opendnssec (1:1.4.3-3) unstable; urgency=medium

  * Add epoch to conflicts/breaks with opendnssec-auditor (Closes: #717980)
  * opendnssec-auditor has been removed (Closes: #734344, #735587)

 -- Ondřej Surý <ondrej@debian.org>  Tue, 28 Jan 2014 13:17:29 +0100

opendnssec (1:1.4.3-2) unstable; urgency=low

  * Promote 1.4 branch to Debian unstable

 -- Ondřej Surý <ondrej@debian.org>  Tue, 28 Jan 2014 12:25:17 +0100

opendnssec (1:1.4.3-1) experimental; urgency=low

  * New upstream version 1.4.3
  * Override dh_install with --fail-install
  * Update patches for the 1.4.3 release
  * Add Replaces&Breaks opendnssec-auditor (<< 1.4.0~) to
    opendnssec-enforcer-* (Closes: #717980)
  * Include mysql and sqlite3 migration scripts (Closes: #671185)
  * Add hard conflict between opendnssec-dbg-mysql and
    opendnssec-dbg-sqlite3
  * Fix upstream manpage-section-mismatch
    usr/share/man/man8/ods-signer(d).8.gz:1 8 != 22

 -- Ondřej Surý <ondrej@debian.org>  Tue, 17 Dec 2013 17:13:03 +0100

opendnssec (1:1.4.1-1) experimental; urgency=low

  * New upstream version 1.4.1
  * Refresh patches for 1.4.1 release

 -- Ondřej Surý <ondrej@debian.org>  Wed, 17 Jul 2013 09:10:53 +0200

opendnssec (1:1.4.0-1) experimental; urgency=low

  * Imported Upstream version 1.4.0
  * debian/rules, debian/control:
   + Use dh-autoreconf instead of manual autoreconf invocation
  * debian/patches/:
   + Refresh patches for 1.4.0 release
  * Fix couple of lintian warnings
  * Make generated Doxyfile executable to fix FTBFS
  * Just add doxygen and graphviz to fix FTBFS in Ubuntu PPA

 -- Ondřej Surý <ondrej@debian.org>  Thu, 25 Apr 2013 09:46:06 +0200

opendnssec (1:1.3.14-2) unstable; urgency=low

  * Use dh-autoreconf
  * Bump build time dependency on libldns to 1.6.14 where strlcpy has
    disappeared to fix some strange linking problems

 -- Ondřej Surý <ondrej@debian.org>  Wed, 17 Jul 2013 08:37:21 +0200

opendnssec (1:1.3.14-1) unstable; urgency=low

  * New upstream version 1.3.14
  * Update patches for 1.3.14 release

 -- Ondřej Surý <ondrej@debian.org>  Wed, 26 Jun 2013 08:50:26 +0200

opendnssec (1:1.3.10-2) unstable; urgency=low

  * Imported Upstream version 1.3.13
  * Remove upstream patches which were fixed in more recent upstream versions
  * Fix type 's/signed/signer/ stop' (Closes: #681677)

 -- Ondřej Surý <ondrej@debian.org>  Thu, 25 Apr 2013 09:29:06 +0200

opendnssec (1:1.3.9-5) unstable; urgency=low

  * Add procps to build dependencies, so ods-ksmutil can HUP enforcer
    (Closes: #701703)
  * Create arch:all new opendnssec-doc package and move the doxygen
    documentation there
  * Split dh_auto_build to arch and indep, so doxygen documentation is
    built only once
  * Run dh_installdoc on opendnssec-doc too, so it gets it's own copyright

 -- Ondřej Surý <ondrej@debian.org>  Fri, 01 Mar 2013 14:52:33 +0100

opendnssec (1:1.3.9-4) unstable; urgency=low

  * Move the information about dropping the foreign key to README.Debian

 -- Ondřej Surý <ondrej@debian.org>  Tue, 15 Jan 2013 10:30:10 +0100

opendnssec (1:1.3.9-3) unstable; urgency=low

  * Pull couple of critical upstream fixes:
    + OPENDNSSEC-303: for ods-ksmutil update zonelist will delete all
      zones if unable to open/parse zonelist.xml
    + OPENDNSSEC-282: RRSIGs are left in the signed zone when
      authoritative RRsets become glue.
    + OPENDNSSEC-338: ods-ksmutil zone delete --all does not work

 -- Ondřej Surý <ondrej@debian.org>  Tue, 27 Nov 2012 14:26:11 +0100

opendnssec (1:1.3.9-2) unstable; urgency=low

  * Replace documentation directory with symlink. (Courtesy of Salvatore
    Bonaccorso) (Closes: #687885)

 -- Ondřej Surý <ondrej@debian.org>  Tue, 18 Sep 2012 09:27:26 +0200

opendnssec (1:1.3.9-1) unstable; urgency=low

  * Imported Upstream version 1.3.9
  * Delete use_system_trang.patch as we don't rebuild rng files anymore

 -- Ondřej Surý <ondrej@debian.org>  Thu, 28 Jun 2012 11:24:55 +0200

opendnssec (1:1.3.8-1) unstable; urgency=low

  * Imported Upstream version 1.3.8
  * Update patches for a new release
  * Bump an epoch (1.4.0 is not going to be stable before wheezy
    is frozen, so we are reverting back to 1.3.x branch)

 -- Ondřej Surý <ondrej@debian.org>  Wed, 16 May 2012 09:51:06 +0200

opendnssec (1.4.0~a1+r6339-1) experimental; urgency=low

  * Imported Upstream version 1.4.0~a1+r6339
  * Move 1.4.0 branch to Debian experimental
  * Update source code to latest svn as many bugs were fixed there
  * Update gbp.conf for debian-experimental
  * Update patches to match r6339

 -- Ondřej Surý <ondrej@debian.org>  Thu, 17 May 2012 12:07:37 +0200

opendnssec (1.4.0~a1-2) unstable; urgency=low

  * Remove zonefetch.xml and add addns.xml configfile (Closes: #668703)

 -- Ondřej Surý <ondrej@debian.org>  Mon, 16 Apr 2012 15:25:18 +0200

opendnssec (1.4.0~a1-1) unstable; urgency=low

  * Add NEWS about removal of OpenDNSSEC Auditor
  * Add Conflicts/Replaces: opendnssec-auditor to opendnssec-common to
    ensure clear removal of opendnssec-auditor from the system
  * Update debian/{control,rules} to 1.4.0~a1 release
  * Update patches for 1.4.0~a1 release

 -- Ondřej Surý <ondrej@debian.org>  Fri, 06 Apr 2012 12:19:27 +0200

opendnssec (1.3.7-1) unstable; urgency=low

  * Imported Upstream version 1.3.7
  * Add warning about HSM SCA 6000 returning invalid key material with
    leading zeroes

 -- Ondřej Surý <ondrej@debian.org>  Tue, 13 Mar 2012 15:24:26 +0100

opendnssec (1.3.6-2) unstable; urgency=low

  * Run enforcer under opendnssec:opendnssec (Closes: #662601)

 -- Ondřej Surý <ondrej@debian.org>  Tue, 06 Mar 2012 15:37:21 +0100

opendnssec (1.3.6-1) unstable; urgency=low

  * Depends on dpkg (>= 1.15.7.2~) or dpkg-maintscript-helper (which I
    will maintain in my repositories for Ubuntu Lucid) (Closes: #659788)
  * Imported Upstream version 1.3.6

 -- Ondřej Surý <ondrej@debian.org>  Fri, 17 Feb 2012 16:40:13 +0100

opendnssec (1.3.5-1) unstable; urgency=low

  * Imported Upstream version 1.3.5 (Closes: #657639)
  * Bump required ldns version to 1.6.12

 -- Ondřej Surý <ondrej@debian.org>  Mon, 23 Jan 2012 12:54:20 +0100

opendnssec (1.3.4-1) unstable; urgency=low

  * Imported Upstream version 1.3.4

 -- Ondřej Surý <ondrej@debian.org>  Fri, 09 Dec 2011 15:11:16 +0100

opendnssec (1.3.3-1) unstable; urgency=low

  * Imported Upstream version 1.3.3
  * Fix copy&paste unicode dashes in dpkg-maintscript-helper invocations
    (Closes: #643660)
  * Disable PIE hardening to make debug symbols work
  * Build -dbg packages with symbols for better debugging
  * Update dnsruby depend to 1.53

 -- Ondřej Surý <ondrej@debian.org>  Mon, 21 Nov 2011 19:37:41 +0100

opendnssec (1.3.2-1) unstable; urgency=low

  * Imported Upstream version 1.3.2
  * Refresh patches for new release

 -- Ondřej Surý <ondrej@debian.org>  Tue, 13 Sep 2011 14:28:33 +0200

opendnssec (1.3.0-2) unstable; urgency=low

  * Depend on ruby-dnsruby and not ruby-dnssec (Closes: #639595)

 -- Ondřej Surý <ondrej@debian.org>  Sun, 28 Aug 2011 15:34:24 +0200

opendnssec (1.3.0-1) unstable; urgency=low

  * Imported Upstream version 1.3.0
  * Update dependency from libdns-ruby to ruby-dnsruby
  * opensc-pkcs11.so is now located in /usr/lib/pkcs11/ in package
    opensc (Closes: #632448)

 -- Ondřej Surý <ondrej@debian.org>  Wed, 13 Jul 2011 08:41:10 +0200

opendnssec (1.3.0~rc3-1) experimental; urgency=low

  * Imported Upstream version 1.3.0~rc3
  * Fix spurious warning in AC_LANG_PROGRAM (caused by libtool)
  * Update libdns-ruby -> ruby-dnsruby dependency
  * Update Vcs-* links
  * Remove $Id tags using sed magic in debian/rules
  * Trang was removed from upstream tarball; update the patch
  * Update patches to the new release

 -- Ondřej Surý <ondrej@debian.org>  Tue, 14 Jun 2011 12:32:07 +0200

opendnssec (1.3.0~rc2.dfsg-1) experimental; urgency=low

  * Imported Upstream version 1.3.0~rc2.dfsg
  * Remove $Id tags from conf files for smoother upgrades
  * Remove duplicated conffiles from opendnssec-enforcer-mysql
  * Remove extra jquery.js from doxygen generated documentation
  * Bump standards version to 3.9.2

 -- Ondřej Surý <ondrej@debian.org>  Wed, 18 May 2011 13:13:35 +0200

opendnssec (1.2.1.dfsg-1) unstable; urgency=low

  * Imported Upstream version 1.2.1
  * Fix typos in package descriptions (Courtesy of Thijs Kinkhorst)
    (Closes: #603929)
  * Install README.Debian only to opendnssec-enforcer (Closes: #603933)
  * Conflicts with old packages no longer in archive
  * Install migration scripts for sqlite3 and mysql and add NEWS file
    about migration to opendnssec-enforcer (Closes: #612605)
  * Remove trang from build-depends because we are not using it
  * Use source:Version in any packages to enforce correct interpackage
    dependencies
  * Build doxygen html documentation and install it into respective
    packages
  * Add general README.Debian to all packages

 -- Ondřej Surý <ondrej@debian.org>  Sat, 19 Mar 2011 17:22:59 +0100

opendnssec (1.2.0-1) unstable; urgency=low

  * New upstream version
  * Packaging changes:
    + Updated patches to new upstream version.
    + Remove python dependencies (upstream change)
    + Update interpackage dependencies to 1.2.0 release
    + Remove obsolete opendnssec-signer-tools, libhsm0 and libhsm-dev
      packages.
    + Adjust mysql build for upstream changes

 -- Ondřej Surý <ondrej@debian.org>  Tue, 25 Jan 2011 11:00:25 +0100

opendnssec (1.1.3-3) unstable; urgency=high

  * Don't rebuild *.rng files, take them from upstream
    + This should fix FTBFS on kfreebsd-amd64.

 -- Ondřej Surý <ondrej@debian.org>  Wed, 08 Dec 2010 10:31:16 +0100

opendnssec (1.1.3-2) unstable; urgency=high

  * Reorder unsetting permission and deleting the user account
    (Closes: #604042)
  * Fix insecure PYTHONPATH (Closes: #605161)

 -- Ondřej Surý <ondrej@debian.org>  Tue, 30 Nov 2010 12:15:58 +0100

opendnssec (1.1.3-1) unstable; urgency=high

  * New upstream version
  * Fix for grave (causes data loss) upstream bug #183:
    + Partial zone could get signed if zone transfer failed when using
      zone_fetcher (http://trac.opendnssec.org/ticket/183)

 -- Ondřej Surý <ondrej@debian.org>  Mon, 13 Sep 2010 14:43:16 +0200

opendnssec (1.1.2-2) unstable; urgency=low

  * Return an error if unknown argument is fed to ods-control

 -- Ondřej Surý <ondrej@debian.org>  Mon, 06 Sep 2010 11:05:33 +0200

opendnssec (1.1.2-1) unstable; urgency=low

  * New upstream release
  * Remove manpage patches, merged upstream
  * Tighten build and runtime dependencies due upstream changes
   + ldns (>= 1.6.6~)
   + libdns-rub (>= 1.49~)
  * Improve init.d script to kill enforcer by name and not just pidfile

 -- Ondřej Surý <ondrej@debian.org>  Wed, 25 Aug 2010 14:17:42 +0200

opendnssec (1.1.1-2) unstable; urgency=low

  * Don't build libhsm twice for sqlite3/mysql
  * Apply directory fixes in common directory as well
  * Remove all pregenerated config.h before building
    + This fixes bad paths in binaries
  * Install common scripts (ods-control) and man pages
  * Fix signerd init.d script by adding missing d in pidfile (Closes: #592791)
  * Add some useful linker flags to not link unneccessary libraries
  * Fix ods-timing.5 manpage

 -- Ondřej Surý <ondrej@debian.org>  Tue, 10 Aug 2010 15:25:40 +0200

opendnssec (1.1.1-1) unstable; urgency=low

  * New upstream release
  * Merge debian packaging into one big tarball per upstream request
  * Bump Standards version to 3.9.1

 -- Ondřej Surý <ondrej@debian.org>  Wed, 04 Aug 2010 11:30:23 +0200

opendnssec-auditor (1.1.0-1) unstable; urgency=low

  * New upstream release.

 -- Ondřej Surý <ondrej@debian.org>  Fri, 28 May 2010 12:17:53 +0200

opendnssec-auditor (1.0.0-2) unstable; urgency=low

  * Removed debian/patches, merged upstream
  * Add some Recommends and Suggests

 -- Ondřej Surý <ondrej@debian.org>  Tue, 13 Apr 2010 12:02:36 +0200

opendnssec-auditor (1.0.0-1) unstable; urgency=low

  * New upstream release.

 -- Ondřej Surý <ondrej@debian.org>  Wed, 24 Mar 2010 19:45:34 +0100

opendnssec-auditor (1.0.0~rc3.dfsg.1-1) unstable; urgency=low

  * Initial release (Closes: #566980)

 -- Ondřej Surý <ondrej@debian.org>  Mon, 25 Jan 2010 23:16:31 +0100

opendnssec-conf (1.1.0.dfsg-2) unstable; urgency=low

  * Refreshed patches to 1.1.0.dfsg
  * Update dependencies to install libhsm-bin

 -- Ondřej Surý <ondrej@debian.org>  Mon, 07 Jun 2010 20:04:07 +0200

opendnssec-conf (1.1.0.dfsg-1) unstable; urgency=low

  * New upstream release.
  
 -- Ondřej Surý <ondrej@debian.org>  Fri, 28 May 2010 12:26:53 +0200

opendnssec-conf (1.0.0.dfsg-2) unstable; urgency=low

  * Rebuild RNG files only when recent jing-trang is installed.
  * Set homedir of opendnssec user to /var/lib/opendnssec
  * Move softhsm from Recommends to Suggests

 -- Ondřej Surý <ondrej@debian.org>  Tue, 13 Apr 2010 11:36:02 +0200

opendnssec-conf (1.0.0.dfsg-1) unstable; urgency=low

  * Remove trang/ directory altogether
  * Enable regression testing
  * Comment out example zone in signconf.xml after regression testing
  * Recreate RNG files on build using system trang

 -- Ondřej Surý <ondrej@debian.org>  Thu, 08 Apr 2010 14:21:14 +0200

opendnssec-conf (1.0.0-2) unstable; urgency=low

  * Rename opendnssec-conf to opendnssec-common
  * Add opendnssec meta-package

 -- Ondřej Surý <ondrej@debian.org>  Wed, 07 Apr 2010 13:46:11 +0200

opendnssec-conf (1.0.0-1) unstable; urgency=low

  * Initial release (Closes: #567008)

 -- Ondřej Surý <ondrej@debian.org>  Tue, 26 Jan 2010 15:58:43 +0100

opendnssec-enforcer (1.1.0-2) unstable; urgency=low

  * Fix dependencies on OpenDNSSEC 1.1.0

 -- Ondřej Surý <ondrej@debian.org>  Thu, 17 Jun 2010 22:02:55 +0200

opendnssec-enforcer (1.1.0-1) unstable; urgency=low

  * New upstream release 1.1.0
  * debian/patches/* updated to 1.1.0
    + Updated patches to 1.1.0
    + Update patch to create localstatedir from configure
  * debian/rules
    + Adapt to a new database backend option
    + Removed piddir after build
  * Remove libksm traces from debian/ directory

 -- Ondřej Surý <ondrej@debian.org>  Mon, 07 Jun 2010 19:48:30 +0200

opendnssec-enforcer (1.0.0-7) unstable; urgency=low

  * Fix missing $ in init script. (Closes: #580264)
  * Cleanup dependency hell by creating virtual opendnssec-enforcer-
    backend package. (Closes: #578877)

 -- Ondřej Surý <ondrej@debian.org>  Thu, 06 May 2010 12:20:53 +0200

opendnssec-enforcer (1.0.0-6) unstable; urgency=low

  * loosen dependency on libtool 2.2
  * Fix typo in init.d script. (Closes: #578521)

 -- Ondřej Surý <ondrej@debian.org>  Wed, 21 Apr 2010 11:57:17 +0200

opendnssec-enforcer (1.0.0-5) unstable; urgency=low

  * Add debian/watch file
  * Remove common/config.h to allow inclusion of build dependant one

 -- Ondřej Surý <ondrej@debian.org>  Wed, 14 Apr 2010 08:44:51 +0200

opendnssec-enforcer (1.0.0-4) unstable; urgency=low

  * Add init script for opendnssec-enforcer
  * Remove boilerplate template from README.source
  * Add some Recommends and Suggests
  * Add comment about permissions needed to use softhsm to README.Debian

 -- Ondřej Surý <ondrej@debian.org>  Tue, 13 Apr 2010 11:44:16 +0200

opendnssec-enforcer (1.0.0-3) unstable; urgency=low

  * Add sqlite3 and mysql-client dependencies to
    opendnssec-enforcer-{sqlite3,mysql} packages

 -- Ondřej Surý <ondrej@debian.org>  Thu, 08 Apr 2010 19:39:50 +0200

opendnssec-enforcer (1.0.0-2) unstable; urgency=low

  * Build depend on mysql-client and sqlite3 packages, binaries are
    needed for check at build time

 -- Ondřej Surý <ondrej@debian.org>  Fri, 26 Mar 2010 19:23:22 +0100

opendnssec-enforcer (1.0.0-1) unstable; urgency=low

  * Initial release (Closes: #575316)

 -- Ondřej Surý <ondrej@debian.org>  Wed, 24 Mar 2010 22:18:57 +0100

opendnssec-signer (1.1.0-2) unstable; urgency=low

  * Fix dependencies on OpenDNSSEC 1.1.0.

 -- Ondřej Surý <ondrej@debian.org>  Thu, 17 Jun 2010 22:03:34 +0200

opendnssec-signer (1.1.0-1) unstable; urgency=low

  * New upstream release
    + Tools are now in /usr/lib/opendnssec/opendnssec/
    + Signer creates pidfile automatically
  * Debian packaging:
    + Use pristine-tar
    + Adapted patches to 1.1.0

 -- Ondřej Surý <ondrej@debian.org>  Mon, 07 Jun 2010 18:38:40 +0200

opendnssec-signer (1.0.0-4) unstable; urgency=low

  * Fix missing $ in init script. (Closes: #580264)

 -- Ondřej Surý <ondrej@debian.org>  Thu, 06 May 2010 12:21:15 +0200

opendnssec-signer (1.0.0-3) unstable; urgency=low

  * Loosen dependency on libtool 2.2
  * Fix typo in init.d script. (Closes: #578521)

 -- Ondřej Surý <ondrej@debian.org>  Wed, 21 Apr 2010 11:58:37 +0200

opendnssec-signer (1.0.0-2) unstable; urgency=low

  * Change .install files to include files relative to build dir
  * Remove unneeded override_dh_install

 -- Ondřej Surý <ondrej@debian.org>  Sun, 28 Mar 2010 20:48:24 +0200

opendnssec-signer (1.0.0-1) unstable; urgency=low

  * Initial release (Closes: #575349)

 -- Ondřej Surý <ondrej@debian.org>  Thu, 25 Mar 2010 02:34:38 +0100

libhsm (1.1.0-3) unstable; urgency=low

  * Correct dependencies to OpenDNSSEC 1.1

 -- Ondřej Surý <ondrej@debian.org>  Thu, 17 Jun 2010 11:29:12 +0200

libhsm (1.1.0-2) unstable; urgency=low

  * Recommend libhsm-bin when installing shared library

 -- Ondřej Surý <ondrej@debian.org>  Mon, 07 Jun 2010 19:47:54 +0200

libhsm (1.1.0-1) unstable; urgency=low

  * New upstream release.
  * Removed 001_export_only_hsm_symbols.patch, merged upstream.

 -- Ondřej Surý <ondrej@debian.org>  Fri, 28 May 2010 15:18:09 +0200

libhsm (1.0.0-4) unstable; urgency=low

  * Fix version number in unstable.

 -- Ondřej Surý <ondrej@debian.org>  Thu, 22 Apr 2010 09:29:26 +0200

libhsm (1.0.0-3) unstable; urgency=low

  * Install manpages as well; make install files relative to curdir

 -- Ondřej Surý <ondrej@debian.org>  Tue, 13 Apr 2010 12:39:03 +0200

libhsm (1.0.0-2) unstable; urgency=low

  * Depend on opendnssec-common since it depends on conf.xml
  * Install manpages for ods-hsmspeed and ods-hsmutil

 -- Ondřej Surý <ondrej@debian.org>  Thu, 08 Apr 2010 19:35:28 +0200

libhsm (1.0.0-1) unstable; urgency=low

  * New upstream release (final 1.0.0)
  * fix for: W: libhsm source: debhelper-but-no-misc-depends libhsm-dev
  * Enable hardening wrapper
  * Patch src/Makefile.am to export only symbols starting with hsm_
  * Add libhsm0 symbols file

 -- Ondřej Surý <ondrej@debian.org>  Wed, 24 Mar 2010 19:33:04 +0100

libhsm (1.0.0~rc3-1) unstable; urgency=low

  * Initial release (Closes: #568102)

 -- Ondřej Surý <ondrej@debian.org>  Thu, 28 Jan 2010 11:13:21 +0100
