GNU SASL 0.2.26

[Simon Josefsson]

GNU SASL is a modern C library that implement the standard network
security protocol Simple Authentication and Security Layer (SASL).  The
framework and a couple of common SASL mechanisms are implemented.  GNU
SASL can be used by network applications for IMAP, SMTP and similar
protocols to provide authentication services (and more).

Top-level NEWS entries:

* Version 0.2.26 (released 2008-05-05)

** Translations files not stored directly in git to avoid merge conflicts.
This allows us to avoid use of --no-location which makes the
translation teams happier.

** Build fixes for the documentation.

** Update gnulib files.

Library (lib/) NEWS entries:

* Version 0.2.26 (released 2008-05-05)

** Translations files not stored directly in git to avoid merge conflicts.
This allows us to avoid use of --no-location which makes the
translation teams happier.

** DIGEST-MD5 server: don't reject authentication if client doesn't use utf-8.
Before, authentication from all non-UTF-8 clients were simply
rejected.  When this situation occurs now, the username is translated
into UTF-8 before being passed on to applications.  Further, the
password retrieved from the application is converted from UTF-8 to
ISO-8859-1 if that is possible.

Reported by marty <address@hidden> in
<http://lists.gnu.org/archive/html/help-gsasl/2008-03/msg00002.html>.
See also <http://jabberd2.xiaoka.com/ticket/200> and
<http://developer.pidgin.im/ticket/5213>.  Thanks to Pawel Widera
<address@hidden> for testing and fixing a silly typo in the code
that prevented it from working.

** DIGEST-MD5 client: convert password from UTF-8 to ISO-8859-1 before hash.
For compatibility with server.

** API and ABI modifications.
No changes since last version.

Instructions for how to build GNU SASL under uClinux are available from
<http://josefsson.org/uclinux/>.  If your uClinux toolchain is broken,
it is possible to build GNU SASL without using the ./configure
mechanism, see <http://josefsson.org/uclinux/old/>.

Improving GNU SASL is costly, but you can help!  We are looking for
organizations that find GNU SASL useful and wish to contribute back.
You can contribute by reporting bugs, improve the software, purchase
support contracts, or donate money or equipment.

Commercial support contracts for GNU SASL are available, and they help
finance continued maintenance.  Simon Josefsson Datakonsult, a
Stockholm based privately held company, is currently funding GNU SASL
maintenance.  We are always looking for interesting development
projects.  See http://josefsson.org/ for more details.

All manual formats are available from:
  http://josefsson.org/gsasl/manual/

Specifically, the following formats are available.

The main manual:
  http://josefsson.org/gsasl/manual/gsasl.html - HTML format
  http://josefsson.org/gsasl/manual/gsasl.pdf - PDF format

API Reference manual:
  http://josefsson.org/gsasl/reference/ch01.html - GTK-DOC HTML

Doxygen documentation:
  http://josefsson.org/gsasl/doxygen/ - HTML format
  http://josefsson.org/gsasl/doxygen/gsasl.pdf - PDF format

If you need help to use GNU SASL, or want to help others, you are
invited to join our help-gsasl mailing list, see:
<http://lists.gnu.org/mailman/listinfo/help-gsasl>.

The project page of the library is available at:
  http://www.gnu.org/software/gsasl/
  http://josefsson.org/gsasl/

Here are the build reports for various platforms:
  http://autobuild.josefsson.org/gsasl/

Daily builds of the package are available from:
  http://daily.josefsson.org/gsasl/

Here are the compressed sources of the entire package:
  http://josefsson.org/gsasl/releases/gsasl-0.2.26.tar.gz   (3.3MB)
  http://josefsson.org/gsasl/releases/gsasl-0.2.26.tar.gz.sig  (PGP)

Here are the compressed sources of the LGPL library (included above):
  http://josefsson.org/gsasl/releases/libgsasl-0.2.26.tar.gz   (800KB)
  http://josefsson.org/gsasl/releases/libgsasl-0.2.26.tar.gz.sig  (PGP)

The software is cryptographically signed by the author using an
OpenPGP key identified by the following information:

pub   1280R/B565716F 2002-05-05 [expires: 2008-06-30]
      Key fingerprint = 0424 D4EE 81A0 E3D1 19C6  F835 EDA2 1E94 B565 716F
uid                  Simon Josefsson <address@hidden>
uid                  Simon Josefsson <address@hidden>

The key is available from:
  http://josefsson.org/key.txt
  dns:b565716f.josefsson.org?TYPE=CERT

Here are the SHA-1 and SHA-224 checksums:

bd6d201bc2d35291e1b2a24a32932d709ec4c0f5  gsasl-0.2.26.tar.gz
a9a0a9f1020af82ab3b4c64f3bd04d49bcd3f92924c9487db7643404  gsasl-0.2.26.tar.gz

421aadb9cdcf25aaf64a09c9baac8e13cb56f6db  libgsasl-0.2.26.tar.gz
e8b723f5e6f96e9ce5dff6628108b1584684e267d4f058f3b67e26b6  libgsasl-0.2.26.tar.gz

Enjoy,
Simon

pgpo5BLpxSk4t.pgp
Description: PGP signature