The NetBSD Project

CVS log for pkgsrc/security/gsasl/Makefile

[BACK] Up to [] / pkgsrc / security / gsasl

Request diff between arbitrary revisions

Default branch: MAIN
Current tag: MAIN

Revision 1.58 / (download) - annotate - [select for diffs], Wed Apr 19 08:11:21 2023 UTC (7 weeks ago) by adam
Branch: MAIN
Changes since 1.57: +2 -2 lines
Diff to previous 1.57 (colored)

revbump after textproc/icu update

Revision 1.57 / (download) - annotate - [select for diffs], Wed Oct 26 10:31:56 2022 UTC (7 months, 1 week ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2023Q1-base, pkgsrc-2023Q1, pkgsrc-2022Q4-base, pkgsrc-2022Q4
Changes since 1.56: +2 -1 lines
Diff to previous 1.56 (colored)

*: bump PKGREVISION for libunistring shlib major bump

Revision 1.56 / (download) - annotate - [select for diffs], Sun Jul 17 08:24:53 2022 UTC (10 months, 3 weeks ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2022Q3-base, pkgsrc-2022Q3
Changes since 1.55: +3 -5 lines
Diff to previous 1.55 (colored)

gsasl: update to 2.0.1.

* Noteworthy changes in release 2.0.1 (2022-07-15) [stable]

** Support for the libgssglue GSS-API library were added.
We encourage you to build with libgssglue, as that allows system
administrators and end-users to chose between MIT Kerberos, Heimdal
and GNU GSS during run-time.  Read about the background here:

** GSSAPI client: don't use AUTHID as fallback for AUTHZID.
The code historically used the AUTHID as authorization identity, but
in 2012 we changed it to first query for AUTHZID, and only if that is
not available, fall back to using AUTHID as the authorization
identity.  The change was not released until version 1.8.1 on
2019-08-02, when it was properly documented to be removed 'after the
year 2012'.  While documented behaviour, this seems like just
surprising behaviour and we now finally make the change.

** GSSAPI server: don't set AUTHZID to empty string when absent.
The GSS-API SASL protocol does not differentiate between an absent
authorization identity and an authorization identity that is the empty
string.  Previously libgsasl would set it to the empty string but now
it is set to NULL.  The manual explains that this is a protocol

** The examples/smtp-server.c now supports GSSAPI/GS2-KRB5.
The example is used during CI/CD testing of GNU SASL and thus it made
sense to extend it.  Some bugs related to getline error conditions
were also fixed.

** GSSAPI server: Fix out-of-bounds read.
A malicious client can after it has authenticated with Kerberos send a
specially crafted message that causes Libgsasl to read out of bounds
and cause a crash in the server.

* Noteworthy changes in release 2.0.0 (2022-06-20) [stable]

** Compared to last stable branch 1.10.x the 2.0.0 release
** drops all obsolete APIs, drops the abandoned KERBEROS_V5 mechanism,
** stops shipping a separate tarball for only the library, adds new APIs
** gsasl_mechanism_name_p() and gsasl_property_free().
Numerous other translation improvements, code cleanups, bug fixes,
documentation additions, build improvements and portability
enhancements were made as well.

Revision 1.55 / (download) - annotate - [select for diffs], Wed Dec 8 16:06:18 2021 UTC (17 months, 4 weeks ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2022Q2-base, pkgsrc-2022Q2, pkgsrc-2022Q1-base, pkgsrc-2022Q1, pkgsrc-2021Q4-base, pkgsrc-2021Q4
Changes since 1.54: +2 -2 lines
Diff to previous 1.54 (colored)

revbump for icu and libffi

Revision 1.54 / (download) - annotate - [select for diffs], Thu Oct 21 07:46:32 2021 UTC (19 months, 2 weeks ago) by wiz
Branch: MAIN
Changes since 1.53: +2 -2 lines
Diff to previous 1.53 (colored)

*: recursive bump for heimdal 7.7.0

its now includes openssl's

Revision 1.53 / (download) - annotate - [select for diffs], Wed Sep 29 19:01:16 2021 UTC (20 months, 1 week ago) by adam
Branch: MAIN
Changes since 1.52: +2 -2 lines
Diff to previous 1.52 (colored)

revbump for boost-libs

Revision 1.52 / (download) - annotate - [select for diffs], Wed Apr 21 13:25:18 2021 UTC (2 years, 1 month ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2021Q3-base, pkgsrc-2021Q3, pkgsrc-2021Q2-base, pkgsrc-2021Q2
Changes since 1.51: +2 -1 lines
Diff to previous 1.51 (colored)

revbump for boost-libs

Revision 1.51 / (download) - annotate - [select for diffs], Thu Jan 7 22:09:52 2021 UTC (2 years, 4 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2021Q1-base, pkgsrc-2021Q1
Changes since 1.50: +2 -2 lines
Diff to previous 1.50 (colored)

gsasl: update to 1.10.0.

* Version 1.10.0 (released 2021-01-01) [stable]

** This is a new major stable release.  Brief changes compared to 1.8.x:

*** SCRAM-SHA-256 and SCRAM-SHA-256-PLUS support per RFC 7677.

*** SCRAM supports password-less usage (StoredKey/ServerKey).

*** New 'gsasl --mkpasswd' command to prepare SCRAM salted/hashed passwords.

*** Final warning that obsolete APIs will be removed.

*** Various cleanups, portability and other bug fixes.
See the entries in NEWS and lib/NEWS covering the 1.9.x branch for details.

* Version 1.9.3 (released 2021-01-01) [beta]

** Fix build/portability problems.  GnuTLS >= 3.4 is required.
Thanks to Bruno Haible for reports.

* Version 1.9.2 (released 2020-12-24) [beta]

** gsasl: Don't abort command on some exepected TLS events (for TLS 1.3).
Patch from Enrico Scholz <> in:

** gsasl: Use GnuTLS system trust settings by default for X.509 server
** certificate validation.
Before it was documented behaviour that unless --x509-ca-file was
used, no verification of the server-side certificate was performed.
Now instead it will use the system trust settings, which on properly
configured systems results in verification of the server certificate.
As a result, you may now start to get server certificate verification
errors in situations where you didn't expect them.  Use --x509-ca-file
with the empty string ("") as a file name to use the old behaviour to
not abort on server certificate verification failures.

** SCRAM, GS2 and GSSAPI retrieve properties later in
** the authentication process.
Before the property GSASL_CB_TLS_UNIQUE was retrieved during SCRAM
gsasl_client_start() and gsasl_server_start(), and the properties
gsasl_server_start().  Now they are retrieved during the first call to

The only user-visible impact of this should be that 'gsasl
--client-mechanisms' and 'gsasl --server-mechanisms' will now not
query for parameters before giving a list of supported mechanisms,
which arguable gives a better user experience.  The downside of this
is that SCRAM-*-PLUS, GS2 and GSSAPI may be advertised even though
completing the server mechanism may not complete.

The problem with calling callbacks in the start() function is that the
callback will have no per-session context at that point, only a global
context, so the only way to give per-session unique callback responses
is to use a separate global handle per session.  This was discovered
in the Exim implementation of gsasl with SCRAM that used to request
the GSASL_CB_TLS_UNIQUE property in the start() function.  After
noticing this design issue, and writing this self test, it was
discovered that it also happened for the GSSAPI/GS2 server (not
client) mechanism for the GSASL_SERVICE and GSASL_HOSTNAME properties.

Thanks to Jeremy Harris for noticing the problem and discussion, see

** gsasl: The --mkpasswd output format follows Dovecot 'doveadm pw'.

** Filenames of images in the manual are now prefixed with 'gsasl-'.
This makes /usr/share/info more understandable, and it is suggested by
at least Debian to do this in upstream.

** Build changes.
Some more compiler warnings used and code fixed.  Improved ./configure

* Version 1.9.1 (released 2020-01-14) [beta]

** gsasl: New --mkpasswd argument to prepare salted/hashed passwords.
Currently mechanisms SCRAM-SHA-1 and SCRAM-SHA-256 are supported.  New
parameter --iteration-count to indicate number of PBKDF2 rounds,
default being 65536.  New parameter --salt to specify PBKDF2 salt.

* Version 1.9.0 (released 2020-01-03) [beta]

** Client and server support for SCRAM-SHA-256 and SCRAM-SHA-256-PLUS.

** gsasl: If PORT argument is "587" or "submission", SMTP mode is used.
Further, unrecognized PORT arguments will now on raise an error to
specify --smtp or --imap.

Revision 1.50 / (download) - annotate - [select for diffs], Mon Nov 16 13:05:07 2020 UTC (2 years, 6 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2020Q4-base, pkgsrc-2020Q4
Changes since 1.49: +5 -3 lines
Diff to previous 1.49 (colored)

gsasl: update to 1.8.1.

* Version 1.8.1 (released 2019-08-02) [stable]

** gsasl: IMAP client code now permits empty SASL tokens prefixed with '+'.
Normally servers should send '+ '.  Buggy servers include Microsoft
Exchange.  Reported by Adam Sj√łgren.

** GSSAPI client: Now retrieves GSASL_AUTHZID for authorization identity.
** GSSAPI client: Can now transmit an empty/missing authorization identity.
See lib/NEWS for more information.

** Build fixes.
Update of gnulib, including how it is bootstrapped.

** i18n: Updated translations.

Revision 1.49 / (download) - annotate - [select for diffs], Fri May 22 10:56:36 2020 UTC (3 years ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2020Q3-base, pkgsrc-2020Q3, pkgsrc-2020Q2-base, pkgsrc-2020Q2
Changes since 1.48: +2 -2 lines
Diff to previous 1.48 (colored)

revbump after updating security/nettle

Revision 1.48 / (download) - annotate - [select for diffs], Sun Mar 8 16:51:07 2020 UTC (3 years, 3 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2020Q1-base, pkgsrc-2020Q1
Changes since 1.47: +2 -2 lines
Diff to previous 1.47 (colored)

*: recursive bump for libffi

Revision 1.47 / (download) - annotate - [select for diffs], Sat Jan 18 23:35:07 2020 UTC (3 years, 4 months ago) by rillig
Branch: MAIN
Changes since 1.46: +2 -2 lines
Diff to previous 1.46 (colored)

all: migrate several HOMEPAGEs to https

pkglint --only "https instead of http" -r -F

With manual adjustments afterwards since pkglint 19.4.4 fixed a few
indentations in unrelated lines.

This mainly affects projects hosted at SourceForce, as well as, CTAN and GNU.

Revision 1.46 / (download) - annotate - [select for diffs], Sat Jan 18 21:50:38 2020 UTC (3 years, 4 months ago) by jperkin
Branch: MAIN
Changes since 1.45: +2 -2 lines
Diff to previous 1.45 (colored)

*: Recursive revision bump for openssl 1.1.1.

Revision 1.45 / (download) - annotate - [select for diffs], Sat Jul 20 22:46:47 2019 UTC (3 years, 10 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2019Q4-base, pkgsrc-2019Q4, pkgsrc-2019Q3-base, pkgsrc-2019Q3
Changes since 1.44: +2 -2 lines
Diff to previous 1.44 (colored)

*: recursive bump for nettle 3.5.1

Revision 1.44 / (download) - annotate - [select for diffs], Tue Apr 17 22:29:49 2018 UTC (5 years, 1 month ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2019Q2-base, pkgsrc-2019Q2, pkgsrc-2019Q1-base, pkgsrc-2019Q1, pkgsrc-2018Q4-base, pkgsrc-2018Q4, pkgsrc-2018Q3-base, pkgsrc-2018Q3, pkgsrc-2018Q2-base, pkgsrc-2018Q2
Changes since 1.43: +2 -2 lines
Diff to previous 1.43 (colored)

Add p11-kit to gnutls/ and bump dependencies.

Revision 1.43 / (download) - annotate - [select for diffs], Mon Sep 19 13:04:26 2016 UTC (6 years, 8 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2018Q1-base, pkgsrc-2018Q1, pkgsrc-2017Q4-base, pkgsrc-2017Q4, pkgsrc-2017Q3-base, pkgsrc-2017Q3, pkgsrc-2017Q2-base, pkgsrc-2017Q2, pkgsrc-2017Q1-base, pkgsrc-2017Q1, pkgsrc-2016Q4-base, pkgsrc-2016Q4, pkgsrc-2016Q3-base, pkgsrc-2016Q3
Changes since 1.42: +2 -2 lines
Diff to previous 1.42 (colored)

Recursive PKGREVISION bump for gnutls shlib major bump.

Revision 1.42 / (download) - annotate - [select for diffs], Sat Mar 5 11:29:21 2016 UTC (7 years, 3 months ago) by jperkin
Branch: MAIN
CVS Tags: pkgsrc-2016Q2-base, pkgsrc-2016Q2, pkgsrc-2016Q1-base, pkgsrc-2016Q1
Changes since 1.41: +2 -2 lines
Diff to previous 1.41 (colored)

Bump PKGREVISION for security/openssl ABI bump.

Revision 1.41 / (download) - annotate - [select for diffs], Sun Aug 23 14:30:40 2015 UTC (7 years, 9 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2015Q4-base, pkgsrc-2015Q4, pkgsrc-2015Q3-base, pkgsrc-2015Q3
Changes since 1.40: +2 -2 lines
Diff to previous 1.40 (colored)

Bump PKGREVISION for nettle shlib major bump.

Revision 1.40 / (download) - annotate - [select for diffs], Wed Feb 12 23:18:32 2014 UTC (9 years, 3 months ago) by tron
Branch: MAIN
CVS Tags: pkgsrc-2015Q2-base, pkgsrc-2015Q2, pkgsrc-2015Q1-base, pkgsrc-2015Q1, pkgsrc-2014Q4-base, pkgsrc-2014Q4, pkgsrc-2014Q3-base, pkgsrc-2014Q3, pkgsrc-2014Q2-base, pkgsrc-2014Q2, pkgsrc-2014Q1-base, pkgsrc-2014Q1
Changes since 1.39: +2 -2 lines
Diff to previous 1.39 (colored)

Recursive PKGREVISION bump for OpenSSL API version bump.

Revision 1.39 / (download) - annotate - [select for diffs], Wed Jan 1 11:52:02 2014 UTC (9 years, 5 months ago) by wiz
Branch: MAIN
Changes since 1.38: +2 -2 lines
Diff to previous 1.38 (colored)

Recursive PKGREVISION bump for libgcrypt-1.6.0 shlib major bump.

Revision 1.38 / (download) - annotate - [select for diffs], Mon Jul 15 02:02:28 2013 UTC (9 years, 10 months ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2013Q4-base, pkgsrc-2013Q4, pkgsrc-2013Q3-base, pkgsrc-2013Q3
Changes since 1.37: +2 -2 lines
Diff to previous 1.37 (colored)

* .include "../../devel/readline/" with USE_GNU_READLINE=yes
  are replaced with .include "../../devel/readline/", and
  USE_GNU_READLINE are removed,

* .include "../../devel/readline/" without USE_GNU_READLINE
  are replaced with .include "../../mk/".

Revision 1.37 / (download) - annotate - [select for diffs], Wed Feb 6 23:23:37 2013 UTC (10 years, 4 months ago) by jperkin
Branch: MAIN
CVS Tags: pkgsrc-2013Q2-base, pkgsrc-2013Q2, pkgsrc-2013Q1-base, pkgsrc-2013Q1
Changes since 1.36: +2 -2 lines
Diff to previous 1.36 (colored)

PKGREVISION bumps for the security/openssl 1.0.1d update.

Revision 1.36 / (download) - annotate - [select for diffs], Tue Oct 23 18:16:29 2012 UTC (10 years, 7 months ago) by asau
Branch: MAIN
CVS Tags: pkgsrc-2012Q4-base, pkgsrc-2012Q4
Changes since 1.35: +1 -3 lines
Diff to previous 1.35 (colored)

Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.

Revision 1.35 / (download) - annotate - [select for diffs], Thu Jul 5 15:44:07 2012 UTC (10 years, 11 months ago) by drochner
Branch: MAIN
CVS Tags: pkgsrc-2012Q3-base, pkgsrc-2012Q3
Changes since 1.34: +2 -1 lines
Diff to previous 1.34 (colored)

more PKGREV bumps for gnutls update

Revision 1.34 / (download) - annotate - [select for diffs], Wed May 30 06:52:58 2012 UTC (11 years ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2012Q2-base, pkgsrc-2012Q2
Changes since 1.33: +2 -3 lines
Diff to previous 1.33 (colored)

Changes 1.8.0:
This is a new major stable release.  Brief changes compared to 1.6.x:
* SAML20 support following RFC 6595.
* OPENID20 support following RFC 6616.
* Added SMTP server examples (for e.g., SCRAM, SAML20, OPENID20).
* Various cleanups, portability and other bug fixes.
See the NEWS entries during the 1.7.x branch for details.

Revision 1.33 / (download) - annotate - [select for diffs], Thu Nov 24 09:04:18 2011 UTC (11 years, 6 months ago) by marino
Branch: MAIN
CVS Tags: pkgsrc-2012Q1-base, pkgsrc-2012Q1, pkgsrc-2011Q4-base, pkgsrc-2011Q4
Changes since 1.32: +2 -1 lines
Diff to previous 1.32 (colored)

security/gsasl: Remove windows function

gss-extra.c fails compilation on DragonFly:
line 43: error: unexpected identifier or '(' before '&' token

It's on code that is only intended for a windows target. Gentoo patched
it by wrapping it in "if (defined _WIN32 || defined __WIN32__)" macro
which is effectively the same is deleting the definition completely,
which is what is being done here.

Revision 1.32 / (download) - annotate - [select for diffs], Wed Jun 1 10:05:57 2011 UTC (12 years ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2011Q3-base, pkgsrc-2011Q3, pkgsrc-2011Q2-base, pkgsrc-2011Q2
Changes since 1.31: +3 -3 lines
Diff to previous 1.31 (colored)

Changes 1.6.1:
* build: Demand gettext >= 0.18.1 in order to get newer M4 files.
  The old M4 files associated with 0.17 caused problems on Solaris,
  which will hopefully be fixed with this.
* doc: Typo fix in autoconf snippet.
* i18n: Updated translations.

Revision 1.31 / (download) - annotate - [select for diffs], Fri Apr 22 13:42:05 2011 UTC (12 years, 1 month ago) by obache
Branch: MAIN
Changes since 1.30: +2 -1 lines
Diff to previous 1.30 (colored)

recursive bump from gettext-lib shlib bump.

Revision 1.30 / (download) - annotate - [select for diffs], Thu Dec 23 18:03:48 2010 UTC (12 years, 5 months ago) by christos
Branch: MAIN
CVS Tags: pkgsrc-2011Q1-base, pkgsrc-2011Q1, pkgsrc-2010Q4-base, pkgsrc-2010Q4
Changes since 1.29: +2 -2 lines
Diff to previous 1.29 (colored)

de to 1.6.0 from Anon Ymous

Changes since 1.1:

** gsasl: Add --no-cb to disable use of TLS channel bindings.
** build: Use silent build rules via automake.
    Use 'make V=99' to see the command lines used.
** Update gnulib files.
** gsasl: Support for TLS channel bindings.
    Requires GnuTLS 2.11.4 or later for the gnutls_session_channel_binding
    function.  Used by the SCRAM-SHA-1-PLUS mechanism.
** doc: Mention new property GSASL_CB_TLS_UNIQUE and SCRAM-SHA-1-PLUS.
** tests: Added self-tests for SCRAM-SHA-1-PLUS.
** gsasl: Avoid fixed size buffers.
    This caused problems on Windows where the BUFSIZ was too small for
    some line lengths with GS2-KRB5.
** tests: Fix error strings to be more unique.
** doc: Added section on how to build with MIT Kerberos for Windows.
** doc: Added PDF version of API reference manual.
    See doc/reference/gsasl.pdf.
** i18n: Updated translations.
    Thanks to Benno Schulenberg.
** doc: Explain GS2-related changes.
** doc: GTK-DOC manual improved.
    Now almost all symbols and types are explained.
** gsasl: Fix crash when getaddrinfo does not get a canonical name.
** gsasl: Improve error message when server rejects authentication.
** tests: Self checks are improved.
** gsasl: Improve application data throughput.
    Patch from Enrico Scholz <> in
** Improve MinGW builds.
** doc: Fix doc/cyclo/ output.
** tests/crypto: Also test newly added SHA-1 interfaces.
** tests/scram: Also test GSASL_SCRAM_SALTED_PASSWORD case.
    This code path triggered a crash in v1.3.
** i18n: Added Finnish translation.
    Thanks to Jorma Karvonen <>.
** Experimental support for SCRAM-SHA-1 added.
    Please test it but don't put it into production use, the RFC have not
    been finalized yet.  For this reason, the mechanism priority list is
    such that SCRAM-SHA-1 will never be selected over any other mechanism
    (including PLAIN, CRAM-MD5, and DIGEST-MD5).  When it has been tested
    further, we'll make SCRAM-SHA-1 the preferred mechanism after GSSAPI.
** gsasl: Fix libintl-related build errors on MinGW.
    Tiny patch from "carlo.bramix" <>.
** doc: Typo fixes to manual.
    Based on report by Marco Maggi <> in
** tests: Rewrite basic self test using modern API.
** tests: New self-test 'crypto' to increase code coverage.
** gsasl: Fix out of bounds write when in IMAP/SMTP mode.
    Reported by Enrico Scholz <> in
** doc: Rewritten introduction material.
** doc: Improved sections for the info manual.
    We now follow the advice given by the texinfo manual on which
    directory categories to use.  In particular, libgsasl moved from the
    'GNU Libraries' section to the 'Software libraries' as GNU SASL, and
    'Invoking gsasl' moved from 'GNU utilities' to 'Security'.
** examples: Removed unneeded 'ctx' parameter from client_authenticate.
** Building with many warning flags now requires --enable-gcc-warnings.
    This avoids crying wolf for normal compiles.
** New configure parameters to set packaging specific information.
    The parameters are --with-packager, --with-packager-version, and
    --with-packager-bug-reports.  See
    <> for more

Revision 1.29 / (download) - annotate - [select for diffs], Sat Jul 24 10:43:33 2010 UTC (12 years, 10 months ago) by sborrill
Branch: MAIN
CVS Tags: pkgsrc-2010Q3-base, pkgsrc-2010Q3
Changes since 1.28: +2 -1 lines
Diff to previous 1.28 (colored)

Add openssl to deal with partial bulk builds and pkgsrc ssl

Revision 1.28 / (download) - annotate - [select for diffs], Thu Jun 4 18:38:30 2009 UTC (14 years ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2010Q2-base, pkgsrc-2010Q2, pkgsrc-2010Q1-base, pkgsrc-2010Q1, pkgsrc-2009Q4-base, pkgsrc-2009Q4, pkgsrc-2009Q3-base, pkgsrc-2009Q3, pkgsrc-2009Q2-base, pkgsrc-2009Q2
Changes since 1.27: +3 -5 lines
Diff to previous 1.27 (colored)

Changes 1.1:
* Reading integrity protected data from server now works.
* The --quality-of-protection parameter now works.
* Only detect sufficiently recent GnuTLS versions.

Changes 1.0:
* New parameter --priority to specify GnuTLS priority strings.
* Print web page links in --help, per new GNU coding standard.
* New self-test for the gsasl_client_suggest_mechanism function.
* Modernize doxygen configuration.
* Use permissive license for man pages.
* Change license on the manual to GFDLv1.3+.

Revision 1.27 / (download) - annotate - [select for diffs], Wed May 20 00:58:26 2009 UTC (14 years ago) by wiz
Branch: MAIN
Changes since 1.26: +2 -1 lines
Diff to previous 1.26 (colored)

Recursive ABI depends update and PKGREVISION bump for readline-6.0 shlib
major change.

Reported by Robert Elz in PR 41345.

Revision 1.26 / (download) - annotate - [select for diffs], Fri Nov 7 18:40:52 2008 UTC (14 years, 7 months ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2009Q1-base, pkgsrc-2009Q1, pkgsrc-2008Q4-base, pkgsrc-2008Q4
Changes since 1.25: +2 -2 lines
Diff to previous 1.25 (colored)

Changes 0.2.29:
* gsasl: Don't use poll with POLLOUT to avoid busy-waiting.
* doc: Error codes are now extracted using official library APIs.
* doc: Included cyclomatic code complexity charts of the library code.
* tests: Add self test of obsolete base64 functions.
* Update gnulib files. Improves Windows compatibility.

Revision 1.25 / (download) - annotate - [select for diffs], Mon Sep 8 08:58:49 2008 UTC (14 years, 9 months ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2008Q3-base, pkgsrc-2008Q3, cube-native-xorg-base, cube-native-xorg
Changes since 1.24: +2 -2 lines
Diff to previous 1.24 (colored)

Changes 0.2.28:
* Rewrite to use poll instead of select.
* Improve Windows installation instructions in the manual.
* tests: New self test of gsasl_mechanism_name function.

Revision 1.24 / (download) - annotate - [select for diffs], Thu Aug 14 10:01:03 2008 UTC (14 years, 9 months ago) by adam
Branch: MAIN
Changes since 1.23: +2 -2 lines
Diff to previous 1.23 (colored)

Changes 0.2.27:
* Fix SASL operations through TLS.
* Update gnulib files, and include gnulib self-tests.
* Update translations.

Revision 1.23 / (download) - annotate - [select for diffs], Wed May 21 15:22:56 2008 UTC (15 years ago) by obache
Branch: MAIN
CVS Tags: pkgsrc-2008Q2-base, pkgsrc-2008Q2, cwrapper
Changes since 1.22: +5 -4 lines
Diff to previous 1.22 (colored)

Update gsasl to 0.2.26.
Based on patch provided by Eric Schnoebelen in PR 38692.
While here, marked as DESTDIR support.
Also fix CONFIGURE option for GSSAPI implement (I don't know from when).

* Version 0.2.26 (released 2008-05-05)

** Translations files not stored directly in git to avoid merge conflicts.
This allows us to avoid use of --no-location which makes the
translation teams happier.

** Build fixes for the documentation.

** Update gnulib files.

* Version 0.2.25 (released 2008-03-10)

** gsasl: Fix buffering issue to avoid mixing stdout/stderr outputs.
This would manifest itself when redirecting output to a pipe, such as
when used with Gnus.  Reported by Enrico Scholz
<>, see

** Fix non-portable use of brace expansion in makefiles.

* Version 0.2.24 (released 2008-01-15)

** Link self-tests with gnulib, to fix link failures under MinGW.

* Version 0.2.23 (released 2008-01-15)

** Improve CRAM-MD5 self-test to detect if challenges are the same.

** Improve gsasl --help and --version to conform with GNU standards.

** Use gettext 0.17.

** Update gnulib files.

* Version 0.2.22 (released 2007-10-08)

** Development git tree moved to savannah.
See <>.

** Fix warnings when building the tool 'gsasl'.

** Update gnulib files.

Revision 1.22 / (download) - annotate - [select for diffs], Thu Mar 6 14:53:53 2008 UTC (15 years, 3 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2008Q1-base, pkgsrc-2008Q1
Changes since 1.21: +2 -1 lines
Diff to previous 1.21 (colored)

Recursive PKGREVISION bump for gnutls-2.2.2 update with shlib major bump.

Revision 1.21 / (download) - annotate - [select for diffs], Thu Oct 25 21:24:53 2007 UTC (15 years, 7 months ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2007Q4-base, pkgsrc-2007Q4
Changes since 1.20: +13 -16 lines
Diff to previous 1.20 (colored)

Changes 0.2.21:
* Fix typos in manual.
* Update gnulib files.

Revision 1.20 / (download) - annotate - [select for diffs], Tue Jun 5 05:37:34 2007 UTC (16 years ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2007Q3-base, pkgsrc-2007Q3, pkgsrc-2007Q2-base, pkgsrc-2007Q2
Changes since 1.19: +2 -1 lines
Diff to previous 1.19 (colored)

opencdk shlib major changed; bump ABI depends and PKGREVISIONs of
affected packages.

Revision 1.19 / (download) - annotate - [select for diffs], Sat Dec 9 14:06:13 2006 UTC (16 years, 6 months ago) by obache
Branch: MAIN
CVS Tags: pkgsrc-2007Q1-base, pkgsrc-2007Q1, pkgsrc-2006Q4-base, pkgsrc-2006Q4
Changes since 1.18: +12 -7 lines
Diff to previous 1.18 (colored)

Update gsasl to 0.2.15, based on patch provided by PR 33638.

* Version 0.2.15 (released 2006-08-22)

** Changed libgsasl shared library version.
The shared library version was not incremented correctly in the last
release, even though new APIs were added.

* Version 0.2.14 (released 2006-08-19)

** New section "Requirements" in the manual, lists the external components.
Suggested by James Mansion.

** Update of gnulib files.

* Version 0.2.13 (released 2006-06-14)

** Update of gnulib files.
Further improves portability to MinGW.

** Various improvements in the manuals.

** The tests are run under valgrind, if it is installed.
Use --disable-valgrind-tests to unconditionally disable this.  It is
disabled by default for cross compiles.

** Various minor fixes.

* Version 0.2.12 (released 2006-03-08)

** Update of gnulib files.
Improves portability to Mingw32.

* Version 0.2.11 (released 2006-02-07)

** Ported to Windows by cross-compiling using Mingw32.
Using Debian's mingw32 compiler, you can build it for Windows by invoking
`./configure --host=i586-mingw32msvc --disable-gssapi'.

** Update of gnulib files.

* Version 0.2.10 (released 2005-10-23)

** Work around bug in GnuTLS that made the command line tool exit after
** failing to write a zero length message to the peer.

** Don't use GnuTLS if gnutls_certificate_verify_peers2 isn't present.

** Update of gnulib files.

* Version 0.2.9 (released 2005-10-07)

** Update of gnulib files.

* Version 0.2.8 (released 2005-09-08)

** The gsasl tool now support STARTTLS for IMAP and SMTP using GnuTLS.

** The --client and --server parameters for the gsasl tool now work properly.

** The --client and --server stdin/stdout modes now use the readline library.

** Fixed build problems in getpass on uClibc and Mingw32 platforms.

** Kinyarwanda translation added.

* Version 0.2.7 (released 2005-08-25)

** Fix build problems when cross-compiling to uClibc and Mingw32 platforms.

** Detecting and using the readline library has been improved.

* Version 0.2.6 (released 2005-08-08)

** The gsasl tool now try to connect to all addresses for a server name.

** The mailing list is now mentioned in documentation.

** The license template in files were updated with the new FSF address.

** Update of gnulib files.

Revision 1.18 / (download) - annotate - [select for diffs], Thu Apr 13 18:23:37 2006 UTC (17 years, 1 month ago) by jlam
Branch: MAIN
CVS Tags: pkgsrc-2006Q3-base, pkgsrc-2006Q3, pkgsrc-2006Q2-base, pkgsrc-2006Q2
Changes since 1.17: +2 -4 lines
Diff to previous 1.17 (colored)

BUILD_USE_MSGFMT and USE_MSGFMT_PLURALS are obsolete.  Replace with

Revision 1.17 / (download) - annotate - [select for diffs], Fri Mar 31 23:56:29 2006 UTC (17 years, 2 months ago) by jlam
Branch: MAIN
Changes since 1.16: +2 -3 lines
Diff to previous 1.16 (colored)

List the info pages directly in the PLIST and ensure that we honor

Revision 1.16 / (download) - annotate - [select for diffs], Sat Mar 4 21:30:34 2006 UTC (17 years, 3 months ago) by jlam
Branch: MAIN
CVS Tags: pkgsrc-2006Q1-base, pkgsrc-2006Q1
Changes since 1.15: +2 -2 lines
Diff to previous 1.15 (colored)

Point MAINTAINER to in the case where no
developer is officially maintaining the package.

The rationale for changing this from "tech-pkg" to "pkgsrc-users" is
that it implies that any user can try to maintain the package (by
submitting patches to the mailing list).  Since the folks most likely
to care about the package are the folks that want to use it or are
already using it, this would leverage the energy of users who aren't

Revision 1.15 / (download) - annotate - [select for diffs], Sun Feb 5 23:10:44 2006 UTC (17 years, 4 months ago) by joerg
Branch: MAIN
Changes since 1.14: +2 -1 lines
Diff to previous 1.14 (colored)

Recursive revision bump / recommended bump for gettext ABI change.

Revision 1.14 / (download) - annotate - [select for diffs], Wed Aug 10 20:56:23 2005 UTC (17 years, 10 months ago) by jlam
Branch: MAIN
CVS Tags: pkgsrc-2005Q4-base, pkgsrc-2005Q4, pkgsrc-2005Q3-base, pkgsrc-2005Q3
Changes since 1.13: +2 -2 lines
Diff to previous 1.13 (colored)

Remove the abuse of buildlink that was pkg-config/  That
file's sole purpose was to provide a dependency on pkg-config and set
some environment variables.  Instead, turn pkg-config into a "tool"
in the tools framework, where the pkg-config wrapper automatically
adds PKG_CONFIG_LIBDIR to the environment before invoking the real

For all package Makefiles that included pkg-config/, remove
that inclusion and replace it with USE_TOOLS+=pkg-config.

Revision 1.13 / (download) - annotate - [select for diffs], Thu Jul 21 16:29:56 2005 UTC (17 years, 10 months ago) by wiz
Branch: MAIN
Changes since 1.12: +2 -2 lines
Diff to previous 1.12 (colored)

Change path from devel/pkgconfig to devel/pkg-config.
No PKGREVISION bump since pkg-config is only a BUILD_DEPENDS.

Revision 1.12 / (download) - annotate - [select for diffs], Mon Apr 11 21:47:12 2005 UTC (18 years, 2 months ago) by tv
Branch: MAIN
CVS Tags: pkgsrc-2005Q2-base, pkgsrc-2005Q2
Changes since 1.11: +1 -2 lines
Diff to previous 1.11 (colored)

Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used.

Revision 1.11 / (download) - annotate - [select for diffs], Mon Feb 28 13:29:31 2005 UTC (18 years, 3 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2005Q1-base, pkgsrc-2005Q1
Changes since 1.10: +2 -2 lines
Diff to previous 1.10 (colored)

Update to 0.2.5:
* Version 0.2.5 (released 2005-02-08)

** Added self test of EXTERNAL mechanism.

** Vietnamese translation added, thanks to Clytie Siddall.

* Version 0.2.4 (released 2005-01-01)

** The CRAM-MD5 mechanism is now preferred over DIGEST-MD5.
This decision was based on recent public research that suggest MD5 is
broken, while HMAC-MD5 not immediately compromised, and the lack of
public analysis on what consequences the MD5 break have for
DIGEST-MD5.  Support for CRAM-SHA1 is under investigation, to enable
users to avoid MD5 completely

** Fixed a bug that prevented SMTP client from working.

** New configure option --disable-obsolete to remove backwards compatibility.
This is mostly intended to be used when compiling for platforms with
constrained memory/space resources.

** DIGEST-MD5 rewritten and enabled by default (see lib/NEWS for details).

** Command line tool now query for realm, hostname and service name properly.

** Documentation updates and improvements.

** Self test improvements.

** Update of gnulib files.

Revision 1.10 / (download) - annotate - [select for diffs], Sun Dec 26 22:56:09 2004 UTC (18 years, 5 months ago) by wiz
Branch: MAIN
Changes since 1.9: +4 -3 lines
Diff to previous 1.9 (colored)

Update to 0.2.3.

* Version 0.2.3 (released 2004-12-15)

** Fix example code to handle base64 encoded data properly.

** DIGEST-MD5 is disabled by default, pending a rewrite for the new API.

** Command line tool uses new callback interface to the library.

** Command line tool uses "iconvme" from gnulib for UTF-8 string conversion.

** Server mode in the command line tool does not work currently.
It is unclear if this feature was ever that useful.  If there are no
objections, it will be removed completely in future versions.

** Documentation fixes.

** Fix self test bugs.

* Version 0.2.2 (released 2004-11-29)

** Update of gnulib files.

* Version 0.2.1 (released 2004-11-19)

** Documentation fixes; the old callback API functions are marked as obsolete.

* Version 0.2.0 (released 2004-11-07)

** Added new directory examples/ with complete examples for new API.

** Documentation improvements.
For example, you can now browse the GNU SASL API manual using DevHelp.

** Update of gnulib files.

** More self tests.

** Translation fixes.

Revision 1.9 / (download) - annotate - [select for diffs], Sun Oct 3 00:18:09 2004 UTC (18 years, 8 months ago) by tv
Branch: MAIN
CVS Tags: pkgsrc-2004Q4-base, pkgsrc-2004Q4
Changes since 1.8: +2 -1 lines
Diff to previous 1.8 (colored)

Libtool fix for PR pkg/26633, and other issues.  Update libtool to 1.5.10
in the process.  (More information on tech-pkg.)

Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and
installing .la files.

Bump PKGREVISION (only) of all packages depending directly on the above
via a buildlink3 include.

Revision 1.8 / (download) - annotate - [select for diffs], Sun Sep 19 12:48:45 2004 UTC (18 years, 8 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2004Q3-base, pkgsrc-2004Q3
Changes since 1.7: +2 -3 lines
Diff to previous 1.7 (colored)

Update to 0.1.4, provided by Sergio Jimenez in PR 26974.
Changes since 0.0.8:

* Changes in 0.1.4 (released 2004-08-08)

** Revamp of gnulib compatibility files.

** More translations.
German (by Roland Illig), Basque (by Mikel Olasagasti), French (by
Michel Robitaille), Irish (by Kevin Patrick Scannell), Dutch (by Elros
Cyriatan), Polish (by Jakub Bogusz), Romanian (by Laurentiu Buzdugan),
and Serbian (by Aleksandar Jelenak).

* Changes in 0.1.3 (released 2004-08-04)

** Command line tool support IPv6 (and other protocol families).
Requires that your system has `getaddrinfo'.

** Command line behaviour for gsasl tool improved.
The --client and --imap parameters are now the default.  The --connect
host and port can now be specified directly.  If --authentication-id
is not specified, the username of the user invoking gsasl is used
(i.e., getpwuid(getuid)->pw_name).  Alltogether, this allows simple
usage, as in `gsasl' to connect, via IMAP, to

* Changes in 0.1.2 (released 2004-07-16)

** The SMTP mode in `gsasl' should now work.

** Cross compile builds should work.
It should work for any sane cross compile target, but the only tested
platform is uClibc/uClinux on Motorola Coldfire.

** The GNU Readline library is used to read data, if available.

** Passwords read from stdin are not echoed to the terminal.

* Changes in 0.1.1 (released 2004-06-26)

** In the command line client, the default quality of protection is now none.

* Changes in 0.1.0 (released 2004-04-16)

** The library re-licensed to LGPL and distributed as a separate package.
This means a fork of this NEWS file, all the entries below relate to
the combined work of earlier versions.  New entries above does not
document user visible changes for the library ("libgsasl"), for that
see NEWS in the lib/ sub-directory, which is also distributed as a
stand-alone package.

* Changes in 0.0.14 (released 2004-01-22)

** Moved all mechanism specific code into sub-directories of lib/.
Each backend is built into its own library (e.g.,,
to facilitate future possible use of dlopen to dynamically load

** Moved compatibility files (getopt*) to gl/, and added more (strdup*).

* Changes in 0.0.13 (released 2004-01-17)

** Nettle (the crypto functionality, crypto/) has been updated.
This fixes two portability issues, the new code should work on
platforms that doesn't have inttypes.h and alloca.

* Changes in 0.0.12 (released 2004-01-15)

** Protocol line parser in 'gsasl' tool more reliable.
Earlier it assumed two lines were sent in one packet in one place, and
sent as two packets in another place.

** Various bugfixes.

* Changes in 0.0.11 (released 2004-01-06)

** The client part of CRAM-MD5 now uses SASLprep instead of NFKC.
This aligns with draft-ietf-sasl-crammd5-01.

** The CRAM-MD5 challenge string now conform to the proper syntax.

** The string preparation (SASLprep and trace) functions now work correctly.

** DocBook manuals no longer included.
The reason is that recent DocBook tools from the distribution I use
(Debian) fails with an error.  DocBook manuals may be included in the
future, if I can get the tools to work.

** API and ABI modifications.

* Changes in 0.0.10 (released 2003-11-22)

** The CRAM-MD5 server now reject invalid passwords.
The logic flaw was introduced in 0.0.9, after blindly making code
changes to shut up valgrind just before the release.

** Various build improvements.
Pkg-config is no longer needed.  GTK-DOC is only used if present.

* Changes in 0.0.9 (released 2003-11-21)

** Command line client can talk to SMTP servers with --smtp.

** DocBook manuals in XML, PDF, PostScript, ASCII and HTML formats included.

** Token parser in DIGEST-MD5 fixed, improve interoperability of DIGEST-MD5.

** Libgcrypt >= 1.1.42 is used if available (for CRAM-MD5 and DIGEST-MD5).
The previous libgcrypt API is no longer supported.

** CRAM-MD5 and DIGEST-MD5 no longer require libgcrypt (but can still use it).
If libgcrypt 1.1.42 or later is not found, it uses a minimalistic
cryptographic library based on Nettle, from crypto/.  Currently only
MD5 and HMAC-MD5 is needed, making a dependence on libgcrypt overkill.

** Listing supported server mechanisms with gsasl_server_mechlist work.

** Autoconf 2.59, Automake 1.8 beta, Libtool CVS used.

** Source code for each SASL mechanism moved to its own sub-directory in lib/.

** The command line interface now uses getopt instead of argp.
The reason is portability, this also means we no longer use gnulib.

** API and ABI modifications.
gsasl_randomize: ADD.
gsasl_md5: ADD.
gsasl_hmac_md5: ADD.

gsasl_hexdump: REMOVED.  Never intended to be exported.

gsasl_step: ADD.
gsasl_step64: ADD.
gsasl_client_step: DEPRECATED: use gsasl_step instead.
gsasl_server_step: DEPRECATED: use gsasl_step instead.
gsasl_client_step_base64: DEPRECATED: use gsasl_step64 instead.
gsasl_server_step_base64: DEPRECATED: use gsasl_step64 instead.

gsasl_finish: ADD.
gsasl_client_finish: DEPRECATED: use gsasl_finish instead.
gsasl_server_finish: DEPRECATED: use gsasl_finish instead.

gsasl_ctx_get: ADD.
gsasl_client_ctx_get: DEPRECATED: use gsasl_ctx_get instead.
gsasl_server_ctx_get: DEPRECATED: use gsasl_ctx_get instead.

gsasl_appinfo_get: ADD.
gsasl_appinfo_set: ADD.
gsasl_client_application_data_get: DEPRECATED: use gsasl_appinfo_get instead.
gsasl_client_application_data_set: DEPRECATED: use gsasl_appinfo_set instead.
gsasl_server_application_data_get: DEPRECATED: use gsasl_appinfo_get instead.
gsasl_server_application_data_set: DEPRECATED: use gsasl_appinfo_set instead.

Gsasl: ADD.
Gsasl_ctx: DEPRECATED: use Gsasl instead.
Gsasl_session: ADD.
Gsasl_session_ctx: DEPRECATED: use Gsasl_session instead.




Revision 1.7 / (download) - annotate - [select for diffs], Wed May 26 14:55:46 2004 UTC (19 years ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2004Q2-base, pkgsrc-2004Q2
Changes since 1.6: +2 -2 lines
Diff to previous 1.6 (colored)

PKGREVISION bump because of libidn shlib major bump.

Revision 1.6 / (download) - annotate - [select for diffs], Fri May 7 01:14:49 2004 UTC (19 years, 1 month ago) by xtraeme
Branch: MAIN
Changes since 1.5: +2 -2 lines
Diff to previous 1.5 (colored)

Drop maintainership; I don't have the enough free time to maintain
all these packages.

Revision 1.5 / (download) - annotate - [select for diffs], Wed Feb 25 15:53:17 2004 UTC (19 years, 3 months ago) by minskim
Branch: MAIN
CVS Tags: pkgsrc-2004Q1-base, pkgsrc-2004Q1
Changes since 1.4: +2 -2 lines
Diff to previous 1.4 (colored)

Bump PKGREVISION due to the update of libgcrypt.

Revision 1.4 / (download) - annotate - [select for diffs], Sat Feb 14 18:26:28 2004 UTC (19 years, 3 months ago) by jmmv
Branch: MAIN
Changes since 1.3: +2 -2 lines
Diff to previous 1.3 (colored)


Revision 1.3 / (download) - annotate - [select for diffs], Sat Feb 14 17:21:52 2004 UTC (19 years, 3 months ago) by jlam
Branch: MAIN
Changes since 1.2: +1 -2 lines
Diff to previous 1.2 (colored)

LIBTOOL_OVERRIDE and SHLIBTOOL_OVERRIDE are now lists of shell globs
relative to ${WRKSRC}.  Remove redundant LIBTOOL_OVERRIDE settings that
are automatically handled by the default setting in

Revision 1.2 / (download) - annotate - [select for diffs], Tue Feb 10 00:17:51 2004 UTC (19 years, 4 months ago) by jlam
Branch: MAIN
Changes since 1.1: +9 -10 lines
Diff to previous 1.1 (colored)

bl3ify, and bump the PKGREVISION due to gss dependency update.

Revision 1.1 / (download) - annotate - [select for diffs], Wed Dec 3 19:23:13 2003 UTC (19 years, 6 months ago) by xtraeme
Branch: MAIN

Initial revision

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.

CVSweb <>