ssl-cert (1.2.0ubuntu1) stonking; urgency=medium

  * Merge with Debian unstable (LP: #2163545). Remaining changes:
    - d/rules, d/ssl-cert.service: (re)generate ssl-cert-snakeoil on first boot
      Add a systemd unit with ConditionPathExists=yes to generate a
      fresh private key for each installed system when ssl-cert
      is preinstalled in installation media
      (true for all Ubuntu and flavor desktop live images today). (LP #2037869)
  * New changes:
    - d/t/snakeoil: add test for snakeoil key pair generation
      from the snakeoil systemd service.

 -- Hector Cao <hector.cao@canonical.com>  Tue, 18 Aug 2026 21:42:06 +0200

ssl-cert (1.2.0) unstable; urgency=medium

  [ Stefan Fritsch ]
  * Bump standards-version and remove Priority from control file
  * Increase default key length to 3072, but don't replace existing
    2048 bit keys. Closes: #904686
  * Enable Salsa-CI
  * Allow separate key/cert files for the non generate-default-snakeoil
    case, too. Closes: #929121
  * Allow to override CN and SubjectAltName from command line.

  [ Luca Boccassi ]
  * Install and use sysusers.d config file instead of adduser for the
    ssl-cert group.

 -- Stefan Fritsch <sf@debian.org>  Sat, 01 Aug 2026 17:20:31 +0200

ssl-cert (1.1.3ubuntu2) resolute; urgency=medium

  * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)

 -- Sebastien Bacher <seb128@debian.org>  Sat, 06 Dec 2025 12:03:00 +0100

ssl-cert (1.1.3ubuntu1) plucky; urgency=medium

  * Merge with Debian unstable. (LP: #2085295) Remaining changes:
    - d/rules, d/ssl-cert.service: (re)generate ssl-cert-snakeoil on first boot
      Add a systemd unit with ConditionPathExists=yes to generate a
      fresh private key for each installed system when ssl-cert
      is preinstalled in installation media
      (true for all Ubuntu and flavor desktop live images today). (LP #2037869)
  * Drop changes:
    - make-ssl-cert: Fix --expiration-days parsing
      Use ${OPTARG} instead of ${OPTIND} to obtain the actual option value.
      (LP #2069330)
      [Fixed in 1.1.3]

 -- John Chittum <john.chittum@canonical.com>  Fri, 08 Nov 2024 08:14:40 -0500

ssl-cert (1.1.3) unstable; urgency=medium

  [ Sergio Durigan Junior ]
  * make-ssl-cert: Fix --expiration-days parsing.
    Use ${OPTARG} instead of ${OPTIND} to obtain the actual option value.
    (Closes: #1074278, #1072737)

  [ Stefan Fritsch ]
  * Add Romanian debconf translation. Thanks to Remus-Gabriel Chelu  for the
    patch. Closes: #1033720
  * Fix lintian override

 -- Stefan Fritsch <sf@debian.org>  Sun, 04 Aug 2024 11:38:36 +0200

ssl-cert (1.1.2ubuntu2) oracular; urgency=medium

  * make-ssl-cert: Fix --expiration-days parsing
    Use ${OPTARG} instead of ${OPTIND} to obtain the actual option value.
    (LP: #2069330)

 -- Sergio Durigan Junior <sergio.durigan@canonical.com>  Tue, 25 Jun 2024 16:07:11 -0400

ssl-cert (1.1.2ubuntu1) mantic; urgency=medium

  * Add a systemd unit to generate a fresh private key for each
    installed system when ssl-cert is preinstalled in installation media
    (true for all Ubuntu and flavor desktop live images today).
    LP: #2037869.

 -- Steve Langasek <steve.langasek@ubuntu.com>  Sat, 30 Sep 2023 21:19:41 -0700

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog ssl-cert`.
