From 36aa62b94258dc122e6e4a09b8ab4d6417b801b6 Mon Sep 17 00:00:00 2001
From: Nalin Dahyabhai <nalin@fedoraproject.org>
Date: Wed, 24 Mar 2010 00:07:21 +0000
Subject: [PATCH] update to 0.19

---
 .cvsignore      |  1 +
 certmonger.spec | 23 ++++++++++++++++++++++-
 sources         |  2 +-
 3 files changed, 24 insertions(+), 2 deletions(-)

diff --git a/.cvsignore b/.cvsignore
index 01cc37f..e1bc8f2 100644
--- a/.cvsignore
+++ b/.cvsignore
@@ -1,2 +1,3 @@
 certmonger-0.17.tar.gz
 certmonger-0.18.tar.gz
+certmonger-0.19.tar.gz
diff --git a/certmonger.spec b/certmonger.spec
index 63b4172..4b9dbbb 100644
--- a/certmonger.spec
+++ b/certmonger.spec
@@ -2,7 +2,7 @@
 %{?_with_check: %global pcheck 1}
 
 Name:		certmonger
-Version:	0.18
+Version:	0.19
 Release:	1%{?dist}
 Summary:	Certificate status monitor and PKI enrollment client
 
@@ -84,6 +84,8 @@ exit 0
 %defattr(-,root,root,-)
 %doc README LICENSE STATUS doc/*.txt
 %config(noreplace) %{_sysconfdir}/dbus-1/system.d/*
+%dir %{_sysconfdir}/certmonger
+%config(noreplace) %{_sysconfdir}/certmonger/certmonger.conf
 %if 0%{?fedora} <= 9 || 0%{?rhel} < 6
 %{_initrddir}/certmonger
 %else
@@ -96,6 +98,25 @@ exit 0
 %{_localstatedir}/lib/certmonger
 
 %changelog
+* Tue Mar 23 2010 Nalin Dahyabhai <nalin@redhat.com> 0.19-1
+- update to 0.19
+  - correctly initialize NSS databases that need to be using a PIN
+  - add certmonger.conf, for customizing notification timings and settings,
+    and use of digests other than the previously-hard-coded SHA256, and
+    drop those settings from individual requests
+  - up the default self-sign validity interval from 30 days to 365 days
+  - drop the first default notification interval from 30 days to 28 days
+    (these two combined to create a fun always-reissuing loop earlier)
+  - record the token which contains the key or certificate when we're
+    storing them in an NSS database, and report it
+  - improve handling of cases where we're supposed to use a PIN but we
+    either don't have one or we have the wrong one
+  - teach getcert to accept a PIN file's name or a PIN value when adding
+    a new entry
+  - update the IPA submission helper to use the new 'request_cert' signature
+    that's landing soon
+  - more tests
+
 * Fri Feb 12 2010 Nalin Dahyabhai <nalin@redhat.com> 0.18-1
 - update to 0.18
   - add support for using encrypted storage for keys, using PIN values
diff --git a/sources b/sources
index 994e5ba..e780b71 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-7b20ca8e6123064c81964ef3af7e1bef  certmonger-0.18.tar.gz
+3ed20f248482ddf534cf9adf9a89c4b4  certmonger-0.19.tar.gz