# changelog

author: Dave Dykstra <dwd@fnal.gov> - 1.0-1
changelog:
  - Use the same root / $CWD as the target process.  Without this, the
    authz process may utilize the incorrect file for target processes
    that are in a chroot or provide a relative path for the X509 proxy.


author: Dave Dykstra <dwd@fnal.gov>> - 1.5.11-1.1
changelog:
  - Updated to upstream 1.5.11-1.1, removed patch for unloading
      OpenSSL error strings (SOFTWARE-3282).


author: Dave Dykstra <dwd@fnal.gov> - 2.1.22-1
changelog:
  - Change resign_osg_whitelist to continue trying all repos even if one
    fails.  I have seen about a 0.1% failure rate with masterkeycard signing.
  - Remove reflog files in recover_oasis_rollback
  - Remove /etc/sysconfig/gsisshd from oasis-login.


author: Dave Dykstra <dwd@fnal.gov> - 2.1.24-1
changelog:
  - Switch to using cvmfs_server resign instead of resign_osg_whitelist
    in recover_oasis_rollback.  It requires repositories to be healthy,
    so recover_oasis_rollback first does a couple of transaction/aborts
    to clean things up.


author: Dave Dykstra <dwd@fnal.gov> - 2.1.27-1
changelog:
  - Send oasis-login cron output to log files
  - Have copy_config_osg allow either itb or production key on oasis-itb's
    config repository
  - Have blank_osg_repository always assume production masterkey even on itb
  - Add a log message in generate_whitelists when the url changes


author: Dave Dykstra <dwd@fnal.gov> - 2.1.28-1
changelog:
  - Update cvmfs.conf to go with cvmfs-2.4.2 on oasis-replica.  Reload apache
    there if it is active, and frontier-squid too while we're at it.


author: Dave Dykstra <dwd@fnal.gov> - 2.1.29-1
changelog:
  - Remove temporary WSGI config for cvmfs-servermon because that is now
    built in to new version of cvmfs-servermon.
  - Add 61 second expiration of .json on stratum 0, to be consistent with
    stratum 1.
  - Add additional listening port 8080 for squid, and move apache's port
    for stratum 1s to 8880.
  - Reload iptables during postinstall on oasis and oasis-replica.
  - Reload httpd during postinstall on oasis as it had been on oasis-replica.
  - Run cvmfs_server masterkeycard -k twice if necessary in oasis_status_stamp,
    resign_osg_whitelist, and recover_oasis_rollback, because sometimes the
    key card access fails.
  - Add oasis-replica-initclean and corresponding systemd service to clean up
    reflogs at boot time, in case of rollback.


author: Dave Dykstra <dwd@fnal.gov> - 2.1.30-1
changelog:
  - Change add_osg_repository to use cvmfs_server add-replica -p to avoid
    creating any apache configuration, instead of removing it after the
    fact. This is now crucial because without -p an extra wsgi configuration
    file is created which clashes with the wsgi config in cvmfs.conf.


author: Derek Weitzel <dweitzel@cse.unl.edu> - 0.3.2-2
changelog:
  - Update packaging to not include 2 scripts for the admin-create*
  - Include the correct package for python-jwt dependency


author: Derek Weitzel <dweitzel@cse.unl.edu> - 1.2.0-1
changelog:
  * Fri Jul 6 2018 Derek Weitzel <dweitzel@cse.unl.edu> - 1.1.0-1
  - Add support for updated RFC for "scope"
  - Add support for Elliptic Curve cryptography


author: Diego Davila <didavila@ucsd.edu> - 2.1.7-7
changelog:
  - Adding XrootD major version to the shared file name
  - building against XrootD-4.12.2 (software-4093)


author: Carl Edquist <edquist@cs.wisc.edu> - 2.2.0-1
changelog:
  - Build against xrootd 5 (SOFTWARE-3923, #32)
  - Only write checksum file if hdfsCloseFile() was successful (#34)
  - Add support for new extended attribute API for XrdSecEntity (#35)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 2.2.0-1.1
changelog:
  - Add SOFTWARE-4645-usernames-with-tokens.patch to fix finding the right
    username with token auth (SOFTWARE-4645, #36)


