dkim-milter (2.6.0.dfsg-1ubuntu2.1) intrepid-security; urgency=low * SECURITY UPDATE: A key record with an empty "p=" value (i.e. a revoked key) will cause the filter to crash from an assertion failure. (LP: #319468) - debian/patches/01_verify_right.dpatch: Adjust libkim/dkim.c, libkim/dkim-tables.c, libdkim/Makefile.m4, and adds libkim/t-test125 to return DKIM_STAT_REVOKED when appropriate, and add translation sting for DKIM_SIGERROR_KEYREVOKED -- Steve Stalcup Tue, 20 Jan 2009 23:10:46 -0500 dkim-milter (2.6.0.dfsg-1ubuntu2) intrepid; urgency=low * Fix dkim-filter init by removing extraneous merge bits left behind -- Scott Kitterman Mon, 04 Aug 2008 23:26:55 -0400 dkim-milter (2.6.0.dfsg-1ubuntu1) intrepid; urgency=low * Merge from debian unstable, remaining changes (LP: #240922): - Change debian/rules and debian/control to add dpatch (No patches currently needed) - Disable new umask option by default (not needed since Ubuntu default uses a TCP socket instead of a Unix socket) - Move verification logging default back to /var/log since /var/run is a tempfs in Ubuntu - Change default connection method from socket to localhost port 8891 in debian/dkim-filter.default for Postfix chroot compatibility - In debian/DEBIAN.Readme describe the changes in default configuration and Postfix configuration changes needed to use dkim-filter - Change maintainer to MOTU - Add test/install of pid dir to debian/dkim-filter.postinst to be safe - Change build-dep on libdb4.5-dev | libdb-dev to libdb4.6-dev to help with libdb version reduction -- Scott Kitterman Tue, 22 Jul 2008 03:13:18 -0400 dkim-milter (2.6.0.dfsg-1) unstable; urgency=low * New upstream version. * Removed gentxt.csh from README.Debian and added reference to dkim-genkey. * Added note in NEWS.Debian about keys generated with compromised versions of OpenSSL requiring recreation. * Added quoting to dkim-filter.init and cleaned up the logic around $SOCKET. Closes: #482672 * Applied patch from Scott Kitterman/Ubuntu to start in verify-only mode when no keys are configured. * UseASPDiscard has been once again renamed, this time to ASPDiscard. * Fixed some config file entries in the default dkim-filter.conf. Closes: #490276 -- Mike Markley Sun, 20 Jul 2008 15:46:37 -0700 dkim-milter (2.5.5.dfsg-1) unstable; urgency=low * New upstream version. * The exit code for configuration errors has changed to EX_CONFIG; the init script now detects this and handles it. Closes: #478599 * Added note to README.Debian about changing group ID of socket. Closes: #472888 -- Mike Markley Sat, 03 May 2008 17:43:58 -0700 dkim-milter (2.5.4.dfsg-0ubuntu3) intrepid; urgency=low * Change exit code to trap for no key configured to 78 so the trap works * Start in verification only mode if no key configured instead of just exiting to initial package install can complete (LP: #228877) -- Scott Kitterman Thu, 12 Jun 2008 11:21:50 -0400 dkim-milter (2.5.4.dfsg-0ubuntu2) hardy; urgency=low * 01-partial-signatures.dpatch: Upstream patch for LP: #220863 * Make build-stamp depend on patch-stamp for proper patching order -- John Dong Tue, 22 Apr 2008 23:28:28 -0400 dkim-milter (2.5.4.dfsg-0ubuntu1) hardy; urgency=low * New upstream (mostly) bug fix release (LP: #218893) - Adds "LogWhy" configuration parameter and "-W" command line flag for enhanced debugging operations - Several significant bug fixes -- Scott Kitterman Thu, 17 Apr 2008 17:22:39 -0400 dkim-milter (2.5.2.dfsg-1ubuntu1) hardy; urgency=low * Merge from Debian unstable (LP: #210641). Remaining Ubuntu changes: - Change debian/rules and debian/control to add dpatch (No patches currently needed) - Disable new umask option by default (not needed since Ubuntu default uses a TCP socket instead of a Unix socket) - Move verification logging default back to /var/log since /var/run is a tempfs in Ubuntu - Change default connection method from socket to localhost port 8891 in debian/dkim-filter.default for Postfix chroot compatibility - In debian/DEBIAN.Readme describe the changes in default configuration and Postfix configuration changes needed to use dkim-filter - Change maintainer to MOTU - Add test/install of pid dir to debian/dkim-filter.postinst to be safe - Change build-dep on libdb4.5-dev | libdb-dev to libdb4.6-dev to help with libdb version reduction -- Scott Kitterman Wed, 02 Apr 2008 00:06:43 -0400 dkim-milter (2.5.2.dfsg-1) unstable; urgency=low * New upstream version. * README.Debian: Updated draft URL for sender-auth-header. * Applied upstream patch to revert to DB_HASH for backwards compatibility with older releases' dkim-stats databases. -- Mike Markley Sun, 30 Mar 2008 22:04:17 -0700 dkim-milter (2.5.1.dfsg-0ubuntu1) hardy; urgency=low * New upstream release (LP: #204597) - Additional bug fixes - Repack tarball to remove non-free IETF RFCs and internet drafts * Merge from debian unstable, remaining changes: - Change debian/rules and debian/control to add dpatch (No patches currently needed) - Disable new umask option by default (not needed since Ubuntu default uses a TCP socket instead of a Unix socket) - Move verification logging default back to /var/log since /var/run is a tempfs in Ubuntu - Change default connection method from socket to localhost port 8891 in debian/dkim-filter.default for Postfix chroot compatibility - In debian/DEBIAN.Readme describe the changes in default configuration and Postfix configuration changes needed to use dkim-filter - Change maintainer to MOTU - Add test/install of pid dir to debian/dkim-filter.postinst to be safe - Change build-dep on libdb4.5-dev | libdb-dev to libdb4.6-dev to help with libdb version reduction - Patches now applied upstream -- Scott Kitterman Fri, 21 Mar 2008 07:26:10 -0400 dkim-milter (2.5.0.dfsg-1) unstable; urgency=low * New upstream version. * README.Debian: - Updated draft URLs. - Updated link to DomainKeys draft to point at RFC 4870. - Removed now-irrelevant bits about lack of SSP support. - Added note about renaming of conf option UseSSPDeny to UseASPDiscard * Updated dkim-filter.conf to reflect new naming for UseASPDiscard * Upstream now supports SIGUSR1 for reloading config file; this has been implemented as the reload action in the init script. * Upstream now installs the dkim-filter binary in /usr/sbin by default; the init script has been updated to reflect this. * Applied patch from SF#1911328 for breakage in OmitHeaders. * Applied patch from SF#1912332 for issues with Statistics files. -- Mike Markley Mon, 17 Mar 2008 00:36:13 -0700 dkim-milter (2.4.4.dfsg-1ubuntu1) hardy; urgency=low * Merge from debian unstable, remaining changes: - Change debian/rules and debian/control to add dpatch (No patches currently needed) - Disable new umask option by default (not needed since Ubuntu default uses a TCP socket instead of a Unix socket) - Move verification logging default back to /var/log since /var/run is a tempfs in Ubuntu - Change default connection method from socket to localhost port 8891 in debian/dkim-filter.default for Postfix chroot compatibility - In debian/DEBIAN.Readme describe the changes in default configuration and Postfix configuration changes needed to use dkim-filter - Change maintainer to MOTU - Add test/install of pid dir to debian/dkim-filter.postinst to be safe - Change build-dep on libdb4.5-dev | libdb-dev to libdb4.6-dev to help with libdb version reduction -- Scott Kitterman Fri, 08 Feb 2008 21:08:54 -0500 dkim-milter (2.4.4.dfsg-1) unstable; urgency=low * New upstream version. * Updated Standards-Version to 3.7.3 -- Mike Markley Thu, 31 Jan 2008 00:18:47 -0800 dkim-milter (2.4.4.dfsg-0ubuntu1) hardy; urgency=low * New upstream release - Repacked upstream tarball to remove non-free IETF RFCs and internet drafts -- Scott Kitterman Mon, 28 Jan 2008 00:03:08 -0500 dkim-milter (2.4.3.dfsg-0ubuntu1) hardy; urgency=low * New upstream release - Repacked upstream tarball to remove non-free IETF RFCs and internet drafts * Bump standards version to 3.7.3 without further change -- Scott Kitterman Sat, 19 Jan 2008 20:06:36 -0500 dkim-milter (2.4.1.dfsg-1) unstable; urgency=low * New upstream version. * Enabled AR_RES_MANUAL, which is required to use arlib with IPv6 addresses in /etc/resolv.conf. This, along with a fix for in this release for upstream bug #1852618, also Closes: #450711. -- Mike Markley Sat, 22 Dec 2007 15:36:19 -0800 dkim-milter (2.4.0.dfsg-1ubuntu2) hardy; urgency=low * Note: The following Ubuntu change is included, but not documented in the last revision (LP: #175291): - Change debian/rules and debian/control to add dpatch (No patches currently needed) * Disable new umask option by default (not needed since Ubuntu default uses a TCP socket instead of a Unix socket) * Move verification logging default back to /var/log since /var/run is a tempfs in Ubuntu -- Scott Kitterman Mon, 10 Dec 2007 12:47:57 -0500 dkim-milter (2.4.0.dfsg-1ubuntu1) hardy; urgency=low * Merge from Debian unstable. Remaining Ubuntu changes: - Change default connection method from socket to localhost port 8891 in debian/dkim-filter.default for Postfix chroot compatibility - In debian/DEBIAN.Readme describe the changes in default configuration and Postfix configuration changes needed to use dkim-filter - Change maintainer to MOTU - Add test/install of pid dir to debian/dkim-filter.postinst to be safe -- Scott Kitterman Sat, 08 Dec 2007 23:30:30 -0500 dkim-milter (2.4.0.dfsg-1) unstable; urgency=low * Updated IETF document URLs in README.Debian. Closes: #449464 * Corrected README.Debian reference in init script. Closes: #452588 * Updated init script and default file to use somewhat more clear local: prefix for local sockets. Closes: #452603 * Removed umask handling from init script and replaced it with new UMask option in dkim-filter.conf. * Removed the SELECT_SIGN_HEADER feature from site.config.m4 because it's now activated by default. * Enabled the SELECTOR_HEADER feature. * Added dkim-genkey, dkim-testkey, and dkim-testssp utilities. * gentxt.csh has been obsoleted by dkim-genkey and removed from the upstream distribution and the examples directory. -- Mike Markley Sun, 02 Dec 2007 23:19:41 -0800 dkim-milter (2.3.2.dfsg-1ubuntu1) hardy; urgency=low * Merge from Debian unstable (LP: #159680). Remaining Ubuntu changes: - Change default connection method from socket to localhost port 8891 in debian/dkim-filter.default for Postfix chroot compatibility - In debian/DEBIAN.Readme describe the changes in default configuration and Postfix configuration changes needed to use dkim-filter - Change maintainer to MOTU - Add test/install of pid dir to debian/dkim-filter.postinst to be safe - Change debian/rules and debian/control to add dpatch (No patches currently needed) -- Scott Kitterman Sun, 04 Nov 2007 12:50:36 -0500 dkim-milter (2.3.2.dfsg-1) unstable; urgency=low * New upstream version * Since the filter can be used with more MTAs than just Sendmail, the short description has been reworded. Closes: #436922 * libdkim-dev package section should be libdevel, not devel * Fixed another thinko in init script socket. Closes: #445145 * Attempt to identify & clean up after stale socket files that can be left behind after an unclean exit * Rename libdkim2 and libdkim-dev to libsmdkim2 and libsmdkim-dev since there's already a libdkim0/libdkim-dev. The library and header files have also been moved to /usr/lib/libsmdkim and /usr/include/libsmdkim to prevent conflicts with the existing package. * Enable arlib resolver and DNS_UPGRADE feature -- Mike Markley Fri, 26 Oct 2007 02:46:17 -0700 dkim-milter (2.0.2.dfsg-1ubuntu1) hardy; urgency=low * Merge from Debian unstable. Remaining Ubuntu changes: - Change default connection method from socket to localhost port 8891 in debian/dkim-filter.default for Postfix chroot compatibility - In debian/DEBIAN.Readme describe the changes in default configuration and Postfix configuration changes needed to use dkim-filter - Change maintainer to MOTU - Add test/install of pid dir to debian/dkim-filter.postinst to be safe - Change debian/rules and debian/control to add dpatch (No patches currently needed) -- Scott Kitterman Tue, 23 Oct 2007 12:16:40 -0400 dkim-milter (2.0.2.dfsg-1) unstable; urgency=low * New upstream version * Created standalone libdkim2 and libdkim-dev packages * Install RELEASE_NOTES as upstream changelog * Fixed thinko in init script default socket * Add v= tag to example record in README.Debian since, as Scott Kitterman pointed out, it's now mandatory. Closes: #433717 * Create $RUNDIR in init script if it doesn't exist. Closes: #433718 -- Mike Markley Sun, 05 Aug 2007 16:31:50 -0700 dkim-milter (1.2.0.dfsg-1ubuntu3) gutsy; urgency=low [ Cesare Tirabassi ] * Change debian/rules and debian/control to add dpatch [ Scott Kitterman ] * Backfit patches from dkim-milter 2.0 development: - Add cname.dpatch - Add 64_bit_config.dpatch - Add b_not_eol.dpatch - Add dkim-cache-rwlock-fix.dpatch -- Scott Kitterman Tue, 11 Sep 2007 23:40:56 -0400 dkim-milter (1.2.0.dfsg-1ubuntu2) gutsy; urgency=low * Clean up change from Unix socket to TCP socket: - Make TCP socket default $SOCKET in debian/dkim-filter.default - Change debian/dkim-filter.init to use $SOCKET from .default if provided but fall back to Unix socket if a .default isn't provided. - Update comments in debian/dkim-filter.default and debian/DEBIAN.Readme * Add test/install of pid dir to debian/dkim-filter.postinst to be safe -- Scott Kitterman Thu, 16 Aug 2007 15:55:47 -0400 dkim-milter (1.2.0.dfsg-1ubuntu1) gutsy; urgency=low * Because /var/run is a tempfs in Ubuntu, add test/install of pid dir in debian/dkim-filter.init * Change default connection method from socket to localhost port 8891 in debian/dkim-filter.default and comment out socket in debian/dkim-filter.init for Postfix chroot compatibility * In debian/DEBIAN.Readme describe the changes in default configuration and Postfix configuration changes needed to use dkim-filter * Change maintainer to MOTU -- Scott Kitterman Wed, 18 Jul 2007 02:46:06 +0000 dkim-milter (1.2.0.dfsg-1) unstable; urgency=low * New upstream version * Support setting listening socket in /etc/default/dkim-filter * Minor rephrasing of deluser test in postrm so the if block can be later extended if needed * Fixes for socket permissions; Closes: #428392 - Create dkim-filter group and assign as primary GID of same user in postinst - Set umask in init script to force group writable socket - dkim-filter now picks up primary GID of its run user - Added a doc note for Postfix users who need write permissions to the socket * Remove pidfile on normal shutdown -- Mike Markley Tue, 26 Jun 2007 20:22:10 -0700 dkim-milter (1.0.0.dfsg-1) unstable; urgency=low * New upstream version * Removed bits to rename dkim-filter.conf.4 to dkim-filter.conf.5 since it's been corrected upstream * Define confNROFF to /bin/true. Lack of nroff was causing the target install-docs to fail, resulting in man pages not being installed. nroff is only needed here for catman pages, which we don't install. Closes: #425324 * Updated conf file comments to reflect new default signing algorithm version rfc4871 * Made postrm deluser conditional on deluser availability -- Mike Markley Thu, 24 May 2007 22:27:04 -0700 dkim-milter (0.8.0.dfsg-1) unstable; urgency=low * New upstream version * Fixed spurious : in init script restart stanza. * KeyList comments in dkim-filter.conf had KeyFile instead of KeyList as the commented-out option; fixed. * Removed dkim-stats patch as it's been integrated upstream * Removed dkim-stats manpage for same reason * Removed _FFR_REPORTINFO & _FFR_QUARANTINE; they've been activated upstream * Added new _FFR_ZTAGS to provide DiagnosticDirectory option * Add -L/usr/lib/libmilter to confLIBDIRS to support libmilter0 -> libmilter1 transition. Also fixes FTBFS and Closes: #423758. -- Mike Markley Sat, 19 May 2007 14:07:02 -0700 dkim-milter (0.7.0.dfsg-1) unstable; urgency=low * New upstream version * Reversioned source package with .dfsg since we've repackaged it with IETF documents removed * Added SET_REPLY feature to compile options * Strategic rewording of description to reference upstream name and ensure we can be found via a search * Versions 0.6.5 and above exit with EX_USAGE if no key & selector are configured. The init script now catches this cleanly and points towards the README, which allows clean initial installs. In the near future, this will likely be supplemented with a key generation helper in postinst. * Removed _FFR_MULTIPLE_KEYS and _FFR_OMIT_HEADERS from site.config.m4 since they're now enabled by default * Added _FFR_STATS and requisite build-deps on libdb4.5-dev | libdb-dev * Applied patch for dkim-stats from Graham Murray on dkim-milter-discuss -- Mike Markley Sat, 05 May 2007 19:12:39 -0700 dkim-milter (0.6.4-1) unstable; urgency=low * New upstream version * Initial upload to Debian archive -- Mike Markley Sat, 21 Apr 2007 20:05:04 -0700