GNU SASL 1.7.3 released (development version)

[Simon Josefsson]

GNU SASL is a modern C library that implement the standard network
security protocol Simple Authentication and Security Layer (SASL).  The
framework itself and a couple of common SASL mechanisms (including
SCRAM-SHA-1) are implemented.  GNU SASL can be used by network
applications for IMAP, SMTP, XMPP and similar protocols to provide
authentication services.

This is the first release candidate of 1.8.0.  Please test this release
as if it were a new stable release that replaces the earlier 1.4.x and
1.6.x branches.  It should be a drop-in.

NEWS entries:

** libgsasl: The SAML20 mechanism is now enabled by default.

** libgsasl: The SAML20 mechanism was updated to draft -09.
There was a minor protocol change, the final client response is now
"=" instead of the empty string.

** libgsasl: Unified some of the SAML and OpenID callbacks/properties.
See API changes below.

** Doc fixes and updates for the callback/property change in the library.
See lib/NEWS for details.

** examples: Added example SMTP server with SAML 2.0 support.
See examples/saml20/README.  It uses Lasso as the SAML implementation.
You may disable Lasso by using --without-lasso.  Note that Lasso is
only needed for this example server, it is not needed by the GNU SASL
library or command line tools itself.

** API and ABI modifications.
GSASL_REDIRECT_URL: Added, replaces the next two properties.
GSASL_OPENID20_REDIRECT_URL: Removed.
GSASL_SAML20_REDIRECT_URL: Removed.
GSASL_AUTHENTICATE_IN_BROWSER: Added, replaces the next two callbacks.
GSASL_SAML20_AUTHENTICATE_IN_BROWSER: Removed.
GSASL_OPENID20_AUTHENTICATE_IN_BROWSER: Removed.

Improving GNU SASL is costly, but you can help!  We are looking for
organizations that find GNU SASL useful and wish to contribute back.
You can contribute by reporting bugs, improve the software, purchase
support contracts, or donate money or equipment.

Commercial support contracts for GNU SASL are available, and they help
finance continued maintenance.  Simon Josefsson Datakonsult AB, a
Stockholm based privately held company, is currently funding GNU SASL
maintenance.  We are always looking for interesting development
projects.  See http://josefsson.org/ for more details.

The project's web page is available at:
  https://www.gnu.org/software/gsasl/

All manuals are available from:
  https://www.gnu.org/software/gsasl/manual/

Specifically, the following formats are available.

The main manual:
  https://www.gnu.org/software/gsasl/manual/gsasl.html - HTML format
  https://www.gnu.org/software/gsasl/manual/gsasl.pdf - PDF format

API Reference manual:
  https://www.gnu.org/software/gsasl/reference/ - GTK-DOC HTML

Doxygen documentation:
  https://www.gnu.org/software/gsasl/doxygen/ - HTML format
  https://www.gnu.org/software/gsasl/doxygen/gsasl.pdf - PDF format

If you need help to use GNU SASL, or want to help others, you are
invited to join our help-gsasl mailing list, see:
<https://lists.gnu.org/mailman/listinfo/help-gsasl>.

Here are the compressed sources of the entire package:
  ftp://alpha.gnu.org/gnu/gsasl/gsasl-1.7.3.tar.gz (4.8MB)
  ftp://alpha.gnu.org/gnu/gsasl/gsasl-1.7.3.tar.gz.sig (OpenPGP)

Here are the compressed sources of the LGPL library (included above):
  ftp://alpha.gnu.org/gnu/gsasl/libgsasl-1.7.3.tar.gz (1.2MB)
  ftp://alpha.gnu.org/gnu/gsasl/libgsasl-1.7.3.tar.gz.sig (OpenPGP)

We also provide pre-built Windows binaries:
  ftp://alpha.gnu.org/gnu/gsasl/gsasl-1.7.3-x86.zip (32-bit)
  ftp://alpha.gnu.org/gnu/gsasl/gsasl-1.7.3-x64.zip (64-bit)
  ftp://alpha.gnu.org/gnu/gsasl/gsasl-1.7.3-x86-kfw322.zip (32-bit Kerberos)

For code coverage, cyclomatic code complexity charts and clang output see:
  https://www.gnu.org/software/gsasl/coverage/
  https://www.gnu.org/software/gsasl/cyclo/
  https://www.gnu.org/software/gsasl/clang-analyzer/

The software is cryptographically signed by the author using an
OpenPGP key identified by the following information:

pub   1280R/B565716F 2002-05-05 [expires: 2013-05-10]
      Key fingerprint = 0424 D4EE 81A0 E3D1 19C6  F835 EDA2 1E94 B565 716F
uid                  Simon Josefsson <address@hidden>
uid                  Simon Josefsson <address@hidden>
sub   2048R/105E722E 2012-03-13 [expires: 2013-07-26]
sub   2048R/728AB82C 2012-03-13 [expires: 2013-07-26]
sub   2048R/9394F626 2012-03-13 [expires: 2013-07-26]
sub   1280R/4D5D40AE 2002-05-05 [expires: 2013-05-10]

The key is available from:
  http://josefsson.org/key.txt
  dns:b565716f.josefsson.org?TYPE=CERT

Here are the SHA-1 and SHA-224 checksums:

946b4de7269bd4c5287480f8e211e02cfe26da4a  gsasl-1.7.3.tar.gz
b613f535070028ec90317e68739658fca28aa28574676c1db9c62b16  gsasl-1.7.3.tar.gz

224f63d2432fdc59e231ed55c1ff1121a6c28124  libgsasl-1.7.3.tar.gz
d861cdd611737a281caf053672003eecb6666f3934f831e5a60fb9f2  libgsasl-1.7.3.tar.gz

7715e10803a1298d499c22035cd65f01d2f2c0b0  gsasl-1.7.3-x86.zip
279b7d1afb2955d5a1072441bb0a7753f3b4123dfcee6af0f1d9f815  gsasl-1.7.3-x86.zip

14d6ee5749feb12b46b9544cdd6f387190005229  gsasl-1.7.3-x64.zip
2f1d1b21eb90375bf76043bd61584543b5d12ec3bba8c1eccbc49611  gsasl-1.7.3-x64.zip

20f9dd2c0ce0243985fd1062eb499f1b12df3559  gsasl-1.7.3-x86-kfw322.zip
7b6ad8080d6fa676bf5a24a602dea7013f2aee33dfa1edeccdd80f9d  
gsasl-1.7.3-x86-kfw322.zip

Happy hacking,
Simon

pgpSD1XGkhjpO.pgp
Description: PGP signature