Prepare for 0.33.0.

NEWS

@@ -9,11 +9,9 @@ Changes in release 0.33.0:
    than a path and this can also be an absolute-URI
  - ne_request.h: never-used ne_free_hooks typedef removed
  - ne_dates.h: clarified error cases (behaviour unchanged)
+ - ne_session.h: ne_session_create() 'host' must match RFC 3986
+   syntax; IPv6 literal addresses must use [] brackets
 * New interfaces and features:
- - ne_session.h: add NE_SESSFLAG_1XXTIMEOUT
- - response handling no longer applies a maximum limit on 1xx interim
-   responses; an overall timeout equal to the read timeout is now
-   applied if a read timeout is configured and 1XXTIMEOUT is enabled
  - added new configure flag --enable-auto-libproxy which enables
    libproxy by default for new sessions (Jan-Michael Brummer)
  - ne_locks.h: added DAV:lockroot support per RFC 4918
@@ -22,6 +20,10 @@ Changes in release 0.33.0:
    (1xx) responses; headers in interim responses are now accessible
  - ne_basic.h: add ne_putbuf()
  - ne_strhash: SHA-512/256 now supported for LibreSSL 3.8+ (orbea)
+ - response handling no longer applies a maximum limit on 1xx interim
+   responses; an overall timeout equal to the read timeout is now
+   applied if a read timeout is configured and 1XXTIMEOUT is enabled
+ - ne_request.h: add NE_REQFLAG_1XXTIMEOUT
 * Bug fixes:
  - test suite now works correctly on IPv6-only hosts (Jeremy Sowden)
  - fixes for building against LibreSSL (orbea)
@@ -31,6 +33,8 @@ Changes in release 0.33.0:
  - 207 error strings are cleaned and compressed to a single line
  - fixed thread-safety in ne_rfc1123_date where gmtime_r is available
  - ne_lock_refresh() fixed to use a non-idempotent request
+ - TLS name verification updated to match RFC 9110/6125, added strict
+   handling of IP literals vs DNS names
 
 Changes in release 0.32.5:
 * NOTE: Since 0.32.0 the "$KRB5_CONFIG" environment variable is ignored

macros/neon.m4

@@ -138,7 +138,7 @@ AC_DEFUN([NE_VERSIONS_BUNDLED], [
 NE_VERSION_MAJOR=0
 NE_VERSION_MINOR=33
 NE_VERSION_PATCH=0
-NE_VERSION_TAG=-dev
+NE_VERSION_TAG=
 
 # 0.33.x is backwards-compatible to 0.27.x, so AGE=6
 NE_LIBTOOL_VERSINFO="33:${NE_VERSION_PATCH}:6"

po/cs.po

@@ -6,7 +6,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: sitecopy 0.11.4\n"
 "Report-Msgid-Bugs-To: https://github.com/notroj/neon\n"
-"POT-Creation-Date: 2023-11-11 18:01+0000\n"
+"POT-Creation-Date: 2024-01-29 19:40+0000\n"
 "PO-Revision-Date: 2002-04-09 11:12+0100\n"
 "Last-Translator: Petr Prazak <prazak@grisoft.cz>\n"
 "Language-Team: cz\n"
@@ -15,7 +15,7 @@ msgstr ""
 "Content-Type: text/plain; charset=iso-8859-2\n"
 "Content-Transfer-Encoding: 8bit\n"
 
-#: src/ne_207.c:213
+#: src/ne_207.c:214
 #, c-format
 msgid ""
 "Invalid HTTP status line in status element at line %d of response:\n"
@@ -167,12 +167,12 @@ msgstr "Nelze zjistit d
 msgid "Response did not include requested range"
 msgstr ""
 
-#: src/ne_basic.c:206
+#: src/ne_basic.c:207
 #, fuzzy, c-format
 msgid "Range is not satisfiable"
 msgstr "Rozsah není uspokojivý."
 
-#: src/ne_basic.c:211
+#: src/ne_basic.c:212
 #, fuzzy, c-format
 msgid "Resource does not support ranged GET requests"
 msgstr "Server nedovoluje èásteèné pøíkazy GET."
@@ -203,48 +203,48 @@ msgstr ""
 msgid "[unprintable]"
 msgstr ""
 
-#: src/ne_gnutls.c:660
+#: src/ne_gnutls.c:637
 #, c-format
 msgid "Failed to import private key: %s"
 msgstr ""
 
-#: src/ne_gnutls.c:904
+#: src/ne_gnutls.c:881
 msgid "signed using insecure algorithm"
 msgstr ""
 
-#: src/ne_gnutls.c:907
+#: src/ne_gnutls.c:884
 #, c-format
 msgid "unrecognized errors (%u)"
 msgstr ""
 
-#: src/ne_gnutls.c:952 src/ne_openssl.c:484
+#: src/ne_gnutls.c:925 src/ne_openssl.c:458
 #, c-format
 msgid "Server certificate was missing commonName attribute in subject name"
 msgstr ""
 
 # src/console_fe.c:992
-#: src/ne_gnutls.c:966
+#: src/ne_gnutls.c:939
 #, fuzzy, c-format
 msgid "Could not verify server certificate: %s"
 msgstr "Nelze zapsat do souboru: %s"
 
-#: src/ne_gnutls.c:985 src/ne_openssl.c:471
+#: src/ne_gnutls.c:958 src/ne_openssl.c:448
 #, c-format
 msgid "Certificate verification error: %s"
 msgstr ""
 
-#: src/ne_gnutls.c:1018 src/ne_openssl.c:720
+#: src/ne_gnutls.c:991 src/ne_openssl.c:694
 #, c-format
 msgid "SSL handshake failed, client certificate was requested: %s"
 msgstr ""
 
 # src/console_fe.c:992
-#: src/ne_gnutls.c:1023 src/ne_openssl.c:725
+#: src/ne_gnutls.c:996 src/ne_openssl.c:699
 #, fuzzy, c-format
 msgid "SSL handshake failed: %s"
 msgstr "Nelze zapsat do souboru: %s"
 
-#: src/ne_gnutls.c:1033
+#: src/ne_gnutls.c:1006
 #, c-format
 msgid "Server did not send certificate chain"
 msgstr ""
@@ -263,7 +263,7 @@ msgstr ""
 msgid "No activelock for <%s> returned in LOCK refresh response"
 msgstr ""
 
-#: src/ne_openssl.c:745
+#: src/ne_openssl.c:719
 #, c-format
 msgid "SSL server did not present certificate"
 msgstr ""
@@ -278,188 +278,188 @@ msgstr "Odpov
 msgid "Could not parse redirect destination URL"
 msgstr "Nelze zpracovat stavový øádek odpovìdi."
 
-#: src/ne_request.c:204
+#: src/ne_request.c:203
 #, fuzzy, c-format
 msgid "%s: connection was closed by proxy server"
 msgstr "%s: proxy server ukonèil spojení."
 
-#: src/ne_request.c:207
+#: src/ne_request.c:206
 #, fuzzy, c-format
 msgid "%s: connection was closed by server"
 msgstr "%s: server ukonèil spojení."
 
-#: src/ne_request.c:212
+#: src/ne_request.c:211
 #, fuzzy, c-format
 msgid "%s: connection timed out"
 msgstr "%s: spojení vypr¹elo."
 
 # src/console_fe.c:992
-#: src/ne_request.c:315
+#: src/ne_request.c:314
 #, fuzzy, c-format
 msgid "Premature EOF in request body file"
 msgstr "Nelze zapsat do souboru: %s"
 
 # src/console_fe.c:992
-#: src/ne_request.c:322
+#: src/ne_request.c:321
 #, fuzzy, c-format
 msgid "Failed reading request body file: %s"
 msgstr "Nelze zapsat do souboru: %s"
 
-#: src/ne_request.c:342
+#: src/ne_request.c:341
 msgid "offset invalid"
 msgstr ""
 
 # src/console_fe.c:992
-#: src/ne_request.c:347
+#: src/ne_request.c:346
 #, fuzzy, c-format
 msgid "Could not seek to offset %s of request body file: %s"
 msgstr "Nelze zapsat do souboru: %s"
 
-#: src/ne_request.c:433
+#: src/ne_request.c:432
 msgid "Could not send request body"
 msgstr "Nelze odeslat tìlo po¾adavku"
 
-#: src/ne_request.c:460
+#: src/ne_request.c:459
 #, fuzzy
 msgid "Could not send chunked request terminator"
 msgstr "Nelze poslat po¾adavek"
 
-#: src/ne_request.c:813
+#: src/ne_request.c:814
 msgid "Could not read chunk size"
 msgstr "Nelze naèíst velikost bloku"
 
-#: src/ne_request.c:820
+#: src/ne_request.c:821
 msgid "Could not parse chunk size"
 msgstr "Nelze zpracovat velikost bloku"
 
-#: src/ne_request.c:857
+#: src/ne_request.c:858
 msgid "Could not read response body"
 msgstr "Nelze naèíst tìlo odpovìdi"
 
-#: src/ne_request.c:873
+#: src/ne_request.c:874
 #, fuzzy
 msgid "Could not read chunk delimiter"
 msgstr "Nelze naèíst velikost bloku"
 
-#: src/ne_request.c:876
+#: src/ne_request.c:877
 msgid "Chunk delimiter was invalid"
 msgstr ""
 
-#: src/ne_request.c:989
+#: src/ne_request.c:990
 msgid "Could not read status line (TLS client certificate was requested)"
 msgstr ""
 
-#: src/ne_request.c:990
+#: src/ne_request.c:991
 msgid "Could not read status line"
 msgstr "Nelze pøeèíst stavový øádek"
 
-#: src/ne_request.c:1013
+#: src/ne_request.c:1014
 #, fuzzy
 msgid "Could not parse response status line"
 msgstr "Nelze zpracovat stavový øádek odpovìdi."
 
-#: src/ne_request.c:1048
+#: src/ne_request.c:1053
 msgid "Could not send request"
 msgstr "Nelze poslat po¾adavek"
 
-#: src/ne_request.c:1090
+#: src/ne_request.c:1095
 #, fuzzy
-msgid "Too many interim responses"
+msgid "Timed out reading interim responses"
 msgstr "Nelze naèíst tìlo odpovìdi"
 
-#: src/ne_request.c:1118 src/ne_request.c:1136 src/ne_request.c:1146
+#: src/ne_request.c:1124 src/ne_request.c:1142 src/ne_request.c:1152
 msgid "Error reading response headers"
 msgstr "Chyba pøi ètení hlavièek odpovìdi"
 
-#: src/ne_request.c:1164
+#: src/ne_request.c:1170
 #, c-format
 msgid "Response header too long"
 msgstr "Hlavièka odpovìdi je pøíli¹ dlouhá"
 
-#: src/ne_request.c:1251
+#: src/ne_request.c:1257
 #, fuzzy
 msgid "Response exceeded maximum number of header fields"
 msgstr "Odpovìï pøekrocila maximální poøet polo¾ek v hlavicce."
 
 # src/console_fe.c:956
-#: src/ne_request.c:1266
+#: src/ne_request.c:1272
 #, fuzzy, c-format
 msgid "Could not resolve hostname `%s': %s"
 msgstr "%s: Chyba: Nelze najít adresu vzdáleného poèítaèe (%s).\n"
 
-#: src/ne_request.c:1392
+#: src/ne_request.c:1398
 msgid "Unknown transfer-coding in response"
 msgstr ""
 
-#: src/ne_request.c:1407
+#: src/ne_request.c:1413
 msgid "Invalid Content-Length in response"
 msgstr ""
 
 # src/console_fe.c:992
-#: src/ne_request.c:1483
+#: src/ne_request.c:1489
 #, c-format
 msgid "Could not write to file: %s"
 msgstr "Nelze zapsat do souboru: %s"
 
-#: src/ne_request.c:1556
+#: src/ne_request.c:1562
 #, fuzzy, c-format
 msgid "Could not create SSL connection through proxy server: %s"
 msgstr "Nelze navázat SSL spojení pøes proxy server."
 
-#: src/ne_request.c:1595
+#: src/ne_request.c:1601
 #, fuzzy, c-format
 msgid "Could not create socket"
 msgstr "Nelze navázat SSL spojení"
 
 # src/console_fe.c:961
-#: src/ne_request.c:1629
+#: src/ne_request.c:1637
 msgid "Could not connect to server"
 msgstr "Nelze se pøipojit k serveru"
 
 # src/console_fe.c:961
-#: src/ne_request.c:1631
+#: src/ne_request.c:1639
 msgid "Could not connect to proxy server"
 msgstr "Nelze se pøipojit k proxy serveru"
 
-#: src/ne_request.c:1674
+#: src/ne_request.c:1682
 #, c-format
 msgid "Could not find IPv4 address of hostname %s for SOCKS v4 proxy"
 msgstr ""
 
-#: src/ne_request.c:1732
+#: src/ne_request.c:1740
 #, fuzzy, c-format
 msgid "Could not establish connection from SOCKS proxy (%s:%u): %s"
 msgstr "Nelze navázat SSL spojení pøes proxy server."
 
-#: src/ne_session.c:542 src/ne_session.c:553
+#: src/ne_session.c:555 src/ne_session.c:566
 msgid "[invalid date]"
 msgstr ""
 
-#: src/ne_session.c:566
+#: src/ne_session.c:579
 msgid "certificate is not yet valid"
 msgstr ""
 
-#: src/ne_session.c:567
+#: src/ne_session.c:580
 msgid "certificate has expired"
 msgstr ""
 
-#: src/ne_session.c:568
+#: src/ne_session.c:581
 msgid "certificate issued for a different hostname"
 msgstr ""
 
-#: src/ne_session.c:569
+#: src/ne_session.c:582
 msgid "issuer is not trusted"
 msgstr ""
 
-#: src/ne_session.c:570
+#: src/ne_session.c:583
 msgid "bad certificate chain"
 msgstr ""
 
-#: src/ne_session.c:571
+#: src/ne_session.c:584
 msgid "certificate has been revoked"
 msgstr ""
 
-#: src/ne_session.c:576
+#: src/ne_session.c:589
 msgid "Server certificate verification failed: "
 msgstr ""