ec2-instance-connect (1.1.17) xenial; urgency=high

  * Ubuntu 22.04 upgrades OpenSSL to 3.0.2, which breaks strict x509 verification for one of our intermediate CA certificates.
  * Only verify CA certificates that aren't already trusted in /etc/ssl/certs.
  * OpenSSL 3.0.2 also changes the formatting of the SHA1 fingerprint of an x509 certificate. Switch to a case insensitive match to be backwards and forwards compatible between OpenSSL versions.

-- Jacob Meisler <meislerj@amazon.com>  Mon, May 9 2022 12:30:00 -0400

ec2-instance-connect (1.1.15) xenial; urgency=high

  * Change EIC Hostkeys Harvesting to be asynchronous from SSHD to improve instance boot time
  * Rename and enable ec2-instance-connect-harvest-hostkeys.service. Remove pointer to old ec2-instance-connect.service.

 -- Vishrutha Konappa Reddy <vkreddy@amazon.com>  Thu, Sep 9 2021 12:50:55 -0400

ec2-instance-connect (1.1.14) xenial; urgency=high

  * Ensure failure to run host key harvesting does not leave instances in degraded state

 -- Paul Oh <pauoh@amazon.com>  Fri, 26 Feb 2021 10:00:00 -0400

ec2-instance-connect (1.1.13) xenial; urgency=high

  * Verify that domain returned from IMDS is an AWS domain

 -- Jacob Meisler <meislerj@amazon.com>  Thu, 22 Oct 2020 00:00:00 -0400

ec2-instance-connect (1.1.12) xenial; urgency=high

  * Adding support for Instance Metadata Service Version 2
  * Modifying cURL invocation to avoid need for eval
  * Cleaning up shellcheck catches

 -- Daniel Anderson <dnde@amazon.com>  Tue, 19 Nov 2019 10:38:09 -0800

ec2-instance-connect (1.1.11) xenial; urgency=high

  * Removing errant write to /tmp
  * Cleaning up bad bash practices, including umask race condition

 -- Daniel Anderson <dnde@amazon.com>  Wed, 21 Aug 2019 12:31:23 -0700

ec2-instance-connect (1.1.10) xenial; urgency=medium

  * Fix for an update to openssl (or dependencies) affecting behavior of CApath option on openssl verify
  * Fixing Nitro behavior of hostkey harvesting and post-installation systemd hooks
  * Adding additional licensing headers

 -- Daniel Anderson <dnde@amazon.com>  Wed, 3 Jul 2019 15:24:28 -0700

ec2-instance-connect (1.1.9) xenial; urgency=low

  [ Daniel Anderson ]
  * Improved mechanism for detection if script is running on an EC2 instance
  * postinst: Removed modification of sshd_config introduced in 1.1-8
  * postinst: Better checks for existing AuthorizedKeysCommand* configuration

  [ Mathieu Trudel-Lapierre ]
  * debian/postinst: Fix regexes for matching/ignoring comments in sshd_config.

 -- Daniel Anderson <dnde@amazon.com>  Fri, 21 Jun 2019 16:43:06 -0400

ec2-instance-connect (1.1.8) xenial; urgency=low

  * postinst: Better detection of existing user customization

 -- Daniel Anderson <dnde@amazon.com>  Wed, 24 Apr 2019 17:36:31 -0800

ec2-instance-connect (1.1.7) xenial; urgency=low

  * Minor configuration change

 -- Daniel Anderson <dnde@amazon.com>  Fri, 29 Mar 2019 16:09:51 -0800

ec2-instance-connect (1.1.6) xenial; urgency=low

  * Verification of EC2 hypervisor UUID

 -- Daniel Anderson <dnde@amazon.com>  Wed, 20 Mar 2019 17:02:44 -0800

ec2-instance-connect (1.1.5) xenial; urgency=low

  * Additional checks to enforce scripts only run on EC2 instances

 -- Daniel Anderson <dnde@amazon.com>  Fri, 15 Mar 2019 11:20:03 -0800

ec2-instance-connect (1.1.4) xenial; urgency=high

  * Fixed a bug in reading instance-identity credentials
  * Removed  AWS CLI dependency
  * Hardened error handling
  * Cleaned up package to Canonical's release standards

 -- Daniel Anderson <dnde@amazon.com>  Wed, 30 Jan 2019 13:30:03 -0800

ec2-instance-connect (1.1.3) xenial; urgency=medium

  * Fixing an issue with the hostkey harvesting script - it was using default creds instead of instance-identity

 -- Daniel Anderson <dnde@amazon.com>  Fri, 21 Dec 2018 13:30:03 -0800

ec2-instance-connect (1.1.2) xenial; urgency=high

  * Initial Debian package version based on RPM packaging

 -- Daniel Anderson <dnde@amazon.com>  Fri, 7 Dec 2018 11:37:15 -0800

ec2-instance-connect (1.1.1) UNRELEASED; urgency=low

  * Hostkey harvesting for EC2 Instance Connect.

 -- Anshumali Prasad <anspr@amazon.com>  Tue, 23 Oct 2018 21:49:58 +0000

ec2-instance-connect (1.0.3) UNRELEASED; urgency=low

  * Updating exit status on no-data case, improving support for newer openssl versions

 -- Daniel Anderson <dnde@amazon.com>  Mon, 22 Oct 2018 12:49:33 -0700

ec2-instance-connect (1.0.2) UNRELEASED; urgency=low

  * Cleaning up package requirements & post installation hook

 -- Daniel Anderson <dnde@amazon.com>  Tue, 9 Oct 2018 15:45:03 -0700

ec2-instance-connect (1.0.1) UNRELEASED; urgency=low

  * Initial package build for EC2 Instance Connect targeting Amazon Linux 2

 -- Daniel Anderson <dnde@amazon.com>  Tue, 12 Jun 2018 15:45:34 -0700
