About time we finally released this... and also about time we switched to building with GnuTLS by default instead of OpenSSL, so I did that too. A few compatibility issues fixed, and makefiles for Android that don't require the full AOSP build. ftp://ftp.infradead.org/pub/openconnect/openconnect-5.00.tar.gz ftp://ftp.infradead.org/pub/openconnect/openconnect-5.00.tar.gz.asc Antonio Borneo (11): Uniform coding style: #if defined() Uniform coding style: space and tabs Uniform coding style: conditional statement Uniform coding style: no {} for single statement Uniform coding style: don't use C99 // comments gitignore: add autogen's files gitignore: add files from ./configure gitignore: add files from "make" gitignore: add cscope.* Add "-m" to getopt_long() parser Sort getopt_long optstring David Woodhouse (48): Switch to using GnuTLS by default Document recent OpenSSL brokenness, update GnuTLS/DTLS info Add build time and run time handling of recent OpenSSL brokenness Don't print "DTLS connected" when it isn't yet Use gnutls_pubkey_verify_data2() where possible Merge retrospective 4.08 release into HEAD Fix GnuTLS 2.x build failure Fix abuse of realloc() causing memory leaks Fix abuse of gnutls_realloc() causing memory leaks Update changelog Link directly to Nikos' server web site Fix hostname canonicalisation to stop breaking certifcate checks Update translations from GNOME Fix Android build with NDK Don't attempt to parse empty response from server Handle redirects in attempting simple auth GET too Destroy vpninfo->https_cred on failing to create it Update translations from GNOME Use OPENSSL_CFLAGS when testing OpenSSL features too Make it easier to avoid the broken OpenSSL DTLS check Remove unused variable 'ofs' in Android keystore_fetch() Revamp Android build infrastructure Attempt to build GnuTLS for Android Use GNUTLS_CFLAGS when testing GnuTLS features too Avoid warning about verify_signed_data being unused Stop using deprecated gnutls_x509_crt type Android: Build GnuTLS from git Fix CSD trojan download Add missing newlines Reduce GnuTLS library size for Android build Import translations from GNOME Fix check for CSD CSD stub URL is optional Fix redirect to CSD stub URL Clean up CSD invocation for XML POST Fix Android builds for x86 and mips Enable shared libopenconnect for Android build Check for __ANDROID__ not ANDROID Import translations from GNOME Fix GMP configure rule for Android build Disable more GnuTLS bits Import translations from GNOME Import translations from GNOME Import translations from GNOME Import translations from GNOME Import translations from GNOME Import translations from GNOME Tag version 5.00 John Morrissey (2): Don't emit the login banner and/or message when -q is used Add TOTP (RFC6238) one-time password support Kevin Cernekee (17): auth: Implement special handling of <select> dropdowns on XML POST auth: Implement special handling of password fields on XML POST http: Fix redirect handling in auth form loop auth: stoken: Fix handling of "Next TOKENCODE" prompt http: Don't leak the webvpn cookie in XML POST mode Add --without-libproxy and --without-stoken options to configure Tweak liboath ./configure help text for consistency Get rid of LIBSTOKEN_HDR and LIBOATH_HDR Fix token-related command line options Update man page and changelog to reflect --token-* changes Remove references to Android.mk Update comments to reflect library API changes android: Remove dependency on files outside the openconnect repo android: Hack around GnuTLS build breakage android: Override vpnc-script check in "configure" android: Add the correct toolchain directory to $PATH android: Run autogen.sh if configure script is missing Nikos Mavrogiannopoulos (3): Fix arguments to gnutls_pubkey_verify_data2 Add server page to web pages Check for __android_log_vprint in liblog. -- David Woodhouse Open Source Technology Centre David.Woodhouse at intel.com Intel Corporation -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 5745 bytes Desc: not available URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20130515/09a9c31c/attachment.bin>