%define newpkihome /etc/newpki
%define version 2.0.0
%define subversion beta3.1
%define release 0.%{subversion}.1mdk
Summary: The NewPKI client
Name: newpki-client
Version: %{version}
Release: %{release}
License: GPL
Group: System/Servers
Source: http://www.newpki.org/%{name}-%{version}-%{subversion}.tar.bz2
URL: http://www.newpki.org
BuildRequires: autoconf2.5
BuildRequires: libxml2-devel
BuildRequires: openssl-devel
BuildRequires: wxGTK2.4-devel
Requires: wxGTK >= 2.4.0
Requires: openssl >= 0.9.7a
BuildRoot: %{_tmppath}/%{name}-%{version}-root
%description
NewPKI is a PKI based on the OpenSSL low-level API, all the datas are
handled through a database, which provides a much more flexible PKI than
with OpenSSL, such as seeking a certificate with a search engine.
%prep
%setup -q
%build
cd Client/Linux
%configure \
--with-libxml2-include=/usr/include/libxml2/
%make
%install
cd Client/Linux
%makeinstall
#%preun
#%post
%clean
rm -rf ${RPM_BUILD_ROOT}
%files
%defattr(-,root,root)
%{_bindir}/newpki_client
%changelog
* Thu Apr 15 2004 Stefan van der Eijk <stefan@eijk.nu> 2.0.0-0.beta3.1mdk
- initial mdk package
* Fri Jan 23 2004 Frédéric Giudicelli <frederic.giudicelli@newpki.org>
Version 2.0.0-beta3-1
- Fixed a bug when adding a link between 2 repositories. (Wolf)
* Tue Nov 11 2003 Frédéric Giudicelli <frederic.giudicelli@newpki.org>
Version 2.0.0-beta3
- Rewrote the extension syntax parser to allow the use of commas (",") inside it, to have a
comma (",") inside an extension value, you nee to double it (",,").
- Added a log entry for certification on CA side.
- Added a log entry when receiving a request on CA side.
- Fixed a minor bug a links synchronization.
- Added the Publication Entity.
- Created a LDAP publication module.
- Added multilanguage support in GUIs.
- Removed old and unused error messages.
- Added a real error message when trying to use a CA that hasn't been intialized yet.
- Minor improvements of code structure.
- Updated to wxWindows 2.4.2.
- Certificates that have been revoked from the CA GUI, are now displayed,
back in the RA, as revoked.
- LDAP connection is made by the server, the LDAP search in RA is processed by the server,
not the client. The LDAP info are blanked when the RA conf is sent to the RA GUI.
- Improved memory usage.
- Added auto synchronization between LDAP entries and RA profiles.
- Added the possibility to send the PKCS#12 password to the end user.
- Added the possibility to make the RA randomly generate the PKCS#12 password.
- The mails are temporally saved in DB, to make sure they don't get lost if the
server shuts down unexpectedly.
- Generally improved the mails handling.
- Improved the statistics display.
- Added logs export in XML format.
- Added the possibility to check logs global integrity.
- Added the "Change Password" functionality in the Server GUI.
- Compiled against openssl 0.9.7c.
- Added some logs, when the responses comes back to the RA.
- Fixed a bug when setting filters for the visualization of the logs.
- Added a "debug" level for logging.
- The PKI Admins can now access all the profiles and their certificates, in the RA.
- Fixed the bug where the log entry for a user notification email showed up as an
administrative email.
- Added the possibility to save the entities links picture to a file.
- The entities links window can now be as big as desired, the scroll bars expand
according to the objects position.
- It's now impossible to revoke the last PKI Admin certificate.
- Fixed a memory link in the Server Admin GUI when displaying a context menu.
- Added a test in the linux client's "configure" to check for "wx-config".
- Added the OCSP responder, inside the publication entity.
- Replaced the obsolete Configuration structures to classes.
- Fixed a bug in Configuration parser, where the error message
wasn't displayed in WIN32.
- Fixed a bug when stopping 2 times the server (eg. sending 2 SIGTERM in a row).
- Rewrote the thread codes, and improved thread related code's readability.
- In the Repository store, the hash for the requests and the responses, get recreated if
they have been erased.
- It's now possible to send an attachement along with an administrative mail.
- Improved the RA Store's code readability.
- The RA now sends the requests that were not sent before an unexpected event.
- Initialize the OpenSSL MUTEX context, used by internal functions.
- Tremendously improved the speed of mString::sprintf.
- Improved the mail code.
- Removed all occurences of HashTable_Any.
- Transformed PkiClient::THREAD_ERROR into a class.
- Optimized the handling of transaction IDs, by making them a maximum length.
- The entities are now deleted in another thread.
- Fixed a problem with MIME format under Linux.
- Introduced the concept of firewalled Repository, meaning that the normal synchronization
behavior is modified, normally each repository would connect to each other to send
each other the new PKI Conf and the new Objects. eg. We have RepositoryLAN in the LAN and
RepositoryDMZ in the DMZ, RepositoryDMZ cannot connect to RepositoryLAN due to the LAN firewall,
so we declare RepositoryLAN has being firewalled in regard of RepositoryDMZ, which will allow
RepositoryLAN to gets the new Objects of RepositoryDMZ, exactly as if RepositoryDMZ did the
synchronization connection itself.
- Fixed a few potential MUTEX deadlocks.
* Wed Sep 24 2003 Frédéric Giudicelli <frederic.giudicelli@newpki.org>
Version 2.0.0-beta2
- Corrected the bug in the CA Gui.
- Corrected a bug in the RA store handler.
- Added admin mail notification, when a request gets back to the RA.
- Added the possibility to send the certificate/PKCS#12 directly to the user by mail,
when it gets back to the RA.
- Added the "Delete PKCS#12" functonnality in the RA GUI.
- The certificate can now be imported back to a CSP in the RA GUI.
- Corrected a bug in CA when a certificate's DN had an accentued letter.
* Wed Sep 24 2003 Frédéric Giudicelli <frederic.giudicelli@newpki.org>
Version 2.0.0-beta1
- Added the RA entity.
- Corrected some minor bugs.
* Thu Jul 24 2003 Frédéric Giudicelli <frederic.giudicelli@newpki.org>
Version 2.0.0-beta0
- Well nothing much to say, NewPKI as be redeveloped.
