Author: Faidon Liambotis
Revision Date: 2014-10-22 23:50:56 UTC

* New upstream release.
* Bump Standards-Version to 3.9.6.
* Verify upstream's GPG signatures; add debian/upstream/signing-key.asc and
  modify debian/watch accordingly.
* Minor adjustment to the long description. (Closes: #542454)
* Add --retry to --stop to fix spurious restart issue. Thanks to Michael
  Vogt for the fix. (Closes: #711313)
* Add build dependency on dh-autoreconf and autoreconf during build time, as
  it helps when adding new architectures to the archive. (Closes: #727952,
  #744500)
* Add systemd unit file, along with the corresponding dh-systemd
  integration.
* Switch pid file from /var/run to /run on both init script & systemd unit.
* Rewrite debian/copyright to the machine-parseable format.

Author: Faidon Liambotis
Revision Date: 2014-10-22 23:50:56 UTC

* New upstream release.
* Bump Standards-Version to 3.9.6.
* Verify upstream's GPG signatures; add debian/upstream/signing-key.asc and
  modify debian/watch accordingly.
* Minor adjustment to the long description. (Closes: #542454)
* Add --retry to --stop to fix spurious restart issue. Thanks to Michael
  Vogt for the fix. (Closes: #711313)
* Add build dependency on dh-autoreconf and autoreconf during build time, as
  it helps when adding new architectures to the archive. (Closes: #727952,
  #744500)
* Add systemd unit file, along with the corresponding dh-systemd
  integration.
* Switch pid file from /var/run to /run on both init script & systemd unit.
* Rewrite debian/copyright to the machine-parseable format.

Author: Faidon Liambotis
Revision Date: 2014-10-22 23:50:56 UTC

* New upstream release.
* Bump Standards-Version to 3.9.6.
* Verify upstream's GPG signatures; add debian/upstream/signing-key.asc and
  modify debian/watch accordingly.
* Minor adjustment to the long description. (Closes: #542454)
* Add --retry to --stop to fix spurious restart issue. Thanks to Michael
  Vogt for the fix. (Closes: #711313)
* Add build dependency on dh-autoreconf and autoreconf during build time, as
  it helps when adding new architectures to the archive. (Closes: #727952,
  #744500)
* Add systemd unit file, along with the corresponding dh-systemd
  integration.
* Switch pid file from /var/run to /run on both init script & systemd unit.
* Rewrite debian/copyright to the machine-parseable format.

Author: Faidon Liambotis
Revision Date: 2012-11-06 12:56:27 UTC

* Urgency set to high for a security release.
* New upstream release, fixing two security issues:
  - When verifying clients, don't consider config blocks with CA settings
    ('tls') which differ from the one used for verifying the certificate
    chain (RADSECPROXY-43, CVE-2012-4523). Reported by Ralf Paffrath.
  - Fix the issue with verification of clients when using multiple 'tls'
    config blocks for DTLS too (RADSECPROXY-43, CVE-2012-4566). Reported by
    Raphael Geissert.
* Drop most of debian/patches/fix_manpages, merged upstream.

Author: Faidon Liambotis
Revision Date: 2012-11-06 11:55:39 UTC

* Backport two security fixes from 1.6.1/1.6.2:
  - When verifying clients, don't consider config blocks with CA settings
    ('tls') which differ from the one used for verifying the certificate
    chain (RADSECPROXY-43, CVE-2012-4523). Reported by Ralf Paffrath.
  - Fix the issue with verification of clients when using multiple 'tls'
    config blocks for DTLS too (RADSECPROXY-43, CVE-2012-4566). Reported by
    Raphael Geissert.