--- gnutls13-2.0.4.orig/debian/gnutls-doc.install +++ gnutls13-2.0.4/debian/gnutls-doc.install @@ -0,0 +1,7 @@ +doc/reference/html/*html usr/share/doc/gnutls-doc/api-reference +doc/reference/html/*png usr/share/doc/gnutls-doc/api-reference +doc/reference/html/*.css usr/share/doc/gnutls-doc/api-reference +doc/reference/html/*.sgml usr/share/doc/gnutls-doc/api-reference +doc/reference/html/*.devhelp* usr/share/doc/gnutls-doc/api-reference +doc/*.html usr/share/doc/gnutls-doc/html +doc/*.png usr/share/doc/gnutls-doc/html --- gnutls13-2.0.4.orig/debian/README.source_and_patches +++ gnutls13-2.0.4/debian/README.source_and_patches @@ -0,0 +1,19 @@ +Uses cdbs with simple-patchsys.mk. + +Patches in debian/patches (i.e. *diff *patch) are applied automatically in +alphanumeric order. + +Use +debian/rules apply-patches +to see the patched source. + +See cdbs-edit-patch for a useful way to make modifications. + + +---------------------------------------- +Rebuilding PDF documentation: + +apt-get install texlive-latex-base texlive-fonts-recommended \ + texlive-generic-recommended + +make pdf --- gnutls13-2.0.4.orig/debian/gnutls-doc.examples +++ gnutls13-2.0.4/debian/gnutls-doc.examples @@ -0,0 +1 @@ +doc/examples/*.c --- gnutls13-2.0.4.orig/debian/libgnutls13-dbg.debhelper.log +++ gnutls13-2.0.4/debian/libgnutls13-dbg.debhelper.log @@ -0,0 +1 @@ +dh_testdir --- gnutls13-2.0.4.orig/debian/libgnutls13.debhelper.log +++ gnutls13-2.0.4/debian/libgnutls13.debhelper.log @@ -0,0 +1 @@ +dh_testdir --- gnutls13-2.0.4.orig/debian/libgnutlsxx13.debhelper.log +++ gnutls13-2.0.4/debian/libgnutlsxx13.debhelper.log @@ -0,0 +1 @@ +dh_testdir --- gnutls13-2.0.4.orig/debian/gnutls-doc.doc-base +++ gnutls13-2.0.4/debian/gnutls-doc.doc-base @@ -0,0 +1,16 @@ +Document: gnutls +Title: GnuTLS Manual +Author: Simon Josefsson +Abstract: GnuTLS library manual +Section: Apps/Net + +Format: HTML +Index: /usr/share/doc/gnutls-doc/html/gnutls.html +Files: /usr/share/doc/gnutls-doc/html/* + +Format: PDF +Files: /usr/share/doc/gnutls-doc/gnutls.pdf + +Format: info +Index: /usr/share/info/gnutls.info.gz +Files: /usr/share/info/gnutls.info* --- gnutls13-2.0.4.orig/debian/rules +++ gnutls13-2.0.4/debian/rules @@ -0,0 +1,65 @@ +#! /usr/bin/make -f +# Build the gnutls package for Debian. + +ifeq ($(DEB_BUILD_ARCH),hppa) + CFLAGS += -fno-gcse +endif + +include /usr/share/cdbs/1/rules/debhelper.mk +include /usr/share/cdbs/1/class/autotools.mk +include /usr/share/cdbs/1/rules/simple-patchsys.mk +include /usr/share/cdbs/1/rules/clean-la.mk + +DEB_CONFIGURE_EXTRA_FLAGS = --with-mcrypt=no --enable-ld-version-script --disable-guile +DEB_MAKE_CHECK_TARGET = check +DEB_DH_STRIP_ARGS = --dbg-package=libgnutls13-dbg +DEB_DH_MAKESHLIBS_ARGS_libgnutls13 := -V 'libgnutls13 (>=2.0.4-0)' +DEB_COMPRESS_EXCLUDE := gnutls.pdf + +#build/libgnutls-doc:: +# $(DEB_MAKE_INVOKE) -C libextra/openpgp pgp-api.tex +# $(DEB_MAKE_INVOKE) -C doc/tex gnutls.ps +# $(DEB_MAKE_INVOKE) -C doc/tex +# +#install/libgnutls-doc:: +# $(DEB_MAKE_INVOKE) -C doc/tex $(DEB_MAKE_INSTALL_TARGET) + + +post-patches:: + cd $(DEB_SRCDIR) && chmod +x doc/scripts/sort2.pl doc/scripts/gdoc + +# pre-clean rule: save gnutls.pdf since it is expensive to regenerate. +# See README.source_and_patches +cleanbuilddir/gnutls-doc:: + if [ -e doc/gnutls.pdf ] ; then mv doc/gnutls.pdf doc/gnutls.pdf.debbackup ; fi + + +# additional commands for clean +clean:: + mkdir -p m4 + + -rm -rf autom4te.cache + + -rm -f tests/stamp-tests + # stupid conflicts + -rm -f libextra/lzoconf.h libextra/lzodefs.h + -rm -f doc/*.info* + # restore gnutls.pdf + if [ -e doc/gnutls.pdf.debbackup ] && [ ! -e doc/gnutls.pdf ] ; then mv doc/gnutls.pdf.debbackup doc/gnutls.pdf ; fi + +# additional comands for build rule +build/gnutls-doc:: + $(MAKE) html + +# add post deb preparation (including debhelper stuff) actions +# generate symlinks manually and use dh_link to make them policy-conform. +binary-install/gnutls-doc:: + cd debian/gnutls-doc && \ + for i in usr/share/doc/gnutls-doc/html/gnutls*.png ; do \ + i=`basename "$$i"` ; \ + ln -s "/usr/share/doc/gnutls-doc/html/$$i" \ + usr/share/info/ ; \ + done && \ + cd ../.. && \ + dh_link -pgnutls-doc + --- gnutls13-2.0.4.orig/debian/control +++ gnutls13-2.0.4/debian/control @@ -0,0 +1,112 @@ +Source: gnutls13 +Section: devel +Priority: optional +Maintainer: Ubuntu Core Developers +XSBC-Original-Maintainer: Debian GnuTLS Maintainers +Uploaders: Andreas Metzler , Eric Dorland , James Westby +Build-Depends: debhelper (>= 5.0.0), libgcrypt11-dev (>= 1.2.2), zlib1g-dev, libopencdk10-dev, liblzo2-dev, cdbs (>= 0.4.49ubuntu5), gtk-doc-tools, texinfo (>= 4.8), libtasn1-3-dev (>= 0.3.4-1), autotools-dev +Standards-Version: 3.7.2 + +Package: libgnutls-dev +Priority: optional +Section: libdevel +Architecture: any +Provides: gnutls-dev +Depends: libgnutls13 (= ${Source-Version}), libgnutlsxx13 (= ${Source-Version}), libgcrypt11-dev (>= 1.2.2), libc6-dev | libc-dev, zlib1g-dev, libtasn1-3-dev (>= 0.3.4), libopencdk10-dev, liblzo2-dev +Suggests: gnutls-doc, gnutls-bin +Conflicts: libgnutls11-dev, gnutls-dev (<< 0.4.0-0), gnutls0.4-dev +Replaces: libgnutls11-dev, gnutls-dev (<< 0.4.0-0), gnutls0.4-dev +Description: the GNU TLS library - development files + gnutls is a portable library which implements the Transport Layer + Security (TLS) 1.0 and Secure Sockets Layer (SSL) 3.0 protocols. + . + Currently gnutls implements: + - the TLS 1.0 and SSL 3.0 protocols, without any US-export + controlled algorithms + - X509 Public Key Infrastructure (with several limitations). + - SRP for TLS authentication. + - TLS Extension mechanism + . + This package contains the gnutls development files. + +Package: libgnutls13 +Priority: important +Architecture: any +Section: libs +Depends: ${shlibs:Depends} +Replaces: gnutls0, gnutls3, gnutls0.4 +Conflicts: gnutls0, gnutls0.4 +Suggests: gnutls-bin +Description: the GNU TLS library - runtime library + gnutls is a portable library which implements the Transport Layer + Security (TLS) 1.0 and Secure Sockets Layer (SSL) 3.0 protocols. + . + Currently gnutls implements: + - the TLS 1.0 and SSL 3.0 protocols, without any US-export + controlled algorithms + - X509 Public Key Infrastructure (with several limitations). + - SRP for TLS authentication. + - TLS Extension mechanism + . + This package contains the runtime libraries. + +Package: libgnutls13-dbg +Priority: extra +Architecture: any +Section: devel +Depends: libgnutls13 (= ${Source-Version}) +Description: GNU TLS library - debugger symbols + gnutls is a portable library which implements the Transport Layer + Security (TLS) 1.0 and Secure Sockets Layer (SSL) 3.0 protocols. + . + Currently gnutls implements: + - the TLS 1.0 and SSL 3.0 protocols, without any US-export + controlled algorithms + - X509 Public Key Infrastructure (with several limitations). + - SRP for TLS authentication. + - TLS Extension mechanism + . + This package contains the debugger symbols. + +Package: gnutls-bin +Priority: optional +Architecture: any +Section: net +Depends: ${shlibs:Depends} +Conflicts: libgnutls5-dev, gnutls0.4-dev, gnutls-dev (<< 0.4.0-0) +Replaces: libgnutls5-dev, gnutls0.4-dev, gnutls-dev (<< 0.4.0-0) +Description: the GNU TLS library - commandline utilities + gnutls is a portable library which implements the Transport Layer + Security (TLS) 1.0 and Secure Sockets Layer (SSL) 3.0 protocols. + . + This package contains a commandline interface to the GNU TLS library, + which can be used to set up secure connections from e.g. shell scripts. + +Package: gnutls-doc +Priority: optional +Architecture: all +Section: doc +Depends: ${misc:Depends} +Description: the GNU TLS library - documentation and examples + gnutls is a portable library which implements the Transport Layer + Security (TLS) 1.0 and Secure Sockets Layer (SSL) 3.0 protocols. + . + This package contains all the gnutls documentation. + +Package: libgnutlsxx13 +Priority: optional +Architecture: any +Section: libs +Depends: ${shlibs:Depends} +Description: the GNU TLS library - C++ runtime library + gnutls is a portable library which implements the Transport Layer + Security (TLS) 1.0 and Secure Sockets Layer (SSL) 3.0 protocols. + . + Currently gnutls implements: + - the TLS 1.0 and SSL 3.0 protocols, without any US-export + controlled algorithms + - X509 Public Key Infrastructure (with several limitations). + - SRP for TLS authentication. + - TLS Extension mechanism + . + This package contains the C++ runtime libraries. --- gnutls13-2.0.4.orig/debian/gnutls-bin.install +++ gnutls13-2.0.4/debian/gnutls-bin.install @@ -0,0 +1,4 @@ +debian/tmp/usr/bin/gnutls-* usr/bin +debian/tmp/usr/bin/certtool usr/bin +debian/tmp/usr/bin/srptool usr/bin +debian/tmp/usr/bin/psktool usr/bin --- gnutls13-2.0.4.orig/debian/libgnutlsxx13.install +++ gnutls13-2.0.4/debian/libgnutlsxx13.install @@ -0,0 +1 @@ +debian/tmp/usr/lib/libgnutlsxx.so.* usr/lib --- gnutls13-2.0.4.orig/debian/gnutls-doc.docs +++ gnutls13-2.0.4/debian/gnutls-doc.docs @@ -0,0 +1 @@ +doc/gnutls.pdf --- gnutls13-2.0.4.orig/debian/libgnutls-dev.install +++ gnutls13-2.0.4/debian/libgnutls-dev.install @@ -0,0 +1,10 @@ +debian/tmp/usr/include/* usr/include +debian/tmp/usr/lib/lib*.so usr/lib +debian/tmp/usr/lib/lib*.a usr/lib +debian/tmp/usr/lib/libgnutls.la usr/lib +debian/tmp/usr/lib/libgnutls-*.la usr/lib +debian/tmp/usr/share/aclocal/* usr/share/aclocal +debian/tmp/usr/bin/libgnutls*config usr/bin +debian/tmp/usr/lib/pkgconfig/gnutls.pc usr/lib/pkgconfig +debian/tmp/usr/lib/pkgconfig/gnutls-extra.pc usr/lib/pkgconfig + --- gnutls13-2.0.4.orig/debian/changelog +++ gnutls13-2.0.4/debian/changelog @@ -0,0 +1,604 @@ +gnutls13 (2.0.4-1ubuntu2.1) hardy-security; urgency=low + + * SECURITY UPDATE: multiple remote denial of service. + * debian/patches/90_GNUTLS-SA-2008-1.diff: upstream fixes, thanks to Debian. + * References + GNUTLS-SA-2008-1 + CVE-2008-1948, CVE-2008-1949, CVE-2008-1950 + + -- Kees Cook Tue, 20 May 2008 18:20:22 -0700 + +gnutls13 (2.0.4-1ubuntu2) hardy; urgency=low + + * Pulled from upstream, by way of Debian: + + debian/patches/20_nulltermfix_465197.diff + Corrected the behaviour of gnutls_x509_crt_get_subject_alt_name() + et al. to not null terminate binary strings and return the proper + size. + + debian/patches/21_nulltermfix_465197_part2.diff + corrected string handling in parse_general_name. + + -- Steve Langasek Fri, 22 Feb 2008 07:39:07 +0000 + +gnutls13 (2.0.4-1ubuntu1) hardy; urgency=low + + * Merge from debian unstable, remaining changes: + - debian/rules: Use clean-la.mk. + + -- Martin Pitt Mon, 03 Dec 2007 11:10:37 +0100 + +gnutls13 (2.0.4-1) unstable; urgency=low + + * New upstream version. (Closes: #451564) + - TLS authorization support removed. (Functions are still there, but a noop + now.) + - Bump shlibs due to added functions. + + -- Andreas Metzler Sat, 17 Nov 2007 11:55:54 +0100 + +gnutls13 (2.0.1-1ubuntu1) hardy; urgency=low + + * Use clean-la.mk to remove the dependencies from the .la files. + + -- Martin Pitt Tue, 06 Nov 2007 16:36:37 -0500 + +gnutls13 (2.0.1-1) unstable; urgency=low + + * New upstream version. + * Remove doc/*.info* on clean to allow building thrice in a row. + (Closes: #441740) + + -- Andreas Metzler Sat, 29 Sep 2007 11:29:22 +0200 + +gnutls13 (1.7.19-1) unstable; urgency=low + + * New upstream version 1.7.19. + - Fix gnutls_error_is_fatal so that positive "errors" are non-critical. + This takes of care of the mutt breakage. Closes: #439640 + + -- Andreas Metzler Mon, 27 Aug 2007 19:36:23 +0200 + +gnutls13 (1.7.18-2) unstable; urgency=low + + * Upload to unstable + + -- Andreas Metzler Sat, 25 Aug 2007 09:27:18 +0200 + +gnutls13 (1.7.18-1) experimental; urgency=low + + * New upstream version 1.7.18, release candidate for 2.0. + * Bump shlibs, since functions have been added. + * Image files renamed upstream with gnutls- prefix and symlinked to + /usr/share/info/ in Debian package. Closes: #423577 + + -- Andreas Metzler Sat, 18 Aug 2007 09:06:11 +0200 + +gnutls13 (1.7.16-1) experimental; urgency=low + + * New upstream version 1.7.16. + + -- Andreas Metzler Sat, 11 Aug 2007 10:50:21 +0200 + +gnutls13 (1.7.14-1) experimental; urgency=low + + * New upstream version + - fixes crash in gnutls-cli when TLS handshake fails. Closes: #429183 + + -- Andreas Metzler Sat, 30 Jun 2007 09:06:35 +0200 + +gnutls13 (1.7.12-1) experimental; urgency=low + + * New upstream version 1.7.12 + - Fixes memory errors in certificate parsing. Closes: #333050 + * Bump shlibs, due to API extensions in 1.7.10. + * Rebuilding of docs simpified, strip debian/README.source_and_patches to + reflect that. + + -- Andreas Metzler Sat, 23 Jun 2007 11:14:26 +0200 + +gnutls13 (1.7.9-1) experimental; urgency=low + + * Switch to liblzo2. (Thanks, Peter Eisentraut) (Closes: #423332) + * New upstream version. + - Uses opencdk10 (0.6.x). + - Improved gnutls_set_default_priority() priorities, with matching correct + docs. (Closes: #422024) + - bumped shlibs. + * Do not delete doc/gnutls.pdf on clean, allowing to run dpkg-buildpackage + twice in a row on the same sourcetree. (Closes: #424357) Document what is + needed to rebuild doc/gnutls.pdf in README.source_and_patches. + + -- Andreas Metzler Mon, 28 May 2007 08:36:42 +0200 + +gnutls13 (1.7.7-1) experimental; urgency=low + + * New development upstream version 1.7.7. + - Point watchfile to development versions. + - Bump shlibs for added APIs. + - Includes German translation. (Closes: #392857) + + -- Andreas Metzler Sun, 15 Apr 2007 10:11:21 +0200 + +gnutls13 (1.6.3-1) unstable; urgency=low + + * New upstream version, pulling selected fixes and features from 1.7.x. + * Bump shlibs. + + -- Andreas Metzler Sun, 27 May 2007 09:26:14 +0200 + +gnutls13 (1.6.2-2) unstable; urgency=low + + * Switch to liblzo2. (Thanks, Peter Eisentraut) (Closes: #423332) + + -- Andreas Metzler Sun, 13 May 2007 09:48:31 +0200 + +gnutls13 (1.6.2-1) unstable; urgency=low + + * New upstream version + - Really Closes: #403887 libgnutls failes to parse OpenSSL generated + certificates, since it contains a regenerated pkix_asn1_tab.c. + - Ship German translation. Closes: #392857 + + -- Andreas Metzler Sat, 21 Apr 2007 10:57:02 +0200 + +gnutls13 (1.6.1-2) unstable; urgency=low + + * [gnutls-bin.install] Ship psktool. + * Ship gettext translations in deb package, but as gnutls13.mo instead of + gnutls.mo. + * Upload to unstable. Merge branch1.5.x.EXP to svn trunk. Include 1.4.4-* + changelog entries after branchoff. Point watchfile to stable upstream + versions again. + * Drop dependency of libgnutls13-dbg on libgnutlsxx13. + + -- Andreas Metzler Sat, 3 Feb 2007 13:49:48 +0100 + +gnutls13 (1.6.1-1) experimental; urgency=low + + [ James Westby ] + * New upstream release. + + -- Andreas Metzler Sat, 3 Feb 2007 13:18:03 +0100 + +gnutls13 (1.6.0-1) experimental; urgency=low + + * New upstream version. + + -- Andreas Metzler Sat, 18 Nov 2006 13:21:56 +0100 + +gnutls13 (1.5.3-1) experimental; urgency=low + + [ Andreas Metzler ] + * Fix debian/copyright. + - Do not use "copyright" as title of a paragraph listing licenses. + (Closes: #290194) + - Add a copy of the FDL 1.2 to debian/copyright. + * New upstream version 1.5.3. + * Bump shlibs to get rid of reference to ugly 1.5.1.cvs2006093. + * Drop code for re-libtoolizing and running auto* from debian/rules, it is + unused and would not work anymore. (We can later grab the from SVN and + update it to make work if we ever need it.) + + -- Andreas Metzler Sat, 28 Oct 2006 12:56:46 +0200 + +gnutls13 (1.5.1.cvs20060930-1) experimental; urgency=low + + [ Andreas Metzler ] + * Add a watchfile. + * New upstream development version. + - Pulled from http://josefsson.org/daily/gnutls/gnutls-20060930.tar.gz + - Using a cvs snapshot instead of 1.5.1 because the soname in 1.5.1 was + broken. + - Drop unneeded patches/16_libs.private_gnutls.diff + patches/16_libs.private_gnutls-extra.diff + - Point watchfile to development versions. + - Builds a C++ library. + * Switch to debhelper v5 mode to be able to ship debug symbols of + libgnutls13 and libgnutlsxx13 in a common libgnutls13-dbg package. + * Branched off from 1.4.4-1. + + -- Andreas Metzler Sat, 30 Sep 2006 09:54:38 +0200 + +gnutls13 (1.4.4-3) unstable; urgency=low + + * Pulled /patches/18_negotiate_cypher.diff from 1.4.5: + When a GnuTLS server receive a SSLv2 Client Hello for an unknown TLS + version, try to negotiate the highest version support by the GnuTLS + server, instead of the lowest. + + -- Andreas Metzler Sat, 11 Nov 2006 10:35:29 +0100 + +gnutls13 (1.4.4-2) unstable; urgency=low + + [ Andreas Metzler ] + * Add a watchfile. + * Fix debian/copyright. + - Do not use "copyright" as title of a paragraph listing licenses. + (Closes: #290194) + - Add a copy of the FDL 1.2 to debian/copyright. + + -- Andreas Metzler Tue, 12 Sep 2006 19:57:49 +0200 + +gnutls13 (1.4.4-1) unstable; urgency=high + + [ Andreas Metzler ] + * New upstream version 1.4.4 + - Updated fix for GNUTLS-SA-2006-4, that is not too strict and doesn't + crash mutt. (closes: #386725) + GNUTLS-SA-2006-4 is CVE-2006-4790. + + -- Andreas Metzler Tue, 12 Sep 2006 19:09:47 +0200 + +gnutls13 (1.4.3-2) unstable; urgency=low + + * the lesser of two weevils release. + [ Andreas Metzler ] + * Revert patch for GNUTLS-SA-2006-4 as it caused segmentation faults in + various programs, including mutt. (closes: #386680) + + -- Andreas Metzler Sat, 9 Sep 2006 19:29:52 +0200 + +gnutls13 (1.4.3-1) unstable; urgency=high + + [ Andreas Metzler ] + * New upstream version 1.4.3. + - Fix PKCS#1 verification to avoid a variant of Bleichenbacher's Crypto 06 + rump session attack. GNUTLS-SA-2006-4 + - Fix PKCS#1 decryption to avoid Bleichenbacher's Crypto 98 attack.. + GNUTLS-SA-2006-3 + - Fix crash in gnutls_x509_crt_sign2 if passed a NULL issuer_key. + + -- Andreas Metzler Fri, 8 Sep 2006 19:12:33 +0200 + +gnutls13 (1.4.2-1) unstable; urgency=medium + + [ Andreas Metzler ] + * New upstream bugfix release. + - Fixes a crash in the certificate verification logic. + + -- Andreas Metzler Sat, 12 Aug 2006 10:44:16 +0200 + +gnutls13 (1.4.1-1) unstable; urgency=low + + [ James Westby ] + * New upstream release. + * Remove the following patches as they are now included upstream: + - 10_certtoolmanpage.diff + - 15_fixcompilewarning.diff + - 30_man_hyphen_*.patch + * Link the API reference in /usr/share/gtk-doc/html as gnutls rather than + gnutls-api so that devhelp can find it. + + -- Andreas Metzler Sat, 15 Jul 2006 11:11:08 +0200 + +gnutls13 (1.4.0-3) unstable; urgency=low + + [ Andreas Metzler ] + * Strip "libgnutls-config --libs"' output to only list stuff required for + dynamic linking. (Closes: #375815). Document this in "libgnutls-dev's + README.Debian. + * Pull patches/16_libs.private_gnutls.diff and + debian/patches/16_libs.private_gnutls-extra.diff from upstream to make + pkg-config usable for static linking. + + -- Andreas Metzler Sun, 2 Jul 2006 12:10:56 +0200 + +gnutls13 (1.4.0-2) unstable; urgency=low + + [ Andreas Metzler ] + * Set maintainer to alioth mailinglist. + * Drop code for updating config.guess/config.sub from debian/rules, as cdbs + handles this. Build-Depend on autotools-dev. + * Drop build-dependency on binutils (>= 2.14.90.0.7), even sarge has 2.15-6. + * Use cdbs' simple-patchsys.mk. + - add debian/README.source_and_patches + - add patches/10_certtoolmanpage.diff patches/12_lessdeps.diff + * Fix libgnutls-dev's Suggests to point to existing package. (gnutls-doc) + * Also ship css-, devhelp- and sgml files in gnutls-doc. + * patches/15_fixcompilewarning.diff correct order of funtion arguments. + + [ James Westby ] + * This release allows the port to be specified as the name of the service + when using gnutls-cli (closes: #342891) + + -- Andreas Metzler Sat, 17 Jun 2006 20:44:09 +0200 + +gnutls13 (1.4.0-1) experimental; urgency=low + + * New maintainer team. Thanks, Matthias for all the work you did. + * Re-add gnutls-doc package, featuring api-reference as manual pages and + html, and reference manual in html and pdf format. + (closes: #368185,#368449) + * Fix reference to gnutls0.4-doc package in debian/copyright. Update + debian/copyright and include actual copyright statements. + (closes: #369071) + * Bump shlibs because of changes to extra.h + * Drop debian/libgnutls13.dirs and debian/libgnutls-dev.dirs. dh_* will + generate the necessary directories. + * Drop debian/NEWS.Debian as it only talks about the move of the (since + purged) gnutls-doc package to contrib a long time ago. + (Thanks Simon Josefsson, for these suggestions.) + * new upstream version. (closes: #368323) + * clean packaging against upstream tarball. + - Drop all patches, except for fixing error in certtool.1 and setting + gnutls_libs=-lgnutls-extra in libgnutls-extra-config. + - Add --enable-ld-version-script + to DEB_CONFIGURE_EXTRA_FLAGS to force versioning of symbols, instead of + patching ./configure.in. + (closes: #367358) + * Set DEB_MAKE_CHECK_TARGET = check to run included testsuite. + * Build against external libtasn1-3. (closes: #363294) + * Standards-Version: 3.7.2, no changes required. + * debian/control and override file are in sync with respect to Priority and + Section, everthing except libgnutls13-dbg already was. (closes: #366956) + * acknowledge my own NMU. (closes: #367065) + * libgnutls13-dbg is nonempty (closes: #367056) + + -- Andreas Metzler Sat, 20 May 2006 11:22:36 +0000 + +gnutls13 (1.3.5-1.1) unstable; urgency=low + + * NMU + * Invoke ./configure with --with-included-libtasn1 to prevent accidental + linking against the broken 0.3.1-1 upload of libtasn1-2-dev which + contained libtasn1.so.3 and force gnutls13 to use the internal version of + libtasn instead until libtasn1-3-dev is uploaded. Drop broken + Build-Depency on libtasn1-2-dev (>= 0.3.1). (closes: #363294) + * Make libgnutls13-dbg nonempty by using --dbg-package=libgnutls13 instead + of --dbg-package=libgnutls12. (closes: #367056) + + -- Andreas Metzler Sat, 13 May 2006 07:45:32 +0000 + +gnutls13 (1.3.5-1) unstable; urgency=low + + * New Upstream version. + - Security fix. + - Yet another ABI change. + * Depends on libgcrypt 1.2.2, thus should close:#330019,#355272 + * Let -dev package depend on liblzo-dev (closes:#347438) + * Fix certtool help output (closes:#338623) + + -- Matthias Urlichs Sat, 18 Mar 2006 22:46:25 +0100 + +gnutls12 (1.2.9-2) unstable; urgency=low + + * Install /usr/lib/pkgconfig/*.pc files. + * Depend on texinfo (>= 4.8, for the @euro{} sign). + + -- Matthias Urlichs Tue, 15 Nov 2005 19:26:02 +0100 + +gnutls12 (1.2.9-1) unstable; urgency=low + + * New Upstream version. + + -- Matthias Urlichs Fri, 11 Nov 2005 18:51:28 +0100 + +gnutls12 (1.2.8-1) unstable; urgency=low + + * New Upstream version. + - depends on libgcrypt11 1.2.2 + * Bumped shlibs version, just to be on the safe side. + + -- Matthias Urlichs Wed, 19 Oct 2005 12:05:14 +0200 + +gnutls12 (1.2.6-1) unstable; urgency=low + + * New Upstream version. + * Remove Provides: on libgnutls11-dev. + Hopefully this will be temporary (pending discussion with Upstream). + + -- Matthias Urlichs Thu, 11 Aug 2005 12:21:36 +0200 + +gnutls12 (1.2.5-3) unstable; urgency=high + + * Updated libgnutls12.shlibs file. + Thanks to Mike Paul . + Closes: #319291: libgnutls12: Wrong soversion in shlibs file; breaks + dependencies on this library + + -- Matthias Urlichs Thu, 21 Jul 2005 13:19:25 +0200 + +gnutls12 (1.2.5-2) unstable; urgency=medium + + * Did not depend on libgnutls12 -- not picked up by dh_shlibdeps. + Added an explicit dependency as a stopgap fix. + + -- Matthias Urlichs Thu, 21 Jul 2005 08:27:22 +0200 + +gnutls12 (1.2.5-1) unstable; urgency=low + + * Merged with the latest stable release. + * Renamed to gnutls12. + - Changed the library version strings to GNUTLS_1_2. + - Renamed the development package back to "libgnutls-dev". + + -- Matthias Urlichs Tue, 5 Jul 2005 10:35:56 +0200 + +gnutls11 (1.0.19-1) experimental; urgency=low + + * Merged with the latest stable release. + + -- Matthias Urlichs Sun, 26 Dec 2004 13:28:45 +0100 + +gnutls11 (1.0.16-13) unstable; urgency=high + + * Fixed an ASN.1 extraction error. + Found by Pelle Johansson . + + -- Matthias Urlichs Mon, 29 Nov 2004 10:16:21 +0100 + +gnutls11 (1.0.16-12) unstable; urgency=high + + * Fixed a segfault in certtool. Closes: #278361. + + -- Matthias Urlichs Thu, 11 Nov 2004 09:40:02 +0100 + +gnutls11 (1.0.16-11) unstable; urgency=medium + + * Merged binary (non-UF8) string printing code from Upstream. + * Password code in certtool was somewhat broken. + + -- Matthias Urlichs Sat, 6 Nov 2004 13:11:03 +0100 + +gnutls11 (1.0.16-10) unstable; urgency=high + + * Fixed one instance of uninitialized memory usage. + + -- Matthias Urlichs Thu, 21 Oct 2004 06:07:53 +0200 + +gnutls11 (1.0.16-9) unstable; urgency=high + + * Pulled from Upstream CVS: + - Fix two memory leaks. + - Fix NULL dereference. + + -- Matthias Urlichs Fri, 8 Oct 2004 10:43:20 +0200 + +gnutls11 (1.0.16-8) unstable; urgency=high + + * Pulled these changes from Upstream CVS: + - Added default limits in the verification of certificate chains, + to avoid denial of service attacks. + - Added gnutls_certificate_set_verify_limits() to override them. + - Added gnutls_certificate_verify_peers2(). + + -- Matthias Urlichs Sun, 12 Sep 2004 02:05:25 +0200 + +gnutls11 (1.0.16-7) unstable; urgency=low + + * Removed superfluous -lFOO entries from libgnutls{,-extra}-config output. + Thanks to joeyh@debian.org for reporting this problem. + + -- Matthias Urlichs Sat, 14 Aug 2004 11:22:51 +0200 + +gnutls11 (1.0.16-6) unstable; urgency=medium + + * Memory leak, found by Modestas Vainius . + - Closes: #264420 + + -- Matthias Urlichs Sun, 8 Aug 2004 22:21:01 +0200 + +gnutls11 (1.0.16-5) unstable; urgency=low + + * Depend on current libtasn1-2 (>= 0.2.10). + - Closes: #264198. + * Fixed maintainer email to point to Debian address. + + -- Matthias Urlichs Sat, 7 Aug 2004 19:44:38 +0200 + +gnutls11 (1.0.16-4) unstable; urgency=low + + * The OpenSSL compatibility library has been linked incorrectly + (-ltasn1 was missing). + * Need to build-depend on current opencdk8 and libtasn1-2 version. + + -- Matthias Urlichs Sat, 7 Aug 2004 19:29:32 +0200 + +gnutls11 (1.0.16-3) unstable; urgency=high + + * Documentation no longer includes LaTeX-produced output + (the source contains latex2html-specific features, which is non-free). + * Urgency: High because of pending base freeze. + + -- Matthias Urlichs Mon, 26 Jul 2004 11:18:20 +0200 + +gnutls11 (1.0.16-2) unstable; urgency=high + + * Actually *enable* debug symbols :-/ + * Urgency: High for speedy inclusion in d-i + + -- Matthias Urlichs Fri, 23 Jul 2004 22:38:07 +0200 + +gnutls11 (1.0.16-1) experimental; urgency=low + + * Update to latest Upstream version. + * now depends on libgcrypt11 + * Include debugging package + * Use hevea, not latex2html. + + -- Matthias Urlichs Wed, 21 Jul 2004 16:58:26 +0200 + +gnutls10 (1.0.4-4) unstable; urgency=low + + * New maintainer. + * Run autotools at source package build time. + - Closes: #257237: FTBFS (i386/sid): aclocal failed + * Remove "package is still changed upstream" warning. + * Build-Depend on debhelper 4.1 (cdbs), versioned libgcrypt7. + + -- Matthias Urlichs Fri, 16 Jul 2004 02:09:36 +0200 + +gnutls10 (1.0.4-3) unstable; urgency=low + + * control: Changed the build dependency and the dependency of + libgnutls10-dev to be versioned on libopencdk8-dev >= 0.5.3; + libopencdk8-dev 0.5.1 had an invalid dependency on libgcrypt-dev which + could cause linking against two versions of libgcrypt. + + -- Ivo Timmermans Sat, 24 Jan 2004 15:32:22 +0100 + +gnutls10 (1.0.4-2) unstable; urgency=low + + * libgnutls-doc.doc-base: Removed HTML manual listing. + * control: Removed Jordi Mallach from the list of Uploaders. Thanks, + Jordi :) + + -- Ivo Timmermans Wed, 14 Jan 2004 13:35:42 +0100 + +gnutls10 (1.0.4-1) unstable; urgency=low + + * New upstream release (Closes: #227527) + * The new documentation in libgnutls-doc fixes several typo's and + style glitches: + Closes: #215772: inconsistent auth method list in manual + Closes: #215775: dangling footnote on page 14 of manual + Closes: #215777: bad sentence on page 18 of manual + Closes: #215780: incorrect info about ldaps/imaps in manual + * rules: + * Use --add-missing instead of --force in the call to automake. + * Don't build gnutls.ps, use the upstream version. + (Closes: #224846) + * gnutls-bin.manpages: Use glob to find manpages. + * patches/008_manpages.diff: Removed; included upstream. + + -- Ivo Timmermans Tue, 13 Jan 2004 23:57:16 +0100 + +gnutls10 (1.0.0-1) unstable; urgency=low + + * New upstream release. + * Major soversion changed to 10. + * control: Changed build dependencies of libtasn1-dev. + * libgnutls10.shlibs: Added libgnutls-openssl to the list. + + -- Ivo Timmermans Mon, 29 Dec 2003 23:23:08 +0100 + +gnutls8 (0.9.99-1) experimental; urgency=low + + * New upstream release. + * Included upstream GPG signature in .orig.tar.gz. + + -- Ivo Timmermans Wed, 3 Dec 2003 22:33:52 +0100 + +gnutls8 (0.9.98-1) experimental; urgency=low + + * New upstream release. + * debian/control: libgnutls8-dev depends on libopencdk8-dev. + * debian/libgnutls-doc.examples: Install src/*.[ch]. + + -- Ivo Timmermans Sun, 23 Nov 2003 15:44:38 +0100 + +gnutls8 (0.9.95-1) experimental; urgency=low + + * New upstream version. + + -- Ivo Timmermans Fri, 7 Nov 2003 19:50:22 +0100 + +gnutls8 (0.9.94-1) experimental; urgency=low + + * New upstream version; package based on gnutls7 0.8.12-2. + * debian/control: + * Build-depend on libgcrypt7-dev (>= 1.1.44-0). + * debian/rules: Run auto* after the patches have been applied. + + -- Ivo Timmermans Fri, 31 Oct 2003 18:47:09 +0100 + --- gnutls13-2.0.4.orig/debian/gnutls-bin.manpages +++ gnutls13-2.0.4/debian/gnutls-bin.manpages @@ -0,0 +1 @@ +debian/tmp/usr/share/man/*/*.1 --- gnutls13-2.0.4.orig/debian/gnutls-doc.links +++ gnutls13-2.0.4/debian/gnutls-doc.links @@ -0,0 +1 @@ +/usr/share/doc/gnutls-doc/api-reference /usr/share/gtk-doc/html/gnutls --- gnutls13-2.0.4.orig/debian/gnutls-doc.info +++ gnutls13-2.0.4/debian/gnutls-doc.info @@ -0,0 +1 @@ +debian/tmp/usr/share/info/gnutls.info* --- gnutls13-2.0.4.orig/debian/copyright +++ gnutls13-2.0.4/debian/copyright @@ -0,0 +1,507 @@ +This package was debianized by Ivo Timmermans on +Fri, 3 Aug 2001 10:00:42 +0200. +It was later taken over by Matthias Urlichs and is now +maintained by Andreas Metzler Eric Dorland +, James Westby + + +It was downloaded from ftp://gnutls.hellug.gr/pub/gnutls + +Upstream Authors: + Nikos Mavroyanopoulos + Fabio Fiorina + Simon Josefsson + Timo Schulz + Andrew McDonald + +License: GNU Lesser General Public License (LGPL) version 2.1, +except some parts. See the file README, or the excerpt below for details. + +Copyright: +-------------------- +/* + * Copyright (C) 2001, 2002, 2003, 2004, 2005, 2006 Free Software Foundation +[...] +* This file is part of GNUTLS. + * + * The GNUTLS library is free software; you can redistribute it and/or + * modify it under the terms of the GNU Lesser General Public License + * as published by the Free Software Foundation; either version 2.1 of + * the License, or (at your option) any later version. + * + * This library is distributed in the hope that it will be useful, but + * WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + * Lesser General Public License for more details. + * + * You should have received a copy of the GNU Lesser General Public + * License along with this library; if not, write to the Free Software + * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, + * USA + * + */ +-------------------- +-------------------- +/* + * Copyright (C) 2005, 2006 Free Software Foundation +[...] + * This file is part of GNUTLS-EXTRA. + * + * GNUTLS-EXTRA is free software; you can redistribute it and/or + * modify it under the terms of the GNU General Public License as + * published by the Free Software Foundation; either version 2 of the + * License, or (at your option) any later version. + * + * GNUTLS-EXTRA is distributed in the hope that it will be useful, but + * WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + * General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with GNUTLS-EXTRA; if not, write to the Free Software + * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA + * 02110-1301, USA. + * + */ +-------------------- + +On Debian GNU/Linux systems, the complete text of the GNU Lesser +General Public License can be found in +`/usr/share/common-licenses/LGPL'; the GNU General Public License can +be found in `/usr/share/common-licenses/GPL'. + + +The documentation is distributed under the terms of the GNU Free +Documentation License (FDL): +-------------------- +Copyright (C) 2001, 2002, 2003, 2004, 2005 Free Software Foundation, + + Permission is granted to copy, distribute and/or modify this + document under the terms of the GNU Free Documentation License, + Version 1.1 or any later version published by the Free Software + Foundation; with no Invariant Sections, no Front-Cover Texts and + no Back-Cover Texts. A copy of the license is included in the + chapter entitled "GNU Free Documentation License". +-------------------- + +The following copy of the FDL was generated by using texi2html on +doc/gnutls.texi followed by "w3m -dump fdl.html" and stripping its +output to only contain the license without superfluous headers: + +--FDL copy starts--- +GNU Free Documentation License + + Version 1.2, November 2002 + + Copyright © 2000,2001,2002 Free Software Foundation, Inc. + 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA + + Everyone is permitted to copy and distribute verbatim copies + of this license document, but changing it is not allowed. + + + 1. PREAMBLE + + The purpose of this License is to make a manual, textbook, or other + functional and useful document free in the sense of freedom: to assure + everyone the effective freedom to copy and redistribute it, with or without + modifying it, either commercially or noncommercially. Secondarily, this + License preserves for the author and publisher a way to get credit for + their work, while not being considered responsible for modifications made + by others. + + This License is a kind of "copyleft", which means that derivative works of + the document must themselves be free in the same sense. It complements the + GNU General Public License, which is a copyleft license designed for free + software. + + We have designed this License in order to use it for manuals for free + software, because free software needs free documentation: a free program + should come with manuals providing the same freedoms that the software + does. But this License is not limited to software manuals; it can be used + for any textual work, regardless of subject matter or whether it is + published as a printed book. We recommend this License principally for + works whose purpose is instruction or reference. + + 2. APPLICABILITY AND DEFINITIONS + + This License applies to any manual or other work, in any medium, that + contains a notice placed by the copyright holder saying it can be + distributed under the terms of this License. Such a notice grants a + world-wide, royalty-free license, unlimited in duration, to use that work + under the conditions stated herein. The "Document", below, refers to any + such manual or work. Any member of the public is a licensee, and is + addressed as "you". You accept the license if you copy, modify or + distribute the work in a way requiring permission under copyright law. + + A "Modified Version" of the Document means any work containing the Document + or a portion of it, either copied verbatim, or with modifications and/or + translated into another language. + + A "Secondary Section" is a named appendix or a front-matter section of the + Document that deals exclusively with the relationship of the publishers or + authors of the Document to the Document's overall subject (or to related + matters) and contains nothing that could fall directly within that overall + subject. (Thus, if the Document is in part a textbook of mathematics, a + Secondary Section may not explain any mathematics.) The relationship could + be a matter of historical connection with the subject or with related + matters, or of legal, commercial, philosophical, ethical or political + position regarding them. + + The "Invariant Sections" are certain Secondary Sections whose titles are + designated, as being those of Invariant Sections, in the notice that says + that the Document is released under this License. If a section does not fit + the above definition of Secondary then it is not allowed to be designated + as Invariant. The Document may contain zero Invariant Sections. If the + Document does not identify any Invariant Sections then there are none. + + The "Cover Texts" are certain short passages of text that are listed, as + Front-Cover Texts or Back-Cover Texts, in the notice that says that the + Document is released under this License. A Front-Cover Text may be at most + 5 words, and a Back-Cover Text may be at most 25 words. + + A "Transparent" copy of the Document means a machine-readable copy, + represented in a format whose specification is available to the general + public, that is suitable for revising the document straightforwardly with + generic text editors or (for images composed of pixels) generic paint + programs or (for drawings) some widely available drawing editor, and that + is suitable for input to text formatters or for automatic translation to a + variety of formats suitable for input to text formatters. A copy made in an + otherwise Transparent file format whose markup, or absence of markup, has + been arranged to thwart or discourage subsequent modification by readers is + not Transparent. An image format is not Transparent if used for any + substantial amount of text. A copy that is not "Transparent" is called + "Opaque". + + Examples of suitable formats for Transparent copies include plain ASCII + without markup, Texinfo input format, LaTeX input format, SGML or XML using + a publicly available DTD, and standard-conforming simple HTML, PostScript + or PDF designed for human modification. Examples of transparent image + formats include PNG, XCF and JPG. Opaque formats include proprietary + formats that can be read and edited only by proprietary word processors, + SGML or XML for which the DTD and/or processing tools are not generally + available, and the machine-generated HTML, PostScript or PDF produced by + some word processors for output purposes only. + + The "Title Page" means, for a printed book, the title page itself, plus + such following pages as are needed to hold, legibly, the material this + License requires to appear in the title page. For works in formats which do + not have any title page as such, "Title Page" means the text near the most + prominent appearance of the work's title, preceding the beginning of the + body of the text. + + A section "Entitled XYZ" means a named subunit of the Document whose title + either is precisely XYZ or contains XYZ in parentheses following text that + translates XYZ in another language. (Here XYZ stands for a specific section + name mentioned below, such as "Acknowledgements", "Dedications", + "Endorsements", or "History".) To "Preserve the Title" of such a section + when you modify the Document means that it remains a section "Entitled XYZ" + according to this definition. + + The Document may include Warranty Disclaimers next to the notice which + states that this License applies to the Document. These Warranty + Disclaimers are considered to be included by reference in this License, but + only as regards disclaiming warranties: any other implication that these + Warranty Disclaimers may have is void and has no effect on the meaning of + this License. + + 3. VERBATIM COPYING + + You may copy and distribute the Document in any medium, either commercially + or noncommercially, provided that this License, the copyright notices, and + the license notice saying this License applies to the Document are + reproduced in all copies, and that you add no other conditions whatsoever + to those of this License. You may not use technical measures to obstruct or + control the reading or further copying of the copies you make or + distribute. However, you may accept compensation in exchange for copies. If + you distribute a large enough number of copies you must also follow the + conditions in section 3. + + You may also lend copies, under the same conditions stated above, and you + may publicly display copies. + + 4. COPYING IN QUANTITY + + If you publish printed copies (or copies in media that commonly have + printed covers) of the Document, numbering more than 100, and the + Document's license notice requires Cover Texts, you must enclose the copies + in covers that carry, clearly and legibly, all these Cover Texts: + Front-Cover Texts on the front cover, and Back-Cover Texts on the back + cover. Both covers must also clearly and legibly identify you as the + publisher of these copies. The front cover must present the full title with + all words of the title equally prominent and visible. You may add other + material on the covers in addition. Copying with changes limited to the + covers, as long as they preserve the title of the Document and satisfy + these conditions, can be treated as verbatim copying in other respects. + + If the required texts for either cover are too voluminous to fit legibly, + you should put the first ones listed (as many as fit reasonably) on the + actual cover, and continue the rest onto adjacent pages. + + If you publish or distribute Opaque copies of the Document numbering more + than 100, you must either include a machine-readable Transparent copy along + with each Opaque copy, or state in or with each Opaque copy a + computer-network location from which the general network-using public has + access to download using public-standard network protocols a complete + Transparent copy of the Document, free of added material. If you use the + latter option, you must take reasonably prudent steps, when you begin + distribution of Opaque copies in quantity, to ensure that this Transparent + copy will remain thus accessible at the stated location until at least one + year after the last time you distribute an Opaque copy (directly or through + your agents or retailers) of that edition to the public. + + It is requested, but not required, that you contact the authors of the + Document well before redistributing any large number of copies, to give + them a chance to provide you with an updated version of the Document. + + 5. MODIFICATIONS + + You may copy and distribute a Modified Version of the Document under the + conditions of sections 2 and 3 above, provided that you release the + Modified Version under precisely this License, with the Modified Version + filling the role of the Document, thus licensing distribution and + modification of the Modified Version to whoever possesses a copy of it. In + addition, you must do these things in the Modified Version: + + 1. Use in the Title Page (and on the covers, if any) a title distinct from + that of the Document, and from those of previous versions (which + should, if there were any, be listed in the History section of the + Document). You may use the same title as a previous version if the + original publisher of that version gives permission. + + 2. List on the Title Page, as authors, one or more persons or entities + responsible for authorship of the modifications in the Modified + Version, together with at least five of the principal authors of the + Document (all of its principal authors, if it has fewer than five), + unless they release you from this requirement. + + 3. State on the Title page the name of the publisher of the Modified + Version, as the publisher. + + 4. Preserve all the copyright notices of the Document. + + 5. Add an appropriate copyright notice for your modifications adjacent to + the other copyright notices. + + 6. Include, immediately after the copyright notices, a license notice + giving the public permission to use the Modified Version under the + terms of this License, in the form shown in the Addendum below. + + 7. Preserve in that license notice the full lists of Invariant Sections + and required Cover Texts given in the Document's license notice. + + 8. Include an unaltered copy of this License. + + 9. Preserve the section Entitled "History", Preserve its Title, and add to + it an item stating at least the title, year, new authors, and publisher + of the Modified Version as given on the Title Page. If there is no + section Entitled "History" in the Document, create one stating the + title, year, authors, and publisher of the Document as given on its + Title Page, then add an item describing the Modified Version as stated + in the previous sentence. + + 10. Preserve the network location, if any, given in the Document for public + access to a Transparent copy of the Document, and likewise the network + locations given in the Document for previous versions it was based on. + These may be placed in the "History" section. You may omit a network + location for a work that was published at least four years before the + Document itself, or if the original publisher of the version it refers + to gives permission. + + 11. For any section Entitled "Acknowledgements" or "Dedications", Preserve + the Title of the section, and preserve in the section all the substance + and tone of each of the contributor acknowledgements and/or dedications + given therein. + + 12. Preserve all the Invariant Sections of the Document, unaltered in their + text and in their titles. Section numbers or the equivalent are not + considered part of the section titles. + + 13. Delete any section Entitled "Endorsements". Such a section may not be + included in the Modified Version. + + 14. Do not retitle any existing section to be Entitled "Endorsements" or to + conflict in title with any Invariant Section. + + 15. Preserve any Warranty Disclaimers. + + If the Modified Version includes new front-matter sections or appendices + that qualify as Secondary Sections and contain no material copied from the + Document, you may at your option designate some or all of these sections as + invariant. To do this, add their titles to the list of Invariant Sections + in the Modified Version's license notice. These titles must be distinct + from any other section titles. + + You may add a section Entitled "Endorsements", provided it contains nothing + but endorsements of your Modified Version by various parties--for example, + statements of peer review or that the text has been approved by an + organization as the authoritative definition of a standard. + + You may add a passage of up to five words as a Front-Cover Text, and a + passage of up to 25 words as a Back-Cover Text, to the end of the list of + Cover Texts in the Modified Version. Only one passage of Front-Cover Text + and one of Back-Cover Text may be added by (or through arrangements made + by) any one entity. If the Document already includes a cover text for the + same cover, previously added by you or by arrangement made by the same + entity you are acting on behalf of, you may not add another; but you may + replace the old one, on explicit permission from the previous publisher + that added the old one. + + The author(s) and publisher(s) of the Document do not by this License give + permission to use their names for publicity for or to assert or imply + endorsement of any Modified Version. + + 6. COMBINING DOCUMENTS + + You may combine the Document with other documents released under this + License, under the terms defined in section 4 above for modified versions, + provided that you include in the combination all of the Invariant Sections + of all of the original documents, unmodified, and list them all as + Invariant Sections of your combined work in its license notice, and that + you preserve all their Warranty Disclaimers. + + The combined work need only contain one copy of this License, and multiple + identical Invariant Sections may be replaced with a single copy. If there + are multiple Invariant Sections with the same name but different contents, + make the title of each such section unique by adding at the end of it, in + parentheses, the name of the original author or publisher of that section + if known, or else a unique number. Make the same adjustment to the section + titles in the list of Invariant Sections in the license notice of the + combined work. + + In the combination, you must combine any sections Entitled "History" in the + various original documents, forming one section Entitled "History"; + likewise combine any sections Entitled "Acknowledgements", and any sections + Entitled "Dedications". You must delete all sections Entitled + "Endorsements." + + 7. COLLECTIONS OF DOCUMENTS + + You may make a collection consisting of the Document and other documents + released under this License, and replace the individual copies of this + License in the various documents with a single copy that is included in the + collection, provided that you follow the rules of this License for verbatim + copying of each of the documents in all other respects. + + You may extract a single document from such a collection, and distribute it + individually under this License, provided you insert a copy of this License + into the extracted document, and follow this License in all other respects + regarding verbatim copying of that document. + + 8. AGGREGATION WITH INDEPENDENT WORKS + + A compilation of the Document or its derivatives with other separate and + independent documents or works, in or on a volume of a storage or + distribution medium, is called an "aggregate" if the copyright resulting + from the compilation is not used to limit the legal rights of the + compilation's users beyond what the individual works permit. When the + Document is included in an aggregate, this License does not apply to the + other works in the aggregate which are not themselves derivative works of + the Document. + + If the Cover Text requirement of section 3 is applicable to these copies of + the Document, then if the Document is less than one half of the entire + aggregate, the Document's Cover Texts may be placed on covers that bracket + the Document within the aggregate, or the electronic equivalent of covers + if the Document is in electronic form. Otherwise they must appear on + printed covers that bracket the whole aggregate. + + 9. TRANSLATION + + Translation is considered a kind of modification, so you may distribute + translations of the Document under the terms of section 4. Replacing + Invariant Sections with translations requires special permission from their + copyright holders, but you may include translations of some or all + Invariant Sections in addition to the original versions of these Invariant + Sections. You may include a translation of this License, and all the + license notices in the Document, and any Warranty Disclaimers, provided + that you also include the original English version of this License and the + original versions of those notices and disclaimers. In case of a + disagreement between the translation and the original version of this + License or a notice or disclaimer, the original version will prevail. + + If a section in the Document is Entitled "Acknowledgements", "Dedications", + or "History", the requirement (section 4) to Preserve its Title (section 1) + will typically require changing the actual title. + +10. TERMINATION + + You may not copy, modify, sublicense, or distribute the Document except as + expressly provided for under this License. Any other attempt to copy, + modify, sublicense or distribute the Document is void, and will + automatically terminate your rights under this License. However, parties + who have received copies, or rights, from you under this License will not + have their licenses terminated so long as such parties remain in full + compliance. + +11. FUTURE REVISIONS OF THIS LICENSE + + The Free Software Foundation may publish new, revised versions of the GNU + Free Documentation License from time to time. Such new versions will be + similar in spirit to the present version, but may differ in detail to + address new problems or concerns. See http://www.gnu.org/copyleft/. + + Each version of the License is given a distinguishing version number. If + the Document specifies that a particular numbered version of this License + "or any later version" applies to it, you have the option of following the + terms and conditions either of that specified version or of any later + version that has been published (not as a draft) by the Free Software + Foundation. If the Document does not specify a version number of this + License, you may choose any version ever published (not as a draft) by the + Free Software Foundation. + +ADDENDUM: How to use this License for your documents + +To use this License in a document you have written, include a copy of the +License in the document and put the following copyright and license notices +just after the title page: + + Copyright (C) year your name. + Permission is granted to copy, distribute and/or modify this document + under the terms of the GNU Free Documentation License, Version 1.2 + or any later version published by the Free Software Foundation; + with no Invariant Sections, no Front-Cover Texts, and no Back-Cover + Texts. A copy of the license is included in the section entitled ``GNU + Free Documentation License''. + + +If you have Invariant Sections, Front-Cover Texts and Back-Cover Texts, replace +the "with...Texts." line with this: + + with the Invariant Sections being list their titles, with + the Front-Cover Texts being list, and with the Back-Cover Texts + being list. + + +If you have Invariant Sections without Cover Texts, or some other combination +of the three, merge those two alternatives to suit the situation. + +If your document contains nontrivial examples of program code, we recommend +releasing these examples in parallel under your choice of free software +license, such as the GNU General Public License, to permit their use in free +software. +--FDL copy ends----- + + + +Excerpt from upstream's README: + +LICENSE ISSUES: + +Since the 0.4.2 version the gnutls library is covered under the GNU +Lesser GPL. Previously released versions were licensed under the GNU GPL. + +We changed the license for most of GNUTLS because other free libraries +already exist that do the same jobs and have lax licenses. We want +GNUTLS to be usable in all the same places as those other libraries. +We kept some parts of GNUTLS under the GPL because they are unique, +and with the GPL they provide free software projects (which deserve +our help) an advantage over non-free projects (which do not deserve +our help, since they refuse to share with us). For more explanation, +see http://www.gnu.org/philosophy/why-not-lgpl.html. + +The GNU Lesser GPL license applies to the main gnutls library, while the +gnutls-extra library is under the GPL. The gnutls-extra library contains +the "SRP authentication" source code, and code for the "Openpgp key" +support. The gnutls library is located in the lib/ directory, while the +gnutls-extra library is at libextra/. --- gnutls13-2.0.4.orig/debian/gnutls-bin.debhelper.log +++ gnutls13-2.0.4/debian/gnutls-bin.debhelper.log @@ -0,0 +1 @@ +dh_testdir --- gnutls13-2.0.4.orig/debian/libgnutls-config.1 +++ gnutls13-2.0.4/debian/libgnutls-config.1 @@ -0,0 +1,50 @@ +.TH GNUTLS 1 "16 December 1998" Version 0.2.4 +.SH NAME +libgnutls-config, libgnutls-extra-config - script to get information about the installed version of GNU TLS +.SH SYNOPSIS +.B libgnutls-config [\-\-prefix\fI[=DIR]\fP] [\-\-exec\-prefix\fI[=DIR]\fP] [\-\-version] [\-\-libs] [\-\-cflags] [LIBRARIES] + +.B libgnutls-extra-config [\-\-prefix\fI[=DIR]\fP] [\-\-exec\-prefix\fI[=DIR]\fP] [\-\-version] [\-\-libs] [\-\-cflags] [LIBRARIES] +.SH DESCRIPTION +.PP +\fIlibgnutls-config\fP is a tool that is used to configure to determine +the compiler and linker flags that should be used to compile +and link programs that use \fIGNU TLS\fP. It is also used internally +to the .m4 macros for GNU autoconf that are included with \fIGNU TLS\fP. +. +.SH OPTIONS +.l +\fIlibgnutls-config\fP and \fIlibgnutls-extra-config\fP accept the following options: +.TP 8 +.B \-\-version +Print the currently installed version of \fIGNU TLS\fP on the standard output. +.TP 8 +.B \-\-libs +Print the linker flags that are necessary to link a \fIGNU TLS\fP program. +.TP 8 +.B \-\-cflags +Print the compiler flags that are necessary to compile a \fIGNU TLS\fP program. +.TP 8 +.B \-\-prefix=PREFIX +If specified, use PREFIX instead of the installation prefix that \fIGNU TLS\fP +was built with when computing the output for the \-\-cflags and +\-\-libs options. This option is also used for the exec prefix +if \-\-exec\-prefix was not specified. This option must be specified +before any \-\-libs or \-\-cflags options. +.TP 8 +.B \-\-exec\-prefix=PREFIX +If specified, use PREFIX instead of the installation exec prefix that +\fIGNU TLS\fP was built with when computing the output for the \-\-cflags +and \-\-libs options. This option must be specified before any +\-\-libs or \-\-cflags options. +.SH SEE ALSO +.BR libgcrypt-config (1) +.SH COPYRIGHT +Copyright \(co 1998 Owen Taylor, modified for gnutls by Ivo +Timmermans, 2001. + +Permission to use, copy, modify, and distribute this software and its +documentation for any purpose and without fee is hereby granted, +provided that the above copyright notice appear in all copies and that +both that copyright notice and this permission notice appear in +supporting documentation. --- gnutls13-2.0.4.orig/debian/libgnutls-dev.manpages +++ gnutls13-2.0.4/debian/libgnutls-dev.manpages @@ -0,0 +1,2 @@ +debian/libgnutls-config.1 +debian/libgnutls-extra-config.1 --- gnutls13-2.0.4.orig/debian/libgnutls13.install +++ gnutls13-2.0.4/debian/libgnutls13.install @@ -0,0 +1,3 @@ +debian/tmp/usr/lib/libgnutls.so.* usr/lib +debian/tmp/usr/lib/libgnutls-*.so.* usr/lib +debian/tmp/usr/share/locale/* /usr/share/locale --- gnutls13-2.0.4.orig/debian/gnutls-doc.manpages +++ gnutls13-2.0.4/debian/gnutls-doc.manpages @@ -0,0 +1 @@ +debian/tmp/usr/share/man/man3/* --- gnutls13-2.0.4.orig/debian/libgnutls-extra-config.1 +++ gnutls13-2.0.4/debian/libgnutls-extra-config.1 @@ -0,0 +1 @@ +.so man1/libgnutls-config.1 --- gnutls13-2.0.4.orig/debian/gnutls-doc.debhelper.log +++ gnutls13-2.0.4/debian/gnutls-doc.debhelper.log @@ -0,0 +1 @@ +dh_testdir --- gnutls13-2.0.4.orig/debian/gnutls-doc.doc-base.apireference +++ gnutls13-2.0.4/debian/gnutls-doc.doc-base.apireference @@ -0,0 +1,9 @@ +Document: gnutls-api +Title: GNU TLS API Reference Manual +Author: Simon Josefsson +Abstract: GNU TLS API Reference Manual +Section: Apps/Net + +Format: HTML +Index: /usr/share/doc/gnutls-doc/api-reference/index.html +Files: /usr/share/doc/gnutls-doc/api-reference/* --- gnutls13-2.0.4.orig/debian/libgnutls-dev.debhelper.log +++ gnutls13-2.0.4/debian/libgnutls-dev.debhelper.log @@ -0,0 +1 @@ +dh_testdir --- gnutls13-2.0.4.orig/debian/libgnutls-dev.README.Debian +++ gnutls13-2.0.4/debian/libgnutls-dev.README.Debian @@ -0,0 +1,10 @@ +libgnutls-config is patched to only list stuff needed for dynamic +linking against libgnutls (i.e. "-lgnutls") on Debian. Static linking +requires using either + +a) libtool +b) "pkg-config --libs --static gnutls" instead of libgnutls-config --libs. + +This also applies to libgnutls-extra-config. + +Andreas Metzler --- gnutls13-2.0.4.orig/debian/compat +++ gnutls13-2.0.4/debian/compat @@ -0,0 +1 @@ +5 --- gnutls13-2.0.4.orig/debian/watch +++ gnutls13-2.0.4/debian/watch @@ -0,0 +1,2 @@ +version=3 +http://ftp.gnupg.org/gcrypt/alpha/gnutls/devel/gnutls-(.*)\.tar\.bz2 debian uupdate --- gnutls13-2.0.4.orig/debian/patches/12_lessdeps.diff +++ gnutls13-2.0.4/debian/patches/12_lessdeps.diff @@ -0,0 +1,11 @@ +--- gnutls13-1.4.0.orig/libextra/libgnutls-extra-config.in ++++ gnutls13-1.4.0/libextra/libgnutls-extra-config.in +@@ -4,7 +4,7 @@ + exec_prefix=@exec_prefix@ + exec_prefix_set=no + +-gnutls_libs="@LIBGNUTLS_EXTRA_LIBS@" ++gnutls_libs=-lgnutls-extra + gnutls_cflags="@LIBGNUTLS_EXTRA_CFLAGS@" + gnutls_la_file="@libdir@/libgnutls-extra.la" + --- gnutls13-2.0.4.orig/debian/patches/90_GNUTLS-SA-2008-1.diff +++ gnutls13-2.0.4/debian/patches/90_GNUTLS-SA-2008-1.diff @@ -0,0 +1,90 @@ +diff -Nur -x '*.orig' -x '*~' gnutls13-2.0.4/lib/ext_server_name.c gnutls13-2.0.4.new/lib/ext_server_name.c +--- gnutls13-2.0.4/lib/ext_server_name.c 2007-11-15 07:24:56.000000000 -0800 ++++ gnutls13-2.0.4.new/lib/ext_server_name.c 2008-05-20 18:20:07.000000000 -0700 +@@ -74,10 +74,27 @@ + len = _gnutls_read_uint16 (p); + p += 2; + +- DECR_LENGTH_RET (data_size, len, 0); +- server_names++; ++ if (len > 0) ++ { ++ DECR_LENGTH_RET (data_size, len, 0); ++ server_names++; ++ p += len; ++ } ++ else ++ _gnutls_handshake_log ++ ("HSK[%x]: Received zero size server name (under attack?)\n", ++ session); + +- p += len; ++ } ++ ++ /* we cannot accept more server names. ++ */ ++ if (server_names > MAX_SERVER_NAME_EXTENSIONS) ++ { ++ _gnutls_handshake_log ++ ("HSK[%x]: Too many server names received (under attack?)\n", ++ session); ++ server_names = MAX_SERVER_NAME_EXTENSIONS; + } + + session->security_parameters.extensions.server_names_size = +@@ -85,10 +102,6 @@ + if (server_names == 0) + return 0; /* no names found */ + +- /* we cannot accept more server names. +- */ +- if (server_names > MAX_SERVER_NAME_EXTENSIONS) +- server_names = MAX_SERVER_NAME_EXTENSIONS; + + p = data + 2; + for (i = 0; i < server_names; i++) +diff -Nur -x '*.orig' -x '*~' gnutls13-2.0.4/lib/gnutls_cipher.c gnutls13-2.0.4.new/lib/gnutls_cipher.c +--- gnutls13-2.0.4/lib/gnutls_cipher.c 2007-11-15 07:24:56.000000000 -0800 ++++ gnutls13-2.0.4.new/lib/gnutls_cipher.c 2008-05-20 18:20:07.000000000 -0700 +@@ -498,17 +498,20 @@ + + pad = ciphertext.data[ciphertext.size - 1] + 1; /* pad */ + +- length = ciphertext.size - hash_size - pad; +- +- if (pad > ciphertext.size - hash_size) ++ if ((int)pad > (int)ciphertext.size - hash_size) + { + gnutls_assert (); ++ _gnutls_record_log ++ ("REC[%x]: Short record length %d > %d - %d (under attack?)\n", ++ session, pad, ciphertext.size, hash_size); + /* We do not fail here. We check below for the + * the pad_failed. If zero means success. + */ + pad_failed = GNUTLS_E_DECRYPTION_FAILED; + } + ++ length = ciphertext.size - hash_size - pad; ++ + /* Check the pading bytes (TLS 1.x) + */ + if (ver >= GNUTLS_TLS1 && pad_failed == 0) +diff -Nur -x '*.orig' -x '*~' gnutls13-2.0.4/lib/gnutls_handshake.c gnutls13-2.0.4.new/lib/gnutls_handshake.c +--- gnutls13-2.0.4/lib/gnutls_handshake.c 2007-11-15 07:24:56.000000000 -0800 ++++ gnutls13-2.0.4.new/lib/gnutls_handshake.c 2008-05-20 18:20:07.000000000 -0700 +@@ -942,6 +942,14 @@ + + *recv_type = session->internals.handshake_header_buffer.recv_type; + ++ if (*recv_type != type) ++ { ++ gnutls_assert (); ++ _gnutls_handshake_log ++ ("HSK[%x]: Handshake type mismatch (under attack?)\n", session); ++ return GNUTLS_E_UNEXPECTED_HANDSHAKE_PACKET; ++ } ++ + return session->internals.handshake_header_buffer.packet_length; + } + --- gnutls13-2.0.4.orig/debian/patches/14_version_gettextcat.diff +++ gnutls13-2.0.4/debian/patches/14_version_gettextcat.diff @@ -0,0 +1,15 @@ +Ship the gettext translations as /usr/share/locales/*/gnutls13.mo instead of +/usr/share/locales/*/gnutls.mo to not break co-installability of +multiple libgnutls packages. + +--- gnutls13-1.6.1/po/Makevars.orig 2006-03-03 16:16:16.000000000 +0000 ++++ gnutls13-1.6.1/po/Makevars 2007-02-11 10:22:01.000000000 +0000 +@@ -1,7 +1,7 @@ + # Makefile variables for PO directory in any package using GNU gettext. + + # Usually the message domain is the same as the package name. +-DOMAIN = $(PACKAGE) ++DOMAIN = $(PACKAGE)13 + + # These two variables depend on the location of this directory. + subdir = po --- gnutls13-2.0.4.orig/debian/patches/13_lessdeps_gnutls-config.diff +++ gnutls13-2.0.4/debian/patches/13_lessdeps_gnutls-config.diff @@ -0,0 +1,13 @@ +diff -Nur gnutls13-1.4.0.foo/lib/libgnutls-config.in gnutls13-1.4.0/lib/libgnutls-config.in +--- gnutls13-1.4.0.foo/lib/libgnutls-config.in 2005-07-02 21:41:49.000000000 +0000 ++++ gnutls13-1.4.0/lib/libgnutls-config.in 2006-07-02 10:04:39.382609128 +0000 +@@ -4,7 +4,8 @@ + exec_prefix=@exec_prefix@ + exec_prefix_set=no + +-gnutls_libs="@LIBGNUTLS_LIBS@" ++#gnutls_libs="@LIBGNUTLS_LIBS@" ++gnutls_libs="-lgnutls" + gnutls_cflags="@LIBGNUTLS_CFLAGS@" + gnutls_la_file="@libdir@/libgnutls.la" + --- gnutls13-2.0.4.orig/debian/patches/21_nulltermfix_465197_part2.diff +++ gnutls13-2.0.4/debian/patches/21_nulltermfix_465197_part2.diff @@ -0,0 +1,26 @@ +http://bugs.debian.org/465197 + +From: Nikos +Date: Sun, 17 Feb 2008 18:37:24 +0000 (+0200) +Subject: corrected string handling in parse_general_name. Thanks to Andreas Metzler for pointi ... +X-Git-Url: http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff_plain;h=38613e1dd06563e40c1996d01df88d3f2cbd57a3 + +corrected string handling in parse_general_name. Thanks to Andreas Metzler for pointing out. +--- + +diff --git a/lib/x509/x509.c b/lib/x509/x509.c +index a5857b0..93e81bb 100644 +--- a/lib/x509/x509.c ++++ b/lib/x509/x509.c +@@ -1043,8 +1043,10 @@ parse_general_name (ASN1_TYPE src, const char *src_name, + result = asn1_read_value (src, nptr, name, &len); + *name_size = len; + +- if (result == ASN1_MEM_ERROR) ++ if (result == ASN1_MEM_ERROR) { ++ if (is_type_printable(type)) (*name_size)++; + return GNUTLS_E_SHORT_MEMORY_BUFFER; ++ } + + if (result != ASN1_SUCCESS) + { --- gnutls13-2.0.4.orig/debian/patches/20_nulltermfix_465197.diff +++ gnutls13-2.0.4/debian/patches/20_nulltermfix_465197.diff @@ -0,0 +1,69 @@ +http://bugs.debian.org/465197 + +From: Nikos +Date: Fri, 15 Feb 2008 21:00:25 +0000 (+0200) +Subject: null terminate only printable strings. +X-Git-Url: http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff_plain;h=4c50a164218ce1bef657961e5fb40c19cff56fc3 + +null terminate only printable strings. +--- + +diff --git a/lib/x509/x509.c b/lib/x509/x509.c +index f1dd604..a5857b0 100644 +--- a/lib/x509/x509.c ++++ b/lib/x509/x509.c +@@ -888,6 +888,15 @@ gnutls_x509_crt_get_pk_algorithm (gnutls_x509_crt_t cert, unsigned int *bits) + + } + ++inline static int is_type_printable(int type) ++{ ++ if (type == GNUTLS_SAN_DNSNAME || type == GNUTLS_SAN_RFC822NAME || ++ type == GNUTLS_SAN_URI) ++ return 1; ++ else ++ return 0; ++} ++ + #define XMPP_OID "1.3.6.1.5.5.7.8.5" + + /* returns the type and the name on success. +@@ -1021,6 +1030,8 @@ parse_general_name (ASN1_TYPE src, const char *src_name, + return GNUTLS_E_REQUESTED_DATA_NOT_AVAILABLE; + else + { ++ size_t orig_name_size = *name_size; ++ + _gnutls_str_cat (nptr, sizeof (nptr), "."); + _gnutls_str_cat (nptr, sizeof (nptr), choice_type); + +@@ -1029,13 +1040,28 @@ parse_general_name (ASN1_TYPE src, const char *src_name, + *name_size = len; + + if (result == ASN1_MEM_ERROR) +- return GNUTLS_E_SHORT_MEMORY_BUFFER; ++ return GNUTLS_E_SHORT_MEMORY_BUFFER; + + if (result != ASN1_SUCCESS) + { + gnutls_assert (); + return _gnutls_asn2err (result); + } ++ ++ if (is_type_printable(type)) ++ { ++ ++ if (len+1 > orig_name_size) ++ { ++ gnutls_assert(); ++ (*name_size)++; ++ return GNUTLS_E_SHORT_MEMORY_BUFFER; ++ } ++ ++ /* null terminate it */ ++ ((char*)name)[*name_size] = 0; ++ } ++ + } + + return type; --- gnutls13-2.0.4.orig/po/gnutls13.pot +++ gnutls13-2.0.4/po/gnutls13.pot @@ -0,0 +1,730 @@ +# SOME DESCRIPTIVE TITLE. +# Copyright (C) YEAR Free Software Foundation, Inc. +# This file is distributed under the same license as the PACKAGE package. +# FIRST AUTHOR , YEAR. +# +#, fuzzy +msgid "" +msgstr "" +"Project-Id-Version: PACKAGE VERSION\n" +"Report-Msgid-Bugs-To: bug-gnutls@gnu.org\n" +"POT-Creation-Date: 2008-02-22 07:55+0000\n" +"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" +"Last-Translator: FULL NAME \n" +"Language-Team: LANGUAGE \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=CHARSET\n" +"Content-Transfer-Encoding: 8bit\n" + +#: lib/gnutls_errors.c:53 +msgid "Success." +msgstr "" + +#: lib/gnutls_errors.c:54 +msgid "Could not negotiate a supported cipher suite." +msgstr "" + +#: lib/gnutls_errors.c:56 +msgid "The cipher type is unsupported." +msgstr "" + +#: lib/gnutls_errors.c:58 +msgid "The certificate and the given key do not match." +msgstr "" + +#: lib/gnutls_errors.c:60 +msgid "Could not negotiate a supported compression method." +msgstr "" + +#: lib/gnutls_errors.c:62 +msgid "An unknown public key algorithm was encountered." +msgstr "" + +#: lib/gnutls_errors.c:65 +msgid "An algorithm that is not enabled was negotiated." +msgstr "" + +#: lib/gnutls_errors.c:67 +msgid "A large TLS record packet was received." +msgstr "" + +#: lib/gnutls_errors.c:69 +msgid "A record packet with illegal version was received." +msgstr "" + +#: lib/gnutls_errors.c:71 +msgid "" +"The Diffie Hellman prime sent by the server is not acceptable (not long " +"enough)." +msgstr "" + +#: lib/gnutls_errors.c:73 +msgid "A TLS packet with unexpected length was received." +msgstr "" + +#: lib/gnutls_errors.c:75 +msgid "The specified session has been invalidated for some reason." +msgstr "" + +#: lib/gnutls_errors.c:78 +msgid "GnuTLS internal error." +msgstr "" + +#: lib/gnutls_errors.c:79 +msgid "An illegal TLS extension was received." +msgstr "" + +#: lib/gnutls_errors.c:81 +msgid "A TLS fatal alert has been received." +msgstr "" + +#: lib/gnutls_errors.c:83 +msgid "An unexpected TLS packet was received." +msgstr "" + +#: lib/gnutls_errors.c:85 +msgid "A TLS warning alert has been received." +msgstr "" + +#: lib/gnutls_errors.c:87 +msgid "An error was encountered at the TLS Finished packet calculation." +msgstr "" + +#: lib/gnutls_errors.c:89 +msgid "The peer did not send any certificate." +msgstr "" + +#: lib/gnutls_errors.c:92 +msgid "No temporary RSA parameters were found." +msgstr "" + +#: lib/gnutls_errors.c:94 +msgid "No temporary DH parameters were found." +msgstr "" + +#: lib/gnutls_errors.c:96 +msgid "An unexpected TLS handshake packet was received." +msgstr "" + +#: lib/gnutls_errors.c:98 +msgid "The scanning of a large integer has failed." +msgstr "" + +#: lib/gnutls_errors.c:100 +msgid "Could not export a large integer." +msgstr "" + +#: lib/gnutls_errors.c:102 +msgid "Decryption has failed." +msgstr "" + +#: lib/gnutls_errors.c:103 +msgid "Encryption has failed." +msgstr "" + +#: lib/gnutls_errors.c:104 +msgid "Public key decryption has failed." +msgstr "" + +#: lib/gnutls_errors.c:106 +msgid "Public key encryption has failed." +msgstr "" + +#: lib/gnutls_errors.c:108 +msgid "Public key signing has failed." +msgstr "" + +#: lib/gnutls_errors.c:110 +msgid "Public key signature verification has failed." +msgstr "" + +#: lib/gnutls_errors.c:112 +msgid "Decompression of the TLS record packet has failed." +msgstr "" + +#: lib/gnutls_errors.c:114 +msgid "Compression of the TLS record packet has failed." +msgstr "" + +#: lib/gnutls_errors.c:117 +msgid "Internal error in memory allocation." +msgstr "" + +#: lib/gnutls_errors.c:119 +msgid "An unimplemented or disabled feature has been requested." +msgstr "" + +#: lib/gnutls_errors.c:121 +msgid "Insufficient credentials for that request." +msgstr "" + +#: lib/gnutls_errors.c:123 +msgid "Error in password file." +msgstr "" + +#: lib/gnutls_errors.c:124 +msgid "Wrong padding in PKCS1 packet." +msgstr "" + +#: lib/gnutls_errors.c:126 +msgid "The requested session has expired." +msgstr "" + +#: lib/gnutls_errors.c:127 +msgid "Hashing has failed." +msgstr "" + +#: lib/gnutls_errors.c:128 +msgid "Base64 decoding error." +msgstr "" + +#: lib/gnutls_errors.c:130 +msgid "Base64 encoding error." +msgstr "" + +#: lib/gnutls_errors.c:132 +msgid "Parsing error in password file." +msgstr "" + +#: lib/gnutls_errors.c:134 +msgid "The requested data were not available." +msgstr "" + +#: lib/gnutls_errors.c:136 +msgid "Error in the pull function." +msgstr "" + +#: lib/gnutls_errors.c:137 +msgid "Error in the push function." +msgstr "" + +#: lib/gnutls_errors.c:138 +msgid "" +"The upper limit of record packet sequence numbers has been reached. Wow!" +msgstr "" + +#: lib/gnutls_errors.c:140 +msgid "Error in the certificate." +msgstr "" + +#: lib/gnutls_errors.c:142 +msgid "Unknown Subject Alternative name in X.509 certificate." +msgstr "" + +#: lib/gnutls_errors.c:145 +msgid "Unsupported critical extension in X.509 certificate." +msgstr "" + +#: lib/gnutls_errors.c:147 +msgid "Key usage violation in certificate has been detected." +msgstr "" + +#: lib/gnutls_errors.c:149 lib/gnutls_errors.c:150 +msgid "Function was interrupted." +msgstr "" + +#: lib/gnutls_errors.c:151 +msgid "Rehandshake was requested by the peer." +msgstr "" + +#: lib/gnutls_errors.c:153 +msgid "TLS Application data were received, while expecting handshake data." +msgstr "" + +#: lib/gnutls_errors.c:155 +msgid "Error in Database backend." +msgstr "" + +#: lib/gnutls_errors.c:156 +msgid "The certificate type is not supported." +msgstr "" + +#: lib/gnutls_errors.c:158 +msgid "The given memory buffer is too short to hold parameters." +msgstr "" + +#: lib/gnutls_errors.c:160 +msgid "The request is invalid." +msgstr "" + +#: lib/gnutls_errors.c:161 +msgid "An illegal parameter has been received." +msgstr "" + +#: lib/gnutls_errors.c:163 +msgid "Error while reading file." +msgstr "" + +#: lib/gnutls_errors.c:165 +msgid "ASN1 parser: Element was not found." +msgstr "" + +#: lib/gnutls_errors.c:167 +msgid "ASN1 parser: Identifier was not found" +msgstr "" + +#: lib/gnutls_errors.c:169 +msgid "ASN1 parser: Error in DER parsing." +msgstr "" + +#: lib/gnutls_errors.c:171 +msgid "ASN1 parser: Value was not found." +msgstr "" + +#: lib/gnutls_errors.c:173 +msgid "ASN1 parser: Generic parsing error." +msgstr "" + +#: lib/gnutls_errors.c:175 +msgid "ASN1 parser: Value is not valid." +msgstr "" + +#: lib/gnutls_errors.c:177 +msgid "ASN1 parser: Error in TAG." +msgstr "" + +#: lib/gnutls_errors.c:178 +msgid "ASN1 parser: error in implicit tag" +msgstr "" + +#: lib/gnutls_errors.c:180 +msgid "ASN1 parser: Error in type 'ANY'." +msgstr "" + +#: lib/gnutls_errors.c:182 +msgid "ASN1 parser: Syntax error." +msgstr "" + +#: lib/gnutls_errors.c:184 +msgid "ASN1 parser: Overflow in DER parsing." +msgstr "" + +#: lib/gnutls_errors.c:187 +msgid "Too many empty record packets have been received." +msgstr "" + +#: lib/gnutls_errors.c:189 +msgid "The initialization of GnuTLS-extra has failed." +msgstr "" + +#: lib/gnutls_errors.c:191 +msgid "" +"The GnuTLS library version does not match the GnuTLS-extra library version." +msgstr "" + +#: lib/gnutls_errors.c:193 +msgid "The gcrypt library version is too old." +msgstr "" + +#: lib/gnutls_errors.c:196 +msgid "The tasn1 library version is too old." +msgstr "" + +#: lib/gnutls_errors.c:198 +msgid "" +"The specified GnuPG TrustDB version is not supported. TrustDB v4 is " +"supported." +msgstr "" + +#: lib/gnutls_errors.c:201 +msgid "Error loading the keyring." +msgstr "" + +#: lib/gnutls_errors.c:203 +msgid "The initialization of LZO has failed." +msgstr "" + +#: lib/gnutls_errors.c:205 +msgid "No supported compression algorithms have been found." +msgstr "" + +#: lib/gnutls_errors.c:207 +msgid "No supported cipher suites have been found." +msgstr "" + +#: lib/gnutls_errors.c:209 +msgid "Could not get OpenPGP key." +msgstr "" + +#: lib/gnutls_errors.c:212 +msgid "The SRP username supplied is illegal." +msgstr "" + +#: lib/gnutls_errors.c:215 +msgid "The OpenPGP fingerprint is not supported." +msgstr "" + +#: lib/gnutls_errors.c:217 +msgid "The certificate has unsupported attributes." +msgstr "" + +#: lib/gnutls_errors.c:219 +msgid "The OID is not supported." +msgstr "" + +#: lib/gnutls_errors.c:221 +msgid "The hash algorithm is unknown." +msgstr "" + +#: lib/gnutls_errors.c:223 +msgid "The PKCS structure's content type is unknown." +msgstr "" + +#: lib/gnutls_errors.c:225 +msgid "The PKCS structure's bag type is unknown." +msgstr "" + +#: lib/gnutls_errors.c:227 +msgid "The given password contains invalid characters." +msgstr "" + +#: lib/gnutls_errors.c:229 +msgid "The Message Authentication Code verification failed." +msgstr "" + +#: lib/gnutls_errors.c:231 +msgid "Some constraint limits were reached." +msgstr "" + +#: lib/gnutls_errors.c:233 +msgid "Failed to acquire random data." +msgstr "" + +#: lib/gnutls_errors.c:236 +msgid "Received a TLS/IA Intermediate Phase Finished message" +msgstr "" + +#: lib/gnutls_errors.c:238 +msgid "Received a TLS/IA Final Phase Finished message" +msgstr "" + +#: lib/gnutls_errors.c:240 +msgid "Verifying TLS/IA phase checksum failed" +msgstr "" + +#: lib/x509/output.c:112 lib/x509/output.c:383 +#, c-format +msgid "\t\t\tPath Length Constraint: %d\n" +msgstr "" + +#: lib/x509/output.c:113 +#, c-format +msgid "\t\t\tPolicy Language: %s" +msgstr "" + +#: lib/x509/output.c:122 +msgid "" +"\t\t\tPolicy:\n" +"\t\t\t\tASCII: " +msgstr "" + +#: lib/x509/output.c:124 +msgid "" +"\n" +"\t\t\t\tHexdump: " +msgstr "" + +#: lib/x509/output.c:216 +msgid "\t\t\tDigital signature.\n" +msgstr "" + +#: lib/x509/output.c:218 +msgid "\t\t\tNon repudiation.\n" +msgstr "" + +#: lib/x509/output.c:220 +msgid "\t\t\tKey encipherment.\n" +msgstr "" + +#: lib/x509/output.c:222 +msgid "\t\t\tData encipherment.\n" +msgstr "" + +#: lib/x509/output.c:224 +msgid "\t\t\tKey agreement.\n" +msgstr "" + +#: lib/x509/output.c:226 +msgid "\t\t\tCertificate signing.\n" +msgstr "" + +#: lib/x509/output.c:228 +msgid "\t\t\tCRL signing.\n" +msgstr "" + +#: lib/x509/output.c:230 +msgid "\t\t\tKey encipher only.\n" +msgstr "" + +#: lib/x509/output.c:232 +msgid "\t\t\tKey decipher only.\n" +msgstr "" + +#: lib/x509/output.c:344 +msgid "\t\t\tTLS WWW Server.\n" +msgstr "" + +#: lib/x509/output.c:346 +msgid "\t\t\tTLS WWW Client.\n" +msgstr "" + +#: lib/x509/output.c:348 +msgid "\t\t\tCode signing.\n" +msgstr "" + +#: lib/x509/output.c:350 +msgid "\t\t\tEmail protection.\n" +msgstr "" + +#: lib/x509/output.c:352 +msgid "\t\t\tTime stamping.\n" +msgstr "" + +#: lib/x509/output.c:354 +msgid "\t\t\tOCSP signing.\n" +msgstr "" + +#: lib/x509/output.c:356 +msgid "\t\t\tAny purpose.\n" +msgstr "" + +#: lib/x509/output.c:378 +msgid "\t\t\tCertificate Authority (CA): FALSE\n" +msgstr "" + +#: lib/x509/output.c:380 +msgid "\t\t\tCertificate Authority (CA): TRUE\n" +msgstr "" + +#: lib/x509/output.c:483 +#, c-format +msgid "\t\t\tXMPP Address: %.*s\n" +msgstr "" + +#: lib/x509/output.c:486 +#, c-format +msgid "\t\t\totherName OID: %.*s\n" +msgstr "" + +#: lib/x509/output.c:487 +msgid "\t\t\totherName DER: " +msgstr "" + +#: lib/x509/output.c:489 +msgid "" +"\n" +"\t\t\totherName ASCII: " +msgstr "" + +#: lib/x509/output.c:515 lib/x509/output.c:1179 +#, c-format +msgid "\tVersion: %d\n" +msgstr "" + +#: lib/x509/output.c:529 +msgid "\tSerial Number (hex): " +msgstr "" + +#: lib/x509/output.c:546 lib/x509/output.c:1193 +#, c-format +msgid "\tIssuer: %s\n" +msgstr "" + +#: lib/x509/output.c:553 +msgid "\tValidity:\n" +msgstr "" + +#: lib/x509/output.c:566 +#, c-format +msgid "\t\tNot Before: %s\n" +msgstr "" + +#: lib/x509/output.c:580 +#, c-format +msgid "\t\tNot After: %s\n" +msgstr "" + +#: lib/x509/output.c:594 +#, c-format +msgid "\tSubject: %s\n" +msgstr "" + +#: lib/x509/output.c:611 +#, c-format +msgid "\tSubject Public Key Algorithm: %s\n" +msgstr "" + +#: lib/x509/output.c:624 +#, c-format +msgid "\t\tModulus (bits %d):\n" +msgstr "" + +#: lib/x509/output.c:626 +msgid "\t\tExponent:\n" +msgstr "" + +#: lib/x509/output.c:645 +#, c-format +msgid "\t\tPublic key (bits %d):\n" +msgstr "" + +#: lib/x509/output.c:647 +msgid "\t\tP:\n" +msgstr "" + +#: lib/x509/output.c:649 +msgid "\t\tQ:\n" +msgstr "" + +#: lib/x509/output.c:651 +msgid "\t\tG:\n" +msgstr "" + +#: lib/x509/output.c:696 +msgid "\tExtensions:\n" +msgstr "" + +#: lib/x509/output.c:706 +#, c-format +msgid "\t\tBasic Constraints (%s):\n" +msgstr "" + +#: lib/x509/output.c:707 lib/x509/output.c:722 lib/x509/output.c:737 +#: lib/x509/output.c:752 lib/x509/output.c:767 lib/x509/output.c:782 +#: lib/x509/output.c:797 lib/x509/output.c:812 lib/x509/output.c:824 +msgid "critical" +msgstr "" + +#: lib/x509/output.c:707 lib/x509/output.c:722 lib/x509/output.c:737 +#: lib/x509/output.c:752 lib/x509/output.c:767 lib/x509/output.c:782 +#: lib/x509/output.c:797 lib/x509/output.c:812 lib/x509/output.c:824 +msgid "not critical" +msgstr "" + +#: lib/x509/output.c:721 +#, c-format +msgid "\t\tSubject Key Identifier (%s):\n" +msgstr "" + +#: lib/x509/output.c:736 +#, c-format +msgid "\t\tAuthority Key Identifier (%s):\n" +msgstr "" + +#: lib/x509/output.c:751 +#, c-format +msgid "\t\tKey Usage (%s):\n" +msgstr "" + +#: lib/x509/output.c:766 +#, c-format +msgid "\t\tKey Purpose (%s):\n" +msgstr "" + +#: lib/x509/output.c:781 +#, c-format +msgid "\t\tSubject Alternative Name (%s):\n" +msgstr "" + +#: lib/x509/output.c:796 +#, c-format +msgid "\t\tCRL Distribution points (%s):\n" +msgstr "" + +#: lib/x509/output.c:811 +#, c-format +msgid "\t\tProxy Certificate Information (%s):\n" +msgstr "" + +#: lib/x509/output.c:823 +#, c-format +msgid "\t\tUnknown extension %s (%s):\n" +msgstr "" + +#: lib/x509/output.c:852 +msgid "\t\t\tASCII: " +msgstr "" + +#: lib/x509/output.c:856 +msgid "\t\t\tHexdump: " +msgstr "" + +#: lib/x509/output.c:881 lib/x509/output.c:1290 +#, c-format +msgid "\tSignature Algorithm: %s\n" +msgstr "" + +#: lib/x509/output.c:885 lib/x509/output.c:1294 +msgid "" +"warning: signed using a broken signature algorithm that can be forged.\n" +msgstr "" + +#: lib/x509/output.c:910 lib/x509/output.c:1319 +msgid "\tSignature:\n" +msgstr "" + +#: lib/x509/output.c:933 +msgid "" +"\tMD5 fingerprint:\n" +"\t\t" +msgstr "" + +#: lib/x509/output.c:935 +msgid "" +"\tSHA-1 fingerprint:\n" +"\t\t" +msgstr "" + +#: lib/x509/output.c:969 +msgid "" +"\tPublic Key Id:\n" +"\t\t" +msgstr "" + +#: lib/x509/output.c:1135 +msgid "X.509 Certificate Information:\n" +msgstr "" + +#: lib/x509/output.c:1139 +msgid "Other Information:\n" +msgstr "" + +#: lib/x509/output.c:1175 +msgid "\tVersion: 1 (default)\n" +msgstr "" + +#: lib/x509/output.c:1200 +msgid "\tUpdate dates:\n" +msgstr "" + +#: lib/x509/output.c:1213 +#, c-format +msgid "\t\tIssued: %s\n" +msgstr "" + +#: lib/x509/output.c:1229 +#, c-format +msgid "\t\tNext at: %s\n" +msgstr "" + +#: lib/x509/output.c:1239 +#, c-format +msgid "\tRevoked certificates (%d):\n" +msgstr "" + +#: lib/x509/output.c:1241 +msgid "\tNo revoked certificates.\n" +msgstr "" + +#: lib/x509/output.c:1260 +msgid "\t\tSerial Number (hex): " +msgstr "" + +#: lib/x509/output.c:1269 +#, c-format +msgid "\t\tRevoked at: %s\n" +msgstr "" + +#: lib/x509/output.c:1349 +msgid "X.509 Certificate Revocation List Information:\n" +msgstr ""