-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2010-7199 2010-04-22 22:22:35 --------------------------------------------------------------------------------
Name : certmonger Product : Fedora 13 Version : 0.23 Release : 1.fc13 URL : http://certmonger.fedorahosted.org Summary : Certificate status monitor and PKI enrollment client Description : Certmonger is a service which is primarily concerned with getting your system enrolled with a certificate authority (CA) and keeping it enrolled.
-------------------------------------------------------------------------------- Update Information:
This update corrects a bug in parsing the length of time for which a self-signed certificate should be marked valid, correctly records the requested CA when an already-issued certificate is added the list of certificates the daemon monitors, corrects man pages which weren't preprocessed correctly, adds translations, and brings the service init script into better alignment with packaging guidelines. -------------------------------------------------------------------------------- ChangeLog:
* Thu May 27 2010 Nalin Dahyabhai nalin@redhat.com 0.23-1 - update to 0.23 - new translations - pl by Piotr Drąg! - cancel daemon startup if we can't gain ownership of our well-known service name on the DBus (#596719) * Fri May 14 2010 Nalin Dahyabhai nalin@redhat.com 0.22-1 - update to 0.22 - new translations - de by Fabian Affolter! - certmaster-submit: don't fall over when we can't find a certmaster.conf or a minion.conf (i.e., certmaster isn't installed) (#588932) - when reading extension values from certificates, prune out duplicate principal names, email addresses, and hostnames * Tue May 4 2010 Nalin Dahyabhai nalin@redhat.com 0.21-1 - update to 0.21 - getcert/*-getcert: relay the desired CA to the local service, whether specified on the command line (in getcert) or as a built-in hard-wired default (in *-getcert) (#584983) - flesh out the default certmonger.conf so that people can get a feel for the expected formatting (Jenny Galipeau) * Wed Apr 21 2010 Nalin Dahyabhai nalin@redhat.com 0.20-1 - update to 0.20 - correctly parse certificate validity periods given in years (spotted by Stephen Gallagher) - setup for translation - es by Héctor Daniel Cabrera! - ru by Yulia Poyarkova! - uk by Yuri Chornoivan! - fix unpreprocessed defaults in certmonger.conf's man page - tweak the IPA-specific message that indicates a principal name also needs to be specified if we're not using the default subject name (#579542) - make the validity period of self-signed certificates into a configuration setting and not a piece of the state information we track about the signer - init script: exit with status 2 instead of 1 when invoked with an unrecognized argument (#584517) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #579542 - DOC: -K required when using the -N option when requesting a cert https://bugzilla.redhat.com/show_bug.cgi?id=579542 [ 2 ] Bug #584983 - certmonger should assume the IPA CA type when tracking an existing certificate https://bugzilla.redhat.com/show_bug.cgi?id=584983 [ 3 ] Bug #596719 - certmonger can start many daemons and service certmonger status won't recognize it https://bugzilla.redhat.com/show_bug.cgi?id=596719 --------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use su -c 'yum update certmonger' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------