~ubuntu-branches/ubuntu/trusty/pollinate/trusty-security : changes

~ubuntu-branches/ubuntu/trusty/pollinate/trusty-security » Changes from revision 12

From Revision 12

Rev	Summary	Authors	Tags	Date
12	Add "DigiCert Global Root CA" certificate from ca-certificat... Add "DigiCert Global Root CA" certificate from ca-certificates package to entropy.ubuntu.com.pem. This is required to correctly verify against the new entropy.ubuntu.com SSL certificate.	Robie Basak	4.7-0ubuntu1.4	8 years ago
11	* entropy.ubuntu.com.pem: LP: #1483762 * entropy.ubuntu.com.pem: LP: #1483762 - entropy.ubuntu.com SSL is coming up for renewal on 2015-09-15 - update the certs for the pollinate package - Note that this changes the issuing CA to DigiCert, which requires a new intermediary.	Dustin Kirkland	4.7-0ubuntu1.3	8 years ago
10	* debian/patches/1381359.patch: LP: #1381359 * debian/patches/1381359.patch: LP: #1381359 - update expiring SSL certificate	Dustin Kirkland	4.7-0ubuntu1.2	9 years ago
9	* README: * README: - update documentation; pollinate no longer runs daily * entropy.ubuntu.com.pem: LP: #1304777 - entropy.ubuntu.com re-keyed SSL certs due to heartbleed OpenSSL vulnerability	Dustin Kirkland	4.7-0ubuntu1	10 years ago
8	* debian/pollinate.default: * debian/pollinate.default: - move the default from POOL to SERVER - this way, someone can zero out SERVER, whereas POOL is always additive * pollinate: - save a few forks of hostname * debian/pollinate.upstart, pollinate: LP: #1286316 - now that cloud-init itself is calling pollinate, remove the "start on starting cloud-init" trigger - when running pollinate through cloud-init, we are not guaranteed that syslog will be up, and smoser insists on running pollinate --quiet thus we will quietly log our pollinate activity in /var/cache/pollinate/log	Dustin Kirkland	4.6-0ubuntu1	10 years ago
7	* pollinate: * pollinate: - fix exit, when in testing mode	Dustin Kirkland	4.5-0ubuntu1	10 years ago
6	* pollinate: * pollinate: - relocate the testing string * pollinate, pollinate.1: - when testing, force the out to stdout	Dustin Kirkland	4.4-0ubuntu1	10 years ago
5	[ JuanJo Ciarlante and Dustin Kirkland ] [ JuanJo Ciarlante and Dustin Kirkland ] * pollinate, pollinate.1: - add a -t\|--testing flag, to verify communications with a pollen server; useful with the pollen nagios check - can run as a non-privileged user - does NOT affect the local PRNG	Dustin Kirkland	4.3-0ubuntu1	10 years ago
4	* debian/pollinate.default: * debian/pollinate.default: - use curl --capath /dev/null by default, to mitigate SSL CA MitM attacks, since we're shipping our own public cert	Dustin Kirkland	4.2-0ubuntu1	10 years ago
3	* pollinate, pollinate.1: * pollinate, pollinate.1: - remove unused variable f2 - add support for -n\|--no-challenge argument - this technically makes it possible to use any arbitrary URL as an entropy server + e.g. random.org, news.google.com - document the option in the manpage * pollinate: - move CURL_OPTS to the end of the line, so that the admin can override any curl option, such as the user-agent string in /etc/default/pollinate	Dustin Kirkland	4.1-0ubuntu1	10 years ago
2	* ChangeLog, check_pollen, COPYING, debian/control, debian/c... * ChangeLog, check_pollen, COPYING, debian/control, debian/copyright, debian/pollen.default, debian/pollen.install, debian/pollen.manpages, debian/pollen.postinst, debian/pollen.postrm, debian/pollen.upstart, debian/rules, img/pollen_14.png, img/pollen_192.png, img/pollen_64.png, img/pollinate_14.png, img/pollinate_192.png, img/pollinate_64.png, img/pollinate.png, INSTALL, Makefile, pollen.8, pollen.go, usr.bin.pollen: - split pollinate out into its own project and source package - pollinate is a simple shell script, whereas pollen is a compiled golang binary; this was proving far too complex to manage together * debian/pollinate.postinst, debian/pollinate.preinst: LP: #1278770 - clean up busted/broken conffile, oops	Dustin Kirkland	4.0-0ubuntu1	10 years ago
1	Import upstream version 4.0 Import upstream version 4.0	Dustin Kirkland	upstream-4.0	10 years ago