Ask H. Larsen [Mon, 20 Feb 2012 21:30:54 +0000 (22:30 +0100)]
Updated Danish translation
Luca Ferretti [Mon, 20 Feb 2012 14:11:45 +0000 (15:11 +0100)]
l10n: Updated Italian translation
Kasia Bondarava [Sat, 18 Feb 2012 20:20:39 +0000 (23:20 +0300)]
Updated Belarusian translation.
Мирослав Николић [Sun, 12 Feb 2012 19:21:57 +0000 (20:21 +0100)]
Updated Serbian translation
Claude Paroz [Sat, 11 Feb 2012 10:23:02 +0000 (11:23 +0100)]
Updated French translation
Dan Winship [Tue, 7 Feb 2012 14:08:47 +0000 (09:08 -0500)]
2.31.16
Hideki Yamane [Sun, 5 Feb 2012 02:54:59 +0000 (11:54 +0900)]
[l10n] Update Japanese translation
Dan Winship [Mon, 30 Jan 2012 14:06:54 +0000 (09:06 -0500)]
tls: fix pkcs11-pin test to handle non-nul-terminated strings
g_tls_password_get_value() and p11_kit_pin_get_value() return
non-nul-terminated strings, so don't use strcmp() on them.
https://bugzilla.gnome.org/show_bug.cgi?id=668945
Chao-Hsiung Liao [Sun, 29 Jan 2012 14:59:28 +0000 (22:59 +0800)]
Updated Traditional Chinese translation(Hong Kong and Taiwan)
Dan Winship [Thu, 26 Jan 2012 12:56:51 +0000 (07:56 -0500)]
gnutls: fix an async handshake crash
g_tls_connection_gnutls_handshake_async() would cause a crash if the
handshake either succeeded or failed immediately (rather than getting
an EAGAIN after making partial progress).
https://bugzilla.gnome.org/show_bug.cgi?id=658771
Kjartan Maraas [Tue, 24 Jan 2012 14:18:28 +0000 (15:18 +0100)]
Updated Norwegian bokmål translation
Marek Černocký [Thu, 19 Jan 2012 11:43:05 +0000 (12:43 +0100)]
Updated Czech translation
Alexander Shopov [Sun, 8 Jan 2012 09:01:13 +0000 (11:01 +0200)]
Updated Bulgarian translation
Nguyễn Thái Ngọc Duy [Fri, 6 Jan 2012 09:46:55 +0000 (16:46 +0700)]
Updated Vietnamese translation
Nguyễn Thái Ngọc Duy [Fri, 6 Jan 2012 09:44:42 +0000 (16:44 +0700)]
po/vi: import from Damned Lies
Muhammet Kara [Wed, 4 Jan 2012 08:19:26 +0000 (10:19 +0200)]
[l10n]Updated Turkish translation
Dan Winship [Tue, 20 Dec 2011 01:25:33 +0000 (20:25 -0500)]
2.31.6
Dan Winship [Thu, 15 Dec 2011 16:14:16 +0000 (11:14 -0500)]
gnutls: update for g_byte_get_data() change in git master
Daniel Korostil [Sun, 11 Dec 2011 12:59:51 +0000 (14:59 +0200)]
Uploaded Ukranian
Yaron Shahrabani [Sat, 10 Dec 2011 09:54:39 +0000 (11:54 +0200)]
Updated Hebrew translation.
Dan Winship [Sun, 4 Dec 2011 11:59:51 +0000 (12:59 +0100)]
gnutls: revert part of the gcrypt-removing patch
I thought we could get rid of the "keep the module from being
unloaded" hack now, but it appears that we can't.
Dan Winship [Sat, 3 Dec 2011 18:32:01 +0000 (19:32 +0100)]
gnutls: add server-side session cache support
https://bugzilla.gnome.org/show_bug.cgi?id=636574
Dan Winship [Sat, 3 Dec 2011 15:18:24 +0000 (16:18 +0100)]
gnutls: reorganize some code to avoid needing forward declarations
Dan Winship [Sat, 3 Dec 2011 11:41:23 +0000 (12:41 +0100)]
Remove explicit gcrypt references
gnutls 2.11 allows using nettle instead of gcrypt for crypto, and
gnutls 3.0 only supports nettle. But our gnutls code was making
explicit gcrypt calls to initialize gnutls thread-safety, which meant
we required gcrypt even if gnutls didn't.
Fortunately, gnutls 2.11 fixed this situation by initializing gcrypt
thread-safety by default (when using gcrypt), so we can just remove
all the explicit references to gcrypt from glib-networking (since we
already depend on gnutls 2.11 or later), and it all just works.
https://bugzilla.gnome.org/show_bug.cgi?id=657306
Dan Winship [Thu, 17 Nov 2011 23:57:44 +0000 (18:57 -0500)]
tls: set GSETTINGS_BACKEND to "memory" in tests
To avoid warning messages when testing against a minimal
alternate-prefix install.
Kjartan Maraas [Thu, 1 Dec 2011 17:04:35 +0000 (18:04 +0100)]
Updated Norwegian bokmål translation
Yinghua Wang [Sat, 26 Nov 2011 09:00:29 +0000 (09:00 +0000)]
Update Simplified Chinese translation.
Matej Urbančič [Fri, 25 Nov 2011 20:23:27 +0000 (21:23 +0100)]
Updated Slovenian translation
Daniel Nylander [Fri, 25 Nov 2011 08:54:18 +0000 (09:54 +0100)]
Updated Swedish translation
Dan Winship [Tue, 22 Nov 2011 15:11:41 +0000 (10:11 -0500)]
proxy/gnome: use GInetAddressMask
Replace the existing IP address mask matching code with
GInetAddressMask. Also, add a test for IP:port values in ignore_hosts,
which we weren't testing before.
Dan Winship [Mon, 21 Nov 2011 23:06:14 +0000 (18:06 -0500)]
2.31.2
Fran Diéguez [Mon, 21 Nov 2011 00:51:47 +0000 (01:51 +0100)]
Updated Galician translations
Jorge González [Sat, 19 Nov 2011 11:45:23 +0000 (12:45 +0100)]
Updated Spanish translation
Dan Winship [Sat, 19 Nov 2011 01:25:25 +0000 (20:25 -0500)]
gnutls: make GTlsServerConnection error out if given a bad cert
GTlsServerConnection needs a certificate that has a public key, so
make it fail g_initable_init() if it has a certificate without one.
Dan Winship [Sat, 19 Nov 2011 00:48:13 +0000 (19:48 -0500)]
gnutls: Support unencrypted PKCS#8 keys
and test that in tls/tests/certificate
https://bugzilla.gnome.org/show_bug.cgi?id=664321
Algimantas Margevičius [Fri, 18 Nov 2011 20:45:54 +0000 (22:45 +0200)]
Updated Lithuanian translation
Muhammet Kara [Fri, 18 Nov 2011 14:34:15 +0000 (16:34 +0200)]
[l10n]Updated Turkish translation
Dan Winship [Wed, 16 Nov 2011 14:39:31 +0000 (09:39 -0500)]
pkcs11: clean up a few merge errors and bits of cruft
Fran Diéguez [Sun, 13 Nov 2011 21:20:17 +0000 (22:20 +0100)]
Updated Galician translations
Kjartan Maraas [Sat, 12 Nov 2011 11:04:25 +0000 (12:04 +0100)]
Updated Norwegian bokmål translation
Stef Walter [Mon, 7 Nov 2011 17:05:43 +0000 (18:05 +0100)]
configure: make the status show correctly when pkcs11 is disabled
Stef Walter [Mon, 7 Nov 2011 17:03:39 +0000 (18:03 +0100)]
gnutls: Fix unresolved symbol when pkcs11 is disabled
* Error would occur: libgiognutls.so: undefined symbol: \
g_tls_backend_gnutls_pkcs11_register
Jorge González [Sun, 6 Nov 2011 12:44:49 +0000 (13:44 +0100)]
Updated Spanish translation
Fran Diéguez [Sun, 6 Nov 2011 01:59:12 +0000 (02:59 +0100)]
Updated Galician translations
Wolfgang Stöggl [Sat, 5 Nov 2011 10:11:50 +0000 (11:11 +0100)]
[l10n] Updated German translation
Stef Walter [Fri, 4 Nov 2011 15:44:42 +0000 (16:44 +0100)]
gnutls: Add gnutls-pkcs11 TLS backend
* Adds a new gio tls backend "gnutls-pkcs11" colocated in the same module
as the normal "gnutls" backend
* Adds an optional dependency on p11-kit, and gnutls 2.12.8, without which
no PKCS#11 support is built.
* p11-kit provides the configured locations of the PKCS#11 modules to use.
* Uses GTlsInteraction for PIN prompting
* Use GIO_USE_TLS=gnutls-pkcs11 environment variable to enable the
gnutls-pkcs11 backend.
https://bugzilla.gnome.org/show_bug.cgi?id=656361
Stef Walter [Wed, 2 Nov 2011 16:53:01 +0000 (17:53 +0100)]
Update glib dependency to 2.31.0
* For g_mutex_init and friends.
Dan Winship [Tue, 25 Oct 2011 12:56:14 +0000 (08:56 -0400)]
2.31.0
Dan Winship [Tue, 25 Oct 2011 13:08:43 +0000 (09:08 -0400)]
Update for glib 2.31 GMutex API changes
Dan Winship [Fri, 21 Oct 2011 19:21:49 +0000 (15:21 -0400)]
configure: turn some warnings into errors
Use -Werror=... to turn warnings into errors for warnings that occur
in completely well-defined situations (ie, won't change with gcc
versions or optimization levels) and that couldn't be triggered by
foreign #include files.
Dan Winship [Thu, 20 Oct 2011 21:10:55 +0000 (17:10 -0400)]
gnutls: fix g_tls_file_database_new() with a NULL GError to not crash
Dan Winship [Thu, 20 Oct 2011 20:59:04 +0000 (16:59 -0400)]
gnutls: set GTlsConnection:peer-certificate* even on error
Previously we were only setting peer-certificate and
peer-certificate-errors when the connection was accepted. Fix that and
set them on failure too.
Kalev Lember [Tue, 18 Oct 2011 11:33:45 +0000 (14:33 +0300)]
proxy/gnome: Only build the test if we are building gnome proxy support
Fixes the build with mingw32.
https://bugzilla.gnome.org/show_bug.cgi?id=662085
Alexandre Rostovtsev [Wed, 19 Oct 2011 14:31:17 +0000 (10:31 -0400)]
Add missing comma to gnome-proxy AC_ARG_WITH
This was causing "--without-gnome-proxy" to be treated as
"--with-gnome-proxy=check".
https://bugzilla.gnome.org/show_bug.cgi?id=662203
Dan Winship [Tue, 18 Oct 2011 17:53:13 +0000 (13:53 -0400)]
gnutls: add some (#ifdeffed-out) debugging support
Dan Winship [Tue, 18 Oct 2011 17:51:59 +0000 (13:51 -0400)]
gnutls: Add another G_TLS_ERROR_NOT_TLS case
If we get a GNUTLS_E_DECRYPTION_FAILED during the handshake, assume
the peer is just dumb, and return G_TLS_ERROR_NOT_TLS so, eg, libsoup
can fall back to SSLv3.
https://bugzilla.gnome.org/show_bug.cgi?id=662104
Nicolas Dufresne [Mon, 10 Oct 2011 22:17:46 +0000 (18:17 -0400)]
gnome-proxy: Fix use of uninitialized pointer
Dan Winship [Fri, 7 Oct 2011 13:20:37 +0000 (09:20 -0400)]
Fix up LGPL header comments
and remove legally-irrelevant "(C)"s from Copyright notices
https://bugzilla.gnome.org/show_bug.cgi?id=661147
krishnababu k [Fri, 7 Oct 2011 12:39:40 +0000 (18:09 +0530)]
Updated Telugu Translations done by Hari Krishna
krishnababu k [Fri, 7 Oct 2011 12:34:47 +0000 (18:04 +0530)]
Updated Telugu Transaltions done by Hari Krishna
krishnababu k [Fri, 7 Oct 2011 12:32:39 +0000 (18:02 +0530)]
Updated LINGUAS file with te locale
Dan Winship [Sat, 1 Oct 2011 23:34:45 +0000 (19:34 -0400)]
gnutls: fix old silly search-and-replace-os in comments
Dan Winship [Sat, 1 Oct 2011 12:55:48 +0000 (08:55 -0400)]
tls: split certificate and connection tests into separate programs
Dan Winship [Thu, 29 Sep 2011 18:49:38 +0000 (14:49 -0400)]
gnutls: correctly handle self-signed anchor certificates
If a self-signed certificate is an anchor of the database, then it
should verify according to g_tls_database_verify_chain(); we were
accidentally reporting G_TLS_CERTIFICATE_UNKNOWN_CA in this case.
https://bugzilla.gnome.org/show_bug.cgi?id=660508
Dan Winship [Wed, 28 Sep 2011 20:33:35 +0000 (16:33 -0400)]
gnutls: use g_cclosure_marshal_generic, drop gnutls-marshal.list
Dan Winship [Wed, 28 Sep 2011 20:26:12 +0000 (16:26 -0400)]
configure.ac: modernize automake configuration a bit
Dan Winship [Wed, 28 Sep 2011 20:21:35 +0000 (16:21 -0400)]
Move redundant Makefile.am bits into Makefile.decl
Unticha Pramgoed [Sat, 24 Sep 2011 06:24:40 +0000 (13:24 +0700)]
Add Thai translation.
Stef Walter [Fri, 19 Aug 2011 12:44:20 +0000 (14:44 +0200)]
gnutls: Update required version of gnutls to 2.11.0
* This is required for PKCS#11 database stuff.
* Get rid of deprecated function use
* Compatible with gnutls 3.0.x
https://bugzilla.gnome.org/show_bug.cgi?id=656903
Dan Winship [Mon, 12 Sep 2011 18:41:20 +0000 (14:41 -0400)]
proxy/gnome: Fix up multiple ignore_hosts bugs, and add a test
- ignore_hosts names are treated as suffixes/patterns, not
exact matches
- ignore_hosts names/IPs can specify ports
- IPv6 literals now work in ignore_hosts (they were supposed to work
before, but there was a parsing bug).
- IP/length patterns now work in all cases
https://bugzilla.gnome.org/show_bug.cgi?id=655581
Dan Winship [Thu, 22 Sep 2011 12:45:37 +0000 (08:45 -0400)]
tls/tests: set GIO_EXTRA_MODULES from within the test program
Set GIO_EXTRA_MODULES to point to the uninstalled module from within
the test program, rather than doing it via TEST_ENVIRONMENT in the
Makefile, so that you get the uninstalled module when you run the test
program by hand too.
Dan Winship [Thu, 22 Sep 2011 12:44:16 +0000 (08:44 -0400)]
gnutls: fix g_tls_connection_gnutls_close_async to allow NULL cancellable
https://bugzilla.gnome.org/show_bug.cgi?id=659786
Dan Winship [Thu, 22 Sep 2011 12:27:52 +0000 (08:27 -0400)]
post-branch version bump to 2.31.0
Dan Winship [Mon, 19 Sep 2011 21:55:59 +0000 (17:55 -0400)]
2.29.92
Dan Winship [Sun, 18 Sep 2011 22:18:30 +0000 (18:18 -0400)]
tls/tests/tls: add some GSocketClient TLS tests
Test both successful and failed TLS connections via GSocketClient.
https://bugzilla.gnome.org/show_bug.cgi?id=656283
Dan Winship [Sat, 17 Sep 2011 16:22:25 +0000 (12:22 -0400)]
gnutls: fix a few memory leaks
Jiro Matsuzawa [Sat, 17 Sep 2011 02:34:29 +0000 (11:34 +0900)]
Updated Japanese translation
Dan Winship [Fri, 16 Sep 2011 15:29:29 +0000 (11:29 -0400)]
gnutls: fix G_TLS_ERROR_EOF handling with gnutls 3.0
gnutls 3.0 has a new error code for "peer closed connection without
sending a Close packet", so add some #ifdefs to do the right thing
with either 2.x or 3.x.
https://bugzilla.gnome.org/show_bug.cgi?id=659233
I Felix [Tue, 13 Sep 2011 09:57:57 +0000 (15:27 +0530)]
Updated Tamil Translations
I Felix [Tue, 13 Sep 2011 09:57:54 +0000 (15:27 +0530)]
Updated linguas with ta
Ihar Hrachyshka [Sun, 4 Sep 2011 15:53:11 +0000 (18:53 +0300)]
Updated Belarusian translation.
Dan Winship [Tue, 30 Aug 2011 16:55:23 +0000 (12:55 -0400)]
2.29.18
Dan Winship [Sun, 28 Aug 2011 16:51:30 +0000 (12:51 -0400)]
gnutls: don't try to reuse a TLS session with a different SNI
Use the Server Name Indication as part of the session ID so that we
don't try to share sessions between different virtual hosts on the
same machine. This causes problems on some servers, which I think is a
server bug, but...
https://bugs.launchpad.net/bugs/823325 and the end of
https://bugzilla.gnome.org/show_bug.cgi?id=581342
Stef Walter [Fri, 19 Aug 2011 12:53:36 +0000 (14:53 +0200)]
tls: Clean up testing and coverage support
* Make 'make check' work properly with tests
* Use a similar approach to glib to running gtester and hooking
in the unit tests to 'make check'
* Use GIO_EXTRA_MODULES to load the in-tree gnutls module.
* Add coverage support similar to glib
https://bugzilla.gnome.org/show_bug.cgi?id=656906
Stef Walter [Sat, 13 Aug 2011 12:39:21 +0000 (14:39 +0200)]
gnutls: Make the GTlsDatabase implementations cancellable
* Actually respect the cancellable paramater where possible
in GTlsDatabaseGnutls and GTlsFileDatabaseGnutls
https://bugzilla.gnome.org/show_bug.cgi?id=656454
Dan Winship [Thu, 25 Aug 2011 22:55:38 +0000 (18:55 -0400)]
tls/tests: add a rehandshaking test
Dan Winship [Thu, 25 Aug 2011 22:54:45 +0000 (18:54 -0400)]
gnutls: fix server-side rehandshake request
When doing an async rehandshake request, we would accidentally send a
second rehandshake request halfway through the rehandshake, causing
the client to abort.
Dan Winship [Thu, 25 Aug 2011 22:53:42 +0000 (18:53 -0400)]
gnutls: handle rehandshake request correctly
Based on a patch from Igor Makarov
https://bugzilla.gnome.org/show_bug.cgi?id=653645
Dan Winship [Thu, 25 Aug 2011 22:11:41 +0000 (18:11 -0400)]
tls/tests: fix up leak checking
You can't use !G_IS_FOO(object) to test that an object has been
destroyed, since (a) it may not work if the memory hasn't been
cleared, and (b) it might crash if it has. Instead, use weak pointers
to test that the object has been destroyed when we expect it to be.
Dan Winship [Thu, 25 Aug 2011 22:01:26 +0000 (18:01 -0400)]
configure: bump up required glib version
https://bugzilla.gnome.org/show_bug.cgi?id=656687
Christian Persch [Mon, 21 Mar 2011 18:26:24 +0000 (19:26 +0100)]
proxy: Use child schemas to get the proxy settings
Instead of constructing the schemas directly, use g_settings_get_child().
Bug #645436.
Arash Mousavi [Tue, 23 Aug 2011 20:57:23 +0000 (01:27 +0430)]
added Persian translation
Dan Winship [Tue, 16 Aug 2011 01:00:29 +0000 (21:00 -0400)]
2.29.15
Dan Winship [Sun, 7 Aug 2011 16:29:42 +0000 (12:29 -0400)]
gnutls: add %COMPAT to the gnutls priority strings
%COMPAT enables certain compatibility behavior. In particular, it
disables padding of records, which other TLS libraries don't do even
though it's good for security, because some broken servers can't cope
with it.
Part of
https://bugzilla.gnome.org/show_bug.cgi?id=581342
Dan Winship [Sun, 7 Aug 2011 15:52:42 +0000 (11:52 -0400)]
gnutls: fix a crash with a NULL GError
GTlsClientConnectionGnutls's g_tls_connection_handshake()
implementation would crash if you passed NULL for the GError**
argument.
Dan Winship [Sat, 6 Aug 2011 00:04:03 +0000 (20:04 -0400)]
gnutls: override minimum key length
By default, gnutls requires server keys to be a reasonable size and
will return an error rather than connecting to a server with an
insecurely small key. But other TLS libraries don't do this, and some
web servers (especially embedded ones) use small keys. So bump down
the limit.
https://bugzilla.gnome.org/show_bug.cgi?id=652284
Stef Walter [Thu, 4 Aug 2011 07:08:28 +0000 (09:08 +0200)]
gnutls: Implement GTlsDatabase and related objects
The database is an abstract object implemented by the various TLS
backends, which is used by GTlsConnection to lookup certificates
and keys, as well as verify certificate chains.
Here we implement a file based database to lookup anchor certificates
for use with GnuTLS.
Also hookup the various bits for GTlsInteraction, but don't actually
use that yet.
https://bugzilla.gnome.org/show_bug.cgi?id=636572
Dan Winship [Tue, 5 Jul 2011 01:19:10 +0000 (21:19 -0400)]
2.29.9
Tommi Vainikainen [Thu, 30 Jun 2011 10:47:07 +0000 (13:47 +0300)]
Added Finnish translation
Dan Winship [Wed, 29 Jun 2011 15:27:36 +0000 (11:27 -0400)]
configure: change AM_MAINTAINER_MODE to be enabled by default