This repository has been archived by the owner on Mar 15, 2020. It is now read-only.
forked from duosecurity/duo_unix
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathCHANGES
172 lines (96 loc) · 3.68 KB
/
CHANGES
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
duo_unix-1.9.21:
- Only allow http_proxy to be defined in configuration file instead of environment
duo_unix-1.9.20:
- Fix installation on AIX systems
- Add support for using OpenSSL 1.1.0
- Link libduo statically to address issues with the ldconfig cache and incompatibilities between versions
- Fixed a bug that produced incorrect SNI when using a proxy
duo_unix-1.9.19:
- Restore the http_proxy environment variable after Duo is done
- Added https_timeout config option to pam_duo
- Handles missing shell and adds default if not specified in getpwuid
- Add SNI support and a guard for systems that don't support SNI
- Bug fixes for timeouts and fallback ip addresses
duo_unix-1.9.18:
- Added HTTP proxy connection error handling
- Improved compatibility with Solaris and AIX
duo_unix-1.9.17:
- Fixed PAM return code issue
duo_unix-1.9.16:
- Test fixes
- Compilation fixes
duo_unix-1.9.15:
- SELinux policy module package support
- PAM module improvements
- Removed deprecated SHA1 Entrust CA
duo_unix-1.9.14:
- Added SELinux policy module
- Improve poll(2) error handling
duo_unix-1.9.13:
- Bugfixes for signal handling
duo_unix-1.9.12:
- Include https_timeout configuration parameter
- IPv6 support on systems that have getaddrinfo
duo_unix-1.9.11:
- Improve compatibility with FreeBSD 10.
duo_unix-1.9.10:
- Use the correct timeout when polling.
duo_unix-1.9.9:
- Use poll(2) instead of select(2) for timeouts to support busy
systems with many open file descriptors.
- Send User-Agent header with each request.
duo_unix-1.9.8:
- Improve support for SHA2 in HTTPS.
duo_unix-1.9.7:
- Allow using accept_env_factor with SSH.
- Allow using autopush with PAM on Mac OS X.
duo_unix-1.9.6:
- Update HTTPS CA certificates.
duo_unix-1.9.5:
- Fix issues running 'make check'
- Remove accept_env_factor from pam_duo manpage, as it will not work
duo_unix-1.9.4:
- Send codes / push requests using $DUO_PASSCODE environment variable
- Fix error in 1.9.3 changelog :)
- pam_duo is feature-par with login_duo (autopush, prompts)
- Internal refactoring
- Configuration option for falling back to the local IP if the client
IP cannot be detected.
duo_unix-1.9.3:
- Autopush is more user friendly
- Add prompts option to the config file
- Various build and test fixups
duo_unix-1.9.2:
- Restore compatability with Mac OS X <= 10.6
duo_unix-1.9.1:
- Add motd option to the config file
- Add autopush option to the config file
duo_unix-1.9:
- Add multilib support to auto-detect lib/lib64 libdirs
- Added http_proxy option to the config file
- Various build fixups
- Documentation cleanups
duo_unix-1.8:
- Fixed authenticated HTTP_PROXY support
- Better handling of HTTP response status codes
- Include server IP address in pushinfo
duo_unix-1.7:
- Replaced libcurl (and its problematic axTLS, GnuTLS, NSS, polarssl,
Cyassl, etc. dependencies) with a minimal OpenSSL-based libhttps
- Replaced 'minuid' config option with more flexible 'groups' matching
- Added automated tests using cram.py for "make {dist}check"
- Added 'cafile' configuration option to override CA cert for testing
- Added login_duo -h option to specify remote host manually
- Added duo_unix.spec from S. Zachariah Sprackett <zac@sprackett.com>
- Fixed issue #5: add implicit 'safe' failmode for local config errors
- Title-cased "Command" in pushinfo
duo_unix-1.6:
- Added 'pushinfo' configuration option
- Fixed Duo enrollment on FreeBSD
- Pedantic GPL + OpenSSL license handling
duo_unix-1.5:
- Changed 'noconn' (allow, deny) option in login_duo and pam_duo to
the clearer 'failmode' (safe, secure), e.g.
http://en.wikipedia.org/wiki/Fail-safe
- Fixed curl_easy_setopt() of User-Agent for libcurl < 7.17.0
- Added CHANGES :-)