---
- branch: MAIN
  date: Sat Oct  9 10:54:12 UTC 2021
  files:
  - new: '1.82'
    old: '1.81'
    path: pkgsrc/www/neon/Makefile
    pathrev: pkgsrc/www/neon/Makefile@1.82
    type: modified
  - new: '1.23'
    old: '1.22'
    path: pkgsrc/www/neon/PLIST
    pathrev: pkgsrc/www/neon/PLIST@1.23
    type: modified
  - new: '1.32'
    old: '1.31'
    path: pkgsrc/www/neon/distinfo
    pathrev: pkgsrc/www/neon/distinfo@1.32
    type: modified
  id: 20211009T105412Z.1e87535f48e591ebfcb945fbcf167574f3edcacc
  log: |
    neon: update to 0.32.1.

    Changes in release 0.32.1:
    * Fix configure CFLAGS handling in Kerberos detection.
    * Various spelling fixes.

    Changes in release 0.32.0:
    * Interface changes:
     - API and ABI backwards-compatible with 0.27.x and later
     - NE_AUTH_DIGEST now only enables RFC 2617/7616 auth by default;
       to enable weaker RFC 2069 Digest, use NE_AUTH_LEGACY_DIGEST
       (treated as a security enhancement, not an API/ABI break)
    * Interface clarifications:
     - ne_auth.h: use of non-ASCII usernames with the ne_auth_creds
       callback type is now rejected for Digest auth since the
       encoding is not specified.  ne_add_auth() can be used instead.
     - ne_request.h: the ne_create_request_fn callback is passed the
       request-target using RFC 7230 terminology
    * New interfaces and features:
     - ne_string.h: added ne_strhash(), ne_vstrhash(), ne_strparam()
     - ne_auth.h: added RFC 7616 (Digest authentication) support,
       including userhash=, username*= and SHA-2 algorithms
       (SHA-2 requires GnuTLS/OpenSSL).  added NE_AUTH_LEGACY_DIGEST
     - ne_auth.h: added ne_add_auth() unified auth callback interface,
       accepts (only) UTF-8 usernames, uses a larger password buffer,
       and has different/improved attempt counter semantics.
     - RFC 7617 scoping rules are now applied for Basic authentication.
     - ne_ssl.h: added ne_ssl_cert_hdigest()
     - ne_socket.h: added ne_sock_shutdown()
     - sendmsg()/send() are used with the MSG_NOSIGNAL flag to write to
       sockets on Unix, rather than write()/writev(), avoiding SIGPIPE
     - explicit_bzero() is used where available to clear credentials
    * Bug fixes:
     - fixed TLS connection shutdown handling for OpenSSL 3
     - fix various Coverity and cppcheck warnings (Sebastian Reschke)
     - Kerberos library detection uses pkg-config where possible.
     - fix some configure checks on Win32 (Christopher Degawa)
     - fix some configure errors on MacOS (Ryan Schmidt)
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/www/neon'
  unixtime: '1633776852'
  user: wiz