<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en">
<head>
<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">
<title>
GitLab
</title>
<style>img {
max-width: 100%; height: auto;
}
</style>
</head>
<body>
<div class="content">
<h3>
Timo Aaltonen pushed to branch upstream
at <a href="https://salsa.debian.org/freeipa-team/certmonger">FreeIPA packaging / certmonger</a>
</h3>
<h4>
Commits:
</h4>
<ul>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/60a4db5796b0575ca2cc9f1af4ecb3fdc6359242">60a4db57</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2018-07-26T17:46:35-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">No message=<ca ident> from GetCACaps, GetCACert, drop GetCACertChain
In the SCEP Gutmann 10 spec there are no message=<ca ident> defined
for the GetCACaps or GetCACert commands. The nourse 23 spec still
defines this but it is optional. Don't send it at all.
GetCACertChain doesn't exist at all in gutmann and was dropped in
revision 19 by nourse.
https://pagure.io/certmonger/issue/103
Signed-off-by: Rob Crittenden <rcritten@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/3da0e186904ad81dd87cf74bfae88270f14bb770">3da0e186</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2018-09-25T09:08:48-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Use the correct slot when saving certificates in NSS
Certificates were always stored in the NSS certdb.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/c029b32c04a9a5993b9c8715fb82421fee613137">c029b32c</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2018-09-25T09:08:48-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Include the token name when a PIN is provided but is unused
This improves the output so the user will know which token
the PIN is missing for. Theoretically it should be the token
they asked for but this will show certmogner's view of it.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/f396b19b2c222fa0a50e9bb9704059af4578e678">f396b19b</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2018-09-25T09:08:48-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add utility function to get the internal token name
The NSS internal token is the default if no token is specified for
the cert or the key.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/6ebe5695a626c6cd254b249bbebf9846bcb936c0">6ebe5695</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2018-09-25T09:08:48-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Only de-duplicate certificates within the same token
certmonger may not have read/write access to tokens other than
the one it is examining so don't try to de-duplicate certificates
on other tokens.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/697dd085e7b2ce15eefc454509987270131d7f1e">697dd085</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2018-09-25T09:08:48-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ensure that an OpenSSL random seed file exists when testing
Otherwise some openssl command-line invocations will fail and
because of the way the tests are done the error message is not
shown.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/e93ecadec7c868f4227e084ffb65c70a6efd7314">e93ecade</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2018-09-25T09:08:48-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Log test failures of bad pin
Previously this would show a "don't know why" failure.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/15d406ee3afbb52832d5c61a1afb735724d109a2">15d406ee</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2018-09-25T09:08:48-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Use only PK11_ImportCert to import certs, not CERT_ImportCerts
CERT_ImportCerts always imports a given certificate into the
certificate database, whether a token is requested or not.
Using PK11_ImportCert will import the cert, associate the key
properly and will only add the certificate to the appropriate
token.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/5d2554ed31fa6bc121d94efe533f9e4fea3900aa">5d2554ed</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2018-10-04T08:40:52-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix memory leak in util_internal_token_name()
Allocate memory using the talloc context instead of relying on
the caller to call free().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/648fe74986f2a84416805cfd73206e9e67166ae2">648fe749</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2018-10-04T08:40:52-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">clang: Dead assignment
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/3310a25181e94f5e05e671acc12d008cbac339ab">3310a251</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2018-10-04T08:40:52-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">clang: Memory leak
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/db0f835829b739cf843d44b08c22407194aadd71">db0f8358</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2018-10-04T08:40:52-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">clang: Uninitialized initial value
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/753d98b3e70f34a52caabbe8db30bf06fc917f38">753d98b3</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2018-10-04T08:40:52-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">clang: Null pointer passed as an argument to a 'nonnull' parameter
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/9e44680dbd207cef48beb7598114ea59aa457055">9e44680d</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2018-10-04T08:40:52-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">clang: Dead increment
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/319858127df42c1a95b9b3282705c90ecd6754a5">31985812</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2018-10-04T08:40:52-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">clang: Dereference of null pointer
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/f17b7c0a22f4d49dca001d984673046e133577d1">f17b7c0a</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2018-10-04T08:40:52-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add missing case for cm_prefs_aes192
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/ba4c5049e9f83677c3a10f2b14ae70153715ccc4">ba4c5049</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2018-11-07T14:32:57-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Improve documentation around multiple values for subjectAltName
https://pagure.io/certmonger/issue/105
Signed-off-by: Rob Crittenden <rcritten@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/c793d281ed73b08a13871fdd82a3101daff0dd0b">c793d281</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2018-11-21T11:50:37-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Use ldap_str2dn to convert a subject into a DN
Previously certmonger was parsing the subject itself using
commas which didn't account for escaping. Instead rely on
LDAP DN parsing.
https://pagure.io/certmonger/issue/90
Signed-off-by: Rob Crittenden <rcritten@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/47a60740b6aab81a221351094652d0ed3c09c568">47a60740</a></strong>
<div>
<span>by Fraser Tweedale</span>
<i>at 2018-11-21T11:53:57-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">csrgen-o: handle multi-value RDNs and log dropped AVAs
The existing procedure only took the first AVA from each RDN.
Update the X509_NAME construction procedure to preserve multi-valued
RDNs.
X509_NAME_add_entry_by_txt() requires attribute short names ("CN",
"O", etc) to be in upper case, otherwise it fails to add the
attribute. Explicitly convert the user input to an Object ID
(ASN1_OBJECT) and if it fails, upper case the string and retry.
Log when an AVA cannot be added to the X509_NAME (typically because
the attribute type is not recognised).
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/bf91c2841f81469224400d0435a5b9b24046f988">bf91c284</a></strong>
<div>
<span>by Fraser Tweedale</span>
<i>at 2018-11-21T11:54:30-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">csrgen-o: extract X509_NAME creation subroutines
The codes that turns a string into an X509_NAME are big, complex and
way too deeply indented. Extract these to two separate subroutines.
`ldap_dn_to_X509_NAME` tries to turn a string DN into an X509_NAME.
`cn_to_X509_NAME` take a whole string and uses it as the CN in a
single-AVA X509_NAME.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/632fc96cf21381814f843e0c3160011477bef6e7">632fc96c</a></strong>
<div>
<span>by Fraser Tweedale</span>
<i>at 2019-02-11T13:33:15+11:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">test handling of DNs with escaped chars
We were not testing handling of DNs with escaped characters. Update
the csrgen test to check this.
Part of: https://pagure.io/certmonger/issue/90
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/d4e43d20b6e7d38b32c8952653005996f9c7e1b2">d4e43d20</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2019-02-21T08:10:44-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tag 0.79.7
Signed-off-by: Rob Crittenden <rcritten@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/c2687bdf550f65756aef2cada53e18530ad402c9">c2687bdf</a></strong>
<div>
<span>by Orion Poplawski</span>
<i>at 2019-05-20T10:05:34-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Change /var/run -> /run in systemd service file
systemd 239 complains about the legacy of certmonger's PID file which is
located in /var/run.
Signed-off-by: Orion Poplawski <orion@nwra.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/3ea833dfb2f669f057dc1619644250c25063533f">3ea833df</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2019-05-21T10:21:32-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Drop tests for 1024 and 1536-bit keys
Nobody should be using keys this small at this point so there is
no need to test for them. Also, on Fedora and RHEL they are
disallowed by system-wide crypto policy.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/7736d3935117800b6cfcaaab5da9e30a5b39ae12">7736d393</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2019-05-22T14:56:37-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move systemd tmpfiles from /var/run to /run
systemd 239 complains about the legacy of certmonger's tmpfiles
which are located in /var/run.
https://pagure.io/certmonger/issue/111
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/ff0bce09054adcd554491bc288f5e4f72643cc9f">ff0bce09</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2019-07-17T17:11:38+00:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Display profile, MS template and requested issuer if available
Include more optional fields in the getcert list output.
https://pagure.io/certmonger/issue/117
Signed-off-by: Rob Crittenden <rcritten@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/c9b7c40fe7db988f17c69c8d375fd4a1b9cda69a">c9b7c40f</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2019-07-17T13:15:33-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tag 0.79.8
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/8c4ace528c8af2e05ea737cdafdaad0d9e4d8e37">8c4ace52</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2019-07-26T13:40:02+00:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Document key/cert file owner and mode options
The owner and permission options were available but not
documented either on the command-line or in the man page.
Affects request, resubmit and start-tracking commands.
https://bugzilla.redhat.com/show_bug.cgi?id=1549585
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/bcd76416733e01378b02fcabf37e09ba0c33313a">bcd76416</a></strong>
<div>
<span>by Stanislav Levin</span>
<i>at 2019-08-14T12:34:39+03:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Sync nodsa expectations in dbus tests
Fixes: https://pagure.io/certmonger/issue/122
Signed-off-by: Stanislav Levin <slev@altlinux.org>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/7b065fba15777024e62855151da1f70d92bf3f36">7b065fba</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2019-09-03T10:31:05-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Allow principal to be set during start-tracking
It was previously silently dropped by start-tracking.
This is handy in an IPA environment for tracking certificates
that don't have the principal encoded into the certificate
itself.
https://pagure.io/certmonger/issue/127
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/59df833ca5fb80c596df621a24dc461a550dba71">59df833c</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2019-09-04T14:06:51-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update tests to include the security module DB in expected output
certmonger was previously always initializing the databases with
the flag NSS_INIT_NOMODDB but in at elast NSS 3.44 this doesn't
seem to initialize external modules (tested with SoftHSM2).
https://pagure.io/certmonger/issue/125
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/34c120f0259750ff2228def2955de9ad985340e6">34c120f0</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2019-09-04T14:06:51-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove NOMODDB flag flag from context init, look for full tokens
The NSS databases were almost universally initialized with the
NOMODDB flag. I'm not sure if something changed in NSS but the
PKCS#11 modules were not being initialized. Adding this back after
permission checks are done results in tokens working again.
When looking for certs and keys try the full token:nickname string
as well as just nickname when comparing values.
https://pagure.io/certmonger/issue/125
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/c10e0f6f318e7b52efc3a122e3f7ba9818206caf">c10e0f6f</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2019-09-06T13:43:13-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Pass the CA identifier to the SCEP submit helper
Patch contributed by Alexy Dotsenko
https://pagure.io/certmonger/issue/58
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/023cfd2a43dd8132e2c10f572081a924cea357b1">023cfd2a</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2019-09-06T13:44:16-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix re-key after importing existing private key
If the key_gen size and algorithm are not set then set it
with the current key. This is important when generating a
certificate using a pre-existing private key.
Previously a resubmit would cause certmonger to generate a new
2048-bit key regardless of the previous key size.
https://pagure.io/certmonger/issue/124
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/9bbb628620d4e586941344e1bdbbc166a885c0a9">9bbb6286</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2019-09-06T13:45:30-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Optimize closing open file descriptors
When forking, the code would close all unused file descriptors up
to maximum number of files. In the default case this is 1024. In
the container case this is 1048576. Huge delays in startup were
seen due to this.
Even in a default 1024 ulimit case this drastically reduces the
number of file descriptors to mark FD_CLOEXEC but in the container
default case this saves another order of magnitude of work.
This patch takes inspiration from systemd[1] and walks /proc/self/fd
if it is available to determine the list of open descriptors. It
falls back to the "close all fds we don't care about up to limit"
method.
https://bugzilla.redhat.com/show_bug.cgi?id=1656519
[1] https://github.com/systemd/systemd/blob/5238e9575906297608ff802a27e2ff9effa3b338/src/basic/fd-util.c#L217
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/b7bcb1b3b953c2052e2d89cb2b3e9d9ccd1b3864">b7bcb1b3</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2019-10-10T16:28:18-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Don't close STDOUT when calling the CA fetch_roots function
cm_subproc_mark_most_cloexec() now closes all open file
descriptors except for up to three requested for stdin, stdout
and stderr. Before the optimization those three were always
left open.
This was causing errors in the IPA helper ipa-server-guard
because it tries to display the contents of stderr which was
always being closed, causing ipa-server-guard to blow up.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/64702b25951ce996532afea7d627612d6bba7451">64702b25</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2019-10-16T16:19:14-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Try to pull the entire CA chain from IPA
IPA originally stored a single cert in cn=cacert which is
what certmonger has always retrieved in fetch_roots. It was
replaced to store cn=certificates as separate entries in order
to more easily support chains and to include additional
metadata about certificates.
Try to pull the chain from that location first and fall back
to cn=cacert if no entries are found.
https://bugzilla.redhat.com/show_bug.cgi?id=1710632
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/205775f73f7eef7b207acccac6b853562adf604b">205775f7</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2019-10-25T16:44:43-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Don't close STDERR when submitting request
cm_subproc_mark_most_cloexec() now closes all open file
descriptors except for up to three requested for stdin, stdout
and stderr. Before the optimization those three were always
left open.
This was causing errors in the IPA helper ipa-server-guard
because it tries to display the contents of stderr which was
always being closed, causing ipa-server-guard to blow up.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/e1f582e34fdd3224c01c842a9214d2950778de80">e1f582e3</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2019-11-08T09:17:45-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Convert tests to use python3
- drop or change shebang to python3
- use $PYTHON when available, default to python3
- convert print statements to the print() function
- remove u"..." literals
- remove Integer literals l and L
- xml Element.getchildren() method is deprecated
- sys.stdout.write -> sys.stdout.buffer.write
https://pagure.io/certmonger/issue/138
Signed-off-by: Rob Crittenden <rcritten@redhat.com>
With contributions from Stanislav Levin <slev@altlinux.org>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/720922b88fb32aeeddca74d01e4824ce8a08910d">720922b8</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-01-31T10:38:19-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix use-after-free issue
The basedn value was freed after the first search but a second
one could be initiated.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/13abd68c7b862719e7b0ed065906cc28c6157a41">13abd68c</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-01-31T10:38:19-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove DSA testing for NSS which disables it in crypto policy
DSA is disabled in DEFAULT crypto policy in F30+
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/e433bea8cfccdefbf0d2b58059eb914ee1a3e01e">e433bea8</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-01-31T10:38:19-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tag 0.79.9
</pre>
</li>
</ul>
<h4>30 changed files:</h4>
<ul>
<li class="file-stats">
<a href="#552183f11039fa0be5545439c6aed0cb7f87aaaf">
certmonger.spec
</a>
</li>
<li class="file-stats">
<a href="#87db583be5c13c1f7b3c958b10e03d67b6a2ca06">
configure.ac
</a>
</li>
<li class="file-stats">
<a href="#f8ef7fd826aea88febb795faf9bdd90b5ff675fa">
doc/helpers.txt
</a>
</li>
<li class="file-stats">
<a href="#67e794015a01b8816bd16290e5f8538236da8245">
src/Makefile.am
</a>
</li>
<li class="file-stats">
<a href="#3e26c38d2cbe699867989b1337bc6e4593f28236">
src/cadata.c
</a>
</li>
<li class="file-stats">
<a href="#e216c08ba59fbbeffe832bf44406d3e6ec963373">
src/casave.c
</a>
</li>
<li class="file-stats">
<a href="#905a00a5fe4e73019e2512c576229e10ddc20610">
src/certmaster.c
</a>
</li>
<li class="file-stats">
<a href="#20c5e44084de01f38689fad3adc921d82b2a9e0c">
src/certread-n.c
</a>
</li>
<li class="file-stats">
<a href="#184c38a65b832113e5887ea82257b218d083b5a9">
src/certsave-n.c
</a>
</li>
<li class="file-stats">
<a href="#bc4dda0d28267e831c978adfbe699adafdb31edc">
src/certsave-o.c
</a>
</li>
<li class="file-stats">
<a href="#f318fa9da1a481f4522274e02fc77591b350d316">
src/csrgen-o.c
</a>
</li>
<li class="file-stats">
<a href="#6f25d8e31adc735a622e8c2e6a9f2524e1e878f2">
src/dogtag.c
</a>
</li>
<li class="file-stats">
<a href="#7d0408724cc3ef6bed075e2cb2cd2773b7d49dbe">
src/getcert-request.1.in
</a>
</li>
<li class="file-stats">
<a href="#e49340f1d1663a37580613255408f207d4ae1616">
src/getcert-resubmit.1.in
</a>
</li>
<li class="file-stats">
<a href="#a829b592f6ccf8670ed91b7fcc64a011489b52f5">
src/getcert-start-tracking.1.in
</a>
</li>
<li class="file-stats">
<a href="#92cbdd624d2f56df6bf67f310c59b6f1dcf6fe46">
src/getcert.c
</a>
</li>
<li class="file-stats">
<a href="#834fb35cfc55c091b92b656f091942ba463bac68">
src/ipa.c
</a>
</li>
<li class="file-stats">
<a href="#39b92f4be3bcd7dfcaa909dac31b8546de0c5dac">
src/keygen-n.c
</a>
</li>
<li class="file-stats">
<a href="#6ccaf17bf207319484685928ac0b4cf8bd023bc8">
src/keyiread-n.c
</a>
</li>
<li class="file-stats">
<a href="#3146773bb5e09e55fe4db7455aff9c8727c8bb6e">
src/keyiread.c
</a>
</li>
<li class="file-stats">
<a href="#495048853b8c23fc00ea0598f4e143b27c3294b4">
src/local.c
</a>
</li>
<li class="file-stats">
<a href="#0a2bf23ff5bae32f13ef6acf75f9aa27310be97f">
src/prefs-o.c
</a>
</li>
<li class="file-stats">
<a href="#318e39433fbc6db0462418fb2d9985e0d4bc2e95">
src/scep.c
</a>
</li>
<li class="file-stats">
<a href="#2a2a991b23dd8258d67139446144765ca9d8a618">
src/scepgen-n.c
</a>
</li>
<li class="file-stats">
<a href="#669fdefc1aa2c1c051294c2ffe4fae307a487d10">
src/srvloc.c
</a>
</li>
<li class="file-stats">
<a href="#dd1af5c1637bf2e42ea7424be71fd26f5afbbc81">
src/store-files.c
</a>
</li>
<li class="file-stats">
<a href="#cd9721bb6e713b689f7bdf10025bb2bd93f5126d">
src/store-gen.c
</a>
</li>
<li class="file-stats">
<a href="#80979a2a33c748c87686deaa47b639b531621144">
src/submit-e.c
</a>
</li>
<li class="file-stats">
<a href="#d9d259e0ce05a3caa39d3e7bc73be05545d5bd29">
src/submit-n.c
</a>
</li>
<li class="file-stats">
<a href="#861a37b6d647410d46e7d010c8540408750b1428">
src/submit-sn.c
</a>
</li>
</ul>
<h5>The diff was not included because it is too large.</h5>
</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #777;">
—
<br>
<a href="https://salsa.debian.org/freeipa-team/certmonger/-/compare/647aaf59dcba62530e1c607bb82fdfd2c3a4aa5b...e433bea8cfccdefbf0d2b58059eb914ee1a3e01e">View it on GitLab</a>.
<br>
You're receiving this email because of your account on salsa.debian.org.
If you'd like to receive fewer emails, you can
adjust your notification settings.
</p>
</div>
</body>
</html>