From sh162551@sac.sfbay.sun.com Thu Feb 12 04:50:32 2009 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n1CCoWv0019581 for ; Thu, 12 Feb 2009 04:50:32 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n1CCoV8G063871; Thu, 12 Feb 2009 05:50:31 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KEY00M07EC7CG00@nwk-avmta-1.sfbay.Sun.COM>; Thu, 12 Feb 2009 04:50:31 -0800 (PST) Received: from dm-sfbay-02.sfbay.sun.com ([129.146.11.31]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KEY00KEZEC7S110@nwk-avmta-1.sfbay.Sun.COM>; Thu, 12 Feb 2009 04:50:31 -0800 (PST) Received: from sac.sfbay.sun.com (new-sac.SFBay.Sun.COM [129.146.175.65]) by dm-sfbay-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n1CCoTnj018943; Thu, 12 Feb 2009 04:50:29 -0800 (PST) Received: from sac.sfbay.sun.com (localhost [127.0.0.1]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n1CCoSne019572; Thu, 12 Feb 2009 04:50:28 -0800 (PST) Received: (from sh162551@localhost) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8/Submit) id n1CCoSmd019567; Thu, 12 Feb 2009 04:50:28 -0800 (PST) Date: Thu, 12 Feb 2009 04:50:28 -0800 (PST) From: Shi-Ying Irene Huang Subject: Gnutls update to 2.6 [LSARC/2009/098 FastTrack timeout 02/19/2009] To: LSARC-ext@sun.com Cc: Brian.cameron@sun.com, darren.moffat@sun.com, jeff.cai@sun.com, wyllys.ingersoll@sun.com Message-id: <200902121250.n1CCoSmd019567@sac.sfbay.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 9859 Template Version: @(#)sac_nextcase %I% %G% SMI This information is Copyright 2009 Sun Microsystems 1. Introduction 1.1. Project/Component Working Name: Gnutls update to 2.6 1.2. Name of Document Author/Supplier: Author: Jeff Cai 1.3 Date of This Document: 12 February, 2009 4. Technical Description 1. Introduction 1.1. Project/Component Working Name: GnuTLS Update for 2.6.3 1.2. Name of Document Author/Supplier: Author: Jeff Cai Sponser: Irene Huang 1.3. Date of This Document: 02/06/2009 1.4. Name of Major Document Customer(s)/Consumer(s): 1.4.1. The PAC or CPT you expect to review your project: Solaris PAC 1.4.2. The ARC(s) you expect to review your project: LSARC 1.4.3. The Director/VP who is "Sponsoring" this project: Robert O'Dea 1.4.4. The name of your business unit: Software - OPG 1.5. Email Aliases: 1.5.1. Responsible Manager: harry.lu@sun.com 1.5.2. Responsible Engineer: jeff.cai@sun.com 1.5.3. Marketing Manager: glynn.foster@sun.com 1.5.4. Interest List: brian.cameron@sun.com darren.moffat@sun.com wyllys.ingersoll@sun.com 2. Project Summary 2.1. Project Description: GnuTLS provides a secure layer, over a reliable transport layer. Currently the GnuTLS library implements the proposed standards by the IETF's TLS working group. This fast-track increments the version of GnuTLS in Solaris from 2.2.4 to 2.6.3. 3. Technical Description: 3.1. Details: GnuTLS is a modern C library that implements the standard network security protocol Transport Layer Security (TLS), for use by network applications. A number of projects in the Solaris Desktop such as Evolution, Pidgin, Ekiga and Vino depend on it. The latest stable version of GnuTLS is 2.6.3. GnuTLS 2.6.0 has interface changes, but 2.6.1 through 2.6.3 are bugfix only releases. Compared with the previously integrated version, GnuTLS 2.2.4, the new version adds following features: * Full OpenPGP support is part of libgnutls, licensed under the LGPL. * The PSK sub-system has been improved and now supports password derivation and PSK identity hints. * The default handshake size limit has been increased to 48kb. The earlier limit was 16kb. The handshake messages contain all handshake messages between a client and a server only if they communicate in TLS protocol. The reason for restricting the handshake message size is to limit Denial of Service attacks. * New APIs to access the raw X.509 Subject and Issuer DN's and elements from the certificate credentials structure. * New APIs to improve working with username/passwords and PSK. * Names of constants to affect certificate printing changed. The constants are used for OpenPGP too, which the names didn't reflect, so the following name change has been made: Old name New name GNUTLS_X509_CRT_FULL GNUTLS_CRT_PRINT_FULL GNUTLS_X509_CRT_ONELINE GNUTLS_CRT_PRINT_ONELINE GNUTLS_X509_CRT_UNSIGNED_FULL GNUTLS_CRT_PRINT_UNSIGNED_FULL The old names will be mapped to the new names for some time. * The function gnutls_openpgp_privkey_get_id has been renamed to gnutls_openpgp_privkey_get_key_id. A compatibility mapping exists to avoid breaking API backwards compatibility. * Replaced all uses of alloca with malloc and free. * Remove code to import certificate chains in PKCS#7 format. The code has not worked since v0.9.0 and apparently nobody has missed it, so the community decided to remove the code rather than fix it. If you have old certificate chains stored in PKCS#7 format, you can convert them to a list of PEM certificates by using 'certtool --p7-info'. * Added API to replace and update the crypto backend. A new header file has been added. It contains definitions related to replacing the internal crypto functionality. All definitions and the header itself are experimental but supported. * gnutls_x509_crt_set_subject_alt_name() was added. It can either set or append alternative names. It can also handle binary structures such as IP addresses. * New function to set minimum acceptable SRP bits. * Add interface to deal with public key and signature algorithms. * New interfaces to get name of public key and signing algorithms. * New API to get a string corresponding to a error symbol. * New API to set the public parameters in a certificate request from a private key. * New API to set a callback to extract TLS Finished data. * Fix namespace problem with TLS_MASTER_SIZE and TLS_RANDOM_SIZE. The new names are GNUTLS_MASTER_SIZE and GNUTLS_RANDOM_SIZE. The old names are mapped to the new names in compat.h. These mappings will likely be removed more quickly than other mappings in that file due to the namespace violation. * New interface to register a new TLS extension handler. The new function gnutls_ext_register can be used to register handlers for specific TLS extension types. The callback functions have the new types gnutls_ext_recv_func and gnutls_ext_send_func. A type to classify TLS extensions, gnutls_ext_parse_type_t, has been added as well. 3.2. Interfaces: Exported Interfaces Interface Classification Comments --------------- -------------- ----------------------- SUNWgnutls Uncommitted Package name (unchanged) SUNWgnutls-devel Uncommitted Package name (unchanged) /usr/lib/libgnutls.so.26 Volatile C library (unchanged) /usr/lib/libgnutlsxx.so.26 Volatile C++ library (unchanged) /usr/share/aclocal/libgnutls.m4 Volatile (unchanged) /usr/lib/pkgconfig/gnutls.pc Volatile (unchanged) /usr/include/gnutls/gnutls.h Volatile (unchanged) /usr/include/gnutls/gnutlsxx.h Volatile (unchanged) /usr/include/gnutls/pkcs12.h Volatile (unchanged) /usr/include/gnutls/compat.h Volatile (unchanged) /usr/include/gnutls/x509.h Volatile (unchanged) /usr/bin/libgnutls-config Volatile (unchanged) /usr/share/man/man1/libgnutls-config Volatile (unchanged) /usr/share/man/man3/libgnutls.3 Volatile (unchanged) /usr/share/man/man3/libgnutlsxx.3 Volatile (unchanged) /usr/share/doc/SUNWgnutls/AUTHORS Volatile (unchanged) /usr/share/doc/SUNWgnutls/NEWS.bz2 Volatile (unchanged) /usr/share/doc/SUNWgnutls/README Volatile (unchanged) /usr/share/doc/SUNWgnutls/ Volatile (unchanged) COPYING.LIB.bz2 /usr/include/gnutls/openpgp.h Volatile (added) /usr/include/gnutls/crypto.h Volatile (added) Imported Interfaces Interface Classification Comments --------------- --------------- --------------------- /usr/lib/libgcrypt.so.11 Volatile (unchanged) LSARC/2008/390/ /usr/lib/libtasn1.so.3 Volatile (added) LSARC/2008/341/ /usr/lib/libz.so.1 Committed (unchanged) PSARC/2006/537 3.3. Packaging & Delivery: SUNWgnutls(base package) - base package for binaries SUNWgnutls-devel (development package) - development package for header and documents 3.4. Dependencies: libgnutls depends on libtasn1, libgcrypt and zlib. 3.5 References Sun Evolution LSARC/2003/298/ libtasn1 LSARC/2008/390/ GnuTLS Update for 2.2.4 LSARC/2008/341/ 4. Resources and Schedule: 4.1. Product Approval Committee requested information: 4.1.1. Consolidation Name: Desktop Cteam/GNOME 4.1.2. Contributing OpCo/BU/Division Name: Desktop Solutions 4.1.3. Type of PAC Review and Approval expected: FastTrack 5. References Project website: http://www.gnu.org/software/gnutls/ GnuTLS 2.4.0 Release News: http://article.gmane.org/gmane.network.gnutls.general/1282 GnuTLS 2.6.0 Release News: http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3135 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: Desktop 6.5. ARC review type: FastTrack 6.6. ARC Exposure: open From John.Fischer@sun.com Thu Feb 12 10:31:16 2009 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n1CIVGVh023442 for ; Thu, 12 Feb 2009 10:31:16 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n1CIVD7s004797 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Thu, 12 Feb 2009 10:31:16 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KEY00K1LU414J00@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Feb 2009 10:31:13 -0800 (PST) Received: from brmea-mail-2.sun.com ([192.18.98.43]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KEY00AIAU40JP60@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Feb 2009 10:31:12 -0800 (PST) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n1CIVBZd028683 for ; Thu, 12 Feb 2009 18:31:11 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7.0-3.01 64bit (built Dec 23 2008)) id <0KEY00000TD25Q00@mail-amer.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Feb 2009 11:31:11 -0700 (MST) Received: from 129.145.154.112 ([unknown] [129.145.154.112]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7.0-3.01 64bit (built Dec 23 2008)) with ESMTPSA id <0KEY002ZQU3PFG80@mail-amer.sun.com>; Thu, 12 Feb 2009 11:31:02 -0700 (MST) Date: Thu, 12 Feb 2009 10:31:01 -0800 From: John Fischer Subject: Re: Gnutls update to 2.6 [LSARC/2009/098 FastTrack timeout 02/19/2009] In-reply-to: <200902121250.n1CCoSmd019567@sac.sfbay.sun.com> Sender: John.Fischer@sun.com To: Shi-Ying Irene Huang Cc: LSARC-ext@sun.com, Brian Cameron , Darren J Moffat , Jeff.Cai@sun.com, Wyllys.Ingersoll@sun.com Reply-to: John.Fischer@sun.com Message-id: <1234463460.29339.3.camel@sr1-umpk-12> MIME-version: 1.0 X-Mailer: Ximian Evolution 1.4.6.301 Content-type: text/plain; charset=ASCII Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200902121250.n1CCoSmd019567@sac.sfbay.sun.com> Status: RO Content-Length: 10481 All, Please note that this project also includes the appropriate 64-bit library and 64-bit pkg-config file. Thanks, John On Thu, 2009-02-12 at 04:50, Shi-Ying Irene Huang wrote: > Template Version: @(#)sac_nextcase %I% %G% SMI > This information is Copyright 2009 Sun Microsystems > 1. Introduction > 1.1. Project/Component Working Name: > Gnutls update to 2.6 > 1.2. Name of Document Author/Supplier: > Author: Jeff Cai > 1.3 Date of This Document: > 12 February, 2009 > 4. Technical Description > 1. Introduction > 1.1. Project/Component Working Name: > > GnuTLS Update for 2.6.3 > > 1.2. Name of Document Author/Supplier: > > Author: Jeff Cai > Sponser: Irene Huang > > 1.3. Date of This Document: > > 02/06/2009 > > 1.4. Name of Major Document Customer(s)/Consumer(s): > > 1.4.1. The PAC or CPT you expect to review your project: > > Solaris PAC > > 1.4.2. The ARC(s) you expect to review your project: > > LSARC > > 1.4.3. The Director/VP who is "Sponsoring" this project: > > Robert O'Dea > > 1.4.4. The name of your business unit: > > Software - OPG > > 1.5. Email Aliases: > 1.5.1. Responsible Manager: harry.lu@sun.com > 1.5.2. Responsible Engineer: jeff.cai@sun.com > 1.5.3. Marketing Manager: glynn.foster@sun.com > 1.5.4. Interest List: brian.cameron@sun.com > darren.moffat@sun.com > wyllys.ingersoll@sun.com > > 2. Project Summary > 2.1. Project Description: > > GnuTLS provides a secure layer, over a reliable transport layer. > Currently the GnuTLS library implements the proposed standards by the > IETF's TLS working group. > > This fast-track increments the version of GnuTLS in Solaris > from 2.2.4 to 2.6.3. > > 3. Technical Description: > 3.1. Details: > > GnuTLS is a modern C library that implements the standard network > security protocol Transport Layer Security (TLS), for use by network > applications. > > A number of projects in the Solaris Desktop such as Evolution, Pidgin, > Ekiga and Vino depend on it. > > The latest stable version of GnuTLS is 2.6.3. > > GnuTLS 2.6.0 has interface changes, but 2.6.1 through 2.6.3 are > bugfix only releases. > > Compared with the previously integrated version, GnuTLS 2.2.4, the new > version adds following features: > > * Full OpenPGP support is part of libgnutls, licensed under the LGPL. > * The PSK sub-system has been improved and now supports password > derivation and PSK identity hints. > * The default handshake size limit has been increased to 48kb. > The earlier limit was 16kb. The handshake messages contain all handshake > messages between a client and a server only if they communicate in > TLS protocol. The reason for restricting the handshake message size is > to limit Denial of Service attacks. > * New APIs to access the raw X.509 Subject and Issuer DN's and > elements from the certificate credentials structure. > * New APIs to improve working with username/passwords and PSK. > * Names of constants to affect certificate printing changed. > The constants are used for OpenPGP too, which the names didn't > reflect, so the following name change has been made: > > Old name New name > GNUTLS_X509_CRT_FULL GNUTLS_CRT_PRINT_FULL > GNUTLS_X509_CRT_ONELINE GNUTLS_CRT_PRINT_ONELINE > GNUTLS_X509_CRT_UNSIGNED_FULL GNUTLS_CRT_PRINT_UNSIGNED_FULL > The old names will be mapped to the new names for some time. > * The function gnutls_openpgp_privkey_get_id has been renamed to > gnutls_openpgp_privkey_get_key_id. > A compatibility mapping exists to avoid breaking API backwards > compatibility. > * Replaced all uses of alloca with malloc and free. > * Remove code to import certificate chains in PKCS#7 format. > The code has not worked since v0.9.0 and apparently nobody has missed > it, so the community decided to remove the code rather than fix it. If you have > old certificate chains stored in PKCS#7 format, you can convert them > to a list of PEM certificates by using 'certtool --p7-info'. > * Added API to replace and update the crypto backend. > A new header file has been added. It contains > definitions related to replacing the internal crypto functionality. > All definitions and the header itself are experimental but supported. > * gnutls_x509_crt_set_subject_alt_name() was added. It can > either set or append alternative names. It can also handle binary structures > such as IP addresses. > * New function to set minimum acceptable SRP bits. > * Add interface to deal with public key and signature algorithms. > * New interfaces to get name of public key and signing algorithms. > * New API to get a string corresponding to a error symbol. > * New API to set the public parameters in a certificate request > from a private key. > * New API to set a callback to extract TLS Finished data. > * Fix namespace problem with TLS_MASTER_SIZE and TLS_RANDOM_SIZE. > The new names are GNUTLS_MASTER_SIZE and GNUTLS_RANDOM_SIZE. The old > names are mapped to the new names in compat.h. These mappings will > likely be removed more quickly than other mappings in that file due to > the namespace violation. > * New interface to register a new TLS extension handler. > The new function gnutls_ext_register can be used to register handlers > for specific TLS extension types. The callback functions have the new > types gnutls_ext_recv_func and gnutls_ext_send_func. A type to > classify TLS extensions, gnutls_ext_parse_type_t, has been added as well. > > 3.2. Interfaces: > Exported Interfaces > Interface Classification Comments > --------------- -------------- ----------------------- > SUNWgnutls Uncommitted Package name (unchanged) > SUNWgnutls-devel Uncommitted Package name (unchanged) > > /usr/lib/libgnutls.so.26 Volatile C library (unchanged) > /usr/lib/libgnutlsxx.so.26 Volatile C++ library (unchanged) > > /usr/share/aclocal/libgnutls.m4 Volatile (unchanged) > /usr/lib/pkgconfig/gnutls.pc Volatile (unchanged) > /usr/include/gnutls/gnutls.h Volatile (unchanged) > /usr/include/gnutls/gnutlsxx.h Volatile (unchanged) > /usr/include/gnutls/pkcs12.h Volatile (unchanged) > /usr/include/gnutls/compat.h Volatile (unchanged) > /usr/include/gnutls/x509.h Volatile (unchanged) > /usr/bin/libgnutls-config Volatile (unchanged) > /usr/share/man/man1/libgnutls-config Volatile (unchanged) > /usr/share/man/man3/libgnutls.3 Volatile (unchanged) > /usr/share/man/man3/libgnutlsxx.3 Volatile (unchanged) > /usr/share/doc/SUNWgnutls/AUTHORS Volatile (unchanged) > /usr/share/doc/SUNWgnutls/NEWS.bz2 Volatile (unchanged) > /usr/share/doc/SUNWgnutls/README Volatile (unchanged) > /usr/share/doc/SUNWgnutls/ Volatile (unchanged) > COPYING.LIB.bz2 > > /usr/include/gnutls/openpgp.h Volatile (added) > /usr/include/gnutls/crypto.h Volatile (added) > > Imported Interfaces > Interface Classification Comments > --------------- --------------- --------------------- > /usr/lib/libgcrypt.so.11 Volatile (unchanged) > LSARC/2008/390/ > > /usr/lib/libtasn1.so.3 Volatile (added) > LSARC/2008/341/ > > /usr/lib/libz.so.1 Committed (unchanged) > PSARC/2006/537 > > 3.3. Packaging & Delivery: > SUNWgnutls(base package) - base package for binaries > SUNWgnutls-devel (development package) - development package for > header and documents > > 3.4. Dependencies: > libgnutls depends on libtasn1, libgcrypt and zlib. > > 3.5 References > > Sun Evolution LSARC/2003/298/ > libtasn1 LSARC/2008/390/ > GnuTLS Update for 2.2.4 LSARC/2008/341/ > > 4. Resources and Schedule: > > 4.1. Product Approval Committee requested information: > 4.1.1. Consolidation Name: > > Desktop Cteam/GNOME > > 4.1.2. Contributing OpCo/BU/Division Name: > > Desktop Solutions > > 4.1.3. Type of PAC Review and Approval expected: > > FastTrack > > 5. References > Project website: http://www.gnu.org/software/gnutls/ > GnuTLS 2.4.0 Release News: > http://article.gmane.org/gmane.network.gnutls.general/1282 > GnuTLS 2.6.0 Release News: > http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3135 > > > > 6. Resources and Schedule > 6.4. Steering Committee requested information > 6.4.1. Consolidation C-team Name: > Desktop > 6.5. ARC review type: FastTrack > 6.6. ARC Exposure: open > From Irene.Huang@sun.com Thu Feb 12 19:01:07 2009 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n1D315Qm027314 for ; Thu, 12 Feb 2009 19:01:06 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id n1D30xaM000555 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Fri, 13 Feb 2009 11:01:04 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KEZ00A0LHPQKS00@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Thu, 12 Feb 2009 19:01:02 -0800 (PST) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KEZ0009OHPNAFA0@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Thu, 12 Feb 2009 19:01:00 -0800 (PST) Received: from fe-apac-06.sun.com (fe-apac-06.sun.com [192.18.19.177] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n1D30wq8001139 for ; Fri, 13 Feb 2009 03:00:58 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7.0-3.01 64bit (built Dec 23 2008)) id <0KEZ00600HJEGS00@mail-apac.sun.com> for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Fri, 13 Feb 2009 11:00:58 +0800 (SGT) Received: from [129.158.217.60] ([unknown] [129.158.217.60]) by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7.0-3.01 64bit (built Dec 23 2008)) with ESMTPSA id <0KEZ00G8THPL0OG0@mail-apac.sun.com>; Fri, 13 Feb 2009 11:00:58 +0800 (SGT) Date: Fri, 13 Feb 2009 11:00:58 +0800 From: Irene Huang Subject: Re: Gnutls update to 2.6 [LSARC/2009/098 FastTrack timeout 02/19/2009] In-reply-to: <1234463460.29339.3.camel@sr1-umpk-12> Sender: Irene.Huang@sun.com To: John.Fischer@sun.com Cc: Shi-Ying Irene Huang , LSARC-ext@sun.com, Brian Cameron , Darren J Moffat , Jeff.Cai@sun.com, Wyllys.Ingersoll@sun.com Message-id: <4994E26A.90400@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200902121250.n1CCoSmd019567@sac.sfbay.sun.com> <1234463460.29339.3.camel@sr1-umpk-12> User-Agent: Thunderbird 2.0.0.19 (Windows/20081209) Status: RO Content-Length: 10819 we'll include the 64bit information in the updated materials when the case is to be closed :) --Irene John Fischer wrote: > All, > > Please note that this project also includes the appropriate > 64-bit library and 64-bit pkg-config file. > > Thanks, > > John > > On Thu, 2009-02-12 at 04:50, Shi-Ying Irene Huang wrote: > >> Template Version: @(#)sac_nextcase %I% %G% SMI >> This information is Copyright 2009 Sun Microsystems >> 1. Introduction >> 1.1. Project/Component Working Name: >> Gnutls update to 2.6 >> 1.2. Name of Document Author/Supplier: >> Author: Jeff Cai >> 1.3 Date of This Document: >> 12 February, 2009 >> 4. Technical Description >> 1. Introduction >> 1.1. Project/Component Working Name: >> >> GnuTLS Update for 2.6.3 >> >> 1.2. Name of Document Author/Supplier: >> >> Author: Jeff Cai >> Sponser: Irene Huang >> >> 1.3. Date of This Document: >> >> 02/06/2009 >> >> 1.4. Name of Major Document Customer(s)/Consumer(s): >> >> 1.4.1. The PAC or CPT you expect to review your project: >> >> Solaris PAC >> >> 1.4.2. The ARC(s) you expect to review your project: >> >> LSARC >> >> 1.4.3. The Director/VP who is "Sponsoring" this project: >> >> Robert O'Dea >> >> 1.4.4. The name of your business unit: >> >> Software - OPG >> >> 1.5. Email Aliases: >> 1.5.1. Responsible Manager: harry.lu@sun.com >> 1.5.2. Responsible Engineer: jeff.cai@sun.com >> 1.5.3. Marketing Manager: glynn.foster@sun.com >> 1.5.4. Interest List: brian.cameron@sun.com >> darren.moffat@sun.com >> wyllys.ingersoll@sun.com >> >> 2. Project Summary >> 2.1. Project Description: >> >> GnuTLS provides a secure layer, over a reliable transport layer. >> Currently the GnuTLS library implements the proposed standards by the >> IETF's TLS working group. >> >> This fast-track increments the version of GnuTLS in Solaris >> from 2.2.4 to 2.6.3. >> >> 3. Technical Description: >> 3.1. Details: >> >> GnuTLS is a modern C library that implements the standard network >> security protocol Transport Layer Security (TLS), for use by network >> applications. >> >> A number of projects in the Solaris Desktop such as Evolution, Pidgin, >> Ekiga and Vino depend on it. >> >> The latest stable version of GnuTLS is 2.6.3. >> >> GnuTLS 2.6.0 has interface changes, but 2.6.1 through 2.6.3 are >> bugfix only releases. >> >> Compared with the previously integrated version, GnuTLS 2.2.4, the new >> version adds following features: >> >> * Full OpenPGP support is part of libgnutls, licensed under the LGPL. >> * The PSK sub-system has been improved and now supports password >> derivation and PSK identity hints. >> * The default handshake size limit has been increased to 48kb. >> The earlier limit was 16kb. The handshake messages contain all handshake >> messages between a client and a server only if they communicate in >> TLS protocol. The reason for restricting the handshake message size is >> to limit Denial of Service attacks. >> * New APIs to access the raw X.509 Subject and Issuer DN's and >> elements from the certificate credentials structure. >> * New APIs to improve working with username/passwords and PSK. >> * Names of constants to affect certificate printing changed. >> The constants are used for OpenPGP too, which the names didn't >> reflect, so the following name change has been made: >> >> Old name New name >> GNUTLS_X509_CRT_FULL GNUTLS_CRT_PRINT_FULL >> GNUTLS_X509_CRT_ONELINE GNUTLS_CRT_PRINT_ONELINE >> GNUTLS_X509_CRT_UNSIGNED_FULL GNUTLS_CRT_PRINT_UNSIGNED_FULL >> The old names will be mapped to the new names for some time. >> * The function gnutls_openpgp_privkey_get_id has been renamed to >> gnutls_openpgp_privkey_get_key_id. >> A compatibility mapping exists to avoid breaking API backwards >> compatibility. >> * Replaced all uses of alloca with malloc and free. >> * Remove code to import certificate chains in PKCS#7 format. >> The code has not worked since v0.9.0 and apparently nobody has missed >> it, so the community decided to remove the code rather than fix it. If you have >> old certificate chains stored in PKCS#7 format, you can convert them >> to a list of PEM certificates by using 'certtool --p7-info'. >> * Added API to replace and update the crypto backend. >> A new header file has been added. It contains >> definitions related to replacing the internal crypto functionality. >> All definitions and the header itself are experimental but supported. >> * gnutls_x509_crt_set_subject_alt_name() was added. It can >> either set or append alternative names. It can also handle binary structures >> such as IP addresses. >> * New function to set minimum acceptable SRP bits. >> * Add interface to deal with public key and signature algorithms. >> * New interfaces to get name of public key and signing algorithms. >> * New API to get a string corresponding to a error symbol. >> * New API to set the public parameters in a certificate request >> from a private key. >> * New API to set a callback to extract TLS Finished data. >> * Fix namespace problem with TLS_MASTER_SIZE and TLS_RANDOM_SIZE. >> The new names are GNUTLS_MASTER_SIZE and GNUTLS_RANDOM_SIZE. The old >> names are mapped to the new names in compat.h. These mappings will >> likely be removed more quickly than other mappings in that file due to >> the namespace violation. >> * New interface to register a new TLS extension handler. >> The new function gnutls_ext_register can be used to register handlers >> for specific TLS extension types. The callback functions have the new >> types gnutls_ext_recv_func and gnutls_ext_send_func. A type to >> classify TLS extensions, gnutls_ext_parse_type_t, has been added as well. >> >> 3.2. Interfaces: >> Exported Interfaces >> Interface Classification Comments >> --------------- -------------- ----------------------- >> SUNWgnutls Uncommitted Package name (unchanged) >> SUNWgnutls-devel Uncommitted Package name (unchanged) >> >> /usr/lib/libgnutls.so.26 Volatile C library (unchanged) >> /usr/lib/libgnutlsxx.so.26 Volatile C++ library (unchanged) >> >> /usr/share/aclocal/libgnutls.m4 Volatile (unchanged) >> /usr/lib/pkgconfig/gnutls.pc Volatile (unchanged) >> /usr/include/gnutls/gnutls.h Volatile (unchanged) >> /usr/include/gnutls/gnutlsxx.h Volatile (unchanged) >> /usr/include/gnutls/pkcs12.h Volatile (unchanged) >> /usr/include/gnutls/compat.h Volatile (unchanged) >> /usr/include/gnutls/x509.h Volatile (unchanged) >> /usr/bin/libgnutls-config Volatile (unchanged) >> /usr/share/man/man1/libgnutls-config Volatile (unchanged) >> /usr/share/man/man3/libgnutls.3 Volatile (unchanged) >> /usr/share/man/man3/libgnutlsxx.3 Volatile (unchanged) >> /usr/share/doc/SUNWgnutls/AUTHORS Volatile (unchanged) >> /usr/share/doc/SUNWgnutls/NEWS.bz2 Volatile (unchanged) >> /usr/share/doc/SUNWgnutls/README Volatile (unchanged) >> /usr/share/doc/SUNWgnutls/ Volatile (unchanged) >> COPYING.LIB.bz2 >> >> /usr/include/gnutls/openpgp.h Volatile (added) >> /usr/include/gnutls/crypto.h Volatile (added) >> >> Imported Interfaces >> Interface Classification Comments >> --------------- --------------- --------------------- >> /usr/lib/libgcrypt.so.11 Volatile (unchanged) >> LSARC/2008/390/ >> >> /usr/lib/libtasn1.so.3 Volatile (added) >> LSARC/2008/341/ >> >> /usr/lib/libz.so.1 Committed (unchanged) >> PSARC/2006/537 >> >> 3.3. Packaging & Delivery: >> SUNWgnutls(base package) - base package for binaries >> SUNWgnutls-devel (development package) - development package for >> header and documents >> >> 3.4. Dependencies: >> libgnutls depends on libtasn1, libgcrypt and zlib. >> >> 3.5 References >> >> Sun Evolution LSARC/2003/298/ >> libtasn1 LSARC/2008/390/ >> GnuTLS Update for 2.2.4 LSARC/2008/341/ >> >> 4. Resources and Schedule: >> >> 4.1. Product Approval Committee requested information: >> 4.1.1. Consolidation Name: >> >> Desktop Cteam/GNOME >> >> 4.1.2. Contributing OpCo/BU/Division Name: >> >> Desktop Solutions >> >> 4.1.3. Type of PAC Review and Approval expected: >> >> FastTrack >> >> 5. References >> Project website: http://www.gnu.org/software/gnutls/ >> GnuTLS 2.4.0 Release News: >> http://article.gmane.org/gmane.network.gnutls.general/1282 >> GnuTLS 2.6.0 Release News: >> http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3135 >> >> >> >> 6. Resources and Schedule >> 6.4. Steering Committee requested information >> 6.4.1. Consolidation C-team Name: >> Desktop >> 6.5. ARC review type: FastTrack >> 6.6. ARC Exposure: open >> >> > > From Irene.Huang@sun.com Tue Feb 24 21:23:23 2009 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n1P5NMAP019618 for ; Tue, 24 Feb 2009 21:23:22 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id n1P5NFaU000156 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Wed, 25 Feb 2009 13:23:21 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KFL00K0NWAW0X00@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Tue, 24 Feb 2009 21:23:20 -0800 (PST) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KFL00IQEWAVOA20@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Tue, 24 Feb 2009 21:23:20 -0800 (PST) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n1P5NIur021853 for ; Wed, 25 Feb 2009 05:23:18 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7.0-3.01 64bit (built Dec 23 2008)) id <0KFL00600W0PO200@mail-apac.sun.com> for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Wed, 25 Feb 2009 13:23:18 +0800 (SGT) Received: from [192.168.1.2] ([unknown] [123.118.230.194]) by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7.0-3.01 64bit (built Dec 23 2008)) with ESMTPSA id <0KFL006KKWAR5L30@mail-apac.sun.com>; Wed, 25 Feb 2009 13:23:18 +0800 (SGT) Date: Wed, 25 Feb 2009 13:23:15 +0800 From: Irene Huang Subject: Re: Gnutls update to 2.6 [LSARC/2009/098 FastTrack timeout 02/19/2009] In-reply-to: <4994E26A.90400@sun.com> Sender: Irene.Huang@sun.com To: Irene Huang Cc: John.Fischer@sun.com, Shi-Ying Irene Huang , LSARC-ext@sun.com, Brian Cameron , Darren J Moffat , Jeff.Cai@sun.com, Wyllys.Ingersoll@sun.com Message-id: <49A4D5C3.4000906@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200902121250.n1CCoSmd019567@sac.sfbay.sun.com> <1234463460.29339.3.camel@sr1-umpk-12> <4994E26A.90400@sun.com> User-Agent: Thunderbird 2.0.0.19 (Windows/20081209) Status: RO Content-Length: 11418 case closed approved. Thanks --Irene Irene Huang wrote: > we'll include the 64bit information in the updated materials when the > case is to be closed :) > > --Irene > John Fischer wrote: >> All, >> >> Please note that this project also includes the appropriate >> 64-bit library and 64-bit pkg-config file. >> >> Thanks, >> >> John >> >> On Thu, 2009-02-12 at 04:50, Shi-Ying Irene Huang wrote: >> >>> Template Version: @(#)sac_nextcase %I% %G% SMI >>> This information is Copyright 2009 Sun Microsystems >>> 1. Introduction >>> 1.1. Project/Component Working Name: >>> Gnutls update to 2.6 >>> 1.2. Name of Document Author/Supplier: >>> Author: Jeff Cai >>> 1.3 Date of This Document: >>> 12 February, 2009 >>> 4. Technical Description >>> 1. Introduction >>> 1.1. Project/Component Working Name: >>> >>> GnuTLS Update for 2.6.3 >>> >>> 1.2. Name of Document Author/Supplier: >>> Author: Jeff Cai >>> Sponser: Irene Huang >>> >>> 1.3. Date of This Document: >>> >>> 02/06/2009 >>> >>> 1.4. Name of Major Document Customer(s)/Consumer(s): >>> >>> 1.4.1. The PAC or CPT you expect to review your project: >>> >>> Solaris PAC >>> >>> 1.4.2. The ARC(s) you expect to review your project: >>> >>> LSARC >>> >>> 1.4.3. The Director/VP who is "Sponsoring" this project: >>> >>> Robert O'Dea >>> >>> 1.4.4. The name of your business unit: >>> >>> Software - OPG >>> >>> 1.5. Email Aliases: >>> 1.5.1. Responsible Manager: harry.lu@sun.com >>> 1.5.2. Responsible Engineer: jeff.cai@sun.com >>> 1.5.3. Marketing Manager: glynn.foster@sun.com >>> 1.5.4. Interest List: brian.cameron@sun.com >>> darren.moffat@sun.com >>> wyllys.ingersoll@sun.com >>> >>> 2. Project Summary >>> 2.1. Project Description: >>> GnuTLS provides a secure layer, over a reliable >>> transport layer. Currently the GnuTLS library implements the >>> proposed standards by the IETF's TLS working group. >>> >>> This fast-track increments the version of GnuTLS in Solaris >>> from 2.2.4 to 2.6.3. >>> >>> 3. Technical Description: >>> 3.1. Details: >>> GnuTLS is a modern C library that implements the standard >>> network >>> security protocol Transport Layer Security (TLS), for use by >>> network >>> applications. >>> A number of projects in the Solaris Desktop such as Evolution, >>> Pidgin, >>> Ekiga and Vino depend on it. The latest stable >>> version of GnuTLS is 2.6.3. >>> GnuTLS 2.6.0 has interface changes, but 2.6.1 through 2.6.3 are >>> bugfix only releases. >>> >>> Compared with the previously integrated version, GnuTLS 2.2.4, >>> the new >>> version adds following features: >>> >>> * Full OpenPGP support is part of libgnutls, licensed under >>> the LGPL. >>> * The PSK sub-system has been improved and now supports >>> password >>> derivation and PSK identity hints. >>> * The default handshake size limit has been increased to 48kb. >>> The earlier limit was 16kb. The handshake messages contain >>> all handshake >>> messages between a client and a server only if they >>> communicate in >>> TLS protocol. The reason for restricting the handshake >>> message size is to limit Denial of Service attacks. >>> * New APIs to access the raw X.509 Subject and Issuer DN's and >>> elements from the certificate credentials structure. >>> * New APIs to improve working with username/passwords and PSK. >>> * Names of constants to affect certificate printing changed. >>> The constants are used for OpenPGP too, which the names >>> didn't >>> reflect, so the following name change has been made: >>> >>> Old name New name >>> GNUTLS_X509_CRT_FULL GNUTLS_CRT_PRINT_FULL >>> GNUTLS_X509_CRT_ONELINE GNUTLS_CRT_PRINT_ONELINE >>> GNUTLS_X509_CRT_UNSIGNED_FULL GNUTLS_CRT_PRINT_UNSIGNED_FULL >>> The old names will be mapped to the new names for some time. >>> * The function gnutls_openpgp_privkey_get_id has been >>> renamed to >>> gnutls_openpgp_privkey_get_key_id. >>> A compatibility mapping exists to avoid breaking API >>> backwards >>> compatibility. >>> * Replaced all uses of alloca with malloc and free. >>> * Remove code to import certificate chains in PKCS#7 format. >>> The code has not worked since v0.9.0 and apparently nobody >>> has missed >>> it, so the community decided to remove the code rather >>> than fix it. If you have >>> old certificate chains stored in PKCS#7 format, you can >>> convert them >>> to a list of PEM certificates by using 'certtool >>> --p7-info'. * Added API to replace and update the crypto >>> backend. >>> A new header file has been added. It >>> contains >>> definitions related to replacing the internal crypto >>> functionality. >>> All definitions and the header itself are experimental but >>> supported. >>> * gnutls_x509_crt_set_subject_alt_name() was added. It can >>> either set or append alternative names. It can also handle >>> binary structures >>> such as IP addresses. >>> * New function to set minimum acceptable SRP bits. >>> * Add interface to deal with public key and signature >>> algorithms. >>> * New interfaces to get name of public key and signing >>> algorithms. >>> * New API to get a string corresponding to a error symbol. >>> * New API to set the public parameters in a certificate request >>> from a private key. >>> * New API to set a callback to extract TLS Finished data. >>> * Fix namespace problem with TLS_MASTER_SIZE and >>> TLS_RANDOM_SIZE. >>> The new names are GNUTLS_MASTER_SIZE and >>> GNUTLS_RANDOM_SIZE. The old >>> names are mapped to the new names in compat.h. These >>> mappings will >>> likely be removed more quickly than other mappings in that >>> file due to >>> the namespace violation. >>> * New interface to register a new TLS extension handler. >>> The new function gnutls_ext_register can be used to >>> register handlers >>> for specific TLS extension types. The callback functions >>> have the new >>> types gnutls_ext_recv_func and gnutls_ext_send_func. A >>> type to >>> classify TLS extensions, gnutls_ext_parse_type_t, has been >>> added as well. >>> >>> 3.2. Interfaces: >>> Exported Interfaces >>> Interface Classification >>> Comments >>> --------------- -------------- >>> ----------------------- >>> SUNWgnutls Uncommitted >>> Package name (unchanged) >>> SUNWgnutls-devel Uncommitted >>> Package name (unchanged) >>> >>> /usr/lib/libgnutls.so.26 Volatile C >>> library (unchanged) >>> /usr/lib/libgnutlsxx.so.26 Volatile C++ >>> library (unchanged) >>> >>> /usr/share/aclocal/libgnutls.m4 Volatile >>> (unchanged) >>> /usr/lib/pkgconfig/gnutls.pc Volatile >>> (unchanged) >>> /usr/include/gnutls/gnutls.h Volatile >>> (unchanged) >>> /usr/include/gnutls/gnutlsxx.h Volatile >>> (unchanged) >>> /usr/include/gnutls/pkcs12.h Volatile >>> (unchanged) >>> /usr/include/gnutls/compat.h Volatile >>> (unchanged) >>> /usr/include/gnutls/x509.h Volatile >>> (unchanged) >>> /usr/bin/libgnutls-config Volatile >>> (unchanged) >>> /usr/share/man/man1/libgnutls-config Volatile >>> (unchanged) >>> /usr/share/man/man3/libgnutls.3 Volatile >>> (unchanged) >>> /usr/share/man/man3/libgnutlsxx.3 Volatile >>> (unchanged) >>> /usr/share/doc/SUNWgnutls/AUTHORS Volatile >>> (unchanged) >>> /usr/share/doc/SUNWgnutls/NEWS.bz2 Volatile >>> (unchanged) >>> /usr/share/doc/SUNWgnutls/README Volatile >>> (unchanged) >>> /usr/share/doc/SUNWgnutls/ Volatile >>> (unchanged) >>> COPYING.LIB.bz2 >>> >>> /usr/include/gnutls/openpgp.h Volatile (added) >>> /usr/include/gnutls/crypto.h Volatile (added) >>> >>> Imported Interfaces >>> Interface Classification >>> Comments >>> --------------- --------------- >>> --------------------- >>> /usr/lib/libgcrypt.so.11 Volatile >>> (unchanged) >>> >>> LSARC/2008/390/ >>> >>> /usr/lib/libtasn1.so.3 Volatile >>> (added) >>> >>> LSARC/2008/341/ >>> >>> /usr/lib/libz.so.1 Committed >>> (unchanged) >>> >>> PSARC/2006/537 >>> >>> 3.3. Packaging & Delivery: >>> SUNWgnutls(base package) - base package >>> for binaries >>> SUNWgnutls-devel (development package) - development >>> package for >>> header and documents >>> >>> 3.4. Dependencies: >>> libgnutls depends on libtasn1, libgcrypt and zlib. >>> >>> 3.5 References >>> Sun Evolution LSARC/2003/298/ >>> libtasn1 LSARC/2008/390/ >>> GnuTLS Update for 2.2.4 LSARC/2008/341/ >>> >>> 4. Resources and Schedule: >>> 4.1. Product Approval Committee requested information: >>> 4.1.1. Consolidation Name: >>> >>> Desktop Cteam/GNOME >>> >>> 4.1.2. Contributing OpCo/BU/Division Name: >>> >>> Desktop Solutions >>> >>> 4.1.3. Type of PAC Review and Approval expected: >>> >>> FastTrack >>> >>> 5. References >>> Project website: http://www.gnu.org/software/gnutls/ >>> GnuTLS 2.4.0 Release News: >>> http://article.gmane.org/gmane.network.gnutls.general/1282 >>> GnuTLS 2.6.0 Release News: >>> >>> http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3135 >>> >>> >>> >>> 6. Resources and Schedule >>> 6.4. Steering Committee requested information >>> 6.4.1. Consolidation C-team Name: >>> Desktop >>> 6.5. ARC review type: FastTrack >>> 6.6. ARC Exposure: open >>> >>> >> >> > From margot.miller@sun.com Thu Feb 26 22:30:34 2009 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n1R6UYbv022758 for ; Thu, 26 Feb 2009 22:30:34 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n1R6UT5e007996; Thu, 26 Feb 2009 22:30:30 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KFP0040TOQUGU00@brm-avmta-1.central.sun.com>; Thu, 26 Feb 2009 23:30:30 -0700 (MST) Received: from jurassic-x4600.sfbay.sun.com ([129.146.17.59]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KFP003L6OQTG700@brm-avmta-1.central.sun.com>; Thu, 26 Feb 2009 23:30:29 -0700 (MST) Received: from [10.7.250.251] (punchin-client-10-7-250-251.SFBay.Sun.COM [10.7.250.251]) by jurassic-x4600.sfbay.sun.com (8.14.3+Sun/8.14.3) with ESMTP id n1R6UKqF119146; Thu, 26 Feb 2009 22:30:22 -0800 (PST) Date: Thu, 26 Feb 2009 22:26:37 -0800 From: Margot Miller Subject: Re: Gnutls update to 2.6 [LSARC/2009/098 FastTrack timeout 02/19/2009] In-reply-to: <1234463460.29339.3.camel@sr1-umpk-12> To: John.Fischer@sun.com Cc: Shi-Ying Irene Huang , LSARC-ext@sun.com, Brian Cameron , Darren J Moffat , Jeff.Cai@sun.com, Wyllys.Ingersoll@sun.com Message-id: <49A7879D.5050603@sun.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200902121250.n1CCoSmd019567@sac.sfbay.sun.com> <1234463460.29339.3.camel@sr1-umpk-12> User-Agent: Thunderbird 2.0b1 (X11/20070115) Status: RO Content-Length: 10951 Hey, It looks like there are new interfaces according to the technical description, which are just new interfaces to libgnutls.so.26 and libgnutlsxx.so.26. If that is the case and the man pages reflect that, then +1. Thanks Margot John Fischer wrote: > All, > > Please note that this project also includes the appropriate > 64-bit library and 64-bit pkg-config file. > > Thanks, > > John > > On Thu, 2009-02-12 at 04:50, Shi-Ying Irene Huang wrote: > >> Template Version: @(#)sac_nextcase %I% %G% SMI >> This information is Copyright 2009 Sun Microsystems >> 1. Introduction >> 1.1. Project/Component Working Name: >> Gnutls update to 2.6 >> 1.2. Name of Document Author/Supplier: >> Author: Jeff Cai >> 1.3 Date of This Document: >> 12 February, 2009 >> 4. Technical Description >> 1. Introduction >> 1.1. Project/Component Working Name: >> >> GnuTLS Update for 2.6.3 >> >> 1.2. Name of Document Author/Supplier: >> >> Author: Jeff Cai >> Sponser: Irene Huang >> >> 1.3. Date of This Document: >> >> 02/06/2009 >> >> 1.4. Name of Major Document Customer(s)/Consumer(s): >> >> 1.4.1. The PAC or CPT you expect to review your project: >> >> Solaris PAC >> >> 1.4.2. The ARC(s) you expect to review your project: >> >> LSARC >> >> 1.4.3. The Director/VP who is "Sponsoring" this project: >> >> Robert O'Dea >> >> 1.4.4. The name of your business unit: >> >> Software - OPG >> >> 1.5. Email Aliases: >> 1.5.1. Responsible Manager: harry.lu@sun.com >> 1.5.2. Responsible Engineer: jeff.cai@sun.com >> 1.5.3. Marketing Manager: glynn.foster@sun.com >> 1.5.4. Interest List: brian.cameron@sun.com >> darren.moffat@sun.com >> wyllys.ingersoll@sun.com >> >> 2. Project Summary >> 2.1. Project Description: >> >> GnuTLS provides a secure layer, over a reliable transport layer. >> Currently the GnuTLS library implements the proposed standards by the >> IETF's TLS working group. >> >> This fast-track increments the version of GnuTLS in Solaris >> from 2.2.4 to 2.6.3. >> >> 3. Technical Description: >> 3.1. Details: >> >> GnuTLS is a modern C library that implements the standard network >> security protocol Transport Layer Security (TLS), for use by network >> applications. >> >> A number of projects in the Solaris Desktop such as Evolution, Pidgin, >> Ekiga and Vino depend on it. >> >> The latest stable version of GnuTLS is 2.6.3. >> >> GnuTLS 2.6.0 has interface changes, but 2.6.1 through 2.6.3 are >> bugfix only releases. >> >> Compared with the previously integrated version, GnuTLS 2.2.4, the new >> version adds following features: >> >> * Full OpenPGP support is part of libgnutls, licensed under the LGPL. >> * The PSK sub-system has been improved and now supports password >> derivation and PSK identity hints. >> * The default handshake size limit has been increased to 48kb. >> The earlier limit was 16kb. The handshake messages contain all handshake >> messages between a client and a server only if they communicate in >> TLS protocol. The reason for restricting the handshake message size is >> to limit Denial of Service attacks. >> * New APIs to access the raw X.509 Subject and Issuer DN's and >> elements from the certificate credentials structure. >> * New APIs to improve working with username/passwords and PSK. >> * Names of constants to affect certificate printing changed. >> The constants are used for OpenPGP too, which the names didn't >> reflect, so the following name change has been made: >> >> Old name New name >> GNUTLS_X509_CRT_FULL GNUTLS_CRT_PRINT_FULL >> GNUTLS_X509_CRT_ONELINE GNUTLS_CRT_PRINT_ONELINE >> GNUTLS_X509_CRT_UNSIGNED_FULL GNUTLS_CRT_PRINT_UNSIGNED_FULL >> The old names will be mapped to the new names for some time. >> * The function gnutls_openpgp_privkey_get_id has been renamed to >> gnutls_openpgp_privkey_get_key_id. >> A compatibility mapping exists to avoid breaking API backwards >> compatibility. >> * Replaced all uses of alloca with malloc and free. >> * Remove code to import certificate chains in PKCS#7 format. >> The code has not worked since v0.9.0 and apparently nobody has missed >> it, so the community decided to remove the code rather than fix it. If you have >> old certificate chains stored in PKCS#7 format, you can convert them >> to a list of PEM certificates by using 'certtool --p7-info'. >> * Added API to replace and update the crypto backend. >> A new header file has been added. It contains >> definitions related to replacing the internal crypto functionality. >> All definitions and the header itself are experimental but supported. >> * gnutls_x509_crt_set_subject_alt_name() was added. It can >> either set or append alternative names. It can also handle binary structures >> such as IP addresses. >> * New function to set minimum acceptable SRP bits. >> * Add interface to deal with public key and signature algorithms. >> * New interfaces to get name of public key and signing algorithms. >> * New API to get a string corresponding to a error symbol. >> * New API to set the public parameters in a certificate request >> from a private key. >> * New API to set a callback to extract TLS Finished data. >> * Fix namespace problem with TLS_MASTER_SIZE and TLS_RANDOM_SIZE. >> The new names are GNUTLS_MASTER_SIZE and GNUTLS_RANDOM_SIZE. The old >> names are mapped to the new names in compat.h. These mappings will >> likely be removed more quickly than other mappings in that file due to >> the namespace violation. >> * New interface to register a new TLS extension handler. >> The new function gnutls_ext_register can be used to register handlers >> for specific TLS extension types. The callback functions have the new >> types gnutls_ext_recv_func and gnutls_ext_send_func. A type to >> classify TLS extensions, gnutls_ext_parse_type_t, has been added as well. >> >> 3.2. Interfaces: >> Exported Interfaces >> Interface Classification Comments >> --------------- -------------- ----------------------- >> SUNWgnutls Uncommitted Package name (unchanged) >> SUNWgnutls-devel Uncommitted Package name (unchanged) >> >> /usr/lib/libgnutls.so.26 Volatile C library (unchanged) >> /usr/lib/libgnutlsxx.so.26 Volatile C++ library (unchanged) >> >> /usr/share/aclocal/libgnutls.m4 Volatile (unchanged) >> /usr/lib/pkgconfig/gnutls.pc Volatile (unchanged) >> /usr/include/gnutls/gnutls.h Volatile (unchanged) >> /usr/include/gnutls/gnutlsxx.h Volatile (unchanged) >> /usr/include/gnutls/pkcs12.h Volatile (unchanged) >> /usr/include/gnutls/compat.h Volatile (unchanged) >> /usr/include/gnutls/x509.h Volatile (unchanged) >> /usr/bin/libgnutls-config Volatile (unchanged) >> /usr/share/man/man1/libgnutls-config Volatile (unchanged) >> /usr/share/man/man3/libgnutls.3 Volatile (unchanged) >> /usr/share/man/man3/libgnutlsxx.3 Volatile (unchanged) >> /usr/share/doc/SUNWgnutls/AUTHORS Volatile (unchanged) >> /usr/share/doc/SUNWgnutls/NEWS.bz2 Volatile (unchanged) >> /usr/share/doc/SUNWgnutls/README Volatile (unchanged) >> /usr/share/doc/SUNWgnutls/ Volatile (unchanged) >> COPYING.LIB.bz2 >> >> /usr/include/gnutls/openpgp.h Volatile (added) >> /usr/include/gnutls/crypto.h Volatile (added) >> >> Imported Interfaces >> Interface Classification Comments >> --------------- --------------- --------------------- >> /usr/lib/libgcrypt.so.11 Volatile (unchanged) >> LSARC/2008/390/ >> >> /usr/lib/libtasn1.so.3 Volatile (added) >> LSARC/2008/341/ >> >> /usr/lib/libz.so.1 Committed (unchanged) >> PSARC/2006/537 >> >> 3.3. Packaging & Delivery: >> SUNWgnutls(base package) - base package for binaries >> SUNWgnutls-devel (development package) - development package for >> header and documents >> >> 3.4. Dependencies: >> libgnutls depends on libtasn1, libgcrypt and zlib. >> >> 3.5 References >> >> Sun Evolution LSARC/2003/298/ >> libtasn1 LSARC/2008/390/ >> GnuTLS Update for 2.2.4 LSARC/2008/341/ >> >> 4. Resources and Schedule: >> >> 4.1. Product Approval Committee requested information: >> 4.1.1. Consolidation Name: >> >> Desktop Cteam/GNOME >> >> 4.1.2. Contributing OpCo/BU/Division Name: >> >> Desktop Solutions >> >> 4.1.3. Type of PAC Review and Approval expected: >> >> FastTrack >> >> 5. References >> Project website: http://www.gnu.org/software/gnutls/ >> GnuTLS 2.4.0 Release News: >> http://article.gmane.org/gmane.network.gnutls.general/1282 >> GnuTLS 2.6.0 Release News: >> http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3135 >> >> >> >> 6. Resources and Schedule >> 6.4. Steering Committee requested information >> 6.4.1. Consolidation C-team Name: >> Desktop >> 6.5. ARC review type: FastTrack >> 6.6. ARC Exposure: open >> >> > > From Jeff.Cai@sun.com Thu Feb 26 22:35:52 2009 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n1R6Zpof022806 for ; Thu, 26 Feb 2009 22:35:51 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id n1R6Zg2N003733 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Fri, 27 Feb 2009 14:35:50 +0800 (SGT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KFP00505OZM1H00@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 26 Feb 2009 23:35:46 -0700 (MST) Received: from sineb-mail-1.sun.com ([192.18.19.6]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KFP003S2OZKG900@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 26 Feb 2009 23:35:45 -0700 (MST) Received: from fe-apac-06.sun.com (fe-apac-06.sun.com [192.18.19.177] (may be forged)) by sineb-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n1R6Ziko029298 for ; Fri, 27 Feb 2009 06:35:44 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7.0-3.01 64bit (built Dec 23 2008)) id <0KFP00H00OXWDR00@mail-apac.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Fri, 27 Feb 2009 14:35:44 +0800 (SGT) Received: from [129.158.217.199] ([unknown] [129.158.217.199]) by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7.0-3.01 64bit (built Dec 23 2008)) with ESMTPSA id <0KFP00425OZIYP60@mail-apac.sun.com>; Fri, 27 Feb 2009 14:35:44 +0800 (SGT) Date: Fri, 27 Feb 2009 14:29:40 +0800 From: Jeff Cai Subject: Re: Gnutls update to 2.6 [LSARC/2009/098 FastTrack timeout 02/19/2009] In-reply-to: <49A7879D.5050603@sun.com> Sender: Jeff.Cai@sun.com To: Margot Miller Cc: John.Fischer@sun.com, Shi-Ying Irene Huang , LSARC-ext@sun.com, Brian Cameron , Darren J Moffat , Wyllys.Ingersoll@sun.com Message-id: <49A78854.2030106@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200902121250.n1CCoSmd019567@sac.sfbay.sun.com> <1234463460.29339.3.camel@sr1-umpk-12> <49A7879D.5050603@sun.com> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1b3pre) Gecko/20090223 Thunderbird/3.0b1 Status: RO Content-Length: 11606 The project team will update the man pages before the integration. Thanks Jeff On 02/27/09 14:26, Margot Miller wrote: > Hey, > > It looks like there are new interfaces according to the > technical description, which are just new interfaces > to libgnutls.so.26 and libgnutlsxx.so.26. If that is > the case and the man pages reflect that, then +1. > > Thanks > Margot > > > John Fischer wrote: >> All, >> >> Please note that this project also includes the appropriate >> 64-bit library and 64-bit pkg-config file. >> >> Thanks, >> >> John >> >> On Thu, 2009-02-12 at 04:50, Shi-Ying Irene Huang wrote: >>> Template Version: @(#)sac_nextcase %I% %G% SMI >>> This information is Copyright 2009 Sun Microsystems >>> 1. Introduction >>> 1.1. Project/Component Working Name: >>> Gnutls update to 2.6 >>> 1.2. Name of Document Author/Supplier: >>> Author: Jeff Cai >>> 1.3 Date of This Document: >>> 12 February, 2009 >>> 4. Technical Description >>> 1. Introduction >>> 1.1. Project/Component Working Name: >>> >>> GnuTLS Update for 2.6.3 >>> >>> 1.2. Name of Document Author/Supplier: >>> Author: Jeff Cai >>> Sponser: Irene Huang >>> >>> 1.3. Date of This Document: >>> >>> 02/06/2009 >>> >>> 1.4. Name of Major Document Customer(s)/Consumer(s): >>> >>> 1.4.1. The PAC or CPT you expect to review your project: >>> >>> Solaris PAC >>> >>> 1.4.2. The ARC(s) you expect to review your project: >>> >>> LSARC >>> >>> 1.4.3. The Director/VP who is "Sponsoring" this project: >>> >>> Robert O'Dea >>> >>> 1.4.4. The name of your business unit: >>> >>> Software - OPG >>> >>> 1.5. Email Aliases: >>> 1.5.1. Responsible Manager: harry.lu@sun.com >>> 1.5.2. Responsible Engineer: jeff.cai@sun.com >>> 1.5.3. Marketing Manager: glynn.foster@sun.com >>> 1.5.4. Interest List: brian.cameron@sun.com >>> darren.moffat@sun.com >>> wyllys.ingersoll@sun.com >>> >>> 2. Project Summary >>> 2.1. Project Description: >>> GnuTLS provides a secure layer, over a reliable >>> transport layer. Currently the GnuTLS library implements the >>> proposed standards by the IETF's TLS working group. >>> >>> This fast-track increments the version of GnuTLS in Solaris >>> from 2.2.4 to 2.6.3. >>> >>> 3. Technical Description: >>> 3.1. Details: >>> GnuTLS is a modern C library that implements the standard >>> network >>> security protocol Transport Layer Security (TLS), for use by >>> network >>> applications. >>> A number of projects in the Solaris Desktop such as Evolution, >>> Pidgin, >>> Ekiga and Vino depend on it. The latest stable >>> version of GnuTLS is 2.6.3. >>> GnuTLS 2.6.0 has interface changes, but 2.6.1 through 2.6.3 are >>> bugfix only releases. >>> >>> Compared with the previously integrated version, GnuTLS 2.2.4, >>> the new >>> version adds following features: >>> >>> * Full OpenPGP support is part of libgnutls, licensed under >>> the LGPL. >>> * The PSK sub-system has been improved and now supports >>> password >>> derivation and PSK identity hints. >>> * The default handshake size limit has been increased to 48kb. >>> The earlier limit was 16kb. The handshake messages contain >>> all handshake >>> messages between a client and a server only if they >>> communicate in >>> TLS protocol. The reason for restricting the handshake >>> message size is to limit Denial of Service attacks. >>> * New APIs to access the raw X.509 Subject and Issuer DN's and >>> elements from the certificate credentials structure. >>> * New APIs to improve working with username/passwords and PSK. >>> * Names of constants to affect certificate printing changed. >>> The constants are used for OpenPGP too, which the names >>> didn't >>> reflect, so the following name change has been made: >>> >>> Old name New name >>> GNUTLS_X509_CRT_FULL GNUTLS_CRT_PRINT_FULL >>> GNUTLS_X509_CRT_ONELINE GNUTLS_CRT_PRINT_ONELINE >>> GNUTLS_X509_CRT_UNSIGNED_FULL GNUTLS_CRT_PRINT_UNSIGNED_FULL >>> The old names will be mapped to the new names for some time. >>> * The function gnutls_openpgp_privkey_get_id has been >>> renamed to >>> gnutls_openpgp_privkey_get_key_id. >>> A compatibility mapping exists to avoid breaking API >>> backwards >>> compatibility. >>> * Replaced all uses of alloca with malloc and free. >>> * Remove code to import certificate chains in PKCS#7 format. >>> The code has not worked since v0.9.0 and apparently nobody >>> has missed >>> it, so the community decided to remove the code rather >>> than fix it. If you have >>> old certificate chains stored in PKCS#7 format, you can >>> convert them >>> to a list of PEM certificates by using 'certtool >>> --p7-info'. * Added API to replace and update the crypto >>> backend. >>> A new header file has been added. It >>> contains >>> definitions related to replacing the internal crypto >>> functionality. >>> All definitions and the header itself are experimental but >>> supported. >>> * gnutls_x509_crt_set_subject_alt_name() was added. It can >>> either set or append alternative names. It can also handle >>> binary structures >>> such as IP addresses. >>> * New function to set minimum acceptable SRP bits. >>> * Add interface to deal with public key and signature >>> algorithms. >>> * New interfaces to get name of public key and signing >>> algorithms. >>> * New API to get a string corresponding to a error symbol. >>> * New API to set the public parameters in a certificate request >>> from a private key. >>> * New API to set a callback to extract TLS Finished data. >>> * Fix namespace problem with TLS_MASTER_SIZE and >>> TLS_RANDOM_SIZE. >>> The new names are GNUTLS_MASTER_SIZE and >>> GNUTLS_RANDOM_SIZE. The old >>> names are mapped to the new names in compat.h. These >>> mappings will >>> likely be removed more quickly than other mappings in that >>> file due to >>> the namespace violation. >>> * New interface to register a new TLS extension handler. >>> The new function gnutls_ext_register can be used to >>> register handlers >>> for specific TLS extension types. The callback functions >>> have the new >>> types gnutls_ext_recv_func and gnutls_ext_send_func. A >>> type to >>> classify TLS extensions, gnutls_ext_parse_type_t, has been >>> added as well. >>> >>> 3.2. Interfaces: >>> Exported Interfaces >>> Interface Classification >>> Comments >>> --------------- -------------- >>> ----------------------- >>> SUNWgnutls Uncommitted >>> Package name (unchanged) >>> SUNWgnutls-devel Uncommitted >>> Package name (unchanged) >>> >>> /usr/lib/libgnutls.so.26 Volatile C >>> library (unchanged) >>> /usr/lib/libgnutlsxx.so.26 Volatile C++ >>> library (unchanged) >>> >>> /usr/share/aclocal/libgnutls.m4 Volatile >>> (unchanged) >>> /usr/lib/pkgconfig/gnutls.pc Volatile >>> (unchanged) >>> /usr/include/gnutls/gnutls.h Volatile >>> (unchanged) >>> /usr/include/gnutls/gnutlsxx.h Volatile >>> (unchanged) >>> /usr/include/gnutls/pkcs12.h Volatile >>> (unchanged) >>> /usr/include/gnutls/compat.h Volatile >>> (unchanged) >>> /usr/include/gnutls/x509.h Volatile >>> (unchanged) >>> /usr/bin/libgnutls-config Volatile >>> (unchanged) >>> /usr/share/man/man1/libgnutls-config Volatile >>> (unchanged) >>> /usr/share/man/man3/libgnutls.3 Volatile >>> (unchanged) >>> /usr/share/man/man3/libgnutlsxx.3 Volatile >>> (unchanged) >>> /usr/share/doc/SUNWgnutls/AUTHORS Volatile >>> (unchanged) >>> /usr/share/doc/SUNWgnutls/NEWS.bz2 Volatile >>> (unchanged) >>> /usr/share/doc/SUNWgnutls/README Volatile >>> (unchanged) >>> /usr/share/doc/SUNWgnutls/ Volatile >>> (unchanged) >>> COPYING.LIB.bz2 >>> >>> /usr/include/gnutls/openpgp.h Volatile (added) >>> /usr/include/gnutls/crypto.h Volatile (added) >>> >>> Imported Interfaces >>> Interface Classification >>> Comments >>> --------------- --------------- >>> --------------------- >>> /usr/lib/libgcrypt.so.11 Volatile >>> (unchanged) >>> >>> LSARC/2008/390/ >>> >>> /usr/lib/libtasn1.so.3 Volatile >>> (added) >>> >>> LSARC/2008/341/ >>> >>> /usr/lib/libz.so.1 Committed >>> (unchanged) >>> >>> PSARC/2006/537 >>> >>> 3.3. Packaging & Delivery: >>> SUNWgnutls(base package) - base package >>> for binaries >>> SUNWgnutls-devel (development package) - development >>> package for >>> header and documents >>> >>> 3.4. Dependencies: >>> libgnutls depends on libtasn1, libgcrypt and zlib. >>> >>> 3.5 References >>> Sun Evolution LSARC/2003/298/ >>> libtasn1 LSARC/2008/390/ >>> GnuTLS Update for 2.2.4 LSARC/2008/341/ >>> >>> 4. Resources and Schedule: >>> 4.1. Product Approval Committee requested information: >>> 4.1.1. Consolidation Name: >>> >>> Desktop Cteam/GNOME >>> >>> 4.1.2. Contributing OpCo/BU/Division Name: >>> >>> Desktop Solutions >>> >>> 4.1.3. Type of PAC Review and Approval expected: >>> >>> FastTrack >>> >>> 5. References >>> Project website: http://www.gnu.org/software/gnutls/ >>> GnuTLS 2.4.0 Release News: >>> http://article.gmane.org/gmane.network.gnutls.general/1282 >>> GnuTLS 2.6.0 Release News: >>> >>> http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3135 >>> >>> >>> >>> 6. Resources and Schedule >>> 6.4. Steering Committee requested information >>> 6.4.1. Consolidation C-team Name: >>> Desktop >>> 6.5. ARC review type: FastTrack >>> 6.6. ARC Exposure: open >>> >> > From John.Fischer@sun.com Fri Feb 27 10:19:04 2009 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n1RIJ4cu017713 for ; Fri, 27 Feb 2009 10:19:04 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n1RIJ12F000469 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Fri, 27 Feb 2009 11:19:04 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KFQ0081NLJQ5D00@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Fri, 27 Feb 2009 10:19:02 -0800 (PST) Received: from sca-es-mail-2.sun.com ([192.18.43.133]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KFQ009LXLJQ7IE0@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Fri, 27 Feb 2009 10:19:02 -0800 (PST) Received: from fe-sfbay-09.sun.com ([192.18.43.129]) by sca-es-mail-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id n1RIJ2jn013884 for ; Fri, 27 Feb 2009 10:19:02 -0800 (PST) Received: from conversion-daemon.fe-sfbay-09.sun.com by fe-sfbay-09.sun.com (Sun Java(tm) System Messaging Server 7.0-3.01 64bit (built Dec 23 2008)) id <0KFQ00K00KRDLR00@fe-sfbay-09.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Fri, 27 Feb 2009 10:19:01 -0800 (PST) Received: from [192.168.10.10] ([unknown] [76.20.56.47]) by fe-sfbay-09.sun.com (Sun Java(tm) System Messaging Server 7.0-3.01 64bit (built Dec 23 2008)) with ESMTPSA id <0KFQ00LSCLJJOX20@fe-sfbay-09.sun.com>; Fri, 27 Feb 2009 10:18:56 -0800 (PST) Date: Fri, 27 Feb 2009 10:17:43 -0800 From: John Fischer Subject: Re: Gnutls update to 2.6 [LSARC/2009/098 FastTrack timeout 02/19/2009] In-reply-to: <49A78854.2030106@sun.com> Sender: John.Fischer@sun.com To: Jeff Cai Cc: Margot Miller , Shi-Ying Irene Huang , LSARC-ext@sun.com, Brian Cameron , Darren J Moffat , Wyllys.Ingersoll@sun.com Reply-to: John.Fischer@sun.com Message-id: <49A82E47.7050607@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200902121250.n1CCoSmd019567@sac.sfbay.sun.com> <1234463460.29339.3.camel@sr1-umpk-12> <49A7879D.5050603@sun.com> <49A78854.2030106@sun.com> User-Agent: Thunderbird 2.0.0.18 (X11/20090203) Status: RO Content-Length: 12009 All, I should have added the +1 to my original email. So ... +1. John Jeff Cai wrote: > The project team will update the man pages before the integration. > > Thanks > > Jeff > > On 02/27/09 14:26, Margot Miller wrote: >> Hey, >> >> It looks like there are new interfaces according to the >> technical description, which are just new interfaces >> to libgnutls.so.26 and libgnutlsxx.so.26. If that is >> the case and the man pages reflect that, then +1. >> >> Thanks >> Margot >> >> >> John Fischer wrote: >>> All, >>> >>> Please note that this project also includes the appropriate >>> 64-bit library and 64-bit pkg-config file. >>> >>> Thanks, >>> >>> John >>> >>> On Thu, 2009-02-12 at 04:50, Shi-Ying Irene Huang wrote: >>>> Template Version: @(#)sac_nextcase %I% %G% SMI >>>> This information is Copyright 2009 Sun Microsystems >>>> 1. Introduction >>>> 1.1. Project/Component Working Name: >>>> Gnutls update to 2.6 >>>> 1.2. Name of Document Author/Supplier: >>>> Author: Jeff Cai >>>> 1.3 Date of This Document: >>>> 12 February, 2009 >>>> 4. Technical Description >>>> 1. Introduction >>>> 1.1. Project/Component Working Name: >>>> >>>> GnuTLS Update for 2.6.3 >>>> >>>> 1.2. Name of Document Author/Supplier: >>>> Author: Jeff Cai >>>> Sponser: Irene Huang >>>> >>>> 1.3. Date of This Document: >>>> >>>> 02/06/2009 >>>> >>>> 1.4. Name of Major Document Customer(s)/Consumer(s): >>>> >>>> 1.4.1. The PAC or CPT you expect to review your project: >>>> >>>> Solaris PAC >>>> >>>> 1.4.2. The ARC(s) you expect to review your project: >>>> >>>> LSARC >>>> >>>> 1.4.3. The Director/VP who is "Sponsoring" this project: >>>> >>>> Robert O'Dea >>>> >>>> 1.4.4. The name of your business unit: >>>> >>>> Software - OPG >>>> >>>> 1.5. Email Aliases: >>>> 1.5.1. Responsible Manager: harry.lu@sun.com >>>> 1.5.2. Responsible Engineer: jeff.cai@sun.com >>>> 1.5.3. Marketing Manager: glynn.foster@sun.com >>>> 1.5.4. Interest List: brian.cameron@sun.com >>>> darren.moffat@sun.com >>>> wyllys.ingersoll@sun.com >>>> >>>> 2. Project Summary >>>> 2.1. Project Description: >>>> GnuTLS provides a secure layer, over a reliable >>>> transport layer. Currently the GnuTLS library implements the >>>> proposed standards by the IETF's TLS working group. >>>> >>>> This fast-track increments the version of GnuTLS in Solaris >>>> from 2.2.4 to 2.6.3. >>>> >>>> 3. Technical Description: >>>> 3.1. Details: >>>> GnuTLS is a modern C library that implements the standard >>>> network >>>> security protocol Transport Layer Security (TLS), for use by >>>> network >>>> applications. >>>> A number of projects in the Solaris Desktop such as Evolution, >>>> Pidgin, >>>> Ekiga and Vino depend on it. The latest stable >>>> version of GnuTLS is 2.6.3. >>>> GnuTLS 2.6.0 has interface changes, but 2.6.1 through 2.6.3 are >>>> bugfix only releases. >>>> >>>> Compared with the previously integrated version, GnuTLS 2.2.4, >>>> the new >>>> version adds following features: >>>> >>>> * Full OpenPGP support is part of libgnutls, licensed under >>>> the LGPL. >>>> * The PSK sub-system has been improved and now supports >>>> password >>>> derivation and PSK identity hints. >>>> * The default handshake size limit has been increased to 48kb. >>>> The earlier limit was 16kb. The handshake messages contain >>>> all handshake >>>> messages between a client and a server only if they >>>> communicate in >>>> TLS protocol. The reason for restricting the handshake >>>> message size is to limit Denial of Service attacks. >>>> * New APIs to access the raw X.509 Subject and Issuer DN's and >>>> elements from the certificate credentials structure. >>>> * New APIs to improve working with username/passwords and PSK. >>>> * Names of constants to affect certificate printing changed. >>>> The constants are used for OpenPGP too, which the names >>>> didn't >>>> reflect, so the following name change has been made: >>>> >>>> Old name New name >>>> GNUTLS_X509_CRT_FULL GNUTLS_CRT_PRINT_FULL >>>> GNUTLS_X509_CRT_ONELINE GNUTLS_CRT_PRINT_ONELINE >>>> GNUTLS_X509_CRT_UNSIGNED_FULL GNUTLS_CRT_PRINT_UNSIGNED_FULL >>>> The old names will be mapped to the new names for some time. >>>> * The function gnutls_openpgp_privkey_get_id has been >>>> renamed to >>>> gnutls_openpgp_privkey_get_key_id. >>>> A compatibility mapping exists to avoid breaking API >>>> backwards >>>> compatibility. >>>> * Replaced all uses of alloca with malloc and free. >>>> * Remove code to import certificate chains in PKCS#7 format. >>>> The code has not worked since v0.9.0 and apparently nobody >>>> has missed >>>> it, so the community decided to remove the code rather >>>> than fix it. If you have >>>> old certificate chains stored in PKCS#7 format, you can >>>> convert them >>>> to a list of PEM certificates by using 'certtool >>>> --p7-info'. * Added API to replace and update the crypto >>>> backend. >>>> A new header file has been added. It >>>> contains >>>> definitions related to replacing the internal crypto >>>> functionality. >>>> All definitions and the header itself are experimental but >>>> supported. >>>> * gnutls_x509_crt_set_subject_alt_name() was added. It can >>>> either set or append alternative names. It can also handle >>>> binary structures >>>> such as IP addresses. >>>> * New function to set minimum acceptable SRP bits. >>>> * Add interface to deal with public key and signature >>>> algorithms. >>>> * New interfaces to get name of public key and signing >>>> algorithms. >>>> * New API to get a string corresponding to a error symbol. >>>> * New API to set the public parameters in a certificate request >>>> from a private key. >>>> * New API to set a callback to extract TLS Finished data. >>>> * Fix namespace problem with TLS_MASTER_SIZE and >>>> TLS_RANDOM_SIZE. >>>> The new names are GNUTLS_MASTER_SIZE and >>>> GNUTLS_RANDOM_SIZE. The old >>>> names are mapped to the new names in compat.h. These >>>> mappings will >>>> likely be removed more quickly than other mappings in that >>>> file due to >>>> the namespace violation. >>>> * New interface to register a new TLS extension handler. >>>> The new function gnutls_ext_register can be used to >>>> register handlers >>>> for specific TLS extension types. The callback functions >>>> have the new >>>> types gnutls_ext_recv_func and gnutls_ext_send_func. A >>>> type to >>>> classify TLS extensions, gnutls_ext_parse_type_t, has been >>>> added as well. >>>> >>>> 3.2. Interfaces: >>>> Exported Interfaces >>>> Interface Classification >>>> Comments >>>> --------------- -------------- >>>> ----------------------- >>>> SUNWgnutls Uncommitted >>>> Package name (unchanged) >>>> SUNWgnutls-devel Uncommitted >>>> Package name (unchanged) >>>> >>>> /usr/lib/libgnutls.so.26 Volatile C >>>> library (unchanged) >>>> /usr/lib/libgnutlsxx.so.26 Volatile C++ >>>> library (unchanged) >>>> >>>> /usr/share/aclocal/libgnutls.m4 Volatile >>>> (unchanged) >>>> /usr/lib/pkgconfig/gnutls.pc Volatile >>>> (unchanged) >>>> /usr/include/gnutls/gnutls.h Volatile >>>> (unchanged) >>>> /usr/include/gnutls/gnutlsxx.h Volatile >>>> (unchanged) >>>> /usr/include/gnutls/pkcs12.h Volatile >>>> (unchanged) >>>> /usr/include/gnutls/compat.h Volatile >>>> (unchanged) >>>> /usr/include/gnutls/x509.h Volatile >>>> (unchanged) >>>> /usr/bin/libgnutls-config Volatile >>>> (unchanged) >>>> /usr/share/man/man1/libgnutls-config Volatile >>>> (unchanged) >>>> /usr/share/man/man3/libgnutls.3 Volatile >>>> (unchanged) >>>> /usr/share/man/man3/libgnutlsxx.3 Volatile >>>> (unchanged) >>>> /usr/share/doc/SUNWgnutls/AUTHORS Volatile >>>> (unchanged) >>>> /usr/share/doc/SUNWgnutls/NEWS.bz2 Volatile >>>> (unchanged) >>>> /usr/share/doc/SUNWgnutls/README Volatile >>>> (unchanged) >>>> /usr/share/doc/SUNWgnutls/ Volatile >>>> (unchanged) >>>> COPYING.LIB.bz2 >>>> >>>> /usr/include/gnutls/openpgp.h Volatile (added) >>>> /usr/include/gnutls/crypto.h Volatile (added) >>>> >>>> Imported Interfaces >>>> Interface Classification >>>> Comments >>>> --------------- --------------- >>>> --------------------- >>>> /usr/lib/libgcrypt.so.11 Volatile >>>> (unchanged) >>>> >>>> LSARC/2008/390/ >>>> >>>> /usr/lib/libtasn1.so.3 Volatile >>>> (added) >>>> >>>> LSARC/2008/341/ >>>> >>>> /usr/lib/libz.so.1 Committed >>>> (unchanged) >>>> >>>> PSARC/2006/537 >>>> >>>> 3.3. Packaging & Delivery: >>>> SUNWgnutls(base package) - base package >>>> for binaries >>>> SUNWgnutls-devel (development package) - development >>>> package for >>>> header and documents >>>> >>>> 3.4. Dependencies: >>>> libgnutls depends on libtasn1, libgcrypt and zlib. >>>> >>>> 3.5 References >>>> Sun Evolution LSARC/2003/298/ >>>> libtasn1 LSARC/2008/390/ >>>> GnuTLS Update for 2.2.4 LSARC/2008/341/ >>>> >>>> 4. Resources and Schedule: >>>> 4.1. Product Approval Committee requested information: >>>> 4.1.1. Consolidation Name: >>>> >>>> Desktop Cteam/GNOME >>>> >>>> 4.1.2. Contributing OpCo/BU/Division Name: >>>> >>>> Desktop Solutions >>>> >>>> 4.1.3. Type of PAC Review and Approval expected: >>>> >>>> FastTrack >>>> >>>> 5. References >>>> Project website: http://www.gnu.org/software/gnutls/ >>>> GnuTLS 2.4.0 Release News: >>>> http://article.gmane.org/gmane.network.gnutls.general/1282 >>>> GnuTLS 2.6.0 Release News: >>>> >>>> http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3135 >>>> >>>> >>>> >>>> 6. Resources and Schedule >>>> 6.4. Steering Committee requested information >>>> 6.4.1. Consolidation C-team Name: >>>> Desktop >>>> 6.5. ARC review type: FastTrack >>>> 6.6. ARC Exposure: open >>>> >>> >> > From Irene.Huang@sun.com Tue Mar 3 21:56:28 2009 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n245uSRE021085 for ; Tue, 3 Mar 2009 21:56:28 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n245uQlh024026 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Tue, 3 Mar 2009 22:56:27 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KFY00B0BWI2SS00@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 03 Mar 2009 21:56:26 -0800 (PST) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KFY00NH1WI159F0@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 03 Mar 2009 21:56:26 -0800 (PST) Received: from fe-apac-06.sun.com (fe-apac-06.sun.com [192.18.19.177] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n245uPO1027344 for ; Wed, 04 Mar 2009 05:56:25 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7.0-3.01 64bit (built Dec 23 2008)) id <0KFY00500WHPGK00@mail-apac.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 04 Mar 2009 13:56:25 +0800 (SGT) Received: from [129.158.217.245] ([unknown] [129.158.217.245]) by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7.0-3.01 64bit (built Dec 23 2008)) with ESMTPSA id <0KFY00BRNWHZQK20@mail-apac.sun.com>; Wed, 04 Mar 2009 13:56:24 +0800 (SGT) Date: Wed, 04 Mar 2009 13:56:25 +0800 From: Irene Huang Subject: Re: Gnutls update to 2.6 [LSARC/2009/098 FastTrack timeout 02/19/2009] In-reply-to: <49A82E47.7050607@sun.com> Sender: Irene.Huang@sun.com To: John.Fischer@sun.com Cc: Jeff Cai , Margot Miller , Shi-Ying Irene Huang , LSARC-ext@sun.com, Brian Cameron , Darren J Moffat , Wyllys.Ingersoll@sun.com Message-id: <49AE1809.606@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200902121250.n1CCoSmd019567@sac.sfbay.sun.com> <1234463460.29339.3.camel@sr1-umpk-12> <49A7879D.5050603@sun.com> <49A78854.2030106@sun.com> <49A82E47.7050607@sun.com> User-Agent: Thunderbird 2.0.0.19 (Windows/20081209) Status: RO Content-Length: 12481 Great : ) Thanks John. I would think we can close this case as approved now. --Irene John Fischer wrote: > All, > > I should have added the +1 to my original email. > So ... +1. > > > John > > Jeff Cai wrote: >> The project team will update the man pages before the integration. >> >> Thanks >> >> Jeff >> >> On 02/27/09 14:26, Margot Miller wrote: >>> Hey, >>> >>> It looks like there are new interfaces according to the >>> technical description, which are just new interfaces >>> to libgnutls.so.26 and libgnutlsxx.so.26. If that is >>> the case and the man pages reflect that, then +1. >>> >>> Thanks >>> Margot >>> >>> >>> John Fischer wrote: >>>> All, >>>> >>>> Please note that this project also includes the appropriate >>>> 64-bit library and 64-bit pkg-config file. >>>> >>>> Thanks, >>>> >>>> John >>>> >>>> On Thu, 2009-02-12 at 04:50, Shi-Ying Irene Huang wrote: >>>>> Template Version: @(#)sac_nextcase %I% %G% SMI >>>>> This information is Copyright 2009 Sun Microsystems >>>>> 1. Introduction >>>>> 1.1. Project/Component Working Name: >>>>> Gnutls update to 2.6 >>>>> 1.2. Name of Document Author/Supplier: >>>>> Author: Jeff Cai >>>>> 1.3 Date of This Document: >>>>> 12 February, 2009 >>>>> 4. Technical Description >>>>> 1. Introduction >>>>> 1.1. Project/Component Working Name: >>>>> >>>>> GnuTLS Update for 2.6.3 >>>>> >>>>> 1.2. Name of Document Author/Supplier: >>>>> Author: Jeff Cai >>>>> Sponser: Irene Huang >>>>> >>>>> 1.3. Date of This Document: >>>>> >>>>> 02/06/2009 >>>>> >>>>> 1.4. Name of Major Document Customer(s)/Consumer(s): >>>>> >>>>> 1.4.1. The PAC or CPT you expect to review your project: >>>>> >>>>> Solaris PAC >>>>> >>>>> 1.4.2. The ARC(s) you expect to review your project: >>>>> >>>>> LSARC >>>>> >>>>> 1.4.3. The Director/VP who is "Sponsoring" this project: >>>>> >>>>> Robert O'Dea >>>>> >>>>> 1.4.4. The name of your business unit: >>>>> >>>>> Software - OPG >>>>> >>>>> 1.5. Email Aliases: >>>>> 1.5.1. Responsible Manager: harry.lu@sun.com >>>>> 1.5.2. Responsible Engineer: jeff.cai@sun.com >>>>> 1.5.3. Marketing Manager: glynn.foster@sun.com >>>>> 1.5.4. Interest List: brian.cameron@sun.com >>>>> darren.moffat@sun.com >>>>> wyllys.ingersoll@sun.com >>>>> >>>>> 2. Project Summary >>>>> 2.1. Project Description: >>>>> GnuTLS provides a secure layer, over a reliable >>>>> transport layer. Currently the GnuTLS library implements the >>>>> proposed standards by the IETF's TLS working group. >>>>> >>>>> This fast-track increments the version of GnuTLS in Solaris >>>>> from 2.2.4 to 2.6.3. >>>>> >>>>> 3. Technical Description: >>>>> 3.1. Details: >>>>> GnuTLS is a modern C library that implements the >>>>> standard network >>>>> security protocol Transport Layer Security (TLS), for use by >>>>> network >>>>> applications. >>>>> A number of projects in the Solaris Desktop such as >>>>> Evolution, Pidgin, >>>>> Ekiga and Vino depend on it. The latest stable >>>>> version of GnuTLS is 2.6.3. >>>>> GnuTLS 2.6.0 has interface changes, but 2.6.1 through 2.6.3 are >>>>> bugfix only releases. >>>>> >>>>> Compared with the previously integrated version, GnuTLS >>>>> 2.2.4, the new >>>>> version adds following features: >>>>> >>>>> * Full OpenPGP support is part of libgnutls, licensed >>>>> under the LGPL. >>>>> * The PSK sub-system has been improved and now supports >>>>> password >>>>> derivation and PSK identity hints. >>>>> * The default handshake size limit has been increased to >>>>> 48kb. >>>>> The earlier limit was 16kb. The handshake messages >>>>> contain all handshake >>>>> messages between a client and a server only if they >>>>> communicate in >>>>> TLS protocol. The reason for restricting the handshake >>>>> message size is to limit Denial of Service attacks. >>>>> * New APIs to access the raw X.509 Subject and Issuer DN's >>>>> and >>>>> elements from the certificate credentials structure. >>>>> * New APIs to improve working with username/passwords and >>>>> PSK. >>>>> * Names of constants to affect certificate printing changed. >>>>> The constants are used for OpenPGP too, which the names >>>>> didn't >>>>> reflect, so the following name change has been made: >>>>> >>>>> Old name New name >>>>> GNUTLS_X509_CRT_FULL GNUTLS_CRT_PRINT_FULL >>>>> GNUTLS_X509_CRT_ONELINE GNUTLS_CRT_PRINT_ONELINE >>>>> GNUTLS_X509_CRT_UNSIGNED_FULL >>>>> GNUTLS_CRT_PRINT_UNSIGNED_FULL >>>>> The old names will be mapped to the new names for some >>>>> time. >>>>> * The function gnutls_openpgp_privkey_get_id has been >>>>> renamed to >>>>> gnutls_openpgp_privkey_get_key_id. >>>>> A compatibility mapping exists to avoid breaking API >>>>> backwards >>>>> compatibility. >>>>> * Replaced all uses of alloca with malloc and free. >>>>> * Remove code to import certificate chains in PKCS#7 format. >>>>> The code has not worked since v0.9.0 and apparently >>>>> nobody has missed >>>>> it, so the community decided to remove the code rather >>>>> than fix it. If you have >>>>> old certificate chains stored in PKCS#7 format, you can >>>>> convert them >>>>> to a list of PEM certificates by using 'certtool >>>>> --p7-info'. * Added API to replace and update the crypto >>>>> backend. >>>>> A new header file has been added. It >>>>> contains >>>>> definitions related to replacing the internal crypto >>>>> functionality. >>>>> All definitions and the header itself are experimental >>>>> but supported. >>>>> * gnutls_x509_crt_set_subject_alt_name() was added. It can >>>>> either set or append alternative names. It can also >>>>> handle binary structures >>>>> such as IP addresses. >>>>> * New function to set minimum acceptable SRP bits. >>>>> * Add interface to deal with public key and signature >>>>> algorithms. >>>>> * New interfaces to get name of public key and signing >>>>> algorithms. >>>>> * New API to get a string corresponding to a error symbol. >>>>> * New API to set the public parameters in a certificate >>>>> request >>>>> from a private key. >>>>> * New API to set a callback to extract TLS Finished data. >>>>> * Fix namespace problem with TLS_MASTER_SIZE and >>>>> TLS_RANDOM_SIZE. >>>>> The new names are GNUTLS_MASTER_SIZE and >>>>> GNUTLS_RANDOM_SIZE. The old >>>>> names are mapped to the new names in compat.h. These >>>>> mappings will >>>>> likely be removed more quickly than other mappings in >>>>> that file due to >>>>> the namespace violation. >>>>> * New interface to register a new TLS extension handler. >>>>> The new function gnutls_ext_register can be used to >>>>> register handlers >>>>> for specific TLS extension types. The callback >>>>> functions have the new >>>>> types gnutls_ext_recv_func and gnutls_ext_send_func. A >>>>> type to >>>>> classify TLS extensions, gnutls_ext_parse_type_t, has >>>>> been added as well. >>>>> >>>>> 3.2. Interfaces: >>>>> Exported Interfaces >>>>> Interface Classification >>>>> Comments >>>>> --------------- -------------- >>>>> ----------------------- >>>>> SUNWgnutls Uncommitted >>>>> Package name (unchanged) >>>>> SUNWgnutls-devel Uncommitted >>>>> Package name (unchanged) >>>>> >>>>> /usr/lib/libgnutls.so.26 Volatile C >>>>> library (unchanged) >>>>> /usr/lib/libgnutlsxx.so.26 Volatile C++ >>>>> library (unchanged) >>>>> >>>>> /usr/share/aclocal/libgnutls.m4 Volatile >>>>> (unchanged) >>>>> /usr/lib/pkgconfig/gnutls.pc Volatile >>>>> (unchanged) >>>>> /usr/include/gnutls/gnutls.h Volatile >>>>> (unchanged) >>>>> /usr/include/gnutls/gnutlsxx.h Volatile >>>>> (unchanged) >>>>> /usr/include/gnutls/pkcs12.h Volatile >>>>> (unchanged) >>>>> /usr/include/gnutls/compat.h Volatile >>>>> (unchanged) >>>>> /usr/include/gnutls/x509.h Volatile >>>>> (unchanged) >>>>> /usr/bin/libgnutls-config Volatile >>>>> (unchanged) >>>>> /usr/share/man/man1/libgnutls-config Volatile >>>>> (unchanged) >>>>> /usr/share/man/man3/libgnutls.3 Volatile >>>>> (unchanged) >>>>> /usr/share/man/man3/libgnutlsxx.3 Volatile >>>>> (unchanged) >>>>> /usr/share/doc/SUNWgnutls/AUTHORS Volatile >>>>> (unchanged) >>>>> /usr/share/doc/SUNWgnutls/NEWS.bz2 Volatile >>>>> (unchanged) >>>>> /usr/share/doc/SUNWgnutls/README Volatile >>>>> (unchanged) >>>>> /usr/share/doc/SUNWgnutls/ Volatile >>>>> (unchanged) >>>>> COPYING.LIB.bz2 >>>>> >>>>> /usr/include/gnutls/openpgp.h Volatile (added) >>>>> /usr/include/gnutls/crypto.h Volatile >>>>> (added) >>>>> >>>>> Imported Interfaces >>>>> Interface Classification >>>>> Comments >>>>> --------------- --------------- >>>>> --------------------- >>>>> /usr/lib/libgcrypt.so.11 Volatile >>>>> (unchanged) >>>>> >>>>> LSARC/2008/390/ >>>>> >>>>> /usr/lib/libtasn1.so.3 Volatile >>>>> (added) >>>>> >>>>> LSARC/2008/341/ >>>>> >>>>> /usr/lib/libz.so.1 Committed >>>>> (unchanged) >>>>> >>>>> PSARC/2006/537 >>>>> >>>>> 3.3. Packaging & Delivery: >>>>> SUNWgnutls(base package) - base package >>>>> for binaries >>>>> SUNWgnutls-devel (development package) - development >>>>> package for >>>>> header and documents >>>>> >>>>> 3.4. Dependencies: >>>>> libgnutls depends on libtasn1, libgcrypt and zlib. >>>>> >>>>> 3.5 References >>>>> Sun Evolution LSARC/2003/298/ >>>>> libtasn1 LSARC/2008/390/ >>>>> GnuTLS Update for 2.2.4 LSARC/2008/341/ >>>>> >>>>> 4. Resources and Schedule: >>>>> 4.1. Product Approval Committee requested information: >>>>> 4.1.1. Consolidation Name: >>>>> >>>>> Desktop Cteam/GNOME >>>>> >>>>> 4.1.2. Contributing OpCo/BU/Division Name: >>>>> >>>>> Desktop Solutions >>>>> >>>>> 4.1.3. Type of PAC Review and Approval expected: >>>>> >>>>> FastTrack >>>>> >>>>> 5. References >>>>> Project website: http://www.gnu.org/software/gnutls/ >>>>> GnuTLS 2.4.0 Release News: >>>>> http://article.gmane.org/gmane.network.gnutls.general/1282 >>>>> GnuTLS 2.6.0 Release News: >>>>> >>>>> http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3135 >>>>> >>>>> >>>>> >>>>> 6. Resources and Schedule >>>>> 6.4. Steering Committee requested information >>>>> 6.4.1. Consolidation C-team Name: >>>>> Desktop >>>>> 6.5. ARC review type: FastTrack >>>>> 6.6. ARC Exposure: open >>>>> >>>> >>> >>