news

linux subdivision ying gai ke yi le ba

* Removed return codes NE_SERVERAUTH and and NE_AUTHPROXY; correct
 documentation, NE_PROXYAUTH is given for proxy auth failure.
* Require zlib >= 1.1.4 to avoid possible vulnerability in earlier versions.
 See http://www.gzip.org/zlib/advisory-2002-03-11.txt for more details.
 (version check can be skipped by passing --with-force-zlib to configure)
* New 'ne_ssl_readable_dname' function to create a human-readable string
 from an X509 distinguished name.
* Fix support for newer versions of libxml2 (thanks to Jon Trowbridge 
 <[e-mail]>).
* Fix corruption of reason_phrase in status object returned by
 ne_propset_status.
* More lenient handling of whitespace in response headers.
* ne_content_type_handler will give a charset of "ISO-8859-1" if no charset
 parameter is specified for a text/* media type (as per RFC2616).
* Miscellaneous cleanups and fixes (Jeff Johnson <[e-mail]>).

Changes in release 0.19.4:
* Support bundled build of expat 1.95.x (Branko 萯bej).

Changes in release 0.19.3:
* For platforms lacking snprintf or vsnprintf in libc, require trio.
* Add NE_FMT_OFF_T to fix Win32 build (Dan Berlin, Branko 萯bej).
* Fix SSL support in Win32 build (Branko 萯bej).

Changes in release 0.19.2:
* Fix non-SSL build broken in 0.19.1.
* Working SOCKSv5 support (thanks to Torsten Kalix <[e-mail]>)

Changes in release 0.19.1:
* Add missing stubs for ne_ssl_* functions for non-SSL build.
* Fix some error messages in new SSL code.

Changes in release 0.19.0:
* Major API change: ne_session_create now takes (scheme, hostname, port) 
 arguments: a session is clarified to be "a group of requests to a
 certain server".
 - removal of ne_session_server, ne_set_secure, and ne_set_proxy_decider
 - ne_session_proxy returns void.
 - DNS lookups are delayed until request dispatch time.
* Significant improvements to TLS/SSL support:
 - SSL is enabled if scheme passed to ne_session_create is "https"
 - new interfaces to load CA certs and to load SSL library's bundled CA certs
 - add server cert verification callback.  An SSL connection to a server
 with an unknown CA will now fail unless a verification callback is used.
 - enable SSL session caching (performance improvement)
 - support for wildcard server certs where commonName is "*.example.com".
 - thanks to Tommi Komulainen for the contribution of code from mutt's
 IMAP/SSL implementation under the LGPL, from which bits of this were derived.
* Improved SSL client certificate support:
 - far simpler interface, all done at ne_session.h level.
 - supports PKCS#12 and PEM-encoded certificates.
 - optional callback for only providing client when demanded by server.
* Support for TLS upgrade is removed, since it isn't useful.
* If NEON_SSL is defined, API extensions are available to:
 - allow access to the SSL_CTX * to adjust session SSL options
 - retrieve the server certificate (X509 *)
* Decompress fixes:
 - fix potential segfault in ne_decompress_destroy
 - check the CRC of the deflated output (and fail if it doesn't match)
 - fail appropriately on truncated responses, and trailing bytes in response. 
* Added ne_set_read_timeout to use configurable timeout on socket reads.
* Malformed response headers will be ignored rather than failing the request.
* ne_set_error takes printf-style vararg.
* Fixes for ne_get_range and improve error handling. 
* Functions which append to an ne_buffer do not return a success value,
 but they do use ne_realloc/ne_malloc under the hood now, so an OOM callback
 will be used (with the usual caveats).
* XML interface does not strip leading whitespace from cdata by default,
 the NE_XML_STRIPWS flag is available to restore this feature if required.
* Upgraded to libtool 1.4.2:
 - should fix --enable-shared on Mac OS X 10.1
* Test suite now contains over one hundred tests.

Changes in release 0.18.5:
* Removed old neon.dsp, neon.dsw.
* Update Win32 build to add OpenSSL and zlib support (Branko 萯bej).
* Fix ne_compress.c to compile on Win32 (Branko 萯bej).

Changes in release 0.18.4:
* Fixes for Content-Type parsing using ne_content_type_handler (Greg Stein)
 - also now parses the charset parameter from header value.
* Removed ne_concat() function, which didn't work and wasn't used.

Changes in release 0.18.3:
* Fix parsing lock timeout from server (Arun Garg).
* Send Timeout headers in LOCK and refresh LOCK requests (Arun Garg).
* Updated neon.mak and config.hw.in for Win32 build (patch from
 Branko 萯bej <[e-mail]>).
* Define XML_BYTE_ORDER for bundled expat build in support macro
 NEON_XML_PARSER().

Changes in release 0.18.2:
* Fix --with-neon=PATH in support macros.
* Support DESTDIR in Makefile install targets (patch by
 Pawel Golaszewski <[e-mail]>).
* Portability fixes:
 - fix configure check for time_t on some platforms (e.g Solaris 2.6).
 - remove expect100_works bitfield in ne_session structure (thanks to 
 Yan Periard <[e-mail]>).

Changes in release 0.18.1:
* Minor fix for authentication: "attempt" counter was not reset correctly
 after authentication failed, so subsequent requests would not authenticate
 correctly either.
* API change: ne_session_destroy returns void (there was no error case).
* Portability fixes (non-GCC compilers, 64-bit platforms, UnixWare 7)
* Optimisations in string manipulation routines.
* config.hw is included in the release tarball again.
* Improvements in the autoconf support macros:
 - check for neon-config in PATH if --with-neon is not given
 - stop if --with-neon is used, and the check for external neon fails
 - added NEON_WITHOUT_ACL to prevent build of ne_acl.o

Changes in release 0.18.0:
* API change: authentication callback is passed fixed-size username/password
 buffers, and an 'attempt' counter.  Authentication is retried *forever*
 until either it succeeds, or the callback returns non-zero.
* API clarifications:
 - ne_propname may have a NULL nspace field, indicating the property has no 
 namespace.  This holds for properties returned by the propfind interfaces.
 - added NE_ELM_PROPS_UNUSED as the lowest element number which should
 be used with handlers added to the XML parser returned by 
 ne_propfind_get_parser.
* Fixes and cleanups of lock discovery interface.
* Fix for short write handling in ne_get() (thanks to rado <[e-mail]>).
* Fix for XML namespace prefix handling where a prefix could be mapped to an 
 incorrect URI (e.g. in PROPFINDs against mod_dav with >10 namespaces used)
* Add '--support <feature>' option to neon-config; the script exits with
 success if given feature is supported. Known features are ssl, dav, zlib.
* Support for SSL, DAV, zlib is exported by neon.m4 as shell variable 
 NEON_SUPPORTS_{SSL,DAV,ZLIB}={yes,no} for bundled and external builds.
* `neon-config --cflags` won't include -I/usr/include for SSL build.
* Fix to call progress callbacks while sending request bodies again.
* Test changes:
 - portability fixes, auth interface and progress tests.

Changes in release 0.17.2:
* Accept Status-Lines with no reason phrase (Jeremy Elson).
* Fix handling of persistent connection timeout, and better error
 handling if sending a request fails.
* Fix crashes in locking code.
* Return parse error on XML namespace prefix declaration with
 an empty value. Thanks to Julian Reschke.
* Allow passing property names with NULL namespace to ne_proppatch.
* Fix for cross-compilation (Mo DeJong).
* Moved ne_propname definition from ne_207.h to ne_props.h.
* Test changes:
 - updated for Status-Line parsing changes (Jeremy Elson)
 - better persistent connection tests
 - fixed for --disable-webdav build

Changes in release 0.17.1:
* Add support for ACL method (Arun Garg <[e-mail]>),
 see ne_acl.h.
* Fixes and clean up of libraries exported via `neon-config --libs'
* Fix timezone handling when parsing dates (on some platforms).
* Upgrade to autoconf 2.52 and libtool 1.4 (thanks to Mo DeJong).
* Cleanup/simplification of request dispatching:
 - better handling of error cases, including fix for a possible
 infinite loop when the server closes the connection prematurely.
* Add '--without-zlib' configure option.
* Test changes:
 - prettify output; imitate Perl test suite output.
 - add tests for interim 1xx responses, persistent connections, more
 unbounded operations.

Changes in release 0.17.0:
* Add support for decoding gzip Content-Encoding: see ne_compress.h.
 - built if zlib is found; `neon-config --cflags' will define NEON_ZLIB if so.
* Rewrite hooks interface to register individual callbacks.
 - inspired by the Apache 2.0/APR hooks interface
* Register cookies hooks using ne_cookie_register().
* Clean up configure scripts to enable use of autoconf 2.5x (Mo DeJong).
* Use new endianess configure macro to allow cross-compiling (Mo DeJong).
* Fix invalid C code in sock_init() in Win32 build (Mo DeJong).
* Fix use of signal() on Win32 (Mo DeJong).
* Workaround libxml 1.x string handling not being UTF-8.	
* Test changes:
 - add tests for decompression interface.

Changes in release 0.16.1:
* Also handle write errors in ne_get_range.
* Dump request body blocks in debugging mode.
* Fix ne_shave() causing memory corruption when the result should 
  have been the empty string.
* Refactor auth header parsing code; more efficient now. 
 - fixes digest auth RFC2617-style broken in 0.16.0

Changes in release 0.16.0:
* API change: ne_copy takes a depth parameter (thanks to Arun Garg, Medha Atre)
* API change: validate callback to ne_xml also takes a userdata arg.
* Added 'ne_lock_refresh' for performing lock refresh (Arun Garg).
* Add SSL support to Win32 build (Peter Boos <[e-mail]>)
  (see INSTALL.win32 for details).  Compile with USE_DAV_LOCKS also.
* Remove Server header parser for 100-continue support in ne_options.
  (and remove broken_expect100 from ne_server_capabilities).
* Set SIGPIPE disposition to "ignored" in sock_init().
* On platforms with setvbuf(), turn off buffering for the debug log 
  stream.
* Ignore repeated calls to sock_init().
* Fixes to error handling in ne_get_range.
* Minor improvements to memory handling in auth code.
* Fix for start_propstat callback being called with NULL response
  argument when given invalid XML, causing a segfault in propfind code.
* Test changes:
 - add regression test for the propfind segfault.
 - handle segfaults better (reap the child, flush the debug log).

Changes in release 0.15.3:
* Fix --with-expat=DIR build.

Changes in release 0.15.2:
* Fix Win32 for XML parser changes (Gerald Richter).
* Substitute versions into config.hw at distribution time.
* Add date parser for ISO8601-formatted dates as defined by RFC2518, e.g. 
  the creationdate property (Taisuke Yamada <[e-mail]>).
* Fix Y2K bug in RFC1036 date parsing algorithm.
* Test changes:
 - add tests for date parsing functions.

Changes in release 0.15.1:
* Win32 update from Gerald Richter <[e-mail]>
 - new files neon.mak, INSTALL.win32
* Fix for ne_socket.h includes (Mo DeJong).
* More improvements for XML parser selection logic:
 - if parser is required, be sure to fail configure if none is found.
 - added --with-included-expat for bundled expat logic.
* Rename --enable-debugging to --enable-debug (Mo DeJong).
 - added NEON_DEBUG macro to exported autoconf macros.
* Call progress callbacks for request bodies.
* Test changes:
 - check that reading response headers is a bounded operation.
 - use a pipe between child and parent to avoid race condition and 
 tedious sleep().

Changes in release 0.15.0:
* Major API renaming to use ne_/NE_ namespace:
 - http_ to ne_, HTTP_ to NE_, dav_ to ne_, DAV_ to NE_, neon_ to ne_
 - hip_xml_ to ne_xml_, HIP_ELM_ to NE_ELM_, HIP_XML_ -> NE_XML_
 - sbuffer_ to ne_buffer_
 - DEBUG() to NE_DEBUG(), DEBUG_ to NE_DBG_
* Type renames:
 - http_req to ne_request
 - sbuffer to 'ne_buffer *'
* Note, 'ne_buffer' is not an implicit pointer type, you must 
  specify the '*' now, e.g. 'ne_buffer *buf = ne_buffer_create();'.
* ne_buffer is no longer opaque.
 - ne_buffer_data() removed: use buf->data instead.
 - ne_buffer_size() is a macro.
* Header renames and additions:
 - http_request.h -> ne_request.h
 - Session code split into ne_session.h
 - hip_xml.h -> ne_xml.h, nsocket.h -> ne_socket.h, http_utils.h -> ne_utils.h
 - neon_md5.h -> ne_md5.h, dav_207.h -> ne_207.h
 - http_basic.h and dav_basic.h merged into ne_basic.h
* New functions:
 - ne_token and ne_shave, to obsolete split_string, shave_string.
* Removed: ne_get_request_headers().
* autoconf changes:
 - disable building shared neon library by default.
 - option --enable-libxml is replaced by --with-libxml1 and
 --with-libxml2 to force use of a particular parser.
* Fix auth code to only take MD5 digests of response body blocks when
  necessary (thanks to Kai Sommerfeld).
* Fix alignment bug in MD5 code which could cause SIGBUS on Sparc 
  architectures (Kai Sommerfeld).
* Rewrite of request body handling:
 - ne_set_request_body_fd replaces _stream, using an int fd rather than
 a FILE *.
 - added ne_set_request_body_provider to give a callback which is called
 to provide request body blocks.
 - removal of 'use_body' hook in favour of 'ne_pull_request_body' function
 to allow hooks to manually read the request body.
 - ne_{put,get,post,put_if_unmodified} all take an integer fd rather than a
 FILE * stream.
* Test changes:
 - added framework for testing "over the wire" (fork a server process)
 - added tests for response message length handling, chunked responses, 
 header folding, sending request bodies.
 - start at listing RFC2616 requirements and whether they are met
 or not in test/STATUS.
 - test for MD5 alignment bug on Sparc (thanks to Kai Sommerfeld).

Changes in release 0.14.0:
* Add C++ inclusion safety to http_auth.h (Kai Sommerfeld).
* Define ssize_t on Win32. (Kai Sommerfeld).
* Add C++ inclusion safety to dav_locks.h and ne_alloc.h (thanks to
  Gregor Bornemann <[e-mail]>).
* Significant API change to properties code, to allow use of allprop
  and complex properties:
 - dav_propfind_set_complex and _set_flat are removed.
 - add parameter to dav_propfind_named to take the list of property names 
   to be fetched.
 - new function dav_propfind_set_private to set private callback.
 - all properties not handled by caller are stored as flat properties.
* Untested: add basic SOCKSv5 support: configure --with-socks.
 - please report success/failure to [e-mail]
* Win32/MSVC build files from Magnus Sirwi