please test imminent 2.8.x release

Tomas Hoger thoger at redhat.com
Mon Aug 10 15:02:32 CEST 2009


Hi Simon!

Simon Josefsson <simon <at> josefsson.org> writes:

> Because of the NUL in CN/SAN issue we need to release a stable 2.8.x
> update quickly.
> 
> Please test the release candidate:
> 
> http://daily.josefsson.org/gnutls-2.8/gnutls-2.8-20090806.tar.gz
> 
> This will be identical with the release unless I hear anything negative.
> 
> You can also help by reviewing the changes since 2.8.1:
> 
> http://git.savannah.gnu.org/cgit/gnutls.git/log/?h=gnutls_2_8_x

Is it intentional that 2.8.2 does contain 21bc1439e5, but does not contain
9b0dc81885 and c9dba57f8d?  Moreover, is 21bc1439e5 still needed with 74b6d92f96
applied?  It seems that if there is NUL, GNUTLS_E_ASN1_DER_ERROR is returned
earlier or res is passed through _gnutls_x509_data2hex() and hence should not
contain NULs any more.

th.






More information about the Gnutls-devel mailing list