summaryrefslogtreecommitdiff
path: root/security/lasso/patches
AgeCommit message (Collapse)AuthorFilesLines
2012-05-06Patches for building with the latest glib2.dholland2-0/+30
2011-09-08Do not use nested functions. Add missing prototypes. Bump revision.joerg2-0/+55
2010-05-31Update to lasso 2.2.91. From the NEWS file:manu9-437/+0
2.2.91 - January 26th 2010 -------------------------- A new Perl binding, fix for backward compatibility with old versions of glib, LassoLogout API is more robust since it does not need anymore for all SP logout to finish to work, new macro lasso_list_add_new_xml_node, add support for WS-Security UsernameToken (equivalent of poor man HTTP Digest Authentication), make public internal APIs: lasso_session_add_assertion, lasso_session_get_assertion and lasso_session_remove_assertion. 2.2.90 - January 18th 2010 -------------------------- Lots of internal changes and some external one too. There is a new api to force, forbid or let Lasso sign messages, it is called lasso_profile_set_signature_hint. Big overhaul of the ID-WSF 1 and 2 codes, and of the SAML 2.0 profiles. Now all SAML 2.0 profile use common internal functions from the lasso_saml20_profile_ namespace to handle bindings (SOAP,Redirect,POST,Artifact,PAOS). New internal API to load SSL keys from many more formats from the public API. In ID-WSF 2.0, Data Service Template has been simplified, we no more try to apply queries, it is the responsability of the using code to handle them. In bindings land, the file bindings/utils.py has been stuffed with utility function to manipulate 'type' tuple, with are now used to transfer argument and type description, their schema is (name, C-type, { dictionary of options } ), they are now used everywhere in the different bindings. We support output argument in PHP5, Python and Java, i.e. pointer of pointer arguments with are written to in order to return multiple values. For language where the binding convert error codes to exceptions (all of them now), the ouput value is returned as the normal return value of the method, so only one output argument is handled for now. We now use GObject-introspection annotations in the documentation to transfer to the binding generator the necessary metadata about the API (content of lists, hashtables, wheter pointer are caller/callee owned, can be NULL or if argument have a default value). The file bindings/override.xml is now deprecated. In documentation land, the main reference documentation was reorganizaed and more symbols have been added to it. Many more functions are documented. There is now tools to control the evolution of the ABI/API of Lasso.
2009-12-01Pullup single logout related bugfixes from lasso -current.manu4-7/+286
On SP initiated logout, the SP x509 certificate was included in the HTTP redirect URL. First this was an SAML standard violation, and second it inflated the URL beyond 2038 bytes, which is the maximum length for IE7 and prior. As a result, SP initated single logout was broken with IE7 and prior versions.
2009-07-06Add some necessary casts for LP64 platforms in the hash functions.joerg4-30/+46
Merge patch-cb into patch-bd. Fix ctype casts.
2009-05-26Two bugfixes pulled from upstream:manu5-0/+33
- make sure assertions are signed - don't crash when parsing saml:AttributeValue with xsi:type set
2009-04-09Upgrade to lasso-2.2.2:manu6-110/+50
From distribution NEWS file: Many fixes and improvements to the ID-WSF 1 support, new API to load SSL keys off memory, documentation for ID-WSF methods, general robustness and memory leak fixes.
2009-03-02Lasso is a free software C library aiming to implement the Libertymanu4-0/+169
Alliance standards: ID-FF, ID-WSF and SAML. It defines processes for federated identities, single sign-on and related protocols. Lasso is built on top of libxml2, XMLSec and OpenSSL and is GPL licensed.