Rebol 3.8.0

Features:

• a63913 SMTP protocol scheme updated to work with the recent TLS changes
• d70bab Fine-tunning what crypto features are included in base/core/bulk builds
• 125fce Using only cipher modes, which are really supported in the TLS protocol
• 8e3985 Converted original CSV-tools script to proper CSV/TSV codecs
• 4d0841 Including Brian Hawley's CSV handling tools script downloaded from www.rebol.org
• c8befe Added support for SHA384 cipher modes in the TLS protocol
• c17863 Added support for GCM ciphers in the TLS protocol
• f1a82b Added support for authentication in GCM (Galois/Counter mode) cipher mode
• f6f7c6 Updated CCM (Counter with CBC-MAC) cipher mode
• b08704 Added support for CCM (Counter with CBC-MAC) cipher mode
• 7cb433 Added support to upgrade plain SMTP connection with a TLS layer (STARTTLS)
• 5ae9b0 Tiny code optimization in the HTTP scheme
• e89f4b Added possibility to start TLS connection reusing existing TCP port
• 8aa3f5 enbase/debase with base 36 (alphanumeric)
• 0df0d4 Some useful responses from the test httpd server
• 266b20 Allow conversion to word! from any string datatype (if don't have invalid chars)
• 81699e Initial rewrite of the old smtp protocol
• c4547d Included codec for Apple's Provision Profile files
• 31dae9 Added optional codec (decoder) for plist files
• 7447dc Added uid attribute as a known OID
• 080cd3 Support for direct DH params initialization from .key files
• f0d33e form-oid function for conversion of OID binary value into its numeric string format
• 5868c1 Added (limited) support for a TLS server role
• ace3ec Providing better info on port! values from help
• 8c051b Added support to load X.509 encoded private RSA keys
• 07f79c Allow read/lines on urls (HTTP scheme)
• ab481c New split-lines native
• 5ec4bb Allow char as an argument for writing to a file port
• e22657 Added certificate's fingerprint calculation
• 61609d tls scheme - using the new cryptography code
• 9ea657 Simple crypt port test/example file
• 7d0849 Added support for GCM (Galois/Counter Mode) cipher mode
• d4614b Add /part refinement to remold function
• c7e3d7 Optional definition of the message digest algorithm to sign/verify data using rsa
• ef0280 profile function for easy code speed comparisons, like: profile [[wait 0.1][wait 0.2]]
• ca4ddb Rewritten crypt port not to depend on mbedTLS's cipher-wrapping; included ARIA cipher and initial chacha20-poly1305 crypt's implementation (still WIP!)
• d4bd52 Included CHACHA20 cipher with possibility to set initial block counter
• a86c3e Added info about possible output limitation of probe
• d9c7fb Simplified extension test definition
• e9ed58 Updated mbedTLS code (used for checksums only so far) to version 3.1.0
• aa70ed Added FreeBSD support

Changes:

• bef541 Deprecated chacha20, chacha20poly1305 and poly1305 natives are now completely removed
• 98fd68 Improved fingerprint checksum counter in the crt codec
• 070c6b Added new release native as an universal way how to release internal resources available thru handles. Removed all non universal ways of releasing crypt keys!
• 3cdba9 Minor TLS code rearrangement
• b2059c Removed the rest of the old legacy TLS code
• f4ed6b Removed legacy TLS support, first steps to have a server side TLS
• f66b9a Replaced port/spec/port-id with port/spec/port
• c54b35 Replaced port/locals with port/extra
• d19b88 Replaced load/type with load/as
• 942d1a Renamed remove/part argument from length to range and allowed remove/part on bitset when the argument is string, binary, block or char
• 2d9411 Allow to-decimal "1e"
• 356292 Using range instead of length for the /part argument, as it may be negative.
• 6c7fd4 Allow making error using error as a make's type
• e74518 Crypt port (work in progress)
• 902eeb Report port error reasons as positive integers
• f46f9b Replaced the old ECDH and ECDSA implementation with code from mbedTLS`
• d6db6f Replaced the old DH implementation with code from mbedTLS
• e12f0a Replaced the old RSA implementation with code from mbedTLS

Fixes:

• 3f38fc Unreferenced local variable warning
• 22794e Assignment from incompatible pointer type warning
• dd9300 Incompatible pointer types warning
• 9589ec Always false result warning
• 5eedc5 Incompatible integer to pointer conversion warning
• 13c4d3 Removed unused config include
• 79ccb3 Incompatible pointer types warning
• b527b1 import/check with an invalid checksum was failing with a wrong error (Oldes/Rebol-issues#1686)
• 2660ab Updated ppk codec using the new crypt port
• dd3651 Cleanup and better resolving code-page charset encoding
• 5a29c1 Wrong length of the IV in the GCM cipher mode initialization
• e4d80c Implicit declaration of function and incompatible pointer types
• 9f3bdc CHACHA20-POLY1305 decryption in the TLS protocol was not correctly checking the mac
• 6efd1d Missing CCM crypt mode source file
• 6c8d19 ECDHE_ECDSA verification (ec public key may start with a zero byte)
• 200a42 Trying to get a console width under CI on Windows trows an error
• 0ca83b Using init-vector instead of just iv in crypt port specification; take on crypt port is now like read update; updated crypt port initialization to be compatible with the changes of decode-url function.
• 975eb9 Comparing blocks with a 1.#NaN value
• b75188 1.#NaN sorting inconsistency
• a4f4fc Wrong return value
• 093c89 Reset unused parts of the http uri during redirection and some tiny optimizations
• e2ef1a Updated http request construction to work with changes in decode-url
• 3dd0df Regression related to the new output from decode-url function
• 48a3fc Optimized url/file escape table initialization
• 92c65f Special char escaping when molding a file (so it is backwards loadable)
• 7bf61f Rewritten decode-url function, mold properly escaping urls
• 9dc15a Regression in the httpd scheme
• 347d73 split/at when the delimiter is not found
• 4fb0ac Using shorter code variant for extending a series at its tail
• 044c59 Using set-words in the dh parameters parse rule
• 2ce523 Don't silently ignore leading zero byte in the der codec data
• 811d22 set with any-block types
• 18fdf2 Move elyptic curves on top (these are the most common now)
• 60bfc8 RSA binary input values were expecting, that series are always at its head
• e114d7 Warning: incompatible pointer types
• c58fba Better error message when using unsupported port action
• 6ca57f Correct width expansion when appending char in range 128-255
• b633ce Leaked local variable
• c6efa2 Using correct checksum method in the fingerprint calculation
• bcb875 Minor TLS code optimization
• 580ad3 http scheme - situation when server does not provide Content-Length and just closes connection
• 1b6b88 Shortened doc-string
• 756721 Large integer from string
• acd983 Regression introduced in 356292c
• 8892f7 make event! using existing event! as a make type
• 56c14d save to string! needs mold
• 77aac4 Wrong context casting
• 2077fb Static declaration of 'free_crypt_cipher_context' follows non-static declaration
• bb08b5 Using unsigned integer
• 799019 Improved precision of the profile function even more
• b171da Improved precision of the profile function
• 73c731 mbedtls/common.h file is only for private use
• f4e8e6 Missing free call for ARIA cipher context
• 95f974 Provide title and type for the QOI codec
• 710e66 echo does not error on bad path
• 5bbac3 trim on block! removing nones only from head and tail, trim/all everywhere
• 6e0d26 trim on binary! should deal with NULL char instead of white-spaces like on string!
• 13da59 Make sure that error message always starts on a new line
• c41c33 'for' loop initial declarations
• a8fbea 'for' loop initial declarations
• 9ed043 Explicitly define all platform names (useful in the bootstrap phase)
• c6ea2e Conflicting types
• ecd379 Updated banner to year 2022 + including system/product info
• 346412 Failing Base and Core builds
• e7f2b6 Crash while using parse with non-utf-8 data from file
• 989235 Macro redefinition
• a84d39 Incorrect codepage id for CP819 alias IBM819 codepage name
• 1fdda5 iconv on FreeBSD does not accept CP12000 for UTF-32LE codepage
• 0c62ea iconv not accepting utf8 codepage on BSD systems
• 5a8c6e Make sure that setenv is used on FreeBSD
• a53862 Executable path not resolved correctly on OpenBSD and FreeBSD platforms
• 734eda Occasional HTTPS read fails when server used ECDHE_ECDSA key method
• 06425a Occasional HTTPS read fails when server used ECDHE_ECDSA key method