opendkim (2.11.0~beta2-8+deb12u1) bookworm; urgency=medium * Non-Maintainer upload by the security team. [ David Bürgin ] * Add patch "rev-ares-deletion.patch" for CVE-2022-48521: Delete Authentication-Results headers in reverse (Closes: #1041107). -- Tobias Frost Sat, 25 Nov 2023 17:19:13 +0100 opendkim (2.11.0~beta2-8) unstable; urgency=medium [ David Bürgin ] * Add patch "fix-RSA_Sign-call.patch": Fix signedness bug in RSA_Sign call (patch by Martin Grimm; closes: #1012506). * Update debian/watch to monitor GitHub tags instead of releases page. * Bump Standards-Version to 4.6.2 without further changes. [ Debian Janitor ] * Set upstream metadata fields: Archive, Repository-Browse, Bug-Database, Bug-Submit. -- David Bürgin Tue, 20 Dec 2022 09:10:44 +0100 opendkim (2.11.0~beta2-7) unstable; urgency=medium * systemd: Start service after network is online (Closes: #1004394). * Bump Standards-Version to 4.6.1 without further changes. -- David Bürgin Thu, 21 Jul 2022 14:08:18 +0200 opendkim (2.11.0~beta2-6) unstable; urgency=medium * Deprecate /lib/opendkim/opendkim.service.generate script: instead, edit /etc/opendkim.conf directly, or use "systemctl edit opendkim.service" to create configuration overrides. * Add patch "lua-5.3.patch": Upgrade Lua library dependency to version 5.3 (from 5.1). * Document service startup order in README.Debian (Closes: #971074). -- David Bürgin Wed, 24 Nov 2021 11:29:04 +0100 opendkim (2.11.0~beta2-5) unstable; urgency=medium * opendkim-tools: Do not install obsolete opendkim-convert-keylist script. * Add new patches: - cve-2020-12272.patch: Mitigation for CVE-2020-12272. - opendkim-genkey-typo.patch: Correct typo in man page (Closes: #960447). - replace-headers.patch: Fix ReplaceHeaders parameter (Closes: #986878). - insheader.patch: Insert trace headers at index 0. - mlfi_close.patch: Fix segfault due to use-after-free in mlfi_close. - conf_refcnt.patch: Remove invalid assert statement. * debian/control: Set "Rules-Requires-Root: no". * Bump Standards-Version to 4.6.0 without further changes. -- David Bürgin Tue, 24 Aug 2021 11:56:22 +0200 opendkim (2.11.0~beta2-4) unstable; urgency=medium * Update debhelper-compat to compatibility level 13. - Rename d/opendkim.tmpfile for new dh_installtmpfiles convention. * opendkim-tools: Reference "OpenDKIM" in synopsis. * miltertest: Drop patch moving the man page (rejected upstream). * Add missing DEP-3 headers tracking upstream bug in d/patches. -- David Bürgin Mon, 12 Oct 2020 15:15:30 +0200 opendkim (2.11.0~beta2-3) unstable; urgency=medium * Move miltertest into a separate binary package (Closes: #947324). * miltertest: Add a patch that moves the man page to section 1. * Use dh_auto_configure instead of ./configure directly, in order to install libraries and pkg-config files in the multiarch path /usr/lib/*/. * Mark shared library packages as "Multi-Arch: same" in d/control. * Silence a debhelper warning by renaming d/opendkim.service.generate. * Bump Standards-Version to 4.5.0 without further changes. -- David Bürgin Thu, 21 May 2020 15:06:20 +0200 opendkim (2.11.0~beta2-2) unstable; urgency=medium * Bump debhelper compat to compatibility level 12, necessitating many small changes in .install files and similar to silence dh_missing warnings. * General packaging overhaul: - Package synopses have been streamlined. - opendkim-tools: System utilities have moved from /usr/bin to /usr/sbin. - opendkim-tools: A few secondary statistics utilities are now included. - Various additional documentation is included. - Recommends: Promote opendkim-tools to opendkim recommends, because it is indispensable for initial setup and almost always installed together with opendkim. - Suggests: Drop unbound from opendkim suggests, because opendkim already uses libunbound, suggesting the standalone service may be misleading. - Remnants of obsolete (unused) "reputation" packages have been purged. * Additional patches: - opendkim-genzone: Fix inverted logic with subdomains (after a patch originally by Andreas Schulze). - opendkim: Suppress an empty pair of brackets logged to syslog. * Drop redundant specification of default config ("-x /etc/opendkim.conf") in systemd and init services. * Rewrite /etc/opendkim.conf and discourage use of /etc/default/opendkim (Closes: #861169). * postinst: Make script more robust when expected directories are not present (LP: #1787307). -- David Bürgin Tue, 28 Jan 2020 10:13:12 +0100 opendkim (2.11.0~beta2-1) unstable; urgency=medium * New upstream release. - Refresh patches, delete patch "openssl_1.1.0_compat.patch" incorporated upstream - Update symbols files, add Build-Depends-Package metadata - Drop outdated --enable-poll and --with-test-socket configure options * debian/rules: Build with hardening flags (patch by Christian Göttsche ; closes: #878058) * opendkim.service.generate script: Fix permissions of generated override files (patch by Christophe Siraut ; closes: #859797) * miltertest: Add patch fixing undefined behaviour in mt.eom_check() (Closes: #946397) * libopendkim-dev: Install only HTML files as documentation, and do so directly in /usr/share/doc/ (no subdirectory) as does upstream * Install convert_keylist.sh script in its documented location at /usr/bin/opendkim-convert-keylist, but keep old name around as a symlink * Replace all uses of /var/run with /run (Closes: #859706) * Add VCS repository coordinates * Bump standards version to 4.4.1 without further change -- David Bürgin Tue, 31 Dec 2019 15:16:22 +0100 opendkim (2.11.0~alpha-14) unstable; urgency=medium * Bump debhelper compat to compatibility level 10 * Bump Standards-Version to 4.3.0 * debian/watch: Use uscan version 4, tighten URL mangling patterns; also remove unused and weak upstream signing key (upstream no longer signs release tarballs) * debian/copyright: Convert copyright information to DEP 5 format * debian/control: Update obsolete Priority "extra" to "optional" * Strip trailing whitespace in debian/* -- David Bürgin Sun, 22 Dec 2019 11:31:08 +0100 opendkim (2.11.0~alpha-13) unstable; urgency=medium * miltertest: Fix broken mt.data() function (Closes: #946386) * Set maintainer to David Bürgin, who intends to adopt the package (Closes: #900774) -- David Bürgin Sat, 14 Dec 2019 17:00:36 +0100 opendkim (2.11.0~alpha-12) unstable; urgency=medium * Orphan the package, see #900774, set maintainer to Debian QA Group * Drop Mark Markley from uploaders, not active Debian in years * Partial update of debian/watch to point to the new upstream repository -- Scott Kitterman Tue, 11 Dec 2018 19:49:47 -0500 opendkim (2.11.0~alpha-11) unstable; urgency=medium * Update opendkim service file so that /etc/opendkim.conf is used (Closes: #864162) * Start as root and drop privileges in opendkim so proper key file ownership works correctly * Add new options to /etc/opendkim.conf to match the above service file changes * Bump standards version to 4.1.0 without further change -- Scott Kitterman Sun, 03 Sep 2017 20:22:45 -0400 opendkim (2.11.0~alpha-10) unstable; urgency=medium * Do not remove /etc/default/opendkim on upgrade since it is a conffile because policy 10.7.3 (Closes: #863055) -- Scott Kitterman Mon, 22 May 2017 18:08:41 -0400 opendkim (2.11.0~alpha-9) unstable; urgency=medium * Set umask to 0007 in opendkim.service so opendkim socket is group readable (Closes: #851141) * Set opendkim-genkey to default to 2048 bit sha-256 only keys based on current best practices * Add debian/patches/nsupdate_output.patch to fix opendkim-genzone output to be usable for nsupdate (Closes: #849540) -- Scott Kitterman Wed, 25 Jan 2017 09:58:07 -0500 opendkim (2.11.0~alpha-8) unstable; urgency=medium [ Peter Colberg ] * On systems using systemd, this version replaces /etc/default/opendkim with the files /etc/systemd/system/opendkim.service.d/overrride.conf and /etc/tmpfiles.d/opendkim.conf carrying over non-default settings (Closes: #843463, #843494) [ Scott Kitterman ] * Fix undefined behavior in opendkim.postinst (Closes: #842684) * Fix pathfind invocation in sysv init script (Closes: #809089) -- Scott Kitterman Mon, 07 Nov 2016 09:07:28 -0500 opendkim (2.11.0~alpha-7) unstable; urgency=medium * Upload to unstable (Closes: #840015) - Despite being called an alpha it is almost entirely a bug fix release * Replace TimeoutStartSec=10 with Restart=on-failure in opendkim.service to give more time for initial start-up and to make sure opendkim starts eventually (Closes: #837376) * Fix group permissions on /var/run/opendkim (Closes: #837375) * Add additional information to README.Debian about configuration with Postfix (Closes: #830503) * Add patch to build with either openssl 1.0.2 or 1.1.0 (Closes: #828466) - Thanks to Sebastian Andrzej Siewior for the patch * Generate opendkim.service in postinst instead of shipping it in the package (Closes: #837374) -- Scott Kitterman Mon, 24 Oct 2016 14:15:53 -0400 opendkim (2.11.0~alpha-6) experimental; urgency=medium * Install opendkim.service.generate in its own directory -- Scott Kitterman Mon, 04 Jul 2016 23:02:57 -0400 opendkim (2.11.0~alpha-5) experimental; urgency=medium * Since the variables that can be set from the environment directly a systemd unit file, generate opendkim.service based on /etc/default/ opendkim * Update /etc/default to include a few additional options as a result -- Scott Kitterman Mon, 04 Jul 2016 16:54:02 -0400 opendkim (2.11.0~alpha-4) experimental; urgency=medium * Reorder startup options to match the requirements listed in the help file - Completes fix for (Closes: #792458) * Stop installing historical dkim-milter changelog (RELEASE-NOTES.Sendmail) * Add .m4 file to ease sendmail integration and related README.Sendmail (Closes: #804806) * Make opendkim user and group variables in both the service and sysv init files and then add the definition to /etc/default/opendkim to make it easier to change which user and group opendkim runs under (Closes: #778871) * Add opendkim run directory to /etc/default/opendkim to make it easier to change it to support, for example, use of a Unix socket for a chrooted postfix (Closes: #797492) -- Scott Kitterman Sat, 02 Jul 2016 20:18:13 -0400 opendkim (2.11.0~alpha-3) experimental; urgency=medium * Hard-code shell in debian/rules for reproducibility * Try again on configure for kfreebsd* and hurd - Fix debian/rules - Add debian/opendkim-tools.install/manpages.hurd-i386 to account for opendkim-spam not being built when libopendbx is not available -- Scott Kitterman Thu, 30 Jun 2016 23:01:45 -0400 opendkim (2.11.0~alpha-2) experimental; urgency=medium * Update debian/copyright to reflect change of copyright holder to The Trusted Domain Project * Update experimental to match changes in unstable (2.10.3-4) - Tighten opendkim depend version on libopendkim11 to prevent openssl version mismatch problems (Closes: #821898) - Change build-dep for libunbound-dev to linux-any since it is now linux only - Bump standards version to 3.9.8 without further change * Change build-dep for libopendbx1-dev to linux-any, kfreebsd-any since it is not available on hurd-i386 * Adjust debian/rules to use correct configure options on kfreebsd and hurd due to not all build-depends being available * Drop obsolete build-depends on libxml2-dev and related configure option -- Scott Kitterman Tue, 17 May 2016 20:03:01 -0400 opendkim (2.11.0~alpha-1) experimental; urgency=medium * New upstream alpha release - Rename libopendkim10 to libopendkim11 to match new soname - Update symobls file - Rename debian/libopendkim10.* * Add --enable-poll to use poll() instead of select() for asynchronous I/O as discussed on opendkim-users@lists.opendkim.org * Add --enable-sender_macro to simplify identifing signing domain -- Scott Kitterman Tue, 19 Jan 2016 00:53:23 -0500 opendkim (2.10.3-3) unstable; urgency=medium * Correct install location of systemd service file * Drop debian/patches for upstream service file and use custom service file in debian/ * Adjust /etc/default/opendkim to work with either systemd or sysv init * Adjust debian/openddkim.init to work with modified default file -- Scott Kitterman Tue, 07 Jul 2015 01:15:38 -0400 opendkim (2.10.3-2) unstable; urgency=medium * Ship systemd service file along with sysv init (LP: #1452538) * Fix upstream service file to recreate /var/run/opendkim on boot and to use appropriate paths for Debian - Thanks to Ben Thielsen for the patch -- Scott Kitterman Sun, 05 Jul 2015 14:50:56 -0400 opendkim (2.10.3-1) unstable; urgency=medium * Add contrib/docs/chroot chrooting README to opedkim.docs * Add dns-root-data to opendkim Depends for DNSSEC support and adjust debian/opendkim.conf to for the correct path to the trust anchor (Closes: #751560) * Agreed Maintainer/Uploader swap -- Scott Kitterman Mon, 29 Jun 2015 23:56:53 -0400 opendkim (2.10.1-2) unstable; urgency=medium * Upload to unstable * Use daemon name vice filename in init when checking to see if the pid file is stale or not (Closes: #783260) * Add /etc/dkimkeys directory with appropriate permissions set in postinst for securely storing DKIM private keys (Closes: #706061) * Update and improve key managemnet discussion in README.Debian * Add unbound to opendkim suggests and UnboundConfigFile so shipped config file to ease setup of DNSSEC (Closes: #751560) * Use exit instead of return in opendkim.init in start, stop, status (Closes: #776590) * Update dates in debian/copyright * Update comments in debian/opendkim.conf * Fix missing text in libopendkim-dev long description (Closes: #780140) * Fix dubplicated text in libvbr-dev long description (Closes: #780619) * Add --with-domain=localhost to configure to make the build reproducible (Closes: #782459) - Thanks to Reiner Herrmann for the report and the patch * Delete opendkim.postrm - we don't want to delete the user on purge since it may still own key files * Use pathfind from devref 6.4 to remove hard coded paths to restorecon and fix lintian command-with-path-in-maintainer-script warning -- Scott Kitterman Sun, 26 Apr 2015 15:59:57 -0400 opendkim (2.10.1-1) experimental; urgency=medium * New upstream release - Bump libopendkim to libopendkim10 due to upstream soname change: Update debian/control and rename libopendkim10.docs, libopendkim10.install, and libopendkim10.symbols - Update libopendkim symbols file to remove symbols for dropped ADSP functionality (Obsolete) - Drop all patches, previously cherrypicked from upstream - ADSP support removed. Remove references to opendkim-testadsp from debian/control, opendkim-tools.install, and opendkim-tools.manpages * Bump standards version to 3.9.6 without further change -- Scott Kitterman Tue, 24 Feb 2015 00:24:58 -0500 opendkim (2.9.2-2) unstable; urgency=medium * Cherry-pick bug fixes from upstream development of version 2.10 - 0000-Replace-overlapping-strlcpy-with-memmove-in-dkim_get.patch - 0000-Treat-CR-as-end-of-line.patch - 0001-Fix-bug-177-Plug-leaking-result-structures-when-Open.patch - 0002-LIBOPENDKIM-Tighten-relaxed-modes-to-break-on-only-D.patch - 0003-Feature-request-178-Add-F-flag-to-opendkim-genzone-s.patch - 0004-Be-careful-about-what-spaces-we-toss-in-header-field.patch - 0005-Make-dkim_header-more-strict-about-the-inputs-it-wil.patch - 0006-LIBOPENDKIM-If-a-signature-fails-to-verify-for-eithe.patch - 0009-Handle-parameters-safely-in-repute.php.-Reported-by-.patch - 0010-Handle-empty-values-of-i-reported-by-MTAs.patch - 0011-Make-a-reference-from-the-DNS-service-functions-to-d.patch - 0013-Patch-32-Re-arrange-the-execution-logic-to-drop-priv.patch -- Scott Kitterman Fri, 28 Nov 2014 16:20:24 -0500 opendkim (2.9.2-1) unstable; urgency=medium * New upstream release -- Scott Kitterman Sat, 19 Apr 2014 12:28:13 -0400 opendkim (2.9.1-1) unstable; urgency=medium * New upstream release -- Scott Kitterman Mon, 17 Mar 2014 19:42:23 -0400 opendkim (2.9.1~Beta4-1) experimental; urgency=low * New upstream beta release -- Scott Kitterman Wed, 12 Mar 2014 17:48:45 -0400 opendkim (2.9.0-3) unstable; urgency=medium * Disable test suite due to bogus errors even harder (Closes: #740486) - Forgot to disable mips/mipsel, Thanks to Dejan Latinovic for the patch -- Scott Kitterman Wed, 05 Mar 2014 16:25:34 -0500 opendkim (2.9.0-2) unstable; urgency=low * Disable test suite on all archs due to undiagnosed race condition in the test suite that causes multiple FTBFS, but doesn't appear reflect any actual program problems -- Scott Kitterman Sat, 08 Feb 2014 23:22:17 -0500 opendkim (2.9.0-1) unstable; urgency=low * New upstream release - Update symbols * Lengthen time between opendkim tests to increase test reliability * Bump standards version to 3.9.5 without further change -- Scott Kitterman Fri, 17 Jan 2014 23:27:51 -0500 opendkim (2.8.4-2) unstable; urgency=low * Skip tests on kfreebsd-* as results are incredibly inconsistent due to system issues and not package bugs -- Scott Kitterman Wed, 17 Jul 2013 15:51:17 -0400 opendkim (2.8.4-1) unstable; urgency=low * New upstream release * Slow down tests on mips and mipsel to give them more time to pass * Update debian/watch from update provided from the PTS -- Scott Kitterman Tue, 16 Jul 2013 16:53:03 -0400 opendkim (2.8.4~beta2-1) experimental; urgency=low * New upstream beta release (Closes: #713968) -- Scott Kitterman Sun, 07 Jul 2013 03:45:06 -0400 opendkim (2.8.4~beta1-1) experimental; urgency=low * New upstream release * Revert inadvertent direct dependency on db5.3 included in last upload -- Scott Kitterman Mon, 10 Jun 2013 13:52:17 -0400 opendkim (2.8.4~beta0-1) experimental; urgency=low * New upstream release -- Scott Kitterman Fri, 24 May 2013 15:11:36 -0400 opendkim (2.8.3-1) unstable; urgency=low * New upstream release * Added doc-base registration -- Scott Kitterman Mon, 06 May 2013 15:47:07 -0400 opendkim (2.8.2-1) unstable; urgency=low * Upload to unstable * New upstream release - Drop debian/patches/Wformat_fixes.patch, originally backported from upstream and included in this release * Replace commented out entry for ADSPDiscard with an equally commented out entry for ADSPAction to match upstream changes (Closes: #701987) -- Scott Kitterman Fri, 29 Mar 2013 15:38:21 -0400 opendkim (2.8.1-1) experimental; urgency=low * New uptream release * Switch to source/format 3.0 (quilt) * Add patch from upstream to fix -Wformat warnings -- Scott Kitterman Tue, 19 Mar 2013 21:50:10 -0400 opendkim (2.8.0-1) experimental; urgency=low * New upstream release -- Scott Kitterman Mon, 25 Feb 2013 17:06:21 -0500 opendkim (2.8.0~beta6-1) experimental; urgency=low * New upstream beta release - Drop debian/patches/warnings-fix.patch and added-linking.patch both included from upstream * Remove no longer needed quilt patch system -- Scott Kitterman Wed, 20 Feb 2013 15:47:45 -0500 opendkim (2.8.0~beta5-1) experimental; urgency=low * New upstream beta release * Add debian/patches/warnings-fix.patch from upstream to correct issues that led to compiler warnings * Add debian/patches/added-linking.patch to add missing libs for correct linking * Add quilt to build-depends, add README.source, and add with quilt to debian/rules -- Scott Kitterman Sat, 16 Feb 2013 00:02:12 -0500 opendkim (2.8.0~beta4-1) experimental; urgency=low * New upstream beta release -- Scott Kitterman Tue, 12 Feb 2013 17:30:09 -0500 opendkim (2.8.0~beta3-1) experimental; urgency=low * New upstream beta relaese -- Scott Kitterman Mon, 11 Feb 2013 01:38:27 -0500 opendkim (2.8.0~beta2-2) experimental; urgency=low * Use MALLOC_CHECK_=0 for tests on kfreebsd-i386 due to issues with the squeeze kernel used on the buildds - To be dropped after wheezy release and buildds are updated -- Scott Kitterman Fri, 08 Feb 2013 15:38:22 -0500 opendkim (2.8.0~beta2-1) experimental; urgency=low * New upstream beta release - Drop local miltertest/miltertest.c and and opendkim/opendkim.c changes that had been backported from upstream -- Scott Kitterman Wed, 06 Feb 2013 21:41:19 -0500 opendkim (2.8.0~beta1-1) experimental; urgency=low * New upstream beta release - Drop local opendkim/tests changes in favor of overriding dh_auto_test on mips to use the new upstream method for increasing connect retry interval (MILTERTEST_RETRY_SPEED_FACTOR) * Backport fix from upstream to make MILTERTEST_RETRY_SPEED_FACTOR work * Backport fix from upstream to remove left over attempt to free variable that is now static (opendkim/opendkim.c) -- Scott Kitterman Fri, 01 Feb 2013 00:11:24 -0500 opendkim (2.8.0~beta0-3) experimental; urgency=low * Extend mt.set_timeout(300) to all opendkim tests and also increase number of retries and retry interval to use the extra time * Fix typo in closes for last changelog entry -- Scott Kitterman Wed, 30 Jan 2013 23:17:32 -0500 opendkim (2.8.0~beta0-2) experimental; urgency=low * Add mt.set_timeout(300) to opendkim/tests/t-sign-ss.lua to try to fix mips test failure due to opendkim not being ready yet. * Add test for existence of /var/run/opendkim to opendkim.postinst (Closes: #695610) -- Scott Kitterman Wed, 30 Jan 2013 01:05:31 -0500 opendkim (2.8.0~beta0-1) experimental; urgency=low * New upstream beta release - Drop local configure, miltertest, and test suite changes as they are all incorporated upsteram - Rename libopendkim8 to libopendkim9 to match upstream soname bump and update debian/control and debian/libopendkim8.* - Update libopendkim symbols file * Drop obsolescent dkim-reputation flag from configure in debian/rules - No longer particularly useful and leads to DNS queries even when network tests are disabled - Remove libdkimrep1/libdkimrep-dev from debian/control as well as related debian/* files * Drop opendkim-reputation binary as well as debian/* files as the binary makes little sense without libdkimrep -- Scott Kitterman Sun, 27 Jan 2013 00:00:07 -0500 opendkim (2.7.4-5) experimental; urgency=low [ Scott Kitterman ] * Patch configure.ac and the source to allow bsd/string.h and -lbsd as an alternative and remove -lbsd from LDFLAGS in debian/rules. [ Adam Conrad ] * Pass --disable-live-testing to configure to skip tests that need internet access, as those fail on the restrictive buildd network. * Guard four more testsuite tests with LIVE_TESTS check, as they generate DNS traffic that gets shut down by restrictive networks. * Build-depend on and use dh-autoreconf, and drop the manual copy of config.{sub,guess} in debian/rules now that it's automagic. * Call dh(1) with --parallel to marginally improve build times. * Simplify cross-build handling to always pass --host and --build. -- Scott Kitterman Sat, 19 Jan 2013 13:02:34 -0500 opendkim (2.7.4-4) experimental; urgency=low * Added needed configure changes for TCP sockets in the test suite -- Scott Kitterman Mon, 14 Jan 2013 23:21:09 -0500 opendkim (2.7.4-3) experimental; urgency=low * Include forgotten changes to miltertest from the last upload -- Scott Kitterman Mon, 14 Jan 2013 21:47:13 -0500 opendkim (2.7.4-2) experimental; urgency=low * Backport pre-release patch from 2.8.0 to add the option to build to use a TCP socket instead of a Unix socket in the test suite in order to work around auto* induced path length issues in socket names * Add with-test-socket=inet to configure options in debian/rules -- Scott Kitterman Mon, 14 Jan 2013 19:12:30 -0500 opendkim (2.7.4-1) experimental; urgency=low * New upstream release - Fixed selector logging error (Closes: #695145) * Drop reprrd from configuration since it pulls in an insane dependency stack at the moment -- Scott Kitterman Tue, 08 Jan 2013 03:00:16 -0500 opendkim (2.7.3-1) experimental; urgency=low * New upstream release -- Scott Kitterman Sat, 08 Dec 2012 14:38:19 -0500 opendkim (2.7.2-1) experimental; urgency=low * New upstream release - Change libopendkim7 to libdkim8 to match new soversion (update .install/ .docs files and libopendkim-dev depends) - Ship .pc files for libopendkim-dev and libvbr-dev - Add pkg-config to build-depends - Add libbsd-dev to build-depends instead of using embedded copies of strlcpy/strlcat and add -lbsd to LDFLAGS for proper linking - Drop enable-oversign configure option, enabled by default now - Add New configure options for experimental DKIM based reputation options, enable-dkim_reputation and enable-reprrd (and add rrdtool and librrd-dev to build-depends) - Add libdkimrep1 and libdkimrep-dev to debian/control along with related install, symbpols, docs, and manpages files - Add librbl1 and librbl-dev to debian/control along with related install and symbols files - Add opendkim-reprrd, libreprrd1 and libreprrd-dev to debian/control along with related install and symbols files - Build with-libxml2 and with-jansson to provide reputation data exchange formats (and add libjansson-dev and libxml2-dev to build-depends) - Build with enable-query_cache so the opendkim library will keep a local cache - Build with-libmemcached and add libmemcached-dev to build-depends to enable the memcached data set type * Reorganize debian/rules and install/dirs/manpages/docs/examples files for installation from debian/tmp and dehlper 7 style rules with overrides * Bump compat and debhelper version requirement to 9 * Add symbols files for existing libraries * Now that OpenDBX is available in Debian, build with-odbx and with-sql-backend (MySQL) (and add libopendbx1-dev to build-depends) (Closes: #656767) * Build with-sasl to support SASL authentication for LDAP (and add libsasl2-dev to build-depends) * Bump standards version to 3.9.4 without further change -- Scott Kitterman Mon, 19 Nov 2012 20:09:05 -0500 opendkim (2.6.8-2) unstable; urgency=low * No-change upload to unstable -- Scott Kitterman Tue, 30 Oct 2012 12:51:42 +0000 opendkim (2.6.8-1) experimental; urgency=low * New upstream security release to add capability to exclude use of insecure keys (Closes: #691394, LP: #1071139) -- Scott Kitterman Thu, 25 Oct 2012 01:04:27 -0400 opendkim (2.6.7-1) experimental; urgency=low * New upstream release - Drop obsolete configure option enable-selector_header -- Scott Kitterman Mon, 23 Jul 2012 18:17:11 -0400 opendkim (2.6.6-1) experimental; urgency=low * New upstream release -- Scott Kitterman Mon, 23 Jul 2012 08:28:16 -0400 opendkim (2.6.4-1) experimental; urgency=low * New upstream release -- Scott Kitterman Sun, 15 Jul 2012 00:04:24 -0400 opendkim (2.6.2-1) unstable; urgency=low * New upstream release (addresses three bugs that affect the Debian package) - Fix bug #SF3539449: Clarify legal "Socket" values. Requested by Scott Kitterman. - Fix bug #SF3539493: Handle certain cases of data set names that appear to be comma-separated lists which include IPv6 addresses. Reported by Scott Kitterman. (Closes: #679548) * Use restorecon to apply a SE Linux label after creating a run dir (Closes: #679852) -- Scott Kitterman Mon, 02 Jul 2012 14:44:38 -0400 opendkim (2.6.1-1) unstable; urgency=low * New upstream release * Use CFLAGS, CPPFLAGS, and LDFLAGS from dpkg-buildflags -- Scott Kitterman Sun, 24 Jun 2012 23:58:40 -0400 opendkim (2.6.0-1) unstable; urgency=low * New upstream release (now DFSG free so tarball repacking no longer required) - Rename libopendkim6 to libopendkim7 to match new soname - Update package and dependencies in debian/control - Rename .install and .doc files - Drop --enable-xtags from configure in debian/rules since it is now on by default - Update debian/copyright - Remove dversionmangle from debian/watch - Update README.Debian to reflect documentation no longer being stripped * Correct copyright/license information in libar/ar-strl.h based on feedback from upstream (correction already implemented upstream for the next relese) * Set --sysconfdir=/etc in configure so that generated man pages refer to the correct configuration file locations -- Scott Kitterman Fri, 08 Jun 2012 14:38:25 -0400 opendkim (2.5.2+dfsg-3) unstable; urgency=low * Re-add missing --with-db flag for configure -- Scott Kitterman Fri, 13 Apr 2012 10:41:37 -0400 opendkim (2.5.2+dfsg-2) unstable; urgency=low * Add patch from upstream to fix stray debug code left in opendkim-genstats * Split opendkim into opendkim and opendkim-tools since the command line support tools are now bigger than the application * Add status option to /etc/init.d/opendkim - Add depends on lsb-base * Add Description to /etc/init.d/opendkim header * Enable Vouch By Reference support: - Add --enable-vbr in debian/rules - Update libopendkim install files to be more specific and not install libvbr related files - Add libvbr2 and libvbr-dev to debian/control - Add debian/libvbr2.docs, libvbr2.install, and libvbr-dev.install * Enable extensions for adding arbitrary experimental signature tags and values in libopendkim (neeeded for ATPS support) - Add --enable-xtags in debian/rules * Enable support for RFC 6541 DKIM Authorized Third-Party Signatures (ATPS) - Add --enable-atps in debian/rules * Enable support for optional oversigning of header fields to prevent malicious parties from adding additional instances of the field - Add --enable-oversign to debian/rules - Modify debian/opendkim.conf to use OversignHeaders for From by default * Add required build-arch and build-indep targets to debian/rules * Fixed formating and versioning of existing opendkim.NEWS entry * Added new opendkim.NEWS entry to describe changed defaults with this revision * Update debian/copyright (Closes: #664132) * Add debian/watch * Remove unneeded shlibs:Depends for libdkim-dev -- Scott Kitterman Tue, 10 Apr 2012 23:58:52 -0400 opendkim (2.5.2+dfsg-1) unstable; urgency=low * New upstream release - Repacked tarball to remove non-free IETF drafts and RFCs - Updated docs/Makefile.in/am, and README to remove references removed non-free documentation * Add Homepage: to debian/control -- Scott Kitterman Mon, 09 Apr 2012 20:03:48 -0400 opendkim (2.5.0.1+dfsg-1) unstable; urgency=low * Add myself to uploaders * Merge package updates back from Ubuntu * New upstream release - Repacked tarball to remove non-free IETF drafts and RFCs - Updated docs/Makefile.in/am, and README to remove references removed non-free documentation - Add opendkim.NEWS to include note about incompatible change between BodyLengths setting and BodyLengthDB - Drop no longer recognized configure options, --enable-ztags, --enable-dnsupgrade, --enable-report_intervals, and --enable-bodylength_db - Drop local changes to libar/Makefile.in/am, incorporated upstream - Remove debian/rules to rename opendkim-genkey and opendkim-importstats, incorporated upstream - Install opendkim-convert-keylist in /usr/bin instead of /usr/sbin with other scripts * Update libopendkim to libopendkim6 for new so version - Change package name in debian/control - Update libopendkim-dev depends - Rename .install and .docs files - Update dh_shlibdeps call in debian/rules * Bump standards version to 3.9.3 without further change -- Scott Kitterman Wed, 14 Mar 2012 22:34:48 -0400 opendkim (2.1.3+dfsg-1) unstable; urgency=low * New upstream version. * opendkim is now under the 3-clause BSD license, although the Sendmail- owned components remain under the Sendmail license. The copyright file has been updated to reflect this change. * Debian-specific patch to include libresolv in libar to work around -z defs as a linker flag. This library isn't meant for consumption by other source packages, but using -z defs does cause a build failure, and I'd rather keep the error in than risk missing a dependency because it's gone. * libopendkim's major version number has changed; rename to libopendkim2 -- Mike Markley Fri, 6 Aug 2010 10:58:54 -0700 opendkim (2.0.1+dfsg-1) unstable; urgency=low * New upstream version. * Put config.sub/guess in build-aux/ instead of top-level. Closes: #575296 * Include dir in opendkim.pc has been corrected to what will ship from upstream in future releases (/opendkim). -- Mike Markley Wed, 31 Mar 2010 12:55:26 -0700 opendkim (2.0.0+dfsg-1) unstable; urgency=low * New upstream version. * The libopendkim ABI has changed, resulting in an soname change. - libopendkim0 package renamed to libopendkim1. * New LDAP and Lua support have been enabled. * Wrote clearer package descriptions. Closes: #572725 * Added build-dependency on autotools-dev. For now, the package ships with very old config.sub and config.guess files, but this will be resolved upstream in the near future. - Also removed extraneous top-level config.{sub,guess} files. * Applied two upstream patches for off-by-one errors, including one that can cause crashes when signing. * debian/copyright file was not accurate; it has been updated to reflect the fork from the dkim-milter project. The dkim-milter license should be fully compatible with the BSD license of this fork. -- Mike Markley Wed, 17 Mar 2010 13:04:28 -0700 opendkim (1.1.0+dfsg-1) unstable; urgency=low * New upstream version. * Look for __res_mkquery() instead of res_mkquery in configure to solve build issues on multiple platforms. Closes: #544802 * Removed --enable-commaize (it has been removed upstream as unnecessary) -- Mike Markley Sat, 19 Sep 2009 16:25:10 -0700 opendkim (1.0.0+dfsg-1) unstable; urgency=low * Initial upload. Closes: #543426, #542948 * Patched configure to support libunbound correctly. * Patched libopendkim/Makefile.am and Makefile.in to support libunbound & libar correctly. -- Mike Markley Mon, 24 Aug 2009 18:47:41 -0700