1
mandos (1.8.3-3) unstable; urgency=medium
3
* Fix "src:mandos: modifies d/control during build" by not doing that
4
anymore. (Closes: #922202)
5
* debian/rules (override_dh_shlibdeps-arch): Commented out.
7
-- Teddy Hogeborn <teddy@recompile.se> Wed, 13 Feb 2019 09:52:39 +0100
9
mandos (1.8.3-2) unstable; urgency=medium
11
* debian/rules (override_dh_shlibdeps-arch): New; conditionally edit
12
debian/control before running dh_shlibdeps.
14
-- Teddy Hogeborn <teddy@recompile.se> Mon, 11 Feb 2019 12:49:57 +0100
16
mandos (1.8.3-1) unstable; urgency=medium
18
* New upstream release.
19
* debian/watch: Make the ".orig" file name suffix non-optional;
20
otherwise uscan thinks that ".orig" is part of the version number.
21
* debian/control (Build-Depends): Changed GnuTLS dependencies; move
22
3.6.6 alternative to first in list, and remove dependencies on the
23
virtual package "gnutls-dev", since we need the version restrictions.
24
(Package: mandos/Depends): Remove dependency on libgnutls28-dev
26
(Package: mandos/Suggests): New; set to "libc6-dev, c-compiler". (Used
27
to find value of "SO_BINDTODEVICE").
28
(Package: mandos-client/Depends): Don't depend on openssl anymore;
29
instead depend on either a gnutls-bin (>= 3.6.6) (in which case TLS
30
key generation will work), or on libgnutls30 (<< 3.6.0) (in which case
31
TLS key generation will not be needed).
33
-- Teddy Hogeborn <teddy@recompile.se> Mon, 11 Feb 2019 07:30:32 +0100
35
mandos (1.8.2-1) unstable; urgency=medium
37
* New upstream release.
38
* debian/mandos-client.postinst (create_keys): Ignore failure to remove
41
-- Teddy Hogeborn <teddy@recompile.se> Sun, 10 Feb 2019 11:44:56 +0100
43
mandos (1.8.1-1) unstable; urgency=high
45
* New upstream release.
46
* debian/mandos-client.postinst (create_keys): Remove any bad keys
47
created by 1.8.0-1. Only create TLS keys if certtool succeeds.
48
* debian/mandos.postinst (configure): Remove any bad keys from
49
clients.conf, and inform the user if any were found.
50
* debian/mandos.templates (mandos/removed_bad_key_ids): New message.
52
-- Teddy Hogeborn <teddy@recompile.se> Sun, 10 Feb 2019 10:00:21 +0100
54
mandos (1.8.0-1) unstable; urgency=medium
56
* New upstream release.
57
* Fix "(tries to) use GnuTLS OpenPGP support" by using raw public keys
58
when available (Closes: #879538)
59
* Fix "mandos : Depends: libgnutls30 (< 3.6.0) but 3.6.5-2 is to be
60
installed" by now also allowing GnuTLS >= 3.6.6 (Closes: #916673)
61
* debian/control (Standards-Version): Update to "4.3.0".
62
(Package: mandos-client/Depends): Change from "cryptsetup" to
63
"cryptsetup (<< 2:2.0.3-1) | cryptsetup-initramfs". Add "debconf (>=
64
1.5.5) | debconf-2.0".
65
(Source: mandos/Build-Depends): Also allow libgnutls30 (>= 3.6.6).
66
(Package: mandos/Depends): - '' - and add debconf (>= 1.5.5) |
68
(Package: mandos/Description): Alter description to match new design.
69
(Package: mandos-client/Description): - '' -
70
(Package: mandos-client/Depends): Move "gnutls-bin | openssl" to here
72
* debian/mandos-client.README.Debian: Add --tls-privkey and --tls-pubkey
73
options to test command.
74
* debian/mandos-client.postinst (create_key): Renamed to "create_keys"
75
- all callers changed - and also create TLS key files. Show notice if
76
new TLS key files were created.
77
* debian/mandos-client.postrm (purge): Also remove TLS key files.
78
* debian/mandos-client.lintian-overrides: Override warnings.
79
* debian/mandos-client.templates: New.
80
* debian/mandos.lintian-overrides: Override warnings.
81
* debian/mandos.postinst (configure): If GnuTLS 3.6.6 or later is
82
detected, show an important notice (once) about the new key_id option
83
required in clients.conf.
84
* debian/mandos.templates: New.
85
* debian/copyright: Update copyright year to 2019.
87
-- Teddy Hogeborn <teddy@recompile.se> Sun, 10 Feb 2019 05:52:49 +0100
89
mandos (1.7.20-1) unstable; urgency=medium
91
* New upstream release.
92
* Fix "[tethys] mandos-client: Mandos client fails while booting but
93
works from chroot into unpacked initramfs" by setting system clock if
94
necessary (Closes: #894495)
95
* Fix "initramfs boot script assumes internal cryptsetup implementation
96
details and is now broken" by only using documented
97
interfaces (Closes: #904899)
98
* debian/mandos-client.dirs: Add
99
"usr/share/initramfs-tools/scripts/local-premount" and
100
"usr/share/initramfs-tools/conf.d", and remove
101
"usr/share/initramfs-tools/conf-hooks.d".
102
* debian/control (mandos-client/Depends): Add "(>= 0.99)" to dependency
103
on "initramfs-tools".
104
* debian/control (Source: mandos/Rules-Requires-Root): New; set to
106
(Standards-Version): Update to "4.2.0".
108
-- Teddy Hogeborn <teddy@recompile.se> Sun, 19 Aug 2018 22:14:04 +0200
110
mandos (1.7.19-1) unstable; urgency=medium
112
* New upstream release.
113
* Fix "fails with "LeakSanitizer has encountered a fatal error"" by not
114
using LeakSanitizer in affected binary (Closes: #886595)
116
-- Teddy Hogeborn <teddy@recompile.se> Thu, 22 Feb 2018 19:47:59 +0100
118
mandos (1.7.18-1) unstable; urgency=medium
120
* New upstream release.
122
-- Teddy Hogeborn <teddy@recompile.se> Mon, 12 Feb 2018 16:00:11 +0100
124
mandos (1.7.17-1) unstable; urgency=medium
126
* New upstream release.
127
* Fix "fails with "LeakSanitizer has encountered a fatal error""
128
by fixing memory leak in plugin-runner (Closes: #886595)
129
* debian/control (Build-Depends): Also depend on "libgnutls28-dev (<<
130
3.6.0) | libgnutls30 (<< 3.6.0)".
131
(Package: mandos/Depends): - '' -
132
* debian/compat: Change to "10".
133
* debian/watch (version): Change to "4".
134
(opts/pgpsigurlmangle): Remove.
135
(opts/pgpmode): New; set to "auto".
136
(URL): Change to "https://ftp.recompile.se/pub/@PACKAGE@/@PACKAGE@
137
@ANY_VERSION@(?:\.orig)?@ARCHIVE_EXT@".
138
* debian/copyright: Update copyright year to 2018.
139
* debian/rules: Support the "noopt" and "parallel" DEB_BUILD_OPTIONS.
140
(override_dh_fixperms-arch): Use the DEB_HOST_MULTIARCH
141
variable directly instead of shelling out to "dpkg-architecture".
142
* debian/control (Standards-Version): Update to "4.1.3".
143
(Build-Depends): Change version of debhelper dependency to ">= 10".
144
* debian/mandos.lintian-overrides
145
(init.d-script-needs-depends-on-lsb-base): Change line number to "46".
147
-- Teddy Hogeborn <teddy@recompile.se> Sat, 10 Feb 2018 19:09:50 +0100
149
mandos (1.7.16-1) unstable; urgency=medium
151
* New upstream release.
152
* debian/copyright (License): Use program name explicitly.
153
(Format): Use https in URL.
154
* debian/control (Priority): Change from "extra" to "optional".
155
(Standards-Version): Update to "4.0.1".
157
-- Teddy Hogeborn <teddy@recompile.se> Sun, 20 Aug 2017 21:05:26 +0200
159
mandos (1.7.15-1) unstable; urgency=medium
161
* New upstream release.
162
* Upstream release fixes "Seems not to be honoring zeroconf option at
163
mandos.conf" (Closes: #855589)
164
* debian/mandos.lintian-overrides (mandos): Add new line
165
"init.d-script-needs-depends-on-lsb-base etc/init.d/mandos (line 49)".
166
* debian/copyright: Update copyright year to 2017.
168
-- Teddy Hogeborn <teddy@recompile.se> Thu, 23 Feb 2017 21:29:36 +0100
170
mandos (1.7.14-1) unstable; urgency=medium
172
* New upstream release.
173
* debian/mandos-client.postinst (create_key): Stop GPG agent after
174
running mandos-keygen.
175
* debian/control (Package: mandos/Depends): Add "systemd-sysv | lsb-base
176
(>= 3.0-6)", change "gnupg" to "gnupg2 | gnupg", and change
177
"libgpgme11-dev" to "libgpgme-dev | libgpgme11-dev".
179
-- Teddy Hogeborn <teddy@recompile.se> Wed, 25 Jan 2017 20:36:03 +0100
181
mandos (1.7.13-1) unstable; urgency=medium
183
* New upstream release.
184
* Fix "fails to install noninteractively" by using the "%no-protection"
185
statement in the GnuPG batch parameter file. (Closes: #840001)
187
-- Teddy Hogeborn <teddy@recompile.se> Sat, 08 Oct 2016 06:31:07 +0200
189
mandos (1.7.12-1) unstable; urgency=medium
191
* New upstream release.
193
-- Teddy Hogeborn <teddy@recompile.se> Wed, 05 Oct 2016 22:06:55 +0200
195
mandos (1.7.11-1) unstable; urgency=high
197
* New upstream release.
198
* debian/control (Source: mandos/Vcs-Bzr): Change to use HTTPS.
199
(Vcs-Browser): - '' -
201
-- Teddy Hogeborn <teddy@recompile.se> Sat, 01 Oct 2016 16:20:48 +0200
203
mandos (1.7.10-1) unstable; urgency=high
205
* New upstream release.
206
* debian/rules (override_dh_fixperms-arch): Also exclude
207
"etc/mandos/plugin-helpers" from changes by dh_fixperms.
208
* debian/mandos-client.postinst: Fix the permissions of
209
"/etc/mandos/plugin-helpers" for those systems which had a fresh
210
install of an older version.
212
-- Teddy Hogeborn <teddy@recompile.se> Thu, 23 Jun 2016 22:00:29 +0200
214
mandos (1.7.9-1) unstable; urgency=medium
216
* New upstream release.
218
-- Teddy Hogeborn <teddy@recompile.se> Wed, 22 Jun 2016 07:30:12 +0200
220
mandos (1.7.8-1) unstable; urgency=medium
222
* New upstream release.
223
* Fix "bad gpgme_op_decrypt: GPGME: Decryption failed." by copying
224
/usr/bin/gpg-agent into initramfs (Closes: #819982)
225
* debian/control (Homepage): Change URL to use HTTPS.
226
(Standards-Version): Update to 3.9.8.
227
* debian/copyright (Source): Change URL to HTTPS.
228
* debian/mandos-client.README.Debian: Change wording to match updated
231
-- Teddy Hogeborn <teddy@recompile.se> Tue, 21 Jun 2016 21:36:10 +0200
233
mandos (1.7.7-1) unstable; urgency=medium
235
* New upstream release.
236
* debian/mandos-client.postinst (configure): If older version, fix
237
permissions on plugin helper directory. Also fix permissions on
238
plugin helper local override directory (/etc/mandos/plugin-helpers),
239
but only if not listed by "dpkg-statoverride".
240
* debian/rules (override_dh_fixperms-arch): Exclude plugin helper
241
directory from dh_fixperms.
242
* debian/mandos.postinst (configure): Fix state directory permissions,
243
but only if not listed by "dpkg-statoverride".
244
* debian/mandos-client.lintian-overrides: Do not warn about permissions
245
on plugin helper directory.
246
* debian/mandos.dirs (usr/lib/tmpfiles.d): Added.
248
-- Teddy Hogeborn <teddy@recompile.se> Sat, 19 Mar 2016 22:58:49 +0100
250
mandos (1.7.6-1) unstable; urgency=medium
252
* New upstream release.
253
* debian/control (Source: mandos/Build-Depends-Indep): Remove
255
(Source: mandos/Build-Depends-Indep): Change "python-gi |
256
python-gobject" to "python-gi"; i.e. remove "python-gobject".
258
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Mar 2016 22:58:23 +0100
260
mandos (1.7.5-1) unstable; urgency=high
262
* New upstream release.
263
* debian/mandos.postinst (configure): If old version was 1.7.4-1 or
264
1.7.4-1~bpo8+1, fix situation where clients.pickle file is owned by
267
-- Teddy Hogeborn <teddy@recompile.se> Tue, 08 Mar 2016 01:09:55 +0100
269
mandos (1.7.4-1) unstable; urgency=medium
271
* New upstream release.
272
* initramfs-tools-script: Fix "Call to configure_network in initramfs
273
script broken due to set -e" by surrounding call by "set +x" and "set
274
-e" (Closes: #816513)
275
* debian/control: (Source: mandos/Build-Depends-Indep): Change
276
"python-gobject | python-gi" to "python-gi | python-gobject"
277
(Package: mandos/Depends): - '' -
279
-- Teddy Hogeborn <teddy@recompile.se> Sat, 05 Mar 2016 23:10:07 +0100
281
mandos (1.7.3-1) unstable; urgency=medium
283
* New upstream release.
285
-- Teddy Hogeborn <teddy@recompile.se> Mon, 29 Feb 2016 22:26:38 +0100
287
mandos (1.7.2-1) unstable; urgency=medium
289
* New upstream release.
290
* Fix "Uses unneeded and obsolete version specific python packages"
291
by removing version-specific dependencies (Closes: #811159)
292
* debian/control (Source: mandos/Build-Depends): Add (>= 3.3.0) to
293
"libgnutls28-dev" and "gnutls-dev".
294
(Source: mandos/Build-Depends-Indep): Remove "python2.7-gnutls",
295
"python2.7", "python2.7-dbus", "python2.7-avahi", and
296
"python2.7-gobject"; replace with "python (>= 2.7), python (<< 3)",
297
"python-dbus", "python-avahi", "python-gobject | python-gi".
298
(Package: mandos/Depends): Remove "python-gnutls" and
299
"python2.7-gnutls", add "libgnutls28-dev (>= 3.3.0) | libgnutls30 (>=
300
3.3.0)". Add "python (<< 3)". Remove "python2.7-dbus",
301
"python2.7-avahi", "python2.7-gobject", and "python2.7-urwid".
302
Replace "python-gobject" with "python-gobject | python-gi" and "gnupg
303
(<< 2)" with "gnupg".
304
(Package: mandos-client/Depends): Replace
305
"gnupg (<< 2)" with "gnupg".
306
(Source: mandos/Standards-Version): Change to 3.9.7.
307
* debian/copyright (Copyright): Update copyright year.
309
-- Teddy Hogeborn <teddy@recompile.se> Sun, 28 Feb 2016 16:09:01 +0100
311
mandos (1.7.1-2) unstable; urgency=medium
313
* debian/control (Package: mandos/Depends): Fix "Please drop versioned
314
dependency on initscripts package" by removing initscripts dependency
316
* debian/rules (override_dh_fixperms) Fix "FTBFS when built with
317
dpkg-buildpackage -A (No such file or directory)" by splitting into
318
"override_dh_fixperms-arch" and "override_dh_fixperms-indep".
321
-- Teddy Hogeborn <teddy@recompile.se> Sat, 05 Dec 2015 02:27:40 +0100
323
mandos (1.7.1-1) unstable; urgency=medium
325
* New upstream release.
327
-- Teddy Hogeborn <teddy@recompile.se> Sat, 24 Oct 2015 19:43:40 +0200
329
mandos (1.7.0-1) unstable; urgency=medium
331
* New upstream release.
332
* debian/control (Standards-Version): Updated to "3.9.6".
333
(Build-Depends): Add "libnl-route-3-dev".
334
(Package: mandos-client/Recommends): Added "gnutls-bin | openssl" for
335
the generating of DH parameters.
336
* debian/mandos-client.README.Debian: Update example command line to use
337
new MANDOSPLUGINHELPERDIR environment variable. Also document the new
339
* debian/mandos-client.postinst: Create DH parameters file.
340
* debian/mandos.prerm: Don't run init script, use only invoke-rc.d.
341
* debian/mandos-client.postinst: Don't use absolute paths to commands.
342
* debian/mandos-client.postrm: Don't use absolute paths to commands.
343
Also remove dhparams.pem file.
344
* debian/copyright (Copyright): Update copyright year.
345
* Upstream changed systemd service file to implicitly be of
346
"Type=dbus". (Closes: #786845)
348
-- Teddy Hogeborn <teddy@recompile.se> Mon, 10 Aug 2015 22:00:29 +0200
350
mandos (1.6.9-1) unstable; urgency=medium
352
* New upstream release.
353
* debian/control (Build-Depends): Fix "still uses GnutLS 2.x" by
354
changing from "libgnutls-dev" to "libgnutls28-dev | gnutls-dev"
357
-- Teddy Hogeborn <teddy@recompile.se> Sun, 05 Oct 2014 22:05:06 +0200
359
mandos (1.6.8-1) unstable; urgency=medium
361
* New upstream release.
362
* debian/control (Source: mandos/Build-Depends-Indep): Since upstream
363
now requires Python 2.7, depend on exactly the python2.7 package and
364
all the Python 2.7 versions of the python modules.
365
(Package: mandos/Depends): - '' - but still depend on python (>=2.7)
366
and the generic versions of the Python modules; this is for mandos-ctl
367
and mandos-monitor, both of which are compatible with Python 3, and
368
use #!/usr/bin/python.
370
-- Teddy Hogeborn <teddy@recompile.se> Wed, 06 Aug 2014 22:55:24 +0200
372
mandos (1.6.7-1) unstable; urgency=medium
374
* New upstream release.
376
-- Teddy Hogeborn <teddy@recompile.se> Thu, 17 Jul 2014 05:22:45 +0200
378
mandos (1.6.6-1) unstable; urgency=medium
380
* New upstream release.
381
* debian/mandos.postinst: Fix typo in comment.
382
* debian/control (mandos/Recommends): Changed to "ssh-client | fping".
383
(mandos-client/Recommends): New; set to "ssh".
385
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Jul 2014 22:49:21 +0200
387
mandos (1.6.5-3) unstable; urgency=medium
389
* debian/control (mandos-client/Depends): Add "dpkg-dev (>=1.16.0)";
390
initramfs-tools-hook runs "dpkg-architecture -qDEB_HOST_MULTIARCH".
393
-- Teddy Hogeborn <teddy@recompile.se> Fri, 06 Jun 2014 04:27:15 +0200
395
mandos (1.6.5-2) unstable; urgency=medium
397
* debian/rules (override_dh_auto_test-arch): New; does nothing. Fixes
398
FTBFS for build-indep.
400
-- Teddy Hogeborn <teddy@recompile.se> Tue, 13 May 2014 08:08:31 +0200
402
mandos (1.6.5-1) unstable; urgency=medium
404
* New upstream release.
405
* debian/copyright: Change year to "2014".
406
* debian/control (Build-Depends, Build-Depends-Indep): Moved build
407
dependencies of "mandos" package to "Build-Depends-Indep".
408
* debian/upstream/signing-key.asc: New; upstream source public key.
409
* debian/control (Standards-Version): Updated to "3.9.5".
410
* debian/control (mandos/Depends): Remove the dependency on
411
"avahi-daemon (>= 0.6.31-3) | systemd-sysv". It is unnecessary
412
since we have a workaround in debian/mandos.postinst anyway.
414
-- Teddy Hogeborn <teddy@recompile.se> Sun, 11 May 2014 22:16:33 +0200
416
mandos (1.6.4-1) unstable; urgency=medium
418
* New upstream release.
419
* debian/control (Build-Depends): Add Python dependencies to
420
successfully run self-tests.
421
* debian/copyright: GPLv3 now has its own license file - use it.
422
* debian/watch: Set PGP signature URL.
424
-- Teddy Hogeborn <teddy@recompile.se> Sun, 16 Feb 2014 14:09:25 +0100
426
mandos (1.6.3-1) unstable; urgency=low
428
* New upstream release.
429
* debian/control (Build-Depends): Added "systemd".
430
* debian/mandos.dirs (lib/systemd/system): New.
431
* debian/mandos-client.README.Debian: Refer to architecture libdir.
432
* debian/control (mandos/Depends): Add "avahi-daemon (>= 0.6.31-3) |
434
* debian/mandos.postinst: If avahi-daemon is version 0.6.31-2 or older,
435
edit /etc/init.d script headers Required-Start
436
and Required-Stop to have "avahi" instead of
437
"avahi-daemon", before insserv(8) sees it.
438
* debian/mandos-client.lintian-overrides: Libdir changes.
439
* debian/rules (override_dh_fixperms): - '' -
441
-- Teddy Hogeborn <teddy@recompile.se> Tue, 21 Jan 2014 22:01:30 +0100
443
mandos (1.6.2-1) unstable; urgency=low
445
* New upstream release.
446
* debian/compat: Changed to "9".
447
* debian/control (Build-Depends): Changed debhelper version to (>= 9).
448
(Standards-Version): Updated to "3.9.4".
449
(DM-Upload-Allowed): Removed.
450
(mandos/Depends): Add "initscripts (>= 2.88dsf-13.3)" to be able to
451
use the "/run" directory (for mandos.pid).
452
* debian/copyright (Copyright): Update year.
453
* Fix "Mandos/gnutls fails to establish connection, "an algorithm that
454
is not enabled was negotiated"" fixed by upstream. (Closes: #702120)
456
-- Teddy Hogeborn <teddy@recompile.se> Thu, 24 Oct 2013 22:33:40 +0200
458
mandos (1.6.1-1) unstable; urgency=low
460
* New upstream release.
461
* debian/control (mandos/Depends): No longer depends on
462
python-gnupginterface, but does
463
depend on gnupg (<< 2).
464
(Build-Depends): Depend on debhelper 8.9.7 for using "override-*-arch"
465
and "override-*-indep" targets in debian/rules.
466
* debian/mandos-client.README: Update Linux documentation link.
467
* debian/rules: Completely rewritten to use debhelper v7.
468
* initramfs-tools-hook: Bug fix: Make sure the right version of GnuPG is
469
copied into the initramfs image. Always assume that GPGME is used to
470
avoid searching for it since the path might not be /usr/lib. Thanks
471
to Félix Sipma <felix+debian@gueux.org> for the initial bug report,
472
and also thanks to Dick Middleton <dick@lingbrae.com> for some more
473
debugging. (Closes: #721903)
474
* Fix "bashism in /bin/sh script" fixed by upstream. (Closes: #690639)
476
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Oct 2013 19:03:23 +0200
478
mandos (1.6.0-1) unstable; urgency=low
480
* New upstream release.
481
* debian/copyright (Copyright): Join the two lines to a single line.
482
* debian/mandos-client.README.Debian: Update to refer to the new
483
location of the example network hooks, and the new feature of using
484
all network interfaces.
485
* debian/mandos-client.docs (network-hooks.d): Removed.
486
* debian/mandos-client.examples (network-hooks.d): New.
487
* debian/rules (binary-common): Added "dh_installexamples".
488
(binary-common/dh_fixperms): Exclude new location of
491
-- Teddy Hogeborn <teddy@recompile.se> Mon, 18 Jun 2012 00:15:23 +0200
493
mandos (1.5.5-1) unstable; urgency=low
495
* New upstream release.
496
* debian/copyright (Format): Updated to
497
"http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/".
498
* debian/control (Build-Depends): Removed "man, locales-all".
500
-- Teddy Hogeborn <teddy@recompile.se> Fri, 01 Jun 2012 20:30:41 +0200
502
1
mandos (1.5.4-1) unstable; urgency=low
504
3
* New upstream release.