Skip to content
Snippets Groups Projects
  • Thorsten Alteholz's avatar
    Import Debian changes 4.21-1 · 8321431c
    Thorsten Alteholz authored
    pollen (4.21-1) sid; urgency=medium
    
      * first upload to Debian
      * debian/control: use dh11
      * debian/control: set standard to 4.3.0
      * debian/control: remove anerd mentions
      * debian/copyright: use https for copyright-format-uri
      * debian/rules: dh11 does not allow "--with systemd"
      * remove deprecated upstart init files
      * remove unused overrides
    
    pollen (4.21-0ubuntu1) yakkety; urgency=medium
    
      * check_pollen:
        - note the number of short bytes in the error log message
    
    pollen (4.20-0ubuntu1) wily; urgency=medium
    
      * debian/pollen.upstart: LP: #1505473
        - remove typo in the upstart config which was preventing the service from starting
      * rebuild the packages for upload
    
    pollen (4.19-0ubuntu1) wily; urgency=medium
    
      * debian/pollen.upstart: LP: #1505473
        - remove typo in the upstart config which was preventing the service from starting
    
    pollen (4.18-0ubuntu1) wily; urgency=medium
    
      * pollen.go:
        - add the "available"  word to the log
    
    pollen (4.17-0ubuntu1) unstable; urgency=medium
    
      * debian/pollen.postrm:
        - clear out certificates on purge
      * debian/pollen.default:
        - quote the variable definition, for consistency
      * debian/pollen.postinst:
        - fix ssl cert generation, country must be <2 chars
      * debian/pollen.service:
        - put braces around environment variables; required to work at all
      * pollen.go, usr.bin.pollen:
        - log the entropy bits before and after the transaction
    
    pollen (4.16-0ubuntu1) vivid; urgency=medium
    
      [ Matthias Klose ]
      * debian/control:
        - Build everywhere
    
    pollen (4.15-0ubuntu1) vivid; urgency=medium
    
      [ Didier Roche ]
      * debian/control, debian/pollen.service, debian/rules:
        - Add systemd unit, following similar restart on failure and device
        checking logic
        - Bump Standards-Version
    
    pollen (4.14-0ubuntu1) vivid; urgency=medium
    
      * pollen.go: LP: #1383738
        - remove SSLv3 support
    
    pollen (4.13-0ubuntu1) vivid; urgency=medium
    
      * debian/pollen-restart.upstart, debian/pollen.upstart, debian/rules:
        - LP: #1386052
        - add a new upstart job that restarts pollen any time the rsyslog server
          is restarted
        - this is necessary to work around a bug in the golang syslog library
          where syslog restarts break logging
          + https://code.google.com/p/go/issues/detail?id=2264#c8
    
    pollen (4.12-0ubuntu1) utopic; urgency=medium
    
      * debian/control:
        - recommend rng-tools;  we can do this, since pollen is in universe
      * debian/pollen.postinst:
        - minor change to the default self-signed cert;  use 'localhost'
          for the hostname;  this is useful for testing pollinate against
          the localhost with a self-signed cert
      * README:
        - update docs;  pollinate no longer runs daily by default
      * README:
        - update some docs
      * check_pollen:
        - ensure that the nagios check catches log failures
    
    pollen (4.11-0ubuntu1) trusty; urgency=medium
    
      * pollen_test.go:
        - fix FTBFS
        - hardcode device to /dev/urandom in unit tests, otherwise, our
          entropy starved vm-based builders will fail the unit tests
          and fail the build
    
    pollen (4.10-0ubuntu1) trusty; urgency=low
    
      * debian/control, debian/pollen.default, pollen.go, usr.bin.pollen:
        - LP: #1293958
        - suggest rng-tools (universe), which is needed to leverage tpm for
          /dev/random entropy
        - change default entropy source for pollen server to /dev/random
        - update inline configuration documentation to reflect reality
        - add rw of /dev/random to our apparmor whitelist
    
    pollen (4.9-0ubuntu1) trusty; urgency=low
    
      * debian/rules: LP: #1288807
        - fix FTBFS, build using golang 'go build' rather than gccgo
    
    pollen (4.8-0ubuntu1) trusty; urgency=low
    
      [ JuanJo Ciarlante and Dustin Kirkland ]
      * check_pollen:
        - use the new -t|--testing flag, to verify communications with the
          server, runable as a non-privileged user, but not affecting the
          local PRNG
    
    pollen (4.7-0ubuntu1) trusty; urgency=low
    
      [ John Arbash Meinel ]
      * .gitignore, pollen.go, pollen_test.go:
        - This changes the 'handler' from being just a func() using global
          state to being a struct with local state.
        - It then moves the things like dev and log to being members of the
          struct, with interfaces that let us override them in the test suite.
        - It then adds a bunch of tests about how we handle failures, errors,
          logging, the size flag, etc.
        - The interfaces also mean that we won't try to spam syslog while running
          the test suite.
        - Another small change is that if you do:
             pollen -https-port=""
          Then it won't try to bind to the HTTP port with a cert.
        - Since I'm not the official source for pollen, it helped for testing at
          least the HTTP requests manually.
        - This also fixes the help text for "-size" since it doesn't actually
          change how much content we send on the wire, but how much content we
          read from /dev/urandom (but it adds tests for that fact).
        - go fmt, and some formatting tweaks
        - actually do the right formatting
        - use microsecond timing (ms was always 0)
        - capture the length of time serving requests takes
    
      [ Dustin Kirkland ]
      * pollen.go:
        - put brackets around request length of time value
    
    pollen (4.6-0ubuntu1) trusty; urgency=low
    
      [ Caleb Spare ]
      * pollen.go:
        - Require the challenge query-string param to be provided
        - don't create the random device, if it doesn't exist
    
      [ Dustin Kirkland ]
      * pollen_test.go:
        - update test to handle required challenge string
      * pollen.go:
        - incorporate feedback from Adam Langley
        - catch errors reading the random device
        - add a note as to why we're checksumming the random seed
        - update message when challenge empty
    
      [ Caleb Spare and Dustin Kirkland ]
      * debian/pollen.upstart, pollen.8, pollen.go:
        - Use flags rather than positional arguments, and plumb bytes argument
          through
    
      [ Dustin Kirkland and Matt Croydon ]
      * debian/pollen.default, debian/pollen.upstart, pollen.8, pollen.go:
        - add support for specifying the TLS cert and key as command line
          flags
    
    pollen (4.5-0ubuntu1) trusty; urgency=low
    
      [ Caleb Spare ]
      * pollen.go, pollen_test.go:
        - Bring naming in line with Go conventions
        - Use shorter parameter names for an http.HandlerFunc
        - Remove an unnecessary string conversion
        - Print useful error if wrong arguments are given rather than crashing
        - Don't ignore errors
        - Rename http[s]Port to http[s]Addr for accuracy
        - Handle errors starting the http servers
        - Change some naming in the test
        - Read from the provided device rather than always /dev/urandom
    
    pollen (4.4-0ubuntu1) trusty; urgency=low
    
      [ Casey Marshall ]
      * debian/control, debian/rules, Makefile, pollen.go, pollen_test.go:
        - add unit tests for pollen server
    
      [ Dustin Kirkland ]
      * debian/pollen.lintian-overrides:
        - override expected Lintian gripes
    
    pollen (4.3-0ubuntu1) trusty; urgency=low
    
      * check_pollen:
        - ensure that the nagios script uses the -r|--reseed option
    
    pollen (4.2-0ubuntu1) trusty; urgency=low
    
      * pollen.go:
        - remove redundant line
      * README:
        - remove deprecated bit of documentation
    
    pollen (4.1-0ubuntu1) trusty; urgency=low
    
      * debian/control:
        - build on amd64 and i386 only
        - these are the only builds I've been able to confirm when building
          with golang-go
        - note that this undoes the fix for LP: #1274074, but that's the
          way it has to be, until either golang-go supports more architectures
          or gccgo doesn't suck
    
    pollen (4.0-0ubuntu1) trusty; urgency=low
    
      * check_pollen, debian/control, debian/copyright,
        debian/pollinate.default, debian/pollinate.install,
        debian/pollinate.manpages, debian/pollinate.postinst,
        debian/pollinate.postrm, debian/pollinate.upstart,
        entropy.ubuntu.com.pem, INSTALL, Makefile, pollinate, pollinate.1:
        - split pollen and pollinate into separate projects and packages
        - re-enable the pollen build
    
    pollen (3.17-0ubuntu1) trusty; urgency=low
    
      * pollinate:
        - improve kernel debug info
      * debian/control, debian/pollen.install, Makefile:
        - TEMPORARILY disabling the building of pollen, until
          either gccgo or golang-go get promoted to main
        - this should be reverted as soon as a go compiler
          is available as a build dep
    
    pollen (3.16-0ubuntu1) trusty; urgency=low
    
      * pollinate:
        - minor standardization of the user agent string
    
    pollen (3.15-0ubuntu1) trusty; urgency=low
    
      * debian/control: LP: #1274074
        - build on any architecure, now that we build with gccgo
    
    pollen (3.14-0ubuntu1) trusty; urgency=low
    
      * debian/pollinate.postinst:
        - fix order of operations, packaging breakage
    
    pollen (3.13-0ubuntu1) trusty; urgency=low
    
      * README:
        - fix more minor typos
        - explain "did some work"
      * debian/rules, Makefile:
        - fix the build for gccgo
        - must use the -g parameter
        - don't strip binaries
        - these are ugly, but are the result of gccgo vs golang-go
      * pollinate:
        - remove unused variable $cmd
      * debian/pollinate.upstart:
        - our upstart job should start on starting cloud-init, to ensure that
          we get run before generating SSH keys
      * debian/pollinate.install, debian/pollinate.postrm, pollen.go,
        pollinate, pollinate.cron.d, README:
        - drop the tag and cronjob per feedback from sarnold in the code audit
          in LP: #1246098
      * debian/pollinate.default, pollinate:
        - add helpful debug info to user agent, similar to chrome and firefox,
      * debian/pollinate.postinst, debian/pollinate.postrm,
        debian/pollinate.upstart, pollinate, pollinate.1:
        - use a pollinate user, rather than the daemon user
        - by default, only run pollinate once per system instantiation
        - offer reseeding as an option, though
      * debian/control:
        - need to depend on adduser
    
    pollen (3.12-0ubuntu1) trusty; urgency=low
    
      * README:
        - minor documentation feedback from Kees Cook
        - note that pollen servers can of course be run internally
      * debian/control:
        - clean up package descriptions a bit
    
    pollen (3.11-0ubuntu1) trusty; urgency=low
    
      * README:
        - updates to the README
      * debian/copyright, pollinate:
        - the client should really be GPLv3, rather than AGPL
      * debian/copyright:
        - point to the local copy of GPLv3 license
    
    pollen (3.10-0ubuntu1) trusty; urgency=low
    
      * debian/pollinate.cron.d, debian/pollinate.postinst, pollinate:
        - have each client choose a random time of day to reseed,
          at first run, rather than at package installation time
        - this requires a very clever hack(!)
        - install a "template" at /etc/cron.d/pollinate, with __MINUTE__
          and __HOUR__ symbols that should be replaced by the client,
          at first run
        - cron requires that /etc/cron.d/pollinate be owned by root
        - ideally we'd run the pollinate script as a non-root user (ie, daemon),
          by specifying the daemon user in upstart and in the cronjob
        - but daemon can't write to /etc/cron.d/pollinate, if it's owned by root
        - so here's the hack...
          + the upstart job installed by the package has "setuid root"
          + on its first run (which will be either at package install time, or
            at boot), it will run as root and: a) update the cronjob to a random
            time, and b) update the upstart job to run as daemon
          + woot
          + this works because both are conffiles
      * debian/pollen.postinst, debian/pollinate.postinst,
        debian/pollinate.postrm, pollinate:
        - use /var/cache/pollinate, rather than /var/lib/pollinate
        - this should make it more obvious that this data can be cleared out,
          and should be cleared out, on re-bundles or snapshots and reimages
      * debian/control, Makefile:
        - switch from golang-go to gcc-go, so that we can get this source
          package into Ubuntu main
      * pollinate, pollinate.1:
        - separate the pool and the server variables
      * debian/control:
        - no need to depend on bsdutils, it's essential
        - pollen depends on adduser
      * usr.bin.pollen:
        - update apparmor profile to allow reading of /usr/bin/pollen
          - oddly, this was introduced when switching compilers
      * debian/copyright:
        - lintian/dep5 cleanup
    
    pollen (3.9-0ubuntu1) trusty; urgency=low
    
      * debian/pollinate.default:
        - don't use quiet by default, do use binary
      * pollinate:
        - save ourselves an unneeded fork
      * debian/control:
        - drop haveged as a suggests
      * debian/pollinate.default, debian/pollinate.install,
        entropy.ubuntu.com.pem:
        - install entropy.ubuntu.com.pem's certificate and intermediate
          chain, to get rid of --insecure curl option
      * debian/control, pollinate:
        - log to the system log, using the logger utility
        - add a final message, noting successful (re-)seed
        - have pollinate depend on bsdutils, which provides logger
    
    pollen (3.8-0ubuntu1) trusty; urgency=low
    
      * debian/pollinate.default, debian/pollinate.postinst,
        debian/pollinate.upstart, pollinate:
        - fix the (broken) options setting in the pollinate default file
        - change the tag creation to happen during the pollinate runtime,
          rather than at package installation; this makes it more useful
          for downstreams and remixes of Ubuntu
        - ensure the daemon user owns the /var/lib/pollinate directory
        - run the pollinate upstart script as the daemon user
      * debian/pollinate.cron.d, debian/pollinate.postinst,
        debian/pollinate.postrm:
        - run the pollinate cronjob (reseed) once per day, rather than once
          per hour
        - purge pollinate files more effectively
    
    pollen (3.7-0ubuntu1) trusty; urgency=low
    
      * debian/control:
        - demote haveged to suggests, based on feedback from Seth Arnold
          in LP: #1246098
      * pollinate:
        - ensure both -c and -i can be used, without losing CURL_OPTS,
          as identified by Seth Arnold in LP: #1246098
      * pollinate:
        - drop unused IPV6 variable, per review by Seth Arnold in LP: #1246098
      * debian/pollen.postinst:
        - use pollen as our fake email address, suggested by Seth Arnold
          in LP: #1246098
      * debian/pollinate.cron.d:
        - add notes in the comments about NIST DRBG Special Publication 800-90A
          recommendations on reseeding
        - add notes in the comments about why we choose a random minute
        - fix a bug, that was causing the cronjob to run far more frequently
          than desired
        - Addresses some issues raised by Seth Arnold in LP: #1246098
      * debian/pollen.upstart, pollen.8, pollen.go:
        - add DEVICE as the 3rd argument to the pollen server in the upstart
          script
        - test that DEVICE is a special in upstart
        - document that the DEVICE is now a required argument
      * debian/pollen.install, Makefile, pollen:
        - build static binary at package build time, rather than dynamically
          compiling at each run, per feedback from Seth Arnold in LP: #1246098
        - use a very simple, basic Makefile
      * debian/control:
        - move golang-go to a build-dependency, rather than a runtime dependency
      * debian/control, debian/pollen.postinst, debian/pollen.postrm,
        debian/pollen.upstart:
        - create a new user, pollen:daemon, in the postinst, remove in postrm
        - depend on libcap2-bin, which provides setcap
        - use setcap to allow the pollen binary to bind to privileged ports
        - run the pollen daemon as the pollen user
        - per feedback from Seth Arnold in LP: #1246098
      * debian/pollen.upstart:
        - use setuid in upstart to run the pollen daemon as the pollen user
      * debian/pollen.postinst:
        - change pollen user's shell to /bin/false
      * debian/control, debian/pollen.install, debian/pollen.postinst,
        debian/rules, usr.bin.pollen:
        - add an apparmor profile for the pollen server, per suggestion
          by Seth Arnold in LP: #1246098
        - big thanks to Jamie Strandboge and Seth Arnold for assistance
      * debian/pollinate.postinst:
        - these chowns are not necessary; thanks for catching Michael Terry
          in LP: #1246098
      * debian/control: LP: #1259014
        - have the pollen server depend on ent, which is used by the
          check_pollen nagios script
    
    pollen (3.6-0ubuntu1) trusty; urgency=low
    
      * pollinate:
        - remove sourcing of an rc config file from $HOME, per security
          review from Seth Arnold
      * pollinate.1:
        - update documentation to note that multiple servers can be specified
          on the command line
      * debian/pollinate.default:
        - use the entropy.ubuntu.com beta site for testing
        - note that we're specifying the --insecure option here, as this is
          very much a work in progress
      * debian/pollinate.upstart:
        - start pollinate when we have networking up and running, or
          when we start ssh
      * pollen.go:
        - drop the nanosecond timestamp collection on the server
        - a good server should have real entropy hardware, and a busy server
          will have network traffic entropy already captured by the kernel
        - Suggestion by Seth Arnold in a security review
      * debian/pollen.default, pollinate:
        - drop timestamp based salting, not terribly valuable
        - per security review by Seth Arnold
      * pollinate:
        - drop unused $bin variable
    
    pollen (3.5-0ubuntu1) trusty; urgency=low
    
      * README:
        - enhance and update design documentation
      * debian/copyright:
        - update to DEP-5 format
    
    pollen (3.4-0ubuntu1) saucy; urgency=low
    
      * check_pollen, debian/control:
        - improve the nagios check
        - warn if:
          + insufficient bytes are retrieved
          + less than 5-bits-per-byte of entropy are calculated
          + an out of whack arithmetic mean
        - have pollen server recommend ent, which is used by the nagios check
    
    pollen (3.3-0ubuntu1) saucy; urgency=low
    
      * pollen-nagios-check:
        - added nagios check script
      * check_pollen, debian/pollen.install:
        - rename check script and install in nagios plugins directory
    
    pollen (3.2-0ubuntu1) saucy; urgency=low
    
      * README:
        - update design documentation
      * pollinate, pollinate.1:
        - support printing random seed to standard out
        - useful for debugging
        - add a -q|--quiet option to silence log messages
      * pollinate, pollinate.1:
        - add an option for binary data output
      * debian/pollen.default, debian/pollen.upstart, pollen.8, pollen.go:
        - re-enable support for both encrypted and non-encrypted connections
        - use a go subroutine to serve both out of the same process
        - document these changes
        - default to 80 and 443, allow admin to override easily via config
      * debian/control:
        - update package descriptions
      * pollinate:
        - default to, but do not force, https
    
    pollen (3.1-0ubuntu1) saucy; urgency=low
    
      * pollen.go
        - use a global for the dev writer
        - write a few more timestamps into the mix during the response
          handler
        - change logging verbiage
      * pollinate:
        - use a single temp directory, rather than multiple temp files
        - use a trap to cleanup the temp directory
        - uptdate the logging verbiage
        - use an etc default file if available
      * debian/pollen.default:
        - drop "TCP_" in the TCP_PORT variable
      * pollen.go:
        - just use two timestamps
      * pollinate:
        - improve usability; prepend https
      * debian/pollinate.cron.d, debian/pollinate.default,
        debian/pollinate.upstart, pollinate, pollinate.1:
        - use an upstart job, rather than an @reboot cronjob,
          to do the initial prng seeding
        - fix the default config file
    
    pollen (3.0-0ubuntu1) saucy; urgency=low
    
      * anerd, anerd-server-tcp.1 => anerd-server.1, anerd-server-tcp =>
        anerd-server, anerd-server-tcp.go => anerd-server.go, anerd-server-
        udp.1, anerd-server-udp.c, configure.ac, debian/anerd-
        client.default, debian/anerd-server.anerd-server-tcp.upstart =>
        debian/anerd-server.upstart, debian/anerd-server.anerd-server-
        udp.upstart, debian/anerd-server.default, debian/anerd-
        server.install, debian/anerd-server.manpages, debian/control,
        debian/rules, Makefile.am:
        - completely deprecate the UDP operation of both the client and
          the server
        - the TLS server over TCP is the only supported protocol going
          forward
        - this will necessitate a major version bump
      * anerd.1 => pollinate.1, anerd => pollinate, anerd-server.1 =>
        pollen.8, anerd-server.go => pollen.go, anerd-server => pollen,
        ChangeLog, debian/anerd-client.cron.d => debian/pollinate.cron.d,
        debian/anerd-client.default => debian/pollinate.default,
        debian/anerd-client.install => debian/pollinate.install,
        debian/anerd-client.manpages => debian/pollinate.manpages,
        debian/anerd-client.postinst => debian/pollinate.postinst,
        debian/anerd-client.postrm => debian/pollinate.postrm, debian/anerd-
        server.default => debian/pollen.default, debian/anerd-server.install
        => debian/pollen.install, debian/anerd-server.manpages =>
        debian/pollen.manpages, debian/anerd-server.postinst =>
        debian/pollen.postinst, debian/anerd-server.upstart =>
        debian/pollen.upstart, debian/control, debian/copyright,
        img/anerd_14.png, img/anerd_192.png, img/anerd_64.png,
        img/anerd.png, initramfs/hooks/anerd-client-udp,
        initramfs/scripts/init-bottom/anerd, NEWS, README, === removed
        directory initramfs, === removed directory initramfs/hooks, ===
        removed directory initramfs/scripts, === removed directory
        initramfs/scripts/init-bottom:
        - rename anerd server/client to pollen / pollinate
          to reflect that this data is intended to "seed" a random
          number generator
      * debian/control, debian/pollen.manpages:
        - package maintenace for package/project rename
        - move manpage to section 8
      * pollen.8, pollinate, pollinate.1:
        - documentation updated
      * debian/control, pollen.8, pollinate:
        - update some documentation and descriptions
      * img/pollen_14.png, img/pollen_192.png, img/pollen_64.png:
        - added new pollen logos
      * debian/control:
        - drop suggests
    
    anerd (2.4-0ubuntu1) saucy; urgency=low
    
      * anerd-client-tcp.go:
        - deprecated, use the shell (curl) one for better timestamping
          salt
      * anerd-server-tcp.go:
        - log user-agent and nanosecond timestamp
      * anerd, anerd-server-tcp.go:
        - rename "tip" to "challenge", use for challenge/response
        - verify challenge/response, to ensure personalized communication
      * anerd:
        - use a common logging function throughout
      * anerd-server-tcp.go:
        - open syslog only once
      * anerd, debian/control:
        - lower socat to a suggests, while still requiring curl
        - dynamically check for socat/curl and error appropriately
        - update package description
        - recommend haveged on the server
      * debian/anerd-server.default:
        - do not run the UDP, by default; local admin can enable by
          setting a port in /etc/default/anerd-server
      * anerd, anerd-server-tcp.go, debian/anerd-client.postinst,
        debian/anerd-server.postrm:
        - rename uuid to tag
        - generate on package install, remove on purge
      * anerd, debian/anerd-server.postrm => debian/anerd-client.postrm:
        - silence search for helper utilities
        - fix maintainer script name
      * anerd:
        - silence missing tag error messages for now
    
    anerd (2.3-0ubuntu1) saucy; urgency=low
    
      [ Matthias Klose ]
      * debian/control: LP: #1139188
        - Don't build anerd-server on powerpc (no golang-go, prevents
          migration from raring-proposed to raring).
    
    anerd (2.2-0ubuntu1) saucy; urgency=low
    
      * === added directory img, img/anerd_14.png, img/anerd_192.png,
        img/anerd_64.png, img/anerd.png:
        - added icons
      * anerd-server-tcp.go:
        - gofmt
      * anerd-server-tcp.go:
        - make this code more go-like, after some code review with Tim Penney
      * anerd-server-tcp.go:
        - drop unnecessary json formatting
    
    anerd (2.1-0ubuntu1) saucy; urgency=low
    
      * anerd-client-tcp.go:
        - default to anerd.us
      * anerd, anerd-client-tcp.go, anerd-server-tcp.go, debian/anerd-
        client.default:
        - anerd.us is now serving on 443
      * anerd, anerd-server-tcp.go:
        - add syslog logging to the anerd tcp server
        - use post for the tip from the anerd tcp client
      * anerd, debian/control:
        - use uuidgen -r for uuid and tip
      * anerd, anerd-server-udp.c:
        - add UDP to syslog messages
        - fix uuid related typo
        - add --insecure option
      * anerd, anerd-client-tcp.go, anerd-server-tcp.go, debian/control:
        - use sha512sum rather than uuidgen
      * anerd, debian/anerd-client.cron.d:
        - run at reboot, and hourly thereafter
        - shorten some function names
      * debian/anerd-client.cron.d, debian/anerd-client.postinst:
        - randomize the hourly cronjob to distribute load on the
          server, if possible
      * debian/control:
        - fix a lintian annoyance
      * anerd, anerd-server-tcp.go, anerd-server-udp.c:
        - drop byte counts in logging, as these can be misleading
      * anerd-server-tcp.go:
        - salt data with nanosecond timestamp
    
    anerd (2.0-0ubuntu1) saucy; urgency=low
    
      * anerd-tcp.go:
        - pretty print the json
      * anerd-client, anerd-client.1, anerd-tcp, anerd-tcp.1, anerd-tcp.go,
        anerd-udp.1, anerd-udp.c, debian/anerd-server.anerd-tcp.upstart,
        debian/anerd-server.anerd-udp.upstart, debian/control:
        - drop the "asynchronous" part of aNerd, this really isn't
          necessary in the description anymore
      * anerd-tcp.go:
        - reduce the default size to 64 bytes, which is sufficient to seed
          any random number generator
      * anerd-tcp.go, debian/anerd-server.default:
        - change the default size to 64 bytes
        - add some notes in the comments in the configuration file
        - always uses TLS encryption for the TCP implementation
      * anerd-tcp.1 => anerd-server-tcp.1, anerd-tcp => anerd-server-tcp,
        anerd-tcp.go => anerd-server-tcp.go, anerd-udp.1 => anerd-server-
        udp.1, anerd-udp.c => anerd-server-udp.c, debian/anerd-server.anerd-
        tcp.upstart => debian/anerd-server.anerd-server-tcp.upstart,
        debian/anerd-server.anerd-udp.upstart => debian/anerd-server.anerd-
        server-udp.upstart, debian/anerd-server.install, debian/anerd-
        server.manpages, debian/rules, Makefile.am:
        - rename anerd-tcp to anerd-server-tcp
        - rename anerd-udp to anerd-server-udp
      * debian/anerd-client.default:
        - change to the new anerd.us server, which supports TCP, TLS, and UDP
      * anerd, anerd-client, anerd-client.1 => anerd.1, anerd-client-tcp.go,
        anerd-server-tcp, debian/anerd-client.cron.d, debian/anerd-
        client.default, debian/anerd-client.install, debian/anerd-
        client.manpages, debian/anerd-server.anerd-server-tcp.upstart,
        debian/anerd-server.install, debian/control, initramfs/hooks/anerd-
        client => initramfs/hooks/anerd-client-udp, initramfs/scripts/init-
        bottom/anerd-client => initramfs/scripts/init-bottom/anerd,
        Makefile.am:
        - major rework of client, combine udp/tcp clients into a single
          shell script
      * anerd, anerd-client-tcp.go, anerd-server-tcp, anerd-server-tcp.go,
        anerd-server-udp.c, COPYING, debian/copyright,
        initramfs/scripts/init-bottom/anerd:
        - changed license back to AGPL
      * debian/anerd-client.default, debian/anerd-server.default:
        - deprecate hash as a configurable; use sha512sum
      * anerd:
        - use socat in verbose mode, to add more timestamps to the log
        - hash the timestamped log output
      * debian/control:
        - bump standards
    
    anerd (1.4-0ubuntu1) raring; urgency=low
    
      [ Dustin Kirkland ]
      * anerd-tcp.go:
        - add a very small, basic anerd-tcp server
        - clean up via gofmt
      * anerd-client:
        - count the number of bytes received correctly using a tmpfile
        - adjust info messages slightly
      * anerd.c:
        - drop crc from logging, change messages to info from debug
      * debian/anerd-client.default:
        - default to anerd.gazzang.net now that its up for good
      * anerd-tcp, anerd-tcp.go, debian/anerd-tcp-common.install,
        debian/anerd-tcp.postinst, debian/anerd-tcp.upstart, debian/anerd-
        web.upstart, debian/control:
        - create two small packages, one to launch anerd-tcp->80 and
          anerd-tcp->443
          + both depend on anerd-tcp-common, which provides the go script
        - add a postinst that generates a self-signed cert if there is none;
          obviously, one would want to replace these with real certs if
          security matters to you
        - create two upstart scripts that start the web service on each port
          + means you can install one, or the other, or both
      * anerd-client, debian/anerd-client.default:
        - fix communication with remote servers
        - make the wait time configurable, 0.1s by default
        - only broadcast when no specific servers are specified
        - add message on broadcast bytes sent
      * anerd-tcp:
        - add interpreter
      * anerd-tcp.1, debian/anerd-tcp-common.manpages:
        - add documentation
      * anerd-tcp.go:
        - ensure that we read enough bytes
      * anerd.1 => anerd-udp.1, anerd.c => anerd-udp.c, anerd-web.1 =>
        anerd-tcp.1, anerd-web => anerd-tcp, anerd-web.go => anerd-tcp.go,
        debian/anerd-server.anerd-udp.upstart, debian/anerd-server.default,
        debian/anerd-server.install, debian/anerd-server.manpages,
        debian/anerd-server.upstart => debian/anerd-server.anerd-
        tcp.upstart, debian/anerd-web-common.install, debian/anerd-web-
        common.manpages, debian/anerd-webs.postinst => debian/anerd-
        server.postinst, debian/anerd-webs.upstart, debian/anerd-
        web.upstart, debian/control, debian/rules, Makefile.am:
        - rename the C program to anerd-udp
        - create separate upstart scripts for anerd-tcp and anerd-udp
        - update documentation
        - drop anerd-web* packages
      * debian/anerd-client.postinst, debian/control, debian/anerd-client.install:
        - keep the initramfs code, but don't automatically update the initramfs
          for now, as this can render a machine without networking unbootable;
          re-enable this when we have a workaround for that
      * debian/anerd-server.postinst:
        - fix typo
    
      [ Hector Acosta ]
      * anerd.c:
        - Only call srandom() once
    
    anerd (1.3-0ubuntu1) raring; urgency=low
    
      * anerd.1, anerd.c, anerd-client, anerd-client.1, AUTHORS,
        debian/anerd-server.upstart, debian/copyright:
        - updated email addresses and author information
    
    anerd (1.2-0ubuntu1) raring; urgency=low
    
      [ Dustin Kirkland ]
      * debian/control, debian/cron.d:
        - use run-one for cronjob
      * anerd-client:
        - clean up client, make more modular, remove some variables, uses pipes
          to keep everything in memory
      * debian/anerd-client.install, debian/anerd-server.install,
        debian/control, debian/copyright, debian/cron.d => debian/anerd-
        client.cron.d, debian/default => debian/anerd-client.default,
        debian/upstart => debian/anerd-server.upstart:
        - split package into a server and client package, with a meta
          package depending on both
      * anerd.1, anerd-client.1:
        - manpage fixes
      * debian/anerd-client.cron.d, debian/anerd-client.default:
        - add some inline documentation
        - use the default file for setting defaults (ie, uncomment)
      * debian/control:
        - bump standards
      * debian/anerd-server.manpages, debian/manpages => debian/anerd-
        client.manpages, Makefile.am:
        - install manpages (perhaps there's a better automake way of doing this?)
      * anerd.c:
        - rename "sum" to "crc"
      * debian/anerd-server.upstart:
        - upstart needs to expect the fork
        - upstart does not need to sudo to the daemon user because anerd does
          this automatically
      * anerd-client:
        - use a $cmd variable populated with correct parameters
      * anerd-client, debian/control:
        - reluctantly add support for netcat
      * anerd-client, anerd-client.1:
        - use a default file for configuration
      * anerd-client:
        - emulate the syslog printing from the server
    
      [ Wesley Wiedenmeier ]
      * anerd.c, anerd-client, debian/default:
        - add ipv6 support
      * anerd.1, anerd.c, anerd-client.1, debian/manpages:
        - added manpages
        - dropped unused global
    
    anerd (1.1-0ubuntu1) quantal; urgency=low
    
      * anerd.c:
        - define the default total exchange size
        - also define and use a default payload size
        - break up the total exchange to a bunch of smaller payloads, to increase
          the randomness of UDP packet ordering and timing
        - improve some inline documentation
        - lower logging to debug from info
        - allocate an extra byte for the data binary string
        - use a separate pointer for segmenting and moving through the data string
        - no need for null-bytes, since binary data could have null bytes within
        - alphabetize includes
        - change perrors to syslog errors
        - move daemon() function
      * Makefile.am:
        - fix up the build, clean out the binary and log files
      * anerd.c, anerd-client, debian/control, debian/cron.d,
        debian/default, debian/install, Makefile.am:
        - drop the anerd client in the C program entirely
        - the C program is now the server exclusively
        - add a bash script client, which can loop over a pool of anerd servers,
          and broadcast to the local network
        - recommend the socat package/utility, which is used to broadcast to the
          local network from the bash script
        - add a cron job to run the anerd-client regularly
        - add a default configuration file for configuring the pool and other
          tunables
        - remove the unnessary install file
    
    anerd (1.0-0ubuntu1) quantal; urgency=low
    
      [ Dustin Kirkland ]
      * initial release
      * === added directory debian, === added directory debian/source,
        anerd, debian/compat, debian/control, debian/copyright,
        debian/install, debian/rules, debian/source/format, debian/upstart:
        - added packaging
      * anerd, anerd.conf, debian/install, debian/upstart:
        - add a configuration file
        - run as daemon (non-root) user
      * anerd.c, AUTHORS, ChangeLog, configure.ac, COPYING,
        debian/copyright, debian/upstart, INSTALL, Makefile.am, NEWS,
        README:
        - ported from python to C
        - added autoconf/automake build
        - changed license from GPLv3 to Apache2.0 for portability to other
          UNIX platforms
      * anerd.conf, debian/control, debian/install, debian/upstart:
        - drop conf file, add options to upstart script
        - update build deps
      * anerd.c:
        - use syslog, open files/sockets only once per fork
        - catch all responses to a client broadcast
        - use a common function for salt calculation
        - implement a very simple checksum of random data
        - use uint64_t for platform compatibility
        - add entropy to pool in client read
        - simplify salt generation
        - simplify log printing
        - whitespace changes only, 80 char width
      * debian/install:
        - drop installation of default file
    
      [ Wesley Wiedenmeier ]
      * anerd.c:
        - use getopt for command line parsing
        - Modified code to fork twice then kill the parent process,
          freeing the terminal that spawns the daemons, added daemonize()
          function to safely daemonize the program.
        - Improved entering into daemon status by moving daemon() call to
          after intilization of server and client, so that errors
          encountered in intilization are written to the terminal.
    8321431c