[Pkg-freeipa-devel] certmonger: Changes to 'refs/tags/debian/0.79.3-1'
Timo Aaltonen
tjaalton at moszumanska.debian.org
Mon Aug 7 14:58:44 UTC 2017
Tag 'debian/0.79.3-1' created by Timo Aaltonen <tjaalton at debian.org> at 2017-08-07 14:58 +0000
tagging package certmonger version debian/0.79.3-1
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=GUbv
-----END PGP SIGNATURE-----
Changes since debian/0.78.6-4:
Fraser Tweedale (2):
Fix dates test for southern hemisphere DST
Add 'issuer' request option for specifying issuer
Lukas Slebodnik (4):
Fix warning excess elements in struct initializer
Fix warning passing argument from incompatible pointer type
Include missing header file
AUTOTOOLS: Fix warning AC_LANG_CONFTEST: no AC_LANG_SOURCE call detected in body
Mikhail Efremov (1):
certsave: Don't try to destroy destroyed object
Nalin Dahyabhai (118):
Get vague about what we expect from certutil
Sync with 0.78.1
Drop workarounds for DSA keygen with NSS
Add a wrapper to avoid passing NULL to setenv()
Don't check a never-NULL pointer for being NULL
Fix checking for errors when fetching SCEP chain
Don't forget to close the output file structure
Register our bus name after setting up handlers
Rework how we do system bus activation
tag 0.78.2
Use UUIDs for filenames and default IDs
Try to clarify some SCEP diagnostic messages
Use poptGetOptArg() correctly
tag 0.78.3
Use a temporary to hold poptGetOptArg() values
Add info on troubleshooting to SCEP presentation
Packaging: use the D-Bus API call to reload config
When we get an error from a pkcsReq, log correctly
Teach "modify" about key size and type
Add a man page for getcert's "rekey"(1) command
Install the getcert-rekey(1) man page
Add cross-references to man pages
Fix "getcert start-tracking"'s -L and -l options
tag 0.78.4
Tweak scep-submit's errors when it needs data
Mark some strings for translation that weren't
scep-submit: rename a variable
Tweak the rest of scep-submit's need-data errors
Suppress need-scep-data logs from scep-submit
Update translations
Accept cases where NSS insists on 2048-bit DSA
Fix a possible uninitialized memory read
Add some detail to getcert popt errors
Add longopts for requesting basic constraints
Handle POPT_ERROR_BADCONFIG not being defined
Log a diagnostic when we fail to initialize krb5
Fix a compiler warning
Fix a syntax error (whoops)
Document -R/-N/-o in dogtag-ipa-renew-agent-submit
Document dogtag-ipa-renew-agent-submit's -t flag
Stop assuming RSA 512 works
Check for NSS_OptionGet/NSS_OptionSet
Stop assuming RSA 512 works, part two
Merge tagging of 0.78.6 from the 0.78 branch
scep: correct GetCAChain to GetCACertChain
Add some more to-do items to the STATUS list
Add a note about helpers.txt to submit.txt
Recognize a couple of OIDs from IEC 62351
Fix a memory leak in a subprocess
Describe the IPA server location logic
Log the submit helper's environment when debugging
Add iteration through JSON objects
Improve handling for certificates with short lives
submit-d: rename a few variables for readability
helpers.txt: note what's mandatory or optional
scep-submit: URL encode CA identifiers
Add a few example helpers in Python
ipa-submit: better describe when -K is needed
Fix test14 since "Improve handling for certif..."
Documentation: mark $CERTMONGER_CA_ISSUER as 0.79
Comment/whitespace fixup
ipa-submit: Retry without "ca" on OptionError
getcert: fix a potential out-of-bounds
Document the -X option in the ipa-submit man page
helpers: add detail to "couldn't read CSR" errors
Fix a possible crash doing server location
ipa-submit: add options for using Basic auth
Display timestamps in 'getcert list' in local time
Fix a flakiness in the 028-dbus test
Display timestamps in notifications in local time
Drop tlslayer*
Pass proxy-related environment to subprocesses
Fix a potential uninitialized memory bug
Add a couple of missing header includes
Make checks for "MAC verified OK" message optional
Handle the correct version from 'openssl req'
Handle X509 version being optional in tests
Add an alternate correct 028 output for non-DSA
Remove unused cm_submit_n_nid_from_tag()
Remove a macro we weren't using
Factor out cert_cmp
Go back to timestamp-based identifiers for now
Build with -DOPENSSL_NO_DEPRECATED
Add missing includes of <inttypes.h>
Simplify pkcs7 issuerissued()
Finish porting to OpenSSL 1.1
Don't depend on i2d_X509_EXTENSIONS
Call X509_check_purpose before reading ex_kusage
Avoid a variable reuse in get_ostring_attribute
Go back to ensuring proper sorting of SCEP attribs
Add some docker build configurations
Correct a couple of typos: DBMite isn't a thing
Disable maintainer mode by default
Merge #67 `Fix a potential uninitialized memory bug`
Merge #69 `Build on OpenSSL 1.1`
Merge #70 `Fix a couple of typos in configure messages, disable maintainer mode by default`
Merge #68 `Add some docker build configurations`
Use both 'client' and default flags from xmlrpc-c
Update project overview
Tag 0.79
Update translations
Fix the 'archive' target
Tag 0.79.1
Fix saving of test results when builddir != srcdir
Fix test 028 when builddir != srcdir
Fix test 032 when builddir != srcdir
Fix test 033 when builddir != srcdir
Make installation of D-Bus configs optional
Don't use wildcards in EXTRA_DIST
Fix 'make dist' in tools when builddir != srcdir
Work around .deps in subdirs confusing distcheck
Have 'make clean' remove tests results
Package alternate correct 028 output for non-DSA
Make 'distcheck' in containers, not just 'check'
Make 'make archive' default to cloning 'origin'
Tag 0.79.2
Fix conversions of bit lengths to byte lengths
Tag 0.79.3
Timo Aaltonen (9):
Merge tag 'certmonger-0.78.6' into m
Merge branch 'master' into m
New upstream release.
control, copyright, watch: Update urls.
patches: Drop nspr4_path, refresh others.
control: Migrate to OpenSSL 1.1. (Closes: #851088)
control, use-dbus-run-session.diff: Use dbus-run-session instead of dbus- launch in tests. (Closes: #836084)
rules: Enable parallel build.
releasing package certmonger version 0.79.3-1
Tomas Mraz (1):
Replace RAND_pseudo_bytes() with RAND_bytes()
---
Makefile.am | 7
README | 39
README.md | 46
STATUS | 11
certmonger.spec | 70
configure.ac | 105 +
dbus/Makefile.am | 4
debian/changelog | 12
debian/control | 6
debian/copyright | 2
debian/patches/fix-keythi-h-path.diff | 4
debian/patches/nspr4_path | 17
debian/patches/series | 2
debian/patches/use-dbus-run-session.diff | 31
debian/rules | 2
debian/watch | 4
doc/api.txt | 2
doc/helpers.txt | 18
doc/helpers/anchor-submit.py | 117 +
doc/helpers/local-cryptography.py | 337 ++++
doc/helpers/proxy-submit.py | 124 +
doc/scep.odp |binary
doc/submit.txt | 5
po/POTFILES.in | 4
po/ach.po | 1072 +++++++++-----
po/af.po | 1072 +++++++++-----
po/af_ZA.po | 1072 +++++++++-----
po/aln.po | 1072 +++++++++-----
po/am.po | 1072 +++++++++-----
po/ar.po | 1072 +++++++++-----
po/as.po | 1072 +++++++++-----
po/ast.po | 1072 +++++++++-----
po/az.po | 1072 +++++++++-----
po/bal.po | 1072 +++++++++-----
po/be.po | 1072 +++++++++-----
po/bg.po | 1109 +++++++++-----
po/bn.po | 1072 +++++++++-----
po/bn_IN.po | 1072 +++++++++-----
po/bo.po | 1072 +++++++++-----
po/br.po | 1072 +++++++++-----
po/brx.po | 1072 +++++++++-----
po/bs.po | 1072 +++++++++-----
po/ca.po | 1189 +++++++++------
po/certmonger.pot | 1076 +++++++++-----
po/cs.po | 1072 +++++++++-----
po/cs_CZ.po | 1074 +++++++++-----
po/cy.po | 1072 +++++++++-----
po/da.po | 1111 +++++++++-----
po/de.po | 1119 +++++++++-----
po/de_CH.po | 1072 +++++++++-----
po/dz.po | 1072 +++++++++-----
po/el.po | 1072 +++++++++-----
po/en_GB.po | 1072 +++++++++-----
po/eo.po | 1072 +++++++++-----
po/es.po | 1502 ++++++++++++--------
po/es_ES.po | 1072 +++++++++-----
po/et.po | 1072 +++++++++-----
po/eu.po | 1097 +++++++++-----
po/eu_ES.po | 1072 +++++++++-----
po/fa.po | 1072 +++++++++-----
po/fa_IR.po | 1072 +++++++++-----
po/fi.po | 1072 +++++++++-----
po/fr.po | 1116 +++++++++-----
po/ga.po | 1072 +++++++++-----
po/gl.po | 1072 +++++++++-----
po/gu.po | 1098 +++++++++-----
po/he.po | 1072 +++++++++-----
po/hi.po | 1072 +++++++++-----
po/hr.po | 1072 +++++++++-----
po/hr_HR.po | 1072 +++++++++-----
po/hu.po | 1177 +++++++++------
po/hy.po | 1072 +++++++++-----
po/ia.po | 1072 +++++++++-----
po/id.po | 1109 +++++++++-----
po/ilo.po | 1072 +++++++++-----
po/is.po | 1072 +++++++++-----
po/it.po | 1111 +++++++++-----
po/it_IT.po | 1072 +++++++++-----
po/ja.po | 1218 ++++++++++------
po/ja_JP.po | 1072 +++++++++-----
po/ka.po | 1072 +++++++++-----
po/kk.po | 1072 +++++++++-----
po/km.po | 1072 +++++++++-----
po/kn.po | 1072 +++++++++-----
po/ko.po | 1072 +++++++++-----
po/ks.po | 1072 +++++++++-----
po/ku.po | 1072 +++++++++-----
po/ky.po | 1072 +++++++++-----
po/la.po | 1072 +++++++++-----
po/lo.po | 1072 +++++++++-----
po/lt.po | 1120 +++++++++-----
po/lv.po | 1072 +++++++++-----
po/mai.po | 1072 +++++++++-----
po/mg.po | 1072 +++++++++-----
po/mk.po | 1072 +++++++++-----
po/ml.po | 1072 +++++++++-----
po/mn.po | 1072 +++++++++-----
po/mr.po | 1072 +++++++++-----
po/ms.po | 1072 +++++++++-----
po/ms_MY.po | 1072 +++++++++-----
po/my.po | 1072 +++++++++-----
po/nb.po | 1098 +++++++++-----
po/nds.po | 1072 +++++++++-----
po/ne.po | 1072 +++++++++-----
po/nl.po | 1128 +++++++++------
po/nn.po | 1072 +++++++++-----
po/no.po | 1072 +++++++++-----
po/nso.po | 1072 +++++++++-----
po/or.po | 1072 +++++++++-----
po/pa.po | 1072 +++++++++-----
po/pl.po | 1644 +++++++++++++---------
po/pt.po | 1118 +++++++++-----
po/pt_BR.po | 1223 ++++++++++------
po/ro.po | 1072 +++++++++-----
po/ru.po | 1105 +++++++++-----
po/ru_RU.po | 1072 +++++++++-----
po/si.po | 1072 +++++++++-----
po/sk.po | 1072 +++++++++-----
po/sl.po | 1072 +++++++++-----
po/sq.po | 1072 +++++++++-----
po/sr.po | 1072 +++++++++-----
po/sr at latin.po | 1072 +++++++++-----
po/sv.po | 1480 +++++++++++--------
po/ta.po | 1096 +++++++++-----
po/ta_IN.po | 1072 +++++++++-----
po/te.po | 1072 +++++++++-----
po/tg.po | 1072 +++++++++-----
po/th.po | 1072 +++++++++-----
po/tl.po | 1072 +++++++++-----
po/tr.po | 1096 +++++++++-----
po/uk.po | 1467 +++++++++++--------
po/uk_UA.po | 1072 +++++++++-----
po/ur.po | 1072 +++++++++-----
po/uz.po | 1072 +++++++++-----
po/vi.po | 1072 +++++++++-----
po/wo.po | 1072 +++++++++-----
po/xh.po | 1072 +++++++++-----
po/zh_CN.GB2312.po | 1072 +++++++++-----
po/zh_CN.po | 1127 +++++++++------
po/zh_HK.po | 1072 +++++++++-----
po/zh_TW.Big5.po | 1072 +++++++++-----
po/zh_TW.po | 1111 +++++++++-----
po/zu.po | 1072 +++++++++-----
src/Makefile.am | 12
src/cadata.c | 2
src/certext.c | 6
src/certmaster-getcert.1.in | 1
src/certmaster.c | 9
src/certmonger-certmaster-submit.8.in | 2
src/certmonger-dogtag-ipa-renew-agent-submit.8.in | 2
src/certmonger-dogtag-submit.8.in | 2
src/certmonger-ipa-submit.8.in | 58
src/certmonger-local-submit.8.in | 2
src/certmonger-scep-submit.8.in | 2
src/certmonger.8.in | 2
src/certsave-n.c | 2
src/certsave-o.c | 5
src/cm.c | 2
src/csrgen-n.c | 5
src/csrgen-o.c | 39
src/csrgen.c | 4
src/csrgen.h | 4
src/dogtag.c | 8
src/getcert-add-ca.1.in | 1
src/getcert-add-scep-ca.1.in | 1
src/getcert-list-cas.1.in | 1
src/getcert-list.1.in | 6
src/getcert-modify-ca.1.in | 1
src/getcert-refresh-ca.1.in | 2
src/getcert-refresh.1.in | 1
src/getcert-rekey.1.in | 180 ++
src/getcert-remove-ca.1.in | 1
src/getcert-request.1.in | 4
src/getcert-resubmit.1.in | 4
src/getcert-start-tracking.1.in | 4
src/getcert-status.1.in | 1
src/getcert-stop-tracking.1.in | 1
src/getcert.1.in | 1
src/getcert.c | 217 ++
src/ipa-getcert.1.in | 1
src/ipa.c | 100 +
src/iterate.c | 58
src/json.c | 14
src/keygen-n.c | 40
src/keygen-o.c | 2
src/keyiread-n.c | 7
src/keyiread-o.c | 6
src/local-getcert.1.in | 1
src/local.c | 20
src/main.c | 2
src/notify.c | 162 --
src/oiddict.c | 2
src/pkcs7.c | 115 -
src/prefs-o.c | 9
src/scep.c | 52
src/scepgen-n.c | 35
src/scepgen-o.c | 70
src/selfsign-getcert.1.in | 1
src/srvloc.c | 11
src/srvloc.h | 2
src/store-files.c | 90 +
src/store-gen.c | 24
src/store-int.h | 1
src/store.h | 5
src/submit-d.c | 20
src/submit-e.c | 22
src/submit-e.h | 1
src/submit-n.c | 43
src/submit-o.c | 204 ++
src/submit-o.h | 3
src/submit-x.c | 35
src/submit-x.h | 1
src/subproc.c | 67
src/tdbus.c | 2
src/tdbus.h | 1
src/tdbush.c | 63
src/tdbusm.c | 5
src/tlslayer-int.h | 44
src/tlslayer-n.c | 209 --
src/tlslayer-o.c | 100 -
src/tlslayer.c | 247 ---
src/tlslayer.h | 37
src/util-o.c | 449 +++++-
src/util-o.h | 42
tests/001-keyiread-dsa/expected.out | 21
tests/001-keyiread-dsa/expected.out.2048 | 4
tests/001-keyiread-dsa/run.sh | 12
tests/002-keygen-dsa/expected.out | 3
tests/002-keygen-dsa/expected.out.2 | 3
tests/002-keygen-dsa/expected.out.3 | 3
tests/002-keygen-dsa/run.sh | 2
tests/003-csrgen-dsa/run.sh | 2
tests/003-csrgen-ec/run.sh | 2
tests/003-csrgen-rsa/expected.out | 5
tests/003-csrgen-rsa/run.sh | 2
tests/003-csrgen/expected.out | 5
tests/003-csrgen/run.sh | 2
tests/010-iterate/expected.out | 42
tests/010-iterate/run.sh | 2
tests/014-prefs/expected.out | 8
tests/026-local/expected.out | 2
tests/026-local/run.sh | 2
tests/028-dbus/expected.out | 2
tests/028-dbus/expected.out.nodsa | 1038 +++++++++++++
tests/028-dbus/run.sh | 4
tests/028-dbus/walk.py | 8
tests/032-chain/run.sh | 2
tests/033-scep/run.sh | 2
tests/Makefile.am | 205 ++
tests/docker/build-and-test.sh | 22
tests/docker/generate.sh | 83 +
tests/run-tests.sh | 1
tests/tools/Makefile.am | 17
tests/tools/checksig.c | 4
tests/tools/csrgen.c | 5
tests/tools/dates.c | 1
tests/tools/json-utf8.c | 5
tests/tools/json.c | 5
tests/tools/keyiread.c | 24
tests/tools/pk7decrypt.c | 8
tests/tools/pk7verify.c | 8
tests/tools/srv.c | 5
262 files changed, 86371 insertions(+), 49732 deletions(-)
---
More information about the Pkg-freeipa-devel
mailing list