2016-02-18  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	bindings/php5: fix enum getters and setters (fixes #10032)
	enumeration type were being wrongly interpreted as objects types because
	is_object() was used instead of the local specialisation done in
	PhpCode.is_object().

	Also fix docstring of getters/setters.

2016-02-18  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	tools.c: use correct NID and digest length when building RSA signature using SHA-2 digest (fixes #10019)
	Thanks to Brett Gardner for the bug report and patch.

	Licence: MIT

2016-01-13  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Fix wrong snippet type (fixes #9616)
	In elements samlp2:RequestedAuthnContext, Comparison is an attribute, not a text
	child node.

2016-01-11  Frédéric Péters  <fpeters@entrouvert.com>

	perl: remove quotes from $PERL -V::ccflags: output (#9572)

2015-11-25  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	tests: update valgrind suppressions

	tests: fix leak

	saml-2.0: fix leaks of url

	profile: fix leak of private idp_list field

	xml: fix leak in lasso_soap_envelope_new_full

2015-11-24  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	xml: fix wrong termination of comment

	tests: fix leaks in test_ecp

	saml-2.0: fix leak of message_id in lasso_profile_saml20_build_paos_request_msg

	id-ff: fix leak of profile->private_data->message_id

	tests: fix leak in test test16_test_get_issuer

2015-10-30  Rob Crittenden  <rcritten@redhat.com>

	Set NotBefore in SAML 2.0 login assertions
	License: MIT

2015-10-15  John Dennis  <jdennis@redhat.com>

	Add missing urn constants used in PAOS HTTP header
	The new OASIS "SAML V2.0 Enhanced Client or Proxy Profile Version 2.0"
	specification added new options that can appear in the PAOS HTTP header.

	Section 2.3.1 enumerates the following URN options which can appear
	in the PAOS HEADER:

	urn:oasis:names:tc:SAML:protocol:ext:channel-binding
	urn:oasis:names:tc:SAML:2.0:cm:holder-of-key
	urn:oasis:names:tc:SAML:2.0:profiles:SSO:ecp:2.0:WantAuthnRequestsSigned
	urn:oasis:names:tc:SAML:2.0:conditions:delegation

	Of these only the holder-of-key was previously defined in Lasso,
	this patch adds the other 3 constants.

	License: MIT

2015-09-02  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Release 2.5.0

	remove errors.c, it breaks computation of version from tags

	java: fix AllJunitTests generation when building out of source directory

2015-09-01  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Revert "Add messageID and idp_list to profile properties"
	This reverts commit b10c48058ed5942b135712f46888e0697fb593ff.

2015-09-01  John Dennis  <jdennis@redhat.com>

	fix test08_lasso_key test failure
	Note: the rest of this message is formatted as reStructuredText (rst).

	Test Failure
	============

	The unit tests run by "make check" fail with the following error:

	::

	    tests.c:61:F:Lasso keys:test08_lasso_key:0: No logging output expected: message «ID _E3F8E9116EE08F0E2607CF9789649BB4 already defined
	    » was emitted for domain «Lasso» at the level «128»

	This is not a regression in Lasso, rather the failure is caused by one
	of the components Lasso is dependent upon. It was first observed when
	the identical Lasso package was built in Fedora 22, no problems were
	observed in Fedora 21. This implies one or more updated components in
	Fedora 22 is the cause.

	This was a particularity difficult error to track down, first one had
	to identify who was emitting the message and on what file descriptor
	(stream) and who was triggering on the message emission and causing a
	check failure. The obvious assumption the check library was
	responsible for detecting the message emission and failing the test is
	wrong.

	Who is emitting the message and why?
	------------------------------------

	The message is emitted by libxml2 in the function `xmlAddID()`
	(valid.c:2578). It occurs at the end of xmlAddID() when it detects the
	ID (which is supposed to be unique to the document is already defined,
	which for valid XML is illegal (violates uniquenesss constraint). The
	message emission occurs because of the code fragment

	::

	        if (xmlHashAddEntry(table, value, ret) < 0) {
	    #ifdef LIBXML_VALID_ENABLED
	            /*
	             * The id is already defined in this DTD.
	             */
	            xmlErrValidNode(ctxt, attr->parent, XML_DTD_ID_REDEFINED,
	                            "ID %s already defined\n", value, NULL, NULL);
	    #endif /* LIBXML_VALID_ENABLED */
	            xmlFreeID(ret);
	            return(NULL);
	        }

	Why is the message emission different between libxml2 versions?
	---------------------------------------------------------------

	The change occured between libxml2 version 2.9.1 and 2.9.2 in commit
	a16eb968075a82ec33b2c1e77db8909a35b44620

	::

	    commit a16eb968075a82ec33b2c1e77db8909a35b44620
	    Author: Daniel Veillard <veillard@redhat.com>
	    Date:   Tue Jun 10 16:06:14 2014 +0800

	        erroneously ignores a validation error if no error callback set

	        Reported by Stefan Behnel
	        https://bugzilla.gnome.org/show_bug.cgi?id=724903

	    diff --git a/valid.c b/valid.c
	    index aedd9d7..1e03a7c 100644
	    --- a/valid.c
	    +++ b/valid.c
	    @@ -2633,11 +2633,8 @@ xmlAddID(xmlValidCtxtPtr ctxt, xmlDocPtr doc, const xmlChar *value,
	            /*
	             * The id is already defined in this DTD.
	             */
	    -	if ((ctxt != NULL) && (ctxt->error != NULL)) {
	    -	    xmlErrValidNode(ctxt, attr->parent, XML_DTD_ID_REDEFINED,
	    -	                    "ID %s already defined\n",
	    -			    value, NULL, NULL);
	    -	}
	    +	xmlErrValidNode(ctxt, attr->parent, XML_DTD_ID_REDEFINED,
	    +			"ID %s already defined\n", value, NULL, NULL);
	     #endif /* LIBXML_VALID_ENABLED */
	            xmlFreeID(ret);
	            return(NULL);

	In both versions of libxml2 the conditional complilation
	LIBXML_VALID_ENABLED is enabled by default via the configure
	script. What is different is the the requirement ctxt be
	non-NULL. Lasso invokes xmlAddID with a NULL ctxt parameter. Because
	the NULL test for ctxt is absent in libxlm2 2.9.2 the message is now
	emitted where previously it was not.

	Who triggers on messge emission and fails the test?
	---------------------------------------------------

	This is a Lasso feature, it is not part of libcheck. In tests/tests.c
	is the following function

	::

	    void error_logger(const gchar *log_domain, GLogLevelFlags log_level,
	                    const gchar *message, G_GNUC_UNUSED gpointer user_data)
	    {
	            fail("No logging output expected: message «%s» was emitted for domain «%s» at the level"
	                            " «%d»", message, log_domain, log_level);
	    }

	Before the test are run the error_logger function is installed as a
	glib handler

	::

	    g_log_set_default_handler(error_logger, NULL);

	When the message is emitted the error_logger traps it and invokes the
	libcheck (deprecated) function fail() which aborts the test case.

	Why does `test08_lasso_key` cause an XML validation failure?
	------------------------------------------------------------

	`test08_lasso_key` invokes `lasso_key_saml2_xml_verify()` twice on the
	same XML document. Any time `lasso_key_saml2_xml_verify()` is called
	more than once the XML validation will fail on the second and
	subsequent invocations. This occurs because
	`lasso_key_saml2_xml_verify()` invokes `lasso_verify_signature()`
	passing it the node id in the `id_attr_name` parameter. Inside
	`lasso_verify_signature()` is this code fragment:

	::

		/* Find ID */
		if (id_attr_name) {
			id = xmlGetProp(signed_node, (xmlChar*)id_attr_name);
			if (id) {
				xmlAddID(NULL, doc, id, xmlHasProp(signed_node, (xmlChar*)id_attr_name));
			}
		}

	Note that it unconditionally invokes `xmlAddID()`, which adds the ID
	to the set of unique element ID's in the document. But if you invoke
	`xmlAddID()` more than once with the same ID in the same document you
	violate the uniqueness constraint.

	The ID needs to be registered in the document because the <Reference>
	element of the <SignedInfo> may utilize an XPointer reference to the
	signed data. In it's simplest form the XPointer reference is an ID
	attribute on a node. Thus to locate the signed data referenced by the
	ID it should (must?) be in a table of ID's for the document.

	Simple Solution (patch)
	-----------------------

	The solution is simple now that the problem is understood. The ID
	should not be unconditionally added to the document, instead it should
	only be added if it's not already registered. Prior to calling
	`xmlAddID()` one should call `xmlGetID()` and test for a NULL result
	indicating the ID has not be registered previously.

	License: MIT

2015-09-01  John Dennis  <jdennis@redhat.com>

	add support for automake 1.15
	License: MIT

2015-09-01  John Dennis  <jdennis@redhat.com>

	Fix coverity lasso_get_hmac_key() warning
	lasso_get_hmac_key() did not check return value. Now check the return
	code, emit a critical message and return early with cleanup.

	License: MIT

2015-09-01  John Dennis  <jdennis@redhat.com>

	Add messageID and idp_list to profile properties
	ECP needs a place to store the messageID and idp_list. Normally values
	like this would located in a "context" passed to the relevant
	routines. But currently there is no such context, the closest thing to
	a context we have is the profile so we add them here in the profile
	private data using accessors. They are currently not relevant outside
	of ECP.

	Adds functions:

	lasso_profile_get_message_id()
	lasso_profile_set_message_id()
	lasso_profile_get_idp_list()
	lasso_profile_set_idp_list()

	License: MIT

2015-08-24  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	configure.ac: move test framework detection after pkg-config detection

	debian-jessie: add build dependency on pkg-config

	Add 'debian-jessie/' from commit 'dc7374e9f41214557dd45735789a7535d6bbe681'
	git-subtree-dir: debian-jessie
	git-subtree-mainline: 83f6319c01ef633fe17625d9ec8d15f1f9dbfc36
	git-subtree-split: dc7374e9f41214557dd45735789a7535d6bbe681

	bindings/java: fix test script generation

2015-08-24  John Dennis  <jdennis@redhat.com>

	add ECP unit test
	Test ECP.
	3 different variations of the SP provided IDP List are exercised.

	License: MIT

2015-08-24  John Dennis  <jdennis@redhat.com>

	Implement PAOS request and response messages
	Re-implement lasso_profile_saml20_build_paos_request_msg() and
	lasso_saml20_login_process_paos_response_msg() to use the
	functionality introduced by earlier patches and to assure they are
	functionally complete.

	License: MIT

2015-08-24  John Dennis  <jdennis@redhat.com>

	Add messageID and idp_list to profile properties
	ECP needs a place to store the messageID and idp_list. Normally values
	like this would located in a "context" passed to the relevant
	routines. But currently there is no such context, the closest thing to
	a context we have is the profile so we add them here in the profile
	private data using accessors. They are currently not relevant outside
	of ECP.

	Adds functions:

	lasso_profile_get_message_id()
	lasso_profile_set_message_id()
	lasso_profile_get_idp_list()
	lasso_profile_set_idp_list()

	License: MIT

2015-08-24  John Dennis  <jdennis@redhat.com>

	ECP and PAOS special handling
	ECP does not require an SP to know the remote IdP provider. Existing
	code made the assumption the remote provider always was
	necessary. Determination and setting of the remote consumer URL is
	different in the presence of ECP. Rework the logic to reflect
	differing requirements.

	License: MIT

2015-08-24  John Dennis  <jdennis@redhat.com>

	Add function to set protocol conformance
	Lasso uses an internal private variable bound to the provider to
	indicate which protocol the provider is servicing. It is vital this
	value be correctly set because many Lasso routines used it to dispatch
	to the appropriate protocol handlers.

	Normally the provider's protocol conformance is set as a side-effect
	of parsing the XML metadata that describes the provider (e.g. an SP or
	IdP). However there are some providers (e.g. an ECP client) which do
	not have metadata. For providers lacking metadata it is essential
	there be a mechanism to set the protocol conformance otherwise the
	library will malfunction.

	The function comes with documentation that includes a clear warning
	this is to be used only in limited circumstances.

	License: MIT

2015-08-24  John Dennis  <jdennis@redhat.com>

	Implement ECP client functionality
	Implement everything needed to support a SAMLv2 ECP client.

	Re-implement lasso_ecp_process_authn_request_msg() and
	lasso_ecp_process_response_msg() to use the Lasso XML serialization
	subsystem with the ECP and PASO LassoNode's introduced earlier. This
	replaces one-off explicit direct use of the libxml API with Lasso
	common code. In the process provide support for 100% of the ECP and
	PAOS SAMLv2 parameters, not just a subset. Include support for
	receiving an IDPList from the SP in conjuction with selecting an IdP
	known to the ECP client. Add extensive documentation.

	Modify LassoSamlp2AuthnRequest to preserve it's original XML (enable
	keep_xmlnode flag) so that when serializing the SOAP request the
	LassoSamlp2AuthnRequest received from the SP is exactly duplicated.

	Add the following internal static utility functions:

	is_provider_in_sp_idplist()
	is_idp_entry_in_entity_id_list()
	intersect_sp_idplist_with_entity_id_list()

	Add the following exported utility functions:

	lasso_ecp_is_provider_in_sp_idplist()
	lasso_ecp_is_idp_entry_known_idp_supporting_ecp()
	lasso_ecp_set_known_sp_provided_idp_entries_supporting_ecp()
	lasso_ecp_has_sp_idplist()
	lasso_ecp_get_endpoint_url_by_entity_id()
	lasso_ecp_process_sp_idp_list()

	Add the following members to the ECP class:

	message_id
	response_consumer_url
	relaystate
	issuer
	provider_name
	is_passive
	sp_idp_list
	known_sp_provided_idp_entries_supporting_ecp
	known_idp_entity_ids_supporting_ecp

	License: MIT

2015-08-24  John Dennis  <jdennis@redhat.com>

	Clean up ECP and PAOS XML generation
	Re-implement lasso_node_export_to_ecp_soap_response() and
	lasso_node_export_to_paos_request(). Add new function
	lasso_node_export_to_paos_request_full() with full functionality which
	deprecates lasso_node_export_to_paos_request().

	The existing code had two significant deficiencies, it performed
	explicit direct xml manipulation using the libxml API rather than
	calling into Lasso's extensive XML utilities, this was in stark
	contrast the rest of the Lasso library. It also failed to handle a
	number of ECP parameters leaving a functionality gap in the API.

	The new code makes use of the Lasso XML serialization
	subsystem. Rather than hand crafted xml manipulation we use the ECP
	and PAOS LassoNode objects introduced in an earlier patch. This is
	consistent with the rest of Lasso and because those LassoNodes are
	used elsewhere we have a better guarantee of robustness because the
	same common code is being called from multiple places. Other Lasso
	common utilities (some introduced in previous patches) are invoked
	instead of handcrafted xml manipulation, once again common code is
	preferred.

	Finally lasso_node_export_to_paos_request_full() was introduced to
	expose in the Lasso API all ECP
	parameters. lasso_node_export_to_paos_request() now trivially calls
	into lasso_node_export_to_paos_request_full().

	License: MIT

2015-08-24  John Dennis  <jdennis@redhat.com>

	Server utility returns list of providers supporting endpoint type
	Add lasso_server_get_filtered_provider_list() utility.

	Iterate over the server providers and build a list of provider EntityID's who
	have the specified role and at least one endpoint matching the
	protocol_type and http_method. Return a GList list of EntityID's

	License: MIT

2015-08-24  John Dennis  <jdennis@redhat.com>

	Add server utility lasso_server_get_endpoint_url_by_id()
	Locate the provider in the server's list of providers, then select an
	endpoint given the @endpoint_description and return that endpoint's URL.
	If the provider cannot be found or if the provider does not have a
	matching endpoint NULL will be returned.

	License: MIT

2015-08-24  John Dennis  <jdennis@redhat.com>

	Add ECP and PAOS to prefix_from_href_and_nodename()
	prefix_from_href_and_nodename() did not know about the ECP and PAOS
	XML prefixes so add them.

	License: MIT

2015-08-24  John Dennis  <jdennis@redhat.com>

	Export LassonNode to SOAP with arbitrary SOAP headers
	Add function lasso_node_export_to_soap_with_headers()

	Utility function to build a full SOAP envelope message with arbitrary
	headers. The LassoNode becomes the body of the SOAP envelope. The
	headers are passed as a GList of LassoNode's and are added as header
	elements to the SOAP envelope header. This is a flexible way to build
	a SOAP envelope that contains headers without constraints on the
	headers.

	License: MIT

2015-08-24  John Dennis  <jdennis@redhat.com>

	LassoSamlp2IDPList is not list capable
	LassoSamlp2IDPList is supposed to handle a list of LassoSamlp2IDPEntry
	but in fact it had no list support. Change the snippet flag
	SNIPPET_NODE to SNIPPET_LIST_NODES and add the special list comment on
	the struct member so that the binding generator knows what type of
	GList it is.

	License: MIT

2015-08-24  John Dennis  <jdennis@redhat.com>

	Add LassoNode objects for ECP and PAOS
	The SAMLv2 protocol defines 5 XML types which we need to map to
	LassoNode objectes so thay can be serialized from XML and back into
	XML.

	ecp:RelayState
	ecp:Request
	ecp:Response
	paos:Request
	paso:Response

	This patch addes these 5 new LassoNode's and updates the build
	configuration to include them.

	License: MIT

2015-08-24  John Dennis  <jdennis@redhat.com>

	Enhance process soap response to include processing soap headers
	The existing lasso_saml20_profile_process_soap_response() assumed
	there were no SOAP headers (prior to ECP none of the SOAP messages
	contained headers). A new function
	lasso_saml20_profile_process_soap_response_with_headers() was
	implemented that serializes from the XML SOAP headers into a
	LassoSoapHeader node and optionally will return the LassoSoapHeader
	node.

	The functionality in lasso_saml20_profile_process_soap_response() was
	moved into the new
	lasso_saml20_profile_process_soap_response_with_headers() and now
	lasso_saml20_profile_process_soap_response() simply calls
	lasso_saml20_profile_process_soap_response_with_headers() passing NULL
	for the header return.

	License: MIT

2015-08-24  John Dennis  <jdennis@redhat.com>

	Add new LassoSoapEnvelope constructor, lasso_soap_envelope_new_full()
	The existing LassoSoapEnvelope constructors did not populate the node
	with it's constituent members, namely a SOAP header (LassoSoapHeader)
	and a SOAP body (LassoSoapBody). lasso_soap_envelope_new_full() allows
	one to create a SOAP envelope and immediately begin to add header and
	body elements.

	License: MIT

2015-08-24  John Dennis  <jdennis@redhat.com>

	Fix LassoSoapHeader, was unable to serialize from XML.
	The existing Lasso code never made use of SOAP headers because up
	until now nothing used them. LassoSoapHeader was unable to serialize
	from XML into a GList of LassoNode objects because it was missing one
	of the necessary snippet flags. This corrects this omission and now
	parsing a SOAP header will yield a sequence of LassoNode's.

	License: MIT

2015-08-24  John Dennis  <jdennis@redhat.com>

	Add new error codes and their matching error descriptions
	License: MIT

2015-08-24  John Dennis  <jdennis@redhat.com>

	Add lasso_is_in_list_of_strings macro to utils.h
	Add macro that tests to see if a string is a member in a list of
	strings.

	License: MIT

2015-08-24  John Dennis  <jdennis@redhat.com>

	Fix build failure, remove inclusion of xml/private.h in utils.h
	The public utils.h header includes the private xml/private.h file
	which is not installed. Therefore anyone trying to build against lasso
	and include utils.h will fail because xml/private.h cannot be
	found. There doesn't seem to be any need to include this file.

	License: MIT

2015-08-24  John Dennis  <jdennis@redhat.com>

	Eliminate _BSD_SOURCE and _SVID_SOURCE deprecation warning
	Because all warnings are treated as errors and this warning is emitted:

	warning "_BSD_SOURCE and _SVID_SOURCE are deprecated, use _DEFAULT_SOURCE"

	the build fails.

	The fix is to define _DEFAULT_SOURCE in lasso/xml/tools.c

	The effect of defining the _DEFAULT_SOURCE macro is equivalent to
	the effect of explicitly defining three macros in earlier glibc
	versions: -D_BSD_SOURCE -D_SVID_SOURCE -D_POSIX_C_SOURCE=200809C

	License: MIT

2015-08-24  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	configure.ac: provide fallback for systems where libcheck is not installed with pkg-config

	Add checks for failure of an allocation function from libxml (#8070)
	g_malloc always trap on allocation errors but not xmlMalloc.

	xml: handle failure of xmlSecBase64Decode() (fixes #8070)
	Thanks to fpeters for the patch.

	FAQ: add section about getting the issuer before parsing the received message (#4378)

	profile: add two new class methods, lasso_profile_get_issuer and lasso_profile_get_in_response_to (#4378)
	The goal of those two methods is to allow IdP and SP to load metadata
	dynamically without processing completely the incoming. Currently it's
	impossible as message parsing and signature checking is done in the same
	function.

	configure.ac: use pkg-config for libcheck

	saml-2.0/login.c: change default value of WantAuthnRequestSigned (fixes #8105)
	Specification says it should default to FALSE. We comply.

2015-08-24  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Makefile.am: fix automake warning
	It fixes this warning:

		warning: 'INCLUDES' is the old name for 'AM_CPPFLAGS' (or '*_CPPFLAGS')

	it seems INCLUDES is not to be used anymore.

2015-04-03  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Add 'debian-squeeze/' from commit '33d67ddd1352a2db97d252c7d18f7806ec91e616'
	git-subtree-dir: debian-squeeze
	git-subtree-mainline: 80a2e0ea4763d3f0bc611ab98c8e207b6a82c099
	git-subtree-split: 33d67ddd1352a2db97d252c7d18f7806ec91e616

	Add 'debian-wheezy/' from commit '0001ab9af1e3a7e19000a65b75ebc3c42f76a739'
	git-subtree-dir: debian-wheezy
	git-subtree-mainline: 9f99176b3c8dd2d7c9a6ebf9c619d9c7fea2b64b
	git-subtree-split: 0001ab9af1e3a7e19000a65b75ebc3c42f76a739

2015-03-26  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	SAML-2.0: rework on commit 05fe802b8d, improve handling of ProtocolBinding and AssertionConsumerServiceURL
	When the same URL was used for many bindings, the current code did not
	work. Now we use
	lasso_saml20_provider_check_assertion_consumer_service_url() to validate
	url and binding are matching, if no binding is suggested we take the
	first one defined for this URL.

	Using AssertionConsumerServiceIndex and any of the other assertion
	consumer designator attributes is still forbidden.

2015-03-23  John Dennis  <jdennis@redhat.com>

	Fix build failures
	Fix a mistake in the documentation markup that prevented the
	doc from building, needed to reverse the order of two tags.

	Remove the $(PYTHON) from TESTS_ENVIRONMENT, it was causing
	python to be invoked passing /bin/sh to it as a script.

	License: MIT

2015-03-11  John Dennis  <jdennis@redhat.com>

	Add Destination attribute for SAML ECP Response
	The Destination attribute on SAML Response element was not being set
	when handling an ECP response. It is a requirement of SAML 2.0 that
	signed values contain a Destination attribute on the root element
	otherwise the client will reject the response. This is documented in
	the SAML Bindings Specification, Section 3.4.5.2 "Security
	Considerations":

	    If the message is signed, the Destination XML attribute in the
	    root SAML element of the protocol message MUST contain the URL to
	    which the sender has instructed the user agent to deliver the
	    message. The recipient MUST then verify that the value matches the
	    location at which the message has been received.

	Normally on login one calls
	lasso_saml20_login_build_authn_response_msg() which then calls
	lasso_saml20_profile_build_response_msg() which sets the Destination
	attribute on the SAML Response. But when doing ECP you do not call
	lasso_saml20_login_build_authn_response_msg(), instead you call call
	lasso_saml20_login_build_response_msg() and if it's ECP it then calls
	lasso_node_export_to_ecp_soap_response(). Thus the ECP
	response never gets the Destination attribute set because of the
	different code path, plus for ECP the destination is different, it's
	the assertion consumer service.

	FWIW this line of code was copied almost verbatim from
	lasso_saml20_profile_build_response_msg which also sets the
	Destination attribute.

	License: MIT

2015-02-26  Jérôme Schneider  <jschneider@entrouvert.com>

	php5-lasso.prerm: s/phpdismod/php5dismod/

	Merge with lasso in Jessie, re-activate java and gen-default-control.sh

	control: build depends on dh-python

2015-02-25  Jérôme Schneider  <jschneider@entrouvert.com>

	python-lasso.install: just install python 2 files

	python-lasso.install: python-lasso is for python2 only

	liblasso-perl.install.in: fixes path

	rules: cleanning clean target

	perl; fix build for Jessie

	remove java support

	control: update build-dependencies for python3

	debian/control: like control.in, control must be updated

2015-02-25  EO builder bot  <admin@entrouvert.com>

	debian: add python3 support

2015-02-13  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Re-add control for eobuilder

	Remove control and add python-six to control.in

	Revert "Remove control.in"
	This reverts commit 176e0716f8f8593860e0603697db5dec5675f5b3.

2015-02-12  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Remove control.in

	Add dependency on python-six

	Update AUHTORS file

	Port Java binding generator to Python 3

	Port Perl binding generator to Python 3

	Port PHP5 binding generator to Python 3

	Make python generator scripts and tests run with python >= 3.2

2015-02-12  Houzéfa Abbasbhay  <houzefa.abba@xcg-consulting.fr>

	Python 3: Fix the pygobject init macro and restore it

	Python 3: Fix a string conversion helper

	Python 3: Oops (see rev 279959f)

	Python 3: Fix Python 2 support (use six.print_)

	Mention Python 3 support in the changelog

	Python 3: Disable "PyGObjectPtrType" to avoid crashes (needs investigation)

	Python 3: Fix a string function

	Python 3: Fix module init

	Python 3: PyObject_HEAD_INIT(NULL) -> PyVarObject_HEAD_INIT(NULL, 0) (to play better with C strict aliasing rules - see PEP 3123)

	Python 3: Defs for int & string related functions

	Python 3: - file(...) -> open(...) - print ... -> print(...) - print >> fd, ... -> print(..., file=fd) - basestring -> str - map(...) -> list(map(...))

	Python 3: PyObject.ob_type is deeper in the structure; use the Py_TYPE macro instead

	Python 3: Fix print calls in configure.ac

	Ignore some Perl binding files

	Ignore /test-driver

2015-02-12  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	SAML-2.0: Rework protocol profile selection when parsing AuthnRequest messages
	This commit also add tests around authn request parsing.

2015-02-09  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Add support for SHA-2 family of hash functions for RSA and HMAC signatures

2015-01-21  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Check return value of lasso_session_add_assertion() in lasso_login_build_assertion()

	Remove _POSIX_SOURCE declaration as it's not needed

2014-12-09  Simo Sorce  <simo@redhat.com>

	Fix coverity issue about unchecked return
	If find_path() does not find MinorVersion, then no value is changed and
	we repeate the search with the values for thr major version.
	Check if we have found anything and if not set the minor version to 0.

	License: MIT

2014-10-17  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Improve top level commint in CGI script example

	Add simple example of a CGI service provider script written in C

2014-10-02  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Remove dead code in the PHP5 binding

2014-09-02  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	xml: modify xschema snippets to handle xsd:choice constructs

	xml: support xsd:choices by allowing to rewind or advance after match or miss of a snippet

2014-08-28  Simo Sorce  <simo@redhat.com>

	Fix header guard
	Found by clang

	License: MIT

2014-08-28  Simo Sorce  <simo@redhat.com>

	Assert on missing id
	In this function id is required, so just assert if it is missing.
	This also silences a warning about "reference" being used unintialized
	if "id" is null.

	License: MIT

2014-08-28  Simo Sorce  <simo@redhat.com>

	Missing variable initialization
	If name_id s unconditonally dereferenced in the cleanup code.
	If it is not initialized it may cause segfaults or other misbehaviors.

	License: MIT

2014-08-28  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Fix release date of 2.4.1

	Release 2.4.1

	Add tool gitlog-to-changelog

2014-08-12  Frédéric Péters  <fpeters@entrouvert.com>

	saml-2.0: set NotOnOrAfter on the Conditions element (#5248)
	This is actually required for interoperability with Dropbox SAML support.

2014-08-12  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	doc: add lasso_server_add_provider2 and lasso_server_load_metadata

2014-08-11  Frédéric Péters  <fpeters@entrouvert.com>

	debian: don't move perl files

	debian: accomodate perl now installing in the right directory

	perl: keep on using PREFIX, required for distcheck

	reformat gtk-doc function comment to work with gtk-doc 1.21

2014-08-11  Simon Josefsson  <simon@josefsson.org>

	fix pkg-config typo.

2014-08-06  Niko Tyni  <ntyni@debian.org>

	Use INSTALLDIRS=vendor for the Perl bindings, as per the Debian Perl policy
	Debian packaged Perl modules should be installed into the vendor
	directories (currently /usr/lib/perl5 and /usr/share/perl5), but the
	upstream default puts the into the 'site' ones (modified with the
	PREFIX setting.) Explicitly using INSTALLDIRS=vendor simplifies
	the install rules and removes the need for PREFIX, which has
	been deprecated in ExtUtils::MakeMaker for a long time.

2014-07-30  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Restore not-unused code
	Clang was wrong on one instance, a value must be initialized to its NULL
	state before using any lasso_assign_ macro with it.

	Bug introduced in 4789e8d4d68eb.

2014-07-30  Simo Sorce  <simo@redhat.com>

	One more uninitialized value
	encode_key may be release when not initialized if va_args returns null
	on the first while loop.

	License: MIT

2014-07-30  Simo Sorce  <simo@redhat.com>

	Fix potential null dereference errors
	Ina  number of cases function inputs are not checked for NULL although
	values may end up with a NULL value and then they are dereferenced
	directly.
	Check values in the function (or the caller) if appropriate.

	License: MIT

2014-07-30  Simo Sorce  <simo@redhat.com>

	Do not dereference null pointers
	Sounds like these should all be boolean 'OR's, otherwise,
	if profile is not in fact a lasso profile then profile->private_data
	will be dereferenced even if it is NULL.
	Found by Clang

	License: MIT

2014-07-30  Simo Sorce  <simo@redhat.com>

	Rearrange case checking to avoid compiler warnings
	The compiler was complaining that 'compa' could be uninitialized.
	USe this occasion to make the code simpler to understand and assign
	actually meaningful values to the variable, even though the proper
	actions are not implemented yet.

	License: MIT

2014-07-30  Simo Sorce  <simo@redhat.com>

	Properly exit on error
	The rc error was being set but then it was being ignored.
	Get out immediately if an Issuer can't be found.

	License: MIT

2014-07-30  Simo Sorce  <simo@redhat.com>

	Consistently check dsig_reference_ctx
	Check if this is not NULL in all cases, to avoid NULL pointer dereference.
	Found by clang

	License: MIT

2014-07-30  Simo Sorce  <simo@redhat.com>

	Trim unused code
	Clang complains these values are never used, avoid even assigning them.

	License: MIT

2014-07-30  Simo Sorce  <simo@redhat.com>

	Trim dead code
	These conditions can never be reached as the list is filtered with
	and and to the value of 0xff, so just drop them, they are misleading.
	(Also silences checkers which were screaming of deadcode, for each and
	every unmatchable value ...)

	License: MIT

2014-07-30  Simo Sorce  <simo@redhat.com>

	Fix confusing loop test
	Coverity was marking the check for tsnippet after the while loop,
	confused by the check. Make it more readable, and in the process
	make checkers happy too.

	License: MIT

2014-07-30  Simo Sorce  <simo@redhat.com>

	Fix some uninitialized value
	The compiler complain about these values not being initialized.
	come of them do not really matter as they are only really used when
	later initialized in the code and the code paths would not use them
	if not initialized in a previous block, however some of these seem
	real issues.
	In all cases make the compiler happy so we get less noise in the build
	and less false positives in code chckers.

	License: MIT

2014-07-30  Simo Sorce  <simo@redhat.com>

	Missing check for Sig_Alg value
	Initialize the sig_alg value to NULL (The compilers was complaining it may
	be used initialized), but also make sure to check the re is any sig_alg at
	all, otherwise return a proper error.

	License: MIT

2014-07-30  Simo Sorce  <simo@redhat.com>

	Fix boundary check
	Coverity was marking this as an array overun as the check would never be
	possible and wuld allow any value for query_request_type, including "unset"
	wihch is 0.
	fix the boundary checks.

	License: MIT

2014-07-30  Simo Sorce  <simo@redhat.com>

	Fix uninitialized values found by Coverity
	These values where being used without being initialized at least in some edge
	cases. Make Coverity happy by properly initializing them.
	Some of these are real bugs, not just silencing a tool.

	License: MIT

2014-07-30  Simo Sorce  <simo@redhat.com>

	Fix format check for date
	Coverity was complaining that tm was used uninitialized, but the truth is
	that a third error condition where the string passed in matches no valid
	format was not handled. Just return an error in that case.

	License: MIT

2014-07-30  Simo Sorce  <simo@redhat.com>

	Fix error checking in xml.c
	Coverity was complaining that 'integer' was being used without
	initialization (from the caller). Turns out it was erroneously used
	to test the result instead of the just sourced 'what'.

	License: MIT

2014-07-30  Simo Sorce  <simo@redhat.com>

	Fixes for unchecked return values
	Coverity complains that in a number of places errors are not checked.
	Some of them are ok not to check so put a silencing (void).
	Check errors that need to be checked.

	Coverity also complains g_malloc() return is never checked but given it is
	never checked anywahere let it be for now.

	License: MIT

2014-07-30  Simo Sorce  <simo@redhat.com>

	Be correct in dealing with varargs
	Although in this cases it may be safe to omit va_end() that is not generally
	so with an arbitrary compiler on an arbitrary platform.

	Quoting from the spec: "Each invocation of va_start() must be matched by
	a corresponding invocation of va_end() in the same function."
	note the "must"

	Checker tools like Coverity complain if va_start() is not always paired with
	va_end(), so this patch mutes them.

	License: MIT

2014-06-08  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	bindings/python/tests: session indexes storage preserves order now

	tests: add target to Makefile to produce valgrind suppression entries

	tests/valgrind: add suppression of all leaks related to initialisation of the GLib type system

	tests: fix leaks

	saml-2.0/profile: fix leak of xmlSecKey when building signed query strings

	id-ff/provider: fix leak of xmlSecKey

	xml/samlp2_logout_request: fix leaks around session indexes

	server: fix leak of xmlSecKey objects

	session: fix leak of _NidAndSessionIndex structures

2014-06-07  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	saml-2.0/server: fix invalid memory access
	GList must never be allocated through malloc as it internally managed
	using gslice. Always use Glib constructors and methods.

	tests: fix leak in log message checker

	tests: do not reuse tc_response_new_from_xmlNode test case

2014-05-28  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	bindings/python: fix conversion of unicode value to UTF-8 for setters

2014-05-21  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	login: complete document of lasso_login_process_authn_response_msg on expectable error codes

2014-04-24  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	website: update links section

	website: add news about 2.4.0 release

	website: fix HTML grammar errors

	xml/xml.c: fix liberal use of casting for the SNIPPET_INTEGER and SNIPPET_BOOLEAN case
	Some behaviour are also made more explicit like the optional if equals
	to -1 case for integer fields, and the optional if FALSE for boolean
	fields.

	INSTALL: add php-cli to needed dependencie when compiling on Debian

	tests: pass automake CFLAGS when compiling tests2

	lasso/xml/tools.c: fix reference to unitialized memory

	NEWS: fix wrong date for 2.4.0 release

	update website for 2.4.0 release
	- remove windows installer reference
	- update debian repository configuration
	- point to cgit browser and releases directory

2014-04-23  Simo Sorce  <simo@redhat.com>

	Fix generators for parsing of integer values
	All number types including enums are parse as if they were integers,
	this breaks in many ways, long and int are not the same size in all
	architectures as well as enum may vary in size depening on compiler,
	architecture and optimizations.

	Always pass an actual long to PyArg_ParseTuple() and rely on the a
	cast from long to the destination variable type in the following
	assignment.

2014-04-15  Simo Sorce  <simo@redhat.com>

	Fix java version detection

2014-03-31  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	update NEWS

	bindings/perl/Makefile: it's difficult to control produced code so disable warning on unused-but-set-variable

2014-03-31  Frédéric Péters  <fpeters@entrouvert.com>

	perl: get required CFLAGS from $(perl -V::ccflags:)

2014-03-25  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	fix: remove warning by not calling g_type_init() with glib > 2.36 as it's deprecated

2014-01-07  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	configure.ac: update LASSO_VERSION_INFO

	Revert "configure.ac: desactivate the PHP5 binding if no CLI interpreter is available"
	This reverts commit a3d53764fa75c30ee9a118088f0a224bc20059e4.

	docs: remove section

2014-01-06  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	configure.ac: desactivate the PHP5 binding if no CLI interpreter is available

	configure.ac: remove checks for SWIG

2013-12-29  Frédéric Péters  <fpeters@entrouvert.com>

	import 2.3.6-3 changelog entry

	use php5enmod and php5dismod

2013-12-29  Moritz Muehlenhoff  <jmm@debian.org>

	enable hardened build flags

2013-12-29  Frédéric Péters  <fpeters@entrouvert.com>

	import 2.3.6-2.2 changelog entry

	import 2.3.6-2.1 leftovers

2013-12-19  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	configure.ac,fedora/lasso.spec: remove expat dependency

	INSTALL: add paragraph about build dependencies

	more work toward release 2.4.0

2013-12-18  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	id-ff/providerprivate.h,id-ff/provider.h: make lasso_provider_verify_signature public API
	It's necessary for the crudeSAML SASL mechanism.

2013-12-11  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	bindings/python: automatically encode string into utf-8 when passing unicode string to Lasso methods
	fixes #4077

2013-12-10  Jérôme Schneider  <jschneider@entrouvert.com>

	python-lasso.install: replace site-packages by dist-packages

	add python-lasso.install with python files

2013-12-08  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	id-ff/session.c: fix wrong variable reference in init_from_xml_nid_and_session_index

2013-12-08  Thomas NOEL  <tnoel@entrouvert.com>

	update control.in with control

2013-12-06  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	remove the debian directory from the project

2013-12-06  Jérôme Schneider  <jschneider@entrouvert.com>

	python-lasso.install: don't install old /usr/lib/python*/site-packages

2013-12-06  Frédéric Péters  <fpeters@entrouvert.com>

	doc: remove broken gtk-doc tests for now

	perl: make it compatible with recent libxml2

2013-12-05  Frédéric Péters  <fpeters@entrouvert.com>

	doc: remove reference to init.xml that is not created anymore

	build: replace python $libdir by our own

2013-12-05  Simo Sorce  <simo@redhat.com>

	Better python detection in configure.ac
	License: MIT

	Support automake 1.13 and 1.14
	License: MIT

2013-12-04  Jérôme Schneider  <jschneider@entrouvert.com>

	debian: replace dh_pycentral by dh_python

2013-12-03  Simo Sorce  <simo@redhat.com>

	Fix license boilerplates
	Instad of referring to an old FSF address, point the reader to the FSF
	website where the latest licenses and addresses are published.

2013-11-20  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	jenkins.sh: do not ignore errors

2013-10-23  Frédéric Péters  <fpeters@entrouvert.com>

	python: do not fail displaying a non-C error (fixes #3866)
	The binding does a raise Error('failed to create object') but the local Error
	exception class expects a lasso error code, and will thus fail if printed.

	  File ".../lasso.py", line 54, in __str__
	    return '<lasso.%s(%s): %s>' % (self.__class__.__name__, self.code,
	             _lasso.strError(self.code))
	  TypeError: an integer is required

2013-10-11  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	saml-2.0/provider: when looking for endpoints take a null role as meanning « take the first one »

2013-10-10  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	saml-2.0/profile: fix typo in commit 8de55

	saml-2.0/profile: add warning message when unable to build an artifact response message due to an unfound artifact resolution endpoint

2013-10-01  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	web: update mailing list urls

2013-09-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	debian: add a source/format file

	debian: add a source/format file

	toosl/git-version-gen: use a dot to separate the commit string from the regular version

	lasso/xml/tools.c: fix misuse of xmlURIUnescapeString
	If the length argument is NULL, the full string is unescaped; the
	behaviour we expected is to return a 0 length string.

	tools/git-version-gen: keep the g before the git commit number

	debian: import current packging for debian wheezy

	.gitignore: add more

	bindings/perl: fix type of size variable incompatible with 64 bits arch

	id-ff/login.c: initialize role status of sp and idp in lasso_login_init_authn_request

2013-09-26  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	jenkins.sh: build a first time before running distcheck, in order to have the documentation compiled

	tests/data/Makefile: regenerate list of files and directories to distribute

	docs/Makefile: always set DIST_SUBDIRS

	add jenkins.sh script

2013-09-08  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	saml2/profile.c: add resolving of the endpoint index in artifacts
	 * lasso/saml-2.0/profile.c: add new argument role to lasso_saml20_profile_init_artifact_resolve()
	   for looking up ArtifactResolutionService location; extract endpoint index
	   from artifact and use it to resolve the endpoint location.
	 * login.c: pass new argument ; force msg_url as it is preinitialized by
	   lasso_saml20_profile_init_artifact_resolve()

	saml2/provider.c: add new function lasso_saml20_provider_get_endpoint_url() for retrieving endpoint locations using the new endpoints list

	errors.{c,h}: add new error LASSO_PROFILE_ERROR_ENDPOINT_INDEX_NOT_FOUND for reporting when a recevied artifact does match any declared endpoint

	saml2/profile: fix missing ArtifactResolutionService index in artifacts

	tests: add non-regression test to check that we correctly provide the ArtifactResolutionService index in artifacts

	saml2/login: fix role of providers in process_authn_request() and idp_initiated_authn_request()
	It is necessary for endpoint resolution to know the role of providers.

	tests: in check_equals() and check_not_equals() macros use long long int as a catchall type for printing compared values

	fix compilation errors on 64bits architectures
	 * sizeof(unsigned int) != sizeof(size_t)
	 * INT_MAX != LONG_MAX

	fix warnings about unused but set variables

2013-08-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Revert "doc: fix EXTRA_DIST definition in reference/lasso/Makefile.am"
	This reverts commit a223afc6077528792055def999c29ac5f4d8a418.
	It seems to be incompatible with recent version of gtk-doc, I need to
	investigate more this problem.

	doc: fix EXTRA_DIST definition in reference/lasso/Makefile.am

2013-07-30  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Merge remote-tracking branch 'origin/libxml2.9-compat'

2013-07-20  Frédéric Péters  <fpeters@entrouvert.com>

	website: fix commercial licencee page location

2013-06-19  Tim Newsome  <tnewsome@aristanetworks.com>

	AM_C_PROTOTYPES is no longer supported in autoconf 1.12.

	Add support for automake 1.12.

2013-06-04  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	configure.ac: do not passe the full version suffix as the release number

	FAQ.rst: start a FAQ file

2013-05-15  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	configure: generate version number from git revision between tagged release
	The script git-version-gen is copied from the autoconf project.

2013-03-20  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	python: fix logout request parsing test
	adapt to new checks done on logout request nodes

	tests: comment out dump/restore checks against complex nodes

	saml-2.0: fix missing signature on logout responses

2013-03-07  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	pkgconfig: do not leak lasso dependencies to users
	Change Require into Require.private

	Thanks to Thijs Kinkhorst and Olav Morken for the suggestion.

2013-01-25  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	xml-saml-2.0: ManageNameIDRequest must have a NameID

	xml-saml-2.0: LogoutRequest must have a NameID

	xml: really enforce elements cardinality when parsing messages
	 - add a new SNIPPET_MANDATORY:
		 we could only indicate 0-1 and 0-* cardinalities, now we can also
		 indicate 1-1 and 1-* cardinalities.
	 - repect cadinalities when parsing an xmlNode tree into a LassoNode
		 tree.

	xml-saml-2.0: add missing namespace declaration for the KeyInfoSujectConfirmationData sub-type

	fix memory leak in lasso_node_impl_init_from_xml: release the class_list

	utils: add a lasso_release_slist macro

	add a lasso_release_slist

	fix potential segfault in lasso_node_impl_init_from_xml

	Fix distcheck build problem in docs/Makefile.am
	Bug introduced in commit e97a36fa

	fix warning in docs/reference/lasso/Makefile.am

2012-09-28  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Rewrite all xmlNode serialization code to be compatible with libxml 2.9.0
	Libxml stopped exposing the internal of the xmlOutputBuffer structure;
	it was replace by proper use of the API and of the xmlBuffer structure.

	There could be regression for older version of libxml as some functions
	appeared in recent version of libxml; but the reference API document
	does not give any introduction date for functions so it's hard to be
	sure.

2012-09-26  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	fix segfault in saml-2.0/provider.c:load_endpoint_type2
	Thanks to Hiromitsu Fujita for the patch. fixes #1582.

2012-07-11  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	tests: add a SSO test with DSA keys to python bindings tests

2012-06-21  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Fix compilation on solaris
	Thanks Wojciech Lichota for the patch.

	Fixes #1516

2012-06-21  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	fix SIGSEGV when loading metadata files
	Thanks Wojciech Lichota for the patch.

	Fixes #1516

2012-05-05  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[bindings/php5] remove redundant check to is_transfer_full

	[bindings/php5] add missing release for xmlnodes in return value wrapper

	[abi] update for release 2.4.0

	[bindings/python] in constructors wrappers build the return value before

	[bindings/python] free xmlnode argument owned by the callee

	[bindings/python] fix some indentation

	[bindings/python] boolean values does not need to be released

	[bindings] add a default parameter to is_transfer_full whose default is False

	[bindings] improve matching for object types

	[xml] fix wrong forward declaration

	[xml] add missing include

	[xml] fix typos

	[lasso] add missing GObjectIntrospection annotations to lasso_node_get_original_xmlnode

	[lasso] add missing GObjectIntrospection annotations to lasso_misc_text_node_get_xml_content

	[NEWS] improve 2.4.0 release notes

	Merge branch 'release-2.4.0'

2012-04-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	fix wrong EXTRA_DIST in lasso/xml/dsig/Makefile.am

2012-04-26  Thomas NOEL  <tnoel@entrouvert.com>

	fix compilation error with xmlsec 1.2.18 / freebsd (#1365)
	see http://dev.entrouvert.org/issues/1365

2012-04-23  Frédéric Péters  <fpeters@entrouvert.com>

	Allow building from git without gtk-doc installed

2012-04-06  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[saml2] modify behaviour of lasso_saml2_assertion_add_attribute_with_node
	If an AttributeStatement already exists, we add the new attribute to it.

2012-04-02  Frédéric Péters  <fpeters@entrouvert.com>

	build: do not include multiple glib headers

2012-03-25  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[core] including glib headers directly is deprecated, we must only use <glib.h> now

2012-03-17  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[tests] add test cases for the LassoKey class

	[key] add methods to send message using SAML 2.0 redirect and post bindings

	[saml2] fix handling of SingleSignOnServer in lasso_saml20_provider_get_first_http_method
	When checking if a synchronous http method can be used for sending a
	request to the SingleSignOnService we must check if the response can
	received by the AssertionConsumerService with a synchronous binding not
	the SingleSignOnService.

2012-03-05  Frédéric Péters  <fpeters@entrouvert.com>

	php5: use zend_function_entry, for compatibility with PHP 5.4

2012-03-02  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[bindings php5] fix missing wrappers for constructors

2012-02-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[bindings php5] improve generation of php call stubs by using type case helpers, raise exception in unknown case

2012-02-25  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[website] add piwik tracking code to base template

2011-12-29  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	update NEWS

	Add release notes

	Add missing abi files

	Update files for release 2.4.0

	Incompatibility with clang: local functions with closure does not work

2011-12-23  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Merge branch 'more-datas-in-sessions'

	[tests] remove work-around for letting ID-FF 1.2 tests work with the thin-sessions flag activated
	But when thin-sessions is activated we use the new way of passing artifact
	message content around.

2011-12-23  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[id-ff 1.2] change websso with artifact binding to work as SAML 2.0
	The old way of transmiting the assertion to return via the session is kept,
	but a new way more semblable to the one used in the SAML 2.0 code is added.

	After lasso_login_build_artifact_msg() you must save the return of
	lasso_profile_get_artifact_message() linked to the value of the artifact
	obtained via lasso_profile_get_artifact().

	In the artifact-resolve endpoint you must find the artifact message
	corresponding to the return value of lasso_profile_get_artifact()
	reinstall the artifact message using lasso_profile_set_artifact_message()
	just before calling lasso_login_build_response_msg().

	This change is necessary for ID-FF 1.2 SSO profile to work with the
	thin-sessions.

2011-12-22  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[id-ff 1.2] in lasso_login_build_assertion() always add the assertion to the response

	[tests] protect the ID-FF 1.2 test cases from effect of the thin-sessions flag until it is migrated to work also with thin sessions

	[doc] do some documentation fixing

	[id-ff 1.2] provision the SessionIndex into the assertions
	Without it SLO session management is broken.

	[id-ff 1.1] add support for multiple SessionIndex to lib:LogoutRequest
	Combined with the new LassoSession storage for SessionIndex, it
	should fix many bugs when doing SLO.

	[saml 2.0] use the new SessionIndex storage for SLO management
	It shoulf fix any missing functionnalities regarding missing session indexes
	in logout requests sent by identity providers or service providers.

	[core] add support for thin-sessions environment flag, to reduce size of LassoSession dumps

	[core] add simpler storage for SessionIndexes in the LassoSession

2011-12-19  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[id-ff 1.2] add lasso_saml_name_identifier_equals() to compare NameIDs

	[website] remove the buildbox link for now

	[website] target the bug report link to on redmine

2011-12-16  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[saml2] fix lasso_saml20_logout_validate_request when more than one SessionIndex is sent

	[Makefile] add strings.h to the dsig module includes

	[xml/saml2] replace magic string by a define

	Simplify useless complexity in include paths

	[xml] in is_interaction_request.h move new field to the end of the structure fto limit ABI impact

	Merge branch 'rewrite-node-impl'

	[tests] fix tests to comply with new implementation of parsing
	The test around parsing of EncryptedAssertion was wrong since it was
	missing the XMLEnc namespace declaration.

2011-12-16  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[xml] rewrite schema directed serialization/deserialization methods
	The new implementations of lasso_node_impl_init_from_xml now validate
	namespace of all child nodes befores parsing. It stops on any error. For
	node which implement their own parsing of an attribute or a node, it
	must declare an XmlSnippet with an offset field set to 0. The 0 value is
	invalid for public GObject structure (it's the place of the GObject
	machinery like the reference count). The 0 offset can be used for
	XmlSnippet in a private structure, so never set the offset to 0 with the
	flag SNIPPET_PRIVATE, for a field which is parsed by you get_xmlNode
	virtual method.

	Other ameliorations in this commit is the possibility to set attributes
	with namespace when using the flags SNIPPET_ATTRIBUTE|SNIPPET_ANY. The
	syntax for an attribute is inspired by the element tree API from Python:

		{namespace}attribute_name

	an example:

		{http://www.w3.org/2001/XMLSchema-instance}type

	for the classic xsi:type attribute.

2011-12-16  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[xml] add LASSO_XMLENC_PREFIX and LASSO_XMLENC_HREF defines

	[xml] add missing nodes to LassoIsInteractionRequest

	[xml] change saml_advice.h to declarer the real node type
	It also needed a change to bindings.py to parse struct as well as
	typedef node classes.

	[xml] complete missing namespace declarations for child nodes
	To allow lasso_node_impl_init_from_xmlnode to do proper namespace
	checking, child node which are not of the same namespace as their parent
	in their XSD schema must have an explicit namespace declared in the
	XmlSnippet.

	[core] mark private_data field of the LassoKey structure as private

	[tests] improve checking for log output
	- now any non expected log output is considered an error, by setting a
	  g_log default   handler.
	- block_lasso_logs()/unblock_lasso_logs() will block logging output at
	  the DEBUG level
	- begin_check_do_log(level, message, endswith)/end_check_do_log() with
	  check that the only message emitted between the two macros is one
	  equals to "message" at the level "level", or ending (to work around
	  variable parts in a log message) with "message" if "endswith" is True.

	[tests] rename login test suite, with mentions of ID-FF 1.2 and SAML 2.0

	[Makefile] fix missing soap11 nodes when compiling for Mingw

	[core] fix uninitialized pointer to a GError structure

	[core] move XMLDsig related nodes in their own sub-library, add X509Data node implementation
	The goal is to use the KeyInfo structure as a transport format for our cryptographic keys

2011-12-09  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	remove debugging printf statement

2011-12-08  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[provider] fix doc comment

	[id-ff] move LassoLogout to use LassoSignatureContext

	[logging] add an error() macro

	[id-ff] move LassoLogin to use LassoSignatureContext

2011-12-05  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[core] rename lasso_provider_set_specific_signing_key to lasso_provider_set_server_signing_key

	[perfs] add command line options, add option to use shared secret key cryptography
	Performance with HMAC-SHA1 is 100x the one with 2048 bits RSA.

	[core] add the HMAC-SHA1 shared secret signature method

	[core] refactor lasso_query_verify_signature and lasso_saml2_query_verify_signature
	This commit introduces lasso_query_verify_helper which factorize
	cryptographic operations.

	[tests] use helper macros in id-ff test case

	[core] add lasso_provider_add_key to add other key for signature validation
	The added key can be appended or prepended, depending on the need for the key:
	 - rollover
	 - improving performances (using simpler cryptographic algorithmss using shared secret keys)

	[core] add method lasso_provider_set_specific_signing_key
	Using this method you can specify a signing which will be used for
	communication with the specified provider instead of the one configured
	on the LassoServer object. The main objective is to allow shared secret
	cryptography instead of public key cryptography.

	[core] add a new class LassoKey
	LassoKey currenly store a LassoSignatureContext inside a
	reference-counted and bindable object. It will be used to export API
	around key management to bindings.

	[core] set the xmlSec log handler globally
	The log handler is not set in lasso_init().

	[saml2] introduce a lasso_saml2_assertion_get_audirence_restrictions to factorize some code

	[core] introduce the LassoSignatureContext context, to pass around signature parameters
	This structure is used to pass around the signature algorithm
	and the signature key.

	[core] add a lasso_base64_decode function

	[core] replace explicit allocation of LassoProviderPrivate by use of g_type_class_add_private
	The private part is allocated contiguously to the public structure data.

	[configure.ac] fix compilation on Mac Os X

	[xml] use lasso_node_export_to_query_with_password to implement lasso_node_export_to_query

	[tools] fix lasso_sha1 to return a glib allocated string

	[id-ff/saml2] add a lasso_server_add_provider2
	It allows to add LassoProvider objects directly to a LassoServer object,
	without using the metadata loading methods.

	[utils] add lasso_crypto_memequal function
	This method compare byte strings in constant time.

	[tools] add a LassoSignatureContext structure to pass signature parameters around
	Signature parameters are mainly a LassoSignatureMethod and a xmlSecKey.

	[xml] add an inline function to validate LassoSignatureMethod values
	- add also a LASSO_SIGNATURE_METHOD_NONE value

	[utils] add lasso_transfer_xml_node macros

	[core] simplify lasso_provider_load_public_key

2011-11-29  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[web] fix link on the download page

	Merge branch 'multi-certificates'

	Merge branch 'excl-c14n-fix'

	[web] add release news for release 2.3.6

	[release] 2.3.6

2011-11-22  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[integration tests] does not use full leak report

	[integration tests] show more callers when using valgrind memcheck looking for leaks in authentic and lcs

	[tests] add test for rollover on the SP side, i.e. rollover of encryption keys
	This test case is the first to abstract the workflow between two
	LassoLogin object (for the idp and sp side). This part of the code could
	be used to simplify the code of other tests in the future.

2011-11-22  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[core] do not emit a warning for expected decryption errors
	The only expected decryption error is on decryption of the symetric key
	used to crypt the data. All other errors are critical and must be
	logged.

	Client of lasso_node_decrypt_xmlnode can then log the decryption failure
	of the symetric if they tried with all possible keys (key rollover
	case).

2011-11-22  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[core] add a new class of errors for xml encryption errors
	add LASSO_XMLENC_ERROR_INVALID_ENCRYPTED_DATA for generic unrecoverable
	xml decryption errors.

	[leakcheck] fix leaks seen by the unit tests
	This commit also improved valgrind suppression file to hide static
	allocations done by the GLib type system.

	[core] fix wrong XML canonicalization when assertion is extracted without its namespace context

2011-11-21  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[misc] apply changes to remove warning blocking compilation with gcc 4.5.2 and php 5.3.5
	 - gcc now warns when you compate a typedef to the anonymous enum which
	   define it.
	 - some inline function in the zend.h header do compare between signed
	   and unsigned char.

2011-11-21  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[core] multiple decryption keys support
	This commit complements the support for multiple signing certificate
	support in the metadata files. The use-case is still key roll-over.

	The structure LassoServerPrivateData was changed to accomodate multiple
	decryption keys, and so:

	 xmlSecKey *encryption_private_key

	became:

	 GList *encryption_private_keys

	All uses of this key were replaced by a loop over this list, terminating
	with the first key to be able to decrypt the content.

	The private key passed to lasso_server_new() or
	lasso_server_new_from_buffers() is first added to the list of decryption
	keys. Any other call to
	lasso_server_set_encryption_private_key_with_password() or
	lasso_server_set_encryption_private_key() will add a new key to the
	list.

2011-11-18  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Merge branch 'extension-abi-respecting'

	[saml2] add missing extension point for LassoSaml2SubjectConfirmationData
	 - it can support any content and any attribute without validation
	   xs:any with processContents="lax"

	[xml] allow to store XSchema data into a private stucture
	 - added new macros SNIPPET_STRUCT_MEMBER and SNIPPET_STRUCT_MEMBER_P
	   replaces use of G_STRUCT_MEMBER/_P macros.
	 - we use the GType of the class containing a given XmlSnippet to find
	   the proper private structure.
	 - added flag SNIPPET_PRIVATE to state XmlSnippet whose value
	   should be extracted from the private structure and not the public
	   one.

	[binding python] prevent warning in wrapper_top.c under hardy with gcc 4.2.4

	[core] add missing break to switch/case

2011-11-08  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[bindings] fix bug introduced in last commit

2011-10-18  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[bindings] fix tree traversal on windows
	 - The file path separator is not / on all platforms, so do not use it
	   when matching filenames.

	[misc] apply changes to remove warning blocking compilation with gcc 4.5.2 and php 5.3.5
	 - gcc now warns when you compate a typedef to the anonymous enum which
	   define it.
	 - some inline function in the zend.h header do compare between signed
	   and unsigned char.

	[xml saml-2.0] add missing annotation for binding generation to header for LassoKeyInformationDataType

2011-10-13  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[xml saml-2.0] add a class to handle the KeyInfoConfirmationData type
	 * use a direct mapping to map this class to SubjectConfirmationData
	   node having the xsi:type attribute.
	 * overload get_xmlNode method to add the xsi:type attribute on output.

	[xml] allow node classes to not defined their nodename, useful for simple Type

2011-10-10  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[id-wsf2 profile] check provider->private_data->roles instead of provider->role
	Fixes #140.

	[id-wsf discovery] provider can now contain multiple public keys, only consider the first key for id-wsf token generation
	ID-WSF never contemplated the fact that sometimes key roll-over happend
	(SubjectConfirmation can only containg on ds:KeyInfo), whatever...

	[saml-2.0] augment lasso_saml20_provider_get_first_http_method to verify presence of synchronous bindings

	[xml] if a SNIPPET_LIST_NODES as the SNIPPET_ANY flag, allows really any kind of node through LassoMiscTextNode

	[xml] allows LassoMiscText.init_from_xml to parse any xmlNode
	If the node has no attributes and has a simple string content, we use the
	classic embedding by setting, name, ns_href, ns_prefix. Otherwise the complete
	xmlNode is copied.

	[tests] add non-regression tests concerning the parsing of any xmlNode tree by LassoMiscTextNode when SNIPPET_ANY is used by a LassoNode

	[xml] only try to map an xmlNode to a class ame if the node has a namespace

	[xml saml-2.0] change AttributeValue snippets to accept any children
	An AttributeValue has an XSchema type of xs:any.

2011-10-07  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[xml] create a static version of lasso_node_new_from_xmlNode_with_type without error logging
	When used inside lasso_node_impl_init_from_xml the error logging is
	prematurely sent as there is a backup procedure for parsing unknown
	nodes inside a SNIPPET_LIST_NODES by creating a LassoMiscTextNode
	containing a copy of the parsed xmlNode child.

2011-09-09  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[configure.ac] default AM_MAINTAINER_MODE to enable

2011-07-08  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[configure.ac] remove useless semi-colons

	Fix wrong version exported in the PHP binding

2011-06-03  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Change the glob expression to match darwin $host_os
	Also use the $DARWIN flag to control the setting of JNI_EXTRA_LDFLAGS.

2011-05-30  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[java] try to make test works under Mac Os X

	[core] finish transition from single encryption key to multiple ones
	Some code still reference provider->private->encryption_public_key, this
	commit make them use lasso_provider_get_encryption_public_key().

2011-05-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[bindings perl] remove --as-needed from linker flags, it is not supported evrywhere
	It can come back if we add proper checking of the support on the
	platform, maybe we can leverage tests made by autoconf.

	Disable metadata loading test with the UK federation files

2011-05-23  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Merge branch 'multi-certificates'

2011-05-19  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[bindings perl] in Makefile.am, gives a default template to mktemp
	Thanks to Nathan Sowatskey for the bug report and the fix.

	[core] start of support multiple keys for encryption

	[tests] add unit test for the provider with multiple key feature

	[tests] add sample metadata for testing metadata with multiple key descriptors

2011-05-19  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[core] first try at multiple signing keys support
	The idea was to replace every use of an xmlSecKey* by a loop over a
	GList* of xmlSecKey*.

	 - In the structure LassoProviderPrivate changed
	    xmlSecKey*public_key            ->   GList* signing_public_keys
	    xmlNode*signing_key_descriptor  ->   GList* signing_key_descriptors.
	 - Renamed lasso_provider_try_loading_public_key to
	   lasso_provider_try_loading_public_keys and chaned its signature
	   accordingly
	 - Renamed lasso_provider_get_public_key to
	   lasso_provider_get_public_keys and changed the signature accordingly.
	 - Changed lasso_provider_get_encryption_public_key to return the first
	   signing key from the list as a temporary work around. Multiple
	   encryption keys will be supported later.
	 - Changed lasso_provider_load_public_key to load keys from the passed
	   file on the LassoProvider constructor, from every key descriptors
	   found for signing and eventually from the key descriptor marked for
	   encryption.
	 - Every failure to load from a file or an XML KeyInfo descriptor are
	   noew reported as warning.
	 - Query signature checking was completely moved to
	   lasso_provider_verify_query_signature and
	   lasso_provider_verify_signature now calls it.
	 - lasso_provider_verify_signature is now using lasso_verify_signature
	   from the xml/tools.o module.
	 - lasso_provider_verify_single_signature was modified to support
	   multiple signing keys.

2011-05-19  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[utils] add macros to append to and release a list of xmlSecKey*
	[core] make lasso_provider_verify_query_signature use lasso_provider_verify_signature

	[bindings perl] in Makefile.am, gives a default template to mktemp

2011-05-18  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[xml] use g_strndup instead of strndup, as it is more portable

2011-05-17  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[tests] fix broken renater metadata file
	A modification was introduced which broke the signature, updating to the
	last version.

2011-05-16  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[tests] move renater metadata files into the metadata/ subdirectory

2011-05-08  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[saml2] add proper error code for partial logout status code

	[saml2] fix build_request_msg for AuthzDecision assertion queries
	The servicepoints and roles arrays did not match the provider role
	enumerations.

2011-04-21  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[saml2] if Status is not Success pass continue processing the response
	lasso_saml20_login_process_response_status_and_assertion does analyze
	the response status code login specific error codes, if the generic
	processing from lasso_saml20_profile_process_any_response returns a
	status of response is not success, we must continue processing.

	[saml2] for any RequestDenied SAML2 response return LASSO_PROFILE_ERROR_REQUEST_DENIED as error

	[core] add a generic LASSO_PROFILE_ERROR_REQUEST_DENIED

2011-04-20  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[core] make LassoServerLoadMetadataFlag enum a typedef

2011-04-14  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Merge branch 'load-federation'

	[tools] redirect xmlsec errors to lasso error handler

	[tools] use LASSO_LOG_DOMAIN instead of magic constant

	[Makefile] move lasso/xml/tools.h to public headers

2011-04-14  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[core] add flags parameter to lasso_server_load_metadata to tune signature checking on metadata files
	The flags parameter allows to control the checking of digital signature
	upon EntityDescriptor and EntitiesDescriptor nodes in SAML 2.0 metadata
	files.

	The default behaviour is to check all found signatures and to inherit
	signature from EntitiesDescriptor to their children.

	By only enabling checking of EntityDescrtiptor node signatures it's also
	possible to only check signature at the EntityDescriptor level and so
	only trust individual entities and not the aggregating provider.

2011-04-04  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[core] update documentation of lasso_server_load_metadata

2011-04-04  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[core] make lasso_server_load_metadata load any metadata file
	The new code can load metadata file with a EntityDescriptor root node,
	and with nested EntitiesDescriptor.

	Idea and prototype by Olav Morken.

2011-04-04  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[server] in lasso_server_load_metadata do not duplicate checks already made by lasso_verify_signature
	lasso_verify_signature already checks that reference is to the given
	signed node, be it referenced through an ID or through an empty
	reference.

	[xml] if signature reference is empty check that signed node is the document root
	An empty reference means the complete document, so the signed node is
	the root element of this document. We must check that the parameter
	signe_node dmatches our assumption.

	[core] rename lasso_server_load_federation to lasso_server_load_metadata
	The aim of this function is now to load any metadata file, and to
	replace completely the use of lasso_server_add_provider.
	The metadata content argument is replaced by a metadata file path to
	more closely match other APIs.

	[web] update download page

2011-03-30  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[core] add a loaded_entity_ids output parameter to lasso_server_load_federation
	It allows to know which entity has been loaded from the metadata file.
	It must be freed by the caller.

	[core] add a blacklisted_entity_ids parameter to lasso_server_load_federation
	The goal is to prevent loading of provider known to have problems.

2011-03-29  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[tests] remove spurious output

	[tests] continue improving the lasso_server_load_federation test cases

	[tests] test lasso_server_load_federation
	The test operates on the metadata file of the french university network
	Renater.

	[tests] add renater federation metadata file for testing

	[core] add a lasso_server_load_federation method
	This method allows to load providers in bulk from what is called a
	federation file, i.e a SAML metadata file containing declarations for
	more than one provider. Those file are usually signed to bind some trust
	to its content, so lasso_server_load_federation can take an optional
	file path to a certificate chain file used to check the signature on the
	given XML content. Only same document signature is accepted (i.e. there
	must be only one XML signature reference and it should be to the empty
	string meaning the « current » document).

	[core] add a private constructor to build LassoProvider object from an xmlNode
	I'm not sure of the need outside lasso so I will let this method private
	for the moment. It's an helper method for the
	lasso_server_load_federation method which traverses an
	EntitiesDescriptor node to find all the EntityDescriptor contained
	inside.

	[saml2] add and internal method to load a federation metadata file
	It only loads one kind of provider (idp or sp). It's currently
	impossible for a provider to have the two roles at the same time toward
	a given LassoServer object, i.e. the current service is a service
	provider or an identity provider, it cannot be the two at the same time.

	[saml2] improve reporting of errors when loading a provider metadata file

	[xml] allow empty reference in XML signature (document signature)

	[xml] make id_attr_name parameter optional for lasso_verify_signature

2011-03-07  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[xml] fix lasso_node_get_xmlnode_for_any_type
	xmlCopyPropList does not copy the property list into the target it just
	copy it with respect to the target (mainly for namespace references).

	This patch adds the real copy into the target node.

2011-03-01  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[core] add missing namespace definitions to internal objects
	Identity, Lecp, Login, Logout, NameIdentifierMapping, NameRegistration,
	Session, AssertionQuery, Ecp and NameIdManagement objects were missing a
	namespace association to their GObject class. It broke when you try to
	dump a node created by lasso_node_new_from_dump.

	[tests] add test case for multiple load and dump of the same object

2011-02-08  Frédéric Péters  <fpeters@entrouvert.com>

	[debian] adapt packaging to official section overrides

	[debian] adapt packaging to official section overrides

	[debian] sync packaging with official package

	[debian] sync packaging with official package

2011-01-25  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Merge branch 'master' of git@dev.entrouvert.org:lasso

2011-01-25  Jean-Marc Liger  <jmliger@athena.siris.sorbonne.fr>

	[Fedora RPM] spec file update

2011-01-24  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[tests] change perfs to accept a second parameter giving the data files to use
	Also add metadata files to check performance with 512 and 1024 bit RSA
	keys.

2011-01-14  Frédéric Péters  <fpeters@entrouvert.com>

	[php5] Comments starting with '#' are deprecated

2011-01-05  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Remove right column with download, binary packages and source links
	It is redundant with other columns.

	[web] fix date and version in news 19

	[web] fix typo in news for release 2.3.5

	Merge branch 'hotfixes-2.3.5'

	[ŕelease] Add release notes, update doap files and website

	[dist] create Changelog directly from git

2011-01-04  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[tests] adapt Makefile.am to new path of metadata dir

	Merge branch 'hotfixes-2.3.5'

	[wsf] fix wsf preprocessor conditionals

	[bindings python] configure basic logging

	[ghashtable] add G_GNUC_UNUSED to remove unused static functions warning

	[saml2] when parsing short numbers reinitialize errno

	[bindings perl] fix get_hash_of_objects

	[bindings php5] remove hardcoding the php5 cli interpreter
	The test script did fail under Centos/Fedora because the interpreter for
	php5 is named php.

2010-12-22  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Merge branch 'hotfixes-2.3.5'

	[bindings perl] downgrade requirement on perl version to 5 instead of 5.10

	[bindings perl] downgrade require on perl version to 5 instead of 5.10

	Merge branch 'hotfixes-2.3.5'

	[xml] fix null pointer access in lasso_node_get_encryption

2010-12-21  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[configure.ac] increment version and libtool version info

	[saml2] fix errors in lasso)provider_get_first_http_method when a binding is unknown

	[saml2 provider] change critical messages to debug messages

	[saml2 profile] fix bug in binding_uri_to_http_method with the POST binding

	[saml login] suppress unused argument warning

2010-12-17  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[samlv2 logout] check that the assertion is well formed before accessing the subject nameid

	[profile] prefer to lookup the session before the identity for looking up a name identifier;

	[samlv2 logout] setup the NameID from the assertion

	[samlv2 login] do not setup conditions->notBefore/notOnOrAfter only notOnOrAfter on SubjectConfirmationData

2010-12-14  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[binding php5] add inline implementation of lasso_log since it is a private function of lasso

	[binding php5] add inline implementation of lasso_log since it is a private function of lasso

	Merge branch 'hotfixes-2.3.5'

	[saml2] make LASSO_SIGNATURE_VERIFY_HINT_FORCE as least as stringent as _MAYBE when checking signature on messages

	Merge branch 'hotfixes-2.3.5'

	[xml] remove duplicate EncryptedKey around EncryptedData elements
	The key is already embedded in the EncryptedData, so there is no need to
	also fill the EncryptedKey field of the saml:EncryptedElement object.

	[xml] add exportation of the encrypting public key in EncryptedData elements
	This commit check if the given is a simple RSA key or a full certificate
	and choose the better serialization method between RSAKeyValue and
	X509Data.

	[tools] fix xml decryption
	This commit rewrite the extraction of the EncryptedKey when it is
	embedded inside the EncryptedData element, which seem to be the frequent
	case.

	Merge with new field in custome element

	[saml2] use new encryption structure instead for internal field in LassoSaml2Assertion

	[xml] add field to contains encryption parameters inside CustomElement structure

	[utils] fix typo in lasso_assign_sec_key

	[bindings python] make constructor failure raise a lasso.Error exception

2010-12-13  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[saml2] do not set SPNameQualifier it should be reserved for SP member of an affiliation

2010-12-03  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Merge branch 'hotfixes-2.3.5'

	[tests idwsf2] add missing include for ID-WSF strings

2010-12-01  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[tests] include the backward compatibility include for GHashTable

	[bindings perl] change ghashtable interface to not use GHashTableIter

	[bindings perl] add dependency upon the Makefile.perl for the install target

2010-11-17  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[bindings] add missing static modifier for g_hash_table_get_values replacement

	[tests] include header for backward compatible methods on GHashTable structures

2010-11-15  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[bindings] fix bad use of lasso_return_if_fail in ghashtable backward compatibility header

2010-10-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Merge branch 'hotfixes-2.3.5'

2010-10-20  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[SAMLv2] fix segfault in has_signature by initializing local variables

2010-10-13  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Merge branch 'hotfixes-2.3.4'

	Merge branch 'hotfixes-2.3.4' into release

	Update doap and news file

	Update NEWS file

2010-10-11  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[tests data request] add googleapps sample AuthnRequest

	[tests] move metadata directory into data

	[tests data] add idp and sp example with 1024 bits RSA keys, for performance testing purpose

	[tools] add a repository for semantic patches as reference

	[tests metadata] add more examples of metadata files

	[tests integration] adapt to string change in lcs/qommon/saml2.ptl

	[SAMLv2] delete an unused local variable

	Merge branch 'hotfixes-2.3.4'

2010-10-09  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[SAMLv2] user server->signature_method when signing request and response

	[tests] add non regression test on assertion consumer endpoints ordering

	[core] check type of first argument of lasso_provider_get_assertion_consumer_url

2010-10-08  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	fix pardus capitalisation in NEWS file

	Merge branch 'hotfixes-2.3.4'
	Conflicts:
		lasso/xml/xml.c
		website/web/download/index.xml
		website/web/index.xml

	Update release notes and website for release 2.3.4

	[xml] fix waring on use of strndup on pardus

2010-10-08  Jérôme Schneider  <jschneider@entrouvert.com>

	Add missing include <errno.h>

2010-10-07  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[SAMLv2] handle unknown provider in artifact resolve, and also alow to ignore signature validation
	In lasso_saml20_profile_process_artifact_resolve, we know take a short
	path with an error when the remote provider is unknown and we also
	respect the lasso_profile_get_signature_verify_hint() when checking the
	signature on the artifact resolve message.

	[SAMLv2] fix bad double free bug in lasso_saml20_provider_get_assertion_consumer_service_url_by_binding

	[core] adapt lasso_provider_get_assertion_consumer_service_url for SAMLv2

2010-10-06  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[docs lasso-book] add figures to the tarball

2010-10-06  Jérôme Schneider  <jschneider@entrouvert.com>

	Add missing include <errno.h>

2010-10-06  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Merge branch 'hotfixes-2.3.4'

	[configure.ac] increment version and libtool version info

2010-10-06  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[ID-FFv1.2] in lasso_login_process_authn_request_msg() adopt simpler behaviour for checking signatures
	There is two sources of advice for signature checking:
	AuthnRequestsSigned attribute in service provider metadata files and
	value of lasso_profile_get_signature_verify_hint().

	If lasso_profile_get_signature_verify_hint() forbid to check signature,
	we do not check.
	If the SP advise to check signature, we check.
	If lasso_profile_get_signature_verify_hint() forces to check signature,
	we do not check.
	In all other cases we only check if a signature is present, i.e. we
	ignore the error LASSO_DS_ERROR_SIGNATURE_NOT_FOUND.

2010-10-06  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[ID-FFv1.2] make lasso_login_process_authn_request_msg() return LASSO_PROFILE_ERROR_INVALID_MSG if received request is not a lib:AuthnRequest

	[SAMLv2] adopt same behaviour as ID-FFv1.2 for invalid AuthnRequest

	[SAMLv2&ID-FFv1.2] improve documentation of lasso_login_process_authn_request_msg

	[SAMLv2] fix ordering of endpoints
	Ordering by binding is wrong, first order by isDefault (as stated in
	saml-metadata-2.0.pdf) then by index.

	[Core] change isdefault type in EndpointType structure
	As integer we can represent the three value of isdefault:
	- true
	- false
	- attribute absent

	[docs] update copyright years

2010-10-05  Frédéric Péters  <fpeters@entrouvert.com>

	[website] "Subversion Status" -> "Git Status"

	[website] Only keep two latest news items

	[website] Fixed 2.3.3 release date

	[website] Update right download box for 2.3.3

	[website] Don't duplicate link to git repository in link text

	[website] Refer to Git in buildbox title

	[website] Updated copyright years

2010-10-04  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[Website] Fix bad date

	[Web] chmod +x on convert-to-static.py

	[Web] update links for download v2.3.3, add lines to feature matrix

	[Web] add news file about 2.3.3

	Merge commit 'v2.3.3'

2010-10-01  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Merge branch 'hotfixes-2.3.3' into release

	[Website] add news about 2.3.3 and update doap and main page

	[Release] add release notes

2010-10-01  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[SAMLv2] restore setting of SubjectConfirmationData->NotOnOrAfter
	This was wrongly removed by me in commit
	9d22f29e55524034dfda34c15b76f1b0b78c4413.

	This is the responsability of the caller to adjust value on the
	Conditions and SubjectConfirmationData independently after.

2010-10-01  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[Binding java] replace use of strcmp by g_strcmp0

	[Tests] add annotation to remove compiler warnings

	[Core] replace all use of g_strcmp0 by lasso_strisequal and lasso_strisnotequal
	Too much human errors with strcmp kind of functions. Also change name os
	lasso_is_empty_string to lasso_strisempty.

	[Core] add helper API for string comparaison
	It should remove most errors when comparing strings.

	[SAMLv2] add missing compare to 0 introduced in 7386dc8189
	I hate strcmp.

2010-09-30  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[Bindings] change prefix for ignoring soap_binding related files

	[SAMLv2] also initialize Destination for response messages
	asynchronous bindings needs Destination attribute even for response
	messages.

	[SAMLv2] when NidPolicy->Format is NULL or unspecified, return transient
	Add more default cases.

2010-09-29  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[Tests] update perfs to test each phase of WebSSO separately and use SAMLv2
	I removed signature at the message level for the response, it should
	simulate apporiately the artifact binding with SSL transport.

	[Bindings] restore presence of SOAP nodes
	The node to exclude when ID-WSF is disactivated was soap_binding_ ones.

	[Core] fix break of lasso_profile_get_request_type_from_soap_msg from commit b9d535625
	ManageNameIDRequest is not an ID-WSF kind of request.

2010-09-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[Core] add missing annotation to lasso_*_dump functions
	The string returned by these functions is newly allocated and must be
	freed by the caller.

	[ID-WSFv1] fix other misuses of the macro lasso_foreach

	[SAMLv2] fix wrong order in use of macro lasso_foreach
	The first argument must be the iterator, the second is the iterable.
	Also add a non-regression test with Googleapps metadata and and a
	typical authn request.

2010-09-17  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[SAMLv2] fix early release of the request when using idp_initiaed login

	[SAMLv2] fix memleak of request in lasso_name_id_management_process_request_msg

	Add files to .gitignore

	[Tests] remove a valgrind suppression on g_log_default_handler

	[Tests] add valgrind targets in the Makefile: leakcheck, leakcheck-reachable and massif

	[SAMLv2] fix memleak of request in lasso_saml20_login_process_authn_request_msg

	[Core] fix leak of provider->private_data->endpoints

	[Tests] fix leak of content in test01_server_new

	[Tests] fix leak of idpLogoutContext in test04_sso_then_slo_soap

	[Core] fix leak of provider->private_data->endpoints

	[XML] fix memleak in lasso_node_export_to_soap

	[XML] fix memleak of xmlSecKeyMngr when loading a key from a KeyInfo node

	[XML] fix memleak in get_xmlNode for LassoSamlp2LogoutRequest

	[XML] fix memleak in get_xmlNode for LassoSamlp2Response

	[SAMLv2] add missing stack variable initialization

	[SAMLv2] fix unused variable warning

	[SAMLv2] in profile.c fix uncovered enumeration value in switch

	[XML] fix unused variable warnings

	[XML] fix mem leak whene releasing CustomElement structures

	[Tests] fix mem leaks

	[SAMLv2] fix mem leaks

2010-09-10  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[SAMLv2 NID management] report signature error in response, do not check response signature if forbidden
	 - build_response_msg will report signature error in response status
	   code when called without an initialized response (without a call to
	   validate_request)
	 - process_response_msg now use
	   lasso_saml20_profile_check_signature_status to check the signature
	   status only if permitted.

2010-09-10  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[SAMLv2] move check for signature status to lasso_saml20_build_response_msg
	And also handle the signature verification hint. If process_msg fails,
	you must just call build_response_msg directly.

	Only check the signature on the response if asked, most applications
	should not care.

2010-09-09  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[configure.ac] increment release version and libtool version info

	Add files to .gitignore

2010-09-09  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[SAMLv2] apply the LassoProfileVerifySignatureHint when processing requests
	The check was missing for processing of logout requests, name id
	management request and assertion query responses.

	A new internal function lasso_saml20_profile_check_signature_status is
	added.

2010-09-09  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[ID-WSFv1&ID-WSFv2] separate better strings for ID-WSF from other strings
	Code in core source file which depend upon ID-WSF symbols have been
	conditionalized, and each id-wsf source file now include directly its
	need string header.

2010-09-08  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Merge branches 'master' and 'release' of bdauvergne@xen3.lycope.priv:/var/git/lasso into release

2010-09-08  Frédéric Péters  <fpeters@entrouvert.com>

	News entry for 2.3.1 & 2.3.2 (combined)

2010-09-07  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Merge branch 'hotfixes-2.3.2' into develop

	Merge branch 'hotfixes-2.3.2'

	Increment revision in version

	Update files for release 2.3.2

	Fix lasso soname change
	If new interfaces are added, first and last number must be incremented.
	As new enumeration value have been added, this is the case.

	Merge commit 'origin/master'

	Merge branch 'hotfixes-2.3.1' into develop

	Merge branch 'hotfixes-2.3.1'

	Update files for release 2.3.1

	[SAMLv2] when no artifact message is present, still return a success status
	It is mandated by the specification.

2010-09-06  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[Tests integration] fix configuration variable name

2010-09-03  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Merge branch 'develop' into hotfixes-2.3.1

	[Core] fix memory leak in lasso_endpoint_free

	[ID-FFv1.2&SAMLv2] add more warning for failure to load metadata file
	Report detailf of the failure through warning log.

	[SAMLv2] when failing to recreate the content for the ArtefactResponse set a lasso specific status code

2010-09-03  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[SAMLv2] change the way content is stored and loaded for the HTTP-Artifact binding
	Previously content was stored as the result of lasso_node_dump method
	then reloaded, and then serialized again as part of the ArtifactResponse
	message. lasso_node_dump was ignoring all hint to sign node, but keeping
	the needed parameters around. That's not what must be done, the
	signature should happen at the generation of the artifact and the result
	must manipulated as is (i.e. XML content) and never moved back to the
	land of LassoNode objects.

	Now the content is:
	- first removed of any signature at the message level, because the
	  ArtifactResponse will take care of this, (any signature under this
	  level (like at the assertion) is kept),
	- serialized using lasso_node_export_to_xml,
	- reloaded using lasso_xml_parse_memory,
	- and put into the ArtifactResponse using a
	  lasso_misc_text_node_new_with_xml_node.

2010-09-03  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[SAMLv2] make lasso_saml20_profile_generate_artifact a static function
	It is only used in lasso/saml-2.0/profile.c anyway.

2010-09-03  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[Core] load signature parameters
	Generic signature parameters (attached as qdata to nodes) is now
	reloaded when initializing a node from XML for a node type with a
	signature snippet in its metadatas.

	It fixes the problematic usage of ciphered private keys with the
	HTTP-Artifact binding (which needs to keep a copy of the AuthnResponse
	around and to sign it later).

2010-09-03  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[Core] add private function to read an integer attribute
	This function does integer parsing and range checks, it returns TRUE if
	all goes well.

	[Core] add LAST enum values to LassoSignatureMethod and LassoSignatureType enumerations
	It helps making range checks.

2010-09-03  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[Strings] add string constant for the internal XML attributes used in dumps
	Add string constants for signature method, signature type, private key
	(file path or content), private key password and certificate (file path
	or content).

	Add cast for xmlChar constant strings definition in python bindings, it
	assumed all constant strings were char*.

2010-08-31  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[DOAP] fix typos
	Tags were badly formatted.

2010-08-25  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[SAMLv2] mark Redirect binding as an invalid binding for return AuthnResponse
	This is really not supported by the SAMLv2 protocol.

	[SAMLv2] fix string in comment

	[SAMLv2] replace use of lasso_provider_get_default_name_id_format with direct use of lasso_provider_get_metadata_one_for_role
	The first is trying to use provider->role to know which kind of role
	descriptor to lookup, but for the server object this field is 0 and when
	building authn request we know that we want our default NameIDFormat for
	the SP sso descriptor.

2010-08-25  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[SAMLv2] rebuild specialized LassoProvider methods upon new endpoints storage
	The new way of storing endpoints allows to keep ordering between
	endpoints with respect to the order of the index and isDefault field for
	indexed endpoint type, and to the XML node orders for other endpoints.

	It also simplifies the code.

2010-08-25  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[Core] add destroy code for new private field endpoints
	The contained string must be disallocated if the object is destroyed.

	[Core] add structure to store endpoints type for metadata files
	This new C structure will allow to filter ID-FFv1.2 and SAMLv2 endpoints
	more easily.

	[XML] use strtol instead of atoi to parse XSchema integers
	This commit also reject negative integers from being parsed (all integers
	in SAMLv2 and ID-FFv1.2 schemas are positive integers).

	[SAMLv2] when AuthnRequest contains invalid attributes returns INVALID_REQUEST not NO_DEFAULT_ENDPOINT
	This is the right status to return.

2010-08-25  Frédéric Péters  <fpeters@entrouvert.com>

	Fixed underlining of title

2010-08-05  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[Core] fix change of enumeration value
	This change broke the API, revert it.

2010-07-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[Website] update download link on front page

	[Website] fix typos

	[Website] fix source and download links
	The source repository is now the git repository on dev.entrouvert.org.
	Latest source release is 2.3.0. And git browser is included in our
	redmine.

2010-07-27  Benjamin Dauvergne  <bdauvergne@lupin.entrouvert.com>

	[Website] change position of Download block in right bar

	[Website] in convert-to-static.py, work around errors in build logs
	If Build() constructor fails, keep going.

2010-07-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[Website] fix wrong structure for the news file about release 2.3.0

	[Website] import convert-to-static.py modification from lupin

	[Website] add news file aboute release 2.3.0

2010-07-22  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[Website] fix non escaped ampersand

2010-07-21  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[Release] update libtool version

	[Website] update download links

	[Release] Update version number from 2.3 to 2.3.0

	[Release] update release date in NEWS file

	[Release] update ChangeLog

	[Release] Lasso 2.3
	 - update the NEWS file
	 - add abi-2.3 file
	 - update DOAP files
	 - update lasso website template
	 - add temporary message to download pages, as there are no download
	   links currently.

	[Core] add logos to EXTRA_DIST

	[Core] add HACKING to EXTRA_DIST

	[Documentation] add missing declaration to lasso-sections.txt

	[Tests] change the way tests data is distributed
	Instead of using a Makefile.am in each data directory, each data
	directoy has been added to the EXTRA_DIST for the parent directory
	Makefile.am.

	[Core] remove now useless .cvsignore files

	[Core] remove now useless .cvsignore files

	[Binding perl] move DISCLEANFILES and CLEANFILES outside of the condition clauses

	[Tests] move sourceid-2.0beta-data to data directory

	[Core] move format-suppressions.py to tools directory

	[Core] add README.JAVA and README.WIN32 files to EXTRA_DIST

	[Core] complete README.JAVA about later release of gcj

	[Core] add lasso.doap to EXTRA_DIST

	[Core] add errors.c to EXTRA_DIST

	[Core] remove unused build-strerror.pl

	[Doc] move style.css to the reference directory, and add it to EXTRA_DIST

	[Bindings] improve cleaning and distribution buiding

	[Tests java] remove Test.java
	Local test file wrongly commited.

	[Makefile] add abi to EXTRA_DIST

	[Binding perl] add DISTCLEANFILES for Makefile.perl.old file

	[Tests] remove debugging printf

	[Tests] change the way tests data is distributed
	Instead of using a Makefile.am in each data directory, each data
	directoy has been added to the EXTRA_DIST for the parent directory
	Makefile.am.

2010-07-20  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[Tests] adapt java unit tests to new semantic for list fields
	GList fields now return an empty list, not null.

2010-07-20  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[SAMLv2] simplify logic for handling AuthnResponse with binding HTTP-Post
	The logic is now simpler:
	 - first lasso_saml20_profile_process_any_response check the signature
	   on the message
	 - then lasso_saml20_login_process_response_status_and_assertion
	   traverse all the assertions:
	   - if the message is signed all assertion from the same issuer are
	     automatically accepted,
	   - if the message is not signed, or the signature validation failed,
	     or the assertion has a different issuer than the message, we check
	     the signature directly on the assertion. If any of the assertions
	     fails the signature check, the result will be
	     LASSO_PROFILE_ERROR_CANNOT_VERIFY_SIGNATURE.

	The public field profile->signature_status will contain only the message
	level signature status, each assertion signature status is not
	accessible. That will change when signature and key handling is
	reworked.

2010-07-20  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[Binding perl] fix broken distclean-local target
	The TOCOPY files need to be cleaned only for out of source directory
	builds.

2010-07-19  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[SAMLv2] comment on SessionIndex support hack

	[SAMLv2] remove empty files, wrongly committed

2010-07-19  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[SAMLv2/SSO] when processing AuthnResponse with binding HTTP-Post only the assertion need to be signed
	If the message is signed, the assertion is also covered, but if only the
	assertion is signed, there is no error to report. If the caller ask for
	forcing the validation of message signature, then we report an error.

	This commit also add checking for the binding used, if it is not
	HTTP-Post lasso_login_process_authn_response_msg will now report an
	error.

2010-07-16  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[Binding java] return empty list for NULL GList value, not null

	[ID-FFv1.2] add missing namespace declarations

2010-07-16  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[SAMLv2] add support for encrypted private keys
	 * support private key with new internal API in signature setting
	   methods

	Plug lasso_node_set_signature into
	lasso_profile_saml20_setup_message_signature and
	lasso_server_saml2_assertion_setup_signature.

	 * also use lasso_node_get_signature in has_signature

	 * add forgottent LASSO_PROFILE_SIGNATURE_VERIFY_HINT_FORCE in switch
	   cases

	For AuthnResponse checking the semantic is now that if HINT_FORCE is
	used we verify message signature *and* assertion signature. If
	HINT_MAYBE is used we check the assertion signature if its issuer
	differs from the message issuer.

2010-07-16  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[ID-FFv1.2] move all user of lasso_node_export_to_query to lasso_node_export_to_query_with_password

	[Core] Change lasso_apply_signature to use quark stored annotated signature parameters
	The node containing signature do not handle the private keys passwords.
	As the fields for signature parameters are part of the public ABI we
	cannot add the password field to the public structure for those nodes.
	Instead we use the new quark annotation accessed through
	lasso_node_get/set_signature, and if the sign_type parameter is non-NULL
	we use it instead of the parameters stored in the public structure.
	This is a gross hack :( but at least it is documented.

	[Core] add password parameter to lasso_sign_node

	[Code] add a lasso_node_export_to_query_with_password method

	[Core] add a password parameter to lasso_query_sign
	We force use of the password through a custom OpenSSL password callback.

	[Core] dump custom signature parameters in lasso dumps
	The signature parameters are serialized as global attributes from the
	http://lasso.entrouvert.org/lasso/namespaces/0.0 named:
	SignatureType
	SignatureMethod
	PrivateKey
	PrivateKeyPassword
	Certificate

	[Tests/python] add test case for WebSSO with providers using encrypted keys

	[Core] add lasso_node_set_signature and lasso_node_get_signature
	Those two methods allows to associate signature parameters to any node.
	They keep it inside the CustomElement quark. Using a private structure
	may be more performant.

2010-07-12  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[Core] extract signature adding into base class method lasso_node_get_xmlNode
	In order to permit subclass to modify the base xmlNode created by
	lasso_node_impl_get_xmlNode we must defer the concrete to the virtual
	method wrapper, lasso_node_get_xmlNode.

	To do that it whas needed to make id_attribute another virtual field of
	LassoNode subclasses (it can be accessed through an offset registered in
	the class object).

	This commit solves signature validation error since the patch for
	managing more than one SessionIndex element in samlp2:LogoutRequest.

	It also factorize the creation of signatures in one place.

2010-07-12  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[SAMLv2] if service provider supports logout, add a SessionIndex from the assertion ID
	The standard mandate to provide a SessionIndex to service provider
	advertaising their support of the logout profile. We follow the
	convention of using the assertion ID as a SessionIndex.

	[Tests] add a sso then slo soap test

	[Core] lasso_check_version does not return a proper error code
	lasso_check_version returns 0, 1 or -1 and one is not a proper error
	code, so the original int return type is kept.

	[Bindings] make is_rc only check for lasso_error_t type

	[Bindings php5] simplify is_object in php_code.py

	[Core] change return type of all error returning methods
	The new return type is lasso_error_t, it should allow to pinpoint easily
	methods returning an error code in bindings.

	[Bindings java] use is_int instead of custom methods or code

	[Bindings perl] add lasso_errot_t to type to map to T_IV typemap (integer types)

	[Bindings] add lasso_error_t to return code types

	[Binding java] use is_rc to match error return type

	[Binding php5] use is_rc to match error return type

	[Core] add lasso_error_t to list of integer types

	[Core] add a lasso_error_t typedef
	This typedef will serve to mark error returning methods.
	The ctypes.h header piggyback on export.h to be included in all public
	headers.

2010-07-05  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[Provider] Fix loading of provider without a public key
	This commit also emit propre warning when loading fails for a provider
	*with* a public key.

	[Python binding] do not throw lasso.Error for python exceptions

2010-06-29  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[Perl binding] make include from $(srcdir) works in Perl binding

	[Bindings] accept simple string in string<->xmlNode converter
	Some use case ask for passing simple libxml content node (i.e just an
	UTF-8 string) when a method argument or a field of the xmlNode* type.
	This commit add a static method in bindings/utils.c named
	lasso_string_fragment_to_xmlnode which does this transform by trying to
	parse an XML document then by trying to parse a well balanced XML
	fragment of only one node (if there is more than one node such as in the
	string " xxx <tag/> yyy ", we free the node list and return NULL).

	[Core] add macro to release an xmlNodeList object

	[ID-WSF2] add idwsf2 test script to test suite
	Re-activate ID-WSF 2.0 test script. Fix problem with provider issuing
	assertion role. Need to be fixed more generally in the future.

	[Core] add macro to release GList of xmlNodeList

	[Core] add macros to manipulate xmlNodeList and GList of xmlNodeList
	The method to copy them is xmlCopyNodeList and not xmlCopyNode, so we
	need another set of macros.

	Merge branch 'issue-101'

	Merge branch 'issue-88'

	Merge branch 'issue-86'

2010-06-18  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[Tests/integration] add G_DEBUG=gc-friendly env. var to valgrind-wrapper
	It should improve valgrind ability to trace memory origin.

2010-06-17  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	[XML] in lasso_node_export_to_paos_request check return value of lasso_node_get_xmlNode

	[XML] in _lasso_node_export_to_base64 check return value of lasso_node_export_to_xml

	[XML] in _lasso_node_export_to_xml check return value of lasso_node_get_xmlNode

2010-06-15  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Comment out custom silent rules if automake < 1.11

	[Core] do not ignore keep_xmlnode flag inherited from parent classes
	We only looked to the keep_xmlnode flag in the node data of the top
	level class, but any parent class can set this flag and in this case we
	must honor it too.

2010-06-14  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Test: add non regression test for reloading a server dump with encrypted keys

2010-06-14  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Core: when reloading a dump, use the signing private key password for loading the encryption private key
	We currently do not store the encryption private key, instead on reload
	of a dump, we try to use the signing private key as the encryption
	private key. But we forgot to use the stored private key password.
	That's now fixed.

	Next step would be to keep the encryption private key around also.

2010-06-14  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Binding python: fix freeing of list return values for methods with the transfer full flag
	The output 'print' were missing, oups :(

2010-06-12  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Binding python: find a work around for random behaviour of PyImport_ImportModule
	 * it seems that PyImport_ImportModule is not deterministic. Sometimes it
	   returns True for modules which we know are present ('logging').
	   Importing 'sys' first seems to make 'logging' accessible (complete
	   cargo cult programming).

	Core: move logging function and macros to their own module, adapt perl binding

	Core: move lasso_strerror declaration to errors.h

	add .gitignore file

	Tools: add check-makefile.sh script to tools

	add abi file for 2.2.91

	Tests: add idp6-saml2 data

	Test: add python test for attribute requesting
	 * What's tested:
	  - request initialization
	  - adding attribute designators
	  - building the request message
	  - processing the request message
	  - accepting the request
	  - adding assertion with attributes
	  - signing the assertion
	  - building the response
	  - parsing the response

	SAMLv2: rename lasso_saml2_name_id_build_persistent to lasso_saml2_name_id_new_with_persistent_format
	 * keep the old one for compatibility
	 * new one will be picked by bindings as a constructor

	SAMLv2: when initializing signture on assertion, setup an ID if there is none
	 * without the ID lasso refuse to sign (it's mandatory)

	SAMLv2: in lasso_assertion_query_build_request_msg setup nameid
	 * lasso_profile_get_nameIdentifier does not return profile->nameIdentifier
	,
	   so we first try to use profile->nameIdentifier and if it is NULL we use
	   lasso_profile_get_nameIdentifier.

	Binding python: fix bad refcounting in get_logger and lasso_python_log

2010-06-10  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Core: update lasso_iso_8601_gmt_to_time_t to support milliseconds
	 * We now support the two possible formats for xsdtime XSchema datatype:
	    - dddd-dd-ddTdd:dd:ddZ
	    - dddd-dd-ddTdd:dd:dd.d*Z

	   Where d denotes a digit, and * is the kleene star.

	   XSD datetime also supports negative years, but as we cannot represent
	   them with time_t, we can reject it at the lexical level.

2010-06-10  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Documentation: add new AssertionQuery methods to documentation

	Tests: new python test for setEncryptionPrivateKeyWithPassword

	Fix long lines in lasso/id-ff/server.c

	Core: add method lasso_server_set_encryption_private_key_with_password
	 * fixes #91.

	SAMLv2: add new methods to class LassoAssertionQuery
	 * lasso_assertion_query_add_attribute_request:
	   helper to setup request attribute for AttributeQuery messages.
	 * lasso_assertion_query_get_request_type:
	   method to find the type of the last received query.
	 * fixes #90

	SAMLv2: fix initialization of subject in lasso_assertion_query_build_request_msg

	Import tools in utils.h

	Fix collision between defined symbols in tools.h and private.h

	Binding python: if lasso.logger exists use it for logging
	 * There is now two paths to get a logger in the python binding:
	   - first try to get an objet from lasso.logger
	   - if it doesn't exist or is None, the try logging.getLogger('lasso')

2010-06-09  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Change all logging to use message()

	Core: in xml error message handler, escape messages to fit on one line

	Core: remove arrow in log messages

	Binding python: call lasso_init() first in init_lasso()

	Binding python: add GLog handler to redirect logs to Python logger named "lasso"
	 * fixes #20

	Utils: add function to extract/create node in lists
	 * lasso_extract_gtype_from_list_or_new will help for method with create
	   or extend nodes in lists.

2010-06-09  Frederic Peters  <fpeters@entrouvert.com>

	Add new lasso_log_set_handler and lasso_log_remove_handler functions
	They are modeled around the g_log... functions of GLib, they just don't
	have a domain parameter.

2010-06-06  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Binding perl: fix test so that it does not raise on add_provider

	Bindings: keep retro compatibility for member field names
	 * Special kludge price go to PHP:
	   methods name are insensitive so nothing to do here, BUT, if you use
	   getters/setters then your objects fields can be case insensitive too
	   ;-) (DNS, dns, DnS, dNs all maps to get_dns ).

	Bindings: fix camelcasing of id fields

	SAMLv2: make role checking inactive for LassoServer
	 * LassoServer have no role defined, so checking breaks loading of
	   metadata for LassoServer.

	ID-FFv1.2: for idp initiated sso accept any nameIdPolicy
	 * IdP initiated SSO can be of any kind, no need to limit it.

2010-06-04  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	SAML 2.0: add checks for proper loading of role descriptors
	 * remove warning for descriptors supporting non SAML 2.0 protocols
	 * checks that at least one descriptor was loaded and that it was for
	   our assigned role.

	SAMLv2: fix error in naming of function in the documentation

2010-05-31  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	SAMLv2: remove HTTP-Redirect as right binding for AssertionConsumer

	SAMLv2: fix bug giving UnuspportedProfile for SingleSignOn with HTTP-POST
	 * The string constant in lasso_saml20_provider_accept_http_method was
	   HTTP-Post instead of HTTP-POST.

	Core: fix extraction of relaystate when URLs contains only one kind of separators

	Integration test: adapt to new behaviour for federation termination

	SAMLv2: simplify lasso_saml20_provider_accept_http_method by only checking for remote provider support
	 * Whatever we do, with asyncrhonous bindings the remote provider can
	   return the response with any asynchronous binding.

	SAML 2.0: in lasso_login_build_assertion set conditions time limit, no SubjectConfirmationData limits

	SAML 2.0: in lasso_login_build_assertion do not conflate sessionNotOnOrAfter with assertion condition notOnOrAfter

2010-05-11  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Website: add quicklinks for download links

	Change VCS viewer link to point toward the redmine browser

	SAMLv2: conflate Responder and Requester when checking second level status code
	 * lasso/saml-2.0/login.c:
	   I'm not sure that most IdP really make the semantic distinction
	   between those two first level status codes, so just conflate them.

	SAMLv2: remove warning message for invalid signature on AuthnResponse messages
	 * lasso/saml-2.0/login.c:
	   we already return an error, no need to clutter the output with
	   warning messages.

2010-05-04  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Website: add a link to a tarball of the documentation extracted from the SVN

2010-05-01  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	SAML 2.0 Helper: add lasso_saml2_assertion_set_one_time_use

	Fix bad initialization of an rc field from revision 4837

	Change <p> tags to <para>

	Add a lasso_profile_get_signature_status method

2010-04-30  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Initialize all uninitialized rc variables

	Test: only test custom namespace if ID-WSF is enabled

2010-04-28  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	in lasso_idwsf2_data_service_build_response_msg, allows SOAPFault as responses

	Fix uninitialized local variable

	in lasso_session_count_assertions, do not emit warning if session is not an object

	SAML 2.0: always restart initial request processing in lasso_logout_build_response_msg
	 * Does it also in process_response_msg if no more assertions are
	   present.
	 * Take into account that lasso_saml20_profile_process_any_response
	   already check for the status code, and so specify finer error code in
	   the cleanup code.

	SAML 2.0: fix lasso_saml20_provider_get_first_http_method
	 * LassoServer object can have many roles, use the default role of the
	   remote provider to decide on which to assume.

	SAML 2.0 Logout: in init_request, remove the assertion anyway
	 * lasso/saml-2.0/logout.c:
	   when initiating a logout, if no problem is found, remove the assertion.
	   you can always continue by changing profile->http_request_method to
	   SOAP for example and redo a build_request_msg.

	SAML 2.0: lasso_saml20_profile_process_any_response_msg, change status code checking

2010-04-22  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	SAML 2.0: lasso_logout_build_response_msg, just verify there is saved data from a previous request before switching them
	 * lasso/saml-2.0/logout.c:
	   There is no need to check what the previous remote provider ID was,
	   just that initial_remote_providerID is not NULL in order to switch
	   request, response and remote_providerID.

	Fix wrong change g_free -> lasso_release inside example code

	Provider: fix problem when reusing the same lists nodes in Descriptors

	Improve safety by replacing all g_hash_table_destroy use by lasso_release_ghashtable

	Improve safety by replacing all g_list_free use by lasso_release_list

	Improve safety by replacing all g_string_free use by lasso_release_gstring

	Improve safety by replacing all g_free use by lasso_release

	Start an example listing for an IdP SingleSignOn endpoint

	Free xmlSecKey

	Fix potential SEGFAULT in _lasso_node_free_custom_element

	Utils: add lasso_assign_list

	Add lasso_release_gstring

	Utils: add lasso_release_ghashtable

	SAML 2.0 Profile: remove unused must_sign variable

	First try to check that objects are fully functionals before proceeding

	Fix potential SEGFAULT of an unknown provider

2010-04-20  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	SAML 2.0: in lasso_saml20_process_federation, only handle the case of PERSISTENT format
	 * lasso/saml-2.0/login.c:
	   in lasso_saml20_process_federation:
	   - if no name id format can be found by the request, use the default from
	     the metadata file (first declared NameIDFormat)
	   - instead of checking if format is TRANSIENT, check if it is PERSISTENT,
	     and proceed with the federation, if not just return 0.
	   - return LASSO_PROFILE_ERROR_UNKNOWN_PROVIDER instead of
	     LASSO_SERVER_ERROR_PROVIDER_NOT_FOUND.
	   - in any case, check for consent.

	SAML 2.0: in lasso_saml20_login_validate_request, do not check signature if not necessary

	SAML 2.0: find binding when only AssertionConsumerServiceURL is set, do not check signature on request if asked

	SAML 2.0: add internal method to retrieve the binding for an URL

	Login: add internal function _lasso_login_must_verify_*signature

2010-04-19  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Login: remove symbol markers in example code

	Fix documentation problems

2010-04-16  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Ameliorate support for lasso_profile_set_signature_verify_hint
	 * lasso/id-ff/profile.h:
	   - add end symbol for enum LassoProfileSignatureVerifyHint
	 * lasso/id-ff/profile.c:
	   - fix documentation of lasso_profile_set_signature_verify_hint
	   - do not allow to set or return invalid value for the
	     signature_verify_hint attribute.
	 * lasso/saml-2.0/login.c:
	   - handle new enum value
	 * lasso/saml-2.0/profile.c:
	   - handle new enum value
	   - fix missing catch of signature error reporting when
	     signature_verify_hint is IGNORE.
	 * docs/reference/lasso/lasso-sections.txt:
	   - export enums LassoProfileSignatureHint and
	     LassoProfileSignatureVerifyHint
	 * tests/metadata_tests.c:
	   - fix test of all Role enumerations

2010-04-06  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Revert "Core: add XML schemas for SAML 2.0"
	This reverts commit 5250c2c89e3983189a3c52cd85ad221ff7b6f64b.

	SAML 2.0: add Destination attribute to requests
	 * lasso/saml-2.0/profile.c:
	   this change make Lasso respect paragraphs 3.4.5.2 (HTTP-Redirect
	   binding securit considerations ) and 3.5.5.2 (the same for HTTP-Post)
	   of the saml-bindings-2.0-os.pdf document, and should allow our Authn
	   Requests to be accepted by shiboleth IdP.

	Tools: add usage statement to check-lasso-sections.py

	Docs: add/remove symbols from lasso-sections.txt

	ID-WSF 2.0 DST: make lasso_idwsf2_data_service_set_status_code works event if no response is initialized

	Tests: add tests for custom namespace functions

	ID-FF 1.2 & SAML 2.0: factorize access to role prefix

	Tests: make role descriptor loading test less verbose
	 * tests/metadata_tests.c:
	   remove printf, add checks

	Tests: show actual value in check_equals test macro

	XML: add custom namespace definition handling

	SAML 2.0: fix default assertion consumer handling when isDefault is missing
	 * if no default_assertion_consumer value is set after traversing the
	   list of endpoint, try to find the first one without isDefault="false"
	   and finally take the first one.

	SAML 2.0: fix default assertion consumer handling
	 * the default one is the first with the attribute isDefault not the
	   last.

	Binding python tests: update idwsf1 to explicitely register PP10 HREF

	Binding python: update idwsf2 test for method change dst.initResponse -> validateRequest

	XML: do not register any DST namespace by default

	XML: add a SNIPPET_COLLECT_NAMESPACES snippet to DstRefResultQuery

	ID-WSF 2.0 Data Service: new accessor, fix use of build_unique_id, change init_response to validate_request

	Core: add a SNIPPET_COLLECT_NAMESPACE snippet type
	 * lasso/xml/private.h lasso/xml/xml.c:
	   add a new primary XmlSnippet type for collecting all namespace
	   declaration, following parent relation on current node or one of the
	   child nodes.

	Binding python: fix use of raise_on_rc, simplift Node.__setstate__

	Revert "Make lasso_node_get_xmlNode return original_xmlnode if there is one"
	This reverts commit dfd8f21ab27d2b25a67a52aadd9d4cdce20ebda5.

	Binding python: for empty GList return empty tuples, not None

	Docs: remove from documentation comments characters outside ASCII for python bindings

	Fix return path in lasso_saml20_process_any_response for signatures checking

	fix documentation of lasso_node_debug

	Make lasso_node_get_xmlNode return original_xmlnode if there is one
	 * lasso/xml/xml.c:
	   this change allow session to contain exact copy of received assertion
	   (and not the one lacking signatures) and also to put those assertions
	   directly into message, for example as ID-WSF credentials.
	   But it could have side effect, so for now I will no merge it.

2010-03-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	update documentation of lasso_login_build_authn_response_msg

	update documentation of lasso_login_build_authn_request_msg

	improve documentation of lasso_login_build_artifact_msg

	use lasso_release_gobject in lasso_login_destroy

	update lasso_login_accept_sso documentation

	ID-FF&SAML2: complete documentation of lasso_login_build_assertion

	Make multiple include loading work in lasso/backward_comp.h
	 * lasso/backward_comp.h
	   add missing BACKWARD_COMP_H define.

	Binding python: fix test file

	SAML 2.0&ID-FF 1.2: simplify and complete metadata loading for multi-role support

	Core: add XML schemas for SAML 2.0

	Doc: add all missing methods to documentation section file
	 * add missing LASSO_EXPORT too for functions already present in the
	   documentation, but not exported previously.

	Tools: add script to check for missing functions in lasso-sections.txt

	XML: in lasso_node_build_xmlNode_from_snippets only set child name if SNIPPET is not of ANY type

	Core: add lasso_set_string_from_prop(char**,xmlNode*,..) function

	Core: add method to check whether we are IdP or SP of another provider
	 * lasso/id-ff/profile.{c,h}:
	   the method lasso_profile_sso_role_with, evaluate using the current
	   LassoIdentity content if we are in a relation of IdP or SP toward
	   another provider. This is based on the existence of a federation with
	   this provider.

	SAML 2.0: add attribute profiles strings

	SAML 2.0: add support for attribute, authentication and authorization authorities metadata
	 * server.c,serverprivate.h: add new private method
	   lasso_server_get_firs_providerID_by_role(server, role)w
	 * defederation.c: use new private method
	   lasso_server_get_first_providerID_by_role for find providerID
	   when the argument remote_providerID is null in
	   lasso_defederation_init_notification.
	 * lasso/id-ff/login.c (lasso_login_init_authn_request): use new private
	   method lasso_server_get_first_providerID_by_role.
	 * provider.h: add thre new provider role (authn,pdp,attribute) and
	    four new services (authn,assertionid,attribute,authz) and also
	    a ROLE_ANY value (-1) for catchall purpose and a ROLE_LAST for
	    array sizing.
	 * provider.h: add a LAST member to LassoMdProtocolType enum.
	  * providerprivate.h,provider.c:
	   - removes separate hashtable for descriptors depending on provider role,
	     use only one table named Descriptors.
	   - use the LAST members of enumerations to dimention static string arrays.
	  * provider.h: add a LAST member to the e

	XML: add support for setting attribute in any namespace using element tree syntax

	Support SignatureVerifyHint in SAML 2.0 SSO profile and common message handling

	Add signature_verify_hint accessor methods to LassoProfile
	 * lasso/id-ff/profile.{c,h}:
	   add a LassoProfileSignatureVerifyHint enumeration and two accessor
	   methods:
	    - lasso_profile_get_signature_verify_hint
	    - lasso_profile_set_signature_verify_hint
	 * lasso/id-ff/profileprivate.h:
	   add private field signature_verify_hint.

	Bindings: fix parsing of camelcased ident (Samlp2IDPList -> samlp2,idp,list)

	Binding python: fix problem of classes without an initializer

	Tests: add macros to test for string equality

	Tests: in SAML 2.0 tests, use more check_ macros

	Tests: add macros check_equals and check_not_equals

	Core: change GObjectAnnotation of lasso_node_export_to_query to state that private_key_file is optional

	SAML 2.0 XML: add header listing strings from XML schema

2010-03-08  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	SAML 2.0: fix uninitialized variable

	ID-WSF 1.0: fix bad header name in all inclusive header lasso/id-wsf/id_wsf.h

2010-03-02  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Binding PHP5 tests: fix assertion dump test

	XML: move registry mapping into the *_get_type() functions
	 * lassoxml/disco_send_single_logout.c:
	 * lassoxml/id-wsf-2.0/sb2_user_interaction_header.c:
	 * lassoxml/id-wsf-2.0/subsref_app_data.c:
	 * lassoxml/lib_assertion.c:
	 * lassoxml/saml-2.0/saml2_condition_abstract.c:
	 * lassoxml/saml-2.0/saml2_encrypted_element.c:
	 * lassoxml/ws/wsa_attributed_uri.c:
	 * lassoxml/ws/wsa_endpoint_reference.c:
	   class_init is only called the first time an object of the given type
	   is created, registry mappings must exist before this time, so I moved
	   the registration code to the _get_type() functions.

	Core: add a level argument to lasso_node_debug

	ID-WSF 2.0: add lasso_soap_envelope_set_relates_to method

	Core: add macro to remove gobject from lists

2010-03-02  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Core: export lasso_build_unique_id into public API
	 * lasso/xml/tools.h:
	   add new header to export lasso_build_unique_id as a public API.

	 * lasso/xml/Makefile.am:
	   add tools.h to header list

	 * lasso/xml/tools.c:
	   add GObjectIntrospection annotations to exported functions.

2010-03-02  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	SAML 2.0: change error code for empty ArtifactResolve response to LASSO_PROFILE_ERROR_MISSING_RESPONSE

	Bindings java: do not mask errors from the code generator

	Core: add an helper method to build a SOAP response in a LassoProfile object
	 * lasso/id-ff/profile.{c,h}:
	   add lasso_profile_add_soap_fault_response(char* code, char *string,
	   GList *details).
	 * lasso/id-wsf-2.0/profile.{c,h}:
	   change signature of lasso_idwsf2_profile_init_soap_fault_response.
	 * lasso/id-wsf-2.0/data_service.c:
	   use new function instead of manually intializing soap faults
	 * lasso/id-wsf-2.0/discovery.c:
	   init a soap fault when parsed request is of an unknown type, return
	   proper error.

	ID-WSF 2.0 python tests: finish tests for new ID-WSF 2.0 API
	 * bindings/python/tests/idwsf2_tests.py:
	   all Discovery service request types are tested, and Data Service
	   query is tested as well. Data Service testing and API should more
	   tested, especially failure cases.

	ID-WSF 2.0: add service type to response, parse response before using it

	Core: in xml_insure_namespace do not segfault if ns is NULL

	Binding python: accept a functio as setter, if it has only two arguments

	ID-WSF 2.0: in lasso_idwsf2_get_name_identifier, use lasso_saml2_assertion_decrypt_subject

	ID-WSF 2.0: in lasso_idwsf2_profile_check_security_mechanism, add common logic for SAML 2.0 secmech, check for presence of a server object,

	ID-WSF 2.0: fix MDAssociationQueryResponse handling
	 * lasso/id-wsf-2.0/discovery.c:
	    - in lasso_idwsf2_discovery_validate_request, use svcmdids to
	      intialize response to MSAssociationQuery requests.
	    - in lasso_idwsf2_discovery_process_response_msg, extract received
	      svcmdids; use lasso_check_good_rc when needed.

	ID-WSF 2.0: change signature of lasso_idwsf2_discovery_add_identity_to_epr
	 * lasso/id-wsf-2.0/discovery.c:
	   - in lasso_idwsf2_discovery_add_identity_to_epr, receive an Epr
	     instead of an EprMetadata node, and use
	     lasso_wsa_endpoint_reference_add_security_token to add the
	     assertion token instead of duplicating this logic.
	   - in lasso_idwsf2_discovery_build_epr change the call site.

	ID-WSF 2.0: fix documentation of lasso_idwsf2_data_service_build_request_msg

	SAML 2.0: in lasso_saml2_assertion_get_issuer_provider, check type of server argument

	Core: add do/while(0) around block of goto_cleanup_with_rc

	Core: add PROFILE errors around assertion validation
	 * lasso/errors.c lasso/errors.h:
	   - add errors concerning invalid assertion, assertion with invalid
	     conditions, unknown issuers, or when the issuer is not a provider
	     we marked as an IdP.
	   - add error for missing sender id in an ID-WSF message.

	Core: add a level argument to lasso_xmlnode_to_string and _lasso_node_export_to_xml

2010-02-22  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Binding perl: add support for out parameters
	 * bindings/perl/lang.py:
	   support GObject out parameters.

	SAML 2.0: LassoSaml2ConditionAbstract does not match its element name anymore, add a registry mapping
	 * lasso/xml/saml-2.0/saml2_condition_abstract.c:
	   last commit to this file changed the element name from
	   ConditionAbstract to Condition so the XML parser cannot find the
	   corresponding GObject class anymore.

	SAML 2.0: add more accessors for Conditions
	 * lasso/saml-2.0/saml2_helper.{c,h}:
	   distribute code from lasso_saml2_assertion_validate_conditions to
	   lasso_saml2_assertion_validate_time_checks and
	   lasso_saml2_assertion_validate_audience.
	   add lasso_saml2_assertion_allows_proxying and
	   lasso_saml2_assertion_allows_proxying_to, to respectively check for
	   proxying of the current assertion, and for proxying to a specific
	   provider (you must call both of them to test completely the proxying
	   status of an assertion).
	 * docs/reference/lasso/lasso-sections.txt:
	   reference new functions into documentation.

	Bindings python: use more accessors from utils.py
	 * binings/python/lang.py: remove direct access to type tuples in favor
	   of using accesors from utils.py.

	Bindings: make is_int more robust, and fix remove_modifiers

	Bindings php5: use accessort from bindings/utils.py
	 * bindings/php5/wrapper_source.py:
	   do not handle 'type/variable' tuple directly, use accessors.

	Binding python: add pickling support to LassoNode
	 * bindings/python/lang.py:
	   support pickling protocol methods __getstate__ and __setstate__
	   leveraging the lasso_node_dump and lasso_node_new_from_dump methods
	   from Lasso.

	Add lasso_string_to_xsd_integer, to parse xsd:integer values

	SAML 2.0: fix bad name of Condition element, keep xmlNode as it is abstract
	 * lasso/xml/saml-2.0/saml2_condition_abstract.c:
	   saml2:Condition is an element whose type is abstract, it must be used
	   as an extension point helped by the xsi:type field. As the content is
	   unknown before hand we must keep the original xmlNode for later
	   analysis.

	Bindings python tests: update idwsf2_tests.py

	Bindings: in utils.py, make clean_type handle None value

	ID-WSF 2.0: reorganize EPR minting, add a process_request method to disco service
	 * data_service.c:
	   remove dependency on discovery.h
	 * discovery.{c,h}:
	   - add a lasso_idwsf2_discovery_process_request_msg to extract request
	     data before validate request (SvcMDID, SvcMD or RequestService).
	   - store SvcMDID in a private field, add a setter for it.
	   - SvcMDID is now used for building response to MDAssociationQuery and
	     parsing request for MDQuery, MDDelete, MDAssociationAdd and
	     MDAssociationDelete.
	 * idwsf2_helper.{c,h}:
	   - change security mechanism argument of
	     lasso_wsa_endpoint_reference_add_security_token from a NULL
	     terminated string array to a GList.
	 * saml2_login.{c,h}:
	   - add a lasso_server_create_assertion_as_idwsf2_security_token for
	     minting assertion for ID-WSF 2.0 security, to be used in Discovery
	     bootstap EPR creation and EPR minting for Discovery service Query
	     responses.
	   - add a lasso_saml2_assertion_get_discovery_bootstrap_epr, and
	     rewirte lasso_login_idwsf2_get_discovery_bootstrap_epr to use it.
	   - make lasso_login_idwsf2_add_discovery_bootstrap_epr accept a list
	     of security mechanisms, not just one.
	 * tests/idwsf2_tests.c:
	   - adapt to new argument type of
	     lasso_login_idwsf2_add_discovery_bootstrap_epr.

	Core: add new example to LassoLogout for asynchronous response handling

	Support multiline error messages in build_strerror.py

	SAML 2.0: add lasso_saml2_encrypted_element_server_decrypt and lasso_saml2_assertion_decrypt_subject

	Fix idp5-saml2 metadatas
	 * tests/data/idp5-saml2/metadata.xml:
	   we do not have the private key for the encryption public key, so I
	   copied the signing public key.

	Fix lasso_extract_gobject_from_list

2010-02-21  Mikael Ates  <mates@entrouvert.com>

2010-02-17  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Documentation: add example to LassoLogout, fix bad markup in id-wsf-2.0/profile.c

	ID-WSF 2.0: also check sender match assertion in lasso_idwsf2_profile_check_security_mechanism
	 * lasso/id-wsf-2.0/profile.c:
	   for BEARER mechanism, also check that the SPNameQualifier of the
	   Subject match the Sender of the request.

	ID-WSF 2.0: add lasso_idwsf2_discovery_get_svcmdids to public API

	Tests integration: force C locale
	 * tests/integration/saml2/__init__.py:
	   authentic now use 'system locale' by default, so force C locale to
	   get english IHM string to make twill happy.

	SAML 2.0: if assertion possess a signed original_xmlnode return it instead of using get_xmlNode
	 * lasso/xml/saml-2.0/saml2_assertion.c:
	   assertion in lasso when read are not usable anymore because the
	   signature is lost, this commit allows to keep assertion unaltered
	   after reading them if they contained a top level signature (a
	   signature contained in the Assertion node).
	   This is useful for reusing assertion kept in a LassoSession object
	   and for using assertion as security token for ID-WSF.

	Core: use lasso_xmlnode_to_string in LassoNode export functions
	 * lasso/xml/xml.c:
	   remove duplicate codes and use lasso_xmlnode_to_string instead.

	Current state of ID-WSF 2.0 python test

	Binding php5: fix generation of list freeing
	 * bindings/php5/wrapper_source.py:
	   free_glist wants a GList** as first argument.

	Core: add a lasso_xmlnode_to_string function
	 * lasso/xml/tools.c lasso/xml/private.h:
	   lots of functions duplicate this code, so we factorized it there.
	   It has two parameters, the xmlnode and boolean deciding whether to
	   format the resulting content (good for reading but bad for
	   signatures).

	SAML 2.0: in lasso_saml20_profile_set_session_from_dump_decrypt, really decrypt
	 * lasso/saml-2.0/profile.c:
	   dump for already signed assertion containing an EncryptedID as
	   Subject does not work as before, the decrypted NameID is no more
	   included in it, so instead of trying to plug it in the NameID field
	   we resort to really deciphering the EncryptedID.
	   That could be a performance problem if the session object is stuffed
	   with a lot of assertions.

	Current state of idwsf2 tests

	ID-WSF 2.0: fix loading of LassoIdWsf2Discovery dumps

	Core: add error exit to lasso_node_new_from_xmlNode
	 * lasso/xml/xml.c:
	   if building of the node fails, we must keep the initialization of
	   custom nodename and namespace.

	Binding python: simplify special constructor, use cptrToPy

	ID-WSF 2.0: make lasso_idwsf2_profile_redirect_user_for_interaction add the transactionID to the URL
	 * lasso/id-wsf-2.0/profile.c:
	   simplify use of lasso_idwsf2_profile_redirect_user_for_interaction by
	   directly adding the ID of the SOAP response message to the URL.
	   Report an error if no MessageID can be found.

	ID-WSF 2.0: rewrite and document lasso_soap_envelope_sb2_get_redirect_request_url
	 * lasso/id-wsf-2.0/soap_binding.{c,h}:
	   fix error in conception of
	   lasso_soap_envelope_sb2_get_redirect_request_url, RedirectRequest is
	   part of a SOAP fault not the headers.
	   Explain in the documentation how to use the RedirectRequest URL.
	   Change the return type to a const string.

	ID-WSF 2.0: add a method to retrieve/create a SOAP Fault to SOAP binding module
	 * lasso/id-wsf-2.0/soap_binding.{c,h}:
	   add method lasso_soap_envelope_get_soap_fault which returns/create
	   the first SOAP fault inside the body of the SOAP envelope.

	Binding python tests: adapt test to use TOP_SRCDIR env var

	Binding python: factorize value freeing generation code
	 * lasso/python/lang.py:
	   extract value freeing generation code to method free_value,
	   add proper liberation of values at exit of wrapper functions, remove
	   g_free call from return_value generated code.

	Core: add missing return value owner semantic annotations to getters
	 * lasso/id-ff/provider.c:
	   fix lasso_provider_get_base64_succinct_id, it returned a libxml
	   string, copy it with g_strdup before releasing it to stay with GLib
	   allocated string in return values.

	Core: add annotation to getter function about return value owner semantic
	 * lasso/id-ff/identity.c lasso/id-ff/profile.c:
	   precise owner semantic of lasso_profile_get_identity,
	   lasso_profile_get_session, lasso_profile_get_server
	 * lasso/id-wsf-2.0/saml2_login.c tests/login_tests_saml2.c:
	   in the same vein add missing release of assertion returned by
	   lasso_login_get_assertion which return a caller owned object.

	ID-WSF 2.0: make lasso_idwsf2_profile_redirect_user_for_interaction choke on missing redirect property on UserInteraction header
	 * lasso/id-wsf-2.0/profile.c:
	   if redirect boolean property is false, refuse to return a redirect
	   request.
	   automatically create a SOAP fault to signal to the requester that it
	   needs to support interaction via redirect.

	ID-WSF 2.0: add error code signaling that the requester does not support redirect request
	 * lasso/errors.c lasso/errors.h:
	   add
	   LASSO_WSF_PROFILE_ERROR_REDIRECT_REQUEST_UNSUPPORTED_BY_REQUESTER.

	ID-WSF 2.0: add a create arg to lasso_soap_envelope_get_sb2_user_interaction_header, add it to public API

	ID-WSF 2.0: fix lots of bad usage of g_strcmp0
	 * lasso/id-wsf-2.0/idwsf2_helper.c lasso/id-wsf-2.0/soap_binding.c
	   lasso/id-wsf/data_service.:
	   add missing check for the return value of strcmp, maybe we need a
	   macro like lasso_strequal.

	Tests: in login_tests_saml2.c, add test for lasso_saml2_assertion_validate_conditions

	in idwsf2_tests.py, merge test case for metadata registering, add test case for failure

	Bindings: parse defines refering to other defines
	 * bindings/bindings.py:
	   Allow to build constants using other constants (prefix string), the
	   constant type is retrieved from the prefix existing record.

	in tools.c, add defines to permit import of timegm

	SAML 2.0: make lasso_saml2_assertion_validate_conditions really work

	Core: fix lasso_iso_8601_gmt_to_time_t, use timegm instead of mktime
	 * lasso/xml/tools.c:
	   mktime convert works on local time, we need timegm to work with GMT
	   time.

	ID-WSF 2.0: add strings for Discovery service Actions

	ID-WSF 2.0: add serialization code for private properties of LassoIdWsf2Profile

	ID-WSF 2.0: fix missing initialization of request field in lasso_idwsf2_discovery_validate_md_register

	ID-WSF 2.0 Documentation: update lasso-sections.txt with LassoIdWsf2Profile methods

	ID-WSF 2.0: fix lasso_idwsf2_discovery_add_simple_service_metadata
	 * lasso/id-wsf-2.0/discovery.c:
	   options is a string list, and security_mech_ids too, so employ the
	   corresponding macros.

	Core: in utils.h, use a temporary to store reference to freed list

	ID-WSF 2.0: in lasso_idwsf2_discovery_status2rc, check second level status code too

	Website: add a link to the developement version documentation

2010-02-15  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Binding python: fix leak in string getters

	SAML 2.0: fix documentation of lasso_saml2_assertion_validate_conditions

	Add signature on EPR secur token

	Bindings python: udpate id-wsf 2.0 test file
	 * bindings/python/tests/idwsf2_tests.py:
	   Disco Service registering is working, it now needs a bootstrap epr in
	   all case (before registering could be done without signatures).

	ID-WSF 2.0: add signature to Disco produced EPR SAML 2.0 security tokens

	ID-WSF 2.0: in lasso_idwsf2_profile_build_request_msg, properly handle the security token
	 * lasso/id-wsf-2.0/profile.c:
	   security token is a signed assertion by an IdP or a discovery
	   service, we must keep as is, that is with the signature, in order to
	   do that we extract the original xmlNode from the assertion and embed
	   it in the new message using a LassoMiscTextNode.

	ID-WSF 2.0: in lasso_login_idwsf2_get_discovery_bootstrap_epr, better handle attribute content
	 * lasso/id-wsf-2.0/saml2_login.c:
	   LassoSaml2AttributeValue can contain many children, so traverse them
	   all to find the firs LassoWsAddrEndpointReference among them.

	ID-WSF 2.0: in lasso_login_idwsf2_add_discovery_bootstrap_epr, initialize ID and Issuer property on bootstrap assertion.
	 * lasso/id-wsf-2.0/saml2_login.c:
	   initialization of ID and Issuer properties was missing.

	Core: in lasso_verify_signature, fix conditional about single reference
	 * lasso/xml/toosl.c:
	   verify that reference is unique if NO_SINGLE_REFERENCE is disabled.

	SAML 2.0: in saml2_helper.c, better check issuer element and also test the LassoServer object for issuance, lasso_saml2_assertion_get_issuer_provider

	ID-WSF 2.0: in lasso_wsa_endpoint_reference_new_for_idwsf2_service, do not forget to add metadata to epr, fill usage property of token
	 * lasso/id-wsf-2.0/idwsf2_helper.c:
	   add missing initialization code.

	ID-WSF 2.0: fix bad type checking in lasso_wsa_endpoint_reference_get_idwsf2_security_context_for_security_mechanism
	 * lasso/id-wsf-2.0/idwsf2_helper.c:
	   SecurityMechID is a list of strings not LassoMiscTextNode.

	ID-WSF 2.0: fix bad conditionnal in lasso_idwsf2_discovery_process_metadata_register_response_msg
	 * lasso/id-wsf-2.0/discovery.c:
	   fix check in
	   lasso_idwsf2_discovery_process_metadata_register_response_msg
	   fix duplication of service metadatas inside private list of service
	   metadatas.

	in server.c, fix missing loading of public keys in constructors
	 * lasso/id-ff/server.c:
	   constructor for LassoProvider load public keys but they are not
	   called by LassoServer constructors, so we have to explicitely
	   duplicate calls to lasso_provider_load_public_keys.

	ID-WSF 2.0: moved strings to their own header

2010-02-12  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Add saml2_strings.h to dist

	Bindings python: remove default argument if there is parameters without default argument following

	Use defined symbols instead of magic constants

	Add LASSO_SAML2_FIELD_ENCODING
	 * lasso/xml/saml-2.0/saml2_strings.h:
	   add another field name from SAML 2.0 specifications.

	Fix lasso_get_relaystate_from_query, support semi-colon and parameter at beginning
	* lasso/xml/tools.c:
	  getting first parameter was broken (query_string does not contain '?'
	  at the beginning) and semi-colon support was missing.

2010-02-10  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Documentation: fix typos in saml2_strings.h documentation, add new string symbols to lasso-sections.txt

	SAML 2.0: move SAML 2.0 strings to their own header, add documentation
	 * lasso/xml/strings.h:
	   remove SAML 2.0 strings
	 * lasso/xml/saml-2.0/saml2_strings.h:
	   move them here, document useful ones.

	Documentation: document LsasoSamlp2NameIDPolicy

	Documentation: complete non finished documentation comments
	 * too much warnings when generating doc, now we can concentrate on
	   undocumented symbols (in
	   lasso/docs/reference/lasso/lasso-undocumented.txt).

	Bindings perl: prevent unused functio warning for array_to_glist_gobject

	Tests perl: raise number of tests

	Docs: reorder sections in chapter "Lasso Architecture"

	SAML 2.0: separate lasso_saml20_login_process_response_status_and_assertion into multiple functions
	 * lasso/saml-2.0/login.c:
	   in lasso_saml20_login_process_response_status_and_assertion, extract assertion
	   decryption, and issuer checking into their own function.

	SAML 2.0: when verifying query signature, do not presume order of field and separator
	 * lasso/xml/tools.c:
	   in lasso_saml2_verify_query_signature, extract needed field and order
	   them appropriately before computing digest, expect ';' as well as '&'
	   as separator.
	 * tests/random_test.c:
	   add non-regression tests for query signature validation.
	 * tests/Makefile.am:
	   make tests link agains static version of liblasso, to get access to
	   private functions.

	SAML 2.0: complete list of field names for SAML 2.0

	Core: in tools.c, enhance urlencoded_to_string to support semu-colon separator

	SAML 2.0: add helper method lasso_saml2_assertion_get_in_response_to
	 * lasso/saml-2.0/saml2_helper.c lasso/saml-2.0/saml2_helper.h:
	   add a method to access easily the InResponseTo attribute.

	SAML 2.0: in lasso_saml20_login_process_authn_response_msg always report signatures errors
	 * lasso/saml-2.0/login.c:
	   - in lasso_saml20_login_process_authn_response_msg keep around all error
	     codes returned by intermediary steps. At the end report the first one.

	SAML 2.0: in lasso_saml20_profile_process_any_response do not stop on missing issuer
	 * lasso/saml-2.0/profile.c:
	   Issuer is not a mandatory element of SAML 2.0 response,
	   but if we do not remember which issuer we sent the request (of if
	   the response is spontaneous) then we will receive a provider not found
	   error when trying to check the message signature.

	Use new SAML2 strings instead of hardcoding query string field names

	Add documentation about runtime flags
	 * lasso/lasso.c:
	   add a table to Initialization documentation section about
	   general runtime flags.

	Remove follow-idwsf-stupid-semantic flag
	 * lasso/lasso.c:
	   this flag is useless, that's me that is stupid.

	Add internal methods to LassoServer to get the signature and encryption private keys
	 * lasso/id-ff/server.c lasso/id-ff/serverprivate.h:
	   add methods lasso_server_get_private_key and lasso_server_get_encryption_private_key.

	Add complete error code listing for lasso_login_process_response_msg
	 * lasso/id-ff/login.c:
	   list all error codes and their semantic with respect to this call.

	Update code example for LassoLogin
	 * lasso/id-ff/login.c:
	   add code for intializaing request for SAML 2.0, shows how to handler errors codes.

2010-02-10  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Add error codes, update error codes documentation, reduce changes in errors.c by ordering error codes
	* lasso/errors.h lasso/errors.c
	- add to report non schema conforming XML trees, decyrption
	failure due to missing private keys and invalid signatures on assertions.
	- update documentation of LASSO_SERVER_ERROR_PROVIDER_NOT_FOUND,
	LASSO_SERVER_ERROR_ADD_PROVIDER_PROTOCOL_MISMATCH,

	* lasso/build_strerror.py:
	before outputting switch cases, order error codes
	name lexically in order to reduce change lines
	when adding new error codes.

2010-02-10  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Add strings for SAML2 field names for POST, Redirect and Artifact bindings

	Update documentation of the registry module

	Adapt LassoProvider methods to care for protocol profile version when verifying signature
	 * lasso/id-ff/provider.c:
	   there is now 2 methods to verify signatures, methods calling the old
	   one must now choose whether to call the liberty one of the SAML 2.0
	   one.

	Add a function to validate query signatures using SAML 2.0 semantic
	 * lasso/xml/tools.c:
	   this new function is a placeholder for the new SAML 2.0 semantic
	   following query signature validation function. It will start with the
	   old code of lasso_query_verify_signature.

	Propagate change of name for LASSO_PP_ defines

2010-02-08  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Core: in LassoServer constructors, test if private_key is loadable
	 * lasso/id-ff/server.c:
	   mark private_key as not mandatory as regression tests expect it to
	   not be mandatory.
	   test if loading of private key to encryption_private_key private
	   field worked, if not abort the constructor and return NULL.
	 * lasso/id-ff/server.h:
	   fix name of constructors argument to corresponds with comments
	   (binding generator use this correspondance to apply annotation from
	   comments to the model obtained by parsing the headers).

	in lasso_xmlsec_load_private_key_from_buffer, do not let xmlSecBase64Decode show warnings

2010-02-05  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	fix bad operation in bindings.py

2010-02-04  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Bindings: restore ID-WSF constants, improve python getters,
	 * bindings/bindings.py:
	   parse idwsf_strings.h to get ID-WSF constants.
	 * bindings/utils.py:
	   add an is_rc check function, to check for 'error code' return type.
	 * bindings/perl/lang.py:
	   only raise errors for 'int' or 'gint' return type
	 * bindings/python/lang.py:
	   - always create a normal function binding.
	   - for functions starting with 'get' try to create a corresponding
	     property, but if a corresponding member already exists, fails, and
	     print a warning about getter function/member field clash.
	   - make type dispatching on return_type more explicite.

	Core: Finish support for all XMLDsig key formats
	 * lasso/xml/tools.c:
	   xmlsec is not able to load a certificate public key without checking
	   it against trusted root certificate, so we must work around and load
	   the key by hand.
	   lasso_xmlsec_load_private_key_from_buffer is made more robust in the
	   same (loading of the key was extracted inside
	   _lasso_xmlsec_load_key_from_buffer) and now can load certificates and
	   keys directly embedded inside KeyValue nodes (in total opposition to
	   the XMLDsig specification but...), with or without PEM headers.
	 * tests/metadata/Makefile.am tests/metadata/metadata_06.xml
	   tests/metadata_tests.c:
	   add test case for RSAKeyValue public keys.

	Binding python: fix getter for non-object fields
	 * bindings/python/lang.py:
	   transition to bindings/utils.py methods broke getters.

	Core: in lasso_xmlsec_load_key_info add flag to let xmlSec load certificates
	 * lasso/xml/tools.c:
	   adding the flag XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS make
	   xmlSec able to load certificate, the 'hand made' code to load
	   certificate is then useless.

	Tests: add more checking to dump generation code in login_tests.c

	Tests: adapt server constructor settings to recent changes

	Core: in lasso_profile_get_request_type_from_soap_msg use lasso_xml_parse_memory_with_error
	 * lasso/id-ff/profile.c: (lasso_profile_get_request_type_from_soap_msg)
	   use lasso_xml_parse_memory_with_error instead of xmlParseMemory, use
	   error code output argument to log error reports.

	Core: in provider.c, make lasso_provider_load_metadata_from_buffer the main metadata loading function
	 * (init_from_xml) fail initialization if we cannot load the metadatas,
	   and log a warning.
	 * extract _lasso_provider_load_metadata_from_buffer from
	   lasso_provider_load_metadata_from_buffer, which accept a length
	   parameter. use it inside lasso_provider_load_metadata, instead of
	   xmlParseFile.
	 * (lasso_provider_load_public_key) use lasso_xmlsec_load_key_info and
	   lasso_xmlsec_load_private_key to load the public keys.

	Core: use lasso_xml_parse_file to load affiliation file

	Binding java: Makefile.am has multiple target rules, it cannot support parallel builds

	Core: in tools.c, add function to load XML files and KeyInfo nodes
	 * tools.c:
	   add lasso_xml_parse_file, based on g_file_get_contents and
	   lasso_xml_parse_memory.
	   add lasso_xml_parse_memory_with_error which instead of logging
	   errors, can return the xmlError structure.
	   add lasso_xmlsec_load_key_info, which allows to load keys from
	   ds:KeyInfo XML nodes. It also support the "Lasso" bug of using
	   ds:KeyValue directly to store base64 encoded keys and certificates.

	SAML 2.0: in name_id_management.c, rework lasso_name_id_management_new_from_dump

	Core: add more memory tracing, add a tracing macro
	 * lasso/utils.h: add lasso_trace, which as a printf signature.
	 * xml/xml.c: add more trace to node initialization code.

	Tests: in valgrind suppressions file add more GLib suppressions

	Tests: in basic_tests.c, re-enable parsing of LassoWsuTimestamp objects

	Core: use lasso_node_new_from_dump to implement _new_from_dump methods
	 * provider.c:
	   add annotation for nullable arguments (necessary for bindings of
	   new_from_buffer).
	 * server.c: add annotations, allow to set encryption_private_key from
	   buffers

	Binding perl: add cleanup for temporary data of trampoline code
	 * bindings/perl/lang.py:
	   data type not common to Perl and C must be allocated for the duration
	   of the call (mainly GList and xmlNode), but after the call they must
	   be deallocated.

	SAML 2.0: in samlp2_response.c, simplify code path for assertion encryption

	Fix leaks
	 * lasso/id-wsf-2.0/profile.c: release private data object.
	 * lasso/saml-2.0/login.c: free NameID content after construction.
	 * lasso/xml/tools.c: free algorithm attribute content in
	   lasso_node_decrypt_xmlnode.
	 * lasso/xml/xml.c: release cutom_element->nodename in destructor.
	   remove useless finalize method.
	 * tests/basic_tests.c: release xmldoc after use.
	 * tests/random_tests.c: free resut of lasso_node_dump.

	Fix leaks, change signature of lasso_provider_get_sp_name_qualifier, make it return a const char*

	in lasso/xml/tools.c, remove leaks of xmlSecKey and xmlNode

	in lasso_xmlsec_load_private_key, do not leak the file buffer, in lasso_node_encrypt do not leak the keys manager

2010-02-01  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Binding perl: many improvements
	 * lang.py: use lasso_unref instead of g_object_unref.
	 * lang.py: handle 'optional' annotation for more types, needed by
	   ID-WSF bindings.
	 * lang.py, gobject_handling.c: check object type before making the C
	   call
	 * Makefile.am: improve silent rules, hide all normal output, show
	   errors, and with V=1 shows everything
	 * glist_handling.c, gobject_handling.c: make local functions static
	 * t/Lasso.t: add non regression test for method receiver type checking.
	 * glist_handlind.c; remove unused convertion functions.
	 * lang.py: clear the semi-assigned list and croak if all list elements
	   do not convert to non-NULL values.

	Bindings: re-add binding for lasso_session_get_assertions for perl, special case formatting function for WsAddressing namespace
	 * bindings/utils.py:
	   type have LassoWsAddr prefix but function have the lasso_wsa_ prefix,
	   so we have to adjust generated prefix.

	Bindings: use lasso_return_xxx macros instead of GLib ones

	ID-WSF: remove useless new_from_message methods

	Core: in utils.h, add macros to replace verbose g_return_val_if_fail

	Core: document return values of lasso_login_validate_request_msg

	Utils: lasso_unref, a safe g_object_unref, and add some document about existing family of macros

	Core: do not emit messages inside lasso_check_version

	Bindings: os.path.relpath is only present since python 2.6, add a local implementation for older python versions

	Add a dist-hook to remove .svn directories before taring the dist

	Bindings: make binding generation more silent
	 * bindings/java/Makefile.am bindings/perl/Makefile.am
	   bindings/php5/Makefile.am bindings/python/Makefile.am:
	   use AM_V_GEN, or similar variable for all steps of binding
	   generation, normal output can be activated with the V=1 argument to
	   the 'make' command.

	Binding java: use eager evalutation to get list of sources files
	 * bindings/java/Makefile.am:
	   use := to provoke eager evaluation so that java-list mode is not
	   called many times.

2010-01-29  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Bindings: use 'absolute' header paths to produces bindings
	 * bindings/bindings.py:
	   if files from bindings are using absolute instead of relatives header
	   paths they can be independant of the lasso source.

	Bindings perl: simplify Makefile.PL
	 * bindings/perl/Makefile.PL:
	   remove as much special casing as possible so that it could eventually
	   become a CPAN module.
	   use pkg-config to find lasso libs if no explicit LIBS command line
	   argument is used.
	 * bindings/perl/Makefile.am:
	   pass parameters using command line argument instead of environment
	   variable, which needed a special Makefile.PL.

	Binding perl: special case for lasso_check_version
	 * bindings/perl/lang.py:
	   special case lasso_check_version for not raising an error when it
	   returns 1.
	 * bindings/perl/t/Lasso.t:
	   add a non regression test.

	Binding perl: remove warning when passing Null to croak
	 * bindings/perl/gobject_handling.c:
	   croak is aliased to Perl_croak_nocontext which has a gcc attribute
	   'notnull'. We use Perl_croak and an explicit perl context object, to
	   work around this warning.

	in bindings.py, change header paths

	Update files for a 2.2.91 release

	update changelog

	Binding python: make a better use of default value annotation for creating method declarations

	Binding perl: many improvements
	 * handle GHashTable of strings and objects.
	 * report errors with 'croak' as a Lasso::Error object.
	 * add more basic tests.
	 * for string arguments, convert undef to NULL, and croak if function
	   does not accept NULL.
	 * fix library paths in Makefile.PL.

	Bindings: in bindings.py, fix regexp and annotation parsing for optional arguments and their default values

	SAML 2.0: fix annotations, documentation and signatures

2010-01-28  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Bindings python ID-WSF 1.0 tests: update PP HREF symbol

	Bindings php5: string hashtable methods are only used by ID-WSF bindings, mark them unused by default
	 * bindings/php5/wrapper_source_top.c:
	   only id-wsf has field of type GHashtTable<char*,char*> so when
	   compiling without --enable-wsf, it give 'unused symbols' errors.
	   Lets mark de the concerned functions as unused.

	ID-WSF 1.0: make LassoServer.services private with respect to the bindings

	Bindings java: use utils.py methods, make set_hash_of_objects more robust

	Tests: export sp2-la do dist file for dist with id-wsf enabled

	Bindings: add time_t to integer types, add unpointerize method

	Binding python ID-WSF 2.0 tests: update some tests

	Binding Python ID-WSF 2.0: comment out test

	ID-WSF: change name of Personal Profile namespace symbols, add symbols for ID-SIS PP 1.1

	Bindings: java, php5, python simplify logic in binding generator
	 * use utils.h macros to manipulate fields.
	 * use utils.py function to filter variables, argument and return types.
	 * finish support of hashtables of strings for php5 and python.

	Bindings: better parse oftype annotation for hashtable, allow to skip structures
	 * bindings/bindings.py:
	   add possibility to skip generating bindings for structures to
	   overrides.xml.
	   parse element-type annotation /* of XXX */ for hashtable objects.
	   output to stderr warning about skipped objects.
	   parse idwsf_strings.h
	 * bindings/overrides.xml:
	   skip more ID-WSF 1.0 functions in java and perl.
	   skip structure LassoAuthentication.

	Core: fix gtk-doc annotations

	Core: add new macros to lasso/utils.h, fix lasso_assign_new_list_of_gobjects
	 * lasso/utils.h:
	   add:
	    - lasso_assign_new_xml_node
	    - lasso_assign_new_list_of_strings
	    - lasso_assign_new_list_of_xml_node
	   fix lasso_assign_new_list_of_gobjects, bad naming of release macro.

	XML: add missing element-type annotations

	Bindings: in bindings/utils.py, augment robustness of matching functions to work with type alone or triples

	Binding perl: update to binding
	 * change extension of typemap files because if conflicts with existing
	 *  support constant list of strings and gobjects, add input rule for
	    list of gobjects
	 * fix setter for GList fields

2010-01-26  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	ID-WSF 1.0 & 2.0: complete lasso-sections.txt, add internal API to access SOAP headers, complete WS-Addressing support
	 * docs/reference/lasso/lasso-sections.txt: complete documentation of
	   LassoSoapEnvelope and LassoSoapFault with ID-WSF additions.

	 * lasso/id-wsf-2.0/profile.c lasso/id-wsf-2.0/soap_binding.c
	   lasso/id-wsf-2.0/soap_binding.h:
	   add internal function _get_node and _get_header to simplify
	   implementation of accessors for headers.
	   change signature of lasso_soap_envelope_get_message_id and add new
	   function lasso_soap_envelope_get_relates_to.
	   update call points.
	   add a message id when building a SOAP message.

	 * lasso/xml/idwsf_strings.h:
	   add element name for MessageID and RelatesTo WS-Addressing elements.

	 * lasso/id-wsf/authentication.c lasso/id-wsf/data_service.c
	   lasso/id-wsf/discovery.c lasso/id-wsf/wsf_profile.c
	   lasso/id-wsf-2.0/saml2_login.c lasso/xml/disco_description.c:
	   fix path name of header lasso/id-wsf/wsf_utils.h. make all internal
	   include path relatives.

2010-01-26  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Core XML: make lasso_node_set_custom_namespace/nodename take const string
	 * lasso/xml/xml.c lasso/xml/xml.h:
	   mark argument of lasso_node_set_custom_namespace and
	   lasso_node_set_custom_nodename as const char* strings.

	Core XML: add function to get the namespace of a LassoNode
	 * lasso/xml/xml.c lasso/xml/xml.h:
	   if a custome namespace is set, return it, otherwise return the class
	   namespace (klass->node_data->ns->href).

	Binding perl: fix include paths in the makefile, again

	in bindings/perl/Makefile.PL, add include path for normal builds

	in configure.ac, activate the Perl binding in normal builds

	Core: in configure.ac, activate warning when debugging, not in normal build
	 * configure.ac:
	   remove -Wxxx flag from AM_CFLAGS, add them if --enable-debugging
	   is used.

	in lasso/saml-2.0/logout.c, fix missing declaration

	Core: update errors.c file

	in bindings/perl/Makefile.am, change permission to make distcheck works

	in bindings/perl/Makefile.am, add files to EXTRA_DIST

2010-01-26  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Bindings: add a new perl binding using the new binding infrastructure
	 * XS files is autogenerated using bindings/binding.py model of the
	   Lasso API. All constants are in the Lasso::Constants package, the
	   LASSO_ prefix is removed.
	   All classes are now Lasso::ClassName, field accessor also serves as
	   setters, i.e you can do this:
	   $name_id = Lasso::Saml2NameID::new();
	   $name_id->content('coin');
	   print $name_id->content;

	   Is still missing:
	    - a lot of test files,
	    - support for hashtables,
	    - and throwing exceptions when return code is non-zero.

2010-01-26  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Bindings: in utils.py, fix is_glist and is_hashtable, make arg_type accept simple string as input instead of triples

	in lasso/xml/saml_attribute_value.h, fix typo in content type annotation

	in lasso/xml/sa_sasl_response.h, add GList content type annotation to field 'any'

	Bindings PHP5: use is_cstring to match string types

	Bindings: remove all SWIG bindings and SWIG related files

	Add new macro lasso_list_add_new_xml_node
	 * lasso/utils.h:
	   fix lasso_list_add_xml_node, it must copy the node before assigning
	   it.
	   add lasso_list_add_new_xml_node for keeping the old behaviour.
	 * lasso/xml/xml.c:
	   fix use of lasso_list_add_xml_node, because copying the node before
	   assigning it is a leak now.

2010-01-25  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	in bindings/ghashtable.h, Add missing unused argument hints

	SAML 2.0 Logout: when in an SP initiated logout, lasso_logout_build_response_msg is the finishing call
	 * lasso/saml-2.0/logout.c:
	   when calling lasso_logout_build_response_msg(), if we known that we
	   are in the middle of an SP initiated logout, i.e. if
	   initial_remote_providerID is not NULL, then we can restore the intial
	   response.

	Fix name of LASSO_WSSEC_BAD_PASSWORD
	 * lasso/errors.c lasso/errors.h:
	   LASSO_WSSE_BAD_PASSWORD -> LASSO_WSSEC_ERROR_BAD_PASSWORD
	 * lasso/xml/ws/wsse_username_token.c:
	   update client code.

	Bindings java: cast return value of special constructors
	 * bindings/java/lang.py:
	   in the JAVA API special constructors are made to return their real
	   type, but usual GObject constructors return their base type (here
	   LassoNode) so we have to cast it.

	Export more assertion access API for LassoSession
	 * lasso/id-ff/session.c lasso/id-ff/session.h
	   lasso/id-ff/sessionprivate.h:
	   export lasso_session_get_assertion(), lasso_session_add_assertion()
	   and lasso_session_remove_assertion().
	   remove them from private header.
	 * docs/reference/lasso/lasso-sections.txt:
	   update documentation

2010-01-21  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Bindings: remove useless overrides
	 * bindings/overrides.xml:
	   It is no more needed to force return type of constructors to their
	   real types, the bindings check the type dynamically anyway.

	Fix GHashTable backward compatibility header
	 * lasso/ghashtable.h:
	   g_hash_table_remove_all_nodes is not a public function, use
	   g_hash_table_foreach_remove instead.

2010-01-20  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	in saml2_name_id.c, include utils.h to benefit from replacement for g_strcmp0

	Fix LASSO_WSSEC_BAD_PASSWORD error, reformat wsse_username_token.c
	 * lasso/errors.h:
	   change error id and error name for LASSO_WSSEC_BAD_PASSWORD
	 * lasso/xml/ws/wsse_username_token.c:
	   update reference to LASSO_WSSEC_BAD_PASSWORD.
	   reformat line longer than 100 characters.

2010-01-19  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	ID-WSF 2.0: add some annotations

	Core: in backward_comp.h, include string.h if g_strcmp0 is used
	 * lasso/backward_comp.h:
	   implementation of g_strcmp0 depends upon string.h.

	WS-Security: fix typo in name of string symbols
	 * lasso/xml/idwsf_strings.h:
	   uppercase define for WS-Securities SOAP faults.

	WS: complete support for wsse:UsernameToken
	 * docs/reference/lasso/lasso-sections.txt:
	   add new functions and change type name in documentation.
	 * lasso/errors.h lasso/errors.c:
	   add an error to report password verification failure
	 * lasso/xml/ws/wsse_username_token.h
	   lasso/xml/ws/wsse_username_token.c:
	   update support for wsse:UsernameToken up to version 1.1, implement
	   digest and derived keys computations.
	 * lasso/xml/idwsf_strings.h:
	   add strings for Username WS-Security Token profile

	XML SAML-2.0: AuthnContext content is a xdf:choice so make content optional
	 - lasso/xml/saml-2.0/saml2_authn_context.c:
	   <AuthnContext/> can contain at least one node among:
	    - <AuthnContextClassRef/>
	    - <AuthnContextDeclRef/>
	    - <AuthnContextDecl/>
	   to approximate this possibility, we need to make any of them
	   optional.
	   <AuthenticatingAuthority/> should be a list but we cannot change it
	   without breaking the ABI, so we will wait for this.

	make an explicit copy of lasso.doap to website/web/doap.rdf

	Reduce news message to fit the news column

2010-01-18  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	updat download link

	ID-WSF 2.0: Add saml2_login.h to list of headers

	Documentation: wsse_security.xml is now wsse_security_header.xml

	By default make autogen.sh to enable gtk doc

	Bindings PHP5: rewire php5 tests to the makefiles, make them pass distcheck

	in autogen.sh, move libtoolize and gtkdocize before aclocal

	fix typo

	Merge EXTRA_DIST declarations in tests/Makefile.am

	fix bad commit

	tag release 2.2.90

	Update changelog

	Change again date of release 2.2.90

	Add tests/valgrind to dist tarballs

	Add autogen.sh and tools to EXTRA_DIST in top Makefile.am

	Documentation: distribute stylesheet, fix documentation comments, compelte lasso-sections.txt

	Documentation: add empty lasso-overrides.txt, it seems to be necessary

	ID-WSF: mark API as Private not Internal

	Core: complete documentation on LassoSession

	Core: complete documentation on LassoProfile

	Core: complete documentation on LassoLogin

	fix typo (transfer-none) -> (transfer none)

	ID-WSF 1.0: change name of utils.{c,h} file for documentation parsing
	 * utils.h:
	   this header has the same name as an other header which is not parsed
	   by the documentation (lasso/utils.h) and the documentation process
	   just match by filename, so we rename it.

	Website: add news about 2.2.90

2010-01-16  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Add bindings/python/examples to dist file

	remove empty directory

	remove empty directory

2010-01-15  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Documentation: update lasso-sections.txt

	Update doap file

	FIX ABI breakage between 2.2.1 and 2.2.2 in LassoSamlAdvice
	 * lasso/xml/saml_advice.c lasso/xml/saml_advice.h:
	   restore fields AssertionIDReference and Assertion, remove field any
	   to restore state from 2.2.1
	 * lasso/id-ff/session.c:
	   use xmlNode stored inside LassoSamlAssertion objects instead of
	   accessing the 'any' list of xmlNode that was inserted in
	   LassoSamlAdvice.

2010-01-14  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	FIX ABI breakage when addning new field to struct LassoSaml2AttributeValue

	Fix ABI breakage due to change of constant name from LASSO_SOAP_FAULT_REDIRECT_REQUEST to LASSO_SOAP_ERROR_REDIRECT_REQUEST_FAULT

	Fix ABI breakage with respect to 2.2.1

	Documentation: add lasso_profile_set/get_signature_hint to lasso-sections.txt

	Add files listings the ABI of Lasso

	Tools: add script to generate a listing of Lasso ABI
	 * tools/api.py:
	   use parser from the binding generator to output a list of symbols
	 * bindings/bindings.py;
	   add private flags to not clobber 'private' fields of structures or
	   methods not exported in bindings like _get_type.

	ID-WSF: separate ID-WSF strings into their own header

	start NEWS file for 2.2.90

	Tests integration: remove save_html hooks, after fed termination logout button should still be there

	Bindings python: use is_cstring for matching GList element type

2010-01-14  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	SAML 2.0 Logout: undo some change to when the assertion is removed
	 * lasso/saml-2.0/logout.c:
	   - do not remove the assertion in init_request, as before only if all
	     fails (event REDIRECT is unsupported).
	   - in process_response_msg remove the assertion if we are the IdP or
	     if there is no error.
	   - in validate_request, remove the assertion if there is no error.

	   I think that there will be more updates to this in the future.

2010-01-14  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Bindings: make is_cstring usable with tuple and with direct type

	Core: remove warning emiting macros from lasso_session_remove_assertion
	 * lasso/id-ff/session.c:
	   we already return error code, no need to log more warnings.

	SAML 2.0: report missing request when creating artifact resolve response, fix typo in lasso_saml20_profile_build_post_response_msg

	SAML 2.0: Fix typo in lasso_saml20_login_build_authn_response_msg

	ID-FF&SAML2: if use is not defined on a key descriptor use the key for any use
	 * lasso/id-ff/provider.c lasso/saml-2.0/provider.c: if the "use"
	   attribute is not set on a KeyDescriptor, use the key for signing and
	   encryption.

2010-01-12  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Tests SAML2: use & test encryption

	SAML 2.0: add saml2_helper.h to include files to install

	Tests: fix inclusion of id-wsf 2.0 tests

	Core: add new SAML 2.0 public header to top level header lasso.h

	ID-WSF 2.0: remote saml2_login_private.h from Makefile.am

	Bindings: add support for time_t to bindings, add support for 'string' type for list in java binding

	in saml2_helper.{c,h}, remote const modifier from time_t type

	in saml-2.0/name_id_management.c: handle NewEncryptedID, only encrypt if needed

	in saml-2.0/logout.c: remove commented code, only encrypt if needed, intialize local variables

	in lasso_saml20_login_init_idp_initiated_auhtn_request, do not use init_authn_request, manually create the request.

	in lasso_saml20_login_init_authn_request,  use saml-2.0/profile.c functions to reduce code size

	in saml-2.0/profile.c, in lasso_saml20_build_response_msg, when no url is given, only stop for bindings needing one

	in saml-2.0/profile.c, in lasso_saml20_profile_init_response make direct access

	in saml-2.0/profile.c, in lasso_saml20_init_request better check for supported bindings,  do not check for identity or session, report SESSION_NOT_FOUND only if first_in_session is used, do not stop on missing name_id.

	in saml2_helper.c, remove dead code

	SAML 2.0: in lasso_saml20_provider_accept_http_method, add HTTP-Artifact-POST case, better check for bad inputs, and handle special SingleSignOn case

	Core Profile: remove need for identity in lasso_profile_get_nameIdentifier

	Core Server: make default to load signing private key also as encryption private key

	Commit to delete

	Core: rewrite lasso_assertion_encrypt using lasso_xmlsect_load_key and add recipient argument

	Core: add simple function to load key from any format

	Core Node: add args to lasso_node_encrypt to set recipient of an encrypted element

	Binding python: provide old binding name for set_encryptionMode

	SAML 2.0: overhaul for ubuquitous binding support, still need work for HTTP-Artefact

	Core: in profile.c, profile.h, profileprivate.h, add a new attribute to express signature needs

	Core: in identity.c, do not emit trace when lasso_identity_get_federation fails

	XML Core: in xml.c, private.h, add a lasso_node_remove_signature function

	XML: fill node_data->{certificate,private_key}_file_offset for nodes with signatures

	Core: in xml/private.h, add new field to LassoNodeClassData for private_key and certificate handling

	Core: in provider.h, add LASSO_PROVIDER_ROLE_BOTH

	Core: in profile.c, make lasso_profile_get_nameIdentifier work for transient federations
	 * lasso/id-ff/profile.c:
	   if no LassoIdentity is accessible try to get a name identifier
	   through the assertion in the LassoSession object. This allows the
	   logout profile to work without an identity object (which is normal
	   since logout does not modify the federation status).

	Core: in provider.h, add new SAML 2.0 HTTP-Method, PAOS

	SAML 2.0: add new function to factorize adding signature to a message

	Fix mitm attack using the AssertionConsumerURL property on requests
	 * lasso/saml-2.0/login.c: check that the URL is know before using it
	 * lasso/saml-2.0/provider.c lasso/saml-2.0/providerprivate.h:
	   add a function to check that an URL corresponds to a know
	   AssertionConsumer of the given provider.

	ID-WSF 2.0: fix in documentation

2010-01-04  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Bindings: simplify GList handling

	XML: add element type annotation to all GList fields

	Bindings: in bindings/python/Makefile.am, precise generated files dependencies

	XML: move SOAP API to its own sub directory

	Bindings: in overrides.xml, remove noew useless directives

	Python binding: update test scripts to new ID-WSF API

	Binding ID-WSF 2.0: do not bind lasso_wsa_endpoint_reference_get_*_token methods

	Tests: add idwsf2_tests.c, call from tests.c, update Makefile.am

2010-01-04  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	ID-WSF 2.0: in profile.{c,h}, discovery.{c,h}, data_service.{c,h}, overhaul all profiles.
	 * lasso/id-wsf-2.0/profile.c lasso/id-wsf-2.0/profile.h:
	   - lasso_idwsf2_profile_get_name_identifier returns the NameID found
	     in an assertion used as a WS-Security token when security mechanism
	     Bearer or SAML are used.
	   - complete the function lasso_id_wsf2_profile_build_soap_envelope
	     with construction of the Sender element which is used to transmit
	     the providerID of the message sender by the SOAP binding ID-WSF 2.0
	     specification.
	   - remove useless instance_init function in profile object
	   - reset some profile fields in process_soap_request_msg (response,
	     body, nameIdentifier).  use
	     lasso_saml20_profile_name_identifier_decryption for handling NameID
	     from WS-Security mechanism assertion.
	   - add private_data
	   - change signature of lasso_idwsf2_profile_init_soap_request to use
	     and EPR and a security mechanism specifier when building the SOAP
	     request.
	   - change signature of lasso_idwsf2_profile_process_soap_request to
	     verify security_mech_id of received messages.
	 * docs/reference/lasso/lasso-sections.txt:
	   add the function to the documentation.

	 * lasso/id-wsf-2.0/discovery.{c,h}:
	   - use utils.h macros instead of g_return_val_if_fail because it
	     removes useless warning, since it returns an error code.  release
	     acquired resources.
	   - in lasso_idwsf2_discovery_metadata_register_self, return error code
	     instead of identifier string for the new service, use an out
	     parmeter to return the identifier, use utils.h macros.
	   - in lasso_idwsf2_discovery_init_metadata_register, use utils.h
	     macros, check return code of lasso_idwsf2_profile_init_soap_request.
	   - change signature of lasso_idwsf2_discovery_init_metadata_register
	     to support security_mech_id, try to get URL from an existing
	     Discovery service EPR (from Session object).
	   - change signature of
	       lasso_idwsf2_discovery_process_metadata_register_msg,
	       lasso_idwsf2_discovery_init_metadata_association_add,
	       lasso_idwsf2_discovery_process_metadata_association_add_msg,
	       lasso_idwsf2_discovery_init_query,
	       lasso_idwsf2_discovery_process_query_msg, to support security
	       mechanism.
	   - improve lasso_idwsf2_discovery_build_query_response_eprs.
	   - add lasso_idwsf2_discovery_get_nth_data_service to acces returned
	     services.
	 * lasso/id-wsf-2.0/data_service.{c,h}:
	   - redo all the API

2010-01-04  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	ID-WSF 2.0: in session.c, fix memory handling errors

	ID-WSF 2.0&ID-WSF: in profile.c, wsf_profile.c, errors.c, errors.h, and  in lasso-sections.txt change LASSO_SOAP_FAULT_REDIRECT_REQUEST to LASSO_SOAP_ERROR_REDIRECT_REQUEST_FAULT

	ID-WSF 2.0 Errors: in errors.{c,h}, add new errors code for ID-WSF 2.0
	 - add LASSO_DST_ERROR_EMPTY_REQUEST
	 - add LASSO_WSF_PROFILE_ERROR_SECURITY_MECHANISM_CHECK_FAILED
	 - add new errors codes for generic profiles and disco service

	ID-WSF 2.0 XML: in strings.h, add identifiers from ID-WSF 2.0 standards
	 - add status code for ID-WSF 2.0 DST
	 - add token usage identifiers
	 - conform security mechanism identifiers to ID-WSF 2.0 Liberty Sech
	   Mech specification
	 - add Discovery Service status codes
	 - add Soap Binding status codes
	 - add disco result type and user interaction hint strings

	ID-WSF 2.0 XML: in sec_token.c, remove extra SNIPPET_ANY

	ID-WSF 2.0 XML: in util_response.{c,h}, add helper functions to idwsf2_util_status

	ID-WSF 2.0: in server.c, change annotation of lasso_server_get_svc_metadatas_with_id_and_type.

	ID-WSF 2.0: in saml2_login.c, change API
	 * lasso/id-wsf-2.0/saml2_login.c:
	   - change private lasso_saml20_login_assertion_add_discovery to public
	     lasso_login_idwsf2_add_discovery_bootstrap_epr.
	   - remove lasso_saml20_login_copy_assertion_epr, add
	     lasso_login_idwsf2_get_discovery_bootstrap_epr.
	 * docs/reference/lasso/lasso-docs.sgml:
	   - add sections id_wsf_2_0_login
	 * docs/reference/lasso/lasso-sections.txt:
	   - add new functions to section id_wsf_2_0_login

	ID-WSF 2.0: in idwsf2_helper.c, add new functions, fix old things
	 - add lasso_wsa_endpoint_reference_get_service,
	   lasso_wsa_endpoint_reference_associate_service_type_uri,

	ID-WSF 2.0: create idwsf2_helper.{c,h}, new module for manipulating EPR elements
	 * lasso/id-wsf-2.0/idwsf2_helper.c lasso/id-wsf-2.0/idwsf2_helper.h:
	   add new functions
	   lasso_wsa_endpoint_reference_get_idwsf2_service_type,
	   lasso_wsa_endpoint_reference_get_idwsf2_provider_id,
	   lasso_wsa_endpoint_reference_get_idwsf2_security_context_for_security_mechanism,
	   lasso_wsa_endpoint_reference_get_token_by_usage,
	   lasso_wsa_endpoint_reference_get_security_token,lasso_wsa_endpoint_reference_get_target_identity_token,
	   lasso_wsa_endpoint_reference_new_for_idwsf2_service,
	   and lasso_wsa_endpoint_reference_add_security_token.
	 * lasso/id-wsf-2.0/idwsf2_helper.h:
	   declare new functions.
	 * lasso/id-wsf-2.0/Makefile.am:
	   add new files to source list

	ID-WSF 2.0: in soap_binding.{c,h}, add new functions

2010-01-04  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	ID-WSF 2.0: add files soap_binding.c, soap_binding.h
	 * lasso/id-wsf-2.0/Makefile.am
	   - reference new source files in Makefile.am
	 * lasso/id-wsf-2.0/soap_binding.c
	 * lasso/id-wsf-2.0/soap_binding.h:
	   - add extraction functions lasso_soap_envelope_sb2_get_provider_id,
	     lasso_soap_envelope_sb2_get_redirect_request_url,
	     lasso_soap_envelope_sb2_get_target_identity_header,
	   lasso_soap_envelope_add_action and lasso_soap_envelope_get_action.
	   - add SOAP security headers accessors
	   - add lasso_soap_envelope_get_saml2_security_token which simplify
	     retrieving a SAML 2.0 assertion used as a WS-Security token.
	     complete documentation of other functions.
	 * docs/reference/lasso/lasso-sections.txt:
	   - reference the new functions in a new section soap_binding2
	 * docs/reference/lasso/lasso-docs.sgml:
	   - add new section soap_binding2

	ID-WSF 2.0: in soap_binding.{c,h}: add function

2010-01-04  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	ID-WSF: in id_ff_extensions.c, add SECTION gtk-doc declaration

	ID-WSF: in interaction_profile_service.{c,h}, make initialization of a redirect request, part of LassoWsfProfile methods.

	ID-WSF: in discovery.c:lasso_discovery_init_resource_offering, add doc annotations, use assignment macros to set output argument

	ID-WSF: in discovery.c, update documentation annotations
	 * lasso/id-wsf/discovery.c:
	   - add annotations to lasso_discovery_init_query,
	     lasso_discovery_init_modify, lasso_discovery_process_request_msg.
	   - initialize response in lasso_discovery_process_query_mesg and
	     lasso_discovery_process_modify_msg, so that modifications of the
	     response can be done between _process_ and _build_ calls.

	ID-WSF: in data_service.c:lasso_data_service_init_query check absent resource offering, support security_mech_id argument
	 * lasso/id-wsf/data_service.c lasso/id-wsf/data_service.h:
	   - in lasso_data_service_apply_modifications, dst_modification
	     initialization is missing.
	   - remove lasso_data_service_get_redirect_request_url
	   - change LASSO_DATA_SERVICE_CANNOT_ADD_ITEM to
	     LASSO_DATA_SERVICE_ERROR_CANNOT_ADD_ITEM
	   - in lasso_data_service_init_query, complete documentation, fix mem
	     leak
	   - factorize code between lasso_data_service_build_modify_response_msg
	     and lasso_data_service_build_query_response_msg, create
	     lasso_data_service_build_response_msg
	   - in lasso_data_service_get_answer, add out annotation to output
	     parameter
	   - simplify API, simplify code path for query and modification
	     processing
	   - add lasso_data_service_process_request_msg,
	     lasso_data_service_build_modify_response_msg,
	     lasso_data_service_validate_request.
	   - remove lasso_data_service_process_query_msg and
	     lasso_data_service_process_modify_msg from public API.
	   - in lasso_data_service_process_query_msg and
	     lasso_data_service_process_modify_msg add arg checks, make them
	     static and move preprocessing of the request in
	     lasso_data_service_process_request_msg.
	   - in lasso_data_service_get_answer, fix request/response mismatch.
	   - add accessors lasso_data_service_set_resource_data and
	     lasso_data_service_get_resource_data.
	   - add securit_mech_id arg to data_service_init_modify, export
	     resource_data accessor methods
	   - remove lasso_data_service_get_redirect_request_url
	   - fix missing intializations and leaks

	ID-WSF: in wsf_profile.c, fix mem leaks

	ID-WSF XML: in dst_modification.c, add SNIPPET_BOOLEAN to overrideAllowed attribute snippet

	ID-WSF XML: in dst_modify.{c,h}, remove extra argument to the constructor of LassoDstModify
	 * lasso/xml/dst_modify.c:
	 * lasso/xml/dst_modify.h:
	   remove parameters of the default constructor.

	Tests: in tests/login_tests.c, change path of header utils.h

	Tests: in basic_tests.c, fix, do not overwrite known elements mappings
	 * tests/basic_tests.c:
	   when testing functionality of lasso registries which map namespace
	   elements to lasso objects, do not use liberty namespace because it
	   interacts with other tests -- deserialization of lib:Assertion node
	   was broken by this test -- when running them in CK_FORK=no mode.
	   Changed namespace LASSO_LIB_HREF, for "coin" which is less dangerous.

	WS XML: change signature of lasso_wsa_attributed_uri_new_with_string, add mappings
	 * wsa_attributed_uri.c:
	   - constify first argument of
	     lasso_wsa_attributed_uri_new_with_string.
	   - add add direct mappings from wsa:Action,wsa:To to
	     LassoWsAddrAttributedURI and from wsa:From,wsa:ReplyTo,wsa:FaultTo
	     to LassoWsAddrEndpointReference

	SAML 2.0: in login.c, use lasso_server_saml2_assertion_setup_signature

	XML: in private.h, remove duplicate declaration of lasso_xml_parse_memory

	ID-FF XML: in lib_assertion.c, add registry mapping for lib:AssertionType
	 * xml/lib_assertion.c:
	   this object is really a container for lib:AssertionType, so register
	   it.

	Core: in provider.c, add lasso_provider_verify_single_node_signature
	 * lasso/id-ff/provider.c lasso/id-ff/provider.h:
	   add a new function to check an enclosed single signature on a
	   LassoNode, given that the LassoNode retained its original xml node
	   content.

	SAML 2.0: in login.c, fix memleaks
	 * lasso/saml-2.0/login.c:
	   return value from lasso_provider_get_sp_name_qualifier must be freed.

	SAML 2.0: in login.c, remove discovery bootstrap handling

	Core Login: in login.c, add assertion accessor
	 * docs/reference/lasso/lasso-sections.txt:
	   declare new function
	 * lasso/id-ff/login.c lasso/id-ff/login.h:
	   add new function lasso_login_get_assertion.
	 * lasso/saml-2.0/login.c:
	   store created assertions
	 * lasso/id-ff/login.h:
	   make assertion field private for bindings.

2010-01-04  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	SAML 2.0: in saml2_helper.c, add new methods to manipulate SAML2 assertions
	 * lasso/saml-2.0/saml2_helper.c lasso/saml-2.0/saml2_helper.h:
	   - add lasso_server_saml2_assertion_setup_signature, to help in
	     defining signature upon saml2:Assertion nodes.
	   - add new symbols LASSO_DURATION_MINUTE, LASSO_DURATION_HOUR,
	     LASSO_DURATION_DAY, LASSO_DURATION_WEEK.
	   - add method lasso_saml2_assertion_add_attribute_with_node

	 * docs/reference/lasso/lasso-sections.txt:
	   declare new functions in saml2_helper section.

2010-01-04  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Tests: in basic_tests.c, check LassoSaml2EncryptedElement handling

	SAML 2.0 XML: map EncryptedID, EncryptedAssertion, EncryptedAttribute and NewEncryptedID element to saml2:EncryptedElement
	 * lasso/xml/saml-2.0/saml2_encrypted_element.c:
	   add registry mapping from EncryptedID, EncryptedAssertion,
	   EncryptedAttribute and NewEncryptedID element to
	   saml2:EncryptedElement

	SAML 2.0 XML: in strings.h, add the identifier for the holder of key subject confirmation method

	SAML 2.0: in provider.c, add node encryption function and reference it in doc
	 * lasso/saml-2.0/Makefile.am:
	   add new header provider.h
	 * lasso/saml-2.0/provider.c lasso/saml-2.0/provider.h:
	   add new function lasso_provider_saml2_node_encrypt to encrypt nodes
	   and encapslutate the XML Enc datas in a LassoSaml2EncryptedElement
	   node.
	 * docs/reference/lasso/lasso-sections.txt:
	   add function to saml2_utils section

	WS XML: add forgotten include file to wsa_attributed_uri.c and wsa_endpoint_reference.c

	WS Errors: in errors.h errors.c, add new error section for WS-Security handling

	Core: in server.c, change signature of lasso_server_get_provider, add anottations on return value
	 * lasso/id-ff/server.h lasso/id-ff/server.c:
	   - constify first argument of lasso_server_get_provider
	   - add annotation about caller owned return value

	Core: in tools.c, complete documentation of lasso_verify_signature

	Core: in provider.c, add accessors for encryption informations
	 * lasso/id-ff/provider.c:
	   add getters for encryption_sym_key_type and encryption_public_key.
	 * lasso/id-ff/providerprivate.h:
	   declare new accessors.

	Core XML: in xml.{c,h}, add new function lasso_node_get_name to get the element name for an object

	Core XML: make first argument of lasso_misc_text_node_new_with_string const
	 * lasso/xml/misc_text_node.h lasso/xml/misc_text_node.c:
	   change signature of lasso_misc_text_node_new_with_string, string
	   argument is const.

	Core XML: in xml/tools.c, add conversion method from iso8601 to time_t
	 * lasso/xml/tools.c:
	   add function lasso_iso_8601_gmt_to_time_t
	 * lasso/xml/private.h:
	   declare new function.

2010-01-04  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Core XML: in xml.c, keep original node names, handle xsi:type attribute better
	 * lasso/xml/xml.c lasso/xml/xml.h:
	   - fix signature of lasso_node_set_original_xmlnode, fix signature in
	     documentation of lasso_node_set_original_xmlnode;
	   - add a new API lasso_node_set_custom_nodename to specify the exact
	     element name to use when serializing a LassoNode to XML.
	   - rename internal structure _CustomNamespace to _CustomElement, add a
	     nodename field to it.
	   - rework internal functions around _CustomElement to be aware of an
	     existing attached _CustomElement and re-use if needed.
	   - move application of _CustomElement hints after the serialization of
	     the node, so that the normal behaviour of the serialization is kept
	     -- i.e. do not play with the list of parent classes.

	   - use the full xsi:type content to find a LassoNode subclass when
	     de-serializaing XML content, factorize QName->GObject class mapping
	     for the three executions paths inside
	     _type_name_from_href_and_nodename:
	      - element QName,
	      - xsi:type QName,
	      - element name with xsi:type namespace
	   - add a long comment expliciting the way the mapping is done.
	   - remove direct mapping of EncryptedAssertion element, the registry
	     declaration on the class LassoSaml2EncryptedElement shoud be
	     enough.

2010-01-04  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Core XML: in xml.c, parse attributes with namespace checking
	 * lasso/xml/xml.c:
	   - use snippet->ns_uri and snippet->ns_name to parse attributes
	     outside of the parent node namespace.

	Core XML: in xml/tools.c, improve lasso_eval_xpath_expression, do not fail when nodeset is empty
	 * lasso/xml/tools.c:
	   only check that the query returned a nodeset object, do not check its
	   content size.

	Core: in utils.h, add a macros, fix existing
	 * lasso/utils.h:
	   - add macro lasso_ref(object), if object is not null, call
	     g_object_ref on it, and return the value, otherwise do nothing and
	     return NULL.
	   - make a better reporting of bad object release
	   - change format type for __LINE__ and dest arguments in
	     lasso_release_gobject warning display.
	   - add a lasso_check_non_empty_string macro
	   - add new macro to extract a specific node type from a list of
	     GObject objects.
	   - use xmlStrdup not g_strdup for lasso_assign_xml_string
	   - add lasso_list_add_gstrv and lasso_check_good_rc
	   - add macro lasso_list_get_first_child
	   - add inline function to test empty string
	   - change macro lasso_check_non_empty_string to use the new inline
	     function and go to cleanup
	   - fix lasso_check_non_empty_string macro
	 * lasso/utils.c:
	   - add lasso_gobject_is_of_type returns 0 if first parameters is a
	     gobject whose GType is equal to the second parameter, and 1
	     otherwise.

	Core: add new errors LASSO_PROFILE_ERROR_INVALID_RESPONSE, LASSO_PROFILE_ERROR_INVALID_REQUEST.

2010-01-04  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Bindings: in bindings.py, parse '(in)' gobject-introspection annotation, in utils.py, use it to reverse default annotation for pointer of pointers
	Bindings: in bindings.py, improve regular expression for declarations

	Bindings: parse gobject-introspection annotation in return value
	documentation, add cast to C calls when parameter type is const in java
	binding, problem arise with const char ** arrays

2010-01-04  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Bindings: do not stop on failing to parse a declaration, but skip the function and print a warning

	Python binding: add a pyobject->time_t conversion function

	Bindings python: in wrapper_top.c, mark internal function as potentially unused

2010-01-04  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Bindings: make the binding infrastructure understand GObject-introspections annotations
	 * bindings/bindings.py
	 * bindings/utils.py:
	   add convenience function to treat arguments tuple:
	   (type,name,{annotations}).
	   introduce new argument options, fix that arguments are 3-tuple of the
	   form (type,name,annotations), where annotations is a dictionary.
	   Key of this dictionnary can be:
	    - optional, wheter the argument is necessary, it means it has a
	      default value.
	    - out, means that the pointer is a pointer of pointer, for bindings
	      that can return exceptions, it will be returned instead of the
	      integer error code, the only way to access error codes will be
	      exceptions.
	    - element-type, contained type of a list or an array,
	    - key-type, value-type, type of respectively the key and value of a
	      GHashTable.
	    - transfer, wheter a the callee(for arguments)/caller(for return
	      values) owns the values passed, it can be none,container(if the
	      callee/caller only owns the container not the contained value) or
	      full.
	    doc.parameters is now a 3-tuple of (attribute-name,
	    attribute-description, attribute-annotations) where
	    attribute-annotations is a string of the form '(option1)(option2
	    option-arguments) etc.'.
	   - add predicates for xml, list and time_t values. improve predicates
	     for cstring and const modifier.

	*  bindings/overrides.xml:
	    'out' arguments are not well supported for java, so skip functions
	    using them.

	 *  bindings/java/lang.py bindings/php5/php_code.py
	    bindings/php5/wrapper_source.py bindings/python/lang.py:
	    - update language specifig binding generators for handling new
	      annotations.
	    - improve python method declaration, handle optional arguments with
	      default values, factorize this chode in two methods,
	      get_python_arg_decl and defval_to_python_value.

	 *  bindings/python/tests/Makefile.am
	    bindings/python/tests/idwsf1_tests.py
	    bindings/python/tests/idwsf2_tests.py:
	    make test work with out of source build dir.

2010-01-04  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Documentation: in lasso-docs.sgml, add glossary to the index, add book part delimitations
	 * docs/reference/lasso/lasso-docs.sgml:
	   add the glossary to the index.

	Core: in registry.c, change type cast to compile on amd64 platform
	 * registry.c:
	   use ptrdiff_t to cast to integer big enough to receive a pointer,
	   then apply integer operations, then cast to the pointer type expected
	   by g_direct_hash.

2009-12-16  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Core: in utils.h, change __STRING(x) for #x
	 * lasso/utils.h:
	   __STRING(x) does not seem more portable than #x so change, problem
	   with AIX.

2009-12-09  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Downgrade version 2.2.90 to make a pre-release

2009-12-08  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	in tests/tests.h, Add checks for true and false conditions

	Remove beginning of a PHP4 binding

	Upgrade version number

	Add missing headers to makefile, to pass make distcheck
	 * lasso/xml/id-wsf-2.0/Makefile.am:
	   make xml_idwsf2.h appear in the distribution file
	 * lasso/xml/ws/Makefile.am:
	   make xml_ws.h appear in the distribution file

2009-12-04  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	in lasso_saml20_profile_export_to_query, checks return values
	 * lasso/saml-2.0/profile.c:
	   in lasso_saml20_profile_export_to_query, check return value of of
	   lasso_node_build_query and lasso_query_sign.

2009-12-01  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Add SP initiated logout test to SAML 2.0 regression tests
	 * tests/login_tests_saml2.c:
	   add logout to first SAML 2.0 login regression test.
	 * tests/tests.h:
	   add macros to simplify checking of return value with check macros
	   (encapsulate fail_unless macro to check for NULL/non-NULL values and
	   good rc value (0) or expected bad value).

2009-11-30  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Restore ancient semantic of lasso_profile_is_session_dirty
	 * lasso/id-ff/profile.c:
	   lasso_is_session_dirty must return FALSE if session is NULL.

	Fix double g_object_unref
	 * lasso/id-ff/login.c:
	   status is already freed by lasso_assign_gobject, do not free it first
	   with lasso_node_destroy.

	Restore call to autoheader in autogen.sh
	 * autogen.sh:
	   call to autoheader was removed during simplification of the
	   autogen.sh script.

	Remove message level signature on redirect messages
	 * lasso/saml-2.0/profile.c:
	   remove message level signatures before building query strings.

	Add more check to remove_signature
	 * lasso/saml-2.0/profile.c:
	   check for NULL when accessing klass datas.

2009-11-02  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Augment query string limit for relaystate extraction to 8192 bytes
	 * lasso/xml/tools.c:
	   some application transfer relaystate longer thant the specification
	   advised 80 bytes, try to cater for their needs.

	Add documentation for lasso_get_relaystate_from_query
	 * lasso/xml/tools.c:
	   add documentation on the internal function
	   lasso_get_relaystate_from_query

2009-10-30  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Add C defines for SAML 2 'unspecified' authncontext class
	  * lasso/xml/strings.h:
	    add C defines for AuhtnContextClassRef,
	    urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified.

	Fix bad macro choice, precise error for bad formatted NIDM request
	 * saml-2.0/name_id_management.c:
	   use specialized lasso_saml20_profile_set_response_status
	   set 'MissingNameID' second level error with requester first level
	   error code when request is missing a name id.

	Fix reporting of error in message parsing
	 * lasso/xml/xml.c:
	   do not mix the return code from xmlSecBase64Decode and the return
	   code for lasso_node_init_from_message_with_format.
	   It fixes a segmentation fault in
	   lasso_login_process_authn_request_msg.

2009-10-30  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Core: factorize code to obtain a SPNameQualifier
	 * lasso/id-ff/provider.c lasso/id-ff/provider.h:
	   add a method giving the SPNameQualifier for a provider (its entity id
	   or its affiliation id).

	 * lasso/id-ff/profile.c:
	 * lasso/saml-2.0/login.c:
	   update use sites.

2009-10-30  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Make php4 and perl binding disabled by default
	 * configure.ac:
	   make default for --enable-perl and --enable-php4 to "no". Those
	   binding will not be maintained in the future.

	SAML2 Logout: initialize SessionIndex from the assertion
	 * lasso/saml-2.0/logout.c:
	   when creating a logout request message initialize the SessionIndex
	   element with the correponding content in the stored assertion for
	   this session.

	Tests: fix __FILE__ -> __file__
	 * tests/integration/saml2/__init__.py:
	   path to the current python file is __file__ not __FILE__.

	SAML2: change lasso_saml20_profile_set_response_status signature
	 * lasso/saml-2.0/profile.c:
	 * lasso/saml-2.0/profileprivate.h:
	   make lasso_saml20_profile_set_response_status2 the new implementation
	   of lasso_saml20_profile_set_response_status.
	   add helper macros to set success, responder and requester first level
	   status code.
	 * saml-2.0/assertion_query.c:
	 * saml-2.0/login.c:
	 * saml-2.0/logout.c:
	 * saml-2.0/name_id_management.c:
	   adapt consumers to the new signature.

	ID-FF: add a partial_logout flag to LassoLogout private_data
	 * lasso/id-ff/logout.c:
	 * lasso/id-ff/logout.h:
	   add a flag to store the status of a partial logout

	SAML2: add an equals operator to the NameID class
	 * lasso/xml/saml-2.0/saml2_name_id.c:
	 * lasso/xml/saml-2.0/saml2_name_id.h:
	   add a lasso_saml2_name_id_equals method which return TRUE if two
	   NameId are equal.

	SAML2: use the static get_provider helper method in generic profile methods
	 * lasso/saml-2.0/profile.c:
	   instead of accessing directly profile->server use the helper method
	   get_provider.

	SAML2: in logout_build_response_msg do not fail on missing remote_providerID
	 * lasso/saml-2.0/logout.c:
	   remote_providerId is verified in build_redirect_simple and is not
	   necessary for SOAP response with a failure and profile->response
	   cannot be null (we just created a response if it was missing).
	   So this error case is now unnecessary.

	ID-FF1.2 and SAML2: remove direct access to profile->server->providers
	 * client of LassoServer should use lasso_server_get_provider.
	 * LASSO_PROFILE_ERRROR_UNKNOWN_PROVIDER was a mistake, it is
	   superfluous, use LASSO_SERVER_ERROR_PROVIDER_NOT_FOUND.

	Core: in profile, use lasso_server_get_provider
	 - lasso/id-ff/profile.c:
	   replace direct access to server->provider by
	   lasso_server_get_provider.

2009-09-29  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Tests: add a test of NameIDFormat extraction
	 - tests/basic_test.c:
	   add test11_get_default_name_id_format which parse a metadata file and
	   try to extract the default name id format.
	 - tests/data/sp5-saml2/metadata.xml:
	   add NameIDFormat node for testing.

	Core: add const modifier to return value of lasso_provider_get_metadata_list
	 - lasso/id-ff/provider.c lasso/id-ff/provider.h:
	   change return type of lasso_provider_get_metadata_list from GList* to
	   const GList*.
	 - lasso/id-ff/logout.c lasso/saml-2.0/logout.c
	   lasso/saml-2.0/provider.c:
	   change consumers of the API

	Core: Add const modifiers to LassoProvider methods
	 * lasso/id-ff/provider.c lasso/id-ff/provider.h
	   lasso/saml-2.0/provider.c lasso/saml-2.0/provider.h:
	   add const modifier where they could be added.

	Do not use g_new, use g_new0
	 * lasso/id-ff/federation.c:
	 * lasso/id-ff/logout.c:
	 * lasso/id-ff/profile.c:
	 * lasso/id-ff/provider.c:
	 * lasso/id-ff/server.c:
	 * lasso/id-ff/session.c:
	 * lasso/id-wsf/authentication.c:
	 * lasso/saml-2.0/ecp.c:
	 * lasso/xml/xml.c:
	   even for private datas, use g_new0, it is safer.

	Change setting of default NameIDFormat for SAML 2.0 login
	 * saml-2.0/login.c:
	   in lasso_saml20_login_init_authn_request,
	   lasso_saml20_login_init_idp_initiated_authn_request, if the service
	   provider provided a list of supported name id formats, use the first
	   one as default for new AuthnRequest.
	 * id-ff/login.c:
	   modify documentation to report the new way of choosing a default.

	Add method to Provider to retrieve default NameIDFormat
	 * lasso/id-ff/provider.c lasso/id-ff/provider.h:
	   add lasso_provider_get_default_name_id_format, which returns the firs
	   listed NameIDFormat from the SAML 2.0 metadatas of the provider.

	Complete documentation of lasso_login_init_authn_request concerning the NameIDFormat
	 * lasso/id-ff/login.c:
	   in lasso_login_init_authn_request, add docbook formatting, add
	   remarks about the different NameIDFormat for ID-FF 1.2 and SAML 2.0.

2009-09-17  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Fix bugs found via coverity (thanks to Bhaskar Jain)
	 * lasso/id-wsf-2.0/data_service.c: fix uninitialized res variable in
	   lasso_idwsf2_data_service_process_query_response_soap_fault_msg.
	 * lasso/xml/saml-2.0/saml2_assertion.c: fix uninitialized rc variable
	   in get_xmlNode.
	 * lasso/saml-2.0/login.c:
	   in lasso_saml20_login_accept_sso check for ni and ni->Format
	   null-ness before dereferencing, remove idp_ni which is not used
	   anymore.
	   remote all use of federation->remote_nameIdentifier, SAML 2.0 only
	   need one NameID, and it will be local_nameIdentifier.
	 * lasso/xml/xml.c:
	   in lasso_node_traversal, check null-ness of node before dereferencing
	   it, add check for class null-ness also.
	 * lasso/id-ff/provider.c:
	   in lasso_provider_get_first_http_method, remove useless check for t2
	   null-ness -- if found is TRUE, t1 and t2 cannot be null.
	 * lasso/xml/tools.c:
	   in lasso_sign_node, add documentation, check for private_key_file and
	   xmlnode null-ness.
	   in lasso_get_public_key_from_private_key_file, add a cleanup phase,
	   check for cert variabl null-ness befor appending, count the number of
	   certificates added.
	   in lasso_query_verify_signature, check that URL unescaping and base64
	   decoding are succesfull before using the decoded strings.
	 * lasso/saml-2.0/name_id_management.c:
	   in lasso_name_id_management_validate_request, fix mis-handling of
	   federation, if federation does not match request name_id, return
	   UNKNOWN_PRINCIPAL.

	ID-WSF: finish unsealing field « is_dirty » of LassoSession
	 * lasso/id-wsf-2.0/session.c:
	   remove direct acces to LassoSession private field.

2009-09-11  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Core: unseal LassoSession public field
	 * lasso/id-ff/session.c:
	 * lasso/id-ff/session.h:
	 * lasso/id-ff/sessionprivate.h:
	   unseal session->is_dirty and session->assertions, remove the mirror
	   version in the private data structure, and restore direct acces by
	   methods.
	   move the "private" comment before those two fields to hide them in
	   the gtk-doc reference manual, normal access should be done by
	   get_assertion and is_dirty methods.

2009-09-11  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	XML ID-WSF: Fix parsing of most ID-WSF elements
	 * lasso/xml/disco_send_single_logout.c:
	 * lasso/xml/id-wsf-2.0/sb2_user_interaction_header.c:
	 * lasso/xml/id-wsf-2.0/subsref_app_data.c:
	 * lasso/xml/xml.c:
	   lots of ID-WSF 1.0/2.0 classes were not passing the new
	   non-regression test on serialization/deserialization.
	   The main reason was the absence of mapping for their namespace in the
	   prefix_from_href_and_nodename function. The other reason is that some
	   class name does not correspond 1-to-1 to the element name
	   (SendSingleLogOut vs. SendSingleLogout, notice the capitalised 'O').

	   The last problem was that mapping from nodes to GObject classes was
	   done after default mapping ("Lasso<prefix><node_name>"), now it's
	   done before, to reflect the fact that it is a more specialized
	   mapping.

2009-09-11  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Core: remove warning when lasso_registry_get_direct_mapping fails
	 * lasso/registry.c (lasso_registry_get_direct_mapping):
	  g_return_val_if_fail output a warning when condition fails, use a
	  simple if instead.

	Tests: add more assertion to random test
	 * tests/random_tests.c:
	   add more assertion testing for various return values or field values.

	XML: Fix seg-fault bug introduced in commit 4108
	 * lasso/xml/xml.c:
	   lasso_node_get_xmlnode_for_any_type is broken, if no original_xmlnode
	   is present, return just cur. Also add all missing cases for the state
	   of the pair (cur, orignal_xmlnode).
	 * tests/basic_tests.c:
	   add a non-regression test, testing all dump/restore functions.

	Core: add new macros to traverse lists
	 * lasso/utils.h:
	   lasso_foreach_full_begin(_type, _data, _iter, _list)
	   traverse GList* _list, using _iter as iteration variable
	   extract data field to variable _data of type _type.

	Test: fix Makefile.am to work with 'out of source' build directory
	 * tests/Makefile.am:
	   rpath must refer to the build directory, not the source directory.

	Core: fix extract_symbols regular expression
	 * lasso/extract_symbols.py:
	   the regular expression was not matching declaration over multiple lines,
	   and would catch argument starting with lasso_. Fixed.

	XML: add all inclusive header files for id-wsf2, ws, id-wsf XML elements
	 * lasso/xml/wsf/xml_ws.h:
	 * lasso/xml/id-wsf-2.0/xml_idwsf2.h:
	 * lasso/xml/xml_idwsf.h:
	   new files.

	ID-WSF 2.0: add set_request/set_response method to Profile object
	 * lasso/id-wsf-2.0/profile.c:
	 * lasso/id-wsf-2.0/profile.h:
	   add two methods that set the response object and replace the content
	   of the SOAP message with this object.

	XML SOAP: add new soap fault constructor
	 * lasso/xml/soap_fault.c:
	 * lasso/xml/soap_fault.h:
	   add a full constructor allowing to set faultcode and faultstring in
	   one call.

	XML ID-WSF 2.0: make non simple constructor of MiscTextNode return real type
	 * lasso/xml/misc_text_node.c:
	   non simple constructor must return the real object type because Java
	   binding does not work without it.

	XML SAML 1.1: fix schema figure for samlp:Request

	Docs: remove old lasso-sections.txt file

	ID-WSF 2.0: add accessor for field of LassoIdWsf2Profile
	 * lasso/id-wsf-2.0/profile.c lasso/id-wsf-2.0/profile.c:
	   add two accessor to get to soap_response and soap_request object,
	   next step is to make those two fields really private.

	ID-WSF: fix duplication of namespace string declaration, add fault codes for WS-Security
	 * lasso/xml/strings.h:
	   namespace of WS-Security 1.0 was duplicated,
	   add specified fault code linked to WS-Security.

	ID-WSF: remove LassoWsseSecurity in favor of LasoWsSec1SecurityHeader
	 * xml/Makefile.am:
	   remove the file from the source list
	 * xml/wsse_security.c:
	 * xml/wsse_security.h:
	   remove the files
	 * xml/xml.c:
	   use LassoWsSec1SecurityHeader for LASSO_WSSE_HREF namespace also.

	ID-WSF 1.0: use the common wsse:Security object
	 * lasso/id-wsf/wsf_profile.c:
	   use the common LassoWsSec1SecurityHeader object instead of the
	   specific LassoWsseSecurity, and set the needed namespace using
	   lasso_node_set_custom_namespace.
	   add implementation comments.

	WS: register LassoWsSec1SecurityHeader for all namespace associated to WS-Security
	 * lasso/xml/ws/wsse_security_header.c:
	   register all namespace that contains a Security header object.

	XML: add an API to set namespace on a single instance of a LassoNode
	 * lasso/xml/xml.h lasso/xml/xml.c:
	   add a new public API lasso_node_set_custom_namespace(node, prefix,
	   href). It allows to set the precise namespace of a single object, all
	   other instance of the same class continue to use the default
	   namespace for the class.
	   It should be used for difficult consumer of certain nodes (like
	   wsse:Security) which only know certain namespace or do not use the
	   namespace going with the specified version of a specification (like
	   MSP not following ID-WSF 1.0 specification and using
	   http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd
	   instead of
	   http://schemas.xmlsoap.org/ws/2003/06/secext.
	   It also allows to share implementation of schema objects common to
	   many version of the same specification (wsse:Security between ID-WSF
	   1.0 and ID-WSF 2.0), without creating too many child classes.

	ID-WSF 2.0: remove obsolete FIXME in discovery.h

	Core: remove a use of lasso_node_destroy in LassoSession

	Bindings: add support for guchar
	 * bindings/java/lang.py:
	 * bindings/python/lang.py:
	   add guchar to list of C types everywhere.

	XML: add support for free xml content to LassoMiscTextNode
	 * lasso/xml/misc_text_node.c:
	 * lasso/xml/misc_text_node.h:
	   it is often necessary to be able to put completely determined content
	   inside lasso generated request (for example when copying an assertion
	   for a Bearer authentication method). In this case you can use
	   lasso_node_get_original_xml_node to get at the original content and
	   lasso_misc_text_node_new_with_xml_node to get a LassNode with the
	   same content.
	   There are two additional function to acces this xml payload:
	   lasso_misc_text_node_get_xml_content and
	   lasso_misc_text_node_set_xml_content.

2009-08-28  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Core: fix commit 4313, restore support for --enable-wsf
	 * configure.ac:
	   I throwed the baby with the bathwater..

	Core: fix make dist with --enable-wsf
	 * lasso/id-wsf-2.0/Makefile.am:
	 * lasso/xml/Makefile.am:
	   some files were missing from the dist files, add them.

	Core: remove SWIG ID-WSF warning from configure.ac
	 * configure.ac:
	   as ID-WSF support in SWIG in not maintained anymore we can remove the
	   warning about using pre-generated SWIG files with a different setting
	   for the --enable-wsf flag.

	Binding: skip lasso_data_service_get_query_item
	 * bindings/overrides.xml:
	   bindings do not support out arguments, so skip generating bindings
	   for lasso_data_service_get_query_item for the moment.

	Core: set tar-pax as dist file format
	 * configure.ac:
	   we could have more than 99 characters long path in the dist files,
	   the pax format for tar archives support it.

	ID-WSF 1.0: Fixed missing or deprecated functions in public headers
	Some new functions were missing from the headers, others were deprecated
	some time ago and as the API is not considered stable for ID-WSF, I
	removed them definitely.

2009-08-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Bindings: Skip lasso_data_service_get_answers
	 * bindings/overrides.xml: skip unsupported function.

	Tests: add configuration file loading to integration test
	 * tests/integration/README:
	 * tests/integration/saml2/__init__.py:
	   If ~/.config/lasso_integration.conf exists, load it to find path to
	   authentic and lcs.
	   Add support for three environement variables:
	    - LASSO_BUILDDIR, to specify an out of source build directory to
	      test,
	    - NO_SILENT, to allow authentic and lcs outputs,
	    - VALGRIND, to check memory leaks using valgrind.

2009-08-26  Frederic Peters  <fpeters@entrouvert.com>

	Call gtkdocize before automake

2009-08-26  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Core: errors.c is a generated file, when generating it place it in $(srcdir) not build directory
	 * lasso/Makefile.am:
	   the place for errors.c is in the source directory, not the build
	   directory.

	SAML 2.0: Fix bug introduced in commit 4235
	 * lasso/saml-2.0/login.c:
	   profile->msg_url is released before being used ;( Restore the code
	   copying the URL before passing it to
	   lasso_saml20_profile_build_http_redirect, to free it after.

	Core: Fix errors.c generation

	XML SAML2: remove typedef of LassoSaml2Assertion in saml2_advice.h and saml2_evidence.h
	 * xml/saml-2.0/saml2_advice.h xml/saml-2.0/saml2_evidence.h:
	   the declaration of LassoSaml2Assertion for supposedly preventing
	   recursive include is useless now.

	Core: fix spurious semi-colon inserted in commit 4093
	 * lasso/errors.h:
	   remove useless semi-colon

	Core: add assertion query to exported profiles
	 * lasso/lasso.h:
	   include lasso/saml-2.0/assertion_query.h

	XML: Add all including header fil for saml2, id-ff and id-wsf
	 * lasso/xml/xml_idff.h:
	   this header file reference all id-ff 1.2 elements
	 * lasso/xml/xml_idwsf.h:
	   this header file reference all id-wsf 1.0 elements
	 * lasso/xml/saml-2.0/xml_saml2.h:
	   this header file reference all saml-2.0 elements

	Core: Remove include of lasso.h in registry.h
	 * lasso/registry.h:
	   include of lasso.h is useless, replace by including directly export.h
	 * lasso/registry.c:
	   directly include errors.h

	ID-WSF: remove OFTYPE usage from header

2009-08-26  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Docs: change the doc production and lot of other fixes
	 * lasso/Makefile.am:
	   distribute extract_sections.py
	 * docs/references/lasso/lasso.types.in: add missing class (mainly SAML2
	   and ID-WSF 1.0/2.0) from docs/references/lasso.types.in

	 * lasso/xml/strings.h:
	   add lots of documentation, or at least documentation template to
	   strings constants.
	 * id-ff/login.h:
	 * saml-2.0/assertion_query.h:
	 * xml/xml.h:
	   document undocumented enumerations.
	 * lasso/errors.h:
	   add proper documentation about error codes.
	 * lasso/errors.c:
	   new version of the lasso_strerror function
	 * lasso/build_strerror.py:
	   update the script that generater lasso_strerror from the
	   documentation comments.

	   Remove usage of OFTYPE

	 * lasso/id-ff/session.c:
	 * lasso/id-ff/session.h:
	   remove usage of oftype, prefer gtk-introspection annotations instead.
	 * lasso/id-wsf/data_service.h:
	 * lasso/id-wsf/data_service.c:
	   do the same.

	   Add a script to build lasso-sections.txt

	 * lasso/extract_sections.py:
	   this script parses header files and generated lasso-sections.txt
	   content for GObject class descriptions.

	   Add a template file for the lasso-section.txt file

	 * docs/references/lasso-sections.txt.in:
	   this file serves as a base for the generation of lasso-sections.txt

	   Update docs/references/Makefile.am for generating lasso-sections.txt

	 * docs/references/Makefile.am:
	   always rebuild template, using out of source build directory is too
	   weird without it.
	   call new script extract_sections.py to regenerate lasso-sections.txt
	   if header files changed.

	   Update lasso.sgml file with all missing sections

	 * docs/reference/lasso.sgml:
	   add all missing sections, mainly objects from XML schemas.

	 * docs/reference/lasso-sections.txt: update it

	 * *.c: add section documentation to some files.
	 * lasso/xml/strings.h: fix bad usage or docbook markup

2009-08-26  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Core: fix makefile for generating errors.h in out of source dir build
	 * lasso/Makefile.am:
	   errors.h is expected to be in srcdir not builddir.

	Bindings: for functions that must be totally skiped do it during parsing
	 * bindings/bindings.py:
	   parsing of argument type is still not advanced enough, so in order to
	   remove spurious warnings, skip function directly during parsing just
	   before the treatment of function signature.

	Tests: in integration test do not set the PYTHONPATH
	 * tests/integration/saml2/__init__.py:
	   to permit using build directory different from the src directory, do
	   not force the PYTHONPATH to be relative to src dir to find lasso
	   python module.

	Tests: do not hardcode PYTHONPATH in the valgrind wrapper
	 * tests/integration/valgrind-wrapper.sh: remove PYTHONPATH setting.

	Tests: distribute integration tests
	 * tests/Makefile.am:
	   add integration directory to the distdir.

	Core: Use automake-1.11 when possible
	 * Makefile.am:
	   use new automake-1.11 silent rules if possible
	   move macros to m4 directory
	 * m4/gtk-doc.m4:
	   add gtk-doc macros.
	 * lasso/Makefile.am:
	   add missing -f flag to rm, to unbreak make distcheck
	 * docs/references/Makefile.am:
	   fix problem between libtool and gtk-doc
	 * autogen.sh:
	   update to autogen.sh from gtk-doc, add support for automake-1.11

	Tests: Add data files to EXTRA_DIST
	 * tests/data/Makefile.am:
	   data file for tests2 were missing (to pass distcheck).

2009-08-26  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	XML: remove all useless instance_init functions
	 * Use Coccinelle semantic patch tool (http://coccinelle.lip6.fr/) to
	   remove useless instance_init functions, the first patch applied was:
	@@
	type T,V;
	identifier I, J;
	parameter list P;
	expression E1;
	@@

	V instance_init(T node)
	{
	<...
	(
	-  E1 = 0;
	|
	-  E1 = NULL;
	|
	-  E1 = FALSE;
	)
	...>
	}
	   It removes useless initialization to 0 (GObject already zeroes
	   allocated objects).
	   The second one is:
	@ rule1 @
	type T;
	identifier node,fn;
	@@

	- static void fn(T *node) { }

	@ rule2 extends rule1 @
	typedef GType, GInstanceInitFunc;
	identifier type_constructor;
	@@
	GType type_constructor()
	{
	<...
	- (GInstanceInitFunc)fn
	+ NULL
	...>
	}
	   It removes empty instance_init functions.

2009-08-26  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	sb2:TargetIdentity can have a content
	 * lasso/xml/id-wsf-2.0/sb2_target_identity.c:
	 * lasso/xml/id-wsf-2.0/sb2_target_identity.h:
	   add support for any content.

	All: Rework include files handling, separated ID-WSF code from SAML2/ID-FF code
	 * nearly all C files: change includes for relative paths.
	 * lasso/id-wsf/id_wsf.h, lasso/id-wsf-2.0/id_wsf_2.h: add top level
	   public include files for ID-WSF 1.0 and ID-WSF 2.0.
	 * lasso/id-ff/server.*, lasso/id-ff/session.*, lasso/id-ff/identity.*:
	   remove most of the code related to ID-WSF and push into
	   lasso/id-wsf/id_ff_extensions.* and lasso/id-wsf-2.0/identity.c,
	   lasso/id-wsf-2.0/server.c, lasso/id-wsf-2.0/session.c.
	 * lasso/id-wsf-2.0/saml2_login.c,
	   lasso/id-wsf-2.0/saml2_login_private.h: same change but for ID-WSF
	   2.0 support in SAML2 SSO profile.

	Bindings: skip ID-WSF methods with unsupported signatures
	 * bindings/overrides.xml:
	   some functions have output parameters (pointer on pointers) that are
	   currently not supported by our binding generator, so we skip them.

	SWIG: unplug id-wsf support in SWIG
	 * swig/Lasso.i:
	   force LASSO_WSF_ENABLED to be undefined.

	Tests: allow tests2 to pass distcheck
	 * tests/Makefile.am
	   add an SRCDIR symbol.
	   remove unused include paths.
	 * tests/tests2.c:
	   use SRCDIR to find data files.

	Tests: remove internal content from data files
	 * tests/data/response-3:
	   this dump of a SAML message contains elements and attribute outside
	   the SAML schema, implementation detail from Lasso. They broke
	   execution of tests/tests2.

	XML&SAML 2.0: add missing include files
	 * lasso/xml/saml-2.0/saml2_encrypted_element.h:
	   xmlSecKey is present in a function signature, so include
	   xmlsec/xmlsec.h.

	SWIG: implement change to LassoSession in the SWIG interface file
	 * swig/Lasso.i:
	   remove LassoSession::is_dirty attribute and rewrite the
	   getProviderIds function.

	XML: only recurse into xml/id-wsf subdirs if --enable-wsf is true
	 * lasso/xml/Makefile.am:
	   put id-wsf and id-wsf2 subdirs under a conditionnal.

	ID-WSF 1.0: remove absent header file from the Makefile.am
	 * lasso/id-wsf/Makefile.am:
	   remove data_service_private.h from header file list.

	Core: SOAP is also used by SAML bindings
	 * extract_symbols.py, extract_types.py:
	   export SOAP types whatever the value of the flag --enable-wsf.
	   It still worked because constructor for GObject calls get_type, but
	   there is a race condition: if you receive a SOAP message before
	   sending one, it fails. Only soap_binding types must be removed.

2009-08-26  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	ID-FF&Core: Seal public field of LassoSession
	 * id-ff/session.h: seal public fields.

	 * id-ff/session.c, id-ff/sessionprivate.h: add accessors for reading
	   the is_dirty flag and counting store assertions.

	 * id-ff/logout.c, id-ff/login.c, saml-2.0/login.c, saml-2.0/logout.c,
	   saml-2.0/profile.c: use the new accessors.

	 * id-ff/profile.c: include the private header file, use the new
	   accessors, and remove unnecessary setting of is_dirty to FALSE (it
	   should be false at instanciation).

	 * utils.h: add a macro to access private content, prepare for using
	   G_TYPE_INSTANCE_GET_PRIVATE and the GObject infrastructure for
	   private structures eventually.

2009-08-26  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	ID-WSF 2.0: remove unused variable
	 - lasso/id-wsf-2.0/discovery.c: remove unused variable in discovery.c

	Core: fix bad name of lasso_unlink_and_release_node
	 * lasso/utils.h:
	   - rename lasso_unlink_and_release_node to
	     lasso_release_list_of_xml_node.
	   - add a GList iteration macro: lasso_foreach.

2009-08-26  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	ID-WSF: Lots of modifications
	 Migrate lots of code to use new utility macros. Try to simplify most
	 code paths or to factorize with LassoWsfProfile.

	 * lasso/id-wsf/wsf_profile.c:
	   Add API:
	    - lasso_wsf_profile_build_soap_response_msg to build SOAP fault for
	      Lasso errors,
	    - lasso_wsf_profile_set_msg_url_from_description, to set the
	      destination URL using the chosen LassoDiscoDescription (with
	      respect to the security mechanism),
	    - lasso_wsf_profile_init_soap_response to initialize a response to
	      the current request, to use in sub classes,
	    - lasso_wsf_profile_get_remote_provider_id, retrieve the SOAP
	      binding corresponding information,
	    - lasso_wsf_profile_get_remote_provider, simplification of
	      lasso_wsf_profile_get_remote_provider_id,
	    - lasso_wsf_profile_get_soap_fault, retrieve the last setted SOAP
	      fault, used by sub classes,
	    - lasso_wsf_profile_set_soap_fault, set a SOAP fault, to be returned
	      by the next call by lasso_wsf_profile_build_soap_response_msg, to
	      use in sub classes,
	    - lasso_wsf_profile_set/get_status_code, set/get the stored status
	      code, to use in the next lasso_xxx_build_response_message, to use
	      in sub classes.
	   Change name lasso_wsf_profile_get_description_autos to
	   lasso_wsf_profile_get_description_auto.
	   Do not access directly the session is_dirty field (it has been
	   sealed).

	 * lasso/id-wsf/wsf_profile.h:
	   Add helper macro lasso_wsf_profile_helper_set_status to set status
	   code of an ID-WSF response message containing a Status element using
	   the stored status code.
	 * lasso/id-wsf/wsf_profile_private.h:
	   Add new fields (moved public fields).
	   Add lasso_wsf_profile_set_msg_url_from_description,
	   lasso_wsf_profile_build_soap_fault_response_msg.
	 * lasso/id-wsf/data_service_private.h:
	   Remove file.
	 * lasso/id-wsf/data_service.h: Remove all public fields.
	 * lasso/id-wsf/data_service.c:
	   Remove private structure. Use the equivalents LassoWsfProfile private
	   fields. Update documentation. Use LassoWsfProfile generic functions
	   for initializing requests. Add API lasso_data_service_get_query_item,
	   lasso_data_service_get_answers, lasso_data_service_get_answer,
	   lasso_data_service_get_answers_by_select,
	   lasso_data_service_get_answer_for_item_id,
	   lasso_data_service_add_modification.
	   Remove lasso_data_service_need_redirect_user use equivalent function
	   lasso_interaction_profile_service_build_redirect_response_msg. Remove
	   lasso_data_service_get_resource_offering,
	   lasso_data_service_set_offering.
	 * lasso/id-wsf/discovery.c:
	   Add documentation. Change some signatures. Remove
	   lasso_discovery_get_description_auto. Change name of
	   lasso_discovery_init_insert to lasso_discovery_init_modify. Add a
	   generic lasso_discovery_process_request_msg.
	   Add internal function lasso_discovery_init_offering, to get
	   automatically an offering if possible. Remove useless init_from_xml.
	   Rework lasso_discovery_build_credential implementation.
	   overloading. Remove lasso_discovery_destroy.
	 * lasso/id-wsf/discovery.h:
	   Remove lasso_discovery_destroy.
	 * lasso/id-wsf/interaction_profile_service.c:
	   Add lasso_interaction_profile_service_build_redirect_response_msg.
	 * lasso/id-wsf/personal_profile_service.c:
	   Update lasso_personal_profile_service_get_email to use
	   lasso_data_service_get_answers_by_select.
	 * lasso/xml/dst_modify.c:
	   make modification parameter optional to the constructor.

2009-08-26  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Core: Add new error types
	 * lasso/errors.h lasso/errors.c:
	   add error types: LASSO_ERROR_CAST_FAILED,
	   LASSO_DATA_SERVICE_CANNOT_ADD_ITEM,
	   LASSO_WSF_PROFILE_ERROR_INVALID_OR_MISSING_REFERENCE_TO_MESSAGE_ID,
	   LASSO_DST_ERROR_QUERY_NOT_FOUND, LASSO_DST_ERROR_NO_DATA,
	   LASSO_DST_ERROR_MALFORMED_QUERY.

	XML: Add time formatting function for ISO 8601 format
	 * xml/private.h:
	 * xml/tools.c:
	   add util function to format time_t values in the ISO 8601 format.

	XML: Add any attribute parsing to Saml2AttributeValue
	 * xml/saml-2.0/saml2_attribute_value.h:
	   add new public field GHashTable *attributes;
	 * xml/saml-2.0/saml2_attribute_value.c:
	   add parsing instructions to populate attributes field.

	XML: add documentation for lasso_eval_xpath_expression
	* lasso/xml/tools.c: add documentation for xpath helper evaluation
	  function lasso_eval_xpath_expression.

	XML: add string constant for client soap errors
	* lasso/xml/strings.h: add new string constant
	  LASSO_SOAP_FAULT_CODE_CLIENT.

	XML: add documentation for lasso_idwsf2_disco_svc_md_register_new_full
	* lasso/xml/id-wsf-2.0/disco_svc_md_register.c: add documentation
	  for constructor function lasso_idwsf2_disco_svc_md_register_new_full.

	ID-WSF 1.0: Add new error to signal unknown entry
	* lasso/errors.{c,h}: add a new error for the ID-WSF 1.0 module, to
	  signal unknown entry in discovery responses.

	SWIG Binding: reflect changes in the signature of struct LassoIdWsfDiscovery
	 * swig/Lasso-wsf2.i (LassoIdWsfDiscovery):
	   add new fields metadatas and svcMDIDS, remove old ones (metadata
	   and svcMDID).

	ID-WSF 1.0: fix off-by one ref counting error in lasso_wsf_profile_init_soap_request
	 * lasso/id-wsf/wsf_profile.c (lasso_wsf_profile_init_soap_request):
	   envelope is an argument, increment its ref count
	   before storing it.

	ID-WSF 1.0: improve error recovery in lasso_wsf_profile_comply_with_saml_authentication
	 * lasso/id-wsf/wsf_profile.c
	   (lasso_wsf_profile_comply_with_saml_authentication):
	   reuse existing wsse-security element if present,
	   remove useless comments, move core code after argument type checks,
	   return error if enveloppe or header is missing,
	   fail if any referenced assertion is missing,
	   correctly handle reference count of wsse_security depending on
	   the situation (new or reused).

	ID-WSF 1.0: fix memory leak
	 * lasso/id-wsf/discovery.c (lasso_discovery_add_insert_entry):
	   the rule is that callee is responsible for becoming owner of a resource,
	   so no g_object_ref before a call on an argument.

	ID-WSF 2.0: publicize lasso_idwsf2_profile_build_soap_envelope
	 * lasso/id-wsf-2.0/profile.c, lasso/id-wsf-2.0/profile.h
	   (lasso_idwsf2_profile_build_soap_envelope):
	   as for ID-WSF 1.0 export this function to allow easier implementation
	   of external ID-WSF 2.0 services. remove FIXME comment and fill
	   equivalent bugzilla reports.

	ID-WSF 2.0: review lasso_idwsf2_discovery_process_metadata_register_response_msg
	 * lasso/id-wsf-2.0/discovery.c
	   (lasso_idwsf2_discovery_process_metadata_register_response_msg):
	   change return code variable to rc, move argument casting after argument
	   type check, copy all the service metadata ids,

	ID-WSF 2.0: review lasso_idwsf2_discovery_process_metadata_register_msg
	 * lasso/id-wsf-2.0/discovery.c
	   (lasso_idwsf2_discovery_init_metadata_register):
	   add documentation comment, move argument casting after type checking,
	   change return code name to rc to comply with standardisation,
	   use lasso_build_unique_id instead of duplicating the code,
	   add iteration over all the registered service, add iteration
	   to return all the generated service metadata ids, use new assignment
	   macros.
	 * lasso/id-wsf-2.0/discovery.h (struct _LassoIdWsf2Discovery):
	   change field LassoIdWsf2DiscoSvcMetadata metadata to GList* metadatas
	   and gchar *svcMDID to GList *svcMDIDs in order to support multiple
	   services in requests.

	ID-WSF 2.0: review lasso_idwsf2_discovery_metadata_register_self
	 * lasso/id-wsf-2.0/discovery.c
	   (lasso_idwsf2_discovery_metadata_register_self):
	   Add documentation, add code for getting the service URL.

	ID-WSF 2.0: add documentation to lasso_idwsf2_discovery_register_self
	 * lasso/id-wsf-2.0/discovery.c (lasso_idwsf2_discovery_register_self)
	   move casting after argument type check, simplify code by using
	   lasso_build_unique_id, remove useless comments

	ID-WSF 2.0: simplify gobject boilerplate
	 * lasso/id-wsf-2.0/discovery.c: (get_xmlNode, instance_init, class_init)
	   remove useless method get_xmlNode, remove useless NULLing or
	   instance fields.

	ID-WSF 2.0: use new macros
	 * lasso/id-wsf-2.0/data_service.c (lasso_idwsf2_data_service_init_query,
	   lasso_idwsf2_data_service_parse_query_items,
	   lasso_idwsf2_data_service_init_modify,
	   lasso_idwsf2_data_service_parse_one_modify_item,
	   lasso_idwsf2_data_service_parse_modify_items):
	   add cast, change macros for stealing version, fix name of macro
	 * lasso/id-wsf-2.0/profile.c: (lasso_idwsf2_profile_init_soap_request)
	   use list handling macro, add missing casts
	 * lasso/id-wsf-2.0/discovery.c:
	   (lasso_idwsf2_discovery_process_metadata_association_add_msg,
	    lasso_idwsf2_discovery_init_query) add missing casts

	ID-WSF 2.0: add a new constructor for UtilStatus
	 - lasso/xml/id-wsf-2.0/utils_status.h (lasso_idwsf2_util_status_new_with_code):
	   this constructor allow to construct and fill a UtilStatus node with
	   one line. It has two arguments to construct nested two level
	   status objects (with two status codes). If you omit the second
	   argument you get a one level status object.

	ID-WSF 2.0: add initialization of local variables

	ID-WSF 2.0: Use new XPath API in DST
	 - lasso/id-wsf-2.0/data_service.c:
	   - lasso_idwsf2_data_service_parse_query_items: use the new API to
	   remove error outputs from libxml, and generate an additional status
	   code containing newly returned libxml error code.
	   - lasso_idwsf2_data_service_parse_one_modify_item: use the new API.

	XML: add API to simplify evaluation of XPath expressions
	* lasso/xml/tools.c,lasso/xml/private.h:
	  - lasso_eval_xpath_expression(xmlXPathContextPtr xpathCtx,
	    const char *expression, xmlXPathObjectPtr *xpathObjectPtr,
	    int *xpathErrorCode) is a boolean returning function handling call
	    to libxml API to evaluate en XPath expression in the xpathCtx
	    context. It eventually save the returned nodeset in the variable
	    pointed by xpathObjectPtr if it is not-NULL
	    (and eventually deallocate previous value)
	    and if an error happend it copy its code into the variable
	    pointed to by xpathErrorCode if it is not NULL.

	Tests: Add a fourth data loading test
	 * tests/data/response-4: test content
	 * tests/tests2.c: add loading of the new file.

2009-07-06  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Only recurse into id-wsf if it is enabled
	 * lasso/Makefile.am:
	   only add id-wsf and id-wsf-2.0 to SUBDIRS if wsf is enabled.

	Fix: backward_comp.h is missing from tarballs.
	 * lasso/Makefile.am:
	   add backward_comp.h to EXTRA_DIST

2009-06-15  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Python Binding: fix bug of uninitialized ppos argument to PyDict_Next
	 * bindings/pyhton/wrapper_top.c (set_hashtable_of_pygobject):
	   second argument (int*ppos) of PyDict_Next must be reinitialized to
	   zero before each traversal (see Python C API
	   http://docs.python.org/c-api/dict.html).

	   Patch from Iban Rodríguez of the Desarrollo de Producto Electrónico,
	   Spain.

2009-06-15  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Update doap file

	Do not remove signatures on assertion when using HTTP Redirect
	 * lasso/saml-2.0/profile.c:
	   HTTP Redirect binding mandate to remove signature at the SAML message
	   level, but signatures at the assertion, especially if the SP asked for
	   it, must be preserved.

2009-05-07  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Fix bug in lasso_registry_destroy / shutdown
	 * lasso/registry.c:
	   if not initialized, do not free. do not segfault on NULL argument.

	Do not respect default semantic of dst:Query
	 * lasso/id-wsf-2.0/data_service.c:
	   the specification for data service template indicat that the query
	   must fail at the first failing query, we think this is a stupid
	   behaviour so I set the default to keep running query until the last
	   one and returning a partial result if at least one failed and a
	   failed result if absolutely no query matched.
	 * lasso/id-wsf-2.0/private.h:
	   declare the lasso_flag_follow_id_wsf_supid_semantic flag.
	 * lasso.c:
	   declare the lasso_flag_follow_id_wsf_supid_semantic flag, it's
	   conditionned by the LASSO_WSF_ENABLED preprocessor symbol.

2009-04-30  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Add valgrind support to integration tests
	 * tests/integration/saml2/__init__.py:
	   if /usr/bin/valgrind exist, use script valgrind-wrapper.sh to launch
	   tests, it stores log files in {authentic,lcs}_$ISODATE_pid$PID.log.

	Fix leak in python binding
	 * bindings/python/wrapper_top.c:
	   keep a pointer on beginning of list to free it.

	Fix leak of mapping registry
	 * lasso/lasso.c:
	 * lasso/registry-private.h:
	 * lasso/registry.c:
	   make the registry be freed in lasso_shutdown.

	ID-FF 1.2: Fix leaks, reduce code
	 * id-ff/login.c:
	 * id-ff/logout.c:
	 * id-ff/profile.c:
	 * id-ff/provider.c:
	 * id-ff/server.c:
	   fix leaks by using field setting macros which frees previous values,
	   it also reduce code length sometimes.

	Export the new flag
	 * lasso/debug.h:
	   export new flag lasso_flag_sign_messages.

	Fix leaks in tests
	 * basic_tests.c:
	 * login_tests.c:
	 * login_tests_saml2.c:
	 * random_tests.c:
	   free replaced string, unref used nodes, initialize local variables
	   when necessary, free newly allocated strings.

	Add a script to format suppression file
	 * tests/format-suppressions.py:
	   this is the script used to generate valgrind/lasso.supp and
	   valgrind/glib.supp.

	Add a stress test for serializing/deserializing code
	 * Makefile.am:
	   add targets
	 * tests2.c:
	   this simple makes lots of serializing, deserializing.
	 * data/response-1:
	 * data/response-2:
	 * data/response-3:
	   data test files

	SAML 2.0: Fix many leaks
	 * lasso/saml-2.0/login.c:
	 * lasso/saml-2.0/logout.c:
	 * lasso/saml-2.0/name_id_management.c:
	 * lasso/saml-2.0/profile.c:
	 * lasso/saml-2.0/provider.c:
	   do not mix g_malloc strings with libxml strings, use the
	   string/gobject handling macros as much as possible, be a good memory
	   citizen, don't put your elbows on the table.

	LassoNode: Fix leaks
	 * lasso/xml/xml.c:
	   fix more and more leaks.

	Add debugging code to lasso_node_impl_init_from_xml
	 * lasso/xml/xml.c:
	   add more debugging code for the memory-debug flag.

	Add debugging code to lasso_set_orginal_xmlnode
	 * lasso/xml/xml.c:
	   add code to trace allocation and deallocation of original xmlnode
	   associated to LassoNodes.

	Remove useless code
	 * lasso/xml/lib_authentication_statement.c:
	 * lasso/xml/saml-2.0/samlp2_name_id_policy.c:
	 * lasso/xml/saml_name_identifier.c:
	   remove useless initialization code.

	Fix leak in lasso_url_add_parameters
	 * lasso/xml/tools.c:
	   in lasso_url_add_parameters free intermediate strings.

	Fix debug echo on stdout
	 * lasso/utils.h:
	   make lasso_mem_debug output on stderr and not stdout

	Add new valgrind memleak suppression files
	 * tests/valgrind/glib.supp:
	   suppress all "static" allocation by glib, usually for the type
	   system.
	 * tests/valgrind/lasso.supp:
	   suppress allocations from lasso that we cannot actually remove, they
	   are all from "called only once" code, so it should not really be a
	   problem for embedded codes.

2009-04-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	More work on signature validation for SAML 2.0
	 * lasso/saml-2.0/profile.c:
	   in lasso_saml20_profile_process_any_request and
	   lasso_saml20_profile_process_any_response do not make signature
	   validation failure as call failure, just store the result in
	   profile->signature_status and let the upper level functions handle
	   what to do with it. also add documentation about those two functions.

	 * lasso/saml-2.0/logout.c:
	 * lasso/saml-2.0/name_id_management.c:
	   handle new signature_status semantic.

	 * lasso/saml-2.0/login.c:
	   add internal documentation for
	   lasso_saml20_login_process_authn_response_msg.

2009-04-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Update signature_status when checking signature on assertions
	 * lasso/saml-2.0/login.c:
	   if signature_status is SIGNATURE_NOT_FOUND, check one on the
	   assertion and keep the result in signature_status.

	Increase wait time for integration test
	 * tests/integration/saml2/__init__.py:
	   wait 5 seconds for dameons to start.

	review later

	FIX: verify assertion signature for SAML 2.0 when response is not signed
	 * lasso/saml-2.0/login.c:
	   if response was not signed, check the signature on the assertion.

	new function lasso_saml20_login_check_assertion_signature()
	 * lasso/saml-2.0/login.c:
	   lasso_saml20_login_check_assertion_signature() find the issuer of an
	   assertion, look it up in the server object and try to validate its
	   signature. It returns an error code if any of this step fails.

	Test: Remove spurious debugging printf
	 * tests/login_tests_saml2.c:
	   remove debug code.

	Add keep_xmlnode flag to SAML 2.0 req, resp and assertions
	 * lasso/xml/saml-2.0/saml2_assertion.c:
	 * lasso/xml/saml-2.0/samlp2_request_abstract.c:
	 * lasso/xml/saml-2.0/samlp2_response.c:
	 * lasso/xml/saml-2.0/samlp2_status_response.c:
	   set keep_xmlnode flag to 1 in class_init.

	new function lasso_profile_get_server()
	 * lasso/id-ff/profile.c:
	 * lasso/id-ff/profile.h:
	   in a move to try to remove direct access to object content, add a
	   function to retrieve the LassoServer object of a LassoProfile.
	 * bindings/overrides.xml:
	   it conflicts with direct access to the public field server, so we do
	   not export it in the binding for now.

	fix: in lasso_verify_signature() only look for the first direct child Signature element
	 * lasso/xml/tools.c:
	   in SAML message signatures are usually envelopped signatures, so just
	   lookup for the first direct child which is a Signature node.

	fix: handle non-LHS argument for lasso_extract_node_or_fail()
	 * lasso/utils.h:
	   create a temporary varaible to store result of second argument
	   evaluation to prevent spurious side effects.

	lasso_saml20_profile_init_artifact_resolve(): check http_method
	 * lasso/saml-2.0/profile.c:
	   check the given http_method it must one in
	   - LASSO_HTTP_METHOD_ARTIFACT_POST,
	   - LASSO_HTTP_METHOD_ARTIFACT_GET.

	lasso_login_init_request(): change error code for invalid artifacts
	 * lasso/id-ff/login.c:
	   if artifact is invalid return LASSO_PROFILE_ERROR_INVALID_ARTIFACT as
	   in lasso_saml20_profile_init_artifact_resolve().

	Complete documentation of lasso_login_init_request
	 * lasso/id-ff/login.c:
	   add precision on usage. add all possible return codes with meanings.

	lasso_login_init_authn_request: complete doc
	 * lasso/id-ff/login.c:
	   add all possible return codes and their meaning.

	lasso_login_init_authn_request: change error code for missing remote provider ID
	 * lasso/id-ff/login.c:
	   change the return code for when no remote provider ID could be
	   defined (because the argument is NULL and the server object contains
	   no providers) so that we can distingish the case where the given
	   provider is unknown or if there is no providers configured.

	Add a deprecated tag to lasso_login_destroy doc
	 * lasso/id-ff/login.c:
	   all destroy functions are deprecated, g_object_unref() should be used
	   instead.

	Complete documentation of lasso_login_byuld_response_msg
	 * lasso/id-ff/login.c:
	   add all possible return codes with meaning.

	Complete documentation of lasso_login_build_request_msg
	 * lasso/id-ff/login.c:
	   add all possible return codes with meaning.

	Complet documentation for lasso_login_build_authn_response_msg
	 * lasso/id-ff/login.c:
	   add all possible return codes with meaning.

	Complete documentation of lasso_login_build_authn_request
	 * lasso/id-ff/login.c:
	   add all possible return codes with meaning.

	Complete documentation for lasso_login_build_artifact_msg
	 * lasso/id-ff/login.c:
	   add all possible return codes with meaning.

	Complet documentation of lasso_login_accept_sso
	 * lasso/id-ff/login.c:
	   add all possible return codes.

	Complete doc for static function lasso_login_musk_ask_for_consent
	 * lasso/id-ff/login.c:
	   precise return value meaning.

	Complete document of lasso_login_build_assertion
	 * lasso/id-ff/login.c:
	   add possible return codes.

	Complete doc of lasso_logout_validate_request
	 * lasso/id-ff/logout.c:
	   add description of all possible return codes.

2009-04-23  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Rework cleanup handling
	 * lasso/utils.h:
	   change 'goto exit' for 'goto cleanup'. rename all goto_exit macros to
	   goto_cleanup_.  rename goto_cleanup_if_fail to
	   goto_cleanup_if_fail_with_rc and add a
	   goto_cleanup_if_fail for function which do not return an integer
	   value. add documentation for goto_cleanup macro family.
	 * lasso/id-ff/login.c:
	 * lasso/id-ff/provider.c:
	 * lasso/id-ff/server.c:
	 * lasso/id-ff/session.c:
	 * lasso/id-wsf/discovery.c:
	 * lasso/id-wsf/wsf_profile.c:
	 * lasso/saml-2.0/profile.c:
	 * lasso/utils.h:
	 * lasso/xml/lib_logout_request.c:
	 * lasso/xml/tools.c:
	 * lasso/xml/xml.c:
	   update name of goto_exit_if_fail macros. rename 'exit' labels to
	   'cleanup'.

	XML: Fix prefix clobbering by xsi:type handling
	 * lasso/xml/xml.c:
	   if xsi:type is not able to find a GObject typename for the current
	   node, then do not erase the actual prefix value. change prefix type
	   to const char.

	SAML 2.0: Use new API lasso_url_add_parameter
	 * lasso/saml-2.0/profile.c:
	   use new API lasso_url_add_parameter to handle RelayState parameter
	   creation.

	SAML 2.0: Check http_method in build_artifact_msg
	 * lasso/saml-2.0/login.c:
	   if http_method is not among ARTIFACT_GET and ARTIFACT_POST, return an
	   INVALID_HTTP_METHOD error.

	Tests: Add test parsing a Ping Federate assertion.
	 * tests/basic_tests.c:
	   load data/response-1 and try to parse it.

	Add a new internal API for parameters building
	 * xml/tools.c:
	   add lasso_url_add_parameter that concat the string &key=value to an
	   existing URL where key and value are url-encoded.
	 * xml/private.h:
	   declare lasso_url_add_parameter.

	Tests: Add a SAML2 login test
	 * tests/login_tests_saml2.c:
	   add a C login test for SAML 2.
	 * tests/Makefile.am:
	   add the new test to dependencies.

2009-04-21  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	If no typename could be determined, stop parsing.
	 * lasso/xml/xml.c:
	   in lasso_node_new_from_xmlNode if no typename is found for the given
	   xmlNode, return NULL.

2009-04-17  Jerome Schneider  <jschneider@entrouvert.com>

	Fix python 2.4 binding build

2009-04-14  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Core: Add cast to first argument of isalnum
	 * lasso/xml/xml.c:
	 * lasso/xml/tools.c:
	   isalnum takes a int as first arg.

	Core: add an header file for backward compatibility
	 * lasso/backward_comp.h:
	   this header will contain substitue function, defines or types for
	   compatibility with older versions of dependencies.
	 * lasso/utils.h:
	   remove declaration of g_strcmp0
	 * lasso.c:
	 * tests/login_tests.c:
	   use backward_comp.h

2009-04-09  Jerome Schneider  <jschneider@entrouvert.com>

	Fix build issues on amd64 / gcc 4.3
	* bindings/java/lang.py:
	  fix cast issue
	* bindings/python/wrapper_top.c
	  fix type issue
	* lasso/registry.c
	  fix cast issue

2009-04-02  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Tests&Core: add g_strcmp0 if glib is old
	 * lasso/utils.h:
	   if glib is older than 2.16, export g_strcmp0 as part of internal
	   headers, in order to use it in login_tests.c
	 * tests/login_tests.c:
	   include utils.h

2009-03-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Update website download page
	 * website/web/download/index.xml:
	   update link for last release download
	 * website/web/news/13-release-2.2.2.xml:
	   add news about release 2.2.2

	Update lasso version to 2.2.2
	 * configure.ac:
	 * fedora/lasso.spec:
	 * lasso.doap:
	   update lasso version to 2.2.2, this commit will be the reference for
	   the 2.2.2 release.

	Makefile: change dependencies to pass distcheck
	 * lasso/Makefile.am:
	   source dependencies must refer to $(srcdir) in order to pass
	   distcheck, I forgot to do it in types.c and symbols.sym target
	   changes.

	ID-FF 1.2: if logout request parsing fails, take a shortcut
	 * lasso/xml/lib_logout_request.c:
	   immediately return from init_from_query if overloaded parent method
	   fails.

	SAML 2.0: Update generic relaystate handling
	 * lasso/saml-2.0/profile.c:
	   in lasso_saml20_profile_build_redirect_request_msg and
	   lasso_saml20_profile_build_redirect_response, use new function
	   lasso_saml20_profile_build_http_redirect.

	Core: add a add-signature flag
	 * lasso/debug.h:
	 * lasso/lasso.c:
	   add a lasso_flag_add_signature flag variable (default to TRUE),
	   and parsing code to change it from LASSO_FLAG environment variable.
	   ("env LASSO_FLAG=no-add-signature test").

	ID-FF 1.2: Only verify InResponseTo if strict checking is on
	 * lasso/id-ff/login.c:
	   add condition upon checking of the InResponseTo field: checks only if
	   strict checking is activated as it could stop old code using Lasso
	   from working.

2009-03-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Core: Add a flag for enabling more strict checking
	 * lasso/debug.h:
	   declare lasso_flag_strict_checking global boolean variable.

	 * lasso/lasso.c:
	   add parsing for new option called 'strict-checking'.

2009-03-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	XML: use macro for assignment
	 * lasso/xml/xml.c: use standardized assignment macros (it takes care of
	   releasing previous valuesm and other peculiarities associated with
	   safe pointer usage).

	ID-FF 1.2: Add trace in dispose for LassoProfile
	 * lasso/id-ff/profile.c: add tracing code activaged by
	   LASSO_FLAG=memory-debug to print release of field values.
	   Complement the existing code in generic deallocation procedure in
	   LassoNode.

	Core: debug.h need export.h
	 * lasso/debug.h:
	   export.h is needed for the LASSO_EXPORT macro.

	Core: Macros to print deallocation messages
	 * lasso/utils.h:
	   lasso_mem_debug print deallocation message with respect to class and
	   field.

	Core: remove type check equality on gobject macros
	 * lasso/utils.h:
	   assignment to the temporary variable allow to check for the typing,
	   do not use lasso_check_type_equality.

	Core: add macros to handle xmlSecKey
	 * lasso/utils.h:
	   macros to assign and release xmlSecKey(s).

	XML: fix memory leaks
	 * lasso/xml/tools.c:
	 * lasso/xml/xml.c:
	   release xmlDoc, properly steal nodes by using xmlSetTreeDoc(xmlnode, NULL);

	ID-FF 1.2: fix style fault
	 * lasso/id-ff/defederation.c:
	 * lasso/id-ff/logout.c:
	 * lasso/id-ff/profile.c:
	 * lasso/id-ff/provider.c:
	 * lasso/id-ff/server.c:
	   add missings casts, remove useless wrappers
	 * lasso/id-ff/logout.c:
	   In lasso_logout_process_request_msg change sequence of "if" for a
	   "switch".

	ID-FF 1.2: fix some real and potential memory leaks
	 * lasso/id-ff/provider.c:
	 * lasso/id-ff/server.c:
	 * lasso/id-ff/session.c:
	   use macros to release previous value when necessary,
	   release object used as parameters to constructors,
	   free the encryption key associated with a provider,
	   release the key manager created for a saml signature
	   verification.

	Test: add missing release of objects and memory
	 * tests/basic_tests.c:
	 * tests/login_tests.c:
	 * tests/metadata_tests.c:
	 * tests/random_tests.c:
	 * tests/tests.c:
	   add missing g_free and g_object_unref calls.

	Bindings: skip DEPRECATED variables
	 * bindings/bindings.py: when parsing headers, skipped deprecated struct
	   fields.

	ID-FF 1.2: Add handling of relaystate for logout requests
	 * lasso/id-ff/logout.c (lasso_logout_process_request_msg,
	 lasso_logout_validate_request): transfer relaystate from request
	 message to profile field.

2009-03-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	ID-FF 1.2: Use new macros in logout, defederation and lecp
	* lasso/id-ff/logout.c:
	 - (lasso_logout_build_response_msg, lasso_logout_init_request,
	    lasso_logout_process_request_msg, lasso_logout_process_response_msg,
	    lasso_logout_validate_request) use lasso_assign_new_object,
	   lasso_assign_string, lasso_release and lasso_assign_new_string when
	   possible.
	 - (lasso_logout_process_response_msg) move the tranfer of the relaystate
	   from XML object to profile object.

	* lasso/id-ff/defederation.c:
	 - (lasso_defederation_build_notification_msg,
	    lasso_defederation_init_notification,
	    lasso_defederation_process_notification_msg,
	    lasso_defederation_validate_notification): idem

	* lasso/id-ff/lecp.c:
	 - (lasso_lecp_build_authn_request_envelope_msg,
	    lasso_lecp_build_authn_request_msg,lasso_lecp_build_authn_response_msg,
	    lasso_lecp_build_authn_response_envelope_msg) idem

2009-03-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Autoconf: Do not include optimisation flags in AM_CFLAGS
	* configure.ac: when --enable-debugging set CFLAGS,
	  do not modify AM_CFLAGS.

	ID-FF 1.2 Tests: Add test for relaystate
	* tests/login_tests.c:
	 - (test02_serviceProviderLogin) add assertion concerning the relaying
	   of the RelayState parameter during an SP initiated SSO.

	ID-FF 1.2 Login: Use allocation macros
	* lasso/id-ff/login.c: (lasso_login_init_authn_request) again a passing by
	  correction, use lasso_assign_string for copying information from
	  the request to the profile object.

	ID-FF 1.2: Handle RelayState inside LassoLogin
	 * lasso/id-ff/login.c:
	   - (lasso_login_init_request) catch RelayState in the query_fields and
	     copy it to msg_relayState
	   - (lasso_login_process_authn_request_msg) copy RelayState from the
	     request object to the profile object.

	XML ID-FF 1.2 & SAML 2.0: Handle signature failure
	 * lasso/xml/saml_assertion.c:
	 * lasso/xml/samlp_response_abstract.c:
	 * lasso/xml/samlp_request_abstract.c:
	 * lasso/xml/saml-2.0/samlp2_request_abstract.c:
	 * lasso/xml/saml-2.0/saml2_assertion.c:
	 * lasso/xml/saml-2.0/samlp2_status_response.c:
	   if a failure occur in the signing process, free the xmlnode, return
	   NULL and print a warning.

	XML SAML 2.0: Delete parent_class static variable
	* lasso/xml/saml-2.0/samlp2_manage_name_id_request.c,
	  lasso/xml/saml-2.0/samlp2_manage_name_id_response.c,
	  lasso/xml/saml-2.0/samlp2_name_id_mapping_request.c,
	  lasso/xml/saml-2.0/samlp2_name_id_mapping_response.c.
	  lasso/xml/saml-2.0/samlp2_subject_query_abstract.c:
	  - remove static variable parent_class
	  - (class_init) remove intialization of parent_class

2009-03-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	XML SAML 2.0: Mark RelayState field from SAML 2.0 deprecated
	 * lasso/xml/saml-2.0/samlp2_authn_request.c,
	   lasso/xml/saml-2.0/samlp2_logout_request.c,
	   - (instance_init) remove initialization of relayState field

	 * lasso/xml/saml-2.0/samlp2_logout_response.c:
	   - (instance_init) remove empty function, since it
	     only initialized relayState.
	   - (lasso_samlp2_logout_reponse_get_type) remove instance_init
	     from the type initialization structure.

	 * lasso/xml/saml-2.0/samlp2_authn_request.h,
	   lasso/xml/saml-2.0/samlp2_logout_request.h,
	   lasso/xml/saml-2.0/samlp2_logout_response.h:
	   - (struct _LassoSamlp2*) mark relaystate field as deprecated.

2009-03-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	XML SAML 2.0: Clean query string parsing/building
	 * lasso/xml/saml-2.0/samlp2_status_response.c:
	   - (init_from_query) remove useless stub code for parsing RelayState

	 * lasso/xml/saml-2.0/samlp2_response.c,
	   lasso/xml/saml-2.0/samlp2_name_id_mapping_response.c,
	   lasso/xml/saml-2.0/samlp2_logout_response.c,
	   lasso/xml/saml-2.0/samlp2_manage_name_id_response.c, :
	   - (class_init) remove overloading of init_from_query, use version
	     from samlp2_status_response instead.
	   - (init_from_query) Useless so deleted.

	 * lasso/xml/saml-2.0/samlp2_request_abstract.c:
	   - (class_init) add overloaded method for init_from_query virtual
	     method.
	   - (init_from_query) generic implementation for SAML 2.0 requests

	 * lasso/xml/saml-2.0/samlp2_subject_query_abstract.c,
	   lasso/xml/saml-2.0/samlp2_authn_request.c,
	   lasso/xml/saml-2.0/samlp2_logout_request.c,
	   lasso/xml/saml-2.0/samlp2_manage_name_id_request.c,
	   lasso/xml/saml-2.0/samlp2_name_id_mapping_request.c,
	   lasso/xml/saml-2.0/samlp2_assertion_id_request.c:
	   - (class_init) remove overloading of init_from_query, use version
	     from samlp2_request_abstract instead.
	   - (init_from_query) Useless so deleted.

2009-03-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	XML: Remove useless parsing of RelayState in lasso_node_init_from_saml2_query_fields
	* lasso/xml/xml.c: (lasso_node_init_from_saml2_query_fields) Since parsing
	    of the relayState is now done inside each "_process_*msg" method of
	    each SAML2 profile, it is not needed anymore in this function.

	XML: Use memory macros inside lasso_node_export_to_query
	 * lasso/xml/xml.c (lasso_node_export_to_query): use lasso own memory
	   handling macros.

2009-03-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	ID-FF 1.2: review HTTP-Redirect binding parsing/building
	 * lasso/xml/lib_authn_request.c, lasso/xml/lib_logout_request.c,
	   lasso/xml/lib_register_name_identifier_request.c,
	   lasso/xml/lib_status_resposne.c:
	   - build_query: remove build_query overloaded virtual method, use
	     LassoNode new generic implementation.
	   - init_from_query:
	     - change direct call to lasso_node_init_from_query_fields to use of
	       base implementation from LassoNode.
	     - make use of utils.h memory handling macros like
	       lasso_release_gobject and lasso_assign_string.

	 * lasso/xml/lib_federation_termination_notification.c:
	   - init_from_query: remove parsing of RelayState parameter

2009-03-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	ID-FF 1.2: Defederation, changes includes for relative paths
	 * lasso/id-ff/defederation.c: header path should be relative to the
	   implementation, I will try to do it to most files.

	ID-FF 1.2: Defederatopm HTTP-Redirect binding, handle relaystate
	 * lasso/id-ff/defederation.c: get relaystate directly from the query
	   string using lasso_get_relaystate_from_query.

	SAML 2.0: In login change includes for relative paths
	 * lasso/id-ff/login.c: changes headers for relatives paths

	Core: Remove ending blanks from erros.c.in
	 * lasso/errors.c.in: errors.c template contains blanks at end of lines.

	SAML 2.0: add direct treatment of relaystate for HTTP-Redirect binding
	* lasso/saml-2.0/login.c: In
	  lasso_saml20_login_process_authn_request_msg change handling of
	  relayState do not rely upon parsing by the node object, but extract
	  directly from the query string. Use new function
	  lasso_get_relaystate_from_query.
	* lasso/saml-2.0/logout.c: In lasso_saml20_logout_process_request_msg
	  change handling of relayState do not rely upon parsing by the node
	  object, but extract directly from the query string.
	* lasso/saml-2.0/profile.c: In
	  lasso_saml20_profile_init_artifact_resolve, add handling of the
	  relayState transmitted to the assertion consumer URL.
	* lasso/saml-2.0/name_id_management.c: In
	  lasso_name_id_management_process_request_msg change handling of
	  relayState do not rely upon parsing by the node
	  object, but extract directly from the query string.

	SAML 2.0: simplify redirect binding code path
	 * lasso/saml-2.0/login.c, lasso/saml-2.0/logout.c,
	   lasso/saml-2.0/name_id_management.c: simplify code path associated
	   with generation of the url for the HTTP-Redirect binding using the
	   rencently introduced function
	   lasso_saml20_profile_build_http_redirect.

	SAML 2.0: remove TODO comment about RelayState
	 * lasso/xml/saml-2.0/samlp2_status_response.c: do it:)

	XML SAML2: Remove unnecessary overloading of build_query in request/respons objects
	 * lasso/xml/saml-2.0/samlp2_assertion_id_request.c,
	   lasso/xml/saml-2.0/samlp2_authn_request.c,
	   lasso/xml/saml-2.0/samlp2_logout_request.c,
	   lasso/xml/saml-2.0/samlp2_logout_response.c,
	   lasso/xml/saml-2.0/samlp2_manage_name_id_request.c,
	   lasso/xml/saml-2.0/samlp2_manage_name_id_response.c,
	   lasso/xml/saml-2.0/samlp2_name_id_mapping_request.c,
	   lasso/xml/saml-2.0/samlp2_name_id_mapping_response.c,
	   lasso/xml/saml-2.0/samlp2_response.c,
	   lasso/xml/saml-2.0/samlp2_subject_query_abstract.c: remove useless
	   overloading of build_query virtual method, revert to implementations
	   in LassoSamlp2RequestAbstract and LassoSamlp2StatusResponse.

	XML SAML 2.0: add a build query to request base class
	 * lasso/xml/saml-2.0/samlp2_request_abstract.c: add a build query
	   overloaded function to LassoSamlp2RequestAbstract class, the base
	   class of all saml 2.0 request nodes.

	SAML 2.0: Add helper function to implement the HTTP-Redirect binding
	 * lasso/saml-2.0/profile.c, lasso/saml-2.0/profileprivate.h:
	   - remove_all_signature traverse a tree of LassoNode objects to unset
	     all signature_type field in on nodes supporting signature
	     generation.
	   - lasso_saml20_profile_export_to_query does the job of generateing
	     the url containing the message content and the relaystate, then
	     sign it using lasso_query_sign.
	   - lasso_saml20_profile_build_http_redirect use those two functions
	     and the metadatas to build the signed redirect url.

	XML: Add const modifiers to lasso_concat_url_query arguments
	 * lasso/xml/private.h, lasso/xml/tools.c: add const modifier to
	   lasso_concat_url_query arguments.

	XML: Remove static modifier on lasso_node_build_query
	 * lasso/xml/private.h, lasso/xml/xml.c: remove static modifier to
	   lasso_node_build_query and export it for use in id-ff profiles.

	XML: Tool function to extract relaystate from query
	 * lasso/xml/tools.c, lasso/xml/private.h: new function
	   lasso_get_relaystate_from_query to help in relaystate handling.

	Core: rename lasso_release_xmlchar to lasso_release_xml_string
	 * lasso/id-wsf/wsf_profile.c, lasso/utils.h, lasso/xml/xml.c: rename
	   lasso_release_xmlchar to lasso_release_xml_string.

	Core: Fix double instantiation of macro parameters
	* lasso/utils.h:
	 - (lasso_assign_new_string,lasso_assign_gobject) if source parameter
	   is a function call it could be called two times and have unexpected
	   side effects. Copy the returned value to a temp variable and use it
	   instead.

	Core: Fix corner case in deallocation macros
	 * lasso/utils.h: When setting strings using lasso_assing_string or
	   lasso_assign_new_string, verify that new string is different than the
	   target value string before deallocating the target.

	Add missing intializations
	 * initialize local variables.

	Core: replace direct use of xmlSecSoap function by wrapper
	 * lasso/xml/xml.c:
	   In lasso_node_init_from_message_with_format remove direct use of
	   xmlSecSoap* functions because they emit too much warning by lasso
	   reimplementations.

	Core: remove use of XPath
	 * lasso/xml/xml.c:
	   in lasso_node_new_from_soap, instead of using XPath use function
	   lasso_xml_get_soap_content.

	Core: fix comment for lasso_node_init_from_message
	 * lasso/xml/xml.c:
	   state the return code type.

	Core: remove lasso_node_decrypt implementation
	 * lasso/xml/xml.c:
	   remove code for lasso_node_decrypt.

	Core: make comment agree with the code
	 * lasso/xml/xml.c:
	   change comment about xsi:type handling, we try to honor every
	   xsi:type.

	Core: remove commented code
	 * lasso/xml/xml.c:
	   remove commented code to handle a specific lasso extension.

	Core: use lasso_xml_parse_memory instead of xmlParseDoc
	 * lasso/id-ff/provider.c:
	   use internal wrapper instead of direct call to libxml for parsing.

	Core: move parse xml wrapper from xml.c to tools.c
	 * lasso/xml/xml.c:
	   remove lasso_xml_parse_memory.
	 * lasso/xml/tools.c:
	   add lasso_xml_parse_memory to wrap xmlParseDocument.
	 * lasso/saml-2.0/name_id_management.c:
	   use lasso_xml_parse_memory

2009-03-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	SAML 2.0 NameIDManagement: use new generic methods
	 * lasso/saml-2.0/name_id_management.c:
	   use new generic methods in lasso_name_id_management_init_request,
	   lasso_name_id_management_build_request_msg,
	   lasso_name_id_management_process_request_msg,
	   lasso_name_id_management_validate_request,
	   lasso_name_id_management_build_response_msg,
	   lasso_name_id_management_process_response_msg.
	   Remove useless boilerplate code.

	 * lasso/id-ff/server.c:
	 * lasso/id-ff/serverprivate.h:
	   last user of lasso_server_nameid_decrypt removed, so remove the code.

2009-03-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	SAML 2.0 Logout: use generic methods
	 * lasso/saml-2.0/logout.c:
	   use new generic methods in
	   lasso_saml20_logout_process_request_msg, and
	   lasso_saml20_logout_process_response_msg.

	SAML 2.0 Login: use generic methods
	 * lasso/saml-2.0/login.c:
	   use new generic profile methods for saml 2.0 in
	   lasso_saml20_login_process_paos_response_msg,
	   lasso_saml20_login_process_authn_response_msg,
	   lasso_saml20_login_process_response_status_and_assertion.

	SAML 2.0: add name id include to login.c
	 * lasso/saml-2.0/login.c:
	   add include saml2_name_id.h

	XML SAML 2.0: add a decrypt function to Saml2EncryptedElement
	 * lasso/xml/saml-2.0/saml2_encrypted_element.c:
	   using new function lasso_node_decrypt_xmlnode implement the new
	   method, int lasso_saml2_encrypted_element_decrypt(
	     LassoSaml2EncryptedElement* encrypted_element,
	     xmlSecKey *encryption_private_key, LassoNode **decrypted_node).
	   This function is currently not exported by bindings because of the
	   last ouput argument which is not supported by the binding generator.

	SAML 2.0: replace lasso_node_decrypt by lasso_node_decrypt_xmlnode
	 * lasso/xml/private.h:
	 * lasso/xml/tools.c:
	   replace implementation of lasso_node_decrypt by a new one called
	   lasso_node_decrypt_xmlnode, and use it where old one was used.

	SAML 2.0: reduce code in lasso_assertion_query_process_request
	 * lasso/saml-2.0/assertion_query.c:
	   use new code in SAML 2.0 profile.c to parse requests and decrypt
	   nameid, chains calls so that error are kept but all actions are
	   accomplished anyway (if first call fails, keep the error but continue
	   the processing, then at end return the first returned error).

2009-03-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	SAML 2.0: add internal generic implementation
	 * lasso/saml-2.0/profile.c:
	 * lasso/saml-2.0/profileprivate.h:
	   the current effort is to simplify implementation code in saml-2.0 and
	   much of the other frameworks. Those new methods:
	        lasso_saml20_init_request
	        lasso_saml20_profile_process_name_identifier_decryption
	        lasso_saml20_profile_process_soap_request
	        lasso_saml20_profile_process_soap_response
	        lasso_saml20_profile_process_any_request
	        lasso_saml20_profile_process_any_response
	        lasso_saml20_profile_setup_request_signing
	        lasso_saml20_profile_build_request_msg
	        lasso_saml20_profile_build_response
	        lasso_saml20_profile_init_response
	   should help reduce code in login.c, logout.c, name_id_management.c
	   and assertion_query.c. They should also permit to make all profiles
	   at the same level of binding support
	   (GET,REDIRECT,POST,ARTIFACT_GET,ARTIFACT_POST).

	   Those function centralize error code handling, initialization of
	   commong class (LassoSamlp2StatusResponse and
	   LassoSamlp2RequestAbstract) and also the handling of NameID
	   decryption.

2009-03-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Core: add new internal macro lasso_extract_node_or_fail
	 * lasso/utils.h:
	   this new macro try to extract a field from a structre (or any
	   left-hand-side value), try to typecheck it using 'LASSO_IS_XXX',
	   if succesfull, the value is assigned to the variable given as first
	   argument or we jump to the 'cleanup' goto label, setting the 4th
	   argument as the current error code (value of variable 'rc').

	ID-WSF 2.0: make it work with --enabe-debugging
	 * lasso/id-wsf-2.0/data_service.c:
	 * lasso/id-wsf-2.0/discovery.c:
	 * lasso/id-wsf-2.0/profile.c:
	 * lasso/id-wsf/data_service.c:
	 * lasso/id-wsf/discovery.c:
	 * lasso/id-wsf/wsf_profile.c:
	   when --enable-debugging is activated much more type checking is done
	   by internal macros, and code do not pass compile anymore.
	 * bindings/python/tests/idwsf2_tests.py: nameIdentifier packing in SOAP
	   ID-WSF calls headers is no longer supported, do not test it.

	Core: add argument checking to lasso_server_get_provider
	 * lasso/id-ff/server.c:
	   In lasso_server_get_provider, return NULL if provider server is not
	   one, provider is null or 0-length.

	Core: add new internal API lasso_provider_verify_query_signature
	 * lasso/id-ff/provider.c:
	   try to keep some homgeneity between lasso_verify_signature and
	   lasso_verify_query_signature functions, by having mirror methods
	   inside the LassoProvider class. this new methods comes with complete
	   documentation.
	 * lasso/xml/tools.c:
	   add a xmlDoc argument to lasso_verify_signature, in order to
	   reuse an already built message context, and possible problems with
	   interned string in parsed xml documents.

	Core: add xmlDoc parameter to lasso_provider_verify_saml_signature
	 * lasso/id-ff/provider.c:
	   add an xmlDoc parameter to lasso_provider_verify_saml_signature,
	   reflecting change in lasso_verify_signature.
	   fix memory leaks of an xmlSecKeysMngr.
	   complete arguments checking.
	 * lasso/id-ff/login.c:
	   update use of lasso_provider_verify_signature in LassoLogin

	Core: add a terminating value to enum LassoHttpMethod
	 * lasso/id-ff/provider.h:
	   add LASSO_HTTP_METHOD_LAST to enum LassoHttpMethod.

	ID-FF 1.2: rework lasso_login_process_status_and_assertion
	 * lasso/id-ff/login.c:
	   reword lasso_login_process_status_and_assertion,
	   remove wrong NameID decryption code (it cannot work),
	   adapt to new signature of lasso_provider_verify_saml_signature,

	Core: new init method with format limit and xmlDoc output argument
	 * lasso/xml/private.h:
	 * lasso/xml/xml.c:
	   lasso_node_init_from_message_with_format permit to initialize a node
	   and to keep the corresponding xml document, in order for example to
	   validate a signature.
	 * lasso/xml/tools.c:
	   lasso_xml_parse_message is able to parse a message of any type, or of
	   a given type. If a message of another than the one specified is
	   found, the call fails, and a LASSO_MESSAGE_FORMAT_ERROR is returned.

	Core: add function to extract SOAP message content
	 * lasso/xml/tools.c:
	   add lasso_xml_is_soap, to verify that a message is SOAP.
	   add lasso_xml_get_soap_content, to retrieve the first child of the
	   SOAP body, whatever the SOAP content version.

	SAML 2.0: API for Saml2EncryptedElement decrypt
	 * lasso/xml/xml_enc.h:
	   remove old functions
	 * lasso/xml/private.h:
	   remove lasso_node_(de/en)crypt from public headers API, they were not
	   exported anyway. move them to internal header.
	 * lasso/xml/saml-2.0/saml2_encrypted_element.{c,h}:
	   add a new decrypt function to convert a EncryptedElement to the
	   contained encrypted node objects.
	 * bindings/overrrides.xml:
	   do not export the new method, wait for implementation of output
	   arguments.
	 * lasso/id-ff/server.c:
	   remove lasso_decrypt_nameid from lasso/id-ff/server.c

	Bindings php5: add support for xmlNode arguments
	 * bindings/php5/php_code.py:
	 * bindings/php5/wrapper_source.py:
	   complete error reporting about on documentation treatment.
	   treat xmlNode* arguments (convert string to xmlNode, give as
	   argument, then frees it).

	Bindings: fix documentation parsing
	 * bindings/bindings.py:
	   fix regex to match documentation (remove condition terminating on
	   '**/')
	   print error messages to stderr.
	 * bindings/java/lang.py: remove commented debugging code

	Docs: add declaration of missing LassoNode public methods
	 * docs/reference/lasso-sections.txt:
	   add missing lasso_node_*() functions.

	Docs: fix doc on Attribute related classes
	 * xml/saml-2.0/saml2_attribute_value.c:
	 * xml/saml-2.0/samlp2_extensions.c:
	 * xml/saml_attribute_value.c:
	   add documentation about the special way of setting those classes
	   content, that is using lasso_node_set_original_xmlnode.
	 * docs/reference/lasso-sections.txt:
	 * docs/reference/lasso.sgml:
	   add missing declarations for documentation of LassoSamlAttribute,
	   LassoSamlAttributeValue, LassoSamlAttributeDesignator,
	   LassoSamlStatement and LassoSaml2AttributeValue.

	Fix bug #94: permit any content for AttributeValue
	 * lasso/xml/private.h:
	 * lasso/xml/xml.h
	 * lassoi/xml/xml.c:
	   add an implementation helper for the AttributeValue objects
	   implementation of get_xmlNode.
	   make lasso_node_set_original_xmlnode public API.
	 * lasso/xml/saml-2.0/samlp2_extensions.c:
	 * lasso/xml/saml-2.0/saml2_attribute_value.c:
	 * lasso/xml/saml_attribute_value.c:
	   implement get_xmlNode for the AttributeValue and Extensions objects.
	   If the any field is empty, use the original_xmlnode value.  In order
	   to support free-style content, you must use the method
	   lasso_node_set_original_xmlnode, properties and children are
	   extracted from the given node and added to the node created by the
	   generic get_xmlNode virtual method.

	XML Core: add new snippet type SNIPPET_KEEP_XMLNODE
	 * private.h:
	   add the new constant to the enum type
	 * xml.c:
	   fix lasso_node_traversal, add support for the new contanst in
	   lasso_node_imp_init_from_xmlNode.

	Core: add error codes, fix error strings
	 * lasso/errors.c, lasso/errors.h:
	   remove useless error code LASSO_SERVER_ERROR_INVALID_XML,
	   fix string for LASSO_PROFILE_ERROR_INVALID_ISSUER,
	   add errors codes LASSO_PROFILE_ERROR_CANNOT_VERIFY_SIGNATURE,
	   LASSO_PROFILE_ERROR_CANNOT_FIND_A_PROVIDER and
	   LASSO_PROVIDER_ERROR_MISSING_PUBLIC_KEY.

	Makefile: missing dependencies for built sources
	 * lasso/Makefile.am:
	   remove .PHONY declaration on built sources and set appropriate
	   dependencies.
	 * lasso/extract_types.py: with new dependencies well defined in
	   Makefile no need to verify change in the content of the file, just
	   overwrite it.

	Core: Fix argument checking in init_from_xml
	 * lasso/xml/xml.c:
	   In lasso_node_impl_init_from_xml if xmlnode is null, return an error
	   but if no node_data specification is present, do not fail but print a
	   warning. It is not an error for a class to not have a node_data
	   private field.
	   add a comment to fix return code later.

	Core: handle g_io_channel creation failure
	 * lasso/xml/tools.c:
	   in lasso_load_certs_from_pem_certs_chain_file if
	   g_io_channel_new_file fails return NULL and print a warning.
	   If path is NULL or 0-length also returns NULL.

	Core: do not mix public and private headers
	 * lots of files:
	   explicitely load the internal header xml/private.h where needed.

2009-03-23  Frederic Peters  <fpeters@entrouvert.com>

	tentative NEWS file

2009-03-09  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Doc: Update index sgml file to cope with gtkdoc 1.11
	 * docs/references/lasso.sgml:
	   change entity path for LassoSamlp2AssertionIDRequest.

	SAML 2.0: Fix #90, simplify NameID decryption for NameIdManagement
	 * lasso/saml-2.0/name_id_management.c:
	   (lasso_saml2_name_id_management_process_request)
	   simplify code, remove explicit decryption of nameid and handling of
	   error cases, delegate to lasso_decrypt_nameid (from xml/tools.c).

	Core: add a method to decrypt nameid, handling error cases
	 * lasso/id-dff/serverprivate.h:
	 * lasso/id-ff/server.c:
	   lasso_server_decrypt_nameid handle error case of NameID decryption,
	   and update passed field pointers.
	 * lasso/errors.h:
	   add new error codes:
	   LASSO_DS_ERROR_DECRYPTION_FAILED -118
	    -  Decryption of an encrypted node failed
	   LASSO_PROFILE_ERROR_MISSING_SERVER -438
	    - No server object set in the profile

	XML SAML 1.0: fix bug 85
	 * lasso/xml/lib_logout_request.c: do not break parsing when
	   NameIdentifier->Format attribute is NULL.

2009-03-03  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	SAML 2.0: remove NotBefore attribute when not answering an AuthnRequest
	 * lasso/saml-2.0/login.c:
	   In specification saml-profile-2.0-os.pdf, in paragraph 4.1.4.3, it is
	   said that the SubjectConfirmationData node MUST NOT contain a
	   NotBefore attribute if it contains an InReponseTo attribute,
	   understanding that the response cannot (it the ID of the request is
	   sufficiently random) arrive before the request and be valid with
	   respect to the InResponseTo attribute.

	Test: Add test for testing new InResponseTo checking code
	 * tests/login_tests.c:
	   after first test of parsing the soap response message in the login
	   test, try to parse it a second time, after modifying the InResponseTo
	   id of the assertion and disabling signature checking.

	ID-FF 1.2 & SAML 2.0: fix "fix bug 173" match assertion and not the response with authn request id
	 * lasso/id-ff/login.c:
	 * lasso/saml-2.0/login.c:
	   Serialize/Unserialize request_id private field in LassoLogin dumps.
	   Match InResponseTo assertion attribute (ID-FF 1.2) or
	   SubjectConfirmationData attribute (SAML 2.0) to original request id
	   if it is present.

	Core: rename LOGIN_ERROR_REFER_TO_UNKNOWN_REQUEST
	 * lasso/errors.h:
	 * lasso/errors.c:
	   rename LASSO_LOGIN_ERROR_REFER_TO_UNKNOWN_REQUEST to
	   LASSO_LOGIN_ERROR_ASSERTION_DOES_NOT_MATCH_REQUEST_ID.

	Core: fix handling of xsi:type
	 * lasso/xml/xml.c:
	   xsi:type handling is broken since commit 3982, restore it.
	   move prefix/nodename matching in static helper functions, and reuse
	   them inside xsi:type code path.

	Core: enforce flag verify-signature in function lasso_verify_signature
	 * lasso/xml/tools.c: in lasso_verify_signature always return success if
	   lasso_flag_verify_signature is FALSE.
	 * lasso/xml/private.h: change return type to int.

2009-03-02  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Fix BSD compatibility bug in configure.ac
	 * configure.ac: remove GNUism, use -eq and = instead of == with test
	   tool. (Patch from Emmanuel Dreyfus)

2009-02-17  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	ID-FF 1.2 & SAML 2.0: Fix #173, check InReponseTo in authn responses
	 * id-ff/login.h:
	   add a string field named request_id in the private part of LassoLogin
	   to store request id from the original AuthnRequest.
	 * id-ff/login.c:
	   if request_id field is not null check the InResponseTo attribute of
	   the samlp:Response.
	 * saml-2.0/login.c:
	   if request_id field is not null check the InResponseTo attribute of
	   the samlp:Response.

2009-02-06  Damien Laniel  <dlaniel@entrouvert.com>

	fixed binding generation

	removed trailing whitespace

2009-02-05  Damien Laniel  <dlaniel@entrouvert.com>

	fixed parsing of OFTYPE

2009-01-26  Damien Laniel  <dlaniel@entrouvert.com>

	added all string constants to the API doc

	reorganised string constants definitions

	added an index to quickly find symbols

	fixed some functions name

	documentation-related fixes

	added documentation for id-wsf 2.0 functions

	added lasso_data_service_new_full and removed lasso_idwsf2_discovery_destroy in api doc

2009-01-24  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Core: if OFTYPE is already defined, skip

	Core: add decorator on GList return value in LassoSession header
	* lasso/id-ff/session.h: add the OFTYPE decorator to the return type of
	  lasso_session_get_assertions.

	Java: add assertions
	* bindings/java/tests/LoginTest.java: add assertion for the return code
	  of lasso_logout_process_request_msg.

	ID-FF 1.2: review of logout validate request
	 * lasso/id-ff/logout.c (lasso_logout_validate_request): use new macros.

	ID-FF 1.2: review logout_process_request_msg
	 * lasso/id-ff/logout.c (lasso_logout_process_request_msg): use the
	   new allocation macros, add checking of the parsed object type, add
	   validation of some schema constraints before processing, like
	   presence of the name identifier.

	Core: make caller owner of the list, fix refcount leak

	Autoconf: new macro AS_COMPILER_FLAGS to check flag support
	 * macros/as-compiler-flags.m4 configure.ac: add a new files of autoconf macro
	   to check support of warning flags, add needed line in configure.ac to define
	   variable WARNING_FLAGS, containing only supported flags.

	Core: replace manual reference handling with macros
	 - lasso/xml/disco_insert_entry.c (lasso_disco_insert_entry_new) :
	   replace manual g_object_ref with assignment macro.

	Core: replace manual handling of references with macros
	 - lasso/xml/disco_resource_offering.c (lasso_disco_resource_offering_new)
	    replace manual g_object_ref with assignment macro.

	Core: synchronize lasso_verify_signature with new macros

	Core: add new error code to lasso_node_init_from_message
	 - add new return code LASSO_MESSAGE_FORMAT_XSCHEMA_ERROR
	 - fix SOAP_FORMAT bizarre if conditional
	 - remove old comments

	Core: review of lasso_node_encrypt
	 - use new memory macros
	 - copying nodes instead of stealing nodes

	ID-FF 1.2: fix leak of instance object

	Core: add a new messsage format error for XSchema constraint failure

	ID-FF 1.2: review logout_validate_request
	 * lasso/id-ff/logout.c (lasso_logout_validate_request):
	  - when signature verification failed in process_request_msg,
	    do not continue validation of the request, stop immediately and
	    return the signature status code.
	  - use utils.h macro for memory allocation handling. Fix potential leak
	    of the profile->response object.

	ID-FF 1.2: validate signatures on responses during the BRWS/Artifact profile
	- lasso/id-ff/login.c:
	  - the lasso_login_process_response_msg is used to process SOAP response
	    to artifact resolution requests. The answer contains an samlp:Response
	    that can be signed, and each contained assertion MUST be individually
	    signed.
	- lasso/xml/samlp_response.c:
	 - set keep_xmlnode flag on the class metadatas to help in signature
	   validations.

	ID-FF 1.2: add validation of assertion signatures
	 - lasso/id-ff/login.c:
	  - lasso_login_process_response_status_and_assertion:
	   - if signature_status is not 0 and an assertion is present, we
	     validate the signature on this assertion using the
	     internal API lasso_provider_verify_saml_signature.

	Core: add error code LOGIN_ERROR_REFER_TO_UNKNOWN_REQUEST
	* lasso/errors.h, lasso/errors.c:
	  - LASSO_LOGIN_ERROR_REFER_TO_UNKNOWN_REQUEST is raised when a
	    samlp:Response contains an attribute inResponseTo when when no
	    previous request can be found inside the LassoLogin object or if the
	    given ID is not the as the one fome the previous request.

	ID-FF 1.2: fix signature validation in login_process_authn_response_msg
	* lasso/id-ff/login.c:
	  when signature validation fails on a message, then return the
	  signature status as return code. There is a security fix.

	XML: new LassoProvider API to verify XMLDsig signatures
	* lasso/id-ff/provider.c, lasso/id-ff/providerprivate.h:
	  - (lasso_provider_verify_saml_signature) validate a signed
	    saml Request, Response or Assertion, using the public key
	    of the given provider.

	XML: Make LassoSamlAssertion keep its XML form when created by parsing
	* lasso/xml/saml_assertion.c: set the keep_original flag of class
	  LassoSamlAssertion to true, to keep a copy of the original libxml tree
	  used to initialize eache instance of this object.  We will use it to
	  validate signature on assertions.

	XML: Add internal API to validate XMLDsig signatures
	* lasso/xml/tools.c:
	  - lasso_saml_constrain_dsigctxt() add constraints following SAML
	    specifications on XMLDsig signatures to an libxmlsec DSig context.
	  - lasso_verify_signature() this function given an xmlNode and a key or
	    a keys manager (for a set of AC or AC chains) validate the
	    envelopped signature set upon this node. It can be instructed to
	    follow constraints of the SAML 1.0 specification.

	Core: add new error codes
	* lasso/errors.h: add error codes for,
	  - out of memory situation,
	  - excess of references during validation of signature on SAML
	    protocols message or assertions,
	  - an invalid reference during validation of signatures on SAML
	    protocols message or assertions,
	  - an mismatch between requested assertion issuer and received
	    assertion issuer.

	Autoconf: redirect shell warning in one of configure.ac tests
	 - configure.ac: when testing if bindings have been already generated
	   with differents settings do not let grep emit warnings.

	All: Fix missing field initializer problems
	* lots of files: Explicitely set all field of initialized structures,
	  in order to remove -Wno-missing-field-initilizers from needed
	  compiler options when using -Wall -Wextra.

	Core: add macros to assign list of things, rename xmlNode related macros
	* lasso/utils.h: added new macros, renamed others:
	  - macros handling xmlNode are renamed from _node to _xml_node,
	  - new macros for assign GList* of specific objects:
	    - lasso_assign_list_of_gobjects,
	    - lasso_assign_list_of_strings,
	    - lasso_assign_new_list_of_gobjects,
	  - macros for assigning xmlChar string (we need a specific macros
	    because, we must use xmlFree to release the destination string),
	  - macros to add string without duping: lasso_list_add_xml_string,
	  - macros to add anything non-null (no type cast):
	    lasso_list_add_non_null.

	Core: add references handling macros
	* lasso/utils.h:
	  - add macro lasso_transfer_string and lasso_transfer_gobject,
	    to transfer ownership of such objects without copying or
	    their changing reference count. The old containing variable is
	    NULLed.
	  - lasso_list_add_gobject,lasso_list_add_new_gobject: test if the added
	    object is a GObject, if not do not add it and print a warning.
	  - lasso_check_type_equality: this macro use special builtin functions
	    only with GCC (typeof and __builtin_types_compatible_p) and do
	    metaprogramming using anonymous enumeration type to make compile
	    time assertions. It is used
	 -  add macros to release XPathObject XPathContext, macro constructor to
	    make reference transfert macros (free dest, nullify dest, copy src
	    to dest without increasing refcount, nullify src), add a macro to
	    transfert xpath objects.

	Core: new goto_exit macro which produces warnings
	* lasso/utils.h:
	  similar macro to goto_exit_if_fail but also produce a printed warning.

	Core: new macros for adding string to GList
	* lasso/utils.h:
	  - lasso_list_add_string, add a copy of a string to a GList

	Core: Remove unused macro lasso_warn_deprecated
	* lasso/utils.h: remove macros lasso_warn_deprecated, use GCC
	  attributes and gtkdoc markers instead.

2009-01-22  Damien Laniel  <dlaniel@entrouvert.com>

	added documentation sections for ID-WSF 2.0 Discovery and DataService

	removed unused destroy functions (only defined in .c or .h files)

2009-01-13  Jean-Marc Liger  <jean-marc.liger@siris.sorbonne.fr>

	Fedora/Redhat spec file

2008-12-18  Frederic Peters  <fpeters@entrouvert.com>

	correctly check for successful return of DSA_verify

2008-12-16  Damien Laniel  <dlaniel@entrouvert.com>

	check in lasso_name_id_management_init_request if HTTP method is supported

2008-12-12  Damien Laniel  <dlaniel@entrouvert.com>

	fixed fault code and use a more precise fault string

	if no identity is found while building disco response, create a soap fault response

2008-12-01  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Use assignment macros in id-wsf 2.0 module
	 * lasso/id-wsf-2.0/data_service.c, lasso/id-wsf-2.0/discovery.c,
	   lasso/id-wsf-2.0/profile.c: use assignment macros to maintain proper
	   reference counting and ownership of object field values.

2008-11-28  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Fix lasso.pc.in Cflags field
	 * lasso.pc.in: cflags must contain include directory

2008-11-26  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Add errors.h.in to EXTRA_DIST
	 * lasso/Makefile.am: errors.h.in must be distributed.

2008-11-20  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Add me.

2008-11-19  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Fix refcounting error in SoapEnvelope class
	 - lasso/xml/soap_envelope.c (lasso_soap_envelope_new): fix forgotten
	   reference count increase when assigning the body.

2008-11-14  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Fix uninitialized local variable
	 - bindings/java/wrapper_top.c: (gobject_to_jobject_and_ref) initialize
	   local variable.

2008-11-10  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Add support to in memory private key to lasso_query_sign
	 - lasso/xml/tools.c: use BIO_new_mem_buf instead of BIO_new_file
	   if private_key is not an existing file.

2008-11-06  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Add missing intialization
	 - lasso/id-ff/provider.c,lasso/id-ff/server.c: add missing initialization
	   of return code variable.

2008-11-05  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Fix missing include

	Add log message in the metadata loading process
	 - lasso/id-ff/provider.c, lasso/saml-2.0/provider.c: add critical log
	   message in each failed loading of metadatas branch cases.

	Add new internal function to show safe extracts
	 - lasso/utils.c, lasso/utils.h:
	   New internal api lasso_safe_prefix_string that can show any string
	   taking care of escaping newlines,tabs and non-graphical ou non-ASCII
	   characters.

	Fix uninitialized return code
	Thanks Emmanuel Dreyfus

2008-11-04  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Fix overwriting of attributes ht by node lists
	 - lasso/xml/xml.c:
	   - In lasso_node_impl_init_from_xml fix really old bug seen when
	     running ID-WSF 2 python tests, when looking for snippet_any
	     field in the GObject we should not take the any attribute field,
	     otherwise the field value is gonna be overwritten with new GList
	     nodes. The problem ca be seen only with classes using the two kind
	     of snippets (ANY nodes and ANY attributs).

	Change style of error and dellocation handling
	 - lasso/id-ff/provider.c:
	   - in lasso_provider_verify_signature use standardised memory and
	     error handling macros, and also standard return code variable name
	     and exit label.
	   - in lasso_providerl_load_metadata_from_buffer and
	     lasso_provider_load_metadata use the standardised macros, exit
	     labels and return code variable.
	 - lasso/id-ff/server.c:
	   - in lasso_server_load_affiliation use standardised allocation and
	     error handling macros.
	 - lasso/id-wsf/wsf_profile.c:
	   - use standardised memory and error handling macros in
	     lasso_wsf_profile_build_soap_request_msg.

	Move xmlDoc release after xmlFreeXPath*
	 - lasso/xml/xml.c:
	   - in lasso_node_new_from_soap release xmlDoc (and the contained
	     nodes) after the XPath objects that can reference them.

	Remove use of xmlFreeDoc for lasso_release_doc
	  - bindings/java/wrapper_top.c, bindings/php4/lasso_php4_helper.c,
	    bindings/php5/wrapper_source_top.c, bindings/python/wrapper_top.c,
	    lasso/id-ff/identity.c, lasso/id-ff/lecp.c, lasso/id-ff/login.c,
	    lasso/id-ff/logout.c, lasso/id-ff/name_registration.c,
	    lasso/id-ff/profile.c, lasso/id-ff/provider.c, lasso/id-ff/server.c,
	    lasso/id-ff/session.c, lasso/id-wsf-2.0/data_service.c,
	    lasso/id-wsf/data_service.c, lasso/id-wsf/discovery.c,
	    lasso/id-wsf/wsf_profile.c, lasso/saml-2.0/ecp.c,
	    lasso/saml-2.0/login.c, lasso/saml-2.0/name_id_management.c,
	    lasso/utils.h, lasso/xml/tools.c, lasso/xml/xml.c, swig/Lasso.i:
	    Remove use of xmlFreeDoc. Use lasso_release_doc instead.

	Clean generated files in bindings
	  * bindings/java/Makefile.am:
	  * bindings/php5/Makefile.am:
	  * bindings/python/Makefile.am:
	   - reformat value and add generated files to the MOSTLYCLEANFILES
	     variable

	Add new utils macros
	 - lasso/utils.h:
	   - add goto_exit_with_rc a standardized macro that suppose having an
	     'int rc' variable and an exit label in the current function.
	   - add lasso_release_output_buffer macro

	Fix lasso_assign_node: wrong xmlFreeNodeList
	  * lasso/utils.h:
	   - (lasso_assign_node) This macro wrongly assumes that the destroy
	     function for xmlNode is xmlFreeNodeList but it's xmlFreeNode.
	     xmlFreeNodeList is for xmlNode list of children.

2008-11-03  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Restore ABI compatibility wrt original_xmlNode
	 * lasso/xml/xml.c:
	  - use set/get_qdata to store the original xmlnode, modify
	    init_from_xml and dispose function to cope with this new storage
	    place.
	 * lasso/xml/xml.h:
	  - remove field original_xmlNode from structure LassoNode to keep ABI
	    compatibility with previous versions.
	  - declare new API lasso_node_get_original_xmlnode

	API to cleanup LassoNode tree of keeped xmlNode
	 * lasso/xml/xml.c:
	  - add a new function lasso_node_cleanup_original_xmlnodes to
	    disallocate all keeped xmlNode inside a tree of LassoNodes.
	  - add internal function lasso_node_traversal to iterate across a
	    LassoNode tree (could be used to reimplement lasso_node_destroy)
	    It is a preorder traversal.

	Add support for keep_xmlnode flag
	 * lasso/xml/xml.c:
	   - (lasso_node_impl_init_from_xml) When the keep_xmlnode flag is true
	     for the currently parsed Node class, we copy the parsed xmlNode
	     and keep inside the LassoNode.
	   - (lasso_node_dispose) if an original_xmlNode is present, we disallocate
	     it.

	Add original_xmlNode pointer to LassoNode
	 * lasso/xml/xml.h: add an xmlNode field to base class LassoNode,
	   to permit retrieving the xmlNode originally parsed when the structure
	   is the result of parsing. Will be used by signature checking code.

	Add keep_xmlnode field to LassoNodeClassData
	 * lasso/xml/private.h: add a boolean flag named keep_xmlnode to
	   base class structure LassoNodeClassData.

2008-11-02  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Add test case for loading server completely from memory
	* tests/login_test.c:
	  - add generateIdentityProviderContextDumpMemory that first load
	    metadata, private_key and certificate file using g_file_get_contents
	    then use the created buffers to initialize a LassoServer object.
	  - add test03_serviceProviderLogin that use the new function.

	LassoServer init_from_xml/new_from_buffer handling
	* lasso/id-ff/server.c: (init_from_xml) if load_metadata fail
	  try load_metadata_from_buffer instead using the content of the dumped
	  nodes.

	Add new constructor lasso_server_new_from_buffers
	 * lasso/id-ff/server.c, lasso/id-ff/server.h: add new function to build
	   a LassoServer object holding content of certificate and private key
	   files intead of loading them everytime signing is needed. You must
	   instead load them yourself the first time.

	Export lasso_provider_load_metadata_from_buffer
	* lasso/id-ff/providerprivate.h: add declaration for private function
	  lasso_provider_load_metadata_from_buffer

	Add verification of access before calling libxml loading function
	* lasso/id-ff/provider.c: (lasso_provider_load_metadata) libxml emit warning
	  when trying to parse non-existing or non-accessible file, so verify
	  that the file is accessible before calling libxml. (the corner
	  case of having warning when the file become inaccessible between
	  the two calls is non-interesting)

	First try accessing the file before calling key loading functions
	* lasso/xml/tools.c: (lasso_sign_node) instead of waiting
	  for the xmlsec key loading function to fail before trying to load
	  the key directly from the private_key buffer, test it using
	  POSIX function.

	Add possibility to sign using preloaded keys
	* lasso/xml/tools.c:
	 - (lasso_sign_node) if loading of the private_key or the certificate
	   file we try to use the filename directly as a key in the PEM format.

2008-10-22  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Add missing initializations.

2008-10-16  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Add substitute code for g_strcmp0

2008-10-13  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Integrate modification from Olav Morken <olavmo@stud.ntnu.no>
	It fixes bad url encoding of relaystates for logout
	profile. A better fix for all profiles is coming.

	add files to nodist_HEADERS to pass distcheck

2008-10-01  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	add functionality to enable debugging flags at runtime
	This code permit to set flags, separated by commas, space,
	tabulations, or colons. This flags activates debug functions like,
	suppressing validations of signatures or print debugging message about
	deallocations.

	The new flags are defined in /lasso/debug.h they can be set using an
	environment variable named LASSO_FLAG or a function named
	lasso_set_flag.

	There are two flags currently:
	- verify-signature:
	  To deactivate it, pass 'no-verify-signature' inside LASSO_DEBUG.
	  It desactivate signature verification, inside two functions:
	  lasso_query_verify_signature and lasso_provider_verify_signature.
	- memory-debug:
	  It enabled reporting of memory deallocation inside generic memory
	  dellaocator for LassoNode objects and also in bindings.

	- lasso/xml/xml.c: do not free a null hash table pointer.

2008-10-01  Damien Laniel  <dlaniel@entrouvert.com>

	cleaned up some code

	fixed docstrings ; added an exported function ; reorganised functions in file

	fixed segfaults

	fixed xml indentation

2008-09-23  Damien Laniel  <dlaniel@entrouvert.com>

	If ProviderID isn't found in an AuthnResponse, immediately return a critical error

2008-09-23  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Many fix to compile with --enable-wsf and --enable-debugging and also to remove valgrind errors through python tests.
	1. Rename lasso_wsf_profile_new_full for java bindings (cannot subclass
	   in overrides of static methods).
	2. Add const modifiers to many functon signatures in
	   bindings/python/wrapper_top.c.
	3. add initialisation of private_data->encryption_sym_key_type (to
	   please valgrind) in instance_init of LassoProvider.
	4. Add new macro to assign xmlNode, we consider xmlNode to be an
	   immutable value, and always use xmlCopyNode for assignment. The
	   macros is called named lasso_assign_node.
	5. Fix segfault, when using xmlSec to encrypt the newly created
	   encrypted node replace the original node inside the xmlDoc structure,
	   and the original node is freed automatically. So you cannot borrow
	   the encrypted if you do not remove it from xmlDoc first.

2008-09-17  Damien Laniel  <dlaniel@entrouvert.com>

	free xmlDoc only once

	fixed docstring

	php: added a root class to define generic getter and setter

	fixed docstrings which fucked php5 binding

2008-09-16  Damien Laniel  <dlaniel@entrouvert.com>

	fixed various bugs with new compilation flags

	enable optimisation flag when not debugging

2008-09-12  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	* Remove ending blanks

	* Reset CFLAGS when --enable-debugging is used (remove -g -O2 value setted by AC_PROG_CC). * Show AM_CFLAGS + CFLAGS in resume when configure finish.

	* When --enable-debugging is used, add -Wno-xxx options to AM_CFLAGS so that   bindings compile with -Werror (-Werror is activated by --enable-debugging now)

	* Add G_GNUC_UNUSED for unused parameter we can't remove (python wrappers).

	* Add options when DEBUGGING is activated, i.e. to permit compiling when -Werror is used. It removes   some of the warning for code we do not control.

	* Select bindings in bindings/Makefile not in bindings/*/Makefile.

	* Remove warnings:  - remove unused parameter from private function signatures  - remove unused variable  - initialize variable potentially accessed uninitialized  - add G_GNUC_UNUSED if function is public or adhering to an interface, and a    parameter is unused.  - if ID-WSF is not compiled in, define stubs with G_GNUC_UNUSED on parameters.  The goal is to compile with -Werror.

	* Add setting of AM_CFLAGS when --enable-debugging is used * Export the AM_CFLAGS variable * Create a conditionnal for automake named DEBUGGING * Show CFLAGS in resume of configuration option

	* Add support of lasso_registry to lasso_node_new_from_xmlNode. * Add full support for xsi:type, with lookup of the QName namespace, will only   work if lib: namespace is correctly declared in the dumped XML fragment. * Add a test for the new functionnality in lasso_node_new_from_xmlNode.

2008-09-04  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Add a new error code, with the REGISTRY prefix and use it in registry function returning an error code. Fix a typo when retrieving a quark string in the registry modulke. Improve tests for functional mapping.

	Fix regression when loading a LassoServer from dump. Fix an error with -rpath setting in last commit, -rpath must always be absolute paths.

2008-09-03  Damien Laniel  <dlaniel@entrouvert.com>

	don't put registry functions in the bindings

2008-08-26  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Add -rpath to LDFLAGS variable to use the builded lasso and not the local one.

	Add functional mappings and test code that goest with it.

	Add namespace for federation XML object

	Add test of the two public registry functions, lasso_registry_default_add_mapping, lasso_registry_default_get_mapping.

	Add new module lasso_registry, to handle mapping from XML tag to GObject classes.

	Fix changed name of g_assign_string in wsf_profile.c

	Add public function lasso_server_add_provider_from_buffer, to add a provider from an XML string of the metadatas (changed semantic of the second argument compared to lasso_server_add_provider). To support this a new public LassoProvider constructor was added: lasso_provider_new_from_buffer, where the second argument is an XML string. It uses a new private function, lasso_provider_load_metadata_from_buffer.

	Add documentation to lasso_server_add_service_from_dump.

	Complete documentation of lasso_server_add_service.

2008-08-07  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Move soap_binding files from lasso/id-wsf to lasso/xml.

2008-08-05  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Add bindings/javaj/__init__.py to EXTRA_DIST

	Lookup wrapper_{top,bottom}.c files in the src_dir, useful for VPATH build (i.e. distcheck). Add top_srcdir/binings to python syspath.

	$< is already translated to the VPATH in pattern rules, no need to prefix with $(srcdir). Reflect this in the rule that creates variations of svg files for the documentation.

	* Fix blanks mismatch (space in *.c and *h files or tabs in *.py files) and formatting

	* fix typo with g_hash_table_remove_all * remove unused variable * add GNUC_UNUSED to static functions to pass -Werror

	add an __init__.py to make the java subdirectory a python module

	exemple of usage of the macro OFTYPE

	new empty macro OFTYPE(x) to specify type of GList containers

	add moved files to EXTRA_DIST

	change dependency with respect to moved files, add moved files to EXTRA_DIST

	use new util function to throw exceptions

	add moved files to EXTRA_DIST

	add TODOs for parsing OFTYPE in other positions

	Remove moved files from EXTRA_DIST

	Move all files related to java into the java subdirectory

	Add a module init file to python directory.

	Move all files related to the php5 binding inside the php5 subdirectory.

	Move all python binding related files inside the python subdirectory

	* Fix typo

	 * add missing lasso_release_list, add lasso_release_list_of_full, reimplement lasso_release_list_of_* using _full

	* removed unused variables, and change FIXME comment.

	* add include of utils.h

	* remove code to add credentials, it is actually useless.

	* remove useless code

	* add Deprecated marker to documentation.

	* Fix potential memory leaks * id-wsf/wsf_profile.c: add error code path in   lasso_wsf_profile_build_soap_request_msg for unsupported   security mechanisms.

	add macros to release xmlSec context objects

	add lasso_release_full to construct other lasso_release_ functions, use it in old definitions

	rename g_unlink_and_release_node to lasso_unlink_and_release_node

	Add a macro to emit a «Function is deprecated» warning

	 change last g_* macros to lasso_ prefix

	* change g_list_add* to lasso_list_add*

	 change g_assign_* to lasso_assgin_* and g_release_* to lasso_release_*

	* remove blanks (review by F. Peters)

	* fix documentation (review by F. Peters)

	* bindings/python/tests/Makefile.am: make running of iwsf{1,2}_tests.py conditioned upon --enable-wsf flag of ./configure script

	* fix change in SamlAdvice ABI

	* lasso/id-wsf/data_service.c: fix my own memleak inside build_modify_response_msg

2008-08-01  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	polish code in lasso_discovery_build_credential

	 add macro to assign gobject field, first a simple version

	 beginning of a pool of macros for mem handling, affectation to fields, etc..

	 * remove body->id and correlation->id setup, no need to set id on everything.

	* add detail node to node with specialised detection in lass_node_new_from_xmlNode

	* specialise lasso_node_new_from_xmlNode for soap:detail node

	remove useless overriding

	Match is:RedirectRequest and set msg_url to the url to redirect to

	do not use normal add_assertion method when reconstructing a session, no need to add Advice to assertion_by_id container

	Fix wrong node name in SOAP fault

	Fix bad SNIPPET_TYPE for attribute maxInteractionTime, it was treated as a string, and provoked a SEGFAULT.

	* lasso/xml/xml.c: add support for dgme:Status node.

	* lasso/xml/xml.c: in samlNs, compare prefix *AND* href fields of the namespace object

	copy node instead of stealing it to xmlDoc object, when parsing session dump if no children is present try to get a base64 encoded assertion.

	add assertion_id to TokenSecurityReference

	* lasso/id-ff/session.c: fix compilation errors.

	* lasso/id-ff/session.c: store ID-WSF assertion in base64 to fix problem of   formatting of session dumps.

	* lasso/id-wsf/wsf_profile.c:  - change return code variable from 'ret' to 'rc' to permit use of    standardised macros like goto_exit_if_fail.  - add initialization to NULL of lot of variables, to enable error return    paths.  - adapt to change bo soap:Body id field to its new name 'Id'  - fix numerous mem leaks by using assignment macros (g_assign_gobject,    g_list_add_gobject) and release macros (g_release_gobject).

	* lasso/id-ff/login.c: comment the generation of Advice when ResourceOffering for   the DiscoService support a security mechanism needing one. Anyway the   generation of Credentials is broken. * lasso/id-ff/session.c: add treatment of saml:Advice on newly added   Assertions, keep the transmitted assertions inside the session indexed by their   AssertionID.
	* lasso/xml/saml_advice.{c,h}: change content to SNIPPET_LIST_XMLNODES.

	* lasso/id-wsf/discovery.c: fix macros assign_resource_id to adapt to standard return code name: rc

	* lasso/id-wsf-2.0/profile.c, lasso/id-wsf/authentication.c: adapt to change of   name of id attribute in LassoSoapBody

	* lasso/xml/disco_encrypted_resource_id.{c,h}: add support for any kind of   content through a SNIPPET_LIST_XMLNODES marked field.

	* lasso/xml/soap_body.h: change name of variable id to Id * lasso/xml/soap_body.c: change attribute id to Id and fix its namespace (wssu) in overloaded get_xmlNode

	* lasso/xml/wsse_security.c: fix wrong namespace

	* lasso/xml/xml.c: make xmlClean change namespace of properties not just of nodes

	* lasso/xml/xml.c: adapt to new prefix of Dgme library

	* lasso/errors.h: new error for LassoWsfProfile signal missing Credentials

	* bindings/lang_python_wrapper_top.c: add cast to suppress warning about g_list_length argument non-constness. add support for LassoDgme* objects, must find a better way to do this in the future.

	* lasso/id-wsf/discovery.c:   (lasso_discovery_build_credential, lasso_discovery_add_remove_entry,   lasso_discovery_add_requested_service_type) use macro g_list_add, to reduce   code size.

	* lasso/id-wsf/wsf_profile.c: In lasso_wsf_profile_set_security_mech_id if   security_mech_id is NULL, default to LASSO_SECURITY_MECH_NULL.   In lasso_wsf_profile_init_soap_request increment ref count of the argument   when new reference are created.

	* bindings/bindings.py: support const modifier on this argument

	* add lasso/lasso_config.h.in because it is not generated anymore since config.h become the normal configuration file.

	fix wrong const modifier

	* lasso/id-wsf/wsf_profile.c: fix wrong namespace in a call to xmlSecFindNode

	* lasso/id-wsf/wsf_profile.c: implement creation of the signature for ID-WSF   SAML security mechanism. Implemented many utility function that could be shared   with other part of the library.

	* lasso/xml/tools.c: In lasso_sign_node suppress useless code to lookup the Signature node.

	* lasso/utils.h: add utility macros to releases libxml objects, to check null   parameters or badly typed parameters. add a macro that go to an "exit" label   and set the return code variable named "rc".

	* lasso/id-wsf/wsf_profile.c: add documentation to the function lasso_wsf_profile_set_resource_offering:

	* lasso/id-wsf/wsf_profile.c,wsf_profile.h,wsf_profile_private.h: add const modifier to signature when possible

	add a const modifier on the argument offering of lasso_discovery_get_description_auto

	* lasso/id-wsf/discovery.c: In lasso_discovery_get_resource_offering_auto, do not increment reference count of the returned value, it is not how it is done in the rest of the library. Returned gobject are always not-owned reference, you reference them only to keep them around.

	* Update errors.c to last state of errors.h

	add an new error for a missing ResourceID inside a ResourceOffering

	add const modifier to conversion function on GList*, a problem still remains that g_list_length do not take a const GList*

	mark init_modify as deprecated, use init_insert

	fix forgottent arg to g_list_foreach

	start rework of lasso_discovery_init_request, my intention is to base toher init_ function on this one

	fix a reference counting error when building response message

	add documentation to lasso/id-wsf/discovery.c

	reflects change inside lasso/id-ff/identity.c in assertions

	- surrounded declaration of containers for ID-WSF object with ifdef/endif, did the same in initialization/finalization code. - changed storage of resource offering from a list to a hash table - added a counter to create entryIDs for newly added resource offerings - simplify the code around resource offerings management

	fix issue #15 "In lasso_data_service_build_modify_response_msg we free a shared xmlNode"

	instead of moving assertion from session to new sessions, reference the old session in newly created ID-WSF services proxy

	move session storage of assertion for SAML ID-WSF authentication of request to xmlNode instead of LassoNode; add error handling when no description has been found in comply_with_saml_authentication

	beginning of signature implementation for SAML authentication

	fix naming in documentation of lasso_wsf_profile_set_description_from_offering, add new private function lasso_wsf_profile_set_resource_offering

	integrate new errors messages

	add a lasso_discovery_new_full function

	deprecated lasso_discovery_init_modify

	add somme error messages, add new error LASSO_WSF_PROFILE_ERROR_MISSING_DESCRIPTION, when no description can be found for the chosen security mechanism

	add matching of Bearer authentication, support ID-WSF 1.1 security mechanisms URNs

	fix error of namespace

	change content from list of LassoNode to list of xmlNode

	changed contents to list of xmlNodes instead of LassoNode

	add strings for security mechanism defined in ID-WSF 1.1

	forked lasso branch for adeline

	add a general error for a badly initialized object and two error for idwsf relating to a missing assertion id and a missing endpoint declaration

	Revert " * remove body->id and correlation->id setup, no need to set id on everything."
	This reverts commit 832f127760dc074336400531a99f3a03574ffe13.

	added functions to release [list]string/gobject/any

	 add methods to manipulate list of gobjects, and dissociate affectation of fresh object from older objects

	 add macro to assign gobject field, first a simple version

	 fix typo in last commit

	 add soap binding util function to lookup specific SOAP header for ID-WSF SOAP encapsulation

	 beginning of a pool of macros for mem handling, affectation to fields, etc..

	 * remove body->id and correlation->id setup, no need to set id on everything.

	forked lasso branch for adeline

	forked lasso branch for adeline

	forked lasso branch for adeline

	keep head version

2008-08-01  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	* lasso/id-wsf/discovery.c:  - include utils.h  - move lasso_wsf_profile_build_key_info_node here  - add a comment for future review of lasso_discovery_build_credential  - remove direct use of lasso_wsf_profile_build_soap_envelope, use    lasso_wsf_profile_init_soap_request instead.
	* lasso/id-wsf/utils.{c,h}:
	 - new file with security mech id matching functions

	* lasso/id-wsf/wsf_profile.c:
	 - remove all credentials related static functions
	 - empty all credentials related public functions
	 - move function related to matching security mechanism into utils.{c,h} and
	   xml/disco_description.h
	 - add static function lasso_wsf_profile_comply_with_saml_authentication that
	   tries to add credential to the request to a web service using the SAML
	   WS-Security mechanism
	 - add static function lasso_wsf_profile_comply_with_security_mechanism to
	   dispatch upon the current chosen securirt mechanism.
	 - extract build_soap_envelope to the static function
	   build_soap_envelope_internal to remove warning of usage of a deprecated
	   function.
	 - remove lasso_wsf_profile_set_public_key
	 - remove lasso_wsf_profile_set_security_mech_id
	 - add lasso_wsf_profile_get_security_mechanism
	 - add lasso_wsf_profile_set_description
	 - empty function about online status of the principal
	 - remove all (non-working) handling of the x509 security mechanism
	 - add a new constructor function
	 LassoWsfProfile* lasso_wsf_profile_new_full(LassoServer *server, LassoDiscoResourceOffering *offering)
	 - and a new init function (for subclass):
	 gint lasso_wsf_profile_init(LassoWsfProfile *profile, LassoServer *server, LassoDiscoResourceOffering *offering)

	* lasso/id-wsf/wsf_profile.h:
	 - mark as deprecated:
	 lasso_wsf_profile_move_credentials
	 lasso_wsf_profile_build_soap_envelope
	 lasso_wsf_profile_set_provider_soap_request
	 lasso_wsf_profile_principal_is_online
	 lasso_wsf_profile_add_credential
	 lasso_wsf_profile_set_principal_status
	 lasso_wsf_profile_set_principal_online
	 lasso_wsf_profile_set_principal_offline

	* lasso/id-wsf/wsf_profile_private.h:
	 - remove fields from LassoWsfProfilePrivate structure:
	  - GList *credentials;
	  - gchar *public_key;
	 - add fields:
	  - char *security_mech_id;
	  - LassoDiscoResourceOffering *offering;

2008-08-01  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	include utils.h

	fix typo on name of an xmlsec function

	change strings for security mechanisms to comply with the spec

	* Move error message inside comments in lasso/errors.h * Add a script to autogenerate lasso/errors.c from errors.h * Update errors.c * Add a target to Makefile.am to create errors.c

	move and export matching function for disco description into lasso/xml/disco_description.c

	fix bad copy/paste

	add utils.c and utils.h to file list

	move some utility functions out of wsf_profile.c

	- lasso/id-wsf/wsf_profile.c lasso/id-wsf/wsf_profile_private.h:   extract LassoWsfProfilePrivate structure.

	* lasso/id-wsf/discovery.c: repurpose lasso_discovery_process_query_response_msg   in order to extract credentials informations and store them into   the current session. * lasso/id-wsf/wsf_profile.c: Remove any high-level processing from   lasso_wsf_profile_process_soap_response_msg, just parse and setup   the corresponding fields into the structure. Eventually signal a   SOAP using a return code.

	Add an index of assertions by ID and two new function lasso_session_add_assertion_with_id(session, id, assertion) and lasso_session_get_assertion_by_id(session, id) Add to lasso_session_add_assertion a call to add_assertion_with_id, to index all assertions into the index by id.

	rebase to trunk

	Add disco_description in includes

	* add type decl to field GList* any

	lasso_wsf_profile_build_soap_request_msg:  - add a TODO comment

	- lasso_wsf_profile_add_soap_signature:   * add documentation   * user xmlSec functions for findings nodes   * add comments on the work flow   * fix memleak   * remove enveloped signature transform,     it is a detached signature.

	- lasso_wsf_profile_verify_saml_authentication:  - add comments on the work flow  - simplify and centralize cleanup code  - loop over all assertion lookup for signature to verif

	- lasso_wsf_profile_add_credential_signature:  * add documentation  * reformat  * add comments on the work flow  * fix memleak - suppress lasso_wsf_profile_get_public_key_from_credential

	- lasso_wsf_profile_verify_credential_signature:  * centralize and simplify cleanup code  * add comments describing the flow

	- Add a  const LassoDiscoDescription *lasso_wsf_profile_get_description(LassoWsfProfile *profile) - Add documentation to lasso_wsf_profile_verify_credential_signature

	Change formatting

	-Use lasso_wsf_profile_is_saml_authentication in lasso_wsf_profile_has_saml_authentication -Add documentation for lasso_wsf_profile_is_x509_authentication  ,lasso_wsf_profile_is_saml_authentication and  lasso_security_mech_has_x509_authentication.

	Use macros instead of custom code, add parameter value verifications

	In lasso_wsf_move_credentials use new lasso utils macros

	Documentation for lasso_wsf_profile_has_saml_authentication

	Documentation for lasso_wsf_profile_get_fault

	Documentation for lasso_wsf_profile_get_description_autos

	Documentation for lasso_wsf_profile_set_public_key

	Documentation for lasso_wsf_profile_add_credential

	documentation for lasso_wsf_profile_move_credentials

	add new method lasso_wsf_profile_set_description_from_offering

	fix typo

	add a general error for a badly initialized object and two error for idwsf relating to a missing assertion id and a missing endpoint declaration

	Revert " * remove body->id and correlation->id setup, no need to set id on everything."
	This reverts commit 832f127760dc074336400531a99f3a03574ffe13.

	 add function to load a public key from anything

	added functions to release [list]string/gobject/any

	 add methods to manipulate list of gobjects, and dissociate affectation of fresh object from older objects

	use g_assign_gobject

	add methods to handle the registry of WsfProfile constructors  - private: {lookup,remove,set}_registry handle access to the registry  - public: lasso_discovery_[un]register_constructor_for_service_type 	gives access to this registry to other classes.
	Conflicts:

	 add xml dump functionality

	 import discovery.h, fix name of registered constructor function

	change return type of lasso_discovery_get_service (kein direct user in the rest of the code)

	polish code in lasso_discovery_build_credential

	use lasso_discovery_build_wsf_profile commodity method in lasso_discovery_get_service(s) methods.

	add registering of the constructor

	 add macro to assign gobject field, first a simple version

	 use g_assign_string to update a string field

	 fix typo in last commit

	 add soap binding util function to lookup specific SOAP header for ID-WSF SOAP encapsulation

	 if messageID is missing return MISSING_CORRELATION

	 beginning of a pool of macros for mem handling, affectation to fields, etc..

	 look for the correlation element, do not just take the first one, report proper error if not present

	 remove useless reset of structure after allocation with g_new0

	 * set credential to NULL when freed

	 * remove body->id and correlation->id setup, no need to set id on everything.

2008-07-22  Frederic Peters  <fpeters@entrouvert.com>

	published news about 2.2.1

	bumped to 2.2.1

	fixed order of freeing calls (stolen from ec76ae4f7e40e99443ad421a85ec4d3fb7359bf3)

	fixed ..._must_authenticate to look for any assertion, not just one from the requester provider.

2008-07-16  Frederic Peters  <fpeters@entrouvert.com>

	don't copy gtk-doc tmpl/ files that do not longer exists (fixes make distcheck)

2008-07-01  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	change bug report link

2008-06-29  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	add build_strerror.py to EXTRA_DIST

2008-06-16  Damien Laniel  <dlaniel@entrouvert.com>

	set an accurate error code on IdP if session wasn't reloaded

2008-06-05  Frederic Peters  <fpeters@entrouvert.com>

	check NameIdentifier for existence before strcmp'ing it

2008-05-30  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	remove perl script for generating lasso_strerror, replace with a python script, do not replace errors.c if generation give the same file as before, add warning to errors.c about autogeneration, add documentation on lasso_strerror to errors.c.in

	reformat utils.h

2008-05-30  Damien Laniel  <dlaniel@entrouvert.com>

	fixed too long lines and remove some blank lines

	fixed too long lines and remove some blank lines

	fixed tab/space mix

2008-05-30  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	remove merge markers

	* Move error message inside comments in lasso/errors.h * Add a script to autogenerate lasso/errors.c from errors.h * Update errors.c * Add a target to Makefile.am to create errors.c

2008-05-30  Frederic Peters  <fpeters@entrouvert.com>

	NameIdPolicy must be allocated

2008-05-29  Frederic Peters  <fpeters@entrouvert.com>

	forbit query strings to be xml signed

	provider_id is optional in lasso_session_get_assertions

	debian/control is now generated

	debian/control is now generated

	updated debian packaging

	updated debian packaging

2008-05-28  Frederic Peters  <fpeters@entrouvert.com>

	2.2.0

	notes about new bindings

	updated release date

2008-05-28  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	add forgottent static modifier

2008-05-28  Damien Laniel  <dlaniel@entrouvert.com>

	fixed functions returning const GList *

2008-05-28  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	recognize const GList*

	return of lasso_server_get_svc_metadatas so return_owner = False

2008-05-28  Frederic Peters  <fpeters@entrouvert.com>

	boolean in C are uppercase

2008-05-27  Frederic Peters  <fpeters@entrouvert.com>

	2.0.0

	updated changelog to 2.2.0

	noted about 2.2.0

	updated copyright info

2008-05-27  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	remove obsolete swig binding csharp, php5, python. java stays as long as alain coetmeur needs it php(4) will be superseded by the new bindings/php4 later.

	remove ./docs/reference/tmpl during clean-local target

	add lasso_config.h.in to MAINTAINERCLEANFILES

	add Makefile.in to MAINTAINERCLEANFILES in every Makefile.am

	export SWIG_VERSION into Makefile.am handle swig < 1.3.32 and swig >= 1.3.32 with two different versions of the patch script

	add -I$(top_builddir) to CFLAGS in first position

	surround parameter with quotes permitting filename with spaces

	clean *.pyc files in the bindings

	Make Makefile.PL use TOP_SRCDIR and TOP_BUILDDIR variables

	fix INCLUDES, remove obsolete JDK_INCLUDES definition

	fix INCLUDES

	#include <lasso.h> => #include <lasso/lasso.h>

	fix INCLUDES

	quick and dirty fix to support return type «const GList*»

	fix INCLUDES var, put top_builddir first

	add qualifier for the GList returned by lasso_server_get_svc_metadatas

	cleanup include listingm first builddir then srcdir and no need for $srcdir/lasso

	Add disco_declaration.h to imported headers

	Add $(top_builddir) to include of id-wsf and id-wsf-2.0 Makefile.am to work with distcheck.

2008-05-26  Damien Laniel  <dlaniel@entrouvert.com>

	allow getting xpath attributes like /node/@attr

2008-05-26  Frederic Peters  <fpeters@entrouvert.com>

	respect optional args and default values for integer args

	last argument to check_version was optional with the SWIG bindings

2008-05-26  Damien Laniel  <dlaniel@entrouvert.com>

	don't test NULL value before calling gfree + proper list freeing

2008-05-26  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	Fix escaping of parenthesis inside a regex

	add -fno-strict-aliasing to CFLAGS to remove bad code genereation on amd64 and warnings on all platforms

	Re-remove java/Makefile from configure.ac outputs

2008-05-24  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	 re-add swig/java binding to makefile, make it use the JAVA_INCLUDE path, JDK_INCLUDES does not exist

2008-05-23  Frederic Peters  <fpeters@entrouvert.com>

	fixing a little bit the doap file

	removed doap.rdt to lasso.doap to be compatible with moap

	mentioning bug database and updated description

	bitching about free

2008-05-22  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	add a new headers <lasso/utils.h> with macros to handle memory like assigning a gobject field (work flow, is you augment ref of the new value, decrease the one from the old, and then assign), assigning strings, releasing lists of strings, of gobjects,etc.. the free macros are all called g_release_somehting and they set the released variable to NULL. add a macro to validate GObject parameter types
	This header is intended to concentre every bit of wisdom for handling pointers
	and memory, try to use thoses macros in your code.
	They are not intended to work with weak references (references you do not own),
	so always g_object_ref in this case (or use g_assign_gobject that does it,
	when your variable is not needed anymore to g_assign_gobject(var, NULL));

2008-05-22  Damien Laniel  <dlaniel@entrouvert.com>

	added some more missing unreference

	added some more missing unreference

	added some more missing unreference

	fixed freeing svcMDID list

	added a missing reference

2008-05-21  Damien Laniel  <dlaniel@entrouvert.com>

	added some more missing unreference

	fixed memory management during node decryption

	unreference service node after adding it to the server

	some comments

	free list elements

	make return value const instead of copying the list

	make return value const instead of copying the list

	removed warning when calling lasso_node_destroy with NULL argument

	useless variables detroyer; they're already freed by snippets

2008-05-20  Frederic Peters  <fpeters@entrouvert.com>

	removing unused variable

2008-05-20  Damien Laniel  <dlaniel@entrouvert.com>

	fixed some reference counting and memory management

	avoir function calls in parameter checks

	import main test file

	some cleanups in id-wsf 1.1 code

	added a discovery remove test case

	added id-wsf 2.0 tests for new bindings

	stronger check on empty string parameters

	added some tests for id-wsf 1.1 with new python bindings

2008-05-20  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	 add pact for SWIG 1.3.33, need to be tested agains previous and later versions of SWIG

2008-05-19  Damien Laniel  <dlaniel@entrouvert.com>

	fixed methods with xmlNode* arguments

2008-05-15  Frederic Peters  <fpeters@entrouvert.com>

	moved gtk-doc inline as is better on so many points; also added schema fragments to published doc

2008-05-14  Damien Laniel  <dlaniel@entrouvert.com>

	allows querying a list of items with ID-WSF 2.0 data service

2008-05-14  Frederic Peters  <fpeters@entrouvert.com>

	added lasso_idwsf2_data_service_get_attribute_nodes method

2008-05-14  Damien Laniel  <dlaniel@entrouvert.com>

	fixed get and set queryItems in bindings

2008-05-13  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	 * validate input in lasso_profile_is_saml_query

2008-05-09  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	 * export dummy lasso_init/lasso_shutdown for compatibility  * module shutdown must return SUCCESS  * verify if returned object is non-null before decrementing its refcount

	 export dummy lasso_init/lasso_shutdown for compatibility

2008-04-30  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	fix indentation III the come back

	fix indentation bis

	fix indentation

	 *  lasso*login_must_authenticate: (id-ff/login.c,saml-2.0/login.c):  do  not   consider   profile->session   !=   NULL   as   a   proof   of   a  previous  authentication  and  search   an  assertion  associated  with  profile->remote_providerID.  That was  causing  a bug  when a  previous  unsuccesfull request  was making  profile->session !=  NULL even  if no  authentication has been made.

	 * add string translation for error LASSO_LOGIN_ERROR_STATUS_NOT_SUCCESS

2008-04-29  Frederic Peters  <fpeters@entrouvert.com>

	look for ElementTree in yet another place

	updated with 2.1.98 packaging

	updated with 2.1.98 packaging

	properly quote vars

	added build-dep on php5-dev

	added build-dep on php5-dev

	use new bindings

	don't generate "abstract" member for PHP as it causes a problem with SWIG

	[project @ fpeters@0d.be-20080426153010-i98np134gtvc03sy] move php extension dir under $(prefix)
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-26 17:30:10.185000+02:00

	[project @ fpeters@0d.be-20080423153851-70h4ns9mvsncw150] ship lasso.ini
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-23 17:38:51.027000+02:00

	[project @ fpeters@0d.be-20080423145930-yekpmusph6oob90d] merge
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-23 16:59:30.377000+02:00

	[project @ fpeters@0d.be-20080423100400-sbs984j19ik6dxzi] merge
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-23 12:04:00.477000+02:00

	[project @ fpeters@0d.be-20080423095917-mmhdqmpa9i00kuly] remove assert that needs private struct info
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-23 11:59:17.694000+02:00

	[project @ fpeters@0d.be-20080416142729-kpuwdj5m75qe5vnc] added php4 binding from benjamin but disabled it
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-16 16:27:29.948000+02:00

	[project @ fpeters@0d.be-20080416142356-cl3d6hb3ru62p8xv] Damien Laniel 2008-04-16 added PHPGObject destructors and fixed some memory management
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-16 16:23:56.715000+02:00

	[project @ fpeters@0d.be-20080410163456-r6a9flm66nhyap6m] Merge from bdauvergne: factorize the backward compatibility code for GHashTable, fixed placement of declarations.
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-10 18:34:56.595000+02:00

	[project @ fpeters@0d.be-20080410140255-456kiwqz53exn9vo] removed hash table size checks as they requires access to glib internals
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-10 16:02:55.908000+02:00

	[project @ fpeters@0d.be-20080408141937-9ge86l4vyec39lsz] merging damien branch
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-08 16:19:37.055000+02:00

	[project @ fpeters@0d.be-20080408141317-mmjdku5wuegia6o3] merging benjamin
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-08 16:13:17.010000+02:00

	[project @ fpeters@0d.be-20080407154605-x6j5u3k1t53vzary] look for alternative ElementTree implementation
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-07 17:46:05.507000+02:00

	[project @ fpeters@0d.be-20080406145608-13ngws5566q8jkj9] simplified raise_on_rc
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-06 16:56:08.973000+02:00

	[project @ fpeters@0d.be-20080406145106-b6ywyx9f53w39y0e] fixed returned list of gobject
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-06 16:51:06.682000+02:00

	[project @ fpeters@0d.be-20080406135913-4sxje4sifk407jna] support for methods returning GList* of LassoNode*
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-06 15:59:13.889000+02:00

	[project @ fpeters@0d.be-20080406111623-pf8iq94lrfu2w2un] extended the skip attribute to accept more values
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-06 13:16:23.574000+02:00

	[project @ fpeters@0d.be-20080406110838-j0faaj3x9t3ztbhs] don't output two spaces before =
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-06 13:08:38.325000+02:00

	[project @ fpeters@0d.be-20080406103050-qfvnslshaslcjrj1] improving doc strings
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-06 12:30:50.311000+02:00

	[project @ fpeters@0d.be-20080406100353-gauqob9b1238gw9o] functions that are not owner of their return type
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-06 12:03:53.304000+02:00

	[project @ fpeters@0d.be-20080405225744-bz39keu5co15n5l6] backward compat for ID-WSF buildRequestMsg methods
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-06 00:57:44.577000+02:00

	[project @ fpeters@0d.be-20080405220112-hv62do6qtb8itkxw] optional parameters for LassoDiscovery and LassoDataService
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-06 00:01:12.703000+02:00

	[project @ fpeters@0d.be-20080405204919-zlk32ehqmftfwh0c] backward compat for registerIdWsf2DstService
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-05 22:49:19.113000+02:00

	[project @ fpeters@0d.be-20080405204856-apdxhkk5pdhmx0nj] support for xmlNode* attributes
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-05 22:48:56.805000+02:00

	[project @ fpeters@0d.be-20080405184728-xay3dzjeq41suxav] added remaining optional parameters that were defined in the swig bindings
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-05 20:47:28.881000+02:00

	[project @ fpeters@0d.be-20080405184658-1389bbpst9cxhjm6] support for boolean default values
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-05 20:46:58.982000+02:00

	[project @ fpeters@0d.be-20080405184638-o2aipd0e2lkd674q] fixed backward compatibility of DiscoDescription to only be enabled when WSF support is on
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-05 20:46:38.168000+02:00

	[project @ fpeters@0d.be-20080404131647-lb7jty8pp3tjcmny] added handling of other constructors, and backward compatibility for lasso.DiscoDescription_newWithBriefSoapHttpDescription
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-04 15:16:47.595000+02:00

	[project @ fpeters@0d.be-20080403104659-tio35cweqbl32auj] lasso_idwsf2_discovery_metadata_register_self has its last parameter optional
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-04-03 12:46:59.281000+02:00

	[project @ fpeters@0d.be-20080328175728-1uv5yyo713uhukck] merging benjamin branch (again)
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-03-28 18:57:28.327000+01:00

	[project @ fpeters@0d.be-20080328175710-s4031yloqsdbmvel] merging benjamin branch
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-03-28 18:57:10.522000+01:00

	[project @ fpeters@0d.be-20080326094935-u5wxcw8nd30ckdjw] casting free functions
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-03-26 10:49:35.397000+01:00

	[project @ fpeters@0d.be-20080326094754-cw66nuog62q06ekk] merging benjamin branch
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-03-26 10:47:54.384000+01:00

	[project @ fpeters@0d.be-20080326090203-a0ietdsmp8ec9aef] freeing converted list
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-03-26 10:02:03.689000+01:00

	[project @ fpeters@0d.be-20080326084502-krmekmh7mokemn18] possibility to qualify GList* parameters
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-03-26 09:45:02.789000+01:00

	[project @ fpeters@0d.be-20080325181554-raqz9a721r2vjo5t] return type qualifier to know what is the content of a GList*
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-03-25 19:15:54.747000+01:00

	[project @ fpeters@0d.be-20080325172346-eitu3onvzps4b30z] merging benjamin stuff and adding --enable-id-wsf when id-wsf is asked
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-03-25 18:23:46.535000+01:00

	[project @ fpeters@0d.be-20080321174837-2fneubl3xhlol08w] always raise an exception, to be compatible with previous behaviour
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-03-21 18:48:37.002000+01:00

	[project @ fpeters@0d.be-20080321174813-7pcjuucmw5xw4d4o] declare functions, and make them static
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-03-21 18:48:13.524000+01:00

	[project @ fpeters@0d.be-20080321173628-ufrpdmc23wmhu5ym] removed compatibility to inexisting attribute
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-03-21 18:36:28.789000+01:00

	[project @ fpeters@0d.be-20080314231446-2fess87rf4xe00ar] more compat
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-03-15 00:14:46.531000+01:00

	[project @ fpeters@0d.be-20080314231256-hjz1wljuqrcbuce3] merging benjamin branch
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-03-15 00:12:56.228000+01:00

	[project @ fpeters@0d.be-20080310093300-2iv41ihnuify54po] merging benjamin branch
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-03-10 10:33:00.592000+01:00

	[project @ fpeters@0d.be-20080309152828-pw4gd3lcm7rb7dxd] merging benjamin branch
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-03-09 16:28:28.854000+01:00

	[project @ fpeters@0d.be-20080229163949-v7zjjcr3sg5w0wfj] set exception code in raise_on_rc as the same exception can share two different codes (in reality this is only the case for UnknownProfileError), also skip LogoutErroor/UnknownProfileError instead of duplicating and overwriting it, with a long explanation comment.
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-02-29 17:39:49.202000+01:00

	[project @ fpeters@0d.be-20080228084331-nnw52qii4xdmz36k] ship files required for tests/
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-02-28 09:43:31.229000+01:00

	[project @ fpeters@0d.be-20080227102117-mbx90lw49ty9vfq9] rename lasso_profile_is_identity_dirty to lasso_profile_has_dirty_identity (and ditto with s/identity/session/) to provide both correct documentation and backward compatibility in Python bindings
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-02-27 11:21:17.023000+01:00

	[project @ fpeters@0d.be-20080227101004-a8tjn21ux8m0md7s] an other rename issue
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-02-27 11:10:04.420000+01:00

	[project @ fpeters@0d.be-20080226163902-kby1si1erxqnvzsm] compatibility with NodeList, StringList and StringDict
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-02-26 17:39:02.548000+01:00

	[project @ fpeters@0d.be-20080226163712-tdqz8v7d3rsdoygt] backward compat for MiscTextNode.text_child
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-02-26 17:37:12.594000+01:00

	[project @ fpeters@0d.be-20080225222041-kixxnphv94z7ld23] fixed function renaming
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-02-25 23:20:41.510000+01:00

	[project @ fpeters@0d.be-20080225132449-kd2tppchh4z47sti] increment refcount of objects returned in tuples
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-02-25 14:24:49.893000+01:00

	[project @ fpeters@0d.be-20080225121334-yi07nl8kefuefhk9] benjamin branch
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-02-25 13:13:34.475000+01:00

	[project @ fpeters@0d.be-20080222101655-1mbomnvhq5d8gxtb] support for accessor returning GObjects
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-02-22 11:16:55.631000+01:00

	[project @ fpeters@0d.be-20080222101641-d32t8a8wtocet4qq] more __repr__ like
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-02-22 11:16:41.648000+01:00

	[project @ fpeters@0d.be-20080222095228-htuqndnaiiazp2qv] backward compatibility for Saml2Subject.nameID
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-02-22 10:52:28.583000+01:00

	[project @ fpeters@0d.be-20080222093656-l6a09ccadxdz9qrs] merging benjamin branch
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-02-22 10:36:56.421000+01:00

	[project @ fpeters@0d.be-20080222093439-0tbhiky3305jroj5] added backward compatibility for Samlp2AuthnRequest.nameIDPolicy
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-02-22 10:34:39.153000+01:00

	[project @ fpeters@0d.be-20080218085519-h4hpx5u9ezvupvbc] com_entrouvert_lasso_LassoJNI.h is built
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-02-18 09:55:19.662000+01:00

	[project @ fpeters@0d.be-20080218085509-t0oktx26t3v393pw] added missing java files to distributed files
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-02-18 09:55:09.987000+01:00

	[project @ fpeters@0d.be-20080217154439-uws87jdru8j3izkj] distribute GObject.java and LassoException_top.java, and fixed distcheck
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-02-17 16:44:39.322000+01:00

	[project @ fpeters@0d.be-20080217154423-svipbb8mktdbs6gz] create source directory if necessary
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-02-17 16:44:23.418000+01:00

	[project @ fpeters@0d.be-20080217144029-zleb5lw82iwcqqvj] space after comma
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-02-17 15:40:29.819000+01:00

	[project @ fpeters@0d.be-20080217143931-r5r87f8m415866z5] fixed (a little bit hacky, slowly getting back) renamed methods in python binding
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-02-17 15:39:31.583000+01:00

	[project @ fpeters@0d.be-20080217115736-u8axfdcztdhvsnj0] removed pyc file
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-02-17 12:57:36.849000+01:00

	[project @ fpeters@0d.be-20080217115557-8qtcrc1vzb75f75c] merged Benjamin branch
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-02-17 12:55:57.088000+01:00

	[project @ fpeters@0d.be-20080118215410-d45drghkhvba7822] merged Damien branch; and fixed PHP5 binding to use GLib memory management functions
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2008-01-18 22:54:10.239000+01:00

	[project @ fpeters@0d.be-20071122144503-m1ya6db2hzlijhmt] parse docstrings (such as the parsed form is available to all languages) and format them as epydoc in the python binding
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-22 15:45:03.610000+01:00

	[project @ fpeters@0d.be-20071122125027-vw48yk2h353ijif8] Don't bind lasso_*_destroy methods since they are just wrappers around g_object_unref which will be called properly from the bindings object destructor support.  Also added support for a skip attribute to <func> in overrides (not used at the moment).
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-22 13:50:27.802000+01:00

	[project @ fpeters@0d.be-20071120204838-b1q3z1nv4phb1t8r] fixed typo in file to remove
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-20 21:48:38.865000+01:00

	[project @ fpeters@0d.be-20071120201438-11ybvaefw3o02p7h] clean built files
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-20 21:14:38.792000+01:00

	[project @ fpeters@0d.be-20071120201406-loyt7g5302ztk7er] get srcdir from env variable (set automatically by automake)
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-20 21:14:06.537000+01:00

	[project @ fpeters@0d.be-20071120151830-wdnobbexiv300ibb] fixed some make distcheck issues (still remaining is access to test data when srcdir != builddir)
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-20 16:18:30.814000+01:00

	[project @ fpeters@0d.be-20071115162508-ydcoj2rr8zkfxyvy] merged Damien branch
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-15 17:25:08.524000+01:00

	[project @ fpeters@0d.be-20071115161633-6e49xtjy7dgqxm3r] added special support for functions that return a borrowed reference to a GObject*.
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-15 17:16:33.298000+01:00

	[project @ fpeters@0d.be-20071115102943-ai5s97yj5g9chrv3] added getter for internal GObject* reference count; useful to debug memory allocations.
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-15 11:29:43.003000+01:00

	[project @ fpeters@0d.be-20071113195326-cd83a1nrlh9l9nbr] added three more tests of bindings
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-13 20:53:26.406000+01:00

	[project @ fpeters@0d.be-20071113192919-3g05qazwjjhivlsh] ported old test cases to the new binding
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-13 20:29:19.859000+01:00

	[project @ fpeters@0d.be-20071113192818-6ysl71n3cg4uvy4l] fixed setting list and object attributes to None
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-13 20:28:18.519000+01:00

	[project @ fpeters@0d.be-20071113172348-8i4mcve247l8ec0k] fixed memory managements issues in Python binding
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-13 18:23:48.693000+01:00

	[project @ fpeters@0d.be-20071113151334-k8v9udlbr5nb2lu7] backward compatibility for isSessionDirty and isIdentityDirty
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-13 16:13:34.182000+01:00

	[project @ fpeters@0d.be-20071113141308-1hr4b009pgx606sa] some backward compatibility with SWIG generated binding
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-13 15:13:08.467000+01:00

	[project @ fpeters@0d.be-20071113140738-l9xdpgnjvx2ekdvr] PyDict_SetItemString doesn't steal the reference, so Py_DECREF(obj); after.
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-13 15:07:38.745000+01:00

	[project @ fpeters@0d.be-20071113015838-961yf93m001amgi1] merging Damien branch
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-13 02:58:38.825000+01:00

	[project @ fpeters@0d.be-20071112131601-rxpuzaxkhe2qwdw4] fixed variable type
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-12 14:16:01.913000+01:00

	[project @ fpeters@0d.be-20071111224238-k28pyur1kpm2iiyc] added some support for overrided function names to PHP5 binding
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-11 23:42:38.123000+01:00

	[project @ fpeters@0d.be-20071111215225-xo2v0iwwjw74rqyp] override lasso_profile_get_nameIdentifier to be renamed to lasso_profile_get_federation_nameIdentifier in bindings, so it doesn't shadow the LassoProfile::nameIdentifier member.
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-11 22:52:25.286000+01:00

	[project @ fpeters@0d.be-20071111213604-1prv8pyvnwr6gdly] moved is_null check into cptrToPhp function instead of duplicating it in callers.
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-11 22:36:04.472000+01:00

	[project @ fpeters@0d.be-20071111213455-a7lds8mfily3o9i1] ISO C90 forbids mixed declarations and code; moved xmlString return code into its own code block
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-11 22:34:55.867000+01:00

	[project @ fpeters@0d.be-20071106133809-z6qxlw10eooqrkwp] merged damien branch
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-06 14:38:09.490000+01:00

	[project @ fpeters@0d.be-20071103222826-mjowzcuitfc35jpx] removed erroneously duplicated lines
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-03 23:28:26.922000+01:00

	[project @ fpeters@0d.be-20071103213505-94itgfwnvinqnhf6] Added warning message on boolean constants, as they are not yet supported but shouldn't cause the build to fail; also fixed a few calls to format_attribute that have been removed in favor of code from utils.py
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-03 22:35:05.918000+01:00

	[project @ fpeters@0d.be-20071103211651-8vperiqd97t0987s] support for list of xmlNode* (such as LibAuthnRequest/Extension)
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-03 22:16:51.610000+01:00

	[project @ fpeters@0d.be-20071102093734-mv4amat73ulcri17] merged Damien branch
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-02 10:37:34.842000+01:00

	[project @ fpeters@0d.be-20071101183642-85c94st4sjujh4sr] added special support required for SAML2_SUPPORT and WSF_SUPPORT constants
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-01 19:36:42.776000+01:00

	[project @ fpeters@0d.be-20071101181800-r94oeih0q8hplrxo] added support for standalone functions in lasso wrapper; and added renames for a bunch of them
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-01 19:18:00.896000+01:00

	[project @ fpeters@0d.be-20071101170655-2qi60xpa42u7g310] added (get) wrapper for GHashTable members
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-01 18:06:55.994000+01:00

	[project @ fpeters@0d.be-20071101160226-jj7ou71gblw0uymq] added support for converting xmlNode* as return type to PyString
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-01 17:02:26.261000+01:00

	[project @ fpeters@0d.be-20071101155155-avzyxfeum84mhf7k] don't return a value for methods that do not return a value, and convert returned value to object for methods returning objects.
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-01 16:51:55.007000+01:00

	[project @ fpeters@0d.be-20071101154634-m2de3kw7qyl47p39] raise lasso.Error instead of base Exception on constructor error
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-01 16:46:34.882000+01:00

	[project @ fpeters@0d.be-20071101154602-vtgnze1fteggdkvj] always convert identifers from ID to Id
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-01 16:46:02.686000+01:00

	[project @ fpeters@0d.be-20071101154109-l4l5rntsmkrukw3k] raise exception when constructor fails
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-01 16:41:09.647000+01:00

	[project @ fpeters@0d.be-20071101153722-f7053pg8s6x5rpst] added comments to file, and added optional args definition to lasso_provider_new
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-11-01 16:37:22.975000+01:00

	[project @ fpeters@0d.be-20071031161615-6azrhw33s96nngr1] fixed setters for object members that are LassoNode
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-31 17:16:15.654000+01:00

	[project @ fpeters@0d.be-20071031161008-c5jqe7topkxoaoe0] raise TypeError when assigning a Python list to a member expecting a tuple
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-31 17:10:08.047000+01:00

	[project @ fpeters@0d.be-20071031124903-z1k8ywuk1qgrl5gm] added lasso extension dynamic loading, aborting if it fails
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-31 13:49:03.384000+01:00

	[project @ fpeters@0d.be-20071031114522-jkrmvbpphcm0rms8] moved identifier name formatting functions to their own module, so they are not duplicated everywhere.
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-31 12:45:22.367000+01:00

	[project @ fpeters@0d.be-20071030182501-ylv8gu5he0jqlngd] output warnings to stderr
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-30 19:25:01.156000+01:00

	[project @ fpeters@0d.be-20071029175534-xyhm1jidpe624m3t] API compatibility with SWIG bindings which didn't have accessors for those methods and used totally pythonified method name instead, such as Logout::getNextProviderId; also improved python method naming converter function to correctly translate ID to Id.
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-29 18:55:34.577000+01:00

	[project @ fpeters@0d.be-20071029174409-80dztn33kjef8xch] output warning to stderr
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-29 18:44:09.130000+01:00

	[project @ fpeters@0d.be-20071028192051-mdp2mgambly3dyxv] fixed two places which had not been converted to new cptr/type
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-28 20:20:51.103000+01:00

2008-04-29  Frederic Peters  <fpeters@entrouvert.com>

	[project @ fpeters@0d.be-20071028140359-qhawdgrwjhk97y32] added Makefile.am files; to integrate within lasso build tree (under a bindings/ directory), this also requires to add those three lines to configure.ac AC_OUTPUT:   bindings/Makefile   bindings/python/Makefile   bindings/php5/Makefile
	also changed generation script to output files in the current directory


	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-28 15:03:59.480000+01:00

2008-04-29  Frederic Peters  <fpeters@entrouvert.com>

	[project @ fpeters@0d.be-20071028134708-gxz10vu031229qi8] undef some #define from php_config.h that are also defined in lasso_config.h
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-28 14:47:08.021000+01:00

	[project @ fpeters@0d.be-20071028132849-mlc6yfzl0y3enzbn] merged PHP5 support from Damien
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-28 14:28:49.939000+01:00

	[project @ fpeters@0d.be-20071010133236-j76dbt8kh1gojsz2] build without ID-WSF support by default, adding a --enable-id-wsf parameter to enable it.  Also some generated C cleaning.
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-10 15:32:36.162000+02:00

	[project @ fpeters@0d.be-20071008135840-ujwuza0tqm6cwlzr] added licence header, help text, command-line options and renamed script
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-08 15:58:40.683000+02:00

	[project @ fpeters@0d.be-20071008113045-hi02eeinwh7a1703] some support to generate python docstrings (on methods)
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-08 13:30:45.285000+02:00

2008-04-29  Frederic Peters  <fpeters@entrouvert.com>

	[project @ fpeters@0d.be-20071008100008-wd4uyitms1xfz1wv] completed support for get/setters of list of objects
	s = lasso.Saml2Assertion()
	s2 = lasso.Saml2AuthnStatement()
	s2.sessionIndex = 'plop'
	s3 = lasso.Saml2AuthnStatement()
	s3.sessionIndex = 'plop2'
	s.authnStatement = (s2, s3)
	print s.authnStatement


	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-08 12:00:08.145000+02:00

2008-04-29  Frederic Peters  <fpeters@entrouvert.com>

	[project @ fpeters@0d.be-20071008094035-jypv3sactdkvkoq7] setting of list of objects
	s = lasso.Saml2Assertion()
	s2 = lasso.Saml2AuthnStatement()
	s2.sessionIndex = 'plop'
	s3 = lasso.Saml2AuthnStatement()
	s3.sessionIndex = 'plop2'
	s.authnStatement = (s2, s3)
	print s.dump()

	<saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" SignType="0"
	SignMethod="0" EncryptionActivated="false" EncryptionSymKeyType="0">
	  <saml:AuthnStatement SessionIndex="plop"/>
	  <saml:AuthnStatement SessionIndex="plop2"/>
	</saml:Assertion>


	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-08 11:40:35.875000+02:00

2008-04-29  Frederic Peters  <fpeters@entrouvert.com>

	[project @ fpeters@0d.be-20071008090356-014qg89f2kq667v4] support for getter/setter of list of strings (and partially done of objects)
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-08 11:03:56.732000+02:00

	[project @ fpeters@0d.be-20071006185817-a2qpisu5x6a4zqef] fixing newFromDump constructors
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-06 20:58:17.081000+02:00

	[project @ fpeters@0d.be-20071006183919-bv96kzjkqzho9p5s] added support for non-None optional args
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-06 20:39:19.031000+02:00

	[project @ fpeters@0d.be-20071006180132-1t68niy6jyj26k88] bugfix for string members
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-06 20:01:32.249000+02:00

2008-04-29  Frederic Peters  <fpeters@entrouvert.com>

	[project @ fpeters@0d.be-20071006172452-7ed22uoeqm22gled] support for exceptions, with a complete hierarchy of exceptions; and emulation of swig binding behaviour (access to code via [0] and to error string via [1])
	login = lasso.Login(server)
	try:
	    login.initAuthnRequest('plop', lasso.HTTP_METHOD_REDIRECT)
	except lasso.Error, error:
	    print error
	      # <lasso.ProviderNotFoundError(-201): ProviderID unknown to LassoServer.>
	    print error.code
	      # -201
	    print error[0]
	      # -201
	    print error[1]
	      # ProviderID unknown to LassoServer.
	    sys.exit(1)


	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-06 19:24:52.095000+02:00

2008-04-29  Frederic Peters  <fpeters@entrouvert.com>

	[project @ fpeters@0d.be-20071006155345-ses0l1suzq229qdq] fixed refcounting
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-06 17:53:45.416000+02:00

	[project @ fpeters@0d.be-20071006151758-pwrstredrf19b2nw] added repr support for PyGObjectPtr, displaying GObject type name and reference count
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-06 17:17:58.258000+02:00

2008-04-29  Frederic Peters  <fpeters@entrouvert.com>

	[project @ fpeters@0d.be-20071005223906-y27ho960oiiqho19] fixed getters returning objects (getting the appropriate class for the given type) (and a small issue with setter of strings); this is now working:
	login = lasso.Login(server)
	login.initAuthnRequest('https://idp1/metadata', lasso.HTTP_METHOD_REDIRECT)
	login.request.isPassive = False
	login.request.nameIDPolicy = 'federated'
	login.buildAuthnRequestMsg()


	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-06 00:39:06.565000+02:00

2008-04-29  Frederic Peters  <fpeters@entrouvert.com>

	[project @ fpeters@0d.be-20071005200614-dahkk1xuq6pbumbo] wrap constants & enums; is now possible:
	login = lasso.Login(server)
	login.initAuthnRequest('https://idp1/metadata', lasso.HTTP_METHOD_REDIRECT)
	login.buildAuthnRequestMsg()


	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-05 22:06:14.800000+02:00

2008-04-29  Frederic Peters  <fpeters@entrouvert.com>

	[project @ fpeters@0d.be-20071005194234-7b7e39l1x4afi8wf] fixed attribute renaming, login.msgUrl now works
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-05 21:42:34.345000+02:00

2008-04-29  Frederic Peters  <fpeters@entrouvert.com>

	[project @ fpeters@0d.be-20071005193755-jzlc2gc56thaxqwe] added support for optional arguments and fixed method calls with objects
	now working:

	server = lasso.Server('../../tests/data/sp1-la/metadata.xml')
	server.addProvider(2, '../../tests/data/idp1-la/metadata.xml', 
	        '../../tests/data/idp1-la/public-key.pem')

	login = lasso.Login(server)
	login.initAuthnRequest('https://idp1/metadata', 4)
	login.buildAuthnRequestMsg()
	print login.msg_url


	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-05 21:37:55.914000+02:00

2008-04-29  Frederic Peters  <fpeters@entrouvert.com>

	[project @ fpeters@0d.be-20071005171544-ben23itgbrjebwvk] member setters
	import lasso
	s = lasso.Samlp2AuthnRequest()
	s.isPassive = True
	print s.dump()


	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-05 19:15:44.095000+02:00

2008-04-29  Frederic Peters  <fpeters@entrouvert.com>

	[project @ fpeters@0d.be-20071005162859-0pf7l8zkie7m9sr5] generate wrapper for get accessors
	import lasso
	s = lasso.Samlp2AuthnRequest()
	print s.isPassive


	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-05 18:28:59.741000+02:00

2008-04-29  Frederic Peters  <fpeters@entrouvert.com>

	[project @ fpeters@0d.be-20071005161337-vh1s4saoywr0u2sa] workaround since assertion must come before advice
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-05 18:13:37.320000+02:00

2008-04-29  Frederic Peters  <fpeters@entrouvert.com>

	[project @ fpeters@0d.be-20071005155511-13lg9tc7usfht3ud] minimalistic functional module
	 $ python -c 'import lasso; print lasso.Samlp2AuthnRequest().dump()'
	<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
	SignType="0" SignMethod="0" ForceAuthn="false" IsPassive="false"/>


	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-05 17:55:11.508000+02:00

2008-04-29  Frederic Peters  <fpeters@entrouvert.com>

	[project @ fpeters@0d.be-20071005125351-543q5fahhrljdmaj] (work in progress) some infra for python wrapper
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-05 14:53:51.026000+02:00

	[project @ fpeters@0d.be-20071005114857-u95fr7hqt6ze2qp9] create constructor for _new functions and class methods for _new_from_dump methods
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-05 13:48:57.345000+02:00

	[project @ fpeters@0d.be-20071005100459-r1mm9241ko41pcfv] python generation (classes, members & methods; missing constructors and layer using python C API)
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-05 12:04:59.172000+02:00

	[project @ fpeters@0d.be-20071005082424-d4y1kxyjhenlflsj] ignore get_type functions
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-05 10:24:24.151000+02:00

	[project @ fpeters@0d.be-20071005082412-r41uf26575dubg5l] attach methods to classes
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-05 10:24:12.840000+02:00

	[project @ fpeters@0d.be-20071005081049-u0v99a86515z4ay5] order class hierarchy
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-05 10:10:49.378000+02:00

	[project @ fpeters@0d.be-20071005080353-01t90pe4t68sdmtp] moved binding data to a class
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-05 10:03:53.550000+02:00

	[project @ fpeters@0d.be-20071004213555-02snw1q22fgkw3jx] added support for functions
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-04 23:35:55.074000+02:00

	[project @ fpeters@0d.be-20071004205916-5ur5t75ht9586n4j] reimplemented to be easier to concatenate lines (necessary for functions spanning multiple lines)
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-04 22:59:16.286000+02:00

	[project @ fpeters@0d.be-20071004204927-6j2np9wflrp15tt4] get struct members
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-04 22:49:27.981000+02:00

	[project @ fpeters@0d.be-20071004203958-xsegogi4ad0muf0a] get list of structs
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-04 22:39:58.914000+02:00

	[project @ fpeters@0d.be-20071004203206-voc7gqczx2usx3c8] ignore private headers
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-04 22:32:06.670000+02:00

	[project @ fpeters@0d.be-20071004203137-j6p42c5e48qgc5fq] added support for enums
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-04 22:31:37.240000+02:00

	[project @ fpeters@0d.be-20071004185258-quqzvq2tgmbt8u1j] initial work, extracting constants out of source tree
	Original author: Frederic Peters <fpeters@0d.be>
	Date: 2007-10-04 20:52:58.486000+02:00

	updated to current packaging then updated for new bindings

	updated to current packaging then updated for new bindings

2008-04-28  Frederic Peters  <fpeters@entrouvert.com>

	re-added function; but fixed docstrings

	removed duplicated function

2008-04-26  Frederic Peters  <fpeters@entrouvert.com>

	add unprefixed extension dir for php5, and fixed it for php4

2008-04-24  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	 change g_return_val_if_fail(provider,... from last commit to g_return_val_if_fail(LASSO_IS_PROVIDER(provider)

2008-04-23  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	 * add bad argument handling in lasso_provider_* functions

	 * in lasso_provider_get_key return NULL if provider is NULL

	 * change /etc -> /etc/php5/conf.d/ in the last commit

	 * add parameters for php5: --with-php5-include-dir (default to /usr/share/php) and --with-php5-config-dir (default to /etc/php5/cond.f/)

2008-04-23  Frederic Peters  <fpeters@entrouvert.com>

	that part is broken with PHP 4 only

	that part is broken with PHP 4 only

2008-04-23  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	 * search gzread in zlib1 after trying in libz (win32)  * remove critical exit from java macros

2008-04-21  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	 * AttributeQuery contains multiple Attribute elements not juste one

	 * ajout d'un package debian pour le binding php5

	 * ajout d'un package debian pour le binding php5

2008-04-18  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	 * add a finalizer to LassoNode class object

2008-04-10  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	 twill has a debian package now

2008-04-10  Frederic Peters  <fpeters@entrouvert.com>

	added defederation tests

	removed saving page

2008-04-09  Damien Laniel  <dlaniel@entrouvert.com>

	fixes SLO from IdP with Encrypted NameID in ID-FF

2008-04-06  Frederic Peters  <fpeters@entrouvert.com>

	fallback to onetime usage if no federation is found

2008-03-28  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	add new directory in bindings/php5 to AC_OUTPUT commented lines

	const is useless, and LassoIdWsf2UtilTestResult does not exist, breaking the bindings

	const gboolean as argument is useless and it disturbs the bindings

2008-03-21  Frederic Peters  <fpeters@entrouvert.com>

	added sso with ispassive check

	fixed missing rename of LASSO_TYPE_PROFILE_SERVICE to LASSO_TYPE_DATA_SERVICE

2008-03-20  Frederic Peters  <fpeters@entrouvert.com>

	fixed data service macros to refer to data service, not to profile service; and added some parameter checking in init_modify

2008-03-18  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	 * fix typo in the last commit :)

	 * id-wsd/data_service.c: (lasso_data_service_process_modify_response_msg)    return an error code if return value from lasso_node_new_from_dump is    NULL or invalid.

2008-03-14  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	 * configure.ac: remove generation of php5/Makefile, it does nothing. add    detection of pre-4.1.3 gcj versions. add bindings/python/tests/Makefile    in commented AC_OUTPUT code.

2008-03-12  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	 * change in the sgml documentation files.

2008-03-11  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	 * fix ticket #1 and #3.

2008-03-10  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	 * configure.ac: re-add JDK_INCLUDE substs (can be removed when we will move    to the new bindings)

	* configure.ac,macros/ac_*.m4: add new m4 macros to detect more JAVA related   things like junit.jar path to put into the CLASSPATH or desactivate   compilation of java bindings test.

2008-03-06  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	 * configure.ac: remove line for making bindings makefiles.

2008-03-05  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	 * configure.ac: fix typo, forgot 'sed'.

	 * configure.ac: add the same option for javac than for gcjh (for target and    source java language version).

	 * configure.ac: change handling of java options. Try to find JAVA_HOME from the  link in /usr/bin. Propose more options for java, javac and javah. Set good  options for gcj (-ftarget=1.4 -fsource=1.4 mainly to be retro compatible  with old VMs).

	 * login.c: (lasso_login_saml20_validate_request) fix typo.

2008-03-04  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	 * lasso/saml-2.0/login.c: (lasso_login_validate_request) If consent is    not obtained set status code at AUTHN_FAILED (no other status code seems ok).

	 * lasso/saml-2.0/login.c: lasso_login_saml20_validate_request    should define response->status_code no matter what happens, especially when    consent is not obtained (lasso_login_saml20_process_federation return an    error code in this case but it's a normal event in the SSO workflow so    status code is 'Success'). If not buildArtifactMsg fails when looking for    the response status code.

2008-03-03  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	* lasso_name_id_management_process_requet: verify that request_msg is not null.

2008-03-03  Frederic Peters  <fpeters@entrouvert.com>

	only get session when remote provider id is not provided

2008-02-29  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	* fix syntax error introduced in r3494 :) Bad benjamin commit before compiling.

	 * id-ff/logout.c: (lasso_logout_init_request) free remote_provider_id before setting it. free profile->request  before setting it if LASSO_IS_NODE(request), not just LASSO_IS_LIB_LOGOUT_REQUEST(request). Fix memory leaks.

	* name_id_management.c: (lasso_name_id_management_init_request)get the  first providerId when remote_provider_id is NULL, free old remote_provider_id  string when non null and unref old name_identifier when non null. Fix  memory leaks and lacking usual feature of init_request functions.

2008-02-29  Damien Laniel  <dlaniel@entrouvert.com>

	fixed the prototype of get_type functions to avoid warnings on windows

2008-02-28  Damien Laniel  <dlaniel@entrouvert.com>

	fixed php version checks

2008-02-26  Frederic Peters  <fpeters@entrouvert.com>

	misc text node attributes are not private

2008-02-25  Frederic Peters  <fpeters@entrouvert.com>

	initialize twill before servers, and pass over crashed servers on cleanup

	keep NameIdPolicy/Format in login->nameIDPolicy, as in ID-FF 1.2; use it not to look for federations when transient is requested.

	removed debugging visit to idp

	removed debugging saving

	added integration tests to repository

2008-02-21  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	* reflect in the documentation of lasso_server_new the fact that metadata is optional

2008-02-20  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	* Add lasso_ds_* API to the general build of lasso (was enable only with id-wsf before)

2008-02-18  Benjamin Dauvergne  <bdauvergne@entrouvert.com>

	* Suppression de #define doublons. * Ajout d'un commentaire déclaratif /* of LassoXXX */ à une déclaration  d'un membre de structure de type GList*.

2008-02-18  Frederic Peters  <fpeters@entrouvert.com>

	proper casting

	fixed assertion refcounting in lasso_login_build_assertion, changed lasso_session_add_assertion to refcount the assertion it gets

2008-02-17  Frederic Peters  <fpeters@entrouvert.com>

	added missing Saml2AttributeValue.java to distributed files

	removed obsolete file from Makefile.am

	fixed gcj version regex

2008-02-01  Frederic Peters  <fpeters@entrouvert.com>

	register all known prefixes to xpath context

2008-01-23  Frederic Peters  <fpeters@entrouvert.com>

	warns when signing saml2 elements would fail because private key is missing

	rewording (hopefully without adding bug)

	removed unnecessary double call to export_to_soap

	proper casts of xmlChar*

2008-01-17  Damien Laniel  <dlaniel@entrouvert.com>

	updated download links for Windows installers

2008-01-15  Damien Laniel  <dlaniel@entrouvert.com>

	each value of an multi-valued-attribute go in a different AttributeValue node

2008-01-15  Frederic Peters  <fpeters@entrouvert.com>

	removed broken php rename

	removed unused variable

2008-01-14  Damien Laniel  <dlaniel@entrouvert.com>

	loop on attributeStatement and childs lists

	fixed mixing epr assertion attribute with other custom attributes

	added swig binding for Saml2AttributeValue + tests

2007-12-27  Frederic Peters  <fpeters@entrouvert.com>

	added missing underscore in lasso_samlp2_assertion_idrequest_new

	renamed samlp2_assertion_idrequest.i to /samlp2_assertion_id_request.i

	added preliminary support for the Assertion Query and Request profile.

	renamed files according to their contents

	renamed samlp2:AssertionIDRequest with an underscore between id and request.

2007-12-06  Damien Laniel  <dlaniel@entrouvert.com>

	handle name identifier formats : email and unspecified

	added all missing name identifier formats

2007-12-05  Damien Laniel  <dlaniel@entrouvert.com>

	break ABI less than before

	added support for encrypting name identifiers with id-ff 1.2

2007-12-03  Frederic Peters  <fpeters@entrouvert.com>

	store ProtocolProfile even when it is Redirect

	support for HTTP-Redirect binding being explicitely specified

2007-11-28  Frederic Peters  <fpeters@entrouvert.com>

	added support for sending SAMLv2 AuthnResponse over HTTP-Redirect (which shouldn't be used because the assertion within makes for a very big message)

2007-11-27  Frederic Peters  <fpeters@entrouvert.com>

	include serverprivate.h since lasso_server_get_first_providerID is used.

2007-11-22  Frederic Peters  <fpeters@entrouvert.com>

	format list in docstring with paragraphs, as this form is known by the new binding generator

	fixed parameter name that differed between docstring and function

	fixed parameter names that different between header and source file

	fixed comments pointing to the wrong function

	removed direct usage of g_object_unref from lasso_*_destroy methods

	formatting fix in docstring

	don't shout a critical error when there is no session and logout get_next_providerId is called.

2007-11-13  Frederic Peters  <fpeters@entrouvert.com>

	added sample identity dump

	fixed wrong type for SamlpRequest->RespondWith (list of strings, was declared as list of nodes)

2007-11-13  Damien Laniel  <dlaniel@entrouvert.com>

	removed the * from the GList item type as other GList items are commented with no *

	added item types for GHashTable

2007-11-12  Damien Laniel  <dlaniel@entrouvert.com>

	allow a NULL first parameter in init_notification

2007-11-11  Frederic Peters  <fpeters@entrouvert.com>

	fixed copyright comment header

2007-11-06  Damien Laniel  <dlaniel@entrouvert.com>

	added OrganisationName in the metadatas of the first test

2007-11-05  Damien Laniel  <dlaniel@entrouvert.com>

	removed a useless tab

2007-11-03  Frederic Peters  <fpeters@entrouvert.com>

	annotate GList* of xmlNode*

	changed GList* of xmlNode* annotation, to include the *

2007-10-30  Frederic Peters  <fpeters@entrouvert.com>

	updated annotations to use '/* of strings */' instead of '/* of char* */' as it is more readable

	added annotation about GList items type

2007-10-19  Frederic Peters  <fpeters@entrouvert.com>

	error checking when processing artifact response.

2007-10-11  Damien Laniel  <dlaniel@entrouvert.com>

	fixed modifyng root node

	added an idwsf1 test

	fixed a syntax error

2007-10-10  Damien Laniel  <dlaniel@entrouvert.com>

	fixed memory management

	fixed a memory error

	fixed error code

	added missing error codes in swig bindings

	run idwsf tests only if lasso has idwsf support

	fix error code

	removed an usused variable

2007-10-04  Frederic Peters  <fpeters@entrouvert.com>

	cosmetic issue, set parameter name in function declaration

2007-10-04  Damien Laniel  <dlaniel@entrouvert.com>

	changed the way status code is handled to make code simpler

2007-10-04  Frederic Peters  <fpeters@entrouvert.com>

	added lasso_data_service_get_resource_offering method to get LassoDiscoResourceOffering of a DataService

2007-10-03  Frederic Peters  <fpeters@entrouvert.com>

	returns SOAP fault with approriate value when need_redirect_user is called inbetween dataservice modify stuff.

2007-09-21  Frederic Peters  <fpeters@entrouvert.com>

	indentation fixes

	fixed indentation in generation script

2007-09-21  Damien Laniel  <dlaniel@entrouvert.com>

	fixed tabs

	removed whitespaces

	added checks on soap messages type

	fixed id-wsf 1 data service modify

	split the discovery query test and added data service query and data service modify tests

	fixed service_type in lasso_data_service_process_modify_msg

	fixed service_type in lasso_data_service_process_modify_msg

	some error checks and some coding style

2007-09-20  Frederic Peters  <fpeters@entrouvert.com>

	added missing session accessor

2007-09-20  Damien Laniel  <dlaniel@entrouvert.com>

	reordered methods so it's easier to read

	fixed data_service_init_modify method

	reordered methods so it's easier to read

	fixed personal profile constructor in bindings

2007-09-20  Frederic Peters  <fpeters@entrouvert.com>

	added knowledge about automake-1.10

2007-09-19  Damien Laniel  <dlaniel@entrouvert.com>

	added a unit test for id-wsf 1

2007-09-18  Damien Laniel  <dlaniel@entrouvert.com>

	check if (Encrypted)ResourceID is null

	fixed setting of resource offering datas into a data service

	check soap enveloppe to prevent segfaults

	removed useless line

	lasso_discovery_add_resource_offering doesn't exist, remove it completely from the binding this time

	added missing method

2007-09-12  Frederic Peters  <fpeters@entrouvert.com>

	adds support for text as answer to dst queries (instead of forcing answers to be full nodes)

2007-08-28  Damien Laniel  <dlaniel@entrouvert.com>

	fixed dll files path for installer

	set svn property to use Windows-style line endings for Windows files

	restored windows-style line endings in visual studio configuration files so they can be loaded

	updated visual studio main configuration file for new lasso version

	fixed missing character for macro

	updated links to version 2.1.1 for windows

2007-08-27  Frederic Peters  <fpeters@entrouvert.com>

	RPMs for 2.1.1 are now available

2007-08-21  Frederic Peters  <fpeters@entrouvert.com>

	updated website with 2.1.1

	bumped to 2.1.1

	fixed bad casting on get/set lists

	removed LassoSignatureType

	fixed usage of set|get_node_list and set|get_string_list

	added binding for LassoSignatureType which is just an enum but SWIG creates such ugly things.

2007-08-13  Frederic Peters  <fpeters@entrouvert.com>

	added pointers to 2.1.0 tarball

	updated changelog for 2.1.0

	bumped to 2.1.0

	updated SAML2 bindings with all attributes; and added copyright / licence notice.

	updated with current list of swig generated files

	remove reference to inexistent file

	fixed reference to metadata files

	added a wrapper around xmlParseMemory to avoid network and DTD

2007-08-08  Damien Laniel  <dlaniel@entrouvert.com>

	processModifyResponseMsg

2007-08-06  Damien Laniel  <dlaniel@entrouvert.com>

	swig binding for parse modify items

	parse modify items

	added ModifyResponse as custom namespace

2007-08-02  Damien Laniel  <dlaniel@entrouvert.com>

	added some missing Makefiles to configure.ac

2007-07-30  Damien Laniel  <dlaniel@entrouvert.com>

	added a missing END_THROW_ERROR

	added first functions for ID-WSF 2 attribute modification

	increased the number of allocatable objects

2007-07-30  Frederic Peters  <fpeters@entrouvert.com>

	added script to generate idwsf2 low level classes to repository

	DstRefAppData is just a template, don't consider it a string but a container for anything

2007-07-27  Damien Laniel  <dlaniel@entrouvert.com>

	changed abort message when too many objects are allocated

	changed abort message when too many objects are allocated

	use a constant for node_infos size

	abort when node_infos array has reached its limit

2007-07-27  Frederic Peters  <fpeters@entrouvert.com>

	access to saml2 attribute statement

2007-07-26  Frederic Peters  <fpeters@entrouvert.com>

	python2.3-lasso was package for old policy

	python2.3-lasso was package for old policy

	updated packaging to current sid package

	updated packaging to current sid package

2007-07-16  Damien Laniel  <dlaniel@entrouvert.com>

	added one error message

	some more data service tests

	data service query tests + one more test for discovery + some fixes to previous code

2007-07-11  Damien Laniel  <dlaniel@entrouvert.com>

	discovery query test suite

	moved common function to a super class

	test suite for metadata association add

	split id-wsf 2 tests in smaller functions

2007-07-10  Damien Laniel  <dlaniel@entrouvert.com>

	some unit tests for id-wsf 2

	fixed prefix changes for soap binding and ws security

	renamed some files

	added saml2 metadatas and keys for 1 idp and 2 sp

2007-07-10  Frederic Peters  <fpeters@entrouvert.com>

	don't call lasso_node_destroy on a NULL variable

	initialize global variables

	adds all classes from ID-WSF 2 required schemas; with appropriate changes to other files.

2007-07-09  Damien Laniel  <dlaniel@entrouvert.com>

	_new function have no parameters and added some _new_full function instead

	changed metadata_list attribute to SvcMD

2007-07-06  Frederic Peters  <fpeters@entrouvert.com>

	added namespaces used by other parts of id-wsf 2

2007-07-05  Damien Laniel  <dlaniel@entrouvert.com>

	check enveloppe existence in case lasso functions are called in wrong order

2007-07-03  Frederic Peters  <fpeters@entrouvert.com>

	hack around swig not declaring functions by declaring it ourself here, but it may break in a future swig version, this is just to get a clean build without any warning of the Python binding with SWIG 1.3.31...

	get_node_info_with_swig may not be used by the python binding, but it sure is used by other bindings (and if we were only concerned by python we wouldn't use swig).

2007-07-02  Damien Laniel  <dlaniel@entrouvert.com>

	commented out an usused function to fix another swig warning

	cleaned methods definitions to fix swig warnings

	fixed a swig warning in LassoServer

	fixed swig warnings for ID-WSF 1

	removed no more existing methods from id-wsf 1 swig bindings

	moved type attribute which isn't herited

	added service.queryItems + some attributes initialisation and destruction

2007-06-29  Damien Laniel  <dlaniel@entrouvert.com>

	added lasso.SOAP_FAULT_REDIRECT_REQUEST eception when WSP needs user consent + service.redirectUrl

	added one soap error and text for other soap errors

	added SoapBinding2 prefix to handle RedirectRequest

	added initRedirectUserForConsent

2007-06-19  Frederic Peters  <fpeters@entrouvert.com>

	fixed class hierarchy, with ID-WSF 2 specific stuffs going into LassoIdWsf2Profile (which now inherits from LassoProfile).

2007-06-18  Damien Laniel  <dlaniel@entrouvert.com>

	moved soap_envelope_request and soap_envelope_response to ProfilePrivate to avoid ABI breackage

2007-06-14  Damien Laniel  <dlaniel@entrouvert.com>

	rephrase a meaningless sentence

	fixed spelling mistake

	changed responseMsg to answer for consistency

	added 2 lines to get the

	added keys and metadata creation

	added a line to tell to restart Apache 2

2007-06-13  Damien Laniel  <dlaniel@entrouvert.com>

	moved epr free from finalize to dispose

	fixed EncryptedID usage ; last commit was a mistake

	use nameIdentifier attribute of LassoProfile for IdWsf2 profiles

	uncomment a useful line

	use nameIdentifier attribute of LassoProfile for IdWsf2 profiles

	initialise and destroy new attributes

	removed IdWsf2Profile and use LassoProfile instead

	removed IdWsf2Profile and use LassoProfile instead

	fixed gcj warnings + added 2 checks

	fixed tabs and spaces mix

	fix documentation for getting nameIdentifier content

	fix for getting nameIdentifier content

	renamed Wsf2Profile to IdWsf2Profile

	changed buildQueryResponseMsg to parseQueryItems + buildResponseMsg

	coding style

	changed buildQueryResponseMsg to buildQueryResponseEprs + buildResponseMsg

	replaced two strings with a constant

	better error handling + some refactoring

	removed a duplicate

2007-06-12  Damien Laniel  <dlaniel@entrouvert.com>

	split lasso_idwsf2_discovery_process_query_msg for the SP to get the name_id and load the identity dump in between

	decrypt nameId in identity token

	encrypt nameId in profile identity token

	coding style

	added comments

	coding style + comments

	save provider encryption in dumps and reload it from dump + reloads the keys after loading a dump

	moved xmlenc.h include where it is really needed

2007-06-11  Damien Laniel  <dlaniel@entrouvert.com>

	get the identity token from the current epr

	added a security token in all eprs (only disco eprs had one before)

	fixed warnings

	removed a duplicate line

	various error checks, coding style and refactoring

	removed a useless line

2007-06-09  Frederic Peters  <fpeters@entrouvert.com>

	fixed LassoIdWsf2DiscoSvcMetadata binding constructor

2007-06-08  Frederic Peters  <fpeters@entrouvert.com>

	differentiate between id-wsf 1 & 2 since this is what is expected in other places (won't work as easily for DST)

	recognize ID-WSF 2 disco query messages

2007-06-08  Damien Laniel  <dlaniel@entrouvert.com>

	various error checks, coding style and refactoring

	removed useless arguments for lasso_idwsf2_discovery_init_metadata_association_add

	removed lasso_idwsf2_data_service_get_personal_profile_email

	if the user wasn't yet associated to a discovery metadata, associate it + added some commments

	if a user hasn't been associated to a discovery metadata, give him a default disco epr

	added lasso_idwsf2_discovery_metadata_register_self and lasso_idwsf2_data_service_get_personal_profile_email

2007-06-07  Frederic Peters  <fpeters@entrouvert.com>

	noted about memleak to be fixed later

	properly allocate memory for svcMDID

2007-06-07  Damien Laniel  <dlaniel@entrouvert.com>

	check all function arguments in session and identity

	check session existence

2007-06-07  Frederic Peters  <fpeters@entrouvert.com>

	be robust, check for possible NULL variables.

2007-06-07  Damien Laniel  <dlaniel@entrouvert.com>

	memory management in lasso_idwsf2_data_service_get_attribute_string

	small fixes in lasso_idwsf2_data_service_get_attribute_string

	one more argument check + free node memory

	added some checks on arguments

	added lasso_idwsf2_data_service_get_attribute_string

	added lasso_idwsf2_data_service_get_attribute_node

	fixed gcc warnings

2007-06-07  Frederic Peters  <fpeters@entrouvert.com>

	extended xml_insure_namespace so it creates the namespace itself, after having looked for a preexisting namespace; the function was previously called with ns == NULL, which caused namespace to be *removed* from elements (ns was NULL because xmlNewNs will return NULL when the namespace is already defined).

	first snippet member is a name; looking for an element named "any" won't work that often...

	copied note from LIST_NODES to LIST_XMLNODES since the same behaviour is present in both.

2007-06-06  Damien Laniel  <dlaniel@entrouvert.com>

	removed useless line

	DST processQueryResponseMsg

	changed QueryResponse items data from string to xmlNode

	added missing files

2007-06-05  Frederic Peters  <fpeters@entrouvert.com>

	fixed Python scripts Damien broke when he updated copyright without checking.

2007-06-05  Damien Laniel  <dlaniel@entrouvert.com>

	added service.data and lasso_idwsf2_data_service_build_query_response_msg

	remove a print

	Copy session form discovery to data service object

	added dst profile registration

	cosmetics

2007-06-04  Damien Laniel  <dlaniel@entrouvert.com>

	use profile namespace for dst queries + added server as parameter to basic IdWsf2DataService constructor

	moved identity token code from discovery to wsf2_profile

	make some queryItem attributes optional

2007-06-04  Frederic Peters  <fpeters@entrouvert.com>

	returned objects must go through the binding; fix ID-WSF2 disco.getService

2007-06-04  Damien Laniel  <dlaniel@entrouvert.com>

	removed useless code

	swig binding for some ID WSF 2 functions + changed some types

2007-06-01  Damien Laniel  <dlaniel@entrouvert.com>

	added lasso_idwsf2_data_service_init_query and lasso_idwsf2_data_service_add_query_item

	added some node class for id-wsf-2.0 DST

2007-05-30  Damien Laniel  <dlaniel@entrouvert.com>

	updated Copyright dates in some more remaining files

	updated Copyright dates in some more remaining files

	revert copyright changed by mistake

	updated Copyright dates in remaining files

	updated Copyright dates in all files

	added data service class and lasso_idwsf2_discovery_get_service function

2007-05-09  Damien Laniel  <dlaniel@entrouvert.com>

	fixed usage of an identity without federation

	in lasso_idwsf2_discovery_register_metadata, create idenity if it doesn't exist

	filled msgUrl in initMetadataAssociationAdd

	fixed memory management

	don't use misc_text_node

	don't use g_return_if_fail here

	moved session check to where it's really needed

	added LassoIdentity_getSvcMDIDs method to swig

	added a forgotten file

	replaced svcMDs with svcMDIDs in identity and moved EPRs from identity to session

2007-05-08  Frederic Peters  <fpeters@entrouvert.com>

	also keep lasso prefix in PHP5 binding

2007-05-03  Damien Laniel  <dlaniel@entrouvert.com>

	fixed attribute name and name format

	added LASSO_EXPORT for a function in a public header

	changed function names to match binding function names

	don't use lasso_node_dump to create xml soap messages

	fixed SecMechID

	changed registerMetadata prototype + small fixes

	split processMetadataAssociationAddMsg into processMetadataAssociationAddMsg + registerMetadata - new API

2007-05-02  Damien Laniel  <dlaniel@entrouvert.com>

	get assertion from disco epr and put this assertion into soap header for metadata_association_add

2007-05-02  Frederic Peters  <fpeters@entrouvert.com>

	SNIPPE_ALLOW_TEXT doesn't have to be handled, but Damien gcc is warning-happy.

2007-05-02  Damien Laniel  <dlaniel@entrouvert.com>

	replaced status codes with constants

	don't segfault when receiving bad soap request or response

	replaced LASSO_WSF2_PROFILE(discovery) with profile everywhere

	wrap too long line

	fixed function name

	added assertion identity token into disco EPR

	added method to get an assertion security token from an EPR

	fixed spaces

2007-05-02  Frederic Peters  <fpeters@entrouvert.com>

	don't put text nodes in list nodes unless SNIPPET_ALLOW_TEXT is set

	fixed xmlCleanNs on recursing namespaces

	hardened id-wsf1 disco detection against misc nodes

	SNIPPET_LIST_NODES can now host LassoMiscTextNode, also useful now to directly embed a text element (instead of a node with a text element as content)

	whitespace cleaning

	binding for LassoLogin->assertion

	binding for LassoMiscTextNode

2007-05-01  Damien Laniel  <dlaniel@entrouvert.com>

	added identity token into metadata_association_add messages

2007-04-30  Frederic Peters  <fpeters@entrouvert.com>

	xml_enc.h should have been public; so much for QA.

2007-04-25  Frederic Peters  <fpeters@entrouvert.com>

	const'ified a bunch of parameter that are immutable

2007-04-25  Damien Laniel  <dlaniel@entrouvert.com>

	fixed gcc warning

	added id-wsf 2.0 request types + added a missing include

	removed const warning from gcc

2007-04-25  Frederic Peters  <fpeters@entrouvert.com>

	new server.addServiceFromDump method, and extended addService to work for both id-wsf 1 and 2; also necessary to add quick hack in new_from_xmlnode to map SvcMD to SvcMetadata.

2007-04-25  Damien Laniel  <dlaniel@entrouvert.com>

	fill profile->request in init_metadata_register + added soap_endpoint parameter

	fill profile->request in init_metadata_register

2007-04-24  Frederic Peters  <fpeters@entrouvert.com>

	added getSvcMetadatas method to lasso.Identity, to bind lasso_identity_get_svc_metadatas().

2007-04-24  Damien Laniel  <dlaniel@entrouvert.com>

	coding style fixes

	coding style fix

	implemented discovery query

2007-04-19  Frederic Peters  <fpeters@entrouvert.com>

	a little bit of imagination to avoid new classes for each and every simple element with a different name.

2007-04-19  Damien Laniel  <dlaniel@entrouvert.com>

	Build a Disco EPR within saml 2 login assertion

2007-04-19  Frederic Peters  <fpeters@entrouvert.com>

	cleaning warnings signaled by gcc

2007-04-19  Damien Laniel  <dlaniel@entrouvert.com>

	fixed gcc warnings

	minor fixes

2007-04-18  Damien Laniel  <dlaniel@entrouvert.com>

	completed metatada_register and metadata_association_add

2007-04-17  Damien Laniel  <dlaniel@entrouvert.com>

	added saml_attribute_value.[ch] to Makefile.am

2007-04-16  Damien Laniel  <dlaniel@entrouvert.com>

	typo

	fixed typo (no idea how long it had been there)

	start writing an ID-WSF EPR in saml 2 assertions

	md_association_add xml nodes

	identity + session in discovery + SvcMDAssociationAdd

2007-04-14  Frederic Peters  <fpeters@entrouvert.com>

	new StringDict to map GHashTable of strings to a structure similar to a python dictionary (necessary to support mapping of "any" attributes)

	updated liberty document uris

	updated with version from a newer generator (initialize anyAttribute hash table and correctly set content to 0 instead of NULL)

	add profileprivate.h header for lasso_profile_clean_info function declaration

	add missing profileprivate.h header for lasso_profile_clean_info function declaration.

	optimize type autodetection in lasso_node_new_from_xmlNode by reordering namespace matches and stopping at first success

	added reference to WsAddr

	implemented support for SNIPPET_ATTRIBUTE | SNIPPET_ANY (using GHashTable).

	removed useless glib/glist.h include

	fixed last commit author in buildbox

2007-04-13  Damien Laniel  <dlaniel@entrouvert.com>

	disco.processMetadataRegisterResponseMsg(soap_answer) and disco.svcMDID + renamed Idwsf2 to IdWsf2 to make it work with new classes

2007-04-13  Frederic Peters  <fpeters@entrouvert.com>

	don't include wsu_ symbols in non-id-wsf builds

2007-04-13  Damien Laniel  <dlaniel@entrouvert.com>

	disco.processMetadataRegisterMsg(soap_answer) and disco.buildResponseMsg()

2007-04-12  Damien Laniel  <dlaniel@entrouvert.com>

	implemented disco.metadata.dump()

	changed disco classes and methods names + make lasso_idwsf2_discovery_process_metadata_register_msg work

	removed useless check

	removed useless headers

	added wsu_timestamp class

	removed id-wsf 1 soap headers and added wsu_timestamp id-wsf 2.0 element

2007-04-11  Frederic Peters  <fpeters@entrouvert.com>

	only include wsa_ when ID-WSF is enabled

	added WS-Addr classes

2007-04-11  Damien Laniel  <dlaniel@entrouvert.com>

	removed useless g_object_ref

	fixed include

	implementing lasso_idwsf2_discovery_process_metadata_register_msg, not working yet

2007-04-11  Frederic Peters  <fpeters@entrouvert.com>

	target namespace for disco would better be disco, not ds, to avoid confusion

	renamed disco_service_metadata to disco_svc_metadata

2007-04-10  Damien Laniel  <dlaniel@entrouvert.com>

	renaming + removed some useless casts

	some more work on metadata registration

2007-04-08  Frederic Peters  <fpeters@entrouvert.com>

	adding all ID-WSF 2.0 namespaces

2007-04-07  Frederic Peters  <fpeters@entrouvert.com>

	fixing figures from cvs2svn conversion

2007-04-06  Frederic Peters  <fpeters@entrouvert.com>

	keep a single --enable-wsf configure option, for both ID-WSF 1 and 2.

2007-04-05  Damien Laniel  <dlaniel@entrouvert.com>

	removed useless comments and wrap too long lines

	'service metadata register' message construction

	moved and renamed attributes

2007-04-04  Frederic Peters  <fpeters@entrouvert.com>

	fixed segfault on invalid input passed to lasso_wsf_profile_process_soap_response_msg

	fixed usage of constant strings in Perl binding

2007-04-03  Damien Laniel  <dlaniel@entrouvert.com>

	ID-WSF 2.0 : basix swig support

	build configuration for id-wsf 2.0

	new strings declarations

	ID-WSF 2.0 Discovery query : not yet working classes

2007-04-03  Damien Laniel  <Damien Laniel@localhost>

	ID-WSF 2.0 Discovery Query : not yet working classes

	ID-WSF 2.0 Discovery : Some XML nodes

2007-03-29  Frederic Peters  <fpeters@entrouvert.com>

	website update; Lasso is now managed in Subversion

2007-03-26  Frederic Peters  <fpeters@entrouvert.com>

	website import

2007-03-24  Frederic Peters  <fpeters@entrouvert.com>

	Attic shouldn't have been imported during the switch to svn

2007-01-16  Frederic Peters  <fpeters@entrouvert.com>

	updated changelog for 2.0.0

	fixed memory leaks

	updated version number and required swig version

2007-01-09  Frederic Peters  <fpeters@entrouvert.com>

	added section for ECP (and titled LECP)

2007-01-08  Frederic Peters  <fpeters@entrouvert.com>

	reordered some elements in index and added short descriptions to all elements

	fixed docstring parameter name

	added all classes for SAMLv2 schema elements

	un-idff'ied docstrings (and fixed a few comments)

	added documentation about SAMLv2 Name Id Management profile; and by the same time updated all tmpl/ files with a newer gtk-doc

2007-01-07  Frederic Peters  <fpeters@entrouvert.com>

	fixed provider->private_data->encryption_public_key memory leak and removed duplicate freeing for public_key and ca_cert_chain

	mitigate memory leak (?)

	fixed memory leak occuring near SNIPPET_SIGNATURE

	fixed memory leak in Extension to query string conversion

	fixed memory leak

	unfixed memory leak, because strange manipulations to xmlnode structures could cause memory corruption

2007-01-06  Frederic Peters  <fpeters@entrouvert.com>

	removing white space lost in a tab

	removing white spaces on blank lines

	fixing indentation

	removing white space on blank line

	removing spaces from otherwise white lines

	fixed indentation & param checking

	fixed memory leak

	fixed little memory leak

2007-01-05  Frederic Peters  <fpeters@entrouvert.com>

	replace some xmlFree that should have been g_free and added some xmlFree where required.

	even more memory leak tracking

	new lasso_profile_clean_msg_info function used to clean msg_url and msg_body (free()ing and setting to NULL) in functions where those variables are later set.

	fixed some memory leaks (tracked with valgrind)

	cleaning up memory allocated for tests; so valgrind logs are cleaner

	memory management, avoid leaking xmlDoc*

2007-01-04  Frederic Peters  <fpeters@entrouvert.com>

	directly include headers from xmlsec/openssl/; at least required to compile on Fedora Cora 6.

	bumped version to 1.9.9 (and updated libtool version accordingly) and disabled PHP5 support by default.

	misc fixes for 1) memory leaks around XPath usage and 2) potential segfaults from untested pointers

	new LASSO_NAME_IDENTIFIER_MAPPING_ERROR_MISSING_TARGET_IDENTIFIER error code

2007-01-03  Frederic Peters  <fpeters@entrouvert.com>

	make ID-FF SLO works even when there are SAMLv2 assertions in the session

	insure sso and slo from SAML2 work even when there are active ID-FF sessions.

	removed memory leak (GPtrArray was not freed) by directly accessing assertions from their hash table instead of an intermediary GPtrArray.

2007-01-02  Nicolas Clapies  <nclapies@entrouvert.com>

	Updated metadata saml2 saming files. Fixed protocol binding setting when initiating sso.

2006-12-28  Frederic Peters  <fpeters@entrouvert.com>

	removed XXX comment about SessionIndex since it is handled in the application, not in Lasso

	harmonized LASSO_PARAM_ERROR_BAD_TYPE_OR_NULL_OBJ and LASSO_PARAM_ERROR_INVALID_VALUE usage

	extra checking for wrong or NULL parameters

	more fixes for optional arg support in PHP

	optional args are handled differently in newer SWIG versions

	notice when building deflated query fails, and don't include (null) as query component in this case.

	fixed crashed added when changing find_path return type

	coding style improvements

	replaced remaining LASSO_ERROR_UNDEFINED by appropriate error codes

	new error codes and coding style

	missing include, typo in comment and coding style

	coding style

	replaced LASSO_ERROR_UNDEFINED by appropriate error codes in all of xml/ and id-ff/

	coding style: added spaces at appropriate places

	replaced most LASSO_ERROR_UNDEFINED by appropriate error codes (two occurences are remaining)

	fixed all occurences of returning a negative number unspecified in errors.h

	replaced all usage of UNDEFINED error code in logout profiles (both ID-FF and SAMLv2) by appropriate error codes

2006-12-27  Frederic Peters  <fpeters@entrouvert.com>

	new LASSO_PROFILE_ERROR_STATUS_NOT_SUCCESS error code

	typo fix

	changed test against assertions which could yield a useless LASSO_ERROR_UNDEFINED

	avoid segfaults when passing NULL to *_new_from_dump

	fixing a bunch of possible segfaults (NULL passed to strlen)

	fixing a bunch of undeclared functions and possible segfaults; also removed some debugging printf.  (ID-WSF is now warning-free (but char signedness))

	fixing some usage of unitialized variables in SAMLv2 support

	correctly initialize req at top of function and don't try to get the deflated samlv2 query if the parameter was not present

	moved find_path and set_value_at_path from returning int to returning gboolean; this gets rid of ugly and useless LASSO_ERROR_UNDEFINED in thos functions.

	default encryption type is AES-128, rearranged code so that is clearer (let default handling be at the end)

	fixed gtk-doc for some enums

	Adding Damien to developers

	fixing minor typo

	added libgcj7-dev for gcj 4.1

2006-12-21  Frederic Peters  <fpeters@entrouvert.com>

	fixed a few (harmless) warnings detected when compiling with -Wall -Wmissing-declarations -Wdeclaration-after-statement

	set return type

2006-12-20  Frederic Peters  <fpeters@entrouvert.com>

	fixed used of unitialized variable

2006-12-20  Nicolas Clapies  <nclapies@entrouvert.com>

	Added SAML2 PHP documentation. Need to complete with some Login and Logout details. Need to add description of Name Id Management profile.

2006-12-20  Damien Laniel  <dlaniel@entrouvert.com>

	Allow the choice of the encryption algorithm to use

2006-12-19  Frederic Peters  <fpeters@entrouvert.com>

	include all testing metadata

2006-12-18  Frederic Peters  <fpeters@entrouvert.com>

	fix rst syntax

2006-12-16  Frederic Peters  <fpeters@entrouvert.com>

	Added (and documented) new members to snippet, necessary to fix namespace for saml:AuthnContextClassRef used in samlp:RequestedAuthnContext

2006-12-08  Frederic Peters  <fpeters@entrouvert.com>

	testing metadata files are in $(srcdir)

	include tests metadata subdir

	ship metadata files used in tests

	fixed php configure options indentation

	added support for PHP5

	compile PHP5 binding fine (using PHP_VERSION_ID to see if this is PHP 5)

	try to avoid detecting php5 as a compatible php version

	tarball have to ship two new Java file

	ship xml_enc.h

2006-12-07  Frederic Peters  <fpeters@entrouvert.com>

	removed -dlname argument which disappeared in SWIG 1.3.31 and was already optional in 1.3.29

	abstract is a reserved java keyword

	different code path for SWIG >= 1.3.31 for downcast in java

	added (required in swig 1.3.31) methodmodifiers for javadestruct delete typemap

	abstract attribute breaks php binding with SWIG 1.3.31

	fixed PHP4 #ifdef

	binding for new error code

	ECP fixes

	SAMLv2 compliance fix (mostly RelayState and affiliations related)

	use Location when ResponseLocation is not available

	minimal support for EncryptedID in federation termiation

2006-12-06  Damien Laniel  <dlaniel@entrouvert.com>

	Better parse xml to find and EncryptedKey

2006-12-06  Frederic Peters  <fpeters@entrouvert.com>

	if signature element is not found, look for it in an assertion element (this is not perfect since it should be possibly to check *both* signatures and we don't care for the moment)

	new logout error code

	relaystate handling

	set Destination and handle relayState

	fixed ecp attribute name

2006-12-05  Nicolas Clapies  <nclapies@entrouvert.com>

	Added paos response message process support in LassoLogin object.

2006-12-05  Frederic Peters  <fpeters@entrouvert.com>

	look up harder for encypted stuff

	avoid segfaults looking for decryption key

	return missing assertion error on missing assertion

	removed conflicting change

	use 128-bit AES which seems better supported by other applications

	fixed casing for all saml2 attribute members

2006-12-04  Nicolas Clapies  <nclapies@entrouvert.com>

	Moved ECP protocol binding detection from to PAOS.

2006-12-04  Damien Laniel  <dlaniel@entrouvert.com>

	Verify message signature in lasso_saml20_login_process_authn_response_msg

2006-12-04  Frederic Peters  <fpeters@entrouvert.com>

	look up for the right federation based on affiliation in logout

	use federation from affiliation if necessary in logout

	correctly rename attributes to camelCase

	fixed signature element position

	binding for authnStatement

2006-12-02  Damien Laniel  <dlaniel@entrouvert.com>

	Fixed memory management

	Fixed memory management problems

	Fixed a few warnings with -Wall

2006-12-01  Frederic Peters  <fpeters@entrouvert.com>

	(stupid me) initialize and destroy correctly affiliation variables

	achieved support for using affiliations

	fixing case for NameIdPolicy binding

	include id-wsf/identity.h to get identity_get_offerings prototype

2006-12-01  Damien Laniel  <dlaniel@entrouvert.com>

	Added an error code in bindings

2006-12-01  Frederic Peters  <fpeters@entrouvert.com>

	on logout response, if responder then look inside for real value

2006-12-01  Damien Laniel  <dlaniel@entrouvert.com>

	Fixed a memory problem (was double free)

2006-11-30  Damien Laniel  <dlaniel@entrouvert.com>

	Fixed logout request signature

	Initialise and destroy correctly provider private datas

2006-11-30  Frederic Peters  <fpeters@entrouvert.com>

	only call into lasso_saml20_login_process_paos_response_msg if PAOS namespace is visible; this avoids parsing three times the same message for the common case of *not* PAOS.

	removed side effects in samlp2_response/get_xmlNode

	fixed case when not using encrypted assertion

	fixing memory leaks, side effects and more in EncryptedAssertion

2006-11-30  Nicolas Clapies  <nclapies@entrouvert.com>

	Uncommented xml free.

	Fixed memory use.

2006-11-30  Frederic Peters  <fpeters@entrouvert.com>

	naming lists "item" is confusin

2006-11-30  Nicolas Clapies  <nclapies@entrouvert.com>

	Added missing ecp private header file.

	Added private structure for LassoEcp to keep relayed data.

2006-11-30  Frederic Peters  <fpeters@entrouvert.com>

	use appropriate functions for g_list_

	re-enabling saml2 signature check

2006-11-29  Damien Laniel  <dlaniel@entrouvert.com>

	Moved assertion encryption code out of saml2_response.c to tools.c

	Encrypt Assertions at the last moment, so that the assertions should be fully built before that

2006-11-28  Damien Laniel  <dlaniel@entrouvert.com>

	Don't include the internal datas of the nodes in encrypted elements

	Added an error type when there is no key to decrypt some encrypted elements

2006-11-28  Frederic Peters  <fpeters@entrouvert.com>

	fixed references to SWIGPHP4

	extra checks to pass negative testing steps

2006-11-27  Frederic Peters  <fpeters@entrouvert.com>

	include header file for lasso_saml20_profile_set_session_from_dump

	removed unused variable and added check for identity before accessing it

	removed unused variable

	removed debugging output

2006-11-27  Damien Laniel  <dlaniel@entrouvert.com>

	Support for name-id:format:encrypted in NameIdPolicy in Authnrequest

2006-11-24  Damien Laniel  <dlaniel@entrouvert.com>

	return -1 was not cute

2006-11-23  Damien Laniel  <dlaniel@entrouvert.com>

	Added an original node to encrypted elements, only in dumps, for the dump to be readable

	Removed useless headers

	Encrypt and decrypt NameID in logout requests

	Coding style fix

2006-11-23  Frederic Peters  <fpeters@entrouvert.com>

	removed use of unallocated variable

	style and missing header

	fixing indentation

2006-11-23  Nicolas Clapies  <nclapies@entrouvert.com>

	Added missing updates about LassoEcp object.

2006-11-22  Nicolas Clapies  <nclapies@entrouvert.com>

	Updated binding for LassoEcp object.

2006-11-22  Damien Laniel  <dlaniel@entrouvert.com>

	Binding for setEncryptionMode

	Changed setEncryption(boolean) to setEncryptionMode(enum mode)

	Binding for setEncryption method

	changed provider->private_data->encryption name to provider->private_data->encryption_enabled

	Fix LassoSaml2EncryptedElement name

	Added lasso_provider_set_encryption method to activate or desactive encryption

2006-11-22  Frederic Peters  <fpeters@entrouvert.com>

	reduced memory allocation (and loc)

2006-11-22  Damien Laniel  <dlaniel@entrouvert.com>

	Changed xmlGetNoNsProp with xmlGetProp in lasso_decrypt

2006-11-21  Frederic Peters  <fpeters@entrouvert.com>

	fixed pkey memory leak

2006-11-21  Damien Laniel  <dlaniel@entrouvert.com>

	coding style fixes

	Free bio on error in lasso_get_pem_file_type

	Fixed -Wall warnings and replaced a LASSO_ERROR_UNDEFINED

	Coding style fixes + removed the obsolete comment about set_nodename in LassoSaml2EncryptedElementClass

	Set nodename "EncryptedElement" in LassoSaml2EncryptedElementClass

	updated comments

	- Can use AES EncryptedKey as well as DES to decrypted the EncryptedData - Encrypt nodes with 256-bit AES

2006-11-21  Frederic Peters  <fpeters@entrouvert.com>

	in LIST_NODES, if snippet->name is set; use it.

	##any nodes needs empty snippet name

2006-11-21  Damien Laniel  <dlaniel@entrouvert.com>

	Encrypt and decrypt Assertion

2006-11-21  Frederic Peters  <fpeters@entrouvert.com>

	check for identity before accessing it

2006-11-20  Nicolas Clapies  <nclapies@entrouvert.com>

	Restored immutable attribute msg_relayState in LassoLogin object.

	Moved SOAP value as last element in lists.

2006-11-20  Frederic Peters  <fpeters@entrouvert.com>

	new server method, for saml2 affiliations

	saml2 server private functions

2006-11-19  Frederic Peters  <fpeters@entrouvert.com>

	added loading of affiliation metadata (not yet acted upon)

	const'ified some char*

	rewritten in a shorter form

	s/file_name/filename/

	don't include * in %rename() statements

2006-11-16  Damien Laniel  <dlaniel@entrouvert.com>

	- Moved the EncryptedKey to the same level as EncryptedData in xml - Changed the prototype for lasso_node_encrypt and lasso_node_encrypt - Moved lasso_node_encrypt and lasso_node_encrypt declaration to xml_enc.h - Added a GList for EncryptedKey in EncryptedElement

2006-11-16  Frederic Peters  <fpeters@entrouvert.com>

	process_authn_response_msg for saml2; this is similar to id-ff even if the underlying messages are different

	correctly looks up assertionconsumerservice url, even with just the binding

2006-11-15  Frederic Peters  <fpeters@entrouvert.com>

	binding for SAML2 binding uri; and fixed SAML20 to SAML2 for coherence

2006-11-15  Damien Laniel  <dlaniel@entrouvert.com>

	Decryption of EncryptedID in Assertion

2006-11-15  Frederic Peters  <fpeters@entrouvert.com>

	fixed up lasso_saml20_logout_process_response_msg function name; and remove assertion on SP when initiated on SP.

2006-11-14  Frederic Peters  <fpeters@entrouvert.com>

	random fixage of warning displayed with -Wall

2006-11-14  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed big mistake about PAOS naming. Added more strict check when trying to process PAOS response in login.c.

	Fixed declaration line ending.

	Added ecp files.

2006-11-14  Frederic Peters  <fpeters@entrouvert.com>

	downcast soapenvelope to LassoNode

	include header from xmlsec to get xmlSecCreateTree declaration

2006-11-14  Nicolas Clapies  <nclapies@entrouvert.com>

	Added ecp.h in public declarations.

	Added binding for ECP. Modified binding in Lasso.si to allow setting LassoProfile's msg_relayState.

	Added ECP profile (client, SP and IDP parts).

	Added functions to export to PAOS request and ECP response.

2006-11-14  Damien Laniel  <dlaniel@entrouvert.com>

	Replaced some  LASSO_ERROR_UNDEFINED with real error codes

	Test on a possibly NULL pointer to avoid seg fault

2006-11-13  Damien Laniel  <dlaniel@entrouvert.com>

	Read SNIPPET_XMLNODE from XML

	Added documentation for SNIPPET_XMLNODE

	Added EncryptedID as SNIPPET_XMLNODE in Subject in Assertion

	Header for lasso_node_encrypt

2006-11-13  Frederic Peters  <fpeters@entrouvert.com>

	also dump private data; necessary for saml2 artifact support

2006-11-13  Damien Laniel  <dlaniel@entrouvert.com>

	Added lasso_node_encrypt to encrypt a Lasso node

2006-11-10  Frederic Peters  <fpeters@entrouvert.com>

	don't set inResponseTo if there is no request

	include http request method in profile dumps

2006-11-09  Damien Laniel  <dlaniel@entrouvert.com>

	moved encryption key loading from id-ff to saml-2.0

	properly initialise encryption_private_key

	Use xmlSecKeyDestroy to free the key in lasso_server_set_encryption_private_key

	Fix a possible memory leak in lasso_server_set_encryption_private_key and add a comment

	binding for lasso_server_set_encryption_private_key

	changed prototype for lasso_server_set_encryption_private_key and added error handling

2006-11-09  Frederic Peters  <fpeters@entrouvert.com>

	Change from string to list in requestedAuthnContext.

	AuthnContextClassRef is a list; treat is as such

	only compare saml1 assertion

2006-11-09  Damien Laniel  <dlaniel@entrouvert.com>

	load encryption private key

2006-11-09  Frederic Peters  <fpeters@entrouvert.com>

	filled login_must_authenticate with intelligence about authncontext

2006-11-08  Frederic Peters  <fpeters@entrouvert.com>

	support for RequestAuthnContext in must_authenticate (incomplete but not likely to do much more here; I'll do it better in SAML2)

	changed lasso_session_get_assertions not to g_object_ref assertions, so they don't have to be freed.

	spec refers to signing/encryption so use that vocabulary (even if I don't like it)

	minor changes & fix to coding style for enc public key loading

	encryption_public_key will always be set from metadata; no need for filename stuff and to touch the public struct.

2006-11-08  Damien Laniel  <dlaniel@entrouvert.com>

	load encryption key from metadatas

2006-11-08  Frederic Peters  <fpeters@entrouvert.com>

	more appropriate error code

	error on sso initiated by idp and no endpoint defined as default for sp

	saml2 sso initiated by idp

2006-11-07  Frederic Peters  <fpeters@entrouvert.com>

	can get assertion consumer service url from that very same attribute

	fixed url/query construction for endpoints with query part (zxid)

2006-11-07  Damien Laniel  <dlaniel@entrouvert.com>

	fix metadata test

	tests for loading certs and keys from metadata

2006-11-07  Frederic Peters  <fpeters@entrouvert.com>

	fixed dump/restore from dump for name id management profile

2006-11-06  Frederic Peters  <fpeters@entrouvert.com>

	fixing saml2 sso error cases (on ispassive)

	spelling

	better loading of public key from metadata; full support for embedded PEM, and suppressed output when not base64.

	keep a copy of assertion easily accessible for further changes

	added LASSO_SAML2_CONFIRMATION_METHOD_BEARER

	set subject confirmation method and recipient; to be conformant.

	error code for missing assertion

2006-11-05  Frederic Peters  <fpeters@entrouvert.com>

	implementation of lasso_name_id_management_process_response_msg

	appropriate return code

	detection of SOAP name id management

2006-11-04  Frederic Peters  <fpeters@entrouvert.com>

	bindings for new LassoNameIdManagement profile

	empty _process_response_msg

	LassoNameIdManagement is first class profile -> included in lasso.h

	dump handling

	invert args

	fixed new id param format

	name id management saml2 profile (lacks process_response)

	fixed small memory leak in saml2 slo

2006-11-03  Frederic Peters  <fpeters@entrouvert.com>

	fix saml2 artifact decoding

2006-11-02  Frederic Peters  <fpeters@entrouvert.com>

	if node was not base64, use its original value for key loading.

	set provider role; so mixed sp/idp metadata is ok.

2006-11-02  Damien Laniel  <dlaniel@entrouvert.com>

	Added back LASSO_PROFILE_ERROR_MISSING_ARTIFACT

2006-11-02  Frederic Peters  <fpeters@entrouvert.com>

	new lasso_profile_is_saml_query function

	uncomment xmlsec output directives; that should not have been commented

	already set remote_provider_id in process_request

2006-11-02  Damien Laniel  <dlaniel@entrouvert.com>

	Replaced return -1 with return LASSO_ERROR_UNDEFINED

	Added some error cases

	tests on possibly null pointers

2006-11-02  Frederic Peters  <fpeters@entrouvert.com>

	coding style

	downcast nameidentifier to LassoNode*  in LassoLogout; so that it works with both ID-FF (LassoSamlNameIdentifier) and SAML2 (LassoSaml2NameID)

2006-10-31  Damien Laniel  <dlaniel@entrouvert.com>

	changed LASSO_LIB_NAME_ID_POLICY_TYPE_FEDERATED to LASSO_LIB_NAMEID_POLICY_TYPE_FEDERATED according to the code

2006-10-30  Frederic Peters  <fpeters@entrouvert.com>

	removed XXX comments after Damien looked at them

	include authentication statement in saml2 assertion

	saml2 artifacts include an endpoint index; fill it with 0 for the moment.

2006-10-29  Frederic Peters  <fpeters@entrouvert.com>

	deal with default assertion consumer service url

	use new error code for missing artifact

	new error code for missing artifact

	correctly clean memory

	fixed reference to length when inflating

	default value set to -1 and marked as optionals

	saml-2.0 more POST support

	s/SAMLArt/SAMLart/ (+ check for remote provider)

	handle "1" as well as "true" in booleans

	started support for AssertionConsumerServiceIndex (as alternative to ProtocolBinding) (used by zxid)

	saml2 query strings are often limited to one single arg

	accept PAOS binding

2006-10-28  Frederic Peters  <fpeters@entrouvert.com>

	finished saml2/sso/post

	note about memory leak

	standard .cvsignoe

	handle saml2/sso/post (almost)

	handle saml2/sso/post (almost, need to fix return url)

	initialize private_key_file and certificate_file properly

	formatting

	use external stylesheet

	rest2html is now shipped as rst2html, also looks for this one

	return defined error code

	cast function reference

	standard .cvsignore for saml-2.0/ dir

	marked maxInteractTime as optional

	LassoDiscoServiceInstance are freed through lasso_node_destroy

	fixed deflate, tested against lightbulb(opensso-php)

2006-10-27  Nicolas Clapies  <nclapies@entrouvert.com>

	Added documentation about writing a sp in java.

2006-10-26  Frederic Peters  <fpeters@entrouvert.com>

	use zlib compress2 instead of lowlevel functions, this fixes inflate.

	don't automatically fallback to redirect, this breaks some cases....

	checking pointers...

2006-10-25  Frederic Peters  <fpeters@entrouvert.com>

	return NULL; not an error code

	check for response before accessing it

	check for query before accessing it

2006-10-12  Frederic Peters  <fpeters@entrouvert.com>

	nameIdentifier is now a LassoSamlNameIdentifier; which should help Java

2006-10-09  Frederic Peters  <fpeters@entrouvert.com>

	revert to SNIPPET_LIST_NODES; which is required for ID-WSF to work

2006-10-02  Frederic Peters  <fpeters@entrouvert.com>

	ds_* are now also used out of id-wsf

2006-09-29  Frederic Peters  <fpeters@entrouvert.com>

	check session is not NULL even in functions where it shouldn't happen; since developer may always call functions out of order.

2006-09-28  Frederic Peters  <fpeters@entrouvert.com>

	better error handling in slo

2006-09-21  Damien Laniel  <dlaniel@entrouvert.com>

	updated documentation for lasso server creation prototype change

2006-09-19  Frederic Peters  <fpeters@entrouvert.com>

	fixed lasso_server_new prototype

2006-08-03  Frederic Peters  <fpeters@entrouvert.com>

	use specific error messages

	fill LassoDataService provider_id member on process_request

	define and use specific error codes

2006-05-16  Frederic Peters  <fpeters@entrouvert.com>

	SWIG 1.3.28 is required.

	be more specific in role

	support for SNIPPET_LIST_XMLNODES (very old patch)

2006-05-11  Frederic Peters  <fpeters@entrouvert.com>

	added missing comma

	error message

2006-05-10  Frederic Peters  <fpeters@entrouvert.com>

	don't say undefined when it is, just lacking a description string, bugger.

	looking up NameIdentifier in AttributeStatement (old patch)

2006-03-21  Frederic Peters  <fpeters@entrouvert.com>

	ship Lasso-saml2.i; part of 0.6.5

	updated to 0.6.5

	fixed doc

	note about 0.6.5

	note about 0.6.5

	try to find nameidentifier in alternative location; for compatibity with some idp

	Helps building outside srcdir

	fixed a few win32 versioning issues

2006-03-20  Frederic Peters  <fpeters@entrouvert.com>

	killed a chicken to restore swig voodoo; hope it is enough, I'm running out of virgins.

2006-03-20  Damien Laniel  <dlaniel@entrouvert.com>

	changed contact address for php documentation to mine

2006-03-19  Frederic Peters  <fpeters@entrouvert.com>

	update copyright year, add Damien to the php doc authors, run a spellchecker on the doc

	unified braces on if line, spaces between if and parenthesis and indentation; also use the same $server variable name everywhere

2006-03-19  Damien Laniel  <dlaniel@entrouvert.com>

	fixed doc writing-a-php-sp.txt

2006-03-19  Frederic Peters  <fpeters@entrouvert.com>

	removed hardcoded php dependency, added php:Depends substvar

	removed hardcoded php dependency, added php:Depends substvar

2006-03-17  Frederic Peters  <fpeters@entrouvert.com>

	fixed RSA_SHA1 constant name

2006-03-08  Frederic Peters  <fpeters@entrouvert.com>

	fixed underline

	updated changelog to 0.6.4

	update to 0.6.4

	update to 0.6.4

	fixing python test.

	ignoring generated saml2 files

	info about 0.6.4

	updated (c) years and gforge url

	updated FSF address

	releasing 0.6.4

	don't ship c# in this release

2006-03-06  Frederic Peters  <fpeters@entrouvert.com>

	new error check test

	ship logoutprivate.h

	ship style.css

	don't ship fedterm-redirect.svg for now

	updated generated java files list

	missing brace

	adding braces

	don't unref/affect the same pointer; this will cause segfaults (seen in java)

	ignoring generated Makefile and Makefile.in

	SWIG upgrade (->1.3.28) broke once again bindings; this time thanks to macros that are now required to have args (looks like that anyway, nothing is documented); fixing this.

2006-03-04  Frederic Peters  <fpeters@entrouvert.com>

	fixed variable type; how bad

	cast strings to xmlChar* for correct signedness

	added comment about why not to use memset

2006-02-21  Frederic Peters  <fpeters@entrouvert.com>

	added short desc for lasso.h

	added short descriptions to every lib: classes

	more doc

	documentation fixes

2006-02-06  Frederic Peters  <fpeters@entrouvert.com>

	don't g_object_ref what can be NULL

2006-01-25  Frederic Peters  <fpeters@entrouvert.com>

	own style for reference doc

	fixing redirect example

	fix memory management for ID-WSF ResourceId

2006-01-23  Frederic Peters  <fpeters@entrouvert.com>

	check for remote provider id before looking it in GHashTable

	don't segfault when lasso_logout_build_request_msg is erroneously called without lasso_logout_init_request before

2006-01-21  Frederic Peters  <fpeters@entrouvert.com>

	fix swig id-wsf disco for new version of swig

2006-01-12  Frederic Peters  <fpeters@entrouvert.com>

	duplicate key to fix consecutive calls to xmlsec

2006-01-05  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed symbol error about LassoDiscoDescription_newWithBriefSoapHttpDescription.

	Fixed node prefix from interaction service namespace element.

2005-12-10  Frederic Peters  <fpeters@entrouvert.com>

	bindings working with swig 1.3.27

2005-12-06  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed missing declaration and settings.

	AP now verify SP signature.

	*** empty log message ***

	*** empty log message ***

	Only KeyValue in KeyInfo. Added KeyValue and RsaKeyValue element.

2005-12-05  Frederic Peters  <fpeters@entrouvert.com>

	fixed host specific architecture changes

	dont parse files in id-wsf/ when not compiled with id-wsf support (required for mac os x nmedit)

2005-11-22  Frederic Peters  <fpeters@entrouvert.com>

	missing saml 2 file

	Completed first go of SAML 2.0 single logout and added some missing files

2005-11-21  Frederic Peters  <fpeters@entrouvert.com>

	starting SAML 2 logout

2005-11-20  Frederic Peters  <fpeters@entrouvert.com>

	swig inheritance for SAML 2 elements

	removing xmlsec debug code

	SAML 2.0 support (only web-sso for the moment)

2005-11-15  Nicolas Clapies  <nclapies@entrouvert.com>

	Little modif about SAML authentication verification

	Renamed lasso_data_service_need_user_interaction() to lasso_data_service_need_redirect_user().

	Only add lasso_ds_* for id-wsf.

	Added binding for user interaction in data service.

	Added some user interaction support : lasso_data_service_need_user_interaction() sets soap response with a soap fault asking redirect request. lasso_data_service_get_redirect_request_url() retrieves the redirect request url. DataService raises a redirect request warning exception if a fault was found in soap response after a lasso_data_service_process_query_response_msg().

	Added soap fault code server.

	Fixed snippet type and name of Detail attribute.

	Fixed snippet type of redirectURL from content to attribute.

	Check if a soap fault is found in response message. If no fault found, then set response.

	Added a first soap fault code error.

	Added soap Detail element.

2005-11-14  Frederic Peters  <fpeters@entrouvert.com>

	SAML 2.0 string constants

2005-11-14  Nicolas Clapies  <nclapies@entrouvert.com>

	Now discovery service includes a key value in credential added to disco:QueryResponse.

2005-11-13  Frederic Peters  <fpeters@entrouvert.com>

	starting to commit SAML 2 changes; minor changes (and bugfix) to lasso_node_new_from_xmlNode as well as code to recreate SAML2 object from SAML2 query string.

2005-10-14  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed signature template problem : now if metadata's service provider has AuthnRequestsSigned set to false and HTTP method is POST, then template is not added anymore to AuthnRequest xml message.

2005-10-13  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed optional param of processModifyMsg().

2005-10-11  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed getServiceWithProviderId method.

2005-10-10  Nicolas Clapies  <nclapies@entrouvert.com>

	Removed useless discovery method lasso_discovery_get_service_with_providerId(). Removed useless Swig binding of LassoWsfProfile class.

	Removed useless discovery method lasso_discovery_get_service_with_providerId(). Removed useless Swig binding of LassoWsfProfile class.lasso/id-wsf/discovery.c

2005-10-06  Frederic Peters  <fpeters@entrouvert.com>

	updating ignored files with new packages

	updating ignored files with new packages

	remove old and never necessary debhelper generated files

	remove old and never necessary debhelper generated files

	new liblasso-java package

	new liblasso-java package

	removed mono packages from build-depends

	removed mono packages from build-depends

	updated debian changelog with uploaded packages.

	updated debian changelog with uploaded packages.

	don't build wsf; touch swig files so they are not rebuilt even if swig is detected.

	don't build wsf; touch swig files so they are not rebuilt even if swig is detected.

	updated FSF address

	updated FSF address

2005-10-06  Nicolas Clapies  <nclapies@entrouvert.com>

	Added binding to set more than one security mecanism authentication in DiscoDescription.

	Added check by AP if it wants X509 authentication of SP. Does not work yet, need to fix retrieving public key from credential before.

	Set server attribute in LassoPersonalProfileService

	Added support of principal state : now it is possible a SP informs an AP if principal is considered to be online or not. To tell principal is online, just add a call to lasso_wsf_profile_set_principal_online() after lasso_data_service_init_query(), and offline a call to lasso_wsf_profile_set_principal_offline(). At AP, to known if principal is to be considered online just test if lasso_wsf_profile_principal_is_online() returns TRUE or FALSE.

2005-10-05  Nicolas Clapies  <nclapies@entrouvert.com>

	A first attempt to include a KeyInfo in credential.

	Verify if a saml security authentication is available.

	Added LassoDsKeyInfo oject. It allows to add it to LassoSamlSubjectConfirmation object.

2005-10-05  Frederic Peters  <fpeters@entrouvert.com>

	don't patch a lasso_wrap.c that was not just generated by swig.

	no session on idp -> requestdenied -> removing no longer valid session on sp.

	added error string for LASSO_LOGOUT_ERROR_REQUEST_DENIED (...)

2005-10-04  Frederic Peters  <fpeters@entrouvert.com>

	handle new error code

	returns LASSO_LOGOUT_ERROR_REQUEST_DENIED if appropriate.

2005-10-03  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed the way getting description in lasso_data_service_init_query().

2005-09-30  Nicolas Clapies  <nclapies@entrouvert.com>

	A little comment to note that some code is needed to add KeyInfo in Assertion when returning it to SP from IDP / Disco service.

	Added private function lasso_wsf_profile_has_saml_authentication() to know if a saml authentication mecanism exists in current description.

	lasso_discovery_build_credential() adds ConfirmationMethod element.

	Updated comments.

	Added reference binding when signing soap messages.

	Updated data service with service_type parameter.

	Added a g_object_ref on private attribute description in lasso_wsf_profile_set_description().

	If a service found in server object, retrieve needed description depending on an optional security mechanism id.lasso/id-wsf/data_service.c

2005-09-30  Frederic Peters  <fpeters@entrouvert.com>

	the "how could I not curse those adding files without checking them in Makefile.am?" commit.

	I'm so glad for tests; another emergency change.

	last emergency fix: wsf_profile_private.h must be included in .tar.gz

	updated ChangeLog for 0.6.3

	new upstream release

	new upstream release

	updated news and doap.rdf with 0.6.3 release data

2005-09-29  Frederic Peters  <fpeters@entrouvert.com>

	fixed typo in docstring

	minor automated changes

	removed c# dir from distribution

2005-09-28  Frederic Peters  <fpeters@entrouvert.com>

	security mech id is optional

2005-09-28  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed local variable declaration.

	Uncomment lasso_wsf_profile_build_soap_response_msg() in lasso_discovery_build_response_msg().

2005-09-28  Frederic Peters  <fpeters@entrouvert.com>

	80 cols for docstrings

2005-09-28  Nicolas Clapies  <nclapies@entrouvert.com>

	Added x509 certificate file tests.

	Added private function lasso_wsf_profile_get_fault().

2005-09-27  Nicolas Clapies  <nclapies@entrouvert.com>

	Added a first support of soap binding Fault wsf response.

	Added soap Fault element.

2005-09-27  Frederic Peters  <fpeters@entrouvert.com>

	disabled mcs test and updated version to 0.6.3

	swig files were split, dependencies needed to be updated

	fixed spelling

	acknowledge new lasso_sec_ category, only used for wsf.

	fixed typo

2005-09-27  Nicolas Clapies  <nclapies@entrouvert.com>

	Added missing wsf_profile_private.h. fixed error while attempting to include non existing private header discovery_private.h

	Updated binding for new optional security mecanism parameter.

	Discovery and DataSerivice can pass X509 authentication mecanism if needed.

	Added X509 authentication mecanism.

2005-09-26  Nicolas Clapies  <nclapies@entrouvert.com>

	Added private method lasso_provider_get_public_key() to get public key info.

2005-09-20  Nicolas Clapies  <nclapies@entrouvert.com>

	Added private method.

	Ordered methods.

	lasso_data_service_add_credential() is not a public method.

	lasso_discovery_build_credential() is not a plublic method.

	lasso_discovery_build_credential() adds AuthenticationStatemet element in Assertion.

2005-09-19  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed code typing.

	Added optional param security_mech_id for wsf methods.

	First attempt to implement authentication security mechanism. Only SAML is implemented and it needs improvement.

	Added id attribute in Body element.

	Fixed snippet definition of Credentials object.

	Added compilation of resource access statement.

	Added security namespace for resource access statement.

	Added ResourceAccessStatement element from wsf Security.

2005-09-16  Frederic Peters  <fpeters@entrouvert.com>

	getOfferings without parameters will return all of them

2005-09-12  Frederic Peters  <fpeters@entrouvert.com>

	disabled c# support for the time being

	generation of lasso.types so it only includes wsf classes if wsf is compiled in.

	updated java note

	erroneously disabled symbols.sym

2005-09-11  Frederic Peters  <fpeters@entrouvert.com>

	possibility to register new dst services.

2005-09-10  Frederic Peters  <fpeters@entrouvert.com>

	data_service_init_query may be called without parameters.

2005-09-07  Nicolas Clapies  <nclapies@entrouvert.com>

	lasso_data_service_get_answer() : verify response->Data is not NULL before accessing it.

	lasso_discovery_get_resource_offering_auto() : verify LASSO_WSF_PROFILE(discovery)->session is not NULL before looking for a resource offering.

2005-09-06  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed typing code error.

	Updated ignored java files.

	Removed XmlNode binding in swig. Not used anymore.

	Added lasso_discovery_get_services() method documentation

2005-09-05  Nicolas Clapies  <nclapies@entrouvert.com>

	Missing attributes in the last commit.

	Added attributes provider_id and abstract_description in lassoDataService.

	Added method lasso_discovery_get_services() : it returns a list of available services offering resource of principal.

	Updated lasso_discovery_build_modify_response_msg() : now it sets status code to OK only if every remove entry are possible.

2005-08-29  Nicolas Clapies  <nclapies@entrouvert.com>

	Added lasso_discovery_get_service_with_providerId()..

	Splitted existing Lasso-wsf.i in several files for eache wsf namespace (disco, dst, sa, is, soap)

2005-08-26  Frederic Peters  <fpeters@entrouvert.com>

	check the query response is of the correct type

2005-08-25  Frederic Peters  <fpeters@entrouvert.com>

	new modify things for LassoPersonalProfile

2005-08-25  Nicolas Clapies  <nclapies@entrouvert.com>

	complete last commit.

	Now an AP can process a Modify request and return an updated data resource to application.

2005-08-25  Frederic Peters  <fpeters@entrouvert.com>

	added getAnswerForItemId binding

	restore prefix and href for dst:Modify and dst:ModifyResponse

2005-08-25  Nicolas Clapies  <nclapies@entrouvert.com>

	Updated lasso_data_service_init_modify(). Now it takes a select (a String type) and a String xml as parameters.

2005-08-25  Frederic Peters  <fpeters@entrouvert.com>

	added lasso_data_service_get_answer_for_item_id

	added missing ;

	added lasso_data_service_get_answer_for_item_id

	marks public structure memebers in LassoDiscovery and LassoDataService

	continuing on disco example, use the service to retrieve principal name.

	explicit cases where item_id may be NULL.

2005-08-25  Nicolas Clapies  <nclapies@entrouvert.com>

	Replaced ProfileService.java by DataService.java

2005-08-25  Frederic Peters  <fpeters@entrouvert.com>

	add_query_item must checks the query has been created.

	Do not use SWIG_UnknownError but SWIG_RuntimeError so it is translated to a catchable exception in Java.  Use SWIG_ValueError for value errors (things like invalid args)

	it is no longer possible to add providers with unknown public keys

	moved private_data erroneously placed in class to object; this breaks ABI for classes inheriting from LassoDeferation; nobody does that, ignoring.

	last bit of LassoProfileService got renamed

	renamed ProfileService to DataService

	include xmlsec errors.h header to get function declaration; a return in the middle of load_public_key got a FALSE argument.

2005-08-24  Frederic Peters  <fpeters@entrouvert.com>

	documentation for discovery

	don't output xmlsec errors when trying to get a working public key but fails with a message if it can't find a key.

	doc for discovery and profile_service

2005-08-24  Nicolas Clapies  <nclapies@entrouvert.com>

	Updated swig binding for latest id-wsf udpates.

	Removed lasso_personal_profile_service_init_modify().

	Removed prefix and href in lasso_profile_service_init_modify, lasso_profile_service_process_modify_msg, lasso_profile_service_process_response_msg, lasso_profile_service_validate_modify

2005-08-24  Frederic Peters  <fpeters@entrouvert.com>

	don't check for remote provider id before checking for possible empty answer.

2005-08-24  Nicolas Clapies  <nclapies@entrouvert.com>

	Removed prefix and href in lasso_profile_service_init_modify, lasso_profile_service_process_modify_msg lasso_profile_service_process_response_msg, lasso_profile_service_validate_modify

	Removed lasso_discovery_new_from_dump, lasso_discovery_dump, lasso_discovery_add_resource_offering, lasso_discovery_init_query_full

2005-08-24  Frederic Peters  <fpeters@entrouvert.com>

	sync arg name in header file with real arg names

	documented api

	documented all discovery functions used by authentic / candle / unwind

	fixed add_requested_service_type declaration to match code

2005-08-19  Frederic Peters  <fpeters@entrouvert.com>

	tries various key format before giving up

2005-08-16  Frederic Peters  <fpeters@entrouvert.com>

	build_response_msg called while there was no connection will build a failure message.

	check for remote_provider_id

2005-08-14  Frederic Peters  <fpeters@entrouvert.com>

	reference correct identity header

	reinitialize assertion provider id list only on reset_provider_id_index

	counter providers that do not support any single logout; they are now skipped and a correct response is nevertheless sent to the originating provider

	correctly reset list before rebuilding it

2005-08-13  Frederic Peters  <fpeters@entrouvert.com>

	fixed comment

	functions got moved from id-ff/ to id-wsf/

	identity/resourceoffering functions are now declared publically in id-wsf/

	expose identity/resourceoffering functions to developer

2005-08-12  Frederic Peters  <fpeters@entrouvert.com>

	private profile service functions

	following-up on PersonalProfileService cleaning; but I can't get getService to dynamically cast to that class :(

	return LassoPersonalProfileService from disco->getService if appropriate

	cleaned up PersonalProfileService

	cleaning and documenting profile service

	fixed lasso_profile_service_add_query_item so it accepts a item_id parameter (since they are mandatory once there is more than one).  also allows init_query to specify item_id.  this gives:
	service = disco.getService()
	service.initQuery('/pp:PP/pp:CommonName'), 'name')
	service.addQueryItem('/pp:PP/pp:MsgContact'), 'email')
	soap_answer = liberty.root.soap_call(service.msgUrl, service.msgBody)
	print service.getAnswer('/pp:PP/pp:CommonName')
	print service.getAnswer('/pp:PP/pp:MsgContact')

2005-08-12  Frederic Peters  <fpeters@entrouvert.com>

	API after the pp:query has been sent,
	server:
	  service = lasso.ProfileService(server)
	  service.processQueryMsg(soap_message)
	  identity = get_identity_by_resource_id(service.request.resourceId)
	  service.resourceData = identity.get_pp_view()
	  service.buildResponseMsg()
	  return service.msgBody

	client:
	  service.processQueryResponseMsg(soap_answer)
	  service.getAnswer()
	  # or service.getAnswer('/pp:PP/pp:CommonName')

2005-08-12  Frederic Peters  <fpeters@entrouvert.com>

	idwsf/pp on the attribute provider side; sth like
	service = lasso.ProfileService(server)
	service.processQueryMsg(soap_message)
	identity = get_from(service.request.resourceId)
	service.resourceData = identity.convert_to_pp_xml()

	first steps towards id-wsf/dst; something like this, in Python:
	service = disco.getService()
	service.initQuery('/pp:PP/pp:CommonName')
	service.buildRequestMsg()
	 -> service.msgUrl and .msgBody

	added LASSO_ERROR_UNIMPLEMENTED error code

	disco:queryResponse missed namespace definition

2005-08-10  Frederic Peters  <fpeters@entrouvert.com>

	disabled c# in debian apckage

	disabled c# in debian apckage

	return LASSO_LOGIN_ERROR_UNKNOWN_PRINCIPAL after unsuccessful logon

2005-08-09  Frederic Peters  <fpeters@entrouvert.com>

	another id-wsf step, disco:query, looking up for resource offerings in identity

	handle the case where logout request is done while there are no session; that means direct call to build_response_msg, creating a status: requestdenied.

	disco.processQueryMsg now sets disco.resourceId

	new remove entry; correctly restore resource offerings from identity dump

	renamed crunch to build since it doesn't look like there is a need for an intermediate function for the moment.  process remove entries.  create correct answer (when everything goes ok, no support for failure yet)

2005-08-08  Frederic Peters  <fpeters@entrouvert.com>

	lasso_discovery_crunch_modify_msg() (waiting for another name) process disco modify insertEntries and adds them to active identity

	sets ResourceId (or EncryptedResourceId) in LassoDiscovery object for easy usage

	provide resource_offering as argument to not diverge too much from existing work

	first function towards easy disco api

	get_assertions() called with NULL will return every assertions

	added session and identity to LassoWsfProfile, much like LassoProfile.  Exposed them via SWIG inherited into LassoDiscovery object

2005-08-05  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed setting of attribute, int not NULL pointer.

	Added getXmlNode() method to LassoProfileService class.

	Added getEmail() method in LassoPersonalProfile class.

	Fixed som warning about char signedness. Added swig binding to getEmail() method in LassoPersonalProfile.

	Added class LassoPersonalProfile. It allows to load a xml doc representing PP data and to process query requests. Need to complete WSC PP part.

2005-08-04  Frederic Peters  <fpeters@entrouvert.com>

	fixed typo in error constant name

2005-07-31  Frederic Peters  <fpeters@entrouvert.com>

	char signedness for gcc 4 (id-wsf part has not been done)

2005-07-08  Frederic Peters  <fpeters@entrouvert.com>

	signedness change to lasso_query_sign (does not break API/ABI)

2005-07-08  Nicolas Clapies  <nclapies@entrouvert.com>

	Now lasso_profile_service_add_data() returns a LassoDstData object, so it is possible to set optional attributes.

2005-07-07  Frederic Peters  <fpeters@entrouvert.com>

	fixed signedness differences signaled by gcc 4.0 (lots of others yet to do)

2005-07-07  Nicolas Clapies  <nclapies@entrouvert.com>

	Use lasso_wsf_profile_process_soap_request_msg() to build soap response messgae.

	Removed unused declared method name :  lasso_profile_service_build_request_msg().

	Fixed swig binding on ProfileService's buildResponseMsg().

2005-06-27  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed mistake about prototype of lasso_session_dump().

	Now lasso_identity_new_from_dump() and lasso_session_new_from_dump() return NULL if the root element name is wrong.

2005-06-15  Emmanuel Raviart  <eraviart@entrouvert.com>

	Removed now useless sed script (now done by Swig).

	In Swig, Use g_free instead of free for strings, to avoid segfault when used in Java Windows.

2005-06-03  Frederic Peters  <fpeters@entrouvert.com>

	checks identity exists before referencing it

	updated debian packaging wrt new cli policy

	updated debian packaging wrt new cli policy

2005-06-02  Frederic Peters  <fpeters@entrouvert.com>

	new mono packages no longer have this tool

	new mono packages no longer have this tool

2005-05-30  Frederic Peters  <fpeters@entrouvert.com>

	Give LassoServer access to (LassoProvider)self->role

2005-05-26  Frederic Peters  <fpeters@entrouvert.com>

	update ChangeLog for 0.6.2

	sync docs with code

	no more php zts

	no more php zts

	new upstream

	new upstream

	this file is generated

	this file is generated

	0.6.2 release date

2005-05-25  Frederic Peters  <fpeters@entrouvert.com>

	preparing for 0.6.2; removes swig files if moving from non-wsf to wsf or otherwise.

	bring wsf files on make dist

	properly initialize key node to NULL

	allows overriding of infile keydescriptor with argument to add_provider

	load public key from metadata file

2005-05-18  Frederic Peters  <fpeters@entrouvert.com>

	fixed docstring to use entities for < and >

	oops missing |

	fixed usage of DESTDIR and PREFIX

2005-05-17  Frederic Peters  <fpeters@entrouvert.com>

	perl now installs and uninstalls correctly (with thanks to p.g.o)

	fixed case when consent was first refused then given (failure status code remained in the user session).
	(debugged thanks to Authentic Debug Pane (tm) (r) (patent pending))

	planning 0.6.2 for May 23rd.

2005-05-16  Nicolas Clapies  <nclapies@entrouvert.com>

	Set liblasso-id-wsf.la only when WSF support set.

	Set response attribute when processing WSF SOAP response message.

	Updated discovery to SOAP binding.

	Mistake about last add.

	Added WSF SOAP binding layer.

2005-05-16  Frederic Peters  <fpeters@entrouvert.com>

	fixed memory leak in loadDescriptor

2005-05-12  Frederic Peters  <fpeters@entrouvert.com>

	allows fake brws-lecp profile (introduced by Nicolas) to be used in lasso_login_build_authn_response_msg, so LECP works again.

	documented that previous change

	fixed the case of idp-initiated rni with no sp defined name identifier

	fixing lasso_name_registration_init_request with regards to profile->nameIdentifier (hopefully)

	fixed lasso_name_registration_process_request_msg so that it ends with profile->nameIdentifier being the local name identifier.

	profile->nameIdentifier set to local name identifier

	profile->nameIdentifier should always points to *local* name identifier. (not yet tested for federation termination)

	use remote name identifier if available for login->nameIdentifier

2005-05-11  Frederic Peters  <fpeters@entrouvert.com>

	don't check other endpoint for supported profile since *they* initiated it that way and it seems allowed for them not to have it in their metadata.

2005-05-11  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed header included.

2005-05-10  Frederic Peters  <fpeters@entrouvert.com>

	InResponseTo must be part of the redirect answer

	1 is a valid boolean value

	\r may be hiding in base64

2005-05-10  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed lecp profile : added case when lecp profile is used when building assertion.

2005-05-10  Frederic Peters  <fpeters@entrouvert.com>

	don't lasso_node_destroy list items that may be NULL

	allows \n in base64 strings

	NameQualifier is optional

	don't fail if there is no signature on Logout Response

2005-05-02  Frederic Peters  <fpeters@entrouvert.com>

	reworked query string signature verification to better handle cases where the signature algorithm is not fully url-encoded; also deals with the corner case where there are query params past the signature.

	wsse is only for wsf

2005-05-02  Nicolas Clapies  <nclapies@entrouvert.com>

	Added process of Wsse prefix in lasso_node_new_from_xmlNode().

	wsse:Security class.

	Added a FIXME to list missing element in credential.

	Added wsse:Security element.

	Added access to saml:Assertion in saml:Advice element.

2005-04-26  Frederic Peters  <fpeters@entrouvert.com>

	fixed Darwin case so it compiles on Mac OS X

2005-04-26  Nicolas Clapies  <nclapies@entrouvert.com>

	For now Make only one credential for every description end points of the Discovery IDP. Fixed Minor Version of credential included in Advice element to Saml Minor Version. Added Audience restriction to Discovery IDP ProviderID.

2005-04-25  Frederic Peters  <fpeters@entrouvert.com>

	allocate memory for string; don't use it static

2005-04-25  Nicolas Clapies  <nclapies@entrouvert.com>

	lasso_login_assertion_add_discovery() adds credentials if security mechanisms want it.

	Added copy constructor to duplicate LassoDiscoDescription and LassoDiscoServiceInstance objects.

2005-04-25  Frederic Peters  <fpeters@entrouvert.com>

	use proper confirmation method saml identifiers

	added saml artifact confirmation method identification (from SAML 1.1 spec)

	loads public key into xmlSecKey on LassoProvider instanciation; this merges signature verification in XML messages and in query strings.

	conscientiously overwrite memory used by the private key password

	renamed secret_key to private_key_password since it was badly named and unused (so no API breakage)

2005-04-23  Frederic Peters  <fpeters@entrouvert.com>

	return error message if name registration profile is used on an empty identity (was segfaulting)

2005-04-22  Nicolas Clapies  <nclapies@entrouvert.com>

	Added missing optional attributes AttributeName and AttributeNameSpace in Attribute element. When adding a ResourceOffering element in Assertion, they are set.

	DiscoResourceOffering is required in DiscoInsertEntry.

2005-04-22  Frederic Peters  <fpeters@entrouvert.com>

	SNIPPET_LIST_NODES
	  <Parent>
	    <Value-1/>
	    <Value-2/>
	    <Value-n/>
	  </Parent>

	[note: if there are no other nodes; it is possible to leave snippet name as
	 the empty string; nodes will then be constructed looking at their names and
	 namespaces  (this is useful for xs:any)]

	(from docs/reference/snippet-types.rst)

2005-04-22  Nicolas Clapies  <nclapies@entrouvert.com>

	Added binding of lasso_new_from_message() for DiscoModify.

2005-04-20  Frederic Peters  <fpeters@entrouvert.com>

	binding to lasso_provider_get_organization; converts xmlNode into string

	API addition; lasso_provider_get_organization

	set pointer to NULL as a protective measure

2005-04-19  Nicolas Clapies  <nclapies@entrouvert.com>

	Added support of choice between WsdlRef and BriefSoapHttpDescription in LassoDiscoDescription object : 2 new constructors, lasso_disco_description_new_with_WsdlRef() and lasso_disco_description_new_with_BriefSoapHttpDescription(). lasso_disco_description_new only returns a simple empty object.

2005-04-18  Frederic Peters  <fpeters@entrouvert.com>

	bails out with an error if lasso_login_must_authenticate is called while login has no request; this probably means it was called before lasso_login_process_authn_request_msg.

2005-04-18  Nicolas Clapies  <nclapies@entrouvert.com>

	Added discovery directives in inheritance.h

2005-04-15  Nicolas Clapies  <nclapies@entrouvert.com>

	Added ref count in addDescription() method.

	Added addDescription method.

2005-04-11  Nicolas Clapies  <nclapies@entrouvert.com>

	Liberty wsf SOAP binding.

	Fixed lasso_discovery_init_modify() : added missing code for liberty wsf soap binding.

	Completed discovery with support of liberty wsf soap binding.

	Updated Discovery : now it binds his messages in liberty wsf SOAP envelope.

2005-04-01  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed removed code in previous commit. Fixed some rules from liberty spec : mutli mechanism, null mechanism. Added namespace for service authentication.

2005-03-29  Frederic Peters  <fpeters@entrouvert.com>

	don't set status to constant string in samlp:Response

	properly multiply sizeof(char*) to avoid buffer overflow

	free up Status if not NULL.

	checks for Status before Assertion; so lasso doesn't restore an old assertion.

	bring back LassoSamlAssertion

	don't add assertion in samlp:Response if the signature check failed

2005-03-24  Frederic Peters  <fpeters@entrouvert.com>

	deals with incorrect AssertionConsumerServiceID

	include AssertionConsumerServiceID in query strings

2005-03-22  Frederic Peters  <fpeters@entrouvert.com>

	session may exist beforehand, store status nevertheless

	no success won't set Success

2005-03-21  Nicolas Clapies  <nclapies@entrouvert.com>

	Added REQUEST_TYPE_SASL_REQUEST returned by lasso_profile_get_request_type_from_soap_msg().

	Renamed properly attribute acces in DiscoServiceInstance object.

	Updated authentication service : fixed error when parsing data from client. Removed hard code to build soap envelope by call to common function from wsf_profile.h.

	Added function to build generic liberty wsf soap envelope.

2005-03-19  Frederic Peters  <fpeters@entrouvert.com>

	removed erroneously commited tests Makefile

2005-03-18  Frederic Peters  <fpeters@entrouvert.com>

	docstring to errorchecking tests

	include lasso_config.h since LASSO_WSF_ENABLED is used

	added missing lasso_config.h include (necessary for LASSO_WSF_ENABLED definition)

	since wsf is no longer compiled it is no longer necessary to check or isolate sasl check variable.

	don't compile id-wsf files when wsf is disabled; this cuts down build time by a nice margin.

2005-03-18  Nicolas Clapies  <nclapies@entrouvert.com>

	Updated lasso_discovery_add_insert_entry() prototype : now it only takes a LassoServiceInstance and a LassoDiscoResourceID.

2005-03-18  Emmanuel Raviart  <eraviart@entrouvert.com>

	Renamed LASSO_WSF_SUPPORT to WSF_SUPPORT in SWIG.

2005-03-18  Nicolas Clapies  <nclapies@entrouvert.com>

	Updated authentication service : now it has hard coded collbacks. developer must use LassoUserAccount to inform sasl about login and password.

	Fixed dump of attribute.

	Fixed any attribute in snippet.

	Fixed process of dump for soap envelope message.

2005-03-17  Romain Chantereay  <rchantereau@entrouvert.com>

	First version of the "Writing a Libety PHP SP".
	Almost all adapted copied/pasted from "Writing a Liberty C SP".

2005-03-15  Frederic Peters  <fpeters@entrouvert.com>

	detect liberty QName and add appropriate namespace (closes: #416)

	added non-regression test for bug #416 (missing namespace in some samlp:Response)

2005-03-11  Frederic Peters  <fpeters@entrouvert.com>

	warning: ISO C90 forbids mixed declarations and code

2005-03-11  Nicolas Clapies  <nclapies@entrouvert.com>

	Complete liberty soap binding.

	Added liberty soap binding extension.

2005-03-10  Nicolas Clapies  <nclapies@entrouvert.com>

	Added missing security mechanism.

	Restore ResourceID and EncryptedResourceID attributes in discovery and modify. Added security mechanism id.

	Added comments about security mech rules.

	Added comment about Options rules.

	Added comments about status rules.

	resourceId is for LassoResourceID and LassoEncryptedResourceID.

	Fixed resourceID to resourceId. Added some param tests.

	Added disco status codes.

	Added discovery directive elements.

2005-03-07  Frederic Peters  <fpeters@entrouvert.com>

	removed debugging output

	use fail_unless since fail_if didn't exist in check 0.8.x

	only use xsi:type on elements that have a saml: ancestor (and added test to not regress)

	return LASSO_LOGIN_ERROR_FEDERATION_NOT_FOUND in lasso_login_process_authn_response_msg when liberty status is samlp:Responder/lib:FederationDoesNotExist

	only use LASSO_SIGNATURE_TYPE_WITHX509 (including a <KeyInfo/> in message) if we have a certificate to use; use LASSO_SIGNATURE_TYPE_SIMPLE otherwise.

2005-03-04  Emmanuel Raviart  <eraviart@entrouvert.com>

	Corrected MinorVersion of samlp:Response.

2005-03-02  Nicolas Clapies  <nclapies@entrouvert.com>

	Added credentials and resource offerings if authentication is OK.

	Added credentials and resource offerings if authentication is OK.

	Use gchar instead of char.

	Renamed LassoSaSaslRequest to LassoSaSASLRequest. Idem to LassoSaSASLResponse.

	soap envelope / binding support.

	Added soap swig binding, liberty soap binding swig binding, authentication service swig update

	Added soap envelope object to embed specific data from id-wsf.lasso/id-wsf/authentication.c

	Added soap envelope and soap binding. It is useful for id-wsf but could be used in other parts later.

2005-03-01  Frederic Peters  <fpeters@entrouvert.com>

	fixed links to API reference

2005-02-24  Frederic Peters  <fpeters@entrouvert.com>

	don't require sasl if wsf is not wanted; allow sasl2 dir to be passed to configure; include <sasl/sasl.h> instead of <sasl.h> since mutt does it that way.

2005-02-24  Nicolas Clapies  <nclapies@entrouvert.com>

	Removed odd printf().

	Added support of cyrus libsasl in id-wsf authentication service.

	Added support of cyrus libsasl in id-wsf authentication service.

	Added support of cyrus libsasl. Currently it disables wsf if not found.

2005-02-22  Frederic Peters  <fpeters@entrouvert.com>

	updated ChangeLog for 0.6.1

	told about 0.6.1

	wsf support include file

	MessageType.cs was removed

2005-02-21  Frederic Peters  <fpeters@entrouvert.com>

	updated �� information in reference manual

	more hateful Makefile.am to work with both swig 1.3.22 and 1.3.24; perhaps.

	LassoRequestType disappeared

	LassoMessageFormat enum is now documented incode

	typo fix and longer description

	enum documentation

	documented enums

	removed LassoMessageType from doc

	documented LassoRequestType and killed unused LassoMessageType (it was already unused in 0.6.0 so I allow this as not breaking api)

	gtkdoc comment formatting

	documented new version check mode

	hacking against swig 1.3.24

2005-02-19  Frederic Peters  <fpeters@entrouvert.com>

	generated files are best ignored by cvs

	janitored configure.ac; it shouldn't have been batardized this way.

	missing csharp swig generated file

	removed long useless file

	define LASSO_WSF_ENABLED

	provide wsf support activation status to swig binding; note to Romain: wtf was LASSO_WSF_ENABLE ?  (it appears in rev1.129 of configure.ac without any comment about its purpose)  (I removed it)

2005-02-18  Romain Chantereay  <rchantereau@entrouvert.com>

	Use MSVC binaries.

2005-02-18  Frederic Peters  <fpeters@entrouvert.com>

	corrected enum CheckVersionMode binding (didn't work for c# and java)

2005-02-17  Romain Chantereay  <rchantereau@entrouvert.com>

	Changed the output file directory to nsis.

	Added python NSI script.

2005-02-17  Frederic Peters  <fpeters@entrouvert.com>

	lasso numeric check enum

	added dumb numerical mode to checkVersion; added swig binding for this function; generating Lasso.i considered bad idea, cleaned and removed.

2005-02-17  Romain Chantereay  <rchantereau@entrouvert.com>

	Escape the $ as begin of a variable name adding another '$'. Now the '$$' pass '$' to sed and '$' is end of line and no more begin of variable name.

2005-02-16  Romain Chantereay  <rchantereau@entrouvert.com>

	Updated MSVC projects.

	Now lasso_config.h for MSVC is generated with configure substitutions.

	Added the temporary files for "int res = 0;" declaration to local cleanning rule.

	Added the automake makefile for the MSVC lasso-java project.

	Added DLL filename subsitution.

	Distribute generated nsi files too in order to permit non-autotools users to create lasso installers.

	Include lasso project input file and java subdirectory in distribution and automake system.

	Now Lasso MSVC Project is dynamicaly generated.

	The produced resource file is distributed too in order to permit MSVC users to compile LASSO.

	Now Resource file is generated from configure variable (for versionning and file name).

	No more Lasso.i in the repository, it is generated from Lasso.i.in.

	The SWIG input file is distributed too.

	Now The SWIG interface is "generated" by configure.
	The following constants are set and exported to bindings:
	- LASSO_VERSION_MAJOR
	- LASSO_VERSION_MINOR
	- LASSO_VERSION_SUBMINOR
	- LASSO_WSF_ENABLE

	result have to be freed with g_free. corrected a incode declaration. As regexp does not manage multiline expressions, the comment is replaced by the res integer declaration.

	Fix a syntax error only reported by MSVC.
	Create a void pointer in an empty structure declaration.

	Now some version information are propagated in order to perform substitions.
	New files are not dynamicaly generated.

	Put swig sub directory before bindings directories.

2005-02-15  Romain Chantereay  <rchantereau@entrouvert.com>

	Set only used constants.

	No more lasso_config.h constants export in LASSO bindings.

	Added java project to lasso workspace.

	Updated Lasso workspace.

	Added a Windows configured lasso_config.h.
	Perhaps we have to transform it into a special lasso_config.h.in in order to
	have the version number dynamicaly configured, and only this value (not the
	HAVE_FOO).

2005-02-15  Frederic Peters  <fpeters@entrouvert.com>

	ship msvc project files

2005-02-14  Frederic Peters  <fpeters@entrouvert.com>

	use g_free(), not free()  (so it works under windows)

2005-02-14  Romain Chantereay  <rchantereau@entrouvert.com>

	Included xml.h for better lasso_strerror export declaration.

2005-02-14  Nicolas Clapies  <nclapies@entrouvert.com>

	Added status code constants for wsf authentication service.

2005-02-14  Frederic Peters  <fpeters@entrouvert.com>

	added missing authentication.c to Makefile.am

2005-02-14  Nicolas Clapies  <nclapies@entrouvert.com>

	Added high level of authentication service : standard methods of a lasso service. Must be improved depending on the needs from souk implementation.

	Added duplication of mechanism string parameter in constructor.

	Added missing status parameter in lasso_sa_sasl_response_new() method. Added lasso_sa_sasl_response_new_from_message().

2005-02-13  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added Lasso error strings to SWIG exception messages.

	Added two missing ID-WSF functions to LECP binding.

2005-02-11  Romain Chantereay  <rchantereau@entrouvert.com>

	Update MSVC workspace and projects.

2005-02-11  Frederic Peters  <fpeters@entrouvert.com>

	checks provider has been found

	if g_hash_table_find doesn't find anything, check twice to be sure to return NULL.

2005-02-11  Romain Chantereay  <rchantereau@entrouvert.com>

	g_vsnprintf taked the place of vsnprintf.

2005-02-11  Frederic Peters  <fpeters@entrouvert.com>

	check param for NULL

	cflags_save ate my breakfast; removed.

2005-02-10  Nicolas Clapies  <nclapies@entrouvert.com>

	Added low level classes for wsf authentication service. SASLResponse is only tested with required Status element.

2005-02-10  Frederic Peters  <fpeters@entrouvert.com>

	removed unecessary vsnprintf declaration

	we don't need yet another implement of vsnprintf, we can use glib

	use glib version of vsnprintf

	use gtk-doc style function comment for DllMain

	autofill nsi files with lasso version number

2005-02-10  Nicolas Clapies  <nclapies@entrouvert.com>

	Now lasso_lib_request_authn_context_new() returns LassoLibRequestAuthnContex* instead of LassoNode*.

2005-02-10  Frederic Peters  <fpeters@entrouvert.com>

	reworked a bit documentation build system and added detection of inkscape and xsltproc in configure

2005-02-08  Romain Chantereay  <rchantereau@entrouvert.com>

	Removed XMLSEC_DYNAMIC_LOADING because it is a non-sense. We are using xmlsec-openssl specific functions in code, so there is no choice, we have to use openssl. (Fix a build warning).

	Fixed type error.

2005-02-08  Frederic Peters  <fpeters@entrouvert.com>

	allocate query fields memory with glib g_malloc (and free it with g_free)

	memory allocated by libxml2, freed by xmlFree

	replaced free() by xmlFree() when freeing strings created by libxml2

	replaced free() with correct libraries function (glib and libxml2)

	do not include wsf functions when not using wsf

	step.xsl is in $(srcdir)

	updated debian packaging to what has just been uploaded to sid

	updated debian packaging to what has just been uploaded to sid

	that inline should be ok everywhere

	ultra magic swig search&replace; compiles with new debian php packages (and old ones too)

2005-02-08  Romain Chantereay  <rchantereau@entrouvert.com>

	Removed bad build configuration.

	Added MS VC worspace and projets. Currently two projects:
	- Lasso DLL
	- PHP binding

	Added the vsnprintf function code of Patrick Powell for MS Visual C users.

	If vsnprintf is not available, the function is declared in the private.h header file.

2005-02-08  Frederic Peters  <fpeters@entrouvert.com>

	another php api change bites the dust

2005-02-08  Romain Chantereay  <rchantereau@entrouvert.com>

	__inline under MSVC.

2005-02-08  Frederic Peters  <fpeters@entrouvert.com>

	first fix for debian php package abi changes; zend_register_internal_class_ex gained a mysterious parameter

	obviously static

	distribute patch_swig_output; it might come handy

	variables and functions shouldn't have the same names

	fixed variable name

	detect when it is possible to use variadic macros and fall back to inline functions when it is not the case.

2005-02-08  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added missing snippet for element "any" in dst:NewData.

2005-02-05  Frederic Peters  <fpeters@entrouvert.com>

	use new figures in documentation

	New figures for documentation; automake and makefile stuffs to generate png out of svg (with inkscape) out of template svg (with xsltproc).  Needs to check for those tools in configure.ac

	removed all %s escaping sequences from lasso error strings; as a side effect this simplifies critical_error macro, porting to non-gcc compilers should be easier.  Along the way I also fixed the long standing bug #256.

	marked types.c and symbols.sym as phony targets so they are rebuilt every time

	more appropriate error code

	removed remaining compiler warning (unused variable) from id-wsf/

	correctly use id-ff 1.1 xml namespace in backward compatibility mode

	Updated documentation files nobody cared about.

2005-02-04  Frederic Peters  <fpeters@entrouvert.com>

	added tests to fix bug #407 and avoir similar ones

	added testcase for bug #407

	all query fields are restored to the same lib:Extension; there are no other way.

	restore a <lib:Extension> from unknown query string elements; all of them are merged in the same <lib:Extension>

	use c99 construct for variadic macros when not using gcc (still missing a third alternative for non-(c99||gcc) compilers

2005-02-03  Emmanuel Raviart  <eraviart@entrouvert.com>

	Lasso requires glib and gobject >= 2.4.0 (when compiled with glib 2.2.3, it generates an error: undefined symbol g_hash_table_find).

2005-02-02  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added a test converting an AuthnRequest with an extension to and from a query. It fails.

2005-02-02  Frederic Peters  <fpeters@entrouvert.com>

	correctly deals with RequestAuthnContext when rebuilding AuthnRequest from query string

2005-02-01  Emmanuel Raviart  <eraviart@entrouvert.com>

	Corrected typo in constant. Added test for AuthnContext in AuthnRequest.

2005-01-30  Emmanuel Raviart  <eraviart@entrouvert.com>

	Corrected SIS namespaces.

2005-01-30  Frederic Peters  <fpeters@entrouvert.com>

	doesn't mention wsf files for now; a better solution will be devised in time

2005-01-29  Frederic Peters  <fpeters@entrouvert.com>

	removed extraneous liberty namespace registration and noted a future fix to LECP to do.

2005-01-29  Emmanuel Raviart  <eraviart@entrouvert.com>

	SWIG: Use WSF_SUPPORT instead of WSF_ENABLED as constant in bindings.

	Typo correction.

	Reverted previous replacement of #if LASSO_WSF_ENABLED with #ifdef LASSO_WSF_ENABLED.

2005-01-29  Nicolas Clapies  <nclapies@entrouvert.com>

	Replaced #if LASSO_WSF_ENABLED by ifdef LASSO_WSF_ENABLED to enable wsf in bindings.

	Removed old comment.

	Removed optional option parameter in lasso_discovery_add_insert_entry().

2005-01-29  Emmanuel Raviart  <eraviart@entrouvert.com>

	SWIG: Added Attribute to AttributeStatement.

	Added binding for saml:AttributeValue. Corrected use of constant LASSO_WSF_ENABLED in binding.

	SWIG: Added constant WSF_ENABLED and VERSION_DECIMAL to bindings.

2005-01-28  Frederic Peters  <fpeters@entrouvert.com>

	compatibility with previous liberty specifications; still missing support for old elements in lib:AuthnRequest (requires some deep thought) but it may already be working as is.

2005-01-28  Romain Chantereay  <rchantereau@entrouvert.com>

	Updated to lasso 0.6.0 with soname 3. Updated dependencies too.

2005-01-28  Frederic Peters  <fpeters@entrouvert.com>

	initializes AuthnResponse in process_authn_request_msg; it is necessary since intermediary function may want to set status code. (fix a crasher bug when using isPassive and POST)

2005-01-28  Romain Chantereay  <rchantereau@entrouvert.com>

	SONAME:3 no more 1.

2005-01-28  Frederic Peters  <fpeters@entrouvert.com>

	produce 1.1 requests and notifications when interoperating with previous liberty implementations

	include missing identityprivate.h

	liberty 1.1 metadata were in another namespace   "http://projectliberty.org/schemas/core/2002/12"

	store liberty 1.2 conformance when loading metadata; it will allow to deal with previous liberty implementations

	samlp:Request Major and Minor versions are saml, not lib
	If the element or its type is in a SAML namespace
	(urn:oasis:names:tc:SAML:1.0:assertion or urn:oasis:names:tc:SAML:1.0:protocol),
	then the values MUST be 1 and 1 respectively.

	abort configure if python is not found

	Document new functions; pretty please.  Fixed memory leak introduced in lasso_profile_get_request_type_from_soap_msg; moved wsf chunk from build_assertion to its own function.

2005-01-28  Emmanuel Raviart  <eraviart@entrouvert.com>

	Merged wsf-api-change-not-for-0-6 branch with trunk.

2005-01-27  Frederic Peters  <fpeters@entrouvert.com>

	updated ChangeLog for 0.6 with gazillion things.

	wsf activation status in configure summary output

	configure flag to enable ID-WSF (off by default)

	don't use wsf for now

	late 0.5 fixes to documentation

	correctly deals with multiple elements for the same query part

2005-01-27  Emmanuel Raviart  <eraviart@entrouvert.com>

	Corrected name of element AuthnContextComparison. Added missing constants.

2005-01-26  Frederic Peters  <fpeters@entrouvert.com>

	removed .bak file on clean

	prepare for 0.6.0

	take ntoe of function changes in doc

	lasso-src-config is generated

	ignore more and more files

	reworded

	blah blah in reference manual introduction

	removed functions that are now private from documentation

2005-01-26  Emmanuel Raviart  <eraviart@entrouvert.com>

	Removed obsolete Python sample code.

	Updated ColdFusion examples.

	Added SWIG binding for lasso_session_get_assertions. Also added Java code to test it.

2005-01-26  Frederic Peters  <fpeters@entrouvert.com>

	lasso_identity_{add,remove}_federation went private

	new lasso_session_get_assertions, returns GList* of (incref'd) assertions

	every morning I distcheck and fix java and csharp classes; oh yeah.

	moved lasso_identity_{add,remove}_federation to private

	use python as found by configure

2005-01-26  Emmanuel Raviart  <eraviart@entrouvert.com>

	Updated Java LoginTest and test metadata.

2005-01-25  Frederic Peters  <fpeters@entrouvert.com>

	Empty node name is allowed for LIST_NODES; this allows nodes to be reconstructed looking at their names and namespaces.  This is useful to implement xs:any

2005-01-25  Emmanuel Raviart  <eraviart@entrouvert.com>

	SWIG: Corrected Java enums. Renamed enum types. Corrected constant name.

2005-01-25  Frederic Peters  <fpeters@entrouvert.com>

	documented memory management for lasso_identity_add_federation

	no more php/examples/ subdir

2005-01-25  Christophe Nowicki  <cnowicki@easter-eggs.com>

	remove php samples

	Remove php samples from the lasso repository I'm still working on it. I will release an independant Pear package for Lasso 0.6.
	The pear package repository is here:
	https://meuh.dyndns.org/cgi-bin/viewcvs.cgi/lasso_pear/

2005-01-25  Frederic Peters  <fpeters@entrouvert.com>

	updated swig generated files list for C#

	updated swig generated file list

	fixed DowncastableNode.java filename

	"hope you paid attention to API/ABI".

2005-01-24  Emmanuel Raviart  <eraviart@entrouvert.com>

	Cosmetic changes to SWIG Lasso.i #ifdefs.

2005-01-24  Romain Chantereay  <rchantereau@entrouvert.com>

	Added a special section for PHP4 SWIG execeptions.
	Now positive lasso errors will not produce a E_ERROR PHP error but simply a
	E_WARNING PHP error.

2005-01-24  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added Lasso version numbers to bindings.

	Removed service from ID-FF. It was obsolete and will be replaced with a new API, once Lasso 0.6 is out.

2005-01-23  Emmanuel Raviart  <eraviart@entrouvert.com>

	Completed ID-WSF SWIG binding. Added attribute server to binding of LassoProfile. Small corrections to declarations of ID-WSF objects.

	Quick fix so that Lasso bindings work till SWIG WSF part is fully updated.

2005-01-22  Emmanuel Raviart  <eraviart@entrouvert.com>

	Updated binding of all "discovery" nodes.

	Work in progress: improving ID-WSF SWIG binding.

	Updated Copyright and authors.

	Updated Copyright and authors.

	SWIG: Renamed constants from camelCase to UPPER_CASE.

	SWIG: Added missing renaming of constant LASSO_HTTP_METHOD_NONE.
	SWIG: Very preliminary clean-up of Lasso-wsf.i.

	Renamed SWIG module name to "lasso" instead of "Lasso" for every language.

2005-01-22  Frederic Peters  <fpeters@entrouvert.com>

	don't get remote provider id out of request if it was initiated by provider

2005-01-22  Emmanuel Raviart  <eraviart@entrouvert.com>

	SWIG: Added binding for new_full constructors.

2005-01-21  Frederic Peters  <fpeters@entrouvert.com>

	fixed missing provider error code (and used it in other places)

	don't segfault on missing remote provider id

	removed lib:Scoping, optional

	reordered lib:authnRequest elements

	new SNIPPET_OPTIONAL_NEG which allow to skip integer elements when set to -1 (useful for proxycount)

	moved samlp qname conversion to lib_status_response

	adds samlp: prefix to statuscode qname if necessary

2005-01-21  Emmanuel Raviart  <eraviart@entrouvert.com>

	SWIG: Added yet another correction in generated PHP lasso_wrap.c for handling of optional arguments.

	SWIG: Added patch for PHP lasso_wrap.c to correct handling of optional arguments in methods.

2005-01-21  Frederic Peters  <fpeters@entrouvert.com>

	if existing, use SessionIndex from assertion in lib:LogoutRequest.

	removed out of place int caused by dubious docstring copy/paste

	documented remaining functions in xml/; looks like all the functions are done.

	done with documenting if-ff/* functions

	removed lasso_server_add_service from reference api since it is for wsf

2005-01-21  Emmanuel Raviart  <eraviart@entrouvert.com>

	SWIG: Removed method dump of NameIdentifierMapping.

2005-01-20  Emmanuel Raviart  <eraviart@entrouvert.com>

	SWIG: Every function that may raise an exception, also returns the errorCode.

2005-01-20  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed saml attribute tag define.

2005-01-20  Frederic Peters  <fpeters@entrouvert.com>

	don't output licensing comment when starting perfs.php

	corrected spelling of optionally.

	documented name_identifier_mapping.c; removed its unused dump functions; fixed a few docstrings

	documented #LassoNameRegistration and fixed some docstrings in #LassoLogout

2005-01-19  Emmanuel Raviart  <eraviart@entrouvert.com>

	Improved C# binding.

2005-01-19  Frederic Peters  <fpeters@entrouvert.com>

	added SNIPPET_LIST_XMLNODES support (mostly the same thing as SNIPPET_EXTENSION for the moment)

2005-01-18  Frederic Peters  <fpeters@entrouvert.com>

	restored documentation I wrote before (and lost in enum name change)

	documented a few things

2005-01-18  Christophe Nowicki  <cnowicki@easter-eggs.com>

	create a isDBError function update sso code for the new lasso api

	change idp and sp fqdn (add .lasso.lan)

	update metadata

	update metadata

	change constants name

	fix LassoServer call

	add a gen_keys.sh script for generating automatically ssl keys

2005-01-18  Emmanuel Raviart  <eraviart@entrouvert.com>

	Extracted the inheritance of nodes from SWIG in a separate file, to remove its duplication in Lasso.i.
	Reorganized Lasso.i.

2005-01-17  Emmanuel Raviart  <eraviart@entrouvert.com>

	Improved Java .cvsignore.

	Completed Java binding tests.

	SWIG: Corrected constant name: SWIG macros are not accessible inside %{ %}.

	SWIG: Ported dynamic casting to all type of nodes. Not fully tested yet.

	SWIG: Added support for dynamic casting in Java. It works, but it has been only implemented for SamlpRequestAbstract. It will soon be generalized to LassoNode.

2005-01-15  Emmanuel Raviart  <eraviart@entrouvert.com>

	SWIG: Renamed getitem to getItem. Idem for setitem. Java: Added a third binding test. PHP: Corrected header of binding test.

	Added first 2 binding tests for Java. Corrected help for Java login test.

	Updated authors. Changed authors & copyright in SWIG and unit tests headers. Extracted binding_tests.py from profiles_tests.py, so that each language has a binding specific test.

2005-01-14  Emmanuel Raviart  <eraviart@entrouvert.com>

	Corrected Perl binding and added test program.

2005-01-14  Frederic Peters  <fpeters@entrouvert.com>

	check for correct exception

	handle non-soap messages in new_from_soap

2005-01-14  Romain Chantereay  <rchantereau@entrouvert.com>

	Added NameQualifer definition paragraph and added a meta info on the LASSO_LIB_NAME_IDENTIFIER_FORMAT_ENCRYPTED.

2005-01-14  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added a new test that generates a segfault in new_from_soap.

2005-01-13  Nicolas Clapies  <nclapies@entrouvert.com>

	Started to bind class LassoIsInteractionRequest to process it in interaction profile service class.

2005-01-13  Frederic Peters  <fpeters@entrouvert.com>

	don't pass prefix to install-perl

2005-01-13  Nicolas Clapies  <nclapies@entrouvert.com>

	Removed class LassoAbstractService.

2005-01-13  Emmanuel Raviart  <eraviart@entrouvert.com>

	Swig PHP: Added test to accept NULL for dynamic arguments.

	Added program to test PHP binding.

	Corrected patch to SWIG PHP output.

2005-01-13  Frederic Peters  <fpeters@entrouvert.com>

	safe against unfound strings

2005-01-13  Emmanuel Raviart  <eraviart@entrouvert.com>

	Swig PHP: Corrected LassoNode conversion for input arguments.

2005-01-13  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed error in xmlNewNs() call : first param must be xmlnode instead of NULL.

	Removed pp_msg_contact.c pp_msg_contact.h.

	Removed LassoPPMsgContact class. Updated binding too.lasso/xml/Makefile.am

	Removed specific class LassoPersonalProfileService. Added generic web service class LassoProfileService.

2005-01-13  Emmanuel Raviart  <eraviart@entrouvert.com>

	PHP Binding: Added support for NULL return value.

2005-01-13  Frederic Peters  <fpeters@entrouvert.com>

	removed uncommited profile_service.[ch] from Makefile.am

2005-01-13  Nicolas Clapies  <nclapies@entrouvert.com>

	Added support of interaction profile service.

	Started to implement interaction service profile.

	Added lasso_*_new_from_message() method to rebuild objects from xml dump.

2005-01-12  Frederic Peters  <fpeters@entrouvert.com>

	forgotten commit of new is* classes to Makefile.am.

	removed unused variable

	moved errors.[ch] up; as requested.

2005-01-12  Nicolas Clapies  <nclapies@entrouvert.com>

	Added low level classes for interaction service specification.

	Added name space constant for interaction service. Added interaction rule constants for interaction service UserInteraction element.

2005-01-12  Frederic Peters  <fpeters@entrouvert.com>

	remove duplicate declaration of namespace (bug#398)

2005-01-12  Emmanuel Raviart  <eraviart@entrouvert.com>

	Swig: Removed attribute responseStatus (now private). Corrected LassoProfile request and response attributes. Corrected handling of NULL pointers in dynamic casting.

	Added Python tests for XML lists and nodes inside nodes.

2005-01-12  Frederic Peters  <fpeters@entrouvert.com>

	sync documentation sections with current functions

	made lasso_profile_set_response_status into a private function

	removed lasso_check_version_exact and lasso_check_version macros; renamed lasso_check_version_ext to lasso_check_version.

	install and uninstall correctly files (distcheck once again ok)

	added a new bunch of files to ignore

	replaced malloc by strdup; that was stupid.

	no longer allows NULL to get the first known remote provider id

	define check variables

	don't use am_path_check since it fails when check is not available (while it should continue and disable the test suite)

	added support for SNIPPET_OPTIONAL (for use with SNIPPET_INTEGER or SNIPPET_BOOLEAN) (not that really tested)

	updated list of java swig generated files

2005-01-12  Emmanuel Raviart  <eraviart@entrouvert.com>

	Python: Added tests for list of nodes.

2005-01-12  Frederic Peters  <fpeters@entrouvert.com>

	use snippts in #LassoProvider and #LassoServer

2005-01-12  Emmanuel Raviart  <eraviart@entrouvert.com>

	Corrected SWIG PHP output patch to be pre-C99 compatible.

	Swig: Cancel a %newobject getitem, because a %newobject getitem applies to every method getitem in every classes below. This caused an "interesting" memory handling bug.

	Beginning to add binding specific tests. The objective is to port these tests to every binding. Discovered a binding bug in list handling.

2005-01-11  Frederic Peters  <fpeters@entrouvert.com>

	homogenous quoting for "x" comparisons

	even more files to ignore

	include new java files (note that I also modified the buildbox, it was not checking lasso.jar file, it does now and will therefore fail, too bad)

2005-01-10  Frederic Peters  <fpeters@entrouvert.com>

	documented lasso_node_get_xmlNode

	Reserved space for private_data expansion, so it will be possible to maintain ABI compatibility if changes are needed.  Documented some functions (and switched some destroy to use lasso_node_destroy).

	integrate patch_swig_output.py in PHP swig module build process

	changed php swig patch script to use stdin and stdout

2005-01-10  Emmanuel Raviart  <eraviart@entrouvert.com>

	Swig: Added a patch to PHP, so that it handles correctly dynamic cast of function results. [Note: Patch is not integrated in Makefile.am.]

2005-01-09  Frederic Peters  <fpeters@entrouvert.com>

	fixed comment about gcc 2.95

	removed hack to get to lib; it doesn't seem to work elsewhere.

2005-01-09  Emmanuel Raviart  <eraviart@entrouvert.com>

	Swig: Corrected LassoNode node_info.

	Swig: Removed login & lecp authnRequest & authnResponse attribute. Now uses attributes request & response, like C. Added dynamic casting to AuthnRequestAbstract & AuthnResponseAbstract.

2005-01-09  Frederic Peters  <fpeters@entrouvert.com>

	replaced strncpy calls by g_strlcpy

	deals with lines ending with \; compile regex only once.

	ends lines with \ so they get caught by extract_symbols.py

2005-01-09  Emmanuel Raviart  <eraviart@entrouvert.com>

	Swig: Beginning to add a kind of inheritance mechanism to LassoNode.
	Swig: Added missing classes.

2005-01-08  Emmanuel Raviart  <eraviart@entrouvert.com>

	Swig: Added several GList items.
	Swig: Added SamlpRequestAbstract inheritance.

2005-01-08  Frederic Peters  <fpeters@entrouvert.com>

	reserve abi-space for unsupported elements in saml:Assertion

2005-01-08  Emmanuel Raviart  <eraviart@entrouvert.com>

	Renamed NodeArray (resp. StringArray) to NodeList (resp. StringList).

	Renamed LassoStringArray to LassoStringList.

	Corrected a typo.

	Corrected a copy/paste error.

	Swig: Renamed LassoNodeArray to LassoNodeList, because, although it is physically an array, it is the Swig binding of a GList.

	Swig: Added Assertion attribute in samlp:Response.

2005-01-08  Frederic Peters  <fpeters@entrouvert.com>

	moved remaining unbounded elements to GList* (samlp:Response/Assertion being part of that bunch)

2005-01-08  Emmanuel Raviart  <eraviart@entrouvert.com>

	In SWIG, enclosed %init code inside braces to preserve gcc 2.95 compatibility.

	In SWIG added support for conversion to and from LassoNode. Not implemented for C# nor Java yet.

2005-01-08  Frederic Peters  <fpeters@entrouvert.com>

	turned a bunch of unbounded elements into GList*

	only give xsi namespace to nodes with xsi: attributes

	fixed maintainer-clean target for Perl binding

	port of perfs.c to PHP (it is surprisingly faster than the C version).

	check for identity in build_assertion

2005-01-07  Frederic Peters  <fpeters@entrouvert.com>

	beginning of a C# version of perfs.c

	updated simple C# example

	put c# binding in a lasso namespace

2005-01-05  Frederic Peters  <fpeters@entrouvert.com>

	properly creates lasso-src-config from lasso-src-config.in

	mark sameNs as inline since it is short and often called (thanks to kcachegrind for profiling details)

2005-01-04  Frederic Peters  <fpeters@entrouvert.com>

	fixed element name for SubjectConfirmation

	fixed order of samlp:Response elements

	clean some state and uri escape artifact

	correctly allocates memory for nameidentifier attributes

	removed individual debug() statements in dispose() and finalize(); replaced by a single statement in xml/xml.c; surrouded that one by LASSO_DEBUG so --enable-debugging prints those memory-management debugging data.

	added missing ;

	completely handle memory management for sessions

	properly allocates memory for constant strings used in messages (or readonly memory would be freed and segfaults would happen)

	created serverprivate.h for two private #LassoServer methods

	rewrote lasso_login_init_idp_initiated_authn_request using lasso_login_init_authn_request to avoid duplication.

	don't care about NameFormat and NameQualifier in comparaison

	makefile perl magic to get distcheck running (disabled installation)

2005-01-03  Emmanuel Raviart  <eraviart@entrouvert.com>

	SWIG binding helper functions are now static. Added binding for saml:Attribute.

2005-01-03  Frederic Peters  <fpeters@entrouvert.com>

	added include of #LassoSamlAttribute header file for #LassoSamlAttributeStatement

	updated swig generated java files list to have a working make distcheck

	build and ship html documentation; distcheck runs ok.

	fixed succint typo

	copy version.xml from the right location for make distcheck to work

	updated swig output files list for make distcheck

	more perl files to ignore

2005-01-03  Emmanuel Raviart  <eraviart@entrouvert.com>

	Adding SWIG support for GList of LassoNodes. Not finished.

2005-01-02  Frederic Peters  <fpeters@entrouvert.com>

	use choosen CC and CFLAGS when compiling the perl module

	Perl module builds and links correctly.

2005-01-02  Emmanuel Raviart  <eraviart@entrouvert.com>

	Improved SWIG binding for assertions.

2005-01-02  Frederic Peters  <fpeters@entrouvert.com>

	building the perl binding

2005-01-02  Emmanuel Raviart  <eraviart@entrouvert.com>

	Improved Extension support in SWIG. Corrected use of %newobject in SWIG.

2005-01-02  Frederic Peters  <fpeters@entrouvert.com>

	first step to perl bindings (they still need to be compiled and installed correctly)

2005-01-01  Frederic Peters  <fpeters@entrouvert.com>

	accounts for changes in lasso_node_dump

	Removed second and third parameters of lasso_node_dump since @encoding is always UTF-8 and @format is always to indent XML in lasso dumps.

	removed lasso_federation_set_local_name_identifier and lasso_federation_set_remote_name_identifier; they were no longer necessary.

2005-01-01  Emmanuel Raviart  <eraviart@entrouvert.com>

	Removed %rename for attributes in PHP binding, because they currently don't work.

2005-01-01  Frederic Peters  <fpeters@entrouvert.com>

	applied esaracco patch for check configure test

2005-01-01  Emmanuel Raviart  <eraviart@entrouvert.com>

	Changed the way %extend was used in SWIG.

	Removed binding for functions lasso_federation_set_local_name_identifier and lasso_federation_set_remote_name_identifier: the are useless.

	SWIG binding now uses only lasso_node_destroy for LassoNode: no more g_object_unref nor lasso_xxx_destroy.

	SWIG binding: Added Federation; updated Identity.

	Back to camelCase for attributes in SWIG binding.

2004-12-31  Emmanuel Raviart  <eraviart@entrouvert.com>

	Updated LassoServer SWIG binding.

2004-12-31  Frederic Peters  <fpeters@entrouvert.com>

	replaced enum name in methods added between two cvs runs

	moved remaining lasso[A-Z].* enums to Lasso[A-Z].*

2004-12-31  Emmanuel Raviart  <eraviart@entrouvert.com>

	Updated SWIG binding for LassoProvider.

	Spelling correction: succint -> succinct.

	In SWIG, added constructor, destructor and dump to "lib:" objects.

	Improved SWIG bindings of "lib:" objects.

2004-12-31  Frederic Peters  <fpeters@entrouvert.com>

	moved lasso_strerror to public interface

	removed obsolete (since move to structure) lasso_node_verify_signature (but lasso is still lacking signature check for assertion)

	sets InResponseTo in samlp:Response

	ret > 0 no longer happens

	if AuthnRequestsSigned is missing assume it as TRUE

	removed obsolete comment

	error on missing <Status>

	memory management in #LassoLogout (actually already done with snippets; nothing to do but removing old FIXME comments)

	it sure must be set to NULL

	memory management in #LassoProvider

	don't output memory management debug strings

	ignore version.xml

	added new saml classes and removed private functions from #LassoProvider

	fixed spelling in lasso_provider_new_from_dump description

	moved some lasso private functions to new providerprivate.h; insure it is included properly in other files (as well as some sessionprivate.h that were missing)

	documented lasso_server_get_providerID_from_hash, reaching: 60% symbol docs coverage (151 symbols documented, 101 not documented)

	fixed parameter name in constructor

	fixed function name in docstring for #LassoLibAuthnResponseEnvelope constructor

	documented a bunch of LassoSaml* classes _new functions

	documented a bunch of other xml base objects

	forgot a parameter in lasso_login_validate_request_msg docstring

	documented remaining #LassoLogin function, lasso_login_validate_request_msg

	fixed parameter names in some #LassoLogin docstrings

	documented #LassoLogin

2004-12-30  Frederic Peters  <fpeters@entrouvert.com>

	more memory management for #LassoServer

	memory management for #LassoIdentity and #LassoSession (partial)

	implemented _destroy for LassoService (WSF thing, but that's just a call to lasso_node_destroy)

	documented more functions, reaching 50% symbol docs coverage (126 symbols documented, 126 not documented)

	set members to NULL to be sure

	request and response fields are handled by snippets; they must not be freed manually

2004-12-30  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added missing g_object_ref for Logout et Lecp request and response in SWIG binding.

	Removed unused GLib types from SWIG. SWIG now uses errors.h.

2004-12-30  Frederic Peters  <fpeters@entrouvert.com>

	added refcounting of server to other profiles

	fixing object refcounting in login/logout and proper object destruction to profile

	documented #LassoProfile identity and session methods

	documented some new/destroy/dump/... functions

	added some missing functions to documentation

	moved lasso_node_build_query to private functions

	merged tools.h and internals.h in new private.h, excluded from API reference.

	added lasso_session_is_empty method to documented functions

	Do not remove tmpl/ directory; it holds real hand-written documentation there. Copy lasso.sgml to build/ directory before calling gtkdoc-mkdb so it is found by gtkdoc-mkdb and xml prologues are not added everywhere.

	documenting lasso_{login|lecp}_init_authn_request

	include LassoLibAssertion details into swig bindings.

	Moved #LassoSession private functions (limited to Lasso internal use) to a new sessionprivate.h file.

2004-12-30  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added handling of GObject reference counting to SWIG binding. Fully revamped SWIG binding.

	Corrected result type of lasso_saml_assertion_new.

2004-12-29  Frederic Peters  <fpeters@entrouvert.com>

	check for libtool and pkg-config m4 files (thanks again to gnome-autogen.sh)

	don't use $< since it fails with BSD make.

	only set Status in session on failure

	Store status in session to be restored for samlp:Response usage.  This means the session *must* be saved in single sign-on service url and will be dirty.
	(so souk, libertyidentity.py line 1076 failIf(login.isSessionDirty) will fail)

2004-12-28  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added StatusCode binding in Logout. Reorganized objects in swig Lasso.i file.

2004-12-28  Frederic Peters  <fpeters@entrouvert.com>

	revamped autogen.sh so it works on FreeBSD (with many thanks to gnome-autogen.sh)

	only set samlp:Success in samlp:Response if assertion was found; fall back to samlp:RequestDenied in other cases since there is currently no way to be more precise.

	added LASSO_LOGIN_ERROR_STATUS_NOT_SUCCESS error code

	set error to lib:UnknownPrincipal if authentication_result is FALSE

	don't crash if session was not set

	removed old signature code from LECP

2004-12-28  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added Status to AuthnResponse.

	Added SamlpStatus & SamlpStatusCode to SWIG. Beginning to use same case in SWIG for XML elements as in C.

2004-12-28  Frederic Peters  <fpeters@entrouvert.com>

	return LASSO_LOGIN_ERROR_REQUEST_DENIED if that's the response Status

	fixed dependency on xmlsec1-openssl

	generate xmlsec signatures in get_xmlNode; this should allow envelopes (in LECP) to work properly.

	lasso requires xmlsec >= 1.2.6

2004-12-27  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added cast to remove compile time warning.

2004-12-27  Frederic Peters  <fpeters@entrouvert.com>

	Fixed lasso_lecp_build_authn_request_envelope_msg, lasso_lecp_process_authn_request_envelope_msg and lasso_lecp_build_authn_request_msg to properly deal with signatures (and, generally, to work)

	support for <lib:Extension> elements in query (not yet reconstructed); enabled for <lib:AuthnRequest>

	Moved back Extension support from xmlNode* to GList*; "SP login using post/artifact (testing Extension); SP logout using SOAP." test now works.

2004-12-26  Emmanuel Raviart  <eraviart@entrouvert.com>

	Replaced calls of lasso_provider_get_metadata_one with lasso_provider_get_assertion_consumer_service_url in lecp.

	Corrected SWIG binding for LECP methods inherited from Login.

2004-12-25  Emmanuel Raviart  <eraviart@entrouvert.com>

	Changed lib:Extension handling in SWIG lib:AuthnRequest binding, to ensure that each lib:Extension element has a valid namespace.

2004-12-24  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added SWIG support for "Extension" elements in lib:AuthnRequest.

2004-12-24  Frederic Peters  <fpeters@entrouvert.com>

	added lib:Extension support to dst classes.

	Added missing declaration for lasso_name_identity_mapping_new_from_dump (and moved dump type to const char*).

	errata2 makes SPProvidedNameIdentifier optional; changed schema snippet accordingly

	errata2 adds a NotOnOrAfter attribute to LogoutRequests

	removed obsolete comment

	Do not store metadata in provider dumps; only store the filename.  Handle AssertionConsumerServiceID in <lib:AuthnRequest>; this allows to have more than one AssertionConsumerServiceURL in a single service provider.

	more <lib:AuthnRequest> documentation

2004-12-23  Frederic Peters  <fpeters@entrouvert.com>

	removing lasso_config.h from scanned header files

	Moved <lib:Extension> to xmlNode* since the developer can use xmlAddNextSibling to add other nodes.  (not tested)

	a few words about lib:AuthnRequest

	documented #LassoSamlNameIdentifier

	removed all old setter methods and other removed functions from documentation.

	dot at the end

	Removed _new functions for abstract classes; added _new functions for classes that only had _new_full functions.  Documented a little bit; marked public members in structures as such.

	removed cut'n pasted doc from oasis

	removed liberty-alliance entity;

	documented #LassoLogout; actually most docstrings were already there but are way too much going into Lasso internals.  Not fixed yet.

	remove angle brackets around elements in doc strings so they can now be considered as docbook (necessary to produce itemized lists in docstrings)

	removed copy/pasted OASIS documentation

	Removed docstring copy/pasted from OASIS documentation (looks like BSD so it should be allowed if they are cited but I prefer to have full copyright over Lasso code)

	documented #LassoSession.  Removed lasso_session_get_authentication_method and lasso_session_get_first_providerID methods that were obsolete and unused.

	Commited Nicolas SWIG binding for WSF since he is on vacation.

	create namespace in the air not to disturb xmlnode

	disco:Status doesn't exist; once again fall back to UtilityStatus

	pp:Status are not DstStatus but UtilityStatus; acknowledge.

	fixed QueryResponse get_xmlNode function.

2004-12-22  Nicolas Clapies  <nclapies@entrouvert.com>

	Added missing header.

	Updated get_xmlNode().

	Added missing headers.

	Added set of request in lasso_personal_profile_process_query_msg() and lasso_personal_profile_process_modify_msg().

	Removed use of GList for Options. Use only a Options pointer.

2004-12-22  Frederic Peters  <fpeters@entrouvert.com>

	documenting #LassoIdentity and #LassoFederation

	copyright and license in <bookinfo> are ok

	assertion consumer *service* URL

	documented service provider assertion consumer service url

	close parenthesis

	documenting single sign-on; Service Provider Login URL done with example.

	commented out <copyright>; not handled by gtk-doc.xsl

	Switched documentation to docbook XML.

	titles for id-ff 1.2 profiles

	minor adjustments to documentation

	Minimal documentation for #LassoProfile and #LassoLogin

	documented #LassoServer

	Started organizing Lasso Reference Manual; documenting LassoProvider.

2004-12-21  Frederic Peters  <fpeters@entrouvert.com>

	fixed symbols.sym case

	added lasso_provider_get_base64_succint_id method to LassoProvider to facilitate Identity Provider Introduction implementation.

	moves back <ds:Signature> to the place the schema gave them.

	refined symbol regex

	removed declaration of inexistant function

	removed unused variable

	ignoring some more swig generated files

	Updated list of files generated by SWIG in C# and Java bindings; fixed PHP Makefile.am; use $(srcdir) to get correct directory in code generation python scrips.  make distcheck works after that.

	only exports symbols declared with LASSO_EXPORT (experimental)

2004-12-21  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed call to constructor of LassoDiscoQueryResponse and LassoDiscoModifyResponse.

2004-12-21  Frederic Peters  <fpeters@entrouvert.com>

	added random suites with random tests

2004-12-21  Nicolas Clapies  <nclapies@entrouvert.com>

	Added lasso_disco_query_response_new_from_message() constructor.

	fixed name space in dump message of LassoDiscoQueryResponse and LassoDiscoModifyResponse : every element children inerit the discovery name space.

2004-12-21  Frederic Peters  <fpeters@entrouvert.com>

	don't use xmlSecFind to look up signature

2004-12-21  Frederic Peters  <fpeters@entrouvert.com>

	Severe libxml2 and xmlsec riot.
	Always put <ds:Signature> as the last node since it looks like the right thing
	to do (and even if the schema seems to say otherwise).

	Try to clean xml messages and remove redundant xml namespace declarations.
	Behind libxml2 back and cleaning memory properly.

	We���re off the streets now / And back on the road / On the riot trail.

2004-12-21  Frederic Peters  <fpeters@entrouvert.com>

	define correct namespace on QueryResponse

2004-12-20  Frederic Peters  <fpeters@entrouvert.com>

	removed unnecessary xmlReconciliateNs

	correctly sets namespace on Query and QueryResponse Personal Profile nodes.

2004-12-20  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed method declarations : lasso_personal_profile_service_process_query_msg() and lasso_personal_profile_service_process_query_msg_response().

	Removed GList type in lasso_discovery_add_insert_entry() params. Instead use simple type pointer until list support is implemented in swig binding. Added missing method lasso_discovery_process_query_response_msg().

2004-12-20  Frederic Peters  <fpeters@entrouvert.com>

	don't include in a second-level status code samlp error status

	Refactored signature code so it is now shared between requests/responses and artifacts.

2004-12-19  Frederic Peters  <fpeters@entrouvert.com>

	Added differentiation between creating xmlnode for lasso use (the _dump functions) and creating xmlnode for the wire (export_to_soap...).  This was necessary to keep track of private_key_file to use on an Assertion while it was kept in a lasso session dump and restored later.
	This means the get_xmlNode functions have now a second parameter, gboolean
	lasso_dump, TRUE when dumping for lasso internal use.

	On the bright side assertions are now signed (that signature is not yet
	checked).

2004-12-19  Frederic Peters  <fpeters@entrouvert.com>

	removed minitests from tests Makefile.am

	little tests benchmarking AuthnRequest creation and AuthnResponse processing.

	add nodes in reverse class order to get them in schema order

	Moved signature template stuff into xml.c and use XmlSnippet for them; this should insure proper validation against Liberty XML schemas and should help adding missing signature support to <Assertion>

	cleaning up process files

	if available, use profile->msg_relayState to init request in init_request functions.

2004-12-18  Frederic Peters  <fpeters@entrouvert.com>

	Moved LassoProfile->nameIdentifier from char* to LassoSamlNameIdentifier*, gaining back access to the nameFormat added late before 0.5.
	There are no bindings for LassoSamlNameIdentifier; as a temporary and
	compatible measure; profile->nameIdentifier in bindings continues to
	return a char* (profile->nameIdentifier->content).

	At the same time the same change has been done for
	LassoNameRegistration->oldNameIdentifier.

2004-12-17  Frederic Peters  <fpeters@entrouvert.com>

	Isolated CFLAGS to be used when compiling Lasso in LASSO_CORE_CFLAGS; don't use those when compiling tests in order to catch errors in headers. (continuing)

	Isolated CFLAGS to be used when compiling Lasso in LASSO_CORE_CFLAGS; don't use those when compiling tests in order to catch errors in headers.  Also moved a few things in header files; need more thinking about that.

	define LASSO_INTERNALS in lasso/

	don't export functions defined in tools.h

	<samlp:Status> created by Lasso should now be compatible with SAML requirements [SAMLCore11].
	[SAMLCore11] Maler, Eve, Mishra, Prateek, Philpott, Rob, eds. (27 May 2003).
	"Assertions and Protocol for the OASIS Security Assertion Markup Language
	(SAML) V1.1," OASIS Committee Specification, version 1.1, Organization for the
	Advancement of Structured Information Standards

	deal with missing Status in LogoutResponse

	Done with the new query snippets system (everything but the IDPEntries in <lib:AuthnRequest>).  It has nested <samlp:StatusCode> support but ID-FF layer must still be updated to produce them.

	new (draft) query snippet mechanism to generate query string; deployed in <lib:RegisterNameIdentifier/>

2004-12-16  Frederic Peters  <fpeters@entrouvert.com>

	merged new error codes in SWIG and used one of them in the Python tests

	(almost) done with errors in ID-FF; remaining "return -1" have been converted to LASSO_ERROR_UNDEFINED (there are forty-three of them).
	LASSO_ERROR_UNDEFINED was redefined from -999 to -1 so it is easier to add new
	sequences of errros.

	added minimal support (only XML, no mapping to URL yet) for   <xs:element ref="Extension" minOccurs="0" maxOccurs="unbounded"/>
	added memory management to list* XmlSnippet

2004-12-15  Frederic Peters  <fpeters@entrouvert.com>

	pointers are %p in format strings, not %x

	memory management work

	moved federation to XmlSnippet

	no longer play fool mixing pointers and integers; they are not always the same size and this bites quite hard on AMD-64 (shame on me).

2004-12-15  Nicolas Clapies  <nclapies@entrouvert.com>

	Reordered function declarations. Added check of server param.

2004-12-15  Frederic Peters  <fpeters@entrouvert.com>

	fixed a few "variable might be used uninitialized in this function" detected with gcc-3.4 -O3.

2004-12-15  Nicolas Clapies  <nclapies@entrouvert.com>

	Added support of modify request from a SP to AP : updated element's class in level 1 (Modify and ModifyResponse) and implemented modify request in level 2 id wsf.

2004-12-15  Frederic Peters  <fpeters@entrouvert.com>

	added new standard error code LASSO_PROFILE_ERROR_BUILDING_QUERY_FAILED

	new LASSO_PROFILE_ERROR_NAME_IDENTIFIER_NOT_FOUND error code

	coherent error handling for "identity not found" and "federation not found" cases.

2004-12-14  Frederic Peters  <fpeters@entrouvert.com>

	replaced unknown error by 2 LASSO_PROFILE_ERROR_INVALID_HTTP_METHOD in Name Identifier Mapping profile.

	new LASSO_PROFILE_ERROR_UNKNOWN_PROFILE_URL profile error and replaced a bunch of 'return -1;' with that one.

	fixed some missing or wrong prototype declarations

	fixed function declared as returning int that didn't return anything

	API change in Single Sign On profile (IdP side) to allow the developer to mess with <lib:Assertion/>
	Outlined in http://lists.labs.libre-entreprise.org/pipermail/lasso-devel/2004-December/001119.html

	more error code harmony, now with a new critical_error macro

	status code has been set in lasso_lib_logout_respone_new_full

	properly sign samlp:Response

	properly check signature on soap samlp:Request (login/artifact)

	properly verify signatures and return code appriopriately (closes: #362)

	updated test to new api

	updated test to new API

	ignore generated files

	ignore html rendition

	process files taken from lasso 0.5 (not uptodate)

	got uptodate documentation about single sign on (I think)

	[API Change] For consistency with the other profiles, remote_providerID has been moved from build_authn_request_msg to init_authn_request in both Single Sign-On and LECP profiles.  [details on lasso-devel@]

2004-12-13  Frederic Peters  <fpeters@entrouvert.com>

	error codes handling in LassoLogin

	use XmlSnippet for LassoLogout dump/restore

	reenabled lasso_session_destroy()

	more error code harmonization.

	sign AuthnResponse and harmonous use of LASSO_PROFILE_ERROR_INVALID_MSG

	removed obsolete comment

	harmonized remote_provider tests (check and error code set to LASSO_SERVER_ERROR_PROVIDER_NOT_FOUND)

	replaced error_code macro with a function since that macro didn't work with gcc 2.95

	error message for LASSO_SERVER_ERROR_ADD_PROVIDER_FAILED

	removed trailing ; in macro

	dealing with errors; now like this:   return error_code(G_LOG_LEVEL_CRITICAL, LASSO_SERVER_ERROR_ADD_PROVIDER_FAILED);

2004-12-12  Frederic Peters  <fpeters@entrouvert.com>

	properly sign soap messages in name identifier mapping profile.

	got top-of-file license spaced the same way as in other files (+ fixed editor typo)

	removed error message when java was not found

2004-12-10  Valery Febvre  <vfebvre at easter-eggs.com>

	Added LassoDiscovery class

	Added lasso_server_add_service() method

	Added LassoService class

	Fixed the attribute name of the dump version

2004-12-10  Nicolas Clapies  <nclapies@entrouvert.com>

	Added lasso_personal_profile_service_add_data() method : it allows to add response elements corresponding to the requested attribute values.

	Removed params of constructor : id and itemIDRef are not required attributes.

	Added support of MsgContact PP service.

	Initial version : support of personal profile msg contact. It is very experimental and only supports msg account and msg provider part.

2004-12-10  Valery Febvre  <vfebvre at easter-eggs.com>

	Removed useless LassoDiscoResourceIDGroup class

2004-12-10  Frederic Peters  <fpeters@entrouvert.com>

	Added back xmlsec signature check (and disabled it in name identifier mapping profile since it is buggy there).  The signature check requires another call to xmlParseMemory; this makes them 3 per SOAP message (sign check + lasso_profile_get_request_type_from_soap_msg and lasso_node_init_from_message). I'll think further about this.

2004-12-10  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed type mistake in snippets of LassoDstQueryItem.

	Added support of DST modify / modify response.

	Replaced LassoDiscoResourceIDGroup with old ResourceID and EncryptedResourceID.

	Updated lasso_personal_profile_service_init_query() method : now it takes a LassoDiscoResourceOffering* resourceOfferring, a LassoDiscoDescription* description and a char* select, init a Query object, set the soap url from ResourceOffering, and return a QueryItem* to optionaly set attributes. Now it is possible to add extra QueryItems with lasso_personal_profile_service_add_query_item(). It returns the new QueryItem'pointer to set optional attributes;

	Removed ResourceOffering and ResourceIDGroup class's attributes. Only keep data and queryItem attributes. Removed old unused private methods (dispose() and finalize() )

	Updated lasso_wsf_profile_build_*_msg() : now they only set msg_body class's attribute with a soap message (request / response).

	Added DST Modify part level 1.

2004-12-10  Frederic Peters  <fpeters@entrouvert.com>

	overridden spelling fix caused alignment wreckage

	removed XmlSnippetObsolete, no longer used anywhere. lasso_node_build_xmlNode_from_snippets made static and documented some new functions.

	reenabled signature checking on query strings (xml messages still to do)

	moved NameRegistration to XmlSnippet

	removed unnecessary namespace declaration

	removed unnecessary private_data in LassoFederation; consequence being instance_init, class_init, dispose and finalise have also been removed.

	removed struct LassoLoginPrivate declaration

	Moved LassoLogin to XmlSnippet; not completely since an enum is converted in string and I'm not sure it is a good idea to 1) store them as integer or 2) adds the mapping value->string to xml.c.  Also removed unused LassoLoginPrivate variable/struct/

2004-12-09  Frederic Peters  <fpeters@entrouvert.com>

	use xml snippet in LassoProfile; better faster stronger.

	don't sign query if not asked to; and fixed SNIPPET_NODE_IN_CHILD support

2004-12-09  Nicolas Clapies  <nclapies@entrouvert.com>

	Removed code with ResourceIDGroup in lasso_personal_profile_service_init_query() : will be updated soon.

2004-12-09  Valery Febvre  <vfebvre at easter-eggs.com>

	Yet another modification about ResourceID and EncrytpedResourceID elements

2004-12-08  Frederic Peters  <fpeters@entrouvert.com>

	force role as service provider in lasso_login_build_authn_request_msg (closes: 382)

	forgot to get query when AuthnRequestsSigned was not set

2004-12-08  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed support of ResourceIDGroup : updated class of level 1 and id-wsf with this new class.

	Removed process of ResourceOffering param. Need to be reactivated when ResourceID process in level 1 will be completed.

2004-12-08  Emmanuel Raviart  <eraviart@entrouvert.com>

	For Swig, corrected server providerIds. Added providerIds to identities and sessions.

2004-12-08  Valery Febvre  <vfebvre at easter-eggs.com>

	Fixed bad XML schema interpretation of ResourceIDGroup element in: LassoDiscoModify, LassoDiscoQuerya and LassoDiscoResourceOffering

2004-12-08  Nicolas Clapies  <nclapies@entrouvert.com>

	Updated with support of disco_resource_id_group.

	Initial version : complex class to manage ResourceID and EncryptedResourceID choice.

2004-12-08  Frederic Peters  <fpeters@entrouvert.com>

	new snippet type, SNIPPET_NODE_IN_CHILD, and documented all of the types.

2004-12-08  Valery Febvre  <vfebvre at easter-eggs.com>

	Added LassoDiscoResourceID and LassoDiscoEncryptedResourceID classes

2004-12-08  Frederic Peters  <fpeters@entrouvert.com>

	reviewed code marked with XXX

2004-12-08  Emmanuel Raviart  <eraviart@entrouvert.com>

	In SWIG: - Improved ProviderIds. - Removed LassoProviders structure (too complex to handle with SWIG). - Added attribute providerIds and method getProvider to LassoServer. - Replaced xmlChar with gchar.

2004-12-07  Emmanuel Raviart  <eraviart@entrouvert.com>

	The past participle of "to override" is overridden.     see http://en.wiktionary.org/wiki/Overridden

2004-12-07  Frederic Peters  <fpeters@entrouvert.com>

	another round on snippets; no longer multiply types for content transformation (CONTENT_BOOLEAN, ATTRIBUTE_BOOLEAN, CONTENT_INTEGER, ATTRIBUTE_INTEGER...), instead does something like this: SNIPPET_ATTRIBUTE | SNIPPET_INTEGER (other combinations allowed)

2004-12-07  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed #ifndef __LASSO_LIB_DISCO_QUERY_H__ to #ifndef __LASSO_DISCO_QUERY_H__

	Replaced template_service.* with abstract_service.*

2004-12-07  Valery Febvre  <vfebvre at easter-eggs.com>

	Added AttributeStatement element support in Saml:Assertion (required for id-WSF). Fixed constructor's required params of Disco classes. Updated Disco classes with new snippet. Updated some schema fragments.

2004-12-07  Nicolas Clapies  <nclapies@entrouvert.com>

	Initial version : class to manage Personal profile service. Currently, only support initiating, processing and building of Query and QueryResponse messages.

	Initial version : abstract class to store ResourceID, ResourceOfferings, QueryItem.

	Removed unused old code.

	Added support of specific service : now QueryResponse element can be used by services and inherits their name space.

	Fixed required params of constructor lasso_dst_query_item_new() : QueryItem's attribute itemID is optional.

	Added support of specific service : now Query element can be used by services and inherits their name space.

2004-12-07  Frederic Peters  <fpeters@entrouvert.com>

	updated informative files with data about Lasso 0.5.0.

2004-12-07  Valery Febvre  <vfebvre at easter-eggs.com>

	Updated LassoUtilityStatus with new snippet

2004-12-07  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed namespace of Status element : Status is included by schemas so no default name space.

2004-12-06  Frederic Peters  <fpeters@entrouvert.com>

	removed obsolete doc args

2004-12-06  Valery Febvre  <vfebvre at easter-eggs.com>

	Fixed a stupid copy/paste

	Fixed SNIPPET_LIST_NODES and SNIPPET_LIST_CONTENT snippet type support in lasso_node_init_from_xml()

2004-12-06  Frederic Peters  <fpeters@entrouvert.com>

	removed debugging fprintf

	fixed xpath expressions for id-ff 1.1 compatibility

	fixed metadata

	added (untested) compatibility with ID-FF 1.1 metadata files

2004-12-06  Nicolas Clapies  <nclapies@entrouvert.com>

	Renamed LASSO_LIB_SERVICE_TYPE_ID_SIS_* to LASSO_*_HREF.

	Oups ... bad, bad copy / paste.

	Removed service types defines. Added prefix and href for personal profile and employee profile.

2004-12-06  Frederic Peters  <fpeters@entrouvert.com>

	added dst support

	dealt with namespaces in a manner compatibler with libxml2 2.6.11 and 2.6.16

2004-12-04  Frederic Peters  <fpeters@entrouvert.com>

	more on documentation compilation; ok now.

	removed obsolete classes so the doc compiles again

	Won anther automake battle.  Thanks to Matthias Andree and Be Plouvier.

	added types.c generation to Makefile and to .cvsignore

	added types (classes) extraction on build and registration in lasso_init

	removed gmodule from libs; I failed to get class registration dynamic

	formatted for easier processing

	link to gmodule (part of glib)

2004-12-03  Frederic Peters  <fpeters@entrouvert.com>

	consistency: comment stars are aligned; parent_class is no longer necessary; struct indentation only use one tab; trailing \ are not necessary.

2004-12-03  Nicolas Clapies  <nclapies@entrouvert.com>

	Removed old FIXME.

	Updated LassoDstQueryItem with new snippet feature in class instance. Moved schema comment from .h to .c

2004-12-03  Frederic Peters  <fpeters@entrouvert.com>

	added xml boolean attribute snippet support

2004-12-03  Nicolas Clapies  <nclapies@entrouvert.com>

	Updated LassoDstQueryResponse with new snippet feature in class instance. Moved schema comment from .h to .c

	Updated LassoDstQuery with new snippet feature in class instance. Moved schema comment from .h to .c

2004-12-03  Frederic Peters  <fpeters@entrouvert.com>

	removed memory management debugging fprintf

	cvs ignore for id-wsf/ files

	memory management for XmlSnippets; xml/*.c should no longer leak

	do not share memory between profile->remote_providerID and response->ProviderID

2004-12-02  Valery Febvre  <vfebvre at easter-eggs.com>

	Added 22 DST status code constants

2004-12-02  Frederic Peters  <fpeters@entrouvert.com>

	updated version to 0.5.9 and libtool version to 3.0.0

	last(?) iteration on XmlSnippet; now attached to classes, get_xmlNode and init_from_xml are no longer necessary in many cases.  Previous XmlSnippet renamed to XmlSnippetObsolete to keep compatibility (id-wsf classes have not yet been converted).

	indent using tabs

2004-12-01  Romain Chantereay  <rchantereau@entrouvert.com>

	Update NSIS scripts. Install zlib, intl.dll instead of libtoolized name. Install correctly in the lasso-lite installer.

2004-11-30  Nicolas Clapies  <nclapies@entrouvert.com>

	Added a first support of id-wsf high level. Only the base class is defined : LassoWsfProfile is intended to be inherited by future service classes. It is still very incomplete.

	Added support of DISCO and DST element classes.

	Fixed wrong param in lasso_dst_query_item_new() : LibDstSelect doesnt exist, it is a specific element of attributes services.

	Initial version : added DST part of WSF for sis specific attribute services.

2004-11-29  Frederic Peters  <fpeters@entrouvert.com>

	extra consistency check in lasso_session_get_provider_index

	fixed error checking in lasso_server_new

	added error checking in lasso_server_new

	added proper error checking where xpath is used.

	removed unnecessary include

	remove erroneous (my bad) XXX comment

2004-11-29  Valery Febvre  <vfebvre at easter-eggs.com>

	Added LassoSamlAttribute, LassoSamlAttributeDesignator & LassoSamlAttributeStatement classes

2004-11-29  Frederic Peters  <fpeters@entrouvert.com>

	cut on some line lengths

	reduced line length and aligning some #define

	harmonize schema fragment comments (indentation, in .c, no space between namespace and element name)

2004-11-29  Nicolas Clapies  <nclapies@entrouvert.com>

	Initial version of wsf query / query response discovery part files.

2004-11-29  Frederic Peters  <fpeters@entrouvert.com>

	harmony in snippets declaration

	harmony in schema fragment comments

	cut on line length (along a fix to commitinfo script to check this automatically)

	fixed protocolProfile handling when NULL in request in lasso_login_process_authn_request_msg

	map server->providers to a kind of list (should be dict)

2004-11-29  Valery Febvre  <vfebvre at easter-eggs.com>

	Minor fixes after the snippets changes

2004-11-29  Frederic Peters  <fpeters@entrouvert.com>

	added RelayState support in federation termination notification (used only in redirect mode)

	updated lasso_login_process_authn_request_msg to lasso 0.5 code

2004-11-29  Valery Febvre  <vfebvre at easter-eggs.com>

	Added 8 classes for discovering identity services (ID-WSF) They provide methods to build Modify & ModifyResponse messages.

	Added 2 constants: LASSO_DISCO_HREF and LASSO_DISCO_PREFIX

2004-11-29  Frederic Peters  <fpeters@entrouvert.com>

	check error and free memory in lasso_node_new_from_soap

	elsif'ing

2004-11-28  Frederic Peters  <fpeters@entrouvert.com>

	error checking in lasso_profile_get_request_type_from_soap_msg()

	cleaned up useless affectation

2004-11-26  Frederic Peters  <fpeters@entrouvert.com>

	moved xml snippet stuffs into new internals.h; those should not be exposed; changed snippet type from character to enum (defined in internals.h)

	signature for FederatationTerminationNotification; preparation for AuthnResponse.

	cut some long lines

	formatting

	added attribute snippet support to <saml:SubjectLocality>

	added attribute xml snippet support to <samlp:StatusCode>

	signature support in <lib:FederationTerminationNotification>, <lib:NameIdentifierMappingRequest> and <lib:NameIdentifierMappingResponse>

	added attribute xml snippet support to <saml:Conditions>

	use xmlsnippets in <saml:AuthorityBinding>

	fixed comment formatting

	use attribute xml snippet support in <saml:AuthenticationStatement>

	use attribute xml snippet support in <lib:NameIdentifierMappingRequest>

	use attribute xml snippet support in <lib:LogoutRequest>

	use attribute snippet support in <lib:FederationTerminationNotification>

	fixed comment formatting

	use attribute xml snippet support in <AuthenticationStatement>

	woke up to remove tutorials from configure.ac

2004-11-25  Frederic Peters  <fpeters@entrouvert.com>

	indentation leftovers

	removed examples/ and docs/tutorial directories (obsolete stuffs)

	indentation work

	restore spaces in front of author name

	limit line length to 100 characters.

	cut down on line length; removed unnecessary cast, implemented 't' snippet handling.

2004-11-25  Valery Febvre  <vfebvre at easter-eggs.com>

	added xml complex and simple elements sequences support to xmlsnippet

2004-11-25  Frederic Peters  <fpeters@entrouvert.com>

	don't loop twice on xmlsnippets

	removed some unused #define

	use new xml attribute support for saml:Assertion

	added xml attribute support to xmlsnippet

2004-11-22  Frederic Peters  <fpeters@entrouvert.com>

	renamed private struct member to private_data (gtk+ does it like that)

	fixed emacs mode

	Note about lasso-c-mode for Emacs users

	added error checking on query strings; python tests should now pass

	sync python tests with lasso 0.5

	don't dump empty file path in server dumps

	merged late 0.5 changes to java/ and csharp/ Makefile.am

2004-11-18  Frederic Peters  <fpeters@entrouvert.com>

	unused variables

	include appropriate file so saml_name_identifier_new is defined

	removed unnecessary lasso_node_impl_init_from_query

	fixed signed/unsigned mismatch

	server is not part of <profile> dump

	use same "xmlsnippets" (name will probably change) to build xml nodes

2004-11-17  Frederic Peters  <fpeters@entrouvert.com>

	refactored init_from_xml functions (lasso is now less than 20000 lines)

2004-11-16  Frederic Peters  <fpeters@entrouvert.com>

	more header cleaning

	cleaning #includes

	support for samlp:StatusCode in samlp:StatusCode in ... ad vitam.

2004-11-15  Frederic Peters  <fpeters@entrouvert.com>

	tests are ok

	renamed lasso/environs/ to lasso/id-ff/

	new tests

	updated tests

2004-11-09  Frederic Peters  <fpeters@entrouvert.com>

	return value on init_from_xml; and minor tweaks to code style

2004-11-04  Frederic Peters  <fpeters@entrouvert.com>

	Fixed value of SingleSignOnProtocolProfile metadata : added support of artifact and post. [lasso-orig rev1.2]

2004-11-03  Frederic Peters  <fpeters@entrouvert.com>

	move debug functions with other tools functions in tools.c

	we're missing AuthenticationContextStatement support

	Fixed 2 bugs in lasso_node_add_signature_tmpl() * the transform method "exclusive C14N" was missing in Transforms element * removed useless KeyInfo element in Signatures without X509 data
	[from lasso-orig revision 1.95]

2004-11-01  Frederic Peters  <fpeters@entrouvert.com>

	cleaning files

	LECP converted to new tree

	set RemoteProviderID has <federation> attribute instead of text child to be a little more compatible with lasso (still incompatible since they put all the federation in a global <federations> while I put them directly in the <identity>).

	sign message in name registration

	fixed previous lasso-head port

	Corrected lasso_logout_process_response_msg so that it works for proxies.

	- Added Swig access to attribute role in LassoProvider (needed for proxies). - Renamed TargetNamespace (without uppercase 'S').

2004-10-30  Frederic Peters  <fpeters@entrouvert.com>

	xmlsec for logout requests and responses

	ds:Signature in <samlp:request/> (in login)  (and the signature is not verified yet)

2004-10-29  Frederic Peters  <fpeters@entrouvert.com>

	cleaning up

	read over lasso_login_process_request_msg

	syncing other functions

	lasso_samlp_response_abstract_fill to initialize responses with id, time and versions.

	synced lasso_login_build_authn_response_msg

	synced lasso_login_build_authn_request_msg; added has_protocol_profile function.

	synced lasso_login_build_artifact_msg

	synced (not much to do) lasso_login_accept_sso

	not much on lasso_login_process_response_status_and_assertion

	cleaned up lasso_login_process_federation

	no space before :

	sync unknown error value with lasso

	reformatted lasso_get_pem_file_type

	apply optimization to build_random_sequence (and use it in build_unique_id)

	change function signature

2004-10-28  Frederic Peters  <fpeters@entrouvert.com>

	style

	fixed lasso_get_current_time to return UTC time

	removed unused lasso_g_ptr_array_index

2004-10-27  Frederic Peters  <fpeters@entrouvert.com>

	removal of \n at end of error messages

	removed useless casts

	indented lasso.c

	cleaning up

	removed unused code

	[2004-10-26 19:36  rchantereau] configure.ac: Some configuration variables and configure options in order to compile php.

	Done with the move to structures and the removal of protocols/ (lasso branched on October 2nd; occasional merges since then).
	- Compatible with current souk test suites.
	- Missing memory management for everything in xml/
	- Missing xmlsec support for SOAP messages.

2004-10-03  Emmanuel Raviart  <eraviart@entrouvert.com>

	Removed wrong test and changed a comment.

	Added RegisterNameIdentifier request and response to SWIG binding.

	Corrected error in exception generation for non-Python bindings.

	Removed SWIG_Warning which doesn't exist in Swig.
	Updated Python tests.

2004-10-02  Emmanuel Raviart  <eraviart@entrouvert.com>

	Integrated scalp_is_liberty_query into Lasso. Consequently, LASSO_PROFILE_ERROR_INVALID_QUERY is now a negative error code and a critical message is displayed when this error occurs.

	Removed function lasso_login_process_without_authn_request_msg. It has been replaced with:   lasso_login_init_self_addressed_authn_request(remote_providerID);   /* ...Set protocolProfile, isPassive, consent, relayState here... */   lasso_login_process_authn_request_message(NULL,                                             lassoHttpMethodSelfAddressed); This change was needed because there was no way to set isPassive, consent, etc, before.
	Standardized some error codes and messages.

2004-10-02  Emmanuel Raviart  <eraviart@entrouvert.com>

	Homogeneized error handling for HTTP methods in requests.
	Reworked error codes, so that positive and negative numbers don't overlap:
	It will be easier to change the sign of an error code without break API.

	Realigned error codes definitions.

2004-10-02  Emmanuel Raviart  <eraviart@entrouvert.com>

	Removed consent from fake authnRequest created by lasso_login_process_without_authn_request_msg: Since the nameIDPolicy is "any", must_ask_for_consent must return true and if the user doesn't give its consent, a one-time nameidentifier should be used.

	In lasso_login_process_without_authn_request_msg, set the isPassive flag of the fake authnRequest to false, so that must_authenticate() returns true.

	Corrected handling of NULL remote_providerID in lasso_login_process_without_authn_request_msg.

2004-10-02  Valery Febvre  <vfebvre at easter-eggs.com>

	Fixed a bug in lasso_login_process_without_authn_request_msg() and lasso_login_build_assertion() When Identity provider initiates SSO, response assertion MUST not include an InResponseTo attribute.

	Fixed a bug in lasso_query_to_dict() function It occurred when a parameter didn't have a value.

2004-10-02  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added login method processWithoutAuthnRequestMsg to SWIG bindings.

2004-10-02  Valery Febvre  <vfebvre at easter-eggs.com>

	Added documentation

	Modified lasso_login_process_without_authn_request_msg() The 'remote_providerID' param is now optional (can be NULL).

2004-10-01  Valery Febvre  <vfebvre at easter-eggs.com>

	Added methods comments
	Fixed a bug in lasso_login_accept_sso()

2004-10-01  Emmanuel Raviart  <eraviart@entrouvert.com>

	Removed federation test, because for one-time single sign-on, there is no federation.

	Correction in consent handling for login when testing IsPassive.

2004-10-01  Valery Febvre  <vfebvre at easter-eggs.com>

	Fixed a bug in lasso_login_ask_for_consent() Some cases had been forgotten.

2004-10-01  Emmanuel Raviart  <eraviart@entrouvert.com>

	Corrected #define syntax in SWIG.

	Added consent constants in SWIG.
	Use #define instead of xmlChar for string constants in SWIG.

2004-10-01  Valery Febvre  <vfebvre at easter-eggs.com>

	Fixed a bug in instance_init() methods of LassoIdentity and LassoSession classes is_dirty flag was initialized to TRUE instead of FALSE.

2004-10-01  Emmanuel Raviart  <eraviart@entrouvert.com>

	camelCased argument name in SWIG.

	English correction.

	Synchronized SWIG error codes with those in errors.h (Shame on the developper who forgot to update them in Lasso.i :-)

2004-10-01  Valery Febvre  <vfebvre at easter-eggs.com>

	Fixed a bug in lasso_query_verify_signature() It was impossible to verify queries signed with the DSA-SHA1 algorithm.

	Added one error code

2004-09-30  Emmanuel Raviart  <eraviart@entrouvert.com>

	Updated login C tests to new API for obtaining consent.

	Added mustAskForConsent to login in SWIG.
	camelCased a parameter name.

2004-09-30  Valery Febvre  <vfebvre at easter-eggs.com>

	Added a param 'is_consent_obtained' in method: 	lasso_login_build_artifact_msg(), 	lasso_login_build_authn_response_msg(), 	lasso_login_process_federation(), 	lasso_lecp_build_authn_response_envelope_msg() AuthnRequest message accepts now all possible values for the NameIDPolicy: none, onetime, federated, any
	Added lasso_login_must_ask_for_consent() method
	This method must be called after lasso_login_process_authn_request_msg()

	Added lasso_login_process_without_authn_request_msg() method
	This method is useful to initiate SSO from IDP.

	Lasso.i was updated according to the changes.

2004-09-30  Nicolas Clapies  <nclapies@entrouvert.com>

	Updated registation profile : now it supports multiple registration from SP and IDP. This profile has been tested only with SOAP method in souk. Test must be added with Redirect method.

	Fixed a critical segfault bug when parsing an invalid SOAP message in private method lasso_{protocol_type}_new_from_soap().

2004-09-30  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added directory for sample SourceID messages.

2004-09-30  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed critical bug when parsing an invalid SOAP message in private method lasso_name_identifier_mapping_response_new_from_soap()

2004-09-30  Valery Febvre  <vfebvre at easter-eggs.com>

	Added 3 error codes

	Added 3 lassoLibConsent

2004-09-30  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed critical bug when parsing an invalid SOAP message in private method lasso_name_identifier_mapping_new_from_soap()

2004-09-30  Valery Febvre  <vfebvre at easter-eggs.com>

	Added a parameter 'content' (optional) in lasso_federation_build_local_nameIdentifier() and lasso_federation_build_remote_nameIdentifier() methods

	Added lasso_federation_build_remote_nameIdentifier() and lasso_federation_build_local_nameIdentifier() methods

2004-09-30  Emmanuel Raviart  <eraviart@entrouvert.com>

	Updates Python tests to new Lasso API.

2004-09-29  Emmanuel Raviart  <eraviart@entrouvert.com>

	Updated C tests to lasso_server_new new API.

2004-09-29  Nicolas Clapies  <nclapies@entrouvert.com>

	Added better support for name registration. There is still problem with multiple registration needed to be fixed

2004-09-29  Valery Febvre  <vfebvre at easter-eggs.com>

	Replaced 2  lassoLibMinorVersion by 2 lassoSamlMinorVersion and 2  lassoLibMajorVersion by 2 lassoSamlMajorVersion

2004-09-28  Nicolas Clapies  <nclapies@entrouvert.com>

	Added comments in lasso_register_name_identifier_response_new()

	Added support of RelayState. Now if the requester wants to get back th RelayState, it has to acces to profile->msg_relayState

2004-09-27  Valery Febvre  <vfebvre at easter-eggs.com>

	Added an error code: LASSO_DS_ERROR_CA_CERT_CHAIN_LOAD_FAILED

	Improved lasso_node_verify_signature() method The 'public_key_file' param can now be either a public_key or a certificate

2004-09-27  Nicolas Clapies  <nclapies@entrouvert.com>

	Added dump support in name registration. Fixed a bug in lasso_process_request_msg() : removed a free of node

2004-09-27  Valery Febvre  <vfebvre at easter-eggs.com>

	Fixed bug #303

	lasso_profile_set_session_from_dump() and lasso_profile_set_identity_from_dump() methods log now a critical message if dumps are NULL.

2004-09-27  Valery Febvre  <vfebvre at easter-eggs.com>

	Renamed 'ca_certificate' property of LassoProvider object to 'ca_cert_chain'
	Added a new property 'secret_key' in LassoServer object

	Changed prototype of lasso_server_new() method
	BEFORE:
	LassoServer *
	lasso_server_new(gchar                *metadata,
	                 gchar                *public_key,
	                 gchar                *private_key,
	                 gchar                *certificate,
	                 lassoSignatureMethod  signature_method)
	AFTER:
	LassoServer *
	lasso_server_new(const gchar *metadata,
	                 const gchar *private_key,
	                 const gchar *secret_key,
	                 const gchar *certificate)
	public_key param was removed because it was useless.
	secret_key was added to decrypt private_key
	signature_method was removed (default value is lassoSignatureMethodRsaSha1).
	2 new methods was added to access 'signature_method' property of LassoServer:
	lasso_server_get_signature_method() and lasso_server_set_signature_method()

	Update Lasso.i

2004-09-27  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed bug #294 : memory leak on name identifiers local variables in lasso_name_registration_init_request().

2004-09-27  Valery Febvre  <vfebvre at easter-eggs.com>

	Removed lasso_node_verify_x509_signature() method. This method isn't useful anymore. lasso_node_verify_signature() can now verify signatures with or without X509Data. Added a new param "ca_cert_chain_file" in lasso_node_verify_signature()

2004-09-27  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed bug #293 : memory leak on content local variable in lasso_logout_init_request().

2004-09-27  Valery Febvre  <vfebvre at easter-eggs.com>

	Added lasso_load_certs_from_pem_certs_chain_file() function

2004-09-27  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed bug #292 : memory leak on content attribute.

2004-09-25  Nicolas Clapies  <nclapies@entrouvert.com>

	- Removed lassoLibProtocolProfileNimSpSoap macro.

	- Removed odd private method : lasso_name_identifier_mapping_response_new_from_query is not useful, Liberty Alliance does't implement Redirect method in name identifier mapping profile.
	- Added lasso_name_identifier_mapping_response_set_status_code_value() to define status code of the response.

	- Removed odd private method : lasso_name_identifier_mapping_request_new_from_query() has no sense. Liberty Alliance doesn't define Redirect method for name identifier mapping profile.

2004-09-25  Nicolas Clapies  <nclapies@entrouvert.com>

	- Fixed mistake in the API : restored the second param (provider type). Added a new attribute. Now targetNameIdentifier is used to get the target name identifier of the remote Service Provider. Later it will be used to request an attribute of a principal at this SP.
	- Updated code of name identifier mapping object :
	lasso_name_identifier_mapping_build_request_msg() : builds the name identifier mapping SOAP request message.

	lasso_name_identifier_mapping_process_request_msg() : parse a SOAP request message.

	lasso_name_identifier_mapping_validate_request() : now this method verify federation of the principal.
	and get the name identifier of this principal from federation with the remote service provider.

	lasso_name_identifier_mapping_build_response_msg() : build the name identifier mapping SOAP response message.

	lasso_name_identifier_mapping_process_response_msg() : parse the SOAP response message and veriy the status code value.
	If Success, then it sets the targetNameIdentifier attribute.

2004-09-25  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed mistake in LassoNameIdentifierMapping() : restored the second param (provider type). Added a new attribute in NameIdentifierMapping object. Now targetNameIdentifier is the name identifier of the target Service Provider. Later will be used to request an attribute.

2004-09-23  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	Major update of code in lasso_name_identifier_mapping_init_request(), lasso_name_identifier_mapping_process_request(), lasso_name_identifier_mapping_validate_request(). Added binding in swig for name identifier mapping profile

	Removed old commented code

2004-09-23  Christophe Nowicki  <cnowicki@easter-eggs.com>

	Group misc functions into misc.php on the idp and sp Add Federation Terminaison metadata on the idp and sp Add view off federation on the sp Add cancel federation button on the sp and idp Defederation is not working yet

2004-09-23  Nicolas Clapies  <nclapies@entrouvert.com>

	Added definition of name identifier mapping protocol profiles

2004-09-23  Valery Febvre  <vfebvre at easter-eggs.com>

	Moved 'signature_status' private property from LassoLogin to LassoProfile

2004-09-23  Christophe Nowicki  <cnowicki@easter-eggs.com>

	Add Federation Federation Termination metadata

2004-09-23  Valery Febvre  <vfebvre at easter-eggs.com>

	Removed a ';' in excess

2004-09-22  Valery Febvre  <vfebvre at easter-eggs.com>

	Update

	Ooops, signature_status type must be gint, not gboolean

	Changed returned values and added some error messages in lasso_query_verify_signature()

2004-09-22  Emmanuel Raviart  <eraviart@entrouvert.com>

	Updated to new API (but it doesn't work yet).

2004-09-22  Nicolas Clapies  <nclapies@entrouvert.com>

	Added a test on the remote provider id param in lasso_name_registration_init_request() method

2004-09-22  Valery Febvre  <vfebvre at easter-eggs.com>

	Minor fixs

2004-09-22  Nicolas Clapies  <nclapies@entrouvert.com>

	Added method lasso_lib_name_identifier_mapping_request_set_targetNameSpace() in lib_name_identifier_mapping_reques.c / h files. Added support of target name space in lasso_name_identifier_mapping_new() in name_identifier_mapping_request.c / h files. Added support of target name space in lasso_name_identifier_init_request() in name_identifier_mapping.c / h files

2004-09-22  Christophe Nowicki  <cnowicki@easter-eggs.com>

	fix problem with the sso, now the user can do more than one sso session.

2004-09-22  Frederic Peters  <fpeters@entrouvert.com>

	forgotten commit; /insert const keyword explanation here/

2004-09-22  Nicolas Clapies  <nclapies@entrouvert.com>

	fixed a lot of bug, added a new attribute oldNameIdentifier. Now after the process of the identity object ( or dump), nameIdentifier holds the new name identifier and oldNameIdentifier holds the old name identifier

	lasso_federation_set_local_nameIdentifier() and lasso_federation_set_remote_nameIdentifier() remove the old value before setting local_nameIdentifier of remote_nameIdentifier

	*** empty log message ***

	Added lasso_identity_get_federation_ref : it returns the reference of the asked federation object

2004-09-22  Christophe Nowicki  <cnowicki@easter-eggs.com>

	Added ProfileBrwsPost

2004-09-22  Valery Febvre  <vfebvre at easter-eggs.com>

	update

2004-09-22  Emmanuel Raviart  <eraviart@entrouvert.com>

	Removed assertion from login in SWIG.

2004-09-22  Valery Febvre  <vfebvre at easter-eggs.com>

	Renamed lasso_lecp_init_from_authn_request_msg() into lasso_lecp_process_authn_request_msg()
	BEWARE : this change breaks the API

	Removed response_dump and assertion properties in LassoLogin object Added an attribute (remote_providerID) in lasso_login_build_response_msg() Renamed lasso_login_add_response_assertion() into lasso_login_build_assertion() Renamed lasso_login_init_from_authn_request_msg() into lasso_login_process_authn_request_msg() Removed lasso_login_get_assertion(), lasso_login_set_assertion and lasso_login_set_assertion_from_dump() methods
	BEWARE : these changes break the API

	Added 8 SamlStatusCode

	Added lasso_profile_get_remote_providerID() method

2004-09-22  Emmanuel Raviart  <eraviart@entrouvert.com>

	New API pour artefact handling.

2004-09-20  Valery Febvre  <vfebvre at easter-eggs.com>

	update

2004-09-20  Emmanuel Raviart  <eraviart@entrouvert.com>

	Made argument remote_providerID optional for Defederation.initNotification, in SWIG binding.

2004-09-20  Nicolas Clapies  <nclapies@entrouvert.com>

	Added binding for new name registration type

2004-09-20  Christophe Nowicki  <cnowicki@easter-eggs.com>

	PHP session are stored in the database

	PHP session are now stored in the database A now table was added 'sso_session' for storing information about the PHP Session, it's possible to view logged user Logout destroy the PHP session in the IdP Bug : user can't sso twice ;(

2004-09-20  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

2004-09-20  Emmanuel Raviart  <eraviart@entrouvert.com>

	Made remote_providerID optional in lasso_lecp_build_authn_request_msg and in SWIG
	Corrected SWIG handling of metadata.

	Added attribute providerIds to Session in SWIG.

2004-09-20  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed big mistake when updating name registration type in lassoRequestType : moved type at the end to preserve API, sorry.

2004-09-20  Frederic Peters  <fpeters@entrouvert.com>

	repair API/ABI; thanks you very much.

2004-09-20  Nicolas Clapies  <nclapies@entrouvert.com>

	Added name registration declaration and definition

	Added name registration type in lassoRequestType enum. added test in function lasso_profile_get_request_type_from_soap_msg()

2004-09-20  Frederic Peters  <fpeters@entrouvert.com>

	I wanted to login    /But it was too long/ So I logged out    /It was not much shorter/

2004-09-20  Nicolas Clapies  <nclapies@entrouvert.com>

	Added tests in lasso_register_name_identifier_response_new_from_query(). Now return NULL if a required key value is not found

	Added test lasso_register_name_identifier_request_new_from_query(). Verify if SPProvidedNameIdentifier exists in query (As specified in IDFF 1.2 errata, SPProvidedNameIdentifier is optional)

2004-09-20  Valery Febvre  <vfebvre at easter-eggs.com>

	Added lasso_get_public_key_from_pem_cert_file() and lasso_get_pem_file_type() functions

2004-09-20  Nicolas Clapies  <nclapies@entrouvert.com>

	Replaced call to lasso_identity_get_next_federation_remote_providerID() with lasso_identity_get_first_providerID()

2004-09-20  Valery Febvre  <vfebvre at easter-eggs.com>

	the remote_providerID parameter of lasso_login_build_authn_request_msg() method is now optional. If it's NULL, the providerID of the first provider of login->server is used.

2004-09-20  Nicolas Clapies  <nclapies@entrouvert.com>

	Added lasso_identity_get_first_providerID(). Now it replaces lasso_identity_get_next_federation_remote_providerID() wich still exists to keep API / ABI compatibility

2004-09-20  Valery Febvre  <vfebvre at easter-eggs.com>

	Added lasso_server_get_first_providerID() method

2004-09-18  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added SWIG bindings for metadata, providers and providerIds.
	Reworked PHP4 binding for Identity.providerIds => PHP API has changed.

2004-09-17  Frederic Peters  <fpeters@entrouvert.com>

	fixed typo

	use g_strdup_printf to avoir buffer size calculations and g_snprintf to avoir buffer overrun.

	use g_strdup_printf to avoid buffer size calculation; and free() the uri once it has been used.

	strncpy won't add a trailing \0 to the string if it has over 512 characters; only copy 511 and add a zero manually.

2004-09-17  Christophe Nowicki  <cnowicki@easter-eggs.com>

	log viewer for the Service Provider and the Identity Provider added logger for in many files updated idp1 metadata, added .php extension added session viewer for the sp (you will be able to view online users)

2004-09-17  Frederic Peters  <fpeters@entrouvert.com>

	removed remaining parenthesis on return statements

	lasso_sha1 doesn't return a string but a buffer

2004-09-17  Romain Chantereay  <rchantereau@entrouvert.com>

	Uptaded NSI scripts:     * Set version to 0.4.1-2 (filename is set too)     * Updated files modules documentation.     * Added intl.dll (part of gettext project) to dependencies installation.
	PS: Gettext is not included, just intl.dll

2004-09-17  Frederic Peters  <fpeters@entrouvert.com>

	remove removed code

	alloc xmlChar with xmlMalloc in lasso_build_unique_id; alloc one more character in lasso_sha1; remove some removed code

	use memcpy to copy memory; also fixed type of samlArt.

2004-09-16  Christophe Nowicki  <cnowicki@easter-eggs.com>

	New logging system with a web interface.

2004-09-16  Valery Febvre  <vfebvre at easter-eggs.com>

	Disabled "consent" attribute checking when NameIDPolicy is set to federated in the AuthnRequest (in lasso_login_process_federation method)

2004-09-16  Christophe Nowicki  <cnowicki@easter-eggs.com>

	For multiple virtual hosts with certificat you need to set the CN. It's fixed in the PHP sample README.

	README for the PHP samples is now complete. Can someone try it?

2004-09-15  Christophe Nowicki  <cnowicki@easter-eggs.com>

	Added sample xml metadata in the distribution Added a README file, this file explain howto setup a PHP IdP/SP, it's not fully documented yet. Work in progress.

	New logging system based on Pear::Log package. Every actions on the idp, sp will be logged inside the database, syslog a file.

2004-09-14  Nicolas Clapies  <nclapies@entrouvert.com>

	Added binding for LassoNameRegistration C object

	Little indentation

	Added tests if required attributes in lasso_register_name_identifier_request_new_from_query() are not found.

2004-09-13  Christophe Nowicki  <cnowicki@easter-eggs.com>

	now the user list show federations

	bind property providerIDs for LassoIdentity added typemap, convert GPtrArray to PHP indexed string array

	split source code of singleSignOn.php in many functions added support for http basic authentification remove useless "?SID=" values

2004-09-10  Christophe Nowicki  <cnowicki@easter-eggs.com>

	change header("Location $url\n\n") to  header("Location $url\r\n\r\n")

	Use header("Location: $url\n\n") instead of  header("Location: $url") Secure every SQL query with the quoteSmart methode. Completely rewrite singleSignOn.php, now the code is more easy to understand and more clean.

2004-09-10  Frederic Peters  <fpeters@entrouvert.com>

	Fixed ABI and API breakage.  Please don't modify function signatures (even more so when the new arg is not used).

2004-09-10  Nicolas Clapies  <nclapies@entrouvert.com>

	A lot of Updates ... currently it is unusable : lasso_name_registration_validate_request(), lasso_name_registration_process_response_msg(), lasso_name_identifier_mapping_validate_request() and lasso_name_identifier_mapping_process_response_msg() need to be completed

	Moved lasso_name_registration_validate_request() method at the end of definition order

	Moved lasso_name_registration_validate_request() at the end of declaration order

2004-09-10  Frederic Peters  <fpeters@entrouvert.com>

	Moved assertion to private part of LassoLogin* (use lasso_login_get_assertion to get it).  Without breaking ABI.  Classy.

2004-09-10  Nicolas Clapies  <nclapies@entrouvert.com>

	Updated name registration object's methods code to have the same structure as the other profiles. It still needs to be tested before to be souked :)

	Changed comment if error when building query logout request message

	Added entry for logout method lasso_logout_dump(), lasso_logout_init_request() and lasso_logout_reset_providerID_index()

	Added lasso_provider_get_registerNameIdentifierServiceReturnURL() method in LassoProvider object

2004-09-09  Christophe Nowicki  <cnowicki@easter-eggs.com>

	I've forget to add lasso/php/examples/sample-idp/Makefile in the autoconf script.

2004-09-08  Christophe Nowicki  <cnowicki@easter-eggs.com>

	Improve setup system : edit metadata and allow the administrator to select the authentification methode (HTTP Basic or HTML Form).

2004-09-08  Frederic Peters  <fpeters@entrouvert.com>

	please use spaces between variable names and values

2004-09-08  Christophe Nowicki  <cnowicki@easter-eggs.com>

	added edit sp metadata to the setup system

	nice user browser

	oups ;(

	SOAP request read problem fixed SSO is now working much better

2004-09-08  Emmanuel Raviart  <eraviart@entrouvert.com>

	Restructured ColdFusion code. Added single logout code. Both single sign-on and single logout work.

2004-09-07  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added files that I forgot to commit for 0.4.1
	Improved ColdFusion.

2004-09-07  Romain Chantereay  <rchantereau@entrouvert.com>

	Corrected install-java-lite nsi script.

2004-09-07  Emmanuel Raviart  <eraviart@entrouvert.com>

	Created ChangeLog using cvs2cl -f ChangeLog --FSF

	Replaced Sign On with Sign-On.

	Login skeleton for ColdFusion is now fully working.

2004-09-07  Romain Chantereay  <rchantereau@entrouvert.com>

	Updated NSI scripts.
	Set Lasso DLL windows resources filename to liblasso-1.dll.

	Add windows linker --add-stdcall-alias in order to permit failsafe use of DLLs.

2004-09-07  Christophe Nowicki  <cnowicki@easter-eggs.com>

	IdP PHP : logout is working

	ZVAL_STRING macro for PHP

2004-09-07  Frederic Peters  <fpeters@entrouvert.com>

	fixed error output in configure when no java has been found (was: ./configure: line 20612: NULL: command not found )

2004-09-07  Romain Chantereay  <rchantereau@entrouvert.com>

	Firsts fixes in order to compile Python binding under Darwin.

	Another way to test, ugly, but safe.

2004-09-07  Nicolas Clapies  <nclapies@entrouvert.com>

	Comments miss in some last commits, so : the 4 last commits fixed a bad bug in lasso_logout_get_next_provideID() and a bug in the setting of status code value in logout response

2004-09-07  Romain Chantereay  <rchantereau@entrouvert.com>

	Ok, now a module undex Win32, and a lib under Linux (and other OS).

2004-09-07  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed a seg fault in lasso_logout_get_next_providerID()

2004-09-07  Romain Chantereay  <rchantereau@entrouvert.com>

	Now module is a module.

2004-09-07  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

2004-09-07  Romain Chantereay  <rchantereau@entrouvert.com>

	Now 0.4.1 and 1:1:0.

2004-09-07  Nicolas Clapies  <nclapies@entrouvert.com>

	Added entries for missing methods of logout object documentation : lasso_logout_init_request() and lasso_logout_reset_providerID_index()

	Updated the API developer documentation

	Updated the API developer documentation

2004-09-07  Christophe Nowicki  <cnowicki@easter-eggs.com>

	SWIGPHP4 is not a defined in the wapper source code, use PHP_VERSION

	remove swig -noproxy option for PHP

2004-09-07  Romain Chantereay  <rchantereau@entrouvert.com>

	RTM :)
	Now good and proper test on swig version.

2004-09-07  Frederic Peters  <fpeters@entrouvert.com>

	filled NEWS file

	removed note about bindings in README

2004-09-07  Romain Chantereay  <rchantereau@entrouvert.com>

	For compatibility with SWIG < 1.3.22, test the swig version before using the new java enum handling way.

2004-09-07  Romain Chantereay  <rchantereau@entrouvert.com>

	Specificly use original approach java enums binding method.
	http://www.swig.org/Release/CHANGES

	05/20/2004: wsfulton
	            [Java] Java enum support added. There are now 4 ways in which enums
	            can be wrapped:

	            1) Proper Java enums - use %include "enums.swg"
	            2) Typesafe enums - use %include "enumtypesafe.swg"
	            3) Type unsafe enums (constant integers) - use %include "enumtypeunsafe.swg"
	            4) Simple constant integers (original approach) - use %include %"enumsimple.swg"

2004-09-07  Romain Chantereay  <rchantereau@entrouvert.com>

	Added php sample-sp to the distribution.

2004-09-07  Frederic Peters  <fpeters@entrouvert.com>

	updated debian packaging

	updated debian packaging

2004-09-07  Romain Chantereay  <rchantereau@entrouvert.com>

	Better java sun jdk support on Windows plateforms.
	NOTE: Use good PATH environment variable and set JAVA=java, JAVAC=javac &
	JAR=jar. It is very important.

	Fixed php-config help typo.

	No need to define package and version constants, there are already defined in the lasso_config.h file. This file is included in the generated wrap C source code.

	Windows java installer includes now lasso.jar. Usefull isn't it ?

2004-09-07  Emmanuel Raviart  <eraviart@entrouvert.com>

	Corrected Lasso minor version in SWIG binding.

2004-09-06  Frederic Peters  <fpeters@entrouvert.com>

	added 0.4 to doap.rdf

	a bit late; fixed use of unitialized variables (-Wuninitialized needs -O)

2004-09-06  Romain Chantereay  <rchantereau@entrouvert.com>

	Updated installer file names.

	Added NSI java script file to distribution.

	Updated NSI file and added java NSI.

2004-09-06  Christophe Nowicki  <cnowicki@easter-eggs.com>

	PHP Idp Sample : - form for creating metadata - sso support - small README with installation instruction

2004-09-06  Romain Chantereay  <rchantereau@entrouvert.com>

	No more trace of macros if the distribution.

	pkg-config-path= becomes pkg-config=

	Removed check.m4 from distribution.

2004-09-06  Nicolas Clapies  <nclapies@entrouvert.com>

	Removed old methods declaration

2004-09-06  Frederic Peters  <fpeters@entrouvert.com>

	removd extraneous output about gtk-doc

2004-09-06  Romain Chantereay  <rchantereau@entrouvert.com>

	Really added check macros to the distribution.

	Corrected java test.

	Args are string.

2004-09-06  Romain Chantereay  <rchantereau@entrouvert.com>

	Revision to 0.4.0
	Libtool: 1:0:0

	Java is not activated when no jar program.

2004-09-06  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	*** empty log message ***

2004-09-06  Romain Chantereay  <rchantereau@entrouvert.com>

	Some typo, and variables corrections.

2004-09-06  Nicolas Clapies  <nclapies@entrouvert.com>

	Added lasso_logout_dump() to logout.h

	Renamed methods lasso_logint_set_assertion*() to lasso_login_set_assertion*()

	Oups, little mistake : now attribute version is added only in lasso_profile_dump() instead of lasso_login_dump() or lasso_logout_dump()

	Added version attribute in lasso dump messages

2004-09-06  Romain Chantereay  <rchantereau@entrouvert.com>

	Now, we use the detected JAR program instead of an harcoded 'jar' command.

	Now Lasso distribution includes the check macros allowing people to generate Makefile and configure without check-xml installed.
	PS: The distribution is not checked yet.

2004-09-05  Emmanuel Raviart  <eraviart@entrouvert.com>

	Changed Python exceptions generated by SWIG.

2004-09-04  Emmanuel Raviart  <eraviart@entrouvert.com>

	Half a day of work for this prodigious result: ColdFusion redirects the AuthnRequest to the IDP.

	Corrected a mistake in Java binding.

2004-09-04  Frederic Peters  <fpeters@entrouvert.com>

	missing includes, unusued variables, usual saturday stuff.

2004-09-04  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	Fixed a lot of bugs in the logout from a SP to others SPs : now it remove each of the assertions SPs at IDPs and IDP returns the real LogoutResponse

2004-09-04  Frederic Peters  <fpeters@entrouvert.com>

	Pierre Cros improvements

2004-09-04  Emmanuel Raviart  <eraviart@entrouvert.com>

	Made the sample Java code work.

	Added new object Assertion to C# & Java bindings.

	Corrected Java.

	Converted C login test to new login API.

	Added defines neededfor Java binding.

2004-09-03  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	Fixed problem when checking all remote SP from IDP in lasso_logout_validate_request() : replaced lasso_provider_get_singleLogoutProtocolProfile(provider, lassoProviderTypeIdp, NULL) with lasso_provider_get_singleLogoutProtocolProfile(provider, lassoProviderTypeSp, NULL)

	Updated of lasso_logout_validate_request() : now it returns a code error of -301 (unsupported profile) if an IDP receiving a LogoutRequest via SOAP detects other SPs dont support SOAP method.

	Updated process of artifact : now the IDP generates an artifact either or not the user authentication succeeded. When the SP resends the artifact to the IDP in a samlp:Request, it builds a samlp:Response message with Success status code value. If an assertion is found from artifact, then it adds it to the response. Finally, the IDP responds to the SP with the SOAP message

2004-09-02  Frederic Peters  <fpeters@entrouvert.com>

	another serie of ignored files

	ignore some files

	ignore a bunch of things

2004-09-02  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added missing .cvsignore in tests/data/

2004-09-02  Frederic Peters  <fpeters@entrouvert.com>

	things were overcomplicated; simplify a bit (for example the DEPDIR dirty things was necessary because variables were overused; ask me for details if you want)

	new classes -> new files

	disable xmlsec version check

2004-09-01  Nicolas Clapies  <nclapies@entrouvert.com>

	Removed lasso_session_remove_assertion() in lasso_logout_init_request() at IDP with HTTP Redirect method, added remove of assertion if at IDP and HTTP redirect

	*** empty log message ***

	Removed in python test, hard coded logout dump test, fixed a bug in lasso_logout_new_from_dump() when setting provider id index

2004-09-01  Christophe Nowicki  <cnowicki@easter-eggs.com>

	PHP IdP Sample : - setup system is working - user management (add, delete, etc ...) - sso login in progress

2004-09-01  Nicolas Clapies  <nclapies@entrouvert.com>

	Moved support of provider index from session to logout. Now only the logout knows the current index of the provider id to request, and the session can only return the provider id from an index

	Added support of index ProviderID in lasso_session_dump() and lasso_session_new_from_dump()

	Fixed bug when getting relay state in lasso_logout_process_response_msg()

2004-09-01  Emmanuel Raviart  <eraviart@entrouvert.com>

	Corrected Request and Response for Logout and request for Federation Termination Notification in SWIG.

2004-09-01  Frederic Peters  <fpeters@entrouvert.com>

	removed extra parentheses after return statements;

2004-09-01  Nicolas Clapies  <nclapies@entrouvert.com>

	Added free of temporary node object in lasso_logout_new_from_dump()

	Added parse support of xml message in lasso_logout_response_new_from_export(), added private method lasso_logout_response_new_from_export()

	Fixed bug when parsing from an export message in lasso_logout_request_new_from_xml() : call to lasso_node_destroy() at the wrong place

2004-09-01  Emmanuel Raviart  <eraviart@entrouvert.com>

	LassoSession.getAuthenticationMethod argument is now optional.

2004-09-01  Christophe Nowicki  <cnowicki@easter-eggs.com>

	Fix addProvider bug

2004-09-01  Nicolas Clapies  <nclapies@entrouvert.com>

	Replaced lasso_session_get_next_providerID() with lasso_session_get_first_providerID()

	Removed set of msg_relayState in lasso_logout_process_request(), it has no meaning here, but set the msg_relayState in lasso_logout_process_response_msg()

2004-08-31  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added a new Python logout test: Make the same Logout.newFromDump enough times => segfault.

	Corrected request and respond for profiles others than login.
	Added relayState attribute to LogoutRequest, but it doesn't work. I believe,
	this is a Lasso bug.

2004-08-31  Nicolas Clapies  <nclapies@entrouvert.com>

	Added method lasso_session_get_first_providerID(). Now to get the first providerID use it instead of lasso_session_get_next_providerID()

	fixed bug in lasso_logout_dump() and lasso_logout_new_from_dump()

2004-08-31  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added setting of isPassive to False in doc.

2004-08-31  Frederic Peters  <fpeters@entrouvert.com>

	strcmp is used; string.h must be included

	g_sprintf is used; gprintf.h must be included

	default: in switches

	removed unused variables

	g_sprintf is used; glib/gprintf.h must be included

	strlen is used; string.h must be included

	properly cast request to needed type

	default: to set descriptor to NULL; so it won't be undefined on the next line where it was tested.

	xmlSecBase64Encode is used; xmlsec/base64.h must be included

	g_sprintf is used; gprintf.h must be included; default: statement in switch.

2004-08-31  Nicolas Clapies  <nclapies@entrouvert.com>

	Added support of code error LASSO_PROFILE_ERROR_MISSING_REQUEST in lasso_logout_build_response_msg()

	Added code error : LASSO_PROFILE_ERROR_MISSING_REQUEST. It indicates that lasso needs a request to process a task. For example, when building a response message

2004-08-31  Frederic Peters  <fpeters@entrouvert.com>

	cvs must ignore cil and dev packages directory

	cvs must ignore cil and dev packages directory

	php4 packaging and renamed liblasso0-python2.3 to python2.3-lasso

	php4 packaging and renamed liblasso0-python2.3 to python2.3-lasso

2004-08-31  Emmanuel Raviart  <eraviart@entrouvert.com>

	Typo correction.

2004-08-31  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed bug when attempting to parse a query message : now if a key / value with = is incomplete, it skips it and completes the process of the list

	Added in parse of query a test if the data list is not NULL

2004-08-31  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added Lasso version constants to SWIG.

	Testing logout.processResponseMsg with a really bad URL. => red alert.

2004-08-31  Christophe Nowicki  <cnowicki@easter-eggs.com>

	new version of the PHP service provider made with the new Swig PHP binding

2004-08-31  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed missing feature in lasso_process_request_msg() and lasso_logout_process_response() : now if the parse of the query message is wron, then it returns LASSO_PROFILE_ERROR_INVALID_QUERY code error

	Fixed bug in lasso_logout_response_new_from_export() : now if a query message and if an attribute or element key / value is missing, return NULL

	Fixed bug in lasso_logout_request_new_from_export() : now if a query message and if an attribute or element key / value is missing, return NULL

2004-08-30  Emmanuel Raviart  <eraviart@entrouvert.com>

	New logout test => Red alert!

	Removed low-level bindings from SWIG.
	In PHP, error constants keep their LASSO_ prefix (because PHP4 doesn't have
	the notion of namespaces).

2004-08-30  Nicolas Clapies  <nclapies@entrouvert.com>

	Little lean of the code

2004-08-30  Christophe Nowicki  <cnowicki@easter-eggs.com>

	PHP Binding : PHP does not handle namepaces, added lasso_ prefix for all functions.

2004-08-30  Nicolas Clapies  <nclapies@entrouvert.com>

	Fixed problem when validating the notification : test the remote provider type to get the return url

	Added a test in lasso_defederation_build_notification_msg() to test if the federation termination service url exists

	Fixed call of lasso_session_remove_assertion() in the right place in init_request() and process_response_msg()

	Fixed error in method name : renamed lasso_provider_get_singleLogoutServiceURL() to lasso_provider_get_registerNameIdentifierServiceURL()

	Added comment in lasso_defederation_validate_notification() : indicate that query is not signed because of the crypted optional relay state

	Added building of federation termination notification return url with QUERY if a RelayState is in the notification

	Added lasso_logout_new_from_dump(). Need to be tested

	Added parsing of status code value in lasso_logout_response_new_from_query(). Now it sets the Status, StatusCode and his Value attribute in logoutResponse

	Fixed bug when dumping and loading from dump server with no metatadata. Now if metadata of the server exists, it adds a ServerMetadata node and embbeds it

2004-08-30  Emmanuel Raviart  <eraviart@entrouvert.com>

	A few corrections to SWIG binding (a quick commit, so that Christophe can work on it).

2004-08-30  Frederic Peters  <fpeters@entrouvert.com>

	swig generate new objects/filenames

	returns 0 on success

2004-08-30  Emmanuel Raviart  <eraviart@entrouvert.com>

	SWIG high-level binding now uses camelCase.
	Updated SWIG binding to support Java high-level classes.

	Simplified java/Makefile.am (but now, it needs to be reworked by an
	autotools expert).

	ColdFusion simple Java test compiles ok.

2004-08-29  Emmanuel Raviart  <eraviart@entrouvert.com>

	SWIG should now generate a high-level binding with classes, so I have removed the -noproxy option.

2004-08-29  Frederic Peters  <fpeters@entrouvert.com>

	updated c# binding for new class names

	some tests do not have descriptions

	corretly escape xml

2004-08-29  Emmanuel Raviart  <eraviart@entrouvert.com>

	Removed obsolete Python doc.

	When Lasso doesn't recognize the URL query, it now throws a SyntaxError exception.

2004-08-28  Emmanuel Raviart  <eraviart@entrouvert.com>

	Removed references to lassomod in .cvsignore.

	SWIG now produces high-level bindings.
	(python/Makefile.am needs some cleaning IMHO, but I don't understant it).

2004-08-28  Frederic Peters  <fpeters@entrouvert.com>

	renamed API reference to API reference (was reference manual)

	xml encoding of special characters (&, <, >)

	new URLs and version info for 0.3.0

2004-08-28  Emmanuel Raviart  <eraviart@entrouvert.com>

	Converted Identity & Session to real objects in SWIG bindings.

	Hide LibAuthnRequest attributes from SWIG binding.

	Added preliminary error throwing in SWIG binding.
	Replaced simple object methods whith #define.

	Converted SWIG Server into a high-level class with new_from_dump static method and default value for some arguments.

	Renamed login_tests.py to profiles_tests.py.
	Added Server tests (=> discovered bug #265).

	Transformed LassoAuthnRequest as a true SWIG class with attributes and methods for all bindings.

2004-08-27  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	*** empty log message ***

2004-08-27  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added method Logout.reset_session_index in Python high-level binding.

2004-08-27  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

2004-08-27  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added support for "invalid query" errors in Python high-level binding.

2004-08-27  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	Renamed method name lasso_session_get_next_assertion_remote_providerID to lasso_session_get_next_providerID

	Added return of code error LASSO_PROFILE_ERROR_INVALID_QUERY when an error occurs while parsing a federation termination notification message query in lasso_defederation_process_notification_msg()

	Added code error LASSO_PROFILE_ERROR_INVALID_QUERY, returned when an error occurs while parsing a query message

2004-08-27  Emmanuel Raviart  <eraviart@entrouvert.com>

	Corrected SWIG binding.
	Corrected Python tests.

2004-08-27  Nicolas Clapies  <nclapies@entrouvert.com>

	Added index attribute (session->index_providerID) of next provider id returned when a call to lasso_session_get_providerID(), added lasso_session_reset_index_providerID() to reset the index to the first provider id of assertion list. the index is decremented when removing assertion. lasso_get_next_providerID() returns NULL if there is no assertion anymore or if the index point is at the end of the list. Added lasso_logout_get_next_providerID() lasso_logout_reset_index_providerID() to wrap session method

2004-08-27  Emmanuel Raviart  <eraviart@entrouvert.com>

	Replaced SWIG specific functions to access "request" and "response" attributes of profiles, with SWIG read-only attributes.

2004-08-27  Nicolas Clapies  <nclapies@entrouvert.com>

	Removed g_assert in samlp_request_abstract object when setting required attributes and elements. Added tests in federation termination notification building from QUERY export for required elements, return NULL if error, notification object if ok

2004-08-27  Emmanuel Raviart  <eraviart@entrouvert.com>

	Removed SWIG Lasso.c file.
	Added a Python test for defederation (currently it aborts).

2004-08-27  Frederic Peters  <fpeters@entrouvert.com>

	more on single sign on

2004-08-26  Frederic Peters  <fpeters@entrouvert.com>

	searches all text files for unknown functions

	improvement

2004-08-26  Emmanuel Raviart  <eraviart@entrouvert.com>

	Forgot to declare a parameter as optionnal.

	Added constant lassoHttpMethodAny.
	Added error constants to SWIG (and one to Python).

2004-08-26  Frederic Peters  <fpeters@entrouvert.com>

	new parameter to lasso_logout_init_...

	fix included file name

2004-08-26  Nicolas Clapies  <nclapies@entrouvert.com>

	Added a param to method lasso_defederation_init_notification(). Now if it is set, lasso can choose a specific defederation protocol profile depending on the http method value of this param

	Replaced xmlFree with g_free in lasso_logout_get_next_providerID() for current_provider_id

	*** empty log message ***

	Renamed register_name_identifier.* to name_registration.* files

	Oups, missing commit of the new Lasso.i swig file :p

	Added a param to method lasso_logout_init_request(). Now if it is set, lasso can choose a specific logout protocol profile depending on the http method value of this param

2004-08-26  Frederic Peters  <fpeters@entrouvert.com>

	removed revision

	More on sso profile; sp-side

2004-08-26  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	*** empty log message ***

	Rename constant LASSO_LOGOUT_ERROR_UNSUPPORTED_PROFILLE to LASSO_PROFILE_ERROR_UNSUPPORTED_PROFILE, now can be use by all profiles

2004-08-26  Frederic Peters  <fpeters@entrouvert.com>

	new lasso documentation

2004-08-26  Nicolas Clapies  <nclapies@entrouvert.com>

	Added remove of assertion in lasso_logout_init_request(), and lasso_logout_process_response_msg() if there was an error while processing a LogoutResponse with HTTP SOAP method, added a returned code error for Unsupported profile status code

2004-08-26  Emmanuel Raviart  <eraviart@entrouvert.com>

	Moved SWIG constructors and destructors from Lasso.c to Lasso.i.

2004-08-25  Nicolas Clapies  <nclapies@entrouvert.com>

	Added tests to verify if the request message is a LogoutRequest in lasso_login_process_request_msg() and if the response message is a LogoutResponse in lasso_logout_process_response_msg()

	Added a test in lasso_login_init_from_authn_request_msg() to verify if the request message is an AuthnRequest message, if not, returns a code error

	added include for string.h

	Added in lasso_login_process_authn_response_msg() setting of msg_relayState from lib:RelayState of AuthnResponse message if exists, else msg_relayState is set to NULL

	*** empty log message ***

	fixed bug : at a done label, use to remove a provider got with lasso_provider_get_ref()

2004-08-25  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added a --source-dir option to tests.

	Removed obsolete Python test framework.

2004-08-25  Nicolas Clapies  <nclapies@entrouvert.com>

	Added missing private attribute, private variable and desallocation methods : LassoDefederationPrivate *private in LassoDefederation object, static GObjectClass *parent_class in C file, lasso_defederation_dispose() and lasso_defederation_finalize() in LassoFederation object

2004-08-25  Frederic Peters  <fpeters@entrouvert.com>

	ignore new class

	added Defederation profile; workaround lasso-sharp.snk

2004-08-24  Nicolas Clapies  <nclapies@entrouvert.com>

	added test if identity is set before removing federation

	removed federation and assertion

	*** empty log message ***

	*** empty log message ***

2004-08-24  Emmanuel Raviart  <eraviart@entrouvert.com>

	Corrected SWIG Defederation binding.
	Created Python high-level class for Defederation.

2004-08-24  Nicolas Clapies  <nclapies@entrouvert.com>

	updated doc conf files for defederation

2004-08-24  Emmanuel Raviart  <eraviart@entrouvert.com>

	Continue to rename FederationTermination into Defederation.

2004-08-24  Nicolas Clapies  <nclapies@entrouvert.com>

	renamed lassoFederationTermination to lassoDefederation in lassoRequestType enum

	update, now use GError object for each lasso_server_get_provider_ref()

	renamed lasso_federation_termination_get_type to lasso_defederation_type

	*** empty log message ***

	renamed lasso/environs/federation_termination.* to lasso/environs/defederation.*

2004-08-24  Emmanuel Raviart  <eraviart@entrouvert.com>

	Created SWIG bindings for Defederation (new name of FederationTermination).

2004-08-24  Nicolas Clapies  <nclapies@entrouvert.com>

	use lassoProviderType instead of gint for provider_type params

	*** empty log message ***

	Set the nameIdentifier attribute after a call to init_notification()

	updated process of logout response msg at SP. Now if the initial requester is a SP and the HTTP method is SOAP and if the logout request fails, then lasso builds a new logout request for HTTP Redirect method and set only msg_url

	*** empty log message ***

	fixed bug in lasso_federation_termination_build_notification_msg() : now it gets the remote provider real service url

	updates

	minor updates

	fixed bug in lasso_logout_get_next_providerID() when looking for a remote provider id when session attribute is NULL

2004-08-24  Romain Chantereay  <rchantereau@entrouvert.com>

	Corrected configure option help.
	Told to use with-pkg-config= and no with-pkg-config-path wich it the good option
	name.

2004-08-24  Nicolas Clapies  <nclapies@entrouvert.com>

	fixed problem of finding the remote provider type in build_request_msg()

	added error messages if invalid attributes in logout object while setting building request and message

2004-08-23  Romain Chantereay  <rchantereau@entrouvert.com>

	Serious rewrite of the automake file.
	The php extension is now named lasso.

	The LTLIBRARIES if for 'php_extension' and no more 'lib'.

	The swig command invokation is updated to use the new php extension name.

2004-08-23  Romain Chantereay  <rchantereau@entrouvert.com>

	Completed autoconf files output directive with win32 directories Makefile.

	Rewritent the lasso win32 resource file dependency on the top_srcdir and not relative parent directory.

2004-08-23  Romain Chantereay  <rchantereau@entrouvert.com>

	Cleaned a little the automake files.
	Proper use of $(top_srcdir).

	Proper use of $DEPDIR.

	Added $(top_srcdir)/swig/Lasso.c to java shared object compilation.

2004-08-23  Romain Chantereay  <rchantereau@entrouvert.com>

	Re added win32 directory in the distribution.

2004-08-23  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

	verify if session and identity are set in logout object

2004-08-23  Romain Chantereay  <rchantereau@entrouvert.com>

	Removed php subdirectories Makefile generations.

2004-08-23  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

2004-08-23  Romain Chantereay  <rchantereau@entrouvert.com>

	REmoved now useless binding files.
	See attic for more information.

	Now PHP Binding is handled by SWIG.

2004-08-23  Nicolas Clapies  <nclapies@entrouvert.com>

	updpated process of protocol profile

	added support of URI identifier in signature

2004-08-22  Valery Febvre  <vfebvre at easter-eggs.com>

	Added a new param "use_xsitype" (gboolean) in constructors of classes: 	LassoLibSubject, 	LassoLibAssertion, 	LassoLibAuthenticationStatement

	Added lasso_node_new_ns_prop() method in LassoNode class

2004-08-21  Frederic Peters  <fpeters@entrouvert.com>

	updated debian package description; added packaging of the C# assembly.

	updated debian package description; added packaging of the C# assembly.

	updated example with correct path to certificates

	more C# fun.  dll is now registered with gacutil.  But it needed a StrongName; this is sort of a cryptographic signature for DLL; not clear about this.  The key is in csharp/lasso-sharp.snk

2004-08-21  Emmanuel Raviart  <eraviart@entrouvert.com>

	Bug correction in last PHP changes.

2004-08-21  Frederic Peters  <fpeters@entrouvert.com>

	forgot to distribute lasso.dll.config

	C# example

	some files were renamed

	I don't know the purpose of this file.

	working lasso c# binding.  next step is to figure how mono manages the directories (currently it looks like CLASSPATH mess but gacutil may be useful).

2004-08-21  Emmanuel Raviart  <eraviart@entrouvert.com>

	Updated "Writing a SP" doc & PHP binding to Lasso API change.

2004-08-21  Valery Febvre  <vfebvre at easter-eggs.com>

	Moved param 'http_method' of lasso_login_build_authn_request_msg() method in lasso_login_init_authn_request() BEWARE : this change breaks the API

	Added checks not to do copies of NULL objects.

	Changed LASSO_PARAM_ERROR_INVALID_VALUE error message

	Fixed a mistake: the signature template should be added before the ProviderID

2004-08-21  Frederic Peters  <fpeters@entrouvert.com>

	getting there; it builds and installs correctly but I'm still trying to separate assembly name and file name. (no, I don't know what is an assembly name)

	a few files to ignore

	usable lasso c# bindings; liblassosharpglue.so is installed in libdir and lasso.dll in /usr/share/dotnet/lasso/
	compile with mcs -g -nologo -r:lasso.dll -out:runme.exe runme.cs

2004-08-21  Valery Febvre  <vfebvre at easter-eggs.com>

	Removed lassoLibProtocolProfileSSOGet, lassoLibProtocolProfileSSOPost Added lassoXsiHRef, lassoXsiPrefix

2004-08-21  Frederic Peters  <fpeters@entrouvert.com>

	added c# binding; I'm not sure how all of this works and a little program compiles and run:
	using System;

	public class runme
	{
	    static void Main()
	    {
	        Console.WriteLine("lasso_init");
	        int rc = lassomod.lasso_init();
	        Console.WriteLine(String.Format("sortie de lasso_init: {0}", rc));

	        LassoServer server = new LassoServer(
	                        "../tests/data/idp1-la/metadata.xml",
	                        "",
	                        "../tests/data/idp1-la/private-key-raw.pem",
	                        "../tests/data/idp1-la/certificate.pem",
	                        lassomod.lassoSignatureMethodRsaSha1);


	        Console.WriteLine("lasso_shutdown");
	        lassomod.lasso_shutdown();
	    }
	}

2004-08-21  Frederic Peters  <fpeters@entrouvert.com>

	Fixed lasso_server_new parameter type.
	When you make change in header files (such as [1]) think about the bindings and
	adapt them; thanks.

	[1] http://cvs.labs.libre-entreprise.org/cgi-bin/cvsweb.cgi/lasso/lasso/environs/server.c.diff?r1=1.54;r2=1.55;cvsroot=lasso

2004-08-21  Frederic Peters  <fpeters@entrouvert.com>

	replaced lots of const char* wasting memory and a treat to binary compatibility with lots of #define wasting nothing at all.

	doesn't fail on second run

	I prefer it that way

	reenabled tests since the swig binding is ok now

2004-08-21  Valery Febvre  <vfebvre at easter-eggs.com>

	Fixed a bug in lasso_login_accept_sso() Updated gtk-doc

2004-08-20  Emmanuel Raviart  <eraviart@entrouvert.com>

	Modified PHP bindings in an attempt to add new argument to method lasso_build_authn_request_msg.

	Updated the documentation to reflect API change.

	Added new argument to lasso_login_build_authn_request_msg.

2004-08-20  Valery Febvre  <vfebvre at easter-eggs.com>

	Added a new param 'http_method' in lasso_login_build_authn_request_msg() BEWARE : this change breaks the API

2004-08-20  Romain Chantereay  <rchantereau@entrouvert.com>

	The local clean rule now remove the package sub directory (com).
	The dirty rule now have a little goldy spray that test the existence of the
	com/entrouvert/lasso/lasso.java source file before trying to copy it from the
	distribution.

	Modified PHP extension installation directory, now it is prefixed.

2004-08-20  Romain Chantereay  <rchantereau@entrouvert.com>

	Created unprefixed PHP_UNPREFIXED_EXTENTION_DIR in order to prefix it with the supplied configure prefix. Is it useful in this PHP special case ? I do not think so, but, the user is the master.
	Moved the libtool bad versionning computation after program tests in order to
	use the founded sed program ($SED) and not just 'sed'.

	Every calls to 'sed' use the founded 'sed' ($SED).

2004-08-20  Frederic Peters  <fpeters@entrouvert.com>

	talking about idpProviderID

	file moved

	fixed function name

2004-08-20  Emmanuel Raviart  <eraviart@entrouvert.com>

	In Python high-level binding, constants are now defined using 2 forms: as a global variable and as a dict item. For example: libNameIDPolicyTypeFederated and libNameIDPolicyTypes['federated'].

2004-08-20  Romain Chantereay  <rchantereau@entrouvert.com>

	Use libtool generated la instead of human -llasso and -Ldir...

	Removed an useless inclusion directory.
	Coded mechanisms in order to permit distcheck to work cleanly.
	It is a little dirty, but... Perphas using libtool facilities.

	Removed an useless inclusion directory.

	Now include <lasso/lasso.h> and <lasso/lasso_config.h> instead of <lasso.h> and <lasso_config>h>

2004-08-20  Emmanuel Raviart  <eraviart@entrouvert.com>

	Corrections in Python high-level binding:
	- Added missing self in previous commit.

	- Server default constructor allows again to give no arguments.

2004-08-20  Emmanuel Raviart  <eraviart@entrouvert.com>

	I have always wanted that Python bindings for GTK, libXML, etc, allow the user to override the classes they define. So I did it for Lasso Python high-level bindings.

2004-08-20  Valery Febvre  <vfebvre at easter-eggs.com>

	Update and 2 fixs

2004-08-20  Frederic Peters  <fpeters@entrouvert.com>

	cleaned Makefile.am (I'm curious about the NULL= idiom; where did it come from ?)

2004-08-20  Christophe Nowicki  <cnowicki@easter-eggs.com>

	new setup system

2004-08-20  Valery Febvre  <vfebvre at easter-eggs.com>

	Removed useless files ds_signature.c & ds_signature.h

2004-08-20  Frederic Peters  <fpeters@entrouvert.com>

	removed the remaining ds_signature stuffs

2004-08-20  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added method get_authentication_method to session in high-level Python binding.

2004-08-20  Frederic Peters  <fpeters@entrouvert.com>

	install lasso.py (and cleaned a bit the Makefile.am)

2004-08-20  Emmanuel Raviart  <eraviart@entrouvert.com>

	Removed trash from SWIG binding.

2004-08-20  Frederic Peters  <fpeters@entrouvert.com>

	typo

	errors propagate; fixes follow them.

2004-08-20  Emmanuel Raviart  <eraviart@entrouvert.com>

	Ignore some files in swig.

2004-08-20  Frederic Peters  <fpeters@entrouvert.com>

	Also look for include files in top_src_dir/lasso.  As for the python binding. I actually think this is a bug; why should lasso_wrap.c include lasso.h and not <lasso/lasso.h> ?

	get your act on ds_signature; please.

	include top source dir

	fixed includes

2004-08-20  Emmanuel Raviart  <eraviart@entrouvert.com>

	Removed a "s".

	Updated .cvsignore.

	Removed old Python binding.

	Updated Python high-level binding and tests.
	May all the lights be green!

2004-08-20  Frederic Peters  <fpeters@entrouvert.com>

	ignore build; no longer need to ignore a bunch of other files

	gtkdoc example was misleading; caused confusions between what was generated and what was not, etc.  Improved things a bit.

	cleanup and remove result.xml

2004-08-20  Emmanuel Raviart  <eraviart@entrouvert.com>

	Created a high-level API above SWIG Python API.
	Removed a trailing "s" from an enum.

2004-08-20  Frederic Peters  <fpeters@entrouvert.com>

	fixed python path

2004-08-19  Frederic Peters  <fpeters@entrouvert.com>

	install python in $prefix/lib/python2.3/ instead of $pyprefix/...

	certs are not in builddir; take care of that

	include a bunch of ssl thingies in release (make distcheck goes further)

2004-08-19  Frederic Peters  <fpeters@entrouvert.com>

	Copy the examples but when the examples are wrong you are screwed.
	Too bad.

	Never write to srcdir.

2004-08-19  Emmanuel Raviart  <eraviart@entrouvert.com>

	Commented parts of the SWIG bindings that is not done yet.
	Note: This commit includes a secret gift.

2004-08-19  Frederic Peters  <fpeters@entrouvert.com>

	the quest for a working distcheck; don't be miserable, use make features (directed to me; I never remember $?, $@ and family)

	the quest for a working make distcheck; part 1: srcdir is not always builddir.

	TODO was removed dude

	an empty TODO file was misleading

	removed CVS tag lines that were scattered all around the file (kept as empty comments since they were marks of file change)

	Makefile.am in swig directory so that make clean and make dist works properly

	set docdir as datadir/doc/lasso

2004-08-19  Emmanuel Raviart  <eraviart@entrouvert.com>

	Removed signature functions whose arguments have changed from SWIG binding. They are not for public use anyway.
	Java & Python binding should now compile correctly => 2 green lights.

2004-08-19  Valery Febvre  <vfebvre at easter-eggs.com>

	Fixed a mistake with name identifiers of the assertions

	Removed debug messages

2004-08-19  Emmanuel Raviart  <eraviart@entrouvert.com>

	Deeply reworked SWIG bindings for the Lasso objects we currently use.
	Note: Python high-level bindings are not yet updated to use these SWIG
	      bindings.

2004-08-19  Romain Chantereay  <rchantereau@entrouvert.com>

	Reformated some lines in python Makefile.am
	Added -I.. to java Makefile.am CFLAGS.

	Some modifications.

	The rules generating the C wrapper is defined generating the python wrapper too.

	Use JDK_INCLUDE if jdk is Kaffe's or Sun's.

2004-08-19  Frederic Peters  <fpeters@entrouvert.com>

	disabled tests that do not really need really quick fixing.  (with the hope to get a full green line)

2004-08-19  Christophe Nowicki  <cnowicki@easter-eggs.com>

	Setup PHP Interface in progress ;0)

2004-08-19  Romain Chantereay  <rchantereau@entrouvert.com>

	Completly recoded the java detection and configuration framework.
	Now compile very well with kaffe and GNU Java compiler.

	Should compile without any complain with sun jdk if --with-java-home is used.

2004-08-19  Valery Febvre  <vfebvre at easter-eggs.com>

	Fixed a bug in lasso_node_verify_signature() & lasso_node_verify_x509_signature()

	Replaced a HRef by NULL

	Commented some incorrect lines of code

2004-08-19  Christophe Nowicki  <cnowicki@easter-eggs.com>

	more logical comparaison

	logout

2004-08-19  Valery Febvre  <vfebvre at easter-eggs.com>

	Removed ds_signature.c & ds_signature.h

2004-08-19  Romain Chantereay  <rchantereau@entrouvert.com>

	Java binding is no more activated when:
	- Java compiler is gcj

	- jni.h is not compilable.

2004-08-19  Valery Febvre  <vfebvre at easter-eggs.com>

	Update python binding

2004-08-19  Valery Febvre  <vfebvre at easter-eggs.com>

	Splited lasso_node_verify_signature() (LassoNode class) in 2 methods: 	lasso_node_verify_signature(), 	lasso_node_verify_x509_signature()
	Added 2 private methods in LassoNode:
		add_signature_tmpl(),
		sign_signature_tmpl(),

	Removed 'err' param in all methods for signing

2004-08-19  Valery Febvre  <vfebvre at easter-eggs.com>

	Added 2 methods: 	lasso_samlp_response_abstract_set_signature_tmpl(), 	lasso_samlp_response_abstract_sign_signature_tmpl()
	Removed err param in lasso_samlp_response_abstract_set_signature()

	Added 2 methods: 	lasso_samlp_request_abstract_set_signature_tmpl(), 	lasso_samlp_request_abstract_sign_signature_tmpl()
	Removed err param in lasso_samlp_request_abstract_set_signature()

	Added a '_' character at the begining of all ids generated by lasso_build_unique_id()

	Update codes

	Added a signature template in lasso_request_new()

	Added 2 params in lasso_authn_request_new() sign_type & sign_method are used to build the signature template

	Changed type of signature_method guint -> lassoSignatureMethod

2004-08-19  Nicolas Clapies  <nclapies@entrouvert.com>

	fixed bug in lasso_logout_build_response_msg() : build the response message depending on the HTTP method requester

2004-08-19  Romain Chantereay  <rchantereau@entrouvert.com>

	Added ds_signature in the Makefile sources and headers declarations.

2004-08-19  Christophe Nowicki  <cnowicki@easter-eggs.com>

	PHP Binding : Added lasso_profile_set_session_from_dump Now lasso_cast_to_profile take to different reources Sample SP : Logout in progress

2004-08-19  Romain Chantereay  <rchantereau@entrouvert.com>

	If swig not present: SWIG=echo
	python automake use $SWIG instead of swig.

2004-08-19  Frederic Peters  <fpeters@entrouvert.com>

	removed logout part from C test 2; it would work now. But http://buildbox.entrouvert.org/logs/20040818/lupin.1820.changelog.xml

2004-08-19  Emmanuel Raviart  <eraviart@entrouvert.com>

	Bug correction.

	__str__ should not have arguments.

2004-08-19  Romain Chantereay  <rchantereau@entrouvert.com>

	The old subdirs python Makefile generation is no more needed.

	Include swig Interface file in the source distribution.

	Now python binding is handled by SWIG. Manou takes the following parts.
	All the file in the python directory except Makefile.am are useless now; but I
	do not remove it.

2004-08-18  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	federation termination updates

	little register name identifier udpates

2004-08-18  Romain Chantereay  <rchantereau@entrouvert.com>

	Oups.
	Reverted to 1.7 for lasso-sections.txt
	maintainer-clean do not remove it anymore.

	Java now distributes itself well and compile well too. (SWIG not needed when compiling sources distribution.)

	Added generation and clean of lasso-references.txt

2004-08-18  Valery Febvre  <vfebvre at easter-eggs.com>

	Removed ds_signature.c & ds_signature.h

	Added a '%s' in LASSO_DS_ERROR_SIGNATURE_FAILED message

2004-08-18  Frederic Peters  <fpeters@entrouvert.com>

	warning about the total uselessness of lasso_server_dump

2004-08-18  Christophe Nowicki  <cnowicki@easter-eggs.com>

	Rename install.php to setup.php

2004-08-18  Frederic Peters  <fpeters@entrouvert.com>

	section about lasso_server_dump and lasso_server_new_from_dump

2004-08-18  Christophe Nowicki  <cnowicki@easter-eggs.com>

	Service Provider written in PHP (login is working and logout will work soon ;0)

	Add environ/lasso_logout.c

	Add logout functions : lasso_logout_new, lasso_logout_init_request, lasso_logout_build_request_msg

2004-08-18  Frederic Peters  <fpeters@entrouvert.com>

	properly use libtool convenience libraries (intend is to build correctly on hppa)

2004-08-18  Romain Chantereay  <rchantereau@entrouvert.com>

	Update interface (moved _bla to bla).

2004-08-18  Nicolas Clapies  <nclapies@entrouvert.com>

	udpate of logout and federation profiles

	added private attribute  http_request_method in profile class to know the HTTP method in defederation, name registration, logout and name mapping used by the requester

	renamed federationTerminationReturnServiceURL to federationTerminationServiceReturnURL

2004-08-18  Frederic Peters  <fpeters@entrouvert.com>

	properly don't enable python if it was not detected

2004-08-17  Frederic Peters  <fpeters@entrouvert.com>

	shortened title a bit

	this script checks a documentation file for functions that do not exist

	they may talk about correctness but won't make it

2004-08-17  Romain Chantereay  <rchantereau@entrouvert.com>

	Updated Interfaces. Commented out all .*Class$.

2004-08-17  Frederic Peters  <fpeters@entrouvert.com>

	typo

2004-08-17  Nicolas Clapies  <nclapies@entrouvert.com>

	updated error checkings with ret / goto done method

2004-08-17  Emmanuel Raviart  <eraviart@entrouvert.com>

	I presume that the writer of the documentation "Writing a Liberty Alliance service provider in C" has never coded such a SP in C.

2004-08-17  Christophe Nowicki  <cnowicki@easter-eggs.com>

	rename lasso_login_set_identity_from_dump to lasso_profile_set_identity_from_dump

	fix cvs sticky state problem.

	Added lasso_session_dump

	added lasso_login_set_identity_from_dump

	fix cvs sticky state ;(

2004-08-17  Nicolas Clapies  <nclapies@entrouvert.com>

	added UnsupportedProfile constant

	updated doc in logout, fixed Feature Requests item #253, must be tested, added doc to federation termination notification

	removed unwanted code

	removed unwanted attribute in logout object

2004-08-16  Nicolas Clapies  <nclapies@entrouvert.com>

	added API doc comments

2004-08-16  Christophe Nowicki  <cnowicki@easter-eggs.com>

	Add lasso_profile_get_identity, lasso_profile_is_identity_dirty, lasso_profile_get_session, lasso_profile_is_session_dirty

2004-08-16  Frederic Peters  <fpeters@entrouvert.com>

	where is the name identifier

	detect and use rest2html

	signature

2004-08-16  Christophe Nowicki  <cnowicki@easter-eggs.com>

	Added lasso_login_process_response_msg and fix a minor bug in lib_authn_request (bool)

2004-08-16  Frederic Peters  <fpeters@entrouvert.com>

	last one

	cast Login et Logout to Provider

2004-08-16  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

2004-08-16  Emmanuel Raviart  <eraviart@entrouvert.com>

	Improved session deletion in Python simulator.

	Removed comments.

2004-08-14  Frederic Peters  <fpeters@entrouvert.com>

	format the metadata to avoid an horizontal scrollbar

	lasso_provider_get_assertionConsumerServiceURL now returns a glib-allocated string (instead of libxml2-allocated) since it was already declared to return gchar*.  Moreover it strips the returned string so that is is possible to have some spacings in the metadata file.
	  <AssertionConsumerServiceURL id="AssertionConsumerServiceURL1" isDefault="true">
	    https://service-provider:2003/liberty-alliance/liberty-alliance/assertionConsumer
	  </AssertionConsumerServiceURL>
	won't no more cause a redirect to Location:\n    https://...

	missing parameter

	trying to fix login test 2

	get away from G_LOG_LEVEL_ERROR since they cause abort()

	test for xmlParseMemory success

	// are not in ISO C90

	include <xmlsec/base64.h> since xmlSecBase64Decode is used

	%F is only defined in C99 and %T in the Single Unix Specification; use more conservative "%Y-%m-%dT%H:%M:%SZ"

2004-08-14  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added logout to sample Liberty proxy, but it fails because of Lasso bug #259.

2004-08-13  Frederic Peters  <fpeters@entrouvert.com>

	include xmlsec/base64.h since it uses one of those functions

	declarations first (and s/lenght/length/)

2004-08-13  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added client flag to SSL servers, because each server is also a SOAP client.

2004-08-13  Frederic Peters  <fpeters@entrouvert.com>

	missed an arg

2004-08-13  Emmanuel Raviart  <eraviart@entrouvert.com>

	Removed certificates that are no more used.

	Improved lasso/.cvsignore.

	Updated Python sample sites to use new certificates.

	Added forgotten LECP public keys.

2004-08-13  Valery Febvre  <vfebvre at easter-eggs.com>

	Added error checks and error messages
	Added signature element in lib:AuthnRequest (POST method)
	and in samlp:Request

	lasso_server_add_provider returns now a -202 error when it fails

	*** empty log message ***

	Modified 4 error codes Added one

	Added comments

2004-08-13  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added metadata corresponding to new certificates.
	Updated non regression tests to use these certificates and metadata.

2004-08-12  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added sample X.509 certificates and keys.

2004-08-12  Frederic Peters  <fpeters@entrouvert.com>

	worth a table of contents

2004-08-12  Christophe Nowicki  <cnowicki@easter-eggs.com>

	remove all debug messages.

2004-08-12  Frederic Peters  <fpeters@entrouvert.com>

	workaround xmlsec bug

	links to API; at best.

	shuffling notes

	new section on compilation/linkage; new section on return code checking; fixes to the code samples.

2004-08-12  Christophe Nowicki  <cnowicki@easter-eggs.com>

	fix bool value in lasso_lib_authn_request_set_forceauthn

	fixed wrong args num for lasso_login_init_authn_request

2004-08-12  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added .cvsignore to lassobook.

2004-08-12  Valery Febvre  <vfebvre at easter-eggs.com>

	Added tests for errors reporting and to avoid some malicious segfaults

2004-08-12  Emmanuel Raviart  <eraviart@entrouvert.com>

	Corrected comment.

	Create a new test Proxy server (a server between a SP and an IDP, which acts as an IDP for the SP and as a SP for the IDP): login works.

2004-08-11  Valery Febvre  <vfebvre at easter-eggs.com>

	Fixed a bug in lasso_provider_get_providerID

	Replaced lasso_str_hash by lasso_sha1

	Removed Base64 encoding of result in lasso_build_unique_id() funct

	Renamed 4 error codes and added one

	Added param 'type' in set_debug_info()

	Fixed GError* bugs

	Added tests for errors reporting and to avoid some malicious segfaults

	Fixed a bug with metadata ProviderID attribute is "providerID" instead of "ProviderID"
	Removed param 'err' in lasso_provider_get_providerID

	Added a param 'err' in 2 methods of LassoServer class: 	lasso_server_get_provider, 	lasso_server_get_provider_ref for errors reporting

	Changed return type for 5 methods in LassoNode: 	lasso_node_dump, 	lasso_node_export, 	lasso_node_export_to_base64, 	lasso_node_export_to_query, 	lasso_node_export_to_soap

2004-08-11  Frederic Peters  <fpeters@entrouvert.com>

	style

	more on database section

	style

	section about database

2004-08-11  Emmanuel Raviart  <eraviart@entrouvert.com>

	Better handling and checking of Liberty-Enabled header.

2004-08-11  Frederic Peters  <fpeters@entrouvert.com>

	section about LassoServer

2004-08-11  Emmanuel Raviart  <eraviart@entrouvert.com>

	Removed server public key in tests: it seems that it is no more used.

	In Python simulator, redirect now accepts partial URLs.

	In python/tests, there are now a sample IDP (sample-idp.py) and a sample SP (sample-sp.py). The two applications are real servers.

2004-08-11  Frederic Peters  <fpeters@entrouvert.com>

	more code in the documentation

2004-08-10  Frederic Peters  <fpeters@entrouvert.com>

	fixed a few errors

	warning about *not* taking care of memory management and error checking

	fix

	documentation about writing a service provider in C

2004-08-10  Christophe Nowicki  <cnowicki@easter-eggs.com>

	Added new PHP Unit test for Lasso Login and Lasso Server.

2004-08-10  Romain Chantereay  <rchantereau@entrouvert.com>

	Corrected automake problems.

2004-08-10  Christophe Nowicki  <cnowicki@easter-eggs.com>

	add php unit test support. just run php -f php/run-tests.php

	create php/run-tests.php and export PHP_PATH

2004-08-10  Romain Chantereay  <rchantereau@entrouvert.com>

	Create package directory if not exists.

2004-08-10  Romain Chantereay  <rchantereau@entrouvert.com>

	- Added java binding swig generation.
	- Added Swig Interface file.

	- Added readme for java build dependencies

	- Removed old java/src directory (still present on the CVS and this is
	  important).

2004-08-10  Emmanuel Raviart  <eraviart@entrouvert.com>

	Improved Python unit tests.

2004-08-10  Christophe Nowicki  <cnowicki@easter-eggs.com>

	Removed the param 'remote_providerID' of lasso_login_init_authn_request() method Added a param 'remote_providerID' in lasso_login_build_authn_request_msg() method Fix compilation warnings, avoid multiple definitions and REGISTER_STRING_CONSTANT

2004-08-10  Valery Febvre  <vfebvre at easter-eggs.com>

	Fixed a bug in lasso_login_process_authn_response_msg() method

2004-08-09  Emmanuel Raviart  <eraviart@entrouvert.com>

	Renamed LEC to LECP. It is really a proxy.

	LECP now nearly works. Still a segmentation fault at the end, but Valos is aware of it.

2004-08-09  Valery Febvre  <vfebvre at easter-eggs.com>

	Fixed a BIG bug in lasso_node_add_child() method

	Fixed a bug in lasso_server_dump()

2004-08-09  Emmanuel Raviart  <eraviart@entrouvert.com>

	Updated Python tests. Not finished but Valos want it to debug Lasso.

	Slightly corrected C test.

2004-08-09  Frederic Peters  <fpeters@entrouvert.com>

	new lack of error checking test case; not even the developer fault this time; the program got bad data; lasso segfault.

2004-08-09  Valery Febvre  <vfebvre at easter-eggs.com>

	Small fix

	Fixed a bug in lasso_lecp_build_authn_request_msg()

	Updated server

	Added XML export type in lasso_authn_request_envelope_new_from_export()

	Server objects can now be created without metadata

	Corrected correction

	Update

2004-08-09  Valery Febvre  <vfebvre at easter-eggs.com>

	Removed Base64 encoding in lasso_lecp_build_authn_response_msg() Removed Base64 decoding in lasso_lecp_process_authn_request_envelope_msg()
	Removed the param 'remote_providerID' of lasso_lecp_init_authn_request()
	Added a param 'remote_providerID' in lasso_lecp_build_authn_request_msg()

	Added 3 params in lasso_lecp_build_authn_response_envelope_msg()
	They are necessary to build the Assertion, to process the federation and
	possibly to set the Status.

2004-08-09  Valery Febvre  <vfebvre at easter-eggs.com>

	Removed the param 'remote_providerID' of lasso_login_init_authn_request() method Added a param 'remote_providerID' in lasso_login_build_authn_request_msg() method

	Added 3 missing #include

2004-08-09  Frederic Peters  <fpeters@entrouvert.com>

	the point is to fix lasso not to segfault; not to fix tests to make lasso happy.

2004-08-09  Valery Febvre  <vfebvre at easter-eggs.com>

	'Class methods' Login.new() & Logout.new() should be used instead of Login() & Logout() constructors

	Added doc

2004-08-09  Emmanuel Raviart  <eraviart@entrouvert.com>

	Updated Python unit tests infrastructure, so that it can be reused for independant simulation applications.

	Added module http. It is derived from Expression eponym module, but it is derived from abstractweb and it is designed to be a truly independant module.
	It still need a lot of work, but may be one day, Expression will use it.

	Added module abstractweb. It defines abstract classes for HTTP servers, etc, that are independant of the connection type: They must be overrided for HTTP(S) connection or simulated connections.

	Added module assertions to Python Lasso simulator. This module defines global functions to use for unit tests (instead of methods self.fail...) or for other applications.

	Added module builtins to Python Lasso simulator. builtins will replace environs in Expression one day.

2004-08-08  Valery Febvre  <vfebvre at easter-eggs.com>

	Relpaced the lasso_str_hash() call by lasso_sha1() in the lasso_login_build_artifact_msg() method.
	Fixed bug #245

	In the dump of the identity object, rather than use the "Lasso" word in the name of nodes, the namespace of the root elment is now set to the Lasso namespace (without prefix).

	In the dump of the session object, rather than use the "Lasso" word in the name of nodes, the namespace of the root elment is now set to the Lasso namespace (without prefix).

	In the dump of the server object, rather than use the "Lasso" word in the name of nodes, the namespace of the root elment is now set to the Lasso namespace (without prefix).
	Relpaced the lasso_str_hash() call by lasso_sha1() in the
	lasso_server_get_providerID_from_hash() method.

	Minor fixs

	In the dump of the federation object, rather than use the "Lasso" word in the name of nodes, the namespace of the root elment is now set to the Lasso namespace (without prefix).

	In the dump of the provider object, rather than use the "Lasso" word in the name of nodes, the namespace of the root elment is now set to the Lasso namespace (without prefix).

2004-08-08  Frederic Peters  <fpeters@entrouvert.com>

	missed new files

	missed new files

	debian packaging:  - correct sections  - correct FSF address  - renamed liblasso-dev to liblasso0-dev (and provides: liblasso-dev)  - pointer to /usr/share/common-licenses/GPL

	debian packaging:  - correct sections  - correct FSF address  - renamed liblasso-dev to liblasso0-dev (and provides: liblasso-dev)  - pointer to /usr/share/common-licenses/GPL

	fixed FSF address

2004-08-07  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added LECP support in Python simulator and unit tests. I think I have found several bugs in Lasso LECP implementation.
	My biggest problem is that I didn't find a way for IDP to set
	userAuthenticated, authenticationMethod, reauthenticateOnOrAfter to lecp
	before (or when) building response envelope with
	lecp.build_authn_response_envelope_msg(). Did I overlook something?

2004-08-07  Valery Febvre  <vfebvre at easter-eggs.com>

	 Added lasso_sha1() method (will replace lasso_str_hash)

2004-08-07  Frederic Peters  <fpeters@entrouvert.com>

	new tests; lasso needs some error checking

2004-08-07  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added attributes request, request_type, response, response_type to Lecp in Python binding. Close bug #247.

2004-08-06  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added tests for forceAuthn. Light will still be green.

	Added Python simulation for isPassive and corrected some simulation bugs. Added isPassive tests.

2004-08-06  Valery Febvre  <vfebvre at easter-eggs.com>

	Moved session & identity properties in private section

	Removed debug messages

	Removed an invalid SGML tag

	Update of the Lasso API Reference

2004-08-06  Emmanuel Raviart  <eraviart@entrouvert.com>

	New Python tests.

	Added new Python test. It works, but see bug #245.

	Reversed error sign convention for Python binding.

2004-08-06  Valery Febvre  <vfebvre at easter-eggs.com>

	 Added missing parameter description in 5 methods

2004-08-06  Frederic Peters  <fpeters@entrouvert.com>

	summarized libtool version info comment

2004-08-06  Emmanuel Raviart  <eraviart@entrouvert.com>

	Corrected a bug in test.

2004-08-06  Christophe Nowicki  <cnowicki@easter-eggs.com>

	Fixed #244 : check for libexpat

2004-08-06  Valery Febvre  <vfebvre at easter-eggs.com>

	Fixed a bug in lasso_login_must_authenticate() method

2004-08-06  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added a new test. If Nico & Valos are not quick enough, the light will be red.

	Cleanly separated the new Python Lasso simulator from unit tests.

2004-08-06  Christophe Nowicki  <cnowicki@easter-eggs.com>

	PHP_PREFIX in configure.ac. Add good LDFLAGS and LIBADD to php/Makefile.am Now php load the lasso extension :
	$ php -m  | grep lasso
	lasso

	remove COMPILE_DL_LASSO ... now php can load lasso.so

2004-08-06  Valery Febvre  <vfebvre at easter-eggs.com>

	Renamed all SAMLArt strings by SAMLart

2004-08-06  Romain Chantereay  <rchantereau@entrouvert.com>

	Fixed reference docs make problems:
	- Docs did not compile invoking top level make when enabled in configure.

	- Docs did not compile in references directory with make all.

	- Docs used the old substitution variables.

2004-08-06  Emmanuel Raviart  <eraviart@entrouvert.com>

	An early commit of the new Python test. It is not clean yet, but the light will be green again :-)

	Corrected error in Error.

2004-08-06  Romain Chantereay  <rchantereau@entrouvert.com>

	Sorry.

	Fixed some bad done cut/paste.

	REmoved some useless tests.

2004-08-06  Frederic Peters  <fpeters@entrouvert.com>

	string.h never used; no need to check it

	random long awaited fixes

2004-08-06  Romain Chantereay  <rchantereau@entrouvert.com>

	Added lasso/environs/lecp.h inclusion.

	Added missing dist docs.

2004-08-06  Christophe Nowicki  <cnowicki@easter-eggs.com>

	install module in `php-config --extension-dir` in state of /usr/lib

	add PHP_PREFIX

2004-08-06  Nicolas Clapies  <nclapies@entrouvert.com>

	update of code style

	updated code style

	Renamed load_notification_msg to process_notification msg, renamed process_request to validate_request, added some goto for code error, little update of the code style, updated examples

2004-08-05  Romain Chantereay  <rchantereau@entrouvert.com>

	- Big step toward unified output.
	- Enable for feature.

	- With for path to program (with-python, with-php-config).

2004-08-05  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	lasso_profile_get_identity() & lasso_profile_get_session() return now NULL if the identity/session is empty. lasso_profile_is_identity_dirty() & lasso_profile_is_identity_dirty() return now FALSE if the identity/session is NULL.

	lasso_server_get_providerID_from_hash() method takes now a hash base64 encoded as argument.

	Added automatic detection for the lasso HRef in lasso_node_get_child()

2004-08-05  Nicolas Clapies  <nclapies@entrouvert.com>

	fix in lecp

2004-08-05  Valery Febvre  <vfebvre at easter-eggs.com>

	Replaced a lot of wrong issueInstance words by issueInstant Renamed 3 methods: 	lasso_saml_assertion_set_issueInstant(), 	lasso_samlp_request_abstract_set_issueInstant(), 	lasso_samlp_response_abstract_set_issueInstant()

2004-08-05  Romain Chantereay  <rchantereau@entrouvert.com>

	Corrected error due to focus problem.

	PHP build by default

2004-08-05  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	fixed coding style

2004-08-05  Romain Chantereay  <rchantereau@entrouvert.com>

	Unified configuration report.

	pkg-config => $PKG_CONFIG

	Fix #231

	- Fix #234

2004-08-05  Christophe Nowicki  <cnowicki@easter-eggs.com>

	automake/autoconf support for the php binding

2004-08-05  Romain Chantereay  <rchantereau@entrouvert.com>

	- Added explanations to libtool versionning system. - Added explanations in order to fix a "good" version number in order to produce  a correct libtool version.
	- Fixed #229.
	- Fixed #202.

	Remove command line PACKAGE definition (already done in lasso_config.h).

	Unified configure output. (#229)
	Corrected some errors with AM_CONDITIONAL bad placed calls.

	Use of conditional subdirectories.
	This permit automake to automaticaly define a correct DIST_SUBDIRS.

2004-08-05  Valery Febvre  <vfebvre at easter-eggs.com>

	lasso_identity_get_federation() & lasso_identity_add_federation() methods make now a copy of the federation object.

	update

	Added a new argument 'err' in lasso_artifact_get_* methods for errors reporting.

	update

	Initial commit

	update

2004-08-04  Valery Febvre  <vfebvre at easter-eggs.com>

	update

	update

2004-08-04  Emmanuel Raviart  <eraviart@entrouvert.com>

	Python binding now raises exceptions instead of returning error codes. Close bug #237.

	Slightly improved exception handling in Python.

2004-08-04  Valery Febvre  <vfebvre at easter-eggs.com>

	Renamed lasso_server_get_provider() into lasso_server_get_provider_ref() Added lasso_server_get_provider(), this method returns a provider copy.

2004-08-04  Christophe Nowicki  <cnowicki@easter-eggs.com>

	first php binding import

2004-08-04  Romain Chantereay  <rchantereau@entrouvert.com>

	Added one java automake.

2004-08-04  Romain Chantereay  <rchantereau@entrouvert.com>

	Me 1, Litlle memory stick Windows computer 0.
	First step toward a fully automaked java build.

	java now compile and build the DLL.

2004-08-04  Valery Febvre  <vfebvre at easter-eggs.com>

	Fixed a bug in lasso_artifact_new() and lasso_artifact_get_identityProviderSuccinctID() IdentityProviderSuccinctID data (ProviderID SHA1 hash) is now Base64 encoded.

2004-08-04  Emmanuel Raviart  <eraviart@entrouvert.com>

	Python test02 is now completely refactored. But bigger changes are on the way.

2004-08-04  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	update of lecp python binding

	update of the LECP profile

2004-08-04  Valery Febvre  <vfebvre at easter-eggs.com>

	Moved '#include <lasso/lasso_config.h> into lasso.c Added also in py_lasso.c

	*** empty log message ***

	Added the SOAP HTTP method in lasso_login_init_from_authn_request_msg()

	Added the SOAP export type in lasso_authn_request_new_from_export()

2004-08-04  Emmanuel Raviart  <eraviart@entrouvert.com>

	The Python test refactoring continues and the light is still green.

2004-08-04  Valery Febvre  <vfebvre at easter-eggs.com>

	Fixed 3 bugs in lasso_login_new_from_dump()

2004-08-04  Frederic Peters  <fpeters@entrouvert.com>

	fixed typo; fix bug230

2004-08-04  Emmanuel Raviart  <eraviart@entrouvert.com>

	The Python test reorganization continues. It detects a new login bug, so the light will be red again.

2004-08-04  Nicolas Clapies  <nclapies@entrouvert.com>

	remove warning message before lasso_session_remove_assertion()

2004-08-04  Frederic Peters  <fpeters@entrouvert.com>

	[angry comment removed]

2004-08-04  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	Renamed enums (Bug #225): 	lassoMessageTypes,lassoHttpMethods,lassoRequestTypes into 	lassoMessageType,lassoHttpMethod,lassoRequestType

	Removed the 'identity' arg in lasso_login_new_from_dump() method

2004-08-04  Nicolas Clapies  <nclapies@entrouvert.com>

	add lasso_session_remove_assertion() in validate_request() and process_response_msg()

	set nameIdentifier attribute of the logout object (from LogoutRequest NameIdentifier value) after a call of init_request() method

	move server param in new

	*** empty log message ***

2004-08-04  Emmanuel Raviart  <eraviart@entrouvert.com>

	In Python tests, renamed sp to spServer and idp to idpServer.

	In Python, Server.add_provider now returns an error code instead of None.

	Begin to restructure Python tests.

2004-08-04  Valery Febvre  <vfebvre at easter-eggs.com>

	Renamed enum lassoProviderTypes into lassoProviderType (Bug #225)

	Renamed enum lassoNodeExportTypes into lassoNodeExportType (Bug #225)

	Changed all lasso_provider_get_* methods prototype It was added: 	a 'provider_type' argument to read in the appropriate Descriptor in metadata 	a 'err' argument for reporting errors

2004-08-04  Emmanuel Raviart  <eraviart@entrouvert.com>

	I thought I had discover one new bug in Lasso SP logout. I was wrong... I discovered one bug and a missing feature:
	- first the feature request: Lasso should set logout.nameIdentifier in
	logout.init_request, because there is no way to retrieve the current
	nameIdentifier from identity_dump or session_dump

	- and now the bug: After the IDP soapEndpoint returns a SOAP response, the
	SP process_response_msg doesn't remove the assertion from session (neither
	does it set session.is_dirty flag).

	See the new test05 for details.

2004-08-03  Emmanuel Raviart  <eraviart@entrouvert.com>

	Python tests now work again, but please remove the Lasso-CRITICAL below.
	Generate identity and service provider context dumps ... ok
	Service provider initiated login ... ok
	Identity Provider single sign-on when identity and session already exist. ...
	(process:22065): Lasso-CRITICAL **: 03-08-2004 22:25:48 An assertion existed
	already for this providerID, it was replaced by the new one.

	ok
	Identity Provider logout. ... ok

2004-08-03  Emmanuel Raviart  <eraviart@entrouvert.com>

	Install documentation is running after autoconf changes.

	Lasso now requires automake 1.8

2004-08-03  Romain Chantereay  <rchantereau@entrouvert.com>

	No more anoying warning.

2004-08-03  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

2004-08-03  Romain Chantereay  <rchantereau@entrouvert.com>

	Bye bye AM_CONDITIONAL rests.
	(the if WITH_PYTHON are not accurate now).

2004-08-03  Nicolas Clapies  <nclapies@entrouvert.com>

	initial version

2004-08-03  Romain Chantereay  <rchantereau@entrouvert.com>

	- No more need of version.h. - Better libtool version computation.

	Update to automake 1.8.

	Revert.

	Updated macro calls: from AM_CONFIG_HEADER to AC_CONFIG_HEADERS.

	Corrected SWIG warning. (deleted it.)

	- Added libtool auto versionning (or corrected).

	- Learn back to the previous Python detection.
	- Corrected invalid variable in automake java top dir Makefile.

	Commented out coldfusion/Makefile generation.

2004-08-03  Nicolas Clapies  <nclapies@entrouvert.com>

	replace load_request_msg() with process_request_msg(), process_request() with validate_request(), remove assertion of the authenticated principal in validate_request()

2004-08-03  Romain Chantereay  <rchantereau@entrouvert.com>

	SWIG is NOT required (yet ?) !

2004-08-03  Nicolas Clapies  <nclapies@entrouvert.com>

	add request type test for Lecp

2004-08-03  Romain Chantereay  <rchantereau@entrouvert.com>

	New Autotools infrastructure.
	Don't hesitate to report bug (if any).

	Main changes:

	- No more, or so few AM_CONDITIONAL.

	- Binding compilation use AC_SUBST top level Makefile SUBDIRS.

	- Change order of AM Macro.

	- Added Macro.

	- Fix Windows Compilation.

	- New way to handle version number.

	- Use of lasso_config.h

	- more ? I do not remember.

2004-08-03  Valery Febvre  <vfebvre at easter-eggs.com>

	Fixed a bug in lasso_session_new_from_dump()

	Added some optimizations in lasso_identity_add_federation()

2004-08-03  Emmanuel Raviart  <eraviart@entrouvert.com>

	Bug correction in test04.

	Added forgotten Lasso call in test04.

	Updated Python test04.
	Tell the poor win32 user that he can't test the software

2004-08-03  Nicolas Clapies  <nclapies@entrouvert.com>

	replace G_LOG_LEVEL_ERROR with G_LOG_LEVEL_CRITICAL

2004-08-03  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added a new Python regression test that shows that logout doesn't set session is_dirty flag.

	Don't build win32 anymore. Makefile.am in win32 directory will disapear anyway.

2004-08-03  Valery Febvre  <vfebvre at easter-eggs.com>

	- Replaced some charPtrConst_wrap() calls by charPtr_wrap() - Added GPtrArray_wrap() function to wrap GPtrArray into Python list. - Added session_getattr() function, we can get now providerIDs and is_dirty properties of Session objects.

	Replaced two G_LOG_LEVEL_ERROR by G_LOG_LEVEL_CRITICAL

	Fixed a bug in lasso_identity_new_from_dump()

2004-08-02  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added test03, which shows a bug in Lasso: When identity and session already exist (and must_authenticate() return False), the call to build_artifact_msg generates:
	(process:8083): GLib-GObject-WARNING **: invalid cast from LassoNode' to
	LassoSamlNameIdentifier'

	(process:8083): lasso-CRITICAL **: file authentication_statement.c: line 84
	(lasso_authentication_statement_new): assertion
	LASSO_IS_SAML_NAME_IDENTIFIER(idp_identifier)' failed

	(process:8083): Lasso-CRITICAL **: 02-08-2004 20:33:59  Failed to build the
	AuthenticationStatement element of the Assertion.

	and then access to login.nameIdentifier fails.

2004-08-02  Frederic Peters  <fpeters@entrouvert.com>

	some files to be ignored in debian/

	some files to be ignored in debian/

2004-08-02  Emmanuel Raviart  <eraviart@entrouvert.com>

	Integrated README.WIN32 into Lasso book.
	Removed obsolete Python INSTALL file.

	Check that Lasso is inited and shotdown only once.
	Lasso Python modules now calls init() at first import (I need this
	behaviour, because I have several "import lasso" in Expression and I don't
	know which one will be called first and I don't want to do something like:
	import lasso
	if not lasso.inited:
	  lasso.init()
	).

2004-08-02  Romain Chantereay  <rchantereau@entrouvert.com>

	Added some win32 specific explanations.

2004-08-02  Romain Chantereay  <rchantereau@entrouvert.com>

	New clean and beauty version of the windows resource file.
	use defined constant from lasso_config.h

	more to come.

2004-08-02  Romain Chantereay  <rchantereau@entrouvert.com>

	Modified resource. ()

2004-08-01  Valery Febvre  <vfebvre at easter-eggs.com>

	Added a new argument 'err' (GError *) in 5 methods: 	lasso_ds_signature_sign, 	lasso_node_add_signature, 	lasso_node_verify_signature, 	lasso_saml_assertion_set_signature, 	lasso_samlp_request_abstract_set_signature, 	lasso_samlp_response_abstract_set_signature for reporting always more errors.

2004-07-31  Valery Febvre  <vfebvre at easter-eggs.com>

	Added a new argument 'err' in 4 methods of the LassoNode class: 	lasso_node_get_attr 	lasso_node_get_child 	lasso_node_get_child_content 	lasso_node_get_content for reporting errors.

2004-07-31  Emmanuel Raviart  <eraviart@entrouvert.com>

	Updated Java binding and unit test.

2004-07-31  Valery Febvre  <vfebvre at easter-eggs.com>

	Removed access to attributes identity & session by __getattr__

	Added 2 tests in lasso_federation_copy() to avoid NULL pointer copy

2004-07-31  Emmanuel Raviart  <eraviart@entrouvert.com>

	Python login_tests now works again, although there remains a lasso-CRITICAL caused by idpLoginContext.get_identity() (file login_tests.py, line 120):
	(process:5228): lasso-CRITICAL **: file xml.c: line 64 (lasso_node_copy):
	assertion LASSO_IS_NODE(node)' failed
	ERROR

2004-07-31  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

2004-07-30  Valery Febvre  <vfebvre at easter-eggs.com>

	Fixed 2 errors in lasso_identity_copy() et lasso_session_copy() methods

2004-07-30  Emmanuel Raviart  <eraviart@entrouvert.com>

	Some update to python login_tests. Some bugs remain.

	Removed last profile_context or profileContext.

	Restructured INSTALL a little more.

	Improved book. It also now includes HACKING.

2004-07-30  Valery Febvre  <vfebvre at easter-eggs.com>

	Initial commit

	lasso_profile_get_identity() and lasso_profile_get_session() should return copies

2004-07-30  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

2004-07-30  Valery Febvre  <vfebvre at easter-eggs.com>

	Update end

	Added a missing #include

	Some G_LOG_LEVEL_ERROR -> G_LOG_LEVEL_CRITICAL

	Moved functions (alphabetical order)

	Moved a function (alphabetical order)

	Fixed a typing mistake all durty -> dirty

2004-07-30  Frederic Peters  <fpeters@entrouvert.com>

	I also can describe non-existing features.

2004-07-30  Valery Febvre  <vfebvre at easter-eggs.com>

	Added methods: 	lasso_profile_get_identity() 	lasso_profile_get_session() 	lasso_profile_is_identity_durty() 	lasso_profile_is_session_durty()

2004-07-30  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added some important configure options in INSTALL.

2004-07-30  Nicolas Clapies  <nclapies@entrouvert.com>

	lecp in environs is complete

2004-07-30  Valery Febvre  <vfebvre at easter-eggs.com>

	Added new attribute is_durty in LassoIdentity & LassoSession classes

2004-07-30  Emmanuel Raviart  <eraviart@entrouvert.com>

	Improved AUTHORS restructuration.

	Restructured AUTHORS & README and integrated them in Lasso Book.

2004-07-30  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	Update

2004-07-30  Nicolas Clapies  <nclapies@entrouvert.com>

	update of examples to user identity and session objects

2004-07-30  Valery Febvre  <vfebvre at easter-eggs.com>

	update

2004-07-30  Emmanuel Raviart  <eraviart@entrouvert.com>

	Improved? ReST section titles.

2004-07-30  Valery Febvre  <vfebvre at easter-eggs.com>

	Renamed ProfileContext into Profile

	Initial commit

2004-07-30  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added very preliminary work on Lasso Book.
	Modified INSTALL to be compatible with reStructured Text syntax. Is this
	solution an acceptable solution?

	Added Lasso logo.

2004-07-30  Valery Febvre  <vfebvre at easter-eggs.com>

	Update begining

	LassoProfileContext class was renamed into LassoProfile

	LassoIdentity was renamed into LassoFederation

	LassoUser class was splited into 2 new classes (LassoSession & LassoIdentity)

	Update LassoUser class was splited into 2 classes: LassoSession & LassoIdentity LassoIdentity was renamed into LassoFederation

2004-07-29  Valery Febvre  <vfebvre at easter-eggs.com>

	Renamed LassoIdentity class into LassoFederation and LassoUser class into LassoIdentity lasso/protocols/federation.c replace lasso/protocols/identity.c lasso/environs/identity.c replace lasso/environs/user.c

2004-07-29  Frederic Peters  <fpeters@entrouvert.com>

	never thought about application developers; not a target ?  added missing gobject-2.0 to list of requirements.  (first to feel the pain of *using* lasso) [I wonder how it went on wednesday tutorial; didn't use autotools ?]

	lasso.pc don't set minimal version for other libraries

2004-07-29  Nicolas Clapies  <nclapies@entrouvert.com>

	update of registration example in C

	*** empty log message ***

	update of register name identifier

2004-07-29  Valery Febvre  <vfebvre at easter-eggs.com>

	Added session class

2004-07-29  Frederic Peters  <fpeters@entrouvert.com>

	added stupid tests to annoy developers.

	had detection of a patched (with XML support) check; only use srunner_set_xml if it is available.

2004-07-29  Valery Febvre  <vfebvre at easter-eggs.com>

	Removed memory leaks

	Inverted only 2 lines :-)

2004-07-28  Valery Febvre  <vfebvre at easter-eggs.com>

	Just a typing mistake

	*** empty log message ***

	server attribute is now a copy in lasso_logout_new()

	Atrributes server & user are now copied in lasso_login_new() and lasso_login_new_from_dump() methods

	Added destroy calls for server & user attributes in lasso_profile_context_dispose() private method.

	Added lasso_user_copy() method Added lasso_user_dispose() private method

	Added lasso_server_copy() method

	Added lasso_identity_copy() method

	*** empty log message ***

2004-07-28  Frederic Peters  <fpeters@entrouvert.com>

	updated .cvsignore (binary is now tests and out.xml has been renamed to result.xml)

	modularized tests; it is now possible to add more suites easily.

2004-07-28  Valery Febvre  <vfebvre at easter-eggs.com>

	Added lasso_provider_copy() method

	lasso_node_get_name now returns now an xmlChar* (instead of a const xmlChar*)

2004-07-28  Frederic Peters  <fpeters@entrouvert.com>

	remove generated lasso.pc on make clean

2004-07-27  Nicolas Clapies  <nclapies@entrouvert.com>

	debug messages

	*** empty log message ***

	update of federation termination

2004-07-27  Frederic Peters  <fpeters@entrouvert.com>

	debian/ updated for official 0.3 release

	debian/ updated for official 0.3 release

2004-07-27  Nicolas Clapies  <nclapies@entrouvert.com>

	version 0.3.0

	remove useless debug message

2004-07-27  Frederic Peters  <fpeters@entrouvert.com>

	fixed warnings

2004-07-27  Nicolas Clapies  <nclapies@entrouvert.com>

	Move first_* to initial_* vars

	Use LassoNode_get instead of LassoAssertion_get in user_add_assertion()

2004-07-27  Valery Febvre  <vfebvre at easter-eggs.com>

	'assertion' var should be a PyObject*, not a LassoNode* (in user_add_assertion)

	Ooops, Copy/Paste isn't always your friend :-)

	*** empty log message ***

	Removed 2 useless lasso_node_copy

2004-07-27  Nicolas Clapies  <nclapies@entrouvert.com>

	remove the second param of lasso.Login.new

	fix a bug in python binding user_add_assertion : give obj of python assertion, add a copy of assertion in lasso_add_assertion ( not sure, but assertion should be copied )

2004-07-27  Emmanuel Raviart  <eraviart@entrouvert.com>

	Removed obsolete logout method load_from_dump.
	Upgraded some residual calls to login_new & logout_new.

	Updated Java binding.

	Java unit test works (and C too, but Python still doesn't).

2004-07-26  Frederic Peters  <fpeters@entrouvert.com>

	output tags when error occurs (not just success or failures)

2004-07-26  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	*** empty log message ***

	Added new ProfileContext class

2004-07-26  Nicolas Clapies  <nclapies@entrouvert.com>

	remove logout-from-idp.py, only logout.py is useful

2004-07-26  Romain Chantereay  <rchantereau@entrouvert.com>

	Removed from the dist the two removed files.

2004-07-26  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	Added lasso_profile_context_set_user_from_dump method

	Removed arg user in lasso_login_new

2004-07-26  Romain Chantereay  <rchantereau@entrouvert.com>

	- Removed old style DLL exports definitions.
	- Moved old to new way windows dll creation command.

	Added special Windows AC substitution.

2004-07-26  Nicolas Clapies  <nclapies@entrouvert.com>

	update of example

	acces to RelayState in logout object

2004-07-26  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

2004-07-26  Romain Chantereay  <rchantereau@entrouvert.com>

	use the macro to get logout data.

2004-07-26  Valery Febvre  <vfebvre at easter-eggs.com>

	Removed 4 useless #define constants

	Added consent attribute check in lasso_login_process_federation() function

2004-07-26  Frederic Peters  <fpeters@entrouvert.com>

	set a few variables to NULL after they'be freed; and don't free providerID in lasso_user_get_authentication_method if it was passed by the caller.

2004-07-26  Valery Febvre  <vfebvre at easter-eggs.com>

	Finished to implement lasso_login_destroy() and lasso_logout_destroy() methods

	Removed nameIdentifier attribute in Logout object There is already a nameIdientifier attribute in ProfileContext class

2004-07-26  Frederic Peters  <fpeters@entrouvert.com>

	added an XXX and a comment where I think the problem is.  Developers; please have a look.

	--dontfork mode for the tests (so it is easier to debug segfaults)

2004-07-26  Frederic Peters  <fpeters@entrouvert.com>

	end of test port to C; developers, please test it (or the python login_tests; results should be identical).  There is a problem in memory management and *sometimes* it works.
	*Sometimes* it doesn't:

	(process:12643): lasso-CRITICAL **: file xml.c: line 64 (lasso_node_copy):
	assertion `LASSO_IS_NODE(node)' failed

	(process:12643): lasso-CRITICAL **: file xml.c: line 1024
	(lasso_node_impl_add_child): assertion `LASSO_IS_NODE(child)' failed

	And *sometimes* it is even worse (segfault):

	Running suite(s): Login
	50%: Checks: 2, Failures: 0, Errors: 1
	login_tests.c:81:P:Generate Server Contexts:test01_generateServersContextDumps:Passed
	login_tests.c:229:E:Login initiated by service
	provider:test02_serviceProviderLogin: (after this point) Received signal 11


	I believe this is caused by something in
	  http://buildbox.entrouvert.org/logs/20040726/lupin.0320.changelog.xml

2004-07-26  Frederic Peters  <fpeters@entrouvert.com>

	this is a debug message; please.

	require check 0.9.0

	further in the unit test; pain pain pain.

	started to copy Python second test (serviceProviderLogin) in C.  1 hour and 38 lines so far and I should probably move to something or I'll get angry.

2004-07-26  Valery Febvre  <vfebvre at easter-eggs.com>

	Removed many memory leaks

	Removed many memory leaks

	Finished to implement lasso_user_destroy() method Removed many memory leaks

2004-07-25  Frederic Peters  <fpeters@entrouvert.com>

	sync namespace with check unittest namespace (I didn't feel like they would keep a 0d.be namespace...)

	check 0.9 no longer has suite_free().  And our local version got srunner_set_xml()

2004-07-25  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added a ColdFusion redirect to IDP single sign-on URL.

	Added Makefile for ColdFusion "binding".

	Added ColdFusion very preliminary "binding" using Java binding.

2004-07-25  Emmanuel Raviart  <eraviart@entrouvert.com>

	Java unit test is again similar to Python.
	Corrected Java binding to pass the unit test both with Kaffe and Sun JRE.

	Added a small new test in Python unit test.

2004-07-25  Frederic Peters  <fpeters@entrouvert.com>

	add title and time for test suites (in xml output)

	moved as debug() two messages (those were interfering with the test suite)

	use message functions to show message (fix #217)

	basic XmlTestRunner; ./tests.py --xml; output to stdout (messed up with lasso spouting messages on stdout; will be fixed on lasso side)

	s/&/and/

2004-07-25  Valery Febvre  <vfebvre at easter-eggs.com>

	Added lasso_provider_destroy() method

	Finished to implement lasso_server_destroy() method

	Replaced 2 debug(ERROR, ...) by new message(G_LOG_LEVEL_ERROR, ...) function BEWARE: debug() should be used only for debugging messages.

	Oops, forget in previous commit

2004-07-25  Emmanuel Raviart  <eraviart@entrouvert.com>

	Adapted logout unit test to new API.

	Added missing return statement.

2004-07-25  Valery Febvre  <vfebvre at easter-eggs.com>

	Many little fixs

	Moved nameIdentifer attribute of Login object in ProfileContext

2004-07-25  Frederic Peters  <fpeters@entrouvert.com>

	fixed tabulations in python files (oh the horror; they were mixed with space indendations).  Also installed a test on commits to catch this (and check xml files)

	fixed args order (but not enough to get the test to pass)

	login_tests.py can be executed without tests.py

	nozero exit code if a test failed

	modified sys.path so that python test suite can run before lasso is installed.

	initialze codeError

2004-07-25  Nicolas Clapies  <nclapies@entrouvert.com>

	fix the problem of setting the user environ in SOAP method :
	the problem : process_request_msg needs usr environ to verify federation
	              and authentication.

	a solution :
	first load the request msg
	get the name identifier of the request
	find the user dump from the name identifier and load it in logout object
	process the request

	see python/examples/logout.py for the methods.

2004-07-25  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	udpate of C lecp, add python lecp

2004-07-24  Romain Chantereay  <rchantereau@entrouvert.com>

	Update windows exports.

2004-07-24  Frederic Peters  <fpeters@entrouvert.com>

	do not build tests in the debian package

	do not build tests in the debian package

	.cvsignore for tests/ directory

	using check <http://check.sourceforge.net/> for the test suite (--enable-tests=no if you don't want them)

2004-07-24  Emmanuel Raviart  <eraviart@entrouvert.com>

	This is not a C unit test, but it can miracolously become one.

2004-07-24  Valery Febvre  <vfebvre at easter-eggs.com>

	Added 2 missing #include (for xmlsec)

	Added a summary. It's just a test. I'm not sure it's can be useful.

	Moved some #include

2004-07-24  Frederic Peters  <fpeters@entrouvert.com>

	added debian packaging files (NOT included in .tar.gz produced by make dist; this is normal)

	added debian packaging files (NOT included in .tar.gz produced by make dist; this is normal)

2004-07-24  Emmanuel Raviart  <eraviart@entrouvert.com>

	Updated unit tests to show logout bug.

2004-07-24  Frederic Peters  <fpeters@entrouvert.com>

	compile java binding intree (doesn't try to link to a system liblasso)

	removed Question (shouldn't have been commited)

	Moved copyright statements to the README file (no sense to have them in the AUTHORS file).  Point *kindly* to the mailing list and request tracker. Unified titles style.

2004-07-24  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added myself as project master.
	Small corrections.

2004-07-24  Valery Febvre  <vfebvre at easter-eggs.com>

	Replaced old debug() calls by the 2 new functions debug() and message()

	Added a missing utf8

	*** empty log message ***

	Added a note about bug reports, help and feature requests

2004-07-23  Frederic Peters  <fpeters@entrouvert.com>

	improved doap file

	utf8 for AUTHORS

	MANIFEST.in was used by distutils; removed

	added --enable-python option to ./configure; default is yes. --enable-python=no to not compile python bindings.

2004-07-23  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added DOAP file (see http://usefulinc.com/doap).
	Slight corrections to README.

2004-07-23  Frederic Peters  <fpeters@entrouvert.com>

	running autoheader

	moved win32 Makefile targets to win32/Makefile.am

	use pkg-config unless on windows; not the contrary

2004-07-23  Romain Chantereay  <rchantereau@entrouvert.com>

	Added some windows specifics considerations. Cleaned the Hard, badly, sadly, dirty constant definitions. These definitions are kept dirt, but a little less.

2004-07-23  Valery Febvre  <vfebvre at easter-eggs.com>

	New log/debug system It uses g_log() function now (from glib) debug macro has been split into 2 macros: 	debug(format, args) : for debug message only, activated if LASSO_DEBUG flag is defined 	message(level, format, args) : level is a GLogLevelFlags (enum)

2004-07-23  Romain Chantereay  <rchantereau@entrouvert.com>

	Migrated windows.h inclusion from lasso.c to lasso.h.

	Definition file was to early in the future.

	En croisant les doigts pour les ^M ne viennent pas tout pourrir...
	Cleaned DLL process creation. Now we have a import library.
	The libs are created in the win32/.libs directory.
	The linkage is done using import libs and no more directly the DLL.
	The import library is named liblasso.a and no more liblasso.dll.a

2004-07-23  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added Java LassoUser.getAuthenticationMethod
	Python method User.get_authentication_method argument is now optional.

	Use of this method in non-regression tests.

2004-07-23  Valery Febvre  <vfebvre at easter-eggs.com>

	Added lasso_user_get_authentication_method() Done in Python too.

2004-07-23  Nicolas Clapies  <nclapies@entrouvert.com>

	fix bug in init of logout from request at idp

2004-07-23  Emmanuel Raviart  <eraviart@entrouvert.com>

	Inverted assertion operands, so that error messages be more logical.

	First non regression test that supports full logout procedure... and shows a bug.

	Removed directory we should not be in CVS.

2004-07-23  Nicolas Clapies  <nclapies@entrouvert.com>

	fix : process of a logout request at idp

	*** empty log message ***

	*** empty log message ***

	update of logout with better support of propagation from idp

	remove unwanted debug message

2004-07-23  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	*** empty log message ***

	Added a third arg (GError **err) in lasso_node_get_attr_value() method  to report errors

	- Added a third arg (GError **err) in lasso_node_get_attr_value()   method  to report errors - Replaced some lasso_provider_get_providerID() by direct access   to ProviderID attribute of server objects

2004-07-23  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added (incomplete) logout tests for Python & Java.

	Removed file that shouldn't be in CVS.

	Added authors (please correct if I made mistakes).

2004-07-23  Frederic Peters  <fpeters@entrouvert.com>

	emptyed outdated TODO

	useful and interesting README file

	added docs/tutorial/ to directories handled by automake

	install python module in site-packages/

	forgot Makefile.am in nsis/ directory

2004-07-22  Frederic Peters  <fpeters@entrouvert.com>

	cleaned up configure.in

	PKG_CHECK_MODULES detects missing pkg-config

	build was used by distutils; no longer used.  (but automake creates .deps)

2004-07-22  Emmanuel Raviart  <eraviart@entrouvert.com>

	Corrected Java non-regression test bug (found with Sun non free jdk :-/ ).
	Improved some .cvsignore.

2004-07-22  Frederic Peters  <fpeters@entrouvert.com>

	setup.py has been removed

	added win32

2004-07-22  Emmanuel Raviart  <eraviart@entrouvert.com>

	Nearly completed Python & Java first non-regression test for login. But Java test doesn't work: java.lang.UnsatisfiedLinkError: libjlasso: not found Adding its directory to LD_LIBRARY_PATH may help.    at LoginTest.main (LoginTest.java:165) And I don't understand why.
	Please professor, help me!

2004-07-22  Frederic Peters  <fpeters@entrouvert.com>

	include win32/ in make dist

	ignore Makefile.in, Makefile, .deps and .libs under python/

	libtool line for win32; copied from libxml2

	usage of pkg-config to get library information in configure; automake for the python module;

2004-07-22  Nicolas Clapies  <nclapies@entrouvert.com>

	add lecp in environs

2004-07-22  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added Java Lasso method getRequestTypeFromSoapMsg.

2004-07-22  Valery Febvre  <vfebvre at easter-eggs.com>

	Added errors.c & errors.h

	*** empty log message ***

	Initial commit

	*** empty log message ***

	Fixed some compilation warnings Added some controls on HTTP methods

2004-07-22  Nicolas Clapies  <nclapies@entrouvert.com>

	add level 2 of LECP

2004-07-22  Valery Febvre  <vfebvre at easter-eggs.com>

	Moved LassoProviderTypes enums from profile_context.h to provider.h

	Fixed some compliation warnings

	Initialized some local variables to NULL to avoid compilation warnings

2004-07-22  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	xml low level implementation of LECP

2004-07-22  Frederic Peters  <fpeters@entrouvert.com>

	unused variables

2004-07-22  Emmanuel Raviart  <eraviart@entrouvert.com>

	A little more java binding and non-regression tests.

2004-07-22  Frederic Peters  <fpeters@entrouvert.com>

	fixed compilation warnings

	unused variables

	declare used function

	unused variable

	unused variables

	unused variable `consent'

	missing includes

2004-07-22  Nicolas Clapies  <nclapies@entrouvert.com>

	update of logout example with test of the request soap

2004-07-22  Frederic Peters  <fpeters@entrouvert.com>

	missing #include and case (marked with XXX; should it be written?)

	missing #include

	missing #include (I did my tests with -Werror but -Wall was not activated)

2004-07-22  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

2004-07-22  Frederic Peters  <fpeters@entrouvert.com>

	xmlSecBase64Encode is used so xmlsec/base64.h must be included

2004-07-22  Nicolas Clapies  <nclapies@entrouvert.com>

	profile context with function to parse a soap request

2004-07-22  Emmanuel Raviart  <eraviart@entrouvert.com>

	Java & Python tests do not regress. They even progress.

	Added Nicolas to authors.

	Corrected Lasso URL.

	Corrected Lasso URL.
	Some progress in Python non regression test.

	Corrected Lasso URL for java binding.

	Some progress in first non regression test.

2004-07-22  Valery Febvre  <vfebvre at easter-eggs.com>

	Update

	*** empty log message ***

	Added "ProviderID" attribut in server object A memory leak was removed in lasso_server_new

	Added method set_consent in LibAuthnRequest class

	*** empty log message ***

2004-07-21  Frederic Peters  <fpeters@entrouvert.com>

	better way

	compilation warnings; in a better way

	fixed compilation warning

	compilation without warning

	compilation without warnings

	compilation without warning

	ciompilation without warning

	compilation without warnings

	removed compilation warnings; fixed a few places where memory was allocated with GLib (g_malloc) and freed with libxml2 (xmlFree).

	C (before C99) didn't allow // as comments; trying to be kind

	fixed lasso site url

2004-07-21  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

2004-07-21  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added gcj support.

2004-07-21  Emmanuel Raviart  <eraviart@entrouvert.com>

	Changed Makefile for Kaffe support.
	Added new class LassoObject.

	First non regression test.

2004-07-21  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	update of federation termination notification

2004-07-21  Valery Febvre  <vfebvre at easter-eggs.com>

	Update

2004-07-21  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	add list of identity provider id in user environ

	allow no param in init_request for class Logout

2004-07-21  Valery Febvre  <vfebvre at easter-eggs.com>

	lasso_node_add_signature() method returns now an integer

	lasso_saml_assertion_set_signature() method returns now an integer

	lasso_ds_signature_sign() method returns now an integer

	*** empty log message ***

	Added error codes in lasso_login_add_response_assertion

2004-07-20  Valery Febvre  <vfebvre at easter-eggs.com>

	Added method lasso_user_remove_identity

	*** empty log message ***

	Removed 2 compilation warnings

	Added method lasso_identity_destroy()

	Added method lasso_node_import_from_node()

	fct lasso_login_create_user: Created a new identity with the 2 nameIdentifiers found in response assertion this identity is added in user attribute

2004-07-20  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	update internal code to use new_from_export style

2004-07-20  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added Java binding.

2004-07-20  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

2004-07-20  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added Python first unit test.
	Added keys, certificates and metadata, that will be used by regression tests
	and samples.

2004-07-20  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	update debug infos

	*** empty log message ***

	initial version of register name identifier

	update destroy method

2004-07-20  Frederic Peters  <fpeters@entrouvert.com>

	files to be included in python tarball

2004-07-20  Valery Febvre  <vfebvre at easter-eggs.com>

	Little fix in lasso_node_impl_export_to_soap()

2004-07-19  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	Fixed a little mistake

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

2004-07-19  Romain Chantereay  <rchantereau@entrouvert.com>

	Modified lasso DLL ressource version number.

	Added deps & lite distributions. Modified lass-full distribution version number.

2004-07-19  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

	Added assertions in user object in lasso_login_add_response_assertion() and lasso_login_process_response_msg()

	Removed some debug messages

	Fixed memory leaks

2004-07-19  Romain Chantereay  <rchantereau@entrouvert.com>

	- Added NSIS installation script.

	Removed --prefix option from xxx-config helpers.

	- Better Win32 stuff organization. - Added NSIS special directory. - Added icon file to this directory.

2004-07-19  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

2004-07-19  Romain Chantereay  <rchantereau@entrouvert.com>

	Additional test for disabling openssl detection under Windows/Cygwin environment.

2004-07-19  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	add a debug message when dumping assertions of user

	add a INFO debug message for get provider

	update federation termination

	add get_attr support

2004-07-19  Valery Febvre  <vfebvre at easter-eggs.com>

	Added some debug messages Removed msg_relayState in dump (must be on LassoProfileContext) Finished lasso_login_process_request_msg() lasso_login_new_from_dump() is now almost complete.

	New export type supported (Xml) in _new_from_export() constructor

	Added new lasso_request_new_from_export() constructor

	Added response_type & provider_type in login_getattr

	*** empty log message ***

	New export type supported (Xml) in lasso_response_new_from_export

2004-07-19  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	*** empty log message ***

2004-07-19  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

2004-07-18  Valery Febvre  <vfebvre at easter-eggs.com>

	Added 4 missing attributes in LassoProfileContext dump msg_relayState, request_type, response_type, provider_type

	Update

	Fixed a typing error: LASSP_... -> LASSO_...

	Initial commit

	Added a check for xmlsec1 OpenSSL crypto library

2004-07-17  Frederic Peters  <fpeters@entrouvert.com>

	.tar.gz must include lasso.pc.in

2004-07-16  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	*** empty log message ***

2004-07-16  Romain Chantereay  <rchantereau@entrouvert.com>

	Another try to dllwrap.

2004-07-16  Valery Febvre  <vfebvre at easter-eggs.com>

	Added somes g_free() and lasso_node_destroy() to fixe memory leaks

	Code cleanup Fixed some memory leak Added more debug messages

	lasso_node_copy() method uses now the G_OBJECT_TYPE macro to build a new object with the same type as the object copied

	Removed 2 lasso_node_copy() in lasso_identity_set_local_nameIdentifier() and lasso_identity_set_remote_nameIdentifier()

2004-07-16  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	*** empty log message ***

2004-07-16  Romain Chantereay  <rchantereau@entrouvert.com>

	Added variables exports information.

2004-07-16  Romain Chantereay  <rchantereau@entrouvert.com>

	Added Cygwin/Windows compilation support.
	Now: just:

	./autogen --hots=i686-pc-mingw32
	make
	make dll
	make install dll

	Of course you will need to install the dependencies libraries in /usr/local in
	order to compile.

	And next the DLL in Windows %SYSTEM% directory.

2004-07-16  Frederic Peters  <fpeters@entrouvert.com>

	removed rules that made "make dist" fails.

2004-07-16  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

2004-07-16  Valery Febvre  <vfebvre at easter-eggs.com>

	Added date + time in debug messages

2004-07-15  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	Update

	Added method create_user in Login class + Update

	Removed attribute remote_ProviderID of lasso_login_init_request() method Added new method lasso_login_create_user()

2004-07-15  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

2004-07-15  Valery Febvre  <vfebvre at easter-eggs.com>

	Changed some debug levels

2004-07-15  Valery Febvre  <vfebvre at easter-eggs.com>

	Removed attribute 'msg_relayState' in LassoLogin (moved in LassoProfileContext)
	lasso_login_process_response_status_and_assertion() static function was rewritten
	more error codes and debug messages

	Added a new static function : lasso_login_get_assertion_nameIdentifier()

2004-07-15  Valery Febvre  <vfebvre at easter-eggs.com>

	Added attribute 'msg_relayState' in LassoProfileContext (previously set in LassoLogin)

2004-07-15  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

2004-07-15  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	7 #define moved from .c to .h

2004-07-15  Frederic Peters  <fpeters@entrouvert.com>

	please don't use // for comments, this is QA speaking :)

2004-07-15  Valery Febvre  <vfebvre at easter-eggs.com>

	3 #define moved from .h to .c

	6 #define moved from .h to .c

2004-07-15  Frederic Peters  <fpeters@entrouvert.com>

	replaced C++ // comments with C /* */ comments before we fall on a pre-C99 compiler.

2004-07-15  Valery Febvre  <vfebvre at easter-eggs.com>

	4 # define moved from .h to .c

	5 #define moved from .h to .c

2004-07-15  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added init & shutdown functions to tutorial.

2004-07-14  Valery Febvre  <vfebvre at easter-eggs.com>

	Nothing, code cleanup only

	New debug system with 4 levels (4 colors): 	DEBUG   : yellow 	INFO    : green 	WARNING : blue 	ERROR   : red if Cflag -DLASSO_DEBUG is defined, DEBUG level message are ignored.

	Added get for nameIdentifier & msg_relayState attributes (in login_getattr function)

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

2004-07-14  Nicolas Clapies  <nclapies@entrouvert.com>

	add class User, update class Logout, update example logout.py

2004-07-13  Emmanuel Raviart  <eraviart@entrouvert.com>

	The API is globally frozen, but locally melting.

	Added response_dump attribute.

2004-07-13  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

2004-07-13  Nicolas Clapies  <nclapies@entrouvert.com>

	add signature support for soap method

2004-07-13  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added missing s.

	Use constant instead of integer.

2004-07-13  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

2004-07-13  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

2004-07-13  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	*** empty log message ***

2004-07-13  Emmanuel Raviart  <eraviart@entrouvert.com>

	Profile instead of porfile.

2004-07-13  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

2004-07-13  Emmanuel Raviart  <eraviart@entrouvert.com>

	Yet another very important correction.

	Corrected typo.

	Document a trap in which I was caught.

	Use RSA keys instead of DSA.

	Corrected constant name.

2004-07-13  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

2004-07-13  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	*** empty log message ***

2004-07-13  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

2004-07-13  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

2004-07-13  Emmanuel Raviart  <eraviart@entrouvert.com>

	Renamed attribut to attribute.

2004-07-13  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

2004-07-13  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

2004-07-13  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

2004-07-12  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	lasso/environs/federation_termination.c

	*** empty log message ***

2004-07-12  Emmanuel Raviart  <eraviart@entrouvert.com>

	Corrected SP init for C & Python.

2004-07-12  Nicolas Clapies  <nclapies@entrouvert.com>

	fix: dump of user environ

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

2004-07-12  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

2004-07-12  Nicolas Clapies  <nclapies@entrouvert.com>

	fix code in new logout

2004-07-12  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	*** empty log message ***

2004-07-12  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

2004-07-12  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

2004-07-12  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	fix : change the return type in g_return_val_if_fail

	fix : replace xmlChar with gchar type in method prototypes

	fix : replace xmlChar with gchar type

	register name identifier profile

2004-07-12  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	*** empty log message ***

2004-07-12  Nicolas Clapies  <nclapies@entrouvert.com>

	federation termination environ

2004-07-11  Nicolas Clapies  <nclapies@entrouvert.com>

	fix setting of status code value

	*** empty log message ***

	fix

	fix for logout request export to query

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

	fix bugs in new_from_dump

2004-07-11  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

2004-07-10  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	*** empty log message ***

2004-07-09  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

2004-07-09  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	*** empty log message ***

	add python class Logout

2004-07-09  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

2004-07-09  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	add entry for logout binding

	add entry for logou binding

2004-07-09  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

2004-07-09  Nicolas Clapies  <nclapies@entrouvert.com>

	update of user dump methods

	initial version : binding for logout

	*** empty log message ***

2004-07-09  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	Initial commit

2004-07-08  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

2004-07-08  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

2004-07-08  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

2004-07-08  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	logout support in makefile.am

	*** empty log message ***

2004-07-08  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	*** empty log message ***

2004-07-07  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	Added initial debug message system

2004-07-07  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

2004-07-07  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	*** empty log message ***

2004-07-06  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

	add type provider enum

2004-07-06  Emmanuel Raviart  <eraviart@entrouvert.com>

	Added Python files explaining how to create a SP using Lasso.

2004-07-06  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

2004-07-03  Valery Febvre  <vfebvre at easter-eggs.com>

	2 new constructors were added

	*** empty log message ***

2004-07-02  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

2004-07-02  Nicolas Clapies  <nclapies@entrouvert.com>

	*** empty log message ***

2004-07-02  Valery Febvre  <vfebvre at easter-eggs.com>

	Added new class Artifact

	Fixed 2 bugs in lasso_node_impl_add_child() and lasso_node_impl_add_child() methods

	Added functions lasso_build_random_sequence() and lasso_str_hash()

2004-07-01  Nicolas Clapies  <nclapies@entrouvert.com>

	add support for artifacts, assertions and identities

2004-07-01  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

2004-06-30  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	*** empty log message ***

2004-06-29  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

2004-06-25  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	Initial commit

	*** empty log message ***

2004-06-25  Nicolas Clapies  <nclapies@entrouvert.com>

	initial version

	add acces methods to metadata logout properties

2004-06-24  Valery Febvre  <vfebvre at easter-eggs.com>

	Initial commit

	*** empty log message ***

	*** empty log message ***

	Initial commit

	*** empty log message ***

2004-06-23  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	Initial commit

2004-06-23  Nicolas Clapies  <nclapies@entrouvert.com>

	update for session environ in process of authentication, user environ for identity list

2004-06-22  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

2004-06-22  Nicolas Clapies  <nclapies@entrouvert.com>

	update

	a lot of update

2004-06-15  Nicolas Clapies  <nclapies@entrouvert.com>

	add code to build provider from filename and method to acces value of metadata

	add provider, server_environ, session_environ, identity, user_environ, remove authn_environ.c/.h

	initial version

	add lasso name space

2004-06-11  Nicolas Clapies  <nclapies@entrouvert.com>

	update type of isPassive and forceAuthn params, instead use gboolean

	add ref and prefix for sso get and post request

	add lasso_authn_response_new to set a AuthnResponse from a AuthnRequest object

	fix : strange conversion of true string to an integer value setting the wrong value to the function settings of IsPassive and ForceAuthn

2004-06-07  Nicolas Clapies  <nclapies@entrouvert.com>

	fix: segmentation fault in lasso_node_get_attr_value() if no attribute found

2004-06-04  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	Initial version

2004-06-02  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

2004-06-02  Nicolas Clapies  <nclapies@entrouvert.com>

	add metadata prefix and uri

2004-06-02  Valery Febvre  <vfebvre at easter-eggs.com>

	Added lasso_node_get_child_content() method

	Changed default format value to 0 instead of 1 in dump() method of class Node

	Added new directory lasso/profiles

2004-06-01  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	*** empty log message ***

2004-05-28  Valery Febvre  <vfebvre at easter-eggs.com>

	Added option menu to build documentation (doxygen)

	Initial commit

	Some functions documentation (doxygen syntax)

	Updated doc Fixed a memory leak in lasso_node_add_signature() method

	Added functions and public methods documentation

2004-05-26  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	Initial commit

	*** empty log message ***

	Modified function lasso_str_sign()

	*** empty log message ***

2004-05-25  Valery Febvre  <vfebvre at easter-eggs.com>

	Modified method get_child()

	*** empty log message ***

	*** empty log message ***

	Added some lasso_node_destroy()

	Little inversion to respect alpha order

	Added 4 lasso_node_destroy()

2004-05-17  Valery Febvre  <vfebvre at easter-eggs.com>

	New method lasso_node_destroy() added in class LassoNode

2004-05-15  Valery Febvre  <vfebvre at easter-eggs.com>

	Many many memory leaks fixed

	*** empty log message ***

2004-05-14  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	node_export() and node_export_from_base64() functions added 2 export methods in class Node added

	node_export and node_export_from_base64() functions added

	authn_response_new_from_export() function added

	some update more comments

	A new constructor added: authn_response_new_from_export()

2004-05-13  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	*** empty log message ***

2004-05-13  Nicolas Clapies  <nclapies@entrouvert.com>

	add some macro defines to local variables in methodes ...

2004-05-13  Valery Febvre  <vfebvre at easter-eggs.com>

	gpointer_get() macro added

	2 methods renamed, 3 added and 1 removed

	node_url_encode() and node_soap_envelop() renamed -> node_export_to_query() and node_export_to_soap()

	saml_assertion_set_signature() function added

	*** empty log message ***

	authn_response_add_assetion() function removed

	cosmetic

	lasso_saml_assertion_set_signature() method rewritten

	lasso_ds_signature_new() rewritten

2004-05-13  Nicolas Clapies  <nclapies@entrouvert.com>

	add const in read-only params of constructors

2004-05-13  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	all lasso_node_load_from_buffer() replaced by lasso_node_import()

	lasso_authn_response_add_assertion() method removed

	Minor bugfix : lassoLibMajorVersion -> lassoLibMinorVersion

	Initial commit

	*** empty log message ***

2004-05-13  Nicolas Clapies  <nclapies@entrouvert.com>

	add registration python example

	register name identifier request and response updates in C and python binding

2004-05-13  Valery Febvre  <vfebvre at easter-eggs.com>

	update

	4 NameIdentifier formats added

2004-05-11  Nicolas Clapies  <nclapies@entrouvert.com>

	initial version

	c example for federation termination notification

	name identifier mapping response low class binding and, examples ...

	name identifer mapping c and python binding updates

	initial version

	federation termination notification c and binding

2004-05-09  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	Bugfix in lasso_node_verify_signature() method New method lasso_node_add_signature() added

	Bugfix in lasso_authn_response_add_assertion() method

2004-05-07  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

2004-05-06  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

2004-05-06  Nicolas Clapies  <nclapies@entrouvert.com>

	add class method constructor new_from_query in LogoutResponse

2004-05-06  Valery Febvre  <vfebvre at easter-eggs.com>

	Bugfixes in lasso_node_serialize(), lasso_node_get_attrs() and lasso_node_get_children() methods

	Removed lasso_node_new_ns() method

	*** empty log message ***

	2 new constructors : 	lasso_node_new_from_dump() 	lasso_node_new_from_xmlNode() lasso_node_parse_memory() renamed -> lasso_node_load_from_buffer()

	minor changes

2004-05-05  Nicolas Clapies  <nclapies@entrouvert.com>

	add low level of logout response binding

	binding for low level of logout request and response C class

	update of LogoutRequest LogoutResponse classes

	update of constructors

2004-05-05  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	Added a new method -> lasso_node_copy()

2004-05-05  Nicolas Clapies  <nclapies@entrouvert.com>

	add enveloping in soap node

	update ...

	add soap enveloping method in LassoNode

	delete lasso_protocol_export_to_soap() function

2004-05-05  Valery Febvre  <vfebvre at easter-eggs.com>

	Initail commit

	a new constructor - lasso_authn_request_new_from_query()

	a big bug fixes in lasso_query_to_dict()

2004-05-04  Nicolas Clapies  <nclapies@entrouvert.com>

	minor updates

	add constructors for LogoutRequest and LogoutResponse

	add function to build a soap-enveloped lasso node

	initial version

2004-05-03  Nicolas Clapies  <nclapies@entrouvert.com>

	update makefile.am for soap

	add constants for soap

2004-05-03  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	4 new SAML Confirmation methods

	*** empty log message ***

	*** empty log message ***

	Methods set_relayState() and set_nameIDPolicy() added in LibAuthnRequest class

	last version which demonstrates an Authentication Request/Response (more comments)

	Too many changes, sorry

	Many many changes

	only cosmetic

	Funct lasso_node_set_node() renamed -> lasso_node_set_xmlNode()

	cosmetic

2004-05-02  Valery Febvre  <vfebvre at easter-eggs.com>

	3 LassoAuthnRequest replaced by LassoRegisterNameIdentifierRequest

	a bad cast fix

	In funct name_identifier_mapping_request_new(): args providerID and nameIdentifier : required args nameQualifier and format      : optional

	In funct logout_request_new(): args providerID and nameIdentifier : required args nameQualifier and format      : optional

	Removed funct lasso_authn_response_get_protocolProfile() Added funct lasso_authn_response_process_authentication_result() 3 args removed in lasso_authn_response_new()

	nico added to authors

	Initial commit

	Added funct lasso_authn_request_get_protocolProfile()

2004-04-29  Valery Febvre  <vfebvre at easter-eggs.com>

	#include fix

	*** empty log message ***

	AuthnRequest added

	3 methods and 1 funct added

	Initial commit

2004-04-28  Valery Febvre  <vfebvre at easter-eggs.com>

	a new funct added: lasso_query_get_value()

	#include <libxml/xpath.h> replaced by #include <libxml/tree.h>

	lasso_str_verify() renamed -> lasso_query_verify_signature()

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

	lasso/protocols/elements/Makefile added

	Initial commit

	*** empty log message ***

2004-04-27  Nicolas Clapies  <nclapies@entrouvert.com>

	add support for binding of  NameIdentifierMapping

	add NameIdentifierMappingRequest/Response class and binding

	add optional attribute in FederationTerminationNotification

2004-04-27  Valery Febvre  <vfebvre at easter-eggs.com>

	Fixed a big boulette

2004-04-27  Nicolas Clapies  <nclapies@entrouvert.com>

	delete files from cvs

2004-04-27  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

2004-04-27  Nicolas Clapies  <nclapies@entrouvert.com>

	add optional element RelayState

	add optional element and attribute for LogoutRequest/Response

2004-04-27  Valery Febvre  <vfebvre at easter-eggs.com>

	type_name removed in private struct

	*** empty log message ***

2004-04-27  Nicolas Clapies  <nclapies@entrouvert.com>

	add fonction to change names of attributes in identitiers

2004-04-27  Valery Febvre  <vfebvre at easter-eggs.com>

	Memory leaks fixed again

	Memory leaks fixed

2004-04-27  Nicolas Clapies  <nclapies@entrouvert.com>

	remove code changing name of attributes in IDP/SP/OldProvidedNameIdentifier

	remove files

	initial version

	add LogoutRequest/Response, FederationTerminationNotification, RegisterNameIdentifierRequest/Response classes in python

2004-04-26  Valery Febvre  <vfebvre at easter-eggs.com>

	8 SatusCode were added

2004-04-26  Nicolas Clapies  <nclapies@entrouvert.com>

	build the RegisterNameIdentifierRequest with specific names for name identifiers attributes

	add federation termination notification high level class

	add register_name_identifier.h/.c

	initial version

	fix conflict in name declaration of functions for name identifiers settings

2004-04-23  Nicolas Clapies  <nclapies@entrouvert.com>

	add LogoutRequest and LogoutResponse

2004-04-22  Valery Febvre  <vfebvre at easter-eggs.com>

	previously named ssoaf_authn_request.c and ssoaf_authn_request.h

	renamed

	*** empty log message ***

	strings type changed: gchar* -> xmlChar*

	added ssoaf_authn_request.c, ssoaf_authn_request.h, protocol.c and protocol.h

	nico added in authors list

	Initial commit

	*** empty log message ***

2004-04-20  Nicolas Clapies  <nclapies@entrouvert.com>

	add RegisterNameIdentifierRequest class

	initial version

	rename functions for request creation

2004-04-20  Valery Febvre  <vfebvre at easter-eggs.com>

	make clean updated

	2 methods comments fixed

	First test version

	config.h.in added

	Initial commit

	lasso-sections.txt removed

2004-04-19  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

2004-04-19  Nicolas Clapies  <nclapies@entrouvert.com>

	add NameIdentifier content in constructors

2004-04-19  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

2004-04-19  Nicolas Clapies  <nclapies@entrouvert.com>

	fix = add support of cplusplus

	update for classes LogoutRequest and LogoutResponse

	update functions to create and init logout request / response

2004-04-19  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	*** empty log message ***

2004-04-19  Nicolas Clapies  <nclapies@entrouvert.com>

	add saml_response_add_assertion() function

	add add_assertion method for Response object

2004-04-18  Valery Febvre  <vfebvre at easter-eggs.com>

	Added lasso.pc.in to used pkg-config

2004-04-17  Valery Febvre  <vfebvre at easter-eggs.com>

	Remove class->set_ns() useless

	Used new method set_ns() instead of new_ns() (in *_instance_init() methods)

	*** empty log message ***

	cosmetic, many g_return_* added, a new method lasso_node_set_ns() (will replaced lasso_node_new_ns())

2004-04-16  Nicolas Clapies  <nclapies@entrouvert.com>

	fix : logout_request_getattr(self, name)

	add lasso_request_create() declaration

2004-04-16  Valery Febvre  <vfebvre at easter-eggs.com>

	Removed a call to fcunt lasso_samlp_response_add_assertion() in excess

2004-04-16  Nicolas Clapies  <nclapies@entrouvert.com>

	request and response definition

	blablabla ...

	add Request and Response class definition

	in function lasso_authn_response_init() add issueInstant and InResponseTo

2004-04-15  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	*** empty log message ***

	Clean-ups, cosmetics and memory leaks fixed

2004-04-15  Nicolas Clapies  <nclapies@entrouvert.com>

	add functions for Request and Response messages

2004-04-15  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

2004-04-15  Nicolas Clapies  <nclapies@entrouvert.com>

	delete file

	fix : return a string the lasso_node_dump() function

	add include for samlp_request.h

2004-04-14  Valery Febvre  <vfebvre at easter-eggs.com>

	lasso_node_dump() public method now returns a string (instead of void)

	Added public method  lasso_node_parse_memory()

	*** empty log message ***

2004-04-13  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

2004-04-13  Nicolas Clapies  <nclapies@entrouvert.com>

	add samlp Request compilation

	initial version

2004-04-13  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	*** empty log message ***

2004-04-13  Nicolas Clapies  <nclapies@entrouvert.com>

	add logout options compiling

2004-04-13  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

2004-04-09  Nicolas Clapies  <nclapies@entrouvert.com>

	initial version

	add logout stuffs bindings

	first high level functions

2004-04-09  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	Some clean-ups

	*** empty log message ***

	Added function lasso_node_verify_signature()

2004-04-08  Valery Febvre  <vfebvre at easter-eggs.com>

	generator_lasso_strings.py

	*** empty log message ***

2004-04-08  Emmanuel Raviart  <eraviart@entrouvert.com>

	80 columns.

2004-04-08  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

2004-04-07  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

2004-04-07  Nicolas Clapies  <nclapies@entrouvert.com>

	fix constructor lasso_saml_name_identifier_new(nameIdentifier) in lasso_build_nameIdentifier

2004-04-07  Valery Febvre  <vfebvre at easter-eggs.com>

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

	*** empty log message ***

	Many modifications

2004-04-06  Valery Febvre  <vfebvre at easter-eggs.com>

	Added virtual public method lasso_node_get_content()

	Used lasso_node_get_child instead() of class->get_child()

	Fixed many compilation warnings. Virtual private methods lasso_node_get_attr(), lasso_node_get_attrs(), lasso_node_get_child() and lasso_node_get_children() became virtual public

	Fixed compilation warnings (casts missing)

	Fixed compile warning (casts missing)

	Fixed compile warning

	schema replaced by xml

	Files moved. Initialy located in lasso/schema/ directory

2004-04-04  Valery Febvre  <vfebvre at easter-eggs.com>

	lasso/Makefile.am

	remove lasso/bindings/Makefile (directory lasso/bindings will be not used anymore)

2004-04-02  Nicolas Clapies  <nclapies@entrouvert.com>

	initial version

	fix types of some parameters

	add function lasso_build_authnRequest_must_autenthicate

2004-04-02  Valery Febvre  <vfebvre at easter-eggs.com>

	Initial commit

	Fct lasso_shutdown() now return int values.

2004-04-01  Nicolas Clapies  <nclapies@entrouvert.com>

	use function lasso_lib_subject_new() instead of lasso_saml_subject_new()

	fix : use function lasso_lib_authentication_statement_new() instead of lasso_saml_authentication_statement_new()

	add function lasso_build_authnRequest_from_query

2004-04-01  Valery Febvre  <vfebvre at easter-eggs.com>

	Added arg protocolProfile in fct lasso_build_full_authnRequest()

2004-04-01  Nicolas Clapies  <nclapies@entrouvert.com>

	add functions lasso_build_assertion lasso_build_authenticationStatement

	add methods lasso_build_full_logoutRequest lasso_build_full_logoutResponse

	add methods lasso_build_full_federationTerminationNotification

	add lasso_build_full_registerNameIdentifierRequest lasso_build_full_registerNameIdentifierResponse

2004-04-01  Valery Febvre  <vfebvre at easter-eggs.com>

	Ooops, add missing return for funct lasso_build_authnRequest()

2004-03-30  Valery Febvre  <vfebvre at easter-eggs.com>

	Added some cosmetics, comment headers, #ifdef ...

	Added HEADER

2004-03-30  Nicolas Clapies  <nclapies@entrouvert.com>

	add includes of high level functions of class building. set prototype of common functions for encoding and signing

	initial version

	fix type parameters from const char to const xmlChar. add function to build response

2004-03-29  Valery Febvre  <vfebvre at easter-eggs.com>

	const char * convert into const xmlChar *

	Added *.lo, *.la, .deps, .libs

2004-03-29  Nicolas Clapies  <nclapies@entrouvert.com>

	initial version

	add lasso_build_authnRequest method

	add protocols Makefile support

	add support of protocols

	initial version

2004-03-24  Nicolas Clapies  <nclapies@entrouvert.com>

	add comments about little problems with implementation of name identifier mapping request class and question about implementation of nodes

2004-03-23  Valery Febvre  <vfebvre at easter-eggs.com>

	Added *.lo, *.la, .deps, .libs

	Initial version

	Initial revision
