Changelog for glib-networking-2.74.0-1.1.x86_64.rpm :

* Thu Sep 15 2022 Bjørn Lie - Update to version 2.74.0: + Updated translations.
* Thu Sep 01 2022 Bjørn Lie - Update to version 2.74.rc: + Support PKCS #12 encrypted certificates. + Various improvements to Meson build system. + Multiple fixes for proxy tests.
* Tue Aug 09 2022 Bjørn Lie - Update to version 2.74.beta: + Drop environment proxy resolver to lowest priority.
* Mon Aug 08 2022 Dominique Leuenberger - Update to version 2.74.alpha: + Add build option for toggling debug logging. + Move gettext() usage out of hot paths. + Fix tests build when using openssl. + Properly free libproxy lookup results and require libproxy 0.4.16. + Add additional validation for proxy lookup results. + Allow using static libraries via meson subprojects. + Updated translations.
* Mon Aug 08 2022 Bjørn Lie - Update to version 2.72.2: + Drop environment proxy resolver to lowest priority.
* Mon Jul 04 2022 Emily Gonyer - Update to version 2.72.1 + Discard empty proxy environment variables.
* Tue Mar 22 2022 Bjørn Lie - Update to version 2.72.0: + Fix proxy tests. + GnuTLS: use IANA-style ciphersuite names with GnuTLS 3.7.4. + meson devenv. + Updated translations.
* Fri Feb 11 2022 Bjørn Lie - Update to version 2.72.beta: + Add environment variable proxy resolver. + OpenSSL: fix uninitialized memory use.
* Fri Jan 07 2022 Bjørn Lie - Update to version 2.72.alpha: + OpenSSL: - Fix unsafe error handling. - Fail when appropriate if Must-Staple extension is set. + GnuTLS: fix TLS 1.3 ciphersuite names, should use underscores. + Improve failure of tls-unique channel binding requests. + Do not fill SNI extension with IP address.
* Tue Jan 04 2022 Andreas Schwab - Increase testsuite timeout
* Mon Dec 06 2021 Bjørn Lie - Update to version 2.70.1: + Fix crashes when handshake is cancelled + OpenSSL: fix spurious certificate expired verification errors + GnuTLS: - Fix tests on 32-bit systems - Fix crash when invalid priority string is forced- Add check section and run meson_test macro during build.
* Fri Sep 17 2021 Dominique Leuenberger - Update to version 2.70.0: + Updated translations.
* Thu Sep 16 2021 Stanislav Brabec - Remove obsolete translation-update-upstream support (jsc#SLE-21105).
* Fri Sep 03 2021 Dominique Leuenberger - Update to version 2.70.rc: + gnutls: - revert AuthorityInformationAccess implementation for now. - fix use of non-default GTlsDatabases, Geary crash on startup. - fix leak in g_tls_certificate_gnutls_copy. - Unbreak GTLS_GNUTLS_CHECK_VERSION. + openssl: remove openssl-util.
* Mon Aug 23 2021 Dominique Leuenberger - Update to version 2.70.beta: + gnutls: Ensure that PKCS #11 pins are NUL terminated. + openssl: Restore OCSP support.
* Fri Aug 06 2021 Dominique Leuenberger - Update to version 2.70.alpha: + Fix TLS channel bindings tests. + Require OpenSSL 1.0.2. + Fix threadsafety issue in certificate verification. + dlopen libsoup for performing HTTP requests. + OpenSSL: add DTLS support, plus many related improvements. + Implement new GTlsCertificate details APIs. + GnuTLS: improve error handling for PIN failures. + GnuTLS: expose PIN type on PIN requests. + GnuTLS: check cancellable in pull timeout callback. + Improve automation of test certificate creation. + GnuTLS: use GnuTLS to implement all channel bindings. + GnuTLS: rework certificate verification to use TLS session. + GnuTLS: improve peer identity verification. + Bring back automatic downloading of missing intermediate certificates (not fixed, may go away again).
* Fri Apr 30 2021 Dominique Leuenberger - Update to version 2.68.1: + Fix threadsafety issue in certificate verification. + Temporarily remove support for downloading missing intermediate certificates with GnuTLS 3.7.
* Sat Mar 20 2021 Michael Gorse - Update to version 2.68.0: + Fix double free in GnuTLS client certificate request code.
* Tue Mar 16 2021 Dominique Leuenberger - Update to version 2.68.rc: + Improve heuristic for returning G_TLS_ERROR_CERTIFICATE_REQUIRED. + Fix check for certain handshake failure conditions.
* Thu Jan 14 2021 Dominique Leuenberger - Update to version 2.68.alpha: + Download and validate missing intermediate certificates (requires GnuTLS 3.7). + OpenSSL backend now uses system crypto policy. + Remove use of g_assert in testsuite. + Restore support for old versions of OpenSSL. + Implement TLS channel bindings API. + Implement PKCS#11 API. + Update testsuite for Fedora 33 crypto policy. + Fix NULL dereference in g_tls_connection_base_read_message. + Fix a couple code issues found by Coverity.
* Mon Sep 14 2020 dimstarAATTopensuse.org- Update to version 2.66.0: + Updated translations.
* Fri Sep 04 2020 dimstarAATTopensuse.org- Update to version 2.65.90: + Many fixes to OpenSSL backend.- Changes from version 2.65.1: + Fix peer-certificate[-errors] props set too soon. + Implement ALPN for OpenSSL backend.
* Fri May 29 2020 Bjørn Lie - Update to version 2.64.3: + Revert warning when server-identity property is unset. + Fix CVE-2020-13645, fail connections when server identity is unset.
* Wed Apr 15 2020 Bjørn Lie - Update to version 2.64.2: + Reenable TLS 1.0/1.1 protocols due to COVID-19. + Fix build warning on Windows.
* Sat Mar 28 2020 Bjørn Lie - Update to version 2.64.1: + Warn when server-identity property is missing. + Fix crashes in debug logs. + Fix write loop in OpenSSL backend.
* Fri Mar 06 2020 bjorn.lieAATTgmail.com- Update to version 2.64.0: + Fix OpenSSL backend on RHEL 6.
* Fri Feb 28 2020 Bjørn Lie - Update to version 2.63.92: + Revert fix for glgo#GNOME/glib-networking#127, which broke libsoup (glgo#GNOME/glib-networking#129). + Updated translations.
* Tue Feb 18 2020 Dominique Leuenberger - Update to version 2.63.91: + Fix peer-certificate properties changing too soon. + GnuTLS backend: reduce session resumption cache lifetime. + GnuTLS backend: restore TLS 1.2 support for copy session state.
* Wed Feb 12 2020 dimstarAATTopensuse.org- Update to version 2.63.90: + Remove PKCS#11 support, deferred until next cycle. + Remove OpenSSL backend\'s OCSP support.- Changes from version 2.63.3: + Fix OpenSSL backend regressions and reenable OpenSSL testsuite. + Temporarily disable cancellation of sync handshakes. + Disable flaky test (#104) and resolve testsuite flakiness. + Fix regression where GnuTLS connection init could theoretically fail without error.- Changes from version 2.63.2: + Fix crash when handshake context is reset too late. + Require GnuTLS 3.6.5. + Build mock PKCS #11 module only for GnuTLS backend. + Rework session resumption support for TLS 1.3. + Run GnuTLS tests under TLS 1.2 in addition to TLS 1.3. + Support OpenSSL 1.0.1. + Drop rehandshake mode and protocol version fallback support. + Add logging functions. + Fix PKCS #11 tests with TLS 1.2. + Add more debug logging for PKCS #11. + Fix leak in GTlsCertificateGnutls finalizer.- Changes from version 2.63.1: + Add support for new PKCS#11 APIs to facilitate use with smartcards. + Disable TLS 1.0 and TLS 1.1 when using GnuTLS. + Fix threadsafety issue.
* Sat Jan 25 2020 Dominique Leuenberger - No longer recommend -lang: supplements are in use
* Sun Jan 05 2020 Bjørn Lie - Update to version 2.62.3: + Fix leak of base iostream (or base datagram socket), 2.62 regression. + Fix duplicate notifies of peer-certificate and peer-certificate-errors. + Fix obscure corner case where SNI might not work.
* Tue Dec 10 2019 Bjørn Lie - Update to version 2.62.2: + Fix handshake_context crashes.
* Sat Oct 05 2019 Bjørn Lie - Update to version 2.62.1: + Fix two memory leaks.
* Sat Sep 07 2019 mgorseAATTsuse.com- Update to version 2.62.0: + Revert broken queued data fix for glgo#GNOME/glib-networking#15.
* Mon Sep 02 2019 Michael Gorse - Update to version 2.61.92: + Discard queued data after interrupted writes. + Verify socket timeouts are respected. + Fix a couple broken error messages. + Changes in version 2.61.90: + Fix translations of certain error messages + Changes in version 2.61.2: + Improve certain handshake error messages. + Fix regressions introduced in 2.61.1. + Changes in version 2.61.1: + This release contains a major refactoring of the TLS codebase. The GnuTLS backend now shares the same base classes as the OpenSSL backend, to avoid duplicating as much code as possible. The base classes, previously used only by the OpenSSL backend and originally forked from glib-networking several years ago, have been enhanced to achieve feature-parity with the current state of the GnuTLS backend. Please note that the OpenSSL backend remains experimental. Further planned work is required before this backend will be production-ready.
* Wed Aug 28 2019 kukukAATTsuse.de- Move LICENSE_EXCEPTION to %license.
* Sun Jun 09 2019 Bjørn Lie - Update to version 2.60.3: + Fix clobbering of the thread-default main context after certificate verification failure during async handshakes since 2.60.1. + Fix GTlsDatabase initialization failures in OpenSSL backend due to uninitialized memory use. + Fix minor leak of ALPN protocols.
* Fri May 03 2019 Bjørn Lie - Update to version 2.60.2: + OpenSSL backend now defaults to system trust store. + Fix client auth failure error with GnuTLS 3.6.7 (bsc#1134795).- Drop 0001-gnutls-Handle-new-GNUTLS_E_CERTIFICATE_REQUIRED.patch: fixed upstream.
* Fri Apr 05 2019 Vítězslav Čížek - Handle new GnuTLS error GNUTLS_E_CERTIFICATE_REQUIRED + https://gitlab.gnome.org/GNOME/glib-networking/issues/70 + add 0001-gnutls-Handle-new-GNUTLS_E_CERTIFICATE_REQUIRED.patch
* Tue Apr 02 2019 Bjørn Lie - Update to version 2.60.1: + Improve reliability of client auth failure tests. + Fix excessive CPU usage after sync handshake.
* Tue Mar 12 2019 Bjørn Lie - Update to version 2.60.0.1: + Fix build with OpenSSL pkg-config unavailable.
* Mon Mar 11 2019 Bjørn Lie - Update to version 2.60.0: + This is the first stable release featuring the new OpenSSL backend. Please be advised that this new backend is still experimental and known to not work on some systems, including Debian. Linux distributions are encouraged to stick to the default build options, where OpenSSL is not yet enabled. + Fix build with GnuTLS disabled.
* Tue Mar 05 2019 Bjørn Lie - Update to version 2.59.92: + GnuTLS: reject sync operations during handshake to avoid deadlocks. + Temporarily disable DTLS and OpenSSL tests due to bugs.
* Thu Feb 21 2019 bjorn.lieAATTgmail.com- Update to version 2.59.91: + Update OpenSSL SSL struct when certificate is changed. + Fix tests build when GnuTLS is disabled. + Remove Fedora-specific PROFILE=SYSTEM default cipher list. + Fix some problems with the connection tests.
* Thu Feb 14 2019 bjorn.lieAATTgmail.com- Update to version 2.59.90: + This release adds an OpenSSL backend, obsoleting the glib-openssl project. + The OpenSSL backend seems to be mature, though it is less well-tested for desktop usage than the GnuTLS backend. It will remain disabled by default at build time due to the GPL-incompatible nature of the OpenSSL license -- and the GPLv2-incompatible nature of the Apache license that will be used by future versions of OpenSSL -- and because the GnuTLS backend is sufficient for Linux distros. + Use the OpenSSL backend if you are building an embedded system where (GPLv2+ or LGPLv3+) dependencies are unacceptable (e.g. nettle or GMP, both dependencies of GnuTLS) and you are OK with the GPL-incompatible OpenSSL license. If the OpenSSL backend is enabled at build time, you should probably disable build of the GnuTLS backend, or it will take precedence over the OpenSSL backend at runtime.
* Tue Jan 08 2019 bjorn.lieAATTgmail.com- Update to version 2.59.2: + Add support for application layer protocol negotiation.
* Sat Jan 05 2019 bjorn.lieAATTgmail.com- Update to version 2.59.1: + This release removes the gnutls-pkcs11 backend, which was disabled in 2.57.2, due to lack of any feedback whatsoever regarding its disablement. If you think it is still useful to you, given that the normal gnutls backend now supports PKCS#11, speak up now. + This release also includes several changes to properly support TLS 1.3. + Other changes: - Perform certificate verification during, not after, TLS handshake. - Dramatically improve the reliability of the non-DTLS tests. (DTLS is still having problems). - Regenerate test certificates to prepare for OpenSSL support. - Several meson build system improvements to prepare for OpenSSL support.
* Wed Sep 26 2018 bjorn.lieAATTgmail.com- Update to version 2.58.0: + Updated translations.
* Wed Aug 29 2018 bjorn.lieAATTgmail.com- Update to version 2.57.92: + Revert fixes for glgo#GNOME/glib-networking#4 and glgo#GNOME/glib-networking#6 due to regression glgo#GNOME/glib-networking#43. + Fix installed tests glgo#GNOME/glib-networking!7.
* Mon Aug 13 2018 bjorn.lieAATTgmail.com- Update to version 2.57.90: + Properly check for server errors in connection tests. + Perform certificate verification during, not after, TLS handshake. + Avoid trailing dots in SNI hostnames. + Send fallback SCSV with fallback connection attempts. + Fail unsafe rehandshake attempts initiated by API request.
* Thu Jul 26 2018 bjorn.lieAATTgmail.com- Update to version 2.57.3: + Fix memory leaks when calling g_tls_connection_gnutls_get_certificate(). + Use .so for modules on macOS instead of dylib. + Fix build with MSVCC.
* Wed Jun 06 2018 luc14n0AATTlinuxmail.org- Update to version 2.57.2: + No visible changes for the user.- Drop pkgconfig(p11-kit-1) BuildRequires: it\'s now not enabled by default, and even when it was being enabled the backend would only work if the env GIO_USE_TLS=gnutls-pkcs11 would be set.
* Sat Jun 02 2018 luc14n0AATTlinuxmail.org- Update to version 2.57.1: + Use GnuTLS system trust (bgo#753260). + Fix criticals when child streams outlast the parent GTlsConnection (bgo#792219). + Fix crash when setting client cert without private key (bgo#793712).
* Tue May 22 2018 bjorn.lieAATTgmail.com- Update to version 2.56.1: + Fix build with PKCS#11 backend disabled (bgo#794292). + Various meson build system fixes (bgo#794358 and bgo#794372). + Tests are now compatible with GnuTLS 3.6 (bgo#794286).
* Tue Mar 20 2018 dimstarAATTopensuse.org- Unconditionally enable translation-update-upstream: on Tumbleweed, this results in a NOP and for Leap in SLE paid translations being used (boo#1086036).
* Sun Mar 11 2018 dimstarAATTopensuse.org- Update to version 2.56.0: + Updated translations.
* Wed Feb 28 2018 dimstarAATTopensuse.org- Modernize spec-file by calling spec-cleaner
* Tue Feb 13 2018 dimstarAATTopensuse.org- Update to version 2.55.90: + Fix unit tests when SSLv3 is unavailable (bgo#782853). + Allow static linking (bgo#791100). + Fix issues found by coverity (bgo#792402). + Remove TLS build option; it is now mandatory. + Try to ensure that GnuTLS is only initialized if TLS is actually used. + Update use of GObject to follow current best practices. + Use XDG_CURRENT_DESKTOP to determine which proxy module to load.