Changelog for libneon27-0.31.2-86.12.x86_64.rpm :

* Thu Oct 08 2020 pmonrealAATTsuse.com- Disable tests fail_ca_
* that fail since OpenSSL update to 1.1.1h.
* Upstream report: https://github.com/notroj/neon/issues/38- Add neon-0.31.2-CA-tests.patch
* Thu Oct 08 2020 pmonrealAATTsuse.com- Disable fail_nul_
* tests broken with OpenSSL configured to reject certificates created with a SHA1.- Add neon-0.31.2-sha1-tests.patch
* Fri Aug 21 2020 dmuellerAATTsuse.com- update to 0.31.2:
* Fix ne_md5_read_ctx() with OpenSSL on big-endian architectures.
* Fix GCC 10 warning in PKCS#11 build.
* Fix OpenSSL build w/o deprecated APIs (Rosen Penev).
* Fix unnecessary MD5 test for non-Digest auth (Sebastian Reschke).
* Fix hang on SSL connection close with IIS (issue #11).
* Fix ar, ranlib detection when cross-compiling (Sergei Trofimovich).
* Mon Jun 01 2020 vcizekAATTsuse.com- Update to 0.31.1 ADMIN: The neon website has moved to https://notroj.github.io/neon/ Restore ne_md5_read_ctx() in OpenSSL build. Fix gcc warnings on Ubuntu (Jan-Marek Glogowski). Fix various spelling mistakes in docs and headers (thanks to FOSSIES). Fix ne_asctime_parse() (Eugenij-W). Fix build with LibreSSL (Juan RP). Interface changes: none, API and ABI backwards-compatible with 0.27.x and later New interfaces and features: add more gcc “nonnull” attributes to ne_request_
* functions. for OpenSSL builds, ne_md5 code uses the OpenSSL implementation add NE_SESSFLAG_SHAREPOINT session flag which enables workarounds for RFC non-compliance issues in Sharepoint ne_uri.h: add ne_path_escapef() in support of above ne_207.h: add ne_207_set_flags() likewise in support of above API clarification: ne_version_match() behaviour now matches actual 0.27+ ABI history Bug fixes: fixes for OpenSSL 1.1.1 and TLSv1.3 support fix crash with GnuTLS in client cert support (Henrik Holst) fix possible crash in ne_set_request_flag() fix build with libxml2 2.9.10 and later fix handling lock timeouts >LONG_MAX (Giuseppe Castagno)- Upstream has moved to https://notroj.github.io/neon/
* tarball checksums are no longer provided- Drop upstreamed patches:
* neon-0.30.2-nulcert.patch
* neon-0.30.2_ssl-fix_timeout_retvals.patch
* Thu Sep 12 2019 vcizekAATTsuse.com- Drop unnecessary requirement for OpenSSL 1.1.1- Apply neon-0.30.2_ssl-fix_timeout_retvals.patch only when building with OpenSSL 1.1.1 (bsc#1149792)
* Mon Aug 19 2019 lnusselAATTsuse.de- fix testsuite fail due to expired nulcerts (neon-0.30.2-nulcert.patch)
* Fri Oct 19 2018 idonmezAATTsuse.com- BuildRequires libopenssl-1_1-devel >= 1.1.1 becase build fails with 1.1.0
* Fri Oct 19 2018 jengelhAATTinai.de- Remove pointless --with-pic (because of --disable-static)
* Thu Oct 18 2018 jsikesAATTsuse.de- Disabled some tests due to behavior change in underlying OpenSSL.- Replaced error message string to match new message from OpenSSL.- Add neon-0.30.2_ssl-fix_timeout_retvals.patch implementing these two changes.
* Mon Oct 01 2018 jsikesAATTsuse.de- replaced libopenssl-devel with libopenssl-1_1-devel
* Tue Mar 20 2018 adam.majerAATTsuse.de- Install license- replace_manpage_with_links.sh: replace named links with symlinks and stop using fdupes as it just linked linked manpages
* Mon Mar 19 2018 marco.striglAATTsuse.com- fixed flaky timeout tests for ppc64le (bsc#1085850)
* fix_timeout_tests_for_ppc64le.patch
* Wed Aug 23 2017 vcizekAATTsuse.com- Update to 0.30.2 Add support for OpenSSL 1.1.x (Kurt Roeckx). Fix PKCS#11 support under GnuTLS 3.x. PKCS#11 API no longer supported with GnuTLS 2.x- cleaned the .spec
* Wed Mar 04 2015 mpluskalAATTsuse.com- Cleanup spec file with spec-cleaner- Add gpg signature- Enable tests- Use fdupes to remove duplicates- Update to 0.30.1
* small changes, for details see included ChangeLog
* Wed Aug 21 2013 crrodriguezAATTopensuse.org- version 0.30.0
* drop neon-openssl-version.patch
* API and ABI backwards-compatible with 0.27.x and later
* ne_path_escape: fix excessive memory allocation
* added ne_ssl_clicert_import, ne_ssl_context_get_flag, ne_set_addrlist2, added ne_addr_canonical..
* support chunked bodies with negative length passed to ne_set_request_body_provider
* Wed Aug 21 2013 crrodriguezAATTopensuse.org- permanently drop neon-aes-ni.patch which is not applied and obsolete, bug in openSSL already fixed and the ENGINE loading issue addressed in a different fashion.
* Wed Jun 06 2012 meissnerAATTsuse.de- disable explicit openssl version check. openssl 1.0 is stable api wise. [bnc#764906]
* Fri May 04 2012 lnusselAATTsuse.de- don\'t use ca-bundle.pem. neon correctly uses openssl\'s default instead (ie the /etc/ssl/certs directory)
* Mon Jan 30 2012 dmacvicarAATTsuse.de- build with libproxy- make expat explicit in configure- pass ca-bundle.pem to configure
* Mon Jan 30 2012 dmacvicarAATTsuse.de- build with NE_FEATURE_TS_SSL (thread-safe SSL)
* Mon Nov 21 2011 jengelhAATTmedozas.de- Remove redundant/unwanted tags/section (cf. specfile guidelines)
* Sun Nov 20 2011 cooloAATTsuse.com- add libtool as buildrequire to avoid implicit dependency
* Tue Oct 18 2011 dmuellerAATTsuse.de- remove neon-aes-ni.patch temporarily (bnc#720601)
* Mon Sep 05 2011 crrodriguezAATTopensuse.org- test suite hangs or fails in the OBS, but works locally disable it.
* Mon Sep 05 2011 crrodriguezAATTopensuse.org- Load openssl engines as well, needed to support AES-NI, fast/hardware provided hash functions and Ivy bridge\'s RDRAND instruction.
* Thu Jul 21 2011 dmuellerAATTsuse.de- update to 0.29.6:
* Don\'t abort SSL handshake with GnuTLS if a client cert is requested but none is configured/available
* Fix GnuTLS build with Nettle
* Fix the method string passed to create_request hooks to have the same lifetime as the request object
* Docs updates.
* Fix GnuTLS handshakes failures with \'TLS warning alert\'
* Fix SNI support
* Fix possible Solaris linker errors if building static library
* Fix error handling when pulling a request body from an file
* Fix ne_request_dispatch() return value for SOCKS proxy failure cases
* Tighten SSL cert ID checks to deny a wildcard match against an IP address
* Thu May 12 2011 lnusselAATTsuse.de- Obsoletes: neon must be in the lib package. Otherwise libneon-devel gets installed as replacement for neon on distro upgrade, drawing in lots of other devel stuff.
* Sun Aug 22 2010 dimstarAATTopensuse.org- Update to version 0.29.3 + Change ne_sock_close() to no longer wait for SSL closure alert + Fix memory leak with GnuTLS + API clarification in ne_sock_close()- Changes from version 0.29.2: + Fix spurious \'certificate verify failed\' errors with OpenSSL + Fix unnecessary re-authentication with SSPI- Changes from version 0.29.1: + Fixes for (Unix) NTLM implementation: - fix handling of session timeout - fix possible crash + Build fixes for Win32: + Fix build with versions of GnuTLS older than 2.8.0.- Changes from version 0.29.0: + New interfaces and features: - added NTLM auth support for Unix builds - ne_auth.h: added NE_AUTH_GSSAPI and NE_AUTH_NTLM auth protocol codes - added ne_acl3744.h, updated WebDAV ACL support - added built-in SOCKS v4/v4a/v5 support: ne_socket.h:ne_sock_proxy(), and ne_session.h:ne_session_socks_proxy() - added support for system-default proxies: ne_session_system_proxy(), implemented using libproxy - ne_session.h: added NE_SESSFLAG_EXPECT100 session flag, SSL verification failure bits extended by NE_SSL_BADCHAIN and NE_SSL_REVOKED, better handling of failures within the cert chain - ne_utils.h: added feature code NE_FEATURE_SYSPROXY - ne_socket.h: ne_sock_writev(), ne_sock_set_error(), ne_iaddr_raw(), ne_iaddr_parse() - ne_string.h: ne_buffer_qappend(), ne_strnqdup()- Changes from version 0.28.6: + SECURITY (CVE-2009-2473): Fix \"billion laughs\" attack against expat; + SECURITY (CVE-2009-2474): Fix handling of an embedded NUL byte in a certificate subject name with OpenSSL; + Changes from version 0.28.5: + Enable support for X.509v1 CA certificates in GnuTLS. + Fix handling of EINTR in connect() calls. + Fix use of builds with SOCK_CLOEXEC support on older Linux kernels.- Add libproxy-devel BuildRequires- Clean spec file using spec-cleaner.- Drop upstream included patches: + neon-0.28.4-CVE-2009-2473,2474.patch + neon-openssl.patch- Drop the main package. It avoids the lib from being installed in different versions and generally only contained coders doc. => provide / obsolete neon by libneon-devel.
* Sun Apr 18 2010 cooloAATTnovell.com- take patch from upstream to fix openssl linkage
* Mon Feb 01 2010 jengelhAATTmedozas.de- package baselibs.conf
* Thu Sep 10 2009 prusnakAATTsuse.cz- fixed CVE-2009-2473 and CVE-2009-2474 [bnc#528370]
* Thu May 07 2009 prusnakAATTsuse.cz- updated to 0.28.4
* GnuTLS support fixes: - fix handling of PKCS#12 client certs with multiple certs or keys - fix crash with OpenPGP certificate - use pkg-config data in configure, in preference to libgnutls-config
* Add PKCS#11 support for OpenSSL builds (where pakchois is available)
* Fix small memory leak in PKCS#11 code- enabled kerberos support (by adding krb5-devel to BuildRequires)