From ba6ae959b8e21c714c69f66254e82837d45a3ed2 Mon Sep 17 00:00:00 2001 From: mschaefers <mschaefers@scoop-gmbh.de> Date: Mon, 03 Dec 2012 03:49:23 -0500 Subject: [PATCH] Merge branch 'master' of https://github.com/gitblit/gitblit into enhancedLdap --- docs/04_releases.mkd | 25 ++++++++++++++++++++++++- 1 files changed, 24 insertions(+), 1 deletions(-) diff --git a/docs/04_releases.mkd b/docs/04_releases.mkd index 2d5d7e5..3f03160 100644 --- a/docs/04_releases.mkd +++ b/docs/04_releases.mkd @@ -12,6 +12,8 @@ #### fixes +- Fixed incorrect links on history page for files not in the current/active commit (issue 166) +- Empty repository page failed to handle missing repository (issue 160) - Fixed broken ticgit urls (issue 157) - Exclude submodules from zip downloads (issue 151) - Fixed bug where repository ownership was not updated on rename user @@ -46,15 +48,33 @@ **New:** *git.garbageCollectionHour = 0* **New:** *git.defaultGarbageCollectionThreshold = 500k* **New:** *git.defaultGarbageCollectionPeriod = 7 days* +- Added support for X509 client certificate authentication (github/kevinanderson1). (issue 106) +You can require all git servlet access be authenticated by a client certificate. You may also specify the OID fingerprint to use for mapping a certificate to a username. It should be noted that the user account MUST already exist in Gitblit for this authentication mechanism to work; this mechanism can not be used to automatically create user accounts from a certificate. + **New:** *git.requireClientCertificates = false* + **New:** *git.enforceCertificateValidity = true* + **New:** *git.certificateUsernameOIDs = CN* +- Revised clean install certificate generation to create a Gitblit GO Certificate Authority certificate; an SSL certificate signed by the CA certificate; and to create distinct server key and server trust stores. <u>The store files have been renamed!</u> +- Added support for Gitblit GO to require usage of client certificates to access the entire server. +This is extreme and should be considered carefully since it affects every https access. The default is to **want** client certificates. Setting this value to *true* changes that to **need** client certificates. + **New:** *server.requireClientCertificates = false* +- Added Gitblit Certificate Authority, an X509 certificate generation tool for Gitblit GO to encourage use of client certificate authentication. +- Added setting to control length of shortened commit ids + **New:** *web.shortCommitIdLength=8* +- Added alternate compressed download formats: tar.gz, tar.xz, tar.bzip2 (issue 174) + **New:** *web.compressedDownloads = zip gz* - Added simple project pages. A project is a subfolder off the *git.repositoriesFolder*. - Added support for X-Forwarded-Context for Apache subdomain proxy configurations (issue 135) - Delete branch feature (issue 121, Github/ajermakovics) - Added line links to blob view (issue 130) +- Added HTML sendmail hook script and Gitblit.sendHtmlMail method (github/sauthieg) - Added RedmineUserService (github/mallowlabs) - Support for committer verification. Requires use of *--no-ff* when merging branches or pull requests. See setup page for details. #### changes +- Access restricted servlets (e.g. DownloadZip, RSS, etc) will try to authenticate any Gitblit cookie found in the request before resorting to BASIC authentication. +- Added *groovy* and *scala* to *web.prettyPrintExtensions* +- Added short commit id column to log and history tables (issue 168) - Teams can now specify the *admin*, *create*, and *fork* roles to simplify user administration - Use https Gravatar urls to avoid browser complaints - Added frm to default pretty print extensions (issue 156) @@ -71,7 +91,10 @@ - updated to Groovy 1.8.8 - updated to Wicket 1.4.21 - updated to Lucene 3.6.1 - +- updated to BouncyCastle 1.47 +- added JCalendar 1.3.2 +- added Commons-Compress 1.4.1 +- added XZ for Java 1.0 <hr/> ### Older Releases -- Gitblit v1.9.1