Changelog
ssl-cert (1.0.19ubuntu1) intrepid; urgency=low
* Merge from debian unstable, remaining changes:
- replace known vulnerable weak keys and certificates caused by
Debian openssl bug (CVE-2008-0166).
- debian/control: Depends on openssl (0.9.8g-4ubuntu3.1),
openssl-blacklist.
- debian/templates: add critical debconf note.
- debian/postinst: regenerate snakeoil key and certificate on upgrade if
vulnerable.
- debian/control:
- Update Maintainer field and VCS-* fields.
ssl-cert (1.0.19) unstable; urgency=low
* Improve man page, thanks to Olivier Berger (closes: #481451).
* Update translations:
- Italian (thanks to Luca Monducci, closes: #479359)
- Galician (thanks to Jacobo Tarrio, closes: #480969)
ssl-cert (1.0.18) unstable; urgency=low
* Update translations:
- Spanish (thanks to Javier Fernández-Sanguino Peña, closes: #473408)
- German (thanks to Erik Schanze, closes: #473307)
ssl-cert (1.0.17) unstable; urgency=low
* If DNS does not work, use unqualified hostname for snakeoil cert instead
of exiting with an error (Closes: #469073).
* Update translations:
- French (thanks to Christian Perrier, closes: #467129)
- Finnish (thanks to Esko Arajärvi, closes: #468545)
* Add myself to uploaders. Remove Fabio M. Di Nitto and Thom May. Thanks for
your past work.
* Add VCS tags to debian/control.
* Bump standards version (no changes).
ssl-cert (1.0.16) unstable; urgency=low
* Get rid of RANDFILE and just use /dev/urandom instead. Closes: #465279
* Update Swedish translation. Closes: #446258
* Update Brazilian translation. Closes: #448511
* Add Japanese translation. Closes: #465679
ssl-cert (1.0.15) unstable; urgency=low
* Use 'hostname -f' for the snakeoil CN instead of 'hostname', since
relative hostnames are subject to namespace collisions that could be
exploited (and also because OpenLDAP doesn't care for them when
connecting to localhost). Thanks to Steve Langasek for the patch.
Closes: 464930
* Debconf templates and debian/control reviewed by the debian-l10n-
english team as part of the Smith review project. Closes: #445589
* [Debconf translation updates]
* Bulgarian. Closes: #446210
* Galician. Closes: #446488
* Spanish; Castilian. Closes: #446311
* Finnish. Closes: #446640
* Czech. Closes: #446670
* Portuguese. Closes: #446679
* Finnish. Closes: #446640
* Turkish. Closes: #446878
* Vietnamese. Closes: #446900
* Basque. Closes: #447138
* Italian. Closes: #447441
* Russian. Closes: #447900
* Slovak. Closes: #447909
* German. Closes: #447921
* French. Closes: #448226
* Do getent group rather than getent passwd in postinst. Closes: 444902
* Make the default SSL cert have a lifetime of 10 years rather than 30
days. Closes: 293821
* Add set -e to postinst and postrm. Closes: 384591
* Make default openssl config pull RANDFILE from the environment.
Closes: 384595.
* Only ask for hostname, drop questions about country, organisation and
such. Closes: 230391, 287692.
* Handle relative output file paths correctly by using basename when
symlinking to the hash file. Closes: 292157.
* Fix lintian warnings (clean-should-be-satisfied-by-build-depends
debhelper and newer-debconf-templates).
* Add buid-dependency on po-debconf.
-- Mathias Gug <email address hidden> Thu, 05 Jun 2008 19:15:47 -0400
