# changelog

author: Dogtag Team <pki-devel@redhat.com> 10.4.6-1
changelog:
  - dogtagpki Pagure Issue #2540 - Creating symmetric key (sharedSecret)
     using tkstool is failing when operating system is in FIPS mode. (jmagne)
  - dogtagpki Pagure Issue #2651 - Adding CRL_GENERATION audit event.
    (edewata)
  - dogtagpki Pagure Issue #2660 - CA Server installation with HSM fails
    (jmagne)
  - dogtagpki Pagure Issue #2699 - Enabling all subsystems on startup
    (edewata)
  - dogtagpki Pagure Issue #2710 - Key recovery on token fails because
    key record is not marked encrypted (vakwetu)
  - dogtagpki Pagure Issue #2711 - LWCA creation fails (ftweedal)


author: Dogtag Team <pki-devel@redhat.com> 10.4.7-1
changelog:
  - Require "selinux-policy-targeted >= 3.13.1-159" as a runtime requirement
  - Require "tomcatjss >= 7.2.3" as a build and runtime requirement
  - dogtagpki Pagure Issue #1663 - Add SCP03 support (jmagne)
  - dogtagpki Pagure Issue #2556 - pkispawn fails to create PKI subsystem
    on FIPS enabled system (edewata)
  - dogtagpki Pagure Issue #2674 - CA brought down during separate KRA
    instance creation (edewata)
  - dogtagpki Pagure Issue #2676 - pkispawn fails occasionally with this
    failure ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
  - dogtagpki Pagure Issue #2687 - Upgrade script for keepAliveTimeout
    parameter (edewata)
  - dogtagpki Pagure Issue #2707 - SubCA installation failure with 2 step
    installation in fips enabled mode (edewata)
  - dogtagpki Pagure Issue #2713 - Build failure due to Pylint issues (cheimes)
  - dogtagpki Pagure Issue #2714 - Classpath problem while trying to run pki
    CLI (edewata)
  - dogtagpki Pagure Issue #2717 - Certificate import using pki
    client-cert-import is asking for password when already provided (edewata)
  - dogtagpki Pagure Issue #2721 - Key recovery using externalReg fails with
    java null pointer exception on KRA (vakwetu)
  - dogtagpki Pagure Issue #2726 - client-cert-import --ca-cert should import
    CA cert with trust bits "CT,C,C" (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.4.8-1
changelog:
  - dogtagpki Pagure Issue #2540 - Creating symmetric key (sharedSecret)
    using tkstool is failing when operating system is in FIPS mode. (jmagne)
  - dogtagpki Pagure Issue #2617 - Allow CA to process pre-signed CMC
    non-signing certificate requests (cfu)
  - dogtagpki Pagure Issue #2619 - Allow CA to process pre-signed CMC
    revocation non-signing cert requests (cfu)
  - dogtagpki Pagure Issue #2643 - Session timeout for PKI console
    (edewata)
  - dogtagpki Pagure Issue #2719 - change the way aes clients refer to
    aes keysets (vakwetu)
  - dogtagpki Pagure Issue #2722 - dont reuse IVs in the CMC code
    (vakwetu)
  - dogtagpki Pagure Issue #2728 - In keywrap mode, key recovery on
    KRA with HSM causes KRA to crash (ftweedal)


author: Dogtag Team <pki-devel@redhat.com> 10.4.8-2
changelog:
  - dogtagpki Pagure Issue #2721 - Key recovery using externalReg fails
    with java null pointer exception on KRA (vakwetu)
  - dogtagpki Pagure Issue #2737 - CMC: check HTTPS client
    authentication cert against CMC signer (cfu)
  - dogtagpki Pagure Issue #2741 - Unable to find keys in the p12 file
    after deleting the any of the subsystem certs from it (ftweedal)
  - dogtagpki Pagure Issue #2745 - Platform Dependent Python Import (cheimes)


