[ŕelease] Add release notes, update doap files and website

This commit is contained in:
Benjamin Dauvergne 2011-01-05 11:41:46 +01:00
parent 6c3684dc1f
commit 6cb213e5f3
5 changed files with 68 additions and 3 deletions

40
NEWS
View File

@ -1,6 +1,46 @@
NEWS
====
2.3.5 - January 11th 2010
-------------------------
36 commits, 31 files changed, 240 insertions, 92 deletions
Generic:
* add more backward compatible replacement for GHashTable methods (to compile
under centos5)
* a generic way to attach encryption parameters to LassoNode has been added, a
future major release should see the removal of specific field for storing
those parameters in node supporting encryption.
* The way we format encrypted node is now more compatible with Shibboleth and
I hope with other implementations: the KeyInfo is kept inside the
EncryptedData element, and not repeated inside a child of the EncryptedElement.
* Fixed: LASSO_SIGNATURE_VERIFY_HINT_FORCE did not force checking signature on
messages
* Fixed: lasso_provider_get_first_http_method broke when an unknown binding
was found in an endpoint declaration
SAMLv2:
* Fixed: segfault when checking signature on logout responses (introduced in 2.3.4)
* SPNameQualifier is more set on subject NameID of assertions, as it should be
reserved for Affiliation members (and it broke shibboleth which only expect
this to be used for affiliation, wrongly I think).
* Conditions->notBefore/notOnOrAfter is motre setted by
lasso_login_build_assertion, only notOnOrAfter on SubjectConfirmationData,
which is more inline with the specification.
* the logout profile now use the session to initialize the NameID in requests,
not the identity. It allow to have a transient federation in the session but
a persistent one in the identity
* fixed support for the POST binding
* Fixed: it seems that strtol does not reset errno under Centos 5, we do it by hand.
Python binding:
* constructors now raise a lasso.Error instead of a simple Exception when failing
PHP5 binding:
* removed dependency upon an internal function of liblasso3
2.3.4 - Otober 8th 2010
-----------------------

View File

@ -61,6 +61,10 @@
</SVNRepository>
</repository>
<release>
<Version>
<created>2011-01-05</created>
<revision>2.3.5</revision>
</Version>
<Version>
<created>2010-10-13</created>
<revision>2.3.4</revision>

View File

@ -61,6 +61,10 @@
</SVNRepository>
</repository>
<release>
<Version>
<created>2011-01-05</created>
<revision>2.3.5</revision>
</Version>
<Version>
<created>2010-10-13</created>
<revision>2.3.4</revision>

View File

@ -46,9 +46,9 @@
</p>
<p>
The most recent version of Lasso is <strong>2.3.4</strong>. You can
<a href="https://dev.entrouvert.org/lasso/lasso-2.3.4.tar.gz">download
the 2.3.4 tarball here</a> or get more options on the general <a
The most recent version of Lasso is <strong>2.3.5</strong>. You can
<a href="https://dev.entrouvert.org/lasso/lasso-2.3.5.tar.gz">download
the 2.3.5 tarball here</a> or get more options on the general <a
href="/download/">download</a> page.
</p>

View File

@ -0,0 +1,17 @@
<?xml version="1.0"?>
<div xmlns="http://www.w3.org/1999/xhtml">
<h3>2010-10-13: Released 2.3.4</h3>
<p>
Lasso 2.3.5 have been released.
<a href="https://dev.entrouvert.org/lasso/lasso-2.3.5.tar.gz">Download 2.3.5 now</a>
</p>
<p class="changes">
<strong>What changed ?</strong>
Fix compilation bugs under Centos5 mainly in bindings. Fix segfault in logout
response handling. Improve compatibility with Shibboleth 2.0 (was tested
against IdP from the Frend academic network, the CRU).
</p>
</div>