From e5c7795dc9185272365ff340698c7d2f1e6f11ab Mon Sep 17 00:00:00 2001 From: James Moger <james.moger@gitblit.com> Date: Thu, 29 Nov 2012 19:11:24 -0500 Subject: [PATCH] Skip re-authentication if we have a valid session --- docs/04_releases.mkd | 19 +++++++++++++++++++ 1 files changed, 19 insertions(+), 0 deletions(-) diff --git a/docs/04_releases.mkd b/docs/04_releases.mkd index 2d5d7e5..9704de0 100644 --- a/docs/04_releases.mkd +++ b/docs/04_releases.mkd @@ -12,6 +12,8 @@ #### fixes +- Fixed incorrect links on history page for files not in the current/active commit (issue 166) +- Empty repository page failed to handle missing repository (issue 160) - Fixed broken ticgit urls (issue 157) - Exclude submodules from zip downloads (issue 151) - Fixed bug where repository ownership was not updated on rename user @@ -46,15 +48,30 @@ **New:** *git.garbageCollectionHour = 0* **New:** *git.defaultGarbageCollectionThreshold = 500k* **New:** *git.defaultGarbageCollectionPeriod = 7 days* +- Added support for X509 client certificate authentication (github/kevinanderson1). (issue 106) +You can require all git servlet access be authenticated by a client certificate. You may also specify the OID fingerprint to use for mapping a certificate to a username. It should be noted that the user account MUST already exist in Gitblit for this authentication mechanism to work; this mechanism can not be used to automatically create user accounts from a certificate. + **New:** *git.requireClientCertificates = false* + **New:** *git.enforceCertificateValidity = true* + **New:** *git.certificateUsernameOIDs = CN* +- Revised clean install certificate generation to create a Gitblit GO Certificate Authority certificate; an SSL certificate signed by the CA certificate; and to create distinct server key and server trust stores. <u>The store files have been renamed!</u> +- Added support for Gitblit GO to require usage of client certificates to access the entire server. +This is extreme and should be considered carefully since it affects every https access. The default is to **want** client certificates. Setting this value to *true* changes that to **need** client certificates. + **New:** *server.requireClientCertificates = false* +- Added Gitblit Certificate Authority, an X509 certificate generation tool for Gitblit GO to encourage use of client certificate authentication. +- Added setting to control length of shortened commit ids + **New:** *web.shortCommitIdLength=8* - Added simple project pages. A project is a subfolder off the *git.repositoriesFolder*. - Added support for X-Forwarded-Context for Apache subdomain proxy configurations (issue 135) - Delete branch feature (issue 121, Github/ajermakovics) - Added line links to blob view (issue 130) +- Added HTML sendmail hook script and Gitblit.sendHtmlMail method (github/sauthieg) - Added RedmineUserService (github/mallowlabs) - Support for committer verification. Requires use of *--no-ff* when merging branches or pull requests. See setup page for details. #### changes +- Added *groovy* and *scala* to *web.prettyPrintExtensions* +- Added short commit id column to log and history tables (issue 168) - Teams can now specify the *admin*, *create*, and *fork* roles to simplify user administration - Use https Gravatar urls to avoid browser complaints - Added frm to default pretty print extensions (issue 156) @@ -71,6 +88,8 @@ - updated to Groovy 1.8.8 - updated to Wicket 1.4.21 - updated to Lucene 3.6.1 +- updated to BouncyCastle 1.47 +- added JCalendar 1.3.2 <hr/> -- Gitblit v1.9.1