# changelog

author: Christina Fu <cfu@redhat.com> - 4.2.6-9.el5idm
changelog:
  - bug 654657 - <jdennis@redhat.com>
    Incorrect socket accept error message due to bad pointer arithmetic
  - bug 661142 - <cfu@redhat.com>
    Verification should fail when a revoked certificate is added


author: Andrew Wnuk <awnuk@redhat.com> - 4.2.6-15
changelog:
  - bug 676083 - JSS: slots not freed
    This patch is based on release 9, which is newer than release 10.


author: Jack Magne <jmagne@redhat.com> - 4.2.6-15.99
changelog:
  - bug 694661 - TKS instance crash during token enrollment.
    Back out of previous patch for #676083.


author: Christina Fu <cfu@redhat.com> - 4.2.6-16.99.
changelog:
  - Bug 670980 - Cannot create system certs when using LunaSA HSM in FIPS Mode and ECC algorithms (support tokens that don't do ECDH)


author: Christina Fu <cfu@redhat.com> - 4.2.6-18.999
changelog:
  - Bugzilla Bug #737122 - DRM: during archiving and recovering, wrapping
    unwrapping keys should be done in the token
  - support for PKCS5v2; support for secure PKCS12


author: Matthew Harmsen <mharmsen@redhat.com> - 4.2.6-19.99
changelog:
  - Bugzilla Bug #715621 - Defects revealed by Coverity scan
  - inserting patch prior to jss-PBE-PKCS5-V2-secure-P12.patch


author: Christina Fu <cfu@redhat.com> - 4.2.6-20.99
changelog:
  - Bugzilla Bug #744797 - KRA key recovery (retrieve pkcs#12) fails after the
    in-place upgrade( CS 8.0->8.1)


author: Christina Fu <cfu@redhat.com> - 4.2.6-22.99
changelog:
  - Bugzilla Bug #745278 - [RFE] ECC encryption keys cannot be archived
    ECC phase2 work - support for ECC encryption key archival and recovery (cfu)
  - Bugzilla Bug #797352 - Un-deprecate previously deprecated methods in
    JSS 4.2.6 . . . (mharmsen)
  - Dogtag TRAC Task #109 (https://fedorahosted.org/pki/ticket/109) - add
    benign JNI jar file symbolic link from JNI libdir to JNI jar file (mharmsen)


author: Matthew Harmsen <mharmsen@redhat.com> - 4.2.6-23.99
changelog:
  - Bugzilla Bug #797352 - Un-deprecate previously deprecated methods in
    JSS 4.2.6 . . . BadPaddingException (mharmsen)


author: Christina Fu <cfu@redhat.com> - 4.2.6-25.99
changelog:
  - Bugzilla 744207 - Key archival fails when KRA is configured with lunasa.
  - Bugzilla Bug #952500 CMCAuth fails with error "CMCAuth:
    java.security.NoSuchAlgorithmException" when using NetHSM token
  - added source URLs in spec file to pass Package Wrangler


author: Margaret Lum <mlum@redhat.com> 4.2.4-41.el5idm
changelog:
  - Build with IBM JVM 1.4.2.  Rebuild.  Added LD_PRELOAD back in for 232224.
  - Updated BuildRequires for java-1.4.2-ibm.


author: Matthew Harmsen <mharmsen@redhat.com> 4.2.5-1.el5idm
changelog:
  - Updated JSS version to 4.2.5.
  - Updated BuildRequires for nspr-devel >= 4.6.99
  - Updated BuildRequires for nss-devel >= 3.12.0
  - Updated BuildRequires for java-devel >= 1.6.0
  - Updated BuildRequires for pkgconfig
  - Force BuildRequires to use java-devel-openjdk >= 1.6.0 (OpenJDK 1.6.0)
  - Updated Requires for nss >= 3.12.0
  - Updated Requires for java >= 1.6.0


author: Christina Fu <cfu@redhat.com> 4.2.6-1.el5idm
changelog:
  - Bugzilla Bug #455305 -  CA ECC Signing Key Failure
  - Bugzilla Bug #502111 -  Need JSS interface for NSS's
    PK11_GenerateKeyPairWithOpFlags() function
  - Bugzilla Bug #503809 -  Update JSS version to 4.2.6
  - Bugzilla Bug #503817 -  Create JSS Javadocs as their own RPM


author: Matthew Harmsen <mharmsen@redhat.com> 4.2.6-2.el5idm
changelog:
  - Bugzilla Bug #503809 -  Update JSS version to 4.2.6 (use correct tarball)
  - Update License string to be more specific on versions (rcritten@redhat.com)
  - Include patch to fix missing @param in javadocs (rcritten@redhat.com)
  - Added signature verification


author: Ade Lee <alee@redhat.com> 1.0.0-14
changelog:
  - Resolves: #643546 - [RFE] Add nuxwdog to RHEL.
  - Remove old encryption scheme
  - Store passwords in kernel keyring


