File: changelog

package info (click to toggle)
dogtag-pki 10.10.2-3
  • links: PTS, VCS
  • area: main
  • in suites: bullseye, sid
  • size: 74,096 kB
  • sloc: java: 329,656; sh: 290,728; python: 47,626; cpp: 38,497; ansic: 30,300; javascript: 26,885; perl: 9,541; xml: 5,519; jsp: 2,246; makefile: 705; sql: 96; exp: 8
file content (718 lines) | stat: -rw-r--r-- 27,360 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
dogtag-pki (10.10.2-3) unstable; urgency=medium

  * Add python3-ldap to python3-pki-base Depends. Thanks, Francisco
    Vilmar Cardoso Ruviaro and Rene Luria! (Closes: #985340)
  * Move p11-kit-trust.so to pki-tools, add p11-kit-modules to pki-tools
    Depends. (Closes: #986080)
  * Update gbp.conf.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 14 Apr 2021 11:02:32 +0300

dogtag-pki (10.10.2-2) unstable; urgency=medium

  * CVE-2021-20179.diff: Fix renewal profile approval process.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 12 Mar 2021 16:29:17 +0200

dogtag-pki (10.10.2-1) unstable; urgency=medium

  * New upstream release.
  * fix-tomcat-paths.diff: Fix some dangling symlinks to point to the
    tomcat9/skel/conf files.
  * control: Add dependencies on openssl.
  * control: Add libjaxp1.3-java to build-depends and pki-base-java
    depends.
  * control, fix-tomcat-jars.diff: Updated to use correct servlet.jar,
    drop libservlet3.1-java from dependencies.
  * control: Move pki-tools to pki-base-java Suggests to avoid a
    circular dependency. (Closes: #977418)
  * use-bash.diff: Force bash only for pkidaemon, where it's actually
    needed, and fix syntax for scripts/config. (Closes: #963049)

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 16 Dec 2020 15:56:20 +0200

dogtag-pki (10.10.1-1) unstable; urgency=medium

  * New upstream release.
  * control: Pki-tools should depend on pki-base-java instead of just
    pki-base.
  * fix-runuser-path.diff: Fix path to /sbin/runuser.
  * control: Add python3-pki-base to pki-tools depends.
  * control: Bump libtomcatjss-java dependencies.
  * control: Add python3-ldap to build-depends.

 -- Timo Aaltonen <tjaalton@debian.org>  Sun, 06 Dec 2020 10:12:21 +0200

dogtag-pki (10.10.0-1) unstable; urgency=medium

  * New upstream release.
  * patches: Refreshed, fix-java11-dependencies.diff and fix-pki-java-
    path.diff dropped, upstream.
  * control: Bump jss and tomcatjss dependencies.
  * control: Migrate to libcommons-lang3-java.
  * control, pki-server.install, rules: Add support for systemd
    notifications, add libjna-java to depends.
  * pki-tools, copyright: Java and native-tools got moved, update paths.

 -- Timo Aaltonen <tjaalton@debian.org>  Mon, 02 Nov 2020 09:23:07 +0200

dogtag-pki (10.9.4-1) unstable; urgency=medium

  * New upstream release.
  * control: Fix pki-base-java openjdk depends, bump it to 11.
  * rules: Set P11_KIT_TRUST.
  * add-more-deps.diff: Dropped, upstream.
  * fix-java11-dependencies.diff: Make sure the necessary directories
    are created before adding symlinks to jars.
  * rules: Add more cruft to remove on dh_auto_clean.
  * revert-support-jdk8-jdk11-rpm-builds.diff: Dropped, fix PKI_JAVA_PATH
    instead.
  * Add pki.conf to service file environment.
  * control: Bump dependency on libjss-java.

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 17 Sep 2020 11:45:27 +0300

dogtag-pki (10.9.2-1) unstable; urgency=medium

  * New upstream release.
  * control, add-more-deps.diff: Add jaxb-impl and javax.activation to server
    dependencies due to jdk11.
  * source: Add some doc images to extend-diff-ignore.

 -- Timo Aaltonen <tjaalton@debian.org>  Mon, 24 Aug 2020 23:32:11 +0300

dogtag-pki (10.9.1-2) unstable; urgency=medium

  * pki-base.postinst: Drop --silent. (Closes: #963048)

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 14 Aug 2020 12:43:32 +0300

dogtag-pki (10.9.1-1) unstable; urgency=medium

  * New upstream release.
  * fix-javadoc-build.diff: Dropped, upstream.
  * server.install: Updated.
  * debian-support.diff: Fix more hardcodings of /etc/sysconfig.
  * patches: Refreshed.
  * rules: Set PKI_JAVA_PATH.
  * rules: Drop obsolete WITH_PYTHON options.
  * revert-support-jdk8-jdk11-rpm-builds.diff: This commit breaks the java path.
  * ci: Disable reprotest, it gets stuck and times out.
  * create-target-wants.diff: Add an entry to the log if this is
    triggered.
  * Add a debianized service file for pki-tomcatd-nuxwdog.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 14 Aug 2020 09:41:10 +0300

dogtag-pki (10.9.0~a2-2) experimental; urgency=medium

  * server.install: Updated.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 17 Jun 2020 14:04:35 +0300

dogtag-pki (10.9.0~a2-1) experimental; urgency=medium

  * New upstream prerelease.
  * rules: Fix java version in pki.conf.
  * Drop pki-server upgrade from postinst, and drop --validate option
    from the systemd service as it's gone.
  * patches: Refreshed.

 -- Timo Aaltonen <tjaalton@debian.org>  Tue, 16 Jun 2020 20:34:07 +0300

dogtag-pki (10.9.0~a1-1) experimental; urgency=medium

  * New upstream prerelease.
  * watch: Updated.
  * patches: Refreshed.
  * control, rules: Build with default-jdk, bump jss, tomcatjss
    dependencies. (Closes: #920725, #921926)
  * control: Add libcommons-net-java to depends.
  * fix-javadoc-build.diff: Fix building the javadoc.
  * install: Updated, nsutil got folded in cmsutil.
  * copyright: Don't exclude the fonts.

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 28 May 2020 02:16:42 +0300

dogtag-pki (10.8.3-3) unstable; urgency=medium

  * use-bash.diff: Added all scripts that source scripts/config.
  * control: Add libstax-java to pki-base-java depends in order to
    silence noise from the jar scanner.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 10 Apr 2020 11:47:09 +0300

dogtag-pki (10.8.3-2) unstable; urgency=medium

  * control: Mark themes and javadoc M-A: foreign.
  * control: Bump policy to 4.5.0.
  * control: Add python3-pytest-runner as a build-dep.
  * fix-tomcat-paths.diff: Use /usr/share/tomcat9/bin/version.sh when
    determining the tomcat version.
  * control: Add python3-ipahealthcheck-core to pki-server depends.

 -- Timo Aaltonen <tjaalton@debian.org>  Mon, 30 Mar 2020 14:52:56 +0300

dogtag-pki (10.8.3-1) unstable; urgency=medium

  * New upstream release.
  * patches: Refreshed.
  * control: Add python3-setuptools to build-depends.
  * fix-healthcheck-install.diff: Use debian layout when installing the
    healthcheck stuff.
  * install: Updated.
  * Add debian/gitlab-ci.yml.
  * gbp.conf: Update for the experimental branch.
  * tests: Add sudo to Depends.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 18 Mar 2020 00:41:13 +0200

dogtag-pki (10.7.4-2) unstable; urgency=medium

  * Use pybuild.

 -- Timo Aaltonen <tjaalton@debian.org>  Sat, 08 Feb 2020 17:35:13 +0200

dogtag-pki (10.7.4-1) unstable; urgency=medium

  * New upstream release.
  * tests: Ignore pkidestroy failures.
  * Use debhelper-compat 12.

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 06 Feb 2020 21:13:33 +0200

dogtag-pki (10.7.3-4) unstable; urgency=medium

  * tomcat-start.sh: Dropped everything we don't need from the original
    copy from tomcat9.
  * debian-support.diff: Drop the hunk about disabling
    pki_security_manager, it works fine with defaults.
  * control: Bump pki-base-java dep on libjss-java.
  * fix-tomcat-paths.diff: Cleanups.
  * tests: Redirect dscreate stderr to stdout.
  * control: Drop dependency on pki-base from python3-pki-base. (Closes:
    #940287)

 -- Timo Aaltonen <tjaalton@debian.org>  Tue, 17 Sep 2019 18:22:15 +0300

dogtag-pki (10.7.3-3) unstable; urgency=medium

  * fix-tomcat-paths.diff: We have /etc/default/tomcat9 instead of
    tomcat.conf.
  * pki-tomcatd@.service: Updated to match the upstream version.
  * hardcode-tomcat-version.diff: Dropped, instead pass --tomcat  for
    pki-server migrate in the service file.

 -- Timo Aaltonen <tjaalton@debian.org>  Sat, 14 Sep 2019 00:06:00 +0300

dogtag-pki (10.7.3-2) unstable; urgency=medium

  * Switch to python3. (Closes: #918538, #936435, #935606)
  * tests: Migrate to dscreate, bump 389-ds-base dependency.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 11 Sep 2019 23:40:05 +0300

dogtag-pki (10.7.3-1) experimental; urgency=medium

  * New upstream release.
  * rules: Fix arch:all build.
  * patches: Refreshed, use-new-pkcs11-interface.diff dropped.
  * fix-hamcrest-jar.diff: Fix path to hamcrest jar.
  * pki-tools.install: Updated.
  * rules: Disable Junit tests for now.
  * control: Add go-md2man to build-depends.
  * control: Bump dependency on libldap-java.
  * control: Bump dependency on libjss-java.
  * control: Bump dependency on libtomcatjss-java.
  * server.postinst: Use 'pki-server migrate'.
  * control, rules: Drop obsolete dependencies libjavassist-java,
    libjaxrs-api-java.
  * control: Add keyutils to pki-server depends.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 09 Aug 2019 23:30:54 +0300

dogtag-pki (10.6.10-2) unstable; urgency=medium

  * rules: Fix arch:all build.

 -- Timo Aaltonen <tjaalton@debian.org>  Mon, 29 Jul 2019 14:09:25 +0300

dogtag-pki (10.6.10-1) unstable; urgency=medium

  * Upload to unstable.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 19 Jul 2019 10:09:06 +0300

dogtag-pki (10.6.10-0ubuntu2) eoan; urgency=medium

  * tests: Don't test TPS, pkispawn fails for unknown reasons.

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 09 May 2019 09:27:41 +0300

dogtag-pki (10.6.10-0ubuntu1) eoan; urgency=medium

  * New upstream release.
    - debian-support.diff: Updated
    - run-pki-server-migrate-on-start.diff: Dropped, obsolete
  * hardcode-tomcat-version.diff: Use a real version, not a wildcard.
  * debian-support.diff: Fix a typo with deployment_root.
  * Remove the initscript, add a proper systemd service.
  * control: Drop libnuxwdog-java from depends, nuxwdog merged to dogtag.
  * pki-server.install: Update pki-server-nuxwdog install path.
  * control, rules: Use JDK8 again.
  * pki-tools.install: Updated.
  * control: Bump build-dep on libjss-java.
  * control: Bump dependencies on libtomcatjss-java.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 26 Apr 2019 13:33:51 +0300

dogtag-pki (10.6.8-2) unstable; urgency=medium

  * control: Replace libsrvcore-dev build-dep with 389-ds-base-dev.
  * Migrate to tomcat9.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 07 Dec 2018 10:55:22 +0200

dogtag-pki (10.6.8-1) unstable; urgency=medium

  * New upstream release.
  * control: Bump depends on nuxwdog and tomcatjss.
  * control, use-new-pkcs11-interface.diff: Bump libjss-java depends to
    4.5.1, fix build against jdk9+. (Closes: #893142)
  * patches: Refreshed.
  * control: Add libjackson2-core-java, -databind-java to build-depends.
  * dogtag-pki-server-theme.install: Updated.
  * control, rules: Build-depend on default-jdk again, set JAVA_HOME to
    match.
  * tests: Force C locale so that error messages from python can be shown.
  * control: Bump libresteasy3.0-java dependency for jackson2 provider.
  * control, rules: Replace libjboss-annotations-1.2-api-java with
    libgeronimo-annotation-1.3-spec-java. Drop dependency on
    libscannotation-java.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 05 Dec 2018 22:21:50 +0200

dogtag-pki (10.6.7-1) unstable; urgency=medium

  * New upstream release.
  * server.postinst: Server migration has been moved to the systemd
    unit/initfile, drop it from here.

 -- Timo Aaltonen <tjaalton@debian.org>  Tue, 09 Oct 2018 22:26:07 +0300

dogtag-pki (10.6.6-2) unstable; urgency=medium

  * hardcode-tomcat-version.diff: Our tomcat doesn't have a script to
    query the version, so hardcode it here so that 'pki-server migrate'
    works.
  * run-pki-server-migrate-on-start.diff: Run 'pki-server migrate' on
    startup to match what the systemd service does.

 -- Timo Aaltonen <tjaalton@debian.org>  Mon, 27 Aug 2018 20:30:44 +0300

dogtag-pki (10.6.6-1) unstable; urgency=medium

  * New upstream release.
  * tests: Fix the test loop.
  * control, rules: Add libjboss-annotations-1.2-api-java to pki-server
    depends, add links to lib directories.
  * watch: Updated.
  * copyright: Update excluded files.
  * debian-support.diff: Refreshed.
  * pki-*.install: Updated.
  * rules: Updated cmake variables for default nssdb and theme.
  * control: Bump {build-}depends on libjss-java, libldap-java,
    libtomcatjss-java and libidm-console-framework-java.
  * rules: Remove tomcat/ on clean.

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 23 Aug 2018 09:12:47 +0300

dogtag-pki (10.6.1-1) experimental; urgency=medium

  * New upstream release.
    - drop cve fix, applied upstream
  * control: Add conflicts on libtomcat7-java to pki-server.
  * rules: Replace setting DEB_BUILD_ARCH with including
    architecture.mk.
  * control: Update maintainer address.
  * Bump debhelper to 11.
  * control: Bump policy to 4.1.4.
  * control: Update dogtag-pki description to mention that it's a
    metapackage.
  * control: Add pki-tools to pki-base-java depends. (Closes: #891370)
  * tests: Improve logging, fail properly.

 -- Timo Aaltonen <tjaalton@debian.org>  Sun, 20 May 2018 14:47:13 +0300

dogtag-pki (10.6.0-2) experimental; urgency=medium

  * rules: Build everything in one pass.
  * Fix ACL evaluation in allow,deny mode. (Closes: #893690)
    - CVE-2018-1080

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 18 Apr 2018 15:07:20 +0300

dogtag-pki (10.6.0-1) experimental; urgency=medium

  * New upstream release.
  * control: Update VCS urls.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 18 Apr 2018 00:22:25 +0300

dogtag-pki (10.6.0~beta2-3) experimental; urgency=medium

  * rules: Fix JAVA_HOME, create a symlink to the native jvm dir and
    ship it with pki-server.
  * pki-base.postinst: Modify JAVA_HOME for installed instances on
    upgrade.
  * debian-support.diff: Revert start delay to 5s, use systemctl
    enable/disable.

 -- Timo Aaltonen <tjaalton@debian.org>  Tue, 10 Apr 2018 13:20:34 +0300

dogtag-pki (10.6.0~beta2-2) experimental; urgency=medium

  * pki-tools: Add new manpages.
  * debian-support.diff: Fix keystore permissions.
  * debian-support.diff: Skip systemctl enable/disable.
  * control: Add openjdk-8-jre-headless to pki-base-java depends.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 06 Apr 2018 16:11:04 +0300

dogtag-pki (10.6.0~beta2-1) experimental; urgency=medium

  * New upstream prerelease.
  * patches: Refreshed.
  * control, rules: Build using tomcat 8.5, adjust dependencies to
    match.
  * fix-jar-search.diff: Dropped, upstream
  * rules: Use sql nssdb's by default.
  * debian-support.diff: Bump the delay after starting the instance to 10s.
  * fix-symkey-path.diff: Move symkey.jar handling here from fix-jar-
    search.diff.
  * fix-tomcat-paths.diff: Use tomcat paths provided by Debian,
    merge fix-cli-migrate.diff here.
  * tools: DRMTool links are handled by cmake now, drop .links.
  * rules: Don't clean usr/share/pki/server/lib before dh_install, it's
    jar symlinks now.
  * base.install: Updated.
  * control, rules: Build using JDK8.
  * control: Add python3-distutils to build-depends.
  * rename-logging-config.diff: Dropped, upstream.
  * use-bindsto.diff: Dropped, upstream.
  * fix-cve-2016-1240.diff: Dropped, upstream.
  * debian-support.diff: Tomcat setup upstreamed.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 30 Mar 2018 09:18:41 +0300

dogtag-pki (10.5.5-1) unstable; urgency=medium

  * New upstream release.
  * tests: Add some debugging info, and force the hostname if it isn't
    set.
  * patches: Refreshed.
  * tools.install: Updated.
  * tests: Remove installed instances.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 09 Feb 2018 16:29:06 +0200

dogtag-pki (10.5.3-4) unstable; urgency=medium

  * rules: Remove resteasy-jandex-jaxrs.jar symlink, it looks unused
    anyway. (Closes: #857150)
  * tests: Sleep for 10 seconds between spawning instances, it seems
    racy otherwise.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 05 Jan 2018 10:36:19 +0200

dogtag-pki (10.5.3-3) unstable; urgency=medium

  * control: Add libhttpclient-java, libhttpcore-java, libjaxrs-api-java to
    pki-base-java Depends.
  * rename-logging-config.diff: Rename LOGGING_CONFIG to
    PKI_LOGGING_CONFIG, otherwise catalina startup would fail.
  * fix-jar-search.diff: Fix search for commons-collections3.jar and
    symkey.jar.
  * rules: Link jboss-logging.jar under server/common/lib too.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 22 Dec 2017 14:32:32 +0200

dogtag-pki (10.5.3-2) unstable; urgency=medium

  * control: Add python{,3}-cryptography to pki-base, pki-server and
    python3-pki-base Depends.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 22 Dec 2017 00:52:21 +0200

dogtag-pki (10.5.3-1) unstable; urgency=medium

  * New upstream release.
  * watch: Updated, upstream provides proper tags now.
  * copyright: Add Files-Excluded for tarball rebuild.
  * patches: Drop fix-CVE-2017-7537.diff, refresh others.
  * use-usr-bin.diff: Replace with an upstreamed patch.
  * Drop fix-junit-jar.diff, add fix-jar-search.diff and modify debian-
    support.diff and rules to not hardcode distro-specific jar names.
  * control: Add libslf4j-java, libhttpclient-java, libhttpcore-java to
    build-depends/depends.
  * control: Bump dependency on libjss-java.
  * rules: Use dh_missing, and drop creating links under subsys dirs as
    that is handled by CMake now.
  * *install: Added new files to -base, -server and -tools.
  * control: Bump dependency on libldap-java.
  * use-bindsto.diff: Fix pki-tpsd.service to use BindsTo instead of
    BindTo. (Closes: #857186)

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 21 Dec 2017 18:11:15 +0200

dogtag-pki (10.3.5+12-6) unstable; urgency=medium

  * Fix autopkgtest to be robust in the face of changed iproute2 output.

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 21 Dec 2017 10:59:59 +0200

dogtag-pki (10.3.5+12-5) unstable; urgency=medium

  * rules: Add a link to jboss-logging.jar.
  * pki-base, pki-server: Fix postinst, strip cruft from the version string.
  * control: Use tomcat8.0. (Closes: #823332, #846714)
  * control: Add libcommons-httpclient-java to build-depends, and
    pki-base-java depends.
  * control: Use resteasy3.0.
  * fix-CVE-2017-7537.diff: Change defaults for cmc plugin. (Closes:
    #869261)
  * control: Bump dependency on libtomcajss-java to verify we have the
    correct build.

 -- Timo Aaltonen <tjaalton@debian.org>  Sat, 21 Oct 2017 11:58:04 +0300

dogtag-pki (10.3.5+12-4) unstable; urgency=medium

  * pki-tomcatd.init: If no instance is configured, the initscript
    machinery would return error value 5 or 6. This messes up systemd, so
    just use 'exit 1' on every non-zero return value. (LP: #1664453)
  * pki-server.postinst: Clarify pki-tomcatd initial start failure
    message a bit.
  * Depend libresteasy-java << 3.1.0, because the new on doesn't work
    even after fixing the build.
  * pki-tools.links: Fix the convenience links DRMTool -> KRATool.
    (Closes: #857148)
  * pki-base.postinst: Force recreating pki.version if upgrading from
    older than 10.3.5-1. (LP: #1691655)

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 18 May 2017 09:10:17 +0300

dogtag-pki (10.3.5+12-3) unstable; urgency=medium

  * server.postrm: Remove /etc/default/pki-tomcat on purge.
  * create-target-wants.diff: Create target.wants-directories in the
    python deployment scriptlet too.

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 16 Feb 2017 11:09:38 +0200

dogtag-pki (10.3.5+12-2) unstable; urgency=medium

  * base, server, tools: Add new manpages.
  * use-resteasy-legacy.diff: Fix javadoc build.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 15 Feb 2017 13:24:15 +0200

dogtag-pki (10.3.5+12-1) unstable; urgency=medium

  * New upstream snapshot. Version number is derived from the Fedora
    release, 10.3.5+12 maps to pki-core 10.3.5-12 on Fedora.
  * sync-rpm-10.3.5-7.diff: Dropped.
  * use-resteasy-legacy.diff, control: Port to resteasy 3.1.0-2 which
    ships resteasy-legacy.jar. (LP: #1664457)

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 15 Feb 2017 11:06:47 +0200

dogtag-pki (10.3.5-7) unstable; urgency=medium

  * debian-support: Fix an upgrade script to use /etc/default instead of
    /etc/sysconfig.
  * debian-support: Fix nuxwdog to use /etc/default in each case.
  * create-target-wants.diff: Create the systemd target.wants
    directories on demand.
  * pki-server.dirs: Drop target.wants-directories, they'd just get
    deleted by systemd helpers and are now created on demand anyway.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 18 Jan 2017 04:20:42 +0200

dogtag-pki (10.3.5-6) unstable; urgency=medium

  * sync-rpm-10.3.5-7.diff: Pull changes from upstream branch needed by
    newer freeipa.
  * tools.install: Add CMCEnroll manpage.

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 01 Dec 2016 10:08:50 +0200

dogtag-pki (10.3.5-5) unstable; urgency=medium

  * server: Add /etc/dogtag to dirs, clean up stuff created by pkispawn
    on purge.
  * control: Add libscannotation-java to server depends.
  * use-bash.diff: Revert some of 4708983b8 to use bash instead of sh in
    some places where checkbashisms reported warnings.
  * fix-cve-2016-1240.diff: Fix CVE-2016-1240 in scripts/operations
    which has code copied from the tomcat initscript.
  * pki-{ca,kra,ocsp,tks,tps}.postrm: Remove logfiles on purge.

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 27 Oct 2016 17:31:23 +0300

dogtag-pki (10.3.5-4) unstable; urgency=medium

  * tests: Add simple autopkgtest that runs setup-ds and pkispawn.
  * server.postinst: Tell pki-server migrate to migrate to tomcat8.
  * debian-support.diff: Fix some jar symlinks, and drop extra / from
    config dirs.
  * control: Add libcommons-collections3-java, libcommons-dbcp-java,
    libcommons-pool-java, libjboss-logging-java, libsymkey-java to pki-
    server Depends.

 -- Timo Aaltonen <tjaalton@debian.org>  Mon, 03 Oct 2016 19:30:15 +0300

dogtag-pki (10.3.5-3) unstable; urgency=medium

  * rules: Fix path to tomcat8 catalina and util jars, add api and
    util-scan jars.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 30 Sep 2016 18:06:36 +0300

dogtag-pki (10.3.5-2) unstable; urgency=medium

  * Migrate to tomcat8.
  * server.postinst: Run pki-migrate for tomcat migration.
  * fix-cli-migrate.diff: Replace tomcat path hardcoding with ours.
  * rules: Set JAVA_HOME as a confflag so that it's added to pki.conf.
  * copyright: Updated.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 30 Sep 2016 15:42:40 +0300

dogtag-pki (10.3.5-1) unstable; urgency=medium

  * New upstream release.
    - support-only-tomcat.diff, use-dot-instead-of-source.diff:
      dropped, upstream
    - fix-debian-paths-for-pki-cli.diff dropped, unnecessary
    - refresh patches
  * pki-tools: Add more manpages to install, DRMTool got renamed to
    KRATool so add convenience links.
  * control:
    - bump libjss-java build-dep
    - add python-nss, python-requests and python-urllib3 to build-depends
    - add python-nss and python-urllib3 to pki-base depends
    - add libjaxrs-api-java to build-depends
    - move python-ldap and python-lxml depends from pki-base to pki-server
  * rules: Fix jackson/jaxrs jar names so build finds them.
  * Split pki-base-java from -base, add python3-pki-base.
  * server.install: Simplify a bit.
  * debian-support.diff: Force bash in base/server/scripts/operations.
  * copyright: Updated.
  * {base,server}.postinst: Lintian fixes, don't use full path for
    binaries.
  * patches: Merge fix-default-settings.diff into debian-support.diff,
    and modify d-s a bit more for upstream inclusion.

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 22 Sep 2016 16:07:26 +0300

dogtag-pki (10.2.6+git20160317-2) unstable; urgency=medium

  * pki-{ca,kra,ocsp,tks,tps}.dirs: Deleted, the obsolete targets are
    long gone anyway.
  * control: Drop selinux-policy-dev from build-depends. (Closes:
    #821810)
  * pki-base.postinst: Strip extra cruft from version number for pki-
    upgrade, only the upstream base version matters. (Closes: #821909)

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 18 May 2016 10:48:27 +0300

dogtag-pki (10.2.6+git20160317-1) unstable; urgency=medium

  * update to current 10_2_6_BRANCH.
    - refresh patches
    - add pki-user-membership.1 to pki-tools
    - tomcat7-build-fix.diff: Dropped, upstream.
  * rules: Mark systemd units disabled by default.
  * use-usr-bin.diff: Updated.
  * use-root-homedir.diff: Force home_dir to be /root, so that ipa works
    right.
  * control: Add conflicts on strongswan-pki.
  * pki-server: Remove default.cfg, logs on purge. (Closes: #814636)
  * pki-base: Remove pki.conf on purge. (Closes: #804312)

 -- Timo Aaltonen <tjaalton@debian.org>  Tue, 05 Apr 2016 19:37:03 +0300

dogtag-pki (10.2.6-3) unstable; urgency=medium

  * pki-base.postrm: Remove upgrade logs on purge. (Closes: #801139)
  * use-usr-bin.diff: Fix paths to binaries to use /usr/bin instead of
    /bin.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 08 Jan 2016 02:18:17 +0200

dogtag-pki (10.2.6-2) unstable; urgency=medium

  * pki-server.dirs: Add pki-tomcatd-nuxwdog.target.wants.
  * base.postrm: No need to remove /etc/pki here.
  * debian-support.diff: Drop /etc/default/tomcat8, was a leftover from
    t8 testing. (Closes: #800558)
  * debian-support.diff: Import /lib/lsb/init-functions in
    scripts/operations. (Closes: #800559)

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 01 Oct 2015 08:14:52 +0300

dogtag-pki (10.2.6-1) unstable; urgency=medium

  * New upstream release based on DOGTAG_10_2_6_FEDORA_22_23_20150718 tag.
  * Refresh patches, drop upstreamed ones.
  * control: Drop libcrypt-ssleay-perl and libxml-perl from depends.
  * pki-tools.install: Add pki-ca-profile manpage.
  * control: Add python-sphinx to build-depends.
  * fix-jackson-paths.diff: Dropped, obsolete. Refresh other patches
    to drop unused jackson includes.
  * pki-server.install: Add sbin/pki-server.
  * control: strongswan-starter didn't rename it's 'pki' as planned, so
    add an unversioned Conflicts to pki-tools. (Closes: #767561)
  * control: Update vcs-git location (-> dogtag-pki.git).
  * Update patches.
  * control, pki-server.install: Clean up perl stuff, drop pki-setup-
    proxy which is gone.
  * control: Add libnuxwdog-java to build-depends, and pki-server depends.
  * install: Added new manpages, nuxwdog support, html docs to pki-base.
  * debian-support.diff: Fix nuxwdog paths.
  * debian-support.diff: Don't try to manage rc3.d/* symlinks.
  * rules: Symlink jars under subsystem WEB-INF.
  * pki-server.postinst, pki-base.post{inst,rm}: Add pki-upgrade/pki-
    server-upgrade snippets.
  * rules, patches: Explicitly build using tomcat7, and add a dummy
    method. (Closes: #789138)
  * use-dot-instead-of-source.diff: Fix bashisms.
  * debian-support.diff: Fix JNI_JAR_DIR.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 23 Sep 2015 18:29:12 +0300

dogtag-pki (10.2.0-4) unstable; urgency=medium

  * control: Add python-selinux to pki-server depends.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 07 Nov 2014 11:08:29 +0200

dogtag-pki (10.2.0-3) unstable; urgency=medium

  * control: Add Breaks/Replaces on strongswan-starter to pki-tools.
    (Closes: #767561)

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 05 Nov 2014 00:40:10 +0200

dogtag-pki (10.2.0-2) unstable; urgency=medium

  * patches: Fix servlet jar name, and paths to jss4.jar and symkey.jar.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 24 Oct 2014 20:39:24 +0300

dogtag-pki (10.2.0-1) unstable; urgency=low

  * Initial release (Closes: #653606)

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 10 Oct 2014 14:40:12 +0300