From 225a8f78fa8725080e29e823f0d58f8a7763db4a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Micha=C5=82=20Trojnara?= <Michal.Trojnara@stunnel.org>
Date: Tue, 2 Aug 2022 21:29:07 +0200
Subject: [PATCH] release 2.4
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Michał Trojnara <Michal.Trojnara@stunnel.org>
---
 CMakeLists.txt |  2 +-
 NEWS.md        | 29 +++++++++++++++++------------
 2 files changed, 18 insertions(+), 13 deletions(-)

diff --git a/CMakeLists.txt b/CMakeLists.txt
index 4e3f907..f028963 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -17,7 +17,7 @@ project(osslsigncode
   LANGUAGES C)
 
 # force nonstandard version format for development packages
-set(DEV "-dev")
+set(DEV "")
 set(PROJECT_VERSION "${PROJECT_VERSION_MAJOR}.${PROJECT_VERSION_MINOR}${DEV}")
 
 # version and contact information
diff --git a/NEWS.md b/NEWS.md
index 2724540..76a9e49 100644
--- a/NEWS.md
+++ b/NEWS.md
@@ -1,18 +1,23 @@
 # osslsigncode change log
 
-### 2.4 (unreleased)
+### 2.4 (2022.08.02)
 
-- set the default message digest to sha256
-- set of cryptographic hash functions for "attach -signature"
-  and "add" commands ("-h" option)
-- compute and compare the leaf certificate hash for "attach-signature"
-  command ("-require-leaf-hash" option)
-- "-st" option renamed to "-time"
-- user-specified signing and/or verifying time ("-time" option)
-- remove "-timestamp-expiration" option
-- disable verification of the Timestamp Server signature
-  ("-ignore-timestamp" option)
-- use CMake instead of Makefile
+- migrated the build system from GNU Autoconf to CMake
+- added the "-h" option to set the cryptographic hash function
+  for the "attach -signature" and "add" commands
+- set the default hash function to "sha256"
+- added the "attach-signature" option to compute and compare the
+  leaf certificate hash for the "add" command
+- renamed the "-st" option "-time" (the old name is accepted for
+  compatibility)
+- updated the "-time" option to also set explicit verification time
+- added the "-ignore-timestamp" option to disable timestamp server
+  signature verification
+- removed the "-timestamp-expiration" option
+- fixed several bugs
+- updated the included documentation
+- enabled additional compiler/linker hardening options
+- added CI based on GitHub Actions
 
 ### 2.3 (2022.03.06)