1
<!--#set var="pyca_subtitle" value="Changes"-->
2
<!--#set var="pyca_pagedescription" value="History of released versions"-->
3
<!--#include file="ssi/head.html"-->
4
<!--#include file="ssi/navigation.html"-->
8
<dt>Release 0.6.6 (release date unknown)</dt>
12
Fixed compability issues with Python 1.6/2.0+/2.1.
15
Fixed compability issues with certificate requests created
16
by <a href="http://www.mozilla.org">Mozilla browser</a>.
19
Added new parameter <a href="config.html#caCertConfirmReqLog">
20
caCertConfirmReqLog</a> for defining the path name of
21
file for log output of <em>sbin/ca-certreq-mail.py</em>.
24
English translation of help for <em>cgi-bin/client-enroll.py</em>
25
contributed by <a href="Roger Buck <rog@saas.nsw.edu.au>">
26
Roger Buck <rog@saas.nsw.edu.au></A>.
29
Use env variable <em>PYCALIB</em> to set name of the directory
30
containing the modules.
33
Patches contributed by
34
<a href="mailto:"Stan O. Barber" <sob@verio.net>">
35
"Stan O. Barber" <sob@verio.net></A>.
38
If exception getopt.error is raised in command-line programs
39
the string representation of the exception instance is
40
displayed as error message.
43
VBScript-related fixes contributed by
44
<a href="mailto:Christian Barmala <christian@barmala.de>">
45
Christian Barmala <christian@barmala.de></A>.
48
Fixed MIME types sent for M$ IE in <em>cgi-bin/get-cert.py</em>
49
(<em>application/pkix-cert</em>, see
50
<a target="external_doc" href="http://www.ietf.org/rfc/rfc2585.txt">RFC 2585</a>).
53
<em>cgi-bin/get-cert.py</em> can be called with path info
54
"extension" specifying the output format
58
URLs pointing to <em>get-cert.py</em> have suffix .crt or .crl
59
for defining a pseudo "file type".
60
This triggers certificate/CRL handling in older versions
61
of M$ IE which do not properly use the MIME-type for determining
65
Massive modifications to default configuration file
66
shipped with package. The default configuration uses
67
a domainComponent root naming now.
70
Fixed bug concerning validity interval checking when
71
issuing sub CA certificates in <em>ca-make.py</em>.
75
<a href="config#caAdminMailAdr">caAdminMailAdr</a> in
76
<em>ca-certreq-mail.py</em>
77
for forming From: address if CA certificate does not contain
78
Email attribute in subject DN.
81
Fixed case-handling of <em>userCertificate</em> atttibute in
82
certs2ldap.py. The currently used attriute type name is determined
83
and also used in displayed status messages.
86
<var>bin/certs2ldap.py</var>:
87
now handles multi-valued <em>userCertificate</em>
88
atttibutes correctly, can delete revoked or expired certificates,
89
can add new LDAP entries.
92
No LDIF file created by client-enroll.py anymore.
95
If anyone messed up the ownership and permission
96
of CA certificate and key file it's restored at the
97
beginning of ca-make.py while still running as root.
100
Removed input of parameter userpassword in <em>cgi-bin/client-enroll.py</em>
101
since it was never used. Well, the lack of a user administration
102
concept shows here...
105
Text for confirmation e-mail was altered to avoid the message
106
being caught by spam filters looking for string
107
"ignore this" in message body.
110
Correctly evaluate form field <var>browsertype</var>
111
in <em>cgi-bin/client-enroll.py</em>.
114
Applied patch to module <var>vbs</var> contributed by
115
<em>Reiner Keller</em> for fixing compability issues
119
Since most people did not configure the CA cert extensions
120
properly some weird settings were removed.
123
Removed german umlauts from all Python and HTML sources.
128
<dt>Release 0.6.5 (2000-07-30)</dt>
136
New script bin/ldap2certs for downloading certs
138
and build relay_clientcerts file for Postfix/TLS.
140
bin/certs2ldap.py now deletes revoked and expired
141
certs from LDAP server
144
cgi-bin/ns-revoke.py works now if web server has write access
145
to OpenSSL index.txt (not recommended)
150
<dt>Release 0.6.4 (2000-07-07)</dt>
154
Small bug fixes and cosmetic changes
159
<dt>Release 0.6.3 (1999-12-27)</dt>
163
Added parameter --nocrls to bin/ca2ldif.py
166
Displays SHA-1 fingerprints in view-cert.py and print-cacerts.py now
167
(mainly for users of M$ IE)
172
<dt>Release 0.6.2 (1999-11-23)</dt>
176
new program view-cert.py for displaying certificates
179
ca-revoke.py can issue new CRL immediately
182
Improved support M$ IE (VBScript code for choosing
183
cryptographic provider by
184
Michael Konietzka <ca-project@konietzka.de>)
187
Handling of missing or wrong parameter input
188
in client-enroll.py is much more user-friendly.
191
Input field for browser type (to avoid problems with users
192
coming through proxies).
195
Got rid of scripts in sbin/ importing pycacnf.py
196
by using parameters --config and --pycalib.<BR>
197
This might require some changes to an installation
198
(provide parameter in mail aliases, CRON jobs etc.)
201
ca-cycle-priv.py can be forced to issue CRLs with parameter
207
<dt>Release 0.6.1 (1999-10-12)</dt>
211
Switched back to own parsing of cert datetime
212
since time.strptime() relys on glibc where strptime is broken!
215
Made certs2ldap.py a little bit more defensive.
220
<dt>Release 0.6.0 (1999-10-10)</dt>
224
Dropped support for configuration parameter caCertFormat!
227
Support for M$ Internet Explorer
228
(VBScript-Code inspired by contributions of
229
contributed by Jordi Floriach <jfloriach@afina.net>)
232
ns-enroll.py is obsoleted by the more general client-enroll.py
235
Complete rewrite of certs2ldap.py, the script for uploading
236
e-mail certificates to a LDAP repository.
241
<dt>Release 0.5.5 (1999-09-02)</dt>
248
generate really unique IDs for cert requests
251
complete rewrite of ca2ldif.py
254
Small enhancements in user interface of CGI-BINs.
259
<dt>Release 0.5.4 (1999-07-17)</dt>
266
Small enhancements in user interface of CGI-BINs
269
Restrictive ownership/permissions setting of files/directories in ca-make.py
272
Some small handy scripts for doing boring copying of CA certs
277
<dt>Release 0.5.3 (1999-06-19)</dt>
281
upgrade to OpenSSL 0.9.3a necessary
284
Many bugfixes and small enhancements
287
some changes to configuration (might be incompatible to previous
291
Many improvements and fixes to ca-make.py:
294
flexible usage of files containing X.509v3 extensions for CA certs
297
Implemented setting the permissions of various files/dirs.
302
Better performance by reading configuration from
303
pre-compiled (pickled) conf file
308
<dt>Release 0.5.1 (1999-06-10)</dt>
312
upgrade to Python 1.5.2 necessary
315
some bugfixes and code cleaning
321
some changes to configuration (might be incompatible to 0.4.5!!!)
324
allow defining the request form depending on specific certificate type
327
configuration of preferred certificate format
330
automatic publishing of certificates with informing user by e-mail
335
<dt>Release 0.4.5 (1999-05-23)</dt>
342
some rudimental documentation
345
cgi-bin/browser-check.py for testing cryptographic features of browsers
348
usage of ca-fix executable to fix CA certs during ca-make.py
351
usage of DER certs possible to speed up downloading
354
abandoned get-crl.py, get-cert.py does this either
359
<dt>Release 0.4.4 (1999-05-18)</dt>
366
<!--#include file="ssi/footer.html"-->