From gnutls-dev at mlists.thewrittenword.com Mon Oct 3 18:44:56 2005 From: gnutls-dev at mlists.thewrittenword.com (Albert Chin) Date: Mon, 3 Oct 2005 11:44:56 -0500 Subject: [gnutls-dev] SASL/EXTERNAL Message-ID: <20051003164456.GA94294@mail1.thewrittenword.com> According to: http://www.stacken.kth.se/lists/heimdal-discuss/2000-07/msg00068.html OpenLDAP 2.x SASL/EXTERNAL(TLS) support is under development is based upon OpenSSL. We are investigating the addition of GnuTLS support for OpenLDAP. If SASL EXTERNAL is tied to OpenSSL in OpenLDAP, is this something GnuTLS currently provides or could provide? -- albert chin (china at thewrittenword.com) From jas at extundo.com Fri Oct 7 15:32:24 2005 From: jas at extundo.com (Simon Josefsson) Date: Fri, 07 Oct 2005 15:32:24 +0200 Subject: [gnutls-dev] Re: SASL/EXTERNAL In-Reply-To: <20051003164456.GA94294@mail1.thewrittenword.com> (Albert Chin's message of "Mon, 3 Oct 2005 11:44:56 -0500") References: <20051003164456.GA94294@mail1.thewrittenword.com> Message-ID: Albert Chin writes: > According to: > http://www.stacken.kth.se/lists/heimdal-discuss/2000-07/msg00068.html > > OpenLDAP 2.x SASL/EXTERNAL(TLS) support is under development is > based upon OpenSSL. > > We are investigating the addition of GnuTLS support for OpenLDAP. If > SASL EXTERNAL is tied to OpenSSL in OpenLDAP, is this something GnuTLS > currently provides or could provide? If the SASL EXTERNAL hooks in OpenLDAP only check whether OpenSSL is enabled, then it won't work. I imagine that you would have to change OpenLDAP's EXTERNAL code to also check if GnuTLS layers are present. That should be simple to add. Btw, I recall that Cyrus SASL, or at least some of the Cyrus SASL modules, depend on OpenSSL. GNU SASL might be another SASL alternative, and I have experience integrating it together with GnuTLS (although not in OpenLDAP). Regards, Simon From jas at extundo.com Fri Oct 7 15:27:10 2005 From: jas at extundo.com (Simon Josefsson) Date: Fri, 07 Oct 2005 15:27:10 +0200 Subject: [gnutls-dev] GnuTLS 1.2.8 Message-ID: We are pleased to announce the availability of GnuTLS version 1.2.8. GnuTLS is a modern C library that implement the standard network security protocol Transport Layer Security (TLS), for use by network applications. Noteworthy changes since version 1.2.7: - Libgcrypt 1.2.2 is required to fix a bug for forking GnuTLS servers. - Don't install the auxilliary libexamples library used by the examples in doc/examples/ on "make install", report and tiny patch from Thomas Klausner . - If you pass a X.509 CA or PGP trust database to the command line tool, it will now abort the connection if the server certificate validation fails. Use the parameter --insecure to continue even after certificate validation failures. Inspired from discussion with Alexander Kotelnikov . - The test for socklen_t has been moved to gnulib. - Link failures for duplicate or missing "program_name" symbol has been fixed, patch from Martin Lambers . - The command line tool and the examples no longer uses mmap or bzero, to make them more portable, patch from Martin Lambers . - Made the PKCS #12 API handle null passwords. Based on patch by Anton Altaparmakov . - The GTK-DOC manual should build with current released tools. (But a copy of the output is included, so the tools are not required.) - The inet_ntop function is now used through gnulib. - API and ABI modifications: No changes since last version. Improving GnuTLS is costly, but you can help! We are looking for organizations that find GnuTLS useful and wish to contribute back. You can contribute by reporting bugs, improve the software, or donate money or equipment. Commercial support contracts for GnuTLS are available, and they help finance continued maintenance. Simon Josefsson Datakonsult, a Stockholm based privately held company, is currently funding GnuTLS maintenance. We are always looking for interesting development projects. If you need help to use GnuTLS, or want to help others, you are invited to join our help-gnutls mailing list, see: . The project page of the library is available at: http://www.gnutls.org/ http://www.gnu.org/software/gnutls/ http://josefsson.org/gnutls/ (updated fastest) Here are the compressed sources: http://josefsson.org/gnutls/releases/gnutls-1.2.8.tar.bz2 (2.5MB) ftp://ftp.gnutls.org/pub/gnutls/gnutls-1.2.8.tar.bz2 (2.5MB) Here are GPG detached signatures signed using key 0xB565716F: http://josefsson.org/gnutls/releases/gnutls-1.2.8.tar.bz2.sig ftp://ftp.gnutls.org/pub/gnutls/gnutls-1.2.8.tar.bz2.sig The software is cryptographically signed by the author using an OpenPGP key identified by the following information: 1280R/B565716F 2002-05-05 [expires: 2006-02-28] Key fingerprint = 0424 D4EE 81A0 E3D1 19C6 F835 EDA2 1E94 B565 716F The key is available from: http://josefsson.org/key.txt dns:b565716f.josefsson.org?TYPE=CERT Here are the build reports for various platforms: http://josefsson.org/autobuild-logs/gnutls.html Here are the SHA-1 checksums: b49c86de7c10946bf440ea146f89a31474297872 gnutls-1.2.8.tar.bz2 baf44ff87e373005d3601fdde7d21f39c1269516 gnutls-1.2.8.tar.bz2.sig Enjoy, Nikos and Simon From gareuselesinge at users.sourceforge.net Mon Oct 24 10:03:08 2005 From: gareuselesinge at users.sourceforge.net (Enrico Tassi) Date: Mon, 24 Oct 2005 10:03:08 +0200 Subject: [gnutls-dev] gnutls 1.2.8 and mingw32 Message-ID: <20051024080308.GA7210@garfield> I've few problems in cross-compiling gnutls 1.2.8. 1) inet_ntop.h includes sys/socket.h and other unix specific headers while it should do like common.h where this inclusion is conditional to the _WIN32 define 2) even if I fix the first problem EAFNOSUPPORT is still undefined in inet_ntop.c (so I added a dummy #define setting it equal to 1) regards -- Enrico Tassi From jas at extundo.com Mon Oct 24 13:46:19 2005 From: jas at extundo.com (Simon Josefsson) Date: Mon, 24 Oct 2005 13:46:19 +0200 Subject: [gnutls-dev] Re: gnutls 1.2.8 and mingw32 References: <20051024080308.GA7210@garfield> Message-ID: Enrico Tassi writes: > I've few problems in cross-compiling gnutls 1.2.8. Thanks! After fixing the problems, did the resulting GnuTLS build work? I.e., if you built the "anonself" self test, did it work if you copied it to a Windows machine? Did you see the thread "Build gnutls on windows" on help-gnutls? It seems mingw32 is not a POSIX compatible platform, so even if you manage to get things to link, the POSIX functions "send", "recv" etc may not behave as expected. In particular, they supposedly doesn't set errno. I think we could solve all of these problems through gnulib modules, but it may be quite some work. Compare "plibc", a POSIX layer for mingw32. I believe GnuTLS require POSIX behavior in a few other places too. > 1) inet_ntop.h includes sys/socket.h and other unix specific headers > while it should do like common.h where this inclusion is conditional > to the _WIN32 define > > 2) even if I fix the first problem EAFNOSUPPORT is still undefined in > inet_ntop.c (so I added a dummy #define setting it equal to 1) I'll look into fixing inet_ntop. Thanks, Simon From gareuselesinge at users.sourceforge.net Mon Oct 24 14:12:05 2005 From: gareuselesinge at users.sourceforge.net (Enrico Tassi) Date: Mon, 24 Oct 2005 14:12:05 +0200 Subject: [gnutls-dev] Re: gnutls 1.2.8 and mingw32 In-Reply-To: References: <20051024080308.GA7210@garfield> Message-ID: <20051024121205.GA8158@garfield> On Mon, Oct 24, 2005 at 01:46:19PM +0200, Simon Josefsson wrote: > Enrico Tassi writes: > > > I've few problems in cross-compiling gnutls 1.2.8. > > Thanks! After fixing the problems, did the resulting GnuTLS build > work? I.e., if you built the "anonself" self test, did it work if you > copied it to a Windows machine? I've not tried the anonself test, but I use libcurl on the win32 port of FreePOPs (http://www.freepops.org) and they seem to work fine. A benefit is that the curl.exe (and freepopsd.exe) now run fine with wine (while there were errors with open-ssl) and I downloaded an https:// link using wine and curl.exe. We hope to release soon a new version of FreePOPs based on libcurl-gnutls and then we will have a feedback from the users (even if only a small part of FreePOPs plugins use https://). > Did you see the thread "Build gnutls on windows" on help-gnutls? It > seems mingw32 is not a POSIX compatible platform, so even if you > manage to get things to link, the POSIX functions "send", "recv" etc > may not behave as expected. In particular, they supposedly doesn't > set errno. I think we could solve all of these problems through > gnulib modules, but it may be quite some work. Compare "plibc", a > POSIX layer for mingw32. I believe GnuTLS require POSIX behavior in a > few other places too. I'll have a look ASAP -- Enrico Tassi From jas at extundo.com Mon Oct 24 15:52:09 2005 From: jas at extundo.com (Simon Josefsson) Date: Mon, 24 Oct 2005 15:52:09 +0200 Subject: [gnutls-dev] Re: gnutls 1.2.8 and mingw32 In-Reply-To: <20051024121205.GA8158@garfield> (Enrico Tassi's message of "Mon, 24 Oct 2005 14:12:05 +0200") References: <20051024080308.GA7210@garfield> <20051024121205.GA8158@garfield> Message-ID: Enrico Tassi writes: > On Mon, Oct 24, 2005 at 01:46:19PM +0200, Simon Josefsson wrote: >> Enrico Tassi writes: >> >> > I've few problems in cross-compiling gnutls 1.2.8. >> >> Thanks! After fixing the problems, did the resulting GnuTLS build >> work? I.e., if you built the "anonself" self test, did it work if you >> copied it to a Windows machine? > > I've not tried the anonself test, but I use libcurl on the win32 port > of FreePOPs (http://www.freepops.org) and they seem to work fine. Wow! Nice. So we are close to working on mingw32 then. Given the problems described in the thread on help-gnutls, I would have thought there would be larger problems. > We hope to release soon a new version of FreePOPs based on > libcurl-gnutls and then we will have a feedback from the users > (even if only a small part of FreePOPs plugins use https://). That would be good. I am preparing the GnuTLS 1.2.9 release now, and fixing the inet_ntop problem is the only pending issue I have right now. There weren't any other mingw32 problems building GnuTLS 1.2.8, where there? Let me know, and I'll try to resolve them. Thanks, Simon From gareuselesinge at users.sourceforge.net Mon Oct 24 16:09:13 2005 From: gareuselesinge at users.sourceforge.net (Enrico Tassi) Date: Mon, 24 Oct 2005 16:09:13 +0200 Subject: [gnutls-dev] Re: gnutls 1.2.8 and mingw32 In-Reply-To: References: <20051024080308.GA7210@garfield> <20051024121205.GA8158@garfield> Message-ID: <20051024140913.GA9047@garfield> On Mon, Oct 24, 2005 at 03:52:09PM +0200, Simon Josefsson wrote: > > We hope to release soon a new version of FreePOPs based on > > libcurl-gnutls and then we will have a feedback from the users > > (even if only a small part of FreePOPs plugins use https://). > > That would be good. I am preparing the GnuTLS 1.2.9 release now, and > fixing the inet_ntop problem is the only pending issue I have right > now. There weren't any other mingw32 problems building GnuTLS 1.2.8, > where there? Let me know, and I'll try to resolve them. I use the mingw debian package and the main remaining issue is that there is no dll for wsock32.dll so I had to hack the libtool/configure just to add the proper -l option (I'm not an autotools guru, so maybe the solution was cleaner). In mingw I have only wsock32.a that, if statically linked, closes all the unresolved symbols of libgnutls.dll producing a "nice" dll. Maybe the solution should come from mingw... I've not investigated furter. JFYI I attach the .sh script I use to compile the dll ciao -- Enrico Tassi -------------- next part -------------- A non-text attachment was scrubbed... Name: gnutls.sh Type: application/x-sh Size: 2515 bytes Desc: not available URL: From wk at gnupg.org Mon Oct 24 17:31:22 2005 From: wk at gnupg.org (Werner Koch) Date: Mon, 24 Oct 2005 17:31:22 +0200 Subject: [gnutls-dev] Re: gnutls 1.2.8 and mingw32 In-Reply-To: <20051024140913.GA9047@garfield> (Enrico Tassi's message of "Mon, 24 Oct 2005 16:09:13 +0200") References: <20051024080308.GA7210@garfield> <20051024121205.GA8158@garfield> <20051024140913.GA9047@garfield> Message-ID: <87hdb77wz9.fsf@wheatstone.g10code.de> On Mon, 24 Oct 2005 16:09:13 +0200, Enrico Tassi said: > there is no dll for wsock32.dll so I had to hack the libtool/configure > just to add the proper -l option (I'm not an autotools guru, so maybe > the solution was cleaner). In mingw I have only wsock32.a that, if Put this into configure.ac: case "${host}" in *-mingw32*) W32LIBS="-lwsock32" ;; *) ;; esac AC_SUBST(W32LIBS) and this: LDADD = $(other_libs) $(W32LIBS) into the Makefile.am. We use this in gpg and other software for years. The Debian mingw32 packages works just fine - you are using Sid, right? Shalom-Salam, Werner From gareuselesinge at users.sourceforge.net Mon Oct 24 19:08:47 2005 From: gareuselesinge at users.sourceforge.net (Enrico Tassi) Date: Mon, 24 Oct 2005 19:08:47 +0200 Subject: [gnutls-dev] Re: gnutls 1.2.8 and mingw32 In-Reply-To: <87hdb77wz9.fsf@wheatstone.g10code.de> References: <20051024080308.GA7210@garfield> <20051024121205.GA8158@garfield> <20051024140913.GA9047@garfield> <87hdb77wz9.fsf@wheatstone.g10code.de> Message-ID: <20051024170847.GA28307@garfield> On Mon, Oct 24, 2005 at 05:31:22PM +0200, Werner Koch wrote: > > there is no dll for wsock32.dll so I had to hack the libtool/configure > > just to add the proper -l option (I'm not an autotools guru, so maybe > > the solution was cleaner). In mingw I have only wsock32.a that, if > > Put this into configure.ac: > > case "${host}" in > *-mingw32*) > W32LIBS="-lwsock32" > ;; > *) > ;; > esac > AC_SUBST(W32LIBS) > > and this: > > LDADD = $(other_libs) $(W32LIBS) > > into the Makefile.am. thanks! > We use this in gpg and other software for years. The Debian mingw32 > packages works just fine - you are using Sid, right? sure. Is there a way to build a "stub" libwsock32.dll with libtool so that there is no need of hacking configure.in and Makefile.am? thanks -- Enrico Tassi From wk at gnupg.org Tue Oct 25 12:33:54 2005 From: wk at gnupg.org (Werner Koch) Date: Tue, 25 Oct 2005 12:33:54 +0200 Subject: [gnutls-dev] Re: gnutls 1.2.8 and mingw32 In-Reply-To: <20051024170847.GA28307@garfield> (Enrico Tassi's message of "Mon, 24 Oct 2005 19:08:47 +0200") References: <20051024080308.GA7210@garfield> <20051024121205.GA8158@garfield> <20051024140913.GA9047@garfield> <87hdb77wz9.fsf@wheatstone.g10code.de> <20051024170847.GA28307@garfield> Message-ID: <87slup7unh.fsf@wheatstone.g10code.de> On Mon, 24 Oct 2005 19:08:47 +0200, Enrico Tassi said: > Is there a way to build a "stub" libwsock32.dll with libtool so that > there is no need of hacking configure.in and Makefile.am? Just take the def file and build a new import library. Something similar to # W32API 3.2 comes with an unusable libmapi32.a. We build our own # version. Note the omission of -k (--kill-at) from the DLLTOOL # command line. We also create our own virtual copies to the _static_ # versions of GPGME and gpg-error, because we want to link to them # statically, and not dynamically (otherwise Outlook would not find # them). gpgol_DEPENDENCIES = libmapi32.a libgpgme.a libgpg-error.a libmapi32.a: mapi32.def $(DLLTOOL) --output-lib $@ --def $< Salam-Shalom, Werner From jas at extundo.com Tue Oct 25 12:58:29 2005 From: jas at extundo.com (Simon Josefsson) Date: Tue, 25 Oct 2005 12:58:29 +0200 Subject: [gnutls-dev] Re: gnutls 1.2.8 and mingw32 In-Reply-To: <20051024140913.GA9047@garfield> (Enrico Tassi's message of "Mon, 24 Oct 2005 16:09:13 +0200") References: <20051024080308.GA7210@garfield> <20051024121205.GA8158@garfield> <20051024140913.GA9047@garfield> Message-ID: Enrico Tassi writes: > On Mon, Oct 24, 2005 at 03:52:09PM +0200, Simon Josefsson wrote: >> > We hope to release soon a new version of FreePOPs based on >> > libcurl-gnutls and then we will have a feedback from the users >> > (even if only a small part of FreePOPs plugins use https://). >> >> That would be good. I am preparing the GnuTLS 1.2.9 release now, and >> fixing the inet_ntop problem is the only pending issue I have right >> now. There weren't any other mingw32 problems building GnuTLS 1.2.8, >> where there? Let me know, and I'll try to resolve them. > > I use the mingw debian package and the main remaining issue is that > there is no dll for wsock32.dll so I had to hack the libtool/configure > just to add the proper -l option (I'm not an autotools guru, so maybe > the solution was cleaner). In mingw I have only wsock32.a that, if > statically linked, closes all the unresolved symbols of libgnutls.dll > producing a "nice" dll. Maybe the solution should come from mingw... > I've not investigated furter. > > JFYI I attach the .sh script I use to compile the dll Thanks, I'll look into fixing this. Btw, I believe I have fixed inet_ntop, please test: http://josefsson.org/daily/gnutls/gnutls-20051025.tar.gz Thanks, Simon From jas at extundo.com Thu Oct 27 12:08:35 2005 From: jas at extundo.com (Simon Josefsson) Date: Thu, 27 Oct 2005 12:08:35 +0200 Subject: [gnutls-dev] Re: Certificate verification failed In-Reply-To: <200510271129.44813.nmav@gnutls.org> (Nikos Mavrogiannopoulos's message of "Thu, 27 Oct 2005 11:29:44 +0200") References: <17247.59321.125197.576087@kappa.ac93.org> <200510262330.54617.nmav@gnutls.org> <200510271129.44813.nmav@gnutls.org> Message-ID: Nikos Mavrogiannopoulos writes: >> I think we should disable both MD2 and MD5, and introduce an API to >> modify gnutls_certificate_verify_peers2, a'la >> gnutls_enable_insecure_algorithm (&session, GNUTLS_SIGN_RSA_MD2) > This will not be necessary if we introduce the flags below. verify_peers2 > will use the flags from gnutls_certificate_set_verify_flags(). Ah, right, I forgot about that interface. Nice. >> and a new gnutls_certificate_verify_flags enumeration type, for >> gnutls_x509_crt_verify calls, e.g.: >> GNUTLS_VERIFY_ALLOW_SIGN_RSA_MD2 >> GNUTLS_VERIFY_ALLOW_SIGN_RSA_MD5 > Yes it is indeed a very nice idea. Security must be an issue in the library. Right. I think the defaults should be slightly conservative. Given that MD2 is broken, and there is even information on how to produce certificates with colliding signatures for MD5, I think we are way passed the point of being slightly conservative in disabling them. But we should have a way to re-enable them, first, to allow for interoperability. I'll take a stab at fixing this later today... Thanks, Simon From gareuselesinge at users.sourceforge.net Sat Oct 29 15:18:05 2005 From: gareuselesinge at users.sourceforge.net (Enrico Tassi) Date: Sat, 29 Oct 2005 15:18:05 +0200 Subject: [gnutls-dev] Re: gnutls 1.2.8 and mingw32 In-Reply-To: References: <20051024080308.GA7210@garfield> <20051024121205.GA8158@garfield> <20051024140913.GA9047@garfield> Message-ID: <20051029131805.GA6501@garfield> On Tue, Oct 25, 2005 at 12:58:29PM +0200, Simon Josefsson wrote: > Enrico Tassi writes: > > > On Mon, Oct 24, 2005 at 03:52:09PM +0200, Simon Josefsson wrote: > >> > We hope to release soon a new version of FreePOPs based on > >> > libcurl-gnutls and then we will have a feedback from the users > >> > (even if only a small part of FreePOPs plugins use https://). > >> > >> That would be good. I am preparing the GnuTLS 1.2.9 release now, and > >> fixing the inet_ntop problem is the only pending issue I have right > >> now. There weren't any other mingw32 problems building GnuTLS 1.2.8, > >> where there? Let me know, and I'll try to resolve them. > > > > I use the mingw debian package and the main remaining issue is that > > there is no dll for wsock32.dll so I had to hack the libtool/configure > > just to add the proper -l option (I'm not an autotools guru, so maybe > > the solution was cleaner). In mingw I have only wsock32.a that, if > > statically linked, closes all the unresolved symbols of libgnutls.dll > > producing a "nice" dll. Maybe the solution should come from mingw... > > I've not investigated furter. > > > > JFYI I attach the .sh script I use to compile the dll > > Thanks, I'll look into fixing this. > > Btw, I believe I have fixed inet_ntop, please test: > http://josefsson.org/daily/gnutls/gnutls-20051025.tar.gz I've tested 20051029 and I attach the patch to make the doc/examples/ stuff compile cleanly (but it will not work, since there is no inet_pton under mingw). -- Enrico Tassi -------------- next part -------------- diff -ruN examples.old/ex-cert-select.c examples/ex-cert-select.c --- examples.old/ex-cert-select.c 2005-09-23 02:23:03.000000000 +0200 +++ examples/ex-cert-select.c 2005-10-29 14:58:29.000000000 +0200 @@ -2,16 +2,22 @@ #include #include #include -#include -#include -#include -#include + +#ifdef _WIN32 + #include + #define inet_pton(x,y,z) +#else + #include + #include + #include + #include +#endif + #include + #include #include #include -#include -#include #include /* A TLS client that loads the certificate and key. diff -ruN examples.old/ex-client1.c examples/ex-client1.c --- examples.old/ex-client1.c 2005-08-11 02:23:02.000000000 +0200 +++ examples/ex-client1.c 2005-10-29 14:59:43.000000000 +0200 @@ -2,10 +2,14 @@ #include #include #include -#include -#include -#include -#include +#ifdef _WIN32 + #include +#else + #include + #include + #include + #include +#endif #include #include diff -ruN examples.old/ex-client2.c examples/ex-client2.c --- examples.old/ex-client2.c 2005-08-13 02:23:03.000000000 +0200 +++ examples/ex-client2.c 2005-10-29 15:00:17.000000000 +0200 @@ -2,10 +2,14 @@ #include #include #include -#include -#include -#include -#include +#ifdef _WIN32 + #include +#else + #include + #include + #include + #include +#endif #include #include diff -ruN examples.old/ex-serv1.c examples/ex-serv1.c --- examples.old/ex-serv1.c 2005-09-23 02:23:03.000000000 +0200 +++ examples/ex-serv1.c 2005-10-29 15:01:33.000000000 +0200 @@ -2,10 +2,14 @@ #include #include #include -#include -#include -#include -#include +#ifdef _WIN32 + #include +#else + #include + #include + #include + #include +#endif #include #include #include diff -ruN examples.old/ex-serv-anon.c examples/ex-serv-anon.c --- examples.old/ex-serv-anon.c 2005-09-23 02:23:03.000000000 +0200 +++ examples/ex-serv-anon.c 2005-10-29 15:02:03.000000000 +0200 @@ -2,10 +2,14 @@ #include #include #include -#include -#include -#include -#include +#ifdef _WIN32 + #include +#else + #include + #include + #include + #include +#endif #include #include #include diff -ruN examples.old/ex-serv-export.c examples/ex-serv-export.c --- examples.old/ex-serv-export.c 2005-09-23 02:23:03.000000000 +0200 +++ examples/ex-serv-export.c 2005-10-29 15:02:38.000000000 +0200 @@ -2,10 +2,14 @@ #include #include #include -#include -#include -#include -#include +#ifdef _WIN32 + #include +#else + #include + #include + #include + #include +#endif #include #include #include diff -ruN examples.old/ex-serv-pgp.c examples/ex-serv-pgp.c --- examples.old/ex-serv-pgp.c 2005-09-23 02:23:03.000000000 +0200 +++ examples/ex-serv-pgp.c 2005-10-29 15:03:10.000000000 +0200 @@ -2,10 +2,14 @@ #include #include #include -#include -#include -#include -#include +#ifdef _WIN32 + #include +#else + #include + #include + #include + #include +#endif #include #include #include diff -ruN examples.old/ex-serv-srp.c examples/ex-serv-srp.c --- examples.old/ex-serv-srp.c 2005-09-23 02:23:03.000000000 +0200 +++ examples/ex-serv-srp.c 2005-10-29 15:03:32.000000000 +0200 @@ -2,10 +2,14 @@ #include #include #include -#include -#include -#include -#include +#ifdef _WIN32 + #include +#else + #include + #include + #include + #include +#endif #include #include #include diff -ruN examples.old/tcp.c examples/tcp.c --- examples.old/tcp.c 2005-08-12 12:13:40.000000000 +0200 +++ examples/tcp.c 2005-10-29 14:58:29.000000000 +0200 @@ -1,10 +1,17 @@ #include #include #include -#include -#include -#include -#include + +#ifdef _WIN32 + #include + #define SHUT_RDWR SD_BOTH + #define inet_pton(x,y,z) +#else + #include + #include + #include + #include +#endif #include #define SA struct sockaddr From gareuselesinge at users.sourceforge.net Sat Oct 29 19:36:03 2005 From: gareuselesinge at users.sourceforge.net (Enrico Tassi) Date: Sat, 29 Oct 2005 19:36:03 +0200 Subject: [gnutls-dev] Re: gnutls 1.2.8 and mingw32 In-Reply-To: References: <20051024080308.GA7210@garfield> <20051024121205.GA8158@garfield> <20051024140913.GA9047@garfield> Message-ID: <20051029173603.GA31760@garfield> On Tue, Oct 25, 2005 at 12:58:29PM +0200, Simon Josefsson wrote: > Enrico Tassi writes: > > > On Mon, Oct 24, 2005 at 03:52:09PM +0200, Simon Josefsson wrote: > >> > We hope to release soon a new version of FreePOPs based on > >> > libcurl-gnutls and then we will have a feedback from the users > >> > (even if only a small part of FreePOPs plugins use https://). > >> > >> That would be good. I am preparing the GnuTLS 1.2.9 release now, and > >> fixing the inet_ntop problem is the only pending issue I have right > >> now. There weren't any other mingw32 problems building GnuTLS 1.2.8, > >> where there? Let me know, and I'll try to resolve them. I've release a new version of freepops based on gnutls 1.2.8 and some users had this assert failure. I'm not sure I can help more, but if you need some tests... just ask. Assertion failed: *lock == MUTEX_UNLOCKED, file ath.c, line 184 I've to say that FreePOPs is a multithreaded application that uses a win32-port of pthreads. ciao -- Enrico Tassi From n.mavrogiannopoulos at gmail.com Sun Oct 30 13:23:30 2005 From: n.mavrogiannopoulos at gmail.com (Nikos Mavrogiannopoulos) Date: Sun, 30 Oct 2005 14:23:30 +0200 Subject: [gnutls-dev] Re: gnutls 1.2.8 and mingw32 In-Reply-To: <20051029173603.GA31760@garfield> References: <20051024080308.GA7210@garfield> <20051029173603.GA31760@garfield> Message-ID: <200510301323.30955.n.mavrogiannopoulos@gmail.com> On Saturday 29 October 2005 19:36, Enrico Tassi wrote: > I've release a new version of freepops based on gnutls 1.2.8 and some > users had this assert failure. I'm not sure I can help more, but if you > need some tests... just ask. > Assertion failed: *lock == MUTEX_UNLOCKED, file ath.c, line 184 > I've to say that FreePOPs is a multithreaded application that uses a > win32-port of pthreads. Did you register the libgcrypt's callbacks for thread locking? From jas at extundo.com Mon Oct 31 10:30:43 2005 From: jas at extundo.com (Simon Josefsson) Date: Mon, 31 Oct 2005 10:30:43 +0100 Subject: [gnutls-dev] Re: gnutls 1.2.8 and mingw32 In-Reply-To: <20051029131805.GA6501@garfield> (Enrico Tassi's message of "Sat, 29 Oct 2005 15:18:05 +0200") References: <20051024080308.GA7210@garfield> <20051024121205.GA8158@garfield> <20051024140913.GA9047@garfield> <20051029131805.GA6501@garfield> Message-ID: Enrico Tassi writes: > I've tested 20051029 and I attach the patch to make the doc/examples/ > stuff compile cleanly (but it will not work, since there is no inet_pton > under mingw). If it won't work, could you instead make the examples #include from gnulib, and link to gnulib? Then it might even work. And protect all other #include's that doesn't exist on mingw32. I'm sorry I can't test mingw32, I was able to build libgpg-error but not libgcrypt. Thanks, Simon