1
mandos (1.8.2-1) unstable; urgency=medium
3
* New upstream release.
4
* debian/mandos-client.postinst (create_keys): Ignore failure to remove
7
-- Teddy Hogeborn <teddy@recompile.se> Sun, 10 Feb 2019 11:44:56 +0100
9
mandos (1.8.1-1) unstable; urgency=high
11
* New upstream release.
12
* debian/mandos-client.postinst (create_keys): Remove any bad keys
13
created by 1.8.0-1. Only create TLS keys if certtool succeeds.
14
* debian/mandos.postinst (configure): Remove any bad keys from
15
clients.conf, and inform the user if any were found.
16
* debian/mandos.templates (mandos/removed_bad_key_ids): New message.
18
-- Teddy Hogeborn <teddy@recompile.se> Sun, 10 Feb 2019 10:00:21 +0100
20
mandos (1.8.0-1) unstable; urgency=medium
22
* New upstream release.
23
* Fix "(tries to) use GnuTLS OpenPGP support" by using raw public keys
24
when available (Closes: #879538)
25
* Fix "mandos : Depends: libgnutls30 (< 3.6.0) but 3.6.5-2 is to be
26
installed" by now also allowing GnuTLS >= 3.6.6 (Closes: #916673)
27
* debian/control (Standards-Version): Update to "4.3.0".
28
(Package: mandos-client/Depends): Change from "cryptsetup" to
29
"cryptsetup (<< 2:2.0.3-1) | cryptsetup-initramfs". Add "debconf (>=
30
1.5.5) | debconf-2.0".
31
(Source: mandos/Build-Depends): Also allow libgnutls30 (>= 3.6.6).
32
(Package: mandos/Depends): - '' - and add debconf (>= 1.5.5) |
34
(Package: mandos/Description): Alter description to match new design.
35
(Package: mandos-client/Description): - '' -
36
(Package: mandos-client/Depends): Move "gnutls-bin | openssl" to here
38
* debian/mandos-client.README.Debian: Add --tls-privkey and --tls-pubkey
39
options to test command.
40
* debian/mandos-client.postinst (create_key): Renamed to "create_keys"
41
- all callers changed - and also create TLS key files. Show notice if
42
new TLS key files were created.
43
* debian/mandos-client.postrm (purge): Also remove TLS key files.
44
* debian/mandos-client.lintian-overrides: Override warnings.
45
* debian/mandos-client.templates: New.
46
* debian/mandos.lintian-overrides: Override warnings.
47
* debian/mandos.postinst (configure): If GnuTLS 3.6.6 or later is
48
detected, show an important notice (once) about the new key_id option
49
required in clients.conf.
50
* debian/mandos.templates: New.
51
* debian/copyright: Update copyright year to 2019.
53
-- Teddy Hogeborn <teddy@recompile.se> Sun, 10 Feb 2019 05:52:49 +0100
55
mandos (1.7.20-1) unstable; urgency=medium
57
* New upstream release.
58
* Fix "[tethys] mandos-client: Mandos client fails while booting but
59
works from chroot into unpacked initramfs" by setting system clock if
60
necessary (Closes: #894495)
61
* Fix "initramfs boot script assumes internal cryptsetup implementation
62
details and is now broken" by only using documented
63
interfaces (Closes: #904899)
64
* debian/mandos-client.dirs: Add
65
"usr/share/initramfs-tools/scripts/local-premount" and
66
"usr/share/initramfs-tools/conf.d", and remove
67
"usr/share/initramfs-tools/conf-hooks.d".
68
* debian/control (mandos-client/Depends): Add "(>= 0.99)" to dependency
70
* debian/control (Source: mandos/Rules-Requires-Root): New; set to
72
(Standards-Version): Update to "4.2.0".
74
-- Teddy Hogeborn <teddy@recompile.se> Sun, 19 Aug 2018 22:14:04 +0200
76
mandos (1.7.19-1) unstable; urgency=medium
78
* New upstream release.
79
* Fix "fails with "LeakSanitizer has encountered a fatal error"" by not
80
using LeakSanitizer in affected binary (Closes: #886595)
82
-- Teddy Hogeborn <teddy@recompile.se> Thu, 22 Feb 2018 19:47:59 +0100
84
mandos (1.7.18-1) unstable; urgency=medium
86
* New upstream release.
88
-- Teddy Hogeborn <teddy@recompile.se> Mon, 12 Feb 2018 16:00:11 +0100
90
mandos (1.7.17-1) unstable; urgency=medium
92
* New upstream release.
93
* Fix "fails with "LeakSanitizer has encountered a fatal error""
94
by fixing memory leak in plugin-runner (Closes: #886595)
95
* debian/control (Build-Depends): Also depend on "libgnutls28-dev (<<
96
3.6.0) | libgnutls30 (<< 3.6.0)".
97
(Package: mandos/Depends): - '' -
98
* debian/compat: Change to "10".
99
* debian/watch (version): Change to "4".
100
(opts/pgpsigurlmangle): Remove.
101
(opts/pgpmode): New; set to "auto".
102
(URL): Change to "https://ftp.recompile.se/pub/@PACKAGE@/@PACKAGE@
103
@ANY_VERSION@(?:\.orig)?@ARCHIVE_EXT@".
104
* debian/copyright: Update copyright year to 2018.
105
* debian/rules: Support the "noopt" and "parallel" DEB_BUILD_OPTIONS.
106
(override_dh_fixperms-arch): Use the DEB_HOST_MULTIARCH
107
variable directly instead of shelling out to "dpkg-architecture".
108
* debian/control (Standards-Version): Update to "4.1.3".
109
(Build-Depends): Change version of debhelper dependency to ">= 10".
110
* debian/mandos.lintian-overrides
111
(init.d-script-needs-depends-on-lsb-base): Change line number to "46".
113
-- Teddy Hogeborn <teddy@recompile.se> Sat, 10 Feb 2018 19:09:50 +0100
115
mandos (1.7.16-1) unstable; urgency=medium
117
* New upstream release.
118
* debian/copyright (License): Use program name explicitly.
119
(Format): Use https in URL.
120
* debian/control (Priority): Change from "extra" to "optional".
121
(Standards-Version): Update to "4.0.1".
123
-- Teddy Hogeborn <teddy@recompile.se> Sun, 20 Aug 2017 21:05:26 +0200
125
mandos (1.7.15-1) unstable; urgency=medium
127
* New upstream release.
128
* Upstream release fixes "Seems not to be honoring zeroconf option at
129
mandos.conf" (Closes: #855589)
130
* debian/mandos.lintian-overrides (mandos): Add new line
131
"init.d-script-needs-depends-on-lsb-base etc/init.d/mandos (line 49)".
132
* debian/copyright: Update copyright year to 2017.
134
-- Teddy Hogeborn <teddy@recompile.se> Thu, 23 Feb 2017 21:29:36 +0100
136
mandos (1.7.14-1) unstable; urgency=medium
138
* New upstream release.
139
* debian/mandos-client.postinst (create_key): Stop GPG agent after
140
running mandos-keygen.
141
* debian/control (Package: mandos/Depends): Add "systemd-sysv | lsb-base
142
(>= 3.0-6)", change "gnupg" to "gnupg2 | gnupg", and change
143
"libgpgme11-dev" to "libgpgme-dev | libgpgme11-dev".
145
-- Teddy Hogeborn <teddy@recompile.se> Wed, 25 Jan 2017 20:36:03 +0100
147
mandos (1.7.13-1) unstable; urgency=medium
149
* New upstream release.
150
* Fix "fails to install noninteractively" by using the "%no-protection"
151
statement in the GnuPG batch parameter file. (Closes: #840001)
153
-- Teddy Hogeborn <teddy@recompile.se> Sat, 08 Oct 2016 06:31:07 +0200
155
mandos (1.7.12-1) unstable; urgency=medium
157
* New upstream release.
159
-- Teddy Hogeborn <teddy@recompile.se> Wed, 05 Oct 2016 22:06:55 +0200
161
mandos (1.7.11-1) unstable; urgency=high
163
* New upstream release.
164
* debian/control (Source: mandos/Vcs-Bzr): Change to use HTTPS.
165
(Vcs-Browser): - '' -
167
-- Teddy Hogeborn <teddy@recompile.se> Sat, 01 Oct 2016 16:20:48 +0200
169
mandos (1.7.10-1) unstable; urgency=high
171
* New upstream release.
172
* debian/rules (override_dh_fixperms-arch): Also exclude
173
"etc/mandos/plugin-helpers" from changes by dh_fixperms.
174
* debian/mandos-client.postinst: Fix the permissions of
175
"/etc/mandos/plugin-helpers" for those systems which had a fresh
176
install of an older version.
178
-- Teddy Hogeborn <teddy@recompile.se> Thu, 23 Jun 2016 22:00:29 +0200
180
mandos (1.7.9-1) unstable; urgency=medium
182
* New upstream release.
184
-- Teddy Hogeborn <teddy@recompile.se> Wed, 22 Jun 2016 07:30:12 +0200
186
mandos (1.7.8-1) unstable; urgency=medium
188
* New upstream release.
189
* Fix "bad gpgme_op_decrypt: GPGME: Decryption failed." by copying
190
/usr/bin/gpg-agent into initramfs (Closes: #819982)
191
* debian/control (Homepage): Change URL to use HTTPS.
192
(Standards-Version): Update to 3.9.8.
193
* debian/copyright (Source): Change URL to HTTPS.
194
* debian/mandos-client.README.Debian: Change wording to match updated
197
-- Teddy Hogeborn <teddy@recompile.se> Tue, 21 Jun 2016 21:36:10 +0200
199
mandos (1.7.7-1) unstable; urgency=medium
201
* New upstream release.
202
* debian/mandos-client.postinst (configure): If older version, fix
203
permissions on plugin helper directory. Also fix permissions on
204
plugin helper local override directory (/etc/mandos/plugin-helpers),
205
but only if not listed by "dpkg-statoverride".
206
* debian/rules (override_dh_fixperms-arch): Exclude plugin helper
207
directory from dh_fixperms.
208
* debian/mandos.postinst (configure): Fix state directory permissions,
209
but only if not listed by "dpkg-statoverride".
210
* debian/mandos-client.lintian-overrides: Do not warn about permissions
211
on plugin helper directory.
212
* debian/mandos.dirs (usr/lib/tmpfiles.d): Added.
214
-- Teddy Hogeborn <teddy@recompile.se> Sat, 19 Mar 2016 22:58:49 +0100
216
mandos (1.7.6-1) unstable; urgency=medium
218
* New upstream release.
219
* debian/control (Source: mandos/Build-Depends-Indep): Remove
221
(Source: mandos/Build-Depends-Indep): Change "python-gi |
222
python-gobject" to "python-gi"; i.e. remove "python-gobject".
224
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Mar 2016 22:58:23 +0100
226
mandos (1.7.5-1) unstable; urgency=high
228
* New upstream release.
229
* debian/mandos.postinst (configure): If old version was 1.7.4-1 or
230
1.7.4-1~bpo8+1, fix situation where clients.pickle file is owned by
233
-- Teddy Hogeborn <teddy@recompile.se> Tue, 08 Mar 2016 01:09:55 +0100
235
mandos (1.7.4-1) unstable; urgency=medium
237
* New upstream release.
238
* initramfs-tools-script: Fix "Call to configure_network in initramfs
239
script broken due to set -e" by surrounding call by "set +x" and "set
240
-e" (Closes: #816513)
241
* debian/control: (Source: mandos/Build-Depends-Indep): Change
242
"python-gobject | python-gi" to "python-gi | python-gobject"
243
(Package: mandos/Depends): - '' -
245
-- Teddy Hogeborn <teddy@recompile.se> Sat, 05 Mar 2016 23:10:07 +0100
247
mandos (1.7.3-1) unstable; urgency=medium
249
* New upstream release.
251
-- Teddy Hogeborn <teddy@recompile.se> Mon, 29 Feb 2016 22:26:38 +0100
253
mandos (1.7.2-1) unstable; urgency=medium
255
* New upstream release.
256
* Fix "Uses unneeded and obsolete version specific python packages"
257
by removing version-specific dependencies (Closes: #811159)
258
* debian/control (Source: mandos/Build-Depends): Add (>= 3.3.0) to
259
"libgnutls28-dev" and "gnutls-dev".
260
(Source: mandos/Build-Depends-Indep): Remove "python2.7-gnutls",
261
"python2.7", "python2.7-dbus", "python2.7-avahi", and
262
"python2.7-gobject"; replace with "python (>= 2.7), python (<< 3)",
263
"python-dbus", "python-avahi", "python-gobject | python-gi".
264
(Package: mandos/Depends): Remove "python-gnutls" and
265
"python2.7-gnutls", add "libgnutls28-dev (>= 3.3.0) | libgnutls30 (>=
266
3.3.0)". Add "python (<< 3)". Remove "python2.7-dbus",
267
"python2.7-avahi", "python2.7-gobject", and "python2.7-urwid".
268
Replace "python-gobject" with "python-gobject | python-gi" and "gnupg
269
(<< 2)" with "gnupg".
270
(Package: mandos-client/Depends): Replace
271
"gnupg (<< 2)" with "gnupg".
272
(Source: mandos/Standards-Version): Change to 3.9.7.
273
* debian/copyright (Copyright): Update copyright year.
275
-- Teddy Hogeborn <teddy@recompile.se> Sun, 28 Feb 2016 16:09:01 +0100
277
mandos (1.7.1-2) unstable; urgency=medium
279
* debian/control (Package: mandos/Depends): Fix "Please drop versioned
280
dependency on initscripts package" by removing initscripts dependency
282
* debian/rules (override_dh_fixperms) Fix "FTBFS when built with
283
dpkg-buildpackage -A (No such file or directory)" by splitting into
284
"override_dh_fixperms-arch" and "override_dh_fixperms-indep".
287
-- Teddy Hogeborn <teddy@recompile.se> Sat, 05 Dec 2015 02:27:40 +0100
289
mandos (1.7.1-1) unstable; urgency=medium
291
* New upstream release.
293
-- Teddy Hogeborn <teddy@recompile.se> Sat, 24 Oct 2015 19:43:40 +0200
295
mandos (1.7.0-1) unstable; urgency=medium
297
* New upstream release.
298
* debian/control (Standards-Version): Updated to "3.9.6".
299
(Build-Depends): Add "libnl-route-3-dev".
300
(Package: mandos-client/Recommends): Added "gnutls-bin | openssl" for
301
the generating of DH parameters.
302
* debian/mandos-client.README.Debian: Update example command line to use
303
new MANDOSPLUGINHELPERDIR environment variable. Also document the new
305
* debian/mandos-client.postinst: Create DH parameters file.
306
* debian/mandos.prerm: Don't run init script, use only invoke-rc.d.
307
* debian/mandos-client.postinst: Don't use absolute paths to commands.
308
* debian/mandos-client.postrm: Don't use absolute paths to commands.
309
Also remove dhparams.pem file.
310
* debian/copyright (Copyright): Update copyright year.
311
* Upstream changed systemd service file to implicitly be of
312
"Type=dbus". (Closes: #786845)
314
-- Teddy Hogeborn <teddy@recompile.se> Mon, 10 Aug 2015 22:00:29 +0200
316
mandos (1.6.9-1) unstable; urgency=medium
318
* New upstream release.
319
* debian/control (Build-Depends): Fix "still uses GnutLS 2.x" by
320
changing from "libgnutls-dev" to "libgnutls28-dev | gnutls-dev"
323
-- Teddy Hogeborn <teddy@recompile.se> Sun, 05 Oct 2014 22:05:06 +0200
325
mandos (1.6.8-1) unstable; urgency=medium
327
* New upstream release.
328
* debian/control (Source: mandos/Build-Depends-Indep): Since upstream
329
now requires Python 2.7, depend on exactly the python2.7 package and
330
all the Python 2.7 versions of the python modules.
331
(Package: mandos/Depends): - '' - but still depend on python (>=2.7)
332
and the generic versions of the Python modules; this is for mandos-ctl
333
and mandos-monitor, both of which are compatible with Python 3, and
334
use #!/usr/bin/python.
336
-- Teddy Hogeborn <teddy@recompile.se> Wed, 06 Aug 2014 22:55:24 +0200
338
mandos (1.6.7-1) unstable; urgency=medium
340
* New upstream release.
342
-- Teddy Hogeborn <teddy@recompile.se> Thu, 17 Jul 2014 05:22:45 +0200
344
mandos (1.6.6-1) unstable; urgency=medium
346
* New upstream release.
347
* debian/mandos.postinst: Fix typo in comment.
348
* debian/control (mandos/Recommends): Changed to "ssh-client | fping".
349
(mandos-client/Recommends): New; set to "ssh".
351
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Jul 2014 22:49:21 +0200
353
mandos (1.6.5-3) unstable; urgency=medium
355
* debian/control (mandos-client/Depends): Add "dpkg-dev (>=1.16.0)";
356
initramfs-tools-hook runs "dpkg-architecture -qDEB_HOST_MULTIARCH".
359
-- Teddy Hogeborn <teddy@recompile.se> Fri, 06 Jun 2014 04:27:15 +0200
361
mandos (1.6.5-2) unstable; urgency=medium
363
* debian/rules (override_dh_auto_test-arch): New; does nothing. Fixes
364
FTBFS for build-indep.
366
-- Teddy Hogeborn <teddy@recompile.se> Tue, 13 May 2014 08:08:31 +0200
368
mandos (1.6.5-1) unstable; urgency=medium
370
* New upstream release.
371
* debian/copyright: Change year to "2014".
372
* debian/control (Build-Depends, Build-Depends-Indep): Moved build
373
dependencies of "mandos" package to "Build-Depends-Indep".
374
* debian/upstream/signing-key.asc: New; upstream source public key.
375
* debian/control (Standards-Version): Updated to "3.9.5".
376
* debian/control (mandos/Depends): Remove the dependency on
377
"avahi-daemon (>= 0.6.31-3) | systemd-sysv". It is unnecessary
378
since we have a workaround in debian/mandos.postinst anyway.
380
-- Teddy Hogeborn <teddy@recompile.se> Sun, 11 May 2014 22:16:33 +0200
382
mandos (1.6.4-1) unstable; urgency=medium
384
* New upstream release.
385
* debian/control (Build-Depends): Add Python dependencies to
386
successfully run self-tests.
387
* debian/copyright: GPLv3 now has its own license file - use it.
388
* debian/watch: Set PGP signature URL.
390
-- Teddy Hogeborn <teddy@recompile.se> Sun, 16 Feb 2014 14:09:25 +0100
392
mandos (1.6.3-1) unstable; urgency=low
394
* New upstream release.
395
* debian/control (Build-Depends): Added "systemd".
396
* debian/mandos.dirs (lib/systemd/system): New.
397
* debian/mandos-client.README.Debian: Refer to architecture libdir.
398
* debian/control (mandos/Depends): Add "avahi-daemon (>= 0.6.31-3) |
400
* debian/mandos.postinst: If avahi-daemon is version 0.6.31-2 or older,
401
edit /etc/init.d script headers Required-Start
402
and Required-Stop to have "avahi" instead of
403
"avahi-daemon", before insserv(8) sees it.
404
* debian/mandos-client.lintian-overrides: Libdir changes.
405
* debian/rules (override_dh_fixperms): - '' -
407
-- Teddy Hogeborn <teddy@recompile.se> Tue, 21 Jan 2014 22:01:30 +0100
409
mandos (1.6.2-1) unstable; urgency=low
411
* New upstream release.
412
* debian/compat: Changed to "9".
413
* debian/control (Build-Depends): Changed debhelper version to (>= 9).
414
(Standards-Version): Updated to "3.9.4".
415
(DM-Upload-Allowed): Removed.
416
(mandos/Depends): Add "initscripts (>= 2.88dsf-13.3)" to be able to
417
use the "/run" directory (for mandos.pid).
418
* debian/copyright (Copyright): Update year.
419
* Fix "Mandos/gnutls fails to establish connection, "an algorithm that
420
is not enabled was negotiated"" fixed by upstream. (Closes: #702120)
422
-- Teddy Hogeborn <teddy@recompile.se> Thu, 24 Oct 2013 22:33:40 +0200
424
mandos (1.6.1-1) unstable; urgency=low
426
* New upstream release.
427
* debian/control (mandos/Depends): No longer depends on
428
python-gnupginterface, but does
429
depend on gnupg (<< 2).
430
(Build-Depends): Depend on debhelper 8.9.7 for using "override-*-arch"
431
and "override-*-indep" targets in debian/rules.
432
* debian/mandos-client.README: Update Linux documentation link.
433
* debian/rules: Completely rewritten to use debhelper v7.
434
* initramfs-tools-hook: Bug fix: Make sure the right version of GnuPG is
435
copied into the initramfs image. Always assume that GPGME is used to
436
avoid searching for it since the path might not be /usr/lib. Thanks
437
to Félix Sipma <felix+debian@gueux.org> for the initial bug report,
438
and also thanks to Dick Middleton <dick@lingbrae.com> for some more
439
debugging. (Closes: #721903)
440
* Fix "bashism in /bin/sh script" fixed by upstream. (Closes: #690639)
442
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Oct 2013 19:03:23 +0200
444
mandos (1.6.0-1) unstable; urgency=low
446
* New upstream release.
447
* debian/copyright (Copyright): Join the two lines to a single line.
448
* debian/mandos-client.README.Debian: Update to refer to the new
449
location of the example network hooks, and the new feature of using
450
all network interfaces.
451
* debian/mandos-client.docs (network-hooks.d): Removed.
452
* debian/mandos-client.examples (network-hooks.d): New.
453
* debian/rules (binary-common): Added "dh_installexamples".
454
(binary-common/dh_fixperms): Exclude new location of
457
-- Teddy Hogeborn <teddy@recompile.se> Mon, 18 Jun 2012 00:15:23 +0200
459
1
mandos (1.5.5-1) unstable; urgency=low
461
3
* New upstream release.