Changes in version EGP 2.6.3
----------------------------
(2006.11.13)

* cron job example: fetch-crl invocation syntax error corrected

Changes in version EGP 2.6.2
----------------------------
(2006.10.27)

* fixed bug: older wget versions do not recognise --no-check-certificate

Changes in version EGP 2.6.1
----------------------------
(2006.10.25)

* fixed local timezone vs UTC error in LastUpdate CRL validation comparison
* fixed time comparison is the one-hour LastUpdate/download tolerance 
  (both fixes thanks to Alain Roy)
* added support for directory names containing whitespace
* added support for syslog reporting (via -f option or SYSLOGFACILITY directive)
* SERVERCERTCHECK=no is now the default. It can be reset via the configuration
  file, or using the "--check-server-certificate" commandline option
* the main configuration file location (formerly fixed to be
  /etc/sysconfig/fetch-crl) can now be set via the variable $FETCH_CRL_SYSCONFIG
* logfile format timestamp and tag have been normalised

Changes in version EGP 2.6
--------------------------
(2006.05.20)

* if the current local CRL has a lastUpdate time in the future, and the
  newly downloaded CRL is older that the current one, allow the installation
  of the newly downloaded CRL and issue a warning. 
* added non-suppressable warning in case the newly downloaded CRL has a 
  lastUpdate time in the future, but install that CRL anyway (as the local
  clock might have been wrong).

Changes in version EGP 2.5
--------------------------
(2006.01.16)

* added additional configuration arguments and configuration variables
  to skip the server certificate check in wget
  (to support https:// URLs where the server is authenticated with
  a certificate that is not part of it's own trusted domain, such as
  the KISTI URL)

Changes in version EGP 2.4
--------------------------
(2005.11.15)

* for those platforms that support the stat(1) command, and in case the
  .crl_url file is named after the hash of the crl subject name to download,
  error eporting for individual download errors can be suppressed for 
  a configurable amount of time as set via the "-a" option (unit: hours).

Changes in version EGP 2.3
--------------------------
(2005.11.05)

* do not replace recent CRLs with ones that have an older lastUpdate
  timestamp (prevents ARP/DNS DoS attacks)

Changes in version EGP 2.2
--------------------------
(2005.10.27)

* secure http download by wget recognise the CAs in the trusted directory.
  solves the issue described in the LCG bug tracking system
  https://savannah.cern.ch/bugs/index.php?func=detailitem&item_id=12182

Changes in version EGP 2.1
--------------------------
(2005.08.12)
* specifically look for the most recent version of OpenSSL. The
  one in GLOBUS_LOCATION (which used to take precedence in the
  previous releases) is outdated in many cases and caused
  troubles on the LCG  production systems in validating v2 CRLs
* added manual page fetch-crl(8)

Changes in version EGP 2.0
--------------------------
(2005.02.28)
* name of the installed script changed to "fetch-crl"
* the cronjob script is no longer installed by default, but supplied
  as an example in the %doc directory
* RPM is now relocatable (default install in /usr)
* READMA and CHANGES file now inclued in %doc tree
* make install now installs
* version increased to 2.0

Changes in version EGP 1.9
--------------------------
(2005.02.24)
* the content of the final target CRL file is now checked for
  containing a valid CRL if it already exists. If it does not
  contain a CRL, an error is displayed and the file left untouched
  So making the final ".r0" file in ${outdir} a link to something else
  will not work, preventing an escalation in the final stage.

Changes in version EGP 1.8
--------------------------
(changes from Fabio's version 1.7, 2005.02.24)

* All temporary files (the initial CRL download using wget
  and the PEM-converted version of that file) are now created using
  mktemp
* the RetrieveFileByURL function will not overwrite files that
  have any data in them
* Note that the script can be run by a non-priviledged user, but 
  that the output directory must be made writable by that user 
  in an out-of-band way.

EDG version 1.7
---------------
Imported with consent of Fabio Hernandez and Steve Traylen from
the original EDG repository. 
The EU DataGrid License applies, see http://www.eu-datagrid.org/
