323 lines
11 KiB
Plaintext
323 lines
11 KiB
Plaintext
|
-------------------------------------------------------------------
|
||
|
Thu Apr 06 08:03:11 UTC 2023 - lnussel@suse.de
|
||
|
|
||
|
- Update to version 2+git20230406.2dae8b7:
|
||
|
* Build in place support
|
||
|
* Fix up argument parsing
|
||
|
* merge spec file into git
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Mon Oct 04 08:21:06 UTC 2021 - lnussel@suse.de
|
||
|
|
||
|
- Update to version 2+git20211004.3efbea9:
|
||
|
* Ensure --root option propagates prefix properly to other scripts
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Fri Jul 23 12:26:17 UTC 2021 - lnussel@suse.de
|
||
|
|
||
|
- Update to version 2+git20210723.27a0476:
|
||
|
* Don't trigger path unit on /usr/share
|
||
|
* Use flock to serialize calls (boo#1188500)
|
||
|
* Add --root <directory> option
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Wed Jun 09 15:03:55 UTC 2021 - lnussel@suse.de
|
||
|
|
||
|
- Update to version 2+git20210609.a4969d7:
|
||
|
* Restore /etc/ssl/ca-bundle.pem if it doesn't exist
|
||
|
* Get rid of ls
|
||
|
* Fix indent inconsistencies
|
||
|
* Create /var/lib/ca-certificates if needed
|
||
|
* Install hooks with correct number
|
||
|
* Remove legacy files
|
||
|
* Remove find from update-ca-certificates
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Thu Mar 18 17:22:38 UTC 2021 - Ludwig Nussel <lnussel@suse.de>
|
||
|
|
||
|
- openssl command line tools are no longer required, p11-kit does
|
||
|
the job.
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Tue Mar 09 10:43:52 UTC 2021 - lnussel@suse.de
|
||
|
|
||
|
- Update to version 2+git20210309.8214505:
|
||
|
* Make sure to trigger in transactional mode (boo#1179884)
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Mon Jan 11 10:42:13 UTC 2021 - lnussel@suse.de
|
||
|
|
||
|
- Update to version 2+git20210111.eeae41c:
|
||
|
* Make certbundle.run container friendly
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Fri Oct 02 12:53:48 UTC 2020 - lnussel@suse.de
|
||
|
|
||
|
- Update to version 2+git20201002.34daf7f:
|
||
|
* Use relative symlink for /etc/ssl/certs (boo#1175340)
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Wed Apr 15 09:35:06 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
|
||
|
|
||
|
- Remove old migration code, we don't support migration from such
|
||
|
old products anymore.
|
||
|
- Use file requires to support busybox container if possible
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Wed Jan 29 16:58:22 UTC 2020 - lnussel@suse.de
|
||
|
|
||
|
- Update to version 2+git20200129.d1a437d:
|
||
|
* rewrite in bash
|
||
|
* java.run: don't set LANG=en_US
|
||
|
- no longer require openssl, it's all done by p11-kit
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Thu Sep 20 18:23:03 UTC 2018 - Jason Sikes <jsikes@suse.de>
|
||
|
|
||
|
- Changed "openssl" requirement to "openssl(cli)"
|
||
|
* (bsc#1101470)
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Tue Mar 20 13:39:33 CET 2018 - kukuk@suse.de
|
||
|
|
||
|
- Use %license instead of %doc [bsc#1082318]
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Thu Dec 14 17:22:55 CET 2017 - kukuk@suse.de
|
||
|
|
||
|
- Revert last change since we fixed systemd-preset-branding and
|
||
|
this requires is no longer needed.
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Fri Dec 8 07:20:49 UTC 2017 - kukuk@suse.com
|
||
|
|
||
|
- Re-add systemd requires, else package will be installed to early
|
||
|
and services never enabled [bsc#1071776].
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Thu Nov 23 16:03:55 CET 2017 - kukuk@suse.de
|
||
|
|
||
|
- Don't require systemd, since we could be used in environments
|
||
|
like container images, where we don't have systemd. If systemd
|
||
|
is installed the systemd units will be used, else they are not
|
||
|
needed.
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Mon Aug 07 13:58:01 UTC 2017 - lnussel@suse.de
|
||
|
|
||
|
- Update to version 2+git20170807.10b2785:
|
||
|
* Check TRANSACTIONAL_UPDATE is set (boo#1045942)
|
||
|
* Add systemd units
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Mon Jun 19 13:31:02 CEST 2017 - kukuk@suse.de
|
||
|
|
||
|
- Run update-ca-certificate by systemd unit when the content of
|
||
|
one of the paths changes. Needed for read-only root and/or
|
||
|
transactional updates.
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Wed Nov 11 08:18:47 UTC 2015 - lnussel@suse.de
|
||
|
|
||
|
- Update to version 2+git20151110.c15593c:
|
||
|
+ set proper umask (boo#948724)
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Wed Mar 25 08:12:28 UTC 2015 - lnussel@suse.de
|
||
|
|
||
|
- require p11-kit-tools >= 0.23.1
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Tue Mar 24 10:30:21 UTC 2015 - lnussel@suse.de
|
||
|
|
||
|
- Update to version 2+git20150324.e3ee392:
|
||
|
+ p11-kit 0.23.1 supports pem-directory-hash now
|
||
|
- use service file to generate tarball
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Sat Nov 08 04:32:00 UTC 2014 - Led <ledest@gmail.com>
|
||
|
|
||
|
- fix bashism in postun script
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Tue Aug 5 11:09:24 UTC 2014 - lnussel@suse.de
|
||
|
|
||
|
- use rpm -qf to determine if a ssl cert is owned by some other
|
||
|
package and therefore doesn't need to be migrated (related to
|
||
|
bnc#890205).
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Mon Aug 4 15:35:27 UTC 2014 - lnussel@suse.de
|
||
|
|
||
|
- add p11 kit header to set label of migrated certificates to the
|
||
|
file name of the previous one (bnc#890205)
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Wed Jul 30 11:45:54 UTC 2014 - lnussel@suse.de
|
||
|
|
||
|
- removed the version in the Obsoletes. The package in SLE11 got
|
||
|
version updated (bnc#887099).
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Thu Jul 17 09:51:16 UTC 2014 - meissner@suse.com
|
||
|
|
||
|
- clarify the start order of the generators, as certbundle.run
|
||
|
semi-depends on etc_ssl.run via a timestamp. (bnc#883386)
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Mon Jun 23 15:24:13 UTC 2014 - lnussel@suse.de
|
||
|
|
||
|
- fix directory permissions for real this time (bnc#871639)
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Wed Jun 4 11:10:24 UTC 2014 - lnussel@suse.de
|
||
|
|
||
|
- don't keep certificates with marker (bnc#875647)
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Thu May 8 15:41:43 UTC 2014 - lnussel@suse.de
|
||
|
|
||
|
- copy custom pem files in /etc/ssl/certs to /etc/pki/anchors on
|
||
|
update (bnc#875647)
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Mon Apr 7 15:07:44 UTC 2014 - lnussel@suse.de
|
||
|
|
||
|
- Fix typo in man page
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Fri Apr 4 11:38:17 UTC 2014 - lnussel@suse.de
|
||
|
|
||
|
- package correct permissions of generated directories (bnc#871639)
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Fri Dec 6 09:16:11 UTC 2013 - lnussel@suse.de
|
||
|
|
||
|
- etc_ssl.run: fix typo
|
||
|
- turn /etc/ssl/certs into a symlink to /var/lib/ca-certificates/pem
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Wed Oct 16 15:11:26 UTC 2013 - lnussel@suse.de
|
||
|
|
||
|
- fix typo in README (bnc#845500)
|
||
|
- remove old extractcerts.pl
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Tue Aug 27 12:53:44 UTC 2013 - lnussel@suse.de
|
||
|
|
||
|
- re-enable the CA bundle again for glib-networking (bnc#825903)
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Tue Aug 27 07:11:04 UTC 2013 - lnussel@suse.de
|
||
|
|
||
|
- make sure we have p11-kit >= 0.19.3 which has the 'trust' command
|
||
|
(bnc#836560)
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Mon Aug 5 11:24:04 UTC 2013 - lnussel@suse.de
|
||
|
|
||
|
- don't remove symlinks to other locations in /etc/ssl/certs
|
||
|
- use the trust binary instead of p11-kit to extract trust
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Thu Jun 27 16:17:51 UTC 2013 - lnussel@suse.de
|
||
|
|
||
|
- disable generating ca-bundle for now again so people don't submit
|
||
|
new packages that use this file.
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Mon Jun 24 21:09:16 UTC 2013 - hrvoje.senjan@gmail.com
|
||
|
|
||
|
- Explicitly require p11-kit, otherwise trusted certificates won't
|
||
|
be generated
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Mon Jun 24 12:46:30 UTC 2013 - lnussel@suse.de
|
||
|
|
||
|
- update manpage
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Thu Jun 20 09:15:52 UTC 2013 - lnussel@suse.de
|
||
|
|
||
|
- use p11-kit to generate the files
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Fri May 4 11:55:14 UTC 2012 - lnussel@suse.de
|
||
|
|
||
|
- give hint about SSL_CTX_set_default_verify_paths in cert bundle
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Mon Oct 24 11:57:53 UTC 2011 - coolo@suse.com
|
||
|
|
||
|
- require coreutils for %post script
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Mon Jun 20 12:49:52 UTC 2011 - lnussel@suse.de
|
||
|
|
||
|
- fix spurious rpm warning if no java exists (bnc#634793)
|
||
|
- move java.run to java-ca-certificates
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Mon Sep 27 14:58:03 UTC 2010 - lnussel@suse.de
|
||
|
|
||
|
- catch FileNotFoundException (bnc#623365)
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Fri May 21 12:46:55 UTC 2010 - mvyskocil@suse.cz
|
||
|
|
||
|
* Use the gcc-java and fastjar for build to avoid dependency problems
|
||
|
* build keystore.class only to allow noarch package
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Wed May 19 09:57:41 UTC 2010 - lnussel@suse.de
|
||
|
|
||
|
- create java bundles
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Tue Apr 27 14:17:24 UTC 2010 - lnussel@suse.de
|
||
|
|
||
|
- also use hooks from /usr/lib/ca-certificates/update.d
|
||
|
- replace bundle file with symlink to file in /var as it's auto
|
||
|
generated
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Wed Apr 21 13:20:07 UTC 2010 - lnussel@suse.de
|
||
|
|
||
|
- force rebuilding all certificate stores in %post
|
||
|
This also makes sure we update the hash links in /etc/ssl/certs
|
||
|
as openssl changed the hash format between 0.9.8 and 1.0
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Thu Apr 8 13:16:43 UTC 2010 - lnussel@suse.de
|
||
|
|
||
|
- actually install certbundle.run (bnc#594501)
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Thu Apr 8 09:15:28 UTC 2010 - lnussel@suse.de
|
||
|
|
||
|
- it's ca-bundle.pem rather than cert.pem
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Thu Apr 8 07:51:25 UTC 2010 - lnussel@suse.de
|
||
|
|
||
|
- obsolete openssl-certs (bnc#594434)
|
||
|
- update manpage (bnc#594501)
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Thu Apr 1 13:00:37 UTC 2010 - lnussel@suse.de
|
||
|
|
||
|
- include /etc/ca-certificates.conf as %ghost
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Fri Mar 26 15:26:01 UTC 2010 - lnussel@suse.de
|
||
|
|
||
|
- generate ca-bundle with hook script
|
||
|
- don't use trusted certificates in ca-bundle file for compatibility
|
||
|
with gnutls
|
||
|
|
||
|
-------------------------------------------------------------------
|
||
|
Wed Mar 24 10:31:47 UTC 2010 - lnussel@suse.de
|
||
|
|
||
|
- new package
|
||
|
|