Update to 0.74

- also save state when we exit due to SIGHUP
- don't get tripped up when enrollment helpers hand us certificates
  which include CRLF line terminators (ticket #25)
- be tolerant of certificate issuer names, subject names, DNS, email,
  and Kerberos principal namem subjectAltNames, and crl distribution
  point URLs that contain newlines
- read and cache the certificate template extension in certificates
- enforce different minimum key sizes depending on the type of key we're
  trying to generate
- store DER versions of subject, issuer and template subject, if we have
  them (Jan Cholasta, ticket #26)
- when generating signing requests with subject names that don't quite
  parse as subject names, encode what we're given as PrintableString
  rather than as a UTF8String
- always chdir() to a known location at startup, even if we're not
  becoming a daemon
- fix a couple of memory leaks (static analysis)
- add missing buildrequires: on which
This commit is contained in:
Nalin Dahyabhai 2014-04-03 13:27:21 -04:00
parent 42ca560e41
commit 2a8cd1da74
3 changed files with 27 additions and 3 deletions

2
.gitignore vendored
View File

@ -62,3 +62,5 @@ certmonger-0.28.tar.gz
/certmonger-0.71.2.tar.gz.sig
/certmonger-0.73.tar.gz
/certmonger-0.73.tar.gz.sig
/certmonger-0.74.tar.gz
/certmonger-0.74.tar.gz.sig

View File

@ -19,7 +19,7 @@
%endif
Name: certmonger
Version: 0.73
Version: 0.74
Release: 1%{?dist}
Summary: Certificate status monitor and PKI enrollment client
@ -59,6 +59,8 @@ BuildRequires: /usr/bin/dbus-launch
# for dos2unix
BuildRequires: /usr/bin/dos2unix
BuildRequires: /usr/bin/unix2dos
# for which
BuildRequires: /usr/bin/which
# we need a running system bus
Requires: dbus
@ -202,6 +204,26 @@ exit 0
%endif
%changelog
* Thu Apr 3 2014 Nalin Dahyabhai <nalin@redhat.com> 0.74-1
- also save state when we exit due to SIGHUP
- don't get tripped up when enrollment helpers hand us certificates which
include CRLF line terminators (ticket #25)
- be tolerant of certificate issuer names, subject names, DNS, email, and
Kerberos principal namem subjectAltNames, and crl distribution point URLs
that contain newlines
- read and cache the certificate template extension in certificates
- enforce different minimum key sizes depending on the type of key we're
trying to generate
- store DER versions of subject, issuer and template subject, if we have
them (Jan Cholasta, ticket #26)
- when generating signing requests with subject names that don't quite parse
as subject names, encode what we're given as PrintableString rather than
as a UTF8String
- always chdir() to a known location at startup, even if we're not becoming
a daemon
- fix a couple of memory leaks (static analysis)
- add missing buildrequires: on which
* Thu Feb 20 2014 Nalin Dahyabhai <nalin@redhat.com> 0.73-1
- updates to 0.73
- getcert no longer claims to be stuck when a CA is unreachable,

View File

@ -1,2 +1,2 @@
c5b06fba4e03cc8211c4e472108aba17 certmonger-0.73.tar.gz
97a666e2f176904b724ec3e76f8d888b certmonger-0.73.tar.gz.sig
cd73eed2f6ef837a790286d0998c6c47 certmonger-0.74.tar.gz
1764071325f7e7d6d143862a88e07071 certmonger-0.74.tar.gz.sig