make-ca/CHANGELOG
2018-09-03 00:57:28 -05:00

47 lines
2.4 KiB
Plaintext

0.9 - Use P11-Kit trust module to generate alternate certificate stores
from trust policy
- Only generate the trust store and NSSDB when using DESTDIR - you now
must run the installed script as part of your post-installation
proceedure, with P11-Kit trust available, to generate the alternate
certificate stores - only the trust store and NSSDB are distributed
- Added "Wants=network-online.target" to update-pki.service - Thanks to
Brendan L for the fix
- No longer generate Java p12 format cacerts
- Create Redhat compatibility link for external programs to PEM bundle
0.8 - Use 'openssl rehash' instead of c-rehash script
0.7 - Generate both PKCS#12 and JKS stores for Java
- Local certs keep out of band trust when copied to system certs
- Remove use of .old files/directories
0.6 - Allow use of proxy with OpenSSL s_client
- Really check revision before download
- Make sure download was successful before testing values
0.5 - Install systemd timer and service units
- Add uninstall and clean targets
0.4 - Add email and code signing flat file certificate stores
0.3 - Generate single file stores (Java and GNUTLS) using main OpenSSL
store as source to avoid duplicates
0.2 - Install source certdata.txt file
- Provide -r/--rebuild option
- Add -g/--get option to download using only s_client
- Always add REVISION value to installed certdata.txt
- Use HG revision value (fall back to date for local files)
- Allow rebuid within DESTDIR
- Complete manpage
0.1 - Check executable bit for CERTUTIL, KEYTOOL, and OPENSSL
- Allow global configuration file
- Use correct license text (MIT)
20170425 - Use p11-kit format anchors
- Add CKA_NSS_MOZILLA_CA_POLICY attribute for p11-kit anchors
- Add clientAuth OpenSSL attribute and (currently unused) NSS
CKA_TRUST_CLIENT_AUTH
20170119 - Show trust bits on local certs
- Add version output for help2man
20161210 - Add note about --force swich when same version
20161126 - Add -D/--destdir switch
20161124 - Add -f/--force switch to bypass version check
- Add multiple switches to allow for alternate localtions
- Add help text
20161118 - Drop make-cert.pl script
- Add support for Java and NSSDB