1
mandos (1.8.1-1) unstable; urgency=high
3
* New upstream release.
4
* debian/mandos-client.postinst (create_keys): Remove any bad keys
5
created by 1.8.0-1. Only create TLS keys if certtool succeeds.
6
* debian/mandos.postinst (configure): Remove any bad keys from
7
clients.conf, and inform the user if any were found.
8
* debian/mandos.templates (mandos/removed_bad_key_ids): New message.
10
-- Teddy Hogeborn <teddy@recompile.se> Sun, 10 Feb 2019 10:00:21 +0100
12
mandos (1.8.0-1) unstable; urgency=medium
14
* New upstream release.
15
* Fix "(tries to) use GnuTLS OpenPGP support" by using raw public keys
16
when available (Closes: #879538)
17
* Fix "mandos : Depends: libgnutls30 (< 3.6.0) but 3.6.5-2 is to be
18
installed" by now also allowing GnuTLS >= 3.6.6 (Closes: #916673)
19
* debian/control (Standards-Version): Update to "4.3.0".
20
(Package: mandos-client/Depends): Change from "cryptsetup" to
21
"cryptsetup (<< 2:2.0.3-1) | cryptsetup-initramfs". Add "debconf (>=
22
1.5.5) | debconf-2.0".
23
(Source: mandos/Build-Depends): Also allow libgnutls30 (>= 3.6.6).
24
(Package: mandos/Depends): - '' - and add debconf (>= 1.5.5) |
26
(Package: mandos/Description): Alter description to match new design.
27
(Package: mandos-client/Description): - '' -
28
(Package: mandos-client/Depends): Move "gnutls-bin | openssl" to here
30
* debian/mandos-client.README.Debian: Add --tls-privkey and --tls-pubkey
31
options to test command.
32
* debian/mandos-client.postinst (create_key): Renamed to "create_keys"
33
- all callers changed - and also create TLS key files. Show notice if
34
new TLS key files were created.
35
* debian/mandos-client.postrm (purge): Also remove TLS key files.
36
* debian/mandos-client.lintian-overrides: Override warnings.
37
* debian/mandos-client.templates: New.
38
* debian/mandos.lintian-overrides: Override warnings.
39
* debian/mandos.postinst (configure): If GnuTLS 3.6.6 or later is
40
detected, show an important notice (once) about the new key_id option
41
required in clients.conf.
42
* debian/mandos.templates: New.
43
* debian/copyright: Update copyright year to 2019.
45
-- Teddy Hogeborn <teddy@recompile.se> Sun, 10 Feb 2019 05:52:49 +0100
47
mandos (1.7.20-1) unstable; urgency=medium
49
* New upstream release.
50
* Fix "[tethys] mandos-client: Mandos client fails while booting but
51
works from chroot into unpacked initramfs" by setting system clock if
52
necessary (Closes: #894495)
53
* Fix "initramfs boot script assumes internal cryptsetup implementation
54
details and is now broken" by only using documented
55
interfaces (Closes: #904899)
56
* debian/mandos-client.dirs: Add
57
"usr/share/initramfs-tools/scripts/local-premount" and
58
"usr/share/initramfs-tools/conf.d", and remove
59
"usr/share/initramfs-tools/conf-hooks.d".
60
* debian/control (mandos-client/Depends): Add "(>= 0.99)" to dependency
62
* debian/control (Source: mandos/Rules-Requires-Root): New; set to
64
(Standards-Version): Update to "4.2.0".
66
-- Teddy Hogeborn <teddy@recompile.se> Sun, 19 Aug 2018 22:14:04 +0200
68
mandos (1.7.19-1) unstable; urgency=medium
70
* New upstream release.
71
* Fix "fails with "LeakSanitizer has encountered a fatal error"" by not
72
using LeakSanitizer in affected binary (Closes: #886595)
74
-- Teddy Hogeborn <teddy@recompile.se> Thu, 22 Feb 2018 19:47:59 +0100
76
mandos (1.7.18-1) unstable; urgency=medium
78
* New upstream release.
80
-- Teddy Hogeborn <teddy@recompile.se> Mon, 12 Feb 2018 16:00:11 +0100
82
mandos (1.7.17-1) unstable; urgency=medium
84
* New upstream release.
85
* Fix "fails with "LeakSanitizer has encountered a fatal error""
86
by fixing memory leak in plugin-runner (Closes: #886595)
87
* debian/control (Build-Depends): Also depend on "libgnutls28-dev (<<
88
3.6.0) | libgnutls30 (<< 3.6.0)".
89
(Package: mandos/Depends): - '' -
90
* debian/compat: Change to "10".
91
* debian/watch (version): Change to "4".
92
(opts/pgpsigurlmangle): Remove.
93
(opts/pgpmode): New; set to "auto".
94
(URL): Change to "https://ftp.recompile.se/pub/@PACKAGE@/@PACKAGE@
95
@ANY_VERSION@(?:\.orig)?@ARCHIVE_EXT@".
96
* debian/copyright: Update copyright year to 2018.
97
* debian/rules: Support the "noopt" and "parallel" DEB_BUILD_OPTIONS.
98
(override_dh_fixperms-arch): Use the DEB_HOST_MULTIARCH
99
variable directly instead of shelling out to "dpkg-architecture".
100
* debian/control (Standards-Version): Update to "4.1.3".
101
(Build-Depends): Change version of debhelper dependency to ">= 10".
102
* debian/mandos.lintian-overrides
103
(init.d-script-needs-depends-on-lsb-base): Change line number to "46".
105
-- Teddy Hogeborn <teddy@recompile.se> Sat, 10 Feb 2018 19:09:50 +0100
107
mandos (1.7.16-1) unstable; urgency=medium
109
* New upstream release.
110
* debian/copyright (License): Use program name explicitly.
111
(Format): Use https in URL.
112
* debian/control (Priority): Change from "extra" to "optional".
113
(Standards-Version): Update to "4.0.1".
115
-- Teddy Hogeborn <teddy@recompile.se> Sun, 20 Aug 2017 21:05:26 +0200
117
mandos (1.7.15-1) unstable; urgency=medium
119
* New upstream release.
120
* Upstream release fixes "Seems not to be honoring zeroconf option at
121
mandos.conf" (Closes: #855589)
122
* debian/mandos.lintian-overrides (mandos): Add new line
123
"init.d-script-needs-depends-on-lsb-base etc/init.d/mandos (line 49)".
124
* debian/copyright: Update copyright year to 2017.
126
-- Teddy Hogeborn <teddy@recompile.se> Thu, 23 Feb 2017 21:29:36 +0100
128
mandos (1.7.14-1) unstable; urgency=medium
130
* New upstream release.
131
* debian/mandos-client.postinst (create_key): Stop GPG agent after
132
running mandos-keygen.
133
* debian/control (Package: mandos/Depends): Add "systemd-sysv | lsb-base
134
(>= 3.0-6)", change "gnupg" to "gnupg2 | gnupg", and change
135
"libgpgme11-dev" to "libgpgme-dev | libgpgme11-dev".
137
-- Teddy Hogeborn <teddy@recompile.se> Wed, 25 Jan 2017 20:36:03 +0100
139
mandos (1.7.13-1) unstable; urgency=medium
141
* New upstream release.
142
* Fix "fails to install noninteractively" by using the "%no-protection"
143
statement in the GnuPG batch parameter file. (Closes: #840001)
145
-- Teddy Hogeborn <teddy@recompile.se> Sat, 08 Oct 2016 06:31:07 +0200
147
mandos (1.7.12-1) unstable; urgency=medium
149
* New upstream release.
151
-- Teddy Hogeborn <teddy@recompile.se> Wed, 05 Oct 2016 22:06:55 +0200
153
mandos (1.7.11-1) unstable; urgency=high
155
* New upstream release.
156
* debian/control (Source: mandos/Vcs-Bzr): Change to use HTTPS.
157
(Vcs-Browser): - '' -
159
-- Teddy Hogeborn <teddy@recompile.se> Sat, 01 Oct 2016 16:20:48 +0200
161
mandos (1.7.10-1) unstable; urgency=high
163
* New upstream release.
164
* debian/rules (override_dh_fixperms-arch): Also exclude
165
"etc/mandos/plugin-helpers" from changes by dh_fixperms.
166
* debian/mandos-client.postinst: Fix the permissions of
167
"/etc/mandos/plugin-helpers" for those systems which had a fresh
168
install of an older version.
170
-- Teddy Hogeborn <teddy@recompile.se> Thu, 23 Jun 2016 22:00:29 +0200
172
mandos (1.7.9-1) unstable; urgency=medium
174
* New upstream release.
176
-- Teddy Hogeborn <teddy@recompile.se> Wed, 22 Jun 2016 07:30:12 +0200
178
mandos (1.7.8-1) unstable; urgency=medium
180
* New upstream release.
181
* Fix "bad gpgme_op_decrypt: GPGME: Decryption failed." by copying
182
/usr/bin/gpg-agent into initramfs (Closes: #819982)
183
* debian/control (Homepage): Change URL to use HTTPS.
184
(Standards-Version): Update to 3.9.8.
185
* debian/copyright (Source): Change URL to HTTPS.
186
* debian/mandos-client.README.Debian: Change wording to match updated
189
-- Teddy Hogeborn <teddy@recompile.se> Tue, 21 Jun 2016 21:36:10 +0200
191
mandos (1.7.7-1) unstable; urgency=medium
193
* New upstream release.
194
* debian/mandos-client.postinst (configure): If older version, fix
195
permissions on plugin helper directory. Also fix permissions on
196
plugin helper local override directory (/etc/mandos/plugin-helpers),
197
but only if not listed by "dpkg-statoverride".
198
* debian/rules (override_dh_fixperms-arch): Exclude plugin helper
199
directory from dh_fixperms.
200
* debian/mandos.postinst (configure): Fix state directory permissions,
201
but only if not listed by "dpkg-statoverride".
202
* debian/mandos-client.lintian-overrides: Do not warn about permissions
203
on plugin helper directory.
204
* debian/mandos.dirs (usr/lib/tmpfiles.d): Added.
206
-- Teddy Hogeborn <teddy@recompile.se> Sat, 19 Mar 2016 22:58:49 +0100
208
mandos (1.7.6-1) unstable; urgency=medium
210
* New upstream release.
211
* debian/control (Source: mandos/Build-Depends-Indep): Remove
213
(Source: mandos/Build-Depends-Indep): Change "python-gi |
214
python-gobject" to "python-gi"; i.e. remove "python-gobject".
216
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Mar 2016 22:58:23 +0100
218
mandos (1.7.5-1) unstable; urgency=high
220
* New upstream release.
221
* debian/mandos.postinst (configure): If old version was 1.7.4-1 or
222
1.7.4-1~bpo8+1, fix situation where clients.pickle file is owned by
225
-- Teddy Hogeborn <teddy@recompile.se> Tue, 08 Mar 2016 01:09:55 +0100
227
mandos (1.7.4-1) unstable; urgency=medium
229
* New upstream release.
230
* initramfs-tools-script: Fix "Call to configure_network in initramfs
231
script broken due to set -e" by surrounding call by "set +x" and "set
232
-e" (Closes: #816513)
233
* debian/control: (Source: mandos/Build-Depends-Indep): Change
234
"python-gobject | python-gi" to "python-gi | python-gobject"
235
(Package: mandos/Depends): - '' -
237
-- Teddy Hogeborn <teddy@recompile.se> Sat, 05 Mar 2016 23:10:07 +0100
239
mandos (1.7.3-1) unstable; urgency=medium
241
* New upstream release.
243
-- Teddy Hogeborn <teddy@recompile.se> Mon, 29 Feb 2016 22:26:38 +0100
245
mandos (1.7.2-1) unstable; urgency=medium
247
* New upstream release.
248
* Fix "Uses unneeded and obsolete version specific python packages"
249
by removing version-specific dependencies (Closes: #811159)
250
* debian/control (Source: mandos/Build-Depends): Add (>= 3.3.0) to
251
"libgnutls28-dev" and "gnutls-dev".
252
(Source: mandos/Build-Depends-Indep): Remove "python2.7-gnutls",
253
"python2.7", "python2.7-dbus", "python2.7-avahi", and
254
"python2.7-gobject"; replace with "python (>= 2.7), python (<< 3)",
255
"python-dbus", "python-avahi", "python-gobject | python-gi".
256
(Package: mandos/Depends): Remove "python-gnutls" and
257
"python2.7-gnutls", add "libgnutls28-dev (>= 3.3.0) | libgnutls30 (>=
258
3.3.0)". Add "python (<< 3)". Remove "python2.7-dbus",
259
"python2.7-avahi", "python2.7-gobject", and "python2.7-urwid".
260
Replace "python-gobject" with "python-gobject | python-gi" and "gnupg
261
(<< 2)" with "gnupg".
262
(Package: mandos-client/Depends): Replace
263
"gnupg (<< 2)" with "gnupg".
264
(Source: mandos/Standards-Version): Change to 3.9.7.
265
* debian/copyright (Copyright): Update copyright year.
267
-- Teddy Hogeborn <teddy@recompile.se> Sun, 28 Feb 2016 16:09:01 +0100
269
mandos (1.7.1-2) unstable; urgency=medium
271
* debian/control (Package: mandos/Depends): Fix "Please drop versioned
272
dependency on initscripts package" by removing initscripts dependency
274
* debian/rules (override_dh_fixperms) Fix "FTBFS when built with
275
dpkg-buildpackage -A (No such file or directory)" by splitting into
276
"override_dh_fixperms-arch" and "override_dh_fixperms-indep".
279
-- Teddy Hogeborn <teddy@recompile.se> Sat, 05 Dec 2015 02:27:40 +0100
281
mandos (1.7.1-1) unstable; urgency=medium
283
* New upstream release.
285
-- Teddy Hogeborn <teddy@recompile.se> Sat, 24 Oct 2015 19:43:40 +0200
287
mandos (1.7.0-1) unstable; urgency=medium
289
* New upstream release.
290
* debian/control (Standards-Version): Updated to "3.9.6".
291
(Build-Depends): Add "libnl-route-3-dev".
292
(Package: mandos-client/Recommends): Added "gnutls-bin | openssl" for
293
the generating of DH parameters.
294
* debian/mandos-client.README.Debian: Update example command line to use
295
new MANDOSPLUGINHELPERDIR environment variable. Also document the new
297
* debian/mandos-client.postinst: Create DH parameters file.
298
* debian/mandos.prerm: Don't run init script, use only invoke-rc.d.
299
* debian/mandos-client.postinst: Don't use absolute paths to commands.
300
* debian/mandos-client.postrm: Don't use absolute paths to commands.
301
Also remove dhparams.pem file.
302
* debian/copyright (Copyright): Update copyright year.
303
* Upstream changed systemd service file to implicitly be of
304
"Type=dbus". (Closes: #786845)
306
-- Teddy Hogeborn <teddy@recompile.se> Mon, 10 Aug 2015 22:00:29 +0200
308
mandos (1.6.9-1) unstable; urgency=medium
310
* New upstream release.
311
* debian/control (Build-Depends): Fix "still uses GnutLS 2.x" by
312
changing from "libgnutls-dev" to "libgnutls28-dev | gnutls-dev"
315
-- Teddy Hogeborn <teddy@recompile.se> Sun, 05 Oct 2014 22:05:06 +0200
317
mandos (1.6.8-1) unstable; urgency=medium
319
* New upstream release.
320
* debian/control (Source: mandos/Build-Depends-Indep): Since upstream
321
now requires Python 2.7, depend on exactly the python2.7 package and
322
all the Python 2.7 versions of the python modules.
323
(Package: mandos/Depends): - '' - but still depend on python (>=2.7)
324
and the generic versions of the Python modules; this is for mandos-ctl
325
and mandos-monitor, both of which are compatible with Python 3, and
326
use #!/usr/bin/python.
328
-- Teddy Hogeborn <teddy@recompile.se> Wed, 06 Aug 2014 22:55:24 +0200
330
mandos (1.6.7-1) unstable; urgency=medium
332
* New upstream release.
334
-- Teddy Hogeborn <teddy@recompile.se> Thu, 17 Jul 2014 05:22:45 +0200
336
mandos (1.6.6-1) unstable; urgency=medium
338
* New upstream release.
339
* debian/mandos.postinst: Fix typo in comment.
340
* debian/control (mandos/Recommends): Changed to "ssh-client | fping".
341
(mandos-client/Recommends): New; set to "ssh".
343
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Jul 2014 22:49:21 +0200
345
mandos (1.6.5-3) unstable; urgency=medium
347
* debian/control (mandos-client/Depends): Add "dpkg-dev (>=1.16.0)";
348
initramfs-tools-hook runs "dpkg-architecture -qDEB_HOST_MULTIARCH".
351
-- Teddy Hogeborn <teddy@recompile.se> Fri, 06 Jun 2014 04:27:15 +0200
353
mandos (1.6.5-2) unstable; urgency=medium
355
* debian/rules (override_dh_auto_test-arch): New; does nothing. Fixes
356
FTBFS for build-indep.
358
-- Teddy Hogeborn <teddy@recompile.se> Tue, 13 May 2014 08:08:31 +0200
360
mandos (1.6.5-1) unstable; urgency=medium
362
* New upstream release.
363
* debian/copyright: Change year to "2014".
364
* debian/control (Build-Depends, Build-Depends-Indep): Moved build
365
dependencies of "mandos" package to "Build-Depends-Indep".
366
* debian/upstream/signing-key.asc: New; upstream source public key.
367
* debian/control (Standards-Version): Updated to "3.9.5".
368
* debian/control (mandos/Depends): Remove the dependency on
369
"avahi-daemon (>= 0.6.31-3) | systemd-sysv". It is unnecessary
370
since we have a workaround in debian/mandos.postinst anyway.
372
-- Teddy Hogeborn <teddy@recompile.se> Sun, 11 May 2014 22:16:33 +0200
374
mandos (1.6.4-1) unstable; urgency=medium
376
* New upstream release.
377
* debian/control (Build-Depends): Add Python dependencies to
378
successfully run self-tests.
379
* debian/copyright: GPLv3 now has its own license file - use it.
380
* debian/watch: Set PGP signature URL.
382
-- Teddy Hogeborn <teddy@recompile.se> Sun, 16 Feb 2014 14:09:25 +0100
384
mandos (1.6.3-1) unstable; urgency=low
386
* New upstream release.
387
* debian/control (Build-Depends): Added "systemd".
388
* debian/mandos.dirs (lib/systemd/system): New.
389
* debian/mandos-client.README.Debian: Refer to architecture libdir.
390
* debian/control (mandos/Depends): Add "avahi-daemon (>= 0.6.31-3) |
392
* debian/mandos.postinst: If avahi-daemon is version 0.6.31-2 or older,
393
edit /etc/init.d script headers Required-Start
394
and Required-Stop to have "avahi" instead of
395
"avahi-daemon", before insserv(8) sees it.
396
* debian/mandos-client.lintian-overrides: Libdir changes.
397
* debian/rules (override_dh_fixperms): - '' -
399
-- Teddy Hogeborn <teddy@recompile.se> Tue, 21 Jan 2014 22:01:30 +0100
401
mandos (1.6.2-1) unstable; urgency=low
403
* New upstream release.
404
* debian/compat: Changed to "9".
405
* debian/control (Build-Depends): Changed debhelper version to (>= 9).
406
(Standards-Version): Updated to "3.9.4".
407
(DM-Upload-Allowed): Removed.
408
(mandos/Depends): Add "initscripts (>= 2.88dsf-13.3)" to be able to
409
use the "/run" directory (for mandos.pid).
410
* debian/copyright (Copyright): Update year.
411
* Fix "Mandos/gnutls fails to establish connection, "an algorithm that
412
is not enabled was negotiated"" fixed by upstream. (Closes: #702120)
414
-- Teddy Hogeborn <teddy@recompile.se> Thu, 24 Oct 2013 22:33:40 +0200
416
mandos (1.6.1-1) unstable; urgency=low
418
* New upstream release.
419
* debian/control (mandos/Depends): No longer depends on
420
python-gnupginterface, but does
421
depend on gnupg (<< 2).
422
(Build-Depends): Depend on debhelper 8.9.7 for using "override-*-arch"
423
and "override-*-indep" targets in debian/rules.
424
* debian/mandos-client.README: Update Linux documentation link.
425
* debian/rules: Completely rewritten to use debhelper v7.
426
* initramfs-tools-hook: Bug fix: Make sure the right version of GnuPG is
427
copied into the initramfs image. Always assume that GPGME is used to
428
avoid searching for it since the path might not be /usr/lib. Thanks
429
to Félix Sipma <felix+debian@gueux.org> for the initial bug report,
430
and also thanks to Dick Middleton <dick@lingbrae.com> for some more
431
debugging. (Closes: #721903)
432
* Fix "bashism in /bin/sh script" fixed by upstream. (Closes: #690639)
434
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Oct 2013 19:03:23 +0200
436
mandos (1.6.0-1) unstable; urgency=low
438
* New upstream release.
439
* debian/copyright (Copyright): Join the two lines to a single line.
440
* debian/mandos-client.README.Debian: Update to refer to the new
441
location of the example network hooks, and the new feature of using
442
all network interfaces.
443
* debian/mandos-client.docs (network-hooks.d): Removed.
444
* debian/mandos-client.examples (network-hooks.d): New.
445
* debian/rules (binary-common): Added "dh_installexamples".
446
(binary-common/dh_fixperms): Exclude new location of
449
-- Teddy Hogeborn <teddy@recompile.se> Mon, 18 Jun 2012 00:15:23 +0200
1
451
mandos (1.5.5-1) unstable; urgency=low
3
453
* New upstream release.