|
|
 |
|
|
Changelog for certmonger-debuginfo-0.42-1.el5.i386.rpm :
Thu Apr 14 00:00:00 2011 Nalin Dahyabhai 0.42-1
- getcert: fix a buffer overrun preparing a request for the daemon when
there are more parameters to encode than space in the array (#696185)
- updated translations: de, es, id, pl, ru, uk
Tue Apr 12 00:00:00 2011 Nalin Dahyabhai 0.41-1
- read information about the keys we\'ve just generated before proceeding
to generating a CSR (part of #694184, part of #695675)
- when processing a \"resubmit\" request from getcert, go back to key
generation if we don\'t have keys yet, else go back to CSR generation as
before (#694184, #695675)
- configure with --with-tmpdir=/var/run/certmonger and own /var/run/certmonger
(#687899), and add a systemd tmpfiles.d control file for creating
/var/run/certmonger on Fedora 15 and later
- let session instances exit when they get disconnected from the bus
- use a lock file to make sure there\'s only one session instance messing
around with the user\'s files at a time
- fix errors saving certificates to NSS databases when there\'s already a
certificate there with the same nickname (#695672)
- make key and certificate location output from \'getcert list\' more properly
translatable (#7)
Tue Mar 29 00:00:00 2011 Nalin Dahyabhai 0.40-1
- update to 0.40
- fix validation check on EKU OIDs in getcert (#691351)
- get session bus mode sorted
- add a list of recognized EKU values to the getcert-request man page
Fri Mar 25 23:00:00 2011 Nalin Dahyabhai 0.39-1
- update to 0.39
- fix use of an uninitialized variable in the xmlrpc-based submission
helpers (#690892)
Thu Mar 24 23:00:00 2011 Nalin Dahyabhai 0.38-1
- update to 0.38
- catch cases where we can\'t read a PIN file, but we never have to log
in to the token to access the private key (more of #688229)
Tue Mar 22 23:00:00 2011 Nalin Dahyabhai 0.37-1
- update to 0.37
- be more careful about checking if we can read a PIN file successfully
before we even call an API that might need us to try (#688229)
- fix strict aliasing warnings
Tue Mar 22 23:00:00 2011 Nalin Dahyabhai 0.36-1
- update to 0.36
- fix some use-after-free bugs in the daemon (#689776)
- fix a copy/paste error in certmonger-ipa-submit(8)
- getcert now suppresses error details when not given its new -v option
(#683926, more of #681641/#652047)
- updated translations
- de, es, pl, ru, uk
- indonesian translation is now for \"id\" rather than \"in\"
Wed Mar 2 23:00:00 2011 Nalin Dahyabhai 0.35.1-1
- fix a self-test that broke because one-year-from-now is now a day\'s worth
of seconds further out than it was a few days ago
Mon Feb 14 23:00:00 2011 Nalin Dahyabhai 0.35-1
- update to 0.35
- self-test fixes to rebuild properly in mock (#670322)
Tue Feb 8 23:00:00 2011 Fedora Release Engineering - 0.34-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
Fri Jan 14 23:00:00 2011 Nalin Dahyabhai 0.34-1
- update to 0.34
- explicitly note the number of requests we\'re tracking in the output of
\"getcert list\" (#681642)
- try to offer some suggestions when we get certain specific errors back
in \"getcert\" (#681641)
- updated translations
- es
Thu Dec 23 23:00:00 2010 Nalin Dahyabhai 0.33-1
- update to 0.33
- new translations
- id by Okta Purnama Rahadian!
- updated translations
- pl, uk
- roll up assorted fixes for defects
Fri Nov 12 23:00:00 2010 Nalin Dahyabhai 0.32-2
- depend on the e2fsprogs libuuid on Fedora and RHEL releases where it\'s
not part of util-linux-ng
Thu Oct 14 00:00:00 2010 Nalin Dahyabhai 0.32-1
- oops, rfc5280 says we shouldn\'t be populating unique identifiers, so
make it a configuration option and default the behavior to off
Wed Oct 13 00:00:00 2010 Nalin Dahyabhai 0.31-1
- start populating the optional unique identifier fields in self-signed
certificates
Fri Oct 1 00:00:00 2010 Nalin Dahyabhai 0.30-4
- explicitly require \"dbus\" to try to ensure we have a running system bus
when we get started (#639126)
Thu Sep 30 00:00:00 2010 jkeating - 0.30-3
- Rebuilt for gcc bug 634757
Fri Sep 24 00:00:00 2010 Nalin Dahyabhai 0.30-2
- try to SIGHUP the messagebus daemon at first install so that it\'ll
let us claim our service name if it isn\'t restarted before we are
first started (#636876)
Thu Aug 26 00:00:00 2010 Nalin Dahyabhai 0.30-1
- update to 0.30
- fix errors computing the time at the end of an interval that were
caught by self-tests
Tue Aug 24 00:00:00 2010 Nalin Dahyabhai 0.29-1
- update to 0.29
- fix 64-bit cleanliness issue using libdbus
- actually include the full set of tests in tarballs
Wed Aug 18 00:00:00 2010 Nalin Dahyabhai 0.28-1
- update to 0.28
- fix self-signing certificate notBefore and notAfter values on 32-bit
machines
Wed Aug 18 00:00:00 2010 Nalin Dahyabhai 0.27-1
- update to 0.27
- portability and test fixes
Sat Aug 14 00:00:00 2010 Nalin Dahyabhai 0.26-1
- update to 0.26
- when canceling a submission request that\'s being handled by a helper,
reap the child process\'s status after killing it (#624120)
Sat Aug 14 00:00:00 2010 Nalin Dahyabhai 0.25-1
- update to 0.25
- new translations
- in by Okta Purnama Rahadian!
- fix detection of cases where we can\'t access a private key in an NSS
database because we don\'t have the PIN
- teach \'
*getcert start-tracking\' about the -p and -P options which the
\'
*getcert request\' commands already understand (#621670), and also
the -U, -K, -E, and -D flags
- double-check that the nicknames of keys we get back from
PK11_ListPrivKeysInSlot() match the desired nickname before accepting
them as matches, so that our tests won\'t all blow up on EL5
- fix dynamic addition and removal of CAs implemented through helpers
Tue Jun 29 00:00:00 2010 Nalin Dahyabhai 0.24-4
- init script: ensure that the subsys lock is created whenever we\'re called to
\"start\" when we\'re already running (even more of #596719)
Wed Jun 16 00:00:00 2010 Nalin Dahyabhai 0.24-3
- more gracefully handle manual daemon startups and cleaning up of unexpected
crashes (still more of #596719)
Fri Jun 11 00:00:00 2010 Nalin Dahyabhai 0.24-2
- don\'t create the daemon pidfile until after we\'ve connected to the D-Bus
(still more of #596719)
Wed Jun 9 00:00:00 2010 Nalin Dahyabhai 0.24-1
- update to 0.24
- keep the lock on the pid file, if we have one, when we fork, and cancel
daemon startup if we can\'t gain ownership of the lock (the rest of #596719)
- make the man pages note which external configuration files we consult when
submitting requests to certmaster and ipa CAs
Fri May 28 00:00:00 2010 Nalin Dahyabhai 0.23-1
- update to 0.23
- new translations
- pl by Piotr Drąg!
- cancel daemon startup if we can\'t gain ownership of our well-known
service name on the DBus (#596719)
Sat May 15 00:00:00 2010 Nalin Dahyabhai 0.22-1
- update to 0.22
- new translations
- de by Fabian Affolter!
- certmaster-submit: don\'t fall over when we can\'t find a certmaster.conf
or a minion.conf (i.e., certmaster isn\'t installed) (#588932)
- when reading extension values from certificates, prune out duplicate
principal names, email addresses, and hostnames
Wed May 5 00:00:00 2010 Nalin Dahyabhai 0.21-1
- update to 0.21
- getcert/
*-getcert: relay the desired CA to the local service, whether
specified on the command line (in getcert) or as a built-in hard-wired
default (in
*-getcert) (#584983)
- flesh out the default certmonger.conf so that people can get a feel for
the expected formatting (Jenny Galipeau)
Thu Apr 22 00:00:00 2010 Nalin Dahyabhai 0.20-1
- update to 0.20
- correctly parse certificate validity periods given in years (spotted by
Stephen Gallagher)
- setup for translation
- es by Héctor Daniel Cabrera!
- ru by Yulia Poyarkova!
- uk by Yuri Chornoivan!
- fix unpreprocessed defaults in certmonger.conf\'s man page
- tweak the IPA-specific message that indicates a principal name also needs
to be specified if we\'re not using the default subject name (#579542)
- make the validity period of self-signed certificates into a configuration
setting and not a piece of the state information we track about the signer
- init script: exit with status 2 instead of 1 when invoked with an
unrecognized argument (#584517)
Tue Mar 23 23:00:00 2010 Nalin Dahyabhai 0.19-1
- update to 0.19
- correctly initialize NSS databases that need to be using a PIN
- add certmonger.conf, for customizing notification timings and settings,
and use of digests other than the previously-hard-coded SHA256, and
drop those settings from individual requests
- up the default self-sign validity interval from 30 days to 365 days
- drop the first default notification interval from 30 days to 28 days
(these two combined to create a fun always-reissuing loop earlier)
- record the token which contains the key or certificate when we\'re
storing them in an NSS database, and report it
- improve handling of cases where we\'re supposed to use a PIN but we
either don\'t have one or we have the wrong one
- teach getcert to accept a PIN file\'s name or a PIN value when adding
a new entry
- update the IPA submission helper to use the new \'request_cert\' signature
that\'s landing soon
- more tests
Fri Feb 12 23:00:00 2010 Nalin Dahyabhai 0.18-1
- update to 0.18
- add support for using encrypted storage for keys, using PIN values
supplied directly or read from files whose names are supplied
- don\'t choke on NSS database locations that use the \"sql:\" or \"dbm:\"
prefix
Mon Jan 25 23:00:00 2010 Nalin Dahyabhai 0.17-2
- make the D-Bus configuration file (noreplace) (#541072)
- make the %check section and the deps we have just for it conditional on
the same macro (#541072)
Wed Jan 6 23:00:00 2010 Nalin Dahyabhai 0.17-1
- update to 0.17
- fix a hang in the daemon (Rob Crittenden)
- documentation updates
- fix parsing of submission results from IPA (Rob Crittenden)
Fri Dec 11 23:00:00 2009 Nalin Dahyabhai 0.16-1
- update to 0.16
- set a umask at startup (Dan Walsh)
Tue Dec 8 23:00:00 2009 Nalin Dahyabhai 0.15-1
- update to 0.15
- notice that a directory with a trailing \'/\' is the same location as the
directory without it
- fix handling of the pid file when we write one (by actually giving it
contents)
Tue Nov 24 23:00:00 2009 Nalin Dahyabhai 0.14-1
- update to 0.14
- check key and certificate location at add-time to make sure they\'re
absolute paths to files or directories, as appropriate
- IPA: dig into the \'result\' item if the named result value we\'re looking
for isn\'t in the result struct
Tue Nov 24 23:00:00 2009 Nalin Dahyabhai 0.13-1
- update to 0.13
- change the default so that we default to trying to auto-refresh
certificates unless told otherwise
- preemptively enforce limitations on request nicknames so that they
make valid D-Bus object path components
Tue Nov 24 23:00:00 2009 Nalin Dahyabhai 0.12-1
- update to 0.12
- add a crucial bit of error reporting when CAs reject our requests
- count the number of configured CAs correctly
Mon Nov 23 23:00:00 2009 Nalin Dahyabhai 0.11-1
- update to 0.11
- add XML-RPC submission for certmaster and IPA
- prune entries with duplicate names from the data store
Fri Nov 13 23:00:00 2009 Nalin Dahyabhai 0.10-1
- update to 0.10
- add some compiler warnings and then fix them
Fri Nov 13 23:00:00 2009 Nalin Dahyabhai 0.9-1
- update to 0.9
- run external submission helpers correctly
- fix signing of signing requests generated for keys stored in files
- only care about new interface and route notifications from netlink,
and ignore notifications that don\'t come from pid 0
- fix logic for determining expiration status
- correct the version number in self-signed certificates
Tue Nov 10 23:00:00 2009 Nalin Dahyabhai 0.8-1
- update to 0.8
- encode windows UPN values in requests correctly
- watch for netlink routing changes and restart stalled submission requests
- \'getcert resubmit\' can force a regeneration of the CSR and submission
Fri Nov 6 23:00:00 2009 Nalin Dahyabhai 0.7-1
- update to 0.7
- first cut at a getting-started document
- refactor some internal key handling with NSS
- check for duplicate request nicknames at add-time
Tue Nov 3 23:00:00 2009 Nalin Dahyabhai 0.6-1
- update to 0.6
- man pages
- \'getcert stop-tracking\' actually makes the server forget now
- \'getcert request -e\' was redundant, dropped the -e option
- \'getcert request -i\' now sets the request nickname
- \'getcert start-tracking -i\' now sets the request nickname
Mon Nov 2 23:00:00 2009 Nalin Dahyabhai 0.5-1
- update to 0.5
- packaging fixes
- add a selfsign-getcert client
- self-signed certs now get basic constraints and their own serial numbers
- accept id-ms-kp-sc-logon as a named EKU value in a request
Thu Oct 29 23:00:00 2009 Nalin Dahyabhai 0.4-1
- update to 0.4
Fri Oct 23 00:00:00 2009 Nalin Dahyabhai 0.1-1
- update to 0.1
Mon Oct 19 00:00:00 2009 Nalin Dahyabhai 0.0-1
- initial package
|
|
|
