secnet 0.3.2~beta1

[Ian Jackson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

I am pleased to announce secnet 0.3.2~beta1.

0.3.2 contains bugfixes for links involving mobile sites, including a
an important security fix for configurations which explicitly set the
site configuration parameter "mobile-peers-max" to 5 or more.

Sites which have no mobile peers and which are already running
0.3.1 have no compelling reason to upgrade.


0.3.2~beta1 can be found here:

 http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git/secnet.git/
 http://www.chiark.greenend.org.uk/~secnet/release/0.3.2~beta1/

If you are able to do so conveniently, please test it (especially if
you can test links involving mobile peers).  It should be
backwards-compatibile with previous versions.  For those on the SGO
VPN: chiark is currently running an equivalent version.

For a summary of the changes see the changelog extract below.  For
full details see the git history.


secnet (0.3.2~beta1) unstable; urgency=low

  For links involving mobile sites:
  * SECURITY: Properly update peer address array when it is full.
  * Do name-resolution on peer-initiated key setup too, when we are mobile
    (and other name-resolution improvements).

  Other minor improvements:
  * Log peer addresses on key exchange timeout.
  * When printing version (eg during startup), use value from git-describe
    and thus include git commit id where applicable.
  * Updates to release checklist in Makefile.in.
  * Use C99 _Bool for bool_t.

 -- Ian Jackson <ijackson at chiark.greenend.org.uk>  Fri, 06 Jun 2014 01:17:54 +0100
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAEBCAAGBQJTkQ/KAAoJEOPjOSNItQ05CTgIAKI7Z45oJZzffpxGMOfUqN8d
SrWXhrgXW4F9DU5X1a6uOJy1RuOMhhupnqtywMi7KR5Pmwr1SUpMwIE+2X7VL73a
1PtMo0VJlOQ0EHLXgy8p8bWfSz03FYZDOo7+LDejHlRKrnEmcoabxUhMDtjIH/wa
EOCDDrsCNHYiHBa9+WBwgSupiGO9KiEdpu0ZdVZK/qIvyo/BBA9d7BInAsFdC0Wp
/SSGgpKsE9knhCRP/AykzPwYRH5xRBUWfL7sB/JQbjOpn9R0nYC2e8JNsoZ9tbEc
R2OTmwvrZC8mAsFcroDq1apGJ7znQyeU+jO5d9Q2PSpnAXGBZjGJRldjcOqHohI=
=3aTx
-----END PGP SIGNATURE-----