2020-02-29  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Version 3.3
	* aicrypto: Update to version 3.6.
	* configure.ac: Bump up the minor version number.

2020-02-26  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure.ac: Disable certreq-aissl linking AiSSL in default.

2019-08-09  SAKANE Eisaku  <sakane@nii.ac.jp>

	* build-aux/ltmain.sh: Update from Libtool 2.4.6.
	* m4/libtool.m4: Ditto.
	* m4/ltoptions.m4: Ditto.
	* m4/ltsugar.m4: Ditto.
	* m4/ltversion.m4: Ditto.
	* m4/lt~obsolete.m4: Ditto.
	* build-aux/ar-lib: Update from Automake 1.16.1.
	* build-aux/compile: Ditto.
	* build-aux/config.guess: Ditto.
	* build-aux/config.sub: Ditto.
	* build-aux/depcomp: Ditto.
	* build-aux/install-sh: Ditto.
	* build-aux/missing: Ditto.
	* build-aux/test-driver: Ditto.
	* configure.ac: Remove the option "no-dependencies" in
	AM_INIT_AUTOMAKE.

2019-07-28  SAKANE Eisaku  <sakane@nii.ac.jp>

	* etc/redhat/naregi-ca.spec.in: Fix a typo.

2019-02-28  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Version 3.2.3
	* aicrypto: Update to version 3.5.
	* configure.ac: Bump up the patch version number.

2019-02-12  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure.ac: Fix an undefined symbol problem on OI-Hipster
	2018.10. [#414]
	* apps/Makefile.am: Ditto.

2018-10-04  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/certreq.c (main): Put the function req_read_config() into
	the if statement. This is a tentative code and will be replaced
	with a new function developed in another branch.
	* README.ja: Update accordingly.
	* README.en: Ditto.

2018-09-21  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Version 3.2.2
	* aicrypto: Update to version 3.4.
	* configure.ac: Bump up the minor version number.

2018-08-20  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/certconv.c (usage, option, write_files): Add a new option
	"-rfc5915". [#397]
	* apps/certconv.c (write_files): Cleanup.

2018-07-25  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aica_prof.c (CA_do_profile): Remove a meaningless directive
	with respect to Windows platform.

2018-03-28  SAKANE Eisaku  <sakane@nii.ac.jp>

	* etc/redhat/naregi-ca.spec.in: Improve the scriptlet in %post section.

2018-01-04  SAKANE Eisaku  <sakane@nii.ac.jp>

	* etc/redhat/naregi-ca.spec.in: Rename naregi-ca.spec naregi-ca.spec.in.
	The naregi-ca-client package is provided as a sub-package.
	* etc/redhat/Makefile.am: Add naregi.sysconfig to EXTRA_DIST.
	* configure.ac: Add naregi-ca.spec to AC_CONFIG_FILES.

2017-12-25  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Version 3.2.1
	* aicrypto: Update to version 3.2.1.
	* configure.ac: Bump up the patch version number.

2017-09-04  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/Makefile.am: Change the installation directory of the
	script `initsslcert' to $(pkglibexecdir).
	* apps/Makefile.am: Change the installation directory of the
	program `aireadpw' to $(pkglibexecdir).
	* aica/ainewra.sh.in: Modify each program path accordingly.
	* aica/aisetup.sh.in: Ditto.
	* etc/Makefile.am: Ditto.
	* etc/migrate-config.sh.in: Ditto.

2017-08-17  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aienroll.c (caenr_get_mailbody): Fix the mail sending
	failure bug. [#349]

2017-08-10  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Version 3.2
	* aicrypto: Update to version 3.2.
	* configure.ac: Bump up the minor version number.

2017-08-03  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aica_newssl.c (CA_init_sslCA): Set the lifetime of LCMP CA
	certificate to 10 years.

2017-08-02  SAKANE Eisaku  <sakane@nii.ac.jp>

	* UPGRADING.en: Rename MIGRATION.en and revise it.
	* README_cgi.en: New file.

2017-07-31  SAKANE Eisaku  <sakane@nii.ac.jp>

	* UPGRADING.ja: Rename MIGRATION.ja.

2017-07-28  SAKANE Eisaku  <sakane@nii.ac.jp>

	* README_cgi.ja: New file.

2017-07-25  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aisetup.sh.in: Make tiny modification.

2017-07-24  SAKANE Eisaku  <sakane@nii.ac.jp>

	* KNOWN_PROBLEMS.en: Add the problem that the absolute path to a
	Cryptoki library cannot be updated. [#355]
	* KNOWN_PROBLEMS.ja: Ditto.

2017-07-21  SAKANE Eisaku  <sakane@nii.ac.jp>

	* README_sha3.en: Make cosmetic changes.
	* README_sha3.ja: Likewise.

2017-07-20  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/ainewra.sh.in: Fix a bug in copying RA-related files.

2017-07-06  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aisetup.sh.in: Add a comment about PKCS#11 token label.
	* apps/Makefile.am: No longer support two scripts grid-{cert,host}req.
	* apps/grid-certreq.in: Add an attention header.
	* apps/grid-hostreq.in: Ditto.

2017-07-05  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure.ac: Disable the web-enrollment cgi module in default.
	* aica/aisetup.sh.in: Fix the installation bug in disabling the
	web-enrollment cgi module.
	* aica/Makefile.am: Likewise.

2017-06-21  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aica_newssl.c (CA_init_sslCA): Change the digital
	signauture algorithm from ecdsa-with-SHA1 to ecdsa-with-SHA256.
	* serv-ssl/ca.cai: Likewise.
	* serv-ssl/cert/SSL server.cpi: Likewise.

2017-03-24  TAKANDO Takashi  <takando@soum.co.jp>

	* configure.ac: Set no-dependencies option.

	* README_sha3.en: New file.
	* README_sha3.ja: Ditto.

2017-03-21  TAKANDO Takashi  <takando@soum.co.jp>

	* aica/aisetup.sh.in: Add caution on using SHA-3 family.

2017-03-20  TAKANDO Takashi  <takando@soum.co.jp>

	* ca/ca_tool.c (sighash2keyobj, keyhash2sigobj): Remove
	OBJ_SIG_SHA3_384DSA, OBJ_SIG_SHA3_512DSA from supported algorithm.

2017-03-17  SAKANE Eisaku  <sakane@nii.ac.jp>

	* README.ja: Replace the sub-command "resign" with "re-sign".
	* README.en: Ditto.

2017-03-13  TAKANDO Takashi  <takando@soum.co.jp>

	* test/mdgst/test-sha3.sh: Rewrite the expected data.
	* test/mdgst/test-opt-hash-multiple.sh : Ditto.

2017-02-22  TAKANDO Takashi  <takando@soum.co.jp>

	* aica/aica.c (usage): Add SHA3 hash.
	* apps/certreq.c (usage_keyhash): Ditto.

	* apps/testsign.sh.in: Add tests of certificate signed by SHA-3
	signature algorithms.

2017-02-17  TAKANDO Takashi  <takando@soum.co.jp>

	* ca/ca_tool.c (sighash2keyobj, keyhash2sigobj): Support signature
	algorithms with SHA-3 family.

2017-02-11  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure.ac: Add the AM_PROG_CC_C_O macro for CentOS 7. This
	macro is obsolescent since Automake 1.14, but no warning is issued.

2017-01-27  SAKANE Eisaku  <sakane@nii.ac.jp>

	* ca/ca_err.c (CA_get_errstr): Add the return value from the
	Cryptoki function.

2017-01-16  SAKANE Eisaku  <sakane@nii.ac.jp>

	* jlcmp: Remove unsupported module.
	* xkms: Likewise.

2017-01-13  SAKANE Eisaku  <sakane@nii.ac.jp>

	* build-aux: Add new scripts and update conventional ones from
	Automake 1.15.
	* configure.ac: Follow the manner of Automake 1.15.
	* aica/Makefile.am: Ditto.
	* apps/Makefile.am: Ditto.
	* common/Makefile.am: Ditto.
	* enrollcgi/Makefile.am: Ditto.
	* grid/Makefile.am: Ditto.
	* test/mdgst/Makefile.am: Ditto.

2016-11-10  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/airad_user.c (RAd_change_passwd): Do not compile the code
	because the function is not used and seems to be imcomplete.

2016-11-02  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Version 3.1
	* aicrypto: Update to version 3.1.
	* configure.ac: Bump up the minor version number.

2016-11-01  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/ainewra.sh.in: Add a new option "-lcmpca".
	* aica/ainewra.sh.in: Add a configuration support for connection
	with CA over LCMP.
	* aica/aiconfop.c (aiconf_add_crl): Change the default value of
	"f_ssl_use" from false to true.

2016-08-25  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aica_user.c (CA_user_mod): Fix incorrect mode setting. [#318]

2016-08-24  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/mdgst.c (usage): Add MD4 support.
	* test/mdgst/test-md4.sh: New file.
	* test/mdgst/Makefile.am: Add test-md4.sh to TESTS.

2016-07-07  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Version 3.0.2
	* configure.ac: Bump up the patch version number.

2016-07-06  SAKANE Eisaku  <sakane@nii.ac.jp>

	* grid/gridmap_log.c (GMap_log_open): Remove the __WINDOWS__ macro.
	* grid/gridmapgen.c: Ditto.

2016-07-05  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aicrlpub.c (main): Remove a TLS session information after
	calling SSL_close(). [#339]
	* aica/aienroll.c (main): Ditto.

2016-05-31  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Version 3.0.1
	* configure.ac: Bump up the patch version number.

2016-05-31  SAKANE Eisaku  <sakane@nii.ac.jp>

	* common/Makefile.am: Set AICONFIG to $(NRG_CONFDIR)/aica.cnf. [#338]

2016-05-27  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/certreq_tool.c: Re-declare the error codes as an enumeration.

2016-05-15  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aica_conf.c (conf_decstr): Use strcpy(3) instead of
	strncpy(3) because the character string decoded by Base64_decode()
	is shorter than the encoded.

2016-05-13  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aica_conf.c (conf_decstr): New function.
	* aica/aica_conf.c (ca_set_config): Fix a problem that aica(1)
	cannot handle an encrypted string value in the [default CA]
	section. [#336]

2016-04-27  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/certreq_tool.c (expand_str): Add a code block that handles
	a nest of expressions as error and fix a duplicate addition
	problem for multiple empty (sub-)expressions.

2016-04-26  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/certreq_tool.c (expand_str): Fix a problem that a normal
	expression of FQDN cannot be handled correctly.
	* apps/certreq.c (options): Add a new option "-dry-run" but this
	is tentative.

2016-04-25  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/certreq_tool.c (expand_str): Support an input string like
	'(www.|)example.org'.

2016-04-20  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/certreq_tool.c (expand_str): Use MACROS for error codes.
	* apps/certreq.c (create_csr): Add an error handler (currently do
	nothing) when the option "-alt-dns-fqdn" is specified.

2016-04-18  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/certreq_tool.c (expand_str): New funtion.
	* apps/certreq.c (create_csr): Support multiple dnsName(s) with a
	regular expression-like string. [#317]
	* apps/certreq.h: Define two macros concerned.

2016-04-19  SAKANE Eisaku  <sakane@nii.ac.jp>

	* config.h.in: Removed because this is automatically generated
	with autoreconf(1).

2016-03-01  SAKANE Eisaku  <sakane@nii.ac.jp>

	* ca/utils.c (set_path): Fix an error pointed out by CppCheck.
	* aica/aica.c (main, options, CA_do_operation): Remove the macro
	__WINDOWS__.
	* aica/aica2hsm.c (main, options): Likewise.
	* aica/aica_bind.c (CA_cl_getsock): Likewise.
	* aica/aica_conf.c (ca_set_config): Likewise.
	* aica/aica_lcerts.c (CA_issue_alotof_certificates): Likewise.
	* aica/aica_new.c (CA_add_operator): Likewise.
	* aica/aica_op.c: Likewise.
	* aica/aica_prof.c (get_tmpl_names): Likewise.
	* aica/aica_sign.c (CA_issue_cert): Likewise.
	* aica/aicad_ca.c (CAd_main, CAd_sig): Likewise.
	* aica/aicad_conf.c (cad_set_config, CAd_master_boot): Likewise.
	* aica/aicad_log.c (CAd_log_open, CAd_log_close, CAd_log_rotate):
	Likewise.
	* aica/aicatestfc.c (prepare, ca_test_bind, ca_test_sign)
	(ca_test_list, ca_test_cert, ca_test_csr, ca_test_crl)
	(ca_test_prof, ca_test_svop): Likewise.
	* aica/aiconftool.c (options): Likewise.
	* aica/aicrl_conf.c (CApub_read_config, capub_set_config): Likewise.
	* aica/aicrl_ldap.c (CApub_ldap_bind): Likewise.
	* aica/aicrl_log.c (CApub_log_open): Likewise.
	* aica/aicrlpub.c (main, CApub_sig, options): Likewise.
	* aica/aienr_conf.c (CAenr_read_config, caenr_set_reginfo): Likewise.
	* aica/aienr_log.c (CAenr_log_open): Likewise.
	* aica/aienroll.c (main, CAenr_sig, options, caenr_get_mailbody):
	Likewise.
	* aica/aienrtool.c (options, enr_get_mailbody): Likewise.

2016-02-24  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/certvfy.c: Remove the macro __WINDOWS__.
	* ca/ca_asn1.c (ASN1_CA_info): Likewise.
	* ca/ca_file.c (CA_info_read, CA_info_reload): Likewise.
	* ca/ca_tool.c (CA_init_lock): Likewise.
	* ca/lcmp_net.c: Likewise.
	* ca/prof_file.c (Prof_open_ctinfo, Prof_save_ctinfo)
	(Prof_open_clinfo, Prof_save_clinfo, Prof_open_csrinfo)
	(Prof_save_csrinfo): Likewise.
	* ca/lcmp.c: Remove the macro _WINSOCKAPI_.
	* ca/lcmp_tool.c: Ditto.

2016-02-18  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure: Removed. For developers, please execute autoreconf(1)
	before compiling.
	* aclocal.m4: Ditto.
	* Makefile.in: Ditto. Other Makefile.in in sub-directory is the same.

2016-02-14  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Version 3.0
	* configure.ac: Bump up the major version number.

2016-02-10  SAKANE Eisaku  <sakane@nii.ac.jp>

	* etc/redhat/naregi.sysconfig: New file. [#309]
	* etc/upki: Removed.
	* etc/Makefile.am: Make modification accordingly.
	* configure.ac: Likewise.

2016-02-08  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aica.c (usage): Fixed typo.
	* apps/certreq.c (options): Ditto.
	* KNOWN_PROBLEMS.en: New file.

2016-02-05  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aica_ldap.c (CApub_ldap_bind): Silenced the warning from
	"-Wpointer-bool-conversion".
	* enrollcgi/aienr_ldap.c (aienr_ldap_addcert): Silenced the
	warning from "-Wtautological-pointer-compare".

2016-02-03  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aica_new.c (CA_add_operator): Silenced the warning from
	"-Wpointer-bool-conversion".

2016-02-02  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aica.c (usage): Revised help messages.

2015-11-19  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Makefile.am: Fix "install-client" target.

2015-10-14  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure.ac: Add a new option `--with-aicrypto-prefix' which
	adds the specified directory to the search path for AiCrypto
	development stuff.
	* common/Makefile.am: Use AICRYPTO_{CPP,LD}FLAGS.
	* ca/Makefile.am: Ditto.
	* apps/Makefile.am: Ditto.
	* aica/Makefile.am: Ditto.
	* enrollcgi/Makefile.am: Ditto.
	* grid/Makefile.am: Ditto.

2015-10-13  SAKANE Eisaku  <sakane@nii.ac.jp>

	* common/Makefile.am: Add $(top_builddir)/aicrypto to CPPFLAGS so as
	to include "aicrypto/site_defaults.h".
	* apps/Makefile.am: Ditto.
	* aica/Makefile.am: Ditto.
	* enrollcgi/Makefile.am: Ditto.
	* grid/Makefile.am: Ditto.

2015-08-27  SAKANE Eisaku  <sakane@nii.ac.jp>

	* MIGRATION.en: New file.

2015-07-31  SAKANE Eisaku  <sakane@nii.ac.jp>

	* KNOWN_PROBLEMS.ja: New file.

2015-07-29  SAKANE Eisaku  <sakane@nii.ac.jp>

	* ca/Makefile.am: Bump CURRENT of libaica and set REVISION and AGE
	to 0.

2015-07-17  SAKANE Eisaku  <sakane@nii.ac.jp>

	* etc/Makefile.am: Add noinst_SCRIPTS to CLEANFILES.
	* aica/initsslcert.sh.in: Add support for intermediate CA setup.
	* aica/aisetup.sh.in: Make tiny modification.
	* aica/aiconfop.c (aiconf_add_ra): Add the property "smtp_from". [#294]
	* etc/aica.cnf.in: Change default values in [subject DN].

2015-07-10  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/initsslcert.sh.in: Modify a message.
	* aica/aica_new.c (CA_mode_extension): Arrange a layout of the
	X.509 v3 extensions menu.
	* apps/req.c (get_key_pairs): Make tiny modification to a message.

2015-07-08  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aisetup.sh.in: Improve a behavior for CA creation with HSM.

2015-07-03  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/ainewra.sh.in: Change the default value of the key
	"out_dir" in [CRL Publisher X] section on an RA server.
	* aica/Makefile.am: Make modification accordingly.
	* etc/migrate-config.sh.in: Flexibly modify the handler for
	"out_dir" in [CRL Publisher X].

2015-07-02  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aica2hsm.c (main): Fix the numeric conversion in the format
	string.

2015-06-16  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/ainewra.sh.in: Support an aicrlpub setting.
	* etc/migrate-config.sh.in: Support an RA server migration.

2015-06-12  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aisetup.sh.in: Remove "md5" and "md2", and reorder the list
	according to recommended algorithms.

2015-06-11  SAKANE Eisaku  <sakane@nii.ac.jp>

	* MIGRATION.ja: New file.

2015-06-05  SAKANE Eisaku  <sakane@nii.ac.jp>

	* etc/migrate-config.sh.in: New file.
	* etc/Makefile.am: Make modification accordingly.

2015-06-04  SAKANE Eisaku  <sakane@nii.ac.jp>

	* etc/aica.cnf.in: Remove unused keys so as to avoid confusing.
	* aica/aisetup.sh.in: Fix wrong "out_dir" in [CRL Publisher X].

2015-06-03  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/certreq.c (usage_keyhash): Remove "md5" and "md2", and
	reorder the list according to recommended algorithms.

2015-06-02  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aica.c (usage): Improve the help message format.
	* aica/aiconftool.c (usage): Change "Operation" to "Command".
	* aica/aira.c (usage): Ditto to aica/aica.c.
	* apps/aistore.c (usage): Ditto to aica/aiconftool.c.
	* apps/certconv.c (usage): Fix the command syntax description.
	* apps/certreq.c: Ditto to aica/aiconftool.c.

2015-05-26  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/ainewra.sh.in: Modify a message about CA operator's Access
	Password.

2015-05-25  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/Makefile.am: Move $(sbindir)/initsslcert to $(libexecdir).
	* aica/aisetup.sh.in: Make modification accordingly.
	* aica/ainewra.sh.in: Ditto.
	* etc/Makefile.am: Install configuration files into
	$NRG_DATADIR/templates/conf/ to avoid overwriting them with 'make
	install'.
	* aica/initsslcert.h.in: Make modification accordingly.
	* aica/aisetup.sh.in: Likewise.
	* etc/redhat/aicrlpub.init.in: Support multiple execution with
	CRLPUB_SECTS variable usually defined in /etc/sysconfig/naregi.
	* etc/redhat/aienroll.init.in: Likewise with RA_SECTS.
	* aica/aicrl_conf.c (CApub_read_config): Add error handlers.
	* aica/aienr_conf.c (CAenr_read_config): Likewise.

2015-05-19  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aica_new.c: Fix the filename of each profile. [#308]

2015-05-18  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aica.c (options, usage): Change the command name `resign'
	to `re-sign'.

2015-05-09  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aica_new.c (ca_add_initprof, ca_add_initcrl): Fix the
	problem that the public-key cryptography in the digital signature
	algorithm of certificate/CRL profiles is always RSA. [#194]
	* aica/aica_prof.c (CA_add_prof): Likewise.
	* aica/aica_new.c (ca_add_initprof): Add the new seventh argument
	so as to slim down the function CA_init_Info().

2015-05-01  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aica_conf.c (CA_set_lib_path): Removed because of the
	improvement of get_templ_path().
	* aica/aica.c (main): Make modification accordingly.
	* aica/aica2hsm.c (main): Ditto.
	* aica/aica_bind.c (CA_cl_bind): Ditto.
	* aica/aica_newssl.c (CA_init_sslCA): Ditto.
	* aica/aicad_op.c (CAd_op_bindreq): Ditto.
	* include/ok_aica.h: Ditto.

2015-04-28  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aisetup.sh.in: Improve the way of building an intermediate
	CA. [#264]

2015-04-20  SAKANE Eisaku  <sakane@nii.ac.jp>

	* enrollcgi/aira_mail.c (aira_get_mailbody): Make modification
	according to the change of the directory location for templates.
	* enrollcgi/cgi_mail.c (aienr_get_mailbody): Ditto.
	* enrollcgi/Makefile.am: Likewise.
	* ca/prof_tmpl.c: Remove unnecessary macro PREFIX.
	* aica/aica_conf.c (CA_set_lib_path): Introduce new macro
	CAPREFIX to distinguish between 'prefix' and 'CA.lib_path'.
	* configure.ac: Add NRG_CAPREFIX accordingly.
	* aica/Makefile.am: Make modification accordingly.
	* aica/aisetup.sh.in: Likewise.
	* aica/ainewra.sh.in: Likewise.

2015-04-18  SAKANE Eisaku  <sakane@nii.ac.jp>

	* ca/prof_file.c (Prof_open_ctfile_): Fix incompatible path. [#304]

2015-04-17  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Makefile.am: Change the directory location for templates. [#302]
	* aica/aienroll.c (caenr_get_mailbody): Make modification accordingly.
	* aica/Makefile.am: Likewise.
	* aica/aienrtool.c (enr_get_mailbody): Fix wrong path. [#303]
	* aica/aienrtool.c (enr_get_mailbody): Ditto to aica/aienroll.c.
	* aica/airad_mail.c (rad_get_mailbody): Likewise.
	* ca/prof_tmpl.c (get_tmpl_path): Likewise. By the way the
	argument 'CA *ca' is dropped.
	* ca/prof_tmpl.c (Prof_cert_settempl, Prof_crl_settmpl): Make tiny
	modification accordingly.
	* include/ok_ca.h (get_tmpl_path): Change the arguments.
	* aica/aica_prof.c (get_tmpl_names): Ditto.

2015-04-16  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Makefile.am: Change $prefix/ratemplate and
	$NRG_DATADIR/lcmp-dist to $NRG_DATADIR/{ra,ca_lcmp}.
	* aica/aisetup.sh.in: Make tiny modification accordingly.
	* aica/ainewra.sh.in: Ditto.
	* aica/initsslcert.sh.in: Ditto.

2015-04-15  SAKANE Eisaku  <sakane@nii.ac.jp>

	* ca/Makefile.am: Fix the problem that the lcmp-test program
	failed except VPATH builds.
	* configure.ac: Add an AM_CONDITIONAL accordingly.
	* configure.ac: Add NRG_DATADIR.
	* Makefile.am: Install serv-ssl to NRG_DATADIR/lcmp-dist.
	* aica/initsslcert.sh.in: Set up the CA stuff for LCMP at new
	location $NRG_CONFDIR/lcmp-ca (former $prefix/serv-ssl).
	* aica/Makefile.am: Make tiny modification accordingly.

2015-04-13  SAKANE Eisaku  <sakane@nii.ac.jp>

	* ca/ca_sign.c (CA_sign_validity): Silence the warning issued by
	"-Wsometimes-uninitialized".
	* ca/prof_conv.c (CA_reqkey2newkey): Silenced the warning issued
	by "-Wunused-variable".
	* ca/prof_tool.c (Prof_add_xcertfile): Ditto to ca/ca_sign.c.
	* apps/certreq.c: Remove the prototype declaration of unused
	function save_prvkey().
	* apps/certvfy.c (main): Ditto to ca/ca_sign.c.
	* aica/airad_ldap.c (RAd_ldap_addcert): Silence the warning issued
	by "-Wautological-pointer-compare".

2015-04-10  SAKANE Eisaku  <sakane@nii.ac.jp>

	* common/aiconf.c (aica_encry_passwd, aica_decry_passwd): Silence
	the warning issued by "-Wpointer-sign".
	* ca/ca_tool.c (CA_dnexist_check): Modify a meaningless	expression.
	* ca/lcmp_api.c (LCMP_bind_s): Silence the warning issued by
	"-Wparentheses".
	* apps/certreq.c (req_op_issue, req_op_revoke, req_op_renew)
	(req_op_getcert, req_op_rekey): Likewise.

2015-04-09  SAKANE Eisaku  <sakane@nii.ac.jp>

	* include/Makefile.am: Handle all headers as noinst_HEADERS.

2015-03-19  URA Hiroshi  <ura@soum.co.jp>

	* README.en: Note switching TLS 1.2 and using the `--with-aissl'
	option.
	* README.ja: Ditto

2015-03-16  URA Hiroshi  <ura@soum.co.jp>

	* apps/certreq.c (print_protocol_version_mismatch): Display to rebuild
	if protocol version mismatch occurs when linking the AiSSL library.
	* apps/certreq.c (req_op_issue, req_op_revoke, req_op_renew,
	req_op_getcert, req_op_rekey): Always call
	print_protocol_version_mismatch().
	* ca/lcmp_api.c (LCMP_getsock): Always check whether an error is
	SSL_ERR_PROTOCOL_VERSION calling SSL_get_error().

2015-03-12  URA Hiroshi  <ura@soum.co.jp>

	* apps/certreq.c (print_protocol_version_mismatch): Add new function.
	* apps/certreq.c (req_op_issue, req_op_revoke, req_op_renew,
	req_op_getcert, req_op_rekey): Display to use certreq-aissl instead
	if protocol version mismatch occurs.
	* ca/lcmp_api.c (LCMP_bind_s, LCMP_getsock): Return -2 if protocol
	version mismatch error occurs.

2015-03-10  URA Hiroshi  <ura@soum.co.jp>

	* configure.ac: Add new option `--enable-certreq-aissl' for
	building the certreq-aissl(1) that linked the AiSSL Library.
	* configure: Automatically regenerated.
	* apps/Makefile.am: Add "certreq-aissl" target.
	* apps/Makefile: Automatically regenerated.

2015-03-03  URA Hiroshi  <ura@soum.co.jp>

	* configure.ac: Add AC_SUBST for LIBTLSDIR.
	* configure: Automatically regenerated.
	* aica/Makefile.am: Replace -L$(top_builddir)/aicrypto/ssl with
	-L$(top_builddir)/$(LIBTLSDIR).
	* apps/Makefile.am: Ditto.
	* ca/Makefile.am: Ditto.
	* enrollcgi/Makefile.am: Ditto.
	* grid/Makefile.am: Ditto.
	* Makefile.in: Automatically regenerated.
	* aica/Makefile.in: Ditto.
	* apps/Makefile.in: Ditto.
	* ca/Makefile.in: Ditto.
	* common/Makefile.in: Ditto.
	* enrollcgi/Makefile.in: Ditto.
	* etc/Makefile.in: Ditto.
	* etc/redhat/Makefile.in: Ditto.
	* etc/upki/Makefile.in: Ditto.
	* grid/Makefile.in: Ditto.
	* include/Makefile.in: Ditto.
	* test/Makefile.in: Ditto.
	* test/mdgst/Makefile.in: Ditto.

2015-02-25  URA Hiroshi  <ura@soum.co.jp>

	* configure.ac: Add new option `--with-aissl' and `--with-nrgtls'.
	* configure: Automatically regenerated.
	* config.h.in: Ditto.
	* aica/Makefile.am: Replace -laissl with $(LIBTLS).
	* apps/Makefile.am: Ditto.
	* ca/Makefile.am: Ditto.
	* enrollcgi/Makefile.am: Ditto.
	* grid/Makefile.am: Ditto.
	* Makefile.in: Automatically regenerated.
	* aica/Makefile.in: Ditto.
	* apps/Makefile.in: Ditto.
	* ca/Makefile.in: Ditto.
	* common/Makefile.in: Ditto.
	* enrollcgi/Makefile.in: Ditto.
	* etc/Makefile.in: Ditto.
	* etc/redhat/Makefile.in: Ditto.
	* etc/upki/Makefile.in: Ditto.
	* grid/Makefile.in: Ditto.
	* include/Makefile.in: Ditto.
	* test/Makefile.in: Ditto.
	* test/mdgst/Makefile.in: Ditto.

2015-02-20  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aisetup.sh.in: Support short-cut format for time. [#183]

2015-02-19  URA Hiroshi  <ura@soum.co.jp>

	* include/ok_aica.h: Include <aicrypto/ok_store.h>

2015-02-18  URA Hiroshi  <ura@soum.co.jp>

	* aica/aica_bind.c (CA_cl_bind): Use SSL_got_certreq() to check
	whether has received certificate request.

2015-02-18  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure.ac: Fix a compiling problem on Debian sid. [#278]

2015-02-09  URA Hiroshi  <ura@soum.co.jp>

	* aica/aicad.c (main): Use SSL_get_fd() to get file descriptor
	linked to an SSL object.
	* aica/aicad_ca.c (CAd_log_connection): Ditto.
	* aica/airad.c: Ditto.
	* aica/airad_ra.c (RAd_log_connection): Ditto.

2014-11-05  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aiconftool.c (main): Fix the code that loads a
	configuration section into buffer.
	* grid/gridmap_conf.c: Remove unnecessary header.

2014-10-31  SAKANE Eisaku  <sakane@nii.ac.jp>

	* enrollcgi/aienr_user.c (aienr_check_login_,
	aienr_check_license_, aienr_change_passwd): Make modification
	according to changeset:1051.
	* enrollcgi/aienr_util.c (aienr_get_count): Likewise.
	* enrollcgi/aira_mail.c (aira_get_mailbody): Likewise.
	* enrollcgi/aira_op.c (aira_default, aira_print_err, aira_logout,
	aira_updateop, aira_updopdone, aira_revokeop, aira_delop,
	aira_viewopcert, aira_viewraadm, aira_viewcgiconf, aira_listreq,
	aira_searchreq, aira_searchreqdone, aira_listupdreq,
	aira_listrvkreq, aira_confirmreq, aira_acceptdone, aira_listop,
	aira_showop, aira_searchop, aira_searchiopdone, aira_viewcacert):
	Likewise.
	* enrollcgi/aira_util.c (aira_get_count): Likewise.
	* enrollcgi/airae_op.c (airae_login, airae_print_err, airae_send_csr,
	airae_get_certdone): Likewise.
	* enrollcgi/aiop_op.c (aiop_default, aiop_print_err, aiop_logout,
	aiop_listreq, aiop_confirmreq, aiop_acceptdone, aiop_viewopcert,
	aiop_showop, aiop_searchreq, aiop_searchreqdone, aiop_listuser,
	aiop_listupdreq, aiop_listrvkreq, aiop_showuser,
	aiop_viewusercert, aiop_reokeuser, aiop_updateuser,
	aiop_upduserdone, aiop_deluser, aiop_updatepin, aiop_updpindone,
	aiop_searchuser, aiop_searchuserdone, aiop_viewcacert): Likewise.
	* enrollcgi/airareg_op.c (aira_print_err, aira_default,
	aira_regiform, aira_regiconfirm, aira_regidone, aira_login,
	aira_login2, aira_updconfirm, aira_rvkconfirm, aira_rvkdone,
	aira_updatepin, aira_updpindone, aira_viewcacert): Likewise.
	* enrollcgi/aireg_op.c (aiop_print_err, aiop_default,
	aiop_regiform, aiop_regiconfirm, aiop_regidone, aiop_login,
	aiop_login2, aiop_autoreg, aiop_autoreg2, aiop_autoregdone,
	aiop_updconfirm, aiop_rvkconfirm, aiop_rvkdone, aiop_rvkconfirm,
	aiop_rvkdone, aiop_updatepin, aiop_updpindone, aiop_viewcacert):
	Likewise.
	* grid/gridmapgen.c (GMap_check_csvfile, GMap_save_mapfile,
	GMap_load_oldmapfile): Likewise.

2014-10-30  SAKANE Eisaku  <sakane@nii.ac.jp>

	* common/aiconf.c (conf_get_section): Make modification according
	to changeset:1051.
	* ca/ca_auth.c (CA_read_authinfo, CA_read_groupinfo): Likewise.
	* aica/aica_lcerts.c (csv_check_list): Likewise.
	* aica/aiconftool.c (main): Likewise.
	* aica/aienrtool.c (gen_csv_pwd, enr_csv_check, enr_get_mailbody):
	Likewise.
	* aica/airad_mail.c (rad_get_mailbody): Likewise.
	* aica/airad_util.c (RAd_get_count): Likewise.
	* aica/aienroll.c (caenr_get_mailbody): Likewise.
	* aica/airad_user.c (RAd_auth_pwd, RAd_auth_license,
	RAd_change_passwd): Likewise.
	* enrollcgi/cgi_mail.c (aienr_get_mailbody): Likewise.
	* enrollcgi/aienr_op.c (aienr_default, aienr_login,
	aienr_print_err, aienr_user_newcert, aienrt_send_csr,
	aienr_user_certop, aienr_revoke_cert, aienr_update_cert,
	aienr_get_cert, aienr_get_certdone, aienr_change_pwd,
	aienr_update_pwd, aienr_send_csr_dl, aienr_get_certdone_dl): Likewise.

2014-10-25  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aiconfop.c (aiconf_print_item): New function that replaces
	aiconf_read_item().
	* aica/aiconftool.c (main): Replace aiconf_read_item() with
	aiconf_print_item() and use conf_get_section().
	* include/ok_aica.h: Make modification accordingly.
	* common/aiconf.c (conf_getsalt): New static function that replaces
	get_conf_salt().
	* include/ok_conf.h: Remove the prototype declaration of
	get_conf_salt().

2014-10-10  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aicad.c (main): Use the macro `linux' for the directive
	with respect to `signal(SIGCLD, SIG_IGN)'.
	* aica/airad.c (main): Ditto.
	* configure.ac: Remove `AC_DEFINE([BSD], ...)' accordingly.

2014-10-07  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure.ac: Fix wrong `double equals' sign.
	* aica/Makefile.am: Fix a compiling problem on MINIX 3.
	* enrollcgi/Makefile.am: Ditto.
	* grid/Makefile.am: Ditto.

2014-10-06  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure.ac: Add AC_GNU_SOURCE so as to silence the warning
	"implicit declaration of function 'asprintf'" on Linux. [#265]
	* ca/lcmp_api.c: Include "config.h" so as to silence the implicit
	declaration warning.
	* enrollcgi/aimggen.c: <aicrypto/ok_rand.h> likewise.
	* enrollcgi/cgi_mail.c: Likewise.
	* grid/gridmap_http.c: Likewise.
	* apps/Makefile.am: Fix a compiling problem on MINIX 3.

2014-10-03  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/ainewra.sh.in: Modify the command-line concerned with the
	change of aistore(1).

2014-10-02  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/aistore.c (ai_import_proc): Enable to specify an access
	password with the option `-pw' when import a PKCS#12 file.

2014-09-30  SAKANE Eisaku  <sakane@nii.ac.jp>

	* etc/aicrlupload.cnf.in: New file.

2014-09-29  SAKANE Eisaku  <sakane@nii.ac.jp>

	* etc/upki/Makefile.am: New file.
	* etc/upki/Makefile.in: Generated from etc/upki/Makefile.am by automake.
	* etc/upki/README_upki.ja: New file.
	* etc/Makefile.am: Add "upki" to SUBDIRS.
	* configure.ac: Add etc/upki/Makefile to AC_CONFIG_FILES.
	* Makefile.am: Improve "aicrlupload" target.
	* etc/Makefile.am: Add "aicrlupload" target in order to install
	an aicrlupload-specific aica.cnf.

2014-09-27  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Makefile.am: Add "aicrlupload" target in order to install only
	the cgi program, "aicrlupload".

2014-09-24  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aisetup.sh.in: Improve the behaviour when specified the
	option `-p12'.

2014-09-22  SAKANE Eisaku  <sakane@nii.ac.jp>

	* etc/client.cnf.in: New file.

2014-09-18  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/certreq.c (create_csr): Fix the double free bug. [#261]

2014-09-17  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Makefile.am: Add "client" target for client-tools only installation.
	* apps/Makefile.am: Add CLEANFILES.
	* ca/Makefile.am: Bump up the libaica_CURRENT number.
	* etc/redhat/Makefile.am: Add CLEANFILES.

2014-09-13  SAKANE Eisaku  <sakane@nii.ac.jp>

	* enrollcgi/aimggen.c: Include "ok_conf.h" to declare the prototype
	of aica_encry_passwd().

2014-09-10  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/req.c: Add headers, <netinet/in.h>, <sys/types.h>,
	and <sys/socket.h>. [#259]
	* enrollcgi/Makefile.am: Modify aimggen_LDDAD. [#260]

2014-09-08  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/aistore.c (main): Return EXIT_SUCCESS if an operation
	succeeded.
	* aica/ainewra.sh.in: Follow new file location etc and add new
	option, `-opcert', that specifies an CA operator's certificate.

2014-09-01  SAKANE Eisaku  <sakane@nii.ac.jp>

	* ca/prof_tmpl.c: Remove the unnecessary prototype declaration,
	get_tmpl_path().
	* aica/aienr_conf.c (CA_set_lib_path): Removed.
	* aica/aicrl_conf.c (CA_set_lib_path): Ditto.
	* aica/aicrlpub.c (main): Comment out CA_set_lib_path() because
	aicrlpub doesn't need that.
	* aica/aica_bind.c (CA_cl_bind): Add a directive for aicrlpub so
	as not to call CA_set_lib_path().
	* aica/Makefile.am: Add AICRLPUB to aicrlpub_CPPFLAGS.

2014-08-30  SAKANE Eisaku  <sakane@nii.ac.jp>

	* ca/prof_file.c (Prof_reload_ctinfo, Prof_reload_ctinfo_,
	Prof_save_ctinfo, Prof_save_ctinfo_, Prof_open_ctfile,
	Prof_open_ctinfo_, Prof_reload_clinfo, Prof_reload_clinfo_,
	Prof_save_clinfo, Prof_save_clinfo_, Prof_open_keyfile,
	Prof_open_keyfile_, Prof_reload_csrinfo, Prof_reload_csrinfo_,
	Prof_save_csrinfo, Prof_save_csrinfo_): Clean up these functions
	with set_path().
	* include/ok_ca.h: Add more doxygen comments.
	* ca/lcmp_asn1d.c (asn1_lcmp_prof): Silence the error,
	"(error) Uninitialized variable: tmp", reported by CppCheck.
	* include/ok_conf.h: Fix the error, "(error) Invalid number of
	character ({) when these macro are defined: '_cplusplus', reported
	by CppCheck.
	* include/ok_ca.h: Add the prototype of set_path().
	* aica/aica.c (CA_do_operation): Fix "Dangerous usage of 'path'"
	reported by CppCheck.
	* aica/aica_new.c (CA_init_Info, CA_init_pwd, CA_add_operator):
	Buffer 'buf' likewise.
	* aica/aica_newssl.c (CA_add_sslcert): Likewise.
	* aica/aica_prof.c (CA_add_prof): Likewise.
	* aica/aica_sign.c (CA_issue_cert): Buffer 'path' likewise.
	* aica/aica_user.c (CA_user_add, CA_user_del, CA_user_mod): Buffer
	'buf' likewise.
	* aica/aicad_log.c (CAd_log_out): Likewise.
	* aica/aicad_op.c (cad_add_exts, cad_del_exts, cad_upd_exts,
	cad_add_prof, cad_mod_prof, CAd_op_certreq, CAd_op_csrreq,
	CAd_op_renewalreq): Buffer 'path' likewise.
	* aica/aicrl_conf.c (CA_set_lib_path): Buffer 'buf' likewise.
	* aica/aicrl_log.c (CApub_log_out): Likewise.
	* aica/aicrlpub.c (CApub_do_operation): Buffers 'path' and
	'clpath' likewise.
	* aica/aienr_conf.c (CA_set_lib_path): Buffer 'buf' likewise.
	* aica/aienr_log.c (CAenr_log_out): Likewise.
	* aica/airad_log.c (RAd_log_out): Likewise.
	* aica/aienrtool.c (enr_send_license): Fix "Uninitialized
	variable: buf" reported by CppCheck.

2014-08-28  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure.ac: Add new option `--enable-unit-testing' that
	enables a Unit Testing with CUnit.
	* ca/utils.c (set_path): Add new return value, 1.
	* ca/Makefile.am: Add new test suite, x-unit.
	* ca/x-unit.c: New file.
	* ca/test_utils.c: New file.
	* ca/prof_conf.c (CA_reqkey2newkey, CA_is_oldreq_exist): Clean up
	these functions with set_path().
	* ca/prof_tool.c (Prof_add_csrfile_, Prof_del_csrfile): Likewise.
	* ca/ca_auth.c (CA_read_groupinfo, CA_write_groupinfo): Likewise.
	* ca/ca_csr.c (CA_is_csrProf_exist): Likewise.
	* ca/ca_file.c (CA_info_read, CA_info_reload, CA_info_write,
	CA_p12_read, CA_write_cert): Likewise.

2014-08-27  SAKANE Eisaku  <sakane@nii.ac.jp>

	* ca/utils.c: New file.
	* ca/utils.c (set_path): New function.
	* ca/prof_file.c (Prof_open_ctinfo, Prof_open_ctinfo_): Merge.
	* ca/prof_file.c (Prof_reload_ctinfo): Make modification accordingly.
	* aica/aica_prof.c (CA_add_prof): Ditto.
	* aica/aicad_op.c (cad_add_prof): Ditto.
	* include/ok_ca.h: Remove the prototype of Prof_open_ctinfo_().
	* etc/upki/wlsetup.sh.in: New file based on the original wlsetup.sh
	from UPKI.
	* ca/prof_file.c (Prof_open_clinfo, Prof_open_clinfo_): Merge.
	* ca/prof_file.c (Prof_reload_clinfo_): Make modification accordingly.
	* include/ok_ca.h: Remove the prototype of Prof_open_clinfo_().
	* ca/prof_file.c (Prof_open_csrinfo, Prof_open_csrinfo_): Merge.
	* ca/prof_file.c (Prof_reload_csrinfo_): Make modification accordingly.
	* include/ok_ca.h: Remove the prototype of Prof_open_csrinfo_().
	* ca/prof_file.c (Prof_get_csr, Prof_get_csrtmpl): Clean up these
	functions with set_path().

2014-08-22  SAKANE Eisaku  <sakane@nii.ac.jp>

	* ca/prof_file.c (Prof_open_ctinfo, Prof_open_ctinfo_,
	Prof_reload_ctinfo, Prof_reload_ctinfo_, Prof_save_ctinfo,
	Prof_save_ctinfo_, Prof_open_ctfile, Prof_open_ctfile_,
	Prof_open_clinfo, Prof_open_clinfo_, Prof_reload_clinfo,
	Prof_reload_clinfo_, Prof_save_clinfo, Prof_save_clinfo_,
	Prof_open_keyfile, Prof_open_keyfile_, Prof_open_csrinfo,
	Prof_open_csrinfo_, Prof_reload_csrinfo, Prof_reload_csrinfo_,
	Prof_save_csrinfo, Prof_save_csrinfo_, Prof_get_csr,
	Prof_get_csrtmpl): Fix "Dangerous usage of 'buf' (strncpy doesn't
	always null-terminate it)." reported by CppCheck.

2014-08-01  SAKANE Eisaku  <sakane@nii.ac.jp>

	* common/version.c (print_version): Add __DATE__.

2014-07-11  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/airad_mail.c (rad_get_mailbody): Add a special handler for
	replacing "ja" with "jp", which will be removed before long.
	* aica/airad_op.c (RAd_op_signreq): Replace "jp" with "ja".

2014-07-10  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure.ac: Add new option `--enable-language' that obsoletes
	the option `--with-lang'.
	* aica/aiconfop.c (aiconf_add_ra): Add a key `lang'.
	* aica/aisetup.sh.in: Add support for the key `lang' in RA setup.
	* aica/Makefile.am: Make modification accordingly.
	* aica/aienr_conf.c (caenr_set_reginfo): Add "lang" as a key to read.
	* aica/aienroll.c (caenr_get_mailbody): Remove macro __WITH_LANG
	and use the "lang".
	* aica/airad_conf.c (rad_set_reginfo): Ditto to aica/aienr_conf.c.
	* aica/airad_op.c (RAd_op_signreq, RAd_op_certreq,
	RAd_op_renewalreq): Comment out the function RAd_get_deflang().
	* aica/airad_util.c (RAd_get_deflang): Disabled.
	* aica/airad_user.c (RAd_auth_license): Remove macro __WITH_LANG.

2014-07-03  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/store_conf.c: New file. This provides the function
	store_config() that gets the value of "store_dir" from a
	configuration file.
	* apps/aistore.c (store_config): Removed.
	* apps/certvfy.c (store_config): Ditto.
	* apps/certreq_conf.c (req_read_config): Use the above store_config().
	* apps/Makefile.am: Make modification accordingly.
	* apps/asn1view.c (main): Remove the code blocks for win32/win64.
	* apps/certconv.c (options): Ditto.
	* apps/certvfy.c (main, options): Ditto.
	* apps/certview.c (options): Ditto.
	* grid/gridmap_conf.c (GMap_read_config, gmap_set_config): Clean up.
	* aica/aica.c (main): Remove the code blocks for win32/win64.
	* aica/aica2hsm.c (main): Ditto.
	* aica/aicrlpub.c (main): Ditto.
	* aica/aienroll.c (main): Ditto.
	* aica/aienrtool.c (enr_send_license): Ditto.
	* enrollcgi/aienr_cgi.c (main): Ditto.
	* enrollcgi/aienroll.c (main): Ditto.
	* enrollcgi/aioperator.c (main): Ditto.
	* enrollcgi/airaadmin.c (main): Ditto.
	* enrollcgi/airaenroll.c (main): Ditto.
	* enrollcgi/airaregist.c (main): Ditto.
	* enroolcgi/airegist.c (main): Ditto.

2014-07-01  SAKANE Eisaku  <sakane@nii.ac.jp>

	* enrollcgi/aicrl_op.c (aicrl_default): Remove the code blocks for
	win32/win64.
	* enrollcgi/aicrl_util.c (aicrl_init_eninfo): Ditto.

2014-06-30  SAKANE Eisaku  <sakane@nii.ac.jp>

	* enrollcgi/aicrlupload.c: Use macro CONF_PATH_MAX.
	* enrollcgi/aicrl_op.c (aicrl_upload): Likewise.
	* common/aiconf.c (conf_get_section): Change the type of argument
	1 and 2 from 'char *' to 'const char *'.
	* include/ok_conf.h: Make modification accordingly.

2014-06-29  SAKANE Eisaku  <sakane@nii.ac.jp>

	* include/ok_conf.h: Define CONF_PATH_MAX and CONF_SECT_NAME_MAX.
	* common/aiconf.c (conf_get_section): Add an error handler for too
	long name.
	* enrollcgi/aicrlupload.c (main): Add support for setting location
	information (cacertdir, crldir) via configuration file.
	* enrollcgi/aicrl_op.c (aicrl_upload): Make modification accordingly.

2014-06-28  SAKANE Eisaku  <sakane@nii.ac.jp>

	* common/aiconf.c (conf_get_section): Add another method to
	specify the third argument 'end'. If the second and third
	arguments are "[section_name]" and NULL, the end of section will
	be recognized as "[section_name end]".
	* common/readpw.c: Moved from apps/readpw.c. This program is used
	to test two APIs, aica_encry_passwd() and aica_decry_passwd().
	* common/aiconf.c (get_conf_salt): Use the above shortcut notation.

2014-06-18  SAKANE Eisaku  <sakane@nii.ac.jp>

	* ca/lcmp_asn1d.c (asn1_lcmp_authinfo): Modify the meaningless
	expression. [#242]
	* include/ok_conf.h: Add doxygen comments.

2014-06-17  SAKANE Eisaku  <sakane@nii.ac.jp>

	* enrollcgi/aienr_ldap.c (aienr_ldap_addcert): Modify variable scope.
	* enrollcgi/aienr_op.c (aienr_moz_certinst): Remove unused
	variable 'path'.
	* enrollcgi/aienr_user.c (aienr_check_login_): Modify variable scope.
	* enrollcgi/aienr_user.c (aienr_check_licnese_): Likewise.
	* enrollcgi/aira_mail.c (aira_get_mailbody): Remove unused
	variable 'err'.
	* enrollcgi/aira_util.c (aira_add_regentry): Remove unused
	variable 'tmp' and silence the warning: missing braces around
	initializer.
	* enrollcgi/aiop_op.c (aiop_check_session): Remove unused variable
	'acc'.
	* enrollcgi/aiop_op.c (aiop_add_userentry): Comment out unused
	variable 'attrs'.
	* enrollcgi/airareg_op.c (aira_updconfirm): Remove unused variable
	'dec' and silence the warning: missing braces around initializer.
	* enrollcgi/aireg_op.c (aiop_updconfirm): Ditto.

2014-06-16  SAKANE Eisaku  <sakane@nii.ac.jp>

	* enrollcgi/cgi_mail.c (aienr_get_mailbody): Remove unused
	variable 'err' and silence the warning: missing braces around
	initializer.
	* enrollcgi/cgi_util.c (cgi_load_session): Remove unused variable 'i'.

2014-06-15  SAKANE Eisaku  <sakane@nii.ac.jp>

	* common/aiconf.c (conf_get_section): Remove unused variable 'err'.
	* ca/lcmp_api.c (LCMP_bind_s): Remove unused variable 'ret'.
	* ca/lcmp_asn1d.c (asn1_lcmp_profreq): Remove unused variable 'der'.
	* ca/prof_file.c (Prof_reload_ctinfo_): Comment out unused variables
	'sz' and 'cur'.
	* apps/req.c (input_ipaddress): Remove unused variable 'i'.
	* aica/aica_lcerts.c (CA_issue_alotof_certificates): Comment out
	unused variable 'st'.
	* aica/aica_op.c (CA_cl_csv): Ditto. BTW, what is the difference
	between the functions CA_issue_alotof_certificates() and CA_cl_csv()?
	* aica/aica_print.c (print_ca_policy): Comment out unused variable 'kd'.
	* aica/aica_sign.c (CA_issue_cert): Comment out unused variable 'st'.
	* aica/aica2hsm.c (main): Modify variable scope.
	* aica/aiconfop.c (aiconf_del_ca): Remove unused variable 'cry'.
	* aica/aiconfop.c (aiconf_add_crl, aiconf_add_ra): Remove unused
	variables 't', 'vp', and 't2'.
	* aica/aiconfop.c (aiconf_del_crl, aiconf_del_ra): Remove unused
	variables 'cry', 'secbuf', and 't'.
	* aica/ainer_conf.c (caenr_set_reginfo): Remove unused variable 'exp'.
	* aica/aienrtool.c (enr_ldap_findupdate): Modify variable scope.
	* aica/airad_util.c (RAd_load_session): Remove unused variable 'i'.
	* aica/aicad.c (main): Remove unused variable 'clen'.
	* aica/aicad.d (options): Remove unused variables 'j' and 'k'.
	* aica/aicad_ca.c (CAd_main): Remove unused variables 'ca' and 'cpf'.
	* aica/aicad_conf.c (CAd_master_boot): Declare variables 'buf and
	'fp' for MS-Windows platform only.
	* aica/aicad_op.c (CAd_op_bindreq): Comment out unused variables 'cp'
	and 's'.
	* aica/aicad_op.c: Comment out unused variable 'peer'.
	* aica/aicad_op.c (CAd_op_signreq): Comment out unused variable 'st'.
	* aica/aicad_op.c (CAd_op_extreq): Comment out unused variable 'ca'.
	* aica/aicad_op.c (CAd_op_renewalreq): Comment out unused variable
	'key'.
	* aica/aicrl_http.c (CApub_url_post): Remove unused variable 'cnt'.
	* aica/aicrl_ldap.c (CApub_ldap_bind): Comment out unused variable
	'mechanism'.
	* aica/aienroll.c (options): Remove unused variable 'cp'.
	* aica/aienroll.c (caenr_get_mailbody): Remove unused variable 'err'.
	* aica/aienroll.c (caenr_get_mailbody): Silence the warning:
	missing braces around initializer.
	* aica/airad.c (main): Remove unused variable 'clen'.
	* aica/airad.c (options): Remove unused variables 'j' and 'k'.
	* aica/airad_ldap.c (RAd_ldap_addcert): Comment out unused
	variables 'cry' and 'val'.
	* aica/airad_op.c (RAd_op_signreq): Remove unused variables 'sal'
	and 'msg'.
	* aica/airad_op.c (RAd_op_certreq): Remove unused variables 'msg'
	and 'upd', and Comment out unused variable 'pubkey'.
	* aica/airad_op.c (RAd_op_renewalreq): Remove unused variables
	'path', 'msg', 'k', 'len', and 'accID', and comment out unused
	variable 'ret'.
	* aica/airad_op.c: Comment out unused variable 'peer'.
	* aica/airad_ra.c (RAd_main): Comment out unused variable 'cpf'.
	* aica/airad_user.c (RAd_user_auth): Remove unused variable 'buf'.
	* aica/airad_user.c (RAd_auth_license): Silence the warning: no
	case matching constant switch condition '0'.
	* grid/gridmap_conf.c (gmap_set_config): Remove unused variable 'err'.
	* grid/gridmap_http.c (gmap_get_webfile): Remove unused variable 'i'.
	* grid/gridmapgen.c (main): Declare variable 'path' for MS-Windows
	platform only.
	* grid/gridmapgen.c (GMap_modify_uudb): Remove unused variable 'gm'.

2014-06-13  SAKANE Eisaku  <sakane@nii.ac.jp>

	* enrollcgi/aimggen.c (main): Silence the warning: control reaches
	end of non-void function, issued by the option "-Wreturn-type".
	* apps/aireadpw.c (main): Add a do while loop.

2014-06-12  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/aireadpw.c (main): Rewrite it with OK_get_passwd() provided
	by AiCrypto.

2014-06-09  SAKANE Eisaku  <sakane@nii.ac.jp>

	* enrollcgi/cgi_log.c (cgi_set_peer): Silence the warning: suggest
	parentheses around assignment used as truth value.
	* enrollcgi/cgi_util.c (cgi_read_query, cgi_read_post,
	cgi_read_cookie, cgi_get_clientcert, cgi_load_session,
	cgi_get_modegrp): Ditto.
	* enrollcgi/aienr_op.c (aienr_print_err, aienr_user_newcert,
	aienr_send_csr, aienr_user_certop, aienr_update_cert,
	aienr_get_cert): Ditto.
	* enrollcgi/aienr_user.c (aienr_change_passwd): Ditto.
	* enrollcgi/aira_op.c (aira_print_err, aira_revokeop, aira_showop,
	aira_modifyop): Ditto.
	* enrollcgi/airae_op.c (airae_print_err, airae_send_csr): Ditto.
	* enrollcgi/aiop_op.c (aiop_get_glist, aiop_print_err,
	aiop_showop, aiop_modifyop, aiop_showuser, aiop_revokeuser): Ditto.
	* enrollcgi/airareg_op.c (aira_print_err, aira_rvkconfirm,
	aira_vrkdone): Ditto.
	* enrollcgi/aireg_op.c (aiop_print_err, aiop_rvkconfirm,
	aiop_rvkdone): Ditto.

2014-06-05  SAKANE Eisaku  <sakane@nii.ac.jp>

	* ca/ca_auth.c (CA_read_authinfo, CA_read_groupinfo,
	CA_write_groupinfo): Silence the warning: suggest parentheses
	around assignment used as truth value.
	* ca/ca_tool.c (CA_can_serialNum_, CA_can_resign, CA_find_stat,
	CA_find_statstr, CA_find_statkeyID, CA_find_statkeyID_
	CA_find_sbjquery, CA_find_prof_sn, CA_find_proj_sbj,
	CA_find_prof_keyid): Ditto to ca/ca_auth.c.
	* ca/ca_tool.c (CA_dnexist_check): Silence the warning: suggest
	explicit braces to avoid ambiguous 'else'.
	* aica/aica.c (main): Ditto to ca/ca_auth.c.
	* aica/aica_lcerts.c (CA_issue_alotof_certificates,
	csv_sign_certext, csv_ipstr2gn): Ditto.
	* aica/aica_op.c (CA_cl_csv): Ditto.
	* aica/aiconfop.c (aiconf_get_item): Ditto.
	* aica/aienrtool.c (enr_send_license): Ditto.
	* aica/aira_op.c (RA_csr_show, RA_csr_reject, RA_csr_distribute): Ditto.
	* aica/airad_util.c (RAd_load_session, RAd_get_mode): Ditto.
	* aica/aicad.c (main): Ditto.
	* aica/aicad_conf.c (CAd_master_boot): Ditto.
	* aica/aicad_log.c (CAd_log_rotate): Ditto.
	* aica/aicad_op.c (CAd_op_certreq, CAd_op_crlreq,
	CAd_op_renewalreq): Ditto.
	* aica/aicrlpub.c (CApub_do_operation): Ditto.
	* aica/aienroll.c (caenr_check_outcert, caenr_session_loop): Ditto.
	* aica/airad.c (main): Ditto.
	* aica/airad_log.c (RAd_log_rotate): Ditto.
	* grid/gridmap_list.c (GMap_mapfile2list): Ditto.
	* grid/gridmapgen.c (GMap_check_csvfile, GMap_save_mapfile): Ditto.

2014-06-04  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aisetup.sh.in: Remove the function built-in so as to be
	more portable. For example, the shell "/bin/sh" in a Debian platform
	does not recognize the function built-in.

2014-06-03  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/Makefile.am: Remove unnecessary option for CPP.
	* apps/Makefile.am: Ditto.
	* ca/Makefile.am: Ditto.
	* common/Makefile.am: Ditto.
	* enrollcgi/Makefile.am: Ditto.
	* grid/Makefile.am: Ditto.
	* apps/aireadpw.c (main): Silence the warning: suggest parentheses
	around assignment used as truth value.
	* apps/aistore.c (store_config, ai_import_proc, get_pkey_bag): Likewise.
	* apps/asn1view.c (main): Likewise.
	* apps/certconv.c (read_files): Likewise.
	* apps/certreq_tool.c (req_ask_comment): Likewise.
	* apps/req.c (config_set_defdir): Likewise.
	* apps/certvfy.c (store_config): Likewise.
	* apps/certview.c (main): Likewise.

2014-06-02  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aica_op.c (CA_cl_csv): Silence the warning: "/*" within comment.
	* aica/aira_op.c (RA_csr_show): Ditto.
	* apps/certreq.c: Ditto.
	* aica/aica_op.c (CA_cl_print): Silence the warning: too many
	arguments for format.
	* aica/aica_print.c (CA_print): Ditto.
	* aica/aica_prof.c (CA_add_prof, CA_rename_prof): Silence the
	warning: empty body in an if-statement.
	* common/aiconf.c (conf_clear_comment, conf_getint, conf_getbool):
	Silence the warning: suggest parentheses around assignment used as
	truth value.
	* include/ok_conf.h: Modify several prototypes accordingly.

2014-05-30  SAKANE Eisaku  <sakane@nii.ac.jp>

	* include/ok_aica.h: Move the prototypes of configuration
	utilities to new header "ok_conf.h".
	* include/ok_conf.h: New file.
	* include/Makefile.am: Add ok_conf.h to noinst_HEADERS accordingly.
	* common/aiconf.c: Move the AccList functions to new file "acclist.c".
	* common/acclist.c: New file.
	* common/Makefile.am: Add acclist.c to libcommon_a_SOURCES accordingly.
	* aica/aica_bind.c: Modify the header inclusion accordingly.
	* aica/aica_conf.c: Likewise.
	* aica/aicad_conf.c: Likewise.
	* aica/aiconfop.c: Likewise.
	* aica/aicrl_conf.c: Likewise.
	* aica/aienr_conf.c: Likewise.
	* aica/aienroll.c: Likewise.
	* aica/airad_conf.c: Likewise.
	* aica/airad_op.c: Likewise.
	* apps/certreq.c: Likewise.
	* apps/certreq_conf.c: Likewise.
	* apps/certvfy.c: Likewise.
	* apps/req.c: Likewise.
	* enrollcgi/aienr_conf.c: Likewise.
	* enrollcgi/aienr_ldap.c: Likewise.
	* enrollcgi/aienr_op.c: Likewise.
	* enrollcgi/airareg_op.c: Likewise.
	* enrollcgi/aireq_op.c: Likewise.
	* grid/gridmap_conf.c: Likewise.
	* common/aiconf.c (conf_getstr): Fix a secondary effect.
	* common/aiconf.c (conf_getline, cont_getstr): Silence the
	warning: suggest parentheses around assignment used as truth value.

2014-05-28  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/airad_mail.c (rad_get_mailbody): Silence the two warnings;
	"missing braces around initializer" and "unused variable `err'".
	* include/ok_aica.h (RAdRegInfo): Add new member "char smtpfrom[128]".
	* apps/airad_mail.c (RAd_sendmail_sys2adm): Add support for new
	item "smtp_from" that specifies the reverse-path address of an airad.
	* apps/airad_conf.c (rad_set_reginfo): Likewise.
	* common/aiconf.c (conf_get_line, conf_comp_item): Make tiny
	modification.
	* common/aiconf.c (conf_getstr): Add an initialization for output
	buffer "ret".
	* include/ok_aica.h: Modify several prototypes accordingly.

2014-05-27  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Version 2.91.
	* apps/certreq_v24usage.c (options, usage): Add an option, -version.
	* common/getprogname.c: New file. this provides the functions,
	getprogname() and setprogname().
	* common/version.c (print_version): Rewrite the function with
	getprogname() and setprogname().
	* common/Makefile.am: Add a condition with respect to HAVE_GETPROGNAME.
	* configure.ac: Add AM_CONDTIONAL accordingly.
	* apps/mdgst.c: Remove the definition of getprogname() and
	setprogname().

2014-05-26  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/certreq.h: New file. This header defines CERTREQ_LOGIN_XXX
	and an enumeration type for certreq(1) operations (req_op).
	* apps/certreq.c: Remove the directives accordingly.
	* apps/certreq_v24usage.c (options): Set f_login correctly.
	* apps/Makefile.am: Add certreq.h to noinst_HEADERS.

2014-05-25  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/certreq.c (main): Add the directive with respect to OLD_USAGE.
	* apps/certreq_v24usage.c (options, usage): Change the
	prototype. The function options() for old usage returns an integer
	of enumeration values, enum req_op.

2014-05-08  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aicrl_ldap.c: Modify the directive with respect to
	HAVE_SASL_H for *-*-solaris2.11.
	* aica/airad_ldap.c: Ditto.
	* enrollcgi/cgi_ldap.c: Ditto.

2014-05-07  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/certreq.c (usage, options): Add the directive with respect
	to OLD_USAGE macro.
	* apps/certreq_v24usage.c: New file. This provides the old-style
	usage() and options().
	* configure.ac: Add new option "--enable-old-style-certreq" for
	building the certreq(1) whose command-line syntax is old-style.
	* apps/Makefile.am: Add an conditional accordingly.

2014-04-30  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/certreq.c: Remove the code blocks for win32/win64.

2014-04-29  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure.ac: Fix the default for enable_debug.

2014-04-28  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/airad.c: Remove the code blocks for win32/win64.
	* aica/airad_conf.c: Likewise.
	* aica/airad_ldap.c: Likewise.
	* aica/airad_log.c: Likewise.
	* aica/airad_mail.c: Likewise.
	* aica/airad_op.c: Likewise.
	* aica/airad_ra.c: Likewise.
	* aica/airad_user.c: Likewise.
	* aica/Makefile.am: Add airad_dbg to sbin_PROGRAMS as conditional
	target.
	* configure.ac: Add etc/redhat/Makefile to AC_CONFIG_FILES.
	* etc/Makefile.am: Add redhat to SUBDIRS.
	* etc/redhat/Makefile.am: New file.
	* etc/redhat/Makefile.in: Generated from etc/redhat/Makefile.am by
	automake.
	* etc/redhat/aicad.init.in: Cleanup.
	* etc/redhat/aicrlpub.init.in: Ditto.
	* etc/redhat/aienroll.init.in: Ditto.
	* etc/redhat/airad.init.in: Ditto.
	* etc/redhat/gridmapgen.init.in: Ditto.
	* apps/aistore.c (store_config): Add conf_clear_comment(). [#184]

2014-04-26  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aicad.c: Remove the code blocks for win32/win64.
	* aica/aicad_op.c: Likewise.
	* aica/Makefile.am: Add aicad_dbg to sbin_PROGRAMS as conditional
	target.
	* configure.ac: Add new option "--enable-debug" for building
	aicad_dbg(8).

2014-04-25  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aicatest.c (options): Add an error handler.
	* aica/aicatest.c (usage): Rearrange the output format.
	* test/aica/Makefile.am: New file.
	* test/aica/Makefile.in: Generated from test/aica/Makefile.am by
	automake.
	* test/aica/test-aistore.sh: New file.
	* test/aica/test.cnf.in: New file.

2014-04-24  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aicatest.c: Remove the code blocks for win32/win64.

2014-04-22  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aira.c: Remove the code blocks for win32/win64.
	* aica/aira_op.c: Likewise.
	* aica/aira.c: Enable the option "-f" (formerly, "-sf") for "list"
	operation.

2014-04-20  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Version 2.90.
	* test/mdgst/test-md2.sh: Add support for MD2-disabled AiCrypto.
	* common/version.c: Modify the header for the AiCrypto version.

2014-04-19  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Makefile.am: Add serv-ssl to EXTRA_DIST.

2014-04-12  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure.ac: Disable SASL on OpenIndiana because
	LDAP_SASL_QUIET is undeclared.

2014-04-05  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aicatestfc.c (ca_set_tmpdn, ca_test_genreq): Use ctime(3)
	to get a character string of a 'time_t' variable instead of snprintf(3).

2014-04-04  SAKANE Eisaku  <sakane@nii.ac.jp>

	* */*: Rearranged according to the new AiCrypto's header directory.
	* configure.ac: Add support for SASL.
	* aica/aicrl_ldap.c: Change <sasl.h> to <sasl/sasl.h>.
	* aica/airad_ldap.c: Ditto.
	* enrollcgi/cgi_ldap.c: Ditto.

2014-03-26  URA Hiroshi  <ura@soum.co.jp>

	* README.en: Add the description of the "mdgst" command.
	* README.ja: Ditto.

2014-03-25  URA Hiroshi  <ura@soum.co.jp>

	* test/mdgst/Makefile.am: Add TESTS_ENVIRONMENT.
	* test/mdgst/Makefile.in: Generated from test/mdgst/Makefile.am by
	automake.
	* test/mdgst/test-md2.sh: Replace "../.." with "${top_builddir}" and
	"echo -n" with "printf '%s'".
	* test/mdgst/test-md5.sh: Ditto.
	* test/mdgst/test-sha1.sh: Ditto.
	* test/mdgst/test-sha2.sh: Ditto.
	* test/mdgst/test-sha3.sh: Ditto.
	* test/mdgst/test-opt-coreutils.sh: Replace "../.." with
	"${top_builddir}".
	* test/mdgst/test-opt-hash-multiple.sh: Ditto.
	* test/mdgst/test-opt-hash-noarg.sh: Ditto.
	* test/mdgst/test-opt-hash-unsupp.sh: Ditto.
	* test/mdgst/test-opt-variablesize-empty.sh: Ditto.
	* test/mdgst/test-opt-variablesize-negative.sh: Ditto.
	* test/mdgst/test-opt-variablesize-noarg.sh: Ditto.
	* test/mdgst/test-opt-variablesize-zero.sh: Ditto.
	* test/mdgst/test-opt-variablesize.sh: Ditto.

2014-03-22  URA Hiroshi  <ura@soum.co.jp>

	* apps/mdgst.c (to_hexstr): Return the size of the array of bytes
	can be converted.
	* apps/mdgst.c (to_hexstr): Add doxygen comment.
	* apps/mdgst.c (get_hashlist, output_digest, options, usage): Ditto.
	* apps/mdgst.c (getprogname, setprogname): Ditto.

2014-03-22  URA Hiroshi  <ura@soum.co.jp>

	* apps/mdgst.c: Fix a SEGV on the OS that cannot allocate a huge
	array.

2014-03-19  URA Hiroshi  <ura@soum.co.jp>

	* test/mdgst/Makefile.am: Add new testsuites to TESTS.
	* test/mdgst/Makefile.in: Generated from test/mdgst/Makefile.am by
	automake.
	* test/mdgst/test-opt-coreutils.sh: New file.
	* test/mdgst/test-opt-hash-multiple.sh: Ditto.
	* test/mdgst/test-opt-hash-noarg.sh: Ditto.
	* test/mdgst/test-opt-hash-unsupp.sh: Ditto.
	* test/mdgst/test-opt-variablesize-empty.sh: Ditto.
	* test/mdgst/test-opt-variablesize-negative.sh: Ditto.
	* test/mdgst/test-opt-variablesize-noarg.sh: Ditto.
	* test/mdgst/test-opt-variablesize-zero.sh: Ditto.
	* test/mdgst/test-opt-variablesize.sh: Ditto.

2014-03-18  URA Hiroshi  <ura@soum.co.jp>

	* apps/mdgst.c: Display "Try `mdgst -help' ..." instead of usage
	when options are invalid.

2014-03-18  URA Hiroshi  <ura@soum.co.jp>

	* Makefile.am: Add test/ to SUBDIRS.
	* Makefile.in: Generated from Makefile.am by automake.
	* configure.ac: Add test{,/mdgst}/Makefile AC_CONFIG_FILES.
	* configure: Automatically regenerated.
	* test/Makefile.am: New file.
	* test/Makefile.in: Generated from test/Makefile.am by automake.
	* test/mdgst/Makefile.am: New file.
	* test/mdgst/Makefile.in: Generated from test/mdgst/Makefile.am by
	automake.
	* test/mdgst/test-md2.sh: New file.
	* test/mdgst/test-md5.sh: Ditto.
	* test/mdgst/test-sha1.sh: Ditto.
	* test/mdgst/test-sha2.sh: Ditto.
	* test/mdgst/test-sha3.sh: Ditto.

2014-03-17  URA Hiroshi  <ura@soum.co.jp>

	* apps/mdgst.c: Support the output of multiple message digests
	at one time.
	* apps/mdgst.c: Support SHA-3 hash algorithms.

2014-03-17  URA Hiroshi  <ura@soum.co.jp>

	* apps/mdgst.c (options): Fix the SEGV when -hash option have no
	argument.
	* apps/mdgst.c (options): Don't display usage with -version option

2014-03-14  URA Hiroshi  <ura@soum.co.jp>

	* apps/mdgst.c: Include "config.h" to use HAVE_GETPROGNAME.

2014-03-13  URA Hiroshi  <ura@soum.co.jp>

	* apps/mdgst.c: Support the standard input.
	* apps/mdgst.c: Code cleanup.

2014-03-12  URA Hiroshi  <ura@soum.co.jp>

	* apps/mdgst.c: Makes it compilable by clang-3.4.

2014-03-12  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aisetup.sh.in: Modified for Web-enroll CGI.
	* aica/Makefile.am: Likewise.
	* etc/httpd.conf.in: More modified (in progress).

2014-03-11  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/ainewca.sh.in: Removed.
	* aica/aisetup.sh.in: Support new option "-raname".
	* enrollcgi/Makefile.am: Change cgidir from $(prefix)/cgi to
	$(libexecdir)/$(PACKAGE).
	* etc/Makefile.am: Add httpd.conf to conf_DATA.
	* etc/httpd.conf.in: Modified so as to fit it for new file location.

2014-03-07  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure.ac: Add asprintf(3) to AC_CHECK_FUNCS.
	* aica/aisetup.sh.in: Incorporate ainewca.sh.in.

2014-03-06  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/ainewca.sh.in: Change the installation directory and name of
	the corresponding script from $(bindir)/ainewca.sh to
	$(sbindir)/ainewca.
	* aica/ainewra.sh.in: Likewise
	* aica/aisetup.sh.in: Likewise
	* aica/initsslcert.sh.in: Likewise.
	* aica/aisetup.sh.in: Clean up.
	* etc/aica.cnf.in: Remove a dummy section [RAd RegInfo 0].

2014-03-04  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aiconfop.c (aiconf_read_item): Make the return value have
	meaning.

2014-03-04  ISHIBASHI Takuya  <takuya@soum.co.jp>

	* apps/certreq.c: Save a private key and a CSR
	if "certreq issue" or "certreq rekey" fail.

2014-02-27  ISHIBASHI Takuya  <takuya@soum.co.jp>

	* aica/aica_newssl.c: Increase the size of RSA key for CA Servers.

2014-02-26  URA Hiroshi  <ura@soum.co.jp>

	* apps/mdgst.c: New file.
	* Makefile.am: Add mdgst.c to bin_PROGRAMS.
	* Makefile.in: Automatically regenerated.
	* configure.ac: Add getprogname to AC_CHECK_FUNCS.
	* configure: Automatically regenerated.
	* config.h.in: Automatically regenerated.

2014-02-20  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/initsslcert.sh.in: Include initializing a certificate store.
	* aica/airanew.sh.in: Include the script "initsslcert.sh".
	* aica/aisetup.sh.in: Ditto.

2014-02-17  ISHIBASHI Takuya  <takuya@soum.co.jp>

	* aica/aica_new.c: Increase the size of RSA key for CAOperators.

2014-02-11  ISHIBASHI Takuya  <takuya@soum.co.jp>

	* aica/aicad_op.c (CAd_op_renewalreq): Implement revoke_at_rekey.
	* include/ok_aica.h: Ditto.
	* aica/aicad_conf.c: Ditto.
	* etc/aica.cnf.in: Ditto.
	* README.ja: Ditto.
	* README.en: Ditto.
	* ca/ca_crl.c: Add a comment.
	* apps/certreq.c: fix segfault by an invalid combination of -algo
	and -hash.

2014-01-30  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure.ac: Fix a detection error of the `ber_memfree'
	function on a Ubuntu (maybe Linux) platform.

2014-01-25  ISHIBASHI Takuya  <takuya@soum.co.jp>

	* README_sha2.en: Add SHA512224RSA and SHA52256RSA for
	DEFAULT_SIG_TYPE.
	* README_sha2.en: Ditto.
	* aica/aica.c: Add sha512-224 and sha512-256 for -hash option.
	* aica/ainewca.sh.in: Ditto.
	* aica/aisetup.sh.in: Ditto.
	* apps/certreq.c: Ditto.
	* README.ja: Ditto.
	* ca/ca_tool.c: Support OBJ_SIG_SHA512224RSA and OBJ_SIG_SHA512256RSA.
	* apps/testsign.sh.in: Add tests for sha512-224 and sha512-256.

2014-01-16  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aisetup.sh.in: Support the issuance of a server certificate
	for LCMP.
	* apps/aistore.c (main): Make the return value have meaning.

2014-01-07  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/certreq_conf.c (req_set_config): Not overwrite the values
	specified with the command-line options. [#20]
	* apps/certreq.c (req_op_rekey): Initialize CertExt *reuse_ex to
	NULL. [#127]

2013-12-25  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aica.c (CA_do_operation): Modified messages to distinguish
	between certificate and CRL. [#113]

2013-12-24  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Version 2.6.2 (AiCrypto 2.5.1)
	* common/version.c: Bump up the patch version number.

2013-12-12  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/Makefile.am: Support latest AiCrypto (r656).
	* apps/Makefile.am: Ditto.
	* ca/Makefile.am: Ditto.
	* common/Makefile.am: Ditto.
	* enrollcgi/Makefile.am: Ditto.
	* grid/Makefile.am: Ditto.

2013-12-09  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/ainewca.sh.in: Ditto to aica/aisetup.sh.in on 2013-12-04.
	* aica/ainewra.sh.in: Likewise.
	* aica/aisetup.sh.in: Support the initialization of certificate store.

2013-12-04  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Makefile.am: Add more necessary stuff.
	* aica/Makefile.am: Remove the code handling the variable "ratemplate".
	* aica/aisetup.sh.in: Likewise.

2013-12-03  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure.ac: Define the macro BSD to determine whether we call
	the function ipa_clean_zombie() or not.
	* aica/aicad.c (main): Replace the macro __BSD__ with BSD.
	* aica/airad.c (main): Ditto.
	* aica/aica.c: Include "config.h" to define "struct timeval"
	correctly on BSD variants.
	* aica/aiconfop.c: Likewise.
	* aica/airad_util.c: Likewise.
	* apps/certreq.c: Likewise.
	* apps/certreq_conf.c: Likewise.
	* apps/certreq_tool.c: Likewise.
	* ca/ca_auth.c: Likewise.
	* common/aiconf.c: Likewise.
	* common/randgen.c: Likewise.
	* enrollcgi/aicrl_op.c: Likewise.
	* enrollcgi/aicrlupload.c: Likewise.
	* enrollcgi/aienroll.c: Likewise.

2013-11-19  SAKANE Eisaku  <sakane@nii.ac.jp>

	* enrollcgi/Makefile.am: Fix the linking problem of aimggen.

2013-11-04  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/certreq.c (req_op_issue): Add new option `-inkey' and fix
	the problem that a file in PKCS#12 format cannot be saved in the
	`issue' operation with the option `-in'. [#182]

2013-10-30  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aica_prof.c (get_templ_names): Replace the legacy function
	rindex() with strrchr().
	* apps/certreq.c (main): Exchange the order of two functions,
	usage() and req_read_config().

2013-10-29  SAKANE Eisaku  <sakane@nii.ac.jp>

	* ca/prof_file.c (Prof_save_ctinfo_, Prof_save_clinfo_,
	Prof_save_csrinfo_): Replace the function ASN1_write_der() with
	rename() in order to preserve the timestamp of backup. [#61]

2013-10-26  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/Makeifle.am: Add the targets ai*.sh and initsslcert.sh.
	* apps/Makefile.am: Add the targets grid-{cert,host}req.
	* configure.ac: Remove ai*.sh, initsslcert.sh,
	grid-{cert,host}.req from AC_CONFIG_FILES.

2013-10-25  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aica2hsm.c: Include <unistd.h> to silence the warning of
	implicit declaration.
	* aica/aica_newssl.c: Ditto.
	* aica/aicad.c: Add the prototype of ipa_clean_zombie().
	* aica/aicad_ca.c: Make the type of "sesid" clear.
	* aica/aicad_log.c: Ditto.
	* aica/aiconfop.c: Silence the warning of implicit declaration.
	* aica/aienroll.c: Ditto to aica/{aica2hsm,aicad}.c
	* aica/aira.c: Add the prototypes of the functions from aica/aira_op.c.
	* aica/aira_op.c: Ditto to aica/aica2hsm.c.
	* aica/airad.c: Ditto to aica/aicad.c.
	* aica/airad_log.c: Ditto to aica/aicad_ca.c.
	* aica/airad_mail.c: Ditto to aica/aica2hsm.c.
	* aica/airad_op.c: Add the prototypes of the functions from
	aica/airad_util.c.
	* aica/airad_ra.c: Ditto to aica/aicad_ca.c.
	* aica/airad_user.c: Ditto to aica/aica2hsm.c.
	* apps/certconv.c: Add the prototype of print_version().
	* ca/prof_conv.c: Ditto to aica/aica2hsm.c.
	* ca/prof_tool.c: Ditto.
	* enrollcgi/aienr_op.c: Ditto.
	* enrollcgi/aienr_user.c: Ditto.
	* enrollcgi/aireg_op.c: Ditto.
	* enrollcgi/cgi_mail.c: Ditto.
	* include/ok_lcmp.h: Add the prototype of LCMP_renewal_s().
	* apps/certreq_conf.c: Rename store[] ctstore[] to silence the
	warning of ld(1) on OpenIndiana.
	* apps/certreq.c: Modification due to the above.
	* enrollcgi/aiop_op.c: Rename 'err' 'errmsg' to silence the
	warning of ld(1) on OpenIndiana.
	* enrollcgi/aira_op.c: Ditto.
	* enrollcgi/airareg_op.c: Ditto.
	* enrollcgi/aireg_op.c: Ditto.

2013-10-18  SAKANE Eisaku  <sakane@nii.ac.jp>

	* grid/gridmapgen.c (GMap_modify_uudb): Use permission bit masks
	defined in <sys/stat.h>.
	* common/version.c (print_version): Use the function aicrypto_version().
	* grid/gridmapgen.c (GMap_modify_uudb): Use permission bit masks
	defined in <sys/stat.h>.

2013-10-17  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure.ac: Modify the explanation of NRG_STOREDIR.

2013-10-16  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure.ac: Add AC_CHECK_DECL(ldap_init) and
	AM_CONDTIONAL(LDAP_DEPRECATED).
	* aica/Makefile.am: Add the related conditional.
	* enrollcgi/Makefile.am: Ditto.

2013-10-12  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/Makefile.am: Fix undefined reference problem on Linux.
	* enrollcgi/Makefile.am: Ditto.
	* common/getfpath.c: New file.
	* common/Makefile.am: Add new target check_LIBRARIES.
	* ca/Makefile.am: Add -ltest to lcmp_test_LDADD.
	* ca/lcmptestfc.c: Remove the code of function get_fpath().
	* aica/aiconfop.c (aiconf_add_ca): Modify newline insertion.

2013-10-11  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Makefile.am: Add resource to EXTRA_DIST and update related targets.
	* aica/initsslcert.sh.in: Clean up.
	* aica/aiconfop.c (aiconf_read_item): Revert to previous format in
	printf(3) because some scripts like aisetup.sh require only the value.
	* aica/aisetup.sh.in: Ditto to aica/initsslcert.sh.in.

2013-10-10  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aiconfop.c (aiconf_set_salt_val): New function.
	* aica/aiconftool.c (main, options, usage): Modification with
	respect to the new function aiconf_set_salt_val().
	* include/ok_aica.h: Add the prototype of the new function.
	* aica/aiconfop.c (aiconf_write_item): Rename the function
	aiconf_operate_item().
	* include/ok_aica.h: Ditto.
	* etc/Makefile.am: Add the targets aica.cnf and gridmap.cnf.
	* configure.ac: Remove aica.cnf and gridmap.cnf from AC_CONFIG_FILES.
	* Makefile.am: Add the targets install-data-local and dist-hook
	for templates/.
	* apps/saltgen.c: Removed. (see [#177]).

2013-10-09  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/airad.c (options): Omit the meaningless argument of the
	function usage().
	* aica/airad.c (usage): Specify argument, void.
	* aica/aiconfop.c (aiconf_read_item): Modify the format in
	printf(3) again.
	* aica/aiconfop.c (aiconf_operate_item): New function.
	* aica/aiconfop.c (aiconf_add_item, aiconf_mod_item): Removed.
	Each is defined as the function aiconf_operate_item() in specific mode.
	* include/ok_aica.h: Add the directives with respect to the above.

2013-10-07  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure.ac: Support a fine tuning of the installation
	directories as environment variables, NRG_CONFDIR, NRG_LOCKDIR,
	NRG_LOGDIR, and NRG_STOREDIR.
	* common/Makefile.am: Modify the target airand.h.
	* ca/Makefile.am: Modification due to the change of configure.ac.
	* apps/Makefile.am: Ditto.
	* aica/Makefile.am: Ditto.
	* aica/aiconfop.c (aiconf_add_crl): Replace PREFIX with LOGDIR.
	* aica/aicad_conf.c: Remove a meaningless directive with respect
	to PREFIX.
	* aica/airad_conf.c: Ditto.
	* enrollcgi/Makefile.am: Ditto to ca/Makefile.am.
	* grid/Makefile.am: Ditto.
	* grid/gridmapgen.c: Ditto to aica/aicad_conf.c.

2013-10-05  SAKANE Eisaku  <sakane@nii.ac.jp>

	* enrollcgi/aiop_op.c (aiop_modifyuser): Tentatively fix an
	overflow problem. [#176]
	* enrollcgi/aiop_op.c (aiop_rvkuserdone): Fix the format in
	snprintf(3) by analogy with aira_op.c (aira_rvkopdone). [#175]
	* configure.ac: Add AM_CONDITIONAL for programs that require LDAP.
	* enrollcgi/Makefile.am: Add a conditional for the above.

2013-10-04  SAKANE Eisaku  <sakane@nii.ac.jp>

	* enrollcgi/aiop_op.c (aiop_viewcacert, aiop_getopcert,
	aiop_getcacert, aiop_getcrl): Add the format in printf(3).
	* enrollcgi/aiop_op.c (aiop_getopcert, aiop_getcacert,
	aiop_getcrl): Fix the data type mismatch in the format of printf(3).
	* enrollcgi/airareg_op.c (aira_default, aira_regiform,
	aira_updatepin, aira_updpindone, aira_viewcacert, aira_getcacert,
	aira_getcrl): Ditto to enrollcgi/aiop_op.c (aiop_viewcacert).
	* enrollcgi/airareg_op.c (aira_getcacert, aira_getcrl): Ditto to
	enrollcgi/aiop_op.c (aiop_getopcert).
	* enrollcgi/aireg_op.c (aiop_default, aiop_updpindone,
	aiop_viewcacert, aiop_getcacert, aiop_getcrl): Ditto to
	enrollcgi/aiop_op.c (aiop_viewcacert).
	* enrollcgi/aireg_op.c (aiop_getcacert, aiop_getcrl): Ditto to
	enrollcgi/aiop_op.c (aiop_getopcert).

2013-10-03  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aica.c: Change the data type of "revoke" from long to int.
	* aica/aica_new.c (CA_new_generate): Fix the data type mismatch
	in the format of printf(3).
	* aica/aica_sign.c (confirm_yes_no): Add the format in printf(3).
	* aica/aica2hsm.c (main): Ditto to aica/aica_new.c, but this
	modification is tentative.
	* aica/aica2hsm.c (CA_p12to_hsm): Ditto to aica/aica_new.c.
	* aica/aiconfop.c (aiconf_read_item): Ditto to aica/aica_sign.c.
	* aica/aienrtool.c (gen_oneline_pwd): Ditto.
	* aica/aira_op.c (confirm_yes_no): Ditto.
	* aica/aira_op.c (RA_list_session): Ditto to aica/aica_new.c.
	* aica/airad_util.c (RAd_load_session): Cast correctly.
	* aica/aicrl_http.c (CApub_recv_httpheader): Ditto to aica/aica_sign.c.
	* grid/gridmap_http.c (gmap_recv_httpheader): Ditto.
	* enrollcgi/cgi_util.c (cgi_print_content): Add the format in printf(3).
	* enrollcgi/aicrl_op.c (aicrl_upload): Ditto.
	* enrollcgi/aienr_op.c (aienr_default, aienr_user_newcert,
	aienr_send_csr, aienr_revoke_cert, aienr_update_cert,
	aienr_get_cert, aienr_moz_certinst, aienr_change_pwd,
	aienr_update_pwd, aienr_send_csr_dl): Ditto.
	* enrollcgi/aienr_op.c (aienr_user_certop): Modify the format in
	printf(3).
	* enrollcgi/aira_op.c (aira_viewopcert, aira_viewraadm,
	aira_viewcgiconf, print_search_list, aira_viewcacert): Ditto to
	enrollcgi/cgi_util.c.
	* enrollcgi/aira_op.c (print_cgi_conf): Change the data type of
	cgi_conf_data.value from (char *) to (void *).
	* enrollcgi/aira_op.c (aira_getadmcert, aira_getcacert,
	aira_getcrl): Ditto to enrollcgi/aienr_op.c.
	* enrollcgi/airae_op.c (airae_send_csr): Ditto to enrollcgi/cgi_util.c.
	* enrollcgi/aiop_op.c (print_search_list, aiop_viewopcert,
	aiop_viewusercert): Ditto.

2013-10-02  SAKANE Eisaku  <sakane@nii.ac.jp>

	* etc/aica.cnf.in: Moved from lib/aica.cnf.in.
	* etc/gridmap.cnf.in: Likewise.
	* etc/httpd.conf.in: Likewise.
	* etc/users.csv: Likewise.
	* Makefile.am: Add etc/ to SUBDIRS.
	* configure.ac: Add etc/Makefile and etc/{aica,gridmap}.cnf to
	AC_CONFIG_FILES.
	* etc/Makefile.am: New file.
	* etc/Makefile.in: Generated from etc/Makefile.am by automake.
	* include/ok_lcmp.h: Add the function prototype of
	LCMP_get_renewalcert() to silence the warning message of compiler
	at changeset:567/naregi-ca/apps/certreq.c:1422.

2013-10-01  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aienroll.c: Include "config.h".
	* grid/gridmapgen.c (GMap_modify_uudb): Fix an insecure temporal
	file creation issue. [#167]
	* ca/lcmptest.c: Add VPATH builds support.
	* ca/Makefile.am: Add -DPATH=\"$(VPATH)\" to lcmp_test_CPPFLAGS.

2013-09-28  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure.ac: Add open(2) to AC_CHECK_FUNCS but no directive
	using HAVE_OPEN is used.

2013-09-27  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Makefile.am: Add grid/ to SUBDIRS.
	* configure.ac: Add grid/Makefile to AC_CONFIG_FILES.
	* grid/Makefile.am: New file.
	* grid/Makefile.in: Generated by grid/Makefile.am by automake.
	* grid/gridmap_conf.c: Abolish the use of macros STRDUP and AIFREE.
	* grid/gridmap_http.c: Abolish the use of macros SNRPINTF,
	AIMALLOC, and AIFREE.
	* grid/gridmap_list.c: Abolish the use of macros AIMALLOC and AIFREE.
	* grid/gridmap_log.c: Abolish the use of macro SNPRINTF.
	* grid/gridmapgen.c: Ditto to grid/gridmap_conf.c.

2013-09-25  SAKANE Eisaku  <sakane@nii.ac.jp>

	* enrollcgi/Makefile.am: Add the cgi programs, airaaadmin,
	airaenroll, airaop, airaregist, airegist, and aimggen.
	* enrollcgi/aira_mail.c: Abolish the use of macros SNPRINTF,
	AIMALLOC, and AIFREE.
	* enrollcgi/aira_op.c: Abolish the use of macros AIFREE, SNPRINTF,
	and PATH_DELI.
	* enrollcgi/aira_user.c: Abolish the use of macros AIFREE and AIMALLOC.
	* enrollcgi/aira_util.c: Abolish the use of macros PATH_DELI,
	AIFREE, SNPRINTF, and STRDUP.
	* enrollcgi/airaadmin.c: Not require the inclusion of "aiconfig.h".
	* enrollcgi/airae_op.c: Abolish the use of macros STRDUP,
	SNPRINTF, AIFREE.
	* enrollcgi/airaenroll.c: Ditto to enrollcgi/airaadmin.c.
	* enrollcgi/aiop_op.c: Ditto to enrollcgi/aira_op.c.
	* enrollcgi/aiop_user.c: Ditto to enrollcgi/aira_user.c.
	* enrollcgi/aioperator.c: Ditto to enrollcgi/airaadmin.c.
	* enrollcgi/airareg_op.c: Ditto to enrollcgi/aira_op.c.
	* enrollcgi/aireg_util.c: Abolish the use of macros STRDUP and SNPRINTF.
	* enrollcgi/aireg_op.c: Ditto to enrollcgi/aira_op.c.
	* configure.ac: Add new option --with-gd.
	* enrollcgi/aimggen.c: Abolish the use of macro AIFREE.

2013-09-24  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure.ac: Add macro AC_CHECK_FUNCS for ber_memfree(),
	ber_free(), and ldap_ber_free(), respectively.
	* enrollcgi/aienr_ldap.c: Include "config.h".
	* enrollcgi/aienr_user.c: Ditto.
	* enrollcgi/cgi_common.h: Modify the directives for HAVE_LDAP_H.
	* enrollcgi/cgi_ldap.h: Ditto to enrollcgi/aienr_ldap.c.

2013-09-22  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure.ac: Add new option --with-ldap.
	* aica/Makefile.am: Modification with adding the above option.
	* aica/aicrl_ldap.c: Not require the inclusion of "lber.h" because
	"ldap.h" recently includes "lber.h".
	* aica/aicrl_op.c: Replace macro HAVE_LDAP_LIB with HAVE_LIBLDAP.
	* aica/aicrlpub.c: Ditto.
	* aica/aienrtool.c: Ditto to aica/aicrl_ldap.c.
	* aica/airad_user.c: Ditto to aica/aicrl_op.c.

2013-09-21  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/grid-certreq.in: Moved from bin/grid-certreq.in.
	* apps/grid-hostreq.in: Likewise.
	* apps/Makefile.am: Add grid-{cert,host}req to bin_SCRIPTS.
	* configure.ac: Add grid-{cert,host}req to AC_CONFIG_FILES.
	* aica/ainewca.sh.in: Moved form bin/ainewca.sh.in.
	* aica/ainewra.sh.in: Likewise.
	* aica/aisetup.sh.in: Likewise.
	* aica/initsslcert.sh.in: Likewise.
	* aica/Makefile.am: Add ainew{c,r}a.sh.in, aisetup.sh.in, and
	initsslcert.sh.in to bin_SCRIPTS.
	* configure.ac: Add the above scripts to AC_CONFIG_FILES.
	* enrollcgi/Makefile.am: Update.
	* enrollcgi/aicrl_op.c: Abolish the use of macros SNPRINTF and
	PATH_DELI.
	* enrollcgi/aicrl_util.c: Abolish the use of macros SNPRINTF and AIFREE.
	* enrollcgi/aienr_cgi.h: Not require the inclusion of "aiconfig.h".
	* enrollcgi/aienr_conf.c: Abolish the use of macros AIFREE,
	SNPRINTF, PATH_DELI, and STRDUP.
	* enrollcgi/aienr_ldap.c: Abolish the use of macro AIFREE.
	* enrollcgi/aienr_op.c: Abolish the use of macros SNPRINTF,
	AIFREE, PATH_DELI, UC_LOCAL_JCODE, STRDUP, ULONG, and FREE.
	* enrollcgi/aienr_user.c: Abolish the use of macros SNPRINTF,
	AIFREE, AIMALLOC, and PATH_DELI.
	* enrollcgi/aienr_util.c: Ditto to enrollcgi/aienr_conf.c.
	* enrollcgi/cgi_common.h: Not require the inclusion of "aiconfig.h".
	* enrollcgi/cgi_ldap.c: Abolish the use of macros STRDUP,
	AIMALLOC, and AIFREE.
	* enrollcgi/cgi_log.c: Abolish the use of macro SNPRINTF.
	* enrollcgi/cgi_mail.c: Abolish the use of macros SNPRINTF,
	AIMALLOC, and AIFREE.
	* enrollcgi/cgi_util.c: Abolish the use of macros AIMALLOC,
	AIFREE, STRDUP, ULONG, and FREE.
	* enrollcgi/aimggen.c: Ditto to enrollcgi/aienr_ldap.c.
	* enrollcgi/aira_mail.c: Ditto to cgi_mail.c.
	* enrollcgi/aira_op.c: Abolish the use of macros SNPRINTF, AIFREE,
	and PATH_DELI.

2013-09-20  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Makefile.am: Add include/ to SUBDIRS.
	* configure.ac: Add include/Makefile to AC_CONFIG_FILES.
	* include/Makefile.am: New file.
	* include/Makefile.in: Generated from include/Makefile.am by automake.
	* aica/aica2hsm.c: Abolish the use of macros STRDUP and AIFREE.
	* aica/aicad.c: Replace aiconfig.h with config.h.
	* aica/aicad_auth.c: Abolish the use of macros PATH_DELI, STRDUP,
	SNPRINTF, and AIFREE.
	* aica/aicad_ca.c: Abolish the use of macro SNPRINTF.
	* aica/aicad_conf.c: Abolish the use of macros AIFREE and SNPRINTF.
	* aica/aicad_log.c: Ditto to aica/aicad_ca.c.
	* aica/aicad_op.c: Ditto to aica/aicad_auth.c.
	* aica/aiconfop.c: Abolish the use of macros SNPRINTF, AIMALLOC,
	AIFREE, and RTN.
	* aica/aiconftool.c: Abolish the use of macro AIFREE.
	* aica/aicrl_conf.c: Abolish the use of macros AIFREE, SNPRINTF,
	and STRDUP.
	* aica/aicrl_http.c: Abolish the use of macros AIMALLOC,
	PATH_DELI, AIFREE, and SNPRINTF.
	* aica/aicrl_ldap.c: Not require the inclusion of "aiconfig.h".
	* aica/aicrl_log.c: Ditto to aica/aicad_ca.c.
	* aica/aicrl_op.c: Abolish the use of macro PATH_DELI.
	* aica/aicrlpub.c: Abolish the use of macros PATH_DELI and SNPRINTF.
	* aica/aienr_conf.c: Ditto to aica/aicrl_conf.c.
	* aica/aienr_log.c: Ditto to aica/aicad_ca.c.
	* aica/aienroll.c: Ditto to aica/aicrl_http.c.
	* aica/aienrtool.c: Abolish the use of macros AIFREE, SNPRINTF,
	and AIMALLOC.
	* aica/aira.c: Ditto to aica/aicad_conf.c.
	* aica/aira_op.c: Ditto.
	* aica/airad.c. Ditto.
	* aica/airad_conf.c: Ditto to aica/aicrl_conf.c.
	* aica/airad_ldap.c: Ditto to aica/aicrl_ldap.c.
	* aica/airad_log.c: Ditto to aica/aicad_ca.c.
	* aica/airad_mail.c: Ditto to aica/aienrtool.c.
	* aica/airad_op.c: Ditto to aica/aicad_auth.c, in addition,
	support UC_LOCAL_CODESET.
	* aica/airad_ra.c: Ditto to aica/aicad_ca.c.
	* aica/airad_user.c: Abolish the use of macros STRDUP, AIFREE, and
	AIMALLOC.
	* aica/airad_util.c: Abolish the use of macros AIMALLOC,
	PATH_DELI, and AIFREE.
	* aica/aicatest.c: Ditto to aica/aicrl_ldap.c.
	* aica/aicatestfc.c: Ditto to aica/aicrl_conf.c.
	* Makefile.am: Add enrollcgi to SUBDIRS as conditional target.
	* configure.ac: Add the macro AC_ARG_ENABLE(enrollcgi).
	* enrollcgi/Makefile.am: New file.
	* enroolcgi/Makefile.in: Generated from enrollcgi/Makefile.am by
	automake.

2013-09-19  SAKANE Eisaku  <sakane@nii.ac.jp>

	* common/version.c: Use macro VERSION defined by config.h.
	* common/Makefile.am: Modification for common/version.c.
	* common/aiconf.c: Moved from apps/aiconf.c.
	* common/randgen.c: Likewise.
	* common/Makefile.am: Modification for common/{aiconf,randgen}.c.
	* Makefile.am: Add directory aica/ to SUBDIRS.
	* configure.ac: Add aica/Makefile to AC_CONFIG_FILES.
	* aica/Makefile.am: New file.
	* aica/Makefile.in: Generated from aica/Makefile.am by automake.
	* aica/aica.c: Abolish the use of macros STRDUP, AIFREE, SNPRINTF,
	and PATH_DELI.
	* aica/aica_bind.c: Abolish the use of macro STRDUP.
	* aica/aica_conf.c: Abolish the use of macros AIFREE and STRDUP.
	* aica/aica_lcerts.c: Abolish the use of macros PATH_DELI, AIFREE,
	and STRDUP.
	* aica/aica_new.c: Abolish the use of macros PATH_DELI, AIMALLOC,
	STRDUP, AIFREE, and SNPRINTF.
	* aica/aica_newssl.c: Ditto to aica/aica_lcerts.c.
	* aica/aica_op.c: Abolish the use of macros AIMALLOC, AIFREE,
	STRDUP, PATH_DELI and ULONG.
	* aica/aica_pol.c: Ditto to aica/aica_bind.c.
	* aica/aica_print.c: Abolish the use of macro AIFREE.
	* aica/aica_prof.c: Ditto to aica/aica_new.c.
	* aica/aica_setext.c: Ditto to aica/aica_bind.c.
	* aica/aica_sign.c: Abolish the use of macros PATH_DELI and AIFREE.
	* aica/aica_user.c: Ditto to aica/aica_lcerts.c.
	* ca/Makefile.am: Add -version-info to libaica_la_LDFLAGS.

2013-09-17  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aicrypto/lnm/large_long.c (LN_long_zadd): Fix a bug that wrong
	value of large_num->top is set. [#162]

2013-09-12  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure.ac: Support UC_LOCAL_CODESET.
	* ca/lcmp_asn1e.c: Replace "aiconfig.h" with "config.h".
	* apps/aireadpw.c (main): Fix the format in printf(3).
	* apps/aistore.c (ai_list_proc): Ditto.
	* apps/certvfy.c (main): Ditto.
	* apps/req.c (input_subject, input_gennames): Ditto.
	* enrollcgi/aicrl_op.c (aicrl_upload): Add support for CRL output
	in DER encoded form. [#161]

2013-09-11  SAKANE Eisaku  <sakane@nii.ac.jp>

	* ca/lcmp_api.c: Add <netdb.h>.
	* include/ok_aica.h: Not require the inclusion of "aiconfig.h".
	* Makefile.am: Add directory apps/ to SUBDIRS.
	* configure.ac: Add apps/Makefile to AC_CONFIG_FILES.
	* apps/Makefile.am: New file.
	* apps/Makefile.in: Generated from apps/Makefile.am by automake.
	* apps/aiconf.c: Abolish the use of macros STRDUP, AIFREE, and AIMALLOC.
	* apps/p12.c: Abolish the use of macro AIFREE.
	* apps/certreq_tool.c: Abolish the use of macro STRDUP.
	* apps/certreq.c: Ditto.
	* apps/aistore.c: Abolish the use of macros AIFREE and STRDUP.
	* apps/certreq_conf.c: Ditto to apps/p12.c.
	* apps/randgen.c: Not require the inclusion of "aiconfig.h".
	* apps/certvfy.c: Ditto.
	* apps/certconv.c: Ditto to apps/certreq_tool.c.
	* apps/req.c: Ditto to apps/aiconf.c.
	* apps/certview.c: Ditto to certreq_tool.c.
	* apps/aireadpw.c: Replace aiconfig.h with config.h.
	* apps/saltgen.c: Ditto to apps/randgen.c.
	* apps/asn1view.c: Ditto to apps/p12.c.

2013-09-10  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aicrypto: Merge topaz-aicrypto r490 through r508.

2013-09-09  SAKANE Eisaku  <sakane@nii.ac.jp>

	* build-aux: Add auxiliary files.
	* m4: Add Libtool macros.
	* configure.ac: libtoolized.
	* Makefile.am: Ditto.
	* ca/Makefile.am: Ditto.
	* ca/ca_auth.c (CA_write_authinfo): Modify the format in sprintf(3).
	* ca/lcmptest.c (main): Use macros EXIT_{FAILURE,SUCCESS}.
	* ca/lcmptestfc.c: Abolish the use of macros AIMALLOC, AIFREE, and
	STRDUP.
	* ca/testcert.pem: New file.
	* ca/testkey.pem: Likewise.
	* ca/testcsr.pem: Likewise.
	* ca/testcrl.pem: Likewise.

2013-09-08  SAKANE Eisaku  <sakane@nii.ac.jp>

	* ca/Makefile.am: New file.
	* ca/Makefile.in: Generated from ca/Makefile.am by automake.
	* ca/ca.c: Abolish the use of macros AIMALLOC, AIFREE and STRDUP.
	* ca/ca_asn1.c: Ditto.
	* ca/ca_auth.c: Ditto, in addition, PATH_DELI and SNPRINTF.
	* ca/ca_csr.c: Abolish the use of macro PATH_DELI.
	* ca/ca_err.c: Use uint32_t instead of ULONG.
	* ca/ca_file.c: Abolish the use of macros PATH_DELI, STRDUP, and AIFREE.
	* ca/ca_sign.c: Abolish the use of macro AIFREE.
	* ca/ca_tool.c: Abolish the use of macros STRDUP and AIFREE.
	* ca/lcmp.c: Ditto to ca/ca.c.
	* ca/lcmp_api.c: Ditto to ca/ca_tool.c.
	* ca/lcmp_asn1d.c: Abolish the use of macros AIFREE and AIMALLOC.
	* ca/lcmp_asn1e.c: Ditto, in addition, replace UC_LOCAL_JCODE with
	UC_LOCAL_CODESET.
	* ca/lcmp_net.c: Ditto to ca/lcmp_asn1d.c.
	* ca/lcmp_tool.c: Abolish the use of macros STRDUP and AIMALLOC.
	* ca/prof.c: Ditto to ca/ca.c.
	* ca/prof_asn1.c: Ditto to ca/lcmp_asn1d.c.
	* ca/prof_conv.c: Abolish the use of macros AIMALLOC, AIFREE and
	PATH_DELI.
	* ca/prof_file.c: Ditto.
	* ca/prof_tmpl.c: Ditto to ca/ca_file.c.
	* ca/prof_tool.c: Abolish the use of macros AIMALLOC, AIFREE,
	STRDUP, and PATH_DELI.

2013-09-07  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Makefile.am: New file.
	* Makefile.in: Generated from Makefile.am by automake.
	* configure.ac: New file.
	* configure: Automatically regenerated.
	* config.h.in: New file.
	* aclocal.m4: New file.
	* depcomp: New file.
	* install-sh: Update.
	* missing: New file.
	* common/Makefile.am: New file.
	* common/Makefile.in: Generated from common/Makefile.am by automake.

2013-09-05  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aira_op.c (RA_list_session): Use SIZEOF_TIME_T macro
	provided by autoconf.
	* enrollcgi/aiop_op.c (aiop_rvkuserdone): Fix the format in
	snprintf(3) by analogy with aira_op.c (aira_rvkopdone). [#175]

2013-08-30  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Version 2.6.1 (AiCrypto 2.5)
	* common/version.c: Bump up the patch version number.

2013-07-09  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/certreq_tool.c (input_simple_subject): Not to print a group
	name if it equals to "NONE_NEEDED" in the CSR operation.
	* apps/certreq.c (req_op_csr): Always set the variable "group" to
	"NONE_NEEDED".

2013-06-29  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Makefile.in: Add common/ to SUBDIRS_CL.
	* common/version.c: Include <string.h> to silence the warning
	message of compiler with respect to strrchr(3).

2013-06-28  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Version 2.6 (AiCrypto 2.5).

2013-06-25  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Version 2.5 (AiCrypto 2.4.1).

2013-06-21  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/certreq.c (options): Improve the option, -version, to print
	the default for public-key cryptography.
	* aicrypto/sigalgo.c (get_algoname): New function.
	* common/version.c: Bump up the patch version number of AiCrypto.

2013-06-08  URA Hiroshi  <ura@soum.co.jp>

	* aica/airad_util.c (RAd_load_session): fix a SEGV problem when running
	on CentOS 6.

2013-03-29  OSAKADA Takahiro  <osa@soum.co.jp>

	* aicrypto/dsa/dsa_gen.c (check_selection_appropriateness)
	(dsapm_gen_p): Add support for DSA with L=3072bit and N=256bit.
	* apps/req.c (get_key_pairs): Ditto.
	* aicrypto/dsa/dsatestfc.c (test_dsa_gen): Add test case for
	DSA with L=3072bit and N=256bit.

2013-03-21  URA Hiroshi  <ura@soum.co.jp>

	* include/ok_ca.h: Add new argument 'flags' to CA_check_profpol and
	define macros for 'flags' argument.

	* ca/ca_sign.c (CA_check_profpol): Add operation check.
	* aica/aicad_op.c (cad_check_profpol): Add new argument 'chkpol_flags'.

	* aica/aica_lcerts.c (CA_issue_alotof_certificates): Add operation
	information to CA_check_profpol.
	* aica/aica_sign.c (CA_issue_cert): Ditto.
	* aica/aicad_op.c (CAd_op_signreq, CAd_op_csrreq, CAd_op_renewalreq):
	Add operation information to cad_check_profpol.

2013-03-04  URA Hiroshi  <ura@soum.co.jp>

	* aicrypto/lnm/large_sqrt.c (LN_mod_sqrt): Corrected the condition
	that no square roots exist.

2013-02-13  OSAKADA takahiro  <osa@soum.co.jp>

	* aicrypto/lnm/large_prime.c (LN_prime): Fixed the calculate an
	appropriate iteration for use in the Miller-Rabin primality test.

	* README.en: Update the description of the key length can be used.
	* README.ja: Ditto.

2013-02-05  OSAKADA takahiro  <osa@soum.co.jp>

	* aicrypto/include/large_num.h: Increase the maximum length of
	large number from 4096 to 16384 bits.
	* aicrypto/include/ok_rsa.h: Increase the maximum length of RSA
	key from 2048 to 8192 bits.
	* aica/aica_lcerts.c (csv_check_list): Ditto.
	* aica/aica_new.c (CA_new_generate): Ditto.
	* apps/req.c (get_key_pairs): Ditto.

	* aicrypto/lnm/large_prime.c (LN_prime): Reduced magic number 680,
	and replaced by (LN_MAX << 2).

	* aicrypto/lnm/testfunc.c (make_test_LNm, test_plus_minus)
	(test_mul_div_mod, test_karatsuba, test_shift, test_long)
	(test_ext_euclid, test_exp_mod, test_prime, test_sqrt): Changed
	test module for increase the maximum length of large number.

	* aicrypto/rsa/rsatestfc.c (test_rsa_keygen): Changed test module
	for increase the maximum length of RSA key.

	* aicrypto/x509/cert_asn1.c (Cert_estimate_der_size): Increase the
	maximum length of signature from 2048 to 8192 bits.
	* aicrypto/x509/crl_asn1.c (CRL_estimate_der_size): Ditto.

	* aicrypto/lnm/testfunc.c (make_test_LNm): Fixed a problem that
	generates a random large number of test function.

2012-10-29  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure: Regenrated by Autoconf-2.61.

2012-09-28  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure.in: Add new option, --disable-enrollcgi.
	* Makefile.in: Modification for the option, --disable-enrollcgi.

2012-09-26  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/grid-certreq.in: Follow the new command line syntax of
	certreq(1).
	* apps/grid-hostreq.in: Ditto.

2012-09-24  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aica.c (options, usage): Add an option, -version.
	* apps/certreq.c (options): Complete an implementation of the
	option, -version.
	* configure.in: Use quadrigraphs.
	* common/version.c: Bump up the version number.

2012-09-12  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aicrypto/README.{en,ja}: New file.
	* aicrypto/README.j.2.2: Rename README.j.
	* aicrypto/include/ok_x509.h: Tiny modification.
	* aiconfig.h.in: Add four macros, DEFAULT_SIG_TYPE,
	DEFAULT_HASH_TYPE, DEFAULT_KEY_TYPE, and DEFAULT_KEY_SIZE.
	* configure.in: Add support for specifying the default digital
	signature and key length.
	* configure: Regenerated by Autoconf-2.61.

2012-09-10  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aica2hsm.c (usage): Improve the help message format.
	* aica/aicad.c (options): Add an option, -help.
	(usage): Improve the help message format.
	* aica/aiconftool.c (options, usage): Ditto.
	* aica/aicrlpub.c (options, usage): Ditto.
	* aica/aienrool.c (options, usage): Ditto.
	* aica/aienrtool.c (options, usage): Ditto.
	* aica/airac.c (options, usage): Ditto.
	* aica/airad.c (options, usage): Ditto.
	* aica/aissview.c (options, usage): Ditto.
	* apps/Makefile.in: Add a dependency, common/version.o, to AIPW.
	* apps/aireadpw.c (options): Add two options, -help and
	-version.
	(usage): New function.
	* apps/aistore.c (options): Ditto.
	(usage): Improve the help message format.
	* apps/asn1view.c (options, usage): Ditto.
	* apps/certconv.c (options, usage): Ditto.
	* apps/certvfy.c (usage): Ditto.
	* apps/certview.c (options, usage): Ditto.
	* apps/saltgen.c (main): Change the argument to `void'.
	* grid/Makefile.in: Add a dependency, common/version.o, to GMAP.
	* grid/gridmapgen.c (options): Add two options, -help and
	-version.
	(usage): Improve the help message format.

2012-09-06  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aicommon.c: Add <sys/types.h>.

2012-07-27  TAKANDO Takashi  <takando@soum.co.jp>

	* apps/certreq.c (usage): Modify usage.
	* apps/certreq.c (options): Add -version, and modified unknown option.

	* aica/airad_op.c (RAd_op_renewalreq): Fixed no such profile error.

2012-07-26  TAKANDO Takashi  <takando@soum.co.jp>

	* aica/aicatestfc.c (prepare): Add new function.
	* aica/aicatest.c (main): Call new function.
	* aica/aicatestfc.c (ca_test_sign): Use enum instead of magic number.
	* aica/aicatestfc.c (ca_test_prof,ca_test_svop): Modified test cases
	of updating period.

	* aica/airad_user.c (RAd_user_auth): Fixed for anonymous auth.

	* apps/certreq.c (req_op_rekey): Bug fix.

	* aica/airad_op.c (RAd_op_renewalreq): Fix failure on RENEWAL
	operation in anonymous mode.

2012-07-25  TAKANDO Takashi  <takando@soum.co.jp>

	* aica/airad_op.c (RAd_op_renewalreq): Add email sending process.

	* aica/airad_op.c (RAd_op_bindreq): Indentation fixed.

	* apps/certreq.c (req_op_issue, req_op_rekey): Avoid fault saving
	a certificate in the PKCS#12 format (when the RA is running in
	post_mode).

2012-07-24  TAKANDO Takashi  <takando@soum.co.jp>

	* apps/certreq.c (usage,usage_sbj_input,usage_sbjalt_input):
	Divided macro.
	* apps/certreq.c (create_csr,req_op_csr,req_op_issue,req_op_rekey):
	Fixed reuse subjectDN and subjectAltName.

	* aica/airad_op.c (RAd_op_renewalreq): Add user mode check.

2012-07-23  TAKANDO Takashi  <takando@soum.co.jp>

	* aica/aica_print.c (CA_print): Modified a message format.

	* include/ok_ca.h: Added comment.
	* include/ok_lcmp.h: Ditto.

2012-07-23  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aica2hsm.c (options, usage): Add a new option, -version.
	* aica/aicad.c (options, usage): Ditto.
	* aica/aiconftool.c (options, usage): Ditto.
	* aica/aicrlpub.c (options, usage): Ditto.
	* aica/aienrtool.c (options, usage): Ditto.
	* aica/aira.c (options, usage): Ditto.
	* aica/airad.c (options, usage): Ditto.
	* aica/aissview.c (options, usage): Ditto.
	* aica/Makefile.in: Add a dependency, common/version.o.
	* apps/asn1view.c (options): New function.
	(usage): Add a new option, -version.
	* apps/certview.c (options, usage): Ditto.
	* apps/certvfy.c (options, usage): Ditto.
	* apps/Mailefile.in: Add a dependency, common/version.o.
	* common/version.c: Tiny modification.

2012-07-20  SAKANE Eisaku  <sakane@nii.ac.jp>

	* common/version.c: New file.
	* common/Makefile.in: Modification for version.c.

2012-07-20  TAKANDO Takashi  <takando@soum.co.jp>

	* aica/aica.c (main, options, usage): Rename the aica operation
	NEW NEWCA and RENEW RENEWCA, respectively.
	* include/ok_aica.h: Ditto.
	* bin/ainewca.sh.in: Ditto.
	* bin/aisetup.sh.in: Ditto.

2012-07-19  TAKANDO Takashi  <takando@soum.co.jp>

	* aica/airad_op.c (RAd_op_bindreq, RAd_op_listreq, RAd_op_renewalreq):
	Modified to be able to run BIND multiple times for the RENEWAL
	operation.
	* aica/airad_user.c (RAd_user_auth): Ditto.
	* apps/certreq.c (req_op_rekey): Ditto.
	* ca/lcmp_api.c (LCMP_bind_s): Ditto.
	* include/ok_lcmp.h: Ditto.

	* aica/airad_op.c (RAd_op_renewalreq): Bug fix: add DN error handling.

	* apps/certreq.c (options, req_op_rekey): Get default keytype
	and keysize from current certificate when execute rekey.

	* aica/airad_op.c (RAd_op_bindreq,RAd_op_renewalreq): Add the process
	of updating the session info on RENEWAL operation.
	* aica/airad_user.c (RAd_user_auth): Ditto.

	* apps/certreq.c (usage_sbj_input): Modify usage.

	* aica/aica.c (usage): Modify usage.

	* aica/airad_op.c (RAd_op_renewalreq): offline CA and post_mode
	is unsupported.

2012-07-18  TAKANDO Takashi  <takando@soum.co.jp>

	* apps/certreq.c (options, usage, create_csr, req_op_issue)
	(req_op_revoke, req_op_renew, req_op_getcert, req_op_rekey):
	Modified the arguments and variables of user authentication.
	* apps/certreq_tool.c (input_simple_subject): New arg F_IDPW, F_CHPIN.
	All callers changed.

2012-07-17  TAKANDO Takashi  <takando@soum.co.jp>

	* aica/aica_op.c (CA_cl_print): Modified a message format.

2012-07-12  TAKANDO Takashi  <takando@soum.co.jp>

	* aica/airad_op.c (RAd_op_renewalreq): Add new function.
	* include/ok_aica.h : Ditto.
	* aica/airad_ra.c (RAd_main): Call new function.
	* aica/airad_user.c (RAd_user_auth): Modified for RENEWAL operation.

	* aica/aicad_op.c (CAd_op_renewalreq): Add new function.
	* include/ok_aica.h: Ditto.
	* aica/aicad_ca.c (CAd_main): Call new function.
	* aica/aicad_auth.c (CAd_grant_check): Add new check for RENEWAL operation.

	* apps/certreq.c (req_op_rekey): Add new function.
	(main, usage, get_operation): Add re-key operation.
	(req_op_kupdate, _req_op_renew): Removed.
	(create_csr): New arg REUSE. All callers changed.

	* apps/certreq.c (req_op_revoke): Disabled the part of code for RENEW.

2012-07-11  TAKANDO Takashi  <takando@soum.co.jp>

	* aica/aica.c (options): replace option: from "-upd" to "-renewal".
	* aica/aica.c (usage): Ditto.

	* aica/aica_pol.c (CA_print_profpolicy): Modified to display the
	prohibited policies.

	* aica/aica_op.c (CA_cl_print): replace messages: from "updating" to
	"renewal".
	* aica/aica_pol.c (CA_input_profpolicy): Ditto.
	* aica/aica_print.c (CA_print): Ditto.

2012-07-09  TAKANDO Takashi  <takando@soum.co.jp>

	* ca/lcmp.c (LCMP_op_new, LCMP_op_free)
	(LCMP_renewalreq_new, LCMP_renewalreq_free, LCMP_renewalrsp_new)
	(LCMP_renewalrsp_free): Defined the RENEWAL operation messages.
	* ca/lcmp_api.c (LCMP_renewal_s, LCMP_get_renewalcert): Ditto.
	* ca/lcmp_asn1d.c (ASN1_LCMP_msg, asn1_lcmp_renewalreq)
	(asn1_lcmp_renewalrsp): Ditto.
	* ca/lcmp_asn1e.c (LCMP_op_toDER, lcmp_DER_renewalreq)
	(lcmp_DER_renewalrsp, LCMPop_estimate_der_size): Ditto.
	* ca/lcmp_tool.c (LCMP_get_renewalreq, LCMP_get_renewalrsp): Ditto.
	* include/ok_aimsg.h: Ditto.
	* include/ok_lcmp.h: Ditto.

	* ca/lcmptestfc.c (set_test_renewalreq0, set_test_renewalreq1)
	(set_test_renewalreq2, set_test_renewalreq3, set_test_renewalrsp0)
	(set_test_renewalrsp1, cmp_test_renewalreq, cmp_test_renewalrsp)
	(test_lcmp): Added tests for the RENEWAL messages.

2012-07-04  TAKANDO Takashi  <takando@soum.co.jp>

	* include/ok_lcmp.h: Define enum for CSR format.
	* ca/lcmp_api.c (LCMP_sign_s): Modify function definitions.
	* ca/lcmp_tool.c (LCMP_get_signreq): Ditto.
	* aica/aica_op.c (CA_cl_sign, CA_cl_csv): Use enum instead of magic number.
	* aica/aicatestfc.c (ca_test_sign,ca_test_prof,ca_test_svop): Ditto.
	* aica/airad_op.c (RAd_op_signreq): Ditto.
	* apps/certreq.c (req_op_issue): Ditto.
	* ca/lcmp_asn1d.c (asn1_lcmp_signreq): Ditto.
	* ca/lcmp_asn1e.c (lcmp_DER_signreq): Ditto.
	* enrollcgi/aienr_op.c (aienr_send_csr,aienr_send_csr_dl): Ditto.
	* enrollcgi/airae_op.c (airae_send_csr): Ditto.

2012-07-03  TAKANDO Takashi  <takando@soum.co.jp>

	* include/ok_aica.h: Define authmode macros.
	* aica/airad_conf.c (rad_set_reginfo): Use authmode macros.
	* aica/airad_ldap.c (RAd_ldap_addcert): Ditto.
	* aica/airad_op.c (RAd_op_signreq, RAd_op_certreq, RAd_op_listreq): Ditto.
	* aica/airad_user.c (RAd_user_auth, RAd_auth_license): Ditto.

	* lcmp_tool.c (LCMP_get_bindreq): Rename argument.
	* include/ok_lcmp.h: Likewise.

2012-06-29  TAKANDO Takashi  <takando@soum.co.jp>

	* ca/ca_tool.c (CA_inrenewal_check): Fixed due to specification change.
	(CA_inupdate_check): Renamed.
	(CA_can_resign): Modified function call.
	* ca/ca_sign.c (CA_check_profpol): Likewise.
	* include/ok_ca.h : Rename function prototype.

2012-06-28  TAKANDO Takashi  <takando@soum.co.jp>

	* aica/aicad_auth.c (CAd_user_auth): Use LCMP auth mode macros.
	* aica/airad_user.c (RAd_user_auth): Ditto.
	* apps/certreq.c (req_op_renew): Ditto.
	* ca/lcmp_asn1d.c (asn1_lcmp_bindreq): Ditto.
	* ca/lcmp_asn1e.c (lcmp_DER_bindreq): Ditto.
	* ca/lcmptestfc.c (set_test_bindreq0, set_test_bindreq1): Ditto.

	* include/ok_ca.h: Added comment.
	* include/ok_lcmp.h: Ditto.

	* aica/aica_pol.c (CA_print_profpolicy, CA_print_profdnpolicy):
	New functions.
	* include/ok_aica.h: Add new function prototypes.
	* aica/aica_op.c (CA_cl_print): Call new functions to print policy.
	* aica/aica_print.c (CA_print): Ditto.
	(print_ca_profpol, print_ca_profdnpol): Removed.

2012-06-26  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Version 2.4 release.

2012-06-21  TAKANDO Takashi  <takando@soum.co.jp>

	* apps/certreq.c (main, options, usage)
	(get_operation): Change format of command line.

	* apps/certreq.c (req_op_csr, req_op_issue)
	(save_prvkey, check_file_permission)
	(create_csr): Separate functions.

	* apps/certreq.c (_req_op_renew): Renamed from req_op_renew().
	(req_op_renew): Renamed from req_op_update().

2012-06-18  SAKANE Eisaku  <sakane@nii.ac.jp>

	* README_sha2.en: New file.

2012-06-06  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Makefile.in: Add a command for creating CONFDIR.
	* README_sha2.ja: New file.

2012-05-27  SAKANE Eisaku  <sakane@nii.ac.jp>

	* certs: Remove.
	* Makefile.in: Remove the target, `install_cacerts'.

2012-04-17  TAKANDO Takashi  <takando@soum.co.jp>

	* aica/aica_op.c (CA_cl_pfset): Use ProfTmpl.hashType to store
	signature type.
	* aica/aicad_op.c (cad_mod_prof): Likewise.
	* include/ok_lcmp.h: Add comment.

2012-04-12  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/Makefile.in: Support temporarily CPPFLAGS and LDFLAGS.

2012-03-07  SAKANE Eisaku  <sakane@nii.ac.jp>

	* common/Makefile.in: Clean Makefile in the target `clmake'.

2012-02-08  TAKANDO Takashi  <takando@soum.co.jp>

	* aicrypto/tool/sigalgo.c (select_sigalgo): return error when
	algorithm mismatch.
	* aica/aica_sign.c (Sign_do): Add algorithm mismatch error.
	* ca/ca_crl.c (CA_set_CRL): Ditto.
	* ca/ca_sign.c (CA_set_CRL): Ditto.

2012-02-07  TAKANDO Takashi  <takando@soum.co.jp>

	* aicrypto/include/ok_x509.h: Add DEFAULT_KEY_TYPE,DEFAULT_KEY_SIZE.
	* aica/aica.c: Ditto.
	* apps/certreq.c: Ditto.

	* aica/aica.c (main): set hash default.

	* aica/aica.c (options): indent fix.

	* aica/aica.c (usage): Remove about default value from usage message.
	* apps/certreq.c (usage): Ditto.
	* bin/ainewca.sh.in: Ditto.
	* bin/aisetup.sh.in: Ditto.

	* aica/aica.c (CA_do_operation): keyhash2sigobj() argument fixed.
	* ca/ca_tool.c (keyhash2sigobj): Delete the default case, modified
	to return error.

2012-02-07  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/certreq.c (usage): Add new options, -alt-dns and
	-alt-dns-fqdn.
	(req_op_csr): Ditto.

2012-02-05  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aicad.c (main): Use EXIT_SUCCESS macro.
	* aica/aicrlpub.c (main): Likewise.
	* aica/aienroll.c (main): Likewise.
	* aica/airad.c (main): Likewise.
	* grid/gridmapgen.c (main): Likewise.

2012-02-02  TAKANDO Takashi  <takando@soum.co.jp>

	* aica/aica.c (options, usage): Support help operation and -help option.
	(usage): usage fixed.

	* aicrypto/tool/sigalgo.c (get_hash_algo, get_keytype): New functions.
	* aicrypto/include/ok_tool.h: Add new function prototypes.
	* aica/aica.c (options): Call new functions to check arguments.
	* app/certreq.c (options): Ditto.
	* aica/aica_lcerts.c (CA_issue_alotof_certificates, csv_check_list): Ditto.

2012-01-31  TAKANDO Takashi  <takando@soum.co.jp>

	* aicrypto/ecc/ecctestfunc.c (test_std_parameter): Workaround for
	error exit.

	* apps/testsign.sh.in : Add new test.

2012-01-30  TAKANDO Takashi  <takando@soum.co.jp>

	* aica/aica_lcerts.c (CA_issue_alotof_certificates):
	Call OK_set_sign_digest_algo() to generate DSA parameter.
	* aica/aica_new.c (CA_new_generate): Ditto.
	* aica/aica_op.c (CA_cl_csv): Ditto.
	* apps/certreq.c (req_op_csr): Ditto.

	* aicrypto/dsa/dsa_gen.c (DSAPm_gen_parameter): Add arg HASH_ALGO.
	(dsapm_gen_q,dsapm_gen_p): Add arg DIGEST_ALGO, SEEDLEN. Support SHA-2.
	(check_selection_appropriateness): New function.
	* aicrypto/include/ok_dsa.h: Modified function prototype.
	* apps/req.c (get_key_pairs): Modified the range of keysize for DSA.

	* aicrypto/dsa/dsatestfc.c (test_dsa_gen): DSAPm_gen_parameter() call
	fixed.

2012-01-29  TAKANDO Takashi  <takando@soum.co.jp>

	* aicrypto/tool/error.c (get_err_location): DSA error message bug fix.

	* aicrypto/include/ok_x509.h: Add DEFAULT_SIG_TYPE,DEFAULT_HASH_TYPE.
	* aicrypto/x509/cert_asn1.c: Set default by DEFAULT_SIG_TYPE,DEFAULT_HASH_TYPE.
	* aicrypto/x509/crl_asn1.c: Ditto.
	* ca/ca_asn1.c (ASN1_CA_castat): Ditto.
	* ca/prof_asn1.c (ASN1_ctprof_stat, ASN1_clprof_stat): Ditto.

	* aica/aica_sign.c (Sign_do): Omit initialization of SIG.
	* ca/ca_sign.c (CA_sign): Ditto.

2012-01-27  TAKANDO Takashi  <takando@soum.co.jp>

	* configure.in : Support aicrypto/sha2.
	* configure : Regenerated by Autoconf-2.61.

2012-01-26  TAKANDO Takashi  <takando@soum.co.jp>

	* aicrypto/asn1/asn1_obj.c (ASN1_object_2int, ASN1_int_2object):
	Added OID of NIST recommended elliptic curves.
	* aicrypto/asn1/asn1_print.c (switch_str): Ditto.
	* aicrypto/include/ok_asn1.h : Ditto.
	* aicrypto/include/ok_ecc.h : Ditto.
	* aicrypto/ecc/ecc_std.c (ECPm_set_std_parameter):  Ditto.
	(ECPm_get_recommended_elliptic_curve): New function.

	* apps/req.c (get_key_pairs): Modified the range of keysize for ECDSA.

	* aicrypto/ecc/ecctest.c (main): Add new test.
	* aicrypto/ecc/ecctestfunc.c (test_std_parameter): New test.
	(test_generating_parameter): Add new value to BITS.

	* aicrypto/ecdsa/ecdsatest.c (main): Add new tests.
	* aicrypto/ecdsa/ecdsatestfc.c (test_ecdsa_signature): Renamed to
	_test_ecdsa_signature.
	(test_ecdsa_signature_sha1, test_ecdsa_signature_sha224)
	(test_ecdsa_signature_sha256, test_ecdsa_signature_sha384)
	(test_ecdsa_signature_sha512): New tests.

2012-01-25  TAKANDO Takashi  <takando@soum.co.jp>

	* aica/aica_sign.c (Sign_do): function call replaced obj_sig2hash()
	from sighash2hashobj().
	* aica/aicatestfc.c (ca_ptmpl_cmp): Ditto.
	* ca/ca_crl.c (CA_set_CRL): Ditto.
	* ca/ca_sign.c (CA_sign): Ditto.
	* ca/ca_tool.c (keyhash2sigobj): Ditto.
	(sighash2hashobj): Removed.
	* aicrypto/pkcs/p7_sign.c (P7s_get_attdigest): switch case replaced
	with obj_sig2hash().
	* aicrypto/tool/digest.c (OK_do_digest): Ditto.
	* aicrypto/tool/sigalgo.c (hash_size): Ditto.
	(select_sigalgo): Doc fixed.
	* aicrypto/tool/defalgo.c : #include fixed.
	* aicrypto/tool/signature.c : Removed the declaration was unnecessary.
	* include/ok_ca.h : Ditto.

2012-01-24  URA Hiroshi  <ura@soum.co.jp>

	* apps/req.c (input_ipaddress): Make error messages stand out.

2012-01-20  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aissview.c (main): Use SIZEOF_TIME_T macro provided by
	autoconf.
	* aiconfig.h.in: Add SIZEOF_TIME_T macro.
	* configure.in: Add AC_CHECK_SIZEOF([time_t]).
	* configure: Regenerated by Autoconf-2.61.

2012-01-20  URA Hiroshi  <ura@soum.co.jp>

	* common/afi_utils.c (parse_url): Replace strndup with strdup.

2012-01-18  TAKANDO Takashi  <takando@soum.co.jp>

	* aica/aica_new.c (CA_renew_selfcert): Modified the value to set
	to SIGTYPE when executing 'aica renew'.

2012-01-15  URA Hiroshi  <ura@soum.co.jp>

	* aicrypto/x509/ext_crlstr.c (get_prefix): New function.
	* aicrypto/x509/ext_crlstr.c (get_genname_str): rewrite in order to
	display an iPAddress field of GeneralName in "IP address[/prefix]"
	format.

2012-01-12  TAKANDO Takashi  <takando@soum.co.jp>

	* aicrypto/x509/cert_vfy.c (obj_sig2hash, hash_size):
	Move functions to aicrypto/tool/sigalgo.c.
	* aicrypto/include/ok_x509.h:
	Move function prototypes to aicrypto/include/ok_tool.h.
	* aicrypto/tool/sigalgo.c (obj_sig2hash, hash_size):
	New functions.
	* aicrypto/include/ok_tool.h: Add new function prototypes.

2012-01-06  TAKANDO Takashi  <takando@soum.co.jp>

	* aica/aica.c (usage, CA_do_operation): Add new option '-hash algo'
	to 'aica csv'.
	* aica/aica_lcerts.c (CA_issue_alotof_certificates): New arg HASH.
	Modified to be able to use hash algorithms other than SHA1 in CSR.
	* aica/aica_op.c (CA_cl_csv): Likewise.
	* include/ok_aica.h: Modified function prototypes.

2012-01-06  URA Hiroshi  <ura@soum.co.jp>

	* apps/req.c (input_ipaddress): rewrite using getaddrinfo(3) in
	order to store an IPv6 address in the iPAddress field of GeneralName.

2012-01-05  URA Hiroshi  <ura@soum.co.jp>

	* common/Makefile.in: New file in order to build on FreeBSD.
	* Makefile.in (SRCDIRS): Prepend common.
	* configure.in (AC_OUTPUT): Add common/Makefile.
	* configure: Regenerated by Autoconf-2.61.

2011-12-26  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/Makefile.in: Support temporarily CPPFLAGS and LDFLAGS.

2011-12-22  TAKANDO Takashi  <takando@soum.co.jp>

	* aica/aica_new.c (CA_new_generate): New arg HASH.
	function call replaced select_sigalgo() from CA_key2sigalgo().
	* include/ok_aica.h: Modified arg CA_new_generate().
	* aica/aica.c (main): Modified arg CA_new_generate().
	(usage): Add new option '-hash algo' to 'aica new'.

	* bin/ainewca.sh.in: Add new option "-hash alg".
	* bin/aisetup.sh.in: Ditto.

	* ca/ca_tool.c (CA_key2sigalgo): Doc fix.

2011-12-21  TAKANDO Takashi  <takando@soum.co.jp>

	* apps/certreq.c (options, usage): Add new option "-hash alg".
	(req_op_csr): Replaced switch statements by select_sigalgo()
	function call.
	* aicrypto/tool/signature.c (P1_sign_digest): Increase dinfo
	buffer size for use SHA-384,SHA-512.

2011-12-19  TAKANDO Takashi  <takando@soum.co.jp>

	* aica/aica.c (options, usage): Add SHA-2 arguments to 'aica pfset -hash'.
	* aicrypto/tool/sigalgo.c: New file.
	* aicrypto/tool/Makefile.in: Support aictypto/tool/sigalgo.c
	* aicrypto/include/ok_tool.h: Add select_sigalgo.
	* aica/aica_sign.c (Sign_do): Replaced switch statements by select_sigalgo() function call.
	* ca/ca_crl.c (CA_set_CRL): Ditto.
	* ca/ca_sign.c (CA_sign): Ditto.
	* ca/ca_tool.c (sighash2keyobj, sighash2hashobj, keyhash2sigobj): Support SHA-2.

2011-12-16  TANAKA Yusuke  <usuke@soum.co.jp>

	* common/afi_utils.c (parse_url): New function.
	* common/afi_utils.h: Add macros for parse_url.
	* grid/gridmap_http.c (gmap_get_address, gmap_send_httpget): Use
	parse_url.
	* aica/aicrl_http.c (CApub_connect_http): Ditto.
	* enrollcgi/cgi_http.c (cgi_connect_http): Ditto.

2011-12-13  TANAKA Yusuke  <usuke@soum.co.jp>

	* common/afi_utils.c (conf_normalize_host): New function.
	* common/afi_utils.h: Add macros for conf_normalize_host.
	* aica/aienr_conf.c (caenr_set_reginfo): Use conf_normalize_host.
	* aica/airad_conf.c (rad_set_reginfo): Ditto.
	* enrollcgi/aienr_conf.c (aienr_set_reginfo): Ditto.
	* grid/gridmap_conf.c (gmap_set_config): Ditto.
	* gird/Makefile.in: Modification for conf_normalize_host.

2011-12-12  TAKANDO Takashi  <takando@soum.co.jp>

	* aicrypto/include/ok_tool.h: Add AC_MAX_DIGESTSIZE macro.
	* aicrypto/asn1/asn1_cert.c (ASN1_vfy_sig): Extend the buffer
	size for calling OK_do_digest().
	* aicrypto/tool/digest.c (OK_do_digest): Ditto.
	* aicrypto/tool/signature.c (OK_do_signature, P1_do_sign)
	(P1_sign_digest): Ditto.
	* aicrypto/asn1/asn1_print.c (switch_str): Support SHA-2.
	* aicrypto/x509/cert_print.c (print_sig_algo): Ditto.
	* aicrypto/x509/cert_vfy.c (obj_sig2hash, hash_size): Ditto.

2011-12-12  TANAKA Yusuke  <usuke@soum.co.jp>

	* apps/aiconf.c (conf_parse_svpath): New function.
	* include/ok_aica.h: Add macros for conf_parse_svpath.
	* aica/Makefile.in: Modification for conf_parse_svpath.
	* apps/Makefile.in: Ditto.
	* enrollcgi/Makefile.in: Ditto.
	* apps/certreq.c (req_op_csr, req_op_revoke, req_op_update)
	(req_op_getcert): Use conf_parse_svpath.
	* aica/aica_bind.c (CA_cl_bind): Ditto.
	* aica/aicatestfc.c (ca_test_bind, ca_test_sign, ca_test_list)
	(ca_test_cert, ca_test_csr, ca_test_crl, ca_test_prof, ca_test_svop):
	Ditto.
	* aica/aienr_conf.c (caenr_set_reginfo): Ditto.
	* aica/aienroll.c (options): Ditto.
	* aica/airad_conf.c (rad_set_reginfo): Ditto.
	* enrollcgi/aienr_conf.c (aienr_set_reginfo): Ditto.

2011-12-12  TANAKA Yusuke  <usuke@soum.co.jp>

	* common/afi_utils.c (isipv6addr): New function.
	* common/afi_utils.h: Add macros for isipv6addr.

2011-12-09  TAKANDO Takashi  <takando@soum.co.jp>

	* aicrypto/include/ok_sha2.h: Defined new macros.
	* aicrypto/sha2/sha256.c: Rewritten magic numbers with macros.
	* aicrypto/sha2/sha512.c: Ditto.
	* aicrypto/sha2/sha2testfc.c: Ditto.
	* aicrypto/hmac/hmac.c: Ditto.
	* aicrypto/hmac/hmactestfc.c: Ditto.
	* aicrypto/tool/digest.c (OK_do_digest): Ditto.

2011-12-08  TAKANDO Takashi  <takando@soum.co.jp>

	* aicrypto/sha2/sha2testfc.c: Doc fix.

2011-12-07  TANAKA Yusuke  <usuke@soum.co.jp>

	* enrollcgi/cgi_http.c (cgi_connect_http): Use getaddrinfo.

2011-12-07  TANAKA Yusuke  <usuke@soum.co.jp>

	* aicrypto/ssl/testclient.c (main): Support -4 and -6 options.
	* aicrypto/ssl/testclient2.c (main, check_opt): Ditto.

2011-12-07  TANAKA Yusuke  <usuke@soum.co.jp>

	* aicrypto/ssl/testclient.c (main): Use getaddrinfo.
	* aicrypto/ssl/testclient2.c (main, check_opt): Ditto.
	* aica/aica_bind.c (CA_cl_getsock): Ditto.
	* ca/lcmp_api.c (LCMP_getsock): Ditto.
	* grid/gridmap_http.c (gmap_get_sock): Ditto.
	* aica/aicrl_http.c (CApub_connect_http): Ditto.
	* aica/airad_mail.c (rad_init_mail): Ditto.
	* enrollcgi/cgi_mail.c (cgi_init_mail): Ditto.

2011-12-02  TAKANDO Takashi  <takando@soum.co.jp>

	* aicrypto/tool/digest.c (OK_do_digest): Support SHA2.
	* aicrypto/x509/cert_tool.c (set_digalgo_from_sigalgo): Support SHA2.

2011-12-01  TAKANDO Takashi  <takando@soum.co.jp>

	* aicrypto/include/ok_asn1.h: Support SHA2 OID.
	* aicrypto/asn1/asn1_obj.c (ASN1_object_2int): Ditto.
	(ASN1_int_2object): Ditto.

2011-12-01  TANAKA Yusuke  <usuke@soum.co.jp>

	* aica/aicad_ca.c (cad_get_peername): Use getnameinfo.
	* aica/airad_ra.c (cad_get_peername): Ditto.

2011-11-28  TAKANDO Takashi  <takando@soum.co.jp>

	* aicrypto/include/ok_hmac.h: Add HMAC-SHA-512 function.
	* aicrypto/hmac/hmac.c: Implemented HMAC-SHA-512.
	* aicrypto/hmac/hmactest.c: Added HMAC-SHA-512 test.
	* aicrypto/hmac/hmactestfc.c: Ditto.

2011-11-25  TAKANDO Takashi  <takando@soum.co.jp>

	* aicrypto/include/ok_hmac.h: Add HMAC-SHA-256,HMAC-SHA-384 function.
	* aicrypto/hmac/hmac.c: Implemented HMAC-SHA-256,HMAC-SHA-384.
	* aicrypto/hmac/hmactest.c: Added HMAC-SHA-256,HMAC-SHA-384 test.
	* aicrypto/hmac/hmactestfc.c: Ditto.

2011-11-22  TAKANDO Takashi  <takando@soum.co.jp>

	* aicrypto/include/ok_hmac.h: Add HMAC-SHA-224 function.
	* aicrypto/hmac/hmac.c: Implemented HMAC-SHA-224.
	* aicrypto/hmac/hmactest.c: Added HMAC-SHA-1,HMAC-SHA-224 test.
	* aicrypto/hmac/hmactestfc.c: Ditto.
	* aicrypto/include/ok_sha2.h: Add SHA-384 functions.
	* aicrypto/sha2/sha512.c: Implemented SHA-384.
	* aicrypto/sha2/sha2test.c: Added SHA-384 test.
	* aicrypto/sha2/sha2testfc.c: Ditto.

2011-11-21  TAKANDO Takashi  <takando@soum.co.jp>

	* aicrypto/include/ok_sha2.h: Add SHA-512 functions.
	* aicrypto/sha2/Makefile.in: Support aicrypto/sha2/sha512.c.
	* aicrypto/sha2/sha2.h: Modified macros to support 64bit data.
	* aicrypto/sha2/sha512.c: New file.
	* aicrypto/sha2/sha2test.c: Added SHA-512 test.
	* aicrypto/sha2/sha2testfc.c: Ditto.

2011-11-18  TAKANDO Takashi  <takando@soum.co.jp>

	* aicrypto/include/ok_sha2.h: Add SHA-224 functions.
	* aicrypto/sha2/sha256.c: Implemented SHA-224.
	* aicrypto/sha2/sha2test.c: Added SHA-224 test.
	* aicrypto/sha2/sha2testfc.c: Added SHA-224 test.

2011-11-17  TAKANDO Takashi <takando@soum.co.jp>

	* aicrypto/configure.in: Support aicrypto/sha2
	* aicrypto/configure: Regenerated by Autoconf-2.59.
	* aicrypto/include/ok_sha2.h: New file.
	* aicrypto/sha2/Makefile.in: New file.
	* aicrypto/sha2/sha2.h: New file.
	* aicrypto/sha2/sha256.c: New file.
	* aicrypto/sha2/sha2test.c: New file.
	* aicrypto/sha2/sha2testfc.c: New file.

2011-11-16  TANAKA Yusuke  <usuke@soum.co.jp>

	* aicrypto/ssl/testserver.c (main): Support -4 and -6 options.
	* aicrypto/ssl/testserver2.c (main, check_opt): Ditto.
	* aica/aicad.c (main, options): Ditto.
	* aica/airad.c (main, options): Ditto.

2011-11-16  TANAKA Yusuke  <usuke@soum.co.jp>

	* aicrypto/ssl/testserver.c (main): Use getaddrinfo.
	* aicrypto/ssl/testserver2.c (main): Ditto.
	* aica/aicad.c (main, main_end_sig): Ditto.
	* aica/airad.c (main, main_end_sig): Ditto.

2011-09-08  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure.in: Support etc/redhat/aienroll.init.
	* configure: Regenerated by Autoconf-2.61.
	* aica/aienroll.c (main): Parent process returns 0.
	* etc/redhat/aienroll.init.in: New file.

2011-08-31  SAKANE Eisaku  <sakane@nii.ac.jp>

	* enrollcgi/aicrl_op.c (aicrl_upload): Improve error handling in
	verifying CRL.

2011-08-29  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/certreq.c (main): Change the order of reading
	parameters. Now, command-line option overwrites the parameter in
	aica.cnf.

2011-08-26  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aicrypto/asn1/asn1_print.c (switch_str): Change the object name
	of the algorithm identifier from "sha1WithDSAEncryption" to
	"id-dsa-with-sha1" according to RFC 3279. The object name of the
	algorithm identifier for ECDSA with SHA-1 is also changed from
	"sha1WithECDSAEncrtyption" to "ecdsa-with-SHA1".
	* aicrypto/x509/cert_print.c (print_sig_algo): Likewise.
	* enrollcgi/cgi_util.c (cgi_print_sig_algo): Likewise.

2011-08-22  SAKANE Eisaku  <sakane@nii.ac.jp>

	* apps/saltgen.c: New file.
	* apps/Makefile.in: Add a target for site-specific salt_val in
	lib/aica.cnf.

2011-08-11  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aicad.c (main): Add a signal handler for SIGCHLD.
	* aica/airad.c (main): Ditto.
	* aica/aicommon.c (ipa_catch_SIGCHLD): New function.
	(ipa_clean_zombie): New function.
	* aica/Makefile.in: Modification for aicommon.c.

2011-08-10  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure.in: Support init scripts in the Red Hat (compatible)
	Linux.
	* configure: Regenerated by Autoconf-2.61.
	* Makefile.in: Clean etc/*/*.init in the target `clmake'.
	* etc/README.en: New file.
	* etc/redhat/aicad.init.in: New file, this file is also a
	contribution from a user community. The configure script supports
	this, but the Makefile does not yet.
	* etc/redhat/aicrlpub.init.in: Ditto.
	* etc/redhat/airad.init.in: Ditto.
	* etc/redhat/gridmapgen.init.in: Ditto.

2011-08-09  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aica.c (options): Make error message more kind.
	* aica/aica2hsm.c (options): Likewise.
	* aica/aiconftool.c (options): Likewise.
	* aica/aicrlpub.c (options): Likewise.
	* aica/aienroll.c (options): Likewise.
	* aica/aienrtool.c (options): Likewise.
	* aica/aira.c (options): Likewise.
	* apps/aistore.c (options): Likewise.
	* apps/certconv.c (options): Likewise.
	* apps/certreq.c (options): Likewise.
	* apps/certview.c (options): Likewise.
	* grid/gridmapgen.c (options): Likewise.

2011-07-15  SAKANE Eisaku  <sakane@nii.ac.jp>

	* README.ja: Update the description about --with-lang option.

2011-07-14  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aicrypto/Makefile.in: Clean config.status in the target
	`clmake'.
	* aiconfig.h.in: Fix typo.

2011-07-05  SAKANE Eisaku  <sakane@nii.ac.jp>

	* README.en: Rename README.
	* README.ja: Rename README.j and change the character code
	from euc-jp to utf-8.

2010-12-08  SAKANE Eisaku  <sakane@nii.ac.jp>

	* configure.in: Code cleanup.
	* configure: Regenerated by Autoconf-2.61

2010-12-06  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aicad.c (main): Parent process returns 0.
	* aica/aicrlpub.c (main): Ditto.
	* aica/airad.c (main): Ditto.
	* grid/gridmapgen.c (main): Ditto.

2010-11-30  SAKANE Eisaku  <sakane@nii.ac.jp>

	* config.guess: Update from GNU Libtool 2.4
	* config.sub: Ditto.
	* aicrypto/config.guess: Ditto.
	* aicrypto/config.sub: Ditto.

2010-11-29  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Version 2.3.4 release.

2010-11-26  Shoichi Kurosaka <sho@soum.co.jp>

	* README: Fix the description of the supported platforms and required
	software.
	* README.j: Ditto.

2010-11-01  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aicrypto/tool/error.c: Fix typos in error messages.

2010-10-15  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aicrypto/ssl/testserver2.c (main): Fix compiling error on Mac OS
	X in which SIGCLD is not defined.
	* aicrypto/pem/Makefile.in: Clean a temporal file (#test.ccp).
	* Makefile.in: Clean config.status in the target `clmake'.

2010-10-05  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aiconfig.h.in: Add SETPGRP_VOID macro.
	* configure.in: Use AC_FUNC_SETPGRP to check whether setpgrp takes
	no argument.
	* configure: Regenerated by Autoconf-2.61.
	* aica/aicad.c (main): Use SETPGRP_VOID macro provided by autoconf.
	* aica/aicrlpub.c (main): Ditto.
	* aica/aienroll.c (main): Ditto.
	* aica/airad.c (main): Ditto.
	* grid/gridmapgen.c (main): Ditto.

2010-08-23  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aicad.c: Fix typos in comment.
	* aica/airad.c: Likewise.
	* aicrypto/ssl/testserver2.c: Likewise.
	* apps/aistore.c: Likewise.

2010-08-05  Shoichi Kurosaka <sho@soum.co.jp>

	* templates/SSL server Profile template.cpi: use X509v3 Extended Key
	Usage instead of Netscape Cert Type to indicate the key usage purposes
	and add TLS Web Client Authentication to the key usage purposes.

	* templates/SSL client Profile template.cpi: use X509v3 Extended Key
	Usage instead of Netscape Cert Type to indicate the key usage purposes.

2010-04-23  SAKANE Eisaku  <sakane@nii.ac.jp>

	* Version 2.3.3 release.

2010-03-16  SAKANE Eisaku  <sakane@nii.ac.jp>

	* aica/aica_setext.c (ca_ask_certpol): Add support for including
	only the OID of policyIdentifier in PolicyInformation.
	[RT #1412]


This ChangeLog does not include the changes of NAREGI-CA 2.3.2 or earlier.
