GNU SASL 1.2

[Simon Josefsson]

GNU SASL is a modern C library that implement the standard network
security protocol Simple Authentication and Security Layer (SASL).  The
framework itself and a couple of common SASL mechanisms are implemented.
GNU SASL can be used by network applications for IMAP, SMTP, XMPP and
similar protocols to provide authentication services.

Top-level NEWS entries:

** gsasl: Fix out of bounds write when in IMAP/SMTP mode.
Reported by Enrico Scholz <address@hidden> in
<http://thread.gmane.org/gmane.comp.gnu.gsasl.general/230>.

** doc: Rewritten introduction material.

** doc: Improved sections for the info manual.
We now follow the advice given by the texinfo manual on which
directory categories to use.  In particular, libgsasl moved from the
'GNU Libraries' section to the 'Software libraries' as GNU SASL, and
'Invoking gsasl' moved from 'GNU utilities' to 'Security'.

** examples: Removed unneeded 'ctx' parameter from client_authenticate.

** Building with many warning flags now requires --enable-gcc-warnings.
This avoids crying wolf for normal compiles.

** New configure parameters to set packaging specific information.
The parameters are --with-packager, --with-packager-version, and
--with-packager-bug-reports.  See
<http://article.gmane.org/gmane.comp.lib.gnulib.bugs/17791> for more
details.

Library (lib/) NEWS entries:

** libgsasl: The library needs at most around 250 bytes of stack frame size.
This is useful for embedded platforms with limited amount of RAM.
Some functions that required a large stack has been rewritten, in
order to achieve this goal.  The 250 byte limit is now part of the
regression test suite, so hopefully no function will ever require more
than that amount of stack space in the future.

** libgsasl: Obsolete gsasl_md5pwd_get_password rewritten to use modern API.

** Include a copy of the GPLv3 license in the archive.
Some parts, such as the gnulib self-tests, are licensed under the
GPLv3.  The library remains licensed under LGPLv2.1+ though.  Reported
by Vincent Untz <address@hidden> in
<http://permalink.gmane.org/gmane.comp.gnu.gsasl.general/225>.

** API and ABI modifications.
No changes since last version.

Improving GNU SASL is costly, but you can help!  We are looking for
organizations that find GNU SASL useful and wish to contribute back.
You can contribute by reporting bugs, improve the software, purchase
support contracts, or donate money or equipment.

Commercial support contracts for GNU SASL are available, and they help
finance continued maintenance.  Simon Josefsson Datakonsult AB, a
Stockholm based privately held company, is currently funding GNU SASL
maintenance.  We are always looking for interesting development
projects.  See http://josefsson.org/ for more details.

The project's web page is available at:
  http://www.gnu.org/software/gsasl/

All manuals are available from:
  http://www.gnu.org/software/gsasl/manual/

Specifically, the following formats are available.

The main manual:
  http://www.gnu.org/software/gsasl/manual/gsasl.html - HTML format
  http://www.gnu.org/software/gsasl/manual/gsasl.pdf - PDF format

API Reference manual:
  http://www.gnu.org/software/gsasl/reference/ - GTK-DOC HTML

Doxygen documentation:
  http://www.gnu.org/software/gsasl/doxygen/ - HTML format
  http://www.gnu.org/software/gsasl/doxygen/gsasl.pdf - PDF format

Instructions for how to build GNU SASL under uClinux are available from
<http://josefsson.org/uclinux/>.  If your uClinux toolchain is broken,
it is possible to build GNU SASL without using the ./configure
mechanism, see <http://josefsson.org/uclinux/old/>.

If you need help to use GNU SASL, or want to help others, you are
invited to join our help-gsasl mailing list, see:
<http://lists.gnu.org/mailman/listinfo/help-gsasl>.

Here are the compressed sources of the entire package:
  ftp://ftp.gnu.org/pub/gnu/gsasl/gsasl-1.2.tar.gz (3.5MB)
  ftp://ftp.gnu.org/pub/gnu/gsasl/gsasl-1.2.tar.gz.sig (PGP)

Here are the compressed sources of the LGPL library (included above):
  ftp://ftp.gnu.org/pub/gnu/gsasl/libgsasl-1.2.tar.gz (888KB)
  ftp://ftp.gnu.org/pub/gnu/gsasl/libgsasl-1.2.tar.gz.sig (PGP)

We also provide pre-built Windows binaries:
  http://josefsson.org/gnutls4win/gsasl-1.2.zip
  http://josefsson.org/gnutls4win/mingw32-gsasl_1.2-1_all.deb

Here are the build reports for various platforms:
  http://autobuild.josefsson.org/gsasl/

Daily builds of the package are available from:
  http://daily.josefsson.org/gsasl/

The software is cryptographically signed by the author using an
OpenPGP key identified by the following information:

pub   1280R/B565716F 2002-05-05 [expires: 2010-04-21]
      Key fingerprint = 0424 D4EE 81A0 E3D1 19C6  F835 EDA2 1E94 B565 716F
uid                  Simon Josefsson <address@hidden>
uid                  Simon Josefsson <address@hidden>
sub   1280R/4D5D40AE 2002-05-05 [expires: 2010-04-21]

The key is available from:
  http://josefsson.org/key.txt
  dns:b565716f.josefsson.org?TYPE=CERT

Here are the SHA-1 and SHA-224 checksums:

d36dd80e19703879fe606d1d40c390e01a1821d2  gsasl-1.2.tar.gz
0f4482127154a16f8aad78a97f3ef0c9fd8df7c1a976015a792281cf  gsasl-1.2.tar.gz

a3e2d84a94c188aa84e2ce42fee2179b16792fd0  libgsasl-1.2.tar.gz
b36b6d951b952f2472888e5829aafbb5e8c9852d5789e68dfa161bda  libgsasl-1.2.tar.gz

8d7e16ccd443a9b61ef6e6bbec946451f6feba09  gsasl-1.2.zip
d2231529470233d69fedc8e30c2de8440477a6a110cd2b3208cdf9ff  gsasl-1.2.zip

42fba5713a9877444c13a9d9fee8263ddca8806b  mingw32-gsasl_1.2-1_all.deb
700a9efc8c0bd8b780b32b26e42e5129dcca27c29a406dbc56a7f892  
mingw32-gsasl_1.2-1_all.deb

Happy hacking,
Simon

pgp3QUqZ0M0EI.pgp
Description: PGP signature