-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 03 Dec 2017 00:07:45 +0000
Source: debian-edu-config
Binary: debian-edu-config
Architecture: source
Version: 1.940
Distribution: unstable
Urgency: medium
Maintainer: Debian Edu Developers <debian-edu@lists.debian.org>
Changed-By: Holger Levsen <holger@debian.org>
Description:
debian-edu-config - Configuration files for Skolelinux systems
Changes:
debian-edu-config (1.940) unstable; urgency=medium
.
[ Wolfgang Schweer ]
* Use trusted SSL/TLS secured connections in the internal network. Create a
Debian Edu rootCA certificate and a signed certificate that can be used for
Apache, Cups, Exim, Dovecot and Xrdp. Firefox ESR, Chromium, Konqueror and
Thunderbird will be configured accordingly so that users will no longer be
bothered with certificate issues.
- Add 'share/debian-edu-config/tools/create-debian-edu-certs'
along with the configuration files for the rootCA certificate:
+ share/debian-edu-config/sslCA.cnf
+ share/debian-edu-config/v3CA.cnf
and the server certificate:
+ share/debian-edu-config/ssl.cnf
+ share/debian-edu-config/v3.cnf
- Add 'share/debian-edu-config/tools/update-cert-dbs', a tool allowing
to create/update nssdb files in the users' home directories (old style
dbm ones for Firefox/Thunderbird and newer sql ones for Chromium,
Konqueror and maybe other applications).
- Add empty directories to /etc/skel as required places for the nssdb
files in the users' home directories (via debian/dirs):
+ etc/skel/.pki/nssdb
+ etc/skel/.thunderbird/debian-edu.default
- Add cfengine configuration files to configure the skeleton directories:
+ cf/cf.pki
+ cf/cf.thunderbird
- Add cfengine configuration file to set xrdp certificate links:
+ cf/cf.xrdp
- Adjust related cfengine configuration files:
+ cf/cf.apache2
+ cf/cf.chromium
+ cf/cf.cups
+ cf/cf.exim
+ cf/cf.firefox-esr
+ cf/cf.imap
+ cf/cf.ldapserver
+ cf/cfengine.conf
- Adjust related configuration files resp. tools:
+ etc/apache2/sites-available/debian-edu-ssl-default.conf
+ etc/exim4/exim-ldap-server-v4.conf
+ share/debian-edu-config/tools/update-firefox-homepage
+ share/debian-edu-config/tools/update-chromium-homepage
- Remove no longer needed tools:
+ share/debian-edu-config/tools/exim4-create-cert
+ sbin/snakeoil-on-ice (now that cert_override.txt is obsolete)
- Remove /etc/skel/.mozilla/firefox/debian-edu.default/cert_override.txt
upon upgrades.
- Make sure user accounts created using GOsa² get the nssdb files:
+ Adjust the 'share/debian-edu-config/tools/gosa-create' tool.
- Make sure the special first user account is generated with trusted
certificates configured:
+ Adjust the 'ldap-tools/ldap-debian-edu-install' script.
- Adjust debian/debian-edu-config.postinst and Makefile.
* Use https for all internal web resources and links to wiki.debian.org.
- etc/apache2/sites-available/debian-edu-default.conf:
+ Add http -> https rewrite directives.
- www:
+ Replace http with https (index.html.* files).
+ Run 'make all' to generate index.pot and *.po files.
+ Apply trivial unfuzzy to *.po files.
+ Rename nb.po -> no_NB.po and index.html.nb -> index.html.no_NB as
the .nb extension now seems to be the mime type for Mathematica
Notebook files and as such the file is downloaded (Firefox, Chromium)
or shown as plain text (Konqueror).
+ Replace pt_BR with pt-BR in pt_BR.po (html language name tag).
+ Adjust Makefile accordingly.
+ Run 'make all' again to generate index files.
- Adjust Makefile to reflect the changes.
* share/ltsp/plugins/ltsp-build-client/Debian-custom/032-edu-pkgs:
- Don't disable /etc/cron.d/debian-edu-config as this breaks the
execution of 'debian-edu-update-netblock' on diskless workstations.
Thanks to Mike Gabriel for spotting the bug.
.
[ Holger Levsen ]
* Bump standards version to 4.1.2, no changes needed.
* lintian-overrides:
- Correct linenumber for "command-with-path-in-maintainer-script" for
/usr/bin/etckeeper in postinst.
Checksums-Sha1:
d6b555aedf45098a732f325b95b9bfac44a24827 1852 debian-edu-config_1.940.dsc
e1e95fb9b6be79d99e4cf10acaa9fe12fbd1daf8 385312 debian-edu-config_1.940.tar.xz
25e86a065df72697431c17064f01ee04a3dc8653 5180 debian-edu-config_1.940_source.buildinfo
Checksums-Sha256:
6da0e1f76caedad8800bee5e819ee5cfb8aff7250c37474d0120b71a5b43e5c0 1852 debian-edu-config_1.940.dsc
ee719dcee4c05b43d610ded7706229521bd0642293df383ef8caa1bc4d36eb3a 385312 debian-edu-config_1.940.tar.xz
707364b0f247f431d4f1ec62ce5c77fb758210de83d50ad037ebf6698488ea65 5180 debian-edu-config_1.940_source.buildinfo
Files:
c63194a5f9347c2e13c239ab5ee8bfc4 1852 misc optional debian-edu-config_1.940.dsc
fcb638ddc7b42ee0c56f544e2762e7f3 385312 misc optional debian-edu-config_1.940.tar.xz
5a39b651f6642937bbf6322913ce9dfa 5180 misc optional debian-edu-config_1.940_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=qFsm
-----END PGP SIGNATURE-----
