opencryptoki (3.14.0+dfsg-0ubuntu3.1) groovy; urgency=medium

  * Added patch caa4bbba51cf470986944820ea773163084da0b7 (from > 3.15.1)
    for fixing migration of master key from OLD register to CURRENT register.
    (LP: #1915517)

 -- Frank Heimes <frank.heimes@canonical.com>  Fri, 26 Feb 2021 19:17:13 +0100

opencryptoki (3.14.0+dfsg-0ubuntu3) groovy; urgency=medium

  * Fix token migration and conversion LP: #1893216

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Thu, 17 Sep 2020 15:14:34 +0100

opencryptoki (3.14.0+dfsg-0ubuntu2) groovy; urgency=medium

  * Cherrypick fixes from master LP: #1854944

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Thu, 09 Jul 2020 15:36:36 +0100

opencryptoki (3.14.0+dfsg-0ubuntu1) groovy; urgency=medium

  * New upstream release LP: #1882808

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Thu, 18 Jun 2020 14:05:53 +0100

opencryptoki (3.13.0+dfsg-0ubuntu5) focal; urgency=medium

  * Enable locks by default, on all architectures, which is the new
    upstream default. Previously, only armhf used locks, and all other
    architectures used transactional memory (dispite --disable-locks
    option actually _enabling_ locks in the past)

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Fri, 03 Apr 2020 10:43:37 +0100

opencryptoki (3.13.0+dfsg-0ubuntu4) focal; urgency=medium

  * Fix build that disables locks.

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Thu, 02 Apr 2020 16:13:35 +0100

opencryptoki (3.13.0+dfsg-0ubuntu1) focal; urgency=medium

  * New upstream release LP: #1858792, LP: #1853300

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Wed, 26 Feb 2020 17:26:37 +0000

opencryptoki (3.12.1+dfsg-0ubuntu1) focal; urgency=medium

  * New upstream release LP: #1854148, LP: #1852089, LP: #1850294

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Thu, 06 Feb 2020 14:59:50 +0000

opencryptoki (3.11.1+dfsg-0ubuntu3) focal; urgency=medium

  * Fix toleration of CEX7P and CEX6P cards, when both are present.
    (LP: #1847031)

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Tue, 22 Oct 2019 15:28:41 +0100

opencryptoki (3.11.1+dfsg-0ubuntu2) eoan; urgency=medium

  * Add TLS 1.3 mechanisms to the libica token.

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Mon, 12 Aug 2019 13:03:54 +0100

opencryptoki (3.11.1+dfsg-0ubuntu1) eoan; urgency=medium

  * New upstream release LP: #1826193

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Tue, 30 Apr 2019 13:02:04 +0100

opencryptoki (3.11.0+dfsg-0ubuntu2) disco; urgency=medium

  * EP11: Fix target_list passing for EP11-session logon/logoff. LP:
    #1814521

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Thu, 21 Feb 2019 11:42:49 +0100

opencryptoki (3.11.0+dfsg-0ubuntu1) disco; urgency=medium

  * New upstream release LP: #1803994
  * Fix up debian/watch file
  * Refresh patches

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Mon, 10 Dec 2018 12:20:56 +1100

opencryptoki (3.10.0+dfsg-0ubuntu1) cosmic; urgency=medium

  * New upstream release. LP: #1776210

 -- Dimitri John Ledkov 🌈 <xnox@ubuntu.com>  Thu, 14 Jun 2018 10:11:14 +0100

opencryptoki (3.9.0+dfsg-0ubuntu2) cosmic; urgency=medium

  * Build without symbolic-functions, as that makes opencryptoki fail to
    load multiple tokens/plugins correctly.

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Thu, 17 May 2018 12:01:17 +0100

opencryptoki (3.9.0+dfsg-0ubuntu1) bionic; urgency=medium

  * New upstream release LP: #1751272
  * Specify Format in debian/copyright
  * Drop custom dfsg script, and list directories to exclude in the
    debian/copyright file
  * libitm is not available on armhf, drop build-depends, and disable
    locks on armhf.

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Mon, 26 Feb 2018 13:05:48 +0000

opencryptoki (3.8.2+dfsg-0ubuntu1) bionic; urgency=medium

  * New upstream release LP: #1742437
  * Drop upstreamed patches

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Thu, 08 Feb 2018 15:30:04 +0000

opencryptoki (3.8.1+dfsg-3build1) bionic; urgency=high

  * No change rebuild against openssl1.1.

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Mon, 05 Feb 2018 22:32:53 +0000

opencryptoki (3.8.1+dfsg-3) unstable; urgency=emergency

  * Remove wrong tmpfiles.conf file present in systemd path. Closes: #881222
  * Updated install files.
  * Updated rules.

 -- Paulo Vital <pvital@gmail.com>  Thu, 09 Nov 2017 09:52:15 -0200

opencryptoki (3.8.1+dfsg-2) unstable; urgency=medium

  * Updated install files for s390x. Closes: #880657

 -- Paulo Vital <pvital@gmail.com>  Fri, 03 Nov 2017 09:23:52 -0200

opencryptoki (3.8.1+dfsg-1) unstable; urgency=medium

  * New upstream release
  * Removed patch 08-reset-tpm-structures.patch
  * Removed patch systemd-targets.patch
  * Added patch tmpfiles-dir-creation.patch
  * Added patch icsf-spelling.patch
  * Fix Lintian error build-depends-on-obsolete-package:
    Removed dh-systemd since used debhelper (>= 10)
  * Fix Lintian wanring useless-autoreconf-build-depends:
    removed autotools-dev
  * Updated Standards-Version to 4.1.1

 -- Paulo Vital <pvital@gmail.com>  Tue, 31 Oct 2017 10:16:06 -0200

opencryptoki (3.7.0+dfsg-4) unstable; urgency=medium

  * Fix broken links for libopencryptoki0. Closes: #866152, 640812
  * Change to compat level 10.
  * Update debian/rules with compat level 10 changes.

 -- Paulo Vital <pvital@gmail.com>  Tue, 27 Jun 2017 19:24:50 -0300

opencryptoki (3.7.0+dfsg-3) unstable; urgency=medium

  * Add libitm1 as build dependency to restrict arch. Closes: #865315

 -- Paulo Vital <pvital@gmail.com>  Tue, 20 Jun 2017 11:54:25 -0300

opencryptoki (3.7.0+dfsg-2) unstable; urgency=medium

  * Drop /etc/pkcs11 symlink. Closes: #864052
  * Enable Hardening
  * Update Standards-Version to 4.0.0
  * Fix quilt-patch-missing-description in systemd-targets.patch
  * Fix misspelling word in usr/lib/pkcs11/api/api_interfaces.c
  * Overrides Lintian possible-gpl-code-linked-with-openssl since the
    GPL code of the package is the debian files only.
  * experimental-to-unstable

 -- Paulo Vital <pvital@gmail.com>  Mon, 19 Jun 2017 10:41:50 -0300

opencryptoki (3.7.0+dfsg-1) experimental; urgency=medium

  * New upstream release.
  * Updated debian/watch and script to get releases from git repository.
  * Removed pacthes already applied upstream.

 -- Paulo Vital <pvital@gmail.com>  Fri, 26 May 2017 11:13:03 -0300

opencryptoki (3.6.2+dfsg-2) experimental; urgency=medium

  * Add support to MultiArch (debhelper >=9)
  * Fixed errors from Lintian
  * New maintainer. Closes: #543925

 -- Paulo Vital <pvital@gmail.com>  Thu, 09 Mar 2017 16:30:18 -0300

opencryptoki (3.6.2+dfsg-1) experimental; urgency=medium

  * New upstream release LP: #1666502

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Tue, 21 Feb 2017 14:57:28 +0000

opencryptoki (3.6.1+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Drop cherry-picked patches, included in this release.
  * Upload to unstable. Closes: #845729

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Tue, 03 Jan 2017 13:14:42 +0000

opencryptoki (3.6+dfsg-2) experimental; urgency=medium

  * Cherry-pick upstream patches for openssl 1.1 compat.

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Wed, 14 Dec 2016 11:41:02 +0000

opencryptoki (3.6+dfsg-1) experimental; urgency=medium

  * QA upload.
  * New upstream release
  * Refresh patches
  * Set standards version to 3.9.8

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Mon, 28 Nov 2016 14:22:55 +0000

opencryptoki (3.5+dfsg-2) unstable; urgency=medium

  * QA upload.
  * Updated systemd-tmpfiles debian/opencryptoki.tmpfiles snippet to
    create TOK_OBJ per-token subdirectories with correct
    permissions. Upstream should probably ship tmpfiles snippet. LP:
    #1595192.
  * Import upstream patches to create/validate lock & lib directories for
    all tokens. LP: #1594386

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Tue, 16 Aug 2016 09:55:02 +0100

opencryptoki (3.5+dfsg-1) unstable; urgency=low

  * QA upload.
  * New upstream release.
  * Add extra symlink to the unversioned libopencrypto.so in the -dev
    package.
  * Add missing links for cca, ep11, icsf, and ica tokens.
  * New upstream release

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Tue, 19 Jul 2016 10:06:59 +0100

opencryptoki (3.4.1+dfsg-1) unstable; urgency=low

  * QA upload.
  * Update debian/watch file.
  * New upstream release
    - Resolves CVE-2012-4454
    - Resolves CVE-2012-4455
    - Closes: #689417
  * Drop applied upstream, or no longer applicable patches:
    - 02-disable-user-handling.patch
    - 05-build-fix-for-kbsd.patch
    - 06-add-whatis-entry-to-manpages.patch
    - 07-add-manpage-for-pkcs_slot.patch
    - 0009-Fix-wrong-LIB_PATH.patch
    - 0010-Remove-one-hardcoded-lib64-path.patch
  * Enable systemd units.
  * Drop pkcs11_startup call and opencryptoki provides from the init
    script, adjust PIDFILE location to /var/run/pkcsslotd.pid and source
    lsb init-functions.
  * Add bison and flex build dependencies.
  * Do not change group permissions during install stage of the package
    build.
  * Install new opencryptoki.conf config file.
  * Drop dbg package, rely on the autogenerated one instead.
  * Bump debhelper compat to 9.
  * Rename opencryptoki init file to pkcsslotd, to match actuall daemon
    started and the systemd unit name.
  * Don't use full-path check for deluser, instead just call it
    unconditionally on removal, it's guarded with || true anyway.
  * Patch spelling typos.
  * Drop After=syslog.target from systemd unit file.
  * Simplify 04-pkcsslotd-cmdline-args.patch.
  * Add tmpfiles snippet, and mimic same in the init.d script.
  * Add libica-dev build-dependency on s390x.
  * Set standards version to 3.9.6.

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Mon, 08 Feb 2016 05:00:09 +0000

opencryptoki (2.3.1+dfsg-3) unstable; urgency=low

  * QA upload.
  * Fix pkcs11_startup module paths (Closes: #641080)

 -- Guido Trotter <ultrotter@debian.org>  Sat, 10 Sep 2011 09:20:39 +0100

opencryptoki (2.3.1+dfsg-2) unstable; urgency=low

  * QA upload.
  * Add patch to reset TPM datastructures on init, and not just logout,
    fixes TPM token reinitialization failure on reload.
    Thanks to David Smith for the patch (Closes: #603104, LP: #645576)

 -- Alessio Treglia <alessio@debian.org>  Tue, 26 Jul 2011 12:18:45 +0200

opencryptoki (2.3.1+dfsg-1) unstable; urgency=low

  * QA upload.

  [ Johann Felix Soden ]
  * New upstream release
  * Solving a FTBFS on GNU/kFreeBSD (Closes: #559405).
    - thanks to Cyril Brulebois <kibi@debian.org> for the prospective patch.
  * debian/rules:
   - Do no install /etc/ld.so.conf.d/opencryptoki-i486.conf
   - Creating instead soft-links in /usr/lib
  * Depending on autoconf, automake, libtool because of new upstream build
    procedure.
  * Adding small man-page for pkcs_slot and missing whereis entries.
  * Improving init script according to lintian.
  * Fixing wrong year in debian/copyright.
  * Adding get-orig-source target to debian/rules.
  * Adding watch file.
  * Removing the unnecessary "for Linux" from package descriptions.

  [ Alessio Treglia ]
  * Fix dangling symlinks in /usr/lib/pkcs11/ (Closes: #570527).

 -- Johann Felix Soden <johfel@gmx.de>  Sun, 05 Jun 2011 11:22:04 +0200

opencryptoki (2.2.8+dfsg-5) unstable; urgency=low

  * QA upload.
  * Get rid of unneeded *.la files (Closes: #622435).
  * Switch to 3.0 (quilt) format.
  * Bump debhelper build-dep to (>= 7.0.50~).
  * Use DH's autotools_dev addon to update config.{guess,sub} files rather
    than copy&and restore them in debian/rules.
  * Fix lintian "binary-control-field-duplicates-source field section in
    package opencryptoki" warning.
  * Bump Standards.

 -- Alessio Treglia <alessio@debian.org>  Fri, 03 Jun 2011 12:23:26 +0200

opencryptoki (2.2.8+dfsg-4) unstable; urgency=low

  * QA upload
  * Add root to the pkcs11 group (closes: #567572)

 -- Andrew Pollock <apollock@debian.org>  Mon, 08 Feb 2010 09:37:15 -0800

opencryptoki (2.2.8+dfsg-3) unstable; urgency=low

  * Removing vcs fields.
  * Orphaning package.

 -- Daniel Baumann <daniel@debian.org>  Thu, 27 Aug 2009 16:25:14 +0200

opencryptoki (2.2.8+dfsg-2) unstable; urgency=low

  * Updating maintainer field.
  * Updating vcs fields.
  * Updating package to standards version 3.8.2.
  * Sorting and updating depends.
  * Tidy debhelper install file.
  * Wrapping patch description in dlopen-soname.patch.
  * Minimizing rules file.

 -- Daniel Baumann <daniel@debian.org>  Fri, 14 Aug 2009 12:19:39 +0200

opencryptoki (2.2.8+dfsg-1) unstable; urgency=low

  * Merging upstream version 2.2.8+dfsg.
  * Correcting wrong libdir information.

 -- Daniel Baumann <daniel@debian.org>  Sun, 17 May 2009 15:51:08 +0200

opencryptoki (2.2.7+dfsg-1) unstable; urgency=low

  * Merging upstream version 2.2.7+dfsg.
  * Using correct rfc-2822 date formats in changelog.
  * Updating package to standards 3.8.1.
  * Removing old conflicts and replaces.
  * Using quilt rather than dpatch.
  * Updating section of debug packages.
  * Updating year in copyright file.
  * Updating rules to current state of the art.

 -- Daniel Baumann <daniel@debian.org>  Sun, 17 May 2009 14:41:13 +0200

opencryptoki (2.2.6+dfsg2-1) unstable; urgency=low

  * Replacing obsolete dh_clean -k with dh_prep.
  * Merging upstream version 2.2.6+dfsg2.

 -- Daniel Baumann <daniel@debian.org>  Fri, 07 Nov 2008 23:09:00 +0100

opencryptoki (2.2.6+dfsg-5) unstable; urgency=low

  * Updating vcs fields in control file.
  * Using patch-stamp rather than patch in rules file.
  * Adding patch from David Smith <dds@google.com> to add command line arguments
    for logging, verbosity, and daemonizing pkcsslotd.

 -- Daniel Baumann <daniel@debian.org>  Sat, 11 Oct 2008 20:01:00 +0200

opencryptoki (2.2.6+dfsg-4) unstable; urgency=medium

  * Don't FTBFS if automake is installed (Closes: #463760).

 -- Daniel Baumann <daniel@debian.org>  Wed, 03 Sep 2008 10:54:00 +0200

opencryptoki (2.2.6+dfsg-3) unstable; urgency=medium

  * Removing accidentally double files from libopencryptoki and opencryptoki
    (Closes: #492156).

 -- Daniel Baumann <daniel@debian.org>  Sun, 03 Aug 2008 15:19:00 +0200

opencryptoki (2.2.6+dfsg-2) unstable; urgency=medium

  * Applying patch from Philipp Matthias Hahn <pmhahn@debian.org> to
    correct init script and stop pkcsslotd (Closes: #463763).
  * Adding conflicts/replaces against previous version in order to allow
    upgrades from pre-frozen lenny to frozen/final lenny (Closes: #492156).

 -- Daniel Baumann <daniel@debian.org>  Sun, 27 Jul 2008 19:24:00 +0200

opencryptoki (2.2.6+dfsg-1) unstable; urgency=medium

  * Moving soname-independent symlinks for private library modules from
    libopencryptoki0 to opencryptoki
  * Updating 01-disable-testcases.dpatch for new upstream version.
  * Merging upstream version 2.2.6+dfsg.

 -- Daniel Baumann <daniel@debian.org>  Thu, 17 Jul 2008 23:12:00 +0200

opencryptoki (2.2.5+dfsg-2) unstable; urgency=high

  * Adding dh_link call in rules in order to get symlinks policy compliant.
  * Calling pkcs11_startup unconditionally in initscript (Closes: #459683).
  * Adding patch to the executables to open libopencryptoki with soname major
    (Closes: #463593).
  * Adding build-conflicts against automake1.9 (Closes: #463760).
  * Using less alarming 'skipping' rather than 'aborting' when not starting the
    daemon through the initscript.
  * Avoiding doublicated start-stop-daemon calls in restart section of the
    initscript.
  * Correcting start-stop-daemon call in order to create and use a pidfile in
    the initscript (Closes: #463763).
  * Updating cross handling in rules.
  * Moving soname-independent symlinks for private library modules from
    libopencryptoki-dev to libopencryptoki0 (Closes: #481453).
  * Updating to standards 3.8.0.
  * Reordering rules file.
  * Using lintian debhelper to install lintian overrides.
  * Rewriting copyright file in machine-interpretable format.
  * Adding vcs fields in control file.
  * Upgrading package to debhelper 7.
  * Reverting config.guess and config.sub to upstream.
  * Don't fail on removing non-empty group in postrm (Closes: #463764).

 -- Daniel Baumann <daniel@debian.org>  Wed, 02 Jul 2008 11:51:00 +0200

opencryptoki (2.2.5+dfsg-1) unstable; urgency=low

  * New upstream release (Closes: #459684).

 -- Daniel Baumann <daniel@debian.org>  Tue, 08 Jan 2008 07:01:00 +0100

opencryptoki (2.2.4.1+dfsg-2) unstable; urgency=low

  * Fixed changelog line wrapping.
  * Added manpages based on doc/*.
  * Added patch from William Lima <wlima.amadeus@gmail.com> to disable user
    handling in pkcs11_startup.

 -- Daniel Baumann <daniel@debian.org>  Thu, 27 Dec 2007 13:19:00 +0100

opencryptoki (2.2.4.1+dfsg-1) unstable; urgency=low

  * Initial release (Closes: #409586).
  * Rebuild upstream tarball without testcases (contains some unlicensed
    files), and a pdf in doc (missing source).

 -- Daniel Baumann <daniel@debian.org>  Wed, 05 Dec 2007 23:18:00 +0100
