Changelog for
globus-gssapi-gsi-doc-14.20-2.1.x86_64.rpm :
* Fri May 20 2022 Mattias Ellert
- 14.20-1- Disable sending session tickets after the TLS 1.3 handshake
* Sun Mar 06 2022 Mattias Ellert - 14.19-1- Better logic for TLS 1.3 special handling
* Sun Mar 06 2022 Mattias Ellert - 14.18-1- Use sha256 hash when generating test certificates- Don\'t test TLS 1.0 and 1.1 when using openssl 3.0.1 or later- Remove duplicate variables in test environment
* Tue Jul 20 2021 Mattias Ellert - 14.17-1- Fixes for OpenSSL-3.0.0-beta1
* Sun Jul 18 2021 Mattias Ellert - 14.16-1- Compatibility with the dcache server implementation- Minimize session ticket size since we don\'t use them
* Thu Mar 25 2021 Mattias Ellert - 14.15-1- Compatibility with TLS v1.3
* Thu Sep 03 2020 Mattias Ellert - 14.14-1- Fix output payload check in gss_init_sec_context() after SSL handshake
* Thu Mar 12 2020 Mattias Ellert - 14.13-2- Add BuildRequires perl-interpreter- Add additional perl dependencies for tests
* Tue Mar 10 2020 Mattias Ellert - 14.13-1- Make makefiles exit sooner on errors
* Fri Sep 13 2019 Mattias Ellert - 14.12-1- Disallow TLS 1.0/1.1 by default again
* Fri Aug 30 2019 Frank Scheiner - 14.11-2- Include spec file fixes for SLES builds on OBS
* Fri May 17 2019 Mattias Ellert - 14.11-1- Keep peers in sync after SSL handshake failure in gssapi
* Wed Nov 21 2018 Mattias Ellert - 14.10-1- Doxygen fixes
* Tue Nov 20 2018 Frank Scheiner - 14.9-2- Include spec file fixes for SLES builds on OBS
* Fri Sep 28 2018 Globus Toolkit - 14.9-1- Fix leaks
* Fri Sep 21 2018 Mattias Ellert - 14.8-1- Allow TLS 1.0/1.1
* Fri Aug 31 2018 Globus Toolkit - 14.7-1- Fix resource leak when loading cert directories
* Mon Aug 27 2018 Globus Toolkit - 14.6-1- Set the default minimum TLS version to 1.2. 1.0 and 1.1 are deprecated.- Set the maximum TLS version default to 1.2. 1.3 is not yet supported.- use 2048 bit keys to support openssl 1.1.1
* Tue Jun 26 2018 Mattias Ellert - 14.5-1- Fix dep version
* Fri Jun 15 2018 Globus Toolkit - 14.4-1- Add context inquire OID support to get TLS version and cipher
* Thu May 31 2018 Globus Toolkit - 14.3-1- enable ECDH ciphers for openssl < 1.1.0
* Fri May 25 2018 Mattias Ellert - 14.2-1- Avoid TLS 1.3 for now The GSI GSSAPI currently does not work with TLS 1.3 Use TLS1_2_VERSION instead of TLS_MAX_VERSION as the maximum TLS protocol version until it has been ported
* Sat May 05 2018 Mattias Ellert - 14.1-1- Use 2048 bit RSA key for tests
* Sat Mar 31 2018 Mattias Ellert - 14.0-1- First Grid Community Toolkit release- Remove support for openssl101e (RHEL5 is EOL)
* Thu Jan 25 2018 Globus Toolkit - 13.6-1- don\'t check uid on win
* Sat Jan 20 2018 Mattias Ellert - 13.5-1- Put back use of SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS
* Wed Nov 01 2017 Globus Toolkit - 13.4-1- Improve vhost support
* Mon Oct 30 2017 Globus Toolkit - 13.3-1- Allow configuration of non-root user to own credentials for root services
* Thu Sep 28 2017 Globus Toolkit - 13.2-1- Fix make clean rule (pull #114)- Fix alpn mismatch test
* Tue Sep 12 2017 Globus Toolkit - 13.1-1- use X509_VHOST_CRED_DIR if set when accepting- fix race condition
* Tue Sep 05 2017 Globus Toolkit - 13.0-1- Add SNI vhost cred dir support- Add optional ALPN processing
* Wed Jun 21 2017 Globus Toolkit - 12.17-1- Fix indicate_mechs_test when using openssl v1.1.0- Remove rhel 5 spec file conditionals
* Thu Apr 27 2017 Globus Toolkit - 12.16-1- Address test issues: fix .srl dependency, reuse credential in thread test
* Fri Apr 21 2017 Globus Toolkit - 12.15-1- Remove legacy SSLv3 support
* Mon Mar 20 2017 Globus Toolkit - 12.14-1- Merge \"Don\'t unlock unlocked mutex #91\". Add Test case.
* Mon Dec 19 2016 Globus Toolkit - 12.13-1- Skip mech v1 tests for OpenSSL >= 1.1.0
* Tue Nov 08 2016 Globus Toolkit - 12.12-1- More updates for mech negotiation
* Mon Oct 24 2016 Globus Toolkit - 12.11-1- Fix function arg mismatch
* Fri Oct 21 2016 Globus Toolkit - 12.10-1- Add support for new mech oid for different MIC formats
* Wed Sep 21 2016 Globus Toolkit - 12.9-1- Fix bad index references
* Tue Sep 20 2016 Globus Toolkit - 12.8-1- Fix hash detection
* Mon Sep 19 2016 Globus Toolkit - 12.7-1- Add backward compatibility fallback in verify_mic
* Thu Sep 08 2016 Globus Toolkit - 12.6-1- Update for el.5 openssl101e
* Tue Sep 06 2016 Globus Toolkit - 12.5-1- More tweaks to get_mic/verify_mic for 1.0.1
* Tue Sep 06 2016 Globus Toolkit - 12.4-1- Updates for mic handling without using internal openssl structs
* Thu Aug 25 2016 Globus Toolkit - 12.3-3- Updates for SLES 12
* Thu Aug 18 2016 Globus Toolkit - 12.3-1- Makefile fix
* Tue Aug 16 2016 Globus Toolkit - 12.2-1- Updates for OpenSSL 1.1.0
* Tue May 03 2016 Globus Toolkit - 12.1-1- Spelling
* Tue May 03 2016 Globus Toolkit - 12.0-1- Change default host verification mode to strict
* Thu Apr 21 2016 Globus Toolkit - 11.29-1- add -lltdl
* Thu Apr 21 2016 Globus Toolkit - 11.28-2- Add dependency on libtool-ltdl-devel
* Tue Apr 19 2016 Globus Toolkit - 11.28-1- Add support for certificates without a CN
* Tue Apr 12 2016 Globus Toolkit - 11.27-1- Updates to get tests to run on El Capitan
* Mon Jan 25 2016 Globus Toolkit - 11.26-1- Fix FORCE_TLS setting to allow TLSv1.1 and TLS1.2, not just TLSv1.0
* Wed Dec 16 2015 Globus Toolkit - 11.25-1- support loading mutiple extra CA certs
* Fri Dec 04 2015 Globus Toolkit - 11.24-1- Don\'t call SSLv3_method unless it is available
* Wed Nov 25 2015 Globus Toolkit - 11.23-1- Remove AATT} without matching AATT{
* Tue Sep 08 2015 Globus Toolkit - 11.22-1- GT-627: gss_import_cred crash- Improve portability for some tests
* Thu Aug 06 2015 Globus Toolkit - 11.21-2- Add vendor
* Wed Jul 29 2015 Globus Toolkit - 11.21-1- Find thread libs for in-tree testing
* Thu Jul 23 2015 Globus Toolkit - 11.20-1- GT-614: GLOBUS_GSS_C_NT_HOST_IP doesn\'t allow host-only imports and comparisons
* Mon Jun 08 2015 Globus Toolkit - 11.19-1- export config file values into environment if not set already
* Thu Jun 04 2015 Globus Toolkit - 11.18-1- Revert to HYBRID name mode by default
* Mon Jun 01 2015 Globus Toolkit - 11.17-1- Threaded test fixes
* Thu May 28 2015 Globus Toolkit - 11.16-1- Update autoconf script
* Thu May 28 2015 Globus Toolkit - 11.15-1- Add config file for GSI options- Allow configuration of SSL cipher suite- Allow server preference for SSL cipher suite ordering- Fix thread test to run without unix domain sockets
* Tue May 19 2015 Globus Toolkit - 11.14-2- Add openssl build dependency
* Mon Nov 03 2014 Globus Toolkit - 11.14-1- doxygen fixes
* Thu Sep 25 2014 Globus Toolkit - 11.13-1- Include more manpages for API- Use consistent PREDEFINED in all Doxyfiles- Fix dependency version- Fix typos and clarify some documentation- Quiet some autoconf/automake warnings
* Fri Aug 22 2014 Globus Toolkit - 11.12-1- Merge fixes from ellert-globus_6_branch
* Wed Aug 20 2014 Globus Toolkit - 11.11-2- Fix Source path
* Mon Jun 09 2014 Globus Toolkit - 11.11-1- Merge changes from Mattias Ellert
* Fri Apr 18 2014 Globus Toolkit - 11.10-1- Version bump for consistency
* Thu Feb 27 2014 Globus Toolkit - 11.9-1- Test Fixes
* Thu Feb 27 2014 Globus Toolkit - 11.8-1- Packaging fixes, Warning Cleanup
* Tue Feb 25 2014 Globus Toolkit - 11.7-1- Packaging fixes
* Tue Feb 25 2014 Globus Toolkit - 11.6-1- Test fixes
* Tue Feb 11 2014 Globus Toolkit - 11.5-1- Test fixes
* Tue Feb 11 2014 Globus Toolkit - 11.4-1- Test fixes
* Tue Feb 11 2014 Globus Toolkit - 11.3-1- Test fixes
* Mon Feb 10 2014 Globus Toolkit - 11.2-1- Packaging fixes
* Tue Jan 28 2014 Globus Toolkit - 11.1-1- Add #include
* Tue Jan 21 2014 Globus Toolkit - 11.0-1- Repackage for GT6 without GPT
* Thu Oct 10 2013 Globus Toolkit - 10.10-1- GT-445: Doxygen fixes
* Thu Oct 10 2013 Globus Toolkit - 10.9-1- GT-454: memory leak in gss_accept_sec_context
* Mon Jul 08 2013 Globus Toolkit - 10.8-3- openssl-libs for newer fedora
* Wed Jun 26 2013 Globus Toolkit - 10.8-2- GT-424: New Fedora Packaging Guideline - no %_isa in BuildRequires
* Fri Feb 22 2013 Globus Toolkit - 10.8-1- GT-363: gss_get_mic/gss_verify_mic fail for some TLS ciphers with OpenSSL 1.0.1
* Wed Feb 20 2013 Globus Toolkit - 10.7-6- Workaround missing F18 doxygen/latex dependency
* Mon Nov 26 2012 Globus Toolkit - 10.7-5- 5.2.3
* Mon Jul 16 2012 Joseph Bester - 10.7-4- GT 5.2.2 final
* Fri Jun 29 2012 Joseph Bester - 10.7-3- GT 5.2.2 Release
* Wed May 09 2012 Joseph Bester - 10.7-2- RHEL 4 patches
* Mon May 07 2012 Joseph Bester - 10.7-1- RIC-265: Memory leak in gss_accept_delegation()
* Fri May 04 2012 Joseph Bester - 10.6-2- SLES 11 patches
* Wed Apr 11 2012 Joseph Bester - 10.6-1- RIC-254: gssapi probe for whether it can use openssl internals doesn\'t always work
* Fri Mar 09 2012 Joseph Bester - 10.5-1- RIC-243: gss_import_cred can\'t handle non-null terminated token
* Tue Feb 14 2012 Joseph Bester - 10.4-1- RIC-215: gss_import_cred() doesn\'t match properly the OID passed- RIC-224: Eliminate some doxygen warnings- RIC-226: Some dependencies are missing in GPT metadata- RIC-227: Potentially unsafe format strings in GSI
* Mon Dec 05 2011 Joseph Bester - 10.2-3- Update for 5.2.0 release
* Mon Dec 05 2011 Joseph Bester - 10.2-2- Last sync prior to 5.2.0
* Wed Nov 02 2011 Joseph Bester - 10.2-1- Bug 7159 - globus-gssapi-gsi uses openssl symbols that are not part of the API
* Tue Oct 11 2011 Joseph Bester - 10.1-2- Add explicit dependencies on >= 5.2 libraries
* Thu Oct 06 2011 Joseph Bester - 10.1-1- Add backward-compatibility aging
* Tue Sep 20 2011 - 10.0-1- Add flag to force SSLv3 when initiating a security context
* Thu Sep 01 2011 Joseph Bester - 9.0-2- Update for 5.1.2 release
* Wed Apr 14 2010 Mattias Ellert - 7.5-1- Update to Globus Toolkit 5.0.1- Drop patch globus-gssapi-gsi-openssl.patch (fixed upstream)
* Mon Feb 08 2010 Mattias Ellert - 7.0-2- Update openssl 1.0.0 patch based on RIC-29 branch in upstream CVS
* Fri Jan 22 2010 Mattias Ellert - 7.0-1- Update to Globus Toolkit 5.0.0
* Fri Aug 21 2009 Tomas Mraz - 5.9-5- rebuilt with new openssl
* Thu Jul 23 2009 Mattias Ellert - 5.9-4- Add instruction set architecture (isa) tags- Make doc subpackage noarch
* Wed Jun 03 2009 Mattias Ellert - 5.9-3- Update to official Fedora Globus packaging guidelines
* Tue May 12 2009 Mattias Ellert - 5.9-2- Change the License tag to take the library/ssl_locl.h file into account
* Thu Apr 16 2009 Mattias Ellert - 5.9-1- Make comment about source retrieval more explicit- Change defines to globals- Remove explicit requires on library packages- Put GLOBUS_LICENSE file in extracted source tarball
* Sun Mar 15 2009 Mattias Ellert - 5.9-0.5- Adapting to updated globus-core package