Use TLS on revocation notification webhook
Include system installed CA certificates when verifying webhook
Include the CA certificates added via configuration file option
78057
78313
78316

Backport keylime-policy tool
75797

Backport fix for CVE-2023-3674
21013

Set the generator and timestamp in create_policy.py
11866

Suppress unnecessary error message
11866

Restore allowlist generation script
11866
11867

Rebuild for properly tagging the resulting build
1898

Add missing dependencies python3-jinja2 and util-linux
1898

Automatically update agent API version
1518

Fix registrar is subject to a DoS against SSL (CVE-2023-38200)

Fix challenge-protocol bypass during agent registration (CVE-2023-38201)

Update spec file to use %verify(not md5 size mode mtime) for files updated in %post scriptlets
475

Fix Keylime configuration upgrades issues introduced in last rebase
475
Handle session close using a session manager
1252
Add ignores for EV_PLATFORM_CONFIG_FLAGS
947

Keylime SELinux policy provides more restricted ports.
New SELinux label for ports used by keylime.
Adding tabrmd interfaces allow unix stream socket communication and dbus communication.
Allow the keylime_server_t domain to get the attributes of all filesystems.
595
390
948

Update to 7.3.0
475