ssl-cert (1.0.23ubuntu2) karmic; urgency=low

  * Fixed comment typo in make-ssl-cert (LP: #352157).

 -- Gabriel Ruiz Manzano <debianmaster@gmail.com>  Tue, 07 Jul 2009 14:36:58 +0100

ssl-cert (1.0.23ubuntu1) jaunty; urgency=low

  * Drop the dependency on openssl-blacklist; by this point (roughly 12
    months from the original security vulnerability to the jaunty
    release) all users should have upgraded to a version that will clear
    their vulnerable keys out, and we need the space back on the CDs
    now.
  * Change the debconf template to an error, telling the user what
    commands to run to check for the problem and advising them that they
    should have installed the security update before now.

 -- Steve Langasek <steve.langasek@ubuntu.com>  Fri, 16 Jan 2009 00:58:47 +0000

ssl-cert (1.0.23) unstable; urgency=low

  * Update Dutch translation, thanks to Paul Gevers. Closes: #499978

 -- Stefan Fritsch <sf@debian.org>  Wed, 24 Sep 2008 16:49:49 +0200

ssl-cert (1.0.22) unstable; urgency=low

  [ Ryan Niebur ]
  * Upgraded to policy version 3.8.0 (no changes)

  [ Stefan Fritsch ]
  * Update translations:
    - Japanese. Closes: #489294
    - Basque. Closes: #489863

 -- Stefan Fritsch <sf@debian.org>  Sat, 19 Jul 2008 20:58:12 +0200

ssl-cert (1.0.21) unstable; urgency=low

  [ Stefan Fritsch ]
  * Template and translations update. Thanks to Christian Perrier and the
    other translators.

  [ Christian Perrier ]
  * Fix trailing space in templates. Closes: #486078
  * Debconf translations:
    - French. Closes: #486079
    - Japanese translation renamed from jp.po to ja.po
    - Galician. Closes: #486152
    - Vietnamese. Closes: #486183
    - Swedish. Closes: #486199
    - Czech. Closes: #486233
    - Spanish. Closes: #486412
    - Bulgarian. Closes: #486450
    - Turkish. Closes: #486495
    - Finnish. Closes: #486550
    - Russian. Closes: #487243
    - Portuguese. Closes: #487294
    - Italian. Closes: #487363
    - German. Closes: #487442

 -- Stefan Fritsch <sf@debian.org>  Mon, 23 Jun 2008 21:24:15 +0200

ssl-cert (1.0.20) unstable; urgency=medium

   * Security: replace known vulnerable weak keys and certificates
     caused by Debian openssl bug (CVE-2008-0166). Thanks to Mathias Gug for
     the patch.
     - Depend on openssl (0.9.8g-9), openssl-blacklist.
     - add critical debconf note.
     - debian/postinst: regenerate snakeoil key and certificate on upgrade if
       vulnerable.
   * Remove auto-generated snakeoil certificates when package is purged.
   * Update translations:
     - Slovak (thanks to Ivan Masár, closes: #483518)
     - Basque (thanks to Piarres Beobide, closes: #483241)

 -- Stefan Fritsch <sf@debian.org>  Wed, 11 Jun 2008 21:22:05 +0200

ssl-cert (1.0.19) unstable; urgency=low

  * Improve man page, thanks to Olivier Berger (closes: #481451).
  * Update translations:
    - Italian (thanks to Luca Monducci, closes: #479359)
    - Galician (thanks to Jacobo Tarrio, closes: #480969)

 -- Stefan Fritsch <sf@debian.org>  Sun, 18 May 2008 19:28:11 +0200

ssl-cert (1.0.18) unstable; urgency=low

  * Update translations:
    - Spanish (thanks to Javier Fernández-Sanguino Peña, closes: #473408)
    - German (thanks to Erik Schanze, closes: #473307)

 -- Stefan Fritsch <sf@debian.org>  Thu, 03 Apr 2008 22:45:22 +0200

ssl-cert (1.0.17) unstable; urgency=low

  * If DNS does not work, use unqualified hostname for snakeoil cert instead
    of exiting with an error (Closes: #469073).
  * Update translations:
    - French (thanks to Christian Perrier, closes: #467129)
    - Finnish (thanks to Esko Arajärvi, closes: #468545)
  * Add myself to uploaders. Remove Fabio M. Di Nitto and Thom May. Thanks for
    your past work.
  * Add VCS tags to debian/control.
  * Bump standards version (no changes).

 -- Stefan Fritsch <sf@debian.org>  Sat, 22 Mar 2008 23:14:58 +0100

ssl-cert (1.0.16) unstable; urgency=low

  * Get rid of RANDFILE and just use /dev/urandom instead.  Closes: #465279
  * Update Swedish translation.  Closes: #446258
  * Update Brazilian translation.  Closes: #448511
  * Add Japanese translation.  Closes: #465679

 -- Tollef Fog Heen <tfheen@debian.org>  Wed, 20 Feb 2008 13:27:11 +0100

ssl-cert (1.0.15) unstable; urgency=low

  * Use 'hostname -f' for the snakeoil CN instead of 'hostname', since
    relative hostnames are subject to namespace collisions that could be
    exploited (and also because OpenLDAP doesn't care for them when
    connecting to localhost).  Thanks to Steve Langasek for the patch.
    Closes: 464930
  * Debconf templates and debian/control reviewed by the debian-l10n-
    english team as part of the Smith review project. Closes: #445589
  * [Debconf translation updates]
  * Bulgarian. Closes: #446210
  * Galician. Closes: #446488
  * Spanish; Castilian. Closes: #446311
  * Finnish. Closes: #446640
  * Czech. Closes: #446670
  * Portuguese. Closes: #446679
  * Finnish. Closes: #446640
  * Turkish. Closes: #446878
  * Vietnamese. Closes: #446900
  * Basque. Closes: #447138
  * Italian. Closes: #447441
  * Russian. Closes: #447900
  * Slovak. Closes: #447909
  * German. Closes: #447921
  * French. Closes: #448226
  * Do getent group rather than getent passwd in postinst.  Closes: 444902
  * Make the default SSL cert have a lifetime of 10 years rather than 30
    days.  Closes: 293821
  * Add set -e to postinst and postrm.  Closes: 384591
  * Make default openssl config pull RANDFILE from the environment.
    Closes: 384595.
  * Only ask for hostname, drop questions about country, organisation and
    such.  Closes: 230391, 287692.
  * Handle relative output file paths correctly by using basename when
    symlinking to the hash file.  Closes: 292157.
  * Fix lintian warnings (clean-should-be-satisfied-by-build-depends
    debhelper and newer-debconf-templates).
  * Add buid-dependency on po-debconf.
  
 -- Tollef Fog Heen <tfheen@debian.org>  Sun, 10 Feb 2008 20:22:54 +0100

ssl-cert (1.0.14) unstable; urgency=low

  * Updated debconf translations:
    - tr, thanks to Mehmet Türker (Closes: #417551)

 -- Peter Samuelson <peter@p12n.org>  Tue,  3 Apr 2007 13:58:19 -0500

ssl-cert (1.0.13) unstable; urgency=low

  * Depend on adduser, since we use addgroup in postinst (closes: #367817)

 -- Adam Conrad <adconrad@0c3.net>  Thu, 18 May 2006 21:59:18 +1000

ssl-cert (1.0.12) unstable; urgency=low

  * Merge updated debconf translations from the bug tracking system:
    - ja.po, thanks to Hideki Yamane <henrich@samba.gr.jp>
    - sv.po, thanks to Daniel Nylander <yeager@lidkoping.net>
    - fr.po, thanks to Nicolas Bertolissio <nico.bertol@free.fr>
    - vi.po, thanks to Clytie Siddall <clytie@riverland.net.au>
    - cs.po, thanks to Miroslav Kure <kurem@upcase.inf.upol.cz>
    - nl.po, thanks to Vincent Zweije <zweije@xs4all.nl>
    - de.po, thanks to Erik Schanze <schanzi_usenet@gmx.de>
  * Closes: #346292, #365346, #313260, #319722, #324563, #330586, #259984

 -- Adam Conrad <adconrad@0c3.net>  Tue,  2 May 2006 07:26:29 +1000

ssl-cert (1.0.11.0ubuntu1) dapper; urgency=low

  * This package is debian-native, adjust version number to reflect this.
  * Create "ssl-cert" group, and make our snakeoil key readable by this
    group, so that daemons that don't start as root (like postgres) can
    still manage to read the private key, if they're also in said group.
  * Undo the above permissions on /etc/ssl/private on package removal.

 -- Adam Conrad <adconrad@ubuntu.com>  Wed, 22 Feb 2006 19:53:46 +1100

ssl-cert (1.0-11ubuntu1) dapper; urgency=low

  * Cleanup the code a lot to be a bit more readable.
  * Add option generate-default-snakeoil.
  * Create default snakeoil in postinst.

 -- Fabio M. Di Nitto <fabbione@ubuntu.com>  Fri, 03 Feb 2006 13:36:53 +0100

ssl-cert (1.0-11) unstable; urgency=low

  * Depend on openssl (Closes: #288050)
  * Update english string to correct grammar (Closes: #253810)
  * Translation updates:
    - German (Closes: #264655)
    - Brazilian (Closes: #267188)
    - Czech (Closes: #287307)

 -- Thom May <thom@debian.org>  Fri,  7 Jan 2005 16:03:23 +0000

ssl-cert (1.0-10) unstable; urgency=high

  * Stop using an unsafe tmpfile. Reported by Marco d'Itri.

 -- Thom May <thom@debian.org>  Fri,  3 Sep 2004 14:52:29 +0100

ssl-cert (1.0-9) unstable; urgency=low

  * Update Japanese translation by Hideki Yamane.
    (Closes: #259984)

 -- Fabio M. Di Nitto <fabbione@fabbione.net>  Sun, 18 Jul 2004 07:56:58 +0200

ssl-cert (1.0-8) unstable; urgency=low

  * Set a title for Debconf questions.
  * Add Japanese translation by Hideki Yamane. (Closes: #244636)
  * Add Turkish translation by Recai Oktas. (Closes: #246071)
  * All questions must be answered.
    (Closes: #229505, #241857, #249365, #251223)

 -- Thom May <thom@debian.org>  Tue, 29 Jun 2004 16:39:02 +0100

ssl-cert (1.0-7) unstable; urgency=low

  * Fixed sed error using "#" instead of a comma as field separator
    (Closes: 225487)

 -- Fabio M. Di Nitto <fabbione@fabbione.net>  Thu, 15 Jan 2004 10:05:22 +0100

ssl-cert (1.0-6) unstable; urgency=low

  * Added support for hash symlink to certificate

 -- Fabio M. Di Nitto <fabbione@fabbione.net>  Sat, 06 Dec 2003 12:19:50 +0100

ssl-cert (1.0-5) unstable; urgency=low

  * Fixed make-ssl-cert to remove temporary files

 -- Fabio M. Di Nitto <fabbione@fabbione.net>  Mon, 20 Oct 2003 10:01:05 +0200

ssl-cert (1.0-4) unstable; urgency=low

  * Added fr translation, thanks to the french team (Closes: #211275)
  * Added pt_BR translation, thanks to the brazillian team (Closes: #210830)

 -- Fabio M. Di Nitto <fabbione@fabbione.net>  Wed, 24 Sep 2003 06:34:24 +0200

ssl-cert (1.0-3) unstable; urgency=low

  * Fixed templates to avoid unnecessary translation fields (Closes: #208924)

 -- Thom May <thom@debian.org>  Mon, 08 Sep 2003 11:37:01 +0100

ssl-cert (1.0-2) unstable; urgency=low

  * Changed Section: to utils, to match openssl
  * Fixed templates to provide a sane defaut for
    non-interactive installation

 -- Thom May <thom@debian.org>  Wed,  3 Sep 2003 12:29:14 +0100

ssl-cert (1.0-1) unstable; urgency=low

  * (Thom May)
    - everything
    - Add lintian overrides for the debconf warnings. We're not using debconf
      as a registry!
  * (Fabio M. Di Nitto)
    - debianization

 -- Thom May <thom@debian.org>  Tue, 02 Sep 2003 12:23:00 +0200
