From ametzler at logic.univie.ac.at  Wed Jun 16 17:56:28 2004
From: ametzler at logic.univie.ac.at (Andreas Metzler)
Date: Wed, 16 Jun 2004 15:56:28 +0000 (UTC)
Subject: [gnutls-dev] Re: gpg sig
References: <20040429112735.6deb3c0e.mleidy@eiwaz.com>
Message-ID: <capqjc$657$1@sea.gmane.org>

Mike Leidy <mleidy at eiwaz.com> wrote:
> Hi.  Where can I find the key to validate the signatures for
> the sources for gnutls and opencdk?  Key id 45802A91 isn't
> found on the 4 servers I usually check, and I don't find it
> on the website anywhere.

subkeys.pgp.net
    cu and-  most of the other keyservers are broken -reas




From nmav at gnutls.org  Sat Jun 19 15:51:00 2004
From: nmav at gnutls.org (Nikos Mavroyanopoulos)
Date: Sat, 19 Jun 2004 16:51:00 +0300
Subject: [gnutls-dev] gnutls 1.0.14
Message-ID: <200406191651.00223.nmav@gnutls.org>

This sunday I've released gnutls 1.0.14. The changes since 1.0.13 are:

- Automatically disable certificate types that do not have corresponding
  certificates.
- Updates in the documentation.
- certtool can now add ip address SAN extension.
- certtool has now support for more X.520 DN attribute types.
- Opencdk library is being included if not found.
- Added gnutls_openpgp_keyring_check_id().
- Corrected a serious bug in the included libtasn1 library.
- Corrected session resuming in SRP ciphersuites.
- Updated to conform to the latest srp draft (draft-ietf-tls-srp-07)
- Added the functions gnutls_x509_crt_get_pk_rsa_raw() and
  gnutls_x509_crt_get_pk_dsa_raw() to retrieve parameters from certificates.
- Some fixes in the session resuming code.

This version also depends on the yet unreleased opencdk 0.5.5, but
if not present it will use an included version of it.

PS. This is the last stable release with new features. From now on features
 will only go to the development release. I also hope to be able to work
 on datagram TLS support within the summer.

-- 
Nikos Mavroyanopoulos



From nmav at gnutls.org  Tue Jun 29 01:05:56 2004
From: nmav at gnutls.org (Nikos Mavroyanopoulos)
Date: Tue, 29 Jun 2004 02:05:56 +0300
Subject: [gnutls-dev] gnutls 1.0.15
Message-ID: <200406290205.56791.nmav@gnutls.org>

I've released gnutls 1.0.15 which fixes some newly reported bugs.
The changes are:
- Fixed bug in RSA encryption, report and patch by Martijn Koster
  <mak at greenhills.co.uk>.
- Corrected a bug in certificate verification. Pointed out by
  Yoann Vandoorselaere <yoann at prelude-ids.org>

The bug in certificate verification caused non-ca certificates added
into the trusted ca list not to be checked. Now they are checked (but
not as signers), which was the original intention.

-- 
Nikos Mavroyanopoulos



From robey at danger.com  Tue Jun 29 23:56:42 2004
From: robey at danger.com (Robey Pointer)
Date: Tue, 29 Jun 2004 14:56:42 -0700
Subject: [gnutls-dev] building gnutls 1.0.14 with included opencdk
Message-ID: <40E1E59A.70108@danger.com>

When building gnutls 1.0.14 with the included opencdk library, openpgp 
is unable to find the opencdk include file.

It looks like "libextra/opencdk" should be added to the include path in 
this case, but I couldn't figure out a simple way to do that (I have 
zero understanding of 'configure') so my temporary patch has been to 
hand-edit this file:

libextra/openpgp/openpgp.h

to include <libextra/opencdk/opencdk.h> instead of <opencdk.h>. This is 
certainly the wrong fix, but at least shows you what's wrong.  Hopefully 
someone with 'configure' knowledge can fix this for 1.0.15.

Thanks!
robey