Skip to content

Key verification

Compare
Choose a tag to compare
@dethos dethos released this 10 Apr 11:11
· 154 commits to master since this release
16efb73

This release brings more control to the user key state, automating reminders of expiration for all keys and letting the user audit recent key changes. Also several annoying issues were fixed and more clear instructions were added to the front-end.

Major changes:

  • Improved key verification. Now all users are notified, more than once, when their key is about to expire. #274
  • Key change log. In order to improve transparency and control to the user, all changes to their "public key" field are record and shown in the settings page. #275

Minor changes and bug-fixes:

  • Updated the project dependencies (some with vulnerabilities) #256, #261
  • Fixed settings overlapping button issue #252
  • Added instructions to first time users, when the box list is empty #246
  • Users can now update their passwords (those who signed up using email+password) #254
  • Added instance information to the about page #262
  • Added custom error pages #265
  • Re-factor of the key verification function (key_state) #266
  • When generating the submit page, the owner key is verified #267
  • Updated openpgp.js to v2.5.3 #268 (solves the extended expiration problem described here)
  • Fix syntax error caused by an invalid translation block #276

How to update from previous version

In this version SUPPORT_NAME and SUPPORT_EMAIL environment variables are now required. So before going through any of the following steps add them to your environment or .env file.

To update from the previous version, you need to run the following commands after fetching the new code changes:

  • $ pip install -r requirements/requirements.txt
  • $ gulp build
  • $ python manage.py collectstatic