diff docs/CHANGES @ 4698:78e501f956b1

clarify CHANGES about secrets configuration changes
author Thomas Waldmann <tw AT waldmann-edv DOT de>
date Sat, 18 Apr 2009 00:44:40 +0200
parents 3a7c9b0a6ae4
children 621c708ecddb 7d1c139a52b7
line wrap: on
line diff
--- a/docs/CHANGES	Mon Apr 13 14:10:48 2009 +0200
+++ b/docs/CHANGES	Sat Apr 18 00:44:40 2009 +0200
@@ -16,6 +16,17 @@
     editor_force = True
     editor_default = 'text'  # internal default, just for completeness
 
+Version 1.8.current:
+  Bug fixes:
+    * Fixed docs bug: see HINT about secrets configuration at version 1.8.0
+      (1.8.0 Other changes).
+
+  New features:
+    * ...
+
+  Other changes:
+    * ...
+
 Version 1.8.2:
   Bug fixes:
     * Fix AttachFile and antispam XSS issues.
@@ -179,6 +190,21 @@
       parameter is no longer supported.
 
   Other Changes: =============================================================
+    * HINT: new configuration for misc. secrets, please use either:
+          secrets = "MySecretLooongString!" # one secret for everything
+      or:
+          secrets = {
+              'xmlrpc/ProcessMail': 'yourmailsecret', # for mailimport
+              'xmlrpc/RemoteScript': 'yourremotescriptsecret',
+              'action/cache': 'yourcachesecret', # unguessable cache keys
+              'wikiutil/tickets': 'yourticketsecret', # edit tickets
+              'jabberbot': 'yourjabberbotsecret', # jabberbot communication
+          }
+      Secret strings must be at least 10 chars long.
+      Note: mail_import_secret setting is gone, use
+            secrets["xmlrpc/ProcessMail"] instead of it.
+      Note: jabberbot secret setting is gone, use
+            secrets["jabberbot"] instead of it.
     * HINT: user_autocreate setting was removed from wiki configuration and
       replaced by a autocreate=<boolean> parameter of the auth objects that
       support user profile auto creation.