1
1
This NEWS file records noteworthy changes, very tersely.
2
2
See the manual for detailed information.
4
Version 1.7.6 (2016-03-13)
6
** Fix bug where stopping server would time out
7
** Make server runnable with Python 3
9
Version 1.7.5 (2016-03-08)
11
** Fix security restrictions in systemd service file.
12
** Work around bug where stopping server would time out
14
Version 1.7.4 (2016-03-05)
16
** Bug fix: Tolerate errors from configure_networking (Debian Bug
18
** Compilation: Only use sanitizing options which work with the
19
compiler used when building. This should fix compilation with GCC
20
4.9 on mips, mipsel, and s390x.
22
** Add extra security restrictions in systemd service file.
24
Version 1.7.3 (2016-02-29)
26
** Bug fix: Remove new type of keyring directory user by GnuPG 2.1.
27
** Bug fix: Remove "nonnull" attribute from a function argument, which
28
would otherwise generate a spurious runtime warning.
30
Version 1.7.2 (2016-02-28)
32
** Stop using python-gnutls library; it was not updated to GnuTLS 3.3.
33
** Bug fix: Only send D-Bus signal ClientRemoved if using D-Bus.
34
** Use GnuPG 2 if available.
36
** Compile with various sanitizing flags.
38
Version 1.7.1 (2015-10-24)
40
** Bug fix: Can now really find Mandos server even if the server has
41
an IPv6 address on a network other than the one which the Mandos
44
Version 1.7.0 (2015-08-10)
46
** Bug fix: Handle local Zeroconf service name collisions better.
47
** Bug fix: Finally fix "ERROR: Child process vanished" bug.
48
** Bug fix: Fix systemd service file to start server correctly.
49
** Bug fix: Be compatible with old 2048-bit DSA keys.
50
** The D-Bus API now provides the standard D-Bus ObjectManager
51
interface, and deprecates older functionality. See the DBUS-API
52
file for the currently recommended API. Note: the original API
53
still works, but is deprecated.
55
** Can now find Mandos server even if the server has an IPv6 address
56
on a network without IPv6 Router Advertisment (like if the Mandos
57
client itself is the router, or there is an IPv6 router advertising
58
a network other than the one which the Mandos server is on.)
59
** Use a better value than 1024 for the default number of DH bits.
60
This better value is either provided by a DH parameters file (see
61
below) or an appropriate number of DH bits is determined based on
63
** Bug fix: mandos-keygen now generates correct output for the
64
"Checker" variable even if the SSH server on the Mandos client has
65
multiple SSH key types.
66
** Can now use pre-generated Diffie-Hellman parameters from a file.
68
Version 1.6.9 (2014-10-05)
70
** Changed to emit standard D-Bus signal when D-Bus properties change.
71
(The old signal is still emitted too, but marked as deprecated.)
73
4
Version 1.6.8 (2014-08-06)
75
6
** Bug fix: mandos-keygen now generates working SSH checker commands.