Modify shib-keygen to create the certificate key group-readable

[shibboleth/sp.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index 9fc2d8c..b628755 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,4 +1,11 @@
-shibboleth-sp2 (2.3.1+dfsg-1) UNRELEASED; urgency=low
+shibboleth-sp2 (2.3.1+dfsg-2) UNRELEASED; urgency=low
+
+  * Modify shib-keygen to create the new certificate key group-readable by
+    _shibd and not world-readable.  (Closes: #571631)
+
+ -- Russ Allbery <rra@debian.org>  Fri, 14 May 2010 17:29:48 -0700
+
+shibboleth-sp2 (2.3.1+dfsg-1) unstable; urgency=low
 
   * New upstream release.
     - Don't sign messages for SOAP requests twice.
@@ -11,8 +18,10 @@ shibboleth-sp2 (2.3.1+dfsg-1) UNRELEASED; urgency=low
   * Apply upstream fix for shibd removing the PID file when called with
     the -F option.  This prevents the check of certificate permissions in
     the init script from removing the PID file of a running shibd.
+  * Add ${shlibs:Depends} to the libshibsp-dev package dependencies.
+  * Add ${misc:Depends} to all package dependencies.
 
- -- Russ Allbery <rra@debian.org>  Thu, 17 Dec 2009 16:51:57 -0800
+ -- Russ Allbery <rra@debian.org>  Sun, 03 Jan 2010 13:54:55 -0800
 
 shibboleth-sp2 (2.3+dfsg-1) unstable; urgency=high