1
mandos (1.8.3-2) unstable; urgency=medium
3
* debian/rules (override_dh_shlibdeps-arch): New; conditionally edit
4
debian/control before running dh_shlibdeps.
6
-- Teddy Hogeborn <teddy@recompile.se> Mon, 11 Feb 2019 12:49:57 +0100
8
mandos (1.8.3-1) unstable; urgency=medium
10
* New upstream release.
11
* debian/watch: Make the ".orig" file name suffix non-optional;
12
otherwise uscan thinks that ".orig" is part of the version number.
13
* debian/control (Build-Depends): Changed GnuTLS dependencies; move
14
3.6.6 alternative to first in list, and remove dependencies on the
15
virtual package "gnutls-dev", since we need the version restrictions.
16
(Package: mandos/Depends): Remove dependency on libgnutls28-dev
18
(Package: mandos/Suggests): New; set to "libc6-dev, c-compiler". (Used
19
to find value of "SO_BINDTODEVICE").
20
(Package: mandos-client/Depends): Don't depend on openssl anymore;
21
instead depend on either a gnutls-bin (>= 3.6.6) (in which case TLS
22
key generation will work), or on libgnutls30 (<< 3.6.0) (in which case
23
TLS key generation will not be needed).
25
-- Teddy Hogeborn <teddy@recompile.se> Mon, 11 Feb 2019 07:30:32 +0100
27
mandos (1.8.2-1) unstable; urgency=medium
29
* New upstream release.
30
* debian/mandos-client.postinst (create_keys): Ignore failure to remove
33
-- Teddy Hogeborn <teddy@recompile.se> Sun, 10 Feb 2019 11:44:56 +0100
35
mandos (1.8.1-1) unstable; urgency=high
37
* New upstream release.
38
* debian/mandos-client.postinst (create_keys): Remove any bad keys
39
created by 1.8.0-1. Only create TLS keys if certtool succeeds.
40
* debian/mandos.postinst (configure): Remove any bad keys from
41
clients.conf, and inform the user if any were found.
42
* debian/mandos.templates (mandos/removed_bad_key_ids): New message.
44
-- Teddy Hogeborn <teddy@recompile.se> Sun, 10 Feb 2019 10:00:21 +0100
46
mandos (1.8.0-1) unstable; urgency=medium
48
* New upstream release.
49
* Fix "(tries to) use GnuTLS OpenPGP support" by using raw public keys
50
when available (Closes: #879538)
51
* Fix "mandos : Depends: libgnutls30 (< 3.6.0) but 3.6.5-2 is to be
52
installed" by now also allowing GnuTLS >= 3.6.6 (Closes: #916673)
53
* debian/control (Standards-Version): Update to "4.3.0".
54
(Package: mandos-client/Depends): Change from "cryptsetup" to
55
"cryptsetup (<< 2:2.0.3-1) | cryptsetup-initramfs". Add "debconf (>=
56
1.5.5) | debconf-2.0".
57
(Source: mandos/Build-Depends): Also allow libgnutls30 (>= 3.6.6).
58
(Package: mandos/Depends): - '' - and add debconf (>= 1.5.5) |
60
(Package: mandos/Description): Alter description to match new design.
61
(Package: mandos-client/Description): - '' -
62
(Package: mandos-client/Depends): Move "gnutls-bin | openssl" to here
64
* debian/mandos-client.README.Debian: Add --tls-privkey and --tls-pubkey
65
options to test command.
66
* debian/mandos-client.postinst (create_key): Renamed to "create_keys"
67
- all callers changed - and also create TLS key files. Show notice if
68
new TLS key files were created.
69
* debian/mandos-client.postrm (purge): Also remove TLS key files.
70
* debian/mandos-client.lintian-overrides: Override warnings.
71
* debian/mandos-client.templates: New.
72
* debian/mandos.lintian-overrides: Override warnings.
73
* debian/mandos.postinst (configure): If GnuTLS 3.6.6 or later is
74
detected, show an important notice (once) about the new key_id option
75
required in clients.conf.
76
* debian/mandos.templates: New.
77
* debian/copyright: Update copyright year to 2019.
79
-- Teddy Hogeborn <teddy@recompile.se> Sun, 10 Feb 2019 05:52:49 +0100
81
mandos (1.7.20-1) unstable; urgency=medium
83
* New upstream release.
84
* Fix "[tethys] mandos-client: Mandos client fails while booting but
85
works from chroot into unpacked initramfs" by setting system clock if
86
necessary (Closes: #894495)
87
* Fix "initramfs boot script assumes internal cryptsetup implementation
88
details and is now broken" by only using documented
89
interfaces (Closes: #904899)
90
* debian/mandos-client.dirs: Add
91
"usr/share/initramfs-tools/scripts/local-premount" and
92
"usr/share/initramfs-tools/conf.d", and remove
93
"usr/share/initramfs-tools/conf-hooks.d".
94
* debian/control (mandos-client/Depends): Add "(>= 0.99)" to dependency
96
* debian/control (Source: mandos/Rules-Requires-Root): New; set to
98
(Standards-Version): Update to "4.2.0".
100
-- Teddy Hogeborn <teddy@recompile.se> Sun, 19 Aug 2018 22:14:04 +0200
102
mandos (1.7.19-1) unstable; urgency=medium
104
* New upstream release.
105
* Fix "fails with "LeakSanitizer has encountered a fatal error"" by not
106
using LeakSanitizer in affected binary (Closes: #886595)
108
-- Teddy Hogeborn <teddy@recompile.se> Thu, 22 Feb 2018 19:47:59 +0100
110
mandos (1.7.18-1) unstable; urgency=medium
112
* New upstream release.
114
-- Teddy Hogeborn <teddy@recompile.se> Mon, 12 Feb 2018 16:00:11 +0100
116
mandos (1.7.17-1) unstable; urgency=medium
118
* New upstream release.
119
* Fix "fails with "LeakSanitizer has encountered a fatal error""
120
by fixing memory leak in plugin-runner (Closes: #886595)
121
* debian/control (Build-Depends): Also depend on "libgnutls28-dev (<<
122
3.6.0) | libgnutls30 (<< 3.6.0)".
123
(Package: mandos/Depends): - '' -
124
* debian/compat: Change to "10".
125
* debian/watch (version): Change to "4".
126
(opts/pgpsigurlmangle): Remove.
127
(opts/pgpmode): New; set to "auto".
128
(URL): Change to "https://ftp.recompile.se/pub/@PACKAGE@/@PACKAGE@
129
@ANY_VERSION@(?:\.orig)?@ARCHIVE_EXT@".
130
* debian/copyright: Update copyright year to 2018.
131
* debian/rules: Support the "noopt" and "parallel" DEB_BUILD_OPTIONS.
132
(override_dh_fixperms-arch): Use the DEB_HOST_MULTIARCH
133
variable directly instead of shelling out to "dpkg-architecture".
134
* debian/control (Standards-Version): Update to "4.1.3".
135
(Build-Depends): Change version of debhelper dependency to ">= 10".
136
* debian/mandos.lintian-overrides
137
(init.d-script-needs-depends-on-lsb-base): Change line number to "46".
139
-- Teddy Hogeborn <teddy@recompile.se> Sat, 10 Feb 2018 19:09:50 +0100
141
mandos (1.7.16-1) unstable; urgency=medium
143
* New upstream release.
144
* debian/copyright (License): Use program name explicitly.
145
(Format): Use https in URL.
146
* debian/control (Priority): Change from "extra" to "optional".
147
(Standards-Version): Update to "4.0.1".
149
-- Teddy Hogeborn <teddy@recompile.se> Sun, 20 Aug 2017 21:05:26 +0200
151
mandos (1.7.15-1) unstable; urgency=medium
153
* New upstream release.
154
* Upstream release fixes "Seems not to be honoring zeroconf option at
155
mandos.conf" (Closes: #855589)
156
* debian/mandos.lintian-overrides (mandos): Add new line
157
"init.d-script-needs-depends-on-lsb-base etc/init.d/mandos (line 49)".
158
* debian/copyright: Update copyright year to 2017.
160
-- Teddy Hogeborn <teddy@recompile.se> Thu, 23 Feb 2017 21:29:36 +0100
162
mandos (1.7.14-1) unstable; urgency=medium
164
* New upstream release.
165
* debian/mandos-client.postinst (create_key): Stop GPG agent after
166
running mandos-keygen.
167
* debian/control (Package: mandos/Depends): Add "systemd-sysv | lsb-base
168
(>= 3.0-6)", change "gnupg" to "gnupg2 | gnupg", and change
169
"libgpgme11-dev" to "libgpgme-dev | libgpgme11-dev".
171
-- Teddy Hogeborn <teddy@recompile.se> Wed, 25 Jan 2017 20:36:03 +0100
173
mandos (1.7.13-1) unstable; urgency=medium
175
* New upstream release.
176
* Fix "fails to install noninteractively" by using the "%no-protection"
177
statement in the GnuPG batch parameter file. (Closes: #840001)
179
-- Teddy Hogeborn <teddy@recompile.se> Sat, 08 Oct 2016 06:31:07 +0200
181
mandos (1.7.12-1) unstable; urgency=medium
183
* New upstream release.
185
-- Teddy Hogeborn <teddy@recompile.se> Wed, 05 Oct 2016 22:06:55 +0200
187
mandos (1.7.11-1) unstable; urgency=high
189
* New upstream release.
190
* debian/control (Source: mandos/Vcs-Bzr): Change to use HTTPS.
191
(Vcs-Browser): - '' -
193
-- Teddy Hogeborn <teddy@recompile.se> Sat, 01 Oct 2016 16:20:48 +0200
195
mandos (1.7.10-1) unstable; urgency=high
197
* New upstream release.
198
* debian/rules (override_dh_fixperms-arch): Also exclude
199
"etc/mandos/plugin-helpers" from changes by dh_fixperms.
200
* debian/mandos-client.postinst: Fix the permissions of
201
"/etc/mandos/plugin-helpers" for those systems which had a fresh
202
install of an older version.
204
-- Teddy Hogeborn <teddy@recompile.se> Thu, 23 Jun 2016 22:00:29 +0200
206
mandos (1.7.9-1) unstable; urgency=medium
208
* New upstream release.
210
-- Teddy Hogeborn <teddy@recompile.se> Wed, 22 Jun 2016 07:30:12 +0200
212
mandos (1.7.8-1) unstable; urgency=medium
214
* New upstream release.
215
* Fix "bad gpgme_op_decrypt: GPGME: Decryption failed." by copying
216
/usr/bin/gpg-agent into initramfs (Closes: #819982)
217
* debian/control (Homepage): Change URL to use HTTPS.
218
(Standards-Version): Update to 3.9.8.
219
* debian/copyright (Source): Change URL to HTTPS.
220
* debian/mandos-client.README.Debian: Change wording to match updated
223
-- Teddy Hogeborn <teddy@recompile.se> Tue, 21 Jun 2016 21:36:10 +0200
225
mandos (1.7.7-1) unstable; urgency=medium
227
* New upstream release.
228
* debian/mandos-client.postinst (configure): If older version, fix
229
permissions on plugin helper directory. Also fix permissions on
230
plugin helper local override directory (/etc/mandos/plugin-helpers),
231
but only if not listed by "dpkg-statoverride".
232
* debian/rules (override_dh_fixperms-arch): Exclude plugin helper
233
directory from dh_fixperms.
234
* debian/mandos.postinst (configure): Fix state directory permissions,
235
but only if not listed by "dpkg-statoverride".
236
* debian/mandos-client.lintian-overrides: Do not warn about permissions
237
on plugin helper directory.
238
* debian/mandos.dirs (usr/lib/tmpfiles.d): Added.
240
-- Teddy Hogeborn <teddy@recompile.se> Sat, 19 Mar 2016 22:58:49 +0100
242
mandos (1.7.6-1) unstable; urgency=medium
244
* New upstream release.
245
* debian/control (Source: mandos/Build-Depends-Indep): Remove
247
(Source: mandos/Build-Depends-Indep): Change "python-gi |
248
python-gobject" to "python-gi"; i.e. remove "python-gobject".
250
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Mar 2016 22:58:23 +0100
252
mandos (1.7.5-1) unstable; urgency=high
254
* New upstream release.
255
* debian/mandos.postinst (configure): If old version was 1.7.4-1 or
256
1.7.4-1~bpo8+1, fix situation where clients.pickle file is owned by
259
-- Teddy Hogeborn <teddy@recompile.se> Tue, 08 Mar 2016 01:09:55 +0100
261
mandos (1.7.4-1) unstable; urgency=medium
263
* New upstream release.
264
* initramfs-tools-script: Fix "Call to configure_network in initramfs
265
script broken due to set -e" by surrounding call by "set +x" and "set
266
-e" (Closes: #816513)
267
* debian/control: (Source: mandos/Build-Depends-Indep): Change
268
"python-gobject | python-gi" to "python-gi | python-gobject"
269
(Package: mandos/Depends): - '' -
271
-- Teddy Hogeborn <teddy@recompile.se> Sat, 05 Mar 2016 23:10:07 +0100
273
mandos (1.7.3-1) unstable; urgency=medium
275
* New upstream release.
277
-- Teddy Hogeborn <teddy@recompile.se> Mon, 29 Feb 2016 22:26:38 +0100
279
mandos (1.7.2-1) unstable; urgency=medium
281
* New upstream release.
282
* Fix "Uses unneeded and obsolete version specific python packages"
283
by removing version-specific dependencies (Closes: #811159)
284
* debian/control (Source: mandos/Build-Depends): Add (>= 3.3.0) to
285
"libgnutls28-dev" and "gnutls-dev".
286
(Source: mandos/Build-Depends-Indep): Remove "python2.7-gnutls",
287
"python2.7", "python2.7-dbus", "python2.7-avahi", and
288
"python2.7-gobject"; replace with "python (>= 2.7), python (<< 3)",
289
"python-dbus", "python-avahi", "python-gobject | python-gi".
290
(Package: mandos/Depends): Remove "python-gnutls" and
291
"python2.7-gnutls", add "libgnutls28-dev (>= 3.3.0) | libgnutls30 (>=
292
3.3.0)". Add "python (<< 3)". Remove "python2.7-dbus",
293
"python2.7-avahi", "python2.7-gobject", and "python2.7-urwid".
294
Replace "python-gobject" with "python-gobject | python-gi" and "gnupg
295
(<< 2)" with "gnupg".
296
(Package: mandos-client/Depends): Replace
297
"gnupg (<< 2)" with "gnupg".
298
(Source: mandos/Standards-Version): Change to 3.9.7.
299
* debian/copyright (Copyright): Update copyright year.
301
-- Teddy Hogeborn <teddy@recompile.se> Sun, 28 Feb 2016 16:09:01 +0100
303
mandos (1.7.1-2) unstable; urgency=medium
305
* debian/control (Package: mandos/Depends): Fix "Please drop versioned
306
dependency on initscripts package" by removing initscripts dependency
308
* debian/rules (override_dh_fixperms) Fix "FTBFS when built with
309
dpkg-buildpackage -A (No such file or directory)" by splitting into
310
"override_dh_fixperms-arch" and "override_dh_fixperms-indep".
313
-- Teddy Hogeborn <teddy@recompile.se> Sat, 05 Dec 2015 02:27:40 +0100
315
mandos (1.7.1-1) unstable; urgency=medium
317
* New upstream release.
319
-- Teddy Hogeborn <teddy@recompile.se> Sat, 24 Oct 2015 19:43:40 +0200
321
mandos (1.7.0-1) unstable; urgency=medium
323
* New upstream release.
324
* debian/control (Standards-Version): Updated to "3.9.6".
325
(Build-Depends): Add "libnl-route-3-dev".
326
(Package: mandos-client/Recommends): Added "gnutls-bin | openssl" for
327
the generating of DH parameters.
328
* debian/mandos-client.README.Debian: Update example command line to use
329
new MANDOSPLUGINHELPERDIR environment variable. Also document the new
331
* debian/mandos-client.postinst: Create DH parameters file.
332
* debian/mandos.prerm: Don't run init script, use only invoke-rc.d.
333
* debian/mandos-client.postinst: Don't use absolute paths to commands.
334
* debian/mandos-client.postrm: Don't use absolute paths to commands.
335
Also remove dhparams.pem file.
336
* debian/copyright (Copyright): Update copyright year.
337
* Upstream changed systemd service file to implicitly be of
338
"Type=dbus". (Closes: #786845)
340
-- Teddy Hogeborn <teddy@recompile.se> Mon, 10 Aug 2015 22:00:29 +0200
342
mandos (1.6.9-1) unstable; urgency=medium
344
* New upstream release.
345
* debian/control (Build-Depends): Fix "still uses GnutLS 2.x" by
346
changing from "libgnutls-dev" to "libgnutls28-dev | gnutls-dev"
349
-- Teddy Hogeborn <teddy@recompile.se> Sun, 05 Oct 2014 22:05:06 +0200
351
mandos (1.6.8-1) unstable; urgency=medium
353
* New upstream release.
354
* debian/control (Source: mandos/Build-Depends-Indep): Since upstream
355
now requires Python 2.7, depend on exactly the python2.7 package and
356
all the Python 2.7 versions of the python modules.
357
(Package: mandos/Depends): - '' - but still depend on python (>=2.7)
358
and the generic versions of the Python modules; this is for mandos-ctl
359
and mandos-monitor, both of which are compatible with Python 3, and
360
use #!/usr/bin/python.
362
-- Teddy Hogeborn <teddy@recompile.se> Wed, 06 Aug 2014 22:55:24 +0200
364
mandos (1.6.7-1) unstable; urgency=medium
366
* New upstream release.
368
-- Teddy Hogeborn <teddy@recompile.se> Thu, 17 Jul 2014 05:22:45 +0200
370
mandos (1.6.6-1) unstable; urgency=medium
372
* New upstream release.
373
* debian/mandos.postinst: Fix typo in comment.
374
* debian/control (mandos/Recommends): Changed to "ssh-client | fping".
375
(mandos-client/Recommends): New; set to "ssh".
377
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Jul 2014 22:49:21 +0200
379
mandos (1.6.5-3) unstable; urgency=medium
381
* debian/control (mandos-client/Depends): Add "dpkg-dev (>=1.16.0)";
382
initramfs-tools-hook runs "dpkg-architecture -qDEB_HOST_MULTIARCH".
385
-- Teddy Hogeborn <teddy@recompile.se> Fri, 06 Jun 2014 04:27:15 +0200
387
mandos (1.6.5-2) unstable; urgency=medium
389
* debian/rules (override_dh_auto_test-arch): New; does nothing. Fixes
390
FTBFS for build-indep.
392
-- Teddy Hogeborn <teddy@recompile.se> Tue, 13 May 2014 08:08:31 +0200
394
mandos (1.6.5-1) unstable; urgency=medium
396
* New upstream release.
397
* debian/copyright: Change year to "2014".
398
* debian/control (Build-Depends, Build-Depends-Indep): Moved build
399
dependencies of "mandos" package to "Build-Depends-Indep".
400
* debian/upstream/signing-key.asc: New; upstream source public key.
401
* debian/control (Standards-Version): Updated to "3.9.5".
402
* debian/control (mandos/Depends): Remove the dependency on
403
"avahi-daemon (>= 0.6.31-3) | systemd-sysv". It is unnecessary
404
since we have a workaround in debian/mandos.postinst anyway.
406
-- Teddy Hogeborn <teddy@recompile.se> Sun, 11 May 2014 22:16:33 +0200
408
mandos (1.6.4-1) unstable; urgency=medium
410
* New upstream release.
411
* debian/control (Build-Depends): Add Python dependencies to
412
successfully run self-tests.
413
* debian/copyright: GPLv3 now has its own license file - use it.
414
* debian/watch: Set PGP signature URL.
416
-- Teddy Hogeborn <teddy@recompile.se> Sun, 16 Feb 2014 14:09:25 +0100
418
mandos (1.6.3-1) unstable; urgency=low
420
* New upstream release.
421
* debian/control (Build-Depends): Added "systemd".
422
* debian/mandos.dirs (lib/systemd/system): New.
423
* debian/mandos-client.README.Debian: Refer to architecture libdir.
424
* debian/control (mandos/Depends): Add "avahi-daemon (>= 0.6.31-3) |
426
* debian/mandos.postinst: If avahi-daemon is version 0.6.31-2 or older,
427
edit /etc/init.d script headers Required-Start
428
and Required-Stop to have "avahi" instead of
429
"avahi-daemon", before insserv(8) sees it.
430
* debian/mandos-client.lintian-overrides: Libdir changes.
431
* debian/rules (override_dh_fixperms): - '' -
433
-- Teddy Hogeborn <teddy@recompile.se> Tue, 21 Jan 2014 22:01:30 +0100
435
mandos (1.6.2-1) unstable; urgency=low
437
* New upstream release.
438
* debian/compat: Changed to "9".
439
* debian/control (Build-Depends): Changed debhelper version to (>= 9).
440
(Standards-Version): Updated to "3.9.4".
441
(DM-Upload-Allowed): Removed.
442
(mandos/Depends): Add "initscripts (>= 2.88dsf-13.3)" to be able to
443
use the "/run" directory (for mandos.pid).
444
* debian/copyright (Copyright): Update year.
445
* Fix "Mandos/gnutls fails to establish connection, "an algorithm that
446
is not enabled was negotiated"" fixed by upstream. (Closes: #702120)
448
-- Teddy Hogeborn <teddy@recompile.se> Thu, 24 Oct 2013 22:33:40 +0200
450
mandos (1.6.1-1) unstable; urgency=low
452
* New upstream release.
453
* debian/control (mandos/Depends): No longer depends on
454
python-gnupginterface, but does
455
depend on gnupg (<< 2).
456
(Build-Depends): Depend on debhelper 8.9.7 for using "override-*-arch"
457
and "override-*-indep" targets in debian/rules.
458
* debian/mandos-client.README: Update Linux documentation link.
459
* debian/rules: Completely rewritten to use debhelper v7.
460
* initramfs-tools-hook: Bug fix: Make sure the right version of GnuPG is
461
copied into the initramfs image. Always assume that GPGME is used to
462
avoid searching for it since the path might not be /usr/lib. Thanks
463
to Félix Sipma <felix+debian@gueux.org> for the initial bug report,
464
and also thanks to Dick Middleton <dick@lingbrae.com> for some more
465
debugging. (Closes: #721903)
466
* Fix "bashism in /bin/sh script" fixed by upstream. (Closes: #690639)
468
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Oct 2013 19:03:23 +0200
470
mandos (1.6.0-1) unstable; urgency=low
472
* New upstream release.
473
* debian/copyright (Copyright): Join the two lines to a single line.
474
* debian/mandos-client.README.Debian: Update to refer to the new
475
location of the example network hooks, and the new feature of using
476
all network interfaces.
477
* debian/mandos-client.docs (network-hooks.d): Removed.
478
* debian/mandos-client.examples (network-hooks.d): New.
479
* debian/rules (binary-common): Added "dh_installexamples".
480
(binary-common/dh_fixperms): Exclude new location of
483
-- Teddy Hogeborn <teddy@recompile.se> Mon, 18 Jun 2012 00:15:23 +0200
485
mandos (1.5.5-1) unstable; urgency=low
487
* New upstream release.
488
* debian/copyright (Format): Updated to
489
"http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/".
490
* debian/control (Build-Depends): Removed "man, locales-all".
492
-- Teddy Hogeborn <teddy@recompile.se> Fri, 01 Jun 2012 20:30:41 +0200
494
mandos (1.5.4-1) unstable; urgency=low
496
* New upstream release.
498
-- Teddy Hogeborn <teddy@recompile.se> Sun, 20 May 2012 15:38:34 +0200
500
1
mandos (1.5.3-1.2) unstable; urgency=low
502
3
* Non-maintainer upload.