
-------------------------------------------------------------------
1093
Mon Feb 14 18:03:20 CET 2011 - sbrabec@suse.cz
1094
1095
- Added support for translation-update-upstream.
1096
1097
-------------------------------------------------------------------
1098
Sat Jan 8 00:15:42 CET 2011 - vuntz@opensuse.org
1099
1100
- Update to version 2.27.90:
1101
+ Fixed configure script to actually error out if installed glib
1102
version is too old
1103
+ gnutls:
1104
- updated GTlsClientConnectionGnutls for :accepted-cas type
1105
change
1106
- fixed an uninitialized variable
1107
1108
-------------------------------------------------------------------
1109
Wed Dec 22 10:17:33 CET 2010 - vuntz@opensuse.org
1110
1111
- Update to version 2.27.5:
1112
+ gnutls:
1113
- finish implementing GTlsRehandshakeMode, which was present
1114
but non-functional in 2.27.4
1115
- updates for glib TLS API changes
1116
- fix some async bugs that caused the main loop to spin
1117
- implement a client-side session cache, to speed up handshakes
1118
+ Compile with gcc warnings by default
1119
1120
-------------------------------------------------------------------
1121
Tue Dec 7 11:21:55 CET 2010 - vuntz@opensuse.org
1122
1123
- Update to version 2.27.4:
1124
+ Add GNUTLS-based implementation of GTlsBackend.
1125
- Add pkgconfig(gnutls) BuildRequires, and pass
1126
--with-ca-certificates=/etc/ssl/ca-bundle.pem to configure.
1127
1128
-------------------------------------------------------------------
1129
Wed Oct 13 22:50:58 CEST 2010 - vuntz@opensuse.org
1130
1131
- Update to version 2.26.0:
1132
+ No changes, just a version bump.
1133
- Update spec file after move of glib libraries to /lib: we are
1134
checking the name of the package providing libgio by looking at
1135
the provider of the file.
1136
1137
-------------------------------------------------------------------
1138
Mon Oct 11 21:34:59 CEST 2010 - vuntz@opensuse.org
1139
1140
- Add missing Requires for glib2-tools to glib-networking in
1141
baselibs.conf.
1142
1143
-------------------------------------------------------------------
1144
Tue Aug 31 09:32:52 CEST 2010 - vuntz@opensuse.org
1145
1146
- Initial packaging (version 2.25.0)
1147
1148