stunnel 4.37 released

Michal Trojnara <[email protected]> Fri, 17 Jun 2011 23:15:31 +0200
Newsgroups gmane.network.stunnel.announce
Message-ID <5B468CEF-93C5-44DC-B1BB-826ABC6D0C0B__42568.8031166375$1308345442$gmane$org@mirt.net>
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--===============0840627473==
Content-Type: multipart/signed; protocol="application/pgp-signature"; micalg=pgp-sha1; boundary="Apple-Mail-53--674350278"
Content-Transfer-Encoding: 7bit

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--Apple-Mail-53--674350278
Content-Type: multipart/alternative; boundary=Apple-Mail-52--674350400


--Apple-Mail-52--674350400
Content-Type: text/plain;
	charset=US-ASCII;
	format=flowed;
	delsp=yes
Content-Transfer-Encoding: 7bit

Dear Users,

I have just released version 4.37 of stunnel.  This release is mainly  
intended to fix bugs and portability issues introduced in versions  
4.35 and 4.36.
This version also provides new security defaults, updated to better  
match current best practices in cryptographic applications.

The ChangeLog entry:

Version 4.37, 2011.06.17, urgency: MEDIUM:
* New features
   - Client-side SNI implemented (RFC 3546 section 3.1).
   - Default "ciphers" changed from the OpenSSL default to a more secure
     and faster "RC4-MD5:HIGH:!aNULL:!SSLv2".
     A paranoid (and usually slower) setting would be "HIGH:!aNULL:! 
SSLv2".
   - Recommended "options = NO_SSLv2" added to the sample stunnel.conf  
file.
   - Default client method upgraded from SSLv3 to TLSv1.
     To connect servers without TLS support use "sslVersion = SSLv3"  
option.
   - Improved --enable-fips and --disable-fips ./configure option  
handling.
   - On startup stunnel now compares the compiled version of OpenSSL  
against
     the running version of OpenSSL. A warning is logged on mismatch.
* Bugfixes
   - Non-blocking socket handling in local mode fixed (Debian bug  
#626856).
   - UCONTEXT threading mode fixed.
   - Removed the use of gcc Thread-Local Storage for improved  
portability.
   - va_copy macro defined for platforms that do not have it.
   - Fixed "local" option parsing on IPv4 systems.
   - Solaris compilation fix (redefinition of "STR").

Home page: http://www.stunnel.org/
Download: ftp://ftp.stunnel.org/stunnel/

SHA-256 hash for stunnel-4.37.tar.gz:
02ca30609ccb26f6e52ff7eb79a6778ea452a04432eaef7d959d19933f6fe109

Best regards,
	Mike
--Apple-Mail-52--674350400
Content-Type: text/html;
	charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

<html><body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; =
-webkit-line-break: after-white-space; "><div>Dear =
Users,</div><div><br></div><div>I have just released version 4.37 of =
stunnel. &nbsp;This release is mainly intended to fix bugs and =
portability issues introduced in versions&nbsp;4.35 =
and&nbsp;4.36.</div><div>This version also provides new security =
defaults, updated to better match current best practices in =
cryptographic applications.</div><div><br></div><div>The ChangeLog =
entry:</div><div><br></div><div><div><div>Version 4.37, 2011.06.17, =
urgency: MEDIUM:</div><div>* New features</div><div>&nbsp;&nbsp;- =
Client-side SNI implemented (RFC 3546 section =
3.1).</div><div>&nbsp;&nbsp;- Default "ciphers" changed from the OpenSSL =
default to a more secure</div><div>&nbsp;&nbsp; &nbsp;and faster =
"RC4-MD5:HIGH:!aNULL:!SSLv2".</div><div>&nbsp;&nbsp; &nbsp;A paranoid =
(and usually slower) setting would be =
"HIGH:!aNULL:!SSLv2".</div><div>&nbsp;&nbsp;- Recommended "options =3D =
NO_SSLv2" added to the sample stunnel.conf file.</div><div>&nbsp;&nbsp;- =
Default client method upgraded from SSLv3 to =
TLSv1.</div><div>&nbsp;&nbsp; &nbsp;To connect servers without TLS =
support use "sslVersion =3D SSLv3" option.</div><div>&nbsp;&nbsp;- =
Improved --enable-fips and --disable-fips ./configure option =
handling.</div><div>&nbsp;&nbsp;- On startup stunnel now compares the =
compiled version of OpenSSL against</div><div>&nbsp;&nbsp; &nbsp;the =
running version of OpenSSL. A warning is logged on mismatch.</div><div>* =
Bugfixes</div><div>&nbsp;&nbsp;- Non-blocking socket handling in local =
mode fixed (Debian bug #626856).</div><div>&nbsp;&nbsp;- UCONTEXT =
threading mode fixed.</div><div>&nbsp;&nbsp;- Removed the use of gcc =
Thread-Local Storage for improved portability.</div><div>&nbsp;&nbsp;- =
va_copy macro defined for platforms that do not have =
it.</div><div>&nbsp;&nbsp;- Fixed "local" option parsing on IPv4 =
systems.</div><div>&nbsp;&nbsp;- Solaris compilation fix (redefinition =
of "STR").</div></div></div><div><br></div><div>Home page:&nbsp;<a =
href=3D"http://stunnel.mirt.net/">http://www.stunnel.org/</a><br>Download:=
&nbsp;<a =
href=3D"ftp://stunnel.mirt.net/stunnel/">ftp://ftp.stunnel.org/stunnel/</a=
></div><div><br></div><div><div>SHA-256 hash for =
stunnel-4.37.tar.gz:</div></div><div>02ca30609ccb26f6e52ff7eb79a6778ea452a=
04432eaef7d959d19933f6fe109</div><div><br></div><div>Best =
regards,</div><div><span class=3D"Apple-tab-span" style=3D"white-space: =
pre; ">	</span>Mike</div></body></html>=

--Apple-Mail-52--674350400--

--Apple-Mail-53--674350278
content-type: application/pgp-signature; x-mac-type=70674453;
	name=PGP.sig
content-description: This is a digitally signed message part
content-disposition: inline; filename=PGP.sig
content-transfer-encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (Darwin)

iEYEARECAAYFAk37w/MACgkQ/NU+nXTHMtFMUgCeIcMpAFGzzH2na6GKvZ2dvq6u
jmAAoOzTDkfwfLOxJFY7smtoQpIui5CL
=mYjf
-----END PGP SIGNATURE-----

--Apple-Mail-53--674350278--

--===============0840627473==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
stunnel-announce mailing list
[email protected]
http://stunnel.mirt.net/mailman/listinfo/stunnel-announce

--===============0840627473==--