dogtag-pki (10.3.5+12-3ubuntu1) zesty; urgency=medium

  * pki-tomcatd.init: If no instance is configured, the initscript
    machinery would return error value 5 or 6. This messes up systemd, so
    just use 'exit 1' on every non-zero return value. (LP: #1664453)

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 16 Feb 2017 16:43:49 +0200

dogtag-pki (10.3.5+12-3) unstable; urgency=medium

  * server.postrm: Remove /etc/default/pki-tomcat on purge.
  * create-target-wants.diff: Create target.wants-directories in the
    python deployment scriptlet too.

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 16 Feb 2017 11:09:38 +0200

dogtag-pki (10.3.5+12-2) unstable; urgency=medium

  * base, server, tools: Add new manpages.
  * use-resteasy-legacy.diff: Fix javadoc build.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 15 Feb 2017 13:24:15 +0200

dogtag-pki (10.3.5+12-1) unstable; urgency=medium

  * New upstream snapshot. Version number is derived from the Fedora
    release, 10.3.5+12 maps to pki-core 10.3.5-12 on Fedora.
  * sync-rpm-10.3.5-7.diff: Dropped.
  * use-resteasy-legacy.diff, control: Port to resteasy 3.1.0-2 which
    ships resteasy-legacy.jar. (LP: #1664457)

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 15 Feb 2017 11:06:47 +0200

dogtag-pki (10.3.5-7) unstable; urgency=medium

  * debian-support: Fix an upgrade script to use /etc/default instead of
    /etc/sysconfig.
  * debian-support: Fix nuxwdog to use /etc/default in each case.
  * create-target-wants.diff: Create the systemd target.wants
    directories on demand.
  * pki-server.dirs: Drop target.wants-directories, they'd just get
    deleted by systemd helpers and are now created on demand anyway.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 18 Jan 2017 04:20:42 +0200

dogtag-pki (10.3.5-6) unstable; urgency=medium

  * sync-rpm-10.3.5-7.diff: Pull changes from upstream branch needed by
    newer freeipa.
  * tools.install: Add CMCEnroll manpage.

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 01 Dec 2016 10:08:50 +0200

dogtag-pki (10.3.5-5) unstable; urgency=medium

  * server: Add /etc/dogtag to dirs, clean up stuff created by pkispawn
    on purge.
  * control: Add libscannotation-java to server depends.
  * use-bash.diff: Revert some of 4708983b8 to use bash instead of sh in
    some places where checkbashisms reported warnings.
  * fix-cve-2016-1240.diff: Fix CVE-2016-1240 in scripts/operations
    which has code copied from the tomcat initscript.
  * pki-{ca,kra,ocsp,tks,tps}.postrm: Remove logfiles on purge.

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 27 Oct 2016 17:31:23 +0300

dogtag-pki (10.3.5-4) unstable; urgency=medium

  * tests: Add simple autopkgtest that runs setup-ds and pkispawn.
  * server.postinst: Tell pki-server migrate to migrate to tomcat8.
  * debian-support.diff: Fix some jar symlinks, and drop extra / from
    config dirs.
  * control: Add libcommons-collections3-java, libcommons-dbcp-java,
    libcommons-pool-java, libjboss-logging-java, libsymkey-java to pki-
    server Depends.

 -- Timo Aaltonen <tjaalton@debian.org>  Mon, 03 Oct 2016 19:30:15 +0300

dogtag-pki (10.3.5-3) unstable; urgency=medium

  * rules: Fix path to tomcat8 catalina and util jars, add api and
    util-scan jars.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 30 Sep 2016 18:06:36 +0300

dogtag-pki (10.3.5-2) unstable; urgency=medium

  * Migrate to tomcat8.
  * server.postinst: Run pki-migrate for tomcat migration.
  * fix-cli-migrate.diff: Replace tomcat path hardcoding with ours.
  * rules: Set JAVA_HOME as a confflag so that it's added to pki.conf.
  * copyright: Updated.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 30 Sep 2016 15:42:40 +0300

dogtag-pki (10.3.5-1) unstable; urgency=medium

  * New upstream release.
    - support-only-tomcat.diff, use-dot-instead-of-source.diff:
      dropped, upstream
    - fix-debian-paths-for-pki-cli.diff dropped, unnecessary
    - refresh patches
  * pki-tools: Add more manpages to install, DRMTool got renamed to
    KRATool so add convenience links.
  * control:
    - bump libjss-java build-dep
    - add python-nss, python-requests and python-urllib3 to build-depends
    - add python-nss and python-urllib3 to pki-base depends
    - add libjaxrs-api-java to build-depends
    - move python-ldap and python-lxml depends from pki-base to pki-server
  * rules: Fix jackson/jaxrs jar names so build finds them.
  * Split pki-base-java from -base, add python3-pki-base.
  * server.install: Simplify a bit.
  * debian-support.diff: Force bash in base/server/scripts/operations.
  * copyright: Updated.
  * {base,server}.postinst: Lintian fixes, don't use full path for
    binaries.
  * patches: Merge fix-default-settings.diff into debian-support.diff,
    and modify d-s a bit more for upstream inclusion.

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 22 Sep 2016 16:07:26 +0300

dogtag-pki (10.2.6+git20160317-2) unstable; urgency=medium

  * pki-{ca,kra,ocsp,tks,tps}.dirs: Deleted, the obsolete targets are
    long gone anyway.
  * control: Drop selinux-policy-dev from build-depends. (Closes:
    #821810)
  * pki-base.postinst: Strip extra cruft from version number for pki-
    upgrade, only the upstream base version matters. (Closes: #821909)

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 18 May 2016 10:48:27 +0300

dogtag-pki (10.2.6+git20160317-1) unstable; urgency=medium

  * update to current 10_2_6_BRANCH.
    - refresh patches
    - add pki-user-membership.1 to pki-tools
    - tomcat7-build-fix.diff: Dropped, upstream.
  * rules: Mark systemd units disabled by default.
  * use-usr-bin.diff: Updated.
  * use-root-homedir.diff: Force home_dir to be /root, so that ipa works
    right.
  * control: Add conflicts on strongswan-pki.
  * pki-server: Remove default.cfg, logs on purge. (Closes: #814636)
  * pki-base: Remove pki.conf on purge. (Closes: #804312)

 -- Timo Aaltonen <tjaalton@debian.org>  Tue, 05 Apr 2016 19:37:03 +0300

dogtag-pki (10.2.6-3) unstable; urgency=medium

  * pki-base.postrm: Remove upgrade logs on purge. (Closes: #801139)
  * use-usr-bin.diff: Fix paths to binaries to use /usr/bin instead of
    /bin.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 08 Jan 2016 02:18:17 +0200

dogtag-pki (10.2.6-2) unstable; urgency=medium

  * pki-server.dirs: Add pki-tomcatd-nuxwdog.target.wants.
  * base.postrm: No need to remove /etc/pki here.
  * debian-support.diff: Drop /etc/default/tomcat8, was a leftover from
    t8 testing. (Closes: #800558)
  * debian-support.diff: Import /lib/lsb/init-functions in
    scripts/operations. (Closes: #800559)

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 01 Oct 2015 08:14:52 +0300

dogtag-pki (10.2.6-1) unstable; urgency=medium

  * New upstream release based on DOGTAG_10_2_6_FEDORA_22_23_20150718 tag.
  * Refresh patches, drop upstreamed ones.
  * control: Drop libcrypt-ssleay-perl and libxml-perl from depends.
  * pki-tools.install: Add pki-ca-profile manpage.
  * control: Add python-sphinx to build-depends.
  * fix-jackson-paths.diff: Dropped, obsolete. Refresh other patches
    to drop unused jackson includes.
  * pki-server.install: Add sbin/pki-server.
  * control: strongswan-starter didn't rename it's 'pki' as planned, so
    add an unversioned Conflicts to pki-tools. (Closes: #767561)
  * control: Update vcs-git location (-> dogtag-pki.git).
  * Update patches.
  * control, pki-server.install: Clean up perl stuff, drop pki-setup-
    proxy which is gone.
  * control: Add libnuxwdog-java to build-depends, and pki-server depends.
  * install: Added new manpages, nuxwdog support, html docs to pki-base.
  * debian-support.diff: Fix nuxwdog paths.
  * debian-support.diff: Don't try to manage rc3.d/* symlinks.
  * rules: Symlink jars under subsystem WEB-INF.
  * pki-server.postinst, pki-base.post{inst,rm}: Add pki-upgrade/pki-
    server-upgrade snippets.
  * rules, patches: Explicitly build using tomcat7, and add a dummy
    method. (Closes: #789138)
  * use-dot-instead-of-source.diff: Fix bashisms.
  * debian-support.diff: Fix JNI_JAR_DIR.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 23 Sep 2015 18:29:12 +0300

dogtag-pki (10.2.0-4) unstable; urgency=medium

  * control: Add python-selinux to pki-server depends.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 07 Nov 2014 11:08:29 +0200

dogtag-pki (10.2.0-3) unstable; urgency=medium

  * control: Add Breaks/Replaces on strongswan-starter to pki-tools.
    (Closes: #767561)

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 05 Nov 2014 00:40:10 +0200

dogtag-pki (10.2.0-2) unstable; urgency=medium

  * patches: Fix servlet jar name, and paths to jss4.jar and symkey.jar.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 24 Oct 2014 20:39:24 +0300

dogtag-pki (10.2.0-1) unstable; urgency=low

  * Initial release (Closes: #653606)

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 10 Oct 2014 14:40:12 +0300
