From: Tom Yu Date: Fri, 23 Jul 2010 20:25:17 +0000 (+0000) Subject: README and patchlevel.h for krb5-1.8.3-beta1 X-Git-Tag: krb5-1.8.3-beta1~1 X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=56c916151a2374d5e4abd6bbe3cea358ff367503;p=krb5.git README and patchlevel.h for krb5-1.8.3-beta1 git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-8@24207 dc483132-0cff-0310-8789-dd5450dbe970 --- diff --git a/README b/README index 9310c2dc5..b479d93d6 100644 --- a/README +++ b/README @@ -82,6 +82,37 @@ additional measures include: crypto * easier kadmin history key changes +Major changes in 1.8.3 +---------------------- + +* Behavior Change: + + GSS-API context expiration -- the gss_wrap and gss_unwrap + functions no longer check for ticket expiration. Applications + wishing to enforce ticket lifetimes should check using the + gss_inquire_context function. The previous behavior of checking + for ticket expiration produced results that were not expected by + application developers, and could lead to poor user experience. + +* Fix an interoperability issue when the Microsoft HMAC-MD5 checksum + type was used with non-RC4 keys. + +* Fix an interoperability issue with ephemeral Diffie-Hellman key + exchange in PKINIT that would happen for less than 1% of + transactions. + +krb5-1.8.3 changes by ticket ID +------------------------------- + +6345 no kdb5_util stash equivalent with LDAP database +6738 PKINIT DH exchange occasionally produces mismatch +6739 Behavior change: gssapi context expiration +6740 kadmin ktadd may display wrong name of default keytab +6744 only test t_locate_kdc if known-good DNS name is present +6745 Add correct error table when initializing gss-krb5 +6750 krb5kdc doesn't parse the -P command-line option correctly +6751 Allow Microsoft HMAC-MD5 checksum types to use non-RC4 keys + Major changes in 1.8.2 ---------------------- @@ -405,6 +436,7 @@ reports, suggestions, and valuable resources: Michael Calmer Ravi Channavajhala Srinivas Cheruku + Leonardo Chiquitto Howard Chu Andrea Cirulli Christopher D. Clausen diff --git a/src/patchlevel.h b/src/patchlevel.h index 72e202b96..998cdee59 100644 --- a/src/patchlevel.h +++ b/src/patchlevel.h @@ -52,7 +52,7 @@ */ #define KRB5_MAJOR_RELEASE 1 #define KRB5_MINOR_RELEASE 8 -#define KRB5_PATCHLEVEL 2 -#define KRB5_RELTAIL "postrelease" +#define KRB5_PATCHLEVEL 3 +#define KRB5_RELTAIL "beta1" /* #undef KRB5_RELDATE */ -#define KRB5_RELTAG "branches/krb5-1-8" +#define KRB5_RELTAG "tags/krb5-1-8-3-beta1"