Change log for ssl-cert package in Ubuntu

ssl-cert (1.0.39) unstable; urgency=medium

  * Always put the common name also in the SubjectAltName. This is required
    to make newer web browsers happy. Closes: #861185
    The wording in the debconf questions will be adjusted later, to avoid
    having to fix so many translation shortly before the release.

 -- Stefan Fritsch <email address hidden>  Fri, 28 Apr 2017 21:58:22 +0200

Available diffs

• diff from 1.0.38 to 1.0.39 (966 bytes)

ssl-cert (1.0.38) unstable; urgency=medium

  * Update Turkish translation. Thanks to Atila KOÇ. Closes: #807559
  * Update standards version. No changes needed.

 -- Stefan Fritsch <email address hidden>  Sun, 29 May 2016 13:41:52 +0200

Available diffs

• diff from 1.0.37 to 1.0.38 (2.1 KiB)

ssl-cert (1.0.37) unstable; urgency=medium

  [ Jean-Michel Nirgal Vourgère ]
  * Migrated d/copyright to DEP5 format. This fixes a Lintian warning.

 -- Stefan Fritsch <email address hidden>  Sun, 16 Aug 2015 11:33:58 +0200

Available diffs

• diff from 1.0.36 to 1.0.37 (1.4 KiB)

ssl-cert (1.0.36) unstable; urgency=medium


  * Set umask to make sure that the generated key is not world-readable
    for a short timespan while make-ssl-cert runs. Closes: #780828

 -- Stefan Fritsch <email address hidden>  Sun, 29 Mar 2015 22:33:57 +0200

Available diffs

• diff from 1.0.35 to 1.0.36 (567 bytes)

ssl-cert (1.0.35) unstable; urgency=medium


  * Update Vcs-Git URL in control file.
  * Update standards version. No changes needed.

 -- Stefan Fritsch <email address hidden>  Sat, 04 Oct 2014 14:24:55 +0200

Available diffs

• diff from 1.0.34 to 1.0.35 (598 bytes)

ssl-cert (1.0.34) unstable; urgency=medium


  * Switch to SHA2 for newly generated certificates. Closes: #733255
  * Bump Standards-Version (no changes).

 -- Stefan Fritsch <email address hidden>  Thu, 29 May 2014 16:44:30 +0200

Available diffs

• diff from 1.0.33 to 1.0.34 (918 bytes)

ssl-cert (1.0.33) unstable; urgency=low


  * Update Japanese translation, thanks to victory <victory deb gmail com>
    Closes: 712914
  * Mark as Multi-Arch: foreign. Closes: #698787
  * Bump Standards-Version (no changes).
  * Run debconf-updatepo on translations

 -- Stefan Fritsch <email address hidden>  Fri, 02 Aug 2013 23:02:16 +0200

Available diffs

• diff from 1.0.32 to 1.0.33 (1.9 KiB)

ssl-cert (1.0.32) unstable; urgency=low


  * Update Brazilian Portuguese, thanks to J. S. Júnior. Closes: #685887

 -- Stefan Fritsch <email address hidden>  Sun, 26 Aug 2012 19:45:06 +0200

Available diffs

• diff from 1.0.31 to 1.0.32 (1.7 KiB)

ssl-cert (1.0.31) unstable; urgency=low


  * Update Czech translation, thanks to Miroslav Kure. Closes: #678673

 -- Stefan Fritsch <email address hidden>  Sat, 23 Jun 2012 21:03:57 +0200

Available diffs

• diff from 1.0.28ubuntu1 (in Ubuntu) to 1.0.31 (15.5 KiB)

ssl-cert (1.0.28ubuntu0.1) precise-proposed; urgency=low

  * Allow installation of snake-oil cert on systems with fully qualified
    hostnames longer than 64-characters by using the short hostname.
    (LP: #1004682)
 -- Ben Howard <email address hidden>   Mon, 28 May 2012 09:08:19 -0600

Available diffs

• diff from 1.0.28 to 1.0.28ubuntu0.1 (958 bytes)

ssl-cert (1.0.28ubuntu1) quantal; urgency=low

  [ Ben Howard ]
  * If fully qualified domain name is longer than 64 characters, use the
    short hostname. (LP: #1004682)
 -- Scott Moser <email address hidden>   Fri, 25 May 2012 16:50:13 -0400

Available diffs

• diff from 1.0.28 to 1.0.28ubuntu1 (938 bytes)

ssl-cert (1.0.28) unstable; urgency=low

  * Add Danish translation, thanks to Joe Hansen. Closes: #606736
 -- Ubuntu Archive Auto-Sync <email address hidden>   Mon,  13 Dec 2010 15:55:34 +0000

Available diffs

• diff from 1.0.27 to 1.0.28 (1.2 KiB)

ssl-cert (1.0.27) unstable; urgency=low

  * Make default key length 2048 bits. Closes: #598732
 -- Ubuntu Archive Auto-Sync <email address hidden>   Fri,  15 Oct 2010 10:01:06 +0000

Available diffs

• diff from 1.0.26 to 1.0.27 (507 bytes)

ssl-cert (1.0.26) unstable; urgency=low

  * Update Brazilian translation. Thanks to Flamarion Jorge. Closes: #592157
  * Run debconf-updatepo.
  * Switch to source format 3.0.
  * Bump Standards-Version (no changes).
  * Remove Adam Conrad from Uploaders. Thanks for your work in the past.

Available diffs

• diff from 1.0.23ubuntu2 to 1.0.26 (11.0 KiB)

ssl-cert (1.0.23ubuntu2) karmic; urgency=low

  * Fixed comment typo in make-ssl-cert (LP: #352157).

 -- Gabriel Ruiz Manzano <email address hidden>   Tue, 07 Jul 2009 14:36:58 +0100

Available diffs

• diff from 1.0.23ubuntu1 to 1.0.23ubuntu2 (698 bytes)

ssl-cert (1.0.23ubuntu1) jaunty; urgency=low

  * Drop the dependency on openssl-blacklist; by this point (roughly 12
    months from the original security vulnerability to the jaunty
    release) all users should have upgraded to a version that will clear
    their vulnerable keys out, and we need the space back on the CDs
    now.
  * Change the debconf template to an error, telling the user what
    commands to run to check for the problem and advising them that they
    should have installed the security update before now.

 -- Steve Langasek <email address hidden>   Fri, 16 Jan 2009 00:58:47 +0000

Available diffs

• diff from 1.0.23 to 1.0.23ubuntu1 (7.5 KiB)

ssl-cert (1.0.23) unstable; urgency=low

  * Update Dutch translation, thanks to Paul Gevers. Closes: #499978

Available diffs

• diff from 1.0.19ubuntu1 to 1.0.23 (20.4 KiB)

ssl-cert (1.0.19ubuntu1) intrepid; urgency=low

  * Merge from debian unstable, remaining changes:
    - replace known vulnerable weak keys and certificates caused by
      Debian openssl bug (CVE-2008-0166).
      - debian/control: Depends on openssl (0.9.8g-4ubuntu3.1),
        openssl-blacklist.
      - debian/templates: add critical debconf note.
      - debian/postinst: regenerate snakeoil key and certificate on upgrade if
        vulnerable.
    - debian/control:
      - Update Maintainer field and VCS-* fields.

Available diffs

• diff from 1.0.14-0ubuntu2.1 to 1.0.19ubuntu1 (25.4 KiB)

ssl-cert (1.0.14-0ubuntu2.1) hardy-security; urgency=low

  * SECURITY UPDATE: replace known vulnerable weak keys and certificates
    caused by Debian openssl bug.
  * debian/control: Depends on openssl (0.9.8g-4ubuntu3.1),
    openssl-blacklist.
  * debian/templates: add critical debconf note.
  * debian/postinst: regenerate snakeoil key and certificate on upgrade if
    vulnerable.
  * References
    CVE-2008-0166
    http://www.ubuntu.com/usn/usn-612-4

 -- Mathias Gug <email address hidden>   Wed, 14 May 2008 00:01:48 +0200

ssl-cert (1.0.14-0ubuntu0.7.10.1) gutsy-security; urgency=low

  * SECURITY UPDATE: replace known vulnerable weak keys and certificates
    caused by Debian openssl bug.
  * debian/control: Depends on openssl (0.9.8e-5ubuntu3.2),
    openssl-blacklist. Update Maintainer field.
  * debian/templates: add critical debconf note.
  * debian/postinst: regenerate snakeoil key and certificate on upgrade if
    vulnerable.
  * References
    CVE-2008-0166
    http://www.ubuntu.com/usn/usn-612-4

 -- Mathias Gug <email address hidden>   Wed, 14 May 2008 02:22:49 +0200

ssl-cert (1.0.13-0ubuntu0.7.04.1) feisty-security; urgency=low

  * SECURITY UPDATE: replace known vulnerable weak keys and certificates
    caused by Debian openssl bug.
  * debian/control: Depends on openssl (0.9.8c-4ubuntu0.3),
    openssl-blacklist. Update Maintainer field.
  * debian/templates: add critical debconf note.
  * debian/postinst: regenerate snakeoil key and certificate on upgrade if
    vulnerable.
  * References
    CVE-2008-0166
    http://www.ubuntu.com/usn/usn-612-4

 -- Mathias Gug <email address hidden>   Wed, 14 May 2008 02:41:07 +0200

ssl-cert (1.0.14-0ubuntu2) hardy; urgency=low

  * hostname -f may fail if /etc/hosts isn't configured, so use plain
    'hostname' as a fallback.

 -- Steve Langasek <email address hidden>   Wed, 20 Feb 2008 08:04:25 +0000

ssl-cert (1.0.14-0ubuntu1) hardy; urgency=low

  * make-ssl-cert: Use 'hostname -f' for the snakeoil CN instead of
    'hostname', since relative hostnames are subject to namespace
    collisions that could be exploited (and also because OpenLDAP
    doesn't care for them when connecting to localhost).
  * Modify Maintainer value to match the DebianMaintainerField
    specification.

 -- Steve Langasek <email address hidden>   Sat, 09 Feb 2008 14:21:31 -0800

ssl-cert (1.0.14) unstable; urgency=low

  * Non-maintainer upload to fix pending l10n issues.
  * Debconf templates translations:
    - Portuguese. Closes: #381744
    - Russian. Closes: #388117
    - Japanese. Closes: #391627
    - Spanish. Closes: #402203
    - Galician. Closes: #407954

 -- Ubuntu Archive Auto-Sync <email address hidden>   Fri,  27 Apr 2007 13:14:51 +0100

ssl-cert (1.0.13) unstable; urgency=low

  * Depend on adduser, since we use addgroup in postinst (closes: #367817)

ssl-cert (1.0.11.0ubuntu1) dapper; urgency=low

  * This package is debian-native, adjust version number to reflect this.
  * Create "ssl-cert" group, and make our snakeoil key readable by this
    group, so that daemons that don't start as root (like postgres) can
    still manage to read the private key, if they're also in said group.
  * Undo the above permissions on /etc/ssl/private on package removal.

 -- Adam Conrad <email address hidden>   Wed, 22 Feb 2006 19:53:46 +1100

ssl-cert (1.0-11ubuntu1) dapper; urgency=low


  * Cleanup the code a lot to be a bit more readable.
  * Add option generate-default-snakeoil.
  * Create default snakeoil in postinst.

 -- Fabio M. Di Nitto <email address hidden>  Fri, 03 Feb 2006 13:36:53 +0100

ssl-cert (1.0-11) unstable; urgency=low


  * Depend on openssl (Closes: #288050)
  * Update english string to correct grammar (Closes: #253810)
  * Translation updates:
    - German (Closes: #264655)
    - Brazilian (Closes: #267188)
    - Czech (Closes: #287307)

 -- Thom May <email address hidden>  Fri,  7 Jan 2005 16:03:23 +0000

ssl-cert (1.0-8) unstable; urgency=low


  * Set a title for Debconf questions.
  * Add Japanese translation by Hideki Yamane. (Closes: #244636)
  * Add Turkish translation by Recai Oktas. (Closes: #246071)
  * All questions must be answered.
    (Closes: #229505, #241857, #249365, #251223)

 -- Thom May <email address hidden>  Tue, 29 Jun 2004 16:39:02 +0100