<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en">
<head>
<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">
<title>
GitLab
</title>
<style>img {
max-width: 100%; height: auto;
}
</style>
</head>
<body>
<div class="content">
<h3>
Timo Aaltonen pushed to branch upstream
at <a href="https://salsa.debian.org/freeipa-team/certmonger">FreeIPA packaging / certmonger</a>
</h3>
<h4>
Commits:
</h4>
<ul>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/f9342db638cc9a8a312f19cc019f05824bcd3b7c">f9342db6</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-04-14T11:50:17-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Improve logging in SCEP helper
Always check return value of cm_pkcs7_verify_signed() and return
a unique error message.
Change log level from 1 to 0 for all errors in scep.c and pkcs7.c
so they appear by default.
Centralize logging across scep.c and pkcs7.c to reduce code
duplication.
Check the return code to cm_pkcs7_verify_signed in all cases.
Add the last available message, if any, to the error returned
via stdout to certmonger as a hint to what is going on.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/58cc1f2638f7c369fddb8daaff5b953105365a23">58cc1f26</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-04-14T11:50:17-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add verbose option to SCEP CA if requested in add-scep-ca
This option was silently dropped from the helper arguments even
if requested on the add-scep-ca CLI and was only passed to the
dbus helper.
Add as many -v as requested though the scep helper only logs at
most at level 1.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/3881b8a968248702d7c2bc504a0495d5fdf21a8d">3881b8a9</a></strong>
<div>
<span>by Your Name</span>
<i>at 2020-04-15T18:39:55-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Cleanup the SCEP helper curl and talloc contexts when finished
The talloc context was freed in only a few cases and the curl
context was never freed.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/71f5fbdbcddd464711a15d94e8c73cb598f837dd">71f5fbdb</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-04-17T10:16:46-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Re-order the way the SCEP signing and CA certs are collected
Put cacert into the ca store, the racert at the top of the
othercerts list. Then we parse certs, placing all ca certs
we find into the ca store, and all other certs we find after
the racert.
Variables are renamed to match the cm_pkcs7_parse() and
cm_pkcs7_verify_signed() calls.
A special case for IPA (dogtag) was added because dogtag
uses its CA cert to sign the PKCS7 so it is both an RA cert
and a CA cert. If a self-signed CA is detected and no other
certs are provided then the CA is treated as the RA.
https://bugzilla.redhat.com/show_bug.cgi?id=1808052
Graham Leggett did the majority of the work on this patch.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/230b640e67ea27db59d59dd7bef776638ac005dc">230b640e</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-04-17T16:57:44-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add new option to allow overriding the detected SCEP CA chain
The -R option was doing double-duty for the SCEP CA.
1. It was required if the SCEP URL used TLS
2. It override the CA certificate downloaded from the SCEP server
If the chains were different then validating the SCEP responses would
fail.
https://bugzilla.redhat.com/show_bug.cgi?id=1808613
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/01b6db9dc2170f8a31a5f52b737c157e24871d07">01b6db9d</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-04-24T13:30:59-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">template_profile, issuer and MS certificat template are single-value
These can only be single valued so trying to retrieve them as
multi-value will always return NULL. Use the single API instead
to correctly retrieve and display the values.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/2e617297d8972021e07f01ba06dc2fa6451edd75">2e617297</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-04-28T15:03:48-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix broken -N option, helper argument list
There was an extra NULL value which caused it to not work.
A %s was missing from the argument format string.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/f78f6eb06cdd803073f8e368921681e1986ee7ea">f78f6eb0</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-05-01T16:02:20-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ensure that files read in have a trailing new-line
In SCEP when retrieving the CA chain the certificates passed in
on the command-line (RA agent and CA cert) area printed along with
the contents of what was retrieved remotely.
If one of the filesystem certificates lacks a newline then the
output will be jumbled like:
-----END CERTIFICATE----------BEGIN CERTIFICATE-----\n
https://bugzilla.redhat.com/show_bug.cgi?id=1814976
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/39ce89ec821d02643681795d2149b20198f0fe42">39ce89ec</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-05-08T11:43:37-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Adapt to the new behavior of disconnect in dbus-broker
The dbus server was replaced in Fedora-29 to use dbus-broker.
This server does not allow reconnects on a disconnect. certmonger
was crashing as a result.
The only way to directly pass a message between the dbus queue and
the main tevent handle is via a signal. So when a disconnect is
detected send a SIGTERM to getpid() in order to force a graceful
shutdown.
https://bugzilla.redhat.com/show_bug.cgi?id=1687698
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/525a9b4fcc2401cae044526626c6d15b83c07731">525a9b4f</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-05-14T13:31:41-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add long command-line options to man pages
The man pages almost universally only documented the short
options even though the long options were all defined in
the popt configuration.
Also do a bit of minor bit of reformatting and added a lint
option. I'm not going to require mandoc as a requirement as
the linting is pretty minor at the moment but it's better than
nothing.
https://bugzilla.redhat.com/show_bug.cgi?id=1782838
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/6bf7aef2b5b5840cad6cff038e3d13998da6eb01">6bf7aef2</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-05-14T13:31:41-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add long options to command-line help
The command-line help mostly consisted of only the short options.
Add the long-option and clean up some of the output.
https://bugzilla.redhat.com/show_bug.cgi?id=1782838
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/5c21bcbc0c189777b8cad8658c47d2cfb4cbd2e5">5c21bcbc</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-01T13:28:17-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Include &message=CA-IDENT with GetCACaps and GetCACert requests
The guttman spec is quite unclear on this and in the GetCACaps
section doesn't mention &message at all. It only appears in the
generic GET requests section 4.1
The nourse spec is clearer and requires &message=CA-IDENT on
GetCACaps requests.
AD 2012 R2 servers also require message on GetCACert requests.
This reverts much of 60a4db5796b0575ca2cc9f1af4ecb3fdc6359242
https://bugzilla.redhat.com/show_bug.cgi?id=1839181
https://pagure.io/certmonger/issue/103
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/41a7946bf9e207b63ac3a49eba42fe7e573ee917">41a7946b</a></strong>
<div>
<span>by Stanislav Levin</span>
<i>at 2020-06-09T11:28:25+03:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">configure: Fix detection of supported NSS db type
For now configure always reports about the lack of support for
any NSS db:
checking if NSS supports "sql:" databases... no
checking if NSS supports "dbm:" databases... no
Actually, there is the linking issue, but AC_TRY_RUN is not
designed to detect this.
The recipe is the obeying the proper linking order:
$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS
Fixes: https://pagure.io/certmonger/issue/153
Signed-off-by: Stanislav Levin <slev@altlinux.org>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/1fa94e536b1f0b3dfed3732680d8a930ae86ebfc">1fa94e53</a></strong>
<div>
<span>by Fraser Tweedale</span>
<i>at 2020-06-18T13:36:13+10:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">dogtag: use POST for profileProcess requests
An upcoming change to Dogtag requires HTTP POST method for
profileProcess operations. Update certmonger to use POST for these
operations.
Fixes: https://pagure.io/freeipa/issue/8373
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/3668f5e0d8a19c20e20db079b4d5e67d8abfa03f">3668f5e0</a></strong>
<div>
<span>by Stanislav Levin</span>
<i>at 2020-06-24T18:05:23-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">tests: Split the NSS db specific tests
If NSS is configured with NSS_DISABLE_DBM then Certmonger's tests
which are related to DBM fail. The legacy NSS db type(DBM) will be
eventually disabled. Thus, Certmonger should handle this.
NSS db specific tests are placed under the corresponding
HAVE_SQL_NSSDB and HAVE_DBM_NSSDB sections.
Fixes: https://pagure.io/certmonger/issue/155
Signed-off-by: Stanislav Levin <slev@altlinux.org>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/1bba4075fc5bf232af811e22acfeee9f51f553e2">1bba4075</a></strong>
<div>
<span>by Stanislav Levin</span>
<i>at 2020-06-24T18:05:23-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">tests: Parametrize 025-casave with NSS db types
This test fails against NSS having disabled DBM.
Fixes: https://pagure.io/certmonger/issue/155
Signed-off-by: Stanislav Levin <slev@altlinux.org>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/3c74b97af4222ba88cba340673f1d5d11c9c0b47">3c74b97a</a></strong>
<div>
<span>by Stanislav Levin</span>
<i>at 2020-06-24T18:05:23-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">make: Add missing files to clean up and to distribute
Fixes: https://pagure.io/certmonger/issue/155
Signed-off-by: Stanislav Levin <slev@altlinux.org>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/1e61e1114c9a692bcc41ed5cd06a8f42bcdd1abc">1e61e111</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-24T18:19:44-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Handle an uninitialized token when adding CA certs to an NSS db
The getcert -a option will add the CA chain to an NSS database.
It will create this database if it doesn't already exist. For
sqlite database it is created with an uninitialized PIN. Catch
this condition and set an empty PIN.
Related to: https://pagure.io/certmonger/issue/155
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/ad15bc64b25fa67738a450053e7ba806cf78d552">ad15bc64</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-25T17:25:24-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix memory leak
Free t allocated in cm_store_base64_to_bin() if PK11_HashBuf()
fails.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/28147cb335cfcbef9eb00715718208f39a728e37">28147cb3</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-25T17:25:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix uninitialized value
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/6fdf6f3e146e84f45947c52ffe10b0e9389fe149">6fdf6f3e</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-25T17:25:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add all enumeration values to prefs test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/2175884bb171f8ff27017fdec155b79631364775">2175884b</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-25T17:25:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add missing return value declaration to ca_get_config_file_path()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/cac3f50a3373d1fb3ecc1b0529b1487127756b8a">cac3f50a</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-25T17:25:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Drop const from csr and csre declaration
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/e1d8de9d6b2ba31b3096434de2abc44ef1f9c694">e1d8de9d</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-25T17:25:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Check that sent_nonce is not NULL to avoid a potential NULL compare
Theoretically if sent_nonce is NULL then the length would be 0
but don't assume this is the case.
Discovered by clang.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/dc7e33314b6cfb24834049ff078e12e9243b67c1">dc7e3331</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-25T17:25:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Make a Kerberos ccache if one doesn't already exist
This was embedding the logic into a conditional to set a variable
that isn't used beyond this point.
Discovered by clang.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/cde4c3bf429a8e2bc7cfa2f7952f9073fab13324">cde4c3bf</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-25T17:25:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix memory leak determining the dogtag operation
This code scans through the state cookie to determine what operation
it is executing: review, fetch or retrieve. The intermediate values
used were not freed.
Discovered by clang.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/fe84c918cc6ff0026e678dd08d777c6f12acf37e">fe84c918</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-25T17:25:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Free the csr value after generating the request
The value of the csr is being embedded into the request URI.
It isn't used again.
Discovered by clang.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/fbcf03dd44007a9b231e9396cc418a00e1a4b49a">fbcf03dd</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-25T17:25:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Free the submit options on exit
A number -o name=value pairs can be passed in. Free the memory
allocated to store those name/value pairs on exit.
Discovered by clang.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/9f6693dadfed200e18a1b942e4243a102963da89">9f6693da</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-25T17:25:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Free the approval options on exit
A number -O name=value pairs can be passed in. Free the memory
allocated to store those name/value pairs on exit.
Discovered by clang.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/f3d248bbadf1f5ec53cba3eb6b3a3b4dcbc20abc">f3d248bb</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-25T17:25:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Free profile, issuer and/or csr on incorrect usage
The values were allocated prior to exit, do proper cleanup.
Discovered by clang.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/62ef421b3443adc16fc7460d31d2609155df76e5">62ef421b</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-25T17:25:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Break after finding a defaultNamingContext value
There can only be a single defaultNamingContext so stop processing
entries if one is found. This should theoretically never hit because
there should be only one entry but just in case this will prevent
leaking memory.
Discovered by clang.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/92796b8927d8cbb3b9cfc899d331548721abc37e">92796b89</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-25T17:25:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix memory leak
defaults is allocated by cm_submit_d_xml_defaults() so free the
value when we are done with it.
Discovered by clang.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/d087c99551cfbcea887abe7ad1d0cf645bebdf3e">d087c995</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-25T17:25:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix memory leak
skey is duplicated, free it when done with it.
Discovered by clang.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/c0567cf3f9cffc24cebebf407150508bc19c5748">c0567cf3</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-25T17:25:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Return NULL if realloc of CSR fails in cm_submit_u_from_file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/7c20afd2ffef2d4bba94ff5c513dec6dd01e0c32">7c20afd2</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-25T17:25:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix memory leak of old_keyfile in cm_certsave_o_main
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/09200f4333c832293283d1cb35c9bb6f81d35748">09200f43</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-25T17:25:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Check for NSS_Shutdown and context failures and exit
This is not likely since a successful Init/Shutdown combination
just happened but safety first.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/c279d71173c68ede01dd5225b47172c1e94f5b6b">c279d711</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-25T17:25:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Avoid a modulo by zero
range (tweight) could be 0 so check for that before getting the
mod of r.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/7d65601f4238e65078592b3486e47ad564f00134">7d65601f</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-25T17:25:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Avoid memory overrun when adding NULL byte, fix memory leak
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/c1287becc7731aba68ea5f8ca29bb3f9d67a32ec">c1287bec</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-25T17:25:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">More aoptions/soptions fixups
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/aee33d31c3ba2a7625caa1ca6600601ca010ac27">aee33d31</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-25T17:25:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Include NSPR header so PR_PR_ErrorToString() is defined
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/6a6962ca6bb574fe08cc0ae99767c0dc61832c88">6a6962ca</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-25T17:25:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix memory leak, always free buf
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/d5fd17d8121665c1546c67fea8008a908f3f9c41">d5fd17d8</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-25T17:25:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Free XML objects on errors
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/d2fde991831c2cb07808c18a55d382c03eeed56b">d2fde991</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-25T17:25:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Terminate string passed to cm_pkcs7_envelope_ias in tests
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/d40c22c41c0713328c75ae5cecbb81e1f32ec61a">d40c22c4</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-25T17:25:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Avoid NULL dereference if strchr() returns NULL
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/63d54706be598391c3a4f580e44c5c0b2a832a03">63d54706</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-25T17:25:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Don't allow unitialized value in a conditional
If newcert is NULL then error is undefined (probably 0) which could
lead to the code thinking the certificate imported.
If the certificate wasn't decoded then set error to SECFailure
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/d3c470902c1ca8846c573a15d006337224584d82">d3c47090</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-26T16:03:28-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Change linkage for cm_submit_u_from_file test in fromfile.c
I tried some crazy linkage but it was segfaulting for no
apparent reason. Including the file directly fixes it and still
tests that \n is appended to read files and that is sufficient.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/a643fc5809c0557e9f503a6f294d906211d18b0b">a643fc58</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-26T16:07:30-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tag 0.79.10
Signed-off-by: Rob Crittenden <rcritten@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/49a9cc352d6035416fc71c43d03fb26050dabe88">49a9cc35</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-30T11:33:43-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Revert part of 7d65601f4238e65078592b3486e47ad564f00134
The free() was causing a sigabrt and was in effect freeing
the return value.
https://pagure.io/certmonger/issue/161
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/certmonger/-/commit/14f75bf805fbfbf9caf33958afd211c99170f59b">14f75bf8</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-06-30T13:17:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tag 0.79.11
Signed-off-by: Rob Crittenden <rcritten@redhat.com>
</pre>
</li>
</ul>
<h4>30 changed files:</h4>
<ul>
<li class="file-stats">
<a href="#552183f11039fa0be5545439c6aed0cb7f87aaaf">
certmonger.spec
</a>
</li>
<li class="file-stats">
<a href="#87db583be5c13c1f7b3c958b10e03d67b6a2ca06">
configure.ac
</a>
</li>
<li class="file-stats">
<a href="#67e794015a01b8816bd16290e5f8538236da8245">
src/Makefile.am
</a>
</li>
<li class="file-stats">
<a href="#e216c08ba59fbbeffe832bf44406d3e6ec963373">
src/casave.c
</a>
</li>
<li class="file-stats">
<a href="#7b48edff20f3204d41c94954c859bc516f4bede1">
src/certmaster-getcert.1.in
</a>
</li>
<li class="file-stats">
<a href="#3cb3e5190ecbd45667993995c655f8d7ecaf013d">
src/certmonger-certmaster-submit.8.in
</a>
</li>
<li class="file-stats">
<a href="#df2a61687d266cda17479af6e3abc4a64713f6f6">
src/certmonger-dogtag-ipa-renew-agent-submit.8.in
</a>
</li>
<li class="file-stats">
<a href="#bb7721b086b391a71643f459ff70fe34937245c4">
src/certmonger-dogtag-submit.8.in
</a>
</li>
<li class="file-stats">
<a href="#b3ddad5a5928760f0da785e0a8a45c021220d8b9">
src/certmonger-ipa-submit.8.in
</a>
</li>
<li class="file-stats">
<a href="#2572be92d78dd7f3c2755688409c41517f9c11e0">
src/certmonger-local-submit.8.in
</a>
</li>
<li class="file-stats">
<a href="#717b2fdb00b6e33beefbee65574fef08b830d2fb">
src/certmonger-scep-submit.8.in
</a>
</li>
<li class="file-stats">
<a href="#244d7f827720713869eba2864cbe8a79c62415f9">
src/certmonger.8.in
</a>
</li>
<li class="file-stats">
<a href="#165ea860ba5851db1d4d9fa902d9a1bf2ca364df">
src/certmonger.conf.5.in
</a>
</li>
<li class="file-stats">
<a href="#20c5e44084de01f38689fad3adc921d82b2a9e0c">
src/certread-n.c
</a>
</li>
<li class="file-stats">
<a href="#184c38a65b832113e5887ea82257b218d083b5a9">
src/certsave-n.c
</a>
</li>
<li class="file-stats">
<a href="#bc4dda0d28267e831c978adfbe699adafdb31edc">
src/certsave-o.c
</a>
</li>
<li class="file-stats">
<a href="#f318fa9da1a481f4522274e02fc77591b350d316">
src/csrgen-o.c
</a>
</li>
<li class="file-stats">
<a href="#6f25d8e31adc735a622e8c2e6a9f2524e1e878f2">
src/dogtag.c
</a>
</li>
<li class="file-stats">
<a href="#41bd5b16a166b9809a7b7e75443f06cdc4d44051">
src/getcert-add-ca.1.in
</a>
</li>
<li class="file-stats">
<a href="#5b0d4143efd40fcf649610ba2867f1fb322364a4">
src/getcert-add-scep-ca.1.in
</a>
</li>
<li class="file-stats">
<a href="#e84b3d61c5a5047adc0b6189d7e6ed3202d67235">
src/getcert-list-cas.1.in
</a>
</li>
<li class="file-stats">
<a href="#05d6a911f5b0508f63c25eba33094b1a15218cc5">
src/getcert-list.1.in
</a>
</li>
<li class="file-stats">
<a href="#8dd47ebc49682a60489b10a53a6dd6dbd434260a">
src/getcert-modify-ca.1.in
</a>
</li>
<li class="file-stats">
<a href="#0fe290faf59eff081c911d92ce7e7d2c0094dfb6">
src/getcert-refresh-ca.1.in
</a>
</li>
<li class="file-stats">
<a href="#69f1c4026790d6ac58112b2aa5a78da441887f8d">
src/getcert-refresh.1.in
</a>
</li>
<li class="file-stats">
<a href="#c124db6818b1e7f4846e759216fedb5204b5eee5">
src/getcert-rekey.1.in
</a>
</li>
<li class="file-stats">
<a href="#10c0765344201ddd99279aee80f9b98a9b1a5ba0">
src/getcert-remove-ca.1.in
</a>
</li>
<li class="file-stats">
<a href="#7d0408724cc3ef6bed075e2cb2cd2773b7d49dbe">
src/getcert-request.1.in
</a>
</li>
<li class="file-stats">
<a href="#e49340f1d1663a37580613255408f207d4ae1616">
src/getcert-resubmit.1.in
</a>
</li>
<li class="file-stats">
<a href="#a829b592f6ccf8670ed91b7fcc64a011489b52f5">
src/getcert-start-tracking.1.in
</a>
</li>
</ul>
<h5>The diff was not included because it is too large.</h5>
</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #777;">
—
<br>
<a href="https://salsa.debian.org/freeipa-team/certmonger/-/compare/e433bea8cfccdefbf0d2b58059eb914ee1a3e01e...14f75bf805fbfbf9caf33958afd211c99170f59b">View it on GitLab</a>.
<br>
You're receiving this email because of your account on salsa.debian.org.
If you'd like to receive fewer emails, you can
adjust your notification settings.
</p>
</div>
</body>
</html>