Files
certmonger/certmonger.changes

157 lines
6.5 KiB
Plaintext
Raw Permalink Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
-------------------------------------------------------------------
Thu Nov 13 09:26:01 UTC 2025 - Thorsten Kukuk <kukuk@suse.com>
- Cleanup dbus dependencies: dbus-send is part of dbus-1-tools
and the %preun does not use any dbus tool nor sed.
-------------------------------------------------------------------
Wed Sep 3 09:38:31 UTC 2025 - Ana Guerrero <ana.guerrero@suse.com>
- Disable failing tests with NSS 3.115.1: 007-certsave-dbm
and 007-certsave-sql 025-casave-dbm
* patch disable_some_tests.patch
-------------------------------------------------------------------
Mon Aug 25 08:20:51 UTC 2025 - Ana Guerrero <ana.guerrero@suse.com>
- Update to 0.79.20
* Fix type error in cm_tdbusm_get_vn
* Adjust parameter type for util_EVP_PKEY_id
* Update tests to be compatible with OpenSSL 3.2
* Switch BR from /usr/include/popt.h to popt-devel
* getcert: return 2 when trying to create a duplicate entry
* getcert: add NULL check to duplicate string compare
* Use correct object path for 'ca' property of request objects in D-Bus API
* Move shell_escape function to util.c
* Add more environment variables to be passed on to the notification command
* Translated using Weblate (Chinese (Simplified) (zh_CN))
* Translated using Weblate (Georgian)
* Translated using Weblate (Russian)
- Remove patches merged upstream
* 0001-Update-tests-to-be-compatible-with-OpenSSL-3.2.patch
* certmonger-c99-01.patch
* certmonger-c99-02.patch
- New patch
* add_some_missing_tests.patch
-------------------------------------------------------------------
Thu Jul 11 17:22:28 UTC 2024 - David Mulder <david.mulder@suse.com>
- Add cm_dont_restart_external.patch (a SUSE specific patch) which
prevents the restart of the cert request for an external ca
(bsc#1221406).
-------------------------------------------------------------------
Fri May 31 19:08:09 UTC 2024 - Martin Jambor <mjambor@suse.com>
- Add certmonger-c99-01.patch and certmonger-c99-02.patch in order to
make the package buildable with GCC 14. Patches originally by
Florian Weimer and from
https://pagure.io/certmonger/pull-request/265 [boo#1221683]
-------------------------------------------------------------------
Mon Mar 18 13:52:53 UTC 2024 - David Mulder <dmulder@suse.com>
- HMAC build requires changes (these requires are missing in SLE).
-------------------------------------------------------------------
Wed Dec 13 08:48:02 UTC 2023 - Otto Hollmann <otto.hollmann@suse.com>
- Update to 0.79.19
* getcert: add-scep-ca: fix help for --ca-cert and --ra-cert
* Don't restrict tokens to CKM_RSA_X_509
* Updated translations from Weblate
- Update to 0.79.18
* Rename DBus service and conf files to match canonical name
* Add missing .TP tags in getcert-resubmit man page
* migrated to SPDX license
* Include owner and perms in getcert list output
* Don't require an NSS database in cm_certread_n_parse
* Add new certs to internal token, try harder to remove on renewal
- Update to 0.79.17
* Respect LDFLAGS settings defined by user
* Switch to CA user when saving NSS certificates
* Translated using Weblate (German)
* Translated using Weblate (Georgian)
- Update to 0.79.16
* Add a PEM validity checker and validate SCEP CA files
* Fix implicit declaration of function PEM_read_bio_X509
* Don't include "NEW" in certificate signing requests
* Verify that the AES-128 is used for encrypting the local CA
* Replace DER-encoded test file with a base64-encoded one
* Correct a bad date in the spec changelog
* Switch to https URLs for Sources, etc.
* Remove dependency on SHA-1
* tests: Test that the CA constraint DER encoding is correct
* Disable DSA in the RPM spec
* Manually build the srpm for the copr CI
* Require jansson >= 2.12
* Mark the current directory as a safe git directory
* Fix usage of PKCS#7 ASN1 attribute retrieval for SCEP keygen
* Translated using Weblate (Chinese (Simplified) (zh_CN))
* Translated using Weblate (Georgian)
* Translated using Weblate (Indonesian)
* Translated using Weblate (Chinese (Simplified) (zh_CN))
* Translated using Weblate (Hungarian)
- Removed 0001-Disable-DSA-in-the-RPM-spec.patch
- Added 0001-Update-tests-to-be-compatible-with-OpenSSL-3.2.patch
-------------------------------------------------------------------
Wed Oct 11 07:03:37 UTC 2023 - Simon Lees <sflees@suse.de>
- dbus-daemon is now split out into a separate package.
-------------------------------------------------------------------
Fri Jun 17 19:47:46 UTC 2022 - Matthew Davis <novell@virtual.drop.net>
- Added 0001-Disable-DSA-in-the-RPM-spec.patch
- Removed 0002-certmonger-return-type.patch.
-------------------------------------------------------------------
Fri Jun 17 19:31:56 UTC 2022 - Matthew Davis <novell@virtual.drop.net>
- Updated to version 0.79.15
- Added minimum libjansson version requirement.
-------------------------------------------------------------------
Mon Jul 26 10:05:33 UTC 2021 - Neal Gompa <ngompa13@gmail.com>
- Use "pkgconfig(systemd)" for the BR to allow hacksaw systemd-mini
package to satisfy dependencies in the openSUSE Build Service.
-------------------------------------------------------------------
Mon Jul 26 03:48:04 UTC 2021 - William Brown <william.brown@suse.com>
- Add buildrequires on systemd which is required for correct installation
of the .service file.
-------------------------------------------------------------------
Sun Feb 28 12:28:48 UTC 2021 - Sasi Olin <hel@lcp.world>
- Update to 0.79.13
-------------------------------------------------------------------
Mon Aug 31 10:30:11 UTC 2020 - Dirk Mueller <dmueller@suse.com>
- update to 0.79.11:
- Fix crash bug when generating thumbprints
- dogtag: use POST for profileProcess requests
- Improve logging in SCEP helper
- Add verbose option to SCEP CA if requested in add-scep-ca
- Re-order the way the SCEP signing and CA certs are collected
- Add new option to allow overriding the detected SCEP CA chain
- template_profile, issuer and MS certificate template are single-value
- Ensure that files read in have a trailing new-line
- Adapt to the new behavior of disconnect in dbus-broker
- Add long command-line options to CLI and man pages
- Include &message=CA-IDENT with GetCACaps and GetCACert requests
- Address issues uncovered by clang and Coverity
- Handle an uninitialized token when adding CA certs to an NSS db
- tests: Parametrize 025-casave with NSS db types
-------------------------------------------------------------------
Sun Apr 12 18:01:28 UTC 2020 - Stasiek Michalski <stasiek@michalski.cc>
- Initial package