Changelog

This document records all notable changes to certmonger.

0.79.14 (2021-06-15)

Fix local CA to work under FIPS
Translated using Weblate (Portuguese (Brazil))
Translated using Weblate (Dutch)
Translated using Weblate (Swedish)
Translated using Weblate (Turkish)
Translated using Weblate (Polish)
Translated using Weblate (Russian)
Translated using Weblate (Ukrainian)
Translated using Weblate (Korean)
If calling a CA helper fails, call cm_casave_done to reap
Update cadata test to reflect non-NULL returned by helper
Drop hardcoded values for Apache NSS db for IPA < v4
Add NULL checks before string compares when analyzing a cert
Pass /etc/ipa/ca.crt if it exists to libcurl, else rely on system
Close file in casave on NSS database login error
Remove remaining reference to token variable in certread-n
Free the thumbprint variable before returning
Free the error message when returning
Fix compiler warnings
clang: Unused variable assignment
clang: Remove memory leak on failure
clang: free error_message when finding the realm
Display not_before in getcert output
Revert "Revert three Korean translations because they change the order"
Fix list of sub-commands in the getcert man page
Use the system env and not the session env for the local CA
Add autoreconf to in-tree rpm spec file

0.79.13 (2020-10-20)

Fix NSS shutdown issues when obtaining the internal token name
Save a copy of the IPA error message when parsing the JSON result
certread-n: Look up certs using PK11_FindCertFromNickname()
Free public key information after storing and displaying
Don't report a spurious error if no SCEP pkiMessage is ready yet

0.79.12 (2020-10-05)

remove dead make targets
Don't free soptions while it is still needed
Revert "Adapt to the new behavior of disconnect in dbus-broker"
Link certmonger to dbus so it stops and restarts with it
Don't send SIGKILL to children, give them a chance to die
Remove empty translation files
Require jansson for IPA RPC calls, make xmlrpc optional
Make xmlrpc optional in the certmonger spec file, disable certmaster
Add Referer header option to the submit-h API
Switch IPA calls to use the JSON-RPC endpoint instead of XMLRPC
Remove the certmaster CA from the 028-dbus test
Add a local-srpm target to build an srpm from the current checkout
Silence a rpm macro warning with an unescaped % in a comment