[getdns-api] getdns 0.5.0 release

[Willem Toorop]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Dear All,

We have a new release version 0.5.0 of getdns.

This is mostly a new features release

This release does all crypto operations using OpenSSL directly and has
no longer a dependency on libldns. Note however that libldns is still
used by the unit tests.

Following the October 2015 release of the API specification, the
library can now access deeply embedded data structure members in
getdns_dicts by using JSON Pointers as the name to be accessed (RFC
6901). This works for the getter and setter functions
(getdns_dict_get_* and getdns_dict_set_*).

DNS over TLS now uses the default IANA assigned port number for
domain-s: 853.

This release includes an experimental implementation of upstream
server hostname authentication for TLS connections in stub mode (note
that the default behaviour has not changed compared to the 0.3
release). A new, non-standard function
getdns_context_set_tls_authentication() can be used to set the
authentication to GETDNS_AUTHENTICATION_ which requires that a server
provides a valid certificate (validated using the default CA
repository) and that the hostname specified in the "tls_auth_name"
field of the upstream dict matches that in the certificate. The
authentication setting is only enforced when the transport list
contains only GETDNS_TRANSPORT_TLS and in this case if authentication
fails for all upstreams, queries will fail. If the transport list
contains other clear text transports then opportunistic TLS will be
performed which does not require authentication of the TLS connection.
Examples of usage using the getdns_query tool can be found in the
tests_transports.sh script in the test directory.


link: https://getdnsapi.net/dist/getdns-0.5.0.tar.gz
md5 : b0458582455c8e1be9de1a41ac4fa889
sha1: 67aafdd6566bd3c99b51524191a036710819c7cd
pgp : https://getdnsapi.net/dist/getdns-0.5.0.tar.gz.asc


ChangeLog
=========
* 2015-10-29: Version 0.5.0
  * Native crypto. No ldns dependency anymore.
    (ldns still necessary to be able to run tests though)
  * JSON pointer arguments to getdns_dict_get_* and getdns_dict_set_*
    to dereference nested dicts and lists.
  * Bugfix: DNSSEC code finding zone cut with redirects + pursuing
    unsigned DS answers close to the root. Thanks Theogene Bucuti!
  * Default port for TLS changed to 853
  * Unofficial extension to the API to allow TLS hostname verification
    to be required for stub mode when using only TLS as a transport.
    When required a hostname must be supplied in the
    'hostname' field of the upstream_list dict and the TLS cipher
    suites are restricted to the 4 AEAD suites recommended in RFC7525.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=DtbJ
-----END PGP SIGNATURE-----