easy-rsa/easy-rsa.changes

228 lines
8.4 KiB
Plaintext
Raw Normal View History

-------------------------------------------------------------------
Tue Dec 13 23:09:09 UTC 2022 - Olav Reinert <seroton10@gmail.com>
- fix for 3.1.1:
* add patch fix-747.patch from upstream
-------------------------------------------------------------------
Sat Dec 3 19:41:33 UTC 2022 - Dirk Müller <dmueller@suse.com>
- update to 3.1.1:
* Remove command 'renewable' (#715)
* Expand 'show-renew', include 'renewed/certs_by_serial' (#700)
* Resolve long-standing issue with --subca-len=N (#691)
* ++ NOTICE: Add EasyRSA-Renew-and-Revoke.md (#690)
* Require 'openssl-easyrsa.cnf' is up to date (#695}
* Introduce 'renew' (version 3). Only renew cert (#688)
* Always ensure X509-types files exist (#581 #696)
* Expand alias '--days' to all suitable options with a period (#674)
* Introduce --keep-tmp, keep temp files for debugging (#667)
* Introduce Option -q|--quiet, disable information output (#703)
* Add serialNumber (OID 2.5.4.5) to DN 'org' mode (#606)
* Support ampersand and dollar-sign in vars file (#590)
* Introduce 'rewind-renew' (#579)
* Expand status reports to include checking a single cert (#577)
* Introduce 'revoke-renewed' (#547)
* update OpenSSL for Windows to 3.0.5
-------------------------------------------------------------------
Mon Sep 5 16:23:46 UTC 2022 - Florian "spirit" <packaging@sp1rit.anonaddy.me>
- Update to 3.1.0 (2022-05-18)
* Introduce basic support for OpenSSL version 3 (#492)
* Update regex in grep to be POSIX compliant (#556)
* Introduce status reporting tools (#555 & #557)
* Display certificates using UTF8 (#551)
* Allow certificates to be created with fixed date offset (#550)
* Add 'verify' to verify certificate against CA (#549)
* Add PKCS#12 alias 'friendlyName' (#544)
* Disallow use of '--vars=FILE init-pki' (#566)
* Support multiple IP-Addresses in SAN (#564)
* Add option '--renew-days=NN', custom renew grace period (#557)
* Add 'nopass' option to the 'export-pkcs' functions (#411)
* Add support for 'busybox' (#543)
* Add option '--tmp-dir=DIR' to declare Temp-dir (Commit f503a22)
-------------------------------------------------------------------
Wed Jun 15 19:12:30 UTC 2022 - Olav Reinert <seroton10@gmail.com>
- Update to 3.0.9 (2022-05-04)
* Upgrade OpenSSL from 1.1.0j to 1.1.1o (#405, #407)
- We are buliding this ourselves now.
* Fix --version so it uses EASYRSA_OPENSSL (#416)
* Use openssl rand instead of non-POSIX mktemp (#478)
* Fix paths with spaces (#443)
* Correct OpenSSL version from Homebrew on macOs (#416)
* Fix revoking a renewed certificate (Original PR #394)
* Follow-up commit: ef22701
* Introduce 'show-crl' (d199389)
* Support Windows-Git 'version of bash' (#533)
* Disallow use of single quote (') in vars file, Warning (#530)
* Creating a CA uses x509-types/ca and COMMON (#526)
* Prefer 'PKI/vars' over all other locations (#528)
* Introduce 'init-pki soft' option (#197)
* Warnings are no longer silenced by --batch (#523)
* Improve packaging options (#510)
-------------------------------------------------------------------
Wed Nov 25 16:48:19 UTC 2020 - Olav Reinert <seroton10@gmail.com>
- update to 3.0.8 (2020-09-09)
* Provide --version option (#372)
* Version information now within generated certificates like on *nix
* Fixed issue where gen-dh overwrote existing files without warning (#373)
* Fixed issue with ED/EC certificates were still signed by RSA (#374)
* Added support for export-p8 (#339)
* Clarified error message (#384)
* 2->3 upgrade now errors and prints message when vars isn't found (#377)
* Update OpenSSL Windows binaries to 1.1.1g
* Reverted OpenSSL back to 1.1.0j
-------------------------------------------------------------------
Tue Feb 12 12:26:17 UTC 2019 - Tuukka Pasanen <tuukka.pasanen@ilmi.fi>
- update to 3.0.6 (2019-02-01)
* Certifcates that are revoked now move to a revoked subdirectory (#63)
* EasyRSA no longer clobbers non-EASYRSA environment variables (#277)
* More sane string checking, allowingn for commas in CN (#267)
* Support for reasonCode in CRL (#280)
* Better handling for capturing passphrases (#230, others)
* Improved LibreSSL/MacOS support
* Adds support to renew certificates up to 30 days before expiration (#286)
- This changes previous behavior allowing for certificate creation using
duplicate CNs.
- update and rebase suse-packaging.patch
-------------------------------------------------------------------
Fri Nov 30 11:10:10 UTC 2018 - chris@computersalat.de
- update to 3.0.5
* Fix #17 & #58: use AES256 for CA key
* Also, don't use read -s, use stty -echo
* Fix broken "nopass" option
* Add -r to read to stop errors reported by shellcheck (and to behave)
* remove overzealous quotes around $pkcs_opts (more SC errors)
- update and rebase suse-packaging.patch
* fix: set_var EASYRSA in vars.example
- fix License
-------------------------------------------------------------------
Sun Jan 28 19:05:46 UTC 2018 - seroton10@gmail.com
- Upgrade to version 3.0.4
* Remove use of egrep (#154)
* Finally(?) fix the subjectAltName issues (really fixes #168)
- Improve RPM description
-------------------------------------------------------------------
Wed Oct 18 08:40:40 UTC 2017 - astieger@suse.com
- update release tarball instead of git snapshot
- add upstream signing keyring and verify source signature
-------------------------------------------------------------------
Mon Oct 16 06:38:49 UTC 2017 - seroton10@gmail.com
- Update to version 3.0.3
- Rename easy-rsa-packaging.patch to suse-packaging.patch
- Remove obsolete upstream patches:
* f174800.patch
* 29d4dee.patch
* b93d0a1.patch
* fb4d8d8.patch
* b75faa4.patch
* 6436eaf.patch
* e9e8e27.patch
* 534f673.patch
* d20d2b3.patch
* 4eac410.patch
* a138c0d.patch
* 83a1a21.patch
-------------------------------------------------------------------
Wed Aug 23 09:06:23 UTC 2017 - seroton10@gmail.com
- Include upstream patches:
+ 4eac410.patch
Fix string comprehension
+ a138c0d.patch
Fix incorrect "openssl rand" usage
+ 83a1a21.patch
Add --copy-ext option
-------------------------------------------------------------------
Fri Jul 28 21:27:09 UTC 2017 - seroton10@gmail.com
- Include upstream patches:
+ d20d2b3.patch
Update docs and examples to fit changes in 534f673
- Adapted easy-rsa-packaging.patch to work with upstream patch
-------------------------------------------------------------------
Mon Jul 24 23:04:34 UTC 2017 - seroton10@gmail.com
- Include upstream patches:
+ 534f673.patch
Make $PWD/pki the default PKI location
- Adapted easy-rsa-packaging.patch to work with upstream patch
- Treat /etc/easy-rsa as public default config, no default vars
-------------------------------------------------------------------
Tue Jul 18 18:32:22 UTC 2017 - seroton10@gmail.com
- Include upstream patches:
+ 6436eaf.patch
Add CN as SAN (if none requested) on server certs by default
+ e9e8e27.patch
Moved @ValdikSS's serial randomization to sign_req
-------------------------------------------------------------------
Mon Jun 5 18:38:00 UTC 2017 - seroton10@gmail.com
- Undo removal of .md suffix on markdown documentation
-------------------------------------------------------------------
Sat May 27 07:30:22 UTC 2017 - bruno@ioda-net.ch
- Add special %if for SLE11 as patch tool can't rename files.
- Include upstream patches
+ f174800.patch
Generate random serial number for all certificates
+ 29d4dee.patch
Fixes #91 basename: invalid option -- 's'
+ b93d0a1.patch
Spelling fixes and sentence structure improvements
+ fb4d8d8.patch
Fix comment indicating the end of the function verify_file()
+ b75faa4.patch
Convert README and COPYING into markdown files
- Rename openSUSE specific patch easyrsa.packaging.patch to
easy-rsa-packaging.patch
- spec-cleaner -m (Add also SUSE copyrights)
-------------------------------------------------------------------
Sat Jan 2 21:13:06 UTC 2016 - projects@localside.net
- update to version 3.0.1
* cab4a07 Fix typo: Hellman
(ljani: Github)
* 171834d Fix typo: Default
(allo-: Github)
* 8b42eea Make aes256 default, replacing 3des
(keros: Github)
* f2f4ac8 Make -utf8 default
(roubert: Github)
-------------------------------------------------------------------
Sun Apr 5 19:48:24 UTC 2015 - projects@localside.net
- initial upload: 3.0.0-rc2 (2014/07/27)