dogtag-pki (10.2.6+git20160317-1ubuntu0.1~esm1) xenial-security; urgency=medium

  * SECURITY UPDATE: Authentication bypass
    - debian/patches/CVE-2017-7537.patch: Disable mock CMC plugin
    - CVE-2017-7537
  * SECURITY UPDATE: Cross-site Scripting
    - debian/patches/CVE-2020-25715.patch: Resolve XSS in ca queryCert
      pagination
    - CVE-2020-25715
  * fix-upgrade-check.patch: better detect current version.
  * escape-script-in-comment.diff: make javadoc happy.

 -- Giampaolo Fresi Roglia <giampaolo.fresi.roglia@canonical.com>  Mon, 09 Dec 2024 15:23:14 +0100

dogtag-pki (10.2.6+git20160317-1) unstable; urgency=medium

  * update to current 10_2_6_BRANCH.
    - refresh patches
    - add pki-user-membership.1 to pki-tools
    - tomcat7-build-fix.diff: Dropped, upstream.
  * rules: Mark systemd units disabled by default.
  * use-usr-bin.diff: Updated.
  * use-root-homedir.diff: Force home_dir to be /root, so that ipa works
    right.
  * control: Add conflicts on strongswan-pki.
  * pki-server: Remove default.cfg, logs on purge. (Closes: #814636)
  * pki-base: Remove pki.conf on purge. (Closes: #804312)

 -- Timo Aaltonen <tjaalton@debian.org>  Tue, 05 Apr 2016 19:37:03 +0300

dogtag-pki (10.2.6-3) unstable; urgency=medium

  * pki-base.postrm: Remove upgrade logs on purge. (Closes: #801139)
  * use-usr-bin.diff: Fix paths to binaries to use /usr/bin instead of
    /bin.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 08 Jan 2016 02:18:17 +0200

dogtag-pki (10.2.6-2) unstable; urgency=medium

  * pki-server.dirs: Add pki-tomcatd-nuxwdog.target.wants.
  * base.postrm: No need to remove /etc/pki here.
  * debian-support.diff: Drop /etc/default/tomcat8, was a leftover from
    t8 testing. (Closes: #800558)
  * debian-support.diff: Import /lib/lsb/init-functions in
    scripts/operations. (Closes: #800559)

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 01 Oct 2015 08:14:52 +0300

dogtag-pki (10.2.6-1) unstable; urgency=medium

  * New upstream release based on DOGTAG_10_2_6_FEDORA_22_23_20150718 tag.
  * Refresh patches, drop upstreamed ones.
  * control: Drop libcrypt-ssleay-perl and libxml-perl from depends.
  * pki-tools.install: Add pki-ca-profile manpage.
  * control: Add python-sphinx to build-depends.
  * fix-jackson-paths.diff: Dropped, obsolete. Refresh other patches
    to drop unused jackson includes.
  * pki-server.install: Add sbin/pki-server.
  * control: strongswan-starter didn't rename it's 'pki' as planned, so
    add an unversioned Conflicts to pki-tools. (Closes: #767561)
  * control: Update vcs-git location (-> dogtag-pki.git).
  * Update patches.
  * control, pki-server.install: Clean up perl stuff, drop pki-setup-
    proxy which is gone.
  * control: Add libnuxwdog-java to build-depends, and pki-server depends.
  * install: Added new manpages, nuxwdog support, html docs to pki-base.
  * debian-support.diff: Fix nuxwdog paths.
  * debian-support.diff: Don't try to manage rc3.d/* symlinks.
  * rules: Symlink jars under subsystem WEB-INF.
  * pki-server.postinst, pki-base.post{inst,rm}: Add pki-upgrade/pki-
    server-upgrade snippets.
  * rules, patches: Explicitly build using tomcat7, and add a dummy
    method. (Closes: #789138)
  * use-dot-instead-of-source.diff: Fix bashisms.
  * debian-support.diff: Fix JNI_JAR_DIR.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 23 Sep 2015 18:29:12 +0300

dogtag-pki (10.2.0-4) unstable; urgency=medium

  * control: Add python-selinux to pki-server depends.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 07 Nov 2014 11:08:29 +0200

dogtag-pki (10.2.0-3) unstable; urgency=medium

  * control: Add Breaks/Replaces on strongswan-starter to pki-tools.
    (Closes: #767561)

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 05 Nov 2014 00:40:10 +0200

dogtag-pki (10.2.0-2) unstable; urgency=medium

  * patches: Fix servlet jar name, and paths to jss4.jar and symkey.jar.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 24 Oct 2014 20:39:24 +0300

dogtag-pki (10.2.0-1) unstable; urgency=low

  * Initial release (Closes: #653606)

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 10 Oct 2014 14:40:12 +0300
