dogtag-pki (10.5.5-1) unstable; urgency=medium * New upstream release. * tests: Add some debugging info, and force the hostname if it isn't set. * patches: Refreshed. * tools.install: Updated. * tests: Remove installed instances. -- Timo Aaltonen Fri, 09 Feb 2018 16:29:06 +0200 dogtag-pki (10.5.3-4) unstable; urgency=medium * rules: Remove resteasy-jandex-jaxrs.jar symlink, it looks unused anyway. (Closes: #857150) * tests: Sleep for 10 seconds between spawning instances, it seems racy otherwise. -- Timo Aaltonen Fri, 05 Jan 2018 10:36:19 +0200 dogtag-pki (10.5.3-3) unstable; urgency=medium * control: Add libhttpclient-java, libhttpcore-java, libjaxrs-api-java to pki-base-java Depends. * rename-logging-config.diff: Rename LOGGING_CONFIG to PKI_LOGGING_CONFIG, otherwise catalina startup would fail. * fix-jar-search.diff: Fix search for commons-collections3.jar and symkey.jar. * rules: Link jboss-logging.jar under server/common/lib too. -- Timo Aaltonen Fri, 22 Dec 2017 14:32:32 +0200 dogtag-pki (10.5.3-2) unstable; urgency=medium * control: Add python{,3}-cryptography to pki-base, pki-server and python3-pki-base Depends. -- Timo Aaltonen Fri, 22 Dec 2017 00:52:21 +0200 dogtag-pki (10.5.3-1) unstable; urgency=medium * New upstream release. * watch: Updated, upstream provides proper tags now. * copyright: Add Files-Excluded for tarball rebuild. * patches: Drop fix-CVE-2017-7537.diff, refresh others. * use-usr-bin.diff: Replace with an upstreamed patch. * Drop fix-junit-jar.diff, add fix-jar-search.diff and modify debian- support.diff and rules to not hardcode distro-specific jar names. * control: Add libslf4j-java, libhttpclient-java, libhttpcore-java to build-depends/depends. * control: Bump dependency on libjss-java. * rules: Use dh_missing, and drop creating links under subsys dirs as that is handled by CMake now. * *install: Added new files to -base, -server and -tools. * control: Bump dependency on libldap-java. * use-bindsto.diff: Fix pki-tpsd.service to use BindsTo instead of BindTo. (Closes: #857186) -- Timo Aaltonen Thu, 21 Dec 2017 18:11:15 +0200 dogtag-pki (10.3.5+12-6) unstable; urgency=medium * Fix autopkgtest to be robust in the face of changed iproute2 output. -- Timo Aaltonen Thu, 21 Dec 2017 10:59:59 +0200 dogtag-pki (10.3.5+12-5) unstable; urgency=medium * rules: Add a link to jboss-logging.jar. * pki-base, pki-server: Fix postinst, strip cruft from the version string. * control: Use tomcat8.0. (Closes: #823332, #846714) * control: Add libcommons-httpclient-java to build-depends, and pki-base-java depends. * control: Use resteasy3.0. * fix-CVE-2017-7537.diff: Change defaults for cmc plugin. (Closes: #869261) * control: Bump dependency on libtomcajss-java to verify we have the correct build. -- Timo Aaltonen Sat, 21 Oct 2017 11:58:04 +0300 dogtag-pki (10.3.5+12-4) unstable; urgency=medium * pki-tomcatd.init: If no instance is configured, the initscript machinery would return error value 5 or 6. This messes up systemd, so just use 'exit 1' on every non-zero return value. (LP: #1664453) * pki-server.postinst: Clarify pki-tomcatd initial start failure message a bit. * Depend libresteasy-java << 3.1.0, because the new on doesn't work even after fixing the build. * pki-tools.links: Fix the convenience links DRMTool -> KRATool. (Closes: #857148) * pki-base.postinst: Force recreating pki.version if upgrading from older than 10.3.5-1. (LP: #1691655) -- Timo Aaltonen Thu, 18 May 2017 09:10:17 +0300 dogtag-pki (10.3.5+12-3) unstable; urgency=medium * server.postrm: Remove /etc/default/pki-tomcat on purge. * create-target-wants.diff: Create target.wants-directories in the python deployment scriptlet too. -- Timo Aaltonen Thu, 16 Feb 2017 11:09:38 +0200 dogtag-pki (10.3.5+12-2) unstable; urgency=medium * base, server, tools: Add new manpages. * use-resteasy-legacy.diff: Fix javadoc build. -- Timo Aaltonen Wed, 15 Feb 2017 13:24:15 +0200 dogtag-pki (10.3.5+12-1) unstable; urgency=medium * New upstream snapshot. Version number is derived from the Fedora release, 10.3.5+12 maps to pki-core 10.3.5-12 on Fedora. * sync-rpm-10.3.5-7.diff: Dropped. * use-resteasy-legacy.diff, control: Port to resteasy 3.1.0-2 which ships resteasy-legacy.jar. (LP: #1664457) -- Timo Aaltonen Wed, 15 Feb 2017 11:06:47 +0200 dogtag-pki (10.3.5-7) unstable; urgency=medium * debian-support: Fix an upgrade script to use /etc/default instead of /etc/sysconfig. * debian-support: Fix nuxwdog to use /etc/default in each case. * create-target-wants.diff: Create the systemd target.wants directories on demand. * pki-server.dirs: Drop target.wants-directories, they'd just get deleted by systemd helpers and are now created on demand anyway. -- Timo Aaltonen Wed, 18 Jan 2017 04:20:42 +0200 dogtag-pki (10.3.5-6) unstable; urgency=medium * sync-rpm-10.3.5-7.diff: Pull changes from upstream branch needed by newer freeipa. * tools.install: Add CMCEnroll manpage. -- Timo Aaltonen Thu, 01 Dec 2016 10:08:50 +0200 dogtag-pki (10.3.5-5) unstable; urgency=medium * server: Add /etc/dogtag to dirs, clean up stuff created by pkispawn on purge. * control: Add libscannotation-java to server depends. * use-bash.diff: Revert some of 4708983b8 to use bash instead of sh in some places where checkbashisms reported warnings. * fix-cve-2016-1240.diff: Fix CVE-2016-1240 in scripts/operations which has code copied from the tomcat initscript. * pki-{ca,kra,ocsp,tks,tps}.postrm: Remove logfiles on purge. -- Timo Aaltonen Thu, 27 Oct 2016 17:31:23 +0300 dogtag-pki (10.3.5-4) unstable; urgency=medium * tests: Add simple autopkgtest that runs setup-ds and pkispawn. * server.postinst: Tell pki-server migrate to migrate to tomcat8. * debian-support.diff: Fix some jar symlinks, and drop extra / from config dirs. * control: Add libcommons-collections3-java, libcommons-dbcp-java, libcommons-pool-java, libjboss-logging-java, libsymkey-java to pki- server Depends. -- Timo Aaltonen Mon, 03 Oct 2016 19:30:15 +0300 dogtag-pki (10.3.5-3) unstable; urgency=medium * rules: Fix path to tomcat8 catalina and util jars, add api and util-scan jars. -- Timo Aaltonen Fri, 30 Sep 2016 18:06:36 +0300 dogtag-pki (10.3.5-2) unstable; urgency=medium * Migrate to tomcat8. * server.postinst: Run pki-migrate for tomcat migration. * fix-cli-migrate.diff: Replace tomcat path hardcoding with ours. * rules: Set JAVA_HOME as a confflag so that it's added to pki.conf. * copyright: Updated. -- Timo Aaltonen Fri, 30 Sep 2016 15:42:40 +0300 dogtag-pki (10.3.5-1) unstable; urgency=medium * New upstream release. - support-only-tomcat.diff, use-dot-instead-of-source.diff: dropped, upstream - fix-debian-paths-for-pki-cli.diff dropped, unnecessary - refresh patches * pki-tools: Add more manpages to install, DRMTool got renamed to KRATool so add convenience links. * control: - bump libjss-java build-dep - add python-nss, python-requests and python-urllib3 to build-depends - add python-nss and python-urllib3 to pki-base depends - add libjaxrs-api-java to build-depends - move python-ldap and python-lxml depends from pki-base to pki-server * rules: Fix jackson/jaxrs jar names so build finds them. * Split pki-base-java from -base, add python3-pki-base. * server.install: Simplify a bit. * debian-support.diff: Force bash in base/server/scripts/operations. * copyright: Updated. * {base,server}.postinst: Lintian fixes, don't use full path for binaries. * patches: Merge fix-default-settings.diff into debian-support.diff, and modify d-s a bit more for upstream inclusion. -- Timo Aaltonen Thu, 22 Sep 2016 16:07:26 +0300 dogtag-pki (10.2.6+git20160317-2) unstable; urgency=medium * pki-{ca,kra,ocsp,tks,tps}.dirs: Deleted, the obsolete targets are long gone anyway. * control: Drop selinux-policy-dev from build-depends. (Closes: #821810) * pki-base.postinst: Strip extra cruft from version number for pki- upgrade, only the upstream base version matters. (Closes: #821909) -- Timo Aaltonen Wed, 18 May 2016 10:48:27 +0300 dogtag-pki (10.2.6+git20160317-1) unstable; urgency=medium * update to current 10_2_6_BRANCH. - refresh patches - add pki-user-membership.1 to pki-tools - tomcat7-build-fix.diff: Dropped, upstream. * rules: Mark systemd units disabled by default. * use-usr-bin.diff: Updated. * use-root-homedir.diff: Force home_dir to be /root, so that ipa works right. * control: Add conflicts on strongswan-pki. * pki-server: Remove default.cfg, logs on purge. (Closes: #814636) * pki-base: Remove pki.conf on purge. (Closes: #804312) -- Timo Aaltonen Tue, 05 Apr 2016 19:37:03 +0300 dogtag-pki (10.2.6-3) unstable; urgency=medium * pki-base.postrm: Remove upgrade logs on purge. (Closes: #801139) * use-usr-bin.diff: Fix paths to binaries to use /usr/bin instead of /bin. -- Timo Aaltonen Fri, 08 Jan 2016 02:18:17 +0200 dogtag-pki (10.2.6-2) unstable; urgency=medium * pki-server.dirs: Add pki-tomcatd-nuxwdog.target.wants. * base.postrm: No need to remove /etc/pki here. * debian-support.diff: Drop /etc/default/tomcat8, was a leftover from t8 testing. (Closes: #800558) * debian-support.diff: Import /lib/lsb/init-functions in scripts/operations. (Closes: #800559) -- Timo Aaltonen Thu, 01 Oct 2015 08:14:52 +0300 dogtag-pki (10.2.6-1) unstable; urgency=medium * New upstream release based on DOGTAG_10_2_6_FEDORA_22_23_20150718 tag. * Refresh patches, drop upstreamed ones. * control: Drop libcrypt-ssleay-perl and libxml-perl from depends. * pki-tools.install: Add pki-ca-profile manpage. * control: Add python-sphinx to build-depends. * fix-jackson-paths.diff: Dropped, obsolete. Refresh other patches to drop unused jackson includes. * pki-server.install: Add sbin/pki-server. * control: strongswan-starter didn't rename it's 'pki' as planned, so add an unversioned Conflicts to pki-tools. (Closes: #767561) * control: Update vcs-git location (-> dogtag-pki.git). * Update patches. * control, pki-server.install: Clean up perl stuff, drop pki-setup- proxy which is gone. * control: Add libnuxwdog-java to build-depends, and pki-server depends. * install: Added new manpages, nuxwdog support, html docs to pki-base. * debian-support.diff: Fix nuxwdog paths. * debian-support.diff: Don't try to manage rc3.d/* symlinks. * rules: Symlink jars under subsystem WEB-INF. * pki-server.postinst, pki-base.post{inst,rm}: Add pki-upgrade/pki- server-upgrade snippets. * rules, patches: Explicitly build using tomcat7, and add a dummy method. (Closes: #789138) * use-dot-instead-of-source.diff: Fix bashisms. * debian-support.diff: Fix JNI_JAR_DIR. -- Timo Aaltonen Wed, 23 Sep 2015 18:29:12 +0300 dogtag-pki (10.2.0-4) unstable; urgency=medium * control: Add python-selinux to pki-server depends. -- Timo Aaltonen Fri, 07 Nov 2014 11:08:29 +0200 dogtag-pki (10.2.0-3) unstable; urgency=medium * control: Add Breaks/Replaces on strongswan-starter to pki-tools. (Closes: #767561) -- Timo Aaltonen Wed, 05 Nov 2014 00:40:10 +0200 dogtag-pki (10.2.0-2) unstable; urgency=medium * patches: Fix servlet jar name, and paths to jss4.jar and symkey.jar. -- Timo Aaltonen Fri, 24 Oct 2014 20:39:24 +0300 dogtag-pki (10.2.0-1) unstable; urgency=low * Initial release (Closes: #653606) -- Timo Aaltonen Fri, 10 Oct 2014 14:40:12 +0300