1 monkeysphere (0.12-1) UNRELEASED; urgency=low
3 * Improved output handling.
5 -- Jameson Graef Rollins <jrollins@phys.columbia.edu> Sun, 24 Aug 2008 23:49:23 -0700
7 monkeysphere (0.11-1) experimental; urgency=low
9 [ Jameson Graef Rollins ]
10 * fix bug in trustdb update on add/revoke-hostname.
12 [ Daniel Kahn Gillmor ]
13 * debian/control: added Build-Depends: git-core for the new packaging
15 * new subcommand: monkeysphere subkey-to-ssh-agent (relies on a patched
16 GnuTLS to deal with GPG's gnu-dummy S2K extension, but fails cleanly
19 -- Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net> Wed, 20 Aug 2008 11:24:35 -0400
21 monkeysphere (0.10-1) experimental; urgency=low
23 [ Jameson Graef Rollins ]
24 * brown paper bag release: invert test on calculated validity of keys.
26 -- Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net> Mon, 18 Aug 2008 16:22:34 -0400
28 monkeysphere (0.9-1) experimental; urgency=low
30 [ Daniel Kahn Gillmor ]
31 * implemented "monkeysphere-server extend-key" to adjust expiration
33 * removed "monkeysphere-server fingerprint". Use "monkeysphere-server
36 [ Jameson Graef Rollins ]
37 * fixed bug in user id processing that prevented bad primary keys from
38 being properly removed.
40 -- Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net> Mon, 18 Aug 2008 15:42:12 -0400
42 monkeysphere (0.8-1) experimental; urgency=low
44 [ Daniel Kahn Gillmor ]
45 * debian/control: switched Vcs-Git to use "centralized" git repo instead
47 * More monkeysphere-server diagnostics
48 * monkeysphere --gen-subkey now guesses what KeyID you meant.
49 * added Recommends: ssh-askpass to ensure monkeysphere --gen-subkey
50 works sensibly under X11
52 [ Jameson Graef Rollins ]
53 * fix another bug when known_hosts files are missing.
54 * sort processed keys so that "good" keys are processed after "bad"
55 keys. This will prevent malicious bad keys from causing good keys to
56 be removed from key files.
57 * enabled host key publication.
58 * added checking of gpg.conf for keyserver
59 * new functions to add/revoke host key user IDs
60 * improved list-certifiers function (now non-privileged)
62 -- Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net> Mon, 18 Aug 2008 12:43:37 -0400
64 monkeysphere (0.7-1) experimental; urgency=low
66 [ Daniel Kahn Gillmor ]
67 * Added monkeysphere-server diagnostics subcommand.
68 * rebuilding package using Format: 3.0 (git)
70 [ Jameson Graef Rollins ]
71 * fix how check for file modification is done.
72 * rework out user id processing is done to provide more verbose log
74 * fix bug in monkeysphpere update-authorized_keys subcommand where
75 disallowed keys failed to be remove from authorized_keys file.
77 -- Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net> Mon, 04 Aug 2008 10:47:41 -0400
79 monkeysphere (0.6-1) experimental; urgency=low
81 [ Jameson Graef Rollins ]
82 * Fix bug in return on error of ssh-proxycommand.
84 [ Daniel Kahn Gillmor ]
85 * try socat if netcat is not available in proxycommand.
87 -- Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net> Tue, 29 Jul 2008 10:27:20 -0400
89 monkeysphere (0.5-1) experimental; urgency=low
91 [ Daniel Kahn Gillmor ]
92 * updated READMEs to match current state of code
94 [ Jameson Graef Rollins ]
95 * Tweak how empty authorized_user_ids and known_hosts files are handled.
96 * Do not fail when authorized_user_ids or known_hosts file is not found.
98 -- Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net> Mon, 28 Jul 2008 10:50:02 -0400
100 monkeysphere (0.4-1) experimental; urgency=low
102 [ Daniel Kahn Gillmor ]
104 * Fixed return code error in openpgp2ssh
106 [ Jameson Graef Rollins ]
107 * Privilege separation: use monkeysphere user to handle maintenance of
108 the gnupg authentication keychain for server.
109 * Improved certifier key management.
110 * Fixed variable scoping and config file precedence.
111 * Add options for key generation and add-certifier functions.
112 * Fix return codes for known_host and authorized_keys updating
114 * Add write permission check on authorized_keys, known_hosts, and
115 authorized_user_ids files.
117 -- Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net> Tue, 22 Jul 2008 21:50:17 -0400
119 monkeysphere (0.3-1) experimental; urgency=low
121 [ Daniel Kahn Gillmor ]
124 [ Jameson Graef Rollins ]
125 * Move files in /var/cache/monkeysphere and GNUPGHOME for server to
126 the more appropriate /var/lib/monkeysphere.
128 -- Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net> Tue, 24 Jun 2008 00:55:29 -0400
130 monkeysphere (0.2-2) experimental; urgency=low
132 * added lockfile-progs dependency
134 -- Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net> Mon, 23 Jun 2008 19:34:05 -0400
136 monkeysphere (0.2-1) experimental; urgency=low
138 [ Daniel Kahn Gillmor ]
139 * openpgp2ssh now supports specifying keys by full fingerprint.
141 [ Jameson Graef Rollins ]
142 * Add AUTHORIZED_USER_IDS config variable for server, which defaults to
143 %h/.config/monkeysphere/authorized_user_ids, instead of
144 /etc/monkeysphere/authorized_user_ids.
145 * Remove {update,remove}-userids functions, since we decided they
146 weren't useful enough to be worth maintaining.
147 * Better handling of unknown users in server update-users
148 * Add file locking when modifying known_hosts or authorized_keys
149 * Better failure/prompting for gen-subkey
150 * Add ability to set any owner trust level for keys in server keychain.
152 -- Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net> Mon, 23 Jun 2008 17:03:19 -0400
154 monkeysphere (0.1-1) experimental; urgency=low
156 * First release of debian package for monkeysphere.
157 * This is experimental -- please report bugs!
159 -- Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net> Thu, 19 Jun 2008 00:34:53 -0400