From 723a047b46a0a5ea3e927dd8fd9699326066bd17 Mon Sep 17 00:00:00 2001
From: David Woodhouse
Date: Thu, 4 May 2023 19:11:37 +0100
Subject: [PATCH] Tag version 9.10
Signed-off-by: David Woodhouse
---
configure.ac | 2 +-
version.sh | 2 +-
www/changelog.xml | 6 ++++++
www/download.xml | 32 ++++++++++++++++++++++++++++----
4 files changed, 36 insertions(+), 6 deletions(-)
diff --git a/configure.ac b/configure.ac
index 0a13ebc3..62a64d47 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,4 +1,4 @@
-AC_INIT([openconnect], [9.01])
+AC_INIT([openconnect], [9.10])
AC_LANG([C])
AC_CONFIG_HEADERS([config.h])
m4_ifdef([AC_CONFIG_MACRO_DIRS], [AC_CONFIG_MACRO_DIRS([m4])])
diff --git a/version.sh b/version.sh
index 37e04ddc..56d31ccc 100755
--- a/version.sh
+++ b/version.sh
@@ -1,6 +1,6 @@
#!/bin/sh
-v="v9.01"
+v="v9.10"
if [ -d ${GIT_DIR:-.git} ] && tag=`git describe --tags`; then
v="$tag"
diff --git a/www/changelog.xml b/www/changelog.xml
index 1bd57886..0730e134 100644
--- a/www/changelog.xml
+++ b/www/changelog.xml
@@ -14,6 +14,12 @@
gitweb.
- OpenConnect HEAD
+
+ - No changelog entries yet
+
+
+ - OpenConnect v9.10
+ (PGP signature) — 2023-05-04
- Fix external browser authentication with KDE plasma-nm < 5.26.
- Always redirect stdout to stderr when spawning external browser.
diff --git a/www/download.xml b/www/download.xml
index ef3a7ffe..830fb7cd 100644
--- a/www/download.xml
+++ b/www/download.xml
@@ -20,11 +20,35 @@
-The latest release is OpenConnect v9.01
-(PGP signature),
-released on 2022-04-29 with the following changelog:
+The latest release is OpenConnect v9.10
+(PGP signature),
+released on 2023-05-04 with the following changelog:
- - Fix library minor version (missing bump to 5.8).
+ - Fix external browser authentication with KDE plasma-nm < 5.26.
+ - Always redirect stdout to stderr when spawning external browser.
+ - Increase default queue length to 32 packets (#582).
+ - Make the Wintun Layer 3 TUN driver the default on Windows (!427).
+ - Add support for and bundle Wintun 0.14.1 (!294).
+ - Fix receiving multiple packets in one TLS frame, and single packets split across multiple TLS frames, for Array (#435).
+ - Fix ESP failures under Windows (#427).
+ - Add list-system-keys tool to assist Windows/MacOS users in setup.
+ - Handle idiosyncratic variation in search domain separators for all protocols (#433, #443, !388).
+ - Support region selection field for Pulse authentication (!399).
+ - Support modified configuration packet from Pulse 9.1R16 servers (#472, !401)
+ - Allow hidden form fields to be populated or converted to text fields on the command line (#493, #489, !409)
+ - Support yet another strange way of encoding challenge-based 2FA for GlobalProtect (#495, !411)
+ - Add --sni option (and corresponding C and Java API functions) to allow domain-fronting connections in censored/filtered network environments (!297, !451).
+ - Parrot a GlobalProtect server's software version, if present, as the client version (!333)
+ - Fix NULL pointer dereference that has left Android builds broken since v8.20 (!389).
+ - Fix Fortinet authentication bug where repeated SVPNCOOKIE causes segfaults (#514, !418).
+ - Support F5 VPNs which encode authentication forms only in JSON, not in HTML (#512, !431).
+ - Persist Windows installers for tagged builds (#463, !391).
+ - Support simultaneous IPv6 and Legacy IP ("dual-stack") for Fortinet (#568, !456).
+ - Support "FTM-push" token mode for Fortinet VPNs (#555, !450).
+ - Send IPv6-compatible version string in Pulse IF/T session establishment, and avoid its ESP/IP version layering idiocy on newer servers (#506, !414)
+ - Add --no-external-auth option to not advertise external-browser authentication, as a workaround for servers which behave differently when it is advertised (#470, !398)
+ - Emulate MacOS-specific contents in the HIP report for GlobalProtect (!471).
+ - Many small improvements in server response parsing, and better logging messages and documentation.
--
2.50.1