Hello community,
here is the log from the commit of package yast2-ca-management for
openSUSE:Factory
checked in at Fri Sep 9 11:58:00 CEST 2011.
--------
--- yast2-ca-management/yast2-ca-management.changes 2011-06-14
15:00:38.000000000 +0200
+++
/mounts/work_src_done/STABLE/yast2-ca-management/yast2-ca-management.changes
2011-09-08 16:49:53.000000000 +0200
@@ -1,0 +2,12 @@
+Thu Sep 8 16:41:05 CEST 2011 - [email protected]
+
+- version 2.21.2
+- check subject alt name when exporting as common server cert
+ (bnc#716673)
+
+-------------------------------------------------------------------
+Fri Aug 5 12:31:02 CEST 2011 - [email protected]
+
+- fixed .desktop file (bnc #681249)
+
+-------------------------------------------------------------------
calling whatdependson for head-i586
Old:
----
yast2-ca-management-2.21.1.tar.bz2
New:
----
yast2-ca-management-2.21.2.tar.bz2
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ yast2-ca-management.spec ++++++
--- /var/tmp/diff_new_pack.zzc5RQ/_old 2011-09-09 11:57:56.000000000 +0200
+++ /var/tmp/diff_new_pack.zzc5RQ/_new 2011-09-09 11:57:56.000000000 +0200
@@ -19,11 +19,11 @@
Name: yast2-ca-management
-Version: 2.21.1
+Version: 2.21.2
Release: 1
BuildRoot: %{_tmppath}/%{name}-%{version}-build
-Source0: yast2-ca-management-2.21.1.tar.bz2
+Source0: yast2-ca-management-2.21.2.tar.bz2
Prefix: /usr
@@ -39,7 +39,7 @@
Managing CAs, Certificates and Requests in an understanding way.
%prep
-%setup -n yast2-ca-management-2.21.1
+%setup -n yast2-ca-management-2.21.2
%build
%{prefix}/bin/y2tool y2autoconf
++++++ yast2-ca-management-2.21.1.tar.bz2 -> yast2-ca-management-2.21.2.tar.bz2
++++++
++++ 2702 lines of diff (skipped)
++++ retrying with extended exclude list
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude
config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4
--exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh
old/yast2-ca-management-2.21.1/VERSION new/yast2-ca-management-2.21.2/VERSION
--- old/yast2-ca-management-2.21.1/VERSION 2011-06-14 12:58:56.000000000
+0200
+++ new/yast2-ca-management-2.21.2/VERSION 2011-09-08 16:40:48.000000000
+0200
@@ -1 +1 @@
-2.21.1
+2.21.2
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude
config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4
--exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh
old/yast2-ca-management-2.21.1/configure.in
new/yast2-ca-management-2.21.2/configure.in
--- old/yast2-ca-management-2.21.1/configure.in 2011-06-14 11:06:39.000000000
+0200
+++ new/yast2-ca-management-2.21.2/configure.in 2011-09-08 16:41:59.000000000
+0200
@@ -3,7 +3,7 @@
dnl -- This file is generated by y2autoconf 2.18.11 - DO NOT EDIT! --
dnl (edit configure.in.in instead)
-AC_INIT(yast2-ca-management, 2.21.0, http://bugs.opensuse.org/,
yast2-ca-management)
+AC_INIT(yast2-ca-management, 2.21.2, http://bugs.opensuse.org/,
yast2-ca-management)
dnl Check for presence of file 'RPMNAME'
AC_CONFIG_SRCDIR([RPMNAME])
@@ -18,7 +18,7 @@
AM_INIT_AUTOMAKE(tar-ustar -Wno-portability)
dnl Important YaST2 variables
-VERSION="2.21.0"
+VERSION="2.21.2"
RPMNAME="yast2-ca-management"
MAINTAINER="Michael Calmer <[email protected]>, J. Daniel Schmidt <[email protected]>"
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude
config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4
--exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh
old/yast2-ca-management-2.21.1/src/ca_mgm.desktop
new/yast2-ca-management-2.21.2/src/ca_mgm.desktop
--- old/yast2-ca-management-2.21.1/src/ca_mgm.desktop 2011-06-14
10:29:58.000000000 +0200
+++ new/yast2-ca-management-2.21.2/src/ca_mgm.desktop 2011-09-08
15:57:20.000000000 +0200
@@ -3,7 +3,6 @@
Categories=Settings;System;Qt;X-SuSE-YaST;X-SuSE-YaST-Security;
X-KDE-ModuleType=Library
-X-KDE-RootOnly=true
X-KDE-HasReadOnlyMode=true
X-KDE-Library=yast2
X-SuSE-YaST-Call=ca_mgm
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude
config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4
--exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh
old/yast2-ca-management-2.21.1/src/ca_mgm_auto.ycp
new/yast2-ca-management-2.21.2/src/ca_mgm_auto.ycp
--- old/yast2-ca-management-2.21.1/src/ca_mgm_auto.ycp 2011-06-14
10:29:58.000000000 +0200
+++ new/yast2-ca-management-2.21.2/src/ca_mgm_auto.ycp 2011-09-08
15:57:20.000000000 +0200
@@ -4,7 +4,7 @@
* Summary: Client for autoinstallation
* Authors: Ryan Partridge <[email protected]>
*
- * $Id: ca_mgm_auto.ycp 54442 2009-01-07 15:43:57Z mcalmer $
+ * $Id: ca_mgm_auto.ycp 64401 2011-06-16 10:41:27Z jreidinger $
*
* This is a client for autoinstallation. It takes its arguments,
* goes through the configuration and return the setting.
@@ -116,7 +116,7 @@
`HBox(`HWeight
(1,`TextEntry(`id(`email), _("E-Mail"),
CaMgm::autoYaSTSettings["server_email"]:"")),
`HSpacing(2),
- `HWeight (1,`ComboBox(
`id (`id_country), _("C&ountry:"),
+ `HWeight (1,`ComboBox(
`id (`id_country), `opt(`editable), _("C&ountry:"),
getAutoCountryList()))
),
`HBox(`HWeight (1,`TextEntry(
`id (`id_organisation), _("O&rganization:"),
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude
config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4
--exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh
old/yast2-ca-management-2.21.1/src/ca_select_proposal.ycp
new/yast2-ca-management-2.21.2/src/ca_select_proposal.ycp
--- old/yast2-ca-management-2.21.1/src/ca_select_proposal.ycp 2011-06-14
14:53:20.000000000 +0200
+++ new/yast2-ca-management-2.21.2/src/ca_select_proposal.ycp 2011-09-08
15:57:20.000000000 +0200
@@ -11,7 +11,7 @@
* Summary:
*
*
- * $Id: ca_select_proposal.ycp 64348 2011-06-14 12:53:17Z jreidinger $
+ * $Id: ca_select_proposal.ycp 64402 2011-06-16 10:47:37Z jreidinger $
*
*/
{
@@ -222,7 +222,7 @@
`HBox(`HWeight (1,`TextEntry( `id
(`id_serverName), _("&Server Name:"),
CaMgm::prop_server_commonName )),
`HSpacing(2),
- `HWeight (1,`ComboBox( `id (`id_country),
_("C&ountry:"),
+ `HWeight (1,`ComboBox( `id (`id_country),
`opt(`editable), _("C&ountry:"),
getPropCountryList()))
),
`HBox(`HWeight (1,`TextEntry( `id
(`id_organisation), _("O&rganization:"),
@@ -273,10 +273,10 @@
if (ret == `alt)
{
- any ret = editAltNames(temp_alt_names);
- if (ret != nil)
- temp_alt_names = ((list)ret)[0]:temp_alt_names;
- temp_cri_alt = ((list)ret)[1]:temp_cri_alt;
+ any new_alt_names = editAltNames(temp_alt_names);
+ if (new_alt_names != nil)
+ temp_alt_names =
((list)new_alt_names)[0]:temp_alt_names;
+ temp_cri_alt = ((list)new_alt_names)[1]:temp_cri_alt;
}
else if (ret == `next
||ret == `back)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude
config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4
--exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh
old/yast2-ca-management-2.21.1/src/common_cert.desktop
new/yast2-ca-management-2.21.2/src/common_cert.desktop
--- old/yast2-ca-management-2.21.1/src/common_cert.desktop 2011-06-14
10:29:58.000000000 +0200
+++ new/yast2-ca-management-2.21.2/src/common_cert.desktop 2011-09-08
15:57:20.000000000 +0200
@@ -3,7 +3,6 @@
Categories=Settings;System;Qt;X-SuSE-YaST;X-SuSE-YaST-Security;
X-KDE-ModuleType=Library
-X-KDE-RootOnly=true
X-KDE-HasReadOnlyMode=true
X-KDE-Library=yast2
X-SuSE-YaST-Call=common_cert
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude
config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4
--exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh
old/yast2-ca-management-2.21.1/src/new_cert.ycp
new/yast2-ca-management-2.21.2/src/new_cert.ycp
--- old/yast2-ca-management-2.21.1/src/new_cert.ycp 2011-06-14
10:29:58.000000000 +0200
+++ new/yast2-ca-management-2.21.2/src/new_cert.ycp 2011-09-08
15:57:20.000000000 +0200
@@ -12,7 +12,7 @@
* Authors:
* Stefan Schubert <[email protected]>
*
- * $Id: new_cert.ycp 54793 2009-01-20 11:53:27Z mcalmer $
+ * $Id: new_cert.ycp 64401 2011-06-16 10:41:27Z jreidinger $
*
* Creating a new CA/Certificate
*
@@ -149,7 +149,7 @@
`HSpacing(2),
`HWeight (1,`TextEntry(`id (`id_state),
_("&State:"), CaMgm::state ))));
- contents = add (contents, `HBox (`HWeight(1,`ComboBox( `id
(`id_country), _("C&ountry:"), getCountryList()))));
+ contents = add (contents, `HBox (`HWeight(1,`ComboBox( `id
(`id_country), `opt(`editable), _("C&ountry:"), getCountryList()))));
// To translators: dialog label
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude
config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4
--exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh
old/yast2-ca-management-2.21.1/src/util.ycp
new/yast2-ca-management-2.21.2/src/util.ycp
--- old/yast2-ca-management-2.21.1/src/util.ycp 2011-06-14 10:29:58.000000000
+0200
+++ new/yast2-ca-management-2.21.2/src/util.ycp 2011-09-08 16:40:27.000000000
+0200
@@ -1185,13 +1185,28 @@
y2milestone("Hostname :%1", retmap);
if (commonName != strip(retmap["stdout"]:""))
{
- string errorString = sformat ( _("The common name of the
certificate (%1) is not the name of
+ // check if hostname is in Subject Alt Name
+ map ret = (map) YaPI::CaManagement::ReadCertificate
($["caName":CAname,
+
"caPasswd":getPassword(CAname),
+
"certificate":certificate,
+
"type":"parsed"]);
+ map<string,list> opensslExtentions = ret["OPENSSL_EXTENSIONS"]:$[];
+ boolean found = false;
+ foreach (string entry, (list<string>) opensslExtentions["X509v3
Subject Alternative Name"]:[], ``{
+ if (issubstring(entry, strip(retmap["stdout"]:""))) {
+ y2milestone("Found hostname(%1) in Subject Alternative
Name (%2)", strip(retmap["stdout"]:""), entry)
+ found = true;
+ }
+ });
+ if (!found) {
+ string errorString = sformat ( _("The common name of the
certificate (%1) is not the name of·
the server (%2).
This certificate might be not practical as a common server certificate.
"),
commonName,
strip(retmap["stdout"]:""));
- Popup::Warning (errorString);
+ Popup::Warning (errorString);
+ }
}
UI::OpenDialog (`opt(`decorated ),
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Remember to have fun...
--
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
