1 monkeysphere (0.19-1) UNRELEASED; urgency=low
3 * simulating an X11 session in the test script.
7 monkeysphere (0.18-1) experimental; urgency=low
9 [ Jameson Graef Rollins ]
10 * Fix bugs in authorized_{user_ids,keys} file permission checking.
11 * Add new monkeysphere tmpdir to enable atomic moves of authorized_keys
13 * chown authorized_keys files to `whoami`, for compatibility with test
15 * major improvements to test suite, added more tests.
17 [ Daniel Kahn Gillmor ]
18 * update make install to ensure placement of
19 /etc/monkeysphere/gnupg-{host,authentication}.conf
20 * choose either --quick-random or --debug-quick-random depending on
21 which gpg supports for the test suite.
23 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Wed, 29 Oct 2008 00:41:38 -0400
25 monkeysphere (0.17-1) experimental; urgency=low
27 [ Jameson Graef Rollins ]
28 * Fix some bugs in, and cleanup, authorized_keys file creation in
29 monkeysphere-server update-users.
30 * Move to using the empty string for not adding a user-controlled
31 authorized_keys file in the RAW_AUTHORIZED_KEYS variable.
33 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Tue, 28 Oct 2008 02:04:22 -0400
35 monkeysphere (0.16-1) experimental; urgency=low
37 [ Daniel Kahn Gillmor ]
38 * replaced "#!/bin/bash" with "#!/usr/bin/env bash" for better
40 * fixed busted lockfile arrangement, where empty file was being locked
41 * portability fixes in the way we use date, mktemp, hostname, su
42 * stop using /usr/bin/stat, since the syntax appears to be totally
44 * require GNU getopt, and test for getopt failures (look for getopt in
45 /usr/local/bin first, since that's where FreeBSD's GNU-compatible
47 * monkeysphere-server diagnostics now counts problems and suggests a
48 re-run after they have been resolved.
49 * completed basic test suite: this can be run from the git sources or
50 the tarball with: cd tests && ./basic
52 [ Jameson Graef Rollins ]
53 * Genericize fs location variables.
54 * break out gpg.conf files into SYSCONFIGDIR, and not auto-generated at
57 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Sun, 26 Oct 2008 03:06:18 -0400
59 monkeysphere (0.15-1) experimental; urgency=low
61 * porting work and packaging simplification: clarifying makefiles,
62 pruning dependencies, etc.
63 * added tests to monkeysphere-server diagnostics
64 * moved monkeysphere(5) to section 7 of the manual
65 * now shipping TODO in /usr/share/doc/monkeysphere
67 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Thu, 04 Sep 2008 19:08:40 -0400
69 monkeysphere (0.14-1) experimental; urgency=low
71 * changing debian packaging back to format 1.0 so we get automatic
72 tarballs, and easier inclusion in other build networks.
73 * no other source changes.
75 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Thu, 04 Sep 2008 13:03:35 -0400
77 monkeysphere (0.13-1) experimental; urgency=low
79 [ Daniel Kahn Gillmor ]
80 * tweaks in /usr/bin/monkeysphere to handle odd secret keyrings.
81 * updated makefile to reflect the package building technique we've been
82 using for a month now.
84 [ Jameson Graef Rollins ]
85 * move location of user config directory to ~/.monkeysphere.
87 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Wed, 03 Sep 2008 17:26:10 -0400
89 monkeysphere (0.12-1) experimental; urgency=low
91 [ Jameson Graef Rollins ]
92 * Improved output handling. New LOG_LEVEL variable.
94 [ Daniel Kahn Gillmor ]
95 * debian/control: switched Homepage: and Vcs-Git: to canonicalized
97 * updated documentation for new release.
98 * changed my associated e-mail address for this package.
100 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Tue, 02 Sep 2008 18:54:29 -0400
102 monkeysphere (0.11-1) experimental; urgency=low
104 [ Jameson Graef Rollins ]
105 * fix bug in trustdb update on add/revoke-hostname.
107 [ Daniel Kahn Gillmor ]
108 * debian/control: added Build-Depends: git-core for the new packaging
110 * new subcommand: monkeysphere subkey-to-ssh-agent (relies on a patched
111 GnuTLS to deal with GPG's gnu-dummy S2K extension, but fails cleanly
114 -- Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net> Wed, 20 Aug 2008 11:24:35 -0400
116 monkeysphere (0.10-1) experimental; urgency=low
118 [ Jameson Graef Rollins ]
119 * brown paper bag release: invert test on calculated validity of keys.
121 -- Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net> Mon, 18 Aug 2008 16:22:34 -0400
123 monkeysphere (0.9-1) experimental; urgency=low
125 [ Daniel Kahn Gillmor ]
126 * implemented "monkeysphere-server extend-key" to adjust expiration
128 * removed "monkeysphere-server fingerprint". Use "monkeysphere-server
131 [ Jameson Graef Rollins ]
132 * fixed bug in user id processing that prevented bad primary keys from
133 being properly removed.
135 -- Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net> Mon, 18 Aug 2008 15:42:12 -0400
137 monkeysphere (0.8-1) experimental; urgency=low
139 [ Daniel Kahn Gillmor ]
140 * debian/control: switched Vcs-Git to use "centralized" git repo instead
142 * More monkeysphere-server diagnostics
143 * monkeysphere --gen-subkey now guesses what KeyID you meant.
144 * added Recommends: ssh-askpass to ensure monkeysphere --gen-subkey
145 works sensibly under X11
147 [ Jameson Graef Rollins ]
148 * fix another bug when known_hosts files are missing.
149 * sort processed keys so that "good" keys are processed after "bad"
150 keys. This will prevent malicious bad keys from causing good keys to
151 be removed from key files.
152 * enabled host key publication.
153 * added checking of gpg.conf for keyserver
154 * new functions to add/revoke host key user IDs
155 * improved list-certifiers function (now non-privileged)
157 -- Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net> Mon, 18 Aug 2008 12:43:37 -0400
159 monkeysphere (0.7-1) experimental; urgency=low
161 [ Daniel Kahn Gillmor ]
162 * Added monkeysphere-server diagnostics subcommand.
163 * rebuilding package using Format: 3.0 (git)
165 [ Jameson Graef Rollins ]
166 * fix how check for file modification is done.
167 * rework out user id processing is done to provide more verbose log
169 * fix bug in monkeysphpere update-authorized_keys subcommand where
170 disallowed keys failed to be remove from authorized_keys file.
172 -- Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net> Mon, 04 Aug 2008 10:47:41 -0400
174 monkeysphere (0.6-1) experimental; urgency=low
176 [ Jameson Graef Rollins ]
177 * Fix bug in return on error of ssh-proxycommand.
179 [ Daniel Kahn Gillmor ]
180 * try socat if netcat is not available in proxycommand.
182 -- Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net> Tue, 29 Jul 2008 10:27:20 -0400
184 monkeysphere (0.5-1) experimental; urgency=low
186 [ Daniel Kahn Gillmor ]
187 * updated READMEs to match current state of code
189 [ Jameson Graef Rollins ]
190 * Tweak how empty authorized_user_ids and known_hosts files are handled.
191 * Do not fail when authorized_user_ids or known_hosts file is not found.
193 -- Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net> Mon, 28 Jul 2008 10:50:02 -0400
195 monkeysphere (0.4-1) experimental; urgency=low
197 [ Daniel Kahn Gillmor ]
199 * Fixed return code error in openpgp2ssh
201 [ Jameson Graef Rollins ]
202 * Privilege separation: use monkeysphere user to handle maintenance of
203 the gnupg authentication keychain for server.
204 * Improved certifier key management.
205 * Fixed variable scoping and config file precedence.
206 * Add options for key generation and add-certifier functions.
207 * Fix return codes for known_host and authorized_keys updating
209 * Add write permission check on authorized_keys, known_hosts, and
210 authorized_user_ids files.
212 -- Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net> Tue, 22 Jul 2008 21:50:17 -0400
214 monkeysphere (0.3-1) experimental; urgency=low
216 [ Daniel Kahn Gillmor ]
219 [ Jameson Graef Rollins ]
220 * Move files in /var/cache/monkeysphere and GNUPGHOME for server to
221 the more appropriate /var/lib/monkeysphere.
223 -- Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net> Tue, 24 Jun 2008 00:55:29 -0400
225 monkeysphere (0.2-2) experimental; urgency=low
227 * added lockfile-progs dependency
229 -- Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net> Mon, 23 Jun 2008 19:34:05 -0400
231 monkeysphere (0.2-1) experimental; urgency=low
233 [ Daniel Kahn Gillmor ]
234 * openpgp2ssh now supports specifying keys by full fingerprint.
236 [ Jameson Graef Rollins ]
237 * Add AUTHORIZED_USER_IDS config variable for server, which defaults to
238 %h/.config/monkeysphere/authorized_user_ids, instead of
239 /etc/monkeysphere/authorized_user_ids.
240 * Remove {update,remove}-userids functions, since we decided they
241 weren't useful enough to be worth maintaining.
242 * Better handling of unknown users in server update-users
243 * Add file locking when modifying known_hosts or authorized_keys
244 * Better failure/prompting for gen-subkey
245 * Add ability to set any owner trust level for keys in server keychain.
247 -- Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net> Mon, 23 Jun 2008 17:03:19 -0400
249 monkeysphere (0.1-1) experimental; urgency=low
251 * First release of debian package for monkeysphere.
252 * This is experimental -- please report bugs!
254 -- Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net> Thu, 19 Jun 2008 00:34:53 -0400