ec2-instance-connect (1.1.19) xenial; urgency=high * Remove hostkey harvesting. -- Vishrutha Konappa Reddy Wed, Jul 9 2022 17:30:00 -0400 ec2-instance-connect (1.1.18) xenial; urgency=high * Update curl command to not fail silently on HTTP server error. -- Vishrutha Konappa Reddy Thu, Jun 9 2022 14:30:00 -0400 ec2-instance-connect (1.1.17) xenial; urgency=high * Ubuntu 22.04 upgrades OpenSSL to 3.0.2, which breaks strict x509 verification for one of our intermediate CA certificates. * Only verify CA certificates that aren't already trusted in /etc/ssl/certs. * OpenSSL 3.0.2 also changes the formatting of the SHA1 fingerprint of an x509 certificate. Switch to a case insensitive match to be backwards and forwards compatible between OpenSSL versions. -- Jacob Meisler Mon, May 9 2022 12:30:00 -0400 ec2-instance-connect (1.1.15) xenial; urgency=high * Change EIC Hostkeys Harvesting to be asynchronous from SSHD to improve instance boot time * Rename and enable ec2-instance-connect-harvest-hostkeys.service. Remove pointer to old ec2-instance-connect.service. -- Vishrutha Konappa Reddy Thu, Sep 9 2021 12:50:55 -0400 ec2-instance-connect (1.1.14) xenial; urgency=high * Ensure failure to run host key harvesting does not leave instances in degraded state -- Paul Oh Fri, 26 Feb 2021 10:00:00 -0400 ec2-instance-connect (1.1.13) xenial; urgency=high * Verify that domain returned from IMDS is an AWS domain -- Jacob Meisler Thu, 22 Oct 2020 00:00:00 -0400 ec2-instance-connect (1.1.12) xenial; urgency=high * Adding support for Instance Metadata Service Version 2 * Modifying cURL invocation to avoid need for eval * Cleaning up shellcheck catches -- Daniel Anderson Tue, 19 Nov 2019 10:38:09 -0800 ec2-instance-connect (1.1.11) xenial; urgency=high * Removing errant write to /tmp * Cleaning up bad bash practices, including umask race condition -- Daniel Anderson Wed, 21 Aug 2019 12:31:23 -0700 ec2-instance-connect (1.1.10) xenial; urgency=medium * Fix for an update to openssl (or dependencies) affecting behavior of CApath option on openssl verify * Fixing Nitro behavior of hostkey harvesting and post-installation systemd hooks * Adding additional licensing headers -- Daniel Anderson Wed, 3 Jul 2019 15:24:28 -0700 ec2-instance-connect (1.1.9) xenial; urgency=low [ Daniel Anderson ] * Improved mechanism for detection if script is running on an EC2 instance * postinst: Removed modification of sshd_config introduced in 1.1-8 * postinst: Better checks for existing AuthorizedKeysCommand* configuration [ Mathieu Trudel-Lapierre ] * debian/postinst: Fix regexes for matching/ignoring comments in sshd_config. -- Daniel Anderson Fri, 21 Jun 2019 16:43:06 -0400 ec2-instance-connect (1.1.8) xenial; urgency=low * postinst: Better detection of existing user customization -- Daniel Anderson Wed, 24 Apr 2019 17:36:31 -0800 ec2-instance-connect (1.1.7) xenial; urgency=low * Minor configuration change -- Daniel Anderson Fri, 29 Mar 2019 16:09:51 -0800 ec2-instance-connect (1.1.6) xenial; urgency=low * Verification of EC2 hypervisor UUID -- Daniel Anderson Wed, 20 Mar 2019 17:02:44 -0800 ec2-instance-connect (1.1.5) xenial; urgency=low * Additional checks to enforce scripts only run on EC2 instances -- Daniel Anderson Fri, 15 Mar 2019 11:20:03 -0800 ec2-instance-connect (1.1.4) xenial; urgency=high * Fixed a bug in reading instance-identity credentials * Removed AWS CLI dependency * Hardened error handling * Cleaned up package to Canonical's release standards -- Daniel Anderson Wed, 30 Jan 2019 13:30:03 -0800 ec2-instance-connect (1.1.3) xenial; urgency=medium * Fixing an issue with the hostkey harvesting script - it was using default creds instead of instance-identity -- Daniel Anderson Fri, 21 Dec 2018 13:30:03 -0800 ec2-instance-connect (1.1.2) xenial; urgency=high * Initial Debian package version based on RPM packaging -- Daniel Anderson Fri, 7 Dec 2018 11:37:15 -0800 ec2-instance-connect (1.1.1) UNRELEASED; urgency=low * Hostkey harvesting for EC2 Instance Connect. -- Anshumali Prasad Tue, 23 Oct 2018 21:49:58 +0000 ec2-instance-connect (1.0.3) UNRELEASED; urgency=low * Updating exit status on no-data case, improving support for newer openssl versions -- Daniel Anderson Mon, 22 Oct 2018 12:49:33 -0700 ec2-instance-connect (1.0.2) UNRELEASED; urgency=low * Cleaning up package requirements & post installation hook -- Daniel Anderson Tue, 9 Oct 2018 15:45:03 -0700 ec2-instance-connect (1.0.1) UNRELEASED; urgency=low * Initial package build for EC2 Instance Connect targeting Amazon Linux 2 -- Daniel Anderson Tue, 12 Jun 2018 15:45:34 -0700