On Tue, Dec 31, 2013 at 9:55 AM, David Woodhouse <dwmw2 at infradead.org> wrote: > On Mon, 2013-12-30 at 17:48 -0800, Kevin Cernekee wrote: >> >> New API versions: >> >> - OPENCONNECT_3.0 just covers the auth form changes, intended for a >> bugfix release. > > I'm actually pondering a 5.02 release which doesn't change the ABI, > which distros can easily pick up, which will just disable xmlpost > automatically if there's an authgroup to be chosen. That'll deal with > the biggest regression, without completely disabling xmlpost. What do > you think? Yeah, I wondered about whether the distributions would resist taking an update that breaks dependent packages... For 5.02, how does this tree (plus the patch sent via email) look? The following changes since commit 3cb5435da91e263e2dc7e3aa4f54488ae43dd5c4: auth: Add <group-access> node to XML POST initial request (2013-12-30 22:13:36 +0000) are available in the git repository at: git://github.com/cernekee/openconnect staging-5.02 for you to fetch changes up to ee077db1616fecee8478ba19c490688b72ddd3cb: android: Fix broken ARCH=mips build (2013-12-31 12:11:13 -0800) ---------------------------------------------------------------- Kevin Cernekee (8): http: Fix NULL vpninfo->hostname pointer on redirect auth: Save a pointer to the group_list dropdown option if it exists auth: Temporarily disable XML POST if an authgroup dropdown exists dtls: Don't send packets to a dead socket during rekeying www: Fix quoting in v5.01 changelog main: --cookie-on-stdin doesn't work with ocserv cookies http: Don't leak HTTP request buffer on failed connections android: Fix broken ARCH=mips build android/Makefile | 2 ++ auth.c | 12 ++++++++++++ dtls.c | 8 ++------ http.c | 3 ++- main.c | 4 ++-- openconnect-internal.h | 2 ++ openconnect.h | 3 +++ www/changelog.xml | 2 +- 8 files changed, 26 insertions(+), 10 deletions(-)