2016-08-22  Werner Koch  <wk@gnupg.org>

	Release 1.3.5.

	* configure.ac: Set LT version to C19/A/11/R6.

	Use size_t for the result of fread.

	* src/reader.c (ksba_reader_read): Make 'n' and size_t.

	Limit allocation in the BER decoder to 16 MiB.

	* src/ber-decoder.c (MAX_IMAGE_LENGTH): New.

	(decoder_next): Limit allcoation to MAX_IMAGE_LENGTH.

	(_ksba_ber_decoder_dump, _ksba_ber_decoder_decode): Ditto.

2016-07-17  Tomáš Trnka  <tomastrnka@gmx.com>

	Encode OCSP nonce value as an octet string (RFC 6960)

	* src/ocsp.c (ksba_ocsp_set_nonce): Stop removing the sign bit.

	 (write_request_extensions): Encode nonce as octet string.

	 (parse_response_extensions): Decode nonce as octet string.

2016-07-13  Werner Koch  <wk@gnupg.org>

	build: Update config.{guess,sub} to {2016-05-15,2016-06-20}.

	* build-aux/config.guess: Update.

	* build-aux/config.sub: Update.

2016-06-27  Werner Koch  <wk@gnupg.org>

	tests: Fix a memory leak.

	* tests/t-oid.c (test_oid_to_str): Free STR.

	Use modern error macros and fix a missing assignment.

	* src/ocsp.c: Remove errno.h.  Replace gpg_error_from_errno(errno) by

	gpg_error_from_syserror ().

	(parse_response): Ditto.  Return direct becuase static analyzer may

	not grasp that  gpg_error_from_syserror will never return false.

	(ksba_ocsp_get_responder_id): Actually return an error for NO_DATA.

	Detect invalid RDN names and avoid a read from uninitialized variable.

	* src/dn.c (parse_rdn): Bail out for an invalid name.

2016-05-25  Werner Koch  <wk@gnupg.org>

	    Pascal Cuoq  <cuoq@trust-in-soft.com>

	Fix OOB read in parse_distribution_point.

	* src/cert.c (parse_distribution_point): Check TI.length.

2016-05-11  Werner Koch  <wk@gnupg.org>

	Make sure that ASN.1 data is stored in an all-initialized buffer.

	* src/ber-decoder.c (decoder_next): Clear the image buffer.

2016-05-03  Werner Koch  <wk@gnupg.org>

	Release 1.3.4.

	* configure.ac: Set LT version to C19/A11/R5.

	Update config.{guess,sub} to 2016-04-02 and 2016-03-30.

	* build-aux/config.guess: Update.

	* build-aux/config.sub: Update.

	Create an SWDB file during "make distcheck"

	* Makefile.am (distcheck-hook): New.

	Fix an undefined return value in ksba_cert_get_digest_algo.

	* src/cert.c (ksba_cert_get_digest_algo): Set ALGO in the error case.

	* tests/cert-basic.c (one_file): Take care of printf which does not

	handle NULL for %s

	Fix an OOB read access in _ksba_dn_to_str.

	* src/dn.c (append_utf8_value): Use a straightforward check to fix an

	off-by-one.

	Fix possible read access beyond the buffer.

	* src/ber-help.c (_ksba_ber_parse_tl): Add extra sanity check.

	* src/cert.c (ksba_cert_get_cert_policies): Check TLV given length

	against buffer length.

	(ksba_cert_get_ext_key_usages): Ditto.

	* src/ocsp.c (parse_asntime_into_isotime): Ditto.

2015-10-28  Werner Koch  <wk@gnupg.org>

	Add more curves to the name->OID table.

	* src/keyinfo.c (curve_names): Add more curves.

	Fix lookup of ECC OIDs by name.

	* src/keyinfo.c (get_ecc_curve_oid): Fix obviously never tested table

	lookup.

2015-08-25  Werner Koch  <wk@gnupg.org>

	Add configure option --enable-build-timestamp.

	* configure.ac (BUILD_TIMESTAMP): Set to "<none>" by default.  Add

	ac_define_unquoted.

2015-04-10  Werner Koch  <wk@gnupg.org>

	Release 1.3.3.

2015-04-09  Werner Koch  <wk@gnupg.org>

	Do not abort on decoder stack overflow.

	* src/ber-decoder.c (push_decoder_state, pop_decoder_state): Return an

	error code.

	(set_error): Prefix error message with "ksba:". Act on new return code.

	(decoder_next): Act on new return code.

	Fix integer overflow in the BER decoder.

	* src/ber-decoder.c (ber_decoder_s): Change val.length from int to

	size_t.

	(sum_a1_a2_gt_b, sum_a1_a2_ge_b): New.

	(decoder_next): Check for integer overflow.  Use new sum function for

	size check.

	(_ksba_ber_decoder_dump): Use size_t for n to match change of

	val.length.  Adjust printf fomrat.  Check for integer overflow and use

	gpg_error_from_syserror instead of GPG_ERR_ENOMEM.

	(_ksba_ber_decoder_decode): Use new sum function for size check.

	Check for integer overflow.  Use size_t for n to match change of

	val.length.

2015-04-08  Werner Koch  <wk@gnupg.org>

	Fix encoding of invalid utf-8 strings in dn.c.

	* src/dn.c (append_quoted, append_atv): Use snprintf.

	(append_utf8_value): Fix invalid encoding handling.

2015-01-30  Werner Koch  <wk@gnupg.org>

	w32: Use -static-libgcc to avoid linking to libgcc_s_sjlj-1.dll.

	* src/Makefile.am (extra_ltoptions): New.

	(libksba_la_LDFLAGS): Use it.

	Update ASN.1 grammar for newer Bison versions.

	* src/asn1-parse.y (YYERROR_VERBOSE): Replace by ...

	(%define parse.error.verbose): this.

	(YYPARSE_PARM, YYLEX_PARM): Replace by ...

	(%parm): this.

	(%pure_parser): Replace by ...

	(%define api.pure full): this.

	(yyerror): Add arg parm.

2015-01-28  Werner Koch  <wk@gnupg.org>

	Require automake 1.14 and update build-aux files.

	* Makefile.am (AUTOMAKE_OPTIONS): Move to ...

	* configure.ac (AM_INIT_AUTOMAKE: here.  Add serial-tests.

2014-11-25  Werner Koch  <wk@gnupg.org>

	Release 1.3.2.

	* configure.ac: Set LT version to C19/A11/R3.

	build: Update version number magic.

	* autogen.sh: Update from gnupg master.

	* configure.ac: Change for new init style.  Create VERSION.

	* Makefile.am (dist-hook): Do no create VERSION

	Fix buffer overflow in ksba_oid_to_str.

	* src/oid.c (ksba_oid_to_str): Fix unsigned underflow.

	* tests/Makefile.am (noinst_PROGRAMS): Move t-oid to ..

	(TESTS): here.

	* tests/t-oid.c (test_oid_to_str): New.

	(main): Run the new tests by default.  The former functionality

	requires the use of one of the new options.

2014-09-25  Werner Koch  <wk@gnupg.org>

	Strip CRs while building the oid translation table.

	* tests/Makefile.am (oidtranstbl.h): Strip CRs

2014-09-18  Werner Koch  <wk@gnupg.org>

	Release 1.3.1.

	* configure.ac: Set LT version to C19/A11/R2.

2014-07-22  Dmitry Eremin-Solenikov  <dbaryshkov@gmail.com>

	Fix two memory leaks in cert-basic test.

	* tests/cert-basic.c (one_file): always free public key and der2.

	Enable optional valgrind for testsuite.

	* configure.ac: Enable gnulib valgrind module.

	* gl/m4/gnulib.m4: Enable valgrind module.

	* tests/Makefile.am: Enable valgrind as LOG_COMPILER.

	* gl/m4/valgrind-tests.m4: New

	Fix memory leak in crl parsing code.

	* src/crl.c (store_one_entry_extension): Free memory at oid variable -

	  otherwise libksba leaks memory on crl parsing.

	Adapt mkoidtbl script to newer dumpasn1 database format.

	* tests/mkoidtbl.awk: optionally parse oid at OID line.

	Reuse common test functions in cert-basic test.

	* tests/cert-basic.c (xmalloc, print_hex, print_sexp, print_time,

	  print_dn): Drop.

	tests: fix print_sexp and print_sexp_hex functions.

	* tests/t-common.h (print_sexp, print_sexp_hex): advance pointer on

	  closing brace.

	tests: Pass -no-install to libtool.

	* tests/Makefile.am: add AM_LDFLAGS = -no-install

2014-04-15  Werner Koch  <wk@gnupg.org>

	tests: Fix warning about unused var.

	* tests/t-dnparser.c (main): Drop unneeded var INPUTLEN.

	Fix possible segv if NULL is passed as cert.

	* src/cert.c (ksba_cert_get_digest_algo): Fix !cert case.

2014-01-10  Werner Koch  <wk@gnupg.org>

	Remove cruft.

	* autogen.rc: Remove cruft.

	Use the generic autogen.sh script.

	* Makefile.am (EXTRA_DIST): Add autogen.rc.

	* autogen.rc: New.

	* autogen.sh: Update from current GnuPG.

	* ltmain.sh: Move to build-aux/.

	* compile: Ditto.

	* config.guess: Ditto.

	* config.sub: Ditto.

	* depcomp: Ditto.

	* doc/mdate-sh: Ditto.

	* doc/texinfo.tex: Ditto.

	* install-sh: Ditto.

	* missing: Ditto.

	* ylwrap: Ditto.

	* configure.ac (AC_CONFIG_AUX_DIR): New.

2014-01-08  Werner Koch  <wk@gnupg.org>

	Add --enable-silent-rules stuff.

	* configure.ac: Add AM_SILENT_RULES.

	Fix libtool 2.4.2 to correctly detect .def files.

	* ltmain.sh (sed_uncomment_deffile): New.

	(orig_export_symbols): Uncomment def file before testing for EXPORTS.

	* m4/libtool.m4: Do the same for the generated code.

2013-12-10  David 'Digit' Turner  <digit@google.com>

	Update libtool to support Android.

	* m4/libtool.m4: Add "linux*android*" case.  Taken from the libtool

	repository.

2013-12-10  Werner Koch  <wk@gnupg.org>

	Add build support for ppc64le.

	* config.guess, config.sub: Update to latest version (2013-11-29).

	* m4/libtool.m4: Add patches for ppc64le.

	Fix duplicate definition of TRUE and FALSE in grammar file.

	* src/asn1-parse.y (YYPRINT): Define.

	(%token-table): Define.

	(TRUE,FALSE,BOOLEAN): Prefix these tokens with "ksba_" to avoid name

	conflicts.

	(key_word, key_word_token): Remove arrays.

	(%token): Add literal strings to almost all tokens.

	(yylex): Use yytname array for keyword lookup.

2012-11-16  Werner Koch  <wk@gnupg.org>

	Improve parsing of the GIT revision number.

	* configure.ac (mmm4_revision): Use git rev-parse.

	Fix non-portable use of chmod in autogen.sh.

	* autogen.sh: Remove option -c from chmod.

2012-09-27  Werner Koch  <wk@gnupg.org>

	Release 1.3.0.

	* configure.ac: Set LT version to C19/A11/R1.

2012-09-26  Werner Koch  <wk@gnupg.org>

	Update build helper scripts.

	* config.guess, config.sub: Update to version 2012-07-31.

	* ltmain.sh: Update to version 2.4.2.

	* install-sh, m4/libtool.m4, m4/ltoptions.m4, m4/ltversion.m4

	* m4/lt~obsolete.m4: Update to autoconf 2.69 versions.

	Adjust for stricter autoconf requirements.

	* configure.ac: Fix usage of AC_LANG_PROGRAM.

	Do not distribute a copy of gitlog-to-changelog.

	* Makefile.am (AUTOMAKE_OPTIONS): Do not create a tar.gz.

	(gen-ChangeLog): Require an installed gitlog-to-changelog.

	* build-aux/gitlog-to-changelog: Remove.

	Allow building with w64-mingw32.

	* autogen.sh <--build-w32>: Support the w64-mingw32 toolchain.  Also

	prepare for 64 bit building.

	Switch to the new automagic beta numbering scheme.

	* configure.ac: Add all the required m4 magic.

	Change library license to LGPLv3+/GPLv2+.

	* COPYING.GPLv2, COPYING.GPLv3, COPYING.LGPLv3: New.

	* COPYING: Replace text by a reference to the new files.

	* AUTHORS: Update copyright, license, and maintainer information.

	* Makefile.am (EXTRA_DIST): Distribute the new files.

	Remove unused or useless files.

	* src/asn1-parse.h: Remove empty file.

	* src/asn1-parse.y: Do not include asn1-parse.h.

2011-12-06  Werner Koch  <wk@gnupg.org>

	Allow to set subject and issuer.

	* src/certreq.c (ksba_certreq_set_issuer): Do not check the subject.

2011-12-01  Werner Koch  <wk@gnupg.org>

	Post release updates.

	Generate the ChangeLog from commit logs.

	* build-aux/gitlog-to-changelog: New script.  Taken from gnulib.

	* build-aux/git-log-fix: New file.

	* build-aux/git-log-footer: New file.

	* doc/HACKING: New file.

	* ChangeLog: New file.

	* Makefile.am (EXTRA_DIST): Add new files.

	(gen-ChangeLog): New.

	(dist-hook): Run gen-ChangeLog.

	* autogen.sh: Install commit-msg hook for git.

	Rename all ChangeLog files to ChangeLog-2011.

2011-12-01  Werner Koch  <wk@gnupg.org>

	NB: Changes done before December 1st, 2011 are described in

	per directory files named ChangeLog-2011.  See doc/HACKING for

	details.

        -----

	Copyright (C) 2011 g10 Code GmbH

	Copying and distribution of this file and/or the original GIT

	commit log messages, with or without modification, are

	permitted provided the copyright notice and this notice are

	preserved.