1@(#) $Id: CHANGES 67 2021-03-27 23:06:38Z leres $ (LBL) 2 3v2.9 Sat Mar 27 16:05:31 PDT 2021 4 5 - Add missing line escape for multiline conditional. 6 7 - Add support for Subject Alt Names including IP addresses. 8 9 - Install in ${exec_prefix}/bin if it exists and ${exec_prefix}/sbin 10 does not (concession to OSX suggested by Stephen Casner). 11 12v2.8 Sat Dec 26 00:08:23 PST 2020 13 14 - Add overrides for size of the key (-b bits), the certificate 15 duration (-d days), and the digest (-D digest). 16 17 - Fix a bug that ignored config file certificate duration and 18 always used 3650 days. 19 20v2.7 Fri Feb 16 17:21:19 PST 2018 21 22 - Enable additional cert usage types otherwise the generated certs 23 can't be used for servers. 24 25v2.6 Thu Feb 15 15:11:58 PST 2018 26 27 - Add subjectAltName to the v3_req section as per RFC 2818. 28 29v2.5 Mon Oct 6 10:19:36 PDT 2014 30 31 - Fix a bug that ignored digest and used the openssl default. 32 33 - Changed default digest to sha256. 34 35v2.4 Sat May 3 15:24:21 PDT 2014 36 37 - Update to support -C with openssl 1.X. 38 39 - Enforce the 2 character country code length requirement. 40 41 - Update copyright notices with the July 22, 1999 BSD-new version. 42 43 - Remove -o and -g from install commands to be FreeBSD ports staging 44 friendly. 45 46v2.3 Wed Apr 17 19:34:38 PDT 2013 47 48 - Add "days" to the config file. 49 50 - Document config file options in the man page. 51 52v2.2 Sun Oct 30 15:36:32 PDT 2011 53 54 - Add "bits" and "digest" to the config file. 55 56 - Change default bits from 1024 to 2048. 57 58 - Change default digest from md5 to sha1. 59 60v2.1 Mon Apr 25 19:41:38 PDT 2011 61 62 - Add -C flag which creates a create-cert.conf by parsing an 63 existing pem file. This is a handy way to bootstrap a config 64 from an old tree of self-signed certs. 65 66 - Add -f flag which allows non-FQDNs. 67 68v2.0 Thu Feb 24 15:05:31 PST 2011 69 70 - Initial public release; previously part of acld. 71