1. 08 Jan, 2019 4 commits
    • Faidon Liambotis's avatar
      Release 1.7.2-1 to unstable · 6ab93e26
      Faidon Liambotis authored
      6ab93e26
    • Faidon Liambotis's avatar
      Patch pre-generated manpages instead of docbook · 743061a2
      Faidon Liambotis authored
      1.7.2 added pre-generated manpages to the source tree and removed their
      generation through docbook2x.
      
      We could revert that, but apparently these are the preferred source of
      modification now, as the XMLs have been subsequently removed entirely
      upstream, so patch the manpages and remove the docbook2x dependency.
      
      While at it, rename the patch to "fix_manpage_paths" instead.
      743061a2
    • Faidon Liambotis's avatar
      Use a dedicated "radsecproxy" user to run the daemon · ed2e356e
      Faidon Liambotis authored
      Closes: #872888
      ed2e356e
    • Faidon Liambotis's avatar
      New upstream release + multiple changes · 50adb88d
      Faidon Liambotis authored
      This predates git, and is thus a mega-commit containing these changes:
      
      * New upstream release.
      * Bump Build-Depends to OpenSSL 1.1.0 (libssl-dev), as the new upstream
        version is now compatible with it. (Closes: #859675)
      * Remove --enable-fticks from configure, as it's now default and
        non-optional.
      * Update the shipped /etc/radsecproxy.conf with new (commented out) upstream
        directives.
      * Update debian/upstream/signing-key.asc with the new upstream's key.
      * Update debian/control, debian/copyright and debian/watch with the
        project's new homepage on GitHub.
      * Update debian/copyright with an additional copyright author (SWITCH) and
        to reflect the license change, i.e. to remove GPLv2+ and update to a
        generic 3-clause BSD.
      * Add Vcs-* to point to the package's git at salsa.debian.org.
      * Bump debhelper compat to 11.
      * Bump Standards-Version to 4.3.0.
      50adb88d
  2. 07 Jan, 2019 25 commits
    • Faidon Liambotis's avatar
      Update upstream source from tag 'upstream/1.7.2' · 4df8b7ea
      Faidon Liambotis authored
      Update to upstream version '1.7.2'
      with Debian dir 6b78d26b5f521f8f0b4c5d2487737ecf15d75ae3
      4df8b7ea
    • Faidon Liambotis's avatar
      New upstream version 1.7.2 · a9032ad3
      Faidon Liambotis authored
      a9032ad3
    • Faidon Liambotis's avatar
      Import Debian changes 1.6.9-1 · 81ca4915
      Faidon Liambotis authored
      radsecproxy (1.6.9-1) unstable; urgency=medium
      
        * New upstream release.
        * Bump debhelper compatibility level to 10.
          - Drop dh-systemd build-dependency and the equivalent --with argument.
          - Drop dh-autoreconf build-dependency and the equivalent --with argument.
          - Drop autotools-dev build-dependency.
        * Drop versioned dependency on lsb-base, as it's satisfied by even very old
          Debian releases.
        * Add ProtectSystem, PrivateDevices, PrivateTmp, ProtectHome options to the
          systemd unit for increased security.
        * Bump Standards-Version to 4.0.0.
      81ca4915
    • Faidon Liambotis's avatar
      Import Upstream version 1.6.9 · af8b8a7a
      Faidon Liambotis authored
      af8b8a7a
    • Faidon Liambotis's avatar
      Import Debian changes 1.6.8-1 · 5d91fd45
      Faidon Liambotis authored
      radsecproxy (1.6.8-1) unstable; urgency=medium
      
        * New upstream release.
        * Build against OpenSSL 1.0, as 1.6 series isn't compatible with OpenSSL 1.1.
          (Closes: #828527)
        * Bump Standards-Version to 3.9.8, no changes needed.
        * Depend on lsb-base for /lib/lsb/init-functions.
        * Add hardening build flags (hardening=+all).
      5d91fd45
    • Faidon Liambotis's avatar
      Import Upstream version 1.6.8 · dcbe7b15
      Faidon Liambotis authored
      dcbe7b15
    • Faidon Liambotis's avatar
      Import Debian changes 1.6.7-1 · 1a4db420
      Faidon Liambotis authored
      radsecproxy (1.6.7-1) unstable; urgency=medium
      
        * New upstream release.
        * Point Homepage and debian/watch to the new website.
        * Bump Standards-Version to 3.9.7, no changes needed.
      1a4db420
    • Faidon Liambotis's avatar
      Import Upstream version 1.6.7 · 5cbdf87e
      Faidon Liambotis authored
      5cbdf87e
    • Faidon Liambotis's avatar
      Import Debian changes 1.6.5-1 · 5c0aeb10
      Faidon Liambotis authored
      radsecproxy (1.6.5-1) unstable; urgency=medium
      
        * New upstream release. 
        * Bump Standards-Version to 3.9.6.
        * Verify upstream's GPG signatures; add debian/upstream/signing-key.asc and
          modify debian/watch accordingly.
        * Minor adjustment to the long description. (Closes: #542454)
        * Add --retry to --stop to fix spurious restart issue. Thanks to Michael
          Vogt for the fix. (Closes: #711313)
        * Add build dependency on dh-autoreconf and autoreconf during build time, as
          it helps when adding new architectures to the archive. (Closes: #727952,
          #744500)
        * Add systemd unit file, along with the corresponding dh-systemd
          integration.
        * Switch pid file from /var/run to /run on both init script & systemd unit.
        * Rewrite debian/copyright to the machine-parseable format. 
      5c0aeb10
    • Faidon Liambotis's avatar
      Import Upstream version 1.6.5 · e129a6ff
      Faidon Liambotis authored
      e129a6ff
    • Faidon Liambotis's avatar
      Import Debian changes 1.6.2-1 · 97bd858f
      Faidon Liambotis authored
      radsecproxy (1.6.2-1) unstable; urgency=high
      
        * Urgency set to high for a security release.
        * New upstream release, fixing two security issues:
          - When verifying clients, don't consider config blocks with CA settings
            ('tls') which differ from the one used for verifying the certificate
            chain (RADSECPROXY-43, CVE-2012-4523). Reported by Ralf Paffrath.
          - Fix the issue with verification of clients when using multiple 'tls'
            config blocks for DTLS too (RADSECPROXY-43, CVE-2012-4566). Reported by
            Raphael Geissert.
        * Drop most of debian/patches/fix_manpages, merged upstream.
      97bd858f
    • Faidon Liambotis's avatar
      Import Upstream version 1.6.2 · 1bd41dd6
      Faidon Liambotis authored
      1bd41dd6
    • Faidon Liambotis's avatar
      Import Debian changes 1.6-1 · 70c44905
      Faidon Liambotis authored
      radsecproxy (1.6-1) unstable; urgency=low
      
        * New upstream release.
        * Enable F-Ticks, a new upstream feature.
          - Add build dependency on nettle-dev.
        * Ship upstream's manpages.
          - Add build dependency on docbook2x.
          - Add debian/patches/fix_manpages to adapt the manpage to our filepaths.
        * Ship the radsecproxy-hash binary, used to calculate hashed CSI values.
        * Use unapply-patches & abort-on-upstream-changes local-options.
        * Bump debhelper compat to 9, mainly to enable hardening flags.
        * Bump Standards-Version to 3.9.3, no changes needed. 
        * Add NORDUnet A/S copyright notice to debian/copyright.
      70c44905
    • Faidon Liambotis's avatar
      Import Upstream version 1.6 · 13e513c0
      Faidon Liambotis authored
      13e513c0
    • Faidon Liambotis's avatar
      Import Debian changes 1.5-1 · 3312c1b3
      Faidon Liambotis authored
      radsecproxy (1.5-1) unstable; urgency=low
      
        * New upstream release.
      3312c1b3
    • Faidon Liambotis's avatar
      Import Upstream version 1.5 · 91f6c75d
      Faidon Liambotis authored
      91f6c75d
    • Faidon Liambotis's avatar
      Import Debian changes 1.4.3-1 · fe788d79
      Faidon Liambotis authored
      radsecproxy (1.4.3-1) unstable; urgency=low
      
        * New upstream release. 
        * Change upstream author to Linus Nordberg in debian/copyright. 
        * Switch to 3.0 (quilt) source package format. 
        * Bump debhelper compatibility level to 8.
        * Update Standards-Version to 3.9.2, no changes needed.
      fe788d79
    • Faidon Liambotis's avatar
      Import Upstream version 1.4.3 · 122df949
      Faidon Liambotis authored
      122df949
    • Faidon Liambotis's avatar
      Import Debian changes 1.4-1+squeeze1 · 9406faed
      Faidon Liambotis authored
      radsecproxy (1.4-1+squeeze1) stable-security; urgency=high
      
        * Backport two security fixes from 1.6.1/1.6.2:
          - When verifying clients, don't consider config blocks with CA settings
            ('tls') which differ from the one used for verifying the certificate
            chain (RADSECPROXY-43, CVE-2012-4523). Reported by Ralf Paffrath.
          - Fix the issue with verification of clients when using multiple 'tls'
            config blocks for DTLS too (RADSECPROXY-43, CVE-2012-4566). Reported by
            Raphael Geissert.
      9406faed
    • Faidon Liambotis's avatar
      Import Upstream version 1.4 · 53b6cda6
      Faidon Liambotis authored
      53b6cda6
    • Faidon Liambotis's avatar
      Import Debian changes 1.4-1 · 524e3c0f
      Faidon Liambotis authored
      radsecproxy (1.4-1) unstable; urgency=low
      
        * New upstream release.
        * Add $remote_fs and $syslog to init script's Required-Start and $named to
          Should-Start.
        * Ship naptr-eduroam.sh script along with the README in examples.
      524e3c0f
    • Faidon Liambotis's avatar
      Import Debian changes 1.3.1-1 · c7b44e91
      Faidon Liambotis authored
      radsecproxy (1.3.1-1) unstable; urgency=low
      
        * New upstream release.
        * Bump Standards-Version to 3.8.2, no changed needed. 
        * Build-Depend on debhelper >= 7.0.50 because of the use of overrides in dh. 
      c7b44e91
    • Faidon Liambotis's avatar
      Import Upstream version 1.3.1 · b9a5a062
      Faidon Liambotis authored
      b9a5a062
    • Faidon Liambotis's avatar
      Import Debian changes 1.3-1 · 949a1099
      Faidon Liambotis authored
      radsecproxy (1.3-1) unstable; urgency=low
      
        * Initial release. (Closes: #532481)
      949a1099
    • Faidon Liambotis's avatar
      Import Upstream version 1.3 · 6e102346
      Faidon Liambotis authored
      6e102346