Skip to content

Latest commit

 

History

History
226 lines (159 loc) · 6.76 KB

HISTORY.md

File metadata and controls

226 lines (159 loc) · 6.76 KB
Raw

2.2.0

Summary

A release that converts the module to the PDK version 1.3.2, alongside an additional parameter added.

Added

  • Add support for destkeypass when importing PKCS12 keystores.

Changed

  • Module has been converted to the PDK with version 1.3.2.

Supported Release 2.1.0

Summary

The main purpose of this module is to release Rubocop changes, with some other minor updates included.

Added

  • Support added for the specifying of source cert alias.

Changed

  • The module has been changed to comply with the set rubocop guidelines.
  • JDK updated to 8u161.
  • Fingerprint extraction in keytool.rb has been improved upon.
  • Modulesync changes.

Supported Release 2.0.0

Summary

This is a roll up of maintainence changes, features and compatibility updates from throughout the year. This release is backwards incompatible because the Puppet version requirements have now changed with the lower Puppet version boundary jumping from 3.0.0 to 4.7.0 and we have removed vulnerable puppet3 support dependencies.

Added

  • Debian 9 entry in 'metadata.json'
  • Support for importing pkcs12 files by introducing a function called import pkcs12
  • Support for removal of key store file on invalid password by introducing password_fail_reset

Changed

  • Appveyor testing has been enabled
  • General maintainence changes via modulessync
  • Java-ks is now being managed in modulesync as a cross-platform module
  • FM-6547 - Pin JDK installation package to 8.0.152 for Windows
  • pkcs12 acceptance tests no longer run on SLES
  • CONTRIBUTING.md updates
  • Travis ruby version to 2.4.0 and 2.1.9
  • Upper Puppet boundary to Puppet 6.0.0
  • Lower Puppet boundary to Puppet 4.7.0

Fixed

  • Unit test failures on Windows
  • Java 9 support

Removed

  • SLES 10 SP4 entry in 'metadata.json'
  • Debian 6 entry in 'metadata.json'
  • Windows Server 2003 R2 and Windows 8 entry in 'metadata.json'
  • Ubuntu 10.04 and 12.04 entry in 'metadata.json'
  • FM-6588 - Remove vulnerable puppet3 support dependencies

Supported Release 1.6.0

Summary

The keytool would hang on occasion for unexplained reasons, so keytool executions are wrapped in a timeout that defaults to 120 seconds and is configurable by the keytool_timeout parameter.

Added

  • New parameter: keytool_timeout

Supported Release 1.5.0

Summary

This release contains some small features and one bugfix which makes the module environment safe.

Features

  • Added a new parameter, private_key_type which defaults to rsa but can also be set to ec for ECDSA keys.
  • Added java_ks::config class with create_resources so that Hiera can be used to manage the config.
  • [MODULES-2495] Allows the provider to work with encrypted private keys.

Bugfixes

  • [MODULES-4505] Fixed self.title_patterns in java_ks type so it doesn't return a Proc so the module is environment safe.

Supported Release 1.4.1

Summary

This release contains bugfixes around certificate chains and other testing improvements.

Bugfixes

  • Dont expose keystore content when keystore initally empty.
  • Support certificate chains in certificate file.
  • Support multiple intermediate certificates in chain.
  • Improve cert chain acceptance tests.
  • Update to current msync configs.
  • Debian 8 support.

Supported Release 1.4.0

Summary

This release contains a new option to provide destkeypass. Also contains bugfixes and a metadata update to support Puppet Enterprise 2015.3.x.

Features

  • Adds destkeypass option to pass in password when importing into the keystore.
  • Adds feature support for JCEKS format and extensions.

Bugfixes

  • Fixes composite title patterns in provider to improve support for Windows.

Test Improvements

  • Improves Windows testing.

2015-07-20 - Supported Release 1.3.1

Summary

This release updates the metadata for the upcoming release of PE as well as an additional bugfix.

Bugfixes

  • Fixes Puppet.newtype deprecation warning

2015-04-14 - Supported Release 1.3.0

Summary

Remove openssl command line tool from requirements

Features

  • Add Windows support and tests

2014-11-11 - Supported Release 1.2.6

Summary

This release has test fixes and files synced from modulesync.

2014-07-10 - Supported Release 1.2.5

Summary

This release has bugfixes and test improvements.

Features

  • Update tests to use RSpec 2.99 syntax

Bugfixes

  • Remove broken support for puppet:// files.
  • Remove incorrect statment of windows support from metadata.json.
  • Fix path issue for openssl on solaris 11.

Known Bugs

  • No known bugs

2014-06-04 - Release 1.2.4

Summary

This is a compatibility release. No functional changes to this module were made in this release, just testing infrastructure changes to extend tests to RHEL7 and Ubuntu 14.04

Features

Bugfixes

Known Bugs

  • No known bugs

2014-03-04 - Supported Release 1.2.3

Summary

This is a supported release. This release removes a testing symlink that can cause trouble on systems where /var is on a seperate filesystem from the modulepath.

Features

Bugfixes

Known Bugs

  • No known bugs

2014-03-04 - Supported Release 1.2.2

Summary

This is a supported release. Only tests and documentation were changed.

Features

  • Test changes.
  • Documentation changes.

Bugfixes

Known Bugs

  • No known bugs

2014-02-12 - Release 1.2.1

Bugfixes

  • Updating specs

2013-09-18 - Release 1.2.0

Summary

This release adds puppet:// URI support, a few bugfixes, and lots of tests.

Features

  • puppet:// URI support for the chain, certificate, and private_key parameters

Bugfixes

  • Validate that keystore passwords are > 6 characters (would silent fail before)
  • Fixed corrupted keystore PKCS12 files in some cases.
  • More acceptance tests, unit tests, and rspec-puppet tests.

1.1.0

This minor feature provides a number of new features:

  • We have introduced a new property password_file to the java_ks type, so that users can specify a plain text file to be used for unlocking a Java keystore file.
  • A new property path has been also added so you can add a custom search path for the command line tooling (keystore etc.)

Travis-CI support has also been added to improve testing.

Detailed Changes

  • Support for executables outside the system default path (Filip Hrbek)
  • Add password_file to type (Raphaël Pinson)
  • Travis ci support (Adrien Thebo)
  • refactor keytool provider specs (Adrien Thebo)

0.0.6

Fixes an issue with ibm java handling input from stdin on SLES