Abhishek Sansanwal [Mon, 22 Jan 2018 09:39:54 +0000 (15:09 +0530)]
Added hardening compiler flags in the spec file.
Description: Enabled stack protector, relro, PIE,
fortify source and other flags
Change-Id: Idc6ec2d9674492a666197369b998435744cdc8a1
Signed-off-by: Abhishek Sansanwal <abhishek.s94@samsung.com>
taesub kim [Thu, 20 Jul 2017 01:17:34 +0000 (10:17 +0900)]
Modified macro for tv profile
Change-Id: I7cec45ee6cde406f60bda51ac59be3d0f91b02f6
Signed-off-by: Taesub Kim <taesub.kim@samsung.com>
Seonah Moon [Thu, 8 Jun 2017 05:25:19 +0000 (14:25 +0900)]
Update to 2.50.0
Change-Id: I00171c50631e8acc068ecc1b098d47be818a5784
Seonah Moon [Thu, 8 Jun 2017 02:05:32 +0000 (11:05 +0900)]
Imported Upstream version 2.50.0
Change-Id: I7cf4e6cca519e630046f83ade0b2cf283be97547
Seonah Moon [Thu, 8 Jun 2017 02:04:30 +0000 (11:04 +0900)]
Revert "Imported Upstream version 2.50.0"
This reverts commit
d807244accd6823ff0dc620c3b7727dba2d52ea3.
Change-Id: I53864eef5a80947df50fb76a4a6778e613d37501
taesub kim [Wed, 7 Jun 2017 10:29:02 +0000 (19:29 +0900)]
Imported Upstream version 2.50.0
Change-Id: Ibdd9c1c1392d69ee0426f597a466dcfb06b8a332
taesub kim [Wed, 7 Jun 2017 10:24:42 +0000 (10:24 +0000)]
Revert "Imported Upstream version 2.50.0"
This reverts commit
aa2932de323436904dfd1bd8bf0450d99a8ebe5b.
Change-Id: I2f61ebb4a5f4cbfa9f218770b1d1ad4cb7e6f832
taesub kim [Wed, 7 Jun 2017 05:58:15 +0000 (14:58 +0900)]
Imported Upstream version 2.50.0
Change-Id: I4f52dabf751045cdcf81a703f6b3f6770bdbc31f
Seonah Moon [Wed, 17 May 2017 01:33:16 +0000 (10:33 +0900)]
[RQ170516-00892] Fixed build warning
- [Backporting] GTlsConnection: avoid non-literal format string
(https://bugzilla.gnome.org/show_bug.cgi?id)
- Replaced readdir_r() with readdir()
Change-Id: I36dea8e1c7c9d171caa9add39d05abe92556b7f9
Signed-off-by: Seonah Moon <seonah1.moon@samsung.com>
Seonah Moon [Mon, 3 Apr 2017 02:35:03 +0000 (11:35 +0900)]
Add new config option for GNUTLS log function
Change-Id: I2c245836981f1655f1f376656a74754999aed9cb
Seonah Moon [Thu, 16 Mar 2017 10:26:19 +0000 (19:26 +0900)]
Fixed license file path
Change-Id: I828677670115666e98ae126a3c645c35bfb876d1
Signed-off-by: Seonah Moon <seonah1.moon@samsung.com>
Seonah Moon [Tue, 13 Dec 2016 09:54:39 +0000 (18:54 +0900)]
gcc62: Fixed build error
Change-Id: Iadc5737b06bc441760df74b994b0c2cb83a2fb59
Signed-off-by: Seonah Moon <seonah1.moon@samsung.com>
Seonah Moon [Thu, 20 Oct 2016 02:05:39 +0000 (11:05 +0900)]
Change build macro for Tizen TV
This macro is ignored on build.tizen.org
It's only for Tizen TV build system
Change-Id: Ia2bd743a85d210dd0005e126eeaeb9a4277ccce9
Signed-off-by: Seonah Moon <seonah1.moon@samsung.com>
Seonah Moon [Tue, 29 Mar 2016 04:59:01 +0000 (13:59 +0900)]
TLS: Only cache session data if a session was not resumed
As per the upstream discussion [1], session data should only be
stored when the session is not resumed.
This affects resuming sessions when using TLS tickets, since they
are not stored in the session data after a save/resume cycle.
[1] http://lists.gnutls.org/pipermail/gnutls-help/2015-February/003760.html
https://bugzilla.gnome.org/show_bug.cgi?id=745099
Change-Id: Ic9bc0381ed18d37b55cf1fbc49663cbb611ff328
Signed-off-by: Seonah Moon <seonah1.moon@samsung.com>
fr.fang [Wed, 9 Mar 2016 06:16:47 +0000 (14:16 +0800)]
Resolve security leak
[Problem] security leak
[Cause] SSLV3.0 has security leak
[Solution] Disable SSLV3.0
Change-Id: I310cadc0d3b62f194e0b55a8baf9d135bed93e9e
Signed-off-by: fr.fang <fr.fang@samsung.com>
su.g.kim [Thu, 25 Feb 2016 12:02:10 +0000 (21:02 +0900)]
send full certificate chain during handshake
Upstream Patch : https://bugzilla.gnome.org/show_bug.cgi?id=724708
Change-Id: I24059721b1cd9f5b4f29a54aaa0db191a5b325af
Signed-off-by: su.g.kim <su.g.kim@samsung.com>
qi1988.yang [Wed, 17 Feb 2016 08:43:04 +0000 (16:43 +0800)]
replace g_error_free with g_clear_error to null check internally
[Problem] error object double free issue
[cause] error object double free
[Solution] changing g_free_error to g_clear_error fuction to make it more safe.
Change-Id: I11f0eb181fba11142a286ac2a5691dc0a798683b
Signed-off-by: qi1988.yang <qi1988.yang@samsung.com>
Seonah Moon [Tue, 19 Jan 2016 11:40:41 +0000 (20:40 +0900)]
Resolve segmentation fault
Change-Id: Ie4eedfcd5aee91100f40480be1ca11f4e17f1f60
Signed-off-by: Seonah Moon <seonah1.moon@samsung.com>
Seonah Moon [Tue, 17 May 2016 06:28:11 +0000 (15:28 +0900)]
Disable adjust time feature for TV
Change-Id: I0e94be99917033055042003ebee1e21794c17150
Signed-off-by: Seonah Moon <seonah1.moon@samsung.com>
Seonah Moon [Thu, 12 May 2016 04:37:47 +0000 (13:37 +0900)]
Fixed build error (TV profile)
Change-Id: I00b718c1d19186f428877091a4f39787521b67e0
Signed-off-by: Seonah Moon <seonah1.moon@samsung.com>
Seonah Moon [Wed, 11 May 2016 07:05:11 +0000 (16:05 +0900)]
Declare missing buildrequire to get ca-certificate path
Change-Id: Icd6b652c71857e1d0ea1de878e1ae4eaed5df28b
Signed-off-by: Seonah Moon <seonah1.moon@samsung.com>
Seonah Moon [Wed, 4 May 2016 08:29:03 +0000 (17:29 +0900)]
Change CA path macro
Change-Id: I4a4f246e4299781a861205bfddf420e22bd2f86c
Signed-off-by: Seonah Moon <seonah1.moon@samsung.com>
Seonah Moon [Mon, 2 May 2016 12:42:10 +0000 (21:42 +0900)]
Accept unordered certificate chains
Some TLS servers improperly send an unordered chain of certificates,
where the next certificate in the chain is not the issuer of the current
certificate. Recent versions of GnuTLS will verify the chain anyway to
help reduce unnecessary validation failures (since there is no security
risk in doing so).
When the certificates are unordered, get_peer_certificate_from_session()
will construct GTlsCertificates with incorrect issuer fields, causing
trouble with unordered chains even though GnuTLS would otherwise handle
these fine.
https://bugzilla.gnome.org/show_bug.cgi?id=683266
Change-Id: I38fb9e15c6500c39ec860c1428e836595c9fba82
Signed-off-by: Seonah Moon <seonah1.moon@samsung.com>
Seonah Moon [Fri, 22 Apr 2016 01:57:22 +0000 (10:57 +0900)]
gnutls: Build the certificate chain recursively instead of using a loop
We are currently checking every certificate in the chain and also
looking for an issuer in the database for the last certificate of the
chain. Now build_certificate_chain is called recursively so that for all
issuers that fail, we also try to find an issuer in the database,
instead of just for the last one. Pinned certificates are now handled by
the caller since they are done only once for the first certificate.
This fixes the case of fbcdn-dragon-a.akamaihd.net for which all the
certificates in the chain are not anchored, but we can find an issuer in
the database for the second certificate that is anchored.
https://bugzilla.gnome.org/show_bug.cgi?id=750457
Change-Id: Ib3da8118b8873e3c5afec173bcd4160252b2a0b1
Signed-off-by: Seonah Moon <seonah1.moon@samsung.com>
Seonah Moon [Fri, 11 Mar 2016 08:16:13 +0000 (17:16 +0900)]
Modified hard-coded path in spec
Change-Id: I77bac02f748d9a1302b4d1569694c67579882b6b
Signed-off-by: Seonah Moon <seonah1.moon@samsung.com>
Seonah Moon [Wed, 9 Dec 2015 01:04:21 +0000 (10:04 +0900)]
Replace 'tizen_profile_name' to 'profile' for Tizen 3.0
Change-Id: Id8a5ea8d1990fd4828ce09eb70861466f7f2c93a
Signed-off-by: Seonah Moon <seonah1.moon@samsung.com>
Seonah Moon [Tue, 17 Nov 2015 02:48:17 +0000 (11:48 +0900)]
Base code merged to SPIN 2.4
Change-Id: I83323d84b236fc2688d107abc2bab8e82419aeb1
Signed-off-by: Seonah Moon <seonah1.moon@samsung.com>
Kévin THIERRY [Wed, 5 Nov 2014 16:10:54 +0000 (17:10 +0100)]
Bump to version 2.38.0
Change-Id: I974ce5fedc7d4fd2caf0622f5d0c509ca3e0bf30
Bug-Tizen: TC-1824
Signed-off-by: Kévin THIERRY <kevin.thierry@open.eurogiciel.org>
Alexandru Cornea [Fri, 28 Jun 2013 20:18:10 +0000 (23:18 +0300)]
resetting manifest requested domain to floor
Anas Nashif [Mon, 24 Jun 2013 12:08:44 +0000 (08:08 -0400)]
update to 2.36.2
Signed-off-by: Anas Nashif <anas.nashif@intel.com>
Change-Id: I9155c08d3a833f5765d3ab68e7092914d94a7dd8
Anas Nashif [Sat, 27 Apr 2013 12:42:06 +0000 (05:42 -0700)]
Update to 2.36.1
Anas Nashif [Fri, 29 Mar 2013 12:30:47 +0000 (05:30 -0700)]
Update to 2.36.0
Anas Nashif [Fri, 15 Mar 2013 15:59:07 +0000 (08:59 -0700)]
Update to 2.35.9
Anas Nashif [Tue, 26 Feb 2013 14:36:27 +0000 (06:36 -0800)]
Update to 2.35.8
Anas Nashif [Tue, 26 Feb 2013 14:28:38 +0000 (06:28 -0800)]
Update to 2.35.8
Anas Nashif [Mon, 25 Feb 2013 20:52:37 +0000 (12:52 -0800)]
Enable libproxy (base on project)
Joshua Lock [Mon, 25 Feb 2013 20:24:39 +0000 (12:24 -0800)]
Enable libproxy GIO extension
Signed-off-by: Joshua Lock <joshua.lock@intel.com>
Signed-off-by: Anas Nashif <anas.nashif@intel.com>
Change-Id: I90e0914e753074ce445d86d633c0722f1a0f301b
Anas Nashif [Fri, 8 Feb 2013 14:04:14 +0000 (06:04 -0800)]
Update to 2.35.6
Anas Nashif [Thu, 20 Dec 2012 21:17:42 +0000 (13:17 -0800)]
update to 2.35.3
Anas Nashif [Mon, 10 Dec 2012 02:21:33 +0000 (18:21 -0800)]
package license file
Anas Nashif [Mon, 10 Dec 2012 02:17:59 +0000 (18:17 -0800)]
add changelog
Anas Nashif [Mon, 10 Dec 2012 02:15:54 +0000 (18:15 -0800)]
Update to 2.35.1
Anas Nashif [Sat, 10 Nov 2012 20:11:42 +0000 (12:11 -0800)]
add packaging
Conflicts:
packaging/glib-networking.spec
Dan Winship [Mon, 23 Sep 2013 22:20:22 +0000 (18:20 -0400)]
2.38.0
Dan Winship [Mon, 29 Jul 2013 21:27:07 +0000 (17:27 -0400)]
2.37.5
Dan Winship [Sat, 20 Jul 2013 13:24:22 +0000 (09:24 -0400)]
Revert "gnutls: require gnutls 3.0"
There are potential licensing issues with gnutls 3.x, which
transitively requires gmp, whose latest versions are LGPLv3.
Allow compiling with 2.x again, but bump up the requirement to 2.12,
so we've got all the newer APIs to replace the ones that are
deprecated in 3.x.
This may be revisited in the future, and some new code added to this
module will probably be gnutls-3.x-only.
https://bugzilla.gnome.org/show_bug.cgi?id=704503
Dan Winship [Sun, 14 Jul 2013 03:37:30 +0000 (23:37 -0400)]
Add missing m4 file to fix build breakage
Dan Winship [Sat, 13 Jul 2013 20:33:59 +0000 (16:33 -0400)]
Update glib.mk, build installable tests
Dan Winship [Sat, 13 Jul 2013 20:04:35 +0000 (16:04 -0400)]
build: use AM_CPPFLAGS instead of INCLUDES
Olivier Crête [Thu, 7 Mar 2013 20:46:57 +0000 (15:46 -0500)]
gnutls: Fix deprecation warnings
https://bugzilla.gnome.org/show_bug.cgi?id=697908
Dan Winship [Sat, 13 Jul 2013 19:47:26 +0000 (15:47 -0400)]
gnutls: require gnutls 3.0
Dan Winship [Tue, 9 Jul 2013 13:51:58 +0000 (09:51 -0400)]
2.37.4
Dan Winship [Wed, 19 Jun 2013 00:15:50 +0000 (21:15 -0300)]
gnutls: don't crash if G_TLS_GNUTLS_PRIORITY is invalid
If G_TLS_GNUTLS_PRIORITY can't be parsed, print a warning and fall
back to the default value.
https://bugzilla.gnome.org/show_bug.cgi?id=701693
Dan Winship [Tue, 4 Jun 2013 23:21:10 +0000 (20:21 -0300)]
proxy/gnome: check GNOME_DESKTOP_SESSION_ID too
It claims to be deprecated, but $GNOME_DESKTOP_SESSION_ID seems to be
the only reliable identifier of GNOME-ness (other than probing D-Bus,
which we can't do from here).
https://bugzilla.gnome.org/show_bug.cgi?id=701377
Dan Winship [Tue, 28 May 2013 16:49:03 +0000 (13:49 -0300)]
2.37.2
Giovanni Campagna [Sat, 18 May 2013 21:57:55 +0000 (23:57 +0200)]
gnome: improve session detection.
Detect anything beginning with "gnome". Handles gnome-classic,
and custom gnome-jhbuild or similar sessions.
https://bugzilla.gnome.org/show_bug.cgi?id=700607
Dan Winship [Mon, 20 May 2013 13:11:47 +0000 (10:11 -0300)]
proxy/tests: fix to work when neither proxy module is available
automake ends up setting TEST_PROGS to " " in this case, but
Makefile.decl was assuming that if TEST_PROGS is not empty then it
contains actual tests, and then ended up bailing out by passing an no
tests to gtester. Fix it to use $(strip) to get the right result.
Also, drive-by automake warning fix in proxy/tests/Makefile.am
https://bugzilla.gnome.org/show_bug.cgi?id=700628
Dan Winship [Mon, 13 May 2013 21:06:29 +0000 (17:06 -0400)]
tls/tests: don't try to assert !G_IS_OBJECT() on destroyed objects
The pkcs11 tests were using g_assert(!G_IS_OBJECT()) to verify that
objects had been destroyed, but that's just crazy, and will crash
sometimes. Fix them to do a ref_count check instead.
Iain Lane [Tue, 14 May 2013 11:54:17 +0000 (12:54 +0100)]
proxy/tests/libproxy: Set GIO_EXTRA_MODULES to use the just-built module
https://bugzilla.gnome.org/show_bug.cgi?id=700286
Dan Winship [Mon, 13 May 2013 21:05:35 +0000 (17:05 -0400)]
proxy: two fixes to the previous libproxy commit
Dan Winship [Wed, 1 May 2013 12:43:12 +0000 (08:43 -0400)]
libproxy: fix handling of SOCKS in async API, add tests
Fix the handling of SOCKS proxies with g_proxy_resolver_lookup_async()
and the libproxy resolver. (Also, make the sync proxy resolver
properly cancellable.)
Add some tests of the libproxy resolver, based on the existing gnome
proxy resolver tests. Unfortunately, libproxy doesn't implement ignore
hosts in exactly the same way GProxyResolverGnome does, so we need to
keep track of which URIs they give different results for...
https://bugzilla.gnome.org/show_bug.cgi?id=699359
Dan Winship [Tue, 30 Apr 2013 20:41:14 +0000 (16:41 -0400)]
2.37.1
Iain Lane [Mon, 29 Apr 2013 17:42:53 +0000 (17:42 +0000)]
proxy/gnome: Use this in an Ubuntu (Unity) session too.
This avoids falling back to libproxy unnecessarily.
https://bugs.launchpad.net/ubuntu/+source/glib-networking/+bug/1172792
https://bugzilla.gnome.org/show_bug.cgi?id=698936
Dan Winship [Mon, 22 Apr 2013 19:15:48 +0000 (15:15 -0400)]
proxy/gnome: fix automatic mode
Automatic proxy resolution mode was accidentally getting more-or-less
ignored and treated as "none".
Dan Winship [Tue, 16 Apr 2013 12:58:12 +0000 (08:58 -0400)]
bump to 2.37.0
Olivier Crête [Wed, 10 Apr 2013 18:50:34 +0000 (14:50 -0400)]
gtlsconnection-gnutls: Only finish implicit handshake if handshake is implicit
Also add a test to prevent regressions, this test tries to do a async handshake,
and waits for the actual handshake to finish, but before allowing the callback to happen
it tries to do a write.
https://bugzilla.gnome.org/show_bug.cgi?id=697754
Dan Winship [Wed, 10 Apr 2013 21:22:40 +0000 (17:22 -0400)]
gnutls: buffer app data received during a rehandshake request
If a server requests a rehandshake but then receives application data,
gnutls 2.x silently buffers that data, but gnutls 3.x returns a
(non-fatal) error. Do the buffering inside GTlsConnectionGnutls so
that 2.x and 3.x end up behaving the same.
https://bugzilla.gnome.org/show_bug.cgi?id=695062
Muhammet Kara [Wed, 10 Apr 2013 20:41:22 +0000 (23:41 +0300)]
[l10n] Updated Turkish translation
Emmanuel Pacaud [Mon, 25 Mar 2013 13:38:23 +0000 (14:38 +0100)]
gnutls: correctly set CFLAGS using GNUTLS_CFLAGS
(recommit with correct bug url)
https://bugzilla.gnome.org/show_bug.cgi?id=696519
Dan Winship [Wed, 3 Apr 2013 16:38:05 +0000 (12:38 -0400)]
Revert "gnutls: correctly set CFLAGS using GNUTLS_CFLAGS"
This reverts commit
9802180053a0e8eb23116d2f6cd6abb32d9bab3b.
Emmanuel Pacaud [Mon, 25 Mar 2013 13:38:23 +0000 (14:38 +0100)]
gnutls: correctly set CFLAGS using GNUTLS_CFLAGS
https://bugzilla.gnome.org/show_bug.cgi?id=692134
Olivier Crête [Fri, 29 Mar 2013 22:42:45 +0000 (18:42 -0400)]
tlsconnection-gnutls: Create the cancellable pollfd in right buffer
The cancellable pollfd was overwriting the waiting_op one
https://bugzilla.gnome.org/show_bug.cgi?id=696881
Andika Triwidada [Fri, 29 Mar 2013 04:57:56 +0000 (11:57 +0700)]
Updated Indonesian translation
Fabio Tomat [Tue, 26 Mar 2013 12:05:43 +0000 (13:05 +0100)]
Added Friulian translation
Fabio Tomat [Tue, 26 Mar 2013 12:05:32 +0000 (13:05 +0100)]
Added Friulian translation
Dan Winship [Mon, 25 Mar 2013 12:36:29 +0000 (08:36 -0400)]
2.36.0
Rajesh Ranjan [Mon, 25 Mar 2013 09:46:04 +0000 (15:16 +0530)]
hindi translation by chandan kumar
Richard Stanislavský [Sun, 24 Mar 2013 23:30:11 +0000 (00:30 +0100)]
Updated slovak translation
Yuri Myasoedov [Sat, 23 Mar 2013 16:39:03 +0000 (20:39 +0400)]
Updated Russian translation
Arash Mousavi [Sat, 23 Mar 2013 13:41:24 +0000 (18:11 +0430)]
L10N: Updated Persian Translation
Ville-Pekka Vainio [Thu, 21 Mar 2013 20:39:25 +0000 (22:39 +0200)]
Finnish translation update by Jiri Grönroos
Inaki Larranaga Murgoitio [Wed, 20 Mar 2013 08:39:04 +0000 (09:39 +0100)]
Updated Basque language
Victor Ibragimov [Tue, 19 Mar 2013 21:30:41 +0000 (22:30 +0100)]
[l10n] Added Tadjik translation
Carles Ferrando [Sun, 17 Mar 2013 19:04:03 +0000 (20:04 +0100)]
[l10n] Updated Catalan (Valencian) translation
Rūdolfs Mazurs [Sun, 17 Mar 2013 18:22:50 +0000 (20:22 +0200)]
Updated Latvian translation
Ask H. Larsen [Sun, 17 Mar 2013 13:55:22 +0000 (14:55 +0100)]
Updated Danish translation
Duarte Loreto [Fri, 15 Mar 2013 12:42:46 +0000 (12:42 +0000)]
Updated Portuguese translation and converted to New Spelling (Novo AO)
Nilamdyuti Goswami [Tue, 12 Mar 2013 12:58:57 +0000 (18:28 +0530)]
Assamese translation updated for gnome 3.8
Changwoo Ryu [Mon, 11 Mar 2013 17:31:28 +0000 (02:31 +0900)]
Updated Korean translation
Joan Duran [Sun, 10 Mar 2013 22:48:37 +0000 (23:48 +0100)]
[l10] Updated Catalan translation
Theppitak Karoonboonyanan [Sat, 9 Mar 2013 04:46:20 +0000 (11:46 +0700)]
Updated Thai translation
Ihar Hrachyshka [Thu, 7 Mar 2013 14:40:07 +0000 (17:40 +0300)]
Updated Belarusian translation.
Dan Winship [Tue, 5 Mar 2013 15:37:19 +0000 (10:37 -0500)]
2.35.9
Dan Winship [Tue, 5 Mar 2013 14:29:55 +0000 (09:29 -0500)]
gnutls: handle another case of connection-closed-during-handshake
fixes one of the tests with gnutls 3.x
https://bugzilla.gnome.org/show_bug.cgi?id=694812
Mario Blättermann [Mon, 4 Mar 2013 07:35:14 +0000 (08:35 +0100)]
[l10n] Updated German translation
Nguyễn Thái Ngọc Duy [Sat, 2 Mar 2013 13:35:11 +0000 (20:35 +0700)]
Updated Vietnamese translation
Chao-Hsiung Liao [Fri, 1 Mar 2013 14:24:56 +0000 (22:24 +0800)]
Updated Traditional Chinese translation(Hong Kong and Taiwan)
A S Alam [Tue, 26 Feb 2013 01:50:01 +0000 (07:20 +0530)]
Punjabi: Translation updated (aalam)
Alexandre Franke [Mon, 25 Feb 2013 19:13:18 +0000 (20:13 +0100)]
Update French translation
Gheyret Kenji [Fri, 22 Feb 2013 13:25:54 +0000 (22:25 +0900)]
Updated Uyghur translation
Signed-off-by: Gheyret Kenji <gheyret@gmail.com>