Tag version 8.00

Signed-off-by: David Woodhouse <dwmw2@infradead.org>

diff --git a/configure.ac b/configure.ac
index b593e9af666a5c47ff545675cd68713a05258fe3..9c99301fbc0a5f559cb4f25d8bd60d80e675e535 100644 (file)
--- a/configure.ac
+++ b/configure.ac
@@ -1,4 +1,4 @@
-AC_INIT(openconnect, 7.08)
+AC_INIT(openconnect, 8.00)
 AC_CONFIG_HEADERS([config.h])
 
 PKG_PROG_PKG_CONFIG

diff --git a/openconnect.h b/openconnect.h
index a385f150f6105d26c2e5e6ee7bc75dbd0df2b060..0f83e37cd0c31a176f68eb71a1b9384a5d814ce6 100644 (file)
--- a/openconnect.h
+++ b/openconnect.h
@@ -36,7 +36,7 @@ extern "C" {
 #define OPENCONNECT_API_VERSION_MINOR 5
 
 /*
- * API version 5.5:
+ * API version 5.5 (v8.00; 2019-01-05):
  *  - add openconnect_set_version_string()
  *  - add openconnect_set_key_password()
  *  - Add openconnect_has_tss2_blob_support()

diff --git a/version.sh b/version.sh
index 0197279d097bd30ff9d8b5d9b28be8fc6e48e432..ef38f68d22fea97dfef2b2618a5f9ab83254da81 100755 (executable)
--- a/version.sh
+++ b/version.sh
@@ -1,6 +1,6 @@
 #!/bin/sh
 
-v="v7.08"
+v="v8.00"
 
 if [ -d ${GIT_DIR:-.git} ] && tag=`git describe --tags`; then
        v="$tag"

diff --git a/www/changelog.xml b/www/changelog.xml
index b4218c106524a102d0a2236f07e9d4251e1c0086..8530408b3b0067ef0e047d687fd81ea766c9a209 100644 (file)
--- a/www/changelog.xml
+++ b/www/changelog.xml
@@ -14,6 +14,12 @@
 <a href="http://git.infradead.org/users/dwmw2/openconnect.git">gitweb</a>.</p>
 <ul>
    <li><b>OpenConnect HEAD</b>
+     <ul>
+       <li><i>No changelog entries yet</i></li>
+     </ul><br/>
+  </li>
+  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-8.00.tar.gz">OpenConnect v8.00</a></b>
+     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-8.00.tar.gz.asc">PGP signature</a>)</i> &#8212; 2019-01-05
      <ul>
        <li>Clear form submissions (which may include passwords) before freeing (CVE-2018-20319).</li>
        <li>Allow form responses to be provided on command line.</li>

diff --git a/www/download.xml b/www/download.xml
index edec58d90ce9449de5c63c41c17012ba1c8bd07c..7e0eaec607b9bfb124cf072e282ff688e5d1b4a8 100644 (file)
--- a/www/download.xml
+++ b/www/download.xml
@@ -17,40 +17,26 @@
 
 <p>
 <!-- latest-release-start -->
-The latest release is <a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-7.08.tar.gz">OpenConnect v7.08</a>
-<i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-7.08.tar.gz.asc">PGP signature</a>)</i>,
-released on 2016-12-13 with the following changelog:</p>
+The latest release is <a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-8.00.tar.gz">OpenConnect v8.00</a>
+<i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-8.00.tar.gz.asc">PGP signature</a>)</i>,
+released on 2019-01-05 with the following changelog:</p>
      <ul>
-       <li>Add SHA256 support for server cert hashes.</li>
-       <li>Enable DHE ciphers for Cisco DTLS.</li>
-       <li>Increase initial oNCP configuration buffer size.</li>
-       <li>Reopen <tt>CONIN$</tt> when stdin is redirected on Windows.</li>
-       <li>Improve support for point-to-point routing on Windows.</li>
-       <li>Check for non-resumed DTLS sessions which may indicate a MiTM attack.</li>
-       <li>Add <tt>TUNIDX</tt> environment variable on Windows.</li>
-       <li>Fix compatibility with Pulse Secure 8.2R5.</li>
-       <li>Fix IPv6 support in Solaris.</li>
-       <li>Support DTLS automatic negotiation.</li>
-       <li>Support <tt>--key-password</tt> for GnuTLS PKCS#11 PIN.</li>
-       <li>Support automatic DTLS MTU detection with OpenSSL.</li>
-       <li>Drop support for combined GnuTLS/OpenSSL build.</li>
-       <li>Update OpenSSL to allow TLSv1.2, improve compatibility options.</li>
-       <li>Remove <tt>--no-cert-check</tt> option. It was being (mis)used.</li>
-       <li>Fix OpenSSL support for PKCS#11 EC keys without public key.</li>
-       <li>Support for final OpenSSL 1.1 release.</li>
-       <li>Fix polling/retry on "tun" socket when buffers full.</li>
-       <li>Fix AnyConnect server-side MTU setting.</li>
-       <li>Fix ESP replay detection.</li>
-       <li>Allow build with LibreSSL <i>(for fetishists only; do not use this as DTLS is broken)</i>.</li>
-       <li>Add certificate torture test suite.</li>
-       <li>Support PKCS#11 PIN via <tt>pin-value=</tt> and <tt>--key-password</tt> for OpenSSL.</li>
-       <li>Fix integer overflow issues with ESP packet replay detection.</li>
-       <li>Add <tt>--pass-tos</tt> option as in OpenVPN.</li>
-       <li>Support rôle selection form in Juniper VPN.</li>
-       <li>Support DER-format certificates, add certificate format torture tests.</li>
-       <li>For OpenSSL >= 1.0.2, fix certificate validation when only an
-          intermediate CA is specified with the <tt>--cafile</tt> option.</li>
-       <li>Support Juniper "Pre Sign-in Message".</li>
+       <li>Clear form submissions (which may include passwords) before freeing (CVE-2018-20319).</li>
+       <li>Allow form responses to be provided on command line.</li>
+       <li>Add support for SSL keys stored in <a href="tpm.html">TPM2</a>.</li>
+       <li>Fix ESP rekey when replay protection is disabled.</li>
+       <li>Drop support for GnuTLS older than 3.2.10.</li>
+       <li>Fix <tt>--passwd-on-stdin</tt> for Windows to not forcibly open console.</li>
+       <li>Fix portability of shell scripts in test suite.</li>
+       <li>Add Google Authenticator TOTP support for Juniper.</li>
+       <li>Add RFC7469 key PIN support for cert hashes.</li>
+       <li>Add protocol method to securely log out the Juniper session.</li>
+       <li>Relax requirements for Juniper hostname packet response to support old gateways.</li>
+       <li>Add API functions to query the supported protocols.</li>
+       <li>Verify ESP sequence numbers and warn even if replay protection is disabled.</li>
+       <li>Add support for PAN GlobalProtect VPN protocol (<tt>--protocol=gp</tt>).</li>
+       <li>Reorganize listing of command-line options, and include information on supported protocols.</li>
+       <li>SIGTERM cleans up the session similarly to SIGINT.</li>
      </ul>
 <!-- latest-release-end -->