CGSI-gSOAP RELEASE-NOTES
========================

* Tue Jul 30 2024 Mihai Patrascoiu <mihai.patrascoiu@cern.ch> 1.3.12
- [DMC-1264] - Gfal2 packages for Fedora >= 33
- [DMC-1308] - Move Data Management Clients to Fedora 34 & 35
- [DMC-1327] - DMC packages for Centos Stream 9
- [DMC-1336] - Data Management Clients for Fedora 36
- [DMC-1359] - Data Management Clients for Fedora 37
- [DMC-1379] - Move DMC projects to Alma8 and Alma9
- [DMC-1387] - Data Management Clients for Fedora 38
- [DMC-1413] - Data Management Clients for Fedora 39 and Fedora 40
- [DMC-1414] - Stop building Data Management Clients for CC7
- [cgsi-gsoap/pull/2] - Makefile fixes
- [cgsi-gsoap/pull/3] - Update rpm and debian packaging
- [cgsi-gsoap/pull/5] - Fix manpage typos reported by lintian

* Tue May 29 2018 Oliver Keeble <oliver.keeble@cern.ch> 1.3.11
- [LCGDM-2604] - SRM timeout causing transfer failures on CC7

* Tue Sep 06 2016 Alejandro Alvarez <alejandro.alvarez@cern.ch> 1.3.10
- [DMC-881] - If GLOBUS_GSSAPI_NAME_COMPATIBILITY is HYBRID, use old style of validation

* Mon Aug 01 2016 Alejandro Alvarez <alejandro.alvarez@cern.ch> 1.3.9
- [DMC-838] - cgsi_plugin fails to initialise globus OpenSSL module
- [DMC-839] - Initialize globus modules in a thread safe manner
- [DMC-840] - cgsi_plugin work-around for Globus GSS threadsafe issue

* Wed Aug 12 2015 Alejandro Alvarez <alejandro.alvarez@cern.ch> 1.3.8
- [DMC-646] - When trace is on, the output buffer is printed full, regardless of the actual length
- [DMC-698] - Port DMC clients to MacOSX

* Thu Nov 06 2014 Alejandro Alvarez <alejandro.alvarez@cern.ch> 1.3.7
- [DMC-437] - x509_* data members are leaking
- [DMC-438] - client_cgsi_plugin_import_cred wrongly check the existence of ukey
- [DMC-451] - Dump encrypted payload only if CGSI_TRACE is > 1
- [DMC-494] - CGSI-soap changes to be more verbose and meaningful

* Wed Jun 25 2014 Alejandro Alvarez <alejandro.alvarez@cern.ch> 1.3.6
- Disabled weak ciphers
- [LCGUTIL-55] - API to set/get at runtime the different possible credentials
- [LCGUTIL-384] - Remove compilation warnings on cgsi-gsoap

* Wed Dec 21 2011 Zsolt Molnar <Zsolt.Molnar@cern.ch> 1.3.5-1
- Dealing with bugs in CGSI-Gsoap: https://svnweb.cern.ch/trac/lcgutil/ticket/176
- cgsi-gsoap - license violation: https://svnweb.cern.ch/trac/lcgutil/ticket/233
- cgsi-gsoap compilation failure with default debian compiler flags: https://svnweb.cern.ch/trac/lcgutil/ticket/237
- General EPEL packaging for all the lcg-utils components: General EPEL packaging for all the lcg-utils components

* Mon Mar 8 2011 Jean-Philippe Baud <Jean-Philippe.Baud@cern.ch> 1.3.4-2
- set AutoReqProv = yes (strong requirement from EMI project)
- add support for EMI build
- Fixes #77984: srmv1 and srmv2.2 segfaults while security scan

* Mon Aug 23 2010 Jean-Philippe Baud <Jean-Philippe.Baud@cern.ch> 1.3.4-1
- create rpm sub-directory and spec file to help building from head
- add Makefile to build solaris packages

* Tue Aug 3 2010 Jean-Philippe Baud <Jean-Philippe.Baud@cern.ch> 1.3.4
- add code to get user_ca
- fix typo in Makefile (GLOBUS_FLAVOUR default)

* Wed Aug 19 2009 Akos Frohner <Akos.Frohner> 1.3.3-2
- updating build dependency

* Mon Jan 12 2009 David Smith <David.Smith@cern.ch> 1.3.3-1
- Update version to 1.3.3, apply initial solaris build changes 
  and change vomsc to vomsapi.

* Mon Oct 20 2008 Akos Frohner <Akos.Frohner@cern.ch> 1.3.2-2
- Fixes #42623: DM custom packager creates rpms with invalid name

* Mon Jul 7 2008 Akos Frohner <Akos.Frohner@cern.ch> 1.3.2-1
- gSOAP 2.7.10 has introduced a virtual destructor, which inserts
  a pointer to the VMT at the beginning of the 'soap' structure,
  making the C and C++ versions of the code binary incompatible,
  so we need to build C++ flavour of the libraries as well with 
  _cpp suffix.

* Thu May 8 2008 David Smith <David.Smith@cern.ch> 1.3.1-1
- Added new function, export_delegated_credentials(), to make
  a delegated credential token available in memory suitable for
  storage and later reuse by the user
- Removed some spurious trailing newlines from error messages
- Fixed descriptor and connection leak on the client side
  when the authenitcation negociation to a server fails
- Enhanced some error messages to cover more of the error message
  recommendations in bug #35320

* Wed Oct 10 2007 Akos Frohner <Akos.Frohner@cern.ch> 1.2.1-2
- VOMS libs are in 'lib64' on x86_64 starting with VOMS v1.7.23

* Fri Sep 21 2007 Akos Frohner <Akos.Frohner@cern.ch> 1.2.1-1
- Adding the CGSI_gSOAP error messages to the returned SOAP errors.
- updated to use glite-test-certs, instead of glite-security-test-utils

* Thu Aug 30 2007 Akos Frohner <Akos.Frohner@cern.ch> 1.2.0-1
- using lib64 on x86_64 platform for the libraries

* Tue Jul 31 2007 David Smith <David.Smith@cern.ch> 
- improve relase of resources on error during gss_init_sec_context()
  or gss_accept_sec_context() loops and on send error in
  cgsi_plugin_send().
- Send errors are now noted and the plugin will not attempt to
  wrap and send any further data with the context.
- change peer identitiy check in client_cgsi_plugin_open()
  from an explicit check after the security context is established
  to an internal check handled by gss_init_sec_context()
- Change of behavior of CGSI_OPT_DISABLE_NAME_CHECK. Without
  the option set a client checks the server presents an
  identnity compatible with the hostname specified to
  client_cgsi_plugin_open(). (Which was the previous behavior).
  Without CGSI_OPT_DISABLE_NAME_CHECK the client does a reverse
  lookup of the server's name and uses that in the identity check.
- Added new option CGSI_OPT_ALLOW_ONLY_SELF which affects both
  client and servers and causes them to only connect/accept
  connections with peers which have the same credentials. This
  overrides CGSI_OPT_DISABLE_NAME_CHECK.
- Read/write attempts without a security context having first
  been established fail but no longer reset the error. It is
  assumed that the reason for the context establish failure has
  already been recorded, resetting the error leads to a poor
  diagnostic message.
- Small optimisation in cgsi_plugin_print_token().

* Fri Jan 19 2007 Akos FROHNER <Akos.Frohner@cern.ch> 1.1.17-2

- avoiding memory leak, if retrieve_voms_credentials() called multiple times

* Fri Jan 12 2007 Akos FROHNER <Akos.Frohner@cern.ch> 1.1.17-1

- having no VOMS extension (i.e. grid-proxy-init) is not an error

* Tue Jan  9 2007 Akos FROHNER <Akos.Frohner@cern.ch> 1.1.16-3

- enabling gSOAP 2.6.x and 2.7.x gLite builds from the same source
- maintainer has been changed to CERN/IT/GD

* Thu Aug 31 2006 Akos FROHNER <Akos.Frohner@cern.ch> 1.1.16

- VOMS parsing is no longer implicit, if CGSI_OPT_DISABLE_VOMS_CHECK
  option is used on the server side: one has to call retrieve_voms_credentials() 
  to make it happen. It returns -1 in case of error and fills the SOAP Fault 
  sturture with  the details. This fixes:
  #19355: CGSI-gSOAP shall refuse requests with invalid VOMS AC
- New server side option: CGSI_OPT_DISABLE_MAPPING, to disable gridmap-file
  lookup of the DN (for example server does its own authorization).
- Simple client-server test suite, for regression testing.
- gSOAP 2.7.x compatibility fix.
- Fixed when CGSI_TRACE was printing garbage.

* Mon Feb 13 2006 Akos FROHNER <Akos.Frohner@cern.ch> 1.1.15

- moved to the gLite build system
- moved the VOMS dependant libraries into a -voms RPM
- changed structure init to calloc that the memory is zeroad
  it fixes a segfault, if the non-voms library is used
- added interface documentation in HTML and man formats

* Thu Feb  9 2006 Ben COUTURIER <Ben.Couturier@cern.ch> 1.1.14
- Create libs for flavours gcc32dbg and gcc32dbgpthr in case of VOMS support

* Mon Jan  9 2006 Ben COUTURIER <Ben.Couturier@cern.ch> 1.1.13
- Fixed problems with VOMS code

* Mon Jan  9 2006 Ben COUTURIER <Ben.Couturier@cern.ch> 1.1.12
- Fixed memory leak in case of error in the VOMS code

* Thu Nov 17 2005 Ben COUTURIER <Ben.Couturier@cern.ch> 1.1.11
- VOMS Integration: Added new library libcgsi_plugin_voms....

* Tue Jul 12 2005 Ben COUTURIER <Ben.Couturier@cern.ch> 1.1.10
- Added license

* Fri Jul  8 2005 Ben COUTURIER <Ben.Couturier@cern.ch> 1.1.9
- Moved the plugin to /usr
- Included David Smith's activation/deactivation patch to allow 
  running the plugin in a multithreaded server
- Fixed bug in cgsi_plugin_copy (before that it was not duplicating the cgsi_plugin_data)
- Protected calls to cgsi_plugin_data->fopen and fclose
- Send error message in faultstring rather rather than in fault detail 

