opendkim (2.9.2-2+deb8u1) stable; urgency=medium

  * Fix relaxed canonicalization of folded headers breaks signatures, fix
    backported from upstream 2.11.0 (Closes: #840015)

 -- Scott Kitterman <scott@kitterman.com>  Sat, 29 Oct 2016 16:41:59 -0400

opendkim (2.9.2-2) unstable; urgency=medium

  * Cherry-pick bug fixes from upstream development of version 2.10
    - 0000-Replace-overlapping-strlcpy-with-memmove-in-dkim_get.patch
    - 0000-Treat-CR-as-end-of-line.patch
    - 0001-Fix-bug-177-Plug-leaking-result-structures-when-Open.patch
    - 0002-LIBOPENDKIM-Tighten-relaxed-modes-to-break-on-only-D.patch
    - 0003-Feature-request-178-Add-F-flag-to-opendkim-genzone-s.patch
    - 0004-Be-careful-about-what-spaces-we-toss-in-header-field.patch
    - 0005-Make-dkim_header-more-strict-about-the-inputs-it-wil.patch
    - 0006-LIBOPENDKIM-If-a-signature-fails-to-verify-for-eithe.patch
    - 0009-Handle-parameters-safely-in-repute.php.-Reported-by-.patch
    - 0010-Handle-empty-values-of-i-reported-by-MTAs.patch
    - 0011-Make-a-reference-from-the-DNS-service-functions-to-d.patch
    - 0013-Patch-32-Re-arrange-the-execution-logic-to-drop-priv.patch

 -- Scott Kitterman <scott@kitterman.com>  Fri, 28 Nov 2014 16:20:24 -0500

opendkim (2.9.2-1) unstable; urgency=medium

  * New upstream release

 -- Scott Kitterman <scott@kitterman.com>  Sat, 19 Apr 2014 12:28:13 -0400

opendkim (2.9.1-1) unstable; urgency=medium

  * New upstream release

 -- Scott Kitterman <scott@kitterman.com>  Mon, 17 Mar 2014 19:42:23 -0400

opendkim (2.9.1~Beta4-1) experimental; urgency=low

  * New upstream beta release

 -- Scott Kitterman <scott@kitterman.com>  Wed, 12 Mar 2014 17:48:45 -0400

opendkim (2.9.0-3) unstable; urgency=medium

  * Disable test suite due to bogus errors even harder (Closes: #740486)
    - Forgot to disable mips/mipsel, Thanks to Dejan Latinovic for the patch

 -- Scott Kitterman <scott@kitterman.com>  Wed, 05 Mar 2014 16:25:34 -0500

opendkim (2.9.0-2) unstable; urgency=low

  * Disable test suite on all archs due to undiagnosed race condition in the
    test suite that causes multiple FTBFS, but doesn't appear reflect any
    actual program problems

 -- Scott Kitterman <scott@kitterman.com>  Sat, 08 Feb 2014 23:22:17 -0500

opendkim (2.9.0-1) unstable; urgency=low

  * New upstream release
    - Update symbols
  * Lengthen time between opendkim tests to increase test reliability
  * Bump standards version to 3.9.5 without further change

 -- Scott Kitterman <scott@kitterman.com>  Fri, 17 Jan 2014 23:27:51 -0500

opendkim (2.8.4-2) unstable; urgency=low

  * Skip tests on kfreebsd-* as results are incredibly inconsistent due to
    system issues and not package bugs

 -- Scott Kitterman <scott@kitterman.com>  Wed, 17 Jul 2013 15:51:17 -0400

opendkim (2.8.4-1) unstable; urgency=low

  * New upstream release
  * Slow down tests on mips and mipsel to give them more time to pass
  * Update debian/watch from update provided from the PTS

 -- Scott Kitterman <scott@kitterman.com>  Tue, 16 Jul 2013 16:53:03 -0400

opendkim (2.8.4~beta2-1) experimental; urgency=low

  * New upstream beta release (Closes: #713968)

 -- Scott Kitterman <scott@kitterman.com>  Sun, 07 Jul 2013 03:45:06 -0400

opendkim (2.8.4~beta1-1) experimental; urgency=low

  * New upstream release
  * Revert inadvertent direct dependency on db5.3 included in last upload

 -- Scott Kitterman <scott@kitterman.com>  Mon, 10 Jun 2013 13:52:17 -0400

opendkim (2.8.4~beta0-1) experimental; urgency=low

  * New upstream release

 -- Scott Kitterman <scott@kitterman.com>  Fri, 24 May 2013 15:11:36 -0400

opendkim (2.8.3-1) unstable; urgency=low

  * New upstream release
  * Added doc-base registration

 -- Scott Kitterman <scott@kitterman.com>  Mon, 06 May 2013 15:47:07 -0400

opendkim (2.8.2-1) unstable; urgency=low

  * Upload to unstable
  * New upstream release
    - Drop debian/patches/Wformat_fixes.patch, originally backported from
      upstream and included in this release
  * Replace commented out entry for ADSPDiscard with an equally commented out
    entry for ADSPAction to match upstream changes (Closes: #701987)

 -- Scott Kitterman <scott@kitterman.com>  Fri, 29 Mar 2013 15:38:21 -0400

opendkim (2.8.1-1) experimental; urgency=low

  * New uptream release
  * Switch to source/format 3.0 (quilt)
  * Add patch from upstream to fix -Wformat warnings

 -- Scott Kitterman <scott@kitterman.com>  Tue, 19 Mar 2013 21:50:10 -0400

opendkim (2.8.0-1) experimental; urgency=low

  * New upstream release

 -- Scott Kitterman <scott@kitterman.com>  Mon, 25 Feb 2013 17:06:21 -0500

opendkim (2.8.0~beta6-1) experimental; urgency=low

  * New upstream beta release
    - Drop debian/patches/warnings-fix.patch and added-linking.patch both
      included from upstream
  * Remove no longer needed quilt patch system

 -- Scott Kitterman <scott@kitterman.com>  Wed, 20 Feb 2013 15:47:45 -0500

opendkim (2.8.0~beta5-1) experimental; urgency=low

  * New upstream beta release
  * Add debian/patches/warnings-fix.patch from upstream to correct issues that
    led to compiler warnings
  * Add debian/patches/added-linking.patch to add missing libs for correct
    linking
  * Add quilt to build-depends, add README.source, and add with quilt to
    debian/rules

 -- Scott Kitterman <scott@kitterman.com>  Sat, 16 Feb 2013 00:02:12 -0500

opendkim (2.8.0~beta4-1) experimental; urgency=low

  * New upstream beta release

 -- Scott Kitterman <scott@kitterman.com>  Tue, 12 Feb 2013 17:30:09 -0500

opendkim (2.8.0~beta3-1) experimental; urgency=low

  * New upstream beta relaese

 -- Scott Kitterman <scott@kitterman.com>  Mon, 11 Feb 2013 01:38:27 -0500

opendkim (2.8.0~beta2-2) experimental; urgency=low

  * Use MALLOC_CHECK_=0 for tests on kfreebsd-i386 due to issues with the
    squeeze kernel used on the buildds
    - To be dropped after wheezy release and buildds are updated

 -- Scott Kitterman <scott@kitterman.com>  Fri, 08 Feb 2013 15:38:22 -0500

opendkim (2.8.0~beta2-1) experimental; urgency=low

  * New upstream beta release
    - Drop local miltertest/miltertest.c and and opendkim/opendkim.c changes
      that had been backported from upstream

 -- Scott Kitterman <scott@kitterman.com>  Wed, 06 Feb 2013 21:41:19 -0500

opendkim (2.8.0~beta1-1) experimental; urgency=low

  * New upstream beta release
    - Drop local opendkim/tests changes in favor of overriding dh_auto_test on
      mips to use the new upstream method for increasing connect retry interval
      (MILTERTEST_RETRY_SPEED_FACTOR)
  * Backport fix from upstream to make MILTERTEST_RETRY_SPEED_FACTOR work
  * Backport fix from upstream to remove left over attempt to free variable
    that is now static (opendkim/opendkim.c)

 -- Scott Kitterman <scott@kitterman.com>  Fri, 01 Feb 2013 00:11:24 -0500

opendkim (2.8.0~beta0-3) experimental; urgency=low

  * Extend mt.set_timeout(300) to all opendkim tests and also increase number
    of retries and retry interval to use the extra time
  * Fix typo in closes for last changelog entry

 -- Scott Kitterman <scott@kitterman.com>  Wed, 30 Jan 2013 23:17:32 -0500

opendkim (2.8.0~beta0-2) experimental; urgency=low

  * Add mt.set_timeout(300) to opendkim/tests/t-sign-ss.lua to try to fix mips
    test failure due to opendkim not being ready yet.
  * Add test for existence of /var/run/opendkim to opendkim.postinst
    (Closes: #695610)

 -- Scott Kitterman <scott@kitterman.com>  Wed, 30 Jan 2013 01:05:31 -0500

opendkim (2.8.0~beta0-1) experimental; urgency=low

  * New upstream beta release
    - Drop local configure, miltertest, and test suite changes as they are
      all incorporated upsteram
    - Rename libopendkim8 to libopendkim9 to match upstream soname bump and
      update debian/control and debian/libopendkim8.*
    - Update libopendkim symbols file
  * Drop obsolescent dkim-reputation flag from configure in debian/rules
    - No longer particularly useful and leads to DNS queries even when network
      tests are disabled
    - Remove libdkimrep1/libdkimrep-dev from debian/control as well as related
      debian/* files
  * Drop opendkim-reputation binary as well as debian/* files as the binary
    makes little sense without libdkimrep

 -- Scott Kitterman <scott@kitterman.com>  Sun, 27 Jan 2013 00:00:07 -0500

opendkim (2.7.4-5) experimental; urgency=low

  [ Scott Kitterman ]
  * Patch configure.ac and the source to allow bsd/string.h and -lbsd
    as an alternative and remove -lbsd from LDFLAGS in debian/rules.

  [ Adam Conrad ]
  * Pass --disable-live-testing to configure to skip tests that need
    internet access, as those fail on the restrictive buildd network.
  * Guard four more testsuite tests with LIVE_TESTS check, as they
    generate DNS traffic that gets shut down by restrictive networks.
  * Build-depend on and use dh-autoreconf, and drop the manual copy
    of config.{sub,guess} in debian/rules now that it's automagic.
  * Call dh(1) with --parallel to marginally improve build times.
  * Simplify cross-build handling to always pass --host and --build.

 -- Scott Kitterman <scott@kitterman.com>  Sat, 19 Jan 2013 13:02:34 -0500

opendkim (2.7.4-4) experimental; urgency=low

  * Added needed configure changes for TCP sockets in the test suite

 -- Scott Kitterman <scott@kitterman.com>  Mon, 14 Jan 2013 23:21:09 -0500

opendkim (2.7.4-3) experimental; urgency=low

  * Include forgotten changes to miltertest from the last upload

 -- Scott Kitterman <scott@kitterman.com>  Mon, 14 Jan 2013 21:47:13 -0500

opendkim (2.7.4-2) experimental; urgency=low

  * Backport pre-release patch from 2.8.0 to add the option to build to use a
    TCP socket instead of a Unix socket in the test suite in order to work
    around auto* induced path length issues in socket names
  * Add with-test-socket=inet to configure options in debian/rules

 -- Scott Kitterman <scott@kitterman.com>  Mon, 14 Jan 2013 19:12:30 -0500

opendkim (2.7.4-1) experimental; urgency=low

  * New upstream release
    - Fixed selector logging error (Closes: #695145)
  * Drop reprrd from configuration since it pulls in an insane dependency
    stack at the moment

 -- Scott Kitterman <scott@kitterman.com>  Tue, 08 Jan 2013 03:00:16 -0500

opendkim (2.7.3-1) experimental; urgency=low

  * New upstream release

 -- Scott Kitterman <scott@kitterman.com>  Sat, 08 Dec 2012 14:38:19 -0500

opendkim (2.7.2-1) experimental; urgency=low

  * New upstream release
    - Change libopendkim7 to libdkim8 to match new soversion (update .install/
      .docs files and libopendkim-dev depends)
    - Ship .pc files for libopendkim-dev and libvbr-dev
    - Add pkg-config to build-depends
    - Add libbsd-dev to build-depends instead of using embedded copies of
      strlcpy/strlcat and add -lbsd to LDFLAGS for proper linking
    - Drop enable-oversign configure option, enabled by default now
    - Add New configure options for experimental DKIM based reputation
      options, enable-dkim_reputation and enable-reprrd (and add rrdtool and
      librrd-dev to build-depends)
    - Add libdkimrep1 and libdkimrep-dev to debian/control along with related
      install, symbpols, docs, and manpages files
    - Add librbl1 and librbl-dev to debian/control along with related install
      and symbols files
    - Add opendkim-reprrd, libreprrd1 and libreprrd-dev to debian/control
      along with related install and symbols files
    - Build with-libxml2 and with-jansson to provide reputation data exchange
      formats (and add libjansson-dev and libxml2-dev to build-depends)
    - Build with enable-query_cache so the opendkim library will keep a local
      cache
    - Build with-libmemcached and add libmemcached-dev to build-depends to
      enable the memcached data set type
  * Reorganize debian/rules and install/dirs/manpages/docs/examples files for
    installation from debian/tmp and dehlper 7 style rules with overrides
  * Bump compat and debhelper version requirement to 9
  * Add symbols files for existing libraries
  * Now that OpenDBX is available in Debian, build with-odbx and
    with-sql-backend (MySQL) (and add libopendbx1-dev to build-depends)
    (Closes: #656767)
  * Build with-sasl to support SASL authentication for LDAP (and add
    libsasl2-dev to build-depends)
  * Bump standards version to 3.9.4 without further change

 -- Scott Kitterman <scott@kitterman.com>  Mon, 19 Nov 2012 20:09:05 -0500

opendkim (2.6.8-2) unstable; urgency=low

  * No-change upload to unstable

 -- Scott Kitterman <scott@kitterman.com>  Tue, 30 Oct 2012 12:51:42 +0000

opendkim (2.6.8-1) experimental; urgency=low

  * New upstream security release to add capability to exclude use of
    insecure keys (Closes: #691394, LP: #1071139)

 -- Scott Kitterman <scott@kitterman.com>  Thu, 25 Oct 2012 01:04:27 -0400

opendkim (2.6.7-1) experimental; urgency=low

  * New upstream release
    - Drop obsolete configure option enable-selector_header

 -- Scott Kitterman <scott@kitterman.com>  Mon, 23 Jul 2012 18:17:11 -0400

opendkim (2.6.6-1) experimental; urgency=low

  * New upstream release

 -- Scott Kitterman <scott@kitterman.com>  Mon, 23 Jul 2012 08:28:16 -0400

opendkim (2.6.4-1) experimental; urgency=low

  * New upstream release

 -- Scott Kitterman <scott@kitterman.com>  Sun, 15 Jul 2012 00:04:24 -0400

opendkim (2.6.2-1) unstable; urgency=low

  * New upstream release (addresses three bugs that affect the Debian package)
    - Fix bug #SF3539449: Clarify legal "Socket" values.  Requested by Scott
      Kitterman.
    - Fix bug #SF3539493: Handle certain cases of data set names that appear
      to be comma-separated lists which include IPv6 addresses.  Reported by
      Scott Kitterman. (Closes: #679548)
  * Use restorecon to apply a SE Linux label after creating a run dir
    (Closes: #679852)

 -- Scott Kitterman <scott@kitterman.com>  Mon, 02 Jul 2012 14:44:38 -0400

opendkim (2.6.1-1) unstable; urgency=low

  * New upstream release
  * Use CFLAGS, CPPFLAGS, and LDFLAGS from dpkg-buildflags

 -- Scott Kitterman <scott@kitterman.com>  Sun, 24 Jun 2012 23:58:40 -0400

opendkim (2.6.0-1) unstable; urgency=low

  * New upstream release (now DFSG free so tarball repacking no longer
    required)
    - Rename libopendkim6 to libopendkim7 to match new soname
      - Update package and dependencies in debian/control
      - Rename .install and .doc files
    - Drop --enable-xtags from configure in debian/rules since it is now on by
      default
    - Update debian/copyright
    - Remove dversionmangle from debian/watch
    - Update README.Debian to reflect documentation no longer being stripped
  * Correct copyright/license information in libar/ar-strl.h based on feedback
    from upstream (correction already implemented upstream for the next
    relese)
  * Set --sysconfdir=/etc in configure so that generated man pages refer to
    the correct configuration file locations

 -- Scott Kitterman <scott@kitterman.com>  Fri, 08 Jun 2012 14:38:25 -0400

opendkim (2.5.2+dfsg-3) unstable; urgency=low

  * Re-add missing --with-db flag for configure

 -- Scott Kitterman <scott@kitterman.com>  Fri, 13 Apr 2012 10:41:37 -0400

opendkim (2.5.2+dfsg-2) unstable; urgency=low

  * Add patch from upstream to fix stray debug code left in opendkim-genstats
  * Split opendkim into opendkim and opendkim-tools since the command line
    support tools are now bigger than the application
  * Add status option to /etc/init.d/opendkim
    - Add depends on lsb-base
  * Add Description to /etc/init.d/opendkim header
  * Enable Vouch By Reference support:
    - Add --enable-vbr in debian/rules
    - Update libopendkim install files to be more specific and not install
      libvbr related files
    - Add libvbr2 and libvbr-dev to debian/control
    - Add debian/libvbr2.docs, libvbr2.install, and libvbr-dev.install
  * Enable extensions for adding arbitrary experimental signature tags and
    values in libopendkim (neeeded for ATPS support)
    - Add --enable-xtags in debian/rules
  * Enable support for RFC 6541 DKIM Authorized Third-Party Signatures (ATPS)
    - Add --enable-atps in debian/rules
  * Enable support for optional oversigning of header fields to prevent
    malicious parties from adding additional instances of the field
    - Add --enable-oversign to debian/rules 
    - Modify debian/opendkim.conf to use OversignHeaders for From by default
  * Add required build-arch and build-indep targets to debian/rules
  * Fixed formating and versioning of existing opendkim.NEWS entry
  * Added new opendkim.NEWS entry to describe changed defaults with this
    revision
  * Update debian/copyright (Closes: #664132)
  * Add debian/watch
  * Remove unneeded shlibs:Depends for libdkim-dev

 -- Scott Kitterman <scott@kitterman.com>  Tue, 10 Apr 2012 23:58:52 -0400

opendkim (2.5.2+dfsg-1) unstable; urgency=low

  * New upstream release
    - Repacked tarball to remove non-free IETF drafts and RFCs
    - Updated docs/Makefile.in/am, and README to remove references removed
      non-free documentation
  * Add Homepage: to debian/control

 -- Scott Kitterman <scott@kitterman.com>  Mon, 09 Apr 2012 20:03:48 -0400

opendkim (2.5.0.1+dfsg-1) unstable; urgency=low

  * Add myself to uploaders
  * Merge package updates back from Ubuntu
  * New upstream release
    - Repacked tarball to remove non-free IETF drafts and RFCs
    - Updated docs/Makefile.in/am, and README to remove references removed
      non-free documentation
    - Add opendkim.NEWS to include note about incompatible change between
      BodyLengths setting and BodyLengthDB
    - Drop no longer recognized configure options, --enable-ztags,
      --enable-dnsupgrade, --enable-report_intervals, and
      --enable-bodylength_db
    - Drop local changes to libar/Makefile.in/am, incorporated upstream
    - Remove debian/rules to rename opendkim-genkey and opendkim-importstats,
      incorporated upstream
    - Install opendkim-convert-keylist in /usr/bin instead of /usr/sbin with
      other scripts
  * Update libopendkim to libopendkim6 for new so version
    - Change package name in debian/control
    - Update libopendkim-dev depends
    - Rename .install and .docs files
    - Update dh_shlibdeps call in debian/rules
  * Bump standards version to 3.9.3 without further change

 -- Scott Kitterman <scott@kitterman.com>  Wed, 14 Mar 2012 22:34:48 -0400

opendkim (2.1.3+dfsg-1) unstable; urgency=low

  * New upstream version.
  * opendkim is now under the 3-clause BSD license, although the Sendmail-
    owned components remain under the Sendmail license. The copyright file
    has been updated to reflect this change.
  * Debian-specific patch to include libresolv in libar to work around -z defs
    as a linker flag. This library isn't meant for consumption by other source
    packages, but using -z defs does cause a build failure, and I'd rather
    keep the error in than risk missing a dependency because it's gone.
  * libopendkim's major version number has changed; rename to libopendkim2

 -- Mike Markley <mike@markley.org>  Fri,  6 Aug 2010 10:58:54 -0700

opendkim (2.0.1+dfsg-1) unstable; urgency=low

   * New upstream version.
   * Put config.sub/guess in build-aux/ instead of top-level. Closes: #575296
   * Include dir in opendkim.pc has been corrected to what will ship from
     upstream in future releases (<includedir>/opendkim).

 -- Mike Markley <mike@markley.org>  Wed, 31 Mar 2010 12:55:26 -0700 

opendkim (2.0.0+dfsg-1) unstable; urgency=low

  * New upstream version.
  * The libopendkim ABI has changed, resulting in an soname change.
    - libopendkim0 package renamed to libopendkim1.
  * New LDAP and Lua support have been enabled.
  * Wrote clearer package descriptions. Closes: #572725
  * Added build-dependency on autotools-dev. For now, the package ships with
    very old config.sub and config.guess files, but this will be resolved
    upstream in the near future.
    - Also removed extraneous top-level config.{sub,guess} files.
  * Applied two upstream patches for off-by-one errors, including one that can
    cause crashes when signing.
  * debian/copyright file was not accurate; it has been updated to reflect the
    fork from the dkim-milter project. The dkim-milter license should be fully
    compatible with the BSD license of this fork.

 -- Mike Markley <mike@markley.org>  Wed, 17 Mar 2010 13:04:28 -0700

opendkim (1.1.0+dfsg-1) unstable; urgency=low

  * New upstream version.
  * Look for __res_mkquery() instead of res_mkquery in configure to solve build
    issues on multiple platforms. Closes: #544802
  * Removed --enable-commaize (it has been removed upstream as
    unnecessary)

 -- Mike Markley <mike@markley.org>  Sat, 19 Sep 2009 16:25:10 -0700

opendkim (1.0.0+dfsg-1) unstable; urgency=low

  * Initial upload. Closes: #543426, #542948
  * Patched configure to support libunbound correctly.
  * Patched libopendkim/Makefile.am and Makefile.in to support libunbound &
    libar correctly.

 -- Mike Markley <mike@markley.org>  Mon, 24 Aug 2009 18:47:41 -0700
