<commit_before><PAGE>
	<INCLUDE file="inc/header.tmpl" />

	<VAR match="VAR_SEL_INDEX" replace="selected" />
	<VAR match="VAR_SEL_CHANGELOG" replace="selected" />
	<PARSE file="menu1.xml" />
	<PARSE file="menu2.xml" />
	
	<INCLUDE file="inc/content.tmpl" />

    	<h1>Changelog</h1>

<p>For full changelog entries including the latest development, see
<a href="http://git.infradead.org/users/dwmw2/openconnect.git">gitweb</a>.</p>
<ul>
   <li><b>OpenConnect HEAD</b>
     <ul>
       <li>Support for reading OTP token data from a file.</li>
       <li>Add full <a href="charset.html">character set handling</a> for legacy non-UTF8 systems <i>(including Windows)</i>.</li>
       <li>Fix legacy <i>(i.e. not XML POST)</i> submission of non-ASCII form entries <i>(even in UTF-8 locales)</i>.</li>
       <li>Add support for 32-bit Windows XP.</li>
       <li>Avoid retrying without XML POST, when we failed to even reach the server.</li>
       <li>Fix off-by-one in parameter substitution in error messages.</li>
       <li>Improve reporting when GSSAPI auth requested but not compiled in.</li>
       <li>Fix parsing of split include routes on Windows.</li>
       <li>Fix crash on invocation with <tt>--token-mode</tt> but no <tt>--token-secret</tt>.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-6.00.tar.gz">OpenConnect v6.00</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-6.00.tar.gz.asc">PGP signature</a>)</i> &#8212; 2014-07-08
     <ul>
       <li>Support SOCKS proxy authentication (password, GSSAPI).</li>
       <li>Support HTTP proxy authentication (Basic, Digest, NTLM and GSSAPI).</li>
       <li>Download XML profile in XML POST mode.</li>
       <li>Fix a couple of bugs involving DTLS rekeying.</li>
       <li>Fix problems seen when building or connecting without DTLS enabled.</li>
       <li>Fix tun error handling on Windows hosts.</li>
       <li>Skip password prompts when using PKCS#8 and PKCS#12 certificates with empty passwords.</li>
       <li>Fix several minor memory leaks and error paths.</li>
       <li>Update several Android dependencies, and make the download process more robust.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-5.99.tar.gz">OpenConnect v5.99</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-5.99.tar.gz.asc">PGP signature</a>)</i> &#8212; 2014-03-05
     <ul>
       <li>Add RFC4226 HOTP token support.</li>
       <li>Tolerate servers closing connection uncleanly after HTTP/1.0 response <a href="https://bugs.launchpad.net/bugs/1225276"><i>(Ubuntu #1225276)</i></a>.</li>
       <li>Add support for IPv6 split tunnel configuration.</li>
       <li>Add Windows support with MinGW <i>(tested with both IPv6 and Legacy IP with latest <a href="http://git.infradead.org/users/dwmw2/vpnc-scripts.git/blob_plain/HEAD:/vpnc-script-win.js">vpnc-script-win.js</a>)</i></li>
       <li>Change library API to support updating the auth form when the authgroup is changed <a href="https://bugs.launchpad.net/bugs/1229195"><i>(Ubuntu #1229195)</i></a>.</li>
       <li>Change <tt>--os mac</tt> to <tt>--os mac-intel</tt>, to match the identifier used by Cisco clients.</li>
       <li>Add new API functions to support invoking the VPN mainloop directly from an application.</li>
       <li>Add JNI interface and sample Java application.</li>
       <li>Fix junk in <tt>--cookieonly</tt> output when CSD is enabled.</li>
       <li>Enable TOTP, stoken, and JNI support in the Android builds.</li>
       <li>Add <tt>--pfs</tt> option to enforce perfect forward secrecy.</li>
       <li>Enable elliptic curves with GnuTLS 3.2.9+, where there is a
       workaround for certain firewalls that fail with client hellos between
       256 and 512 bytes.</li>
       <li>Add padding when sending password, to avoid leakage of password
       and username length.</li>
       <li>Add support for DTLS 1.2 and AES-GCM when connecting to ocserv.</li>
       <li>Add support for server name indication when compiled with GnuTLS
       3.2.9+.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-5.03.tar.gz">OpenConnect v5.03</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-5.03.tar.gz.asc">PGP signature</a>)</i> &#8212; 2014-02-03
     <ul>
       <li>Fix crash on <tt>--authenticate</tt> due to freeing <tt>--cafile</tt> option in <tt>argv</tt>.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-5.02.tar.gz">OpenConnect v5.02</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-5.02.tar.gz.asc">PGP signature</a>)</i> &#8212; 2014-01-01
     <ul>
       <li>Fix XML POST issues with authgroups by falling back to old style login.</li>
       <li>Fix <tt>--cookie-on-stdin</tt> with cookies from ocserv.</li>
       <li>Fix reconnection to wrong host after redirect.</li>
       <li>Reduce limit of queued packets on DTLS socket, to fix VoIP latency.</li>
       <li>Fix Solaris build breakage due to missing <tt>&amp;lt;string.h&amp;gt;</tt> includes.</li>
       <li>Include path in <tt>&amp;lt;group-access&amp;gt;</tt> node.</li>
       <li>Include supporting CA certificates from PKCS#11 tokens <i>(with GnuTLS 3.2.7+)</i>.</li>
       <li>Fix possible heap overflow if MTU is increased on reconnection (CVE-2013-7098).</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-5.01.tar.gz">OpenConnect v5.01</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-5.01.tar.gz.asc">PGP signature</a>)</i> &#8212; 2013-06-01
     <ul>
       <li>Attempt to handle <tt>&amp;lt;client-cert-request&amp;gt;</tt> in aggregate auth mode.</li>
       <li>Don't include <tt>X-Aggregate-Auth:</tt> header in fallback mode.</li>
       <li>Enable AES256 mode for DTLS with GnuTLS <a href="https://bugzilla.redhat.com/show_bug.cgi?id=955710"><i>(RH#955710)</i></a>.</li>
       <li>Add <tt>--dump-http-traffic</tt> option for debugging.</li>
       <li>Be more permissive in parsing XML forms.</li>
       <li>Use original URL when falling back to non-XML POST mode.</li>
       <li>Add <tt>--no-xmlpost</tt> option to revert to older, compatible behaviour.</li>
       <li>Close connection before falling back to non-xmlpost mode <a href="https://bugzilla.redhat.com/show_bug.cgi?id=964650"><i>(RH#964650)</i></a>.</li>
       <li>Improve error handling when server closes connection <a href="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=708928"><i>(Debian #708928)</i></a>.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-5.00.tar.gz">OpenConnect v5.00</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-5.00.tar.gz.asc">PGP signature</a>)</i> &#8212; 2013-05-15
     <ul>
       <li>Use GnuTLS by default instead of OpenSSL.</li>
       <li>Avoid using deprecated <tt>gnutls_pubkey_verify_data()</tt> function.</li>
       <li>Fix compatibility issues with XML POST authentication.</li>
       <li>Fix memory leaks on <tt>realloc()</tt> failure.</li>
       <li>Fix certificate validation problem caused by hostname canonicalisation.</li>
       <li>Add RFC6238 TOTP token support using <a href="http://www.nongnu.org/oath-toolkit/">liboath</a>.</li>
       <li>Replace <tt>--stoken</tt> option with more generic <tt>--token-mode</tt> and <tt>--token-secret</tt> options.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.99.tar.gz">OpenConnect v4.99</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.99.tar.gz.asc">PGP signature</a>)</i> &#8212; 2013-02-07
     <ul>
       <li>Add <tt>--os</tt> switch to report a different OS type to the gateway.</li>
       <li>Support new XML POST format.</li>
       <li>Add SecurID token support using <a href="http://stoken.sourceforge.net/">libstoken</a>.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.08.tar.gz">OpenConnect v4.08</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.08.tar.gz.asc">PGP signature</a>)</i> &#8212; 2013-02-13
     <ul>
       <li>Fix overflow on HTTP request buffers (CVE-2012-6128)</li>
       <li>Fix connection to servers with round-robin DNS with two-stage auth/connect.</li>
       <li>Impose minimum MTU of 1280 bytes.</li>
       <li>Fix some harmless issues reported by Coverity.</li>
       <li>Improve <tt>"Attempting to connect..."</tt> message to be explicit when it's connecting to a proxy.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.07.tar.gz">OpenConnect v4.07</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.07.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-08-31
     <ul>
       <li>Fix segmentation fault when invoked with <tt>-p</tt> argument.</li>
       <li>Fix handling of write stalls on CSTP (TCP) socket.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.06.tar.gz">OpenConnect v4.06</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.06.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-07-23
     <ul>
       <li>Fix default CA location for non-Fedora systems with old GnuTLS.</li>
       <li>Improve error handing when <tt>vpnc-script</tt> exits with error.</li>
       <li>Handle PKCS#11 tokens which won't list keys without login.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.05.tar.gz">OpenConnect v4.05</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.05.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-07-12
     <ul>
       <li>Use correct CSD script for Mac OS X.</li>
       <li>Fix endless loop in PIN cache handling with multiple PKCS#11 tokens.</li>
       <li>Fix PKCS#11 URI handling to preserve all attributes.</li>
       <li>Don't forget key password on GUI reconnect.</li>
       <li>Fix GnuTLS v3 build on OpenBSD.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.04.tar.gz">OpenConnect v4.04</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.04.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-07-05
     <ul>
       <li>Fix GnuTLS password handling for PKCS#8 files.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.03.tar.gz">OpenConnect v4.03</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.03.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-07-02
     <ul>
       <li>Fix <tt>--no-proxy</tt> option.</li>
       <li>Fix handling of requested vs. received MTU settings.</li>
       <li>Fix DTLS MTU for GnuTLS 3.0.21 and newer.</li>
       <li>Support more ciphers for OpenSSL encrypted PEM keys, with GnuTLS.</li>
       <li>Fix GnuTLS compatibilty issue with servers that insist on TLSv1.0 or non-AES ciphers <a href="https://bugzilla.redhat.com/show_bug.cgi?id=836558"><i>(RH#836558)</i></a>.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.02.tar.gz">OpenConnect v4.02</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.02.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-06-28
     <ul>
       <li>Fix build failure due to unconditional inclusion of <tt>&amp;lt;gnutls/dtls.h&amp;gt;</tt>.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.01.tar.gz">OpenConnect v4.01</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.01.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-06-28
     <ul>
       <li>Fix DTLS MTU issue with GnuTLS.</li>
       <li>Fix reconnect crash when compression is disabled.</li>
       <li>Fix build on systems like FreeBSD 8 without <tt>O_CLOEXEC</tt>.</li>
       <li>Add <tt>--dtls-local-port</tt> option.</li>
       <li>Print correct error when <tt>/dev/net/tun</tt> cannot be opened.</li>
       <li>Fix <tt>openconnect.pc</tt> pkg-config file not to require <tt>zlib.pc</tt> on systems which lack it (like RHEL5).</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.00.tar.gz">OpenConnect v4.00</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.00.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-06-20
     <ul>
       <li>Add support for OpenSSL's odd encrypted PKCS#1 files, for GnuTLS.</li>
       <li>Fix repeated passphrase retry for OpenSSL.</li>
       <li>Add keystore support for Android.</li>
       <li>Support TPM, and also additional checks on PKCS#11 certs, even with GnuTLS 2.12.</li>
       <li>Fix library references to OpenSSL's <tt>ERR_print_errors_cb()</tt> when built against GnuTLS v2.12.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.99.tar.gz">OpenConnect v3.99</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.99.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-06-13
     <ul>
       <li>Enable native TPM support when built with GnuTLS.</li>
       <li>Enable PKCS#11 token support when built with GnuTLS.</li>
       <li>Eliminate all SSL library exposure through <tt>libopenconnect</tt>.</li>
       <li>Parse split DNS information, provide <tt>$CISCO_SPLIT_DNS</tt> environment variable to <tt>vpnc-script</tt>.</li>
       <li>Attempt to provide new-style MTU information to server <i>(on Linux only, unless specified on command line)</i>.</li>
       <li>Allow building against GnuTLS, including DTLS support.</li>
       <li>Add <tt>--with-pkgconfigdir=</tt> option to <tt>configure</tt> for FreeBSD's benefit <i><a href="https://bugs.freedesktop.org/show_bug.cgi?id=48743">(fd#48743)</a></i>.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.20.tar.gz">OpenConnect v3.20</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.20.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-05-18
     <ul>
       <li>Cope with non-keepalive HTTP response on authentication success.</li>
       <li>Fix progress callback with incorrect <tt>cbdata</tt> which caused KDE crash.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.19.tar.gz">OpenConnect v3.19</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.19.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-05-17
     <ul>
       <li>Add <tt>--config</tt> option for reading options from file.</li>
       <li>Improve OpenSSL DTLS compatibility to work on Ubuntu 10.04.</li>
       <li>Flush progress logging output promptly after each message.</li>
       <li>Add symbol versioning for shared library (on sane platforms).</li>
       <li>Add <tt>openconnect_set_cancel_fd()</tt> function to allow clean cancellation.</li>
       <li>Fix corruption of URL in <tt>openconnect_parse_url()</tt> if it specifies a port number.</li>
       <li>Fix inappropriate <tt>exit()</tt> calls from library code.</li>
       <li>Library namespace cleanup &#8212; all symbols now have the prefix <tt>openconnect_</tt> on platforms where symbol versioning works.</li>
       <li>Fix <tt>--non-inter</tt> option so it still uses login information from command line.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.18.tar.gz">OpenConnect v3.18</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.18.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-04-25
     <ul>
       <li>Fix autohate breakage with <tt>--disable-nls</tt>... hopefully.</li>
       <li>Fix buffer overflow in banner handling.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.17.tar.gz">OpenConnect v3.17</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.17.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-04-20
     <ul>
       <li>Work around <tt>time()</tt> brokenness on Solaris.</li>
       <li>Fix interface plumbing on Solaris 10.</li>
       <li>Provide <tt>asprintf()</tt> function for (unpatched) Solaris 10.</li>
       <li>Make <tt>vpnc-script</tt> mandatory, like it is for <tt>vpnc</tt></li>
       <li>Don't set Legacy IP address on tun device; let <tt>vpnc-script</tt> do it.</li>
       <li>Detect OpenSSL even without pkg-config.</li>
       <li>Stop building static library by default.</li>
       <li>Invoke <tt>vpnc-script</tt> with "pre-init" reason to load tun module if necessary.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.16.tar.gz">OpenConnect v3.16</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.16.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-04-08
     <ul>
       <li>Fix build failure on Debian/kFreeBSD and Hurd.</li>
       <li>Fix memory leak of deflated packets.</li>
       <li>Fix memory leak of zlib state on CSTP reconnect.</li>
       <li>Eliminate <tt>memcpy()</tt> calls on packets from DTLS and tunnel device.</li>
       <li>Use <tt>I_LINK</tt> instead of <tt>I_PLINK</tt> on Solaris to plumb interface for Legacy IP.</li>
       <li>Plumb interface for IPv6 on Solaris, instead of expecting <tt>vpnc-script</tt> to do it.</li>
       <li>Refer to <a href="vpnc-script.html">vpnc-script</a> and <a href="mail.html">help</a> web pages in openconnect output.</li>
       <li>Fix potential crash when processing libproxy results.</li>
       <li>Be more conservative in detecting libproxy without pkg-config.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.15.tar.gz">OpenConnect v3.15</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.15.tar.gz.asc">PGP signature</a>)</i> &#8212; 2011-11-25
     <ul>
       <li>Fix for reading multiple packets from Solaris tun device.</li>
       <li>Call <tt>bindtextdomain()</tt> to ensure that translations are found in install path.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.14.tar.gz">OpenConnect v3.14</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.14.tar.gz.asc">PGP signature</a>)</i> &#8212; 2011-11-08
     <ul>
       <li>Move executable to <tt>$prefix/sbin</tt>.</li>
       <li>Fix build issues on OSX, OpenIndiana, DragonFlyBSD, OpenBSD, FreeBSD &amp;amp; NetBSD.</li>
       <li>Fix non-portable <tt>(void *)</tt> arithmetic.</li>
       <li>Make more messages translatable.</li>
       <li>Attempt to make NLS support more portable (with fewer dependencies).</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.13.tar.gz">OpenConnect v3.13</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.13.tar.gz.asc">PGP signature</a>)</i> &#8212; 2011-09-30
     <ul>
       <li>Add <tt>--cert-expire-warning</tt> option.</li>
       <li>Give visible warning when server dislikes client SSL certificate.</li>
       <li>Add localisation support.</li>
       <li>Fix build on Debian systems where <tt>dtls1_stop_timer()</tt> is not available.</li>
       <li>Fix libproxy detection.</li>
       <li>Enable a useful set of compiler warnings by default.</li>
       <li>Fix various minor compiler warnings.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.12.tar.gz">OpenConnect v3.12</a></b> &#8212; 2011-09-12
     <ul>
       <li>Fix DTLS compatibility with ASA firmware 8.4.1(11) and above.</li>
       <li>Fix build failures on GNU Hurd, on systems with ancient OpenSSL,
       and on Debian.</li>
       <li>Add <tt>--pid-file</tt> option.</li>
       <li>Print SHA1 fingerprint with server certificate details.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.11.tar.gz">OpenConnect v3.11</a></b> &#8212; 2011-07-20
     <ul>
       <li>Add <tt>Android.mk</tt> file for Android build support</li>
       <li>Add logging support for Android, in place of standard <tt>syslog()</tt>.</li>
       <li>Switch back to using TLSv1, but without extensions.</li>
       <li>Make TPM support optional, dependent on OpenSSL ENGINE support.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.10.tar.gz">OpenConnect v3.10</a></b> &#8212; 2011-06-30
     <ul>
       <li>Switch to using GNU autoconf/automake/libtool.</li>
       <li>Produce shared library for authentication.</li>
       <li>Improve library API to make life easier for C++ users.</li>
       <li>Be more explicit about requiring <tt>pkg-config</tt>.</li>
       <li>Invoke script with <tt>reason=reconnect</tt> on CSTP reconnect.</li>
       <li>Add <tt>--non-inter</tt> option to avoid all user input.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.02.tar.gz">OpenConnect v3.02</a></b> &#8212; 2011-04-19
     <ul>
       <li>Install man page in <tt>make install</tt> target.</li>
       <li>Add <tt>openconnect_vpninfo_free()</tt> to libopenconnect.</li>
       <li>Clear cached <tt>peer_addr</tt> to avoid reconnecting to wrong host.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.01.tar.gz">OpenConnect v3.01</a></b> &#8212; 2011-03-09
     <ul>
       <li>Add libxml2 to pkg-config requirements.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.00.tar.gz">OpenConnect v3.00</a></b> &#8212; 2011-03-09
     <ul>
       <li>Create libopenconnect.a for GUI authentication dialog to use.</li>
       <li>Remove auth-dialog, which now lives in the <a href="http://git.gnome.org/browse/network-manager-openconnect/">network-manager-openconnect</a> package.</li>
       <li>Cope with more entries in authentication forms.</li>
       <li>Add <tt>--csd-wrapper</tt> option to wrap CSD trojan.</li>
       <li>Report error and abort if CA file cannot be opened.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-2.26.tar.gz">OpenConnect v2.26</a></b> &#8212; 2010-09-22
     <ul>
       <li>Fix potential crash on relative HTTP redirect.</li>
       <li>Use correct TUN/TAP device node on Android.</li>
       <li>Check client certificate expiry date.</li>
       <li>Implement CSTP and DTLS rekeying <i>(both by reconnecting CSTP)</i>.</li>
       <li>Add <tt>--force-dpd</tt> option to set minimum DPD interval.</li>
       <li>Don't print <tt>webvpn</tt> cookie in debug output.</li>
       <li>Fix host selection in NetworkManager auth dialog.</li>
       <li>Use SSLv3 instead of TLSv1; some servers <i>(or their firewalls)</i>
	   don't accept any <tt>ClientHello</tt> options.</li>
       <li>Never include address family prefix on <tt>script-tun</tt> connections.</li> 
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-2.25.tar.gz">OpenConnect v2.25</a></b> &#8212; 2010-05-15
     <ul>
       <li>Always validate server certificate, even when no extra <tt>--cafile</tt> is provided.</li>
       <li>Add <tt>--no-cert-check</tt> option to avoid certificate validation.</li>
       <li>Check server hostname against its certificate.</li>
       <li>Provide text-mode function for reviewing and accepting "invalid" certificates.</li>
       <li>Fix libproxy detection on NetBSD.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-2.24.tar.gz">OpenConnect v2.24</a></b> &#8212; 2010-05-07
     <ul>
       <li>Forget preconfigured password after a single attempt; don't retry infinitely if it's failing.</li>
       <li>Set <tt>$CISCO_BANNER</tt> environment variable when running script.</li>
       <li>Better handling of passphrase failure on certificate files.</li>
       <li>Fix NetBSD build (thanks to Pouya D. Tafti).</li>
       <li>Fix DragonFly BSD build.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-2.23.tar.gz">OpenConnect v2.23</a></b> &#8212; 2010-04-09
     <ul>
       <li>Support "Cisco Secure Desktop" trojan in NetworkManager auth-dialog.</li>
       <li>Support proxy in NetworkManager auth-dialog.</li>
       <li>Add <tt>--no-http-keepalive</tt> option to work around Cisco's incompetence.</li>
       <li>Fix build on Debian/kFreeBSD.</li>
       <li>Fix crash on receiving HTTP 404 error.</li>
       <li>Improve workaround for server certificates lacking SSL_SERVER purpose, so that it also works with OpenSSL older than 0.9.8k.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-2.22.tar.gz">OpenConnect v2.22</a></b> &#8212; 2010-03-07
     <ul>
       <li>Fix bug handling port numbers above 9999.</li>
       <li>Ignore "<tt>Connection: Keep-Alive</tt>" in HTTP/1.0 to work around server bug with certificate authentication.</li>
       <li>Handle non-standard port (and full URLs) when used with NetworkManager.</li>
       <li>Cope with relative redirect and form URLs.</li>
       <li>Allocate HTTP receive buffer dynamically, to cope with arbitrary size of content.</li>
       <li>Fix server cert SHA1 comparison to be case-insensitive.</li>
       <li>Fix build on Solaris and OSX <i>(<tt>strndup()</tt>, <tt>AI_NUMERICSERV</tt>).</i></li>
       <li>Fix exit code with <tt>--background</tt> option.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-2.21.tar.gz">OpenConnect v2.21</a></b> &#8212; 2010-01-10
     <ul>
       <li>Fix handling of HTTP 1.0 responses with keepalive <a href="https://bugzilla.redhat.com/show_bug.cgi?id=553817"><i>(RH#553817)</i></a>.</li>
       <li>Fix case sensitivity in HTTP headers and hostname comparison on redirect.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-2.20.tar.gz">OpenConnect v2.20</a></b> &#8212; 2010-01-04
     <ul>
       <li>Fix use-after-free bug in NetworkManager authentication dialog <a href="https://bugzilla.redhat.com/show_bug.cgi?id=551665"><i>(RH#551665)</i></a>.</li>
       <li>Allow server to be specified with <tt>https://</tt> URL, including port and pathname (which Cisco calls 'UserGroup')</li>
       <li>Support connection through HTTP and SOCKS proxies.</li>
       <li>Handle HTTP redirection with port numbers.</li>
       <li>Handle HTTP redirection with IPv6 literal addresses.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-2.12.tar.gz">OpenConnect v2.12</a></b> &#8212; 2009-12-07
     <ul>
       <li>Fix buffer overflow when generating useragent string.</li>
       <li>Cope with idiotic schizoDNS configurations by not repeating DNS lookup for VPN server on reconnects.</li>
       <li>Support DragonFlyBSD. Probably.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-2.11.tar.gz">OpenConnect v2.11</a></b> &#8212; 2009-11-17
     <ul>
       <li>Add IPv6 support for FreeBSD.</li>
       <li>Support "split tunnel" mode for IPv6 routing.</li>
       <li>Fix bug where client certificate's MD5 was only given to the
	   CSD trojan if a PKCS#12 certificate was used.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-2.10.tar.gz">OpenConnect v2.10</a></b> &#8212; 2009-11-04
     <ul>
       <li>OpenSolaris support.</li>
       <li>Preliminary support for IPv6 connectivity.</li>
       <li>Fix session shutdown on exit.</li>
       <li>Fix reconnection when TCP connection is closed.</li>
       <li>Support for "Cisco Secure Desktop" idiocy.</li>
       <li>Allow <tt>User-Agent:</tt> to be specified on command line.</li>
       <li>Fix session termination on disconnect.</li>
       <li>Fix recognition of certificates from OpenSSL 1.0.0.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-2.01.tar.gz">OpenConnect v2.01</a></b> &#8212; 2009-06-24
     <ul>
       <li>Fix bug causing loss of DTLS (and lots of syslog spam about it)
	   after a CSTP reconnection.</li>
       <li>Don't apply OpenSSL certificate chain workaround if we already
	   have "extra" certificates loaded (e.g. from a PKCS#12 file).</li>
       <li>Load "extra" certificates from <tt>.pem</tt> files too.</li>
       <li>Fix SEGV caused by freeing certificates after processing cert
	   chain.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-2.00.tar.gz">OpenConnect v2.00</a></b> &#8212; 2009-06-03
      <ul>
	<li>Add OpenBSD and FreeBSD support.</li>
	<li>Build with OpenSSL-0.9.7 (Mac OS X, OpenBSD, etc.)</li>
	<li>Support PKCS#12 certificates.</li>
	<li>Automatic detection of certificate type (PKCS#12, PEM, TPM).</li>
	<li>Work around OpenSSL trust chain issues (<a href="http://rt.openssl.org/Ticket/Display.html?id=1942&amp;amp;user=guest&amp;amp;pass=guest">RT#1942</a>).</li>
	<li>Allow PEM passphrase to be specified on command line.</li>
	<li>Allow PEM passphrase automatically generated from the <tt>fsid</tt> of the file system on which the certificate is stored.</li>
	<li>Fix certificate comparisons (in NM auth-dialog and <tt>--servercert</tt> option) to use SHA1 fingerprint, not signature.</li>
	<li>Fix segfault in NM auth-dialog when changing hosts.</li>
      </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-1.40.tar.gz">OpenConnect v1.40</a></b> &#8212; 2009-05-27
      <ul>
	<li>Fix validation of server's SSL certificate when NetworkManager runs openconnect as an unprivileged user (which can't read the real user's trust chain file).</li>
	<li>Fix double-free of DTLS Cipher option on reconnect.</li>
	<li>Reconnect on SSL write errors</li>
	<li>Fix reporting of SSL errors through syslog/UI.</li>
      </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-1.30.tar.gz">OpenConnect v1.30</a></b> &#8212; 2009-05-13
      <ul>
	<li>NetworkManager auth-dialog will now cache authentication form options.</li>
      </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-1.20.tar.gz">OpenConnect v1.20</a></b> &#8212; 2009-05-08
      <ul>
	<li>DTLS cipher choice fixes.</li>
	<li>Improve handling of authentication group selection.</li>
	<li>Export more information to connection script.</li>
	<li>Add <tt>--background</tt> option to dæmonize after connection.</li>
	<li>Detect TCP connection closure.</li>
      </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-1.10.tar.gz">OpenConnect v1.10</a></b> &#8212; 2009-04-01
      <ul>
	<li>NetworkManager UI rewrite with many improvements.</li>
	<li>Support for "UserGroups" where a single server offers multiple
	configurations according to the URL used to connect.</li>
      </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-1.00.tar.gz">OpenConnect v1.00</a></b> &#8212; 2009-03-18
      <ul>
	<li>First non-beta release.</li>
      </ul>
  </li>
</ul>
	<INCLUDE file="inc/footer.tmpl" />
</PAGE>

<commit_msg>Update changelog<commit_after><PAGE>
	<INCLUDE file="inc/header.tmpl" />

	<VAR match="VAR_SEL_INDEX" replace="selected" />
	<VAR match="VAR_SEL_CHANGELOG" replace="selected" />
	<PARSE file="menu1.xml" />
	<PARSE file="menu2.xml" />
	
	<INCLUDE file="inc/content.tmpl" />

    	<h1>Changelog</h1>

<p>For full changelog entries including the latest development, see
<a href="http://git.infradead.org/users/dwmw2/openconnect.git">gitweb</a>.</p>
<ul>
   <li><b>OpenConnect HEAD</b>
     <ul>
       <li>Support for updating HOTP token storage when token is used.</li>
       <li>Support for reading OTP token data from a file.</li>
       <li>Add full <a href="charset.html">character set handling</a> for legacy non-UTF8 systems <i>(including Windows)</i>.</li>
       <li>Fix legacy <i>(i.e. not XML POST)</i> submission of non-ASCII form entries <i>(even in UTF-8 locales)</i>.</li>
       <li>Add support for 32-bit Windows XP.</li>
       <li>Avoid retrying without XML POST, when we failed to even reach the server.</li>
       <li>Fix off-by-one in parameter substitution in error messages.</li>
       <li>Improve reporting when GSSAPI auth requested but not compiled in.</li>
       <li>Fix parsing of split include routes on Windows.</li>
       <li>Fix crash on invocation with <tt>--token-mode</tt> but no <tt>--token-secret</tt>.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-6.00.tar.gz">OpenConnect v6.00</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-6.00.tar.gz.asc">PGP signature</a>)</i> &#8212; 2014-07-08
     <ul>
       <li>Support SOCKS proxy authentication (password, GSSAPI).</li>
       <li>Support HTTP proxy authentication (Basic, Digest, NTLM and GSSAPI).</li>
       <li>Download XML profile in XML POST mode.</li>
       <li>Fix a couple of bugs involving DTLS rekeying.</li>
       <li>Fix problems seen when building or connecting without DTLS enabled.</li>
       <li>Fix tun error handling on Windows hosts.</li>
       <li>Skip password prompts when using PKCS#8 and PKCS#12 certificates with empty passwords.</li>
       <li>Fix several minor memory leaks and error paths.</li>
       <li>Update several Android dependencies, and make the download process more robust.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-5.99.tar.gz">OpenConnect v5.99</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-5.99.tar.gz.asc">PGP signature</a>)</i> &#8212; 2014-03-05
     <ul>
       <li>Add RFC4226 HOTP token support.</li>
       <li>Tolerate servers closing connection uncleanly after HTTP/1.0 response <a href="https://bugs.launchpad.net/bugs/1225276"><i>(Ubuntu #1225276)</i></a>.</li>
       <li>Add support for IPv6 split tunnel configuration.</li>
       <li>Add Windows support with MinGW <i>(tested with both IPv6 and Legacy IP with latest <a href="http://git.infradead.org/users/dwmw2/vpnc-scripts.git/blob_plain/HEAD:/vpnc-script-win.js">vpnc-script-win.js</a>)</i></li>
       <li>Change library API to support updating the auth form when the authgroup is changed <a href="https://bugs.launchpad.net/bugs/1229195"><i>(Ubuntu #1229195)</i></a>.</li>
       <li>Change <tt>--os mac</tt> to <tt>--os mac-intel</tt>, to match the identifier used by Cisco clients.</li>
       <li>Add new API functions to support invoking the VPN mainloop directly from an application.</li>
       <li>Add JNI interface and sample Java application.</li>
       <li>Fix junk in <tt>--cookieonly</tt> output when CSD is enabled.</li>
       <li>Enable TOTP, stoken, and JNI support in the Android builds.</li>
       <li>Add <tt>--pfs</tt> option to enforce perfect forward secrecy.</li>
       <li>Enable elliptic curves with GnuTLS 3.2.9+, where there is a
       workaround for certain firewalls that fail with client hellos between
       256 and 512 bytes.</li>
       <li>Add padding when sending password, to avoid leakage of password
       and username length.</li>
       <li>Add support for DTLS 1.2 and AES-GCM when connecting to ocserv.</li>
       <li>Add support for server name indication when compiled with GnuTLS
       3.2.9+.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-5.03.tar.gz">OpenConnect v5.03</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-5.03.tar.gz.asc">PGP signature</a>)</i> &#8212; 2014-02-03
     <ul>
       <li>Fix crash on <tt>--authenticate</tt> due to freeing <tt>--cafile</tt> option in <tt>argv</tt>.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-5.02.tar.gz">OpenConnect v5.02</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-5.02.tar.gz.asc">PGP signature</a>)</i> &#8212; 2014-01-01
     <ul>
       <li>Fix XML POST issues with authgroups by falling back to old style login.</li>
       <li>Fix <tt>--cookie-on-stdin</tt> with cookies from ocserv.</li>
       <li>Fix reconnection to wrong host after redirect.</li>
       <li>Reduce limit of queued packets on DTLS socket, to fix VoIP latency.</li>
       <li>Fix Solaris build breakage due to missing <tt>&amp;lt;string.h&amp;gt;</tt> includes.</li>
       <li>Include path in <tt>&amp;lt;group-access&amp;gt;</tt> node.</li>
       <li>Include supporting CA certificates from PKCS#11 tokens <i>(with GnuTLS 3.2.7+)</i>.</li>
       <li>Fix possible heap overflow if MTU is increased on reconnection (CVE-2013-7098).</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-5.01.tar.gz">OpenConnect v5.01</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-5.01.tar.gz.asc">PGP signature</a>)</i> &#8212; 2013-06-01
     <ul>
       <li>Attempt to handle <tt>&amp;lt;client-cert-request&amp;gt;</tt> in aggregate auth mode.</li>
       <li>Don't include <tt>X-Aggregate-Auth:</tt> header in fallback mode.</li>
       <li>Enable AES256 mode for DTLS with GnuTLS <a href="https://bugzilla.redhat.com/show_bug.cgi?id=955710"><i>(RH#955710)</i></a>.</li>
       <li>Add <tt>--dump-http-traffic</tt> option for debugging.</li>
       <li>Be more permissive in parsing XML forms.</li>
       <li>Use original URL when falling back to non-XML POST mode.</li>
       <li>Add <tt>--no-xmlpost</tt> option to revert to older, compatible behaviour.</li>
       <li>Close connection before falling back to non-xmlpost mode <a href="https://bugzilla.redhat.com/show_bug.cgi?id=964650"><i>(RH#964650)</i></a>.</li>
       <li>Improve error handling when server closes connection <a href="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=708928"><i>(Debian #708928)</i></a>.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-5.00.tar.gz">OpenConnect v5.00</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-5.00.tar.gz.asc">PGP signature</a>)</i> &#8212; 2013-05-15
     <ul>
       <li>Use GnuTLS by default instead of OpenSSL.</li>
       <li>Avoid using deprecated <tt>gnutls_pubkey_verify_data()</tt> function.</li>
       <li>Fix compatibility issues with XML POST authentication.</li>
       <li>Fix memory leaks on <tt>realloc()</tt> failure.</li>
       <li>Fix certificate validation problem caused by hostname canonicalisation.</li>
       <li>Add RFC6238 TOTP token support using <a href="http://www.nongnu.org/oath-toolkit/">liboath</a>.</li>
       <li>Replace <tt>--stoken</tt> option with more generic <tt>--token-mode</tt> and <tt>--token-secret</tt> options.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.99.tar.gz">OpenConnect v4.99</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.99.tar.gz.asc">PGP signature</a>)</i> &#8212; 2013-02-07
     <ul>
       <li>Add <tt>--os</tt> switch to report a different OS type to the gateway.</li>
       <li>Support new XML POST format.</li>
       <li>Add SecurID token support using <a href="http://stoken.sourceforge.net/">libstoken</a>.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.08.tar.gz">OpenConnect v4.08</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.08.tar.gz.asc">PGP signature</a>)</i> &#8212; 2013-02-13
     <ul>
       <li>Fix overflow on HTTP request buffers (CVE-2012-6128)</li>
       <li>Fix connection to servers with round-robin DNS with two-stage auth/connect.</li>
       <li>Impose minimum MTU of 1280 bytes.</li>
       <li>Fix some harmless issues reported by Coverity.</li>
       <li>Improve <tt>"Attempting to connect..."</tt> message to be explicit when it's connecting to a proxy.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.07.tar.gz">OpenConnect v4.07</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.07.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-08-31
     <ul>
       <li>Fix segmentation fault when invoked with <tt>-p</tt> argument.</li>
       <li>Fix handling of write stalls on CSTP (TCP) socket.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.06.tar.gz">OpenConnect v4.06</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.06.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-07-23
     <ul>
       <li>Fix default CA location for non-Fedora systems with old GnuTLS.</li>
       <li>Improve error handing when <tt>vpnc-script</tt> exits with error.</li>
       <li>Handle PKCS#11 tokens which won't list keys without login.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.05.tar.gz">OpenConnect v4.05</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.05.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-07-12
     <ul>
       <li>Use correct CSD script for Mac OS X.</li>
       <li>Fix endless loop in PIN cache handling with multiple PKCS#11 tokens.</li>
       <li>Fix PKCS#11 URI handling to preserve all attributes.</li>
       <li>Don't forget key password on GUI reconnect.</li>
       <li>Fix GnuTLS v3 build on OpenBSD.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.04.tar.gz">OpenConnect v4.04</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.04.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-07-05
     <ul>
       <li>Fix GnuTLS password handling for PKCS#8 files.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.03.tar.gz">OpenConnect v4.03</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.03.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-07-02
     <ul>
       <li>Fix <tt>--no-proxy</tt> option.</li>
       <li>Fix handling of requested vs. received MTU settings.</li>
       <li>Fix DTLS MTU for GnuTLS 3.0.21 and newer.</li>
       <li>Support more ciphers for OpenSSL encrypted PEM keys, with GnuTLS.</li>
       <li>Fix GnuTLS compatibilty issue with servers that insist on TLSv1.0 or non-AES ciphers <a href="https://bugzilla.redhat.com/show_bug.cgi?id=836558"><i>(RH#836558)</i></a>.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.02.tar.gz">OpenConnect v4.02</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.02.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-06-28
     <ul>
       <li>Fix build failure due to unconditional inclusion of <tt>&amp;lt;gnutls/dtls.h&amp;gt;</tt>.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.01.tar.gz">OpenConnect v4.01</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.01.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-06-28
     <ul>
       <li>Fix DTLS MTU issue with GnuTLS.</li>
       <li>Fix reconnect crash when compression is disabled.</li>
       <li>Fix build on systems like FreeBSD 8 without <tt>O_CLOEXEC</tt>.</li>
       <li>Add <tt>--dtls-local-port</tt> option.</li>
       <li>Print correct error when <tt>/dev/net/tun</tt> cannot be opened.</li>
       <li>Fix <tt>openconnect.pc</tt> pkg-config file not to require <tt>zlib.pc</tt> on systems which lack it (like RHEL5).</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.00.tar.gz">OpenConnect v4.00</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.00.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-06-20
     <ul>
       <li>Add support for OpenSSL's odd encrypted PKCS#1 files, for GnuTLS.</li>
       <li>Fix repeated passphrase retry for OpenSSL.</li>
       <li>Add keystore support for Android.</li>
       <li>Support TPM, and also additional checks on PKCS#11 certs, even with GnuTLS 2.12.</li>
       <li>Fix library references to OpenSSL's <tt>ERR_print_errors_cb()</tt> when built against GnuTLS v2.12.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.99.tar.gz">OpenConnect v3.99</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.99.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-06-13
     <ul>
       <li>Enable native TPM support when built with GnuTLS.</li>
       <li>Enable PKCS#11 token support when built with GnuTLS.</li>
       <li>Eliminate all SSL library exposure through <tt>libopenconnect</tt>.</li>
       <li>Parse split DNS information, provide <tt>$CISCO_SPLIT_DNS</tt> environment variable to <tt>vpnc-script</tt>.</li>
       <li>Attempt to provide new-style MTU information to server <i>(on Linux only, unless specified on command line)</i>.</li>
       <li>Allow building against GnuTLS, including DTLS support.</li>
       <li>Add <tt>--with-pkgconfigdir=</tt> option to <tt>configure</tt> for FreeBSD's benefit <i><a href="https://bugs.freedesktop.org/show_bug.cgi?id=48743">(fd#48743)</a></i>.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.20.tar.gz">OpenConnect v3.20</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.20.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-05-18
     <ul>
       <li>Cope with non-keepalive HTTP response on authentication success.</li>
       <li>Fix progress callback with incorrect <tt>cbdata</tt> which caused KDE crash.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.19.tar.gz">OpenConnect v3.19</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.19.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-05-17
     <ul>
       <li>Add <tt>--config</tt> option for reading options from file.</li>
       <li>Improve OpenSSL DTLS compatibility to work on Ubuntu 10.04.</li>
       <li>Flush progress logging output promptly after each message.</li>
       <li>Add symbol versioning for shared library (on sane platforms).</li>
       <li>Add <tt>openconnect_set_cancel_fd()</tt> function to allow clean cancellation.</li>
       <li>Fix corruption of URL in <tt>openconnect_parse_url()</tt> if it specifies a port number.</li>
       <li>Fix inappropriate <tt>exit()</tt> calls from library code.</li>
       <li>Library namespace cleanup &#8212; all symbols now have the prefix <tt>openconnect_</tt> on platforms where symbol versioning works.</li>
       <li>Fix <tt>--non-inter</tt> option so it still uses login information from command line.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.18.tar.gz">OpenConnect v3.18</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.18.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-04-25
     <ul>
       <li>Fix autohate breakage with <tt>--disable-nls</tt>... hopefully.</li>
       <li>Fix buffer overflow in banner handling.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.17.tar.gz">OpenConnect v3.17</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.17.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-04-20
     <ul>
       <li>Work around <tt>time()</tt> brokenness on Solaris.</li>
       <li>Fix interface plumbing on Solaris 10.</li>
       <li>Provide <tt>asprintf()</tt> function for (unpatched) Solaris 10.</li>
       <li>Make <tt>vpnc-script</tt> mandatory, like it is for <tt>vpnc</tt></li>
       <li>Don't set Legacy IP address on tun device; let <tt>vpnc-script</tt> do it.</li>
       <li>Detect OpenSSL even without pkg-config.</li>
       <li>Stop building static library by default.</li>
       <li>Invoke <tt>vpnc-script</tt> with "pre-init" reason to load tun module if necessary.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.16.tar.gz">OpenConnect v3.16</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.16.tar.gz.asc">PGP signature</a>)</i> &#8212; 2012-04-08
     <ul>
       <li>Fix build failure on Debian/kFreeBSD and Hurd.</li>
       <li>Fix memory leak of deflated packets.</li>
       <li>Fix memory leak of zlib state on CSTP reconnect.</li>
       <li>Eliminate <tt>memcpy()</tt> calls on packets from DTLS and tunnel device.</li>
       <li>Use <tt>I_LINK</tt> instead of <tt>I_PLINK</tt> on Solaris to plumb interface for Legacy IP.</li>
       <li>Plumb interface for IPv6 on Solaris, instead of expecting <tt>vpnc-script</tt> to do it.</li>
       <li>Refer to <a href="vpnc-script.html">vpnc-script</a> and <a href="mail.html">help</a> web pages in openconnect output.</li>
       <li>Fix potential crash when processing libproxy results.</li>
       <li>Be more conservative in detecting libproxy without pkg-config.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.15.tar.gz">OpenConnect v3.15</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.15.tar.gz.asc">PGP signature</a>)</i> &#8212; 2011-11-25
     <ul>
       <li>Fix for reading multiple packets from Solaris tun device.</li>
       <li>Call <tt>bindtextdomain()</tt> to ensure that translations are found in install path.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.14.tar.gz">OpenConnect v3.14</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.14.tar.gz.asc">PGP signature</a>)</i> &#8212; 2011-11-08
     <ul>
       <li>Move executable to <tt>$prefix/sbin</tt>.</li>
       <li>Fix build issues on OSX, OpenIndiana, DragonFlyBSD, OpenBSD, FreeBSD &amp;amp; NetBSD.</li>
       <li>Fix non-portable <tt>(void *)</tt> arithmetic.</li>
       <li>Make more messages translatable.</li>
       <li>Attempt to make NLS support more portable (with fewer dependencies).</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.13.tar.gz">OpenConnect v3.13</a></b>
     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.13.tar.gz.asc">PGP signature</a>)</i> &#8212; 2011-09-30
     <ul>
       <li>Add <tt>--cert-expire-warning</tt> option.</li>
       <li>Give visible warning when server dislikes client SSL certificate.</li>
       <li>Add localisation support.</li>
       <li>Fix build on Debian systems where <tt>dtls1_stop_timer()</tt> is not available.</li>
       <li>Fix libproxy detection.</li>
       <li>Enable a useful set of compiler warnings by default.</li>
       <li>Fix various minor compiler warnings.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.12.tar.gz">OpenConnect v3.12</a></b> &#8212; 2011-09-12
     <ul>
       <li>Fix DTLS compatibility with ASA firmware 8.4.1(11) and above.</li>
       <li>Fix build failures on GNU Hurd, on systems with ancient OpenSSL,
       and on Debian.</li>
       <li>Add <tt>--pid-file</tt> option.</li>
       <li>Print SHA1 fingerprint with server certificate details.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.11.tar.gz">OpenConnect v3.11</a></b> &#8212; 2011-07-20
     <ul>
       <li>Add <tt>Android.mk</tt> file for Android build support</li>
       <li>Add logging support for Android, in place of standard <tt>syslog()</tt>.</li>
       <li>Switch back to using TLSv1, but without extensions.</li>
       <li>Make TPM support optional, dependent on OpenSSL ENGINE support.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.10.tar.gz">OpenConnect v3.10</a></b> &#8212; 2011-06-30
     <ul>
       <li>Switch to using GNU autoconf/automake/libtool.</li>
       <li>Produce shared library for authentication.</li>
       <li>Improve library API to make life easier for C++ users.</li>
       <li>Be more explicit about requiring <tt>pkg-config</tt>.</li>
       <li>Invoke script with <tt>reason=reconnect</tt> on CSTP reconnect.</li>
       <li>Add <tt>--non-inter</tt> option to avoid all user input.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.02.tar.gz">OpenConnect v3.02</a></b> &#8212; 2011-04-19
     <ul>
       <li>Install man page in <tt>make install</tt> target.</li>
       <li>Add <tt>openconnect_vpninfo_free()</tt> to libopenconnect.</li>
       <li>Clear cached <tt>peer_addr</tt> to avoid reconnecting to wrong host.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.01.tar.gz">OpenConnect v3.01</a></b> &#8212; 2011-03-09
     <ul>
       <li>Add libxml2 to pkg-config requirements.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-3.00.tar.gz">OpenConnect v3.00</a></b> &#8212; 2011-03-09
     <ul>
       <li>Create libopenconnect.a for GUI authentication dialog to use.</li>
       <li>Remove auth-dialog, which now lives in the <a href="http://git.gnome.org/browse/network-manager-openconnect/">network-manager-openconnect</a> package.</li>
       <li>Cope with more entries in authentication forms.</li>
       <li>Add <tt>--csd-wrapper</tt> option to wrap CSD trojan.</li>
       <li>Report error and abort if CA file cannot be opened.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-2.26.tar.gz">OpenConnect v2.26</a></b> &#8212; 2010-09-22
     <ul>
       <li>Fix potential crash on relative HTTP redirect.</li>
       <li>Use correct TUN/TAP device node on Android.</li>
       <li>Check client certificate expiry date.</li>
       <li>Implement CSTP and DTLS rekeying <i>(both by reconnecting CSTP)</i>.</li>
       <li>Add <tt>--force-dpd</tt> option to set minimum DPD interval.</li>
       <li>Don't print <tt>webvpn</tt> cookie in debug output.</li>
       <li>Fix host selection in NetworkManager auth dialog.</li>
       <li>Use SSLv3 instead of TLSv1; some servers <i>(or their firewalls)</i>
	   don't accept any <tt>ClientHello</tt> options.</li>
       <li>Never include address family prefix on <tt>script-tun</tt> connections.</li> 
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-2.25.tar.gz">OpenConnect v2.25</a></b> &#8212; 2010-05-15
     <ul>
       <li>Always validate server certificate, even when no extra <tt>--cafile</tt> is provided.</li>
       <li>Add <tt>--no-cert-check</tt> option to avoid certificate validation.</li>
       <li>Check server hostname against its certificate.</li>
       <li>Provide text-mode function for reviewing and accepting "invalid" certificates.</li>
       <li>Fix libproxy detection on NetBSD.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-2.24.tar.gz">OpenConnect v2.24</a></b> &#8212; 2010-05-07
     <ul>
       <li>Forget preconfigured password after a single attempt; don't retry infinitely if it's failing.</li>
       <li>Set <tt>$CISCO_BANNER</tt> environment variable when running script.</li>
       <li>Better handling of passphrase failure on certificate files.</li>
       <li>Fix NetBSD build (thanks to <NAME>).</li>
       <li>Fix DragonFly BSD build.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-2.23.tar.gz">OpenConnect v2.23</a></b> &#8212; 2010-04-09
     <ul>
       <li>Support "Cisco Secure Desktop" trojan in NetworkManager auth-dialog.</li>
       <li>Support proxy in NetworkManager auth-dialog.</li>
       <li>Add <tt>--no-http-keepalive</tt> option to work around Cisco's incompetence.</li>
       <li>Fix build on Debian/kFreeBSD.</li>
       <li>Fix crash on receiving HTTP 404 error.</li>
       <li>Improve workaround for server certificates lacking SSL_SERVER purpose, so that it also works with OpenSSL older than 0.9.8k.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-2.22.tar.gz">OpenConnect v2.22</a></b> &#8212; 2010-03-07
     <ul>
       <li>Fix bug handling port numbers above 9999.</li>
       <li>Ignore "<tt>Connection: Keep-Alive</tt>" in HTTP/1.0 to work around server bug with certificate authentication.</li>
       <li>Handle non-standard port (and full URLs) when used with NetworkManager.</li>
       <li>Cope with relative redirect and form URLs.</li>
       <li>Allocate HTTP receive buffer dynamically, to cope with arbitrary size of content.</li>
       <li>Fix server cert SHA1 comparison to be case-insensitive.</li>
       <li>Fix build on Solaris and OSX <i>(<tt>strndup()</tt>, <tt>AI_NUMERICSERV</tt>).</i></li>
       <li>Fix exit code with <tt>--background</tt> option.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-2.21.tar.gz">OpenConnect v2.21</a></b> &#8212; 2010-01-10
     <ul>
       <li>Fix handling of HTTP 1.0 responses with keepalive <a href="https://bugzilla.redhat.com/show_bug.cgi?id=553817"><i>(RH#553817)</i></a>.</li>
       <li>Fix case sensitivity in HTTP headers and hostname comparison on redirect.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-2.20.tar.gz">OpenConnect v2.20</a></b> &#8212; 2010-01-04
     <ul>
       <li>Fix use-after-free bug in NetworkManager authentication dialog <a href="https://bugzilla.redhat.com/show_bug.cgi?id=551665"><i>(RH#551665)</i></a>.</li>
       <li>Allow server to be specified with <tt>https://</tt> URL, including port and pathname (which Cisco calls 'UserGroup')</li>
       <li>Support connection through HTTP and SOCKS proxies.</li>
       <li>Handle HTTP redirection with port numbers.</li>
       <li>Handle HTTP redirection with IPv6 literal addresses.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-2.12.tar.gz">OpenConnect v2.12</a></b> &#8212; 2009-12-07
     <ul>
       <li>Fix buffer overflow when generating useragent string.</li>
       <li>Cope with idiotic schizoDNS configurations by not repeating DNS lookup for VPN server on reconnects.</li>
       <li>Support DragonFlyBSD. Probably.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-2.11.tar.gz">OpenConnect v2.11</a></b> &#8212; 2009-11-17
     <ul>
       <li>Add IPv6 support for FreeBSD.</li>
       <li>Support "split tunnel" mode for IPv6 routing.</li>
       <li>Fix bug where client certificate's MD5 was only given to the
	   CSD trojan if a PKCS#12 certificate was used.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-2.10.tar.gz">OpenConnect v2.10</a></b> &#8212; 2009-11-04
     <ul>
       <li>OpenSolaris support.</li>
       <li>Preliminary support for IPv6 connectivity.</li>
       <li>Fix session shutdown on exit.</li>
       <li>Fix reconnection when TCP connection is closed.</li>
       <li>Support for "Cisco Secure Desktop" idiocy.</li>
       <li>Allow <tt>User-Agent:</tt> to be specified on command line.</li>
       <li>Fix session termination on disconnect.</li>
       <li>Fix recognition of certificates from OpenSSL 1.0.0.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-2.01.tar.gz">OpenConnect v2.01</a></b> &#8212; 2009-06-24
     <ul>
       <li>Fix bug causing loss of DTLS (and lots of syslog spam about it)
	   after a CSTP reconnection.</li>
       <li>Don't apply OpenSSL certificate chain workaround if we already
	   have "extra" certificates loaded (e.g. from a PKCS#12 file).</li>
       <li>Load "extra" certificates from <tt>.pem</tt> files too.</li>
       <li>Fix SEGV caused by freeing certificates after processing cert
	   chain.</li>
     </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-2.00.tar.gz">OpenConnect v2.00</a></b> &#8212; 2009-06-03
      <ul>
	<li>Add OpenBSD and FreeBSD support.</li>
	<li>Build with OpenSSL-0.9.7 (Mac OS X, OpenBSD, etc.)</li>
	<li>Support PKCS#12 certificates.</li>
	<li>Automatic detection of certificate type (PKCS#12, PEM, TPM).</li>
	<li>Work around OpenSSL trust chain issues (<a href="http://rt.openssl.org/Ticket/Display.html?id=1942&amp;amp;user=guest&amp;amp;pass=guest">RT#1942</a>).</li>
	<li>Allow PEM passphrase to be specified on command line.</li>
	<li>Allow PEM passphrase automatically generated from the <tt>fsid</tt> of the file system on which the certificate is stored.</li>
	<li>Fix certificate comparisons (in NM auth-dialog and <tt>--servercert</tt> option) to use SHA1 fingerprint, not signature.</li>
	<li>Fix segfault in NM auth-dialog when changing hosts.</li>
      </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-1.40.tar.gz">OpenConnect v1.40</a></b> &#8212; 2009-05-27
      <ul>
	<li>Fix validation of server's SSL certificate when NetworkManager runs openconnect as an unprivileged user (which can't read the real user's trust chain file).</li>
	<li>Fix double-free of DTLS Cipher option on reconnect.</li>
	<li>Reconnect on SSL write errors</li>
	<li>Fix reporting of SSL errors through syslog/UI.</li>
      </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-1.30.tar.gz">OpenConnect v1.30</a></b> &#8212; 2009-05-13
      <ul>
	<li>NetworkManager auth-dialog will now cache authentication form options.</li>
      </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-1.20.tar.gz">OpenConnect v1.20</a></b> &#8212; 2009-05-08
      <ul>
	<li>DTLS cipher choice fixes.</li>
	<li>Improve handling of authentication group selection.</li>
	<li>Export more information to connection script.</li>
	<li>Add <tt>--background</tt> option to dæmonize after connection.</li>
	<li>Detect TCP connection closure.</li>
      </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-1.10.tar.gz">OpenConnect v1.10</a></b> &#8212; 2009-04-01
      <ul>
	<li>NetworkManager UI rewrite with many improvements.</li>
	<li>Support for "UserGroups" where a single server offers multiple
	configurations according to the URL used to connect.</li>
      </ul><br/>
  </li>
  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-1.00.tar.gz">OpenConnect v1.00</a></b> &#8212; 2009-03-18
      <ul>
	<li>First non-beta release.</li>
      </ul>
  </li>
</ul>
	<INCLUDE file="inc/footer.tmpl" />
</PAGE>


{'fraction_non_alphanumeric': 0.17956319482772215, 'fraction_numerical': 0.03816131830008673, 'mean_word_length': 3.2988069414316703, 'pattern_counts': {'":': 0, '<': 2604, '<?xml version=': 0, '>': 2604, 'https://': 18, 'lorem ipsum': 0, 'www.': 2, 'xml': 10}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 4, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '761840', 'n_tokens_mistral': 24547, 'n_tokens_neox': 22400, 'n_words': 5283}