Update to 0.75.5

- documentation updates
- add a %%trigger to remove knowledge of the "dogtag-ipa-renew-agent" CA
  when we detect certmonger versions prior to 0.58 being installed, to
  avoid cases where some older versions choke on CAs with nicknames that
  contain characters that can't legally be part of a D-Bus name (#948993)
- fix creation and packaging of the "local" CA's data directory

.gitignore

@@ -72,3 +72,5 @@ certmonger-0.28.tar.gz
 /certmonger-0.75.2.tar.gz.sig
 /certmonger-0.75.3.tar.gz
 /certmonger-0.75.3.tar.gz.sig
+/certmonger-0.75.5.tar.gz
+/certmonger-0.75.5.tar.gz.sig

certmonger.spec

@@ -19,7 +19,7 @@
 %endif
 
 Name:		certmonger
-Version:	0.75.3
+Version:	0.75.5
 Release:	1%{?dist}
 Summary:	Certificate status monitor and PKI enrollment client
 
@@ -69,14 +69,14 @@ Requires:	dbus
 %if %{systemd}
 BuildRequires:	systemd-units
 Requires(post):	systemd-units
-Requires(preun):	systemd-units
+Requires(preun):	systemd-units, dbus, sed
 Requires(postun):	systemd-units
 Requires(post):	systemd-sysv
 %endif
 
 %if %{sysvinit}
 Requires(post):	/sbin/chkconfig, /sbin/service
-Requires(preun):	/sbin/chkconfig, /sbin/service
+Requires(preun):	/sbin/chkconfig, /sbin/service, dbus, sed
 %endif
 
 %if 0%{?fedora} >= 15
@@ -139,6 +139,22 @@ fi
 /sbin/chkconfig --add certmonger
 %endif
 
+%triggerin -- certmonger < 0.58
+if test $1 -gt 1 ; then
+	# If the daemon is running, remove knowledge of the dogtag renewer.
+	objpath=`dbus-send --system --reply-timeout=10000 --dest=org.fedorahosted.certmonger --print-reply=o /org/fedorahosted/certmonger org.fedorahosted.certmonger.find_ca_by_nickname string:dogtag-ipa-renew-agent 2> /dev/null | sed -r 's,^ +,,g' || true`
+	if test -n "$objpath" ; then
+		dbus-send --system --dest=org.fedorahosted.certmonger --print-reply /org/fedorahosted/certmonger org.fedorahosted.certmonger.remove_known_ca objpath:"$objpath" >/dev/null 2> /dev/null
+	fi
+	# Remove the data file, in case it isn't running.
+	for cafile in %{_localstatedir}/lib/certmonger/cas/* ; do
+		if grep -q '^id=dogtag-ipa-renew-agent$' "$cafile" ; then
+			rm -f "$cafile"
+		fi
+	done
+fi
+exit 0
+
 %postun
 %if %{systemd}
 /bin/systemctl daemon-reload >/dev/null 2>&1 || :
@@ -205,6 +221,18 @@ exit 0
 %endif
 
 %changelog
+* Fri Jun 20 2014 Nalin Dahyabhai <nalin@redhat.com> 0.75.5-1
+- documentation updates
+
+* Fri Jun 20 2014 Nalin Dahyabhai <nalin@redhat.com> 0.75.4-2
+- add a %%trigger to remove knowledge of the "dogtag-ipa-renew-agent" CA
+  when we detect certmonger versions prior to 0.58 being installed, to
+  avoid cases where some older versions choke on CAs with nicknames that
+  contain characters that can't legally be part of a D-Bus name (#948993)
+
+* Thu Jun 19 2014 Nalin Dahyabhai <nalin@redhat.com> 0.75.4-1
+- fix creation and packaging of the "local" CA's data directory
+
 * Wed Jun 18 2014 Nalin Dahyabhai <nalin@redhat.com> 0.75.3-1
 - read and cache whether or not we saw a noOCSPcheck extension in certificates
 - documentation updates

sources

@@ -1,2 +1,2 @@
-2088f19f7960921b6a57dd1f40825117  certmonger-0.75.3.tar.gz
+369319933330f52cbd5766fa5b2302da  certmonger-0.75.5.tar.gz
-671baa190200a0ecd5cb956343bbf471  certmonger-0.75.3.tar.gz.sig
+eac9d128077176f1fd49661400a99ffd  certmonger-0.75.5.tar.gz.sig