From gnutls-dev at mlists.thewrittenword.com  Mon Oct  3 18:44:56 2005
From: gnutls-dev at mlists.thewrittenword.com (Albert Chin)
Date: Mon, 3 Oct 2005 11:44:56 -0500
Subject: [gnutls-dev] SASL/EXTERNAL
Message-ID: <20051003164456.GA94294@mail1.thewrittenword.com>

According to:
  http://www.stacken.kth.se/lists/heimdal-discuss/2000-07/msg00068.html

  OpenLDAP 2.x SASL/EXTERNAL(TLS) support is under development is
  based upon OpenSSL.

We are investigating the addition of GnuTLS support for OpenLDAP. If
SASL EXTERNAL is tied to OpenSSL in OpenLDAP, is this something GnuTLS
currently provides or could provide? 

-- 
albert chin (china at thewrittenword.com)



From jas at extundo.com  Fri Oct  7 15:32:24 2005
From: jas at extundo.com (Simon Josefsson)
Date: Fri, 07 Oct 2005 15:32:24 +0200
Subject: [gnutls-dev] Re: SASL/EXTERNAL
In-Reply-To: <20051003164456.GA94294@mail1.thewrittenword.com> (Albert Chin's
	message of "Mon, 3 Oct 2005 11:44:56 -0500")
References: <20051003164456.GA94294@mail1.thewrittenword.com>
Message-ID: <ilull15qwpj.fsf@latte.josefsson.org>

Albert Chin <gnutls-dev at mlists.thewrittenword.com> writes:

> According to:
>   http://www.stacken.kth.se/lists/heimdal-discuss/2000-07/msg00068.html
>
>   OpenLDAP 2.x SASL/EXTERNAL(TLS) support is under development is
>   based upon OpenSSL.
>
> We are investigating the addition of GnuTLS support for OpenLDAP. If
> SASL EXTERNAL is tied to OpenSSL in OpenLDAP, is this something GnuTLS
> currently provides or could provide? 

If the SASL EXTERNAL hooks in OpenLDAP only check whether OpenSSL is
enabled, then it won't work.  I imagine that you would have to change
OpenLDAP's EXTERNAL code to also check if GnuTLS layers are present.
That should be simple to add.

Btw, I recall that Cyrus SASL, or at least some of the Cyrus SASL
modules, depend on OpenSSL.  GNU SASL might be another SASL
alternative, and I have experience integrating it together with GnuTLS
(although not in OpenLDAP).

Regards,
Simon



From jas at extundo.com  Fri Oct  7 15:27:10 2005
From: jas at extundo.com (Simon Josefsson)
Date: Fri, 07 Oct 2005 15:27:10 +0200
Subject: [gnutls-dev] GnuTLS 1.2.8
Message-ID: <ilupsqhqwy9.fsf@latte.josefsson.org>

We are pleased to announce the availability of GnuTLS version 1.2.8.

GnuTLS is a modern C library that implement the standard network
security protocol Transport Layer Security (TLS), for use by network
applications.

Noteworthy changes since version 1.2.7:
- Libgcrypt 1.2.2 is required to fix a bug for forking GnuTLS servers.
- Don't install the auxilliary libexamples library used by the
  examples in doc/examples/ on "make install", report and tiny patch
  from Thomas Klausner <tk at giga.or.at>.
- If you pass a X.509 CA or PGP trust database to the command line
  tool, it will now abort the connection if the server certificate
  validation fails.  Use the parameter --insecure to continue even
  after certificate validation failures.  Inspired from discussion
  with Alexander Kotelnikov <sacha at myxomop.com>.
- The test for socklen_t has been moved to gnulib.
- Link failures for duplicate or missing "program_name" symbol has been fixed,
  patch from Martin Lambers <marlam at marlam.de>.
- The command line tool and the examples no longer uses mmap or bzero,
  to make them more portable, patch from Martin Lambers
  <marlam at marlam.de>.
- Made the PKCS #12 API handle null passwords. Based on patch by
  Anton Altaparmakov <aia21 at cam.ac.uk>.
- The GTK-DOC manual should build with current released tools.
  (But a copy of the output is included, so the tools are not required.)
- The inet_ntop function is now used through gnulib.
- API and ABI modifications:
  No changes since last version.

Improving GnuTLS is costly, but you can help!  We are looking for
organizations that find GnuTLS useful and wish to contribute back.
You can contribute by reporting bugs, improve the software, or donate
money or equipment.

Commercial support contracts for GnuTLS are available, and they help
finance continued maintenance.  Simon Josefsson Datakonsult, a
Stockholm based privately held company, is currently funding GnuTLS
maintenance.  We are always looking for interesting development
projects.

If you need help to use GnuTLS, or want to help others, you are
invited to join our help-gnutls mailing list, see:
<http://lists.gnu.org/mailman/listinfo/help-gnutls>.

The project page of the library is available at:
  http://www.gnutls.org/
  http://www.gnu.org/software/gnutls/
  http://josefsson.org/gnutls/ (updated fastest)

Here are the compressed sources:
  http://josefsson.org/gnutls/releases/gnutls-1.2.8.tar.bz2 (2.5MB)
  ftp://ftp.gnutls.org/pub/gnutls/gnutls-1.2.8.tar.bz2 (2.5MB)

Here are GPG detached signatures signed using key 0xB565716F:
  http://josefsson.org/gnutls/releases/gnutls-1.2.8.tar.bz2.sig
  ftp://ftp.gnutls.org/pub/gnutls/gnutls-1.2.8.tar.bz2.sig

The software is cryptographically signed by the author using an
OpenPGP key identified by the following information:
  1280R/B565716F 2002-05-05 [expires: 2006-02-28]
  Key fingerprint = 0424 D4EE 81A0 E3D1 19C6  F835 EDA2 1E94 B565 716F

The key is available from:
  http://josefsson.org/key.txt
  dns:b565716f.josefsson.org?TYPE=CERT

Here are the build reports for various platforms:
  http://josefsson.org/autobuild-logs/gnutls.html

Here are the SHA-1 checksums:

b49c86de7c10946bf440ea146f89a31474297872  gnutls-1.2.8.tar.bz2
baf44ff87e373005d3601fdde7d21f39c1269516  gnutls-1.2.8.tar.bz2.sig

Enjoy,
Nikos and Simon



From gareuselesinge at users.sourceforge.net  Mon Oct 24 10:03:08 2005
From: gareuselesinge at users.sourceforge.net (Enrico Tassi)
Date: Mon, 24 Oct 2005 10:03:08 +0200
Subject: [gnutls-dev] gnutls 1.2.8 and mingw32
Message-ID: <20051024080308.GA7210@garfield>

I've few problems in cross-compiling gnutls 1.2.8.

1) inet_ntop.h includes sys/socket.h and other unix specific headers
   while it should do like common.h where this inclusion is conditional
   to the _WIN32 define

2) even if I fix the first problem EAFNOSUPPORT is still undefined in
   inet_ntop.c (so I added a dummy #define setting it equal to 1) 

regards
-- 
Enrico Tassi



From jas at extundo.com  Mon Oct 24 13:46:19 2005
From: jas at extundo.com (Simon Josefsson)
Date: Mon, 24 Oct 2005 13:46:19 +0200
Subject: [gnutls-dev] Re: gnutls 1.2.8 and mingw32
References: <20051024080308.GA7210@garfield>
Message-ID: <iluk6g387ec.fsf@latte.josefsson.org>

Enrico Tassi <gareuselesinge at users.sourceforge.net> writes:

> I've few problems in cross-compiling gnutls 1.2.8.

Thanks!  After fixing the problems, did the resulting GnuTLS build
work?  I.e., if you built the "anonself" self test, did it work if you
copied it to a Windows machine?

Did you see the thread "Build gnutls on windows" on help-gnutls?  It
seems mingw32 is not a POSIX compatible platform, so even if you
manage to get things to link, the POSIX functions "send", "recv" etc
may not behave as expected.  In particular, they supposedly doesn't
set errno.  I think we could solve all of these problems through
gnulib modules, but it may be quite some work.  Compare "plibc", a
POSIX layer for mingw32.  I believe GnuTLS require POSIX behavior in a
few other places too.

> 1) inet_ntop.h includes sys/socket.h and other unix specific headers
>    while it should do like common.h where this inclusion is conditional
>    to the _WIN32 define
>
> 2) even if I fix the first problem EAFNOSUPPORT is still undefined in
>    inet_ntop.c (so I added a dummy #define setting it equal to 1) 

I'll look into fixing inet_ntop.

Thanks,
Simon



From gareuselesinge at users.sourceforge.net  Mon Oct 24 14:12:05 2005
From: gareuselesinge at users.sourceforge.net (Enrico Tassi)
Date: Mon, 24 Oct 2005 14:12:05 +0200
Subject: [gnutls-dev] Re: gnutls 1.2.8 and mingw32
In-Reply-To: <iluk6g387ec.fsf@latte.josefsson.org>
References: <20051024080308.GA7210@garfield>
	<iluk6g387ec.fsf@latte.josefsson.org>
Message-ID: <20051024121205.GA8158@garfield>

On Mon, Oct 24, 2005 at 01:46:19PM +0200, Simon Josefsson wrote:
> Enrico Tassi <gareuselesinge at users.sourceforge.net> writes:
> 
> > I've few problems in cross-compiling gnutls 1.2.8.
> 
> Thanks!  After fixing the problems, did the resulting GnuTLS build
> work?  I.e., if you built the "anonself" self test, did it work if you
> copied it to a Windows machine?

I've not tried the anonself test, but I use libcurl on the win32 port
of FreePOPs (http://www.freepops.org) and they seem to work fine.

A benefit is that the curl.exe (and freepopsd.exe) now run fine
with wine (while there were errors with open-ssl) and I downloaded an
https:// link using wine and curl.exe.

We hope to release soon a new version of FreePOPs based on
libcurl-gnutls and then we will have a feedback from the users
(even if only a small part of FreePOPs plugins use https://).

> Did you see the thread "Build gnutls on windows" on help-gnutls?  It
> seems mingw32 is not a POSIX compatible platform, so even if you
> manage to get things to link, the POSIX functions "send", "recv" etc
> may not behave as expected.  In particular, they supposedly doesn't
> set errno.  I think we could solve all of these problems through
> gnulib modules, but it may be quite some work.  Compare "plibc", a
> POSIX layer for mingw32.  I believe GnuTLS require POSIX behavior in a
> few other places too.

I'll have a look ASAP
-- 
Enrico Tassi



From jas at extundo.com  Mon Oct 24 15:52:09 2005
From: jas at extundo.com (Simon Josefsson)
Date: Mon, 24 Oct 2005 15:52:09 +0200
Subject: [gnutls-dev] Re: gnutls 1.2.8 and mingw32
In-Reply-To: <20051024121205.GA8158@garfield> (Enrico Tassi's message of "Mon, 
	24 Oct 2005 14:12:05 +0200")
References: <20051024080308.GA7210@garfield>
	<iluk6g387ec.fsf@latte.josefsson.org> <20051024121205.GA8158@garfield>
Message-ID: <iluu0f76n06.fsf@latte.josefsson.org>

Enrico Tassi <gareuselesinge at users.sourceforge.net> writes:

> On Mon, Oct 24, 2005 at 01:46:19PM +0200, Simon Josefsson wrote:
>> Enrico Tassi <gareuselesinge at users.sourceforge.net> writes:
>> 
>> > I've few problems in cross-compiling gnutls 1.2.8.
>> 
>> Thanks!  After fixing the problems, did the resulting GnuTLS build
>> work?  I.e., if you built the "anonself" self test, did it work if you
>> copied it to a Windows machine?
>
> I've not tried the anonself test, but I use libcurl on the win32 port
> of FreePOPs (http://www.freepops.org) and they seem to work fine.

Wow!  Nice.  So we are close to working on mingw32 then.  Given the
problems described in the thread on help-gnutls, I would have thought
there would be larger problems.

> We hope to release soon a new version of FreePOPs based on
> libcurl-gnutls and then we will have a feedback from the users
> (even if only a small part of FreePOPs plugins use https://).

That would be good.  I am preparing the GnuTLS 1.2.9 release now, and
fixing the inet_ntop problem is the only pending issue I have right
now.  There weren't any other mingw32 problems building GnuTLS 1.2.8,
where there?  Let me know, and I'll try to resolve them.

Thanks,
Simon



From gareuselesinge at users.sourceforge.net  Mon Oct 24 16:09:13 2005
From: gareuselesinge at users.sourceforge.net (Enrico Tassi)
Date: Mon, 24 Oct 2005 16:09:13 +0200
Subject: [gnutls-dev] Re: gnutls 1.2.8 and mingw32
In-Reply-To: <iluu0f76n06.fsf@latte.josefsson.org>
References: <20051024080308.GA7210@garfield>
	<iluk6g387ec.fsf@latte.josefsson.org>
	<20051024121205.GA8158@garfield>
	<iluu0f76n06.fsf@latte.josefsson.org>
Message-ID: <20051024140913.GA9047@garfield>

On Mon, Oct 24, 2005 at 03:52:09PM +0200, Simon Josefsson wrote:
> > We hope to release soon a new version of FreePOPs based on
> > libcurl-gnutls and then we will have a feedback from the users
> > (even if only a small part of FreePOPs plugins use https://).
> 
> That would be good.  I am preparing the GnuTLS 1.2.9 release now, and
> fixing the inet_ntop problem is the only pending issue I have right
> now.  There weren't any other mingw32 problems building GnuTLS 1.2.8,
> where there?  Let me know, and I'll try to resolve them.

I use the mingw debian package and the main remaining issue is that
there is no dll for wsock32.dll so I had to hack the libtool/configure
just to add the proper -l option  (I'm not an autotools guru, so maybe
the solution was cleaner). In mingw I have only wsock32.a that, if
statically linked, closes all the unresolved symbols of libgnutls.dll
producing a "nice" dll. Maybe the solution should come from mingw...
I've not investigated furter.

JFYI I attach the .sh script I use to compile the dll

ciao
-- 
Enrico Tassi
-------------- next part --------------
A non-text attachment was scrubbed...
Name: gnutls.sh
Type: application/x-sh
Size: 2515 bytes
Desc: not available
URL: </pipermail/attachments/20051024/57aacde9/attachment.sh>

From wk at gnupg.org  Mon Oct 24 17:31:22 2005
From: wk at gnupg.org (Werner Koch)
Date: Mon, 24 Oct 2005 17:31:22 +0200
Subject: [gnutls-dev] Re: gnutls 1.2.8 and mingw32
In-Reply-To: <20051024140913.GA9047@garfield> (Enrico Tassi's message of "Mon, 
	24 Oct 2005 16:09:13 +0200")
References: <20051024080308.GA7210@garfield>
	<iluk6g387ec.fsf@latte.josefsson.org> <20051024121205.GA8158@garfield>
	<iluu0f76n06.fsf@latte.josefsson.org> <20051024140913.GA9047@garfield>
Message-ID: <87hdb77wz9.fsf@wheatstone.g10code.de>

On Mon, 24 Oct 2005 16:09:13 +0200, Enrico Tassi said:

> there is no dll for wsock32.dll so I had to hack the libtool/configure
> just to add the proper -l option  (I'm not an autotools guru, so maybe
> the solution was cleaner). In mingw I have only wsock32.a that, if

Put this into configure.ac:

case "${host}" in
    *-mingw32*)
	W32LIBS="-lwsock32"
        ;;
    *)
       ;;
esac
AC_SUBST(W32LIBS)

and this:

LDADD = $(other_libs) $(W32LIBS)

into the Makefile.am.

We use this in gpg and other software for years.  The Debian mingw32
packages works just fine - you are using Sid, right? 


Shalom-Salam,

   Werner






From gareuselesinge at users.sourceforge.net  Mon Oct 24 19:08:47 2005
From: gareuselesinge at users.sourceforge.net (Enrico Tassi)
Date: Mon, 24 Oct 2005 19:08:47 +0200
Subject: [gnutls-dev] Re: gnutls 1.2.8 and mingw32
In-Reply-To: <87hdb77wz9.fsf@wheatstone.g10code.de>
References: <20051024080308.GA7210@garfield>
	<iluk6g387ec.fsf@latte.josefsson.org>
	<20051024121205.GA8158@garfield>
	<iluu0f76n06.fsf@latte.josefsson.org>
	<20051024140913.GA9047@garfield>
	<87hdb77wz9.fsf@wheatstone.g10code.de>
Message-ID: <20051024170847.GA28307@garfield>

On Mon, Oct 24, 2005 at 05:31:22PM +0200, Werner Koch wrote:
> > there is no dll for wsock32.dll so I had to hack the libtool/configure
> > just to add the proper -l option  (I'm not an autotools guru, so maybe
> > the solution was cleaner). In mingw I have only wsock32.a that, if
> 
> Put this into configure.ac:
> 
> case "${host}" in
>     *-mingw32*)
> 	W32LIBS="-lwsock32"
>         ;;
>     *)
>        ;;
> esac
> AC_SUBST(W32LIBS)
> 
> and this:
> 
> LDADD = $(other_libs) $(W32LIBS)
> 
> into the Makefile.am.

thanks!

> We use this in gpg and other software for years.  The Debian mingw32
> packages works just fine - you are using Sid, right? 

sure.

Is there a way to build a "stub" libwsock32.dll with libtool so that
there is no need of hacking configure.in and Makefile.am?

thanks
-- 
Enrico Tassi



From wk at gnupg.org  Tue Oct 25 12:33:54 2005
From: wk at gnupg.org (Werner Koch)
Date: Tue, 25 Oct 2005 12:33:54 +0200
Subject: [gnutls-dev] Re: gnutls 1.2.8 and mingw32
In-Reply-To: <20051024170847.GA28307@garfield> (Enrico Tassi's message of
	"Mon, 24 Oct 2005 19:08:47 +0200")
References: <20051024080308.GA7210@garfield>
	<iluk6g387ec.fsf@latte.josefsson.org> <20051024121205.GA8158@garfield>
	<iluu0f76n06.fsf@latte.josefsson.org> <20051024140913.GA9047@garfield>
	<87hdb77wz9.fsf@wheatstone.g10code.de>
	<20051024170847.GA28307@garfield>
Message-ID: <87slup7unh.fsf@wheatstone.g10code.de>

On Mon, 24 Oct 2005 19:08:47 +0200, Enrico Tassi said:

> Is there a way to build a "stub" libwsock32.dll with libtool so that
> there is no need of hacking configure.in and Makefile.am?

Just take the def file and build a new import library.  Something similar
to 

  # W32API 3.2 comes with an unusable libmapi32.a.  We build our own
  # version.  Note the omission of -k (--kill-at) from the DLLTOOL
  # command line.  We also create our own virtual copies to the _static_
  # versions of GPGME and gpg-error, because we want to link to them
  # statically, and not dynamically (otherwise Outlook would not find
  # them).
  gpgol_DEPENDENCIES = libmapi32.a libgpgme.a libgpg-error.a
  
  libmapi32.a: mapi32.def
  	$(DLLTOOL) --output-lib $@ --def $<
  


Salam-Shalom,

   Werner




From jas at extundo.com  Tue Oct 25 12:58:29 2005
From: jas at extundo.com (Simon Josefsson)
Date: Tue, 25 Oct 2005 12:58:29 +0200
Subject: [gnutls-dev] Re: gnutls 1.2.8 and mingw32
In-Reply-To: <20051024140913.GA9047@garfield> (Enrico Tassi's message of "Mon, 
	24 Oct 2005 16:09:13 +0200")
References: <20051024080308.GA7210@garfield>
	<iluk6g387ec.fsf@latte.josefsson.org> <20051024121205.GA8158@garfield>
	<iluu0f76n06.fsf@latte.josefsson.org> <20051024140913.GA9047@garfield>
Message-ID: <iluek69q2wa.fsf@latte.josefsson.org>

Enrico Tassi <gareuselesinge at users.sourceforge.net> writes:

> On Mon, Oct 24, 2005 at 03:52:09PM +0200, Simon Josefsson wrote:
>> > We hope to release soon a new version of FreePOPs based on
>> > libcurl-gnutls and then we will have a feedback from the users
>> > (even if only a small part of FreePOPs plugins use https://).
>> 
>> That would be good.  I am preparing the GnuTLS 1.2.9 release now, and
>> fixing the inet_ntop problem is the only pending issue I have right
>> now.  There weren't any other mingw32 problems building GnuTLS 1.2.8,
>> where there?  Let me know, and I'll try to resolve them.
>
> I use the mingw debian package and the main remaining issue is that
> there is no dll for wsock32.dll so I had to hack the libtool/configure
> just to add the proper -l option  (I'm not an autotools guru, so maybe
> the solution was cleaner). In mingw I have only wsock32.a that, if
> statically linked, closes all the unresolved symbols of libgnutls.dll
> producing a "nice" dll. Maybe the solution should come from mingw...
> I've not investigated furter.
>
> JFYI I attach the .sh script I use to compile the dll

Thanks, I'll look into fixing this.

Btw, I believe I have fixed inet_ntop, please test:
http://josefsson.org/daily/gnutls/gnutls-20051025.tar.gz

Thanks,
Simon



From jas at extundo.com  Thu Oct 27 12:08:35 2005
From: jas at extundo.com (Simon Josefsson)
Date: Thu, 27 Oct 2005 12:08:35 +0200
Subject: [gnutls-dev] Re: Certificate verification failed
In-Reply-To: <200510271129.44813.nmav@gnutls.org> (Nikos Mavrogiannopoulos's
	message of "Thu, 27 Oct 2005 11:29:44 +0200")
References: <17247.59321.125197.576087@kappa.ac93.org>
	<200510262330.54617.nmav@gnutls.org>
	<iluk6fzjq3e.fsf@latte.josefsson.org>
	<200510271129.44813.nmav@gnutls.org>
Message-ID: <iluvezji864.fsf@latte.josefsson.org>

Nikos Mavrogiannopoulos <nmav at gnutls.org> writes:

>> I think we should disable both MD2 and MD5, and introduce an API to
>> modify gnutls_certificate_verify_peers2, a'la
>>   gnutls_enable_insecure_algorithm (&session, GNUTLS_SIGN_RSA_MD2)
> This will not be necessary if we introduce the flags below. verify_peers2  
> will use the flags from gnutls_certificate_set_verify_flags().

Ah, right, I forgot about that interface.  Nice.

>> and a new gnutls_certificate_verify_flags enumeration type, for
>> gnutls_x509_crt_verify calls, e.g.:
>>   GNUTLS_VERIFY_ALLOW_SIGN_RSA_MD2
>>   GNUTLS_VERIFY_ALLOW_SIGN_RSA_MD5
> Yes it is indeed a very nice idea. Security must be an issue in the library.

Right.  I think the defaults should be slightly conservative.  Given
that MD2 is broken, and there is even information on how to produce
certificates with colliding signatures for MD5, I think we are way
passed the point of being slightly conservative in disabling them.

But we should have a way to re-enable them, first, to allow for
interoperability.

I'll take a stab at fixing this later today...

Thanks,
Simon



From gareuselesinge at users.sourceforge.net  Sat Oct 29 15:18:05 2005
From: gareuselesinge at users.sourceforge.net (Enrico Tassi)
Date: Sat, 29 Oct 2005 15:18:05 +0200
Subject: [gnutls-dev] Re: gnutls 1.2.8 and mingw32
In-Reply-To: <iluek69q2wa.fsf@latte.josefsson.org>
References: <20051024080308.GA7210@garfield>
	<iluk6g387ec.fsf@latte.josefsson.org>
	<20051024121205.GA8158@garfield>
	<iluu0f76n06.fsf@latte.josefsson.org>
	<20051024140913.GA9047@garfield>
	<iluek69q2wa.fsf@latte.josefsson.org>
Message-ID: <20051029131805.GA6501@garfield>

On Tue, Oct 25, 2005 at 12:58:29PM +0200, Simon Josefsson wrote:
> Enrico Tassi <gareuselesinge at users.sourceforge.net> writes:
> 
> > On Mon, Oct 24, 2005 at 03:52:09PM +0200, Simon Josefsson wrote:
> >> > We hope to release soon a new version of FreePOPs based on
> >> > libcurl-gnutls and then we will have a feedback from the users
> >> > (even if only a small part of FreePOPs plugins use https://).
> >> 
> >> That would be good.  I am preparing the GnuTLS 1.2.9 release now, and
> >> fixing the inet_ntop problem is the only pending issue I have right
> >> now.  There weren't any other mingw32 problems building GnuTLS 1.2.8,
> >> where there?  Let me know, and I'll try to resolve them.
> >
> > I use the mingw debian package and the main remaining issue is that
> > there is no dll for wsock32.dll so I had to hack the libtool/configure
> > just to add the proper -l option  (I'm not an autotools guru, so maybe
> > the solution was cleaner). In mingw I have only wsock32.a that, if
> > statically linked, closes all the unresolved symbols of libgnutls.dll
> > producing a "nice" dll. Maybe the solution should come from mingw...
> > I've not investigated furter.
> >
> > JFYI I attach the .sh script I use to compile the dll
> 
> Thanks, I'll look into fixing this.
> 
> Btw, I believe I have fixed inet_ntop, please test:
> http://josefsson.org/daily/gnutls/gnutls-20051025.tar.gz

I've tested 20051029 and I attach the patch to make the doc/examples/
stuff compile cleanly (but it will not work, since there is no inet_pton
under mingw).

-- 
Enrico Tassi
-------------- next part --------------
diff -ruN examples.old/ex-cert-select.c examples/ex-cert-select.c
--- examples.old/ex-cert-select.c	2005-09-23 02:23:03.000000000 +0200
+++ examples/ex-cert-select.c	2005-10-29 14:58:29.000000000 +0200
@@ -2,16 +2,22 @@
 #include <stdio.h>
 #include <stdlib.h>
 #include <string.h>
-#include <sys/types.h>
-#include <sys/socket.h>
-#include <netinet/in.h>
-#include <arpa/inet.h>
+
+#ifdef _WIN32
+ #include <windows.h>
+ #define inet_pton(x,y,z)
+#else
+ #include <sys/types.h>
+ #include <sys/socket.h>
+ #include <netinet/in.h>
+ #include <arpa/inet.h>
+#endif
+
 #include <unistd.h>
+
 #include <sys/stat.h>
 #include <gnutls/gnutls.h>
 #include <gnutls/x509.h>
-#include <sys/types.h>
-#include <sys/stat.h>
 #include <fcntl.h>
 
 /* A TLS client that loads the certificate and key.
diff -ruN examples.old/ex-client1.c examples/ex-client1.c
--- examples.old/ex-client1.c	2005-08-11 02:23:02.000000000 +0200
+++ examples/ex-client1.c	2005-10-29 14:59:43.000000000 +0200
@@ -2,10 +2,14 @@
 #include <stdio.h>
 #include <stdlib.h>
 #include <string.h>
-#include <sys/types.h>
-#include <sys/socket.h>
-#include <netinet/in.h>
-#include <arpa/inet.h>
+#ifdef _WIN32
+ #include <windows.h>
+#else
+ #include <sys/types.h>
+ #include <sys/socket.h>
+ #include <netinet/in.h>
+ #include <arpa/inet.h>
+#endif
 #include <unistd.h>
 #include <gnutls/gnutls.h>
 
diff -ruN examples.old/ex-client2.c examples/ex-client2.c
--- examples.old/ex-client2.c	2005-08-13 02:23:03.000000000 +0200
+++ examples/ex-client2.c	2005-10-29 15:00:17.000000000 +0200
@@ -2,10 +2,14 @@
 #include <stdio.h>
 #include <stdlib.h>
 #include <string.h>
-#include <sys/types.h>
-#include <sys/socket.h>
-#include <netinet/in.h>
-#include <arpa/inet.h>
+#ifdef _WIN32
+ #include <windows.h>
+#else
+ #include <sys/types.h>
+ #include <sys/socket.h>
+ #include <netinet/in.h>
+ #include <arpa/inet.h>
+#endif
 #include <unistd.h>
 #include <gnutls/gnutls.h>
 
diff -ruN examples.old/ex-serv1.c examples/ex-serv1.c
--- examples.old/ex-serv1.c	2005-09-23 02:23:03.000000000 +0200
+++ examples/ex-serv1.c	2005-10-29 15:01:33.000000000 +0200
@@ -2,10 +2,14 @@
 #include <stdio.h>
 #include <stdlib.h>
 #include <errno.h>
-#include <sys/types.h>
-#include <sys/socket.h>
-#include <netinet/in.h>
-#include <arpa/inet.h>
+#ifdef _WIN32
+ #include <windows.h>
+#else
+ #include <sys/types.h>
+ #include <sys/socket.h>
+ #include <netinet/in.h>
+ #include <arpa/inet.h>
+#endif
 #include <string.h>
 #include <unistd.h>
 #include <gnutls/gnutls.h>
diff -ruN examples.old/ex-serv-anon.c examples/ex-serv-anon.c
--- examples.old/ex-serv-anon.c	2005-09-23 02:23:03.000000000 +0200
+++ examples/ex-serv-anon.c	2005-10-29 15:02:03.000000000 +0200
@@ -2,10 +2,14 @@
 #include <stdio.h>
 #include <stdlib.h>
 #include <errno.h>
-#include <sys/types.h>
-#include <sys/socket.h>
-#include <netinet/in.h>
-#include <arpa/inet.h>
+#ifdef _WIN32
+ #include <windows.h>
+#else
+ #include <sys/types.h>
+ #include <sys/socket.h>
+ #include <netinet/in.h>
+ #include <arpa/inet.h>
+#endif
 #include <string.h>
 #include <unistd.h>
 #include <gnutls/gnutls.h>
diff -ruN examples.old/ex-serv-export.c examples/ex-serv-export.c
--- examples.old/ex-serv-export.c	2005-09-23 02:23:03.000000000 +0200
+++ examples/ex-serv-export.c	2005-10-29 15:02:38.000000000 +0200
@@ -2,10 +2,14 @@
 #include <stdio.h>
 #include <stdlib.h>
 #include <errno.h>
-#include <sys/types.h>
-#include <sys/socket.h>
-#include <netinet/in.h>
-#include <arpa/inet.h>
+#ifdef _WIN32
+ #include <windows.h>
+#else
+ #include <sys/types.h>
+ #include <sys/socket.h>
+ #include <netinet/in.h>
+ #include <arpa/inet.h>
+#endif
 #include <string.h>
 #include <unistd.h>
 #include <gnutls/gnutls.h>
diff -ruN examples.old/ex-serv-pgp.c examples/ex-serv-pgp.c
--- examples.old/ex-serv-pgp.c	2005-09-23 02:23:03.000000000 +0200
+++ examples/ex-serv-pgp.c	2005-10-29 15:03:10.000000000 +0200
@@ -2,10 +2,14 @@
 #include <stdio.h>
 #include <stdlib.h>
 #include <errno.h>
-#include <sys/types.h>
-#include <sys/socket.h>
-#include <netinet/in.h>
-#include <arpa/inet.h>
+#ifdef _WIN32
+ #include <windows.h>
+#else
+ #include <sys/types.h>
+ #include <sys/socket.h>
+ #include <netinet/in.h>
+ #include <arpa/inet.h>
+#endif
 #include <string.h>
 #include <unistd.h>
 #include <gnutls/gnutls.h>
diff -ruN examples.old/ex-serv-srp.c examples/ex-serv-srp.c
--- examples.old/ex-serv-srp.c	2005-09-23 02:23:03.000000000 +0200
+++ examples/ex-serv-srp.c	2005-10-29 15:03:32.000000000 +0200
@@ -2,10 +2,14 @@
 #include <stdio.h>
 #include <stdlib.h>
 #include <errno.h>
-#include <sys/types.h>
-#include <sys/socket.h>
-#include <netinet/in.h>
-#include <arpa/inet.h>
+#ifdef _WIN32
+ #include <windows.h>
+#else
+ #include <sys/types.h>
+ #include <sys/socket.h>
+ #include <netinet/in.h>
+ #include <arpa/inet.h>
+#endif
 #include <string.h>
 #include <unistd.h>
 #include <gnutls/gnutls.h>
diff -ruN examples.old/tcp.c examples/tcp.c
--- examples.old/tcp.c	2005-08-12 12:13:40.000000000 +0200
+++ examples/tcp.c	2005-10-29 14:58:29.000000000 +0200
@@ -1,10 +1,17 @@
 #include <stdio.h>
 #include <stdlib.h>
 #include <string.h>
-#include <sys/types.h>
-#include <sys/socket.h>
-#include <netinet/in.h>
-#include <arpa/inet.h>
+
+#ifdef _WIN32
+ #include <windows.h>
+ #define SHUT_RDWR SD_BOTH
+ #define inet_pton(x,y,z)
+#else
+ #include <sys/types.h>
+ #include <sys/socket.h>
+ #include <netinet/in.h>
+ #include <arpa/inet.h>
+#endif
 #include <unistd.h>
 
 #define SA struct sockaddr

From gareuselesinge at users.sourceforge.net  Sat Oct 29 19:36:03 2005
From: gareuselesinge at users.sourceforge.net (Enrico Tassi)
Date: Sat, 29 Oct 2005 19:36:03 +0200
Subject: [gnutls-dev] Re: gnutls 1.2.8 and mingw32
In-Reply-To: <iluek69q2wa.fsf@latte.josefsson.org>
References: <20051024080308.GA7210@garfield>
	<iluk6g387ec.fsf@latte.josefsson.org>
	<20051024121205.GA8158@garfield>
	<iluu0f76n06.fsf@latte.josefsson.org>
	<20051024140913.GA9047@garfield>
	<iluek69q2wa.fsf@latte.josefsson.org>
Message-ID: <20051029173603.GA31760@garfield>

On Tue, Oct 25, 2005 at 12:58:29PM +0200, Simon Josefsson wrote:
> Enrico Tassi <gareuselesinge at users.sourceforge.net> writes:
> 
> > On Mon, Oct 24, 2005 at 03:52:09PM +0200, Simon Josefsson wrote:
> >> > We hope to release soon a new version of FreePOPs based on
> >> > libcurl-gnutls and then we will have a feedback from the users
> >> > (even if only a small part of FreePOPs plugins use https://).
> >> 
> >> That would be good.  I am preparing the GnuTLS 1.2.9 release now, and
> >> fixing the inet_ntop problem is the only pending issue I have right
> >> now.  There weren't any other mingw32 problems building GnuTLS 1.2.8,
> >> where there?  Let me know, and I'll try to resolve them.

I've release a new version of freepops based on gnutls 1.2.8 and some
users had this assert failure. I'm not sure I can help more, but if you
need some tests... just ask.

Assertion failed: *lock == MUTEX_UNLOCKED, file ath.c, line 184

I've to say that FreePOPs is a multithreaded application that uses a
win32-port of pthreads.

ciao
-- 
Enrico Tassi



From n.mavrogiannopoulos at gmail.com  Sun Oct 30 13:23:30 2005
From: n.mavrogiannopoulos at gmail.com (Nikos Mavrogiannopoulos)
Date: Sun, 30 Oct 2005 14:23:30 +0200
Subject: [gnutls-dev] Re: gnutls 1.2.8 and mingw32
In-Reply-To: <20051029173603.GA31760@garfield>
References: <20051024080308.GA7210@garfield>
	<iluek69q2wa.fsf@latte.josefsson.org>
	<20051029173603.GA31760@garfield>
Message-ID: <200510301323.30955.n.mavrogiannopoulos@gmail.com>

On Saturday 29 October 2005 19:36, Enrico Tassi wrote:

> I've release a new version of freepops based on gnutls 1.2.8 and some
> users had this assert failure. I'm not sure I can help more, but if you
> need some tests... just ask.
> Assertion failed: *lock == MUTEX_UNLOCKED, file ath.c, line 184
> I've to say that FreePOPs is a multithreaded application that uses a
> win32-port of pthreads.
Did you register the libgcrypt's callbacks for thread locking?



From jas at extundo.com  Mon Oct 31 10:30:43 2005
From: jas at extundo.com (Simon Josefsson)
Date: Mon, 31 Oct 2005 10:30:43 +0100
Subject: [gnutls-dev] Re: gnutls 1.2.8 and mingw32
In-Reply-To: <20051029131805.GA6501@garfield> (Enrico Tassi's message of "Sat, 
	29 Oct 2005 15:18:05 +0200")
References: <20051024080308.GA7210@garfield>
	<iluk6g387ec.fsf@latte.josefsson.org> <20051024121205.GA8158@garfield>
	<iluu0f76n06.fsf@latte.josefsson.org> <20051024140913.GA9047@garfield>
	<iluek69q2wa.fsf@latte.josefsson.org> <20051029131805.GA6501@garfield>
Message-ID: <ilu4q6yxccc.fsf@latte.josefsson.org>

Enrico Tassi <gareuselesinge at users.sourceforge.net> writes:

> I've tested 20051029 and I attach the patch to make the doc/examples/
> stuff compile cleanly (but it will not work, since there is no inet_pton
> under mingw).

If it won't work, could you instead make the examples #include
<inet_ntop.h> from gnulib, and link to gnulib?  Then it might even
work.  And protect all other #include's that doesn't exist on mingw32.

I'm sorry I can't test mingw32, I was able to build libgpg-error but
not libgcrypt.

Thanks,
Simon