diff --git a/.gitignore b/.gitignore
index dc9d439..33eef1a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/pki-10.9.4.tar.gz
+SOURCES/pki-10.10.2.tar.gz
diff --git a/.pki-core.metadata b/.pki-core.metadata
index 5d8738e..35bd0c0 100644
--- a/.pki-core.metadata
+++ b/.pki-core.metadata
@@ -1 +1 @@
-dd0b6a1732c36077180769ba58ed11e659c0b621 SOURCES/pki-10.9.4.tar.gz
+15e1bd559f7e22c25dd7fc4c546a7b344a1713a5 SOURCES/pki-10.10.2.tar.gz
diff --git a/SPECS/pki-core.spec b/SPECS/pki-core.spec
index 004174b..52266fa 100644
--- a/SPECS/pki-core.spec
+++ b/SPECS/pki-core.spec
@@ -6,15 +6,15 @@ Name: pki-core
%global brand Red Hat
Summary: %{brand} PKI Core Package
-URL: http://www.dogtagpki.org/
+URL: https://www.dogtagpki.org
# The entire source code is GPLv2 except for 'pki-tps' which is LGPLv2
License: GPLv2 and LGPLv2
-# For development (unsupported) releases, use x.y.z-0.n.unstable with alpha/beta phase.
-# For official (supported) releases, use x.y.z-r where r >=1 without alpha/beta phase.
-Version: 10.9.4
+# For development (i.e. unsupported) releases, use x.y.z-0.n.<phase>.
+# For official (i.e. supported) releases, use x.y.z-r where r >=1.
+Version: 10.10.2
Release: 1%{?_timestamp}%{?_commit_id}%{?dist}
-#global _phase -a1
+#global _phase -beta1
# To create a tarball from a version tag:
# $ git archive \
@@ -57,14 +57,15 @@ Patch1: 0001-Removed-dependency-on-pytest-runner.patch
# Java
################################################################################
-%define java_home /usr/lib/jvm/jre-openjdk
%define java_devel java-devel
%define java_headless java-headless
%if 0%{?fedora} && 0%{?fedora} >= 33
%define min_java_version 1:11
+%define java_home /usr/lib/jvm/java-11-openjdk
%else
%define min_java_version 1:1.8.0
+%define java_home /usr/lib/jvm/java-1.8.0-openjdk
%endif
################################################################################
@@ -109,6 +110,8 @@ Patch1: 0001-Removed-dependency-on-pytest-runner.patch
%global with_base 1
# package_option server
%global with_server 1
+# package_option acme
+%global with_acme 1
# package_option ca
%global with_ca 1
# package_option kra
@@ -128,6 +131,8 @@ Patch1: 0001-Removed-dependency-on-pytest-runner.patch
%define debug_package %{nil}
%endif
+%bcond_without sdnotify
+
# ignore unpackaged files from native 'tpsclient'
# REMINDER: Remove this '%%define' once 'tpsclient' is rewritten as a Java app
%define _unpackaged_files_terminate_build 0
@@ -179,7 +184,7 @@ BuildRequires: ldapjdk >= 4.22.0
BuildRequires: apache-commons-cli
BuildRequires: apache-commons-codec
BuildRequires: apache-commons-io
-BuildRequires: apache-commons-lang
+BuildRequires: apache-commons-lang3 >= 3.2
BuildRequires: apache-commons-net
BuildRequires: jakarta-commons-httpclient
BuildRequires: glassfish-jaxb-api
@@ -231,8 +236,13 @@ BuildRequires: python3-pytest-runner
BuildRequires: junit
BuildRequires: jpackage-utils >= 0:1.7.5-10
-BuildRequires: jss >= 4.7.0
-BuildRequires: tomcatjss >= 7.5.0
+BuildRequires: jss >= 4.8.0
+BuildRequires: tomcatjss >= 7.6.1
+
+# JNA is used to bind to libsystemd
+%if %{with sdnotify}
+BuildRequires: jna
+%endif
BuildRequires: systemd-units
%if 0%{?rhel}
@@ -279,6 +289,7 @@ to manage enterprise Public Key Infrastructure deployments.
PKI consists of the following components:
+ * Automatic Certificate Management Environment (ACME) Responder
* Certificate Authority (CA)
* Key Recovery Authority (KRA)
* Online Certificate Status Protocol (OCSP) Manager
@@ -303,6 +314,7 @@ Requires: %{vendor_id}-pki-console-theme = %{version}
# Make certain that this 'meta' package requires the latest version(s)
# of ALL PKI core packages
+Requires: pki-acme = %{version}
Requires: pki-ca = %{version}
Requires: pki-kra = %{version}
Requires: pki-ocsp = %{version}
@@ -330,6 +342,7 @@ to manage enterprise Public Key Infrastructure deployments.
PKI consists of the following components:
+ * Automatic Certificate Management Environment (ACME) Responder
* Certificate Authority (CA)
* Key Recovery Authority (KRA)
* Online Certificate Status Protocol (OCSP) Manager
@@ -348,7 +361,7 @@ Summary: PKI Symmetric Key Package
Requires: %java_headless >= %{min_java_version}
Requires: jpackage-utils >= 0:1.7.5-10
-Requires: jss >= 4.7.0
+Requires: jss >= 4.8.0
Requires: nss >= 3.38.0
# Ensure we end up with a useful installation
@@ -418,7 +431,7 @@ Requires: %java_headless >= %{min_java_version}
Requires: apache-commons-cli
Requires: apache-commons-codec
Requires: apache-commons-io
-Requires: apache-commons-lang
+Requires: apache-commons-lang3 >= 3.2
Requires: apache-commons-logging
Requires: apache-commons-net
Requires: jakarta-commons-httpclient
@@ -485,7 +498,6 @@ Summary: PKI Server Package
BuildArch: noarch
Requires: hostname
-Requires: net-tools
Requires: policycoreutils
Requires: procps-ng
@@ -518,7 +530,12 @@ Requires(post): systemd-units
Requires(preun): systemd-units
Requires(postun): systemd-units
Requires(pre): shadow-utils
-Requires: tomcatjss >= 7.5.0
+Requires: tomcatjss >= 7.6.1
+
+# JNA is used to bind to libsystemd
+%if %{with sdnotify}
+Requires: jna
+%endif
# pki-healthcheck depends on the following library
%if 0%{?rhel}
@@ -542,18 +559,29 @@ Provides: bundled(js-patternfly) = 3.59.2
Provides: bundled(js-underscore) = 1.9.2
%description -n pki-server
-The PKI Server Package contains libraries and utilities needed by the
-following PKI subsystems:
-
- the Certificate Authority (CA),
- the Key Recovery Authority (KRA),
- the Online Certificate Status Protocol (OCSP) Manager,
- the Token Key Service (TKS), and
- the Token Processing Service (TPS).
+The PKI Server Package contains libraries and utilities needed by other
+PKI subsystems.
# with server
%endif
+%if %{with acme}
+################################################################################
+%package -n pki-acme
+################################################################################
+
+Summary: PKI ACME Package
+BuildArch: noarch
+
+Requires: pki-server = %{version}-%{release}
+
+%description -n pki-acme
+The PKI ACME responder is a service that provides an automatic certificate
+management via ACME v2 protocol defined in RFC 8555.
+
+# with acme
+%endif
+
%if %{with ca}
################################################################################
%package -n pki-ca
@@ -853,9 +881,9 @@ cd build
-DVERSION=%{version}-%{release} \
-DVAR_INSTALL_DIR:PATH=/var \
-DP11_KIT_TRUST=/etc/alternatives/libnssckbi.so.%{_arch} \
- -DJAVA_VERSION=%{java_version} \
+ -DJAVA_VERSION=${java_version} \
-DJAVA_HOME=%java_home \
- -DPKI_JAVA_PATH=%java \
+ -DPKI_JAVA_PATH=%java_home/bin/java \
-DJAVA_LIB_INSTALL_DIR=%{_jnidir} \
-DSYSTEMD_LIB_INSTALL_DIR=%{_unitdir} \
-DAPP_SERVER=$app_server \
@@ -864,11 +892,18 @@ cd build
-DNSS_DEFAULT_DB_TYPE=%{nss_default_db_type} \
-DBUILD_PKI_CORE:BOOL=ON \
-DPYTHON_EXECUTABLE=%{python_executable} \
- -DWITH_TEST:BOOL=%{?with_test:ON}%{!?with_test:OFF} \
-%if ! %{with server} && ! %{with ca} && ! %{with kra} && ! %{with ocsp} && ! %{with tks} && ! %{with tps}
+%if ! %{with server} && ! %{with acme} && ! %{with ca} && ! %{with kra} && ! %{with ocsp} && ! %{with tks} && ! %{with tps}
-DWITH_SERVER:BOOL=OFF \
%endif
+ -DWITH_CA:BOOL=%{?with_ca:ON}%{!?with_ca:OFF} \
+ -DWITH_KRA:BOOL=%{?with_kra:ON}%{!?with_kra:OFF} \
+ -DWITH_OCSP:BOOL=%{?with_ocsp:ON}%{!?with_ocsp:OFF} \
+ -DWITH_TKS:BOOL=%{?with_tks:ON}%{!?with_tks:OFF} \
+ -DWITH_TPS:BOOL=%{?with_tps:ON}%{!?with_tps:OFF} \
+ -DWITH_ACME:BOOL=%{?with_acme:ON}%{!?with_acme:OFF} \
+ -DWITH_SYSTEMD_NOTIFICATION:BOOL=%{?with_sdnotify:ON}%{!?with_sdnotify:OFF} \
-DWITH_JAVADOC:BOOL=%{?with_javadoc:ON}%{!?with_javadoc:OFF} \
+ -DWITH_TEST:BOOL=%{?with_test:ON}%{!?with_test:OFF} \
-DBUILD_PKI_CONSOLE:BOOL=%{?with_console:ON}%{!?with_console:OFF} \
-DTHEME=%{?with_theme:%{vendor_id}} \
%if 0%{?rhel}
@@ -1079,8 +1114,8 @@ fi
%files -n pki-tools
################################################################################
-%license base/native-tools/LICENSE
-%doc base/native-tools/doc/README
+%license base/tools/LICENSE
+%doc base/tools/doc/README
%{_bindir}/p7tool
%{_bindir}/pistool
%{_bindir}/pki
@@ -1088,7 +1123,6 @@ fi
%{_bindir}/setpin
%{_bindir}/sslget
%{_bindir}/tkstool
-%{_datadir}/pki/native-tools/
%{_bindir}/AtoB
%{_bindir}/AuditVerify
%{_bindir}/BtoA
@@ -1113,7 +1147,7 @@ fi
%{_bindir}/PrettyPrintCrl
%{_bindir}/TokenInfo
%{_javadir}/pki/pki-tools.jar
-%{_datadir}/pki/java-tools/
+%{_datadir}/pki/tools/
%{_datadir}/pki/lib/p11-kit-trust.so
%{_mandir}/man1/AtoB.1.gz
%{_mandir}/man1/AuditVerify.1.gz
@@ -1187,6 +1221,7 @@ fi
%dir %{_sharedstatedir}/pki
%{_mandir}/man1/pkidaemon.1.gz
%{_mandir}/man5/pki_default.cfg.5.gz
+%{_mandir}/man5/pki_healthcheck.conf.5.gz
%{_mandir}/man5/pki-server-logging.5.gz
%{_mandir}/man8/pki-server-upgrade.8.gz
%{_mandir}/man8/pkidestroy.8.gz
@@ -1206,12 +1241,26 @@ fi
%{_mandir}/man8/pki-healthcheck.8.gz
%{_datadir}/pki/setup/
%{_datadir}/pki/server/
-%{_datadir}/pki/acme/
-%{_javadir}/pki/pki-acme.jar
+
+%if %{with sdnotify}
+%{_javadir}/pki/pki-systemd.jar
+%endif
# with server
%endif
+%if %{with acme}
+################################################################################
+%files -n pki-acme
+################################################################################
+
+%{_javadir}/pki/pki-acme.jar
+%dir %{_datadir}/pki/acme
+%{_datadir}/pki/acme/
+
+# with acme
+%endif
+
%if %{with ca}
################################################################################
%files -n pki-ca
@@ -1220,11 +1269,7 @@ fi
%license base/ca/LICENSE
%{_javadir}/pki/pki-ca.jar
%dir %{_datadir}/pki/ca
-%{_datadir}/pki/ca/conf/
-%{_datadir}/pki/ca/emails/
-%{_datadir}/pki/ca/profiles/
-%{_datadir}/pki/ca/setup/
-%{_datadir}/pki/ca/webapps/
+%{_datadir}/pki/ca/
# with ca
%endif
@@ -1237,9 +1282,7 @@ fi
%license base/kra/LICENSE
%{_javadir}/pki/pki-kra.jar
%dir %{_datadir}/pki/kra
-%{_datadir}/pki/kra/conf/
-%{_datadir}/pki/kra/setup/
-%{_datadir}/pki/kra/webapps/
+%{_datadir}/pki/kra/
# with kra
%endif
@@ -1252,9 +1295,7 @@ fi
%license base/ocsp/LICENSE
%{_javadir}/pki/pki-ocsp.jar
%dir %{_datadir}/pki/ocsp
-%{_datadir}/pki/ocsp/conf/
-%{_datadir}/pki/ocsp/setup/
-%{_datadir}/pki/ocsp/webapps/
+%{_datadir}/pki/ocsp/
# with ocsp
%endif
@@ -1267,9 +1308,7 @@ fi
%license base/tks/LICENSE
%{_javadir}/pki/pki-tks.jar
%dir %{_datadir}/pki/tks
-%{_datadir}/pki/tks/conf/
-%{_datadir}/pki/tks/setup/
-%{_datadir}/pki/tks/webapps/
+%{_datadir}/pki/tks/
# with tks
%endif
@@ -1282,10 +1321,7 @@ fi
%license base/tps/LICENSE
%{_javadir}/pki/pki-tps.jar
%dir %{_datadir}/pki/tps
-%{_datadir}/pki/tps/applets/
-%{_datadir}/pki/tps/conf/
-%{_datadir}/pki/tps/setup/
-%{_datadir}/pki/tps/webapps/
+%{_datadir}/pki/tps/
%{_mandir}/man5/pki-tps-connector.5.gz
%{_mandir}/man5/pki-tps-profile.5.gz
%{_mandir}/man1/tpsclient.1.gz
@@ -1363,49 +1399,75 @@ fi
################################################################################
%changelog
+* Tue Dec 08 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.10.2-1
+- Rebase to PKI 10.10.2
+- Bug #1392616 - KRA key recovery cli kra-key-retrieve generates an invalid p12 file
+- Bug #1890639 - Two-step installation with external certificates fails on HSM configured system
+- Bug #1897120 - pki-server cert-fix command failing
+- Bug #1694664 - ipa: ERROR: Certificate operation cannot be completed: Unable to communicate with CMS (503)
+
+* Tue Nov 17 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.10.1-1
+- Rebase to PKI 10.10.1
+- Bug #1843416 - kra-audit-mod fail with Invalid event configuration
+- Bug #1889691 - ACME failed when run with more than 1 thread/connection
+- Bug #1891577 - Sub-ordinate installation is failing with NullPointerException
+
+* Wed Oct 28 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.10.0-1
+- Rebase to PKI 10.10.0
+- Add workaround for missing capture_output in Python 3.6
+- Fix JSS initialization in pki-server <subsystem>-user-cert-add
+- Fix NPE in UGSubsystem.findUsersByKeyword()
+- Bug #1787115 - Need Method to copy SKI from CSR to Certificate signed
+- Bug #1875563 - Add KRA Transport and Storage Certificates profiles, audit for IPA
+- Bug #1883996 - Inconsistent folders in pki-tools
+
+* Tue Oct 20 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.10.0-0.2.beta1
+- Rebase to PKI 10.10.0-beta1
+- Bug #1868233 - Disabling AIA and cert policy extensions in ACME examples
+
* Fri Sep 11 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.4-1
-- Rebased to PKI 10.9.4
+- Rebase to PKI 10.9.4
- Red Hat Bugzilla #1873235 - Fix SSL_ERROR_INAPPROPRIATE_FALLBACK_ALERT in pki ca-user-cert-add
* Thu Sep 03 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.3-1
-- Rebased to PKI 10.9.3
+- Rebase to PKI 10.9.3
- Bug #1869893 - Common certificates are missing in CS.cfg on shared PKI instance
* Tue Aug 18 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.2-2
- Bug #1871064 - Replica install failing during pki-ca component configuration
* Tue Aug 18 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.2-1
-- Rebased to PKI 10.9.2
+- Rebase to PKI 10.9.2
* Wed Aug 12 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.1-2
- Bug #1857933 - CA Installation is failing with ncipher v12.30 HSM
- Bug #1868233 - Disabling AIA and cert policy extensions in ACME examples
* Thu Aug 06 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.1-1
-- Rebased to PKI 10.9.1
+- Rebase to PKI 10.9.1
- Bug #1426572 - Fix Secure connection issue when server is down
* Fri Jul 31 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.0-1
-- Rebased to PKI 10.9.0
+- Rebase to PKI 10.9.0
* Fri Jul 14 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.0-0.7
-- Fixed pki kra-key-generate failure
-- Fixed error handling in PKIRealm
+- Fix pki kra-key-generate failure
+- Fix error handling in PKIRealm
* Fri Jul 10 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.0-0.6
-- Rebased to PKI 10.9.0-b4
+- Rebase to PKI 10.9.0-b4
* Thu Jun 25 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.0-0.4
-- Rebased to PKI 10.9.0-b2
+- Rebase to PKI 10.9.0-b2
* Mon Jun 22 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.0-0.3
-- Rebased to PKI 10.9.0-b1
+- Rebase to PKI 10.9.0-b1
* Tue May 26 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.0-0.1
-- Rebased to PKI 10.9.0-a1
+- Rebase to PKI 10.9.0-a1
* Tue Mar 03 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.8.3-1
-- Rebased to PKI 10.8.3
+- Rebase to PKI 10.8.3
- Bug #1809210 - TPS installation failure on HSM machine
- Bug #1807421 - Subordinate CA installation failed
- Bug #1806840 - KRA cloning with HSM failed
@@ -1414,63 +1476,63 @@ fi
- Bug #1795215 - pkispawn interactive installation failed
* Mon Feb 17 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.8.2-1
-- Rebased to PKI 10.8.2
+- Rebase to PKI 10.8.2
- Bug #1802006 - KRA installation failed to create ECC admin cert
* Mon Feb 10 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.8.1-1
-- Rebased to PKI 10.8.1
+- Rebase to PKI 10.8.1
* Fri Feb 07 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.8.0-1
-- Rebased to PKI 10.8.0
+- Rebase to PKI 10.8.0
* Thu Jan 16 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.8.0-0.5
-- Rebased to PKI 10.8.0-b3
+- Rebase to PKI 10.8.0-b3
* Fri Dec 13 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 10.8.0-0.4
-- Rebased to PKI 10.8.0-b2
+- Rebase to PKI 10.8.0-b2
* Wed Dec 11 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 10.8.0-0.3
-- Rebased to PKI 10.8.0-b1
+- Rebase to PKI 10.8.0-b1
* Fri Nov 22 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 10.8.0-0.2
-- Rebased to PKI 10.8.0-a2
+- Rebase to PKI 10.8.0-a2
* Thu Oct 31 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 10.8.0-0.1
-- Rebased to PKI 10.8.0-a1
+- Rebase to PKI 10.8.0-a1
* Wed Aug 14 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 10.7.3-1
-- Rebased to PKI 10.7.3
+- Rebase to PKI 10.7.3
- Bug #1698084 - pkidestroy not working as expected
- Bug #1468050 and Bug #1448235 - Support AES for LWCA key replication
* Tue Jul 23 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 10.7.2-1
-- Rebased to PKI 10.7.2
+- Rebase to PKI 10.7.2
- Bug #1721340 - TPS installation failure
- Bug #1248216 - Incorrect pkidaemon status
- Bug #1729215 - cert-fix: detect and prevent pkidbuser being used as --agent-uid
- Bug #1698059 - pki-core implements crypto
* Thu Jun 13 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 10.7.1-2
-- Fixed cloning issue
-- Fixed TPS installation issue
+- Fix cloning issue
+- Fix TPS installation issue
* Wed Jun 12 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 10.7.1-1
-- Rebased to PKI 10.7.1
+- Rebase to PKI 10.7.1
* Wed Apr 24 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 10.7.0-1
-- Rebased to PKI 10.7.0
+- Rebase to PKI 10.7.0
* Mon Jan 28 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.9-2
- Bug #1652269 - Replace Nuxwdog
* Mon Jan 14 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.9-1
-- Rebased to PKI 10.6.9
+- Rebase to PKI 10.6.9
- Bug #1629048 - X500Name.directoryStringEncodingOrder overridden by CSR encoding
- Bug #1652269 - Replace Nuxwdog
- Bug #1656856 - Need Method to Include SKI in CA Signing Certificate Request
* Thu Nov 29 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.8-1
-- Rebased to PKI 10.6.8
+- Rebase to PKI 10.6.8
- Bug #1602659 - Fix issues found by covscan
- Bug #1566360 - Fix missing serial number from pki-server subsystem-cert-find
@@ -1481,7 +1543,7 @@ fi
- Bug #1623444 - Fix Python KeyClient KeyRequestResponse parsing
* Fri Oct 05 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.7-1
-- Rebased to PKI 10.6.7
+- Rebase to PKI 10.6.7
* Fri Aug 24 2018 Alexander Bokovoy <abokovoy@redhat.com> 10.6.6-3
- Build on s390x
@@ -1491,10 +1553,10 @@ fi
- Bug #1620066 - pkispawn crashes as /usr/bin/python3 does not exist
* Mon Aug 13 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.6-1
-- Rebased to PKI 10.6.6
+- Rebase to PKI 10.6.6
* Wed Aug 08 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.5-1
-- Rebased to PKI 10.6.5
+- Rebase to PKI 10.6.5
* Tue Aug 07 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.4-4
- Bug #1612063 - Do not override system crypto policy (support TLS 1.3)
@@ -1504,52 +1566,52 @@ fi
Add direct dependency on slf4j-jdk14.
* Tue Jul 31 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.4-2
-- Updated Jackson and RESTEasy dependencies
+- Update Jackson and RESTEasy dependencies
* Fri Jul 20 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.4-1
-- Rebased to PKI 10.6.4
+- Rebase to PKI 10.6.4
* Thu Jul 05 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.3-1
-- Rebased to PKI 10.6.3
+- Rebase to PKI 10.6.3
* Mon Jul 02 2018 Miro Hrončok <mhroncok@redhat.com> 10.6.2-4
-- Rebuilt for Python 3.7
+- Rebuild for Python 3.7
* Thu Jun 28 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.2-3
-- Fixed macro expressions
+- Fix macro expressions
- Bug #1566606 - pki-core: Switch to Python 3
- Bug #1590467 - pki-core: Drop pylint dependency from RHEL 8
* Tue Jun 19 2018 Miro Hrončok <mhroncok@redhat.com> 10.6.2-2
-- Rebuilt for Python 3.7
+- Rebuild for Python 3.7
* Fri Jun 15 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.2-1
-- Rebased to PKI 10.6.2
+- Rebase to PKI 10.6.2
* Wed May 30 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.1-3
-- Updated JSS dependency
-- Updated Tomcat dependency
-- Fixed rpmlint warnings
+- Update JSS dependency
+- Update Tomcat dependency
+- Fix rpmlint warnings
* Fri May 04 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.1-2
- Bug #1574711 - pki-tools cannot be installed on current Rawhide
-- Fixed rpmlint warnings
+- Fix rpmlint warnings
* Thu May 03 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.1-1
-- Rebased to PKI 10.6.1
+- Rebase to PKI 10.6.1
- Bug #1559047 - pki-core misses a dependency to pki-symkey
- Bug #1573094 - FreeIPA external CA installation fails
* Wed Apr 11 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.0-1
-- Updated project URL and package descriptions
-- Cleaned up spec file
-- Rebased to PKI 10.6.0 final
+- Update project URL and package descriptions
+- Clean up spec file
+- Rebase to PKI 10.6.0 final
* Thu Mar 29 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.0-0.3
- Iryna Shcherbina <ishcherb@redhat.com>: Update Python 2 dependency declarations to new packaging standards
(See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
-- Rebased to PKI 10.6.0 beta2
+- Rebase to PKI 10.6.0 beta2
* Thu Mar 15 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 10.6.0-0.2
-- Rebased to PKI 10.6.0 beta
+- Rebase to PKI 10.6.0 beta